[ViewVC] Diff of: src/trunk/UPDATING

Comparing trunk/UPDATING (file contents):
Revision 7306 by laffer1, Thu Sep 17 12:47:34 2015 UTC vs.
Revision 7581 by laffer1, Fri May 27 03:42:17 2016 UTC

+Updating Information for MidnightBSD users.
-+
+20160526:
-+
+        Add support for Ivybridge and Haswell Intel CPUs to hwpmc(4).
-+
-+
+        Fix libpmc(3) build with clang compiler.
-+
-+
+20160519:
-+
+        Kernel Security updates
-+
-+
+        atkbd(4) - Incorrect signedness comparison in the ioctl(2) handler allows a malicious
-+
+        local user to overwrite a portion of the kernel memory.
-+
-+
+        Incorrect argument handling in sendmsg(2)
-+
-+
+        Incorrect argument handling in the socket code allows malicious local
-+
+        user to overwrite large portion of the kernel memory.
-+
-+
+20160505:
-+
+        OpenSSL security patch
-+
-+
+        The padding check in AES-NI CBC MAC was rewritten to be in constant time
-+
+        by making sure that always the same bytes are read and compared against
-+
+        either the MAC or padding bytes. But it no longer checked that there was
-+
+        enough data to have both the MAC and padding bytes. [CVE-2016-2107]
-+
-+
+        An overflow can occur in the EVP_EncodeUpdate() function which is used for
-+
+        Base64 encoding of binary data. [CVE-2016-2105]
-+
-+
+        An overflow can occur in the EVP_EncryptUpdate() function, however it is
-+
+        believed that there can be no overflows in internal code due to this problem.
-+
+        [CVE-2016-2106]
-+
-+
+        When ASN.1 data is read from a BIO using functions such as d2i_CMS_bio()
-+
+        a short invalid encoding can casuse allocation of large amounts of memory
-+
+        potentially consuming excessive resources or exhausting memory.
-+
+        [CVE-2016-2109]
-+
-+
+20160412:
-+
+.8 stable branch created. Continue development as 0.9.
-+
-+
+        Fix several issues with wait6 system call addition.
-+
-+
+20160409:
-+
+        libmport now supports two new plist formats:
-+
+        @(root,wheel,4775) myfile
-+
+        @dir(root,wheel,775) mydir
-+
-+
+        On delete, absoluate paths are now handled properly.
-+
-+
+20160317:
-+
+        OpenSSH doesn't have the luck of the Irish.
-+
-+
+        Fix a security issue with OpenSSH X11 forwarding that can allow an attacker
-+
+        run shell commands on the call to xauth.
-+
-+
+        Incorrect argument validation in sysarch(2)
-+
-+
+        A special combination of sysarch(2) arguments, specify a request to
-+
+        uninstall a set of descriptors from the LDT.  The start descriptor
-+
+        is cleared and the number of descriptors are provided.  Due to invalid
-+
+        use of a signed intermediate value in the bounds checking during argument
-+
+        validity verification, unbound zero'ing of the process LDT and adjacent
-+
+        memory can be initiated from usermode.
-+
-+
+        Patch obtained from FreeBSD.
-+
-+
+20160229:
-+
+        top now displays information on ZFS arc cache.
-+
-+
+20160228:
-+
+        llvm + clang 3.3 is now the default compiler in MidnightBSD.
-+
-+
+20160222:
-+
+        Introduce pipe2 to linux emulation layer.
-+
-+
+20160114:
-+
+        OpenSSL
-+
-+
+        The signature verification routines will crash with a NULL pointer dereference
-+
+        if presented with an ASN.1 signature using the RSA PSS algorithm and absent
-+
+        mask generation function parameter. [CVE-2015-3194]
-+
-+
+        When presented with a malformed X509_ATTRIBUTE structure, OpenSSL will leak
-+
+        memory. [CVE-2015-3195]
-+
-+
+        If PSK identity hints are received by a multi-threaded client then the values
-+
+        are incorrectly updated in the parent SSL_CTX structure.  [CVE-2015-3196]
-+
-+
+        Fix security on bsnmpd configuration file during installation.
-+
-+
+        TCP MD5 signature denial of service
-+
-+
+        A programming error in processing a TCP connection with both TCP_MD5SIG
-+
+        and TCP_NOOPT socket options may lead to kernel crash.
-+
-+
+        SCTP
-+
-+
+        A lack of proper input checks in the ICMPv6 processing in the SCTP stack
-+
+        can lead to either a failed kernel assertion or to a NULL pointer
-+
+        dereference.  In either case, a kernel panic will follow.
-+
-+
+20160102:
-+
+        Happy New Year
-+
-+
+20151101:
-+
+        Increase kern.ipc.somaxconn default to 256.
-+
-+
+20151017:
-+
+        Add initial statistics api to libmport and a driver to print
-+
+        it in mport(1).
-+
-+
+20151002:
-+
+        Revised rpcbind(8) patch to fix issues with NIS
-+
-+
+20150930:
-+
+        In rpcbind(8), netbuf structures are copied directly, which would result in
-+
+        two netbuf structures that reference to one shared address buffer.  When one
-+
+        of the two netbuf structures is freed, access to the other netbuf structure
-+
+        would result in an undefined result that may crash the rpcbind(8) daemon.
-+
-+
+20150926:
-+
+        libmport now supports @preexec, @postexec, @preunexec and @postunexec
-+
+        to replace @exec and @unexec.
-+
-+
+        pre exec runs afer pre-install scripts but before actual installation
-+
-+
+        post exec runs after install but before post install scripts and
-+
+        pkg message.
-+
-+
+        pre unexec runs before pre uninstall scripts
-+
-+
+        post unexec runs before de-install scripts and after file removal.
-+
+20150917:
+        Fix kqueue write events for files > 2GB

Diff Legend

-–
+Removed lines
-+
+Added lines
-<
+Changed lines
->
+Changed lines

Comparing trunk/UPDATING (file contents): Revision 7306 by laffer1, Thu Sep 17 12:47:34 2015 UTC vs. Revision 7581 by laffer1, Fri May 27 03:42:17 2016 UTC

Diff Legend

Comparing trunk/UPDATING (file contents):
Revision 7306 by laffer1, Thu Sep 17 12:47:34 2015 UTC vs.
Revision 7581 by laffer1, Fri May 27 03:42:17 2016 UTC