ViewVC Help
View File | Revision Log | Show Annotations | Download File | View Changeset | Root Listing
root/src/trunk/UPDATING
(Generate patch)

Comparing trunk/UPDATING (file contents):
Revision 6768 by laffer1, Tue Sep 16 23:42:27 2014 UTC vs.
Revision 6983 by laffer1, Fri Mar 20 00:53:47 2015 UTC

# Line 1 | Line 1
1   Updating Information for MidnightBSD users.
2  
3 + 20150319:
4 +        OpenSSL 0.9.8.zf
5 +
6 +        mksh R50e
7 +
8 + 20150306:
9 +        Upgrade OpenSSL to 0.9.8ze
10 +
11 + 20150225:
12 +        Fix two security vulnerabilities.
13 +
14 +        1. BIND servers which are configured to perform DNSSEC validation and which
15 +        are using managed keys (which occurs implicitly when using
16 +        "dnssec-validation auto;" or "dnssec-lookaside auto;") may exhibit
17 +        unpredictable behavior due to the use of an improperly initialized
18 +        variable.
19 +
20 +        CVE-2015-1349
21 +
22 +        2. An integer overflow in computing the size of IGMPv3 data buffer can result
23 +        in a buffer which is too small for the requested operation.
24 +
25 +        This can result in a DOS attack.
26 +
27 + 20141211:
28 +        Fix a security issue with file and libmagic that can allow
29 +        an attacker to create a denial of service attack on any
30 +        program that uses libmagic.
31 +
32 + 20141109:
33 +        Fix building perl during buildworld when the GDBM port is installed.
34 +
35 + 20141106:
36 +        tzdata 2014i
37 +
38 + 20141102:
39 +        serf 1.3.8
40 +
41 + 20141031:
42 +        tnftp 20141031 fixes a security vulnerability with tnftp,
43 +        CVE-2014-8517.
44 +
45 + 20141028:
46 +        OpenSSL 0.9.8zc
47 +
48 + 20141021:
49 +        Fix several security vulnerabilities in routed, rtsold,
50 +        and namei with respect to Capsicum sandboxes looking up
51 +        nonexistent path names and leaking memory.
52 +
53 +        The input path in routed(8) will accept queries from any source and
54 +        attempt to answer them.  However, the output path assumes that the
55 +        destination address for the response is on a directly connected
56 +        network.
57 +
58 +        Due to a missing length check in the code that handles DNS parameters,
59 +        a malformed router advertisement message can result in a stack buffer
60 +        overflow in rtsold(8).
61 +
62 + 20141011:
63 +        mksh R50d - fix field splitting regression and null
64 +        pointer dereference
65 +
66 +        xz 5.0.7
67 +
68 +        OpenSSH 6.6p1
69 +
70 + 20141004:
71 +        mksh R50c - security update for environment var bug with
72 +        foo vs foo+    
73 +
74 + 20141002:
75 +        sqlite 3.8.6
76 +
77 +        sudo 1.7.8 - some issues with the current version, but we're slowly
78 +        getting up to date.
79 +
80 + 20141001:
81 +        mksh R50b
82 +
83 +        libmport now supports plist commands @dir, @owner, @group, @mode.
84 +
85 +        sudo 1.7.6p2
86 +
87   20140916:
88          Fix a security issue with TCP SYN.
89  

Diff Legend

– Removed lines
+ Added lines
< Changed lines
> Changed lines