=================================================================== RCS file: /cvsrepo/anoncvs/cvs/www/plus.html,v retrieving revision 1.559 retrieving revision 1.560 diff -c -r1.559 -r1.560 *** www/plus.html 2000/05/12 13:02:50 1.559 --- www/plus.html 2000/05/19 20:04:53 1.560 *************** *** 38,786 **** For changes leading up to OpenBSD 2.4, click here.
For changes leading up to OpenBSD 2.5, click here.
For changes leading up to OpenBSD 2.6, click here.
! For changes in OpenBSD-current, click here.

OpenBSD 2.6 is now available for purchase.
We are working on OpenBSD-current.

Fix kerberos slave server startup. -
Fix a pkg_add(8) bug in %f handling. -
OpenSSH is now at version 2.1. -
Handle \ escapes in real ssh key format files. -
Fix a X11 forwarding draining bug in sshd(8). -
Be compatible to various bugs in various other real ssh versions. -
Handle very large mbuf chains in hifn(4). -
Complain about invalid ciphers in ssh(1). -
Fix 12 hour handling in leave(1). -
Fix a timeout queue crash. -
Various nice tweaks to the install script for 2.7. -
In ppp(8), correct a bad bug in m_prepend(). -
Support sparc tape installs. -
Work around a sysctl-based kvm(4) vs exit(2) race. -
Fix the same basic ip timestamp bug in ipf(4). -
On the ip(4) input path, avoid unaligned accesses for strangely placed ip timestamp options. -
Fix resource limit race at exit time, if accounting is enabled. -
Fix inet6(4) pcmcia(4) detach. -
Support all ServerWorks and 451NX pchb(4) machines. -
Many fixes to user(8). -
Repair padding a uuencode stuff in sshd(8). -
Do not support DMA on PCTECH RZ1000, it's dma support is fundamentally broken. -
Undo a broken i386 pmap fix. -
Fix IEEE underflow in ps(8), affected 68060 machines with precise exceptions enabled by default. -
Fix context memory sizing for various models of static ram hifn(4) cards. -
dhclient(8) support for the hp300 ramdisk. -
Improve mountd(8) behaviour for unresolveable hosts. -
Add DSA/SSH2 information to the ssh(1), sshd(8), and ssh-keygen(1) manual pages. -
Improve key generation in vpn(8). -
Document our new ipsec(4) bridge(4) stuff. -
New packages(7) man page. -
Various isakmpd(8) updates. -
Install isakmpd(8) sample files. -
Correct proctitle updating in sshd(8). -
Change pmax dc(4) driver to dz(4), to avoid name conflict. -
Do not use an undocumented semconfig(2) system call in ipcs(1), in fact, remove the system call altogether. -
More mount(8) tweaks for dealing with weird paths. -
Fix more pkg_add(1) bugs. -
Support another RCC ServerWorks PCI host bridge. -
sshd(8) now has a pidfile. -
Better file descriptor handling in sshd(8). -
buf mishandling in ed(1). -
A fix for mandatory cache sun4m architectures like the SM71 and SM81. -
Fix a race in scp(1). -
ipf 3.3.13. -
Prettier warnings from telnet(1) if bad port names are given. -
Add emulation for memcpy(3) and such to i386 for non-optimized kernel builds. -
Add OPENDEV_BLCK flag to opendev(3). -
Repair groff(1) mkstemp(3) use. -
Fix some perl 5.6.0 buglets. -
Use more perl 5.6.0 feature in makewhatis(8) for greater security and reliability. -
In the /etc/daily file cleaner, prune at /.X11-unix and ssh-* directories. -
In sshd(8), check for keysize errors better. -
ktrace(2) no longer follows symbolic links. -
On the amiga, recognize Linux ados disk labels. -
Fixes to the ray(4) driver. -
Fix -H option in sudo(8). -
Disable pcmcia(4) handling of non-CIS cards, since there are many bugs in it. -
Document many afs(4) configuration files. -
Fix a modify-after-free bug in tcp(4). -
Attempt to have ld(1) and ld.so(1) deal better with C++ shared libraries on - a.out architectures (i386, m68k, sparc...). -
Document what sendmail(8) now does on port 587. -
Deal with more non-compliant PHY setups in mii(4). -
cmpci(4) driver for C-Media CMI8x38 Audio Chip present on several motherboards. -
Support ext2fs properly. -
ssh(1), sshd(8), and companions now support SSH 2 protocol as well as SSH 1 protocol! To properly use this, you want to make sure you update your /etc/rc, /etc/netstart, and /etc/rc.conf. Or just test the new snapshot... -
Various additions and improvements in tcpdump(8). -
libpcap 0.5. -
Support jumbo frames in the fxp(4) models which support it. -
Add support for the RCC ServerWorks pchb(4) which has additional pci(4) bridges on it. Huge PC's with 6+ pci busses now work fine. -
On the i386, fix an errata relating to the Intel 82443BX pchb(4). -
Various changes related to vlan(4) support. -
Add a sysexits(3) man page. -
getaddrinfo(3) and getnameinfo(3) improvements, repairs, and greater care. -
Start of the vax port resurrection. -
Fix more i386 isadmaattach bugs. At least 2GB of memory on an i386 now works. -
Avoid divide by zero in igmp networking code. -
In mail(1), make "new" count after an "inc" command reflect the new messages, as in SunOS. -
ktrace(2) no longer follows symbolic links. -
Repair adosfs(4). -
The damned hifn(4) always dealing with aligned data causes even more of a fuss. -
Repair a few hifn(4) bugs that slipped in recently. -
Fix ipsec(4) for big-endian machines again. -
Omit RC5 from ssl(3). -
userinfo(8), userdel(8), useradd(8), groupmod(8), usermod(8), groupdel(8), groupadd(8), and groupinfo(8) commands added. -
mii(4) detach support, needed by xe(4). -
Fix promiscuous mode in xe(4). -
Fix order of interrupt disabling for pcmcia(4) disabling; much more reliable. -
Wait a bit longer after enabling pcmcia(4) cards; more pcmcia(4) cards now work. -
Fix dump calculations in the i386 kernel crash dump code. -
More careful dmesg(8) handling in the install script. -
pcmcia(4) ep(4) now supports 3C1 and 3CCFEM556BI. -
Repair a bug in fdalloc() that caused a panic in dup(2). This bug was introduced by the recent file descriptor allocation optimizations. -
Support DOSPTYP_EXTENDL partitions in the kernel disklabel reader. -
In ld(1), avoid duplicates in search path. -
Support RFC2732 IPv6 address literal URLs in ftp(1). -
Improve makewhatis(8) again, using new parts of perl(1) 5.6.0. -
Fix a bug in at(1). -
Add -keyfile and -authkeyfile options to ipsecadm(8). -
Significant manual page improvements, as is usual just before a release. -
Use fgetln(3) instead of fgets(3) in mail.local(8), and thus avoid header mangling. -
Support for /etc/rc.conf.local, as documented in rc.conf(8). -
https support in lynx(1). -
Add CPAN File::Temp for perl(1) versions of mkstemp(3) and such. -
Fix the vi recover script to be safe for multiuser running (needed O_NOFOLLOW). -
Move apm into a kernel thread, so that filesystem syncing is less likely to block and cause panics. suspending just got a lot more reliable. -
For open(2), support O_FSYNC better. -
For open(2), add a O_NOFOLLOW flag for dealing with symbolic links. This should not be used by generic software -- only use this for very rare and specific problems. -
traceroute(8) gets a new option, -f skips early node checks. -
Fix "freeing free block" panics. -
Support /etc/resolv.conf.tail, as documented in dhclient-script(8). -
Rewrite uio hog. -
Do not abuse malloc for small structures inside ktrace(2). -
Add pread(2), pwrite(2), preadv(2), and pwritev(2) system calls. -
In fdisk(8), favor BIOS geometry over physical geometry, fixing numerous problems with larger disks. -
Split fxp(4) and dc(4) for pci(4) and cardbus(4). -
In ktrace(2), if user does a large IO operation, split the loggin to avoid kmem starvation. -
Make nfsstat(1) on a live system use sysctl(3) instead of kvm snooping. -
Set mii(4) parameters for all varients of xl(4), cardbus(4) models. -
scsi cd(4) detach is now possible. -
Do even more scsi device locking via common routines. -
In make(1), report errors with a Makefile line number, making large Makefile debugging much easier. -
Significantly cleanup the isa(4), pci(4), isapnp(4), and related manual pages, making it easier to see what we currently support. -
Deal with byte-order challenged Compaq laptops. -
Fix memory leaks in sshd(8). -
Numerous modifications for pkg_add(1) and companions, to better import various new styles of packages.. -
Fix even more braindamaged random device mis-handlings in ssl(3). -
Make kvm(3) on the i386 understand the new core dump format. -
In script(1), propogate window size changes to slave. -
tzcode2000c. -
Permit i386 kernel to compile without pccom(4) or com(4) drivers. -
After scp(1) completes, replace progress bar ETA counter with a total elapsed time. -
Fix more random device mis-handlings in ssl(3). -
Fix exit code in du(1). -
Fix sync(2) to actually sync all filesystems. -
urio(4) driver for Diamond Multimedia RIO 500. -
xlockmore 4.16. -
OpenSSL 0.9.5a. -
Change window(1) to use curses instead of ocurses. -
Do some repair on sys/queue.h. -
Add colour support to pcvt25 termcap entry. -
In window(1), do not assume that termcap entries start with 2 character short names. -
Repair random(4) for the alpha. -
In ssh, check payload for (illegal) extra data. -
make "option TCPDEBUG" kernel compile. -
Initialize the bus dma tag for EISA. -
Use getifaddrs(3) instead of SIOCGIFCONF in ifconfig(8), rarpd(8), etc. -
ifconfig(8)'s -a flag had been changed to be the same as -A. Fix that. -
Have ahc(4) support Adaptec 2930U2. -
Revert to up-to-date ipf(4) man pages, but ugly as sin. Everyone remind kjell to finish this job, ok? -
When fragmenting a packet in ip_output(), inherit the multicast and broadcast flags so that link layer can choose the right address. -
Use getifaddrs(3) in libpcap. -
Make ahc(4) support Adaptec 2930U2 controller. -
Match netsec hifn(4) 7751 card. -
neo(4) is a Neomagic 256AV/ZX audio driver. -
Unmute ac97 mixers by default. -
ipf 3.3.12a. -
ssh protocol 2 is now useable. -
Add Protocols and Cipher keywords to ssh(1) and sshd(8). -
compat_linux(8) emulation for setfsuid() and getfsuid(). -
If realpath(3) fails, just use old name in umount(8). -
Add 802.11 nwid and mtu commands to ifconfig(8). -
More bug fixes to hifn(4). Hifn support is now fully working. -
Some fixes to route6d(8). -
Use getifaddrs(3) instead of SIOCGIFCONF in ypbind(8). -
Do not lose file descriptors in ftpd(8). -
In random(4), first true random number source, based on intel 82802 firmware hub embedded true random number generator. -
In random(4), make it use more sources for an entropy; make playing .mp3s produce entropy, big time, big time. -
Improve range checking in timeouts. -
Thread repair in malloc(3). -
Various bug fixes to hifn(4), which is now even more reliable. -
Fix another m4(1) bug. -
PCI an(4) driver. -
Repair spl bug in bridge(4). -
wdc(4) and wd(4) detach logic, but missing scsi(4) disconnect for atapi(4). -
Permit address setting on enc(4) interfaces, and various other tweaks leading to better bridge(4) integration. -
Add various autoconfiguration child detach logic. -
Rewrite and commonize disk driver locking which varied between drivers. -
After the recent revamp of icmp reply byte order, correct one last thing: Pass ip_off and ip_len correctly. -
groff 1.15 -
In cd(4), do not trust the TOC as much when reading the disklabel. -
Fix umass(4) so that it handles some non-compliant devices. -
Modify the scsi(4) subsystem so that it can attach without polling. -
Arrange so that IFF_LINK0 on enc(4) means IP-in-IP instead of Ethernet-in-IP. -
Initial check-in of cardbus(4) support. xl(4) works on cardbus at the moment. -
Set our status to 2.7-beta. -
Update ppp(8). -
Update isakmpd(8). -
sendmail 8.10.1 -
sendmail 8.10.0: You must put your /etc/sendmail.cf file in /etc/mail/sendmail.cf now. -
perl 5.6.0 -
Update to isp(4), mostly for Fiber Channel. -
Seed perl(1) srandom() /dev/arandom, to avoid losing a lot of entropy. -
Some kernel functions were eating a little bit too much entropy. -
ipf 3.3.12 -
ahc(4) now supports AHA-29160 and other Ultra160 varients. -
USB umodem(4) support. -
USB umass(4) driver. Works with various devices, but does not support disconnection yet. -
Support hmac processing in hifn(4). -
ncurses-5.0-20000401 -
Put an expert mode into disklabel(8), that hides a lot of details. But most of the interface remains 100% the same. -
Protocol 2 support in ssh(1) and sshd(8). -
Do not have /etc/netstart pass -E to ipf(8), since our kernel now enables it by default. -
Many more man page improvements. Aren't we pedantic? -
compat_linux(8) system call emulation for pread() and pwrite(). -
Make ahc(4) do tagged queueing, and fix some locking bugs. -
Support root drive detection for G4 powermac. -
Add srandomdev(3) to libc. -
DSA key exchange for sshd(8) and friends, moving us much closer to protocol 2 support. -
Fix various flaws in the OpenSSL set of manual pages. -
an(4) driver supporting AiroNet 802.11DS cards. -
Repair some races and deadlocks in adw(4). -
Fix buf oflow in ed(1). -
Support USB Mass Storage devices. -
Make zic(8)'s -l option actually work. -
Some ppp(8) updates. -
Auto-detect size of seeprom for fxp(4), for newer cards. -
Some improvements in kerberos(1) man pages. -
DES and 3DES hardware acceleration for ipsec(4) working in hifn(4) driver. -
Run pod2man on the openssl pod documents, and carefully install them in the base system. -
Expose MDXTransform functions for MD5 and MD4. -
Permit wss(4) to work on irq 5. -
Implement compat_linux(8) rt_sigreturn() emulation. -
On the i386, enlarge pcic0 memory address space. -
Implement compat_linux(8) getcwd(3) emulation. -
IPSEC ingress ACL-checking is now on by default. -
sudo 1.6.3 -
i386 PCI interrupt routing repair code (disabled by default, has lots of issues). -
Drivers for USB ethernet adapters. -
Sync USB. -
lynx 2.8.2 -
Fix a number if ipsec esp and ah related bugs introduced during the crypto splitout. -
Numerous man page link repairs, so that just about any part of the system has a matching man page. -
Make f_bsize signed. -
Support newer Qlogic isp(4) scsi cards. -
Support AMD 756 IDE controller in pciide(4). -
Add FNM_NOSYS to fnmatch(3) for XPG conformance. -
Flesh out mdoc.samples(7). -
Disallow pkg_delete(1) when the pkg_prefix is on a read-only filesystem. -
Handle expansion of @exec better in pkg_add(1). -
Initial support for DSA keys in sshd(8). -
In ssh(1), switch to raw mode only if we got a pty. -
Replace kernel timeout(9) mechanism with one which permits dynamic allocation of timeout structures. -
In fdisk(8), do not use BIOS geometry by default, a lot of newer BIOS's get upset when this is done with larger drives. -
Make script(1) exit with a proper (and documented) exit code. -
Fix AMD K6 mtrr(4). -
Fix overflow in ftp(1). -
Fix directory mishandlings in who(1). -
Fix overflow in ul(1). -
Fix modes for ch(4) and st(4) devices so that operator is more powerful. -
ray(4) supports the raytheon/webgear ieee 802.11 FH wireless ethernet. -
ahc(4) driver now supports 789x chipset based controllers (7892/9 not verified). -
Add SIOCGIFMTU/SIOCSIFMTU. -
Support for the uninorth PCI bridge on the G4 macs. -
bus_dma support in the powerpc port. -
apache 1.3.12 + mod_ssl 2.6.2 -
OpenSSL 0.9.5 -
Fix parsing of @-style commands in crontab(5) files. -
Make m4(1) compatible enough with GNU m4 to handle autoconf 2.13. -
Add ratecheck(9) API to the kernel. -
Quieten, secure, and improve ipv6 boot-time route setup. -
Cryptographic hardware services framework, first meant for use by ipsec(4). -
Fix interrupt handling issue in dc(4). -
Newer UVM code. -
Prevent overflow in subr_extent code. -
Support FAT32 msdos partitions over 4GB. -
Many man page improvements. -
Disable suffix removal code in make(1), since it is buggy. -
Fix blink and underline attribute handling for new PC display mode. -
ncurses-5.0-20000311 -
IPFilter 3.3.11 -
Support more eisa ep(4) cards. -
Implement realtime signal routines in linux compat. -
Disable K6 MTRR until it is fixed. -
Update rtadvd(8) -
Get rid of leading NULs in /kern/msgbuf. -
Disallow packets to malicious 6to4 prefixes. -
Fix radix tree mishandling bug in routing code. -
Add more gnu-compatible options to m4(1) -
Repair sub-shell execution handling in hostname.if(5) -
Reverse engineer crypto lockout function on the aeon crypto card. -
Fix file descriptor leak in compress(1) -
Fix a memory corruption bug in the ipsec(4) skipjack implementation. -
ncurses-5.0-20000304. -
Disallow root password guessing in sshd(8). -
grep(1) 2.4.1 -
Multiple inclusion protection problem solution on the sparc. -
isakmpd(8) update. -
Add support for new signals to the compat_linux(8) emulation routines. -
Add 802.1Q support to tcpdump(8). -
OpenSSH 1.2.3 released. -
Fix a pipe close race in sshd(8). -
Fix a panic in compat_ibcs2(8) emulation code. -
Make P_tmpdir point to /tmp, not /var/tmp. -
Attempt to handle corrupt inetd.conf files better. -
Try to fix the uio hog problem. -
Fix STAT in ftpd(8) to be RFC959 compliant. -
Optimized kernel fdalloc() -
Add some missing compat_linux(8) emulation routines. -
Move kernel crypto code to /sys/crypto -
Many ppp(8) fixes. -
Some libc_r fixes. -
mg(1) version 2a added to the source tree, and we are fixing many things in it. -
Fix an entropy-robbing bug in the ssl(8) libcrypto. -
Change wicontrol(8) so that multiple parameters can be set at the same time. -
Add -m parameter to strings(1). -
Add getifaddrs(3). -
Permit enlarging of msgbuf on the various architectures. -
On sun4m machines, replace .{u,}{mul,div,mod} functions with faster versions using the new sun4m instructions. A very significant performance improvement. -
Add fseeko(3) and ftello(3) interfaces. -
Two TCP SACK fixes -- SACK now appears to be completely reliable. -
Optimize bridge(4) code by allocating less mbufs. -
Fix alignment fault in amd(8) on the alpha. -
Add support for ses(4) devices, and the sesd(8) tools for probing. -
Add support for 12160 (Ultra3) in isp(4). -
Buffer overflows in mopd(8) -
Complete hypersparc support. -
Link sparc boot and bootxx bootblocks at different addresses; repairs booting on the hypersparc. -
update to latest KTH kerberosIV 1.0 -
Update to newer compile_et(1). -
Full support for serial console on the i386, see boot(8). -
Support PPPoE in tcpdump(8). -
Fix alignment problem for ancillary data; affected 64 bit machines. -
Do not call sleep(3) in rcmd(3). -
On sparc, avoid flushing unmapped memory from the cache in dvma_mapout(). -
ipf 3.3.9 -
Move smrsh(8) to /usr/libexec. -
Add traceroute6(8). -
Use extents instead of rmaps to manage sparc dvma space. -
Have extent_alloc_subregion() also handle an alignment offset. -
More fixes to xl(4) for non-MII cards. -
In sshd(8), move XAUTHORITY to a subdirectory, fixing security issues. -
Handle directly connected lines better in pppd(8). -
Y2K repairs in cvs(1). -
Let weak symbols take precedence over second hand symbols in ld(1). -
wx(4) driver supporting the Intel 82452 gigabit ethernet card. -
Support hundreds of interfaces in dhclient(8) and dhcpd(8). -
texinfo 4.0 -
Split i386 memory <16MB into it's own freelist, permitting large memory machines to work better. -
New fhopen(2), fhstat(2), and fhstatfs(2) system calls to easier support userland filesystems. -
Support newer LVD models in the ncr(4) driver. -
gdt(4) driver for the ICP-Vortex RAID card series. -
Update to FreeBSD newfs_msdos(8), which can support hard drives too -
New OpenBSD art page. -
Updates to the lmc(4) device driver. -
uaudio(4) support. -
ti(4) also supports Farallon PN9000SX. -
ncurses-5.0-20000205. -
adw(4) now supports Advansys U2W scsi cards. -
Further sparc pmap improvements. -
Allow ssh-keygen(1) to be used for generating signatures of any ssh(1) control file. -
In sparc port, handle SM30 specially because it starts up with the cache running. -
import usbdevs(8). -
When handling an apm(4) suspend, power down pcmcia devices; when unsuspending, power them back up. Very nice. -
Rewrite makewhatis(8) in perl(1). -
Deal with empty path element in LD_LIBRARY_PATH variable. -
On i386 prevent overflow in computation of buffer cache limitation, thus supporting machines with lots of memory. -
Hardware encryption support added to wi(4) (the wavelan driver). -
Performance optimizations to m4(1). -
Fix a panic in nfsd(8). -
Have mkdir -m support sticky and setuid bits. -
Support -R flag in rtadvd(8). -
Without a subcommand, have atactl(8) assume that the "identify" command is implied. -
Workaround in ftp(1), for Y2K broken ftp servers that return 19100 for the year. Remind is this is here in the year 19098, ok? -
ipf 3.3.8 -
Fix a pty close race in sshd(8). -
Arrange so that dhclient(8) does not update /etc/resolv.conf if no DNS information is found. -
isakmpd(8) update. -
Support 93C66 and 93C56 SEEPROM chips (used by more modern ahc(4) cards). -
Fix a number of bugs in fsplit(1). -
Use ed(1) in /etc/rc, since grep(1) is in /usr. -
i386 now runs libkvm instead of libkvm.old. -
Add a dmesg(8) alias to the install media. -
In gcc, add an i386 specific peephole optimization for stack adjustment. -
Fix some APM version 1.2 issues, thus making IBM Thinkpads work. -
On the i386, now use the memory map information supplied by the bootblocks. -
Use alloca(3) instead of malloc(3) in execl(3) and execle(3), so that they are vfork(2) safe. -
sudo 1.6.2p1 -
Arrange so that sshd(8) does not do port forwarding until shell successfully starts. -
Repair a stupid cache-lockdown bug in the sparc pmap. -
Repair memory leak in freeaddrinfo(3). -
Significant code shrinkage in ipsec(4), as most AH and ESP code starts sharing more subfunctions. -
Enable ipv6 support in rsh(1), rlogin(1), rshd(8), and rlogind(8). -
Fix rcmd(3), iruserok(3), and ruserok(3) to be IPv6 capable, also add more address family indepedent routines: rcmd_af(3) and iruserok_sa(3). -
Handle MVME1x2 boards with only one ZS serial chip. -
Avoid some more cache flushes in the sparc pmap module. -
Handle memory shortage better in yacc(1), closing some memory leaks. -
Sparc pmap performance improved by optimizing some more pte table walks. -
isakmpd(8) update. -
Many more man page improvements. -
More getaddrinfo(3) improvements to further match RFC2553. -
Add MAC address filtering in the bridge(4) code. -
Fix timestamp bug in make(1). -
Apache 1.3.11 + mod_ssl 2.5.0 merge -
MVME328 scsi card support in mvme68k port. -
Portable code for handling architectures with backwards-running stacks, like hppa. -
Fix Y2K non-compliancy in amiga port's clock chip code. -
some minor repairs to grdc(6). -
MVME376 ethernet card support in mvme68k port. -
mvme68k and mvme88k ramdisk repairs. -
sudo 1.6.2. -
Make application mode arrow keys work in ksh(1). -
Protocol independence added to bindresvport(3). -
OpenSSH version 1.2.2 released. -
Lots of ipsec(4) pfkey improvements. -
Repair exception handling in gcc i386 position independent code. -
ncurses-5.0-20000122 -
Don't allow time to be set far forwards and thus wrap, and a warn for for time reversing if securelevel(7) > 1. -
Some compat_sunos(8) emulation improvements, particularily for getdents. -
Various powerpc port fixes -- it is getting close to actually working well. -
Handle SIGINT failures in ssh(1)/scp(1)/cvs(1) better. -
Fix bugs in the robots(6), tetris(6), and grdc(6) games. -
Make pax(1)/tar(1)/cpio(1) deal with files larger than 2 GB. -
Deal with getcwd(3) returning NULL in at(1). -
Rename ip4.allow sysctl(8) to ipip.allow. This variable no longer controls any explictly configured IP-over-IP tunnels. -
Deal with getcwd(3) returning NULL in the supfilesrv. -
DRIVER IMPROVEMENT: Intel fxp(4) cards with nsphy could not negotiate and maintain 100mbit link. A source code patch is available. -
Fix a buffer overflow in the i386 bootblocks! -
Fix vi(1) recover script to use sysopen(), to avoid magic in perl open(). -
Fix race condition in make(1) (only applies to make -j, which noone in OpenBSD ever uses). -
Reduce console loggin in sshd(8). -
Fix sshd -i. -
SECURITY FIX: Systems with procfs enabled and mounted contain a root hole due to a tricky exploit.A source code patch is available. -
Fix a possible NULL dereference in execve(2). -
gcc 2.95.2 -
add rip6query(8). -
Many man page fixes. -
Change pcvt(4) so that all regular function key presses go to straight to the application. -
Avoid botches in ftpd(8) and mtree(8) introduced from blind replacement of getwd(3) with getcwd(3). -
Disable agent forwarding in ssh(1) protocol 1.3. -
Support for another gigabit ethernet card using the alteon chipset. -
Fix a garbage printout in ftpd(8). -
Error message repair in from(1). -
Fix fxp+nsphy problems. -
Tons more man page repairs. -
Fix a bug in the pipe(2) system call. -
v6 support in fstat(1). -
Documentation improvements. -
Fix "traceroute -P 41" codepath blocked by inet6 import. -
Another fix improving on the earlier ld.so version number fix. -
tcpdump(8) support for L2TP, Mobile IP, BGP, VLAN 802.1q, and INET6. -
ncurses-5.0-20000115 -
Crank pms(4) delay to 4000 for another laptop that takes a long time. -
Make kernel know about the Coppermine cpus. -
Special case one PCI bridge device... which is not a PCI bridge at all. -
Handle SNAP encapsulated packets for the bridging blocknoip option. -
Improve sparc pte handling for performance. -
Show blackhole routes in route(8) and netstat(1). -
Fix a Y2001 bug in the hp300 boot code and kernel. -
Update the powerpc code. UVM kernels do not work yet. -
Avoid touching the sdh register too often during atapi device probe; some devices freak. -
More m4(1) fixes. -
Fix an obscure bug in ld(1) that caused it to treat directory names called "lib" differently. -
Y2K fix for a groff(1) macro. -
Remove gifconfig(8); replaced by syntax in ifconfig(8). -
Show problematic expressions in m4(1)'s expr error messages. -
Recursion depth control in gre(4), similar to what is in gif(4). -
Various cleanups are happening to the netipx codebase. -
Fix Promise Ultra/66 and SiS 5513 pciide support. -
blocknonip option in if_bridge and brconfig(8). -
pn(4) cards now use dc(4). -
More channel fixes in ssh(1). -
XFree86 3.3.6 -
Handle glob() return values better in restore(8). -
Hi/Fn 7751 is the same as the Invertex board, the aeon driver. -
Support command-execution in /etc/hostname.* files, using ! syntax. -
Handle the bootpath properly in sbus isp(4). -
ipsec ingress control. -
Merge IPV6 into the GENERIC kernel. As far as the kernel is concerned, we are ipv6 ready now. However, lots of userland changes remain.. -
Reduce recursion in gif(4). -
Support Davicom DM910x in if_dc. -
Numerous IPSec fixes and enhancements. -
Allow aeon driver to match Hi/Fn 7751. -
Fix printing of SAs in route. -
Add ESP/AH statistics to netstat(1). -
Fix to use network byte order in several places. -
Allow booting from Qlogic isp cards. -
Several IPSec-related sysctls added. -
Various termtypes fixes. -
ncurses-5.0-20000108 -
Add fake dcphy(4). -
In UKC, add a timezone command. -
Handle fxp(4) using iophy(4); broken in 2.6 release. -
Support LBA-mapped extended partitions in fdisk(8). -
Use arc4random(3) in IPV6 code. -
Import of GRE code. -
Early check for udp destination port 0. -
Newer raidframe code. -
userland ppp 2.26. -
Make NFS swap devices work once again. -
In the mvme68k port, add support for the '060 based MVME177 card. -
Make some macros in m4(1) special. -
Improve column handling in ls(1). -
V6 support in systat(1). -
Y2K FIX: The at(1) command was unable to parse some kinds of dates. A source code patch is available. -
Improve sleep(1) for out-of-range values. -
Do not use kvm snooping in rtsold(8). -
Fix ftp(1) URL support accidentally broken by KAME. -
Fix a bug in smtpd(8). -
Make ssh IPV6 clean. KerberosIV only works on a v4 connection. -
Fix mbuf out-of-bounds write which caused great grief for NFSv2 in an INET6 kernel. -
Add rmoption/rmoptions command to config(8), thus permitting a config file to include GENERIC and then remove things. -
Various small improvements and fixes to ssh(1). -
Fix pthreads(3) handling on the sparc. -
Using weak symbols, support a real libpthread. -
The mknod(8) -m option should ignore the umask. -
More man page cleanups, as always. -
Y2K FIX: A minor problem; the sparc eeprom(8) command is not Y2K compliant. A source code patch is available. -
Permit midi compilation without other audio code. -
Y2K FIX: A minor problem in the logging support for the adduser(8) command. A source code patch is available. -
In config(8), permit multiple maxuser definitions. Newest overrides older ones. -
Use the dc(4) driver instead for a few other tulip-like cards. -
Change libc syslog() code to try to reopen the socket if a send fails. This handles the case of a restarted syslogd(8) better. -
Correct SIGTERM handling in ssh-agent(1). -
ncurses-5.0-20000101 -
Permit non-IPSEC kernels to compile. -
Improve argument handling in wicontrol(8). -
Various fixes to LKM(4) unloading. -
Make ld/ld.so search all directories before accepting the best version of a shared library. -
Do in6_if_up() at splsoftnet(), permitting drivers to get interrupts during the processing of their multicast reprogramming. -
Provide sysctl net.inet6.icmp6.nodeinfo to permit admin to enable ICMPv6 node information query if so desired. -
Support various kinds of inet6 entries and in /etc/netstart as well. -
Improve handling of signed math in NFS kernel code. -
Parse /etc/sysctl.conf earlier in /etc/rc. -
Move sysctl to /sbin. -
For other architectures, also check db_panic in kdb_trap(). -
Remove PIC versions of libarch and libresolv from the distribution. -
Correctly copy pkthdr in m_split(). -
Fix udp multicast option handling. -
DRIVER IMPROVEMENT: Fix mii autoselect support for 3c900b. A source code patch is available. -
Fix signed errors in df(1). -
Repair netstat -ss. -
Optional swap encryption support in uvm; see new options(4) page. -
Do not strip international characters in fmt(1). -
Initialize lo0 for ipv6 automatically. -
Avoid a memory leak in telnet(1). -
Honour the ddb.panic sysctl better. -
Enable scopeid hack in ifconfig(8), ping6(8), and netstat(1). -
Replace NRL get{addr,name}info() with KAME get{addr,name}info() in libc. -
Fix a terminfo problem relating to unset capabilities. -
More ISA PnP NE2000 clones - see ne(4) -
TCP new reno -
Fix IP multicast kernel panic -
Upgrade ipf(4), now version 3.3.6 -
Major cleanup of make(1) -
3c450-TX HomeConnect, see xl(4). -
Add Qlogic 1240/1280 support to isp(4). -
Update curses(3) to ncurses-19991218. -
Speed up blowfish encryption by > 20%. -
More ipf(8) changes. Avoid rw_enter panic, coredumps when processing rules. -
Preliminary token ring support. -
Continuing ssh(1) improvements. -
Add srcsa, dstsa, clearsa to ifconfig(8) -
New ioctls for binding enc(4) interfaces when bridging. -
Yet more make(1) cleanup. -
Preserve file flags in mv(1). -
Added the gif(4) interface for tunnelling IPv4/IPv6. See gif(4), gifconfig(8). -
Add more PCMCIA NE2000 devices. -
Fix and re-enable TCP SACK code. Eliminate TCP_NEWRENO. See options(4). -
Continuing IPV6 improvements. -
Print ipv6 addresses correctly ipsec flows. See netstat(1), route(8). -
ipsecadm(8) now accepts ipv6 addresses. -
Improve timeout handling for some ATAPI devices. -
Add man pages for icmp6(4) and ip6(4) -
traceroute(8) fixes. Add -c, -I. Fix -P. -
Fix multicast kernel panic in ip_output. -
Add forward reference for sockaddr to netinet/in.h -
Some game fixes: fortune(6) and robots(6). -
More make(1) cleanup. -
Various IPV6 changes. -
ipmon(8) -F now works properly. -
Import of IPFilter 3.3.5. See ipf(8). -
Long overdue make(1) cleanup. -
ipf(8) can now use interface names. -
Add support for Qlogic 1240 and 1280. -
Preliminary awi driver code. -
Fix privilege error in wi(4) driver. -
Replace pn(4) driver with dc(4). -
Overflows in at(1), ar(1), cdio(1). -
Import of IPFilter 3.3.4. See ipf(8). -
Changed termcap providers -
Various fixes to hunt(6). -
TI TNETE2101 PHY -
Fix dlfcn(3) prototypes -
Sync awk(1) with June 6, 1999 version -
New dc(4) driver for DEC/Intel 21143 and clones -
Don't use stdio for getpass(3). -
Update of PHY subsystem -
Various sparc and i386 pmap fixes for UVM -
Sundance ST201 Ethernet from FreeBSD. See ste(4) -
IPSec cleanup -
Cleanup of make(1). -
Lots of UVM work -
MFS unmount race fixes -
Add bindresvport_af(3) and rresvport(3) APIs to libc. -
Updated curses(3) to ncurses-19991211 -
Overflows in crunchgen -
Fix chpass(1) temp file handling -
Various soft update fixes -
Integration of KAME IPv6 -
Features added to find(1). -
Fixes to eap(4) driver -
Overflows is split(1), jot(1), ssio, telnet(1), file(1). -
SiS 900/7016 Ethernet from FreeBSD. See sis(4) -
Tape support and major code changes to atapiscsi(4). -
The third ssh jumbo patch is now available. Numerous (non-security) additions/changes have been made to OpenSSH since the OpenBSD 2.6 release. A jumbo patch is available which adds many features. -
The second ssh jumbo patch is now available. Numerous (non-security) additions/changes have been made to OpenSSH since the OpenBSD 2.6 release. A jumbo patch is available which adds many features. -
Some overflows in patch(1). -
Buffer overflow in dnsquery(1). -
Buffer overflow in error(1). -
Fix a buffer overflow in dhclient(8). -
Fix two crashes in awk(1). -
Fix off-by-one in apply(1). -
Fix bug in pr(1). -
Make soft updates mostly work with UVM. -
SECURITY FIX: The USA version of the ssl library package, called sslUSA26, contained buffer overflows. A binary patch is available for people who installed before December 3. -
Remove ctm(1) from the src tree -- look for it in ports now. -
libkvm.old hacks for UVM. -
Fix utmp handling in ftpd(8), for when running in daemon mode. -
More m4(1) fixes. -
Fix append keyword in dhclient(8). -
Buglet in sort(1). -
DPT SmartCache III/IV SCSI PCI/EISA driver. -
mkisofs 1.11.3 -
Fix mangled files for put command in ftpd(8). -
RELIABILITY FIX: Be more careful in poll(2). A source patch is available. -
ncurses-5.0-19991127 -
Enable TI16750 UART support. -
driver for ISA hostess 4-channel serial card. -
Import ssh-askpass into our X11 src tree. -
For i386: Winchip c6 TSC is broken, ignore it. -
Fix descriptor leaks and potential double fclose() calls in skey(1) library code. -
Correct icmp packet length in ipmon(8). -
Remove unused functionality from the i386 pcvt driver. -
Allow machine-dependent code to set the PAGE_SIZE constant, and set it it in MD code if possible -- performance improvement. -
new pthreads(3) code. -
Parsing error fix to calendar(1). -
Some more m4(1) fixes. -
Set SO_REUSEADDR and SO_LINGER on forwarded ports in ssh(1). -
SECURITY FIX: Limit newaliases run to root and trusted users. A source patch is available. -
SSH_ASKPASS support in ssh-add(1). -
Numerous ssh(1) and sshd(8) improvements... too many to mention. -
Newer version of the isp(4) driver. -
Fix a bug in rarpd(8). -
Add support for SIGIO to lms(4), pms(4), and mms(4). -
Fix two bugs in info(1). -
select on pipes was broken, and occasionally someone would notice it (in particular rsync). -
Use mkstemp(3) in crontab(1). -
Improve egcs performance. -
Add memconfig(8). -
Add mtrr(4) support from freebsd. -
SSH_CMSG_MAX_PACKET_SIZE support in sshd(8). -
Improve whois(1) even more. -
Many man page fixes. -
sudo 1.6 (BSD licenced now!) -
Fix more m4(1) bugs. -
In scp(1), do not display banner if process is in the background. -
Permit kernel to compile without FFS once again. -
More links to man pages. -
Bug fixes to rl(4) and tx(4) driver. -
More ATAPI disk fixes (may come as a patch file later). -
Other misc ssh(1) improvements. -
RSA key fingerprints in the ssh(1) commands. -
Do ANSI cursor save/restore in i386 pcvt(4) driver. -
Fix more m4(1) bugs; patch for this problem is included in previous m4 errata entry. -
A bit more playing around in sshd to deal with the broken key sizes that Datafellows ssh gives. -
Honour ddb.console in the mac68k port. -
Fix retransmission problem in TCP. -
Improve whois(1) significantly to use *.whois-servers.net. -
In lots of daemons, do not syslog getpeername complaints. -
In ksh(1), quote metacharacters when completing filenames. -
Fix a signal race crash in ksh(1). -
link window(1) with -locurses. -
top(1) should use stathz, not hz, for calculating process run times. -
Shrink the puc(4) dmesg output. -
Add OSS audio support to the BSD/OS emulation. -
A kernel reliability fix for the alpha. A patch is available. -
A kernel reliability fix for all m68k architectures. A patch is available (which all m68k architectures share). -
Numerous (non-security) additions/changes have been made to OpenSSH since the OpenBSD 2.6 release. A jumbo patch is available which adds many features. -
A kernel reliability fix for the sparc. A patch is available. -
Counter overflow fix to scp(1). -
Merge dvdio.h support into cdio.h, and cleanup various unportabile bits. -
Various other ssh(1) cleanups. -
Print all bad options in sshd(8) and ssh(1) before exiting with a failure. -
sshd(8) now has a IgnoreUserKnownHosts flag. -
Optionally run a command in newsyslog(1), instead of sending a signal. -
Some make(1) fixes. -
Improve dhcp integration into the install media. -
Logging cleanup of ssh(1). -
Have sshd check check the user's personal ~/.ssh/known_hosts file. -
NOTE: OpenSSH does not have the ssh 1.2.27 rsa bug. -
Install a shared libperl. -
Fix m4, accidentally broken in 2.6. A patch is available. -
Users should not be able to change the media configuration of interfaces. A patch is available. -
Add strtok_r(3). -
newsyslog race condition fixes. A patch is available. -
Various make(1) fixes. -
screen blanker code for the amiga. -
Default network name in wi(4) is "", not "ANY". -
Start of DVD support. -
New sf(4) driver supports Adaptec "StarFire" AIC6915-based Ethernet PCI cards. -
Numerous more ssh(1) and sshd(8) cleanups. -
Slow down ATAPI IDENTIFY (final critical fix which shipped in 2.6). -
Another critical i386 memory allocation fix (shipped in 2.6). -
Critical brooktree driver fix (shipped in 2.6). -
Fix some more atapi bugs (shipped in 2.6). -
Fix byte order bugs in the new wdc/atapi code. -
Sparc uses UVM by default now. -
Allow rarpd(8) to work on aliased interfaces. -
Support multiple enc(4) interfaces. -
Reliability fixes for the ATAPI code (shipped in 2.6). -
New driver: al(4) supports the ADMtek AL981/AN985 PCI ethernet cards. -
Various other ssh(1) and sshd(8) cleanups. -
Add ethernet-IP encapsulation. -
In ssh, use libssl(8) md5 routines instead of our libc routines. -
Disassociate interfaces from ipnat(8) after they've been removed from the interface list. -
Make ASYNC pipes capable of generating SIGIO. -
Emulate FreeBSD F[GS]ETOWN. -
Fix some further ARP problems in bridge(4). -
Fix scp(1) counters for > 1 hour. -
Support LMC1200 in lmc(4). -
Repair multicast routing description block in afterboot(8). -
Support missing tty flags in stty(1). -
libkeynote update. -
Support UVM throughout userland. -
Support for puc(4) (PCI serial/parallel cards). -
Make disklabel.h safe for C++ use. -
Use reference-copies of the mbuf in bridge(4) code again, instead of full copies. -
Make ssh print the correct remote version number. -
Make ssh(1) compile faster by using a library. -
In ti(4), use bus_dma routines instead of uvm_page_alloc_contig. -
Cleanup i386 disktab.

--- 38,53 ---- For changes leading up to OpenBSD 2.4, click here.
For changes leading up to OpenBSD 2.5, click here.
For changes leading up to OpenBSD 2.6, click here.
! For changes leading up to OpenBSD 2.7, click here.

OpenBSD 2.7 to be released June 15, 2000.
We are working on OpenBSD-current.

*************** *** 799,804 **** --- 66,72 ---- For changes leading up to OpenBSD 2.4, click here.
For changes leading up to OpenBSD 2.5, click here.
For changes leading up to OpenBSD 2.6, click here.
+ For changes leading up to OpenBSD 2.7, click here.
For changes in OpenBSD-current, click here.
*************** *** 806,812 ****

www@openbsd.org !
$OpenBSD: plus.html,v 1.559 2000/05/12 13:02:50 ericj Exp $ --- 74,80 ----

www@openbsd.org !
$OpenBSD: plus.html,v 1.560 2000/05/19 20:04:53 deraadt Exp $

OpenBSD 2.6 is now available for purchase. We are working on OpenBSD-current.

OpenBSD 2.7 to be released June 15, 2000. We are working on OpenBSD-current.

OpenBSD 2.6 is now available for purchase.
We are working on OpenBSD-current.

OpenBSD 2.7 to be released June 15, 2000.
We are working on OpenBSD-current.