version 1.720, 2001/02/01 02:56:09 |
version 1.721, 2001/02/10 09:09:05 |
|
|
<li><font color=#e00000><strong>SECURITY FIX: fix some buffer overflows in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=named&sektion=8">named</a>.</strong></font><br> |
<li><font color=#e00000><strong>SECURITY FIX: fix some buffer overflows in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=named&sektion=8">named</a>.</strong></font><br> |
<a href="errata.html#named">A patch is available</a></strong></font>.<br> |
<a href="errata.html#named">A patch is available</a></strong></font>.<br> |
<a href="stable.html"><font color=#00b000>[Applied to stable]</font></a> |
<a href="stable.html"><font color=#00b000>[Applied to stable]</font></a> |
<li><font color=#e00000><strong>SECURITY FIX: The <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=random&sektion=4">rnd</a> device does not use all of its input when data is written to it.</strong></font><br> |
<li><font color=#e00000><strong>SECURITY FIX: The <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=random&sektion=4">rnd(4)</a> device does not use all of its input when data is written to it.</strong></font><br> |
<a href="errata.html#rnd">A patch is available</a></strong></font>.<br> |
<a href="errata.html#rnd">A patch is available</a></strong></font>.<br> |
<a href="stable.html"><font color=#00b000>[Applied to stable]</font></a> |
<a href="stable.html"><font color=#00b000>[Applied to stable]</font></a> |
<li>Fix sprintf overflow in |
<li><font color=#e00000><strong>IMPLEMENTATION FIX: Compute <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=crypto&sektion=9">crypto(9)</a> session IDs correctly for kernel.</strong></font><br> |
<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fsinfo&sektion=8">fsinfo(8)</a>. |
<a href="errata.html#hwcrypto">A patch is available</a></strong></font>.<br> |
<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fdisk&sektion=8">fdisk(8)</a> |
<a href="stable.html"><font color=#00b000>[Applied to stable]</font></a> |
can change only the partition ID if desired. |
<li>Change bridge(4) to use gif* instead of enc*. |
<li>Use gif* instead of enc* for IPsec bridges. |
<li>Set SO_REUSEPORT socket option in DHCP code, so multiple dhclients work. |
<li>Permit multiple |
<li>Allow printing of 8-bit ASCII characters in talk(1) through an option. |
<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhclient&sektion=8">dhclient(8)</a>s |
<li>Do not perform getnetbyname() in mountd(8) if the address is already in dot-notation. |
to run simultaneously. |
<li>In ftpd(8), log the actual number of bytes transferred instead of the original file size. |
<li>Have rc initialize RAID parity. |
<li>Fix ^C in termtype prompt. |
<li>Let <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=talk&sektion=1">talk(1)</a> |
<li>Prevent fsck_ffs(8) from marking a filesystem clean if fsck(8) needs to be rerun. |
pass high characters without escaping; for use with other charsets (disabled by default). |
<li>Resolve scheduling conflict in newsyslog(8). |
<li>Prevent <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mountd&sektion=8">mountd(8)</a> |
<li>In dhclient(8), set a reasonable default lease time if the server does not provide one. |
from deadlocking due to DNS issues. |
<li>Suppress uninteresting PCI bus error messages in ahc(4). |
<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ftpd&sektion=8">ftpd(8)</a> |
<li>Add m88k support to gprof(1). |
logs actual bytes transferred as opposed to original file size. |
<li>Add HostKeyAlias option to ssh(1). |
<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fsck_ffs&sektion=8">fsck_ffs(8)</a> |
<li>Behave nicely with fixed-rate codecs in auvia(4). |
no longer marks filesystem clean if fsck needs to be rerun. |
<li>Fix a minor off-by-one error in gprof(1). |
<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhclient&sektion=8">dhclient(8)</a> |
<li>In the ports infrastructure, take the old non-fake code out-of-line. |
gracefuly handles missing LEASE_TIME. |
<li>Repair a disgusting rwhod(8) crash. |
<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=gprof&sektion=1">gprof(1)</a> |
<li>Fix buffer overflow in csh(1) builtin printf(1) implementation. |
now works under mvme88k. |
<li>Convert atoi(3) to strtoul(3) in top(1). |
<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> |
<li>Emulate Linux truncate64, stat64, lstat64, and fstat64 syscalls. |
option: HostKeyAlias. Other minor ssh(d) fixes. |
<li>Revoke root privileges earlier in ping6(8) and traceroute6(8). |
<li>Make the |
<li>Many man page fixes. |
<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=auvia&sektion=4">auvia(4)</a> |
<li>Use arc4random(3) in jot(1). |
driver behave nicely with fixed rate codecs. |
<li>Handle quotas over 4GB in edquota(8) and repquota(8). |
<li>Revoke root privileges as early as possible in |
<li>Fix IPv6 Path MTU Discovery. |
<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ping6&sektion=8">ping6(8)</a>. |
<li>Give up euid more carefully in mrinfo(8) and mtrace(8). |
<li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=edquota&sektion=8">edquota(8)</a> |
<li>Various OpenSSH fixes. |
and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=repquota&sektion=8">repquota(8)</a> |
<li>Add support for ActivCard, CRYPTOCard, and SNK-004 authentication for the BSD authentication framework. |
handle quotas over 4 gigabytes correctly. |
<li>In ksh(1), remain in non-blocking mode if the shell is not interactive. |
<li>SSH cleanups. |
|
<li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ksh&sektion=1">ksh(1)</a>, |
|
don't reset nonblock if it's not interactive. |
|
<!-- 2000/12/19 12:20:24 --> |
|
<li><font color=#e00000><strong>SECURITY FIX: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xlock&sektion=1">xlock</a> now authenticates via a pipe.</strong></font><br> |
<li><font color=#e00000><strong>SECURITY FIX: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xlock&sektion=1">xlock</a> now authenticates via a pipe.</strong></font><br> |
<a href="errata.html#xlock">A patch is available</a></strong></font>.<br> |
<a href="errata.html#xlock">A patch is available</a></strong></font>.<br> |
<a href="stable.html"><font color=#00b000>[Applied to stable]</font></a> |
<a href="stable.html"><font color=#00b000>[Applied to stable]</font></a> |
<!-- 2000/12/18 23:58:39 --> |
|
<li><font color=#e00000><strong>IMPLEMENTATION FIX: PS/2 mouse driver, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pms&sektion=4&arch=i386">pms</a>, lockup fix.</strong></font><br> |
<li><font color=#e00000><strong>IMPLEMENTATION FIX: PS/2 mouse driver, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pms&sektion=4&arch=i386">pms</a>, lockup fix.</strong></font><br> |
<a href="errata.html#pms">A patch is available</a></strong></font>.<br> |
<a href="errata.html#pms">A patch is available</a></strong></font>.<br> |
<a href="stable.html"><font color=#00b000>[Applied to stable]</font></a> |
<a href="stable.html"><font color=#00b000>[Applied to stable]</font></a> |
<li>Only invoke DMA transfers when transferring over 100 bytes for some drives. |
<li>Implement a workaround in atapiscsi(4) for buggy Toshiba drivers. |
<!-- 2000/12/18 11:44:28 --> |
|
<li><font color=#e00000><strong>SECURITY FIX: Fix holes in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mount_procfs&sektion=8">procfs</a>.</strong></font><br> |
<li><font color=#e00000><strong>SECURITY FIX: Fix holes in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mount_procfs&sektion=8">procfs</a>.</strong></font><br> |
<a href="errata.html#procfs">A patch is available</a></strong></font>.<br> |
<a href="errata.html#procfs">A patch is available</a></strong></font>.<br> |
<a href="stable.html"><font color=#00b000>[Applied to stable]</font></a> |
<a href="stable.html"><font color=#00b000>[Applied to stable]</font></a> |
<!-- 2000/12/18 00:00:18 --> |
<li>Put strlcat(3) and strlcpy(3) into libkern for kernel use. |
<li>Fix setting of nwid for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wi&sektion=4">wi(4)</a>.<br> |
<li>Fix setting of nwid for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wi&sektion=4">wi(4)</a>.<br> |
<a href="stable.html"><font color=#00b000>[Applied to stable]</font></a> |
<a href="stable.html"><font color=#00b000>[Applied to stable]</font></a> |
<li>Compaq SMART Array RAID controllers supported. |
<li>Change <b>/etc/security</b> to spit out unified diffs. |
<li>New machdep.allowaperature sysctl value of "2" to provide access |
<li>Add driver for Compaq SMART Array RAID controllers, cac(4). |
to entire first megabyte of memory. |
<li>Extend the i386 allowaperature sysctl to allow access to the whole 1st MB of memory. |
<li>Fixed some obscure PCMCIA related panics. |
<li>Add some more sanity checking to the PCMCIA code to fix some obscure panics. |
<li>Merged Apache 1.3.14 and mod_ssl 2.7.1. |
<li>Import Apache 1.3.14 + mod_ssl 2.7.1. |
<li>Add support for the Natsemi 83820. |
<li>Support multiple pfkeyv2 keying daemons. |
<li>Fix /etc/sudoers permissions and initial creation handling. |
<li>Compute diffie-hellman in parallel between server and client in OpenSSH. |
<li>Merged openssl-engine-0.9.6. |
<li>Support Amigas with more than 64MB of RAM. |
<li>More <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=photurisd&sektion=8">photurisd(8)</a> |
<li>Ensure <b>/etc/sudoers</b> is created with a proper secure mode. |
cleanup. |
<li>Import OpenSSL 0.9.6. |
<li>Allow sys/netinet/ip_spd.c to compile in non-INET6 kernels. |
<li>More photurisd(8) improvements. |
<li>Synchronized pfkeyv2 implementation with pfkey RFC. |
<li>Update kernel pfkeyv2 code for better conformance to the RFC. |
<!-- 2000/12/13 22:13:10 --> |
<li>Enable loading of ELF kernels for alpha. |
|
<li>Add extraction support for shell archives to the bsd.port.mk infrastructure. |
<li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ipsec&sektion=4">ipsec(9)</a>, look for TDB if gateway is unspecified.<br> |
<li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ipsec&sektion=4">ipsec(9)</a>, look for TDB if gateway is unspecified.<br> |
<a href="stable.html"><font color=#00b000>[Applied to stable]</font></a> |
<a href="stable.html"><font color=#00b000>[Applied to stable]</font></a> |
<li>New CRYPTO option for |
<li>Fixes to patch(1) <b>-f</b> and <b>-b</b>. |
<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=options&sektion=4">options(4)</a>. |
<li>Convert some more drivers to the new timeout(9) interface. |
<li>Add bytecounter stats to |
<li>Add bytecounter statistics reporting to netstat(8). |
<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=netstat&sektion=1">netstat(1)</a>. |
<li>Instrument more random TCP sequence numbers. |
<li>New timeouts in some SCSI and RAID drivers. |
<li>In sshd(8), permit logins with read-only root filesystems if the tty already has sane modes set. |
<li>Strengthen random TCP sequence numbers. |
<li>Source port < 1024 is no longer required for rhosts-rsa in sshd(8). |
<!-- ? 2000/12/13 01:34:05 ? --> |
<li>Remove dead code in hifn(4) driver. |
<li><font color=#e00000><strong>IMPLEMENTATION FIX: Compute <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=crypto&sektion=9">crypto(9)</a> session IDs correctly for kernel.</strong></font><br> |
<li>Proper getopt(3) usage in compress(1). |
<a href="errata.html#hwcrypto">A patch is available</a></strong></font>.<br> |
<li>Fix a time specification in last(1). |
<a href="stable.html"><font color=#00b000>[Applied to stable]</font></a> |
<li>Do not disable PMTU for established TCP connections unless there is data to send. |
<li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=8">ssh(8)</a>, |
<li>Add support for the 802.1D spanning tree protocol to bridge(4). |
don't abort login when failing to set tty owner and mode if the tty already has |
<li>New BSD authentication login scripts. |
correct owner and permissions. |
<li>Listen to pfkeyv2 acquire messages in photurisd(8), and setup SAs accordingly. |
<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a> |
<li>isakmpd(8) update. |
no longer requires a source port > 1024 for rhosts-rsa. |
<li>APM bug fix that helps a few laptops. |
<li>New ICMP types and codes. |
<li>Remove unnecessary code from photurisd(8) in preparation of new SPD framework. |
<li>Add support for the 802.1D spanning tree protocol for bridges. |
<li>Repair a memory leak in ICMPv6 code. |
<li>Add transport protocol/ports negotiation support to |
<li>Turn off PMTU when ICMP needfrag messages get blocked. |
<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a>, |
<li>Finnish updates for <b>inter.phone</b>. |
among other IPsec changes from the EOM-branch merge. |
<li>Display number of successful IPv6 PMTU changes in netstat(8) <b>-s</b> output. |
<li>Turn off path MTU when ICMP needfrag messages are blocked. |
<li>Do not re-print ETA on completion in scp(1) when copying 0-sized files. |
<li>Big batch of Alpha drivers added to Alpha's GENERIC kernel. |
<li>Validate ICMPv6 "too big" messages based on PCB. |
<li>Don't let |
<li>Do not use already-freed memory in route(8). |
<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=route&sektion=8">route(8)</a> |
<li>Avoid repeated <b>host controller halted</b> messages in uhci(4). |
touch region after free. |
<li>Remove unused libgmp. |
<li>Removed libgmp. |
<li>Import KerberosIV v1.0.4. |
<li>Make |
<li>Always request a new challenge for skey/tis-auth in ssh(1). |
<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=photurisd&sektion=8">photurisd(8)</a> |
<li>Support newer cy(4) communication cards. |
use bignum. |
<li>Provide new international keymaps for pcvt(4). |
<!-- 2000/12/10 12:09:11 --> |
<li>Ignore filesystems marked "xx" in the install scripts. |
<li><font color=#e00000><strong>SECURITY FIX: Fix another security problem in the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=kerberos&sektion=1">KerberosIV</a> code.</strong></font><br> |
<li>Document that pipe(2) is bidirectional, although this behavior is unportable. |
<a href="errata.html#kerberos2">A patch is available</a></strong></font>.<br> |
<li>Move the default cvs(1) connection protocol from rsh(1) to ssh(1). |
<a href="stable.html"><font color=#00b000>[Applied to stable]</font></a> |
<li>Remove a bogus memory free in getnetgrent(3). |
<li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> |
<li>Fix a buffer overflow in bad144(8). |
when using skey/tis-auth always request new challenge. |
<li>Revert back to the old rijndael implementation and solve byte ordering bugs there instead. |
<li>Support newer cy cards in the |
<li>Drop unneeded support for RTF_TUNNEL in route(8). |
<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cy&sektion=4">cy(4)</a> |
<li>Maintain count of routing table timer entries in route(8). |
driver. |
<li>In makewhatis(8), strip weird characters first, then sequences of spaces. |
<li>New Swiss and jp106 keyboard maps. |
<li>Big improvements to adw(4). |
<li>CVS_RSH is set to "ssh" by default in |
<li>Teach tcpdump(8) about VRRP, SMB, and timed. |
<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cvs&sektion=1">cvs(1)</a>. |
<li>Force calendar(1) to only accept real calendar files as input. |
<li>Fix endianess issues in |
<li>Fix various perror() overflows in pcvt(4). |
<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>; |
<li>Repair a tftp(1) argv parsing overflow. |
<li>Overhaul the |
<li>Conditionalize some BPF code in wx(4). |
<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=adw&sektion=4">adw(4)</a> |
<li>Finally remove remaining references to extra RSA libs, since the patent has expired. |
driver. |
<li>New rijndael implementation which solves endian issues. |
<li>Add vrrp, smb, and timed printing to |
<li>Support Intel 82801BA pciide(4) controllers. |
<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcpdump&sektion=8">tcpdump(8)</a>. |
<li>Exercise more paranoia with passed KRB environment settings in telnetd(8). |
<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=calendar&sektion=4">calendar(4)</a> |
<li>Convert some more drivers to the new timeout(9) interface. |
only accepts real files. |
<li>Many improvements and modernizations to isp(4). |
<li>Fix perror() calls in |
<li>Update wx(4) with LIVENGOOD support. |
<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pcvt&sektion=4">pcvt(4)</a> |
<li>Recognize and support the IODATA USB-ET/T Ethernet adapter in kue(4). |
that were buffer overflows. |
<li>Implement asynchronous connections for ssh(1) <b>-R</b> and <b>-L</b>. |
<li>Avoid argv passing overflow in |
<li>Simplify atrun(8) tasks by using asprintf(3). |
<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tftp&sektion=1">tftp(1)</a>. |
<li>Kill unused libtermlib. |
<li>Support I/O Data USB-ET/T USB ethernet in the |
<li>Import new pool(9) code. |
<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=kue&sektion=4">kue(4)</a> |
<li>Fix RIPv0 packet printing and NFS port number parsing in tcpdump(8). |
driver. |
<li>Make pcap-generated BPF filters work on the tun(4) interface. |
<li>Fix (partially) the reset sequence for 16-bit PCMCIA cards. |
<li>Import David Maziere's ssh-keyscan(1). |
<li>Extend paranoia surrounding passed KRB environment variables in |
|
<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=telnet&sektion=1">telnet(1)</a>. |
|
<li>Update the |
|
<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isp&sektion=4">isp(4)</a> |
|
driver adding maxluns support, among other things. |
|
<li>PCI LIVENGOOD chipset support. |
|
<li>libtermlib obsolete; removed. |
|
<li>Fix RIPv0 (RFC 1058) and NFS port-number printing in |
|
<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcpdump&sektion=8">tcpdump(8)</a>. |
|
<li>Make pcap generated BPF filters work on the tun interface. |
|
<li>Add |
|
<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh-keyscan&sektion=1">ssh-keyscan(1)</a> |
|
to the arsenal. |
|
<!-- 2000/12/04 03:49:31 --> |
|
<li><font color=#e00000><strong>SECURITY FIX: Fix buffer overflow in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ftpd&sektion=8">ftpd</a>.</strong></font><br> |
<li><font color=#e00000><strong>SECURITY FIX: Fix buffer overflow in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ftpd&sektion=8">ftpd</a>.</strong></font><br> |
<a href="errata.html#ftpd">A patch is available</a></strong></font>.<br> |
<a href="errata.html#ftpd">A patch is available</a></strong></font>.<br> |
<a href="stable.html"><font color=#00b000>[Applied to stable]</font></a> |
<a href="stable.html"><font color=#00b000>[Applied to stable]</font></a> |
<!-- 2000/12/03 12:56:21 --> |
|
<li><font color=#e00000><strong>IMPLEMENTATION FIX: Fix fastroute related panic.</strong></font><br> |
<li><font color=#e00000><strong>IMPLEMENTATION FIX: Fix fastroute related panic.</strong></font><br> |
<a href="errata.html#fastroute">A patch is available</a></strong></font>.<br> |
<a href="errata.html#fastroute">A patch is available</a></strong></font>.<br> |
<a href="stable.html"><font color=#00b000>[Applied to stable]</font></a> |
<a href="stable.html"><font color=#00b000>[Applied to stable]</font></a> |
<!-- 2000/12/02 15:44:49 --> |
<li>Teach OpenSSH about more version strings to improve interoperability. |
|
<li><font color=#e00000><strong>SECURITY FIX: Fix another security problem in the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=kerberos&sektion=1">KerberosIV</a> code.</strong></font><br> |
|
<a href="errata.html#kerberos2">A patch is available</a></strong></font>.<br> |
|
<a href="stable.html"><font color=#00b000>[Applied to stable]</font></a> |
<li><font color=#e00000><strong>SECURITY FIX: Fix two security problems in the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=kerberos&sektion=1">KerberosIV</a> code.</strong></font><br> |
<li><font color=#e00000><strong>SECURITY FIX: Fix two security problems in the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=kerberos&sektion=1">KerberosIV</a> code.</strong></font><br> |
<a href="errata.html#kerberos">A patch is available</a></strong></font>.<br> |
<a href="errata.html#kerberos">A patch is available</a></strong></font>.<br> |
<a href="stable.html"><font color=#00b000>[Applied to stable]</font></a> |
<a href="stable.html"><font color=#00b000>[Applied to stable]</font></a> |
<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ftpd&sektion=8">ftpd(8)</a> |
<li>Permit ftpd(8) umask setting via both the command line and through a login class in login.conf(5). |
can get umask via a login class in login.conf. |
<li>Prevent VLAN devices from emitting packets if the parent interface is not up and running. |
<li>VLAN devices stop sending packets if the parent interface isn't running. |
<li>Better error checking in ping6(8). |
<li>Stability fixes in |
<li>Some stability fixes to isakmpd(8). |
<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a>. |
<li>In ssh(1), disable agent/X11 port forwarding if the hostkey has changed. |
<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh-agent&sektion=1">ssh-agent(1)</a> |
<li>Fix a coredump in ssh-agent(1). |
disables agent, x11, and port forwarding if hostkey has changed. |
<li>Reset 16-bit PCMCIA during chip initialization in pccbb(4). |
<li>Prevent |
<li>Correct PCI interrupt setup for TI PCI113X CardBus bridges. |
<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh-agent&sektion=1">ssh-agent(1)</a> |
<li>Properly powerdown PC cards in pccbb(4) at shutdown time. |
from dumping core. |
<li>Add <b>-D</b> option to sshd(8) to cause startup without a daemon. |
<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a>'s |
<li>Show both the IP address and hostname when a new key is encountered in ssh(1). |
x509 handling ignores the ID length. |
<li>Fix a bug in MSChapv2 challenge hashing in ppp(8). |
<li>Support hot insertion and removal of Texas Instruments PCI113X CardBus bridges. |
<li>More make(1) tweaks. |
<!-- 2000/11/26 18:41:05 --> |
<li>Use <b>-n</b> to test for non-zero variables in <b>/etc/netstart</b>. |
|
<li>Be more careful with ARP packets. |
<li>Fix deletion of flows in pf_key_v2 handling of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a><br> |
<li>Fix deletion of flows in pf_key_v2 handling of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a><br> |
<a href="stable.html"><font color=#00b000>[Applied to stable]</font></a> |
<a href="stable.html"><font color=#00b000>[Applied to stable]</font></a> |
<li>Avoid race conditition in |
<li>Prevent setusercontext(3) in ftpd(8) from setting the umask as this conflicts with any command-line umask specification. |
<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=adduser&sektion=8">adduser(8)</a>. |
<li>Clock fixes for the alpha architecture. |
<li>Fix pciide on 164sx Alphas. |
<li>Print select collisions in vmstat(8) <b>-s</b> output. |
<li>Variable handling in |
<li>Implement login_check_expire(3) for libutil. |
<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=make&sektion=1">make(1)</a> |
<li>Add <b>-u username</b> support to pwd_mkdb(8). |
improved, along with other fixes. |
<li>Properly implement errno handling for the threaded libc (libc_r) on powerpc. |
<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=makedev&sektion=8">MAKEDEV(8)</a> |
<li>In adduser(8), get rid of a race condition and use <b>/etc/ptmp</b> as a lock file. |
enforces ttyC[0-f]. |
<li>Set reasonable defaults for RSA1, RSA, and DSA keys in ssh-keygen(1). |
<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> |
<li>Reorder check for illegal ciphers in ssh(1) protocol 1 connection code. |
can gracefuly handle invalid ciphers. |
<li>Fix pciide(4) support on Alpha 164SX models. |
<li>General <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a> |
<li>Support 16 slices per device on VAX machines. |
improvements, including PGPnet interoperability fixes. |
<li>Considerable cleanups to make(1). |
<li>Bigger RAM probe delay in |
<li>Improve key repeat logic in wskbd(4). |
<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=hifn&sektion=4">hifn(4)</a> |
<li>Changes from KAME to make ifm_data available in getifaddrs(3). |
driver. |
<li>Fix absolute path handling in crunchgen(1). |
<li>Assorted |
<li>Shorten <b>/dev/ttyC*</b> device names. |
<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ksh&sektion=1">ksh(1)</a> fixes. |
<li>Complain about invalid ciphers in ssh(1), falling back to reasonable defaults when necessary. |
<li>Support for kernel events on vnodes. |
<li>Avoid tty races in wsdisplay(4) when switching virtual terminals. |
<!-- 2000/11/20 23:44:04 --> |
<li>Update isakmpd(8). |
<li>fix CAST-128 key size in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a><br> |
<li>Repair lun support in umass(4). |
<a href="stable.html"><font color=#00b000>[Applied to stable]</font></a> |
<li>Zero pw_passwd before freeing its memory in the libc BSD authentication routines. |
<!-- 2000/11/20 19:03:45 --> |
<li>Train makewhatis(8) to handle more special cases. |
|
<li>Avoid double fclose(3) in getcap(3). |
|
<li>Increase delay in RAM probe for hifn(4). |
|
<li>Suffix list fix in make(1). |
|
<li>Various bug fixes in ksh(1). |
|
<li>When using the tail(1) <b>-f</b> flag on stdin, don't reopen a local file named stdin. |
|
<li>Extend kqueue(2) to support kernel events on vnodes. |
|
<li>Bring in BSD authentication support for sudo(8). |
|
<li>Zap MULOG in inetd(8) to improve code readability. |
|
<li>Avoid whacking errno in top(1) signal handlers. |
|
<li>Do not include MFS partitions in quot(8) statistics output. |
|
<li>Add support for the Acenic Copper and Netgear GA620T Gigabit Ethernet cards. |
|
<li>Prevent a type overflow in recno(3). |
<li><font color=#e00000><strong>IMPLEMENTATION FIX: Imac DV reports the VGA device improperly.</strong></font><br> |
<li><font color=#e00000><strong>IMPLEMENTATION FIX: Imac DV reports the VGA device improperly.</strong></font><br> |
<a href="errata.html#imacdv">A patch is available</a></strong></font>.<br> |
<a href="errata.html#imacdv">A patch is available</a></strong></font>.<br> |
<a href="stable.html"><font color=#00b000>[Applied to stable]</font></a> |
<a href="stable.html"><font color=#00b000>[Applied to stable]</font></a> |
<li>Avoid SIGHUP log issue in |
<li>Import BSD authentication mechanisms from BSDI BSD/OS. |
<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ypserv&sektion=8">ypserv(8)</a>. |
<li>Implement pw_dup(3), a function which copies <b>struct passwd</b>. |
<li>Support kernel event queues via |
<li>Replace getpass(3) with a more flexible readpassphrase(3) interface. |
<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=kqueue&sektion=2">kqueue(2)</a>. |
<li>Add strnvis(3), a length-bounded version of the strvis(3) libc function. |
<li>Support for quite a few more USB devices, including scanners. |
<li>Better prompting logic in libskey. |
|
<li>Resurrect binutils on alpha. |
|
<li>Recognize newer Intel audio devices in auich(4). |
|
<li>Stop amphy(4) from attaching to network devices it doesn't belong to. |
|
<li>Enable support for pciide(4) found in newer Intel chipsets. |
|
<li>Correct URL handling in the install scripts. |
|
<li>Limit the number of SCSI luns in umass(4). |
|
<li>Page size fixes to the alpha port. |
|
<li>Import ssh-ask-pass support for X11. |
|
<li>Fix a signal race in ypserv(8) SIGHUP handling. |
|
<li>Enable uaudio(4) by default in GENERIC/i386. |
|
<li>Reserve all-1s addresses in the IPSec code for future policy discovery features. |
|
<li>Resolve HMAC nomenclautre issues. |
|
<li>Be sure to clear passwords out of memory after use in ppp(8). |
|
<li>Support kernel event queues. |
|
<li>Add support for USB scanners through the uscanner(4) driver. |
|
<li>More fixes to qec(4). |
|
<li>Recognize newer AMD CPUs. |
|
<li>Repair incorrect buffer size logic in telnetd(8). |
|
<li>Add a slew of devices to usbdevs. |
|
<li>Do not use perror(3) in sshd(8) after forking a child. |
<li><font color=#e00000><strong>RELIABILITY FIX: The <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=qec&sektion=4&arch=sparc">qec</a>+<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=qe&sektion=4&arch=sparc">qe</a> ethernet cards should not generate NMIs.</strong></font><br> |
<li><font color=#e00000><strong>RELIABILITY FIX: The <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=qec&sektion=4&arch=sparc">qec</a>+<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=qe&sektion=4&arch=sparc">qe</a> ethernet cards should not generate NMIs.</strong></font><br> |
<a href="errata.html#qe">A patch is available</a></strong></font>.<br> |
<a href="errata.html#qe">A patch is available</a></strong></font>.<br> |
<a href="stable.html"><font color=#00b000>[Applied to stable]</font></a> |
<a href="stable.html"><font color=#00b000>[Applied to stable]</font></a> |
|
<li>Add ifmedia(4) support to qec(4), among other improvements. |
|
<li>Extra sanity checking in skeyinit(1). |
|
<li>Repair timeout computations in atapiscsi(4). |
|
<li>Add initial support for DEC Alpha 21264 systems. |
|
<li>Bring the alpha port a bit closer to a fully operational console. |
|
<li>Support Accton EN2242 MiniPCI Ethernet adapters. |
|
<li>Permit O_RDWR on FIFOs to handle legacy applications that depend on it. |
|
<li>Add scrollback support to wscons(4) through the vga(4) driver. |
|
<li>Color change in wscons(4) vt100 emulation to more closely imitate PCVT. |
<li>Repair overriding of pseudo devices in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=config&sektion=8">config(8)</a><br> |
<li>Repair overriding of pseudo devices in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=config&sektion=8">config(8)</a><br> |
<a href="stable.html"><font color=#00b000>[Applied to stable]</font></a> |
<a href="stable.html"><font color=#00b000>[Applied to stable]</font></a> |
<li>Harden <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ftpd&sektion=8">ftpd(8)</a>'s |
<li>Accept <b>-inet</b> and <b>-inet6</b> as options for the <b>show</b> command in route(8). |
EPSV and EPRT handling. |
<li>Don't reorder keys in ssh-agent(1) upon key removal. |
<li>Fix off-by-one error in |
<li>Avoid parsing options in ssh(1) if there is an RSA key mismatch. |
<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh-agent&sektion=1">ssh-agent(1)</a>. |
<li>Various cleanups to ftpd(8). |
|
<li>In many programs, sync usage() output with their respective man page SYNOPSIS. |
|
<li><font color=#e00000><strong>RELIABILITY FIX: The ThunderLAN driver, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tl&sektion=4">tl(4)</a>, should not claim all interrupts.</font><br> |
|
<a href="errata.html#tl">A patch is available</a></strong></font>.<br> |
|
<a href="stable.html"><font color=#00b000>[Applied to stable]</font></a> |
|
<li>In pciide(4), do not map unsafe registers from controllers that require 16-bit I/O space. |
|
<li>Import new pckbc(4), pckbd(4), vga(4), pcdisplay(4), and ega(4) drivers for wscons(4). |
|
<li>In ftpd(8), assert check_login upon receipt of EPSV/LPSV. |
|
<li>Make the aha(4) driver compile without UVM. |
|
<li>Enforce non-cacheable device space on real 80386 machines. |
|
<li>Add RSA authentication support for SSH2 to OpenSSH. |
|
<li>Allow serial mice to work with moused(8) and XFree86 simultaneously. |
|
<li>Repair an off-by-one error in ssh-agent(1). |
|
<li>Convert some old drivers to the new timeout(9) interface. |
<li><font color=#e00000><strong>RELIABILITY FIX: repair AES (rijndael) |
<li><font color=#e00000><strong>RELIABILITY FIX: repair AES (rijndael) |
kernel support.</strong></font><br> |
kernel support.</strong></font><br> |
<a href="errata.html#rijndael">A patch is available</a></strong></font>.<br> |
<a href="errata.html#rijndael">A patch is available</a></strong></font>.<br> |
<a href="stable.html"><font color=#00b000>[Applied to stable]</font></a> |
<a href="stable.html"><font color=#00b000>[Applied to stable]</font></a> |
|
<li>Import PCI support for Alpha EB164 machines. |
|
<li>Add bus_space_barrier macros for the powerpc. |
|
<li>Endian fixes to the USB code. |
|
<li>Better command line parsing in encrypt(1). |
|
<li>Numbering fixups in pfkeyv2 to match IANA assignments. |
|
<li>Crank maximum mbuf size in ppp(8) in order to handle full-sized HDLC frames. |
|
<li>Improve handling of IPv6 Node Information Query packets for better specification conformance. |
|
<li>Fix a panic induced by assigning <b>lo0</b> an IPv6 alias. |
<li><font color=#e00000><strong>IMPLEMENTATION FIX: In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a>, fix skey support in SSH1 protocol.<br> |
<li><font color=#e00000><strong>IMPLEMENTATION FIX: In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a>, fix skey support in SSH1 protocol.<br> |
<a href="errata.html#sshskey">A patch is available</a></strong></font>.<br> |
<a href="errata.html#sshskey">A patch is available</a></strong></font>.<br> |
<a href="stable.html"><font color=#00b000>[Applied to stable]</font></a> |
<a href="stable.html"><font color=#00b000>[Applied to stable]</font></a> |
<li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ifconfig&sektion=8">ifconfig(8)</a> |
<li>Deprecate <b>pltime=0</b> in ifconfig(8). |
induced panic when given a specific IPv6 option combination. |
<li>Modifications to the ktrace(2) interface to reduce redundancy. |
<li><font color=#e00000><strong>RELIABILITY FIX: The ThunderLAN driver, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tl&sektion=4">tl(4)</a>, should not claim all interrupts.</font><br> |
<li>Do not advertise dynamic/cloned routes in route6d(8). |
<a href="errata.html#tl">A patch is available</a></strong></font>.<br> |
<li>Allow ping6(8) to send ICMP6 packets smaller than 8 bytes. |
<a href="stable.html"><font color=#00b000>[Applied to stable]</font></a> |
|
<li>Correct free-before-reference bugs in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rshd&sektion=8">rshd(8)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rlogind&sektion=8">rlogind(8)</a>. |
<li>Correct free-before-reference bugs in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rshd&sektion=8">rshd(8)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rlogind&sektion=8">rlogind(8)</a>. |
<li>Improve queue handling in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=gdt&sektion=4">gdt(4)</a>. |
<li>Improve queue handling in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=gdt&sektion=4">gdt(4)</a>. |
<li>New Adaptec FSA RAID driver called <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=aac&sektion=4">aac(4)</a>. |
<li>New Adaptec FSA RAID driver called <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=aac&sektion=4">aac(4)</a>. |