We are working on OpenBSD-current.
! The following list sums up (almost) all the changes made up to January 4.
-
+
- Fix a null deref in dlsym(3). + +
- Avoid a rare division-by-zero in ps(1) that could occur on non-IEEE systems like the vax. +
- Remove the endianness from bktr(4). Enable on macppc. +
- Make sure we don't try to free a null pointer in whois(1). +
- Change 'no-route' implementation from a flag in the pf(4) rule address to an address type. +
- Make pf(4) skip-step calculation honour the 'no-route' keyword. +
- Remove code in ld(1) to force linking against a specific library version. +
- Add console support for Polish and Turkish keyboard layouts. + +
- Add the userland support for pf(4) radix tables to pfctl(8) and authpf(8). +
- Remove reference to the now obsolete screenblank from /etc/rc. +
- Fix dig(1) time display on 64-bit big-endian targets. +
- Do a bridge(4) routing update if the source interface is in the LEARNING state, not the destination interface. + +
- ftp(1) does a better job of detecting a failed cd command. +
- Have syslog(3) parse '%%m' correctly. +
- Fix a null deref in at(1). +
- Require a direction for pf(4) rules that do routing. + +
- When combining (route|reply)-to and translation in pf(4) rules, make sure a state table insertion is only attempted once. +
- Note (in the system copyright message) that it's now 2003. +
- Update to sendmail 8.12.7. +
- Have tcpdump(8) display all pf(4) rule types instead of just pass/block rules. +
- Make the pf(4) radix table code handle duplicate table names and/or duplicate addresses in a single ioctl(2) call. + +
- Remove the pf(4) skip-step for rule action (scrub or no-scrub.) +
- Properly update pf(4) scrub rule statistics. +
- Put pf(4) scrub rules into a ruleset separate to filter rules. +
- Implement policy suggestions in xsystrace(1). +
- Adios amiga and sun3 platforms. + +
- Don't overrun the buffer when listing route entries via sysctl(3). +
- Fix strtok_r(3) breakage in libwrap that was causing EXCEPT rules to fail. +
- Add a missing exit(3) in pfctl(8). +
- Correctly ignore the case where a directory with the desired executable name appears in one of the paths searched by exec[vl]p(3). +
- Set a default pf(4) state table size of 10000 entries. +
- In pf.conf(5), change keyword 'ipv6-icmp-type' to 'icmp6-type' and instead of 'proto ipv6-icmp' allow 'icmp6' +
- Fix a C++ compiler problem with Kerberos IV's krb.h, similar to the cdefs.h fix earlier. +
- Avoid a null deref when parsing the command line of make(1). +
- Allocate memory for connections to spamd(8) based on the -c command line option. +
- Make cd(4) try more often than other scsi devices, and don't ignore 'not ready' status from the bus. +
- Add a parameter for the number of retries when waiting for a scsi device to come ready (scsi_test_unit_ready().) +
- If semop(2) has to do a tsleep(9), wake it back up at a much lower priority. +
- Wait until a semaphore undo structure can be allocated if one isn't available immediately, and check that another hasn't been allocated to our process while we were waiting. +
- Properly check SOCKS connection return code in nc(1). +
- More firewire fixes. Concurrent devices support on the way. +
- Remove outdated references to NFS as an installation source from the install notes. + +
- Fix HOSTAP_FLAG_BITS in wi(4). +
- Make 'pfctl -a name -s[rn]' show all rules or nats in all rulesets on anchor 'name'. +
- In authpf(8), set the macro '$user_id' to the username. +
- Fix a couple of missed semaphore counter updates. +
- Add kernel portion of radix table support for pf(4) rule source and destination addresses. + +
- Remove an extraneous semicolon in <sys/cdefs.h> that broke some C++ compilers. +
- Fix an amusingly incorrect calloc(3) size in nc(1). +
- Allow the log keyword in pf(4) scrub rules.
- Some fixes to pf(4) ioctl handling.
- When pf(4) is routing a stateful connection, use the correct pool address.
***************
*** 551,557 ****
www@openbsd.org
!
$OpenBSD: plus.html,v 1.854 2002/12/30 22:58:53 deraadt Exp $