[ViewVC] Diff of: src/trunk/UPDATING

Comparing trunk/UPDATING (file contents):
Revision 6711 by laffer1, Tue Jul 1 12:24:57 2014 UTC vs.
Revision 7555 by laffer1, Thu May 19 12:38:41 2016 UTC

+Updating Information for MidnightBSD users.
-+
+20160519:
-+
+        Kernel Security updates
-+
-+
+        atkbd(4) - Incorrect signedness comparison in the ioctl(2) handler allows a malicious
-+
+        local user to overwrite a portion of the kernel memory.
-+
-+
+        Incorrect argument handling in sendmsg(2)
-+
-+
+        Incorrect argument handling in the socket code allows malicious local
-+
+        user to overwrite large portion of the kernel memory.
-+
-+
+20160505:
-+
+        OpenSSL security patch
-+
-+
+        The padding check in AES-NI CBC MAC was rewritten to be in constant time
-+
+        by making sure that always the same bytes are read and compared against
-+
+        either the MAC or padding bytes. But it no longer checked that there was
-+
+        enough data to have both the MAC and padding bytes. [CVE-2016-2107]
-+
-+
+        An overflow can occur in the EVP_EncodeUpdate() function which is used for
-+
+        Base64 encoding of binary data. [CVE-2016-2105]
-+
-+
+        An overflow can occur in the EVP_EncryptUpdate() function, however it is
-+
+        believed that there can be no overflows in internal code due to this problem.
-+
+        [CVE-2016-2106]
-+
-+
+        When ASN.1 data is read from a BIO using functions such as d2i_CMS_bio()
-+
+        a short invalid encoding can casuse allocation of large amounts of memory
-+
+        potentially consuming excessive resources or exhausting memory.
-+
+        [CVE-2016-2109]
-+
-+
+20160412:
-+
+.8 stable branch created. Continue development as 0.9.
-+
-+
+        Fix several issues with wait6 system call addition.
-+
-+
+20160409:
-+
+        libmport now supports two new plist formats:
-+
+        @(root,wheel,4775) myfile
-+
+        @dir(root,wheel,775) mydir
-+
-+
+        On delete, absoluate paths are now handled properly.
-+
-+
+20160317:
-+
+        OpenSSH doesn't have the luck of the Irish.
-+
-+
+        Fix a security issue with OpenSSH X11 forwarding that can allow an attacker
-+
+        run shell commands on the call to xauth.
-+
-+
+        Incorrect argument validation in sysarch(2)
-+
-+
+        A special combination of sysarch(2) arguments, specify a request to
-+
+        uninstall a set of descriptors from the LDT.  The start descriptor
-+
+        is cleared and the number of descriptors are provided.  Due to invalid
-+
+        use of a signed intermediate value in the bounds checking during argument
-+
+        validity verification, unbound zero'ing of the process LDT and adjacent
-+
+        memory can be initiated from usermode.
-+
-+
+        Patch obtained from FreeBSD.
-+
-+
+20160229:
-+
+        top now displays information on ZFS arc cache.
-+
-+
+20160228:
-+
+        llvm + clang 3.3 is now the default compiler in MidnightBSD.
-+
-+
+20160222:
-+
+        Introduce pipe2 to linux emulation layer.
-+
-+
+20160114:
-+
+        OpenSSL
-+
-+
+        The signature verification routines will crash with a NULL pointer dereference
-+
+        if presented with an ASN.1 signature using the RSA PSS algorithm and absent
-+
+        mask generation function parameter. [CVE-2015-3194]
-+
-+
+        When presented with a malformed X509_ATTRIBUTE structure, OpenSSL will leak
-+
+        memory. [CVE-2015-3195]
-+
-+
+        If PSK identity hints are received by a multi-threaded client then the values
-+
+        are incorrectly updated in the parent SSL_CTX structure.  [CVE-2015-3196]
-+
-+
+        Fix security on bsnmpd configuration file during installation.
-+
-+
+        TCP MD5 signature denial of service
-+
-+
+        A programming error in processing a TCP connection with both TCP_MD5SIG
-+
+        and TCP_NOOPT socket options may lead to kernel crash.
-+
-+
+        SCTP
-+
-+
+        A lack of proper input checks in the ICMPv6 processing in the SCTP stack
-+
+        can lead to either a failed kernel assertion or to a NULL pointer
-+
+        dereference.  In either case, a kernel panic will follow.
-+
-+
+20160102:
-+
+        Happy New Year
-+
-+
+20151101:
-+
+        Increase kern.ipc.somaxconn default to 256.
-+
-+
+20151017:
-+
+        Add initial statistics api to libmport and a driver to print
-+
+        it in mport(1).
-+
-+
+20151002:
-+
+        Revised rpcbind(8) patch to fix issues with NIS
-+
-+
+20150930:
-+
+        In rpcbind(8), netbuf structures are copied directly, which would result in
-+
+        two netbuf structures that reference to one shared address buffer.  When one
-+
+        of the two netbuf structures is freed, access to the other netbuf structure
-+
+        would result in an undefined result that may crash the rpcbind(8) daemon.
-+
-+
+20150926:
-+
+        libmport now supports @preexec, @postexec, @preunexec and @postunexec
-+
+        to replace @exec and @unexec.
-+
-+
+        pre exec runs afer pre-install scripts but before actual installation
-+
-+
+        post exec runs after install but before post install scripts and
-+
+        pkg message.
-+
-+
+        pre unexec runs before pre uninstall scripts
-+
-+
+        post unexec runs before de-install scripts and after file removal.
-+
-+
+20150917:
-+
+        Fix kqueue write events for files > 2GB
-+
-+
+20150825:
-+
+        kernel:
-+
+        fix a security issue on amd64 where the GS segment CPU register can be changed via
-+
+        userland value in kernel mode by using an IRET with #SS or #NP exceptions.
-+
-+
+        openssh:
-+
+        A programming error in the privileged monitor process of the sshd(8)
-+
+        service may allow the username of an already-authenticated user to be
-+
+        overwritten by the unprivileged child process.
-+
-+
+        A use-after-free error in the privileged monitor process of he sshd(8)
-+
+        service may be deterministically triggered by the actions of a
-+
+        compromised unprivileged child process.
-+
-+
+        A use-after-free error in the session multiplexing code in the sshd(8)
-+
+        service may result in unintended termination of the connection.
-+
-+
+20150818:
-+
+        expat security fix
-+
-+
+20150815:
-+
+        libc changes:
-+
+        setmode(3) now returns errno consistently on error.
-+
+        libc will compile without error using clang
-+
-+
+20150814:
-+
+        wait6 system call added.
-+
-+
+        date(1) now handles non numeric numbers passed to -r
-+
+        like GNU coreutils for improved compatibility.
-+
-+
+20150811:
-+
+        ata(4) AMD Hudson2 SATA controller support.
-+
+        Intel lynxpoint SATA.
-+
-+
+        Fix some const warnings when building several device drivers
-+
+        with llvm/clang.
-+
-+
+        Sync cas(4) with FreeBSD 9-stable.
-+
-+
+        Fix some minor issues with ath(4).
-+
-+
+20150809:
-+
+        xz 5.0.8
-+
-+
+20150808:
-+
+        libmport now logs installation and removal of packages to syslog.
-+
-+
+20150805:
-+
+        routed - fix a potential security issue where traffic from outside
-+
+        the network can disrupt routing.
-+
-+
+        bsd patch - fix a bug with ed(1) scripts allowing unsanitized input
-+
+        to run.
-+
-+
+20150802:
-+
+        jansson 2.7 library added. (libjansson is a JSON library in C)
-+
-+
+20150728:
-+
+        Heimdal 1.5.2 (kerberos implementation)
-+
-+
+        OpenSSL 1.0.1o
-+
-+
+        cpucontrol(8) now supports VIA CPUs. Synced with FreeBSD 9.2.
-+
-+
+        TCP Resassemly resource exhaustion bug:
-+
+        There is a mistake with the introduction of VNET, which converted the
-+
+        global limit on the number of segments that could belong to reassembly
-+
+        queues into a per-VNET limit.  Because mbufs are allocated from a
-+
+        global pool, in the presence of a sufficient number of VNETs, the
-+
+        total number of mbufs attached to reassembly queues can grow to the
-+
+        total number of mbufs in the system, at which point all network
-+
+        traffic would cease.
-+
+        Obtained from: FreeBSD 8
-+
-+
+        OpenSSH
-+
-+
+        Fix two security vulnerabilities:
-+
+        OpenSSH clients does not correctly verify DNS SSHFP records when a server
-+
+        offers a certificate. [CVE-2014-2653]
-+
-+
+        OpenSSH servers which are configured to allow password authentication
-+
+        using PAM (default) would allow many password attempts. A bug allows
-+
+        MaxAuthTries to be bypassed. [CVE-2015-5600]
-+
-+
-+
+        Switch to bsdpatch (from FreeBSD & OpenBSD)
-+
-+
+20150726:
-+
+        BSD Sort updated
-+
-+
+        sqlite 3.8.10.2
-+
-+
+20150725:
-+
+        Import reallocarray from OpenBSD's libc.
-+
-+
+        The reallocarray() function is similar to realloc() except it operates on
-+
+        nmemb members of size size and checks for integer overflow in the
-+
+        calculation nmemb * size.
-+
-+
+20150722:
-+
+        Fix a bug where TCP connections transitioning to LAST_ACK
-+
+        state can get stuck. This can result in a denial of service.
-+
-+
+20150715:
-+
+        libmport now supports @shell and @sample in plists. This means that
-+
+        a shell port can automatically add an entry to /etc/shells and remove
-+
+        it upon uninstallation. For sample files, a copy is made without the
-+
+        .sample extension if one does not exist and it is removed automatically
-+
+        only if the md5 hash of the two files is the same.
-+
-+
+20150709:
-+
+        flex 2.5.39
-+
-+
+20150702:
-+
+        ZFS in MidnightBSD now supports lz4 compression. You can enable it
-+
+        with zfs set compression=lz4 pool/path.
-+
-+
+        Verify it's working with
-+
+        zfs get compressratio pool/path
-+
+        du -h -s *
-+
-+
+        Note you must write new data when turning on compression to see
-+
+        changes. Existing files are not compressed.
-+
-+
+        Note: While we used the same basic implementation of lz4 that
-+
+        FreeBSD and OpenZFS uses, we did not yet implement features support
-+
+        and the zfs version still reports 28. This may come in a future update
-+
+        to ZFS.
-+
-+
+20150621:
-+
+        libmport now automatically stops services when deleting packages.
-+
-+
+        The package must have installed an rc.d script in /usr/local/etc
-+
+        for this to work. This is equivalent to running service <name> onestop
-+
-+
+20150618:
-+
+        Sendmail
-+
-+
+        With the recent changes to OpenSSL to block 512 bit certificates,
-+
+        sendmail can't connect with TLS to some servers.
-+
-+
+        Increase the default size to 1024 bit for client connections to
-+
+        match the server configuration.
-+
-+
+        ZFS
-+
-+
+        Added ZFS TRIM support which is enabled by default. To disable
-+
+        ZFS TRIM support set vfs.zfs.trim.enabled=0 in loader.conf.
-+
-+
+        Creating new ZFS pools and adding new devices to existing pools
-+
+        first performs a full device level TRIM which can take a significant
-+
+        amount of time. The sysctl vfs.zfs.vdev.trim_on_init can be set to 0
-+
+        to disable this behaviour.
-+
-+
+        ZFS TRIM requires the underlying device support BIO_DELETE which
-+
+        is currently provided by methods such as ATA TRIM and SCSI UNMAP
-+
+        via CAM, which are typically supported by SSD's.
-+
-+
+        Stats for ZFS TRIM can be monitored by looking at the sysctl's
-+
+        under kstat.zfs.misc.zio_trim.
-+
-+
+        rc.d
-+
-+
+        Reworked handling of cleanvar and FILESYSTEMS so that FILESYSTEMS
-+
+        implies everything is mounted and ready to go.
-+
-+
+        Changed how ip6addressctl maps IPv6 on startup.
-+
-+
+20150613:
-+
+        tzdata 2015d
-+
-+
+20150612:
-+
+        OpenSSL 0.9.8zg
-+
-+
+20150419:
-+
+        MidnightBSD 0.6 stable branch created. Continue 0.7
-+
+        development.
-+
-+
+20150418:
-+
+        sqlite 3.8.9
-+
-+
+20150407:
-+
+        Fix two security vulnerabilities:
-+
-+
+        The previous fix for IGMP had an overflow issue. This has been corrected.
-+
-+
+        ipv6: The Neighbor Discover Protocol allows a local router to advertise a
-+
+        suggested Current Hop Limit value of a link, which will replace
-+
+        Current Hop Limit on an interface connected to the link on the MidnightBSD
-+
+        system.
-+
-+
+20150319:
-+
+        OpenSSL 0.9.8.zf
-+
-+
+        mksh R50e
-+
-+
+        Apple mDNSResponder 561.1.1
-+
-+
+20150306:
-+
+        Upgrade OpenSSL to 0.9.8ze
-+
-+
+20150225:
-+
+        Fix two security vulnerabilities.
-+
-+
+. BIND servers which are configured to perform DNSSEC validation and which
-+
+        are using managed keys (which occurs implicitly when using
-+
+        "dnssec-validation auto;" or "dnssec-lookaside auto;") may exhibit
-+
+        unpredictable behavior due to the use of an improperly initialized
-+
+        variable.
-+
-+
+        CVE-2015-1349
-+
-+
+. An integer overflow in computing the size of IGMPv3 data buffer can result
-+
+        in a buffer which is too small for the requested operation.
-+
-+
+        This can result in a DOS attack.
-+
-+
+20141211:
-+
+        Fix a security issue with file and libmagic that can allow
-+
+        an attacker to create a denial of service attack on any
-+
+        program that uses libmagic.
-+
-+
+20141109:
-+
+        Fix building perl during buildworld when the GDBM port is installed.
-+
-+
+20141106:
-+
+        tzdata 2014i
-+
-+
+20141102:
-+
+        serf 1.3.8
-+
-+
+20141031:
-+
+        tnftp 20141031 fixes a security vulnerability with tnftp,
-+
+        CVE-2014-8517.
-+
-+
+20141028:
-+
+        OpenSSL 0.9.8zc
-+
-+
+20141021:
-+
+        Fix several security vulnerabilities in routed, rtsold,
-+
+        and namei with respect to Capsicum sandboxes looking up
-+
+        nonexistent path names and leaking memory.
-+
-+
+        The input path in routed(8) will accept queries from any source and
-+
+        attempt to answer them.  However, the output path assumes that the
-+
+        destination address for the response is on a directly connected
-+
+        network.
-+
-+
+        Due to a missing length check in the code that handles DNS parameters,
-+
+        a malformed router advertisement message can result in a stack buffer
-+
+        overflow in rtsold(8).
-+
-+
+20141011:
-+
+        mksh R50d - fix field splitting regression and null
-+
+        pointer dereference
-+
-+
+        xz 5.0.7
-+
-+
+        OpenSSH 6.6p1
-+
-+
+20141004:
-+
+        mksh R50c - security update for environment var bug with
-+
+        foo vs foo+
-+
-+
+20141002:
-+
+        sqlite 3.8.6
-+
-+
+        sudo 1.7.8 - some issues with the current version, but we're slowly
-+
+        getting up to date.
-+
-+
+20141001:
-+
+        mksh R50b
-+
-+
+        libmport now supports plist commands @dir, @owner, @group, @mode.
-+
-+
+        sudo 1.7.6p2
-+
-+
+20140916:
-+
+        Fix a security issue with TCP SYN.
-+
-+
+        When a segment with the SYN flag for an already existing connection arrives,
-+
+        the TCP stack tears down the connection, bypassing a check that the
-+
+        sequence number in the segment is in the expected window.
-+
-+
+20140909:
-+
+        Fixed a bug with our clearenv(3) implementation that caused segfaults
-+
+        with some programs including Dovecot.
-+
-+
+        OpenSSL security patch:
-+
-+
+        The receipt of a specifically crafted DTLS handshake message may cause OpenSSL
-+
+        to consume large amounts of memory. [CVE-2014-3506]
-+
-+
+        The receipt of a specifically crafted DTLS packet could cause OpenSSL to leak
-+
+        memory. [CVE-2014-3507]
-+
-+
+        A flaw in OBJ_obj2txt may cause pretty printing functions such as
-+
+        X509_name_oneline, X509_name_print_ex et al. to leak some information from
-+
+        the stack. [CVE-2014-3508]
-+
-+
+        OpenSSL DTLS clients enabling anonymous (EC)DH ciphersuites are subject to
-+
+        a denial of service attack. [CVE-2014-3510]
-+
-+
+20140902:
-+
+        We're now 0.6-CURRENT
-+
-+
+        Update USB quirks to support K70 Corsair keyboard, and several
-+
+        other devices.
-+
-+
+20140827:
-+
+        Perl 5.18.2
-+
-+
+20140728:
-+
+        Jails now run shutdown scripts.
-+
-+
+20140710:
-+
+        Fix a vulnerability in the control message API. A buffer is not properly cleared
-+
+        before sharing with userland.
-+
+20140701:
+        MKSH R50

Diff Legend

-–
+Removed lines
-+
+Added lines
-<
+Changed lines
->
+Changed lines

Comparing trunk/UPDATING (file contents): Revision 6711 by laffer1, Tue Jul 1 12:24:57 2014 UTC vs. Revision 7555 by laffer1, Thu May 19 12:38:41 2016 UTC

Diff Legend

Comparing trunk/UPDATING (file contents):
Revision 6711 by laffer1, Tue Jul 1 12:24:57 2014 UTC vs.
Revision 7555 by laffer1, Thu May 19 12:38:41 2016 UTC