ViewVC Help

View File | Revision Log | Show Annotations | Download File | View Changeset | Root Listing

root/src/trunk/UPDATING

Comparing trunk/UPDATING (file contents):
Revision 6660 by laffer1, Fri Jun 6 01:26:03 2014 UTC vs.
Revision 6955 by laffer1, Thu Dec 11 13:04:28 2014 UTC

#	Line 1 | Line 1
1		Updating Information for MidnightBSD users.
2
3	+	20141211:
4	+	Fix a security issue with file and libmagic that can allow
5	+	an attacker to create a denial of service attack on any
6	+	program that uses libmagic.
7	+
8	+	20141117:
9	+	Add support for UDP Lite protocol aka RFC 3828 to IPv4 and IPv6
10	+	stacks.
11	+
12	+	Based on FreeBSD's 10.1 patch.
13	+
14	+	20141109:
15	+	Fix building perl during buildworld when the GDBM port is installed.
16	+
17	+	20141106:
18	+	tzdata 2014i
19	+
20	+	20141102:
21	+	serf 1.3.8
22	+
23	+	20141031:
24	+	tnftp 20141031 fixes a security vulnerability with tnftp,
25	+	CVE-2014-8517.
26	+
27	+	20141028:
28	+	OpenSSL 0.9.8zc
29	+
30	+	20141021:
31	+	Fix several security vulnerabilities in routed, rtsold,
32	+	and namei with respect to Capsicum sandboxes looking up
33	+	nonexistent path names and leaking memory.
34	+
35	+	The input path in routed(8) will accept queries from any source and
36	+	attempt to answer them.  However, the output path assumes that the
37	+	destination address for the response is on a directly connected
38	+	network.
39	+
40	+	Due to a missing length check in the code that handles DNS parameters,
41	+	a malformed router advertisement message can result in a stack buffer
42	+	overflow in rtsold(8).
43	+
44	+	20141011:
45	+	mksh R50d - fix field splitting regression and null
46	+	pointer dereference
47	+
48	+	xz 5.0.7
49	+
50	+	OpenSSH 6.6p1
51	+
52	+	20141004:
53	+	mksh R50c - security update for environment var bug with
54	+	foo vs foo+
55	+
56	+	20141002:
57	+	sqlite 3.8.6
58	+
59	+	sudo 1.7.8 - some issues with the current version, but we're slowly
60	+	getting up to date.
61	+
62	+	20141001:
63	+	mksh R50b
64	+
65	+	libmport now supports plist commands @dir, @owner, @group, @mode.
66	+
67	+	sudo 1.7.6p2
68	+
69	+	20140916:
70	+	Fix a security issue with TCP SYN.
71	+
72	+	When a segment with the SYN flag for an already existing connection arrives,
73	+	the TCP stack tears down the connection, bypassing a check that the
74	+	sequence number in the segment is in the expected window.
75	+
76	+	20140909:
77	+	Fixed a bug with our clearenv(3) implementation that caused segfaults
78	+	with some programs including Dovecot.
79	+
80	+	OpenSSL security patch:
81	+
82	+	The receipt of a specifically crafted DTLS handshake message may cause OpenSSL
83	+	to consume large amounts of memory. [CVE-2014-3506]
84	+
85	+	The receipt of a specifically crafted DTLS packet could cause OpenSSL to leak
86	+	memory. [CVE-2014-3507]
87	+
88	+	A flaw in OBJ_obj2txt may cause pretty printing functions such as
89	+	X509_name_oneline, X509_name_print_ex et al. to leak some information from
90	+	the stack. [CVE-2014-3508]
91	+
92	+	OpenSSL DTLS clients enabling anonymous (EC)DH ciphersuites are subject to
93	+	a denial of service attack. [CVE-2014-3510]
94	+
95	+	20140902:
96	+	We're now 0.6-CURRENT
97	+
98	+	Update USB quirks to support K70 Corsair keyboard, and several
99	+	other devices.
100	+
101	+	20140827:
102	+	Perl 5.18.2
103	+
104	+	20140728:
105	+	Jails now run shutdown scripts.
106	+
107	+	20140710:
108	+	Fix a vulnerability in the control message API. A buffer is not properly cleared
109	+	before sharing with userland.
110	+
111	+	20140701:
112	+	MKSH R50
113	+
114	+	20140630:
115	+	File 5.19
116	+
117		20140605:
118		Fix four security issues with OpenSSL
119

Diff Legend

–	Removed lines
+	Added lines
<	Changed lines
>	Changed lines