[ViewVC] Diff of: src/trunk/UPDATING

Comparing trunk/UPDATING (file contents):
Revision 7094 by laffer1, Wed Jul 15 12:11:04 2015 UTC vs.
Revision 9196 by laffer1, Thu Nov 3 11:37:50 2016 UTC

+Updating Information for MidnightBSD users.
-+
+20161103:
-+
+        OpenSSL security patch
-+
-+
+        Due to improper handling of alert packets, OpenSSL would consume an excessive
-+
+        amount of CPU time processing undefined alert messages.
-+
-+
+20161015:
-+
+        libarchive 3.2.1
-+
-+
+        xz 5.2.2
-+
-+
+20161013:
-+
+        Sync ZFS code with Illuminos/FreeBSD 9.2. Added support for
-+
+        feature flags, pool version 5000. This also includes some
-+
+        bug fixes and performance optimizations.
-+
-+
+20160925:
-+
+        Import NetBSD vis(3) and unvis(3) as well as mtree.
-+
-+
+        one-true-awk 20121220
-+
-+
+        inetd now honors kern.ipc.somaxconn value.
-+
-+
+        netmap synced with FreeBSD 9.2
-+
-+
+        linuxolator now has dtrace probes.
-+
-+
+        bsdgrep now correctly handles -m to exclude only one file.
-+
-+
+        UFS file systems can now be resized in read-write mode due to the new
-+
+        write suspension feature.
-+
-+
+        Basic support added for Intel Raid Recover Technology.
-+
-+
+        GMIRROR & GRAID3 now mark volumes clean on shutdown earlier to help with ZFS issues.
-+
-+
+        Highpoint hpt27xx now in GENERIC kernel.
-+
-+
+20160923:
-+
+        Security update for OpenSSL
-+
-+
+        A malicious client can send an excessively large OCSP Status Request extension.
-+
+        If that client continually requests renegotiation, sending a large OCSP Status
-+
+        Request extension each time, then there will be unbounded memory growth on the
-+
+        server. [CVE-2016-6304]
-+
-+
+        An overflow can occur in MDC2_Update() either if called directly or through
-+
+        the EVP_DigestUpdate() function using MDC2. If an attacker is able to supply
-+
+        very large amounts of input data after a previous call to EVP_EncryptUpdate()
-+
+        with a partial block then a length check can overflow resulting in a heap
-+
+        corruption. [CVE-2016-6303]
-+
-+
+        If a server uses SHA512 for TLS session ticket HMAC it is vulnerable to a
-+
+        DoS attack where a malformed ticket will result in an OOB read which will
-+
+        ultimately crash. [CVE-2016-6302]
-+
-+
+        The function BN_bn2dec() does not check the return value of BN_div_word().
-+
+        This can cause an OOB write if an application uses this function with an
-+
+        overly large BIGNUM. This could be a problem if an overly large certificate
-+
+        or CRL is printed out from an untrusted source. TLS is not affected because
-+
+        record limits will reject an oversized certificate before it is parsed.
-+
+        [CVE-2016-2182]
-+
-+
+        The function TS_OBJ_print_bio() misuses OBJ_obj2txt(): the return value is
-+
+        the total length the OID text representation would use and not the amount
-+
+        of data written. This will result in OOB reads when large OIDs are presented.
-+
+        [CVE-2016-2180]
-+
-+
+        Some calculations of limits in OpenSSL have used undefined pointer arithmetic.
-+
+        This could cause problems with some malloc implementations. [CVE-2016-2177]
-+
-+
+        Operations in the DSA signing algorithm should run in constant time in order to
-+
+        avoid side channel attacks. A flaw in the OpenSSL DSA implementation means that
-+
+        a non-constant time codepath is followed for certain operations. [CVE-2016-2178]
-+
-+
+        In a DTLS connection where handshake messages are delivered out-of-order those
-+
+        messages that OpenSSL is not yet ready to process will be buffered for later
-+
+        use. Under certain circumstances, a flaw in the logic means that those messages
-+
+        do not get removed from the buffer even though the handshake has been completed.
-+
+        An attacker could force up to approx. 15 messages to remain in the buffer when
-+
+        they are no longer required. These messages will be cleared when the DTLS
-+
+        connection is closed. The default maximum size for a message is 100k. Therefore
-+
+        the attacker could force an additional 1500k to be consumed per connection.
-+
+        [CVE-2016-2179]
-+
-+
+        A flaw in the DTLS replay attack protection mechanism means that records that
-+
+        arrive for future epochs update the replay protection "window" before the MAC
-+
+        for the record has been validated. This could be exploited by an attacker by
-+
+        sending a record for the next epoch (which does not have to decrypt or have a
-+
+        valid MAC), with a very large sequence number. This means that all subsequent
-+
+        legitimate packets are dropped causing a denial of service for a specific
-+
+        DTLS connection. [CVE-2016-2181]
-+
-+
+        In OpenSSL 1.0.2 and earlier some missing message length checks can result in
-+
+        OOB reads of up to 2 bytes beyond an allocated buffer. There is a theoretical
-+
+        DoS risk but this has not been observed in practice on common platforms.
-+
+        [CVE-2016-6306]
-+
-+
+20160918:
-+
+        With the addition of auditdistd(8), a new auditdistd user is now
-+
+        depended on during installworld.  "mergemaster -p" can be used to add
-+
+        the user prior to installworld.
-+
-+
+        The VFS KBI was changed with the merge of several nullfs
-+
+        optimizations and fixes.  All filesystem modules must be
-+
+        recompiled.
-+
-+
+20160916:
-+
+        The random(4) support for the VIA hardware random number
-+
+        generator (`PADLOCK') is no longer enabled unconditionally.
-+
+        Add the PADLOCK_RNG option in the custom kernel config if
-+
+        needed.  The GENERIC kernels on i386 and amd64 do include the
-+
+        option, so the change only affects the custom kernel
-+
+        configurations.
-+
-+
+        A new version of ZFS (pool version 5000) has been merged.
-+
+        Starting with this version the old system of ZFS pool versioning
-+
+        is superseded by "feature flags". This concept enables forward
-+
+        compatibility against certain future changes in functionality of ZFS
-+
+        pools. The first two read-only compatible "feature flags" for ZFS
-+
+        pools are "com.delphix:async_destroy" and "com.delphix:empty_bpobj".
-+
+        For more information read the new zpool-features(7) manual page.
-+
+        Please refer to the "ZFS notes" section of this file for information
-+
+        on upgrading boot ZFS pools.
-+
-+
+20160906:
-+
+        Add support for the MosChip MCS9904 four serial ports
-+
+        controller.
-+
-+
+        Add support for walltimestamp in DTrace.
-+
-+
+        Various gdb improvments.
-+
-+
+        ZFS
-+
+        Import the zio nop-write improvement from Illumos. To reduce I/O,
-+
+        nop-write omits overwriting data if the checksum (cryptographically
-+
+        secure) of new data matches the checksum of existing data.
-+
+        It also saves space if snapshots are in use.
-+
-+
+        It currently works only on datasets with enabled compression, disabled
-+
+        deduplication and sha256 checksums.
-+
-+
+        Add loader(8) tunable to enable/disable nopwrite functionality:
-+
+        vfs.zfs.nopwrite_enabled
-+
-+
+        Introduce a new dataset aclmode setting "restricted" to protect ACL's
-+
+        being destroyed or corrupted by a drive-by chmod.
-+
-+
+        New loader-only tunables:
-+
+        vfs.zfs.sync_pass_deferred_free
-+
+        vfs.zfs.sync_pass_dont_compress
-+
+        vfs.zfs.sync_pass_rewrite
-+
-+
+        chkgrp(8) add support for q flag
-+
-+
+        Fix problem with the Samsung 840 PRO series SSD detection.
-+
+        The device reports support for SATA Asynchronous Notification in its
-+
+        IDENTIFY data, but returns error on attempt to enable that feature.
-+
+        Make SATA XPT of CAM only report these errors, but not fail the device.
-+
-+
+20160905:
-+
+        Add a resource limit for the total number of kqueues
-+
+        available to the user. Kqueue now saves the ucred of the
-+
+        allocating thread, to correctly decrement the counter on close.
-+
+        Based on FreeBSD SVN 256849
-+
-+
+        Import netcat from OpenBSD 5.2
-+
-+
+20160904:
-+
+        Introduced experimental TCP sysctls starting with
-+
+        net.inet.tcp.experimental.initcwnd10
-+
-+
+20160814:
-+
+        switched default desktop port to midnightbsd-desktop. This gives us flexibility to change it
-+
+        in the release after the fact.
-+
-+
+        tzdata 2016a
-+
-+
+20160811:
-+
+        libdispatch 210
-+
-+
+        Added quirks for several models of SSDs to enable advanced format/4k mode. List includes
-+
+        Samsung 830, 840, 850 and 750 series, Intel x25 and a few Toshiba models. Also
-+
+        added WD Red drives.
-+
-+
+        Updated list of pci device vendors.
-+
-+
+        Updated list of usb devices.
-+
-+
+20160807:
-+
+        Implement several changes to libmport to fix some memory corruption issues.
-+
-+
+20160806:
-+
+        sqlite3 3.13.0
-+
-+
+20160805:
-+
+        Merged fixes for libmport that improve error handling when installing packages. Also
-+
+        support mkdir -p like behavior for plist entries.
-+
-+
+20160531:
-+
+        Fix four security issues with MidnightBSD.
-+
-+
+        The implementation of TIOCGSERIAL ioctl(2) does not clear the output
-+
+        struct before sending to userland in the linux emulation layer.
-+
-+
+        The compat 43 stat(2) system call exposes kernel stack to userland.
-+
-+
+        libarchive - CVE-2015-2304 and CVE-2013-0211 fix issues with
-+
+        cpio directory traversal and an integer signedness error in the archive
-+
+        write zip data routine.
-+
-+
-+
+20160528:
-+
+        Fixed minor issues with mined(1) and msearch(1).
-+
-+
+20160526:
-+
+        Add support for Ivybridge and Haswell Intel CPUs to hwpmc(4).
-+
-+
+        Fix libpmc(3) build with clang compiler.
-+
-+
+20160519:
-+
+        Kernel Security updates
-+
-+
+        atkbd(4) - Incorrect signedness comparison in the ioctl(2) handler allows a malicious
-+
+        local user to overwrite a portion of the kernel memory.
-+
-+
+        Incorrect argument handling in sendmsg(2)
-+
-+
+        Incorrect argument handling in the socket code allows malicious local
-+
+        user to overwrite large portion of the kernel memory.
-+
-+
+20160505:
-+
+        OpenSSL security patch
-+
-+
+        The padding check in AES-NI CBC MAC was rewritten to be in constant time
-+
+        by making sure that always the same bytes are read and compared against
-+
+        either the MAC or padding bytes. But it no longer checked that there was
-+
+        enough data to have both the MAC and padding bytes. [CVE-2016-2107]
-+
-+
+        An overflow can occur in the EVP_EncodeUpdate() function which is used for
-+
+        Base64 encoding of binary data. [CVE-2016-2105]
-+
-+
+        An overflow can occur in the EVP_EncryptUpdate() function, however it is
-+
+        believed that there can be no overflows in internal code due to this problem.
-+
+        [CVE-2016-2106]
-+
-+
+        When ASN.1 data is read from a BIO using functions such as d2i_CMS_bio()
-+
+        a short invalid encoding can casuse allocation of large amounts of memory
-+
+        potentially consuming excessive resources or exhausting memory.
-+
+        [CVE-2016-2109]
-+
-+
+20160412:
-+
+.8 stable branch created. Continue development as 0.9.
-+
-+
+        Fix several issues with wait6 system call addition.
-+
-+
+20160409:
-+
+        libmport now supports two new plist formats:
-+
+        @(root,wheel,4775) myfile
-+
+        @dir(root,wheel,775) mydir
-+
-+
+        On delete, absoluate paths are now handled properly.
-+
-+
+20160317:
-+
+        OpenSSH doesn't have the luck of the Irish.
-+
-+
+        Fix a security issue with OpenSSH X11 forwarding that can allow an attacker
-+
+        run shell commands on the call to xauth.
-+
-+
+        Incorrect argument validation in sysarch(2)
-+
-+
+        A special combination of sysarch(2) arguments, specify a request to
-+
+        uninstall a set of descriptors from the LDT.  The start descriptor
-+
+        is cleared and the number of descriptors are provided.  Due to invalid
-+
+        use of a signed intermediate value in the bounds checking during argument
-+
+        validity verification, unbound zero'ing of the process LDT and adjacent
-+
+        memory can be initiated from usermode.
-+
-+
+        Patch obtained from FreeBSD.
-+
-+
+20160229:
-+
+        top now displays information on ZFS arc cache.
-+
-+
+20160228:
-+
+        llvm + clang 3.3 is now the default compiler in MidnightBSD.
-+
-+
+20160222:
-+
+        Introduce pipe2 to linux emulation layer.
-+
-+
+20160114:
-+
+        OpenSSL
-+
-+
+        The signature verification routines will crash with a NULL pointer dereference
-+
+        if presented with an ASN.1 signature using the RSA PSS algorithm and absent
-+
+        mask generation function parameter. [CVE-2015-3194]
-+
-+
+        When presented with a malformed X509_ATTRIBUTE structure, OpenSSL will leak
-+
+        memory. [CVE-2015-3195]
-+
-+
+        If PSK identity hints are received by a multi-threaded client then the values
-+
+        are incorrectly updated in the parent SSL_CTX structure.  [CVE-2015-3196]
-+
-+
+        Fix security on bsnmpd configuration file during installation.
-+
-+
+        TCP MD5 signature denial of service
-+
-+
+        A programming error in processing a TCP connection with both TCP_MD5SIG
-+
+        and TCP_NOOPT socket options may lead to kernel crash.
-+
-+
+        SCTP
-+
-+
+        A lack of proper input checks in the ICMPv6 processing in the SCTP stack
-+
+        can lead to either a failed kernel assertion or to a NULL pointer
-+
+        dereference.  In either case, a kernel panic will follow.
-+
-+
+20160102:
-+
+        Happy New Year
-+
-+
+20151101:
-+
+        Increase kern.ipc.somaxconn default to 256.
-+
-+
+20151017:
-+
+        Add initial statistics api to libmport and a driver to print
-+
+        it in mport(1).
-+
-+
+20151002:
-+
+        Revised rpcbind(8) patch to fix issues with NIS
-+
-+
+20150930:
-+
+        In rpcbind(8), netbuf structures are copied directly, which would result in
-+
+        two netbuf structures that reference to one shared address buffer.  When one
-+
+        of the two netbuf structures is freed, access to the other netbuf structure
-+
+        would result in an undefined result that may crash the rpcbind(8) daemon.
-+
-+
+20150926:
-+
+        libmport now supports @preexec, @postexec, @preunexec and @postunexec
-+
+        to replace @exec and @unexec.
-+
-+
+        pre exec runs afer pre-install scripts but before actual installation
-+
-+
+        post exec runs after install but before post install scripts and
-+
+        pkg message.
-+
-+
+        pre unexec runs before pre uninstall scripts
-+
-+
+        post unexec runs before de-install scripts and after file removal.
-+
-+
+20150917:
-+
+        Fix kqueue write events for files > 2GB
-+
-+
+20150825:
-+
+        kernel:
-+
+        fix a security issue on amd64 where the GS segment CPU register can be changed via
-+
+        userland value in kernel mode by using an IRET with #SS or #NP exceptions.
-+
-+
+        openssh:
-+
+        A programming error in the privileged monitor process of the sshd(8)
-+
+        service may allow the username of an already-authenticated user to be
-+
+        overwritten by the unprivileged child process.
-+
-+
+        A use-after-free error in the privileged monitor process of he sshd(8)
-+
+        service may be deterministically triggered by the actions of a
-+
+        compromised unprivileged child process.
-+
-+
+        A use-after-free error in the session multiplexing code in the sshd(8)
-+
+        service may result in unintended termination of the connection.
-+
-+
+20150818:
-+
+        expat security fix
-+
-+
+20150815:
-+
+        libc changes:
-+
+        setmode(3) now returns errno consistently on error.
-+
+        libc will compile without error using clang
-+
-+
+20150814:
-+
+        wait6 system call added.
-+
-+
+        date(1) now handles non numeric numbers passed to -r
-+
+        like GNU coreutils for improved compatibility.
-+
-+
+20150811:
-+
+        ata(4) AMD Hudson2 SATA controller support.
-+
+        Intel lynxpoint SATA.
-+
-+
+        Fix some const warnings when building several device drivers
-+
+        with llvm/clang.
-+
-+
+        Sync cas(4) with FreeBSD 9-stable.
-+
-+
+        Fix some minor issues with ath(4).
-+
-+
+20150809:
-+
+        xz 5.0.8
-+
-+
+20150808:
-+
+        libmport now logs installation and removal of packages to syslog.
-+
-+
+20150805:
-+
+        routed - fix a potential security issue where traffic from outside
-+
+        the network can disrupt routing.
-+
-+
+        bsd patch - fix a bug with ed(1) scripts allowing unsanitized input
-+
+        to run.
-+
-+
+20150802:
-+
+        jansson 2.7 library added. (libjansson is a JSON library in C)
-+
-+
+20150728:
-+
+        Heimdal 1.5.2 (kerberos implementation)
-+
-+
+        OpenSSL 1.0.1o
-+
-+
+        cpucontrol(8) now supports VIA CPUs. Synced with FreeBSD 9.2.
-+
-+
+        TCP Resassemly resource exhaustion bug:
-+
+        There is a mistake with the introduction of VNET, which converted the
-+
+        global limit on the number of segments that could belong to reassembly
-+
+        queues into a per-VNET limit.  Because mbufs are allocated from a
-+
+        global pool, in the presence of a sufficient number of VNETs, the
-+
+        total number of mbufs attached to reassembly queues can grow to the
-+
+        total number of mbufs in the system, at which point all network
-+
+        traffic would cease.
-+
+        Obtained from: FreeBSD 8
-+
-+
+        OpenSSH
-+
-+
+        Fix two security vulnerabilities:
-+
+        OpenSSH clients does not correctly verify DNS SSHFP records when a server
-+
+        offers a certificate. [CVE-2014-2653]
-+
-+
+        OpenSSH servers which are configured to allow password authentication
-+
+        using PAM (default) would allow many password attempts. A bug allows
-+
+        MaxAuthTries to be bypassed. [CVE-2015-5600]
-+
-+
-+
+        Switch to bsdpatch (from FreeBSD & OpenBSD)
-+
-+
+20150726:
-+
+        BSD Sort updated
-+
-+
+        sqlite 3.8.10.2
-+
-+
+20150725:
-+
+        Import reallocarray from OpenBSD's libc.
-+
-+
+        The reallocarray() function is similar to realloc() except it operates on
-+
+        nmemb members of size size and checks for integer overflow in the
-+
+        calculation nmemb * size.
-+
-+
+20150722:
-+
+        Fix a bug where TCP connections transitioning to LAST_ACK
-+
+        state can get stuck. This can result in a denial of service.
-+
+20150715:
+        libmport now supports @shell and @sample in plists. This means that
+        a shell port can automatically add an entry to /etc/shells and remove

Diff Legend

-–
+Removed lines
-+
+Added lines
-<
+Changed lines
->
+Changed lines

Comparing trunk/UPDATING (file contents): Revision 7094 by laffer1, Wed Jul 15 12:11:04 2015 UTC vs. Revision 9196 by laffer1, Thu Nov 3 11:37:50 2016 UTC

Diff Legend

Comparing trunk/UPDATING (file contents):
Revision 7094 by laffer1, Wed Jul 15 12:11:04 2015 UTC vs.
Revision 9196 by laffer1, Thu Nov 3 11:37:50 2016 UTC