4:11 PM - Webkit, recent changes
We also recently removed gaim (replaced by pidgin) and updated openssh and bzip2 in CURRENT.
This affected the strfmon function in libc. It has been corrected in CURRENT. A memory leak was also corrected.
References:
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2008-1391
http://www.midnightbsd.org/cgi-bin/cvsweb.cgi/src/lib/libc/stdlib/strfmon.c
We've got a screenshot of Gnome 2.20 running on MidnightBSD. We're still working on some of the Gnome related ports.
This image was captured from a MidnightBSD current install in Parallels running on Mac OS X.
WebKit has been added to mports. Now MidnightBSD users have the option to install WebKit. We are working on adding a few WebKit front end applications.
Use mports/www/midori in mports to try WebKit.
MirPorts is now working on MidnightBSD. This now gives users a choice between two ports systems. I'll post more on this when I get time. MirPorts also run on MirBSD and Mac OS X.
mports:
Anyone using Dovecot should update to the new version in ports. There was a recent security issue.
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1218
We're still upgrading gnome ports for the 2.20 release. After that, we'll probably update KDE to 3.5.9 and then look at 2.22 gnome.
Chris and I did an interview regarding mports late last year. it's now on the NetBSD website.
http://www.netbsd.org/gallery/pkgsrc-interviews.html#mports
There are many interesting interviews about various ports systems in the BSDs on that site. Check it out.
We're working on a new MidnightBSD wiki. It will contain some documentation, todo lists, and other elements that developers and users want to collaborate on.
http://www.midnightbsd.org/wiki/FrontPage
location: Home
First, a security update was applied to CURRENT for users who turn on the random IP id feature. It is off by default. This feature has a flaw in the random id generation.
See http://www.securityfocus.com/bid/27647/info
Second, we've updated a large number of ports in the last few days. The astro, archivers, accessibility, and net (except samba3) ports have been updated with the latest versions where possible. I'm currently working on the audio category.
Progress on Gnome 2.20 is still going strong as well. ctriv had a bit of a hardware snafu which has slowed the deployment of the new cluster software. I'm hoping to have many new port updates ready when it's back online.
Magus has been down since december for a rewrite. I've discussed this previously. The build master was brought down for a faculty member to take the video card in the last week. It had been up 113 days which is a record for any machines I'm running. The website has not been restored as of yet, but the system was upgraded to 1GB of RAM.
ctriv hopes to complete the software soon.
I've modified the analog port to report several additional BSDs including MidnightBSD, MirBSD and Dragonfly.
CURRENT now has a patch to correct a potential security issue with sendfile. Files were not checked prior to serving which would allow a file that was write only to be served. While this scenario is rare, we decided to fix it anyway.
sendfile is used by many daemons including Apache httpd.