We are working on OpenBSD-current.
! The following list sums up (almost) all the changes made up to April 12.
-
+
- Have spamd(8) set file descriptor limits with setrlimit(2). +
- Relax the license on strlcat(3) and strlcpy(3) to encourage their bundling with other programs. +
- Initial support for HFSC queueing, pf(4)-style. +
- Back out recent 'X looks like a package' stuff. +
- Merge in expat-1.95.4 from XFree86-current. +
- Fix long delays when detecting ATAPI devices. + +
- sudo(8)'s Makefile now honours the LDSTATIC flag. +
- Move queue ID assignment into the kernel and away from pfctl(8), solving a bunch of problems. + +
- Back out the earlier fix for PR#2230, which is a no-op since zombies aren't on the allproc list being scanned. +
- De-allocate bus space on wi(4) device failures. +
- Only print the less(1) -d prompt if there's enough space left on the status line (PR#3189.) + +
- When fixing up process root and working directories after a filesystem mount, leave zombies well alone. (PR#2230.) +
- Fix an off-by-one in kernel malloc(9) diagnostic code. +
- Correctly initialise xkb memory in the X server. +
- Plug some file descriptor leaks in xman(1) (PR#3186.) +
- Fix a broken sizeof() in gcc(1) when allocating a new sentinel_info. +
- Demote the isakmpd(8) 'missing CRL dir' moan to a debug message. +
- The kernel pf_state structure now points to both a rule and an anchor, so states created on anchors can use rule options properly. +
- Create the /etc/isakmpd/crls directory from 4.4BSD.dist to stop isakmpd(8) complaining about its absence. +
- Strip trailing whitespace before parsing ssh(1) options (OpenSSH bug 528.) +
- Disable ssh(1)'s Kerberos IV support. + +
- Fix spamd(8)'s select(2) error handling. +
- mg(1) now remembers the previous 'M-x compile' command. +
- Add a missing free() in httpd(8)'s dbm processing. +
- More fixes to osiop(4). + +
- Change some old-style chown(8)s (user.group) to POSIX user:group style. +
- Fix a null deref in savecore(8). +
- Add some missing NetBSD copyright information to ftp(1). +
- Make ktutil(8) work properly over the network. +
- Improvements to string handling (not str[ln]* for once) in adventure(6). +
- Add fake package information so ports can check for XF4 installation. +
- Use ksh(1) instead of csh(1) for XFree distrib scripts. +
- Make pfctl(8) reject invalid ICMP types (>40) and codes (>255.) +
- Fix a typo in the new ssh(1) rekeying code that was causing the wrong packet state counter to be fetched. + +
- Update sudo(8) to 1.6.7p3. +
- Handle buffer length for strlcpy(3) properly in kvm_mkdb(8). +
- Many fixes to osiop(4). +
- Improve (as part of string function fixes) sort(1)'s handling of old-style + and - format specifiers. + +
- Don't treat disklabel fields d_packname and d_typename as null-terminated fields when they're not. +
- Fix a bounds-check off-by-one in lam(1). +
- Simplify pfctl(8)'s parsing of CIDR masks. +
- Add 'queue foo on $i_bar' syntax to allow pf(4) queue specs to apply only to specified interfaces. +
- Add 230400 to the list of speeds supported by termios under compat_linux(8). +
- Use the default rule when a packet passes due to the implicit 'pass all' at the top of the rulebase, eliminating many NULL tests. +
- Add a `default' pf(4) rule and use it to store the default timeouts. +
- Add some shared library version updates missed in the XFree86 4.3.0 merge. + +
- Many string function fixes all over the tree. +
- Fix a bad bounds check in OpenSSL's ASN.1 parser. + +
- Back out the earlier realloc() change to tcpdump(8). +
- Update sectok_fmt_fid(3) to take a string length parameter, and crank libsectok's major version for the new API. +
- With the XFree86 4.3.0 merge, add an additional definition so that ports libs end up in /usr/local/lib/X11. +
- Update sudo(8) to 1.6.7p2. +
- Fix user(8)'s empty group test (PR#3178.) +
- Improve PRIQ queue id assignment, so same-priority queues on different interfaces work properly. + +
- Use realloc(3) instead of leaking memory in tcpdump(8). +
- Some cleanup in ipcomp(4) and ipsec(4). +
- Add a missing initialisation in ssh(1) (OpenSSH bug #526.) +
- When an interface doesn't support altq(4), have pfctl(8) print the interface name in the error message. +
- Add automatic ssh(1) rekeying in accordance with the current secsh newmodes draft, and fix some rekeying bugs. + +
- Fix kqueue(2) notification of immediate-mode bpf(4) events (PR#3175.) +
- Merge in XFree86 4.3.0. +
- Update sudo(8) to version 1.6.7p1, to fix some overzealous paranoia. +
- Bump OpenSSH version to 3.6.1.
+ [Applied to stable] + + - Fix an mbuf leak in icmp6. +
- Have ftp(1) treat empty environment variables as if they were unset. +
- Fix some use-after-FREE when handling crypto errors in ipcomp(4) and ipsec(4). +
- Add a missing splx() in ipcomp(4). +
- Clean up and additional paranoia in setusercontext(3). +
- Only remove a kernel pf(4) rule structure when no states refer to it. + +
- Helpfully, allow netinet/tcp_debug.c to compile when TCP_DEBUG is defined. +
- Fix ahc(4)'s probe of dual-channel 7899 cards. +
- Use snprintf to construct device names in the kernel, instead of hand-rolling. +
- Give a more consistent message when passwd(1) is aborted one way or another by the user. +
- Begin the process of eradicating the remaining strcpy, sprintf, and strcat calls from the tree. + +
- Fix logging bustage in spamd(8). +
- Update sendmail(8) to 8.12.9 to fix a buffer overflow in address parsing. Note that this fix went onto the OpenBSD 3.3 CDs and so is not a 3.3 erratum.
- More fixes to iha(4).
- Stop pmdb dumping core on stripped executables.
***************
*** 106,112 ****
www@openbsd.org
!
$OpenBSD: plus.html,v 1.870 2003/03/30 17:50:35 deraadt Exp $