ViewVC Help
View File | Revision Log | Show Annotations | Download File | View Changeset | Root Listing
root/src/trunk/UPDATING
(Generate patch)

Comparing trunk/UPDATING (file contents):
Revision 3394 by laffer1, Sat May 1 00:14:17 2010 UTC vs.
Revision 7164 by laffer1, Sun Jul 26 17:42:19 2015 UTC

# Line 1 | Line 1
1 < Updating Information for MidnightBSD users
1 > Updating Information for MidnightBSD users.
2  
3 + 20160726:
4 +        BSD Sort updated
5 +
6 + 20160725:
7 +        Import reallocarray from OpenBSD's libc.  
8 +
9 +        The reallocarray() function is similar to realloc() except it operates on
10 +        nmemb members of size size and checks for integer overflow in the
11 +        calculation nmemb * size.
12 +
13 + 20150722:
14 +        Fix a bug where TCP connections transitioning to LAST_ACK
15 +        state can get stuck. This can result in a denial of service.
16 +
17 + 20150715:
18 +        libmport now supports @shell and @sample in plists. This means that
19 +        a shell port can automatically add an entry to /etc/shells and remove
20 +        it upon uninstallation. For sample files, a copy is made without the
21 +        .sample extension if one does not exist and it is removed automatically
22 +        only if the md5 hash of the two files is the same.
23 +
24 + 20150709:
25 +        flex 2.5.39
26 +
27 + 20150702:
28 +        ZFS in MidnightBSD now supports lz4 compression. You can enable it
29 +        with zfs set compression=lz4 pool/path.
30 +
31 +        Verify it's working with
32 +        zfs get compressratio pool/path
33 +        du -h -s *
34 +
35 +        Note you must write new data when turning on compression to see
36 +        changes. Existing files are not compressed.
37 +
38 +        Note: While we used the same basic implementation of lz4 that
39 +        FreeBSD and OpenZFS uses, we did not yet implement features support
40 +        and the zfs version still reports 28. This may come in a future update
41 +        to ZFS.
42 +
43 + 20150621:
44 +        libmport now automatically stops services when deleting packages.
45 +
46 +        The package must have installed an rc.d script in /usr/local/etc
47 +        for this to work. This is equivalent to running service <name> onestop
48 +
49 + 20150618:
50 +        Sendmail
51 +
52 +        With the recent changes to OpenSSL to block 512 bit certificates,
53 +        sendmail can't connect with TLS to some servers.
54 +
55 +        Increase the default size to 1024 bit for client connections to
56 +        match the server configuration.
57 +
58 +        ZFS
59 +
60 +        Added ZFS TRIM support which is enabled by default. To disable
61 +        ZFS TRIM support set vfs.zfs.trim.enabled=0 in loader.conf.
62 +
63 +        Creating new ZFS pools and adding new devices to existing pools
64 +        first performs a full device level TRIM which can take a significant
65 +        amount of time. The sysctl vfs.zfs.vdev.trim_on_init can be set to 0
66 +        to disable this behaviour.
67 +
68 +        ZFS TRIM requires the underlying device support BIO_DELETE which
69 +        is currently provided by methods such as ATA TRIM and SCSI UNMAP
70 +        via CAM, which are typically supported by SSD's.
71 +
72 +        Stats for ZFS TRIM can be monitored by looking at the sysctl's
73 +        under kstat.zfs.misc.zio_trim.
74 +
75 +        rc.d
76 +
77 +        Reworked handling of cleanvar and FILESYSTEMS so that FILESYSTEMS
78 +        implies everything is mounted and ready to go.
79 +
80 +        Changed how ip6addressctl maps IPv6 on startup.
81 +
82 + 20150613:
83 +        tzdata 2015d
84 +
85 + 20150612:
86 +        OpenSSL 0.9.8zg
87 +
88 + 20150419:
89 +        MidnightBSD 0.6 stable branch created. Continue 0.7
90 +        development.
91 +
92 + 20150418:
93 +        sqlite 3.8.9
94 +
95 + 20150407:
96 +        Fix two security vulnerabilities:
97 +
98 +        The previous fix for IGMP had an overflow issue. This has been corrected.
99 +
100 +        ipv6: The Neighbor Discover Protocol allows a local router to advertise a
101 +        suggested Current Hop Limit value of a link, which will replace
102 +        Current Hop Limit on an interface connected to the link on the MidnightBSD
103 +        system.
104 +
105 + 20150319:
106 +        OpenSSL 0.9.8.zf
107 +
108 +        mksh R50e
109 +
110 +        Apple mDNSResponder 561.1.1
111 +
112 + 20150306:
113 +        Upgrade OpenSSL to 0.9.8ze
114 +
115 + 20150225:
116 +        Fix two security vulnerabilities.
117 +
118 +        1. BIND servers which are configured to perform DNSSEC validation and which
119 +        are using managed keys (which occurs implicitly when using
120 +        "dnssec-validation auto;" or "dnssec-lookaside auto;") may exhibit
121 +        unpredictable behavior due to the use of an improperly initialized
122 +        variable.
123 +
124 +        CVE-2015-1349
125 +
126 +        2. An integer overflow in computing the size of IGMPv3 data buffer can result
127 +        in a buffer which is too small for the requested operation.
128 +
129 +        This can result in a DOS attack.
130 +
131 + 20141211:
132 +        Fix a security issue with file and libmagic that can allow
133 +        an attacker to create a denial of service attack on any
134 +        program that uses libmagic.
135 +
136 + 20141109:
137 +        Fix building perl during buildworld when the GDBM port is installed.
138 +
139 + 20141106:
140 +        tzdata 2014i
141 +
142 + 20141102:
143 +        serf 1.3.8
144 +
145 + 20141031:
146 +        tnftp 20141031 fixes a security vulnerability with tnftp,
147 +        CVE-2014-8517.
148 +
149 + 20141028:
150 +        OpenSSL 0.9.8zc
151 +
152 + 20141021:
153 +        Fix several security vulnerabilities in routed, rtsold,
154 +        and namei with respect to Capsicum sandboxes looking up
155 +        nonexistent path names and leaking memory.
156 +
157 +        The input path in routed(8) will accept queries from any source and
158 +        attempt to answer them.  However, the output path assumes that the
159 +        destination address for the response is on a directly connected
160 +        network.
161 +
162 +        Due to a missing length check in the code that handles DNS parameters,
163 +        a malformed router advertisement message can result in a stack buffer
164 +        overflow in rtsold(8).
165 +
166 + 20141011:
167 +        mksh R50d - fix field splitting regression and null
168 +        pointer dereference
169 +
170 +        xz 5.0.7
171 +
172 +        OpenSSH 6.6p1
173 +
174 + 20141004:
175 +        mksh R50c - security update for environment var bug with
176 +        foo vs foo+    
177 +
178 + 20141002:
179 +        sqlite 3.8.6
180 +
181 +        sudo 1.7.8 - some issues with the current version, but we're slowly
182 +        getting up to date.
183 +
184 + 20141001:
185 +        mksh R50b
186 +
187 +        libmport now supports plist commands @dir, @owner, @group, @mode.
188 +
189 +        sudo 1.7.6p2
190 +
191 + 20140916:
192 +        Fix a security issue with TCP SYN.
193 +
194 +        When a segment with the SYN flag for an already existing connection arrives,
195 +        the TCP stack tears down the connection, bypassing a check that the
196 +        sequence number in the segment is in the expected window.
197 +
198 + 20140909:
199 +        Fixed a bug with our clearenv(3) implementation that caused segfaults
200 +        with some programs including Dovecot.
201 +
202 +        OpenSSL security patch:
203 +
204 +        The receipt of a specifically crafted DTLS handshake message may cause OpenSSL
205 +        to consume large amounts of memory. [CVE-2014-3506]
206 +
207 +        The receipt of a specifically crafted DTLS packet could cause OpenSSL to leak
208 +        memory. [CVE-2014-3507]
209 +
210 +        A flaw in OBJ_obj2txt may cause pretty printing functions such as
211 +        X509_name_oneline, X509_name_print_ex et al. to leak some information from
212 +        the stack. [CVE-2014-3508]
213 +
214 +        OpenSSL DTLS clients enabling anonymous (EC)DH ciphersuites are subject to
215 +        a denial of service attack. [CVE-2014-3510]
216 +
217 + 20140902:
218 +        We're now 0.6-CURRENT
219 +
220 +        Update USB quirks to support K70 Corsair keyboard, and several
221 +        other devices.
222 +
223 + 20140827:
224 +        Perl 5.18.2
225 +
226 + 20140728:
227 +        Jails now run shutdown scripts.
228 +
229 + 20140710:
230 +        Fix a vulnerability in the control message API. A buffer is not properly cleared
231 +        before sharing with userland.
232 +
233 + 20140701:
234 +        MKSH R50
235 +
236 + 20140630:
237 +        File 5.19
238 +
239 + 20140605:
240 +        Fix four security issues with OpenSSL
241 +
242 + 20140604:
243 +        Sendmail failed to properly set close-on-exec for open file descriptors.
244 +
245 +        ktrace page fault kernel trace entries were set to an incorrect size which resulted
246 +        in a leak of information.
247 +
248 + 20140430:
249 +        Fix a TCP reassembly bug that could result in a DOS attack
250 +        of the system. It may be possible to obtain portions
251 +        of kernel memory as well.
252 +
253 + 20140411:
254 +        Update zlib to 1.2.7
255 +
256 + 20140122:
257 +        Support for username with length 32. Previous limit was 16
258 +
259 + 20140114:
260 +        Fix two security vulnerabilities.
261 +
262 +        bsnmpd contains a stack overflow when sent certain queries.
263 +
264 +        bind 9.8 when using NSEC3-signed zones zones, will crash with special
265 +        crafted packets.
266 +
267 + 20131228:
268 +        Imported FreeBSD 9.2 usb stack (plus z87 patches from stable)
269 +
270 +        Updated em(4), igb(4) and ixgbe(4)
271 +
272 +        MidnightBSD now works with Z87 Intel chipsets.
273 +
274 + 20131207:
275 +        Remove sparc64 architecture. It hasn't been working for awhile
276 +        and it's not useful for desktops anymore.
277 +
278 + 20131205:
279 +        OpenSSH 6.4p1
280 +
281 + 20131203:
282 +        Perl 5.18.1 imported.
283 +
284 +        Update less to v458
285 +
286 + 20131130:
287 +        Remove named from base. We still include the client utilities for
288 +        now until replacements can be found.
289 +
290 + 20131004:
291 +        rarpd supports vlan(4) and has a pid flag. (from FreeBSD)
292 +
293 + 20130917:
294 +        Support for 65,536 routing tables was added.  A new fib specific
295 +        field has been added to mbuf.  This is an increase from 16.
296 +
297 + 20130910:
298 +        Security updates: (kern.osreldate 5001)
299 +
300 +        nullfs(5)
301 +
302 +        The nullfs(5) implementation of the VOP_LINK(9) VFS operation does not
303 +        check whether the source and target of the link are both in the same
304 +        nullfs instance.  It is therefore possible to create a hardlink from a
305 +        location in one nullfs instance to a file in another, as long as the
306 +        underlying (source) filesystem is the same.
307 +
308 +        ifioctl
309 +
310 +        As is commonly the case, the IPv6 and ATM network layer ioctl request
311 +        handlers are written in such a way that an unrecognized request is
312 +        passed on unmodified to the link layer, which will either handle it or
313 +        return an error code.
314 +
315 +        Network interface drivers, however, assume that the SIOCSIFADDR,
316 +        SIOCSIFBRDADDR, SIOCSIFDSTADDR and SIOCSIFNETMASK requests have been
317 +        handled at the network layer, and therefore do not perform input
318 +        validation or verify the caller's credentials.  Typical link-layer
319 +        actions for these requests may include marking the interface as "up"
320 +        and resetting the underlying hardware.
321 +
322 + 20130824:
323 +        Fix a bug in sendmail 8.14.7 that interferes with how it
324 +        handles AAAA records interoperating with Microsoft DNS servers.
325 +        FreeBSD has already reported this to Sendmail and a fix
326 +        will be included in the next release.
327 +
328 +        Subversion 1.8.1 is now in the base system as a static
329 +        binary.  It has limited functionality, but can be used to
330 +        checkout/commit code.  It is named svnlite.
331 +
332 + 20130822:
333 +        Fix two security vulnerabilities.
334 +
335 +        Fix an integer overflow in IP_MSFILTER (IP MULTICAST).
336 +        This could be exploited to read memory by a user process.
337 +
338 +        When initializing the SCTP state cookie being sent in INIT-ACK chunks,
339 +        a buffer allocated from the kernel stack is not completely initialized.
340 +
341 +        Import xz 5.0.4
342 +
343 +        Import sqlite 3.7.17
344 +
345 +        Import BIND 9.8.5-P2
346 +
347 + 20130814:
348 +        mksh R48 imported.
349 +
350 +        Sendmail 8.14.7 imported.
351 +
352 + 20130717:
353 +        libmport bug was fixed causing hash verification to fail.
354 +
355 +        virtio(4) imported from FreeBSD 9-stable. SCSI support not
356 +        included.
357 +
358 + 20130612:
359 +        RELENG_0_4 created for 0.4. Development continues on 0.5.
360 +
361 + 20130402:
362 +        Update BIND and OpenSSL to resolve security advisories.
363 +
364 + 20130305:
365 +        MKSH R44 imported.
366 +
367 + 20130213:
368 +        MKSH R42b imported
369 +
370 + 20130211:
371 +        MKSH R42 imported
372 +
373 + 20130125:
374 +        MKSH R41 imported
375 +
376 + 20130122:
377 +        OpenSSH 5.8p2 imported
378 +
379 +        SQLite 3.7.15.2 imported
380 +
381 +        Fixed a longstanding bug in libmport extrating new index files.
382 +
383 + 20120710:
384 +        BSD licensed sort imported from FreeBSD-CURRENT
385 +
386 +        For now, GNU sort is installed as gnusort, but it will
387 +        go away in time.
388 +
389 + 20120708:
390 +        tcsh 6.18.01 imported.
391 +
392 +        NetBSD's iconv imported.
393 +
394 +        libc gains strnlen(3), memrchr(3), stpncpy(3).
395 +
396 + 20120612:
397 +        BIND security update related to CVE-2012-1667.
398 +
399 +        Zero length resource records can cause BIND to crash resulting
400 +        in a DOS attack or information disclosure.
401 +
402 + 20120407:
403 +        mksh R40f (fixes regression)
404 +
405 + 20120328:
406 +        mksh R40e
407 +
408 +        Perl 5.14.2
409 +
410 + 20120229:
411 +        cpucontrol(8) and cpuctl(4) added from FreeBSD 7-stable.
412 +
413 + 20120209:
414 +        mDNSResponder 333.10 imported
415 +
416 + 20111227:
417 +        import raid5 module for GEOM, graid5(8)
418 +
419 +        This is experimental and known to use a lot of kernel
420 +        memory.
421 +
422 + 20111223:
423 +        telnetd: fix a root exploit from a fixed buffer that was not checked
424 +
425 +        pam: don't allow escape from policy path.  Exploitable in KDE, etc.
426 +
427 +        Fix pam_ssh module:
428 +
429 +        If the pam_ssh module is enabled, attackers may be able to gain access
430 +        to user accounts which have unencrypted SSH private keys.
431 +
432 +        This has to due with the way that openssl works.  It ignores unencrpted data.
433 +
434 +        Fix security issue with chroot and ftpd.
435 +
436 +        nsdispatch(3) doesn't know it's working in a chroot and some
437 +        operations can cause files to get reloaded causing a security
438 +        hole in things like ftpd.
439 +
440 + 20111217:
441 +        libdialog/dialog upgraded to an lgpl version. As it's not
442 +        backwardly compatable, include the old libdialog as libodialog
443 +
444 + 20111212:
445 +        mksh r40d imported
446 +
447 + 20111210:
448 +        re(4) and rl(4) updated to support new chips.
449 +
450 +        GEOM synced with FreeBSD 7-stable.
451 +
452 +        MidnightBSD GPT partition types created in sys/gpt.h and
453 +        setup in boot loader and GEOM.
454 +
455 +        amdsbwd(4) (amd watchdog for south bridge) updated to support
456 +        8xx series chipset.
457 +
458 + 20111207:
459 +        import bsd grep from FreeBSD/OpenBSD.
460 +
461 +        MK_BSD_GREP controls which grep is installed
462 +        as grep with the other as bsdgrep or gnugrep.
463 +
464 + 20111122:
465 +        mksh vR40c imported.
466 +
467 + 20111117:
468 +        BIND 9.6 ESV R5 P1
469 +
470 + 20111107:
471 +        tzdata 2011n
472 +
473 + 20111026:
474 +        mDNSResponder v320
475 +
476 +        BIND 9.6 ESV R5
477 +
478 + 20111022:
479 +        cflow 0.0.6 imported
480 +
481 + 20111020:
482 +        less v436 imported
483 +
484 +        amdsbwd(4) AMD southbridge watchdog
485 +
486 + 20111019:
487 +        awk 20110810 imported
488 +
489 +        et(4) Agere Gigabit Ethernet/Fast Ethernet driver added, but
490 +        not included in GENERIC kernel.  The kernel module needs
491 +        testing before we can include it in GENERIC.
492 +
493 +        intr_bind code ported to allow an IRQ to be bound to one
494 +        specific CPU core.
495 +
496 + 20111017:
497 +        Time Zone Data v. 2011l (Released 10 October 2011)
498 +
499 +        Updated list of countries (iso3166) to work with new timezone data.
500 +
501 + 20111015:
502 +        Introduce CPU Affinity in MidnightBSD. cpuset(1) can be used
503 +        to control which core or group of cores can be used for a given
504 +        process. Several new system calls were added to support this
505 +        functionality in the running kernel and for 32bit binary
506 +        compatibility on amd64.
507 +
508 +        The scheduler default has been changed to ULE in i386 and
509 +        amd64.  Changes were made to both schedulers (4BSD AND ULE)
510 +        for this feature.
511 +
512 +        This work is based on Jeff Roberson's FreeBSD 7.1 patches.
513 +
514 + 20111004:
515 +        Fix a problem with unix socket handling caused by the recent
516 +        patch to unix socket path handling. This allows network
517 +        apps to work under the linuxolator again.
518 +
519 + 20111001:
520 +        Import libfetch & fetch(1) from FreeBSD 9. Passive FTP is
521 +        now default and an environment variable must be set to use
522 +        active.
523 +
524 + 20110930:
525 +        Introduce quirks handling for several umass devices including
526 +        USB cameras.  Add workaround for Cyberpower UPS devices.
527 +
528 +        Bring in further bug fixes from FreeBSD and NetBSD for alc(4).
529 +        Stale ip/tcp header pointers are no longer used, lockups fixed
530 +        when network cable is unplugged on bootup, enable TX checksum
531 +        offloading.
532 +
533 +        Add a new man page for gcache(8), a useful geom class when
534 +        working with large raid3 sets.
535 +
536 +        Restore previous workaround for Cypress pata storage controller.
537 +
538 + 20110929:
539 +        Sync ath(4) with FreeBSD 7.3.
540 +
541 +        The following modules are no longer available, and should be
542 +        removed from loader.conf:
543 +        ath_hal ath_rate_amrr ath_rate_onoe ath_rate_sample
544 +
545 +        alc(4) would hibernate when a cable was unplugged and often
546 +        required bring the interface down and up to "wake up" so that
547 +        a connection could be established.  Disable hibernation.
548 +
549 + 20110928:
550 +        Fix security issues with gzip and compress related to .Z
551 +        files that are corrupted.
552 +
553 +        Fix path validation with unix domain sockets.
554 +
555 + 20110917:
556 +        Remove dependance on mports perl for generating releases as
557 +        it's in the base system.
558 +
559 + 20110914:
560 +        Import xz 5.0.3 with liblzma 5.0.3
561 +
562 + 20110813:
563 +        synced the sparc64 GENERIC kernel configuration with amd64.
564 +
565 + 20110806:
566 +        sqlite 3.7.7.1 imported
567 +
568 +        msearch(1), libmsearch and msearch.import added.  msearch(1) provides
569 +        a full text search command line tool.  libmsearch can also be used
570 +        to build a graphical based search in the future. You can enable
571 +        index building for msearch in periodic.conf or manually run the
572 +        /usr/libexec/msearch.index tool.  Full text indexes take considerable
573 +        space in /var.  I'm using approximately 500MB currently.
574 +
575 +        Fix a long standing bug with the periodic script to check package
576 +        versions.  This will be obsolete with mport though.
577 +
578 + 20110710:
579 +        kdb_enter_why added to MidnightBSD to allow the kernel debugger to
580 +        know why it's in use and thus script can be run.
581 +
582 +        Yet another problem with the perl manifest was fixed
583 +
584 + 20110709:
585 +        cpufreq(1) is a new utility to monitor CPU frequency which may change
586 +        with use of powerd(8) and cpufreq(4).
587 +
588 + 20110612:
589 +        Update mksh to R40
590 +
591 +        Catch up ObsoleteFiles.inc to remove Perl 5.10.x.  Good to run when
592 +        updating current (cd /usr/src && make check-old)
593 +
594 + 20110528:
595 +        Fix CVE-2011-1910 in BIND 9.6.x.  This affects caching resolvers.
596 +
597 + 20110526:
598 +        newfs:
599 +        Raised the default blocksize for UFS/FFS filesystems from
600 +        16K to 32K and the default fragment size from 2K to 4K.
601 +
602 +        This should slightly imporve performance on "advanced format"
603 +        hard drives such as the WD EARS drives. Drives of this type
604 +        have emulation modes that slow down with lower sizes.  Of course
605 +        the drive must still be aligned properly when using fdisk.
606 +
607 + 20110521:
608 +        mport tool now has a deleteall command.  This can be used to remove
609 +        all packages from a system.
610 +
611 +        A few bugs with the perl 5.14 import have been fixed.
612 +
613 + 20110518:
614 +        Perl 5.14.0
615 +
616 + 20110517:
617 +        Sendmail 8.14.5
618 +
619 + 20110314:
620 +        DRM/DRI code updated to support newer video cards. (FreeBSD 7.1)
621 +
622 +        cdevpriv wrappers added
623 +
624 +        nss_mdns hack introduced to work around linking problem.
625 +
626 +        dnsextd fixed after update to mDNSResponder code.
627 +
628 + 20110308:
629 +        Introduce liblzma & xz 5.0.1 to the base system
630 +
631 +        Patch for OpenSSL security issue CVE-2011-0014.
632 +
633 +        "OSREVISION 4004"
634 +
635 +        nsswitch module for multicast dns (nss_mdns) added.
636 +
637 +        tzdata2011c
638 +
639 + 20110220:
640 +        cam(4) syncronized with FreeBSD 7.3.
641 +
642 + 20110219:
643 +        amdtemp(4) updated to support sensors framework.
644 +
645 + 20110217:
646 +        Perl 5.10.1 imported
647 +
648 + 20110216:
649 +        Introduce igb(4) and split Intel Gigabit Ethernet adapters between
650 +        igb(4) and em(4).  Newer devices use igb(4).  The code has moved
651 +        to sys/dev/e1000 for both devices in the kernel. igb(4) has
652 +        been placed in GENERIC on i386 and amd64.
653 +
654 +        Update bfe(4) to support newer devices and WOL.
655 +
656 + 20110215:
657 +        age(4) added.
658 +
659 + 20110208:
660 +        BIND 9.6.3 which fixes a bug with DNSSEC records getting added.
661 +
662 + 20110206:
663 +        eeemon(4) added to monitor Asus Eee PC.
664 +
665 + 20110205:
666 +        OpenSSH 5.7p1
667 +
668 +        GNU sort 6.9 (coreutils)
669 +
670 + 20110203:
671 +        one true awk 20100523 imported
672 +
673 +        sqlite 3.7.5
674 +
675 +        OpenSSL 0.9.8q
676 +
677 + 20110202:
678 +        tcsh 6.17.00
679 +
680 +        file 5.05
681 +
682 + 20110122:
683 +        Import it(4) and lm(4), with support for Super I/O hardware monitors. This
684 +        uses the sensors framework ported by Constantine A. Murenin (GSOC2007)
685 +
686 + 20110120:
687 +        BIND 9.6.2-P3
688 +
689 +        sudo 1.7.4-p6
690 +
691 + 20110115:
692 +        Add experimental jme(4) for Jmicron ethernet devices.
693 +
694 + 20101130:
695 +        A double free exists in the SSL client ECDH handling code, when
696 +        processing specially crafted public keys with invalid prime
697 +        numbers. [CVE-2010-2939]
698 +
699 + 20101120:
700 +        Several portions of the kernel and userland code related to UFS file
701 +        systems (and UFS2) cannot properly handle inode counts above 2^31 due
702 +        to use of int types.  Based on a patch from FreeBSD, I've modified
703 +        our UFS2 implementation to handle unsigned values for inode counts
704 +        which should allow for file systems greater than 16TB.
705 +
706 +        newfs and growfs was also modified.
707 +
708 + 20101110:
709 +        Fix a security issue with pseudofs which could result in running code in kernel
710 +        context or a kernel panic depending on system configuration.  This affects file
711 +        systems such as procfs for instance.
712 +
713 + 20101021:
714 +        sysrc is a utility to print and modify name/value pairs in /etc/rc.conf easily.
715 +        This is similar to functions present in many linux distros. The utility was
716 +        written by Devin Teske for FreeBSD.
717 +
718 + 20100920:
719 +        bzip2 security patch for integer overflow.
720 +
721 + 20100905:
722 +        MidnightBSD RELENG_0_3 branch created.  Aggressive development continues here
723 +        for 0.4.
724 +
725 + 20100902:
726 +        Fix a security issue with libutil that allows users to bypass cpu limits in
727 +        login.conf in some cases.  This combined with OpenSSH for example can allow
728 +        the user to get more resources than they're allowed.
729 +
730 + 20100822:
731 +        Import Apple's mDNSResponder (mdnsd).
732 +
733 + 20100814:
734 +        libdispatch added to MidnightBSD.  This provides functionality found in
735 +        Mac OS X's GCD.  We do not have blocks support yet.  As this code is
736 +        licensed under Apache 2, we create a new MK_APACHE option so that
737 +        it's not required for all users to run code under a license they
738 +        may not like.
739 +
740 + 20100713:
741 +        mbuf readonly fix related to sendfile(2) data corruption.
742 +
743 + 20100704:
744 +        brainfuck(1) imported from MirBSD.
745 +
746 + 20100505:
747 +        zlib 1.2.5
748 +
749   20100430:
750          Sudo 1.7.2p6 imported
751  
# Line 850 | Line 1596 | Contact Warner Losh if you have any questions about yo
1596   this document.
1597  
1598   $FreeBSD: src/UPDATING,v 1.416.2.18 2006/02/22 11:51:57 yar Exp $
1599 < $MidnightBSD: src/UPDATING,v 1.87 2010/03/21 20:05:10 laffer1 Exp $
1599 > $MidnightBSD$

Comparing trunk/UPDATING (property cvs2svn:cvs-rev):
Revision 3394 by laffer1, Sat May 1 00:14:17 2010 UTC vs.
Revision 7164 by laffer1, Sun Jul 26 17:42:19 2015 UTC

# Line 1 | Line 0
1 1.88

Comparing trunk/UPDATING (property svn:keywords):
Revision 3394 by laffer1, Sat May 1 00:14:17 2010 UTC vs.
Revision 7164 by laffer1, Sun Jul 26 17:42:19 2015 UTC

# Line 0 | Line 1
1 + MidnightBSD=%H

Diff Legend

Removed lines
+ Added lines
< Changed lines
> Changed lines