version 1.866, 2003/03/14 19:11:24 |
version 1.867, 2003/03/24 08:36:57 |
|
|
|
|
<p> |
<p> |
<h3><font color="#0000e0">We are working on OpenBSD-current.</font></h3><p> |
<h3><font color="#0000e0">We are working on OpenBSD-current.</font></h3><p> |
The following list sums up (almost) all the changes made up to March 5. |
The following list sums up (almost) all the changes made up to March 21. |
<p> |
<p> |
|
|
<ul> |
<ul> |
|
<!-- ^ 20030322 --> |
|
<li>Stop <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sendbug&sektion=1">sendbug(1)</a> reporting spurious errors. |
|
<li>Restore <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ac97&sektion=4">ac97(4)</a> state after an <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=apm&sektion=4">apm(4)</a> resume. |
|
<li>Make the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=syslogd&sektion=8">syslogd(8)</a> default facility LOG_USER instead of (due to a bug) LOG_UUCP. |
|
<li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=netstat&sektion=8">netstat(8)</a> -m output of mbuf cluster stats much more useful. |
|
<li>Fix memory use percentage output of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ps&sektion=1">ps(1)</a>. |
|
<li>Some endianness fixes to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ahc&sektion=4">ahc(4)</a>, making it works on macppc. |
|
<li>Fix some problems with <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> table statistics. |
|
<li>Disable by default (and add a switch to enable) cross-realm authentication from Kerberos IV realms in Kerberos V <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=kdc&sektion=8">kdc(8)</a>. This addresses a recently found <a href="http://web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2003-004-krb4.txt">vulnerability</a>.<br> |
|
<a href="stable.html"><font color="#00b000">[Applied to stable]</font></a> |
|
<li>Disable the Kerberos IV <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=kdc&sektion=8">kdc(8)</a>, since all its functionality is available in the Kerberos V kdc. |
|
<!-- ^ 20030321 --> |
|
<li>Enquote $lpd_flags in /etc/rc. |
|
<!-- ^ 20030320 --> |
|
<li>Fix a logic error in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sudo&sektion=1">sudo(1)</a>'s SIGCHLD handler. |
|
<li><font color="#e00000"><strong>SECURITY FIX: OpenSSL is vulnerable to an extension of the `Bleichenbacher' attack designed by Czech researchers Klima, Pokorny and Rosa.</strong></font><br> |
|
<a href="errata.html#kpr">A source code patch is available</a>.<br> |
|
<a href="stable.html"><font color="#00b000">[Applied to stable]</font></a> |
|
<li>Tweak <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&sektion=8">pfctl(8)</a> host address parsing to catch exceptional cases. |
|
<li>Fix parsing of the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhcpd&sektion=8">dhcpd(8)</a> leases file. |
|
<!-- ^ 20030319 --> |
|
<li>Add a missing return statement in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mkhybrid&sektion=8">mkhybrid(8)</a>. |
|
<!-- ^ 20030318 --> |
|
<li>Restore bootable tape functionality for sparc. |
|
<li>Longword-align struct sockaddrs passed to the kernel by <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=arp&sektion=8">arp(8)</a>. |
|
<li>An RFC 2553 compliance tweak to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getaddrinfo&sektion=3">getaddrinfo(3)</a>. |
|
<li>Change <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=perl&sektion=1">perl(1)</a>'s config hints file to reflect the promotion of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=setreuid&sektion=2">setre[ug]id(2)</a> to real system calls. |
|
<li>Some (v)sprintf -> (v)snprintf in libcurses and libcurses++. |
|
<li>Bump <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> version to 3.6. |
|
<!-- ^ 20030317 --> |
|
<li>Fix a bad string length when checking options to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=login_passwd&sektion=8">login_passwd(8)</a>. |
|
<li>Add a nicely free license to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=hack&sektion=6">hack(6)</a>. |
|
<li>Fix a bogus string initialisation when printing IPv6 addresses that was causing a segfault in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=netstat&sektion=8">netstat(8)</a>. |
|
<!-- ^ 20030316 --> |
|
<li>More string function sanity in the 4.3BSD compat library, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=crypto&sektion=3">crypto(3)</a><!-- 20030316 --> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sudo&sektion=1">sudo(1)</a>. |
|
<li>Fix a string under-allocation in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mountd&sektion=8">mountd(8)</a>. |
|
<li>Update to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sudo&sektion=1">sudo(1)</a> 1.6.7. |
|
<li><font color="#e00000"><strong>SECURITY FIX: Various SSL and TLS operations in OpenSSL are vulnerable to timing attacks.</strong></font><br> |
|
<a href="errata.html#blinding">An `RSA blinding' source code patch is available</a>.<br> |
|
<a href="stable.html"><font color="#00b000">[Applied to stable]</font></a> |
|
<li>Add a missing chroot path correction when creating the SSL mutex file in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=httpd&sektion=8">httpd(8)</a>. |
|
<!-- ^ 20030315 --> |
|
<li>Another fix in the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=gcc&sektion=1">gcc(1)</a> stack protector. |
|
<li>More strcpy -> strlcpy, in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cron&sektion=8">cron(8)</a> this time. |
|
<li>After all the hard work making the X server run as a non-root user, stop the scheduler lowering non-root processes' priority if they've had more than ten minutes of CPU time. |
|
<li>Check the length of all fixed-length IPv6 neighbor discovery options. |
|
<li>Enable RSA blinding in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=keynote&sektion=3">keynote(3)</a>. |
|
<li>Remove the redundant -t option from <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mt&sektion=1">mt(1)</a>. |
|
<li>Fix a bug in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> tables that could cause table-based filtering of packets with a source or destination address of 0.0.0.0 (e.g. DHCP) to corrupt the kernel. |
|
<li>Enable RSA blinding for mod_ssl private key operations. |
|
<!-- ^ 20030314 --> |
|
<li>Fix a bug that caused all jobs displayed by <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=atq&sektion=1">atq(1)</a> to appear to be owned by the owner of the last job in the queue.<br> |
|
<a href="stable.html"><font color="#00b000">[Applied to stable]</font></a> <!-- XXX 3.2-stable --> |
|
<li>Require <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=spamd&sektion=8">spamd(8)</a> control connections to originate from a reserved port. |
|
<li>Plug a <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> tables memory leak. |
|
<li>Scale the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=altq&sektion=4">altq(4)</a> RED thresholds to 10% (min) and 30% (max) of the queue limit. |
|
<li>Fix a one-byte underflow in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=raidctl&sektion=8">raidctl(8)</a>. |
|
<li>Switch <a href="http://crypto.stanford.edu/~dabo/papers/ssl-timing.pdf">RSA blinding</a> on for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh-agent&sektion=1">ssh-agent(1)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssk-keysign&sektion=8">ssk-keysign(8)</a>. |
|
<li>Still more sprintf -> snprintf and strcpy -> strlcpy in many, many places. |
|
<!-- ^ 20030313 --> |
|
<li>More strcpy -> strlcpy, this time in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=badsect&sektion=8">badsect(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=restore&sektion=8">restore(8)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=scsi&sektion=8">scsi(8)</a>. |
|
<li>Fix a missing initialisation in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pckbc&sektion=4">pckbc(4)</a> when the ps/2 keyboard is not the system console. Avoids a panic on alpha. |
|
<li>Remove sbin/photurisd from the tree. |
|
<li>(v)sprintf -> (v)snprintf in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mrouted&sektion=8">mrouted(8)</a>. |
|
<li>Add -c option to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=md5&sektion=1">md5(1)</a>, for compatibility with GNU md5sum. |
|
<li>Set IFCAP_VLAN_MTU for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sk&sektion=4">sk(4)</a>. |
|
<!-- ^ 20030312 --> |
|
<li>Add a missing endianness fixup to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bktr&sektion=4">bktr(4)</a>. |
|
<li>Hack <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=compat_freebsd&sektion=8">compat_freebsd(8)</a> to pick up recent FreeBSD binaries such as Opera. |
|
<li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cron&sektion=8">cron(8)</a>'s parser detect many more syntax errors. |
|
<li>Allow <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bridge&sektion=4">bridge(4)</a> to send unfragmented full-length 802.1q packets on interfaces with IFCAP_VLAN_MTU set. |
|
<li>Make sure that <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> queues have a queue ID that is unique across all interfaces. |
|
<li>When acting on an anchor, make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&sektion=8">pfctl(8)</a>'s -F option traverse all subrulesets in the anchor. |
|
<li>Remove <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=larn&sektion=6&release=OpenBSD+3.2">larn(6)</a> until some license issues are resolved. |
|
<!-- ^ 20030311 --> |
|
<li>Yet more <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=gcc&sektion=1">gcc(1)</a> stack-smash protector fixes. |
|
<li>Many spelling and double-word fixes. |
|
<li>Install <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=lpr&sektion=1">lpr(1)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=lprm&sektion=1">lprm(1)</a> setuid root instead of setuid daemon (the latter is more risky) and setuid to daemon early on. |
|
<li>Add a missing <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getnameinfo&sektion=3">getnameinfo(3)</a> error check to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ftp&sektion=1">ftp(1)</a>. |
|
<li>Always set a <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bpf&sektion=4">bpf(4)</a> filter in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pflogd&sektion=8">pflogd(8)</a>, since bpf will otherwise grab full-length packets. |
|
<li>strcpy->strlcpy in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mount_portal&sektion=8">mount_portal(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=quotacheck&sektion=8">quotacheck(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=route&sektion=8">route(8)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=routed&sektion=8">routed(8)</a>. |
|
<li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> queue code drop illegal non-PKTHDR mbufs, and whine loudly so any problem will get noticed and fixed. |
|
<li>Allow <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=st&sektion=4">st(4)</a> tape density codes up to 0xff (the old limit was 0x45.) <!-- Disallow negative density since antimatter tapes are not supported. --> |
|
<li>Continued assault on manpage errors, omissions and bad English. |
|
<li>Fix a typo from pre-3.1 days that was stopping inode quotas from working. |
|
<li>Stop <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=spamd-setup&sektion=8">spamd-setup(8)</a> always returning an error code. |
|
<li>Log that <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cron&sektion=8">cron(8)</a> has started after detaching from the controlling terminal, rather than before. |
|
<li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cron&sektion=8">cron(8)</a> show the correct error line number when the command is missing. |
|
<li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&sektion=8">pfctl(8)</a> give a helpful error message when multiple same-named queues are added to an interface. |
|
<li>Fix a problem in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sis&sektion=4">sis(4)</a>, found with a few DP83815 devices, where a cable length of less than 30m caused excessive receive errors. |
|
<!-- ^ 20030310 --> |
|
<li>Tighten <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> tcp state code in relation to a FIN received before any server response. |
|
<li>Add spamd and spamd-cfg tcp ports to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=services&sektion=5">services(5)</a>, and have <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=spamd&sektion=8">spamd(8)</a> obtain the port numbers from there. |
|
<li>Fix some problems adding <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> child queues. |
|
<li>Prise the correct line number for errors out of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cron&sektion=8">cron(8)</a>. |
|
<li>Warn about garbage lines before the EOF in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=crontab&sektion=1">crontab(1)</a>. |
|
<li>Fix a panic in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ppp&sektion=4">ppp(4)</a> by making sure the first mbuf in a chain contains a packet header. |
|
<!-- ^ 20030309 --> |
|
<li>Disable <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ptrace&sektion=2">ptrace(2)</a> for P_SUGIDEXEC as well as P_SUGID. |
|
<li>Make the kernel's P_SUGIDEXEC flag semantics match those for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=issetugid&sektion=2">issetugid(2)</a>. |
|
<li>Make clear that <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mailwrapper&sektion=8">mailwrapper(8)</a> error and warning messages are not from the wrapped program but from the wrapper itself. |
|
<li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mountd&sektion=8">mountd(8)</a> only write to the pidfile if we've opened it. |
|
<li>Honour the :sh: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=printcap&sektion=5">printcap(5)</a> flag for remote printers, instead of requiring -h to be given to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=lpr&sektion=1">lpr(1)</a>. |
|
<li>Add <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=spamd.conf&sektion=5">spamd.conf(5)</a>, configuration for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=spamd-setup&sektion=8">spamd-setup(8)</a>. |
|
<li>Since <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=spamd-setup&sektion=8">spamd-setup(8)</a> is no longer a Perl script, remove the Net::Netmask module. |
|
<li>Re-re-implement <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=spamd-setup&sektion=8">spamd-setup(8)</a>, this time in C. |
|
<li>Tweak queue rule expansion to fix problems when a queue spans multiple interfaces. |
|
<li>Base <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&sektion=8">pfctl(8)</a>'s 'bandwidth too small' whine on interface-specific calculations rather than always using '6Kb'. |
|
<!-- ^ 20030308 --> |
|
<li>Have a separate flag (-g) for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&sektion=8">pfctl(8)</a> debugging output, instead of overloading -vv. |
|
<li>Fix a signedness bug (KAME PR 469) in the libc resolver. |
|
<!-- ^ 20030307 --> |
|
<li>Set some missing flags and fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ti&sektion=4">ti(4)</a>'s vlan tagging support. |
|
<li>Stability fixes to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cac&sektion=4">cac(4)</a>. |
|
<li>A huge number of manpage cross-reference fixes. |
|
<li>In kernel main(), configure devices later when process 0 is more fully initialised. |
|
<li>Avoid a null derefence in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a> when converting text addresses to a sockaddr. |
|
<li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> queue assignments when an interface is not specified. |
|
<li>For IPv6 etherip packets, set the next protocol field in the header. |
|
<li>Pass IP proto 97 (Ethernet-in-IP) packets up to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bpf&sektion=4">bpf(4)</a>. |
<!-- ^ 20030306 --> |
<!-- ^ 20030306 --> |
<li>In the installer, delete the FTP password when no sets are found, so it doesn't get displayed in the URL. |
<li>In the installer, delete the FTP password when no sets are found, so it doesn't get displayed in the URL. |
<li>Add a boot image ISO for alpha. |
<li>Add a boot image ISO for alpha. |
|
|
<li>Move the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=spamd&sektion=8">spamd(8)</a> configuration channel from the spamd listener port the next port up. |
<li>Move the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=spamd&sektion=8">spamd(8)</a> configuration channel from the spamd listener port the next port up. |
<li>Add to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=file&sektion=1">file(1)</a> support for additional image formats and a first pass at reading jpeg size. |
<li>Add to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=file&sektion=1">file(1)</a> support for additional image formats and a first pass at reading jpeg size. |
<li>strncpy->strlcpy in libc resolver code. |
<li>strncpy->strlcpy in libc resolver code. |
<li>Upgrade <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=file&sektion=1">file(1)</a> to 3.41, to fix a buffer overflow. Get improved 64-bit ELF support as well. |
<li>Upgrade <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=file&sektion=1">file(1)</a> to 3.41, to fix a buffer overflow. Get improved 64-bit ELF support as well.<br> |
|
<a href="stable.html"><font color="#00b000">[Applied to stable]</font></a> <!-- XXX 3.2-stable --> |
<li>In the libc stack smash handler, straight away block all signal handlers from running. |
<li>In the libc stack smash handler, straight away block all signal handlers from running. |
<li>More fixes and improvements to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isp&sektion=4">isp(4)</a>. |
<li>More fixes and improvements to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isp&sektion=4">isp(4)</a>. |
<li>Sendmail updated to 8.12.8. |
<li>Sendmail updated to 8.12.8. |
|
|
<a href="errata.html#httpd">A source code patch is available</a>.<br> |
<a href="errata.html#httpd">A source code patch is available</a>.<br> |
<a href="stable.html"><font color="#00b000">[Applied to stable]</font></a> |
<a href="stable.html"><font color="#00b000">[Applied to stable]</font></a> |
<li>Increase the size of the rates buffer in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wi&sektion=4">wi(4)</a> hostap so 802.11g stations can associate. |
<li>Increase the size of the rates buffer in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wi&sektion=4">wi(4)</a> hostap so 802.11g stations can associate. |
<li>When outputting raw IP and generating the header manually, make sure the packet is large enough for a full IP header. |
<li>When outputting raw IP and generating the header manually, make sure the packet is large enough for a full IP header.<br> |
|
<a href="stable.html"><font color="#00b000">[Applied to stable]</font></a> <!-- XXX 3.2-stable --> |
<!-- ^ 20030215 --> |
<!-- ^ 20030215 --> |
<li>Fix an mbuf leak in IPv6 TCP. |
<li>Fix an mbuf leak in IPv6 TCP. |
<a href="stable.html"><font color="#00b000">[Applied to stable]</font></a> |
<a href="stable.html"><font color="#00b000">[Applied to stable]</font></a> |
|
|
<li>Fix some silly pastos in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&sektion=8">pfctl(8)</a> table code. |
<li>Fix some silly pastos in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&sektion=8">pfctl(8)</a> table code. |
<li>Create /var/empty/dev/log for programs that <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=chroot&sektion=2">chroot(2)</a> to /var/empty. |
<li>Create /var/empty/dev/log for programs that <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=chroot&sektion=2">chroot(2)</a> to /var/empty. |
<li>Fix a typo in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> DIOCRSETTFLAGS implmentation, so it doesn't look like changing a table flag created a table when in fact it deleted one. |
<li>Fix a typo in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> DIOCRSETTFLAGS implmentation, so it doesn't look like changing a table flag created a table when in fact it deleted one. |
<li>Stop <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=syslog&sektion=3">syslog(3)</a> from reconnecting to /dev/log on an ENOBUFS as this doesn't help, and it hurts <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=chroot&sektion=2">chroot(2)</a>'ed processes. |
<li>Stop <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=syslog&sektion=3">syslog(3)</a> from reconnecting to /dev/log on an ENOBUFS as this doesn't help, and it hurts <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=chroot&sektion=2">chroot(2)</a>'ed processes.<br> |
|
<a href="stable.html"><font color="#00b000">[Applied to stable]</font></a> <!-- XXX 3.2-stable --> |
<li>Change <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=chroot&sektion=2">chroot(2)</a>'ed daemons <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=portmap&sektion=8">portmap(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rstatd&sektion=8">rstatd(8)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rusersd&sektion=8">rusersd(8)</a> to use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=openlog&sektion=3">openlog(3)</a> with LOG_NDELAY. |
<li>Change <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=chroot&sektion=2">chroot(2)</a>'ed daemons <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=portmap&sektion=8">portmap(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rstatd&sektion=8">rstatd(8)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rusersd&sektion=8">rusersd(8)</a> to use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=openlog&sektion=3">openlog(3)</a> with LOG_NDELAY. |
<li>Implement <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sigaltstack&sektion=2">sigaltstack(2)</a> under pthreads. |
<li>Implement <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sigaltstack&sektion=2">sigaltstack(2)</a> under pthreads. |
<li>Copy the thread sources (including CVS history) from lib/libc_r to lib/pthread, and move libc_r into the Attic. |
<li>Copy the thread sources (including CVS history) from lib/libc_r to lib/pthread, and move libc_r into the Attic. |
|
|
<li>New table manipulation syntax for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf.conf&sektion=5">pf.conf(5)</a>, and a corresponding new -Tl option for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&sektion=8">pfctl(8)</a>. |
<li>New table manipulation syntax for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf.conf&sektion=5">pf.conf(5)</a>, and a corresponding new -Tl option for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&sektion=8">pfctl(8)</a>. |
<li>Add support for active/inactive <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> tablesets in the kernel |
<li>Add support for active/inactive <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> tablesets in the kernel |
<!-- ^ 20030109 --> |
<!-- ^ 20030109 --> |
<li>Enable SET/ACK in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a> when acting as an ike-mode-cfg responder. |
<li>Enable SET/ACK in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a> when acting as an ike-mode-cfg responder.<br> |
|
<a href="stable.html"><font color="#00b000">[Applied to stable]</font></a> <!-- XXX 3.2-stable --> |
<li>Improvements and fixes to batch mode <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sftp&sektion=1">sftp(1)</a>. |
<li>Improvements and fixes to batch mode <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sftp&sektion=1">sftp(1)</a>. |
<!-- ^ 20020108 --> |
<!-- ^ 20020108 --> |
<li>Big <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=strlcpy&sektion=3">strlcpy/strlcat(3)</a> makeover for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=csh&sektion=1">csh(1)</a>. |
<li>Big <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=strlcpy&sektion=3">strlcpy/strlcat(3)</a> makeover for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=csh&sektion=1">csh(1)</a>. |
|
|
<li>Make sure we don't try to free a null pointer in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=whois&sektion=1">whois(1)</a>. |
<li>Make sure we don't try to free a null pointer in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=whois&sektion=1">whois(1)</a>. |
<li>Change 'no-route' implementation from a flag in the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> rule address to an address type. |
<li>Change 'no-route' implementation from a flag in the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> rule address to an address type. |
<li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> skip-step calculation honour the 'no-route' keyword. |
<li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> skip-step calculation honour the 'no-route' keyword. |
<li>Remove code in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ld&sektion=1">ld(1)</a> to force linking against a specific library version. |
<li>Remove code in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ld&sektion=1">ld(1)</a> to force linking against a specific library version.<br> |
|
<a href="stable.html"><font color="#00b000">[Applied to stable]</font></a> <!-- XXX 3.2-stable --> |
<li>Add console support for Polish and Turkish keyboard layouts. |
<li>Add console support for Polish and Turkish keyboard layouts. |
<!-- ^ 20030104 --> |
<!-- ^ 20030104 --> |
<li>Add the userland support for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> tables to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&sektion=8">pfctl(8)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=authpf&sektion=8">authpf(8)</a>. |
<li>Add the userland support for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> tables to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&sektion=8">pfctl(8)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=authpf&sektion=8">authpf(8)</a>. |
|
|
<li>New -n option for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=syslogd&sektion=8">syslogd(8)</a> to disable DNS lookups. |
<li>New -n option for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=syslogd&sektion=8">syslogd(8)</a> to disable DNS lookups. |
<!-- ^ 20021121 --> |
<!-- ^ 20021121 --> |
<li>Correct a format string bug in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=routed&sektion=8">routed(8)</a>'s, er, Makefile. |
<li>Correct a format string bug in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=routed&sektion=8">routed(8)</a>'s, er, Makefile. |
<li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=at&sektion=1">at(1)</a> breakage when two jobs are set for the same time. |
<li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=at&sektion=1">at(1)</a> breakage when two jobs are set for the same time.<br> |
|
<a href="stable.html"><font color="#00b000">[Applied to stable]</font></a> <!-- XXX 3.2-stable --> |
<li>Correct a use-before-init in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xterm&sektion=1">xterm(1)</a>. |
<li>Correct a use-before-init in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xterm&sektion=1">xterm(1)</a>. |
<!-- ^ 20021120 --> |
<!-- ^ 20021120 --> |
<li>Create a simple lookup table mechanism [dev/pci/pci.c:pci_matchbyid()] to match PCI device IDs, and have several drivers use it. |
<li>Create a simple lookup table mechanism [dev/pci/pci.c:pci_matchbyid()] to match PCI device IDs, and have several drivers use it. |
|
|
<!-- ^ 20021113 --> |
<!-- ^ 20021113 --> |
<li>Add a null transform to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=crypto&sektion=4">crypto(4)</a>, enabled via sysctl kern.cryptodevallowsoft=1. |
<li>Add a null transform to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=crypto&sektion=4">crypto(4)</a>, enabled via sysctl kern.cryptodevallowsoft=1. |
<li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=systrace&sektion=1">systrace(1)</a>'s determination of the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=execve&sektion=2">execve(2)</a> filename. |
<li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=systrace&sektion=1">systrace(1)</a>'s determination of the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=execve&sektion=2">execve(2)</a> filename. |
<li>Kernel IPsec code checks for short IP headers. |
<li>Kernel IPsec code checks for short IP headers.<br> |
|
<a href="stable.html"><font color="#00b000">[Applied to stable]</font></a> <!-- XXX 3.2-stable --> |
<!-- ^ 20021112 --> |
<!-- ^ 20021112 --> |
<!-- ^ 20021111 --> |
<!-- ^ 20021111 --> |
<!-- ^ 20021110 --> |
<!-- ^ 20021110 --> |