ViewVC Help
View File | Revision Log | Show Annotations | Download File | View Changeset | Root Listing
root/www/trunk/index.html
Revision: 125
Committed: Fri Apr 25 14:19:19 2008 UTC (16 years ago) by laffer1
Content type: text/html
File size: 9541 byte(s)
Log Message: 
Get caught up on some of the security issues.

File Contents

# User Rev Content
1 laffer1 38 <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.1//EN"
2     "http://www.w3.org/TR/xhtml11/DTD/xhtml11.dtd">
3 laffer1 2 <html xmlns="http://www.w3.org/1999/xhtml">
4     <head>
5     <meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1" />
6     <title>MidnightBSD Project</title>
7 laffer1 106 <meta name="description" content="The MidnightBSD Project" />
8     <meta name="keywords"
9     content="MidnightBSD, BSD, UNIX, Desktop, OS, Support, Ports, Release, Application, Software, CVS, CVSup, News, homepage, Unix, Laptop" />
10 laffer1 113 <link rel="icon" href="./favicon.ico" type="image/x-icon" />
11 laffer1 2 <link rel="stylesheet" type="text/css" media="all" href="css/base.css" />
12 laffer1 101 <link rel="alternate" type="application/rss+xml" href="http://cia.vc/stats/project/MidnightBSD/.rss" title="CVS Commit Log"/>
13     <link rel="alternate" type="application/rss+xml" href="http://www.justjournal.com/users/mbsd/rss" title="Developer Blog"/>
14 laffer1 125 <!-- $MidnightBSD: www/index.html,v 1.34 2008/03/18 01:56:12 laffer1 Exp $ -->
15 laffer1 38 <script type="text/javascript">
16     <!--
17     function MM_swapImgRestore() { //v3.0
18     var i,x,a=document.MM_sr; for(i=0;a&&i<a.length&&(x=a[i])&&x.oSrc;i++) x.src=x.oSrc;
19     }
20    
21     function MM_preloadImages() { //v3.0
22     var d=document; if(d.images){ if(!d.MM_p) d.MM_p=new Array();
23     var i,j=d.MM_p.length,a=MM_preloadImages.arguments; for(i=0; i<a.length; i++)
24     if (a[i].indexOf("#")!=0){ d.MM_p[j]=new Image; d.MM_p[j++].src=a[i];}}
25     }
26    
27     function MM_findObj(n, d) { //v4.01
28     var p,i,x; if(!d) d=document; if((p=n.indexOf("?"))>0&&parent.frames.length) {
29     d=parent.frames[n.substring(p+1)].document; n=n.substring(0,p);}
30     if(!(x=d[n])&&d.all) x=d.all[n]; for (i=0;!x&&i<d.forms.length;i++) x=d.forms[i][n];
31     for(i=0;!x&&d.layers&&i<d.layers.length;i++) x=MM_findObj(n,d.layers[i].document);
32     if(!x && d.getElementById) x=d.getElementById(n); return x;
33     }
34    
35     function MM_swapImage() { //v3.0
36     var i,j=0,x,a=MM_swapImage.arguments; document.MM_sr=new Array; for(i=0;i<(a.length-2);i+=3)
37     if ((x=MM_findObj(a[i]))!=null){document.MM_sr[j++]=x; if(!x.oSrc) x.oSrc=x.src; x.src=a[i+2];}
38     }
39     //-->
40     </script>
41 laffer1 2 </head>
42    
43     <body>
44    
45 laffer1 75 <!--#include virtual="/header.html" -->
46 laffer1 2
47     <div id="content">
48    
49     <div id="rnav">
50     <ul>
51     <li><a href="/index.html" title="Home">Home</a></li>
52     <li><a href="/about/index.html" title="About">About</a></li>
53     <li><a href="/download/index.html" title="Get MidnightBSD">Get MidnightBSD</a></li>
54     <li><a href="/docs/index.html" title="Documentation">Documentation</a></li>
55     <li><a href="/community/index.html" title="Community">Community</a></li>
56     <li><a href="/developer/index.html" title="Developers">Developers</a></li>
57     <li><a href="/support/index.html" title="Support">Support</a></li>
58 laffer1 113 <li><a href="/wiki" title="MidnightBSD Wiki">Wiki</a></li>
59 laffer1 2 </ul>
60 laffer1 6
61 laffer1 91 <p>
62     <a href="/de/index.html" title="German">DE</a>
63     <a href="/index.html" title="English">EN</a>
64     <a href="/ru/index.html" title="Russian">RU</a>
65     </p>
66 laffer1 28
67 laffer1 91 <p style="border-top: thin dashed silver; padding-top: 10px;"><img src="images/feed.gif" alt="RSS Feed" />
68     <a href="http://www.justjournal.com/users/mbsd/rss">Developer Blog</a></p>
69 laffer1 31
70     </p>
71 laffer1 2 </div>
72    
73     <h2>Introduction</h2>
74    
75 laffer1 96 <p style="text-indent: 3em; line-height: 1.5; margin-bottom: 20px;">MidnightBSD
76     is a desktop operating system for x86 compatible (including Pentium&reg; and Athlon&#8482;),
77     and soon amd64 compatible (including Opteron&#8482;, Athlon&#8482;64, and EM64T)
78     architectures. It was originally based on <a href="http://www.freebsd.org/">FreeBSD</a>
79     6.1 Beta. The goal of the project is to create a BSD with ease of use and simplicity in mind.</p>
80 laffer1 2
81 laffer1 119 <p>We've released two versions of MidnightBSD: <a href="docs/releases/0.1/">0.1</a> and
82     <a href="docs/releases/0.1.1/">0.1.1</a>. <a href="docs/releases/0.2/">0.2</a> is under development.</p>
83 laffer1 62
84 laffer1 38 <table>
85     <caption><span style="color: #333; text-decoration: underline;">MidnightBSD in action</span></caption>
86     <tbody>
87     <tr>
88 laffer1 57 <td colspan="3" style="width: 400px;"><img src="images/screen_login.jpg" alt="screen shot: using MidnightBSD" id="screen" /></td>
89 laffer1 38 </tr>
90     <tr>
91 laffer1 57 <td style="width: 33%"><a href="#" onmouseover="MM_swapImage('screen','','images/screen_login.jpg',0)"><img width="100" height="75" src="images/screen_login.jpg" alt="screen shot: using MidnightBSD" /></a></td>
92     <td style="width: 33%" align="center"><a href="#" onmouseover="MM_swapImage('screen','','images/screen_wm.jpg',0)"><img width="100" height="75" src="images/screen_wm.jpg" alt="screen shot: using MidnightBSD" /></a></td>
93     <td style="width: 34%" align="right"><a href="#" onmouseover="MM_swapImage('screen','','images/screen_boot.jpg',0)"><img width="100" height="75" src="images/screen_boot.jpg" alt="screen shot: using MidnightBSD" /></a></td>
94 laffer1 38 </tr>
95     </tbody>
96     </table>
97    
98 laffer1 68 <p><a href="http://cs.emich.edu/mbsd/videos/demo1.mov">Watch</a> demo movie in QuickTime format.</p>
99 laffer1 39
100 laffer1 77 <p>Installing MidnightBSD videos:
101 laffer1 78 <a href="http://video.google.com/videoplay?docid=-3504097528804636404">Video 1</a>
102     <a href="http://video.google.com/videoplay?docid=-1327567970434212474">Video 2</a>
103 laffer1 77 or
104 laffer1 68 <a href="http://video.google.com/videoplay?docid=-1215820984218210282&q=MidnightBSD&pr=goog-sl">part 1</a>
105     <a href="http://video.google.com/videoplay?docid=-6978382486264269794&pr=goog-sl">part 2</a>
106     <a href="http://video.google.com/videoplay?docid=6990322451567856326&pr=goog-sl">part 3</a>
107     <a href="http://video.google.com/videoplay?docid=-1079107845259123061&pr=goog-sl">part 4</a>
108     <br /> All of the install videos are on Google Video and the various MidnightBSD FTP mirrors.
109     </p>
110 laffer1 42
111 laffer1 38 <p><span style="text-align: center;">
112     <a href="download/index.html"><img src="images/dvd.png" alt="Download" style="float: left;" /></a><br />
113     <a href="download/index.html">Download</a>
114 laffer1 2 MidnightBSD
115 laffer1 38 </span></p>
116 laffer1 2
117     <p><a href="http://www.cafepress.com/midnightbsd">Purchase</a> MidnightBSD merchandise to support the project.</p>
118    
119     <p>Track development and changes to MidnightBSD with our <a href="http://www.justjournal.com/users/mbsd">development blog</a>. </p>
120    
121 laffer1 43 <p>View recent <a href="http://cia.vc/stats/project/midnightbsd">CVS activity</a> through a friendly web interface. (commit logs)</p>
122    
123 laffer1 2 <p>We now have a <a href="http://forums.midnightbsd.org/">Forum</a>. You can also chat with us via IRC on FreeNode #midnightbsd.</p>
124    
125     <p><a href="http://bugreport.midnightbsd.org/">View/Report</a> Bugs.</p>
126    
127 laffer1 5 <p>View our <a href="mports/README.html">ports</a> with descriptions.</p>
128    
129 laffer1 57 <p>Subscribe to our <a href="/mailman/listinfo">mailing lists.</a></p>
130    
131 laffer1 2 <table>
132     <thead>
133     <tr>
134     <th>Getting Source</th>
135     </tr>
136     </thead>
137    
138     <tbody>
139     <tr>
140     <td><a href="cgi-bin/cvsweb.cgi" title="View the CVS Repository on the web">CVSWeb</a></td>
141     </tr>
142    
143     <tr>
144     <td><a href="developer/cvsup.html" title="Download source or mports">CVSup</a></td>
145     </tr>
146     </tbody>
147     </table>
148    
149 laffer1 5 <h3>Security</h3>
150 laffer1 2
151 laffer1 125
152     <p>April 17, 2008<br />
153     OpenSSH was updated to 5.0p1 in CURRENT to correct an issue with X11 forwarding. A patch for
154     this issue was committed to RELENG_0_1 as well as a fix for a config file issue.
155     </p>
156    
157     <p>
158     A <a href="http://secunia.com/advisories/29803/">security issue</a> was found in mksh. This
159     only affected CURRENT users. The software was updated to r33d</p>
160    
161     <p>April 6, 2008<br />
162     bzip2 was updated to 1.05 in CURRENT to correct a security issue.
163     </p>
164    
165     <p>April 3, 2008<br />
166     A security issue was found with strfmon in libc.
167     <a href="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2008-1391">CVE-2008-1391</a> Integer Overflow.
168     This was fixed in CURRENT.</p>
169    
170     <p>February 15, 2008<br />
171     CURRENT now has a patch to correct a potential security issue with sendfile. Files were not checked prior to serving which would allow a file that was write only to be served. While this scenario is rare, we decided to fix it anyway.
172     <br />
173     sendfile is used by many daemons including Apache httpd.
174     </p>
175    
176 laffer1 57 <p>August 1, 2007<br />
177     BIND and Tcpdump were patched in 0.2 and 0.1 for recent security issues. BIND is now equivalent to 9.3.4p1.
178     </p>
179    
180 laffer1 5 <p>May 2, 2007<br />
181 laffer1 10 CURRENT and STABLE both have the patch for ipv6 type 0 routing headers. The problem is that ipv6 routing headers could be run over the same link multiple times.
182 laffer1 5 </p>
183     <p>March 10, 2007<br />
184     While many of the DST changes were imported last year, we decided to cover all cases and import
185     the latest tzdata2007c. Users concerned about DST changes should update their sources
186     and rebuild. The java ports may not have DST changes in place. We will review that issue.
187     </p>
188     <p>Jaunary 23, 2007<br />
189 laffer1 57 A &quot;symlink&quot; exploit was found in the MidnightBSD jail system. A fix was made available. Please
190 laffer1 5 update your /etc/rc.d/jail file from cvs. Patches will not be created until our first release.
191     </p>
192    
193 laffer1 2 <script type="text/javascript"><!--
194     google_ad_client = "pub-1321195614665440";
195     google_ad_width = 468;
196     google_ad_height = 60;
197     google_ad_format = "468x60_as";
198     google_ad_type = "text_image";
199     google_ad_channel ="";
200     google_color_border = "6699CC";
201     google_color_bg = "003366";
202     google_color_link = "FFFFFF";
203     google_color_text = "AECCEB";
204     google_color_url = "AECCEB";
205     //--></script>
206     <script type="text/javascript"
207     src="http://pagead2.googlesyndication.com/pagead/show_ads.js">
208     </script>
209 laffer1 11
210     <p><script type="text/javascript" src="http://www.ohloh.net/projects/5078;badge_js"><!-- ie7 --></script></p>
211 laffer1 70
212     <p><script language="Javascript" src="https://seal.godaddy.com/getSeal?sealID=71850604307c13d83f12711447cc2d8917f840381318884700136030"></script></p>
213 laffer1 2 </div>
214    
215 laffer1 73 <!--#include virtual="/footer.html" -->
216 laffer1 2
217     </body>
218     </html>