[ViewVC] Diff of: src/trunk/UPDATING

Comparing trunk/UPDATING (file contents):
Revision 5706 by laffer1, Wed Jan 23 02:35:12 2013 UTC vs.
Revision 7210 by laffer1, Thu Aug 6 00:10:00 2015 UTC

+Updating Information for MidnightBSD users.
-+
+20160805:
-+
+        routed - fix a potential security issue where traffic from outside
-+
+        the network can disrupt routing.
-+
-+
+        bsd patch - fix a bug with ed(1) scripts allowing unsanitized input
-+
+        to run.
-+
-+
+20160802:
-+
+        jansson 2.7 library added. (libjansson is a JSON library in C)
-+
-+
+20160728:
-+
+        Heimdal 1.5.2 (kerberos implementation)
-+
-+
+        OpenSSL 1.0.1o
-+
-+
+        cpucontrol(8) now supports VIA CPUs. Synced with FreeBSD 9.2.
-+
-+
+        TCP Resassemly resource exhaustion bug:
-+
+        There is a mistake with the introduction of VNET, which converted the
-+
+        global limit on the number of segments that could belong to reassembly
-+
+        queues into a per-VNET limit.  Because mbufs are allocated from a
-+
+        global pool, in the presence of a sufficient number of VNETs, the
-+
+        total number of mbufs attached to reassembly queues can grow to the
-+
+        total number of mbufs in the system, at which point all network
-+
+        traffic would cease.
-+
+        Obtained from: FreeBSD 8
-+
-+
+        OpenSSH
-+
-+
+        Fix two security vulnerabilities:
-+
+        OpenSSH clients does not correctly verify DNS SSHFP records when a server
-+
+        offers a certificate. [CVE-2014-2653]
-+
-+
+        OpenSSH servers which are configured to allow password authentication
-+
+        using PAM (default) would allow many password attempts. A bug allows
-+
+        MaxAuthTries to be bypassed. [CVE-2015-5600]
-+
-+
-+
+        Switch to bsdpatch (from FreeBSD & OpenBSD)
-+
-+
+20160726:
-+
+        BSD Sort updated
-+
-+
+        sqlite 3.8.10.2
-+
-+
+20160725:
-+
+        Import reallocarray from OpenBSD's libc.
-+
-+
+        The reallocarray() function is similar to realloc() except it operates on
-+
+        nmemb members of size size and checks for integer overflow in the
-+
+        calculation nmemb * size.
-+
-+
+20150722:
-+
+        Fix a bug where TCP connections transitioning to LAST_ACK
-+
+        state can get stuck. This can result in a denial of service.
-+
-+
+20150715:
-+
+        libmport now supports @shell and @sample in plists. This means that
-+
+        a shell port can automatically add an entry to /etc/shells and remove
-+
+        it upon uninstallation. For sample files, a copy is made without the
-+
+        .sample extension if one does not exist and it is removed automatically
-+
+        only if the md5 hash of the two files is the same.
-+
-+
+20150709:
-+
+        flex 2.5.39
-+
-+
+20150702:
-+
+        ZFS in MidnightBSD now supports lz4 compression. You can enable it
-+
+        with zfs set compression=lz4 pool/path.
-+
-+
+        Verify it's working with
-+
+        zfs get compressratio pool/path
-+
+        du -h -s *
-+
-+
+        Note you must write new data when turning on compression to see
-+
+        changes. Existing files are not compressed.
-+
-+
+        Note: While we used the same basic implementation of lz4 that
-+
+        FreeBSD and OpenZFS uses, we did not yet implement features support
-+
+        and the zfs version still reports 28. This may come in a future update
-+
+        to ZFS.
-+
-+
+20150621:
-+
+        libmport now automatically stops services when deleting packages.
-+
-+
+        The package must have installed an rc.d script in /usr/local/etc
-+
+        for this to work. This is equivalent to running service <name> onestop
-+
-+
+20150618:
-+
+        Sendmail
-+
-+
+        With the recent changes to OpenSSL to block 512 bit certificates,
-+
+        sendmail can't connect with TLS to some servers.
-+
-+
+        Increase the default size to 1024 bit for client connections to
-+
+        match the server configuration.
-+
-+
+        ZFS
-+
-+
+        Added ZFS TRIM support which is enabled by default. To disable
-+
+        ZFS TRIM support set vfs.zfs.trim.enabled=0 in loader.conf.
-+
-+
+        Creating new ZFS pools and adding new devices to existing pools
-+
+        first performs a full device level TRIM which can take a significant
-+
+        amount of time. The sysctl vfs.zfs.vdev.trim_on_init can be set to 0
-+
+        to disable this behaviour.
-+
-+
+        ZFS TRIM requires the underlying device support BIO_DELETE which
-+
+        is currently provided by methods such as ATA TRIM and SCSI UNMAP
-+
+        via CAM, which are typically supported by SSD's.
-+
-+
+        Stats for ZFS TRIM can be monitored by looking at the sysctl's
-+
+        under kstat.zfs.misc.zio_trim.
-+
-+
+        rc.d
-+
-+
+        Reworked handling of cleanvar and FILESYSTEMS so that FILESYSTEMS
-+
+        implies everything is mounted and ready to go.
-+
-+
+        Changed how ip6addressctl maps IPv6 on startup.
-+
-+
+20150613:
-+
+        tzdata 2015d
-+
-+
+20150612:
-+
+        OpenSSL 0.9.8zg
-+
-+
+20150419:
-+
+        MidnightBSD 0.6 stable branch created. Continue 0.7
-+
+        development.
-+
-+
+20150418:
-+
+        sqlite 3.8.9
-+
-+
+20150407:
-+
+        Fix two security vulnerabilities:
-+
-+
+        The previous fix for IGMP had an overflow issue. This has been corrected.
-+
-+
+        ipv6: The Neighbor Discover Protocol allows a local router to advertise a
-+
+        suggested Current Hop Limit value of a link, which will replace
-+
+        Current Hop Limit on an interface connected to the link on the MidnightBSD
-+
+        system.
-+
-+
+20150319:
-+
+        OpenSSL 0.9.8.zf
-+
-+
+        mksh R50e
-+
-+
+        Apple mDNSResponder 561.1.1
-+
-+
+20150306:
-+
+        Upgrade OpenSSL to 0.9.8ze
-+
-+
+20150225:
-+
+        Fix two security vulnerabilities.
-+
-+
+. BIND servers which are configured to perform DNSSEC validation and which
-+
+        are using managed keys (which occurs implicitly when using
-+
+        "dnssec-validation auto;" or "dnssec-lookaside auto;") may exhibit
-+
+        unpredictable behavior due to the use of an improperly initialized
-+
+        variable.
-+
-+
+        CVE-2015-1349
-+
-+
+. An integer overflow in computing the size of IGMPv3 data buffer can result
-+
+        in a buffer which is too small for the requested operation.
-+
-+
+        This can result in a DOS attack.
-+
-+
+20141211:
-+
+        Fix a security issue with file and libmagic that can allow
-+
+        an attacker to create a denial of service attack on any
-+
+        program that uses libmagic.
-+
-+
+20141109:
-+
+        Fix building perl during buildworld when the GDBM port is installed.
-+
-+
+20141106:
-+
+        tzdata 2014i
-+
-+
+20141102:
-+
+        serf 1.3.8
-+
-+
+20141031:
-+
+        tnftp 20141031 fixes a security vulnerability with tnftp,
-+
+        CVE-2014-8517.
-+
-+
+20141028:
-+
+        OpenSSL 0.9.8zc
-+
-+
+20141021:
-+
+        Fix several security vulnerabilities in routed, rtsold,
-+
+        and namei with respect to Capsicum sandboxes looking up
-+
+        nonexistent path names and leaking memory.
-+
-+
+        The input path in routed(8) will accept queries from any source and
-+
+        attempt to answer them.  However, the output path assumes that the
-+
+        destination address for the response is on a directly connected
-+
+        network.
-+
-+
+        Due to a missing length check in the code that handles DNS parameters,
-+
+        a malformed router advertisement message can result in a stack buffer
-+
+        overflow in rtsold(8).
-+
-+
+20141011:
-+
+        mksh R50d - fix field splitting regression and null
-+
+        pointer dereference
-+
-+
+        xz 5.0.7
-+
-+
+        OpenSSH 6.6p1
-+
-+
+20141004:
-+
+        mksh R50c - security update for environment var bug with
-+
+        foo vs foo+
-+
-+
+20141002:
-+
+        sqlite 3.8.6
-+
-+
+        sudo 1.7.8 - some issues with the current version, but we're slowly
-+
+        getting up to date.
-+
-+
+20141001:
-+
+        mksh R50b
-+
-+
+        libmport now supports plist commands @dir, @owner, @group, @mode.
-+
-+
+        sudo 1.7.6p2
-+
-+
+20140916:
-+
+        Fix a security issue with TCP SYN.
-+
-+
+        When a segment with the SYN flag for an already existing connection arrives,
-+
+        the TCP stack tears down the connection, bypassing a check that the
-+
+        sequence number in the segment is in the expected window.
-+
-+
+20140909:
-+
+        Fixed a bug with our clearenv(3) implementation that caused segfaults
-+
+        with some programs including Dovecot.
-+
-+
+        OpenSSL security patch:
-+
-+
+        The receipt of a specifically crafted DTLS handshake message may cause OpenSSL
-+
+        to consume large amounts of memory. [CVE-2014-3506]
-+
-+
+        The receipt of a specifically crafted DTLS packet could cause OpenSSL to leak
-+
+        memory. [CVE-2014-3507]
-+
-+
+        A flaw in OBJ_obj2txt may cause pretty printing functions such as
-+
+        X509_name_oneline, X509_name_print_ex et al. to leak some information from
-+
+        the stack. [CVE-2014-3508]
-+
-+
+        OpenSSL DTLS clients enabling anonymous (EC)DH ciphersuites are subject to
-+
+        a denial of service attack. [CVE-2014-3510]
-+
-+
+20140902:
-+
+        We're now 0.6-CURRENT
-+
-+
+        Update USB quirks to support K70 Corsair keyboard, and several
-+
+        other devices.
-+
-+
+20140827:
-+
+        Perl 5.18.2
-+
-+
+20140728:
-+
+        Jails now run shutdown scripts.
-+
-+
+20140710:
-+
+        Fix a vulnerability in the control message API. A buffer is not properly cleared
-+
+        before sharing with userland.
-+
-+
+20140701:
-+
+        MKSH R50
-+
-+
+20140630:
-+
+        File 5.19
-+
-+
+20140605:
-+
+        Fix four security issues with OpenSSL
-+
-+
+20140604:
-+
+        Sendmail failed to properly set close-on-exec for open file descriptors.
-+
-+
+        ktrace page fault kernel trace entries were set to an incorrect size which resulted
-+
+        in a leak of information.
-+
-+
+20140430:
-+
+        Fix a TCP reassembly bug that could result in a DOS attack
-+
+        of the system. It may be possible to obtain portions
-+
+        of kernel memory as well.
-+
-+
+20140411:
-+
+        Update zlib to 1.2.7
-+
-+
+20140122:
-+
+        Support for username with length 32. Previous limit was 16
-+
-+
+20140114:
-+
+        Fix two security vulnerabilities.
-+
-+
+        bsnmpd contains a stack overflow when sent certain queries.
-+
-+
+        bind 9.8 when using NSEC3-signed zones zones, will crash with special
-+
+        crafted packets.
-+
-+
+20131228:
-+
+        Imported FreeBSD 9.2 usb stack (plus z87 patches from stable)
-+
-+
+        Updated em(4), igb(4) and ixgbe(4)
-+
-+
+        MidnightBSD now works with Z87 Intel chipsets.
-+
-+
+20131207:
-+
+        Remove sparc64 architecture. It hasn't been working for awhile
-+
+        and it's not useful for desktops anymore.
-+
-+
+20131205:
-+
+        OpenSSH 6.4p1
-+
-+
+20131203:
-+
+        Perl 5.18.1 imported.
-+
-+
+        Update less to v458
-+
-+
+20131130:
-+
+        Remove named from base. We still include the client utilities for
-+
+        now until replacements can be found.
-+
-+
+20131004:
-+
+        rarpd supports vlan(4) and has a pid flag. (from FreeBSD)
-+
-+
+20130917:
-+
+        Support for 65,536 routing tables was added.  A new fib specific
-+
+        field has been added to mbuf.  This is an increase from 16.
-+
-+
+20130910:
-+
+        Security updates: (kern.osreldate 5001)
-+
-+
+        nullfs(5)
-+
-+
+        The nullfs(5) implementation of the VOP_LINK(9) VFS operation does not
-+
+        check whether the source and target of the link are both in the same
-+
+        nullfs instance.  It is therefore possible to create a hardlink from a
-+
+        location in one nullfs instance to a file in another, as long as the
-+
+        underlying (source) filesystem is the same.
-+
-+
+        ifioctl
-+
-+
+        As is commonly the case, the IPv6 and ATM network layer ioctl request
-+
+        handlers are written in such a way that an unrecognized request is
-+
+        passed on unmodified to the link layer, which will either handle it or
-+
+        return an error code.
-+
-+
+        Network interface drivers, however, assume that the SIOCSIFADDR,
-+
+        SIOCSIFBRDADDR, SIOCSIFDSTADDR and SIOCSIFNETMASK requests have been
-+
+        handled at the network layer, and therefore do not perform input
-+
+        validation or verify the caller's credentials.  Typical link-layer
-+
+        actions for these requests may include marking the interface as "up"
-+
+        and resetting the underlying hardware.
-+
-+
+20130824:
-+
+        Fix a bug in sendmail 8.14.7 that interferes with how it
-+
+        handles AAAA records interoperating with Microsoft DNS servers.
-+
+        FreeBSD has already reported this to Sendmail and a fix
-+
+        will be included in the next release.
-+
-+
+        Subversion 1.8.1 is now in the base system as a static
-+
+        binary.  It has limited functionality, but can be used to
-+
+        checkout/commit code.  It is named svnlite.
-+
-+
+20130822:
-+
+        Fix two security vulnerabilities.
-+
-+
+        Fix an integer overflow in IP_MSFILTER (IP MULTICAST).
-+
+        This could be exploited to read memory by a user process.
-+
-+
+        When initializing the SCTP state cookie being sent in INIT-ACK chunks,
-+
+        a buffer allocated from the kernel stack is not completely initialized.
-+
-+
+        Import xz 5.0.4
-+
-+
+        Import sqlite 3.7.17
-+
-+
+        Import BIND 9.8.5-P2
-+
-+
+20130814:
-+
+        mksh R48 imported.
-+
-+
+        Sendmail 8.14.7 imported.
-+
-+
+20130717:
-+
+        libmport bug was fixed causing hash verification to fail.
-+
-+
+        virtio(4) imported from FreeBSD 9-stable. SCSI support not
-+
+        included.
-+
-+
+20130612:
-+
+        RELENG_0_4 created for 0.4. Development continues on 0.5.
-+
-+
+20130402:
-+
+        Update BIND and OpenSSL to resolve security advisories.
-+
-+
+20130305:
-+
+        MKSH R44 imported.
-+
-+
+20130213:
-+
+        MKSH R42b imported
-+
-+
+20130211:
-+
+        MKSH R42 imported
-+
-+
+20130125:
-+
+        MKSH R41 imported
-+
+20130122:
+        OpenSSH 5.8p2 imported
+this document.
+$FreeBSD: src/UPDATING,v 1.416.2.18 2006/02/22 11:51:57 yar Exp $
-<
+$MidnightBSD: src/UPDATING,v 1.164 2013/01/22 12:59:03 laffer1 Exp $
->
+$MidnightBSD$

Comparing trunk/UPDATING (property cvs2svn:cvs-rev):
Revision 5706 by laffer1, Wed Jan 23 02:35:12 2013 UTC vs.
Revision 7210 by laffer1, Thu Aug 6 00:10:00 2015 UTC

#	Line 1 \| Line 0
1	–	1.165

Comparing trunk/UPDATING (property svn:keywords):
Revision 5706 by laffer1, Wed Jan 23 02:35:12 2013 UTC vs.
Revision 7210 by laffer1, Thu Aug 6 00:10:00 2015 UTC

#	Line 0 \| Line 1
1	+	MidnightBSD=%H

Diff Legend

-–
+Removed lines
-+
+Added lines
-<
+Changed lines
->
+Changed lines

Comparing trunk/UPDATING (file contents): Revision 5706 by laffer1, Wed Jan 23 02:35:12 2013 UTC vs. Revision 7210 by laffer1, Thu Aug 6 00:10:00 2015 UTC

Comparing trunk/UPDATING (property cvs2svn:cvs-rev): Revision 5706 by laffer1, Wed Jan 23 02:35:12 2013 UTC vs. Revision 7210 by laffer1, Thu Aug 6 00:10:00 2015 UTC

Comparing trunk/UPDATING (property svn:keywords): Revision 5706 by laffer1, Wed Jan 23 02:35:12 2013 UTC vs. Revision 7210 by laffer1, Thu Aug 6 00:10:00 2015 UTC

Diff Legend

Comparing trunk/UPDATING (file contents):
Revision 5706 by laffer1, Wed Jan 23 02:35:12 2013 UTC vs.
Revision 7210 by laffer1, Thu Aug 6 00:10:00 2015 UTC

Comparing trunk/UPDATING (property cvs2svn:cvs-rev):
Revision 5706 by laffer1, Wed Jan 23 02:35:12 2013 UTC vs.
Revision 7210 by laffer1, Thu Aug 6 00:10:00 2015 UTC

Comparing trunk/UPDATING (property svn:keywords):
Revision 5706 by laffer1, Wed Jan 23 02:35:12 2013 UTC vs.
Revision 7210 by laffer1, Thu Aug 6 00:10:00 2015 UTC