www/plus.html - diff

Return to plus.html CVS log

Up to [local] / www

Diff for /www/plus.html between version 1.418 and 1.419

version 1.418, 1999/03/24 19:18:51

version 1.419, 1999/04/12 08:41:53

Line 42

<a href=#24>To go straight to the changes up to OpenBSD 2.4, click here</a>.

<a href=#25>To go straight to the changes up to OpenBSD 2.5, click here</a>.

</h3>

<hr>

<h3>We are working on what will become 2.5...</h3>

<h3>OpenBSD 2.5 will soon be released (May 19, 1999).</h3>

<ul>

<li>Add a -q flag to newfs, so that it does not print out information about the superblock backups. This is used by the install process.

<li>Do not permit any IPSEC code unless theadmin has enabled it using sysctl.

<li>More ISAPNP devices.

<li>Do not permit local address spoofing using ip4.

<li>Do not permit ip4 tunneling unless the admin has enabled it using sysctl.

<li>More man page and games fixes.

<li>Significant improvements to disklabel(8) and the install procedure.

<li>For CD support, if READ_CD_CAPACITY fails as it does on some units, provide nice defaults so that other things do not fail later.

<li>Rearrange default interrupt ordering for pcmcia somewhat more.

<li>Improve multicast handling in /etc/rc.

<li>Silence initgroups(3), it should not spew to stderr on failure.

<li>sudo 1.5.9

<li>Numerous ipsec changes, further making isakmpd useful, etc. etc.

<li>Support hostname.bridge* files.

<li>Support some 100Mbit ne2000-like pcmcia cards.

<li>Further Qlogic ISP support for PCI and sbus versions..

<li>Add ssl log rotation to newsyslog.conf

<li>In sun4m trap handler stubs, rd %wim which makes viking cpus much happier.

<li>lifetime expiration notifications for the IPSEC stack.

<li>PF_KEYv2 support in isakmpd(8).

Line 62

Line 82

<li>Workaround sun4m STP1020A errata #148494 regarding cache initialization.

<li>In ipsend(8), do not crash if no options provided.

<li>Various powerpc fixes, including further PIC support, and fix a kernel pmap crash.

<li>SECURITY ISSUE: In poll(2), constrain the nfds parameter better, so that kvm starvation is less likely. <a href=errata.html#poll>A patch is available</a>.

<li>SECURITY ISSUE: In poll(2), constrain the nfds parameter better, so that kvm starvation is less likely. <a href=errata24.html#poll>A patch is available</a>.

<li>Make at(1) easier to use next year (ie. Y2K issue).

<li>SECURITY ISSUE: Fix TSS fault handling. <a href=errata.html#tss>A patch is available</a>.

<li>SECURITY ISSUE: Fix TSS fault handling. <a href=errata24.html#tss>A patch is available</a>.

<li>In the ncr(4) driver, disable tagged queuing by default. Our filesystems and vfs layer is not prepared for this play-it-loose behaviour.

<li>Repair ypwhich -h support; it was broken when running on non-server machines.

<li>Add non-learning and non-discovery modes to the bridging code.

Line 171

Line 191

<li>Move ls(1) into ftpd(8).. directly.

<li>In setproctitle(3), if sysctl(2) fails do not crash.

<li>Constify getcap(3) API.

<li>For the i386, fix /boot argument mapping. <a href=errata.html#bootargv>A patch is available</a>.

<li>For the i386, fix /boot argument mapping. <a href=errata24.html#bootargv>A patch is available</a>.

<li>Put skipjack in libc.

<li>Continue squishing new bugs in new ipsec PF_KEY code...

<li>Fix autosetting of d_type and _dtypename in wd(4).

<li>SECURITY ISSUE: Fix the nlink overflow in FFS and EXT2FS. <a href=errata.html#nlink>A patch is available</a>.

<li>SECURITY ISSUE: Fix the nlink overflow in FFS and EXT2FS. <a href=errata24.html#nlink>A patch is available</a>.

<li>Add zegrep(1) and zfgrep(1).

<li>Change IPSEC stack to support PFKEYv2.

<li>PentiumIII detection.

Line 190

Line 210

<li>Better promisc and multicast handling in sparc hme(4).

<li>Fix an rdist(8) bug.

<li>Handle powered-down xl(4) cards better.

<li>SECURITY ISSUE: Fix an overflow in ping(8). <a href=errata.html#ping>A patch is available</a>.

<li>SECURITY ISSUE: Fix an overflow in ping(8). <a href=errata24.html#ping>A patch is available</a>.

<li>In fork(2), always spare 5 last processes for root.

<li>Better vis(3) support in savecore(8).

<li>Quiet apm(4) and add machdep.apmwarn sysctl.

Line 200

Line 220

<li>Add -x, -p, and -m options to ls(1).

<li>In ld(1) and ld.so(1), do not optimize the search path when dealing with duplicate shared library names (even though both alternatives have problems).

<li>Fix an kernel ipf bug relating to out-going icmp.

<li>SECURITY ISSUE: Fix an ipq race in ipintr(). <a href=errata.html#ipqrace>A patch is available</a>, which must be applied after the <a href=errata.html#maxqueue>maxqueue patch</a> has been installed.

<li>SECURITY ISSUE: Fix an ipq race in ipintr(). <a href=errata24.html#ipqrace>A patch is available</a>, which must be applied after the <a href=errata24.html#maxqueue>maxqueue patch</a> has been installed.

<li>Allocate u-area early in fork1(), instead of vm_fork().

<li>Fix msdosfs bug regarding corrupted FAT32 root directories.

<li>Improve vfs lkm interface.

Line 209

Line 229

<li>Fix DES weak key checking in libdes (and netinet/libdeslite).

<li>Improve the ipsec(4) man page.

<li>Fix netstat -A header.

<li>SECURITY ISSUE: Improved fragment flood protection in the IP layer. <a href=errata.html#maxqueue>A patch is available</a>.

<li>SECURITY ISSUE: Improved fragment flood protection in the IP layer. <a href=errata24.html#maxqueue>A patch is available</a>.

<li>IPSEC skipjack support (do not bother using this unless you are .gov or .mil).

<li>Check sub-regions better in subr_extent.c, which affects pcmcia.

<li>Add -f option to comm(1) for case folding.

Line 225

Line 245

<li>Merge changes from db.1.86 (but do not merge new hash code, since it has an incompatible format)

<li>Handle kernel malloc() failing, for TCP SACK block allocation.

<li>Do more careful system call range-checking and introduce socklen_t.

<li>Fix a bug we introduced before 2.4 shipped: readv(2) and writev(2) with iov_len == 0 is legal. <a href=errata.html#uio>A patch is available</a>.

<li>Fix a bug we introduced before 2.4 shipped: readv(2) and writev(2) with iov_len == 0 is legal. <a href=errata24.html#uio>A patch is available</a>.

<li>Fix a pcmcia mapping bug regarding address space allocation.

<li>For wds(4) and ex(4) drivers, unmap address space if probing fails.

<li>In ipsecadm(8), verify that keys and IVs are specified in hex.

<li>Document that MD4 is pretty much broken, and MD5 is looking pretty bad too (so much for quality designs from RSA).

<li>SECURITY ISSUE: i386 T_TRCTRAP DDB handling could cause a system crash. <a href=errata.html#trctrap>A patch is available</a>.

<li>SECURITY ISSUE: i386 T_TRCTRAP DDB handling could cause a system crash. <a href=errata24.html#trctrap>A patch is available</a>.

<li>tcpdump(8) out-of-range access in LLC decoding.

<li>Flesh out the vpn(8) manpage.

<li>Add old dbm-compatible interface code, from db-1.86

Line 242

Line 262

<li>ncurses-4.2-990206

<li>Correct various freebsd/linux emulation issues.

<li>Correct directory entry reads for numerous binary emulators.

<li>SECURITY ISSUE: Better RST handling in tcp input. <a href=errata.html#rst>A patch is available</a>.

<li>SECURITY ISSUE: Better RST handling in tcp input. <a href=errata24.html#rst>A patch is available</a>.

<li>BeOS/i386 support in fdisk(8).

<li>Two more nop instructions in sparc locore.s for greater reliability on Viking CPUs.

<li>Pluralization fix in rup(1).

Line 253

Line 273

<li>Handle MNT_NODEV in nullfs.

<li>Correct a tcp ISS bug.

<li>Support sparc bootpath handling in qe(4) and be(4).

<li>hp300 X in the 2.4 release has an installation issue. <a href=errata.html#hp300X>Further details available</a>.

<li>hp300 X in the 2.4 release has an installation issue. <a href=errata24.html#hp300X>Further details available</a>.

<li>Fix isa_check_intr() support on the alpha.

<li>Fix breaking support in fold -s.

<li>Improve long line support in hexdump(1).

Line 290

Line 310

<li>Add -b flag to install(1).

<li>For the bootblocks, fix error returns when running in decompressing mode.

<li>Disable i386 bootblocks E801 memory probing test.

<li>SECURITY ISSUE: Fix a select(2)/accept(2) race condition. <a href=errata.html#accept>A patch is available</a>.

<li>SECURITY ISSUE: Fix a select(2)/accept(2) race condition. <a href=errata24.html#accept>A patch is available</a>.

<li>Support & username expansion in sendbug, and fix the /tmp race.

<li>Avoid a sendmail DOS regarding huge numbers of header lines.

<li>rmdir(".") now returns EBUSY, as XPG2 says.

Line 309

Line 329

<li>Fix a varargs related bug in patch(1).

<li>MNT_NOATIME support in msdosfs.

<li>VIA Rhine ethernet driver.

<li>Fix an nfs v3 bug when talking to the pedantic solaris7 server. <a href=errata.html#nfs3_solaris7>A patch is available</a>.

<li>Fix an nfs v3 bug when talking to the pedantic solaris7 server. <a href=errata24.html#nfs3_solaris7>A patch is available</a>.

<li>Merge other fixes from ksh 5.2.13.6

<li>Add RFNOWAIT support to rfork(2).

<li>Careful strtol() use in make(1).

Line 348

Line 368

<li>Correct nested ip_sum in icmp packets.

<li>Correct the values of ip_len, ip_off, ip_id, and udp uh_sum fields for the embedded ip packet inside an icmp packet. (ip_sum is still wrong.)

<li>More locking fixes in the vfs layer.

<li>Fix df(1) on NFS v3 filesystems. <a href=errata.html#nfs3>A source code patch is available which solves this problem</a>.

<li>Fix df(1) on NFS v3 filesystems. <a href=errata24.html#nfs3>A source code patch is available which solves this problem</a>.

<li>Crank PID_MAX to 65535.

<li>Do better pcmcia interrupt allocation.

<li>Make ip_id non-repeating random, like DNS id's.

Line 362

Line 382

<li>Newer version of isakmpd.

<li>In kgmon(8), let libkvm decide the default kernel name.

<li>Repeat open operations in cdio, in case of slow changers.

<li>SECURITY ISSUE: Even more bootpd paranoia. Updated patches are available for <a href=errata23.html#bootpd>2.3</a> and <a href=errata.html#bootpd>2.4</a>.

<li>SECURITY ISSUE: Even more bootpd paranoia. Updated patches are available for <a href=errata23.html#bootpd>2.3</a> and <a href=errata24.html#bootpd>2.4</a>.

<li>Make sa(8) 64bit clean.

<li>In install(1), handle sparse files the same way pax(1) does.

<li>Replace raw termcap/terminfo databases with new ones based on a common and shared termtypes database. <a href=errata.html#terminfo>Since these databases had problems in the 2.4 release, updated versions are available</a>.

<li>Replace raw termcap/terminfo databases with new ones based on a common and shared termtypes database. <a href=errata24.html#terminfo>Since these databases had problems in the 2.4 release, updated versions are available</a>.

<li>Permit csh(1)-builtin printf function to have arguments.

<li>Fix a display problem in hexdump(1).

<li>Fix an i386 installboot bug which prevents proper installation when the root partition (or the root partition end) are placed BEYOND the 4GB line. <a href=errata.html#installboot>A source code patch is available which solves this problem</a>.

<li>Fix an i386 installboot bug which prevents proper installation when the root partition (or the root partition end) are placed BEYOND the 4GB line. <a href=errata24.html#installboot>A source code patch is available which solves this problem</a>.

<li>Flesh mktemp(3) manpage out significantly.

<li>Working <a href=mvme88k.html>mvme88k</a> port.

<li>For IPHDRINCL, check ip_hl for validity, too.

Line 394

Line 414

<li>Make -ltermcap be -lcurses; and -lotermcap be -locurses, via links.

<li>For kerberosIV, install prot.h (some things require it).

<li>XFree86 3.3.3

<li>SECURITY ISSUE: Fix a remote exploit problem in bootpd (which noone runs anyways, without filtering, right?). This fixes a security problem. Patches are available for <a href=errata23.html#bootpd>2.3</a> and <a href=errata.html#bootpd>2.4</a>.

<li>In cut(1), avoid an infinite loop.

<li>In top(1), skip disabled swap spaces.

<li>Even more man page fixes courtesy of our local man page repair fanatic.

Line 426

Line 446

<li>Fix a crash of ksh(1).

<li>Ignore out-of-range environment LINES and COLUMNS in libocurses.

<li>In libcurses in the issetugid(2) case, ignore $TERMINFO.

<li>SECURITY ISSUE: In libocurses and libcurses in the issetugid(2) case, only ignore $TERMCAP if it is a path. <a href=errata.html#termcap>A patch is available</a>.

<li>SECURITY ISSUE: In libocurses and libcurses in the issetugid(2) case, only ignore $TERMCAP if it is a path. <a href=errata24.html#termcap>A patch is available</a>.

<li>Support full set of pty devices in the MAKEDEV scripts.

<li>Make rl(4) match the Accton 1207D cards too.

<li>Prototype getpgid(2)

Line 448

Line 468

<li>Fix an expression handling bug in as(1).

<li>Improve setregid() and setreuid() emulated behaviour.

<li>ftok() is now XPG compliant.

<li>Put userdir support back into httpd(8). <a href=errata.html#userdir>A patch is available</a>.

<li>Put userdir support back into httpd(8). <a href=errata24.html#userdir>A patch is available</a>.

<li>Put userdir support back into httpd(8).

<li>New daemon: isakmpd (ISAKMP/Oakley ipsec daemon).

<li>Move /tmp/bootpd.dump to /var/run to avoid filesystem race.

<li>Fix some manpages

<li>sudo 1.5.6p6

<li>Fix a remote lockup problem in the TCP packet decoding code. This fixes a security problem. Patches are available for <a href=errata23.html#tcpfix>2.3</a> and <a href=errata.html#tcpfix>2.4</a>.

<li>Fix a deadlock in deadfs VOP_LOCK().

<li>Support -p option in ipmon(8).

<li>Change bpf to support full frame-grabbing for FDDI packets.

Line 485

Line 505

<li>Use correct ioctl for flushing in ipmon(8).

<li>Fix various tcp options bugs.

<li>Fix tcp timestamps.

<li>Repair sparc kvm dump header problem. <a href=errata.html#kvm_mkdb>A patch is available</a>.

<li>Repair sparc kvm dump header problem. <a href=errata24.html#kvm_mkdb>A patch is available</a>.

<li>More carefully check /etc/hostname.* file contents before using it.

<li>Fix mktemp() problems in lynx(1).

Line 524

Line 544

<li>In i386 wd(4) driver, set d_type properly in spoofed labels.

<li>Import learn(1) -- but still disabled.

<li>Add file:// support to ftp(1).

<li>The sparc hme(4) and le(4) drivers had bugs in the 2.4 release. <a href=errata.html#hme>Patches are available</a>.

<li>The sparc hme(4) and le(4) drivers had bugs in the 2.4 release. <a href=errata24.html#hme>Patches are available</a>.

<li>Fix media negotiation in the SS5/10 le(4) driver.

<li>Fix mail(1) to deal with the changed lockspool(1) protocol.

<li>In lockspool(1), permit root to lock other spools.