OpenBSD 2.7 to be released June 15, 2000.
We are working on OpenBSD-current.
-
+
- Support IPV6 in identd(8). +
- Move IPV6 mbuf alignment requirements into input routine, removing the last performance critical one in loopback. +
- ubsec(4) fixes to queue requests to the hardware properly. The device can now do ipsec with itself over loopback or the network, but something is still mangled about the actual ipsec packets. +
- SECURITY ISSUE: Two localhost denial of service problems in the an(4) Aironet Communications 4500/4800 IEEE 802.11DS driver. One bug prevents ancontrol(8) from working correctly, instead causing a panic, while the other allows unauthorized users to change settings.
+ A patch is available.
+ [Applied to stable] + - crypto(9) kernel thread permits hardware crypto devices to run at any spl they prefer. +
- Initial OpenSSH support for ssh.com's 2.2.0. +
- For setsockopt() and getsockopt(), do not assume non-PF_INET6 address family to be PF_INET.
- In sshd(8), implement bug compatibility with ssh-2.0.13. +
- In sshd(8), implement bug compatibility with ssh-2.0.13.
- In ssh(1), include = in WHITESPACE, permitting commands like ssh -o keyword=argument. !
- Enable IPV6 support in sendmail(8).
- Change ipsec processing sequence to handle inner and outer layers much better.
- Add support for SSH2 subsystems in sshd(8).
- On ifconfig down & up operations, mark all radix tree routes down or up for the specified interface. *************** *** 68,74 ****
- memcmp(3) in the kernel as well, since implementing it in terms of bcmp(3) is very wrong.
- Update vnode flag printing in pstat(8).
- Do not whack directory in user(8).
! [Will be applied to stable] - Hardware random number generator in i840 also works, like i810.
- Fix an ESP status message in netstat(1).
- Put RSA into our ssl(3) tree. Since our next release is not till after the patent expires, it's OK. --- 78,84 ----
- memcmp(3) in the kernel as well, since implementing it in terms of bcmp(3) is very wrong.
- Update vnode flag printing in pstat(8).
- Do not whack directory in user(8).
! [Applied to stable] - Hardware random number generator in i840 also works, like i810.
- Fix an ESP status message in netstat(1).
- Put RSA into our ssl(3) tree. Since our next release is not till after the patent expires, it's OK. *************** *** 79,85 ****
- Minor bug fixes and optimizations in /etc/rc.
- Update of ppp(8).
- Put an upper bound on transaction queue of the ubsec(4). !
- Correct source length calculation in hifn(4).
- Initial import of ELF ld.so, for powerpc initially.
- Correct secondary mbuf setup in hifn(4).
- Broadcom Bluesteel 5x0x ubsec(4) crypto cards now supports ESP 3DES modes properly. No AH or MAC stuff yet. --- 89,96 ----
- Minor bug fixes and optimizations in /etc/rc.
- Update of ppp(8).
- Put an upper bound on transaction queue of the ubsec(4). !
- Correct source length calculation in hifn(4).
! [Applied to stable] - Initial import of ELF ld.so, for powerpc initially.
- Correct secondary mbuf setup in hifn(4).
- Broadcom Bluesteel 5x0x ubsec(4) crypto cards now supports ESP 3DES modes properly. No AH or MAC stuff yet. *************** *** 189,195 ****
- Make ancontrol(8) act like our changed wicontrol(4) semantics.
- Use getifaddrs(3) in libc rpc code.
- For boot_config(8) code, save enable command in the history for config(8)'s -eu updating. !
- Update multicasting support for ipv6.
- Fix usage printing in passwd(1).
- By default, do not vsync blank sparc cgsix(4) monitors, but provide a sysctl to do so.
- Start at a BlueSteel (Broadcom) 5[56]01 crypto accelerator driver. --- 200,206 ----
- Make ancontrol(8) act like our changed wicontrol(4) semantics.
- Use getifaddrs(3) in libc rpc code.
- For boot_config(8) code, save enable command in the history for config(8)'s -eu updating. !
- Update multicasting support for IPV6.
- Fix usage printing in passwd(1).
- By default, do not vsync blank sparc cgsix(4) monitors, but provide a sysctl to do so.
- Start at a BlueSteel (Broadcom) 5[56]01 crypto accelerator driver. *************** *** 204,210 ****
- After ftp(1) finishes downloading, change progress meter to show the total elapsed time.
- Handle 0-size files in ftp(1)'s progress meter.
- Parse RFC2732 ftp URLs in ftp(1). !
- In ipv6, perform NUD on p2p link, only if the destination/gateway is real neighbor.
- In getaddrinfo(3), translate DNS error code into getaddrinfo error code (EAI_xxx).
[Applied to stable] - RELIABILITY FIX: Parse IPv4 options more carefully.
--- 215,221 ----- After ftp(1) finishes downloading, change progress meter to show the total elapsed time.
- Handle 0-size files in ftp(1)'s progress meter.
- Parse RFC2732 ftp URLs in ftp(1). !
- In IPV6, perform NUD on p2p link, only if the destination/gateway is real neighbor.
- In getaddrinfo(3), translate DNS error code into getaddrinfo error code (EAI_xxx).
[Applied to stable]- RELIABILITY FIX: Parse IPv4 options more carefully.
*************** *** 241,247 ****
www@openbsd.org
!
$OpenBSD: plus.html,v 1.593 2000/06/18 02:20:45 jason Exp $