www/plus.html - diff

Return to plus.html CVS log

Up to [local] / www

Diff for /www/plus.html between version 1.866 and 1.867

-version 1.866, 2003/03/14 19:11:24
+version 1.867, 2003/03/24 08:36:57
 Line 51
 Line 51
 Line 51
  <p>
  <h3><font color="#0000e0">We are working on OpenBSD-current.</font></h3><p>
- The following list sums up (almost) all the changes made up to March 5.
+ The following list sums up (almost) all the changes made up to March 21.
  <p>
  <ul>
+ <!-- ^ 20030322 -->
+ <li>Stop <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sendbug&amp;sektion=1">sendbug(1)</a> reporting spurious errors.
+ <li>Restore <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ac97&amp;sektion=4">ac97(4)</a> state after an <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=apm&amp;sektion=4">apm(4)</a> resume.
+ <li>Make the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=syslogd&amp;sektion=8">syslogd(8)</a> default facility LOG_USER instead of (due to a bug) LOG_UUCP.
+ <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=netstat&amp;sektion=8">netstat(8)</a> -m output of mbuf cluster stats much more useful.
+ <li>Fix memory use percentage output of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ps&amp;sektion=1">ps(1)</a>.
+ <li>Some endianness fixes to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ahc&amp;sektion=4">ahc(4)</a>, making it works on macppc.
+ <li>Fix some problems with <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&amp;sektion=4">pf(4)</a> table statistics.
+ <li>Disable by default (and add a switch to enable) cross-realm authentication from Kerberos IV realms in Kerberos V <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=kdc&amp;sektion=8">kdc(8)</a>. This addresses a recently found <a href="http://web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2003-004-krb4.txt">vulnerability</a>.<br>
+     <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
+ <li>Disable the Kerberos IV <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=kdc&amp;sektion=8">kdc(8)</a>, since all its functionality is available in the Kerberos V kdc.
+ <!-- ^ 20030321 -->
+ <li>Enquote $lpd_flags in /etc/rc.
+ <!-- ^ 20030320 -->
+ <li>Fix a logic error in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sudo&amp;sektion=1">sudo(1)</a>'s SIGCHLD handler.
+ <li><font color="#e00000"><strong>SECURITY FIX: OpenSSL is vulnerable to an extension of the `Bleichenbacher' attack designed by Czech researchers Klima, Pokorny and Rosa.</strong></font><br>
+     <a href="errata.html#kpr">A source code patch is available</a>.<br>
+     <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
+ <li>Tweak <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&amp;sektion=8">pfctl(8)</a> host address parsing to catch exceptional cases.
+ <li>Fix parsing of the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhcpd&amp;sektion=8">dhcpd(8)</a> leases file.
+ <!-- ^ 20030319 -->
+ <li>Add a missing return statement in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mkhybrid&amp;sektion=8">mkhybrid(8)</a>.
+ <!-- ^ 20030318 -->
+ <li>Restore bootable tape functionality for sparc.
+ <li>Longword-align struct sockaddrs passed to the kernel by <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=arp&amp;sektion=8">arp(8)</a>.
+ <li>An RFC 2553 compliance tweak to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getaddrinfo&amp;sektion=3">getaddrinfo(3)</a>.
+ <li>Change <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=perl&amp;sektion=1">perl(1)</a>'s config hints file to reflect the promotion of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=setreuid&amp;sektion=2">setre[ug]id(2)</a> to real system calls.
+ <li>Some (v)sprintf -> (v)snprintf in libcurses and libcurses++.
+ <li>Bump <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&amp;sektion=1">ssh(1)</a> version to 3.6.
+ <!-- ^ 20030317 -->
+ <li>Fix a bad string length when checking options to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=login_passwd&amp;sektion=8">login_passwd(8)</a>.
+ <li>Add a nicely free license to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=hack&amp;sektion=6">hack(6)</a>.
+ <li>Fix a bogus string initialisation when printing IPv6 addresses that was causing a segfault in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=netstat&amp;sektion=8">netstat(8)</a>.
+ <!-- ^ 20030316 -->
+ <li>More string function sanity in the 4.3BSD compat library, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=crypto&amp;sektion=3">crypto(3)</a><!-- 20030316 --> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sudo&amp;sektion=1">sudo(1)</a>.
+ <li>Fix a string under-allocation in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mountd&amp;sektion=8">mountd(8)</a>.
+ <li>Update to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sudo&amp;sektion=1">sudo(1)</a> 1.6.7.
+ <li><font color="#e00000"><strong>SECURITY FIX: Various SSL and TLS operations in OpenSSL are vulnerable to timing attacks.</strong></font><br>
+     <a href="errata.html#blinding">An `RSA blinding' source code patch is available</a>.<br>
+     <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
+ <li>Add a missing chroot path correction when creating the SSL mutex file in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=httpd&amp;sektion=8">httpd(8)</a>.
+ <!-- ^ 20030315 -->
+ <li>Another fix in the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=gcc&amp;sektion=1">gcc(1)</a> stack protector.
+ <li>More strcpy -> strlcpy, in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cron&amp;sektion=8">cron(8)</a> this time.
+ <li>After all the hard work making the X server run as a non-root user, stop the scheduler lowering non-root processes' priority if they've had more than ten minutes of CPU time.
+ <li>Check the length of all fixed-length IPv6 neighbor discovery options.
+ <li>Enable RSA blinding in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=keynote&amp;sektion=3">keynote(3)</a>.
+ <li>Remove the redundant -t option from <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mt&amp;sektion=1">mt(1)</a>.
+ <li>Fix a bug in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&amp;sektion=4">pf(4)</a> tables that could cause table-based filtering of packets with a source or destination address of 0.0.0.0 (e.g. DHCP) to corrupt the kernel.
+ <li>Enable RSA blinding for mod_ssl private key operations.
+ <!-- ^ 20030314 -->
+ <li>Fix a bug that caused all jobs displayed by <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=atq&amp;sektion=1">atq(1)</a> to appear to be owned by the owner of the last job in the queue.<br>
+     <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a> <!-- XXX 3.2-stable -->
+ <li>Require <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=spamd&amp;sektion=8">spamd(8)</a> control connections to originate from a reserved port.
+ <li>Plug a <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&amp;sektion=4">pf(4)</a> tables memory leak.
+ <li>Scale the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=altq&amp;sektion=4">altq(4)</a> RED thresholds to 10% (min) and 30% (max) of the queue limit.
+ <li>Fix a one-byte underflow in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=raidctl&amp;sektion=8">raidctl(8)</a>.
+ <li>Switch <a href="http://crypto.stanford.edu/~dabo/papers/ssl-timing.pdf">RSA blinding</a> on for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&amp;sektion=8">isakmpd(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh-agent&amp;sektion=1">ssh-agent(1)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssk-keysign&amp;sektion=8">ssk-keysign(8)</a>.
+ <li>Still more sprintf -> snprintf and strcpy -> strlcpy in many, many places.
+ <!-- ^ 20030313 -->
+ <li>More strcpy -> strlcpy, this time in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=badsect&amp;sektion=8">badsect(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=restore&amp;sektion=8">restore(8)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=scsi&amp;sektion=8">scsi(8)</a>.
+ <li>Fix a missing initialisation in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pckbc&amp;sektion=4">pckbc(4)</a> when the ps/2 keyboard is not the system console. Avoids a panic on alpha.
+ <li>Remove sbin/photurisd from the tree.
+ <li>(v)sprintf -> (v)snprintf in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mrouted&amp;sektion=8">mrouted(8)</a>.
+ <li>Add -c option to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=md5&amp;sektion=1">md5(1)</a>, for compatibility with GNU md5sum.
+ <li>Set IFCAP_VLAN_MTU for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sk&amp;sektion=4">sk(4)</a>.
+ <!-- ^ 20030312 -->
+ <li>Add a missing endianness fixup to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bktr&amp;sektion=4">bktr(4)</a>.
+ <li>Hack <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=compat_freebsd&amp;sektion=8">compat_freebsd(8)</a> to pick up recent FreeBSD binaries such as Opera.
+ <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cron&amp;sektion=8">cron(8)</a>'s parser detect many more syntax errors.
+ <li>Allow <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bridge&amp;sektion=4">bridge(4)</a> to send unfragmented full-length 802.1q packets on interfaces with IFCAP_VLAN_MTU set.
+ <li>Make sure that <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&amp;sektion=4">pf(4)</a> queues have a queue ID that is unique across all interfaces.
+ <li>When acting on an anchor, make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&amp;sektion=8">pfctl(8)</a>'s -F option traverse all subrulesets in the anchor.
+ <li>Remove <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=larn&amp;sektion=6&amp;release=OpenBSD+3.2">larn(6)</a> until some license issues are resolved.
+ <!-- ^ 20030311 -->
+ <li>Yet more <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=gcc&amp;sektion=1">gcc(1)</a> stack-smash protector fixes.
+ <li>Many spelling and double-word fixes.
+ <li>Install <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=lpr&amp;sektion=1">lpr(1)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=lprm&amp;sektion=1">lprm(1)</a> setuid root instead of setuid daemon (the latter is more risky) and setuid to daemon early on.
+ <li>Add a missing <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getnameinfo&amp;sektion=3">getnameinfo(3)</a> error check to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ftp&amp;sektion=1">ftp(1)</a>.
+ <li>Always set a <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bpf&amp;sektion=4">bpf(4)</a> filter in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pflogd&amp;sektion=8">pflogd(8)</a>, since bpf will otherwise grab full-length packets.
+ <li>strcpy->strlcpy in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mount_portal&amp;sektion=8">mount_portal(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=quotacheck&amp;sektion=8">quotacheck(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=route&amp;sektion=8">route(8)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=routed&amp;sektion=8">routed(8)</a>.
+ <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&amp;sektion=4">pf(4)</a> queue code drop illegal non-PKTHDR mbufs, and whine loudly so any problem will get noticed and fixed.
+ <li>Allow <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=st&amp;sektion=4">st(4)</a> tape density codes up to 0xff (the old limit was 0x45.) <!-- Disallow negative density since antimatter tapes are not supported. -->
+ <li>Continued assault on manpage errors, omissions and bad English.
+ <li>Fix a typo from pre-3.1 days that was stopping inode quotas from working.
+ <li>Stop <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=spamd-setup&amp;sektion=8">spamd-setup(8)</a> always returning an error code.
+ <li>Log that <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cron&amp;sektion=8">cron(8)</a> has started after detaching from the controlling terminal, rather than before.
+ <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cron&amp;sektion=8">cron(8)</a> show the correct error line number when the command is missing.
+ <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&amp;sektion=8">pfctl(8)</a> give a helpful error message when multiple same-named queues are added to an interface.
+ <li>Fix a problem in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sis&amp;sektion=4">sis(4)</a>, found with a few DP83815 devices, where a cable length of less than 30m caused excessive receive errors.
+ <!-- ^ 20030310 -->
+ <li>Tighten <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&amp;sektion=4">pf(4)</a> tcp state code in relation to a FIN received before any server response.
+ <li>Add spamd and spamd-cfg tcp ports to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=services&amp;sektion=5">services(5)</a>, and have <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=spamd&amp;sektion=8">spamd(8)</a> obtain the port numbers from there.
+ <li>Fix some problems adding <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&amp;sektion=4">pf(4)</a> child queues.
+ <li>Prise the correct line number for errors out of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cron&amp;sektion=8">cron(8)</a>.
+ <li>Warn about garbage lines before the EOF in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=crontab&amp;sektion=1">crontab(1)</a>.
+ <li>Fix a panic in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ppp&amp;sektion=4">ppp(4)</a> by making sure the first mbuf in a chain contains a packet header.
+ <!-- ^ 20030309 -->
+ <li>Disable <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ptrace&amp;sektion=2">ptrace(2)</a> for P_SUGIDEXEC as well as P_SUGID.
+ <li>Make the kernel's P_SUGIDEXEC flag semantics match those for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=issetugid&amp;sektion=2">issetugid(2)</a>.
+ <li>Make clear that <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mailwrapper&amp;sektion=8">mailwrapper(8)</a> error and warning messages are not from the wrapped program but from the wrapper itself.
+ <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mountd&amp;sektion=8">mountd(8)</a> only write to the pidfile if we've opened it.
+ <li>Honour the :sh: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=printcap&amp;sektion=5">printcap(5)</a> flag for remote printers, instead of requiring -h to be given to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=lpr&amp;sektion=1">lpr(1)</a>.
+ <li>Add <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=spamd.conf&amp;sektion=5">spamd.conf(5)</a>, configuration for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=spamd-setup&amp;sektion=8">spamd-setup(8)</a>.
+ <li>Since <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=spamd-setup&amp;sektion=8">spamd-setup(8)</a> is no longer a Perl script, remove the Net::Netmask module.
+ <li>Re-re-implement <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=spamd-setup&amp;sektion=8">spamd-setup(8)</a>, this time in C.
+ <li>Tweak queue rule expansion to fix problems when a queue spans multiple interfaces.
+ <li>Base <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&amp;sektion=8">pfctl(8)</a>'s 'bandwidth too small' whine on interface-specific calculations rather than always using '6Kb'.
+ <!-- ^ 20030308 -->
+ <li>Have a separate flag (-g) for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&amp;sektion=8">pfctl(8)</a> debugging output, instead of overloading -vv.
+ <li>Fix a signedness bug (KAME PR 469) in the libc resolver.
+ <!-- ^ 20030307 -->
+ <li>Set some missing flags and fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ti&amp;sektion=4">ti(4)</a>'s vlan tagging support.
+ <li>Stability fixes to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cac&amp;sektion=4">cac(4)</a>.
+ <li>A huge number of manpage cross-reference fixes.
+ <li>In kernel main(), configure devices later when process 0 is more fully initialised.
+ <li>Avoid a null derefence in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&amp;sektion=8">isakmpd(8)</a> when converting text addresses to a sockaddr.
+ <li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&amp;sektion=4">pf(4)</a> queue assignments when an interface is not specified.
+ <li>For IPv6 etherip packets, set the next protocol field in the header.
+ <li>Pass IP proto 97 (Ethernet-in-IP) packets up to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bpf&amp;sektion=4">bpf(4)</a>.
  <!-- ^ 20030306 -->
  <li>In the installer, delete the FTP password when no sets are found, so it doesn't get displayed in the URL.
  <li>Add a boot image ISO for alpha.
-Line 77
+Line 197
 Line 77
 Line 197
  <li>Move the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=spamd&amp;sektion=8">spamd(8)</a> configuration channel from the spamd listener port the next port up.
  <li>Add to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=file&amp;sektion=1">file(1)</a> support for additional image formats and a first pass at reading jpeg size.
  <li>strncpy->strlcpy in libc resolver code.
- <li>Upgrade <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=file&amp;sektion=1">file(1)</a> to 3.41, to fix a buffer overflow. Get improved 64-bit ELF support as well.
+ <li>Upgrade <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=file&amp;sektion=1">file(1)</a> to 3.41, to fix a buffer overflow. Get improved 64-bit ELF support as well.<br>
+     <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a> <!-- XXX 3.2-stable -->
  <li>In the libc stack smash handler, straight away block all signal handlers from running.
  <li>More fixes and improvements to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isp&amp;sektion=4">isp(4)</a>.
  <li>Sendmail updated to 8.12.8.
-Line 209
+Line 330
 Line 209
 Line 330
      <a href="errata.html#httpd">A source code patch is available</a>.<br>
      <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
  <li>Increase the size of the rates buffer in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wi&amp;sektion=4">wi(4)</a> hostap so 802.11g stations can associate.
- <li>When outputting raw IP and generating the header manually, make sure the packet is large enough for a full IP header.
+ <li>When outputting raw IP and generating the header manually, make sure the packet is large enough for a full IP header.<br>
+     <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a> <!-- XXX 3.2-stable -->
  <!-- ^ 20030215 -->
  <li>Fix an mbuf leak in IPv6 TCP.
      <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
-Line 371
+Line 493
 Line 371
 Line 493
  <li>Fix some silly pastos in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&amp;sektion=8">pfctl(8)</a> table code.
  <li>Create /var/empty/dev/log for programs that <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=chroot&amp;sektion=2">chroot(2)</a> to /var/empty.
  <li>Fix a typo in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&amp;sektion=4">pf(4)</a> DIOCRSETTFLAGS implmentation, so it doesn't look like changing a table flag created a table when in fact it deleted one.
- <li>Stop <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=syslog&amp;sektion=3">syslog(3)</a> from reconnecting to /dev/log on an ENOBUFS as this doesn't help, and it hurts <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=chroot&amp;sektion=2">chroot(2)</a>'ed processes.
+ <li>Stop <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=syslog&amp;sektion=3">syslog(3)</a> from reconnecting to /dev/log on an ENOBUFS as this doesn't help, and it hurts <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=chroot&amp;sektion=2">chroot(2)</a>'ed processes.<br>
+     <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a> <!-- XXX 3.2-stable -->
  <li>Change <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=chroot&amp;sektion=2">chroot(2)</a>'ed daemons <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=portmap&amp;sektion=8">portmap(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rstatd&amp;sektion=8">rstatd(8)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rusersd&amp;sektion=8">rusersd(8)</a> to use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=openlog&amp;sektion=3">openlog(3)</a> with LOG_NDELAY.
  <li>Implement <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sigaltstack&amp;sektion=2">sigaltstack(2)</a> under pthreads.
  <li>Copy the thread sources (including CVS history) from  lib/libc_r to lib/pthread, and move libc_r into the Attic.
-Line 441
+Line 564
 Line 441
 Line 564
  <li>New table manipulation syntax for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf.conf&amp;sektion=5">pf.conf(5)</a>, and a corresponding new -Tl option for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&amp;sektion=8">pfctl(8)</a>.
  <li>Add support for active/inactive <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&amp;sektion=4">pf(4)</a> tablesets in the kernel
  <!-- ^ 20030109 -->
- <li>Enable SET/ACK in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&amp;sektion=8">isakmpd(8)</a> when acting as an ike-mode-cfg responder.
+ <li>Enable SET/ACK in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&amp;sektion=8">isakmpd(8)</a> when acting as an ike-mode-cfg responder.<br>
+     <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a> <!-- XXX 3.2-stable -->
  <li>Improvements and fixes to batch mode <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sftp&amp;sektion=1">sftp(1)</a>.
  <!-- ^ 20020108 -->
  <li>Big <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=strlcpy&amp;sektion=3">strlcpy/strlcat(3)</a> makeover for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=csh&amp;sektion=1">csh(1)</a>.
-Line 473
+Line 597
 Line 473
 Line 597
  <li>Make sure we don't try to free a null pointer in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=whois&amp;sektion=1">whois(1)</a>.
  <li>Change 'no-route' implementation from a flag in the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&amp;sektion=4">pf(4)</a> rule address to an address type.
  <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&amp;sektion=4">pf(4)</a> skip-step calculation honour the 'no-route' keyword.
- <li>Remove code in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ld&amp;sektion=1">ld(1)</a> to force linking against a specific library version.
+ <li>Remove code in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ld&amp;sektion=1">ld(1)</a> to force linking against a specific library version.<br>
+     <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a> <!-- XXX 3.2-stable -->
  <li>Add console support for Polish and Turkish keyboard layouts.
  <!-- ^ 20030104 -->
  <li>Add the userland support for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&amp;sektion=4">pf(4)</a> tables to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&amp;sektion=8">pfctl(8)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=authpf&amp;sektion=8">authpf(8)</a>.
-Line 766
+Line 891
 Line 766
 Line 891
  <li>New -n option for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=syslogd&amp;sektion=8">syslogd(8)</a> to disable DNS lookups.
  <!-- ^ 20021121 -->
  <li>Correct a format string bug in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=routed&amp;sektion=8">routed(8)</a>'s, er, Makefile.
- <li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=at&amp;sektion=1">at(1)</a> breakage when two jobs are set for the same time.
+ <li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=at&amp;sektion=1">at(1)</a> breakage when two jobs are set for the same time.<br>
+     <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a> <!-- XXX 3.2-stable -->
  <li>Correct a use-before-init in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xterm&amp;sektion=1">xterm(1)</a>.
  <!-- ^ 20021120 -->
  <li>Create a simple lookup table mechanism [dev/pci/pci.c:pci_matchbyid()] to match PCI device IDs, and have several drivers use it.
-Line 798
+Line 924
 Line 798
 Line 924
  <!-- ^ 20021113 -->
  <li>Add a null transform to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=crypto&amp;sektion=4">crypto(4)</a>, enabled via sysctl kern.cryptodevallowsoft=1.
  <li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=systrace&amp;sektion=1">systrace(1)</a>'s determination of the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=execve&amp;sektion=2">execve(2)</a> filename.
- <li>Kernel IPsec code checks for short IP headers.
+ <li>Kernel IPsec code checks for short IP headers.<br>
+     <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a> <!-- XXX 3.2-stable -->
  <!-- ^ 20021112 -->
  <!-- ^ 20021111 -->
  <!-- ^ 20021110 -->