ViewVC Help
View File | Revision Log | Show Annotations | Download File | View Changeset | Root Listing
root/src/trunk/UPDATING
Revision: 7521
Committed: Wed Apr 13 00:32:24 2016 UTC (8 years, 1 month ago) by laffer1
File size: 51425 byte(s)
Log Message:
mention wait6 and libmport changes

File Contents

# Content
1 Updating Information for MidnightBSD users.
2
3 20160412:
4 0.8 stable branch created. Continue development as 0.9.
5
6 Fix several issues with wait6 system call addition.
7
8 20160409:
9 libmport now supports two new plist formats:
10 @(root,wheel,4775) myfile
11 @dir(root,wheel,775) mydir
12
13 On delete, absoluate paths are now handled properly.
14
15 20160317:
16 OpenSSH doesn't have the luck of the Irish.
17
18 Fix a security issue with OpenSSH X11 forwarding that can allow an attacker
19 run shell commands on the call to xauth.
20
21 Incorrect argument validation in sysarch(2)
22
23 A special combination of sysarch(2) arguments, specify a request to
24 uninstall a set of descriptors from the LDT. The start descriptor
25 is cleared and the number of descriptors are provided. Due to invalid
26 use of a signed intermediate value in the bounds checking during argument
27 validity verification, unbound zero'ing of the process LDT and adjacent
28 memory can be initiated from usermode.
29
30 Patch obtained from FreeBSD.
31
32 20160229:
33 top now displays information on ZFS arc cache.
34
35 20160228:
36 llvm + clang 3.3 is now the default compiler in MidnightBSD.
37
38 20160222:
39 Introduce pipe2 to linux emulation layer.
40
41 20160114:
42 OpenSSL
43
44 The signature verification routines will crash with a NULL pointer dereference
45 if presented with an ASN.1 signature using the RSA PSS algorithm and absent
46 mask generation function parameter. [CVE-2015-3194]
47
48 When presented with a malformed X509_ATTRIBUTE structure, OpenSSL will leak
49 memory. [CVE-2015-3195]
50
51 If PSK identity hints are received by a multi-threaded client then the values
52 are incorrectly updated in the parent SSL_CTX structure. [CVE-2015-3196]
53
54 Fix security on bsnmpd configuration file during installation.
55
56 TCP MD5 signature denial of service
57
58 A programming error in processing a TCP connection with both TCP_MD5SIG
59 and TCP_NOOPT socket options may lead to kernel crash.
60
61 SCTP
62
63 A lack of proper input checks in the ICMPv6 processing in the SCTP stack
64 can lead to either a failed kernel assertion or to a NULL pointer
65 dereference. In either case, a kernel panic will follow.
66
67 20160102:
68 Happy New Year
69
70 20151101:
71 Increase kern.ipc.somaxconn default to 256.
72
73 20151017:
74 Add initial statistics api to libmport and a driver to print
75 it in mport(1).
76
77 20151002:
78 Revised rpcbind(8) patch to fix issues with NIS
79
80 20150930:
81 In rpcbind(8), netbuf structures are copied directly, which would result in
82 two netbuf structures that reference to one shared address buffer. When one
83 of the two netbuf structures is freed, access to the other netbuf structure
84 would result in an undefined result that may crash the rpcbind(8) daemon.
85
86 20150926:
87 libmport now supports @preexec, @postexec, @preunexec and @postunexec
88 to replace @exec and @unexec.
89
90 pre exec runs afer pre-install scripts but before actual installation
91
92 post exec runs after install but before post install scripts and
93 pkg message.
94
95 pre unexec runs before pre uninstall scripts
96
97 post unexec runs before de-install scripts and after file removal.
98
99 20150917:
100 Fix kqueue write events for files > 2GB
101
102 20150825:
103 kernel:
104 fix a security issue on amd64 where the GS segment CPU register can be changed via
105 userland value in kernel mode by using an IRET with #SS or #NP exceptions.
106
107 openssh:
108 A programming error in the privileged monitor process of the sshd(8)
109 service may allow the username of an already-authenticated user to be
110 overwritten by the unprivileged child process.
111
112 A use-after-free error in the privileged monitor process of he sshd(8)
113 service may be deterministically triggered by the actions of a
114 compromised unprivileged child process.
115
116 A use-after-free error in the session multiplexing code in the sshd(8)
117 service may result in unintended termination of the connection.
118
119 20150818:
120 expat security fix
121
122 20150815:
123 libc changes:
124 setmode(3) now returns errno consistently on error.
125 libc will compile without error using clang
126
127 20150814:
128 wait6 system call added.
129
130 date(1) now handles non numeric numbers passed to -r
131 like GNU coreutils for improved compatibility.
132
133 20150811:
134 ata(4) AMD Hudson2 SATA controller support.
135 Intel lynxpoint SATA.
136
137 Fix some const warnings when building several device drivers
138 with llvm/clang.
139
140 Sync cas(4) with FreeBSD 9-stable.
141
142 Fix some minor issues with ath(4).
143
144 20150809:
145 xz 5.0.8
146
147 20150808:
148 libmport now logs installation and removal of packages to syslog.
149
150 20150805:
151 routed - fix a potential security issue where traffic from outside
152 the network can disrupt routing.
153
154 bsd patch - fix a bug with ed(1) scripts allowing unsanitized input
155 to run.
156
157 20150802:
158 jansson 2.7 library added. (libjansson is a JSON library in C)
159
160 20150728:
161 Heimdal 1.5.2 (kerberos implementation)
162
163 OpenSSL 1.0.1o
164
165 cpucontrol(8) now supports VIA CPUs. Synced with FreeBSD 9.2.
166
167 TCP Resassemly resource exhaustion bug:
168 There is a mistake with the introduction of VNET, which converted the
169 global limit on the number of segments that could belong to reassembly
170 queues into a per-VNET limit. Because mbufs are allocated from a
171 global pool, in the presence of a sufficient number of VNETs, the
172 total number of mbufs attached to reassembly queues can grow to the
173 total number of mbufs in the system, at which point all network
174 traffic would cease.
175 Obtained from: FreeBSD 8
176
177 OpenSSH
178
179 Fix two security vulnerabilities:
180 OpenSSH clients does not correctly verify DNS SSHFP records when a server
181 offers a certificate. [CVE-2014-2653]
182
183 OpenSSH servers which are configured to allow password authentication
184 using PAM (default) would allow many password attempts. A bug allows
185 MaxAuthTries to be bypassed. [CVE-2015-5600]
186
187
188 Switch to bsdpatch (from FreeBSD & OpenBSD)
189
190 20150726:
191 BSD Sort updated
192
193 sqlite 3.8.10.2
194
195 20150725:
196 Import reallocarray from OpenBSD's libc.
197
198 The reallocarray() function is similar to realloc() except it operates on
199 nmemb members of size size and checks for integer overflow in the
200 calculation nmemb * size.
201
202 20150722:
203 Fix a bug where TCP connections transitioning to LAST_ACK
204 state can get stuck. This can result in a denial of service.
205
206 20150715:
207 libmport now supports @shell and @sample in plists. This means that
208 a shell port can automatically add an entry to /etc/shells and remove
209 it upon uninstallation. For sample files, a copy is made without the
210 .sample extension if one does not exist and it is removed automatically
211 only if the md5 hash of the two files is the same.
212
213 20150709:
214 flex 2.5.39
215
216 20150702:
217 ZFS in MidnightBSD now supports lz4 compression. You can enable it
218 with zfs set compression=lz4 pool/path.
219
220 Verify it's working with
221 zfs get compressratio pool/path
222 du -h -s *
223
224 Note you must write new data when turning on compression to see
225 changes. Existing files are not compressed.
226
227 Note: While we used the same basic implementation of lz4 that
228 FreeBSD and OpenZFS uses, we did not yet implement features support
229 and the zfs version still reports 28. This may come in a future update
230 to ZFS.
231
232 20150621:
233 libmport now automatically stops services when deleting packages.
234
235 The package must have installed an rc.d script in /usr/local/etc
236 for this to work. This is equivalent to running service <name> onestop
237
238 20150618:
239 Sendmail
240
241 With the recent changes to OpenSSL to block 512 bit certificates,
242 sendmail can't connect with TLS to some servers.
243
244 Increase the default size to 1024 bit for client connections to
245 match the server configuration.
246
247 ZFS
248
249 Added ZFS TRIM support which is enabled by default. To disable
250 ZFS TRIM support set vfs.zfs.trim.enabled=0 in loader.conf.
251
252 Creating new ZFS pools and adding new devices to existing pools
253 first performs a full device level TRIM which can take a significant
254 amount of time. The sysctl vfs.zfs.vdev.trim_on_init can be set to 0
255 to disable this behaviour.
256
257 ZFS TRIM requires the underlying device support BIO_DELETE which
258 is currently provided by methods such as ATA TRIM and SCSI UNMAP
259 via CAM, which are typically supported by SSD's.
260
261 Stats for ZFS TRIM can be monitored by looking at the sysctl's
262 under kstat.zfs.misc.zio_trim.
263
264 rc.d
265
266 Reworked handling of cleanvar and FILESYSTEMS so that FILESYSTEMS
267 implies everything is mounted and ready to go.
268
269 Changed how ip6addressctl maps IPv6 on startup.
270
271 20150613:
272 tzdata 2015d
273
274 20150612:
275 OpenSSL 0.9.8zg
276
277 20150419:
278 MidnightBSD 0.6 stable branch created. Continue 0.7
279 development.
280
281 20150418:
282 sqlite 3.8.9
283
284 20150407:
285 Fix two security vulnerabilities:
286
287 The previous fix for IGMP had an overflow issue. This has been corrected.
288
289 ipv6: The Neighbor Discover Protocol allows a local router to advertise a
290 suggested Current Hop Limit value of a link, which will replace
291 Current Hop Limit on an interface connected to the link on the MidnightBSD
292 system.
293
294 20150319:
295 OpenSSL 0.9.8.zf
296
297 mksh R50e
298
299 Apple mDNSResponder 561.1.1
300
301 20150306:
302 Upgrade OpenSSL to 0.9.8ze
303
304 20150225:
305 Fix two security vulnerabilities.
306
307 1. BIND servers which are configured to perform DNSSEC validation and which
308 are using managed keys (which occurs implicitly when using
309 "dnssec-validation auto;" or "dnssec-lookaside auto;") may exhibit
310 unpredictable behavior due to the use of an improperly initialized
311 variable.
312
313 CVE-2015-1349
314
315 2. An integer overflow in computing the size of IGMPv3 data buffer can result
316 in a buffer which is too small for the requested operation.
317
318 This can result in a DOS attack.
319
320 20141211:
321 Fix a security issue with file and libmagic that can allow
322 an attacker to create a denial of service attack on any
323 program that uses libmagic.
324
325 20141109:
326 Fix building perl during buildworld when the GDBM port is installed.
327
328 20141106:
329 tzdata 2014i
330
331 20141102:
332 serf 1.3.8
333
334 20141031:
335 tnftp 20141031 fixes a security vulnerability with tnftp,
336 CVE-2014-8517.
337
338 20141028:
339 OpenSSL 0.9.8zc
340
341 20141021:
342 Fix several security vulnerabilities in routed, rtsold,
343 and namei with respect to Capsicum sandboxes looking up
344 nonexistent path names and leaking memory.
345
346 The input path in routed(8) will accept queries from any source and
347 attempt to answer them. However, the output path assumes that the
348 destination address for the response is on a directly connected
349 network.
350
351 Due to a missing length check in the code that handles DNS parameters,
352 a malformed router advertisement message can result in a stack buffer
353 overflow in rtsold(8).
354
355 20141011:
356 mksh R50d - fix field splitting regression and null
357 pointer dereference
358
359 xz 5.0.7
360
361 OpenSSH 6.6p1
362
363 20141004:
364 mksh R50c - security update for environment var bug with
365 foo vs foo+
366
367 20141002:
368 sqlite 3.8.6
369
370 sudo 1.7.8 - some issues with the current version, but we're slowly
371 getting up to date.
372
373 20141001:
374 mksh R50b
375
376 libmport now supports plist commands @dir, @owner, @group, @mode.
377
378 sudo 1.7.6p2
379
380 20140916:
381 Fix a security issue with TCP SYN.
382
383 When a segment with the SYN flag for an already existing connection arrives,
384 the TCP stack tears down the connection, bypassing a check that the
385 sequence number in the segment is in the expected window.
386
387 20140909:
388 Fixed a bug with our clearenv(3) implementation that caused segfaults
389 with some programs including Dovecot.
390
391 OpenSSL security patch:
392
393 The receipt of a specifically crafted DTLS handshake message may cause OpenSSL
394 to consume large amounts of memory. [CVE-2014-3506]
395
396 The receipt of a specifically crafted DTLS packet could cause OpenSSL to leak
397 memory. [CVE-2014-3507]
398
399 A flaw in OBJ_obj2txt may cause pretty printing functions such as
400 X509_name_oneline, X509_name_print_ex et al. to leak some information from
401 the stack. [CVE-2014-3508]
402
403 OpenSSL DTLS clients enabling anonymous (EC)DH ciphersuites are subject to
404 a denial of service attack. [CVE-2014-3510]
405
406 20140902:
407 We're now 0.6-CURRENT
408
409 Update USB quirks to support K70 Corsair keyboard, and several
410 other devices.
411
412 20140827:
413 Perl 5.18.2
414
415 20140728:
416 Jails now run shutdown scripts.
417
418 20140710:
419 Fix a vulnerability in the control message API. A buffer is not properly cleared
420 before sharing with userland.
421
422 20140701:
423 MKSH R50
424
425 20140630:
426 File 5.19
427
428 20140605:
429 Fix four security issues with OpenSSL
430
431 20140604:
432 Sendmail failed to properly set close-on-exec for open file descriptors.
433
434 ktrace page fault kernel trace entries were set to an incorrect size which resulted
435 in a leak of information.
436
437 20140430:
438 Fix a TCP reassembly bug that could result in a DOS attack
439 of the system. It may be possible to obtain portions
440 of kernel memory as well.
441
442 20140411:
443 Update zlib to 1.2.7
444
445 20140122:
446 Support for username with length 32. Previous limit was 16
447
448 20140114:
449 Fix two security vulnerabilities.
450
451 bsnmpd contains a stack overflow when sent certain queries.
452
453 bind 9.8 when using NSEC3-signed zones zones, will crash with special
454 crafted packets.
455
456 20131228:
457 Imported FreeBSD 9.2 usb stack (plus z87 patches from stable)
458
459 Updated em(4), igb(4) and ixgbe(4)
460
461 MidnightBSD now works with Z87 Intel chipsets.
462
463 20131207:
464 Remove sparc64 architecture. It hasn't been working for awhile
465 and it's not useful for desktops anymore.
466
467 20131205:
468 OpenSSH 6.4p1
469
470 20131203:
471 Perl 5.18.1 imported.
472
473 Update less to v458
474
475 20131130:
476 Remove named from base. We still include the client utilities for
477 now until replacements can be found.
478
479 20131004:
480 rarpd supports vlan(4) and has a pid flag. (from FreeBSD)
481
482 20130917:
483 Support for 65,536 routing tables was added. A new fib specific
484 field has been added to mbuf. This is an increase from 16.
485
486 20130910:
487 Security updates: (kern.osreldate 5001)
488
489 nullfs(5)
490
491 The nullfs(5) implementation of the VOP_LINK(9) VFS operation does not
492 check whether the source and target of the link are both in the same
493 nullfs instance. It is therefore possible to create a hardlink from a
494 location in one nullfs instance to a file in another, as long as the
495 underlying (source) filesystem is the same.
496
497 ifioctl
498
499 As is commonly the case, the IPv6 and ATM network layer ioctl request
500 handlers are written in such a way that an unrecognized request is
501 passed on unmodified to the link layer, which will either handle it or
502 return an error code.
503
504 Network interface drivers, however, assume that the SIOCSIFADDR,
505 SIOCSIFBRDADDR, SIOCSIFDSTADDR and SIOCSIFNETMASK requests have been
506 handled at the network layer, and therefore do not perform input
507 validation or verify the caller's credentials. Typical link-layer
508 actions for these requests may include marking the interface as "up"
509 and resetting the underlying hardware.
510
511 20130824:
512 Fix a bug in sendmail 8.14.7 that interferes with how it
513 handles AAAA records interoperating with Microsoft DNS servers.
514 FreeBSD has already reported this to Sendmail and a fix
515 will be included in the next release.
516
517 Subversion 1.8.1 is now in the base system as a static
518 binary. It has limited functionality, but can be used to
519 checkout/commit code. It is named svnlite.
520
521 20130822:
522 Fix two security vulnerabilities.
523
524 Fix an integer overflow in IP_MSFILTER (IP MULTICAST).
525 This could be exploited to read memory by a user process.
526
527 When initializing the SCTP state cookie being sent in INIT-ACK chunks,
528 a buffer allocated from the kernel stack is not completely initialized.
529
530 Import xz 5.0.4
531
532 Import sqlite 3.7.17
533
534 Import BIND 9.8.5-P2
535
536 20130814:
537 mksh R48 imported.
538
539 Sendmail 8.14.7 imported.
540
541 20130717:
542 libmport bug was fixed causing hash verification to fail.
543
544 virtio(4) imported from FreeBSD 9-stable. SCSI support not
545 included.
546
547 20130612:
548 RELENG_0_4 created for 0.4. Development continues on 0.5.
549
550 20130402:
551 Update BIND and OpenSSL to resolve security advisories.
552
553 20130305:
554 MKSH R44 imported.
555
556 20130213:
557 MKSH R42b imported
558
559 20130211:
560 MKSH R42 imported
561
562 20130125:
563 MKSH R41 imported
564
565 20130122:
566 OpenSSH 5.8p2 imported
567
568 SQLite 3.7.15.2 imported
569
570 Fixed a longstanding bug in libmport extrating new index files.
571
572 20120710:
573 BSD licensed sort imported from FreeBSD-CURRENT
574
575 For now, GNU sort is installed as gnusort, but it will
576 go away in time.
577
578 20120708:
579 tcsh 6.18.01 imported.
580
581 NetBSD's iconv imported.
582
583 libc gains strnlen(3), memrchr(3), stpncpy(3).
584
585 20120612:
586 BIND security update related to CVE-2012-1667.
587
588 Zero length resource records can cause BIND to crash resulting
589 in a DOS attack or information disclosure.
590
591 20120407:
592 mksh R40f (fixes regression)
593
594 20120328:
595 mksh R40e
596
597 Perl 5.14.2
598
599 20120229:
600 cpucontrol(8) and cpuctl(4) added from FreeBSD 7-stable.
601
602 20120209:
603 mDNSResponder 333.10 imported
604
605 20111227:
606 import raid5 module for GEOM, graid5(8)
607
608 This is experimental and known to use a lot of kernel
609 memory.
610
611 20111223:
612 telnetd: fix a root exploit from a fixed buffer that was not checked
613
614 pam: don't allow escape from policy path. Exploitable in KDE, etc.
615
616 Fix pam_ssh module:
617
618 If the pam_ssh module is enabled, attackers may be able to gain access
619 to user accounts which have unencrypted SSH private keys.
620
621 This has to due with the way that openssl works. It ignores unencrpted data.
622
623 Fix security issue with chroot and ftpd.
624
625 nsdispatch(3) doesn't know it's working in a chroot and some
626 operations can cause files to get reloaded causing a security
627 hole in things like ftpd.
628
629 20111217:
630 libdialog/dialog upgraded to an lgpl version. As it's not
631 backwardly compatable, include the old libdialog as libodialog
632
633 20111212:
634 mksh r40d imported
635
636 20111210:
637 re(4) and rl(4) updated to support new chips.
638
639 GEOM synced with FreeBSD 7-stable.
640
641 MidnightBSD GPT partition types created in sys/gpt.h and
642 setup in boot loader and GEOM.
643
644 amdsbwd(4) (amd watchdog for south bridge) updated to support
645 8xx series chipset.
646
647 20111207:
648 import bsd grep from FreeBSD/OpenBSD.
649
650 MK_BSD_GREP controls which grep is installed
651 as grep with the other as bsdgrep or gnugrep.
652
653 20111122:
654 mksh vR40c imported.
655
656 20111117:
657 BIND 9.6 ESV R5 P1
658
659 20111107:
660 tzdata 2011n
661
662 20111026:
663 mDNSResponder v320
664
665 BIND 9.6 ESV R5
666
667 20111022:
668 cflow 0.0.6 imported
669
670 20111020:
671 less v436 imported
672
673 amdsbwd(4) AMD southbridge watchdog
674
675 20111019:
676 awk 20110810 imported
677
678 et(4) Agere Gigabit Ethernet/Fast Ethernet driver added, but
679 not included in GENERIC kernel. The kernel module needs
680 testing before we can include it in GENERIC.
681
682 intr_bind code ported to allow an IRQ to be bound to one
683 specific CPU core.
684
685 20111017:
686 Time Zone Data v. 2011l (Released 10 October 2011)
687
688 Updated list of countries (iso3166) to work with new timezone data.
689
690 20111015:
691 Introduce CPU Affinity in MidnightBSD. cpuset(1) can be used
692 to control which core or group of cores can be used for a given
693 process. Several new system calls were added to support this
694 functionality in the running kernel and for 32bit binary
695 compatibility on amd64.
696
697 The scheduler default has been changed to ULE in i386 and
698 amd64. Changes were made to both schedulers (4BSD AND ULE)
699 for this feature.
700
701 This work is based on Jeff Roberson's FreeBSD 7.1 patches.
702
703 20111004:
704 Fix a problem with unix socket handling caused by the recent
705 patch to unix socket path handling. This allows network
706 apps to work under the linuxolator again.
707
708 20111001:
709 Import libfetch & fetch(1) from FreeBSD 9. Passive FTP is
710 now default and an environment variable must be set to use
711 active.
712
713 20110930:
714 Introduce quirks handling for several umass devices including
715 USB cameras. Add workaround for Cyberpower UPS devices.
716
717 Bring in further bug fixes from FreeBSD and NetBSD for alc(4).
718 Stale ip/tcp header pointers are no longer used, lockups fixed
719 when network cable is unplugged on bootup, enable TX checksum
720 offloading.
721
722 Add a new man page for gcache(8), a useful geom class when
723 working with large raid3 sets.
724
725 Restore previous workaround for Cypress pata storage controller.
726
727 20110929:
728 Sync ath(4) with FreeBSD 7.3.
729
730 The following modules are no longer available, and should be
731 removed from loader.conf:
732 ath_hal ath_rate_amrr ath_rate_onoe ath_rate_sample
733
734 alc(4) would hibernate when a cable was unplugged and often
735 required bring the interface down and up to "wake up" so that
736 a connection could be established. Disable hibernation.
737
738 20110928:
739 Fix security issues with gzip and compress related to .Z
740 files that are corrupted.
741
742 Fix path validation with unix domain sockets.
743
744 20110917:
745 Remove dependance on mports perl for generating releases as
746 it's in the base system.
747
748 20110914:
749 Import xz 5.0.3 with liblzma 5.0.3
750
751 20110813:
752 synced the sparc64 GENERIC kernel configuration with amd64.
753
754 20110806:
755 sqlite 3.7.7.1 imported
756
757 msearch(1), libmsearch and msearch.import added. msearch(1) provides
758 a full text search command line tool. libmsearch can also be used
759 to build a graphical based search in the future. You can enable
760 index building for msearch in periodic.conf or manually run the
761 /usr/libexec/msearch.index tool. Full text indexes take considerable
762 space in /var. I'm using approximately 500MB currently.
763
764 Fix a long standing bug with the periodic script to check package
765 versions. This will be obsolete with mport though.
766
767 20110710:
768 kdb_enter_why added to MidnightBSD to allow the kernel debugger to
769 know why it's in use and thus script can be run.
770
771 Yet another problem with the perl manifest was fixed
772
773 20110709:
774 cpufreq(1) is a new utility to monitor CPU frequency which may change
775 with use of powerd(8) and cpufreq(4).
776
777 20110612:
778 Update mksh to R40
779
780 Catch up ObsoleteFiles.inc to remove Perl 5.10.x. Good to run when
781 updating current (cd /usr/src && make check-old)
782
783 20110528:
784 Fix CVE-2011-1910 in BIND 9.6.x. This affects caching resolvers.
785
786 20110526:
787 newfs:
788 Raised the default blocksize for UFS/FFS filesystems from
789 16K to 32K and the default fragment size from 2K to 4K.
790
791 This should slightly imporve performance on "advanced format"
792 hard drives such as the WD EARS drives. Drives of this type
793 have emulation modes that slow down with lower sizes. Of course
794 the drive must still be aligned properly when using fdisk.
795
796 20110521:
797 mport tool now has a deleteall command. This can be used to remove
798 all packages from a system.
799
800 A few bugs with the perl 5.14 import have been fixed.
801
802 20110518:
803 Perl 5.14.0
804
805 20110517:
806 Sendmail 8.14.5
807
808 20110314:
809 DRM/DRI code updated to support newer video cards. (FreeBSD 7.1)
810
811 cdevpriv wrappers added
812
813 nss_mdns hack introduced to work around linking problem.
814
815 dnsextd fixed after update to mDNSResponder code.
816
817 20110308:
818 Introduce liblzma & xz 5.0.1 to the base system
819
820 Patch for OpenSSL security issue CVE-2011-0014.
821
822 "OSREVISION 4004"
823
824 nsswitch module for multicast dns (nss_mdns) added.
825
826 tzdata2011c
827
828 20110220:
829 cam(4) syncronized with FreeBSD 7.3.
830
831 20110219:
832 amdtemp(4) updated to support sensors framework.
833
834 20110217:
835 Perl 5.10.1 imported
836
837 20110216:
838 Introduce igb(4) and split Intel Gigabit Ethernet adapters between
839 igb(4) and em(4). Newer devices use igb(4). The code has moved
840 to sys/dev/e1000 for both devices in the kernel. igb(4) has
841 been placed in GENERIC on i386 and amd64.
842
843 Update bfe(4) to support newer devices and WOL.
844
845 20110215:
846 age(4) added.
847
848 20110208:
849 BIND 9.6.3 which fixes a bug with DNSSEC records getting added.
850
851 20110206:
852 eeemon(4) added to monitor Asus Eee PC.
853
854 20110205:
855 OpenSSH 5.7p1
856
857 GNU sort 6.9 (coreutils)
858
859 20110203:
860 one true awk 20100523 imported
861
862 sqlite 3.7.5
863
864 OpenSSL 0.9.8q
865
866 20110202:
867 tcsh 6.17.00
868
869 file 5.05
870
871 20110122:
872 Import it(4) and lm(4), with support for Super I/O hardware monitors. This
873 uses the sensors framework ported by Constantine A. Murenin (GSOC2007)
874
875 20110120:
876 BIND 9.6.2-P3
877
878 sudo 1.7.4-p6
879
880 20110115:
881 Add experimental jme(4) for Jmicron ethernet devices.
882
883 20101130:
884 A double free exists in the SSL client ECDH handling code, when
885 processing specially crafted public keys with invalid prime
886 numbers. [CVE-2010-2939]
887
888 20101120:
889 Several portions of the kernel and userland code related to UFS file
890 systems (and UFS2) cannot properly handle inode counts above 2^31 due
891 to use of int types. Based on a patch from FreeBSD, I've modified
892 our UFS2 implementation to handle unsigned values for inode counts
893 which should allow for file systems greater than 16TB.
894
895 newfs and growfs was also modified.
896
897 20101110:
898 Fix a security issue with pseudofs which could result in running code in kernel
899 context or a kernel panic depending on system configuration. This affects file
900 systems such as procfs for instance.
901
902 20101021:
903 sysrc is a utility to print and modify name/value pairs in /etc/rc.conf easily.
904 This is similar to functions present in many linux distros. The utility was
905 written by Devin Teske for FreeBSD.
906
907 20100920:
908 bzip2 security patch for integer overflow.
909
910 20100905:
911 MidnightBSD RELENG_0_3 branch created. Aggressive development continues here
912 for 0.4.
913
914 20100902:
915 Fix a security issue with libutil that allows users to bypass cpu limits in
916 login.conf in some cases. This combined with OpenSSH for example can allow
917 the user to get more resources than they're allowed.
918
919 20100822:
920 Import Apple's mDNSResponder (mdnsd).
921
922 20100814:
923 libdispatch added to MidnightBSD. This provides functionality found in
924 Mac OS X's GCD. We do not have blocks support yet. As this code is
925 licensed under Apache 2, we create a new MK_APACHE option so that
926 it's not required for all users to run code under a license they
927 may not like.
928
929 20100713:
930 mbuf readonly fix related to sendfile(2) data corruption.
931
932 20100704:
933 brainfuck(1) imported from MirBSD.
934
935 20100505:
936 zlib 1.2.5
937
938 20100430:
939 Sudo 1.7.2p6 imported
940
941 20100321:
942 Update zlib to 1.2.4
943
944 20100319:
945 Removed i586 from default i386 generic kernel.
946
947 20100317:
948 Update to tzdata2010e (time zones). This includes changes in
949 Mexico.
950
951 Add support for several newer sound cards via hda including
952 ATI and Realtek chipsets.
953
954 20100313:
955 CPU detection has been changed. VIA Padlock detection added.
956
957 20100312:
958 Fix a number of bugs and compiler warnings in libmport. Handle
959 plus signs in paths for mport.check-fake
960
961 20100311:
962 mksh R39c
963
964 20100309:
965 Sudo 1.7.2p5
966
967 sqlite3 3.6.23
968
969 mksh R39b
970
971 libffi (ffi) 3.0.9
972
973 20100206:
974 WITHOUT_LIB32 is no longer needed on AMD64. GCC was fixed to
975 properly pass arguments to ld.
976
977 re(4) and rl(4) have been updated to support several new
978 realtek chipsets. Performance has been improved on re(4).
979
980 20100204:
981 Fix a bug cropping up on AMD64 MidnightBSD with sftp
982 segfaulting.
983
984 20100116:
985 Import ash changes from FreeBSD (bin/sh) 8-Stable.
986
987 BIND 9.6.1-P2
988
989 20100110:
990 Import Sendmail 8.14.4. Fix for SSL vulnerability.
991
992 posix_spawn(3) added to MidnightBSD libc. Users may need to build and
993 install libc before doing a full buildworld when upating from 0.2 or
994 older current systems.
995
996 kqueue(2) was modified to support portions of libdispatch functionality.
997
998 20100106:
999 Bind security update. Fix a bug with DNSSEC that causes negative
1000 cache entries and thus a possible DNS cache poisoning attack.
1001
1002 Fix a bug in ZFS that can reset permissions on system crashes.
1003
1004 20091228:
1005 amdtemp(4) was added. It allows one to monitor to the temperature
1006 of an AMD CPU such as a Phenom.
1007
1008 20091205:
1009 OpenSSL security fix
1010
1011 The SSL version 3 and TLS protocols support session renegotiation without
1012 cryptographically tying the new session parameters to the old parameters.
1013
1014 20091128:
1015 OpenBSD sensors framework imported including sensorsd(8)
1016
1017 20091126:
1018 OpenNTPD 4.4 import
1019
1020 Update OpenSSH to 5.3p1
1021
1022 mksh R39
1023
1024 20091124:
1025 cpdup updated from DragonFly to 1.15
1026
1027 tzdata2009s updated with latest timezone data for November 2009.
1028
1029 20091010:
1030 amd64 users should use WITHOUT_LIB32=yes in /etc/make.conf for now
1031 to test current.
1032
1033 Revert unicode filename fixes from ntfs code. This was causing chaos
1034 on amd64 systems.
1035
1036 20091006:
1037 Update timezone data with tzdata2009n with the Pakistan and
1038 Argentina changes.
1039
1040 Sync several userland utilities with versions from FreeBSD 7.0 in
1041 sbin and usr.sbin.
1042
1043 20090919:
1044 Update timezone data with tzdate2009m from September 2009.
1045
1046 20090729:
1047 Patch for Bind 9 security vulnerability. a dynmaic update packet
1048 can trigger an assertion and cause named to exit
1049
1050 20090606:
1051 Remove PCC from the base system. This compiler will not work
1052 as a system compiler for us as we've got some userland investment
1053 in C++ code and may have Objective-C in the future. We're stuck
1054 with a solution that supports these three languages at a minimum.
1055
1056 I had wanted to keep it as an optional compiler because it is
1057 fast, however too many users want to try to use it for the base
1058 system which makes no sense.
1059
1060 A hack was added for Cypress based usb hard drive enclosures to
1061 the kernel. This should cut down on commands it claims to support
1062 but does not (at the cam layer). Found while testing ZFS on
1063 an external device.
1064
1065 20090520:
1066 The powerd daemon no longer starts automatically to improve
1067 compatibility with many systems. However, there is a new
1068 installer option in the startup section to enable it. This
1069 makes it easier to enable for users that have working systems. I thought it was only a problem on older hardware, but it freaks
1070 out my new Phenom too.
1071
1072 20090502:
1073 OpenSSH 5.2p1 import
1074
1075 ale(4) connected to the build. (kernel module only)
1076
1077 20090501:
1078 Imported makefs utility from NetBSD/FreeBSD
1079
1080 20090422:
1081 OpenSSL security update
1082
1083 The function ASN1_STRING_print_ex does not properly validate the lengths
1084 of BMPString or UniversalString objects before attempting to print them.
1085
1086 20090415:
1087 Created a Symbol.map for libc/ohash symbols
1088
1089 Updated several usr/bin usr/sbin utilities.
1090
1091 Corrected a bug with Makefile.inc1 causing the bootstrap
1092 tools to fail.
1093
1094 20090405:
1095 xorg 7.4 wants to configure its input devices via hald which does not
1096 yet work with USB. If the keyboard/mouse does not work in xorg then
1097 add
1098 Option "AllowEmptyInput" "off"
1099 to your ServerLayout section. This will cause X to use the configured
1100 kbd and mouse sections from your xorg.conf
1101
1102 20090403:
1103 mksh was disconnected a few day ago do to bugs with
1104 buildworld and mports. Now, connect it back
1105 for use as /bin/sh with a conditional called
1106 MK_ASH. By default, ash is the standard /bin/sh
1107 but we may change this later. This will allow further
1108 testing by users and developers of mksh without
1109 causing an unpleasant default experience. In the
1110 long run, we need to fix mksh compatibility.
1111
1112 20090328:
1113 Bring in mksh R37 from CVS. The dot.mkshrc files for root
1114 and skel were changed. mksh(1) now replaces ash aka sh(1)
1115 as the default /bin/sh. Please report bugs with
1116 ports, etc. The ash code will remain in the repo for awhile
1117 as I decide if we'll add something like MK_SHELL_ASH as
1118 an optional build parameter.
1119
1120 ahd was disconnected from the lint environment until
1121 the compiler bug is sorted (by updating gcc?)
1122
1123 Remove freebsd-tips from fortune files and change the
1124 default for login and profile.
1125
1126 20090327:
1127 Update libarchive to 2.5.5, tar, and add bsdcpio.
1128
1129 Also previously, ctriv has been connecting Perl 5.10
1130 to the build (part of os). This will have an impact
1131 on mports.
1132
1133 20090325:
1134 Update Bind to 9.4.3-P1
1135
1136 Update mksh to R36b
1137
1138 Update tcpdump to 3.9.8, fix libpcap to work with current.
1139
1140 Update pnpinfo, sync with FreeBSD.
1141
1142 20090115:
1143 Fix a problem with DNSSEC and BIND.
1144
1145 20090110:
1146 For applications using OpenSSL for SSL connections, an invalid SSL
1147 certificate may be interpreted as valid. This could for example be
1148 used by an attacker to perform a man-in-the-middle attack.
1149
1150 Other applications which use the OpenSSL EVP API may similarly be
1151 affected.
1152
1153 Stop cross site request forgery attacks in lukemftpd
1154
1155 20090104:
1156 Import GNU libreadline 5.2
1157
1158 20090101:
1159 Update time zone data to 2008i.
1160
1161 20081231:
1162 Correct a problem where bluetooth and netgraph sockets are not
1163 properly initialized.
1164
1165 Happy 2009.
1166
1167 20081206:
1168 Due to the massive change in the underlying system under way,
1169 we're naming the next release 1.0. The sys/sys/param.h was
1170 changed accordingly. ipfilter and ncurses were corrected
1171 using __MidnightBSD__ tests in the code.
1172
1173 The GENERIC kernel config was caught up on i386 today. Consider
1174 i386 still broken, but amd64 is running again.
1175
1176 mdoc.local was updated with the new MidnightBSD version info.
1177
1178 batt(1) was rewritten in C. It now supports several flags and
1179 runs about 8 times faster on my laptop. The default output
1180 shows the number of minutes of battery life remaining and the
1181 percentage. You can use -u to display the number of batteries or
1182 -c to get script friendly output. Consult the man page for more.
1183
1184 20081204:
1185 Work has completed on importing ZFS, jemalloc, several
1186 new devices, SCTP, updated pf, a new tempfs, linuxolator 2.6 kernel
1187 support, improved locking for file desc., audit (openbsm),
1188 openssl .98e, nfe, imporved intel high def audio, midi, updated
1189 intel gigabit (em), support for several wifi cards (intel), ...
1190
1191 Renamed 0.3-CURRENT officially. Switched to using MidnightBSD version
1192 data from param.h instead of the FreeBSD version. This means
1193 testing is now possible in the ports tree for the version
1194 and that any ports or code relying on the FreeBSD version from
1195 sys/sys/param.h will need to be fixed.
1196
1197 20080905:
1198 update nve(4) to support new hardware.
1199
1200 20080801:
1201 Import OpenBSM 1.0
1202
1203 Modify src/release to create 3 isos instead of 2 for packages.
1204
1205 etc/rc.d/firstboot now enables kdm, gnustep + slim and bsdstats.
1206
1207 Many ia64, alpha, powerpc items were removed.
1208
1209 The recent diffutils 2.8.7 import was fixed.
1210
1211 20080703:
1212 pcc was not installed properly when setting DESTDIR for live cds,
1213 or posibly jails.
1214
1215 20080627:
1216 Add firmware(9), WEP, CCMP, TKIP to GENERIC.
1217
1218 Add glabel to GENERIC.
1219
1220 Intel ICH8 mobile chipset used on some iMacs included with ata.
1221
1222 pcc connected to the build on i386. (alternative compiler)
1223
1224 ath added to GENERIC. (Atheros wireless NICs) on amd64/i386
1225
1226 20080528:
1227 Sendmail 8.14.3
1228
1229 20080516:
1230 ssh-vulnkey allows you to look for vulnerable ssh keys that
1231 were generated on Debian and Ubuntu hosts over the last
1232 few years. sshd can block offending keys with a configuration
1233 option.
1234
1235 The elf note on binaries is now set to MidnightBSD.
1236
1237 20080514:
1238 Fixed a number of problems with pcc. It is not yet connected
1239 to the build, but usable on i386 hosts. You may use it
1240 by make; make install in /usr/src/usr.bin/pcc. It will
1241 install in /usr/local as some of the files conflict with
1242 GCC versions. __MidnightBSD__ is defined in PCC as well.
1243
1244 System headers were fixed to allow pcc to compile many binaries
1245 on MidnightBSD. bin/cp will work now for instance.
1246
1247 20080430:
1248 __MidnightBSD__ is now defined via gcc. This can be tested
1249 to determine we're running on MidnightBSD in the preprocessor.
1250
1251 20080429:
1252 Import bind 9.4.2 with threading
1253
1254 libpthread (KSE) and libthr are built earlier
1255
1256 pcvt(4) removed!
1257
1258 Alias added for core2 cpus.
1259
1260 Alpha and PC98 only utilities removed from usr/sbin
1261
1262 syslogd, adduser, rmuser, mergemaster and mailwrapper have been
1263 improved. See the man pages for info.
1264
1265 periodic scripts will not send emails with empty message bodies.
1266 See mailwrapper fix.
1267
1268 20080410:
1269 Sync cpdup with DragonFly. Add parallel transaction support and
1270 -l flag to line-buffer stdout and stderr.
1271
1272 20080406:
1273 Import bzip2 1.05
1274 Import OpenSSH 4.9p1
1275
1276 20080322:
1277 The default umask was changed to 022.
1278
1279 /usr/X11R6 paths were removed from several config files.
1280
1281 .mkshrc files are now installed for root.
1282
1283 20080316:
1284 FIx a problem with gif0 tunnels and neighbors with IPV6.
1285
1286 20080312:
1287 Add lndir from X.org. This aides in the porting of MirPorts.
1288
1289 New OS versions were added to the mapage code (groff)
1290
1291 20080310:
1292 Correct a buffer overflow in ppp.
1293
1294 20080308:
1295 Remove /usr/X11R6 from manpath config.
1296
1297 20080307:
1298 Atheros driver no longer has several options set
1299 which corrects building in tinderbox on all three platforms.
1300
1301 Added a new macro to sx.h which returns true if the current
1302 thread holds an exclusive lock on a specifix sx.
1303
1304 Removed OS/2's HPFS file system. It's not maintained and
1305 I don't know anyone using OS/2 or ecomstation these days.
1306 My copy is in the closet collecting dust.
1307
1308 20080306:
1309 Synced tinderbox with FreeBSD. Modified it for MidnightBSD.
1310 Developers can now use it to check src builds.
1311
1312 20080303:
1313 Add mksh to /etc/shells, made some adjustments to options
1314 for mksh builds per suggestion upstream.
1315
1316 USB HID table updated with modern hardware list.
1317
1318 Updated BSD family true (we're not in there yet)
1319
1320 iso3166 file updated and import of tzdata2007k for
1321 new time zones.
1322
1323 Updated mksh to latest version R33.
1324
1325 20080228:
1326 Remplaced the random IP id generation code with a new
1327 version by Amit Klein.
1328
1329 20080221:
1330 Sendfile write only permissions fix.
1331
1332 Removed some HPFS and PC98 code.
1333
1334 iso639 file sycned with DragonFly.
1335
1336 20080128:
1337 Changed NTP configuration so that ips aren't cached
1338 so multiple servers are used.
1339
1340 Fix an issue with fork() in libpthread.
1341
1342 20080121:
1343 Add virtualization detection to set the HZ rate
1344 according to a VM present. VMWare and Parallels
1345 should work better like this.
1346
1347 Change to full x11 install in sysinstall. Add
1348 xorg 7 support.
1349
1350 20080115:
1351 Fix the handling of PTY's. CVE-2008-0216
1352
1353 20080105:
1354 mport delete code added, USE_MPORT_TOOLS knob aded.
1355
1356 20080101:
1357 Happy New Year
1358
1359 20071123:
1360 Update sendmail to 8.14.2
1361
1362 20071120:
1363 Update system compiler to gcc 3.4.6.
1364
1365 20071023:
1366 Updated mksh to R31d.
1367
1368 20070911:
1369 Updated mksh to version R31b.
1370
1371 Fixed stderr output in libpthread. Previously it was
1372 written to stdout.
1373
1374 20070831:
1375 Added dot.mkshrc file to support the recent change to
1376 mksh from OpenBSD's ksh derived from pdksh.
1377
1378 Added new firewall configuration. ipfw is enabled by default
1379 with a "desktop" configuration. Consult /etc/rc.firewall
1380 or ipfw show to see the ruleset used. You can disable
1381 ipfw by setting firewall_enable="NO" in /etc/rc.conf This
1382 change only effects IPv4. IPv6 does not have a firewall
1383 enabled by default.
1384
1385 20070814:
1386 Removed GNU tar source. We've been using BSD tar
1387 for awhile.
1388
1389 20070806:
1390 Finished removing umapfs and autofs from the tree.
1391
1392 20070804:
1393 BIND and Tcpdump have been patched for recent vulnerabilities.
1394
1395 We switched to BSD cpio (pax).
1396
1397 20070719:
1398 Imported cpdup from DragonFly as /bin/cpdup
1399
1400 20070716:
1401 Update GNU cpio to 2.8.
1402
1403 20070410:
1404 cvs was updated to 1.12.13. cvsbug was removed.
1405 cvs now behaves similarly to DragonFly's cvs with
1406 most of their local changes.
1407
1408 20070409:
1409 RELENG_0_1 was created. More aggresive changes will
1410 continue here.
1411
1412 20070406:
1413 Back out propolice. propolice caused several problems
1414 with our threading libraries libthr and libpthread.
1415 curthread was often NULL after the patch and many
1416 multithreaded applications would crash. We plan to
1417 work on either bringing in gcc 4.1 or developing a new
1418 patch which also corrects our threading issues later.
1419
1420 It is more important to have a stable system for our
1421 mport work and other projects at this time.
1422
1423 This is not a clean removal. It is recommended that you
1424 have a recently SNAP CD handy. You can either reinstall
1425 or perform a make buildworld and make buildkernel and
1426 make installkernel. Reboot on the cd and copy the contents
1427 of /bin, /sbin, /lib, /libexec, and /usr/bin, /usr/sbin,
1428 /usr/lib, and /usr/libexec to the respective directories on
1429 your disk. Then you should be able to boot into single user
1430 mode and run make installworld. You will need to run
1431 chflags noschg on some of the files if you can't overwrite
1432 them.
1433
1434 You will get __guard missing errors since we had to remove
1435 this from libc.
1436
1437 You will need to rebuild any ports built while propolice was
1438 installed.
1439
1440 20070401:
1441 Importing propolice into MidnightBSD. Propolice is going to
1442 provide us with much greater security and stability in the
1443 long run. If upgrading from a pre-propolice system, please
1444 follow the these instructions:
1445
1446 cd /usr/src/lib/libc && make obj && make && make install
1447 cd /usr/src/gnu/usr.bin/cc && make obj && make && make install
1448 cd /usr/src/lib/libpthread && make obj && make && make install
1449 cd /usr/src/lib/libthr && make obj && make && make install
1450 buildworld and kernel
1451
1452 It is adviced that any mports which were installed and/or built
1453 prior to the propolice update also be updated. If any errors
1454 or issue are encounted, please contact security@midnightbsd.org
1455 and we will be sure to investigate and come up with an expeditious
1456 fix.
1457
1458 20070314:
1459 Remove send-pr from src.
1460
1461 Switch to NetBSD's gzip.
1462
1463 Bump MBSD minor revision.
1464
1465 20070313:
1466 Imported OpenSSH 4.6p1.
1467
1468 Imported FreeBSD's libarchive and updated tar to work with it.
1469
1470 Disabled debug statements cluttering up /var/log/messages for
1471 the tcp autobuf patch applied previously.
1472
1473 20070312:
1474 Synced several audio changes from FreeBSD 6.1. Removed the
1475 BSD Daemon files from src/share.
1476
1477 20070308:
1478 Added mfi which supports LSI Logic MegaRAID SAS devices including
1479 the Dell perc5i.
1480
1481 20070206:
1482 Imported OpenBSD's sudo into source. Please install
1483 /usr/src/usr.bin/sudo/lib first before building.
1484
1485 Those who install from a snapshot after this date
1486 will not be effected.
1487
1488 20070119:
1489 Added audit group. Be sure to add audit to your /etc/group file
1490 before installing world.
1491
1492 hostapd was updated to 0.4.8.
1493
1494 An accidental commit in usr.sbin/bluetooth/hccontrol was fixed to
1495 unbreak world.
1496
1497 wpa_supplicant was updated.
1498
1499 For stability and compatibility reasons, it was decided that MidnightBSD
1500 sync with FreeBSD 6.1 Release. Nearly every change between the original
1501 fork date of February 24, 2006 and the release of FreeBSD 6.1 in May
1502 2006 will be merged. Beyond this, MidnightBSD will be a "real" fork and
1503 will not sync every little change with FreeBSD.
1504
1505 20061231:
1506 Updated COPYRIGHT for 2007.
1507
1508 Updated and bumped libutil after importing NetBSD efun(3) functions.
1509
1510 Added MidnightBSD_version and bumped the FreeBSD version as we've
1511 synced all commits between the fork and that version. It is now safe
1512 to assume MidnightBSD is compatible with FreeBSD RELENG_6 from
1513 Feb 26, 2006.
1514
1515 Added spell(1) and deroff(1) from NetBSD. Also added additional
1516 dict files to work with it. /usr/share/dict/american,
1517 /usr/share/dict/british and /usr/share/dict/special/math
1518
1519 Numerous man page and bug fixes.
1520
1521 20061226:
1522 Setup /usr/share/examples/cvsup SUPfiles for the new
1523 MidnightBSD CVSup server.
1524
1525 Fix a bug in burncd where it would continue forever while
1526 erasing CDRW media.
1527
1528 Add csup to /usr/bin. csup is a CVSup replacement written
1529 in C.
1530
1531 Fixed a bug with bsnmpd build from Oct 30.
1532
1533 Corrected some race conditions and fixed a few bugs in
1534 geom. Imported changes from FreeBSD RELENG_6.
1535
1536 20061225:
1537 Fixed a typo in src/lib/libc/sparc64/fpu/fpu_implode.c
1538 that caused long double to long and long long
1539 conversion of negative numbers to always result in -1.
1540
1541 20061221:
1542 Fixed acpi_battery.c to not report an ERROR if no
1543 batteries are present.
1544
1545 Performed some minor updates on the RL and RE NIC drivers.
1546 RL should no longer panic when trying to print errors.
1547
1548 Corrected a bug with TTY.
1549
1550 20061218:
1551 Corrected a bug with libpthread where newly created suspended
1552 threads don't get scheduled.
1553
1554 20061206:
1555 Fixed a typo with the firewire security patch.
1556
1557 20061129:
1558 Minor cleanups to utilities in bin.
1559
1560 Fixed msdos file system short file name behavior to match
1561 FreeBSD.
1562
1563 20061031:
1564 Updated man pages in section 7.
1565
1566 20061030:
1567 Updated sys/dev/drm to support intel 915 and radeon
1568 r300 cards properly.
1569
1570 Synced snmpd with FreeBSD-stable.
1571
1572 Fixed a bug in rm which could cause data loss.
1573
1574 20061027:
1575 Added Intel ICH8 and nForce 5 support to ATA. cam, mpt,
1576 random, kbdmux, atkbd, and usb were updated. Changes
1577 to clearing registers on SSE enabled processors (i386)
1578 commited.
1579
1580 lukemftpd updated.
1581
1582 openssh rc script was altered which effects initial
1583 seeding.
1584
1585 20061014:
1586 Workaround for em driver problem on shared IRQ.
1587
1588 Started removal of alpha support.
1589
1590 20061013:
1591 ATA driver was updated. USB/USB1/USB2 types added.
1592
1593 20061010:
1594 OpenSSH was updated to 4.4p1.
1595
1596 20060909:
1597 OpenNTPD was added to MidnightBSD. Run make delete-old to remove
1598 the old ntpd daemon.
1599
1600 cat has a new option -D which allows you to timestamp output
1601 on a per line basis.
1602
1603 The kernel has a keyboard mux which allows you to have multiple
1604 keyboard connected simultaneously. USB keyboard support was also
1605 improved with this patch.
1606
1607 The Intel em driver was updated. Network performance was greatly
1608 increased on many systems. Additional models are supported.
1609
1610 The ATA driver was patched to fix a potential deadlock.
1611
1612 Bind was patched to fix a potential denial of service condition.
1613
1614 20060817:
1615 ksh has been added to the base system. If you previously had
1616 the port installed, it will be overwritten on the next buildworld.
1617
1618
1619
1620 To build a kernel
1621 -----------------
1622 If you are updating from a prior version of MidnightBSD (even one just
1623 a few days old), you should follow this procedure. With a
1624 /usr/obj tree with a fresh buildworld,
1625 make -DALWAYS_CHECK_MAKE buildkernel KERNCONF=YOUR_KERNEL_HERE
1626 make -DALWAYS_CHECK_MAKE installkernel KERNCONF=YOUR_KERNEL_HERE
1627
1628 To test a kernel once
1629 ---------------------
1630 If you just want to boot a kernel once (because you are not sure
1631 if it works, or if you want to boot a known bad kernel to provide
1632 debugging information) run
1633 make installkernel KERNCONF=YOUR_KERNEL_HERE KODIR=/boot/testkernel
1634 nextboot -k testkernel
1635
1636 To just build a kernel when you know that it won't mess you up
1637 --------------------------------------------------------------
1638 This assumes you are already running a 6.X system. Replace
1639 ${arch} with the architecture of your machine (e.g. "i386",
1640 "amd64", "ia64", "pc98", "sparc64", etc).
1641
1642 cd src/sys/${arch}/conf
1643 config KERNEL_NAME_HERE
1644 cd ../compile/KERNEL_NAME_HERE
1645 make depend
1646 make
1647 make install
1648
1649 If this fails, go to the "To build a kernel" section.
1650
1651 To rebuild everything and install it on the current system.
1652 -----------------------------------------------------------
1653 # Note: sometimes if you are running current you gotta do more than
1654 # is listed here if you are upgrading from a really old current.
1655
1656 <make sure you have good level 0 dumps>
1657 make buildworld
1658 make kernel KERNCONF=YOUR_KERNEL_HERE
1659 [1]
1660 <reboot in single user> [3]
1661 mergemaster -p [5]
1662 make installworld
1663 make delete-old
1664 mergemaster [4]
1665 <reboot>
1666
1667
1668 To cross-install current onto a separate partition
1669 --------------------------------------------------
1670 # In this approach we use a separate partition to hold
1671 # current's root, 'usr', and 'var' directories. A partition
1672 # holding "/", "/usr" and "/var" should be about 2GB in
1673 # size.
1674
1675 <make sure you have good level 0 dumps>
1676 <boot into -stable>
1677 make buildworld
1678 make buildkernel KERNCONF=YOUR_KERNEL_HERE
1679 <maybe newfs current's root partition>
1680 <mount current's root partition on directory ${CURRENT_ROOT}>
1681 make installworld DESTDIR=${CURRENT_ROOT}
1682 cd src/etc; make distribution DESTDIR=${CURRENT_ROOT} # if newfs'd
1683 make installkernel KERNCONF=YOUR_KERNEL_HERE DESTDIR=${CURRENT_ROOT}
1684 cp /etc/fstab ${CURRENT_ROOT}/etc/fstab # if newfs'd
1685 <edit ${CURRENT_ROOT}/etc/fstab to mount "/" from the correct partition>
1686 <reboot into current>
1687 <do a "native" rebuild/install as described in the previous section>
1688 <maybe install compatibility libraries from src/lib/compat>
1689 <reboot>
1690
1691
1692 To upgrade in-place from 5.x-stable or higher to 6.x-stable
1693 -----------------------------------------------------------
1694 <make sure you have good level 0 dumps>
1695 make buildworld [9]
1696 make kernel KERNCONF=YOUR_KERNEL_HERE [8]
1697 [1]
1698 <reboot in single user> [3]
1699 mergemaster -p [5]
1700 make installworld
1701 make delete-old
1702 mergemaster -i [4]
1703 <reboot>
1704
1705 Make sure that you've read the UPDATING file to understand the
1706 tweaks to various things you need. At this point in the life
1707 cycle of current, things change often and you are on your own
1708 to cope. The defaults can also change, so please read ALL of
1709 the UPDATING entries.
1710
1711 Also, if you are tracking -current, you must be subscribed to
1712 freebsd-current@freebsd.org. Make sure that before you update
1713 your sources that you have read and understood all the recent
1714 messages there. If in doubt, please track -stable which has
1715 much fewer pitfalls.
1716
1717 [1] If you have third party modules, such as vmware, you
1718 should disable them at this point so they don't crash your
1719 system on reboot.
1720
1721 [3] From the bootblocks, boot -s, and then do
1722 fsck -p
1723 mount -u /
1724 mount -a
1725 cd src
1726 adjkerntz -i # if CMOS is wall time
1727 Also, when doing a major release upgrade, it is required that
1728 you boot into single user mode to do the installworld.
1729
1730 [4] Note: This step is non-optional. Failure to do this step
1731 can result in a significant reduction in the functionality of the
1732 system. Attempting to do it by hand is not recommended and those
1733 that pursue this avenue should read this file carefully, as well
1734 as the archives of freebsd-current and freebsd-hackers mailing lists
1735 for potential gotchas.
1736
1737 [5] Usually this step is a noop. However, from time to time
1738 you may need to do this if you get unknown user in the following
1739 step. It never hurts to do it all the time.
1740
1741 [8] In order to have a kernel that can run the 5.x binaries
1742 needed to do an installworld, you must include the COMPAT_FREEBSD5
1743 option in your kernel. Failure to do so may leave you with a system
1744 that is hard to boot to recover. A similar kernel option COMPAT_FREEBSD5
1745 is required to run the 5.x binaries on more recent kernels.
1746
1747 Make sure that you merge any new devices from GENERIC since the
1748 last time you updated your kernel config file.
1749
1750 [9] When checking out sources, you must include the -P flag to have
1751 cvs prune empty directories.
1752
1753 If CPUTYPE is defined in your /etc/make.conf, make sure to use the
1754 "?=" instead of the "=" assignment operator, so that buildworld can
1755 override the CPUTYPE if it needs to.
1756
1757 MAKEOBJDIRPREFIX must be defined in an environment variable, and
1758 not on the command line, or in /etc/make.conf. buildworld will
1759 warn if it is improperly defined.
1760
1761 Copyright information:
1762
1763 Copyright 1998-2005 M. Warner Losh. All Rights Reserved.
1764
1765 Redistribution, publication, translation and use, with or without
1766 modification, in full or in part, in any form or format of this
1767 document are permitted without further permission from the author.
1768
1769 THIS DOCUMENT IS PROVIDED BY WARNER LOSH ``AS IS'' AND ANY EXPRESS OR
1770 IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
1771 WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
1772 DISCLAIMED. IN NO EVENT SHALL WARNER LOSH BE LIABLE FOR ANY DIRECT,
1773 INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
1774 (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
1775 SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
1776 HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
1777 STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING
1778 IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
1779 POSSIBILITY OF SUCH DAMAGE.
1780
1781 If you find this document useful, and you want to, you may buy the
1782 author a beer.
1783
1784 Contact Warner Losh if you have any questions about your use of
1785 this document.
1786
1787 $FreeBSD: src/UPDATING,v 1.416.2.18 2006/02/22 11:51:57 yar Exp $
1788 $MidnightBSD$

Properties

Name Value
svn:keywords MidnightBSD=%H