NOTICE:
This server provides access to the official patches for BSD/OS.
All patches are Copyright 1997 Berkeley Software Design, Inc.,
all rights reserved. Other copyrights may apply to some patches.
Access to some of these patches is restricted to Macnica BSD/OS
customers with valid update or support contracts.
If you are reading this after obtaining it from the
patches@bsdi.macnica.co.jp mail-back server, you have already
been authenticated. You can request any of these files directly
through the email server.
If you wish to access the protected files via ftp, you must first
obtain a group-id/password pair from the patches@bsdi.macnica.co.jp
mail-back server and then enter the appropriate `site group' and
`site gpass' commands before requesting the files from the ftp
server. See the help message from the patches@bsdi.macnica.co.jp
mail-back server for more information. Send an "cust xxxxxxxx"
message to the address patches@bsdi.macnica.co.jp and the server
will respond with the help message.
This directory contains patches for BSD/OS.
We've changed mod naming schemes since mods may now contain multiple
sub-mods. In general, all top-level mods will now be named MXXX-YYY
where XXX is the release number against which the mod is meant to
be applied (e.g., 300 for the 3.0 release), and YYY is the mod
number (a monotonically increasing value). If the mod has sub-mods,
those submods are named with the same name as the top level mod
that contains them plus an extension. The usual extensions will be:
.kobj (kernel object patch)
.ksrc (kernel source patch)
.k (kernel patch -- source, even on binary-only systems)
.uobj (utilities object patch)
.usrc (utilities source patch)
.man (manual page patch)
There may be other extensions defined in the future. The sub-mods
will always be listed as part of the README entries. Thus,
M300-001 would be the top-level mod name, and might contain
the sub-mods: M300-001.man, M300-001.usrc, M300-001.kobj, M300-001.uobj,
and M300-001.ksrc.
Please contact support@bsdi.macnica.co.jp if you have any questions regarding
the patches in this directory.
===========================================================================
K300-001 [ KERNEL-K300-001 BK300-001 SK300-001 ]
Fix a potential crash for SCSI operations transferring no
data; the only known way to trigger this bug is with the
sound programs such as cdctl.
----------
Add delay before power-down when using halt -h, as some
laptop disks appear to acknowledge data as being written
when it is still in an on-disk cache and not yet really
written out to the disk.
----------
Fix problems that can allow a program that ran set-user-ID
from making possibly-sensitive data visible via ptrace.
----------
Fix an obscure bug with multiple non-blocking opens while
a process is blocked awaiting carrier that was exercised
by the new gettystat program. The symptom is that modems
would answer, but no login banner or login prompt would
appear.
----------
Make file generation numbers harder to guess, making it
somewhat harder for unauthorized hosts to gain access via
NFS.
----------
Fix a crash on NFS servers.
----------
These changes remove misleading kernel error messages,
"icmp_newmtu: rtcalloc() returned non-host route?", and
"rtinit: fixed ifa (%x was %x)", which can happen in normal
operation.
----------
Fix problem that prevented header PPP compression from being
enabled; fix problem with header compression while tcpdump
was in use.
Properly handle 'poison' PPP packets.
----------
When IP forwarding was not explicitly enabled (generally
with "options GATEWAY"), forwarding of source-routed packets
was incorrectly defaulting to be enabled.
----------
Fix problem that could cause system hang if VM "regions"
are not a multiple of the page size.
----------
Fix a problem in cache consistency with mapped files when
a file is written with the IO_APPEND flag.
----------
Add a missing binary for the ICS 1890 PHY chip used on some Zynx
Ethernet cards.
----------
Fixes to umap filesystem:
problems copying group maps into kernel
panic when running on top of cd9660 filesystem
----------
Work around bug in 3C619C ASIC (caused hung output condition)
Insure that we never use all transmit descriptors (this would also
cause an output hang)
----------
Fix typo that caused multicast filter to be programmed incorrectly
under some circumstances.
----------
Add COMPAT_SOCKADDR option that recognizes malformed sockaddr
structures (typically generated by perl programs). Make this option
default to on (the change to GENERIC and OBJ are made in a patch above)
----------
Work around SCSI devices with broken disconnect function.
This allows operation with targets that do not do a "save
data pointers" prior to disconnect (as required by the SCSI
standard). The typical symptom exhibited by targets with
this problem will be short or zero length writes. Setting
this bit could cause some targets to corrupt data, particularly
during error recovery.
----------
Support 80Mhz internal clock speed on NCR SCSI controllers
----------
Prevent deadlock when garbage collection occurs on kernel memory map.
----------
Fix compilation error with COMPAT_SEMAPHORE turned off
----------
Install new GENERIC kernel with all these fixes if confirmed
by the user (it will not be installed if patch is installed with
-n (noask) set).
----------
The following operations are available:
perl5 K300-001 - Print mod description
perl5 K300-001 unpack - Unpack (but do not apply) mod
perl5 K300-001 apply [submod] - Unpack and apply mod
md5 checksum: d0143be239ff67c6ec62488532bd74ae K300-001
old md5 checksum: 0e581aa9416bde012f9d0fe39c155051 K300-001
***** UPDATE NOTICE *****
The only difference between the new and old versions is that the
original version would not install correctly in kernel directories
that were not in /usr/src/sys.
If you have installed the original version, there's no reason
to do anything with the new version.
*************************
===========================================================================
U300-001 [ BU300-001 SU300-001 BU300-000 ]
Add a hostid(1) program.
Fix accounting bug in ac(8).
New aic(4), ncr(4) man pages.
Clean up amd(8) mount maps.
New versions of libdialer, gettyd, ppp.
New version of elm.
Put config_www back into the release.
New version of rlogind.
Uuxqt fix.
New version of innd.
New version of the termcap library.
New version of pagesize.
New version of imapd.
New version of Lynx.
New version of MaxIM.
New version of the C library.
Updated Perl files.
New version of sysctl.
New modlog command to show mod status.
The following operations are available:
perl5 U300-001 - Print mod description
perl5 U300-001 unpack - Unpack (but do not apply) mod
perl5 U300-001 apply [submod] - Unpack and apply mod
md5 checksum: 2a6be8fea749bd4f647094f1faa29665 U300-001
===========================================================================
D300-001 [ ]
Prerequisites: BU300-001
Domestic version of BU300-001 rlogind.
The following operations are available:
perl5 D300-001 - Print mod description
perl5 D300-001 unpack - Unpack (but do not apply) mod
perl5 D300-001 apply [submod] - Unpack and apply mod
md5 checksum: 846d74e5ff61cae441a99cde1658c437 D300-001
===========================================================================
U300-002 [ ]
Update to Xaccel Release 3.1 from XI Graphics.
The following operations are available:
perl5 U300-002 - Print mod description
perl5 U300-002 unpack - Unpack (but do not apply) mod
perl5 U300-002 apply [submod] - Unpack and apply mod
md5 checksum: 2dd9e634081f371cb8004e306c80c61f U300-002
===========================================================================
Mod : M300-001
Submods: M300-001.man M300-001.usrc M300-001.kobj M300-001.uobj M300-001.ksrc
Updated driver for Cyclades Cyclom-Y
- The driver now supports up to 32 ports/board (before it was
only 16 ports).
- There were bug fixes in supporting multiple boards in one
system.
- There was a bug fix in the HW flow control (the problem
could cause occasional random hangups in modem connections
in one instance, DTR was being mistakenly dropped
instead of RTS).
- Fix any problems caused by new compiler optimization. Break
processing was the only known problem.
md5 checksum: c1caa0ecf800a3a3c25cb0e8fd0ac187 M300-001
===========================================================================
Mod : M300-002
Submods: M300-002.ksrc M300-002.kobj
This patch fixes problems with SCSI bus hangs during
spacing and rewind operations.
md5 checksum: 9afe54ebf26c0dceef86aa62b55bb2a4 M300-002
===========================================================================
Mod : M300-003
Submods:
This patch updates the digi driver. It fixes problems with the
TIOCMSET ioctl and adds support for 230400 baud.
md5 checksum: 36ec53f6bf2e84f40678234a238aa7eb M300-003
===========================================================================
Mod : M300-004
Submods: M300-004.k M300-004.man
Updated driver from Comtrol. This version adds support
for pci cards.
The suggested configuration from comtrol is:
rp0 at pci?
rp1 at pci?
rp2 at isa? port 0x100
rp3 at isa? port 0x180
md5 checksum: ea0a9d136ed787bbdaa5a969960e0bf1 M300-004
===========================================================================
Mod : M300-005
Submods: M300-005.uobj M300-005.usrc
New version of the C library which fixes problems using
connect() with pthreads.
md5 checksum: c10b196d3e866e76767492cf899518aa M300-005
===========================================================================
Mod : M300-006
Submods:
Fix links and permissions on new perl binaries installed as
part of U300-001.
md5 checksum: f297fc86e3a12a5f0efa7f0fb4896618 M300-006
===========================================================================
Mod : M300-007
Submods: M300-007.uobj M300-007.usrc
Upgrade emacs from 19.34 to 19.34b
md5 checksum: 6a1c19538ab7dfac57a48b8c1f855268 M300-007
===========================================================================
Mod : M300-008
Submods: M300-008.usrc M300-008.uobj
No longer rotate ppplog (it no longer exists).
Rotate gettyd accounting file.
md5 checksum: 021afd28ef8da3356fd057abe7e6270c M300-008
===========================================================================
Mod : M300-009
Submods: M300-009.usrc M300-009.uobj
Fix memory corruption problem in gettyd that would cause gettyd
to dump core.
Have gettyd make uucp locked lines mode 660 rather than 600.
This allows uucp to work properly.
md5 checksum: 5c40dc6645770a5067a418751c12ead6 M300-009
===========================================================================
Mod : M300-010
Submods:
The decether.o module distributed in BSD/OS 3.0 was compiled
with the ISO option, which causes it to extern the variable
all_es_snpa. Attempting to build a kernel using the binary
distribution without ISO defined causes a failure due to
the undefined symbol.
md5 checksum: f6746fd8f9b7c3c0bf06efb9c7e43bd0 M300-010
===========================================================================
Mod : M300-011
Submods:
Netscape FastTrack Server fixes.
Fix missing symlinks from initial installations and ensure
that any servers configured after the patch are set up correctly.
Add NSAPI include directory and examples.
md5 checksum: 483c45faa370db123c576886e25047d8 M300-011
===========================================================================
Mod : M300-012
Submods:
The mod (M300-004) to add PCI support to the Comtrol driver
did not update i386/conf/files. This would cause config disallow
rocket port cards to be configured at pci?. This mod updates
i386/conf/files so this will work as intended.
md5 checksum: 8257deb7d1068646e9aadb5560f44518 M300-012
===========================================================================
Mod : M300-013
Submods: M300-013.k M300-013.ksrc M300-013.kobj
Fix panic when an unlinked file or directory is referenced via
the union filesystem.
md5 checksum: 51523f558bdbdde818bda3e80112ad10 M300-013
===========================================================================
Mod : M300-014
Submods: M300-014.k M300-014.man M300-014.kobj
NOTE: DOWNLOAD OF THIS PATCH REQUIRES A CURRENT SUPPORT CONTRACT
(See the instructions at the top of the README)
Add PHY driver for Intel 82555 chip. This adds support for newer
revisions of the Intel EtherExpress Pro100B.
NOTES: The original version of this patch was missing the source for
the driver. If you are a SOURCE licensee and want the source
but have already installed the old version, download the new version
and install just the .ksrc sub-mod with the command:
perl5 M300-014 apply M300-014.ksrc
old md5 checksum: 9f7a5dbad4ae85f3e5a9d22e1d8d0220 M300-014
md5 checksum: 1a4e994dfcb818ed522b950c40b2201e M300-014
===========================================================================
Mod : M300-015
Submods: M300-015.ksrc M300-015.kobj
Performance fix for de driver; restores performance lost with
K210-023 (or 3.0).
md5 checksum: 3a16dcc348aa8c942b4e136c73ef9a30 M300-015
===========================================================================
Mod : M300-016
Submods: M300-016.kobj M300-016.ksrc
BSD/OS has traditionally checked the SCSI HBA (Host Bus
Adapter) residual count on all transfers. Some disk targets,
when doing disconnect, use the SCSI protocol in a manner
which makes it impossible for HBA to correctly determine
if there is a residual count. With this change the SCSI
disk driver (sd) will no longer check the HBA residual
count. This is safe because SCSI disk type device should
never have a HBA residual count.
md5 checksum: 4e86ef4cb929d555b7f34f5bd4c93e6e M300-016
===========================================================================
Mod : M300-017
Submods: M300-017.usrc M300-017.uobj
Fix security problems in metamail as described in CERT Advisory
CA-97.14.
md5 checksum: 67b78c617939aaf2ebe369f1f029fc74 M300-017
===========================================================================
Mod : M300-018
Submods: M300-018.usrc M300-018.uobj
Updated version of /etc/getty/fixttys script which correctly
handles blank lines.
md5 checksum: 8f704d5511da947cbd45455169c1956a M300-018
===========================================================================
Mod : M300-019
Submods: M300-019.ksrc M300-019.man M300-019.kobj
NOTE: DOWNLOAD OF THIS PATCH REQUIRES A CURRENT SUPPORT CONTRACT
(See the instructions at the top of the README)
3Com EtherLink XL and Fast EtherLink XL (3C90x) driver.
It has been observed that 3C905 with an ASIC revision older
than 4 will sometimes lock up. This driver will reset the
card when it detects this condition, however performance
suffers. The customer is advised to contact 3Com for an
upgrade if there are too many log messages such as:
eb0: ebwatchdog: MIP reset eb0 0x8800 0xc80001
NOTE: The original version of this patch would not automatically
install the source for the driver. If you are a SOURCE
customer, you'll need to manually install it if you have
installed the old version of the patch. You can install the
source sub-mod with the command:
perl5 M300-019 apply M300-019.ksrc
old md5 checksum: 66dd71c60b16464db38395b7cd59b653 M300-019
md5 checksum: 381ac4ecb46d11c014ba22d2ac6cf4e5 M300-019
===========================================================================
Mod : M300-020
Submods: M300-020.uobj
The setuid version of perl4 (/usr/bin/suidperl) suffers
from some of the same security problems as the un-patched
version of setuid perl5 (sperl5) which are fixed in U300-001.
Since perl4 is not straight-forward to fix and is no longer being
maintained, we will no longer support setuid perl4. If you have
setuid perl scripts, you should switch to using sperl5 which
we will continue to maintain.
This patch disables setuid perl 4 (/usr/bin/suidperl).
md5 checksum: ee821e111da60fc64c21097fd0ea144b M300-020
===========================================================================
Mod : M300-021
Submods: M300-021.ksrc M300-021.kobj
This mod solves a problem in which IP multicast packets
larger than the interface MTU were not being sent correctly.
md5 checksum: d96fdf25656cbe37d8b8526d4214fbd0 M300-021
===========================================================================
Mod : M300-022
Submods: M300-022.ksrc M300-022.kobj
This fixes a memory corruption problem. While this
problem may have had several different symptoms, the
usual symptom was "panic: checkblk: bad block".
md5 checksum: b0c4e7a11912269bdd07d38b124da037 M300-022
===========================================================================
Mod : M300-023
Submods: M300-023.ksrc M300-023.kobj
Fixes a potential denial of service attack related
to the kernel following symbolic links when writing core files.
md5 checksum: cd191f7401ea9bd79f7f53b720589310 M300-023
===========================================================================
Mod : M300-024
Submods: M300-024.uobj M300-024.man M300-024.usrc
Miscellaneous syslogd fixes:
The -m flag would only work in debugging mode. The -l flag would
prevent logging to remote hosts. Add -n flag for situations where the
overhead of mapping IP address to host name caused loss of messages.
Improve detection of repeated messages. Print credentials on non-root
messages.
md5 checksum: f12acd0d10ae10cc587be52313a691ae M300-024
===========================================================================
Mod : M300-025
Submods: M300-025.uobj M300-025.man
Update named and named-xfer to the 4.9.6-REL (latest named 4)
versions. This version fixes some security issues from the
version originally distributed with BSD/OS. This mod does not
include the source (since it is large and requires the update
of the resolver library as well in order to build). The resolver
library (and libc) will be updated in our next release. If you
require the source, the complete BIND 4.9.6-REL package is available
from ftp://ftp.bsdi.com/patches/patches-3.0/bind-4.9.6-REL.tar.gz
or from the official BIND archive sites.
md5 checksum: d7b5c6094089955cd1af207dab05bc0f M300-025
===========================================================================
Mod : M300-026
Submods: M300-026.kobj M300-026.ksrc
3Com EtherLink XL and Fast EtherLink XL (3C90x) driver.
This mod requires M300-019 be installed as a prerequisite.
This mod implements 3Com's work-around to prevent the hang
condition discussed in the M300-019 mod.
md5 checksum: 25fee86e20259d0934f20abd7a07da6f M300-026
===========================================================================
Mod : M300-027
Submods: M300-027.kobj M300-027.ksrc
This mod adds better checking on the arguments to the
recvfrom() system call. It requires the installation
of the K300-001 mod as a prerequisite.
md5 checksum: ebd42d4594cf46521dde1ed39c987b34 M300-027
===========================================================================
Mod : M300-028
Submods: M300-028.man M300-028.usrc M300-028.doc M300-028.uobj
Update lynx to version 2.7.1+various security fixes. This mod
requires the installation of U300-001 as a prerequisite.
md5 checksum: 3b0626e0a53148d6b1148ae58f360236 M300-028
===========================================================================
Mod : M300-029
Submods: M300-029.ksrc M300-029.kobj
3Com EtherLink XL and Fast EtherLink XL (3C90x) driver.
This mod requires M300-026 be installed as a prerequisite.
This mod implements 3Com's work-around to prevent the hang
condition discussed in the M300-019 mod -- the M300-026 mod
did not correctly implement the work-around.
md5 checksum: ffe5ba473c9ce2382385cbb941f719e3 M300-029
===========================================================================
Mod : M300-030
Submods: M300-030.man M300-030.usrc M300-030.uobj
Do not delete UUCP locks held by gettyd when searching for
an available line.
Change the default backlog from 5 to 64 connections. Add
the -b option to allow specifying the backlog.
md5 checksum: a268c50af557be1a9e7ae44de929e8da M300-030
===========================================================================
Mod : M300-031
Submods: M300-031.ksrc M300-031.kobj
Do not retain shared memory segments across exec().
This mod requires the installation of the K300-001 mod as
a prerequisite.
md5 checksum: e4dc4680f72200f3142d899c892e34f9 M300-031
===========================================================================
Mod : M300-032
Submods: M300-032.ksrc M300-032.kobj
This mod fixes a problem in the ``ipsourcecheck'' processing
in which some packets were incorrectly logged and other
packets were permitted through when they should not have
been allowed.
md5 checksum: 6a491ee905100bb45a9bb18253fca8b3 M300-032
===========================================================================
Mod : M300-033
Submods: M300-033.uobj M300-033.usrc
This mod fixes a buffer overflow problem in tip which could
allow members of the dialer group to gain added privileges
since tip is setuid uucp.
md5 checksum: a582bb967c1c15ed15db35dbbcc443ac M300-033
===========================================================================
Mod : M300-034
Submods: M300-034.kobj M300-034.ksrc
When multilink was enabled PPP improperly calculated the
length of the link level header when PFC was turned on
and BPF (tcpdump) was not being used. This would prevent
multilink sessions from working.
md5 checksum: 160cdc4547cfa8852ef71212b3986b1b M300-034
===========================================================================
Mod : M300-035
Submods: M300-035.usrc M300-035.uobj
New version of the C library which fixes problems with
pthreads.
md5 checksum: cfc49e160ed3dd9f13438f3ac7b65c97 M300-035
===========================================================================
Mod : M300-036
Submods: M300-036.uobj
The cu link to the tip command was omitted from the M300-033
patch. This patch replaces the old cu binary with the correct link.
md5 checksum: cbe9cf5cb1787a675298c054368d46e8 M300-036
===========================================================================
Mod : M300-037
Submods: M300-037.man M300-037.usrc M300-037.uobj
This mod updates the version of Samba shipped in /usr/contrib
to the latest (1.9.17p2) version. This version includes a
security fix for a serious security problem in which remote
users could become root on the Samba server. An exploitation
script for the hole for Linux systems was posted to the internet --
it is unknown whether anyone has created one for BSD/OS systems.
Any system running a Samba server should install this patch. BSD/OS
is not vulnerable as shipped since Samba is not configured by default.
md5 checksum: aa90603a31a7101c1c43a214167a147d M300-037
===========================================================================
Mod : M300-038
Submods: M300-038.usrc M300-038.uobj
New version of the C library which fixes the following problems with
pthreads:
1. Occasional SIGSEGV errors due to improper protection from
signals during thread kernel rescheduling.
2. Alarm cancel, alarm(0), caused an immediate alarm instead of
cancelling a previous alarm.
3. Use of more than FD_SETSIZE number of file descriptors.
4. Select() calls occasionally cause the thread kernel to hang.
5. Return value from pthread_kill().
6. Return value from select() when interrupted by a signal.
md5 checksum: 1f15b41f35079fca16b15e8282493ea6 M300-038
===========================================================================
Mod : M300-039
Submods: M300-039.usrc M300-039.uobj
This mod updates the X11 library (libX11.a) and the shared
version of the X11 library to close a security hole associated with
X resources.
md5 checksum: f398ebcbab09f082f103019569a56a8c M300-039
===========================================================================
Mod : M300-040
Submods: M300-040.man M300-040.usrc M300-040.uobj
This mod fixes various problems in the /usr/bin/sort program
md5 checksum: feb1d96817be49712ff4206d6ca0d5c1 M300-040
===========================================================================
Mod : M300-041
Submods: M300-041.uobj M300-041.man M300-041.usrc
This mod fixes several problems with syslogd:
Syslogd was only logging a message to the first utmp entry for
a specified user.
Syslogd was not properly merging multiple entries to the same
destination. With the previous mod this would result in
messages from user.notice not showing up in /var/log/messages
(for example).
Add -i (insecure) flag that will not print credentials of
messages received from non-root users on the same host. This
is useful (although not recommended) for sites that parse the
syslog output with scripts.
md5 checksum: cbce51f48c4eb841a886877b6d099e8a M300-041
===========================================================================
Mod : M300-042
Submods: M300-042.ksrc M300-042.man M300-042.kobj
This `jumbo patch' style mod:
Updates the kernel revision level to 3.1
Increases default kernel `maxusers' parameter to 32 from 10 in GENERIC
Updates CPU detection to identify Pentium II
Improves the DELAY() macro for PentiumPro systems
Fixes some problems in the 3C90X (eb) driver
Adds support for later Zynx ethernet cards to GENERIC
Adds support for PCI based NE2000 cards
Adds support for TI ThunderLAN cards
Allows bpf (for tcpdump) on interfaces marked down
Fixes a miss-named message from routing that could cause gated to crash
Fixes an error return when routing socket was closed
Fixes a problem in IP source checking that could result in a panic
Eliminates several potential NULL-pointer dereferences
Fixes IP output routine to correctly use route's MTU for fragmentation
Fixes bugs in TCP PAWS (timestamp and large window) code
Updates the dpt SCSI/RAID driver to the latest version from DPT
md5 checksum: c37d85478e9479aa55bb54b50dfb89da M300-042
===========================================================================
Mod : M300-043
Submods: M300-043.uobj M300-043.usrc
This mod updates the getty banner to version 3.1 (M300-042
updates the kernel and thus the uname command).
md5 checksum: 7f73885a164fad7d5dde0f28f7d253e0 M300-043
===========================================================================
ftpパッチサイトへ
>
>