www/plus.html - diff

Return to plus.html CVS log

Up to [local] / www

Diff for /www/plus.html between version 1.715 and 1.716

-version 1.715, 2001/01/23 04:18:24
+version 1.716, 2001/01/23 16:04:40
 Line 4
 Line 4
 Line 4
  <title>OpenBSD-current changes</title>
  <link rev=made href=mailto:www@openbsd.org>
  <meta name="resource-type" content="document">
- <meta name="description" content="the main OpenBSD page">
+ <meta name="description" content="OpenBSD-current changes">
- <meta name="keywords" content="openbsd,main">
+ <meta name="keywords" content="openbsd,current,changes">
  <meta name="distribution" content="global">
- <meta name="copyright" content="This document copyright 1996 by OpenBSD.">
+ <meta name="copyright" content="This document copyright 1996-2001 by OpenBSD.">
  </head>
  <BODY BGCOLOR="#FFFFFF" TEXT="#000000" LINK="#23238E">
 Line 47
 Line 47
 Line 47
  <li><font color=#e00000><strong>SECURITY FIX: The <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rnd&sektion=4">rnd(4)</a> device does not use all of its input when data is written to it.</strong></font><br>
      <a href="errata.html#rnd">A patch is available</a></strong></font>.<br>
      <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
- <li><font color=#e00000><strong>IMPLEMENTATION FIX: PS/2 mouse driver, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pms&sektion=4&arch=i386">pms</a>, lockup fix.</strong></font><br>
+ <li>Fix sprintf overflow in
-     <a href="errata.html#pms">A patch is available</a></strong></font>.<br>
+ <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fsinfo&sektion=8">fsinfo(8)</a>.
-     <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
+ <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fdisk&sektion=8">fdisk(8)</a>
- <li>Fix setting of nwid for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wi&sektion=4">wi(4)</a>.<br>
+ can change only the partition ID if desired.
-     <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
+ <li>Use gif* instead of enc* for IPsec bridges.
+ <li>Permit multiple
+ <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhclient&sektion=8">dhclient(8)</a>s
+ to run simultaniously.
+ <li>Have rc initialize RAID parity.
+ <li>Let <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=talk&sektion=1">talk(1)</a>
+ pass high characters without escaping; for use with other charsets (disabled by default).
+ <li>Prevent <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mountd&sektion=8">mountd(8)</a>
+ from deadlocking due to DNS issues.
+ <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ftpd&sektion=8">ftpd(8)</a>
+ logs actual bytes transfered as opposed to original file size.
+ <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fsck_ffs&sektion=8">fsck_ffs(8)</a>
+ no longer marks filesystem clean if fsck needs to be rerun.
+ <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhclient&sektion=8">dhclient(8)</a>
+ gracefuly handles missing LEASE_TIME.
+ <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=gprof&sektion=1">gprof(1)</a>
+ now works under mvme88k.
+ <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>
+ option: HostKeyAlias.  Other minor ssh(d) fixes.
+ <li>Make the
+ <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=auvia&sektion=4">auvia(4)</a>
+ driver behave nicely with fixed rate codecs.
+ <li>Revoke root priveleges as early as possible in
+ <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ping6&sektion=8">ping6(8)</a>.
+ <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=edquota&sektion=8">edquota(8)</a>
+ and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=repquota&sektion=8">repquota(8)</a>
+ handle quotas over 4 gigabytes correctly.
+ <li>SSH cleanups.
+ <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ksh&sektion=1">ksh(1)</a>,
+ don't reset nonblock if it's not interactive.
+ <!-- 2000/12/19 12:20:24 -->
  <li><font color=#e00000><strong>SECURITY FIX: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xlock&sektion=1">xlock</a> now authenticates via a pipe.</strong></font><br>
      <a href="errata.html#xlock">A patch is available</a></strong></font>.<br>
      <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
+ <!-- 2000/12/18 23:58:39 -->
+ <li><font color=#e00000><strong>IMPLEMENTATION FIX: PS/2 mouse driver, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pms&sektion=4&arch=i386">pms</a>, lockup fix.</strong></font><br>
+     <a href="errata.html#pms">A patch is available</a></strong></font>.<br>
+     <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
+ <li>Only invoke DMA transfers when transfering over 100 bytes for some drives.
+ <!-- 2000/12/18 11:44:28 -->
  <li><font color=#e00000><strong>SECURITY FIX: Fix holes in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mount_procfs&sektion=8">procfs</a>.</strong></font><br>
      <a href="errata.html#procfs">A patch is available</a></strong></font>.<br>
      <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
+ <!-- 2000/12/18 00:00:18 -->
+ <li>Fix setting of nwid for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wi&sektion=4">wi(4)</a>.<br>
+     <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
+ <li>Compaq SMART Array RAID controllers supported.
+ <li>New machdep.allowaperature sysctl value of &quot;2&quot; to provide access
+ to entire first megabyte of memory.
+ <li>Fixed some obscure PCMCIA related panics.
+ <li>Merged Apache 1.3.14 and mod_ssl 2.7.1.
+ <li>Add support for the Natsemi 83820.
+ <li>Fix /etc/sudoers permissions and initial creation handling.
+ <li>Merged openssl-engine-0.9.6.
+ <li>More <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=photurisd&sektion=8">photurisd(8)</a>
+ cleanup.
+ <li>Allow sys/netinet/ip_spd.c to compile in non-INET6 kernels.
+ <li>Synchronized pfkeyv2 implementation with pfkey RFC.
+ <!-- 2000/12/13 22:13:10 -->
  <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ipsec&sektion=4">ipsec(9)</a>, look for TDB if gateway is unspecified.<br>
      <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
+ <li>New CRYPTO option for
+ <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=options&sektion=4">options(4)</a>.
+ <li>Add bytecounter stats to
+ <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=netstat&sektion=1">netstat(1)</a>.
+ <li>New timeouts in some SCSI and RAID drivers.
+ <li>Strengthen random TCP sequence numbers.
+ <!-- ? 2000/12/13 01:34:05 ? -->
  <li><font color=#e00000><strong>IMPLEMENTATION FIX: Compute <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=crypto&sektion=9">crypto(9)</a> session IDs correctly for kernel.</strong></font><br>
      <a href="errata.html#hwcrypto">A patch is available</a></strong></font>.<br>
      <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
+ <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=8">ssh(8)</a>,
+ don't abort login when failing to set tty owner and mode if the tty already has
+ correct owner and permissions.
+ <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a>
+ no longer requires a source port &gt; 1024 for rhosts-rsa.
+ <li>New ICMP types and codes.
+ <li>Add support for the 802.1D spanning tree protocol for bridges.
+ <li>Add transport protocol/ports negotiation support to
+ <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a>,
+ among other IPsec changes from the EOM-branch merge.
+ <li>Turn off path MTU when ICMP needfrag messages are blocked.
+ <li>Big batch of Alpha drivers added to Alpha's GENERIC kernel.
+ <li>Don't let
+ <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=route&sektion=8">route(8)</a>
+ touch region after free.
+ <li>Removed libgmp.
+ <li>Make
+ <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=photurisd&sektion=8">photurisd(8)</a>
+ use bignum.
+ <!-- 2000/12/10 12:09:11 -->
  <li><font color=#e00000><strong>SECURITY FIX: Fix another security problem in the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=kerberos&sektion=1">KerberosIV</a> code.</strong></font><br>
      <a href="errata.html#kerberos2">A patch is available</a></strong></font>.<br>
      <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
- <li><font color=#e00000><strong>SECURITY FIX: Fix two security problems in the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=kerberos&sektion=1">KerberosIV</a> code.</strong></font><br>
+ <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>
-     <a href="errata.html#kerberos">A patch is available</a></strong></font>.<br>
+ when using skey/tis-auth always request new challenge.
-     <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
+ <li>Support newer cy cards in the
+ <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cy&sektion=4">cy(4)</a>
+ driver.
+ <li>New Swiss and jp106 keyboard maps.
+ <li>CVS_RSH is set to &quot;ssh&quot; by default in
+ <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cvs&sektion=1">cvs(1)</a>.
+ <li>Fix endianess issues in
+ <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>;
+ <li>Overhaul the
+ <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=adw&sektion=4">adw(4)</a>
+ driver.
+ <li>Add vrrp, smb, and timed printing to
+ <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcpdump&sektion=8">tcpdump(8)</a>.
+ <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=calendar&sektion=4">calendar(4)</a>
+ only accepts real files.
+ <li>Fix perror() calls in
+ <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pcvt&sektion=4">pcvt(4)</a>
+ that were buffer overflows.
+ <li>Avoid argv passing overflow in
+ <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tftp&sektion=1">tftp(1)</a>.
+ <li>Support I/O Data USB-ET/T USB ethernet in the
+ <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=kue&sektion=4">kue(4)</a>
+ driver.
+ <li>Fix (partially) the reset sequence for 16-bit PCMCIA cards.
+ <li>Extend paranoia surrounding passed KRB environment variables in
+ <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=telnet&sektion=1">telnet(1)</a>.
+ <li>Update the
+ <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isp&sektion=4">isp(4)</a>
+ driver adding maxluns support, among other things.
+ <li>PCI LIVENGOOD chipset support.
+ <li>Support the other 3com 990 series cards.
+ <li>libtermlib obsolete; removed.
+ <li>Fix RIPv0 (RFC 1058) and NFS port-number printing in
+ <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcpdump&sektion=8">tcpdump(8)</a>.
+ <li>Make pcap generated BPF filters work on the tun interface.
+ <li>Add
+ <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh-keyscan&sektion=1">ssh-keyscan(1)</a>
+ to the arsenal.
+ <!-- 2000/12/04 03:49:31 -->
  <li><font color=#e00000><strong>SECURITY FIX: Fix buffer overflow in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ftpd&sektion=8">ftpd</a>.</strong></font><br>
      <a href="errata.html#ftpd">A patch is available</a></strong></font>.<br>
      <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
+ <!-- 2000/12/03 12:56:21 -->
  <li><font color=#e00000><strong>IMPLEMENTATION FIX: Fix fastroute related panic.</strong></font><br>
      <a href="errata.html#fastroute">A patch is available</a></strong></font>.<br>
      <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
+ <!-- 2000/12/02 15:44:49 -->
+ <li><font color=#e00000><strong>SECURITY FIX: Fix two security problems in the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=kerberos&sektion=1">KerberosIV</a> code.</strong></font><br>
+     <a href="errata.html#kerberos">A patch is available</a></strong></font>.<br>
+     <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
+ <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ftpd&sektion=8">ftpd(8)</a>
+ can get umask via a login class in login.conf.
+ <li>VLAN devices stop sending packets if the parent interface isn't running.
+ <li>Stability fixes in
+ <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a>.
+ <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh-agent&sektion=1">ssh-agent(1)</a>
+ disables agent, x11, and port forwarding if hostkey has changed.
+ <li>Prevent
+ <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh-agent&sektion=1">ssh-agent(1)</a>
+ from dumping core.
+ <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a>'s
+ x509 handling ignores the ID length.
+ <li>Support hot insertion and removal of Texas Instruments PCI113X CardBus bridges.
+ <!-- 2000/11/26 18:41:05 -->
  <li>Fix deletion of flows in pf_key_v2 handling of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a><br>
      <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
+ <li>Avoid race conditition in
+ <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=adduser&sektion=8">adduser(8)</a>.
+ <li>Fix pciide on 164sx Alphas.
+ <li>Variable handling in
+ <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=make&sektion=1">make(1)</a>
+ improved, along with other fixes.
+ <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=makedev&sektion=8">MAKEDEV(8)</a>
+ enforces ttyC[0-f].
+ <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>
+ can gracefuly handle invalid ciphers.
+ <li>General <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a>
+ improvements, including PGPnet interoperability fixes.
+ <li>Bigger RAM probe delay in
+ <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=hifn&sektion=4">hifn(4)</a>
+ driver.
+ <li>Assorted
+ <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ksh&sektion=1">ksh(1)</a> fixes.
+ <li>Support for kernel events on vnodes.
+ <!-- 2000/11/20 23:44:04 -->
+ <li>fix CAST-128 key size in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a><br>
+     <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
+ <!-- 2000/11/20 19:03:45 -->
  <li><font color=#e00000><strong>IMPLEMENTATION FIX: Imac DV reports the VGA device improperly.</strong></font><br>
      <a href="errata.html#imacdv">A patch is available</a></strong></font>.<br>
      <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
- <li>fix CAST-128 key size in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a><br>
+ <li>Avoid SIGHUP log issue in
-     <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
+ <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ypserv&sektion=8">ypserv(8)</a>.
+ <li>Support kernel event queues via
+ <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=kqueue&sektion=2">kqueue(2)</a>.
+ <li>Support for quite a few more USB devices, including scanners.
  <li><font color=#e00000><strong>RELIABILITY FIX: The <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=qec&sektion=4&arch=sparc">qec</a>+<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=qe&sektion=4&arch=sparc">qe</a> ethernet cards should not generate NMIs.</strong></font><br>
      <a href="errata.html#qe">A patch is available</a></strong></font>.<br>
      <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
  <li>Repair overriding of pseudo devices in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=config&sektion=8">config(8)</a><br>
      <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
+ <li>Harden <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ftpd&sektion=8">ftpd(8)</a>'s
+ EPSV and EPRT handling.
+ <li>Fix off-by-one error in
+ <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh-agent&sektion=1">ssh-agent(1)</a>.
  <li><font color=#e00000><strong>RELIABILITY FIX: repair AES (rijndael)
  kernel support.</strong></font><br>
      <a href="errata.html#rijndael">A patch is available</a></strong></font>.<br>
-Line 94
+Line 259
 Line 94
 Line 259
  <li><font color=#e00000><strong>IMPLEMENTATION FIX: In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a>, fix skey support in SSH1 protocol.<br>
      <a href="errata.html#sshskey">A patch is available</a></strong></font>.<br>
      <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
+ <li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ifconfig&sektion=8">ifconfig(8)</a>
+ induced panic when given a specific IPv6 option combination.
  <li><font color=#e00000><strong>RELIABILITY FIX: The ThunderLAN driver, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tl&sektion=4">tl(4)</a>, should not claim all interrupts.</font><br>
      <a href="errata.html#tl">A patch is available</a></strong></font>.<br>
      <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>