We are working on OpenBSD-current.
! The following list sums up (almost) all the changes made up to December 8.
-
+
+
- In patch(1), get a private mapping from mmap(2) instead of a default (file) mapping. +
- Fix a crash in troff(1). +
- Don't drop the newest TCP connection when doing SYN flood avoidance when we meant to drop the oldest. +
- In pf(4), make IPv6 redirects to loopback work the same way as for IPv4 and not require an additional route-to line. +
- Fix a too-low spl(9) in the nfs client code. +
- New ifconfig(8) option -C (and supporting ioctl(2) SIOCIFGCLONERS) that lists all cloning-capable devices. +
- New mbuf_tags(9) type ...PF_TRANSLATE_LOCALHOST, used so that pf(4) redirection to localhost doesn't defeat the ability of programs like portmap(8) to tell localhost connections from remote connections. + +
- Add cloning support to ppp(4) and sl(4). +
- Fix regex(3) handling of non-ASCII characters (PR#3594.) Fix from FreeBSD. + +
- Fix grep(1)'s handling of certain patterns containing multiple dots (PR#3597.) +
- Make ifconfig destroy work on tun(4). + +
- Fix an endianness bug that was causing wicontrol(8) to crash. +
- Set madvise(2) flag MADV_RANDOM for mfs(8) filesystems. + +
- Validate the SPIs presented in DELETE messages when doing an isakmpd(8) informational exchange. +
- Have the installer ask whether sshd(8) should be enabled at first boot. The default is to enable it. +
- Enable multicast reception for em(4). +
- Do a screen split when more than one file is opened on mg(1)'s command line. +
- Unbreak mg(1)'s META key support. + +
- Fix a sign comparison bug in semop(2). +
- Add cloning support to bridge(4), carp(4), faith(4), gif(4), gre(4), lo(4), tun(4) and vlan(4). +
- Support for interface 'cloning,' accessed by ifconfig(8) commands create and destroy. E.g. 'ifconfig vlan100 create' +
- Add a dmesg command to ddb(4). +
- Don't allow too many network interfaces (>65535) to be attached. +
- Merge Perl 5.8.2. + +
- Add an hppa target to gcc3. +
- Add support for UDP encapsulation of ESP in transport mode (see draft-ietf-ipsec-udp-encaps-XX.txt,) enabled via new sysctl(3) toggle net.inet.esp.udpencap. +
- Use a consistent, high listen backlog for sshd(8), ssh-agent(1) and forwarding sockets. +
- Fix an off-by-one in dc(1). +
- Cosmetic improvements to ssh(1)'s progress meter. +
- Let bc(1) compile programs with more than 10,000 lines. +
- Add support for long variable names to bc(1), another non-portable extension. +
- Add kqueue(2) support to tun(4). +
- Use now instead of the epoch as the timebase for compat_linux(8) function alarm(). +
- Avoid a null-deref in uvm_swap_markbad(). +
- Check signedness before dereferencing in kernel descriptor management code. + +
- Fix csh(1) variable substitution when shortening strings (PR#3591.) +
- In aliases(5), direct mail for most fake users (e.g. _syslogd) to /dev/null instead of spamming root. +
- Add an amd64 target to gcc3. +
- Add extended register support in dc(1) (-x option,) ready for long variable names support coming to bc(1) soon. +
- Cleanup of mopd(8). + + +
- Add OpenBSD-specific options to gcc3. +
- Import (but do not yet enable) GCC 3.3.2, without the ADA frontend for space reasons. +
- New ':' (inclusive range) operator for pf(4), works anywhere in pf.conf(5) that '><' (exclusive range) works. + +
- Fix the regex in security(8) that tests for valid group names. +
- More fixes to pf(4) stats gathering. +
- Fix NFS-over-TCP speed when OpenBSD is serving Linux clients (PR#3561.) + +
- Allow systrace(1) to accept usernames ending in '$'. +
- Fix missing printf(3) arguments in eeprom(8), elf2aout and elf2ecoff. + +
- Discard the first 256 bytes of the arc4random(3) keystream as recommended by the "Weaknesses in the Key Scheduling Algorithm of RC4" paper. +
- Fix a core dump in dc(1) when reading uninitialised array locations. +
- Some gcc3 compatibility cleanup. + +
- Fix SIOCGIFHWADDR under compat_linux(8). +
- Build more components of libiberty in preparation for gcc3. +
- Sync libiberty with the version from GCC 3.3.2. +
- Sync libedit with that of NetBSD on 8 Nov 2003. + +
- Move libiberty into src/gnu/lib/libiberty, removing it from the egcs directory. The new library is a sync'd to "somewhere between binutils-2.10 and 2.11" with some local changes. +
- Avoid a double-free in pcap_setfilter(3). +
- Have the kernel's MD5 code use the per-architecture optimised bcopy() instead of its own implementation (PR#3549.) +
- New meaning for the ssh(1) -k option, it's now equivalent to GSSAPIDelegateCredentials=no. + +
- In ssh-keyscan(1), use sysconf(3) to get the maximum fd limit instead of returning an arbitrary number. +
- Fix an out-of-bounds access typo in the implementation of sysctl(3) KERN_VNODE. +
- Another getpass(3) return value check, this time in encrypt(1). +
- Fix a sign overflow in compat_svr4(8) streams code. +
- Make usernames containing underscores work in systrace(1). + +
- While we're fixing diff(1) return values, fix that of the -q option which got broken when -i was fixed. +
- Stop the install(1) madvise() change breaking 'make release'. +
- Stop pfctl(8) allowing an antispoof for an interface without an IP address, since that amounts to blocking all on every other interface. Bad. +
- Add a few more pkg_create(1) packing list sanity checks.
- Also give cmp(1) and patch(1) the madvise(2) sequential treatment.
- Speed up install(1) by using madvise(2) with the MADV_SEQUENTIAL flag.
***************
*** 544,550 ****
www@openbsd.org
!
$OpenBSD: plus.html,v 1.894 2003/12/08 06:21:34 deraadt Exp $