version 1.842, 2002/09/16 20:50:25 |
version 1.843, 2002/10/02 22:34:07 |
|
|
|
|
<p> |
<p> |
<h3><font color=#0000e0>We are working on OpenBSD-current.</font></h3><p> |
<h3><font color=#0000e0>We are working on OpenBSD-current.</font></h3><p> |
The following list sums up (almost) all the changes made up to September 15. |
The following list sums up (almost) all the changes made up to October 1. |
<ul> |
<ul> |
|
|
|
|
|
<!-- ^^^ 20021002 --> |
|
<li>Retrofit the SIGUSR1->SIGUSR2 console switching change to the old X server. |
|
<li>Fix a couple of crashers in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=kevent&sektion=2">kevent(2)</a> |
|
<li>OpenBSD 3.2-beta -> 3.2, OpenSSH -> 3.5 |
|
<!-- ^^^ 20021001 --> |
|
<li>Try to initialise AGP GART in the privileged startup portion of the X server. |
|
<!-- ^^^ 20020930 --> |
|
<li>Plug a memory leak in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=url&sektion=4">url(4)</a>. |
|
<!-- ^^^ 20020929 --> |
|
<li>login_radius returns, complete with fixed license. |
|
<li>Still more cleanup and output trimming in the installer script. |
|
<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xf86cfg&sektion=1">xf86cfg(1)</a> now runs the server with '-nolisten tcp'. |
|
<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xdm&sektion=8">xdm(8)</a> now drops privileges to run as user _x11 after starting as root. |
|
<!-- ^^^ 20020928 --> |
|
<li>daddr -> saddr in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> binat code. Oops.<br> |
|
<a href="stable.html"><font color=#00b000>[Applied to stable]</font></a> |
|
<li>Add a wildcard client string match against "probe-*" for SSH probes to use. |
|
<!-- ^^^ 20020927 --> |
|
<li>Disable login_radius, pesky licensing problems again.<br> |
|
<a href="stable.html"><font color=#00b000>[Applied to stable]</font></a> |
|
<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sppp&sektion=4">sppp(4)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=lmc&sektion=4">lmc(4)</a> are back, with better licenses. |
|
<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> can now do privsep and krb4 together. |
|
<!-- ^^^ 20020926 --> |
|
<li>Remove RC5 and MDC2 from libcrypto. |
|
<li>Have the installer set the nosuid flag for mount points that shouldn't contain setuid programs. |
|
<!-- ^^^ 20020925 --> |
|
<li>Fix a sizeof bug in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bridge&sektion=4">bridge(4)</a> spanning tree protocol support. |
|
<li>New driver <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=em&sektion=4">em(4)</a>, supporting Intel Gigibit Ethernet adapters and replacing <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=gx&sektion=4&release=OpenBSD+3.1">gx(4)</a> |
|
<li>Some memory allocation and other tweaks to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=talkd&sektion=8">talkd(8)</a>. |
|
<!-- ^^^ 20020924 --> |
|
<li>Better handling of IPv6 deprecated addresses. |
|
<li>Fix the padding length for an IPv6 PADN option before a jumbo payload option. |
|
<li>Allow SSL session IDs of any length up to 32, removing the non-standard 16-char minimum imposed before. |
|
<li>Add a /dev/X0 entry for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xdm&sektion=8">xdm(8)</a>, allowing the mouse to work with the upcoming xdm privilege drop. One for the Upgrading Mini-faq. |
|
<li>Properly dump radix tree nodes in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=netstat&sektion=1">netstat(1)</a>. |
|
<!-- ^^^ 20020923 --> |
|
<li>Template policy support for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=systrace&sektion=1">systrace(1)</a>. |
|
<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sppp&sektion=4">sppp(4)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=lmc&sektion=4">lmc(4)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cz&sektion=4">cz(4)</a> drivers removed from release kernels due to license problems. |
|
<li>A bunch of gcc3 tweaks. |
|
<li>Don't build Kerberos ticket forwarding programs <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=kf&sektion=1&release=OpenBSD+3.1">kf(1)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=kfd&sektion=8">kfd(8)</a> because of security issues. (Will come back when Heimdal 0.5 gets merged, after 3.2 release.) |
|
<li>Add support for ELF sections loaded relative to a base section. |
|
<li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&sektion=8">pfctl(8)</a>'s antispoof command also block incoming packets with the source set to one of the host's IP addresses. |
|
<li>Make the VT switching code use SIGUSR2 instead of SIGUSR1. The latter is also used by the X server to synchronise with xinit. |
|
<!-- ^^^ 20020922 --> |
|
<li>Have <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=newsyslog&sektion=8">newsyslog(8)</a> handle with more grace situations where some archived logfiles have been uncompressed in-place. |
|
<li>Continue to reduce the amount of output the installer generates, so we won't need a magnifier to read the installation instructions in the CD gatefold. |
|
<li>Add TBI (Ten-Bit Interface) mode support for fibre-based <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=nge&sektion=4">nge(4)</a> cards, as well as some other bug fixes. |
|
<!-- ^^^ 20020921 --> |
|
<!-- ^^^ 20020920 --> |
|
<li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=newsyslog&sektion=8">newsyslog(8)</a> actually run the command it's asked to run. Also, add new interpretation of a null command. |
|
<li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=newsyslog&sektion=8">newsyslog(8)</a>'s handling of empty lines. |
|
<li>Remove the obsolete access.conf and srm.conf files from <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=httpd&sektion=8">httpd(8)</a>. |
|
<!-- ^^^ 20020919 --> |
|
<li>Make sure <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> ProxyCommand programs get killed on exit (portable OpenSSH <a href="http://bugzilla.mindrot.org/show_bug.cgi?id=223">bug #223</a>.) |
|
<li>Fix a potential FREE() of an uninitialised pointer in the kernel (sys/exec_script.c) |
|
<li>Rewrite <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcpdump&sektion=8">tcpdump(8)</a>'s GRE decoder. |
|
<li>Fix signal trampoline problems with non-exec stack. |
|
<li>Remove EGP decode support from <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcpdump&sektion=8">tcpdump(8)</a> due to a duff license and apathy. |
|
<!-- ^^^ 20020918 --> |
|
<li>So farewell, then, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=trsp&sektion=8&release=OpenBSD+3.1">trsp(8)</a>. |
|
<li>Allow <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=newsyslog&sektion=8">newsyslog(8)</a> to rotate only specific logfiles. |
|
<li>Make RAND_poll use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=arc4random&sektion=3">arc4random(3)</a> instead of /dev/arandom, so it works in under a chroot. |
|
<li>New -a flag to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=newsyslog&sektion=8">newsyslog(8)</a> allows a directory to be specified for archived logs. |
|
<li>Set the close-on-exec flag for file descriptors created by <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=kvm_open&sektion=3">kvm_open(3)</a>. |
|
<li>Fix DMA-related panics in the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=twe&sektion=4">twe(4)</a> driver. |
|
<li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>, try harder to create the X11 forwarding listener socket. |
|
<!-- ^^^ 20020917 --> |
|
<li>Fix a potential buffer overrun in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=setlocale&sektion=3">setlocale(3)</a> (NetBSD-<a href="ftp://ftp.NetBSD.org/pub/NetBSD/security/advisories/NetBSD-SA2002-012.txt.asc">SA2002-012</a>.) |
|
<li>Don't chdir to / when <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=systrace&sektion=1">systrace(1)</a> goes daemon. |
|
<li>Add __syslog__ string formatting attribute to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=gcc&sektion=1">gcc(1)</a>. |
|
<!-- ^^^ 20020916 --> |
<li>Periodically save changes to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=systrace&sektion=1">systrace(1)</a> policies. |
<li>Periodically save changes to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=systrace&sektion=1">systrace(1)</a> policies. |
<li>Various fixes to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=newsyslog&sektion=8">newsyslog(8)</a>. |
<li>Various fixes to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=newsyslog&sektion=8">newsyslog(8)</a>. |
<li>Re-sync the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=siop&sektion=4">siop(4)</a> driver with NetBSD. |
<li>Re-sync the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=siop&sektion=4">siop(4)</a> driver with NetBSD. |