[BACK]Return to plus.html CVS log [TXT][DIR] Up to [local] / www

Diff for /www/plus.html between version 1.796 and 1.797

version 1.796, 2001/08/30 05:40:04 version 1.797, 2001/09/04 01:59:07
Line 53 
Line 53 
 <p>  <p>
 <h3><font color=#0000e0>We are working on OpenBSD-current.</font></h3><p>  <h3><font color=#0000e0>We are working on OpenBSD-current.</font></h3><p>
 <ul>  <ul>
   <li>New src compilation target: cross-env; prints all environment variables that need to be set for cross-building.
   <li>Import <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=usbhidctl&sektion=1">usbhidctl(1)</a>, a userland program to manipulate USB HID devices.
   <li>Import <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=usb&sektion=3">usb(3)</a> library libusb for USB HID processing.
   <li>Rename powerpc port to macppc, allowing for code sharing between different powerpc-based platforms.
   <li>Inherit <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=vlan&sektion=4">vlan(4)</a> baudrate from parent.
   <li>Various <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=lpd&sektion=8">lpd(8)</a> improvements and fixes.
 <li><font color=#e00000><strong>SECURITY FIX: fix buffer overflow reading queue file in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=lpd&sektion=8">lpd</a>.</strong></font><br>  <li><font color=#e00000><strong>SECURITY FIX: fix buffer overflow reading queue file in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=lpd&sektion=8">lpd</a>.</strong></font><br>
    <a href=errata.html#lpd>A source code patch is available</a>.<br>     <a href=errata.html#lpd>A source code patch is available</a>.<br>
    <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>     <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
 <li>...  <li>Plug memory leak in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=scp&sektion=1">scp(1)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rcp&sektion=1">rcp(1)</a>.
   <li>Avoid segfault in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhclient&sektion=8">dhclient(8)</a> when the server specifies its name.
   <li>Support the ! operator in host paramater lists in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&sektion=8">pfctl(8)</a>.
   <li>Send a reset request for every packet recieved by <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ppp&sektion=8">ppp(8)</a> when the encryption dictionaries are out of sync.
   <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> support ISN randomization (aka. phase modulation).
   <li>Store argc as a long on the stack as opposed to an int.
   <li>Switch rijndael code to the optimized AES reference release.
   <li>Have <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a> send DELETE notifications for all active SAs when shutting down.
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sudo&sektion=8">sudo(8)</a>, apply default login class if unable to look one up.
   <li>Support macro expansion in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf.conf&sektion=5">pf.conf(5)</a>.
   <li>Work some magic on the installation scripts for floppies, shrinking them.
   <li>Correct the setup of the initial <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcp&sektion=4">tcp(4)</a> state window in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a>.
   <li>Import <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pflogd&sektion=8">pflogd(8)</a>,  logging daemon that writes <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> logs in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcpdump&sektion=8">tcpdump(8)</a> binary format.
 <li><font color=#e00000><strong>SECURITY FIX: fix out of bounds handling in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sendmail&sektion=8">sendmail</a> debug handling</strong></font><br>  <li><font color=#e00000><strong>SECURITY FIX: fix out of bounds handling in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sendmail&sektion=8">sendmail</a> debug handling</strong></font><br>
    <a href=errata.html#sendmail2>A source code patch is available</a>.<br>     <a href=errata.html#sendmail2>A source code patch is available</a>.<br>
    <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>     <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
 <li>...  <li>Repair <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ppp&sektion=8">ppp(8)</a>'s iface-alias option.
   <li>Fix rule flushing code in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bridge&sektion=4">bridge(4)</a> devices.
   <li>Support <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ip6&sektion=4">ip6(4)</a> in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ppp&sektion=8">ppp(8)</a>; crude IPV6CP support; many other smaller changes.
   <li>Enhance file-change detection in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=vipw&sektion=8">vipw(8)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=crontab&sektion=1">crontab(1)</a>.
   <li>Add per-rule statistics and byte counter to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a>.
   <li>Don't reset <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xl&sektion=1">xl(1)</a>'s Rx/Tx without first turning them back on after a suspend.
   <li>Support paramater lists in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&sektion=8">pfctl(8)</a>.
   <li>Be sure to pass the interface to ipip_input() in the net subsystem so it can be used in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bpf&sektion=4">bpf(4)</a>.
   <li>Import <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ftp-proxy&sektion=8">ftp-proxy(8)</a>, a transparent ftp proxy.
   <li>Loosen <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcp&sektion=4">tcp(4)</a> state code in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a>, allowing &quot;stupid stacks to shotgun their SYNs and provide better handling for pre-existing connections&quot;.
   <li>Initial import of sparc64 port; much subsequent development, too much to list.
   <li>Add the possibility to add a random offset to the stack on <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=exec&sektion=3">exec(3)</a>.
   <li>Make the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=siop&sektion=4">siop(4)</a> driver pay attention to quirks table, eliminating INQUIRY snooping and ifdef toggling.
   <li>New -s switch for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pwd_mkdb&sektion=8">pwd_mkdb(8)</a> to only update the secure .db file.
   <li>-e switch for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=nm&sektion=1">nm(1)</a> to show extra symbol information.
   <li>Delay locking the passwd file until we have gotten a new password from the user.  Also play with the file locking routine.
   <li>Attempt to recover from PCI aborts in the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=hifn&sektion=4">hifn(4)</a> driver.
   <li>Import keyconv, a small utility to convert between <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=openssl&sektion=1">openssl(1)</a> and DNSSEC key formats.
   <li>Support trusted public RSA keys as files in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a>.
   <li>Fix lengths for PFKEYv2 and KAME messages in IPv4-in-IPv6 and IPv6-in-IPv4 flows.
   <li>Import <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=popa3d&sektion=8">popa3d(8)</a>, Solar Designer's POP3 daemon.
   <li>The valiant vm_extern.h, vm_inherit.h, vm_map.h, and vm_pager.h files ride off into the sunset.
   <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> support for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=icmp&sektion=4">icmp(4)</a> errors referring to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=icmp&sektion=4">icmp(4)</a> queries/replies.
   <li>Allow file flags in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mtree&sektion=8">mtree(8)</a>.
   <li>Don't compare the source address on packets to the one in SA when doing <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ipsec&sektion=4">ipsec(4)</a> processing.
   <li>Repair rijndael block alignment.
   <li>Unshare <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sigaction&sektion=2">sigaction(2)</a> signal handlers on <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=exec&sektion=3">exec(3)</a>.
   <li>Merge <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=altq&sektion=9">altq(9)</a> options into just &quot;altq&quot; for base + red + cbq, and enable it by default.
   <li>Support the -h flag for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ln&sektion=1">ln(1)</a> that prevents following a symlink to a directory.
   <li>Many new timeouts for a wide variety of devices.
   <li>Remove the IPCOMP option as it's now part of the IPSEC option.
   <li>Rewrite <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=signal&sektion=3">signal(3)</a> handlers in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=altqd&sektion=8">altqd(8)</a> to be race-safe.
   <li>Add support for RC4 operations in the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=hifn&sektion=4">hifn(4)</a> driver.
   <li>Don't <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=free&sektion=3">free(3)</a> unallocated memory in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mailwrapper&sektion=8">mailwrapper(8)</a>.
   <li>Change <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tsleep&sektion=9">tsleep(9)</a> into an ltsleep wrapper.  ltsleep takes one more argument than <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tsleep&sektion=9">tsleep(9)</a>, a simplelock that it unlocks when safe.
   <li>Let kerberosV compile entirely on platforms without shared libraries.
   <li>Avoid /tmp race in rcs2log by using <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mktemp&sektion=1">mktemp(1)</a>.
   <li>Tweak timekeeping code in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dd&sektion=1">dd(1)</a> to produce a sane bandwidth measure for a short runs.
   <li>Enable the ESP and AH <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ipsec&sektion=4">ipsec(4)</a> protocols by default.
   <li>Make kernel <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=crash&sektion=8">crash(8)</a> dumps work under mvme68k.
   <li>No longer drop packets when using an ACQUIRE policy and an error occurs when notifying key management.
   <li>New <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getrrsetbyname&sektion=3">getrrsetbyname(3)</a> function to retrieve arbitrary DNS records.
   <li>Support protocol version 2 in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh-keyscan&sektion=1">ssh-keyscan(1)</a>.
   <li>Move <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xdm&sektion=1">xdm(1)</a>'s PID file from xdm-pid to xdm.pid in /var/run, maintaining consistancy.
   <li>Delay decision to make a new <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=hash&sektion=3">hash(3)</a> table or not until after calling <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=open&sektion=2">open(2)</a>, clearing up problems with file locking.
   <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=vlan&sektion=4">vlan(4)</a> changes: utilize IFCAP_VLAN_MTU and IFCAP_VLAN_HWTAGGING capabilities; LINK0 and MTU ambiguity are no more; MTU's can only be changed within the scope of the parent's MTU.
   <li>Repair non-blocking mode issues in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=syslogd&sektion=8">syslogd(8)</a>, avoiding grief with locked terminals.
   <li>Make all cases of .Sh AUTHOR and .Sh EXAMPLE plural in manual pages.
   <li>New <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sysctl&sektion=3">sysctl(3)</a> nkmempages that reports how many pages are in kmem_map.
   <li>Support stateless <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcp&sektion=4">tcp(4)</a> normalization in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a>.
   <li>Import <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=x99token&sektion=1">x99token(1)</a>, a software x99 token calculator.
   <li>Add support for EDNS0 extended flag DNSSEC OK to the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=resolver&sektion=3">resolver(3)</a> routines.
   <li>Don't send a NUL on the end of CHAP SUCCESS packets in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ppp&sektion=8">ppp(8)</a> so that WindowsME and Windows98 won't mysteriously fail when encryption is enabled.
   <li>Allocate <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=uvm&sektion=9">uvm(9)</a> page buckets from kernel_map, saving kmem_map space on machines with lots of physical memory.
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ppp&sektion=8">ppp(8)</a>, compensate for a Windows 98 bug when sending a CHAP81 challenge response.
   <li>Support the SmartcardDevice option in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> to specify which smartcard device to use.
   <li>Step down only one Ultra DMA mode at a time when downgrading.
   <li>On DMA timeouts, stop busmaster PCIIDE and reset channel.
   <li>Don't <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=malloc&sektion=3">malloc(3)</a> too much and choke in ELF execution.
   <li>Support rule skipping in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a>.
   <li>Allow negative lock length with <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=lockf&sektion=3">lockf(3)</a>, making it compliant to specification.
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=top&sektion=1">top(1)</a>, abort if <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=stdout&sektion=4">stdout(4)</a> ever produces EOF; prevents spinning output if controlling tty disappears.
   <li>Implement startup and shutdown hooks via <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dohooks&sektion=9">dohooks(9)</a> and family.
 <li><font color=#e00000><strong>SECURITY FIX: check filehandle size copied from userland</strong></font><br>  <li><font color=#e00000><strong>SECURITY FIX: check filehandle size copied from userland</strong></font><br>
    <a href=errata.html#nfs>A source code patch is available</a>.<br>     <a href=errata.html#nfs>A source code patch is available</a>.<br>
    <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>     <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
 <li>...  <li>Nuke edlabel.
   <li>Add support for disabling swap devices via <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=swapctl&sektion=8">swapctl(8)</a>'s -d option.
   <li>Support <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a> configuration file and key testing via the -t option.
   <li>Change vop_symlink and vop_mknod so that they return the created node in a way that the caller can actually utilize it.
   <li>Use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=vfork&sektion=2">vfork(2)</a> safely in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sup&sektion=1">sup(1)</a>.
   <li>New flag PMAP_CANFAIL that tells pmap_enter that it can fail if there aren't enough resources instead of panicing.
   <li>Make non-stateful and stateful <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> filtering work on <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bridge&sektion=4">bridge(4)</a> devices.
   <li>Initialize arpcom later; it could be incorrectly initialized if done before bridge_input().
   <li>Enable challenge-response authentication by default in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>.
   <li>Fix/complete <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> binary operators.
   <li>Repair signal race in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=m4&sektion=1">m4(1)</a>.
   <li>Ensure <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=make&sektion=1">make(1)</a> doesn't dump core when reporting open conditionals.
 <li>Promote PMAP_NEW option to mandatory status.  <li>Promote PMAP_NEW option to mandatory status.
 <li>In the netinet subsystem, zero the TCP checksum field before calculating the new value; fixes problem with bad checksums on keepalives.  <li>In the netinet subsystem, zero the TCP checksum field before calculating the new value; fixes problem with bad checksums on keepalives.
 <li>Use 64-bit integers for some ipcomp byte counts, fixing strange results with <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=netstat&sektion=1">netstat(1)</a>.  <li>Use 64-bit integers for some ipcomp byte counts, fixing strange results with <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=netstat&sektion=1">netstat(1)</a>.
Legend:
Removed from v.1.796  
changed lines
  Added in v.1.797