ViewVC Help
View File | Revision Log | Show Annotations | Download File | View Changeset | Root Listing
root/src/trunk/UPDATING
(Generate patch)

Comparing trunk/UPDATING (file contents):
Revision 1598 by laffer1, Fri May 16 22:38:32 2008 UTC vs.
Revision 7065 by laffer1, Sun Jun 21 18:59:54 2015 UTC

# Line 1 | Line 1
1 < Updating Information for MidnightBSD users
1 > Updating Information for MidnightBSD users.
2  
3 Items affecting the mports and packages system can be found in
4 /usr/mports/UPDATING.
3  
4 + 20150621:
5 +        libmport now automatically stops services when deleting packages.
6 +
7 +        The package must have installed an rc.d script in /usr/local/etc
8 +        for this to work. This is equivalent to running service <name> onestop
9 +
10 + 20150618:
11 +        Sendmail
12 +
13 +        With the recent changes to OpenSSL to block 512 bit certificates,
14 +        sendmail can't connect with TLS to some servers.
15 +
16 +        Increase the default size to 1024 bit for client connections to
17 +        match the server configuration.
18 +
19 +        ZFS
20 +
21 +        Added ZFS TRIM support which is enabled by default. To disable
22 +        ZFS TRIM support set vfs.zfs.trim.enabled=0 in loader.conf.
23 +
24 +        Creating new ZFS pools and adding new devices to existing pools
25 +        first performs a full device level TRIM which can take a significant
26 +        amount of time. The sysctl vfs.zfs.vdev.trim_on_init can be set to 0
27 +        to disable this behaviour.
28 +
29 +        ZFS TRIM requires the underlying device support BIO_DELETE which
30 +        is currently provided by methods such as ATA TRIM and SCSI UNMAP
31 +        via CAM, which are typically supported by SSD's.
32 +
33 +        Stats for ZFS TRIM can be monitored by looking at the sysctl's
34 +        under kstat.zfs.misc.zio_trim.
35 +
36 +        rc.d
37 +
38 +        Reworked handling of cleanvar and FILESYSTEMS so that FILESYSTEMS
39 +        implies everything is mounted and ready to go.
40 +
41 +        Changed how ip6addressctl maps IPv6 on startup.
42 +
43 + 20150613:
44 +        tzdata 2015d
45 +
46 + 20150612:
47 +        OpenSSL 0.9.8zg
48 +
49 + 20150419:
50 +        MidnightBSD 0.6 stable branch created. Continue 0.7
51 +        development.
52 +
53 + 20150418:
54 +        sqlite 3.8.9
55 +
56 + 20150407:
57 +        Fix two security vulnerabilities:
58 +
59 +        The previous fix for IGMP had an overflow issue. This has been corrected.
60 +
61 +        ipv6: The Neighbor Discover Protocol allows a local router to advertise a
62 +        suggested Current Hop Limit value of a link, which will replace
63 +        Current Hop Limit on an interface connected to the link on the MidnightBSD
64 +        system.
65 +
66 + 20150319:
67 +        OpenSSL 0.9.8.zf
68 +
69 +        mksh R50e
70 +
71 +        Apple mDNSResponder 561.1.1
72 +
73 + 20150306:
74 +        Upgrade OpenSSL to 0.9.8ze
75 +
76 + 20150225:
77 +        Fix two security vulnerabilities.
78 +
79 +        1. BIND servers which are configured to perform DNSSEC validation and which
80 +        are using managed keys (which occurs implicitly when using
81 +        "dnssec-validation auto;" or "dnssec-lookaside auto;") may exhibit
82 +        unpredictable behavior due to the use of an improperly initialized
83 +        variable.
84 +
85 +        CVE-2015-1349
86 +
87 +        2. An integer overflow in computing the size of IGMPv3 data buffer can result
88 +        in a buffer which is too small for the requested operation.
89 +
90 +        This can result in a DOS attack.
91 +
92 + 20141211:
93 +        Fix a security issue with file and libmagic that can allow
94 +        an attacker to create a denial of service attack on any
95 +        program that uses libmagic.
96 +
97 + 20141109:
98 +        Fix building perl during buildworld when the GDBM port is installed.
99 +
100 + 20141106:
101 +        tzdata 2014i
102 +
103 + 20141102:
104 +        serf 1.3.8
105 +
106 + 20141031:
107 +        tnftp 20141031 fixes a security vulnerability with tnftp,
108 +        CVE-2014-8517.
109 +
110 + 20141028:
111 +        OpenSSL 0.9.8zc
112 +
113 + 20141021:
114 +        Fix several security vulnerabilities in routed, rtsold,
115 +        and namei with respect to Capsicum sandboxes looking up
116 +        nonexistent path names and leaking memory.
117 +
118 +        The input path in routed(8) will accept queries from any source and
119 +        attempt to answer them.  However, the output path assumes that the
120 +        destination address for the response is on a directly connected
121 +        network.
122 +
123 +        Due to a missing length check in the code that handles DNS parameters,
124 +        a malformed router advertisement message can result in a stack buffer
125 +        overflow in rtsold(8).
126 +
127 + 20141011:
128 +        mksh R50d - fix field splitting regression and null
129 +        pointer dereference
130 +
131 +        xz 5.0.7
132 +
133 +        OpenSSH 6.6p1
134 +
135 + 20141004:
136 +        mksh R50c - security update for environment var bug with
137 +        foo vs foo+    
138 +
139 + 20141002:
140 +        sqlite 3.8.6
141 +
142 +        sudo 1.7.8 - some issues with the current version, but we're slowly
143 +        getting up to date.
144 +
145 + 20141001:
146 +        mksh R50b
147 +
148 +        libmport now supports plist commands @dir, @owner, @group, @mode.
149 +
150 +        sudo 1.7.6p2
151 +
152 + 20140916:
153 +        Fix a security issue with TCP SYN.
154 +
155 +        When a segment with the SYN flag for an already existing connection arrives,
156 +        the TCP stack tears down the connection, bypassing a check that the
157 +        sequence number in the segment is in the expected window.
158 +
159 + 20140909:
160 +        Fixed a bug with our clearenv(3) implementation that caused segfaults
161 +        with some programs including Dovecot.
162 +
163 +        OpenSSL security patch:
164 +
165 +        The receipt of a specifically crafted DTLS handshake message may cause OpenSSL
166 +        to consume large amounts of memory. [CVE-2014-3506]
167 +
168 +        The receipt of a specifically crafted DTLS packet could cause OpenSSL to leak
169 +        memory. [CVE-2014-3507]
170 +
171 +        A flaw in OBJ_obj2txt may cause pretty printing functions such as
172 +        X509_name_oneline, X509_name_print_ex et al. to leak some information from
173 +        the stack. [CVE-2014-3508]
174 +
175 +        OpenSSL DTLS clients enabling anonymous (EC)DH ciphersuites are subject to
176 +        a denial of service attack. [CVE-2014-3510]
177 +
178 + 20140902:
179 +        We're now 0.6-CURRENT
180 +
181 +        Update USB quirks to support K70 Corsair keyboard, and several
182 +        other devices.
183 +
184 + 20140827:
185 +        Perl 5.18.2
186 +
187 + 20140728:
188 +        Jails now run shutdown scripts.
189 +
190 + 20140710:
191 +        Fix a vulnerability in the control message API. A buffer is not properly cleared
192 +        before sharing with userland.
193 +
194 + 20140701:
195 +        MKSH R50
196 +
197 + 20140630:
198 +        File 5.19
199 +
200 + 20140605:
201 +        Fix four security issues with OpenSSL
202 +
203 + 20140604:
204 +        Sendmail failed to properly set close-on-exec for open file descriptors.
205 +
206 +        ktrace page fault kernel trace entries were set to an incorrect size which resulted
207 +        in a leak of information.
208 +
209 + 20140430:
210 +        Fix a TCP reassembly bug that could result in a DOS attack
211 +        of the system. It may be possible to obtain portions
212 +        of kernel memory as well.
213 +
214 + 20140411:
215 +        Update zlib to 1.2.7
216 +
217 + 20140122:
218 +        Support for username with length 32. Previous limit was 16
219 +
220 + 20140114:
221 +        Fix two security vulnerabilities.
222 +
223 +        bsnmpd contains a stack overflow when sent certain queries.
224 +
225 +        bind 9.8 when using NSEC3-signed zones zones, will crash with special
226 +        crafted packets.
227 +
228 + 20131228:
229 +        Imported FreeBSD 9.2 usb stack (plus z87 patches from stable)
230 +
231 +        Updated em(4), igb(4) and ixgbe(4)
232 +
233 +        MidnightBSD now works with Z87 Intel chipsets.
234 +
235 + 20131207:
236 +        Remove sparc64 architecture. It hasn't been working for awhile
237 +        and it's not useful for desktops anymore.
238 +
239 + 20131205:
240 +        OpenSSH 6.4p1
241 +
242 + 20131203:
243 +        Perl 5.18.1 imported.
244 +
245 +        Update less to v458
246 +
247 + 20131130:
248 +        Remove named from base. We still include the client utilities for
249 +        now until replacements can be found.
250 +
251 + 20131004:
252 +        rarpd supports vlan(4) and has a pid flag. (from FreeBSD)
253 +
254 + 20130917:
255 +        Support for 65,536 routing tables was added.  A new fib specific
256 +        field has been added to mbuf.  This is an increase from 16.
257 +
258 + 20130910:
259 +        Security updates: (kern.osreldate 5001)
260 +
261 +        nullfs(5)
262 +
263 +        The nullfs(5) implementation of the VOP_LINK(9) VFS operation does not
264 +        check whether the source and target of the link are both in the same
265 +        nullfs instance.  It is therefore possible to create a hardlink from a
266 +        location in one nullfs instance to a file in another, as long as the
267 +        underlying (source) filesystem is the same.
268 +
269 +        ifioctl
270 +
271 +        As is commonly the case, the IPv6 and ATM network layer ioctl request
272 +        handlers are written in such a way that an unrecognized request is
273 +        passed on unmodified to the link layer, which will either handle it or
274 +        return an error code.
275 +
276 +        Network interface drivers, however, assume that the SIOCSIFADDR,
277 +        SIOCSIFBRDADDR, SIOCSIFDSTADDR and SIOCSIFNETMASK requests have been
278 +        handled at the network layer, and therefore do not perform input
279 +        validation or verify the caller's credentials.  Typical link-layer
280 +        actions for these requests may include marking the interface as "up"
281 +        and resetting the underlying hardware.
282 +
283 + 20130824:
284 +        Fix a bug in sendmail 8.14.7 that interferes with how it
285 +        handles AAAA records interoperating with Microsoft DNS servers.
286 +        FreeBSD has already reported this to Sendmail and a fix
287 +        will be included in the next release.
288 +
289 +        Subversion 1.8.1 is now in the base system as a static
290 +        binary.  It has limited functionality, but can be used to
291 +        checkout/commit code.  It is named svnlite.
292 +
293 + 20130822:
294 +        Fix two security vulnerabilities.
295 +
296 +        Fix an integer overflow in IP_MSFILTER (IP MULTICAST).
297 +        This could be exploited to read memory by a user process.
298 +
299 +        When initializing the SCTP state cookie being sent in INIT-ACK chunks,
300 +        a buffer allocated from the kernel stack is not completely initialized.
301 +
302 +        Import xz 5.0.4
303 +
304 +        Import sqlite 3.7.17
305 +
306 +        Import BIND 9.8.5-P2
307 +
308 + 20130814:
309 +        mksh R48 imported.
310 +
311 +        Sendmail 8.14.7 imported.
312 +
313 + 20130717:
314 +        libmport bug was fixed causing hash verification to fail.
315 +
316 +        virtio(4) imported from FreeBSD 9-stable. SCSI support not
317 +        included.
318 +
319 + 20130612:
320 +        RELENG_0_4 created for 0.4. Development continues on 0.5.
321 +
322 + 20130402:
323 +        Update BIND and OpenSSL to resolve security advisories.
324 +
325 + 20130305:
326 +        MKSH R44 imported.
327 +
328 + 20130213:
329 +        MKSH R42b imported
330 +
331 + 20130211:
332 +        MKSH R42 imported
333 +
334 + 20130125:
335 +        MKSH R41 imported
336 +
337 + 20130122:
338 +        OpenSSH 5.8p2 imported
339 +
340 +        SQLite 3.7.15.2 imported
341 +
342 +        Fixed a longstanding bug in libmport extrating new index files.
343 +
344 + 20120710:
345 +        BSD licensed sort imported from FreeBSD-CURRENT
346 +
347 +        For now, GNU sort is installed as gnusort, but it will
348 +        go away in time.
349 +
350 + 20120708:
351 +        tcsh 6.18.01 imported.
352 +
353 +        NetBSD's iconv imported.
354 +
355 +        libc gains strnlen(3), memrchr(3), stpncpy(3).
356 +
357 + 20120612:
358 +        BIND security update related to CVE-2012-1667.
359 +
360 +        Zero length resource records can cause BIND to crash resulting
361 +        in a DOS attack or information disclosure.
362 +
363 + 20120407:
364 +        mksh R40f (fixes regression)
365 +
366 + 20120328:
367 +        mksh R40e
368 +
369 +        Perl 5.14.2
370 +
371 + 20120229:
372 +        cpucontrol(8) and cpuctl(4) added from FreeBSD 7-stable.
373 +
374 + 20120209:
375 +        mDNSResponder 333.10 imported
376 +
377 + 20111227:
378 +        import raid5 module for GEOM, graid5(8)
379 +
380 +        This is experimental and known to use a lot of kernel
381 +        memory.
382 +
383 + 20111223:
384 +        telnetd: fix a root exploit from a fixed buffer that was not checked
385 +
386 +        pam: don't allow escape from policy path.  Exploitable in KDE, etc.
387 +
388 +        Fix pam_ssh module:
389 +
390 +        If the pam_ssh module is enabled, attackers may be able to gain access
391 +        to user accounts which have unencrypted SSH private keys.
392 +
393 +        This has to due with the way that openssl works.  It ignores unencrpted data.
394 +
395 +        Fix security issue with chroot and ftpd.
396 +
397 +        nsdispatch(3) doesn't know it's working in a chroot and some
398 +        operations can cause files to get reloaded causing a security
399 +        hole in things like ftpd.
400 +
401 + 20111217:
402 +        libdialog/dialog upgraded to an lgpl version. As it's not
403 +        backwardly compatable, include the old libdialog as libodialog
404 +
405 + 20111212:
406 +        mksh r40d imported
407 +
408 + 20111210:
409 +        re(4) and rl(4) updated to support new chips.
410 +
411 +        GEOM synced with FreeBSD 7-stable.
412 +
413 +        MidnightBSD GPT partition types created in sys/gpt.h and
414 +        setup in boot loader and GEOM.
415 +
416 +        amdsbwd(4) (amd watchdog for south bridge) updated to support
417 +        8xx series chipset.
418 +
419 + 20111207:
420 +        import bsd grep from FreeBSD/OpenBSD.
421 +
422 +        MK_BSD_GREP controls which grep is installed
423 +        as grep with the other as bsdgrep or gnugrep.
424 +
425 + 20111122:
426 +        mksh vR40c imported.
427 +
428 + 20111117:
429 +        BIND 9.6 ESV R5 P1
430 +
431 + 20111107:
432 +        tzdata 2011n
433 +
434 + 20111026:
435 +        mDNSResponder v320
436 +
437 +        BIND 9.6 ESV R5
438 +
439 + 20111022:
440 +        cflow 0.0.6 imported
441 +
442 + 20111020:
443 +        less v436 imported
444 +
445 +        amdsbwd(4) AMD southbridge watchdog
446 +
447 + 20111019:
448 +        awk 20110810 imported
449 +
450 +        et(4) Agere Gigabit Ethernet/Fast Ethernet driver added, but
451 +        not included in GENERIC kernel.  The kernel module needs
452 +        testing before we can include it in GENERIC.
453 +
454 +        intr_bind code ported to allow an IRQ to be bound to one
455 +        specific CPU core.
456 +
457 + 20111017:
458 +        Time Zone Data v. 2011l (Released 10 October 2011)
459 +
460 +        Updated list of countries (iso3166) to work with new timezone data.
461 +
462 + 20111015:
463 +        Introduce CPU Affinity in MidnightBSD. cpuset(1) can be used
464 +        to control which core or group of cores can be used for a given
465 +        process. Several new system calls were added to support this
466 +        functionality in the running kernel and for 32bit binary
467 +        compatibility on amd64.
468 +
469 +        The scheduler default has been changed to ULE in i386 and
470 +        amd64.  Changes were made to both schedulers (4BSD AND ULE)
471 +        for this feature.
472 +
473 +        This work is based on Jeff Roberson's FreeBSD 7.1 patches.
474 +
475 + 20111004:
476 +        Fix a problem with unix socket handling caused by the recent
477 +        patch to unix socket path handling. This allows network
478 +        apps to work under the linuxolator again.
479 +
480 + 20111001:
481 +        Import libfetch & fetch(1) from FreeBSD 9. Passive FTP is
482 +        now default and an environment variable must be set to use
483 +        active.
484 +
485 + 20110930:
486 +        Introduce quirks handling for several umass devices including
487 +        USB cameras.  Add workaround for Cyberpower UPS devices.
488 +
489 +        Bring in further bug fixes from FreeBSD and NetBSD for alc(4).
490 +        Stale ip/tcp header pointers are no longer used, lockups fixed
491 +        when network cable is unplugged on bootup, enable TX checksum
492 +        offloading.
493 +
494 +        Add a new man page for gcache(8), a useful geom class when
495 +        working with large raid3 sets.
496 +
497 +        Restore previous workaround for Cypress pata storage controller.
498 +
499 + 20110929:
500 +        Sync ath(4) with FreeBSD 7.3.
501 +
502 +        The following modules are no longer available, and should be
503 +        removed from loader.conf:
504 +        ath_hal ath_rate_amrr ath_rate_onoe ath_rate_sample
505 +
506 +        alc(4) would hibernate when a cable was unplugged and often
507 +        required bring the interface down and up to "wake up" so that
508 +        a connection could be established.  Disable hibernation.
509 +
510 + 20110928:
511 +        Fix security issues with gzip and compress related to .Z
512 +        files that are corrupted.
513 +
514 +        Fix path validation with unix domain sockets.
515 +
516 + 20110917:
517 +        Remove dependance on mports perl for generating releases as
518 +        it's in the base system.
519 +
520 + 20110914:
521 +        Import xz 5.0.3 with liblzma 5.0.3
522 +
523 + 20110813:
524 +        synced the sparc64 GENERIC kernel configuration with amd64.
525 +
526 + 20110806:
527 +        sqlite 3.7.7.1 imported
528 +
529 +        msearch(1), libmsearch and msearch.import added.  msearch(1) provides
530 +        a full text search command line tool.  libmsearch can also be used
531 +        to build a graphical based search in the future. You can enable
532 +        index building for msearch in periodic.conf or manually run the
533 +        /usr/libexec/msearch.index tool.  Full text indexes take considerable
534 +        space in /var.  I'm using approximately 500MB currently.
535 +
536 +        Fix a long standing bug with the periodic script to check package
537 +        versions.  This will be obsolete with mport though.
538 +
539 + 20110710:
540 +        kdb_enter_why added to MidnightBSD to allow the kernel debugger to
541 +        know why it's in use and thus script can be run.
542 +
543 +        Yet another problem with the perl manifest was fixed
544 +
545 + 20110709:
546 +        cpufreq(1) is a new utility to monitor CPU frequency which may change
547 +        with use of powerd(8) and cpufreq(4).
548 +
549 + 20110612:
550 +        Update mksh to R40
551 +
552 +        Catch up ObsoleteFiles.inc to remove Perl 5.10.x.  Good to run when
553 +        updating current (cd /usr/src && make check-old)
554 +
555 + 20110528:
556 +        Fix CVE-2011-1910 in BIND 9.6.x.  This affects caching resolvers.
557 +
558 + 20110526:
559 +        newfs:
560 +        Raised the default blocksize for UFS/FFS filesystems from
561 +        16K to 32K and the default fragment size from 2K to 4K.
562 +
563 +        This should slightly imporve performance on "advanced format"
564 +        hard drives such as the WD EARS drives. Drives of this type
565 +        have emulation modes that slow down with lower sizes.  Of course
566 +        the drive must still be aligned properly when using fdisk.
567 +
568 + 20110521:
569 +        mport tool now has a deleteall command.  This can be used to remove
570 +        all packages from a system.
571 +
572 +        A few bugs with the perl 5.14 import have been fixed.
573 +
574 + 20110518:
575 +        Perl 5.14.0
576 +
577 + 20110517:
578 +        Sendmail 8.14.5
579 +
580 + 20110314:
581 +        DRM/DRI code updated to support newer video cards. (FreeBSD 7.1)
582 +
583 +        cdevpriv wrappers added
584 +
585 +        nss_mdns hack introduced to work around linking problem.
586 +
587 +        dnsextd fixed after update to mDNSResponder code.
588 +
589 + 20110308:
590 +        Introduce liblzma & xz 5.0.1 to the base system
591 +
592 +        Patch for OpenSSL security issue CVE-2011-0014.
593 +
594 +        "OSREVISION 4004"
595 +
596 +        nsswitch module for multicast dns (nss_mdns) added.
597 +
598 +        tzdata2011c
599 +
600 + 20110220:
601 +        cam(4) syncronized with FreeBSD 7.3.
602 +
603 + 20110219:
604 +        amdtemp(4) updated to support sensors framework.
605 +
606 + 20110217:
607 +        Perl 5.10.1 imported
608 +
609 + 20110216:
610 +        Introduce igb(4) and split Intel Gigabit Ethernet adapters between
611 +        igb(4) and em(4).  Newer devices use igb(4).  The code has moved
612 +        to sys/dev/e1000 for both devices in the kernel. igb(4) has
613 +        been placed in GENERIC on i386 and amd64.
614 +
615 +        Update bfe(4) to support newer devices and WOL.
616 +
617 + 20110215:
618 +        age(4) added.
619 +
620 + 20110208:
621 +        BIND 9.6.3 which fixes a bug with DNSSEC records getting added.
622 +
623 + 20110206:
624 +        eeemon(4) added to monitor Asus Eee PC.
625 +
626 + 20110205:
627 +        OpenSSH 5.7p1
628 +
629 +        GNU sort 6.9 (coreutils)
630 +
631 + 20110203:
632 +        one true awk 20100523 imported
633 +
634 +        sqlite 3.7.5
635 +
636 +        OpenSSL 0.9.8q
637 +
638 + 20110202:
639 +        tcsh 6.17.00
640 +
641 +        file 5.05
642 +
643 + 20110122:
644 +        Import it(4) and lm(4), with support for Super I/O hardware monitors. This
645 +        uses the sensors framework ported by Constantine A. Murenin (GSOC2007)
646 +
647 + 20110120:
648 +        BIND 9.6.2-P3
649 +
650 +        sudo 1.7.4-p6
651 +
652 + 20110115:
653 +        Add experimental jme(4) for Jmicron ethernet devices.
654 +
655 + 20101130:
656 +        A double free exists in the SSL client ECDH handling code, when
657 +        processing specially crafted public keys with invalid prime
658 +        numbers. [CVE-2010-2939]
659 +
660 + 20101120:
661 +        Several portions of the kernel and userland code related to UFS file
662 +        systems (and UFS2) cannot properly handle inode counts above 2^31 due
663 +        to use of int types.  Based on a patch from FreeBSD, I've modified
664 +        our UFS2 implementation to handle unsigned values for inode counts
665 +        which should allow for file systems greater than 16TB.
666 +
667 +        newfs and growfs was also modified.
668 +
669 + 20101110:
670 +        Fix a security issue with pseudofs which could result in running code in kernel
671 +        context or a kernel panic depending on system configuration.  This affects file
672 +        systems such as procfs for instance.
673 +
674 + 20101021:
675 +        sysrc is a utility to print and modify name/value pairs in /etc/rc.conf easily.
676 +        This is similar to functions present in many linux distros. The utility was
677 +        written by Devin Teske for FreeBSD.
678 +
679 + 20100920:
680 +        bzip2 security patch for integer overflow.
681 +
682 + 20100905:
683 +        MidnightBSD RELENG_0_3 branch created.  Aggressive development continues here
684 +        for 0.4.
685 +
686 + 20100902:
687 +        Fix a security issue with libutil that allows users to bypass cpu limits in
688 +        login.conf in some cases.  This combined with OpenSSH for example can allow
689 +        the user to get more resources than they're allowed.
690 +
691 + 20100822:
692 +        Import Apple's mDNSResponder (mdnsd).
693 +
694 + 20100814:
695 +        libdispatch added to MidnightBSD.  This provides functionality found in
696 +        Mac OS X's GCD.  We do not have blocks support yet.  As this code is
697 +        licensed under Apache 2, we create a new MK_APACHE option so that
698 +        it's not required for all users to run code under a license they
699 +        may not like.
700 +
701 + 20100713:
702 +        mbuf readonly fix related to sendfile(2) data corruption.
703 +
704 + 20100704:
705 +        brainfuck(1) imported from MirBSD.
706 +
707 + 20100505:
708 +        zlib 1.2.5
709 +
710 + 20100430:
711 +        Sudo 1.7.2p6 imported
712 +
713 + 20100321:
714 +        Update zlib to 1.2.4
715 +
716 + 20100319:
717 +        Removed i586 from default i386 generic kernel.
718 +
719 + 20100317:
720 +        Update to tzdata2010e (time zones).  This includes changes in
721 +        Mexico.
722 +
723 +        Add support for several newer sound cards via hda including
724 +        ATI and Realtek chipsets.
725 +
726 + 20100313:
727 +        CPU detection has been changed.  VIA Padlock detection added.
728 +
729 + 20100312:
730 +        Fix a number of bugs and compiler warnings in libmport. Handle
731 +        plus signs in paths for mport.check-fake
732 +
733 + 20100311:
734 +        mksh R39c
735 +
736 + 20100309:
737 +        Sudo 1.7.2p5
738 +
739 +        sqlite3 3.6.23
740 +
741 +        mksh R39b
742 +
743 +        libffi (ffi) 3.0.9
744 +
745 + 20100206:
746 +        WITHOUT_LIB32 is no longer needed on AMD64.  GCC was fixed to
747 +        properly pass arguments to ld.
748 +
749 +        re(4) and rl(4) have been updated to support several new
750 +        realtek chipsets.  Performance has been improved on re(4).
751 +
752 + 20100204:
753 +        Fix a bug cropping up on AMD64 MidnightBSD with sftp
754 +        segfaulting.  
755 +
756 + 20100116:
757 +        Import ash changes from FreeBSD (bin/sh) 8-Stable.
758 +
759 +        BIND 9.6.1-P2
760 +
761 + 20100110:
762 +        Import Sendmail 8.14.4. Fix for SSL vulnerability.
763 +
764 +        posix_spawn(3) added to MidnightBSD libc.  Users may need to build and
765 +        install libc before doing a full buildworld when upating from 0.2 or
766 +        older current systems.
767 +
768 +        kqueue(2) was modified to support portions of libdispatch functionality.
769 +
770 + 20100106:
771 +        Bind security update.  Fix a bug with DNSSEC that causes negative
772 +        cache entries and thus a possible DNS cache poisoning attack.
773 +
774 +        Fix a bug in ZFS that can reset permissions on system crashes.
775 +
776 + 20091228:
777 +        amdtemp(4) was added.  It allows one to monitor to the temperature
778 +        of an AMD CPU such as a Phenom.
779 +
780 + 20091205:
781 +        OpenSSL security fix
782 +
783 +        The SSL version 3 and TLS protocols support session renegotiation without
784 +        cryptographically tying the new session parameters to the old parameters.
785 +
786 + 20091128:
787 +        OpenBSD sensors framework imported including sensorsd(8)
788 +
789 + 20091126:
790 +        OpenNTPD 4.4 import
791 +
792 +        Update OpenSSH to 5.3p1
793 +
794 +        mksh R39
795 +
796 + 20091124:
797 +        cpdup updated from DragonFly to 1.15
798 +
799 +        tzdata2009s updated with latest timezone data for November 2009.
800 +
801 + 20091010:
802 +        amd64 users should use WITHOUT_LIB32=yes in /etc/make.conf for now
803 +        to test current.
804 +
805 +        Revert unicode filename fixes from ntfs code.  This was causing chaos
806 +        on amd64 systems.
807 +
808 + 20091006:
809 +        Update timezone data with tzdata2009n with the Pakistan and
810 +        Argentina changes.
811 +
812 +        Sync several userland utilities with versions from FreeBSD 7.0 in
813 +        sbin and usr.sbin.
814 +
815 + 20090919:
816 +        Update timezone data with tzdate2009m from September 2009.
817 +
818 + 20090729:
819 +        Patch for Bind 9 security vulnerability. a dynmaic update packet
820 +        can trigger an assertion and cause named to exit
821 +
822 + 20090606:
823 +        Remove PCC from the base system.  This compiler will not work
824 +        as a system compiler for us as we've got some userland investment
825 +        in C++ code and may have Objective-C in the future.  We're stuck
826 +        with a solution that supports these three languages at a minimum.
827 +
828 +        I had wanted to keep it as an optional compiler because it is
829 +        fast, however too many users want to try to use it for the base
830 +        system which makes no sense.
831 +
832 +        A hack was added for Cypress based usb hard drive enclosures to
833 +        the kernel.  This should cut down on commands it claims to support
834 +        but does not (at the cam layer).  Found while testing ZFS on
835 +        an external device.
836 +
837 + 20090520:
838 +        The powerd daemon no longer starts automatically to improve
839 +        compatibility with many systems.  However, there is a new
840 +        installer option in the startup section to enable it. This
841 +        makes it easier to enable for users that have working systems. I                thought it was only a problem on older hardware, but it freaks
842 +        out my new Phenom too.
843 +
844 + 20090502:
845 +        OpenSSH 5.2p1 import
846 +
847 +        ale(4) connected to the build. (kernel module only)
848 +
849 + 20090501:
850 +        Imported makefs utility from NetBSD/FreeBSD
851 +
852 + 20090422:
853 +        OpenSSL security update
854 +
855 +        The function ASN1_STRING_print_ex does not properly validate the lengths
856 + of BMPString or UniversalString objects before attempting to print them.
857 +
858 + 20090415:
859 +        Created a Symbol.map for libc/ohash symbols
860 +
861 +        Updated several usr/bin usr/sbin utilities.
862 +
863 +        Corrected a bug with Makefile.inc1 causing the bootstrap
864 +        tools to fail.
865 +
866 + 20090405:
867 +        xorg 7.4 wants to configure its input devices via hald which does not
868 +        yet work with USB. If the keyboard/mouse does not work in xorg then
869 +        add
870 +                Option "AllowEmptyInput" "off"
871 +        to your ServerLayout section.  This will cause X to use the configured
872 +        kbd and mouse sections from your xorg.conf
873 +
874 + 20090403:
875 +        mksh was disconnected a few day ago do to bugs with
876 +        buildworld and mports.  Now, connect it back
877 +        for use as /bin/sh with a conditional called
878 +        MK_ASH.  By default, ash is the standard /bin/sh
879 +        but we may change this later.  This will allow further
880 +        testing by users and developers of mksh without
881 +        causing an unpleasant default experience.  In the
882 +        long run, we need to fix mksh compatibility.
883 +
884 + 20090328:
885 +        Bring in mksh R37 from CVS. The dot.mkshrc files for root
886 +        and skel were changed.  mksh(1) now replaces ash aka sh(1)
887 +        as the default /bin/sh.  Please report bugs with
888 +        ports, etc. The ash code will remain in the repo for awhile
889 +        as I decide if we'll add something like MK_SHELL_ASH as
890 +        an optional build parameter.  
891 +
892 +        ahd was disconnected from the lint environment until
893 +        the compiler bug is sorted (by updating gcc?)
894 +
895 +        Remove freebsd-tips from fortune files and change the
896 +        default for login and profile.
897 +
898 + 20090327:
899 +        Update libarchive to 2.5.5, tar, and add bsdcpio.
900 +
901 +        Also previously, ctriv has been connecting Perl 5.10
902 +        to the build (part of os).  This will have an impact
903 +        on mports.
904 +
905 + 20090325:
906 +        Update Bind to 9.4.3-P1
907 +
908 +        Update mksh to R36b
909 +
910 +        Update tcpdump to 3.9.8, fix libpcap to work with current.
911 +
912 +        Update pnpinfo, sync with FreeBSD.
913 +
914 + 20090115:
915 +        Fix a problem with DNSSEC and BIND.
916 +
917 + 20090110:
918 +        For applications using OpenSSL for SSL connections, an invalid SSL
919 +        certificate may be interpreted as valid.  This could for example be
920 +        used by an attacker to perform a man-in-the-middle attack.
921 +
922 +        Other applications which use the OpenSSL EVP API may similarly be
923 +        affected.
924 +
925 +        Stop cross site request forgery attacks in lukemftpd
926 +
927 + 20090104:
928 +        Import GNU libreadline 5.2
929 +
930 + 20090101:
931 +        Update time zone data to 2008i.
932 +
933 + 20081231:
934 +        Correct a problem where bluetooth and netgraph sockets are not
935 +        properly initialized.
936 +
937 +        Happy 2009.
938 +
939 + 20081206:
940 +        Due to the massive change in the underlying system under way,
941 +        we're naming the next release 1.0.  The sys/sys/param.h was
942 +        changed accordingly.  ipfilter and ncurses were corrected
943 +        using __MidnightBSD__ tests in the code.  
944 +
945 +        The GENERIC kernel config was caught up on i386 today.  Consider
946 +        i386 still broken, but amd64 is running again.
947 +
948 +        mdoc.local was updated with the new MidnightBSD version info.
949 +
950 +        batt(1) was rewritten in C.  It now supports several flags and
951 +        runs about 8 times faster on my laptop.  The default output
952 +        shows the number of minutes of battery life remaining and the
953 +        percentage.  You can use -u to display the number of batteries or
954 +        -c to get script friendly output.  Consult the man page for more.
955 +
956 + 20081204:
957 +        Work has completed on importing ZFS, jemalloc, several
958 +        new devices, SCTP, updated pf, a new tempfs, linuxolator 2.6 kernel
959 +        support, improved locking for file desc., audit (openbsm),
960 +        openssl .98e, nfe, imporved intel high def audio, midi, updated
961 +        intel gigabit (em), support for several wifi cards (intel), ...
962 +
963 +        Renamed 0.3-CURRENT officially. Switched to using MidnightBSD version
964 +        data from param.h instead of the FreeBSD version.  This means
965 +        testing is now possible in the ports tree for the version
966 +        and that any ports or code relying on the FreeBSD version from
967 +        sys/sys/param.h will need to be fixed.
968 +
969 + 20080905:
970 +        update nve(4) to support new hardware.
971 +
972 + 20080801:
973 +        Import OpenBSM 1.0
974 +
975 +        Modify src/release to create 3 isos instead of 2 for packages.
976 +
977 +        etc/rc.d/firstboot now enables kdm, gnustep + slim and bsdstats.
978 +
979 +        Many ia64, alpha, powerpc items were removed.
980 +
981 +        The recent diffutils 2.8.7 import was fixed.
982 +
983 + 20080703:
984 +        pcc was not installed properly when setting DESTDIR for live cds,
985 +        or posibly jails.
986 +
987 + 20080627:
988 +        Add firmware(9), WEP, CCMP, TKIP to GENERIC.
989 +
990 +        Add glabel to GENERIC.
991 +
992 +        Intel ICH8 mobile chipset used on some iMacs included with ata.
993 +
994 +        pcc connected to the build on i386. (alternative compiler)
995 +
996 +        ath added to GENERIC.  (Atheros wireless NICs) on amd64/i386
997 +
998 + 20080528:
999 +        Sendmail 8.14.3
1000 +
1001   20080516:
1002          ssh-vulnkey allows you to look for vulnerable ssh keys that
1003          were generated on Debian and Ubuntu hosts over the last
# Line 562 | Line 1557 | Contact Warner Losh if you have any questions about yo
1557   this document.
1558  
1559   $FreeBSD: src/UPDATING,v 1.416.2.18 2006/02/22 11:51:57 yar Exp $
1560 < $MidnightBSD: src/UPDATING,v 1.36 2008/05/01 04:46:25 laffer1 Exp $
1560 > $MidnightBSD$

Comparing trunk/UPDATING (property cvs2svn:cvs-rev):
Revision 1598 by laffer1, Fri May 16 22:38:32 2008 UTC vs.
Revision 7065 by laffer1, Sun Jun 21 18:59:54 2015 UTC

# Line 1 | Line 0
1 1.37

Comparing trunk/UPDATING (property svn:keywords):
Revision 1598 by laffer1, Fri May 16 22:38:32 2008 UTC vs.
Revision 7065 by laffer1, Sun Jun 21 18:59:54 2015 UTC

# Line 0 | Line 1
1 + MidnightBSD=%H

Diff Legend

Removed lines
+ Added lines
< Changed lines
> Changed lines