ViewVC Help

View File | Revision Log | Show Annotations | Download File | View Changeset | Root Listing

root/src/trunk/UPDATING

Comparing trunk/UPDATING (file contents):
Revision 6466 by laffer1, Fri Dec 6 01:28:09 2013 UTC vs.
Revision 6851 by laffer1, Sat Oct 11 12:28:09 2014 UTC

#	Line 1 | Line 1
1		Updating Information for MidnightBSD users.
2
3	+	20141011:
4	+	mksh R50d - fix field splitting regression and null
5	+	pointer dereference
6	+
7	+	20141004:
8	+	mksh R50c - security update for environment var bug with
9	+	foo vs foo+
10	+
11	+	20141002:
12	+	sqlite 3.8.6
13	+
14	+	sudo 1.7.8 - some issues with the current version, but we're slowly
15	+	getting up to date.
16	+
17	+	20141001:
18	+	mksh R50b
19	+
20	+	libmport now supports plist commands @dir, @owner, @group, @mode.
21	+
22	+	sudo 1.7.6p2
23	+
24	+	20140916:
25	+	Fix a security issue with TCP SYN.
26	+
27	+	When a segment with the SYN flag for an already existing connection arrives,
28	+	the TCP stack tears down the connection, bypassing a check that the
29	+	sequence number in the segment is in the expected window.
30	+
31	+	20140909:
32	+	Fixed a bug with our clearenv(3) implementation that caused segfaults
33	+	with some programs including Dovecot.
34	+
35	+	OpenSSL security patch:
36	+
37	+	The receipt of a specifically crafted DTLS handshake message may cause OpenSSL
38	+	to consume large amounts of memory. [CVE-2014-3506]
39	+
40	+	The receipt of a specifically crafted DTLS packet could cause OpenSSL to leak
41	+	memory. [CVE-2014-3507]
42	+
43	+	A flaw in OBJ_obj2txt may cause pretty printing functions such as
44	+	X509_name_oneline, X509_name_print_ex et al. to leak some information from
45	+	the stack. [CVE-2014-3508]
46	+
47	+	OpenSSL DTLS clients enabling anonymous (EC)DH ciphersuites are subject to
48	+	a denial of service attack. [CVE-2014-3510]
49	+
50	+	20140902:
51	+	We're now 0.6-CURRENT
52	+
53	+	Update USB quirks to support K70 Corsair keyboard, and several
54	+	other devices.
55	+
56	+	20140827:
57	+	Perl 5.18.2
58	+
59	+	20140728:
60	+	Jails now run shutdown scripts.
61	+
62	+	20140710:
63	+	Fix a vulnerability in the control message API. A buffer is not properly cleared
64	+	before sharing with userland.
65	+
66	+	20140701:
67	+	MKSH R50
68	+
69	+	20140630:
70	+	File 5.19
71	+
72	+	20140605:
73	+	Fix four security issues with OpenSSL
74	+
75	+	20140604:
76	+	Sendmail failed to properly set close-on-exec for open file descriptors.
77	+
78	+	ktrace page fault kernel trace entries were set to an incorrect size which resulted
79	+	in a leak of information.
80	+
81	+	20140430:
82	+	Fix a TCP reassembly bug that could result in a DOS attack
83	+	of the system. It may be possible to obtain portions
84	+	of kernel memory as well.
85	+
86	+	20140411:
87	+	Update zlib to 1.2.7
88	+
89	+	20140122:
90	+	Support for username with length 32. Previous limit was 16
91	+
92	+	20140114:
93	+	Fix two security vulnerabilities.
94	+
95	+	bsnmpd contains a stack overflow when sent certain queries.
96	+
97	+	bind 9.8 when using NSEC3-signed zones zones, will crash with special
98	+	crafted packets.
99	+
100	+	20131228:
101	+	Imported FreeBSD 9.2 usb stack (plus z87 patches from stable)
102	+
103	+	Updated em(4), igb(4) and ixgbe(4)
104	+
105	+	MidnightBSD now works with Z87 Intel chipsets.
106	+
107	+	20131207:
108	+	Remove sparc64 architecture. It hasn't been working for awhile
109	+	and it's not useful for desktops anymore.
110	+
111		20131205:
112		OpenSSH 6.4p1
113
#	Line 1321 | Line 1429 | Contact Warner Losh if you have any questions about yo
1429		this document.
1430
1431		$FreeBSD: src/UPDATING,v 1.416.2.18 2006/02/22 11:51:57 yar Exp $
1432	<	$MidnightBSD: src/UPDATING,v 1.182 2013/09/17 12:54:09 laffer1 Exp $
1432	>	$MidnightBSD$

Comparing trunk/UPDATING (property svn:keywords):
Revision 6466 by laffer1, Fri Dec 6 01:28:09 2013 UTC vs.
Revision 6851 by laffer1, Sat Oct 11 12:28:09 2014 UTC

#	Line 0 | Line 1
1	+	MidnightBSD=%H

Diff Legend

–	Removed lines
+	Added lines
<	Changed lines
>	Changed lines