ViewVC Help
View File | Revision Log | Show Annotations | Download File | View Changeset | Root Listing
root/src/trunk/UPDATING
(Generate patch)

Comparing trunk/UPDATING (file contents):
Revision 1598 by laffer1, Fri May 16 22:38:32 2008 UTC vs.
Revision 6862 by laffer1, Sat Oct 11 16:23:48 2014 UTC

# Line 1 | Line 1
1 < Updating Information for MidnightBSD users
1 > Updating Information for MidnightBSD users.
2  
3 < Items affecting the mports and packages system can be found in
4 < /usr/mports/UPDATING.
3 > 20141011:
4 >        mksh R50d - fix field splitting regression and null
5 >        pointer dereference
6  
7 +        xz 5.0.7
8 +
9 + 20141004:
10 +        mksh R50c - security update for environment var bug with
11 +        foo vs foo+    
12 +
13 + 20141002:
14 +        sqlite 3.8.6
15 +
16 +        sudo 1.7.8 - some issues with the current version, but we're slowly
17 +        getting up to date.
18 +
19 + 20141001:
20 +        mksh R50b
21 +
22 +        libmport now supports plist commands @dir, @owner, @group, @mode.
23 +
24 +        sudo 1.7.6p2
25 +
26 + 20140916:
27 +        Fix a security issue with TCP SYN.
28 +
29 +        When a segment with the SYN flag for an already existing connection arrives,
30 +        the TCP stack tears down the connection, bypassing a check that the
31 +        sequence number in the segment is in the expected window.
32 +
33 + 20140909:
34 +        Fixed a bug with our clearenv(3) implementation that caused segfaults
35 +        with some programs including Dovecot.
36 +
37 +        OpenSSL security patch:
38 +
39 +        The receipt of a specifically crafted DTLS handshake message may cause OpenSSL
40 +        to consume large amounts of memory. [CVE-2014-3506]
41 +
42 +        The receipt of a specifically crafted DTLS packet could cause OpenSSL to leak
43 +        memory. [CVE-2014-3507]
44 +
45 +        A flaw in OBJ_obj2txt may cause pretty printing functions such as
46 +        X509_name_oneline, X509_name_print_ex et al. to leak some information from
47 +        the stack. [CVE-2014-3508]
48 +
49 +        OpenSSL DTLS clients enabling anonymous (EC)DH ciphersuites are subject to
50 +        a denial of service attack. [CVE-2014-3510]
51 +
52 + 20140902:
53 +        We're now 0.6-CURRENT
54 +
55 +        Update USB quirks to support K70 Corsair keyboard, and several
56 +        other devices.
57 +
58 + 20140827:
59 +        Perl 5.18.2
60 +
61 + 20140728:
62 +        Jails now run shutdown scripts.
63 +
64 + 20140710:
65 +        Fix a vulnerability in the control message API. A buffer is not properly cleared
66 +        before sharing with userland.
67 +
68 + 20140701:
69 +        MKSH R50
70 +
71 + 20140630:
72 +        File 5.19
73 +
74 + 20140605:
75 +        Fix four security issues with OpenSSL
76 +
77 + 20140604:
78 +        Sendmail failed to properly set close-on-exec for open file descriptors.
79 +
80 +        ktrace page fault kernel trace entries were set to an incorrect size which resulted
81 +        in a leak of information.
82 +
83 + 20140430:
84 +        Fix a TCP reassembly bug that could result in a DOS attack
85 +        of the system. It may be possible to obtain portions
86 +        of kernel memory as well.
87 +
88 + 20140411:
89 +        Update zlib to 1.2.7
90 +
91 + 20140122:
92 +        Support for username with length 32. Previous limit was 16
93 +
94 + 20140114:
95 +        Fix two security vulnerabilities.
96 +
97 +        bsnmpd contains a stack overflow when sent certain queries.
98 +
99 +        bind 9.8 when using NSEC3-signed zones zones, will crash with special
100 +        crafted packets.
101 +
102 + 20131228:
103 +        Imported FreeBSD 9.2 usb stack (plus z87 patches from stable)
104 +
105 +        Updated em(4), igb(4) and ixgbe(4)
106 +
107 +        MidnightBSD now works with Z87 Intel chipsets.
108 +
109 + 20131207:
110 +        Remove sparc64 architecture. It hasn't been working for awhile
111 +        and it's not useful for desktops anymore.
112 +
113 + 20131205:
114 +        OpenSSH 6.4p1
115 +
116 + 20131203:
117 +        Perl 5.18.1 imported.
118 +
119 +        Update less to v458
120 +
121 + 20131130:
122 +        Remove named from base. We still include the client utilities for
123 +        now until replacements can be found.
124 +
125 + 20131004:
126 +        rarpd supports vlan(4) and has a pid flag. (from FreeBSD)
127 +
128 + 20130917:
129 +        Support for 65,536 routing tables was added.  A new fib specific
130 +        field has been added to mbuf.  This is an increase from 16.
131 +
132 + 20130910:
133 +        Security updates: (kern.osreldate 5001)
134 +
135 +        nullfs(5)
136 +
137 +        The nullfs(5) implementation of the VOP_LINK(9) VFS operation does not
138 +        check whether the source and target of the link are both in the same
139 +        nullfs instance.  It is therefore possible to create a hardlink from a
140 +        location in one nullfs instance to a file in another, as long as the
141 +        underlying (source) filesystem is the same.
142 +
143 +        ifioctl
144 +
145 +        As is commonly the case, the IPv6 and ATM network layer ioctl request
146 +        handlers are written in such a way that an unrecognized request is
147 +        passed on unmodified to the link layer, which will either handle it or
148 +        return an error code.
149 +
150 +        Network interface drivers, however, assume that the SIOCSIFADDR,
151 +        SIOCSIFBRDADDR, SIOCSIFDSTADDR and SIOCSIFNETMASK requests have been
152 +        handled at the network layer, and therefore do not perform input
153 +        validation or verify the caller's credentials.  Typical link-layer
154 +        actions for these requests may include marking the interface as "up"
155 +        and resetting the underlying hardware.
156 +
157 + 20130824:
158 +        Fix a bug in sendmail 8.14.7 that interferes with how it
159 +        handles AAAA records interoperating with Microsoft DNS servers.
160 +        FreeBSD has already reported this to Sendmail and a fix
161 +        will be included in the next release.
162 +
163 +        Subversion 1.8.1 is now in the base system as a static
164 +        binary.  It has limited functionality, but can be used to
165 +        checkout/commit code.  It is named svnlite.
166 +
167 + 20130822:
168 +        Fix two security vulnerabilities.
169 +
170 +        Fix an integer overflow in IP_MSFILTER (IP MULTICAST).
171 +        This could be exploited to read memory by a user process.
172 +
173 +        When initializing the SCTP state cookie being sent in INIT-ACK chunks,
174 +        a buffer allocated from the kernel stack is not completely initialized.
175 +
176 +        Import xz 5.0.4
177 +
178 +        Import sqlite 3.7.17
179 +
180 +        Import BIND 9.8.5-P2
181 +
182 + 20130814:
183 +        mksh R48 imported.
184 +
185 +        Sendmail 8.14.7 imported.
186 +
187 + 20130717:
188 +        libmport bug was fixed causing hash verification to fail.
189 +
190 +        virtio(4) imported from FreeBSD 9-stable. SCSI support not
191 +        included.
192 +
193 + 20130612:
194 +        RELENG_0_4 created for 0.4. Development continues on 0.5.
195 +
196 + 20130402:
197 +        Update BIND and OpenSSL to resolve security advisories.
198 +
199 + 20130305:
200 +        MKSH R44 imported.
201 +
202 + 20130213:
203 +        MKSH R42b imported
204 +
205 + 20130211:
206 +        MKSH R42 imported
207 +
208 + 20130125:
209 +        MKSH R41 imported
210 +
211 + 20130122:
212 +        OpenSSH 5.8p2 imported
213 +
214 +        SQLite 3.7.15.2 imported
215 +
216 +        Fixed a longstanding bug in libmport extrating new index files.
217 +
218 + 20120710:
219 +        BSD licensed sort imported from FreeBSD-CURRENT
220 +
221 +        For now, GNU sort is installed as gnusort, but it will
222 +        go away in time.
223 +
224 + 20120708:
225 +        tcsh 6.18.01 imported.
226 +
227 +        NetBSD's iconv imported.
228 +
229 +        libc gains strnlen(3), memrchr(3), stpncpy(3).
230 +
231 + 20120612:
232 +        BIND security update related to CVE-2012-1667.
233 +
234 +        Zero length resource records can cause BIND to crash resulting
235 +        in a DOS attack or information disclosure.
236 +
237 + 20120407:
238 +        mksh R40f (fixes regression)
239 +
240 + 20120328:
241 +        mksh R40e
242 +
243 +        Perl 5.14.2
244 +
245 + 20120229:
246 +        cpucontrol(8) and cpuctl(4) added from FreeBSD 7-stable.
247 +
248 + 20120209:
249 +        mDNSResponder 333.10 imported
250 +
251 + 20111227:
252 +        import raid5 module for GEOM, graid5(8)
253 +
254 +        This is experimental and known to use a lot of kernel
255 +        memory.
256 +
257 + 20111223:
258 +        telnetd: fix a root exploit from a fixed buffer that was not checked
259 +
260 +        pam: don't allow escape from policy path.  Exploitable in KDE, etc.
261 +
262 +        Fix pam_ssh module:
263 +
264 +        If the pam_ssh module is enabled, attackers may be able to gain access
265 +        to user accounts which have unencrypted SSH private keys.
266 +
267 +        This has to due with the way that openssl works.  It ignores unencrpted data.
268 +
269 +        Fix security issue with chroot and ftpd.
270 +
271 +        nsdispatch(3) doesn't know it's working in a chroot and some
272 +        operations can cause files to get reloaded causing a security
273 +        hole in things like ftpd.
274 +
275 + 20111217:
276 +        libdialog/dialog upgraded to an lgpl version. As it's not
277 +        backwardly compatable, include the old libdialog as libodialog
278 +
279 + 20111212:
280 +        mksh r40d imported
281 +
282 + 20111210:
283 +        re(4) and rl(4) updated to support new chips.
284 +
285 +        GEOM synced with FreeBSD 7-stable.
286 +
287 +        MidnightBSD GPT partition types created in sys/gpt.h and
288 +        setup in boot loader and GEOM.
289 +
290 +        amdsbwd(4) (amd watchdog for south bridge) updated to support
291 +        8xx series chipset.
292 +
293 + 20111207:
294 +        import bsd grep from FreeBSD/OpenBSD.
295 +
296 +        MK_BSD_GREP controls which grep is installed
297 +        as grep with the other as bsdgrep or gnugrep.
298 +
299 + 20111122:
300 +        mksh vR40c imported.
301 +
302 + 20111117:
303 +        BIND 9.6 ESV R5 P1
304 +
305 + 20111107:
306 +        tzdata 2011n
307 +
308 + 20111026:
309 +        mDNSResponder v320
310 +
311 +        BIND 9.6 ESV R5
312 +
313 + 20111022:
314 +        cflow 0.0.6 imported
315 +
316 + 20111020:
317 +        less v436 imported
318 +
319 +        amdsbwd(4) AMD southbridge watchdog
320 +
321 + 20111019:
322 +        awk 20110810 imported
323 +
324 +        et(4) Agere Gigabit Ethernet/Fast Ethernet driver added, but
325 +        not included in GENERIC kernel.  The kernel module needs
326 +        testing before we can include it in GENERIC.
327 +
328 +        intr_bind code ported to allow an IRQ to be bound to one
329 +        specific CPU core.
330 +
331 + 20111017:
332 +        Time Zone Data v. 2011l (Released 10 October 2011)
333 +
334 +        Updated list of countries (iso3166) to work with new timezone data.
335 +
336 + 20111015:
337 +        Introduce CPU Affinity in MidnightBSD. cpuset(1) can be used
338 +        to control which core or group of cores can be used for a given
339 +        process. Several new system calls were added to support this
340 +        functionality in the running kernel and for 32bit binary
341 +        compatibility on amd64.
342 +
343 +        The scheduler default has been changed to ULE in i386 and
344 +        amd64.  Changes were made to both schedulers (4BSD AND ULE)
345 +        for this feature.
346 +
347 +        This work is based on Jeff Roberson's FreeBSD 7.1 patches.
348 +
349 + 20111004:
350 +        Fix a problem with unix socket handling caused by the recent
351 +        patch to unix socket path handling. This allows network
352 +        apps to work under the linuxolator again.
353 +
354 + 20111001:
355 +        Import libfetch & fetch(1) from FreeBSD 9. Passive FTP is
356 +        now default and an environment variable must be set to use
357 +        active.
358 +
359 + 20110930:
360 +        Introduce quirks handling for several umass devices including
361 +        USB cameras.  Add workaround for Cyberpower UPS devices.
362 +
363 +        Bring in further bug fixes from FreeBSD and NetBSD for alc(4).
364 +        Stale ip/tcp header pointers are no longer used, lockups fixed
365 +        when network cable is unplugged on bootup, enable TX checksum
366 +        offloading.
367 +
368 +        Add a new man page for gcache(8), a useful geom class when
369 +        working with large raid3 sets.
370 +
371 +        Restore previous workaround for Cypress pata storage controller.
372 +
373 + 20110929:
374 +        Sync ath(4) with FreeBSD 7.3.
375 +
376 +        The following modules are no longer available, and should be
377 +        removed from loader.conf:
378 +        ath_hal ath_rate_amrr ath_rate_onoe ath_rate_sample
379 +
380 +        alc(4) would hibernate when a cable was unplugged and often
381 +        required bring the interface down and up to "wake up" so that
382 +        a connection could be established.  Disable hibernation.
383 +
384 + 20110928:
385 +        Fix security issues with gzip and compress related to .Z
386 +        files that are corrupted.
387 +
388 +        Fix path validation with unix domain sockets.
389 +
390 + 20110917:
391 +        Remove dependance on mports perl for generating releases as
392 +        it's in the base system.
393 +
394 + 20110914:
395 +        Import xz 5.0.3 with liblzma 5.0.3
396 +
397 + 20110813:
398 +        synced the sparc64 GENERIC kernel configuration with amd64.
399 +
400 + 20110806:
401 +        sqlite 3.7.7.1 imported
402 +
403 +        msearch(1), libmsearch and msearch.import added.  msearch(1) provides
404 +        a full text search command line tool.  libmsearch can also be used
405 +        to build a graphical based search in the future. You can enable
406 +        index building for msearch in periodic.conf or manually run the
407 +        /usr/libexec/msearch.index tool.  Full text indexes take considerable
408 +        space in /var.  I'm using approximately 500MB currently.
409 +
410 +        Fix a long standing bug with the periodic script to check package
411 +        versions.  This will be obsolete with mport though.
412 +
413 + 20110710:
414 +        kdb_enter_why added to MidnightBSD to allow the kernel debugger to
415 +        know why it's in use and thus script can be run.
416 +
417 +        Yet another problem with the perl manifest was fixed
418 +
419 + 20110709:
420 +        cpufreq(1) is a new utility to monitor CPU frequency which may change
421 +        with use of powerd(8) and cpufreq(4).
422 +
423 + 20110612:
424 +        Update mksh to R40
425 +
426 +        Catch up ObsoleteFiles.inc to remove Perl 5.10.x.  Good to run when
427 +        updating current (cd /usr/src && make check-old)
428 +
429 + 20110528:
430 +        Fix CVE-2011-1910 in BIND 9.6.x.  This affects caching resolvers.
431 +
432 + 20110526:
433 +        newfs:
434 +        Raised the default blocksize for UFS/FFS filesystems from
435 +        16K to 32K and the default fragment size from 2K to 4K.
436 +
437 +        This should slightly imporve performance on "advanced format"
438 +        hard drives such as the WD EARS drives. Drives of this type
439 +        have emulation modes that slow down with lower sizes.  Of course
440 +        the drive must still be aligned properly when using fdisk.
441 +
442 + 20110521:
443 +        mport tool now has a deleteall command.  This can be used to remove
444 +        all packages from a system.
445 +
446 +        A few bugs with the perl 5.14 import have been fixed.
447 +
448 + 20110518:
449 +        Perl 5.14.0
450 +
451 + 20110517:
452 +        Sendmail 8.14.5
453 +
454 + 20110314:
455 +        DRM/DRI code updated to support newer video cards. (FreeBSD 7.1)
456 +
457 +        cdevpriv wrappers added
458 +
459 +        nss_mdns hack introduced to work around linking problem.
460 +
461 +        dnsextd fixed after update to mDNSResponder code.
462 +
463 + 20110308:
464 +        Introduce liblzma & xz 5.0.1 to the base system
465 +
466 +        Patch for OpenSSL security issue CVE-2011-0014.
467 +
468 +        "OSREVISION 4004"
469 +
470 +        nsswitch module for multicast dns (nss_mdns) added.
471 +
472 +        tzdata2011c
473 +
474 + 20110220:
475 +        cam(4) syncronized with FreeBSD 7.3.
476 +
477 + 20110219:
478 +        amdtemp(4) updated to support sensors framework.
479 +
480 + 20110217:
481 +        Perl 5.10.1 imported
482 +
483 + 20110216:
484 +        Introduce igb(4) and split Intel Gigabit Ethernet adapters between
485 +        igb(4) and em(4).  Newer devices use igb(4).  The code has moved
486 +        to sys/dev/e1000 for both devices in the kernel. igb(4) has
487 +        been placed in GENERIC on i386 and amd64.
488 +
489 +        Update bfe(4) to support newer devices and WOL.
490 +
491 + 20110215:
492 +        age(4) added.
493 +
494 + 20110208:
495 +        BIND 9.6.3 which fixes a bug with DNSSEC records getting added.
496 +
497 + 20110206:
498 +        eeemon(4) added to monitor Asus Eee PC.
499 +
500 + 20110205:
501 +        OpenSSH 5.7p1
502 +
503 +        GNU sort 6.9 (coreutils)
504 +
505 + 20110203:
506 +        one true awk 20100523 imported
507 +
508 +        sqlite 3.7.5
509 +
510 +        OpenSSL 0.9.8q
511 +
512 + 20110202:
513 +        tcsh 6.17.00
514 +
515 +        file 5.05
516 +
517 + 20110122:
518 +        Import it(4) and lm(4), with support for Super I/O hardware monitors. This
519 +        uses the sensors framework ported by Constantine A. Murenin (GSOC2007)
520 +
521 + 20110120:
522 +        BIND 9.6.2-P3
523 +
524 +        sudo 1.7.4-p6
525 +
526 + 20110115:
527 +        Add experimental jme(4) for Jmicron ethernet devices.
528 +
529 + 20101130:
530 +        A double free exists in the SSL client ECDH handling code, when
531 +        processing specially crafted public keys with invalid prime
532 +        numbers. [CVE-2010-2939]
533 +
534 + 20101120:
535 +        Several portions of the kernel and userland code related to UFS file
536 +        systems (and UFS2) cannot properly handle inode counts above 2^31 due
537 +        to use of int types.  Based on a patch from FreeBSD, I've modified
538 +        our UFS2 implementation to handle unsigned values for inode counts
539 +        which should allow for file systems greater than 16TB.
540 +
541 +        newfs and growfs was also modified.
542 +
543 + 20101110:
544 +        Fix a security issue with pseudofs which could result in running code in kernel
545 +        context or a kernel panic depending on system configuration.  This affects file
546 +        systems such as procfs for instance.
547 +
548 + 20101021:
549 +        sysrc is a utility to print and modify name/value pairs in /etc/rc.conf easily.
550 +        This is similar to functions present in many linux distros. The utility was
551 +        written by Devin Teske for FreeBSD.
552 +
553 + 20100920:
554 +        bzip2 security patch for integer overflow.
555 +
556 + 20100905:
557 +        MidnightBSD RELENG_0_3 branch created.  Aggressive development continues here
558 +        for 0.4.
559 +
560 + 20100902:
561 +        Fix a security issue with libutil that allows users to bypass cpu limits in
562 +        login.conf in some cases.  This combined with OpenSSH for example can allow
563 +        the user to get more resources than they're allowed.
564 +
565 + 20100822:
566 +        Import Apple's mDNSResponder (mdnsd).
567 +
568 + 20100814:
569 +        libdispatch added to MidnightBSD.  This provides functionality found in
570 +        Mac OS X's GCD.  We do not have blocks support yet.  As this code is
571 +        licensed under Apache 2, we create a new MK_APACHE option so that
572 +        it's not required for all users to run code under a license they
573 +        may not like.
574 +
575 + 20100713:
576 +        mbuf readonly fix related to sendfile(2) data corruption.
577 +
578 + 20100704:
579 +        brainfuck(1) imported from MirBSD.
580 +
581 + 20100505:
582 +        zlib 1.2.5
583 +
584 + 20100430:
585 +        Sudo 1.7.2p6 imported
586 +
587 + 20100321:
588 +        Update zlib to 1.2.4
589 +
590 + 20100319:
591 +        Removed i586 from default i386 generic kernel.
592 +
593 + 20100317:
594 +        Update to tzdata2010e (time zones).  This includes changes in
595 +        Mexico.
596 +
597 +        Add support for several newer sound cards via hda including
598 +        ATI and Realtek chipsets.
599 +
600 + 20100313:
601 +        CPU detection has been changed.  VIA Padlock detection added.
602 +
603 + 20100312:
604 +        Fix a number of bugs and compiler warnings in libmport. Handle
605 +        plus signs in paths for mport.check-fake
606 +
607 + 20100311:
608 +        mksh R39c
609 +
610 + 20100309:
611 +        Sudo 1.7.2p5
612 +
613 +        sqlite3 3.6.23
614 +
615 +        mksh R39b
616 +
617 +        libffi (ffi) 3.0.9
618 +
619 + 20100206:
620 +        WITHOUT_LIB32 is no longer needed on AMD64.  GCC was fixed to
621 +        properly pass arguments to ld.
622 +
623 +        re(4) and rl(4) have been updated to support several new
624 +        realtek chipsets.  Performance has been improved on re(4).
625 +
626 + 20100204:
627 +        Fix a bug cropping up on AMD64 MidnightBSD with sftp
628 +        segfaulting.  
629 +
630 + 20100116:
631 +        Import ash changes from FreeBSD (bin/sh) 8-Stable.
632 +
633 +        BIND 9.6.1-P2
634 +
635 + 20100110:
636 +        Import Sendmail 8.14.4. Fix for SSL vulnerability.
637 +
638 +        posix_spawn(3) added to MidnightBSD libc.  Users may need to build and
639 +        install libc before doing a full buildworld when upating from 0.2 or
640 +        older current systems.
641 +
642 +        kqueue(2) was modified to support portions of libdispatch functionality.
643 +
644 + 20100106:
645 +        Bind security update.  Fix a bug with DNSSEC that causes negative
646 +        cache entries and thus a possible DNS cache poisoning attack.
647 +
648 +        Fix a bug in ZFS that can reset permissions on system crashes.
649 +
650 + 20091228:
651 +        amdtemp(4) was added.  It allows one to monitor to the temperature
652 +        of an AMD CPU such as a Phenom.
653 +
654 + 20091205:
655 +        OpenSSL security fix
656 +
657 +        The SSL version 3 and TLS protocols support session renegotiation without
658 +        cryptographically tying the new session parameters to the old parameters.
659 +
660 + 20091128:
661 +        OpenBSD sensors framework imported including sensorsd(8)
662 +
663 + 20091126:
664 +        OpenNTPD 4.4 import
665 +
666 +        Update OpenSSH to 5.3p1
667 +
668 +        mksh R39
669 +
670 + 20091124:
671 +        cpdup updated from DragonFly to 1.15
672 +
673 +        tzdata2009s updated with latest timezone data for November 2009.
674 +
675 + 20091010:
676 +        amd64 users should use WITHOUT_LIB32=yes in /etc/make.conf for now
677 +        to test current.
678 +
679 +        Revert unicode filename fixes from ntfs code.  This was causing chaos
680 +        on amd64 systems.
681 +
682 + 20091006:
683 +        Update timezone data with tzdata2009n with the Pakistan and
684 +        Argentina changes.
685 +
686 +        Sync several userland utilities with versions from FreeBSD 7.0 in
687 +        sbin and usr.sbin.
688 +
689 + 20090919:
690 +        Update timezone data with tzdate2009m from September 2009.
691 +
692 + 20090729:
693 +        Patch for Bind 9 security vulnerability. a dynmaic update packet
694 +        can trigger an assertion and cause named to exit
695 +
696 + 20090606:
697 +        Remove PCC from the base system.  This compiler will not work
698 +        as a system compiler for us as we've got some userland investment
699 +        in C++ code and may have Objective-C in the future.  We're stuck
700 +        with a solution that supports these three languages at a minimum.
701 +
702 +        I had wanted to keep it as an optional compiler because it is
703 +        fast, however too many users want to try to use it for the base
704 +        system which makes no sense.
705 +
706 +        A hack was added for Cypress based usb hard drive enclosures to
707 +        the kernel.  This should cut down on commands it claims to support
708 +        but does not (at the cam layer).  Found while testing ZFS on
709 +        an external device.
710 +
711 + 20090520:
712 +        The powerd daemon no longer starts automatically to improve
713 +        compatibility with many systems.  However, there is a new
714 +        installer option in the startup section to enable it. This
715 +        makes it easier to enable for users that have working systems. I                thought it was only a problem on older hardware, but it freaks
716 +        out my new Phenom too.
717 +
718 + 20090502:
719 +        OpenSSH 5.2p1 import
720 +
721 +        ale(4) connected to the build. (kernel module only)
722 +
723 + 20090501:
724 +        Imported makefs utility from NetBSD/FreeBSD
725 +
726 + 20090422:
727 +        OpenSSL security update
728 +
729 +        The function ASN1_STRING_print_ex does not properly validate the lengths
730 + of BMPString or UniversalString objects before attempting to print them.
731 +
732 + 20090415:
733 +        Created a Symbol.map for libc/ohash symbols
734 +
735 +        Updated several usr/bin usr/sbin utilities.
736 +
737 +        Corrected a bug with Makefile.inc1 causing the bootstrap
738 +        tools to fail.
739 +
740 + 20090405:
741 +        xorg 7.4 wants to configure its input devices via hald which does not
742 +        yet work with USB. If the keyboard/mouse does not work in xorg then
743 +        add
744 +                Option "AllowEmptyInput" "off"
745 +        to your ServerLayout section.  This will cause X to use the configured
746 +        kbd and mouse sections from your xorg.conf
747 +
748 + 20090403:
749 +        mksh was disconnected a few day ago do to bugs with
750 +        buildworld and mports.  Now, connect it back
751 +        for use as /bin/sh with a conditional called
752 +        MK_ASH.  By default, ash is the standard /bin/sh
753 +        but we may change this later.  This will allow further
754 +        testing by users and developers of mksh without
755 +        causing an unpleasant default experience.  In the
756 +        long run, we need to fix mksh compatibility.
757 +
758 + 20090328:
759 +        Bring in mksh R37 from CVS. The dot.mkshrc files for root
760 +        and skel were changed.  mksh(1) now replaces ash aka sh(1)
761 +        as the default /bin/sh.  Please report bugs with
762 +        ports, etc. The ash code will remain in the repo for awhile
763 +        as I decide if we'll add something like MK_SHELL_ASH as
764 +        an optional build parameter.  
765 +
766 +        ahd was disconnected from the lint environment until
767 +        the compiler bug is sorted (by updating gcc?)
768 +
769 +        Remove freebsd-tips from fortune files and change the
770 +        default for login and profile.
771 +
772 + 20090327:
773 +        Update libarchive to 2.5.5, tar, and add bsdcpio.
774 +
775 +        Also previously, ctriv has been connecting Perl 5.10
776 +        to the build (part of os).  This will have an impact
777 +        on mports.
778 +
779 + 20090325:
780 +        Update Bind to 9.4.3-P1
781 +
782 +        Update mksh to R36b
783 +
784 +        Update tcpdump to 3.9.8, fix libpcap to work with current.
785 +
786 +        Update pnpinfo, sync with FreeBSD.
787 +
788 + 20090115:
789 +        Fix a problem with DNSSEC and BIND.
790 +
791 + 20090110:
792 +        For applications using OpenSSL for SSL connections, an invalid SSL
793 +        certificate may be interpreted as valid.  This could for example be
794 +        used by an attacker to perform a man-in-the-middle attack.
795 +
796 +        Other applications which use the OpenSSL EVP API may similarly be
797 +        affected.
798 +
799 +        Stop cross site request forgery attacks in lukemftpd
800 +
801 + 20090104:
802 +        Import GNU libreadline 5.2
803 +
804 + 20090101:
805 +        Update time zone data to 2008i.
806 +
807 + 20081231:
808 +        Correct a problem where bluetooth and netgraph sockets are not
809 +        properly initialized.
810 +
811 +        Happy 2009.
812 +
813 + 20081206:
814 +        Due to the massive change in the underlying system under way,
815 +        we're naming the next release 1.0.  The sys/sys/param.h was
816 +        changed accordingly.  ipfilter and ncurses were corrected
817 +        using __MidnightBSD__ tests in the code.  
818 +
819 +        The GENERIC kernel config was caught up on i386 today.  Consider
820 +        i386 still broken, but amd64 is running again.
821 +
822 +        mdoc.local was updated with the new MidnightBSD version info.
823 +
824 +        batt(1) was rewritten in C.  It now supports several flags and
825 +        runs about 8 times faster on my laptop.  The default output
826 +        shows the number of minutes of battery life remaining and the
827 +        percentage.  You can use -u to display the number of batteries or
828 +        -c to get script friendly output.  Consult the man page for more.
829 +
830 + 20081204:
831 +        Work has completed on importing ZFS, jemalloc, several
832 +        new devices, SCTP, updated pf, a new tempfs, linuxolator 2.6 kernel
833 +        support, improved locking for file desc., audit (openbsm),
834 +        openssl .98e, nfe, imporved intel high def audio, midi, updated
835 +        intel gigabit (em), support for several wifi cards (intel), ...
836 +
837 +        Renamed 0.3-CURRENT officially. Switched to using MidnightBSD version
838 +        data from param.h instead of the FreeBSD version.  This means
839 +        testing is now possible in the ports tree for the version
840 +        and that any ports or code relying on the FreeBSD version from
841 +        sys/sys/param.h will need to be fixed.
842 +
843 + 20080905:
844 +        update nve(4) to support new hardware.
845 +
846 + 20080801:
847 +        Import OpenBSM 1.0
848 +
849 +        Modify src/release to create 3 isos instead of 2 for packages.
850 +
851 +        etc/rc.d/firstboot now enables kdm, gnustep + slim and bsdstats.
852 +
853 +        Many ia64, alpha, powerpc items were removed.
854 +
855 +        The recent diffutils 2.8.7 import was fixed.
856 +
857 + 20080703:
858 +        pcc was not installed properly when setting DESTDIR for live cds,
859 +        or posibly jails.
860 +
861 + 20080627:
862 +        Add firmware(9), WEP, CCMP, TKIP to GENERIC.
863 +
864 +        Add glabel to GENERIC.
865 +
866 +        Intel ICH8 mobile chipset used on some iMacs included with ata.
867 +
868 +        pcc connected to the build on i386. (alternative compiler)
869 +
870 +        ath added to GENERIC.  (Atheros wireless NICs) on amd64/i386
871 +
872 + 20080528:
873 +        Sendmail 8.14.3
874 +
875   20080516:
876          ssh-vulnkey allows you to look for vulnerable ssh keys that
877          were generated on Debian and Ubuntu hosts over the last
# Line 562 | Line 1431 | Contact Warner Losh if you have any questions about yo
1431   this document.
1432  
1433   $FreeBSD: src/UPDATING,v 1.416.2.18 2006/02/22 11:51:57 yar Exp $
1434 < $MidnightBSD: src/UPDATING,v 1.36 2008/05/01 04:46:25 laffer1 Exp $
1434 > $MidnightBSD$

Comparing trunk/UPDATING (property cvs2svn:cvs-rev):
Revision 1598 by laffer1, Fri May 16 22:38:32 2008 UTC vs.
Revision 6862 by laffer1, Sat Oct 11 16:23:48 2014 UTC

# Line 1 | Line 0
1 1.37

Comparing trunk/UPDATING (property svn:keywords):
Revision 1598 by laffer1, Fri May 16 22:38:32 2008 UTC vs.
Revision 6862 by laffer1, Sat Oct 11 16:23:48 2014 UTC

# Line 0 | Line 1
1 + MidnightBSD=%H

Diff Legend

Removed lines
+ Added lines
< Changed lines
> Changed lines