www/plus.html - diff

Return to plus.html CVS log

Up to [local] / www

Diff for /www/plus.html between version 1.727 and 1.728

version 1.727, 2001/02/23 17:33:02

version 1.728, 2001/03/01 22:38:30

Line 2

<html>

<head>

<title>OpenBSD-current changes</title>

Line 10

</head>

<h2>Changes made between OpenBSD 2.8 and OpenBSD-current<hr></h2>

Line 20

This is a partial list of the major machine independent changes

(i.e., these are the changes people ask about most often). Port

specific changes have also been made, and are sometimes mentioned

in the pages for the specific <a href=plat.html>platforms</a>.

in the pages for the specific <a href="plat.html">platforms</a>.

Changes to the <a href="ports.html">ports</a> collection are documented

Line 48

<h3>We are working on OpenBSD-current.</h3>

<ul>

<li>SECURITY FIX: for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ipsec&sektion=4">ipsec</a>, handle AH packets with IP options more strictly.

<li>SECURITY FIX: for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ipsec&sektion=4">ipsec(4)</a>, handle AH packets with IP options more strictly.

<a href="stable.html">[Applied to stable]</a>

<li>SECURITY FIX: on i386, check arguments to USER_LDT (not enabled by default) mappings.

<a href="stable.html">[Applied to stable]</a>

Line 62

<li>IMPLEMENTATION FIX: fix port number computation in libwrap client side ident implementation.

<a href="errata.html#libwrap">A patch is available</a>.

<a href="stable.html">[Applied to stable]</a>

<li>disable bogus file check in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cvs&sektion=1">cvs</a>.

<li>disable bogus file check in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cvs&sektion=1">cvs(1)</a>.

<a href="stable.html">[Applied to stable]</a>

<li>IMPLEMENTATION FIX: fix memory allocation in the PCI LANCE ethernet driver, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=le&sektion=4&arch=i386">le</a>.

<a href="errata.html#lepci">A patch is available</a>.

<a href="stable.html">[Applied to stable]</a>

<li>Fix some incorrect return values for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mmap&sektion=2">mmap</a> functions.

<li>Fix some incorrect return values for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mmap&sektion=2">mmap(2)</a> functions.

<a href="stable.html">[Applied to stable]</a>

<li>SECURITY FIX: fix some buffer overflows in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=named&sektion=8">named</a>.

<li>SECURITY FIX: fix some buffer overflows in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=named&sektion=8">named(8)</a>.

<a href="errata.html#named">A patch is available</a>.

<a href="stable.html">[Applied to stable]</a>

<li>SECURITY FIX: The <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=random&sektion=4">rnd(4)</a> device does not use all of its input when data is written to it.

Line 79

<a href="errata.html#hwcrypto">A patch is available</a>.

<a href="stable.html">[Applied to stable]</a>

<li>Permit stripped VAX kernels to load despite unexpected values from libsa.

<li>Simplify locking and a few more fixes to twe(4).

<li>Simplify locking and a few more fixes to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=twe&sektion=4">twe(4)</a>.

<li>Plug some memory leaks in OpenSSH.

<li>Fix -P in ftpd(8).

<li>Fix -P in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ftpd&sektion8">ftpd(8)</a>.

<li>Emulation fixes to the VAX code.

<li>Protect bits of dhclient(8) with a locking mechanism to prevent multiple instances from using the leases file simultaneously.

<li>Protect bits of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhclient&sektion=8">dhclient(8)</a> with a locking mechanism to prevent multiple instances from using the leases file simultaneously.

<li>Fix 3 cases in mv(1) relating to the moving of symlinks across filesystems.

<li>Fix 3 cases in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mv&sektion=1">mv(1)</a> relating to the moving of symlinks across filesystems.

<li>In ftpd(8), expand the tilde character in ftp-dir login.conf variable.

<li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ftpd&sektion=8">ftpd(8)</a>, expand the tilde character in ftp-dir login.conf variable.

<li>Prohibit binding to an anycast, notready, or detached IPv6 address.

<li>Prohibit binding to an anycast, notready, or detached <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ip6&sektion=4">IPv6</a> address.

<li>Rename fsinfo to xfsinfo in X11 to avoid naming conflict.

<li>Rename <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fsinfo&sektion=8">fsinfo(8)</a> to xfsinfo in X11 to avoid naming conflict.

<li>Set the correct pfkeyv2 direction for KAME SPD entries in isakmpd(8).

<li>Set the correct pfkeyv2 direction for KAME SPD entries in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a>.

<li>Save and restore errno properly in flex(1) since it may be whacked by isatty(3).

<li>Save and restore errno properly in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=flex&sektion=1">flex(1)</a> since it may be whacked by <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isatty&sektion=3">isatty(3)</a>.

<li>Fix sending/receiving passwords in routed(8).

<li>Fix sending/receiving passwords in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=routed&sektion=8">routed(8)</a>.

<li>Add an i386-specific sysctl(3) that modifies halt -p processing in APM to deal with some quirky machines.

<li>Add an i386-specific <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sysctl&sektion=3">sysctl(3)</a> that modifies halt -p processing in APM to deal with some quirky machines.

<li>More sun3 fixes, mostly to conform better to other m68k architecture code.

<li>Handle login banners better in SSH2 instances of ssh(1).

<li>Handle login banners better in SSH2 instances of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>.

<li>Various spelling and grammar fixes across the tree.

<li>Use new sysctl(3) interface for kernel memory bucket statistics and clock information.

<li>Use new <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sysctl&sektion=3">sysctl(3)</a> interface for kernel memory bucket statistics and clock information.

<li>Correctly check for empty mailq(1) in /etc/daily.

<li>Correctly check for empty <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mailq&sektion=1">mailq(1)</a> in /etc/daily.

<li>Y2K fix in the mvme68k NVRAM code.

<li>Extend sysctl(3) to support quad values.

<li>Extend <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sysctl&sektion=3">sysctl(3)</a> to support quad values.

<li>Improve SMB packet printing in tcpdump(8).

<li>Improve SMB packet printing in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcpdump&sektion=8">tcpdump(8)</a>.

<li>Add common pidfile-writing code to DHCP so each program doesn't need to roll its own.

<li>To please cap_mkdb(8), make it an error to open a zero-length file for read-only access in hash(3).

<li>To please <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cap_mkdb&sektion=1">cap_mkdb(1)</a>, make it an error to open a zero-length file for read-only access in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=hash&sektion=3">hash(3)</a>.

<li>Some sun3 architecture fixes.

<li>Ignore environment variables in libssl if we're running setugid.

<li>Ignore environment variables in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&sektion=8">libssl</a> if we're running <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=issetugid&sektion=2">setugid</a>.

<li>In ssh(1), log the remote IP address on disconnect.

<li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>, log the remote IP address on disconnect.

<li>Check for memory allocation failure in vmstat(8).

<li>Check for memory allocation failure in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=vmstat&sektion=8">vmstat(8)</a>.

<li>Fix a buffer overflow in fsinfo(8).

<li>Fix a buffer overflow in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fsinfo&sektion=8">fsinfo(8)</a>.

<li>Handle another special case in APM.

<li>Handle another special case in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=apm&sektion=4&arch=i386">apm(4)</a>.

<li>Fix a panic in the RAIDframe locking management code.

<li>Fix a panic in the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=raid&sektion=4">RAIDframe</a> locking management code.

<li>Add setpid command to fdisk(8) for setting the partition ID.

<li>Add setpid command to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fdisk&sektion=8&arch=i386">fdisk(8)</a> for setting the partition ID.

<li>Change bridge(4) to use gif* instead of enc*.

<li>Change <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bridge&sektion=4">bridge(4)</a> to use gif* instead of enc*.

<li>Set SO_REUSEPORT socket option in DHCP code, so multiple dhclients work.

<li>Set SO_REUSEPORT socket option in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhcp&sektion=8">DHCP</a> code, so multiple dhclients work.

<li>Allow printing of 8-bit ASCII characters in talk(1) through an option.

<li>Allow printing of 8-bit ASCII characters in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=talk&sektion=1">talk(1)</a> through an option.

<li>Do not perform getnetbyname() in mountd(8) if the address is already in dot-notation.

<li>Do not perform getnetbyname() in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mountd&sektion=8">mountd(8)</a> if the address is already in dot-notation.

<li>In ftpd(8), log the actual number of bytes transferred instead of the original file size.

<li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ftpd&sektion=8">ftpd(8)</a>, log the actual number of bytes transferred instead of the original file size.

<li>Fix ^C in termtype prompt.

<li>Prevent fsck_ffs(8) from marking a filesystem clean if fsck(8) needs to be rerun.

<li>Prevent <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fsck_ffs&sektion=8">fsck_ffs(8)</a> from marking a filesystem clean if <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fsck&sektion=8">fsck(8)</a> needs to be rerun.

<li>Resolve scheduling conflict in newsyslog(8).

<li>Resolve scheduling conflict in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=newsyslog&sektion=8">newsyslog(8)</a>.

<li>In dhclient(8), set a reasonable default lease time if the server does not provide one.

<li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhclient&sektion=8">dhclient(8)</a>, set a reasonable default lease time if the server does not provide one.

<li>Suppress uninteresting PCI bus error messages in ahc(4).

<li>Suppress uninteresting PCI bus error messages in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ahc&sektion=4">ahc(4)</a>.

<li>Add m88k support to gprof(1).

<li>Add m88k support to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=gprof&sektion=1">gprof(1)</a>.

<li>Add HostKeyAlias option to ssh(1).

<li>Add HostKeyAlias option to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>.

<li>Behave nicely with fixed-rate codecs in auvia(4).

<li>Behave nicely with fixed-rate codecs in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=auvia&sektion=4">auvia(4)</a>.

<li>Fix a minor off-by-one error in gprof(1).

<li>Fix a minor off-by-one error in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=gprof&sektion=1">gprof(1)</a>.

<li>In the ports infrastructure, take the old non-fake code out-of-line.

<li>Repair a disgusting rwhod(8) crash.

<li>Repair a disgusting <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rwhod&sektion=8">rwhod(8)</a> crash.

<li>Fix buffer overflow in csh(1) builtin printf(1) implementation.

<li>Fix buffer overflow in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=csh&sektion=1">csh(1)</a> builtin <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=printf&sektion=1">printf(1)</a> implementation.

<li>Convert atoi(3) to strtoul(3) in top(1).

<li>Convert <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=atoi&sektion=3">atoi(3)</a> to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=strtoul&sektion=3">strtoul(3)</a> in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=top&sektion=1">top(1)</a>.

<li>Emulate Linux truncate64, stat64, lstat64, and fstat64 syscalls.

<li>Revoke root privileges earlier in ping6(8) and traceroute6(8).

<li>Revoke root privileges earlier in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ping6&sektion=8">ping6(8)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=traceroute6&sektion=8">traceroute6(8)</a>.

<li>Many man page fixes.

<li>Use arc4random(3) in jot(1).

<li>Use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=arc4random&sektion=3">arc4random(3)</a> in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=jot&sektion=1">jot(1)</a>.

<li>Handle quotas over 4GB in edquota(8) and repquota(8).

<li>Handle quotas over 4GB in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=edquota&sektion=8">edquota(8)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=repquota&sektion=8">repquota(8)</a>.

<li>Fix IPv6 Path MTU Discovery.

<li>Give up euid more carefully in mrinfo(8) and mtrace(8).

<li>Give up euid more carefully in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mrinfo&sektion=8">mrinfo(8)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mtrace&sektion=8">mtrace(8)</a>.

<li>Various OpenSSH fixes.

<li>Add support for ActivCard, CRYPTOCard, and SNK-004 authentication for the BSD authentication framework.

<li>In ksh(1), remain in non-blocking mode if the shell is not interactive.

<li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ksh&sektion=1">ksh(1)</a>, remain in non-blocking mode if the shell is not interactive.

<li>SECURITY FIX: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xlock&sektion=1">xlock</a> now authenticates via a pipe.

<li>SECURITY FIX: xlock now authenticates via a pipe.

<a href="errata.html#xlock">A patch is available</a>.

<a href="stable.html">[Applied to stable]</a>

<li>IMPLEMENTATION FIX: PS/2 mouse driver, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pms&sektion=4&arch=i386">pms</a>, lockup fix.

<a href="errata.html#pms">A patch is available</a>.

<a href="stable.html">[Applied to stable]</a>

<li>Implement a workaround in atapiscsi(4) for buggy Toshiba drivers.

<li>Implement a workaround in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=atapiscsi&sektion=4">atapiscsi(4)</a> for buggy Toshiba drivers.

<li>SECURITY FIX: Fix holes in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mount_procfs&sektion=8">procfs</a>.

<a href="errata.html#procfs">A patch is available</a>.

<a href="stable.html">[Applied to stable]</a>

<li>Put strlcat(3) and strlcpy(3) into libkern for kernel use.

<li>Put <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=strlcat&sektion=3">strlcat(3)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=strlcpy&sektion=3">strlcpy(3)</a> into libkern for kernel use.

<li>Fix setting of nwid for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wi&sektion=4">wi(4)</a>.

<a href="stable.html">[Applied to stable]</a>

<li>Change /etc/security to spit out unified diffs.