Fix ADMtek identity crisis in dc(4).
In ftpd(8) make sure that -h does high port binding in EPSV.
Correct ENI_SALEN case in getnameinfo(3).
--- 50,56 ----
- Broadcom Bluesteel 5x0x ubsec(4) crypto cards now supports ESP 3DES modes properly. No AH or MAC stuff yet.
- Make flags field in newsyslog(8) files optional.
!
- Modifications to traceroute6(8)
- Fix ADMtek identity crisis in dc(4).
- In ftpd(8) make sure that -h does high port binding in EPSV.
- Correct ENI_SALEN case in getnameinfo(3).
***************
*** 99,105 ****
- SECURITY ISSUE: Do not use the (non-default) UseLogin option in OpenSSH 2.1.*, it has a hole on other operating systems and does not work right in OpenBSD.
Update to OpenSSH 2.1.1 or later, or simply avoid using UseLogin.
[Applied to stable]
! - sudo 1.6.3p4
- Fix a kernel race in exit(2).
- In cut(1) deal with last input line not containing a newline
- One byte overflow in systat(8).
--- 99,105 ----
- SECURITY ISSUE: Do not use the (non-default) UseLogin option in OpenSSH 2.1.*, it has a hole on other operating systems and does not work right in OpenBSD.
Update to OpenSSH 2.1.1 or later, or simply avoid using UseLogin.
[Applied to stable]
! - sudo 1.6.3p4
- Fix a kernel race in exit(2).
- In cut(1) deal with last input line not containing a newline
- One byte overflow in systat(8).
***************
*** 119,125 ****
- ich(4) audio driver onboard the Intel 810/820/440MX-based machines.
- Support ax88190 in ne(4).
- In apm(4) the time is kept in hours, not minutes.
!
- Add -A support to ssh(1).
- Support for 3c574 and 3CCFEM556BI pcmcia(4) in ep(4).
- A start at documenting what goes on inside config(8) files.
- Enable mg(1).
--- 119,125 ----
- ich(4) audio driver onboard the Intel 810/820/440MX-based machines.
- Support ax88190 in ne(4).
- In apm(4) the time is kept in hours, not minutes.
!
- Add -A support to ssh(1).
- Support for 3c574 and 3CCFEM556BI pcmcia(4) in ep(4).
- A start at documenting what goes on inside config(8) files.
- Enable mg(1).
***************
*** 133,187 ****
[Applied to stable]
- In ftp(1), do not attach Host: directive if we are using the proxy.
- Make almost all manual pages machine independent.
!
- DRIVER FIX: The isapnp(4) ef(4) driver failed to configure properly.
A patch is available.
[Applied to stable]
! - Helper script cleanup in httpd(8).
!
- SECURITY ISSUE: Update to ipf 3.3.16.
A patch is available.
[Applied to stable]
- On i386, place extra byte at end of pcb so that the iomap works for last 8 ports.
!
- Fix some key parsing routines in ssh(1).
- Permit detach of audio devices.
!
- Properly configure multicast table in wi(4).
!
- Handle 64 bit architectures in pstat(8) -f.
!
- Update rtadvd(8).
!
- Remove nfsiod(8) and replace it with an in-kernel thread based implimentation.
!
- Make ssh(1) X11 forwarding work on localhost.
- Crank vnode use counts to 32 bits.
!
- Correct ifconfig(8) printing of gif physical address on non-IPV6 kernel.
- RELIABILITY FIX: Repair a routing table panic.
A patch is available.
[Applied to stable]
! - Make ancontrol(8) act like our changed wicontrol(4) semantics.
- Use getifaddrs(3) in libc rpc code.
!
- For boot_config(8) code, save enable command in the history for config(8)'s -eu updating.
- Update multicasting support for ipv6.
!
- Fix usage printing in passwd(1).
- By default, do not vsync blank sparc cgsix(4) monitors, but provide a sysctl to do so.
- Start at a BlueSteel (Broadcom) 5[56]01 crypto accelerator driver.
- Accept empty shell specifications in sshd(8).
!
- In ssh(1), do non-blocking on ssh1 protocol sockets too.
!
- Some additions to keynote(3).
- Crank rt_refcnt to 32 bits.
- Supply entropy from i386 mouse drivers to the kernel random number generator.
!
- Correct p2p interface address handling and various other bugs in route6d(8).
- Few more tweaks to pcvt termcap definition.
- Ensure SIOCSETVLAN gets a valid vlan tag.
!
- After ftp(1) finishes downloading, change progress meter to show the total elapsed time.
!
- Handle 0-size files in ftp(1)'s progress meter.
!
- Parse RFC2732 ftp URLs in ftp(1).
- In ipv6, perform NUD on p2p link, only if the destination/gateway is real neighbor.
- In getaddrinfo(3), translate DNS error code into getaddrinfo error code (EAI_xxx).
[Applied to stable]
- RELIABILITY FIX: Parse IPv4 options more carefully.
A patch is available.
[Applied to stable]
! - Translate DNS error codes in getaddrinfo(3).
!
- cardbus(4) com(4) driver.
- Support debugging libraries via DEBUGLIBS in /etc/mk.conf.
- Driver for tcic(4) style pcmcia adapters.
!
- Fix ipsec(4) ESP sanity checks that caused really short packets to be dropped. Only icmp was affected.
--- 133,187 ----
[Applied to stable]
In ftp(1), do not attach Host: directive if we are using the proxy.
Make almost all manual pages machine independent.
! DRIVER FIX: The isapnp(4) ef(4) driver failed to configure properly.
A patch is available.
[Applied to stable]
! Helper script cleanup in httpd(8).
! SECURITY ISSUE: Update to ipf 3.3.16.
A patch is available.
[Applied to stable]
On i386, place extra byte at end of pcb so that the iomap works for last 8 ports.
! Fix some key parsing routines in ssh(1).
Permit detach of audio devices.
! Properly configure multicast table in wi(4).
! Handle 64 bit architectures in pstat(8) -f.
! Update rtadvd(8).
! Remove nfsiod(8) and replace it with an in-kernel thread based implimentation.
! Make ssh(1) X11 forwarding work on localhost.
Crank vnode use counts to 32 bits.
! Correct ifconfig(8) printing of gif physical address on non-IPV6 kernel.
RELIABILITY FIX: Repair a routing table panic.
A patch is available.
[Applied to stable]
! Make ancontrol(8) act like our changed wicontrol(4) semantics.
Use getifaddrs(3) in libc rpc code.
! For boot_config(8) code, save enable command in the history for config(8)'s -eu updating.
Update multicasting support for ipv6.
! Fix usage printing in passwd(1).
By default, do not vsync blank sparc cgsix(4) monitors, but provide a sysctl to do so.
Start at a BlueSteel (Broadcom) 5[56]01 crypto accelerator driver.
Accept empty shell specifications in sshd(8).
! In ssh(1), do non-blocking on ssh1 protocol sockets too.
! Some additions to keynote(3).
Crank rt_refcnt to 32 bits.
Supply entropy from i386 mouse drivers to the kernel random number generator.
! Correct p2p interface address handling and various other bugs in route6d(8).
Few more tweaks to pcvt termcap definition.
Ensure SIOCSETVLAN gets a valid vlan tag.
! After ftp(1) finishes downloading, change progress meter to show the total elapsed time.
! Handle 0-size files in ftp(1)'s progress meter.
! Parse RFC2732 ftp URLs in ftp(1).
In ipv6, perform NUD on p2p link, only if the destination/gateway is real neighbor.
In getaddrinfo(3), translate DNS error code into getaddrinfo error code (EAI_xxx).
[Applied to stable]
RELIABILITY FIX: Parse IPv4 options more carefully.
A patch is available.
[Applied to stable]
! Translate DNS error codes in getaddrinfo(3).
! cardbus(4) com(4) driver.
Support debugging libraries via DEBUGLIBS in /etc/mk.conf.
Driver for tcic(4) style pcmcia adapters.
! Fix ipsec(4) ESP sanity checks that caused really short packets to be dropped. Only icmp was affected.
