[ViewVC] Diff of: src/trunk/UPDATING

Comparing trunk/UPDATING (file contents):
Revision 708 by laffer1, Fri Jan 19 14:45:44 2007 UTC vs.
Revision 6660 by laffer1, Fri Jun 6 01:26:03 2014 UTC

-<
+Updating Information for MidnightBSD users
->
+Updating Information for MidnightBSD users.
-<
+Items affecting the mports and packages system can be found in
-<
+/usr/mports/UPDATING.
->
+20140605:
->
+        Fix four security issues with OpenSSL
-+
+20140604:
-+
+        Sendmail failed to properly set close-on-exec for open file descriptors.
-+
-+
+        ktrace page fault kernel trace entries were set to an incorrect size which resulted
-+
+        in a leak of information.
-+
-+
+20140430:
-+
+        Fix a TCP reassembly bug that could result in a DOS attack
-+
+        of the system. It may be possible to obtain portions
-+
+        of kernel memory as well.
-+
-+
+20140411:
-+
+        Update zlib to 1.2.7
-+
-+
+20140122:
-+
+        Support for username with length 32. Previous limit was 16
-+
-+
+20140114:
-+
+        Fix two security vulnerabilities.
-+
-+
+        bsnmpd contains a stack overflow when sent certain queries.
-+
-+
+        bind 9.8 when using NSEC3-signed zones zones, will crash with special
-+
+        crafted packets.
-+
-+
+20131228:
-+
+        Imported FreeBSD 9.2 usb stack (plus z87 patches from stable)
-+
-+
+        Updated em(4), igb(4) and ixgbe(4)
-+
-+
+        MidnightBSD now works with Z87 Intel chipsets.
-+
-+
+20131207:
-+
+        Remove sparc64 architecture. It hasn't been working for awhile
-+
+        and it's not useful for desktops anymore.
-+
-+
+20131205:
-+
+        OpenSSH 6.4p1
-+
-+
+20131203:
-+
+        Perl 5.18.1 imported.
-+
-+
+        Update less to v458
-+
-+
+20131130:
-+
+        Remove named from base. We still include the client utilities for
-+
+        now until replacements can be found.
-+
-+
+20131004:
-+
+        rarpd supports vlan(4) and has a pid flag. (from FreeBSD)
-+
-+
+20130917:
-+
+        Support for 65,536 routing tables was added.  A new fib specific
-+
+        field has been added to mbuf.  This is an increase from 16.
-+
-+
+20130910:
-+
+        Security updates: (kern.osreldate 5001)
-+
-+
+        nullfs(5)
-+
-+
+        The nullfs(5) implementation of the VOP_LINK(9) VFS operation does not
-+
+        check whether the source and target of the link are both in the same
-+
+        nullfs instance.  It is therefore possible to create a hardlink from a
-+
+        location in one nullfs instance to a file in another, as long as the
-+
+        underlying (source) filesystem is the same.
-+
-+
+        ifioctl
-+
-+
+        As is commonly the case, the IPv6 and ATM network layer ioctl request
-+
+        handlers are written in such a way that an unrecognized request is
-+
+        passed on unmodified to the link layer, which will either handle it or
-+
+        return an error code.
-+
-+
+        Network interface drivers, however, assume that the SIOCSIFADDR,
-+
+        SIOCSIFBRDADDR, SIOCSIFDSTADDR and SIOCSIFNETMASK requests have been
-+
+        handled at the network layer, and therefore do not perform input
-+
+        validation or verify the caller's credentials.  Typical link-layer
-+
+        actions for these requests may include marking the interface as "up"
-+
+        and resetting the underlying hardware.
-+
-+
+20130824:
-+
+        Fix a bug in sendmail 8.14.7 that interferes with how it
-+
+        handles AAAA records interoperating with Microsoft DNS servers.
-+
+        FreeBSD has already reported this to Sendmail and a fix
-+
+        will be included in the next release.
-+
-+
+        Subversion 1.8.1 is now in the base system as a static
-+
+        binary.  It has limited functionality, but can be used to
-+
+        checkout/commit code.  It is named svnlite.
-+
-+
+20130822:
-+
+        Fix two security vulnerabilities.
-+
-+
+        Fix an integer overflow in IP_MSFILTER (IP MULTICAST).
-+
+        This could be exploited to read memory by a user process.
-+
-+
+        When initializing the SCTP state cookie being sent in INIT-ACK chunks,
-+
+        a buffer allocated from the kernel stack is not completely initialized.
-+
-+
+        Import xz 5.0.4
-+
-+
+        Import sqlite 3.7.17
-+
-+
+        Import BIND 9.8.5-P2
-+
-+
+20130814:
-+
+        mksh R48 imported.
-+
-+
+        Sendmail 8.14.7 imported.
-+
-+
+20130717:
-+
+        libmport bug was fixed causing hash verification to fail.
-+
-+
+        virtio(4) imported from FreeBSD 9-stable. SCSI support not
-+
+        included.
-+
-+
+20130612:
-+
+        RELENG_0_4 created for 0.4. Development continues on 0.5.
-+
-+
+20130402:
-+
+        Update BIND and OpenSSL to resolve security advisories.
-+
-+
+20130305:
-+
+        MKSH R44 imported.
-+
-+
+20130213:
-+
+        MKSH R42b imported
-+
-+
+20130211:
-+
+        MKSH R42 imported
-+
-+
+20130125:
-+
+        MKSH R41 imported
-+
-+
+20130122:
-+
+        OpenSSH 5.8p2 imported
-+
-+
+        SQLite 3.7.15.2 imported
-+
-+
+        Fixed a longstanding bug in libmport extrating new index files.
-+
-+
+20120710:
-+
+        BSD licensed sort imported from FreeBSD-CURRENT
-+
-+
+        For now, GNU sort is installed as gnusort, but it will
-+
+        go away in time.
-+
-+
+20120708:
-+
+        tcsh 6.18.01 imported.
-+
-+
+        NetBSD's iconv imported.
-+
-+
+        libc gains strnlen(3), memrchr(3), stpncpy(3).
-+
-+
+20120612:
-+
+        BIND security update related to CVE-2012-1667.
-+
-+
+        Zero length resource records can cause BIND to crash resulting
-+
+        in a DOS attack or information disclosure.
-+
-+
+20120407:
-+
+        mksh R40f (fixes regression)
-+
-+
+20120328:
-+
+        mksh R40e
-+
-+
+        Perl 5.14.2
-+
-+
+20120229:
-+
+        cpucontrol(8) and cpuctl(4) added from FreeBSD 7-stable.
-+
-+
+20120209:
-+
+        mDNSResponder 333.10 imported
-+
-+
+20111227:
-+
+        import raid5 module for GEOM, graid5(8)
-+
-+
+        This is experimental and known to use a lot of kernel
-+
+        memory.
-+
-+
+20111223:
-+
+        telnetd: fix a root exploit from a fixed buffer that was not checked
-+
-+
+        pam: don't allow escape from policy path.  Exploitable in KDE, etc.
-+
-+
+        Fix pam_ssh module:
-+
-+
+        If the pam_ssh module is enabled, attackers may be able to gain access
-+
+        to user accounts which have unencrypted SSH private keys.
-+
-+
+        This has to due with the way that openssl works.  It ignores unencrpted data.
-+
-+
+        Fix security issue with chroot and ftpd.
-+
-+
+        nsdispatch(3) doesn't know it's working in a chroot and some
-+
+        operations can cause files to get reloaded causing a security
-+
+        hole in things like ftpd.
-+
-+
+20111217:
-+
+        libdialog/dialog upgraded to an lgpl version. As it's not
-+
+        backwardly compatable, include the old libdialog as libodialog
-+
-+
+20111212:
-+
+        mksh r40d imported
-+
-+
+20111210:
-+
+        re(4) and rl(4) updated to support new chips.
-+
-+
+        GEOM synced with FreeBSD 7-stable.
-+
-+
+        MidnightBSD GPT partition types created in sys/gpt.h and
-+
+        setup in boot loader and GEOM.
-+
-+
+        amdsbwd(4) (amd watchdog for south bridge) updated to support
-+
+xx series chipset.
-+
-+
+20111207:
-+
+        import bsd grep from FreeBSD/OpenBSD.
-+
-+
+        MK_BSD_GREP controls which grep is installed
-+
+        as grep with the other as bsdgrep or gnugrep.
-+
-+
+20111122:
-+
+        mksh vR40c imported.
-+
-+
+20111117:
-+
+        BIND 9.6 ESV R5 P1
-+
-+
+20111107:
-+
+        tzdata 2011n
-+
-+
+20111026:
-+
+        mDNSResponder v320
-+
-+
+        BIND 9.6 ESV R5
-+
-+
+20111022:
-+
+        cflow 0.0.6 imported
-+
-+
+20111020:
-+
+        less v436 imported
-+
-+
+        amdsbwd(4) AMD southbridge watchdog
-+
-+
+20111019:
-+
+        awk 20110810 imported
-+
-+
+        et(4) Agere Gigabit Ethernet/Fast Ethernet driver added, but
-+
+        not included in GENERIC kernel.  The kernel module needs
-+
+        testing before we can include it in GENERIC.
-+
-+
+        intr_bind code ported to allow an IRQ to be bound to one
-+
+        specific CPU core.
-+
-+
+20111017:
-+
+        Time Zone Data v. 2011l (Released 10 October 2011)
-+
-+
+        Updated list of countries (iso3166) to work with new timezone data.
-+
-+
+20111015:
-+
+        Introduce CPU Affinity in MidnightBSD. cpuset(1) can be used
-+
+        to control which core or group of cores can be used for a given
-+
+        process. Several new system calls were added to support this
-+
+        functionality in the running kernel and for 32bit binary
-+
+        compatibility on amd64.
-+
-+
+        The scheduler default has been changed to ULE in i386 and
-+
+        amd64.  Changes were made to both schedulers (4BSD AND ULE)
-+
+        for this feature.
-+
-+
+        This work is based on Jeff Roberson's FreeBSD 7.1 patches.
-+
-+
+20111004:
-+
+        Fix a problem with unix socket handling caused by the recent
-+
+        patch to unix socket path handling. This allows network
-+
+        apps to work under the linuxolator again.
-+
-+
+20111001:
-+
+        Import libfetch & fetch(1) from FreeBSD 9. Passive FTP is
-+
+        now default and an environment variable must be set to use
-+
+        active.
-+
-+
+20110930:
-+
+        Introduce quirks handling for several umass devices including
-+
+        USB cameras.  Add workaround for Cyberpower UPS devices.
-+
-+
+        Bring in further bug fixes from FreeBSD and NetBSD for alc(4).
-+
+        Stale ip/tcp header pointers are no longer used, lockups fixed
-+
+        when network cable is unplugged on bootup, enable TX checksum
-+
+        offloading.
-+
-+
+        Add a new man page for gcache(8), a useful geom class when
-+
+        working with large raid3 sets.
-+
-+
+        Restore previous workaround for Cypress pata storage controller.
-+
-+
+20110929:
-+
+        Sync ath(4) with FreeBSD 7.3.
-+
-+
+        The following modules are no longer available, and should be
-+
+        removed from loader.conf:
-+
+        ath_hal ath_rate_amrr ath_rate_onoe ath_rate_sample
-+
-+
+        alc(4) would hibernate when a cable was unplugged and often
-+
+        required bring the interface down and up to "wake up" so that
-+
+        a connection could be established.  Disable hibernation.
-+
-+
+20110928:
-+
+        Fix security issues with gzip and compress related to .Z
-+
+        files that are corrupted.
-+
-+
+        Fix path validation with unix domain sockets.
-+
-+
+20110917:
-+
+        Remove dependance on mports perl for generating releases as
-+
+        it's in the base system.
-+
-+
+20110914:
-+
+        Import xz 5.0.3 with liblzma 5.0.3
-+
-+
+20110813:
-+
+        synced the sparc64 GENERIC kernel configuration with amd64.
-+
-+
+20110806:
-+
+        sqlite 3.7.7.1 imported
-+
-+
+        msearch(1), libmsearch and msearch.import added.  msearch(1) provides
-+
+        a full text search command line tool.  libmsearch can also be used
-+
+        to build a graphical based search in the future. You can enable
-+
+        index building for msearch in periodic.conf or manually run the
-+
+        /usr/libexec/msearch.index tool.  Full text indexes take considerable
-+
+        space in /var.  I'm using approximately 500MB currently.
-+
-+
+        Fix a long standing bug with the periodic script to check package
-+
+        versions.  This will be obsolete with mport though.
-+
-+
+20110710:
-+
+        kdb_enter_why added to MidnightBSD to allow the kernel debugger to
-+
+        know why it's in use and thus script can be run.
-+
-+
+        Yet another problem with the perl manifest was fixed
-+
-+
+20110709:
-+
+        cpufreq(1) is a new utility to monitor CPU frequency which may change
-+
+        with use of powerd(8) and cpufreq(4).
-+
-+
+20110612:
-+
+        Update mksh to R40
-+
-+
+        Catch up ObsoleteFiles.inc to remove Perl 5.10.x.  Good to run when
-+
+        updating current (cd /usr/src && make check-old)
-+
-+
+20110528:
-+
+        Fix CVE-2011-1910 in BIND 9.6.x.  This affects caching resolvers.
-+
-+
+20110526:
-+
+        newfs:
-+
+        Raised the default blocksize for UFS/FFS filesystems from
-+
+K to 32K and the default fragment size from 2K to 4K.
-+
-+
+        This should slightly imporve performance on "advanced format"
-+
+        hard drives such as the WD EARS drives. Drives of this type
-+
+        have emulation modes that slow down with lower sizes.  Of course
-+
+        the drive must still be aligned properly when using fdisk.
-+
-+
+20110521:
-+
+        mport tool now has a deleteall command.  This can be used to remove
-+
+        all packages from a system.
-+
-+
+        A few bugs with the perl 5.14 import have been fixed.
-+
-+
+20110518:
-+
+        Perl 5.14.0
-+
-+
+20110517:
-+
+        Sendmail 8.14.5
-+
-+
+20110314:
-+
+        DRM/DRI code updated to support newer video cards. (FreeBSD 7.1)
-+
-+
+        cdevpriv wrappers added
-+
-+
+        nss_mdns hack introduced to work around linking problem.
-+
-+
+        dnsextd fixed after update to mDNSResponder code.
-+
-+
+20110308:
-+
+        Introduce liblzma & xz 5.0.1 to the base system
-+
-+
+        Patch for OpenSSL security issue CVE-2011-0014.
-+
-+
+        "OSREVISION 4004"
-+
-+
+        nsswitch module for multicast dns (nss_mdns) added.
-+
-+
+        tzdata2011c
-+
-+
+20110220:
-+
+        cam(4) syncronized with FreeBSD 7.3.
-+
-+
+20110219:
-+
+        amdtemp(4) updated to support sensors framework.
-+
-+
+20110217:
-+
+        Perl 5.10.1 imported
-+
-+
+20110216:
-+
+        Introduce igb(4) and split Intel Gigabit Ethernet adapters between
-+
+        igb(4) and em(4).  Newer devices use igb(4).  The code has moved
-+
+        to sys/dev/e1000 for both devices in the kernel. igb(4) has
-+
+        been placed in GENERIC on i386 and amd64.
-+
-+
+        Update bfe(4) to support newer devices and WOL.
-+
-+
+20110215:
-+
+        age(4) added.
-+
-+
+20110208:
-+
+        BIND 9.6.3 which fixes a bug with DNSSEC records getting added.
-+
-+
+20110206:
-+
+        eeemon(4) added to monitor Asus Eee PC.
-+
-+
+20110205:
-+
+        OpenSSH 5.7p1
-+
-+
+        GNU sort 6.9 (coreutils)
-+
-+
+20110203:
-+
+        one true awk 20100523 imported
-+
-+
+        sqlite 3.7.5
-+
-+
+        OpenSSL 0.9.8q
-+
-+
+20110202:
-+
+        tcsh 6.17.00
-+
-+
+        file 5.05
-+
-+
+20110122:
-+
+        Import it(4) and lm(4), with support for Super I/O hardware monitors. This
-+
+        uses the sensors framework ported by Constantine A. Murenin (GSOC2007)
-+
-+
+20110120:
-+
+        BIND 9.6.2-P3
-+
-+
+        sudo 1.7.4-p6
-+
-+
+20110115:
-+
+        Add experimental jme(4) for Jmicron ethernet devices.
-+
-+
+20101130:
-+
+        A double free exists in the SSL client ECDH handling code, when
-+
+        processing specially crafted public keys with invalid prime
-+
+        numbers. [CVE-2010-2939]
-+
-+
+20101120:
-+
+        Several portions of the kernel and userland code related to UFS file
-+
+        systems (and UFS2) cannot properly handle inode counts above 2^31 due
-+
+        to use of int types.  Based on a patch from FreeBSD, I've modified
-+
+        our UFS2 implementation to handle unsigned values for inode counts
-+
+        which should allow for file systems greater than 16TB.
-+
-+
+        newfs and growfs was also modified.
-+
-+
+20101110:
-+
+        Fix a security issue with pseudofs which could result in running code in kernel
-+
+        context or a kernel panic depending on system configuration.  This affects file
-+
+        systems such as procfs for instance.
-+
-+
+20101021:
-+
+        sysrc is a utility to print and modify name/value pairs in /etc/rc.conf easily.
-+
+        This is similar to functions present in many linux distros. The utility was
-+
+        written by Devin Teske for FreeBSD.
-+
-+
+20100920:
-+
+        bzip2 security patch for integer overflow.
-+
-+
+20100905:
-+
+        MidnightBSD RELENG_0_3 branch created.  Aggressive development continues here
-+
+        for 0.4.
-+
-+
+20100902:
-+
+        Fix a security issue with libutil that allows users to bypass cpu limits in
-+
+        login.conf in some cases.  This combined with OpenSSH for example can allow
-+
+        the user to get more resources than they're allowed.
-+
-+
+20100822:
-+
+        Import Apple's mDNSResponder (mdnsd).
-+
-+
+20100814:
-+
+        libdispatch added to MidnightBSD.  This provides functionality found in
-+
+        Mac OS X's GCD.  We do not have blocks support yet.  As this code is
-+
+        licensed under Apache 2, we create a new MK_APACHE option so that
-+
+        it's not required for all users to run code under a license they
-+
+        may not like.
-+
-+
+20100713:
-+
+        mbuf readonly fix related to sendfile(2) data corruption.
-+
-+
+20100704:
-+
+        brainfuck(1) imported from MirBSD.
-+
-+
+20100505:
-+
+        zlib 1.2.5
-+
-+
+20100430:
-+
+        Sudo 1.7.2p6 imported
-+
-+
+20100321:
-+
+        Update zlib to 1.2.4
-+
-+
+20100319:
-+
+        Removed i586 from default i386 generic kernel.
-+
-+
+20100317:
-+
+        Update to tzdata2010e (time zones).  This includes changes in
-+
+        Mexico.
-+
-+
+        Add support for several newer sound cards via hda including
-+
+        ATI and Realtek chipsets.
-+
-+
+20100313:
-+
+        CPU detection has been changed.  VIA Padlock detection added.
-+
-+
+20100312:
-+
+        Fix a number of bugs and compiler warnings in libmport. Handle
-+
+        plus signs in paths for mport.check-fake
-+
-+
+20100311:
-+
+        mksh R39c
-+
-+
+20100309:
-+
+        Sudo 1.7.2p5
-+
-+
+        sqlite3 3.6.23
-+
-+
+        mksh R39b
-+
-+
+        libffi (ffi) 3.0.9
-+
-+
+20100206:
-+
+        WITHOUT_LIB32 is no longer needed on AMD64.  GCC was fixed to
-+
+        properly pass arguments to ld.
-+
-+
+        re(4) and rl(4) have been updated to support several new
-+
+        realtek chipsets.  Performance has been improved on re(4).
-+
-+
+20100204:
-+
+        Fix a bug cropping up on AMD64 MidnightBSD with sftp
-+
+        segfaulting.
-+
-+
+20100116:
-+
+        Import ash changes from FreeBSD (bin/sh) 8-Stable.
-+
-+
+        BIND 9.6.1-P2
-+
-+
+20100110:
-+
+        Import Sendmail 8.14.4. Fix for SSL vulnerability.
-+
-+
+        posix_spawn(3) added to MidnightBSD libc.  Users may need to build and
-+
+        install libc before doing a full buildworld when upating from 0.2 or
-+
+        older current systems.
-+
-+
+        kqueue(2) was modified to support portions of libdispatch functionality.
-+
-+
+20100106:
-+
+        Bind security update.  Fix a bug with DNSSEC that causes negative
-+
+        cache entries and thus a possible DNS cache poisoning attack.
-+
-+
+        Fix a bug in ZFS that can reset permissions on system crashes.
-+
-+
+20091228:
-+
+        amdtemp(4) was added.  It allows one to monitor to the temperature
-+
+        of an AMD CPU such as a Phenom.
-+
-+
+20091205:
-+
+        OpenSSL security fix
-+
-+
+        The SSL version 3 and TLS protocols support session renegotiation without
-+
+        cryptographically tying the new session parameters to the old parameters.
-+
-+
+20091128:
-+
+        OpenBSD sensors framework imported including sensorsd(8)
-+
-+
+20091126:
-+
+        OpenNTPD 4.4 import
-+
-+
+        Update OpenSSH to 5.3p1
-+
-+
+        mksh R39
-+
-+
+20091124:
-+
+        cpdup updated from DragonFly to 1.15
-+
-+
+        tzdata2009s updated with latest timezone data for November 2009.
-+
-+
+20091010:
-+
+        amd64 users should use WITHOUT_LIB32=yes in /etc/make.conf for now
-+
+        to test current.
-+
-+
+        Revert unicode filename fixes from ntfs code.  This was causing chaos
-+
+        on amd64 systems.
-+
-+
+20091006:
-+
+        Update timezone data with tzdata2009n with the Pakistan and
-+
+        Argentina changes.
-+
-+
+        Sync several userland utilities with versions from FreeBSD 7.0 in
-+
+        sbin and usr.sbin.
-+
-+
+20090919:
-+
+        Update timezone data with tzdate2009m from September 2009.
-+
-+
+20090729:
-+
+        Patch for Bind 9 security vulnerability. a dynmaic update packet
-+
+        can trigger an assertion and cause named to exit
-+
-+
+20090606:
-+
+        Remove PCC from the base system.  This compiler will not work
-+
+        as a system compiler for us as we've got some userland investment
-+
+        in C++ code and may have Objective-C in the future.  We're stuck
-+
+        with a solution that supports these three languages at a minimum.
-+
-+
+        I had wanted to keep it as an optional compiler because it is
-+
+        fast, however too many users want to try to use it for the base
-+
+        system which makes no sense.
-+
-+
+        A hack was added for Cypress based usb hard drive enclosures to
-+
+        the kernel.  This should cut down on commands it claims to support
-+
+        but does not (at the cam layer).  Found while testing ZFS on
-+
+        an external device.
-+
-+
+20090520:
-+
+        The powerd daemon no longer starts automatically to improve
-+
+        compatibility with many systems.  However, there is a new
-+
+        installer option in the startup section to enable it. This
-+
+        makes it easier to enable for users that have working systems. I                thought it was only a problem on older hardware, but it freaks
-+
+        out my new Phenom too.
-+
-+
+20090502:
-+
+        OpenSSH 5.2p1 import
-+
-+
+        ale(4) connected to the build. (kernel module only)
-+
-+
+20090501:
-+
+        Imported makefs utility from NetBSD/FreeBSD
-+
-+
+20090422:
-+
+        OpenSSL security update
-+
-+
+        The function ASN1_STRING_print_ex does not properly validate the lengths
-+
+of BMPString or UniversalString objects before attempting to print them.
-+
-+
+20090415:
-+
+        Created a Symbol.map for libc/ohash symbols
-+
-+
+        Updated several usr/bin usr/sbin utilities.
-+
-+
+        Corrected a bug with Makefile.inc1 causing the bootstrap
-+
+        tools to fail.
-+
-+
+20090405:
-+
+        xorg 7.4 wants to configure its input devices via hald which does not
-+
+        yet work with USB. If the keyboard/mouse does not work in xorg then
-+
+        add
-+
+                Option "AllowEmptyInput" "off"
-+
+        to your ServerLayout section.  This will cause X to use the configured
-+
+        kbd and mouse sections from your xorg.conf
-+
-+
+20090403:
-+
+        mksh was disconnected a few day ago do to bugs with
-+
+        buildworld and mports.  Now, connect it back
-+
+        for use as /bin/sh with a conditional called
-+
+        MK_ASH.  By default, ash is the standard /bin/sh
-+
+        but we may change this later.  This will allow further
-+
+        testing by users and developers of mksh without
-+
+        causing an unpleasant default experience.  In the
-+
+        long run, we need to fix mksh compatibility.
-+
-+
+20090328:
-+
+        Bring in mksh R37 from CVS. The dot.mkshrc files for root
-+
+        and skel were changed.  mksh(1) now replaces ash aka sh(1)
-+
+        as the default /bin/sh.  Please report bugs with
-+
+        ports, etc. The ash code will remain in the repo for awhile
-+
+        as I decide if we'll add something like MK_SHELL_ASH as
-+
+        an optional build parameter.
-+
-+
+        ahd was disconnected from the lint environment until
-+
+        the compiler bug is sorted (by updating gcc?)
-+
-+
+        Remove freebsd-tips from fortune files and change the
-+
+        default for login and profile.
-+
-+
+20090327:
-+
+        Update libarchive to 2.5.5, tar, and add bsdcpio.
-+
-+
+        Also previously, ctriv has been connecting Perl 5.10
-+
+        to the build (part of os).  This will have an impact
-+
+        on mports.
-+
-+
+20090325:
-+
+        Update Bind to 9.4.3-P1
-+
-+
+        Update mksh to R36b
-+
-+
+        Update tcpdump to 3.9.8, fix libpcap to work with current.
-+
-+
+        Update pnpinfo, sync with FreeBSD.
-+
-+
+20090115:
-+
+        Fix a problem with DNSSEC and BIND.
-+
-+
+20090110:
-+
+        For applications using OpenSSL for SSL connections, an invalid SSL
-+
+        certificate may be interpreted as valid.  This could for example be
-+
+        used by an attacker to perform a man-in-the-middle attack.
-+
-+
+        Other applications which use the OpenSSL EVP API may similarly be
-+
+        affected.
-+
-+
+        Stop cross site request forgery attacks in lukemftpd
-+
-+
+20090104:
-+
+        Import GNU libreadline 5.2
-+
-+
+20090101:
-+
+        Update time zone data to 2008i.
-+
-+
+20081231:
-+
+        Correct a problem where bluetooth and netgraph sockets are not
-+
+        properly initialized.
-+
-+
+        Happy 2009.
-+
-+
+20081206:
-+
+        Due to the massive change in the underlying system under way,
-+
+        we're naming the next release 1.0.  The sys/sys/param.h was
-+
+        changed accordingly.  ipfilter and ncurses were corrected
-+
+        using __MidnightBSD__ tests in the code.
-+
-+
+        The GENERIC kernel config was caught up on i386 today.  Consider
-+
+        i386 still broken, but amd64 is running again.
-+
-+
+        mdoc.local was updated with the new MidnightBSD version info.
-+
-+
+        batt(1) was rewritten in C.  It now supports several flags and
-+
+        runs about 8 times faster on my laptop.  The default output
-+
+        shows the number of minutes of battery life remaining and the
-+
+        percentage.  You can use -u to display the number of batteries or
-+
+        -c to get script friendly output.  Consult the man page for more.
-+
-+
+20081204:
-+
+        Work has completed on importing ZFS, jemalloc, several
-+
+        new devices, SCTP, updated pf, a new tempfs, linuxolator 2.6 kernel
-+
+        support, improved locking for file desc., audit (openbsm),
-+
+        openssl .98e, nfe, imporved intel high def audio, midi, updated
-+
+        intel gigabit (em), support for several wifi cards (intel), ...
-+
-+
+        Renamed 0.3-CURRENT officially. Switched to using MidnightBSD version
-+
+        data from param.h instead of the FreeBSD version.  This means
-+
+        testing is now possible in the ports tree for the version
-+
+        and that any ports or code relying on the FreeBSD version from
-+
+        sys/sys/param.h will need to be fixed.
-+
-+
+20080905:
-+
+        update nve(4) to support new hardware.
-+
-+
+20080801:
-+
+        Import OpenBSM 1.0
-+
-+
+        Modify src/release to create 3 isos instead of 2 for packages.
-+
-+
+        etc/rc.d/firstboot now enables kdm, gnustep + slim and bsdstats.
-+
-+
+        Many ia64, alpha, powerpc items were removed.
-+
-+
+        The recent diffutils 2.8.7 import was fixed.
-+
-+
+20080703:
-+
+        pcc was not installed properly when setting DESTDIR for live cds,
-+
+        or posibly jails.
-+
-+
+20080627:
-+
+        Add firmware(9), WEP, CCMP, TKIP to GENERIC.
-+
-+
+        Add glabel to GENERIC.
-+
-+
+        Intel ICH8 mobile chipset used on some iMacs included with ata.
-+
-+
+        pcc connected to the build on i386. (alternative compiler)
-+
-+
+        ath added to GENERIC.  (Atheros wireless NICs) on amd64/i386
-+
-+
+20080528:
-+
+        Sendmail 8.14.3
-+
-+
+20080516:
-+
+        ssh-vulnkey allows you to look for vulnerable ssh keys that
-+
+        were generated on Debian and Ubuntu hosts over the last
-+
+        few years.  sshd can block offending keys with a configuration
-+
+        option.
-+
-+
+        The elf note on binaries is now set to MidnightBSD.
-+
-+
+20080514:
-+
+        Fixed a number of problems with pcc.  It is not yet connected
-+
+        to the build, but usable on i386 hosts.  You may use it
-+
+        by make; make install in /usr/src/usr.bin/pcc.  It will
-+
+        install in /usr/local as some of the files conflict with
-+
+        GCC versions. __MidnightBSD__ is defined in PCC as well.
-+
-+
+        System headers were fixed to allow pcc to compile many binaries
-+
+        on MidnightBSD.  bin/cp will work now for instance.
-+
-+
+20080430:
-+
+        __MidnightBSD__ is now defined via gcc.  This can be tested
-+
+        to determine we're running on MidnightBSD in the preprocessor.
-+
-+
+20080429:
-+
+        Import bind 9.4.2 with threading
-+
-+
+        libpthread (KSE) and libthr are built earlier
-+
-+
+        pcvt(4) removed!
-+
-+
+        Alias added for core2 cpus.
-+
-+
+        Alpha and PC98 only utilities removed from usr/sbin
-+
-+
+        syslogd, adduser, rmuser, mergemaster and mailwrapper have been
-+
+        improved.  See the man pages for info.
-+
-+
+        periodic scripts will not send emails with empty message bodies.
-+
+        See mailwrapper fix.
-+
-+
+20080410:
-+
+        Sync cpdup with DragonFly.  Add parallel transaction support and
-+
+        -l flag to line-buffer stdout and stderr.
-+
-+
+20080406:
-+
+        Import bzip2 1.05
-+
+        Import OpenSSH 4.9p1
-+
-+
+20080322:
-+
+        The default umask was changed to 022.
-+
-+
+        /usr/X11R6 paths were removed from several config files.
-+
-+
+        .mkshrc files are now installed for root.
-+
-+
+20080316:
-+
+        FIx a problem with gif0 tunnels and neighbors with IPV6.
-+
-+
+20080312:
-+
+        Add lndir from X.org.  This aides in the porting of MirPorts.
-+
-+
+        New OS versions were added to the mapage code (groff)
-+
-+
+20080310:
-+
+        Correct a buffer overflow in ppp.
-+
-+
+20080308:
-+
+        Remove /usr/X11R6 from manpath config.
-+
-+
+20080307:
-+
+        Atheros driver no longer has several options set
-+
+        which corrects building in tinderbox on all three platforms.
-+
-+
+        Added a new macro to sx.h which returns true if the current
-+
+        thread holds an exclusive lock on a specifix sx.
-+
-+
+        Removed OS/2's HPFS file system.   It's not maintained and
-+
+        I don't know anyone using OS/2 or ecomstation these days.
-+
+        My copy is in the closet collecting dust.
-+
-+
+20080306:
-+
+        Synced tinderbox with FreeBSD.  Modified it for MidnightBSD.
-+
+        Developers can now use it to check src builds.
-+
-+
+20080303:
-+
+        Add mksh to /etc/shells, made some adjustments to options
-+
+        for mksh builds per suggestion upstream.
-+
-+
+        USB HID table updated with modern hardware list.
-+
-+
+        Updated BSD family true (we're not in there yet)
-+
-+
+        iso3166 file updated and import of tzdata2007k for
-+
+        new time zones.
-+
-+
+        Updated mksh to latest version R33.
-+
-+
+20080228:
-+
+        Remplaced the random IP id generation code with a new
-+
+        version by Amit Klein.
-+
-+
+20080221:
-+
+        Sendfile write only permissions fix.
-+
-+
+        Removed some HPFS and PC98 code.
-+
-+
+        iso639 file sycned with DragonFly.
-+
-+
+20080128:
-+
+        Changed NTP configuration so that ips aren't cached
-+
+        so multiple servers are used.
-+
-+
+        Fix an issue with fork() in libpthread.
-+
-+
+20080121:
-+
+        Add virtualization detection to set the HZ rate
-+
+        according to a VM present.  VMWare and Parallels
-+
+        should work better like this.
-+
-+
+        Change to full x11 install in sysinstall.  Add
-+
+        xorg 7 support.
-+
-+
+20080115:
-+
+        Fix the handling of PTY's.  CVE-2008-0216
-+
-+
+20080105:
-+
+        mport delete code added, USE_MPORT_TOOLS knob aded.
-+
-+
+20080101:
-+
+        Happy New Year
-+
-+
+20071123:
-+
+        Update sendmail to 8.14.2
-+
-+
+20071120:
-+
+        Update system compiler to gcc 3.4.6.
-+
-+
+20071023:
-+
+        Updated mksh to R31d.
-+
-+
+20070911:
-+
+        Updated mksh to version R31b.
-+
-+
+        Fixed stderr output in libpthread.  Previously it was
-+
+        written to stdout.
-+
-+
+20070831:
-+
+        Added dot.mkshrc file to support the recent change to
-+
+        mksh from OpenBSD's ksh derived from pdksh.
-+
-+
+        Added new firewall configuration.  ipfw is enabled by default
-+
+        with a "desktop" configuration.  Consult /etc/rc.firewall
-+
+        or ipfw show to see the ruleset used.  You can disable
-+
+        ipfw by setting firewall_enable="NO" in /etc/rc.conf This
-+
+        change only effects IPv4.  IPv6 does not have a firewall
-+
+        enabled by default.
-+
-+
+20070814:
-+
+        Removed GNU tar source.  We've been using BSD tar
-+
+        for awhile.
-+
-+
+20070806:
-+
+        Finished removing umapfs and autofs from the tree.
-+
-+
+20070804:
-+
+        BIND and Tcpdump have been patched for recent vulnerabilities.
-+
-+
+        We switched to BSD cpio (pax).
-+
-+
+20070719:
-+
+        Imported cpdup from DragonFly as /bin/cpdup
-+
-+
+20070716:
-+
+        Update GNU cpio to 2.8.
-+
-+
+20070410:
-+
+        cvs was updated to 1.12.13.  cvsbug was removed.
-+
+        cvs now behaves similarly to DragonFly's cvs with
-+
+        most of their local changes.
-+
-+
+20070409:
-+
+        RELENG_0_1 was created. More aggresive changes will
-+
+        continue here.
-+
-+
+20070406:
-+
+        Back out propolice.  propolice caused several problems
-+
+        with our threading libraries libthr and libpthread.
-+
+        curthread was often NULL after the patch and many
-+
+        multithreaded applications would crash.  We plan to
-+
+        work on either bringing in gcc 4.1 or developing a new
-+
+        patch which also corrects our threading issues later.
-+
-+
+        It is more important to have a stable system for our
-+
+        mport work and other projects at this time.
-+
-+
+        This is not a clean removal.  It is recommended that you
-+
+        have a recently SNAP CD handy.  You can either reinstall
-+
+        or perform a make buildworld and make buildkernel and
-+
+        make installkernel.  Reboot on the cd and copy the contents
-+
+        of /bin, /sbin, /lib, /libexec, and /usr/bin, /usr/sbin,
-+
+        /usr/lib, and /usr/libexec to the respective directories on
-+
+        your disk.  Then you should be able to boot into single user
-+
+        mode and run make installworld.  You will need to run
-+
+        chflags noschg on some of the files if you can't overwrite
-+
+        them.
-+
-+
+        You will get __guard missing errors since we had to remove
-+
+        this from libc.
-+
-+
+        You will need to rebuild any ports built while propolice was
-+
+        installed.
-+
-+
+20070401:
-+
+        Importing propolice into MidnightBSD. Propolice is going to
-+
+        provide us with much greater security and stability in the
-+
+        long run. If upgrading from a pre-propolice system, please
-+
+        follow the these instructions:
-+
-+
+        cd /usr/src/lib/libc && make obj && make && make install
-+
+        cd /usr/src/gnu/usr.bin/cc && make obj && make && make install
-+
+        cd /usr/src/lib/libpthread && make obj && make && make install
-+
+        cd /usr/src/lib/libthr && make obj && make && make install
-+
+        buildworld and kernel
-+
-+
+        It is adviced that any mports which were installed and/or built
-+
+        prior to the propolice update also be updated. If any errors
-+
+        or issue are encounted, please contact security@midnightbsd.org
-+
+        and we will be sure to investigate and come up with an expeditious
-+
+        fix.
-+
-+
+20070314:
-+
+        Remove send-pr from src.
-+
-+
+        Switch to NetBSD's gzip.
-+
-+
+        Bump MBSD minor revision.
-+
-+
+20070313:
-+
+        Imported OpenSSH 4.6p1.
-+
-+
+        Imported FreeBSD's libarchive and updated tar to work with it.
-+
-+
+        Disabled debug statements cluttering up /var/log/messages for
-+
+        the tcp autobuf patch applied previously.
-+
-+
+20070312:
-+
+        Synced several audio changes from FreeBSD 6.1. Removed the
-+
+        BSD Daemon files from src/share.
-+
-+
+20070308:
-+
+        Added mfi which supports LSI Logic MegaRAID SAS devices including
-+
+        the Dell perc5i.
-+
-+
+20070206:
-+
+        Imported OpenBSD's sudo into source. Please install
-+
+        /usr/src/usr.bin/sudo/lib first before building.
-+
-+
+        Those who install from a snapshot after this date
-+
+        will not be effected.
-+
+20070119:
+        Added audit group.  Be sure to add audit to your /etc/group file
+        before installing world.
+        wpa_supplicant was updated.
-<
+        For stability and compatibility reasons, it was decided that MidnightBSD        sync with FreeBSD 6.1 Release.  Nearly every change between the original        fork date of February 24, 2006 and the release of FreeBSD 6.1 in May            2006 will be merged.  Beyond this, MidnightBSD will be a "real" fork and        will not sync every little change with FreeBSD.
->
+        For stability and compatibility reasons, it was decided that MidnightBSD
->
+        sync with FreeBSD 6.1 Release.  Nearly every change between the original
->
+        fork date of February 24, 2006 and the release of FreeBSD 6.1 in May
->
+will be merged.  Beyond this, MidnightBSD will be a "real" fork and
->
+        will not sync every little change with FreeBSD.
+20061231:
+        Updated COPYRIGHT for 2007.
+this document.
+$FreeBSD: src/UPDATING,v 1.416.2.18 2006/02/22 11:51:57 yar Exp $
-<
+$MidnightBSD: src/UPDATING,v 1.9 2007/01/01 00:08:00 laffer1 Exp $
->
+$MidnightBSD$

Comparing trunk/UPDATING (property cvs2svn:cvs-rev):
Revision 708 by laffer1, Fri Jan 19 14:45:44 2007 UTC vs.
Revision 6660 by laffer1, Fri Jun 6 01:26:03 2014 UTC

#	Line 1 \| Line 0
1	–	1.10

Comparing trunk/UPDATING (property svn:keywords):
Revision 708 by laffer1, Fri Jan 19 14:45:44 2007 UTC vs.
Revision 6660 by laffer1, Fri Jun 6 01:26:03 2014 UTC

#	Line 0 \| Line 1
1	+	MidnightBSD=%H

Diff Legend

-–
+Removed lines
-+
+Added lines
-<
+Changed lines
->
+Changed lines

Comparing trunk/UPDATING (file contents): Revision 708 by laffer1, Fri Jan 19 14:45:44 2007 UTC vs. Revision 6660 by laffer1, Fri Jun 6 01:26:03 2014 UTC

Comparing trunk/UPDATING (property cvs2svn:cvs-rev): Revision 708 by laffer1, Fri Jan 19 14:45:44 2007 UTC vs. Revision 6660 by laffer1, Fri Jun 6 01:26:03 2014 UTC

Comparing trunk/UPDATING (property svn:keywords): Revision 708 by laffer1, Fri Jan 19 14:45:44 2007 UTC vs. Revision 6660 by laffer1, Fri Jun 6 01:26:03 2014 UTC

Diff Legend

Comparing trunk/UPDATING (file contents):
Revision 708 by laffer1, Fri Jan 19 14:45:44 2007 UTC vs.
Revision 6660 by laffer1, Fri Jun 6 01:26:03 2014 UTC

Comparing trunk/UPDATING (property cvs2svn:cvs-rev):
Revision 708 by laffer1, Fri Jan 19 14:45:44 2007 UTC vs.
Revision 6660 by laffer1, Fri Jun 6 01:26:03 2014 UTC

Comparing trunk/UPDATING (property svn:keywords):
Revision 708 by laffer1, Fri Jan 19 14:45:44 2007 UTC vs.
Revision 6660 by laffer1, Fri Jun 6 01:26:03 2014 UTC