www/plus.html - diff

Return to plus.html CVS log

Up to [local] / www

Diff for /www/plus.html between version 1.593 and 1.594

version 1.593, 2000/06/18 02:20:45

version 1.594, 2000/06/18 06:56:02

Line 48

<h3>OpenBSD 2.7 to be released June 15, 2000.

We are working on OpenBSD-current.</h3>

<ul>

<li>Support IPV6 in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=identd&sektion=8">identd(8)</a>.

<li>Move IPV6 mbuf alignment requirements into input routine, removing the last performance critical one in loopback.

<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ubsec&sektion=4">ubsec(4)</a> fixes to queue requests to the hardware properly. The device can now do ipsec with itself over loopback or the network, but something is still mangled about the actual ipsec packets.

<li>SECURITY ISSUE: Two localhost denial of service problems in the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=an&sektion=4">an(4)</a> Aironet Communications 4500/4800 IEEE 802.11DS driver. One bug prevents <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ancontrol&sektion=8">ancontrol(8)</a> from working correctly, instead causing a panic, while the other allows unauthorized users to change settings.

<a href=errata.html#if_an>A patch is available</a>.

<a href="stable.html">[Applied to stable]</a>

<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=crypto&sektion=9">crypto(9)</a> kernel thread permits hardware crypto devices to run at any spl they prefer.

<li>Initial <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">OpenSSH</a> support for ssh.com's 2.2.0.

<li>For setsockopt() and getsockopt(), do not assume non-PF_INET6 address family to be PF_INET.

<li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a>, implement bug compatibility with ssh-2.0.13.

<li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>, include = in WHITESPACE, permitting commands like ssh -o keyword=argument.

<li>Enable IPv6 support in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sendmail&sektion=8">sendmail(8)</a>.

<li>Enable IPV6 support in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sendmail&sektion=8">sendmail(8)</a>.

<li>Change ipsec processing sequence to handle inner and outer layers much better.

<li>Add support for SSH2 subsystems in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a>.

<li>On ifconfig down & up operations, mark all radix tree routes down or up for the specified interface.

Line 68

Line 78

<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=memcmp&sektion=3">memcmp(3)</a> in the kernel as well, since implementing it in terms of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bcmp&sektion=3">bcmp(3)</a> is very wrong.

<li>Update vnode flag printing in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pstat&sektion=8">pstat(8)</a>.

<li>Do not whack directory in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=user&sektion=8">user(8)</a>.

<a href="stable.html">[Will be applied to stable]</a>

<a href="stable.html">[Applied to stable]</a>

<li>Hardware random number generator in i840 also works, like i810.

<li>Fix an ESP status message in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=netstat&sektion=1">netstat(1)</a>.

<li>Put RSA into our <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&sektion=3">ssl(3)</a> tree. Since our next release is not till after the patent expires, it's OK.

Line 79

Line 89

<li>Minor bug fixes and optimizations in /etc/rc.

<li>Update of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ppp&sektion=8">ppp(8)</a>.

<li>Put an upper bound on transaction queue of the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ubsec&sektion=4">ubsec(4)</a>.

<li>Correct source length calculation in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=hifn&sektion=4">hifn(4)</a>.

<li>Correct source length calculation in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=hifn&sektion=4">hifn(4)</a>.

<a href="stable.html">[Applied to stable]</a>

<li>Initial import of ELF ld.so, for powerpc initially.

<li>Correct secondary mbuf setup in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=hifn&sektion=4">hifn(4)</a>.

<li>Broadcom Bluesteel 5x0x <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ubsec&sektion=4">ubsec(4)</a> crypto cards now supports ESP 3DES modes properly. No AH or MAC stuff yet.

Line 189

Line 200

<li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ancontrol&sektion=8">ancontrol(8)</a> act like our changed <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wicontrol&sektion=4">wicontrol(4)</a> semantics.

<li>Use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getifaddrs&sektion=3">getifaddrs(3)</a> in libc rpc code.

<li>For <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=boot_config&sektion=8">boot_config(8)</a> code, save enable command in the history for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=config&sektion=8">config(8)</a>'s -eu updating.

<li>Update multicasting support for ipv6.

<li>Update multicasting support for IPV6.

<li>Fix usage printing in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=passwd&sektion=1">passwd(1)</a>.

<li>By default, do not vsync blank sparc cgsix(4) monitors, but provide a sysctl to do so.

<li>Start at a BlueSteel (Broadcom) 5[56]01 crypto accelerator driver.

Line 204

Line 215

<li>After <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ftp&sektion=1">ftp(1)</a> finishes downloading, change progress meter to show the total elapsed time.

<li>Handle 0-size files in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ftp&sektion=1">ftp(1)</a>'s progress meter.

<li>Parse RFC2732 ftp URLs in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ftp&sektion=1">ftp(1)</a>.

<li>In ipv6, perform NUD on p2p link, only if the destination/gateway is real neighbor.

<li>In IPV6, perform NUD on p2p link, only if the destination/gateway is real neighbor.

<li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getaddrinfo&sektion=3">getaddrinfo(3)</a>, translate DNS error code into getaddrinfo error code (EAI_xxx).

<a href="stable.html">[Applied to stable]</a>

<li> RELIABILITY FIX: Parse IPv4 options more carefully.