[BACK]Return to plus.html CVS log [TXT][DIR] Up to [local] / www

Diff for /www/plus.html between version 1.880 and 1.881

version 1.880, 2003/06/12 20:54:58 version 1.881, 2003/07/28 15:15:55
Line 52 
Line 52 
   
 <p>  <p>
 <h3><font color="#0000e0">We are working on OpenBSD-current.</font></h3><p>  <h3><font color="#0000e0">We are working on OpenBSD-current.</font></h3><p>
 The following list sums up (almost) all the changes made up to June 7.  The following list sums up (almost) all the changes made up to June 24.
 <p>  <p>
   
 <ul>  <ul>
   <!-- ^ 20030625 -->
   <li>Add i386 a.out emulation for dynamic binaries.
   <li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=grep&amp;sektion=1">grep(1)</a>'s -w option.
   <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=grep&amp;sektion=1">grep(1)</a>'s -E, -F and -G options override the program name, and mutually exclusive.
   <li>Make fgrep functionality of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=grep&amp;sektion=1">grep(1)</a> work.
   <li>Unbreak POSIX:: functions under Perl 5.8.0.
   <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&amp;sektion=4">pf(4)</a>'s route-to option work for IPv6 link-local addresses.
   <li>Reintroduce some routing socket code (lost in a previous update) that could cause less-specific routes to be updated by mistake.
   <li>Lots of int -> u_int in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&amp;sektion=1">ssh(1)</a>.
   <li>IPv6 neighbour discovery updates from KAME.
   <!-- ^ 20030624 -->
   <li>Avoid using regexes completely for simple string searches in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=grep&amp;sektion=1">grep(1)</a>.
   <li>Improve the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=compress&amp;sektion=1">compress(1)</a>-based <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=zmore&amp;sektion=1">zmore(1)</a> script and install instead of the GNU gzip version.
   <li>Teach <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=kdump&amp;sektion=1">kdump(1)</a> about many more dev/, net*/ and crypto/ ioctls.
   <li>Remove the unnecessary (and broken) printf builtin from <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=csh&amp;sektion=1">csh(1)</a>.
   <li>Don't use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getopt&amp;sektion=3">getopt(3)</a> in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=printf&amp;sektion=1">printf(1)</a> since this causes formats beginning with a hyphen to be interpreted as flags.
   <li>Add a simple <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=zmore&amp;sektion=1">zmore(1)</a> script using <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=compress&amp;sektion=1">compress(1)</a>.
   <li>Add <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pcmcia&amp;sektion=4">pcmcia(4)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wi&amp;sektion=4">wi(4)</a> support for sparc.
   <li>Install a host route for a point-to-point interface even if a connected net route via a broadcast interface exists (NetBSD PR 21903.)
   <li>Check for nfds&lt;0 in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=poll&amp;sektion=2">poll(2)</a>. <!-- Uh-oh. -->
   <li>Better temp file handling in XFree's <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=gccmakedep&amp;sektion=1">gccmakedep(1)</a>.
   <li>Temporarily work around a tables-related use-after-free in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&amp;sektion=4">pf(4)</a>.
   <li>Improve <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=grep&amp;sektion=1">grep(1)</a>'s detection of binary files, and add/fix a number of compatibility options.
   <li>Improvements to the installer's handling of network settings when upgrading.
   <!-- ^ 20030623 -->
   <li>Remove <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ypserv&amp;sektion=8">ypserv(8)</a> files without copyright information.
   <li>Install freegrep as {e,f,z,ze,zf}grep as well as <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=grep&amp;sektion=1">grep(1)</a>.
   <li>Upgrade (non-GNU) <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=grep&amp;sektion=1">grep(1)</a> to freegrep 0.16.
   <li>Remove GNU grep and (most of) GNU gzip from the tree. BSD-licensed alternatives do the same jobs.
   <li>Reenable the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ld.so&amp;sektion=1">ld.so(1)</a> library load order randomiser, with fixes.
   <!-- ^ 20030622 -->
   <li>Make user filename selection in the installer more robust.
   <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fflush&amp;sektion=3">fflush(3)</a> stdout when doing continuous queue monitoring with <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&amp;sektion=8">pfctl(8)</a>.
   <li>Add fine-grained counters for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&amp;sektion=4">pf(4)</a> state entries, allowing for traffic reporting via <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfsync&amp;sektion=4">pfsync(4)</a>.
   <li>Add per-process exec/fork/exit hooks, use them the fix up <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=brk&amp;sektion=2">brk(2)</a> under Linux emulation, and so fix Java.
   <!-- ^ 20030621 -->
   <li>Add MSS support to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&amp;sektion=4">pf(4)</a>'s synproxy.
   <li>Initialise properly before calling <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getusershell&amp;sektion=3">getusershell(3)</a> in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=su&amp;sektion=1">su(1)</a>.
   <li>More helpful <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&amp;sektion=4">pf(4)</a> BAD ICMP debug message.
   <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&amp;sektion=8">isakmpd(8)</a> print some log messages when giving up on a response to the last message.
   <!-- XXX frame pointer canonicalisation fix for propolice gnu/egcs/gcc/combine.c r1.3-1.4 -->
   <!-- ^ 20030620 -->
   <li>Use _PW_NAME_LEN instead of a hard-coded 8 char username limit in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=top&amp;sektion=1">top(1)</a>.
   <li>Remove roll-your-own string functions from <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=top&amp;sektion=1">top(1)</a>.
   <li>Have <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=comsat&amp;sektion=8">comsat(8)</a> use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fseeko&amp;sektion=3">fseeko(3)</a> instead of fseek().
   <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rpcgen&amp;sektion=1">rpcgen(1)</a> now generates much prettier ANSI C code.
   <li>Back out the recent <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xdm&amp;sektion=1">xdm(1)</a> '-nolisten tcp' change.
   <li>Plug some memory leaks in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=popa3d&amp;sektion=8">popa3d(8)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=systrace&amp;sektion=1">systrace(1)</a>.
   <li>Strip the newline from user input when requesting a continuation filename in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=restore&amp;sektion=8">restore(8)</a> (PR#3324.)
   <!-- ^ 20030619 -->
   <li>Fix a bug that condemned <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fortune&amp;sektion=6">fortune(6)</a> to be always inoffensive.
   <li>Have <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bpf&amp;sektion=4">bpf(4)</a> return ENOBUFS on <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=malloc&amp;sektion=9">malloc(9)</a> failure instead of causing a panic (PR#2235,PR#2236,PR#2640.)
   <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=m4&amp;sektion=1">m4(1)</a>'s handling of builtin and user macros more consistent, and allow pushdef to work for builtins.
   <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xdm&amp;sektion=1">xdm(1)</a> now passes '-nolisten tcp' to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=Xserver&amp;sektion=1">Xserver(1)</a> by default for local display :0.
   <li>Re-enable UDMA mode 5 for HPT370A <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pciide&amp;sektion=4">pciide(4)</a> devices, now that timing and interrupt problems are fixed.
   <li>Fix a sizeof oops that broke <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=less&amp;sektion=1">less(1)</a>'s -N option.
   <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=hme&amp;sektion=4">hme(4)</a> now advertises its VLAN capability.
   <li>Properly display no-route addresses when expanding label macros in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&amp;sektion=8">pfctl(8)</a>.
   <li>Back out the recent <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&amp;sektion=1">ssh(1)</a> smartcard key fix, it violates PKCS#1.
   <li>When the expansion of the $srcaddr or $dstaddr label macro is a table, have <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&amp;sektion=8">pfctl(8)</a> print the table name instead of garbage.
   <li>Unbreak <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=vmstat&amp;sektion=8">vmstat(8)</a> on diskless machines (PR#3322.)
   <li>Relax <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rtadvd.conf&amp;sektion=5">rtadvd.conf(5)</a> syntax, removing the need for the addrs option.
   <!-- ^ 20030618 -->
   <li>Use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getifaddrs&amp;sektion=3">getifaddrs(3)</a> in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=amd&amp;sektion=8">amd(8)</a>, fixing the 'wire' location selector.
   <li>Return the correct error message if the user tries to kill a non-existent process from <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=top&amp;sektion=1">top(1)</a>.
   <!-- ^ 20030617 -->
   <li>Add a few missing dead-key composition entries (PR#3295, with an entry for cedilla as well as for double-quote.)
   <li>Avoid a null deref in cnkqfilter() (/dev/console <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=kqueue&amp;sektion=2">kqueue(2)</a> crash, PR#3317.)
   <li>Fix a logic bug in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mtree&amp;sektion=8">mtree(8)</a> that was making -U return an error just like -u.
   <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh-add&amp;sektion=1">ssh-add(1)</a> redisplay the key comment when prompting after a bad passphrase.
   <li>Fix "bad decrypted len" errors in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&amp;sektion=1">ssh(1)</a> when using smartcard-stored public keys (OpenSSH bug <a href="http://bugzilla.mindrot.org/show_bug.cgi?id=592">592</a>.)
   <li>Updates for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=systrace&amp;sektion=1">systrace(1)</a>, support freeing of old policies and escaping of special characters.
   <li>Better byte-swapping behaviour in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dc&amp;sektion=4">dc(4)</a>, fixing mac address reads on big-endian architectures.
   <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhclient-script&amp;sektion=8">dhclient-script(8)</a> fix up <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=resolv.conf&amp;sektion=5">resolv.conf(5)</a>'s permissions.
   <!-- ^ 20030616 -->
   <li>Stop <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&amp;sektion=8">isakmpd(8)</a> losing ID information when rekeying.
   <!-- ^ 20030615 -->
   <li>Add new '-c class' option to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=encrypt&amp;sektion=1">encrypt(1)</a>, which will use the login class to select the password cipher.
   <li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=kqueue&amp;sektion=2">kqueue(2)</a> on ptys (PR#3209.)
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=user&amp;sektion=8">user(8)</a>, only check login class validity when the login class is set.
   <li>Fix some sizeof oopses in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=top&amp;sektion=1">top(1)</a>.
   <li>Allocate cleared memory for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&amp;sektion=8">isakmpd(8)</a> payload buffers.
   <li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&amp;sektion=4">pf(4)</a> TCP state checks when using a combination of asymmetric window scaling and SACK.<br>
       <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
   <!-- ^ 20030614 -->
   <li>Add __LP64__ and _LP64 <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cpp&amp;sektion=1">cpp(1)</a> predefined macros for alpha and sparc.
   <li>Sync <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=em&amp;sektion=4">em(4)</a> with FreeBSD updates and enable on sparc64.
   <li>Add -0 (zero) flag to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pax&amp;sektion=1">pax(1)</a> allowing the filename separator to be a NUL instead of a newline (PR#3310.)
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xargs&amp;sektion=1">xargs(1)</a>, don't close the descriptor we just created with <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dup2&amp;sektion=2">dup2(2)</a>.
   <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=security&amp;sektion=8">security(8)</a> allows dots in usernames consistent with <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=user&amp;sektion=8">user(8)</a> changes.
   <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&amp;sektion=8">pfctl(8)</a>'s show anchor command now respects the 'quiet' flag.
   <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhclient-script&amp;sektion=8">dhclient-script(8)</a> respect symlinks.
   <li>Remove obsolete Rijndael code from libcrypto.
   <li>Support more Intel Fast Ethernet and Gigabit Ethernet cards.
   <li>Use real varargs in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=top&amp;sektion=1">top(1)</a> instead of hacking it.
   <!-- ^ 20030613 -->
   <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&amp;sektion=1">ssh(1)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh-agent&amp;sektion=1">ssh-agent(1)</a> now use the key label from a PKCS#12 cert if one is available, instead of just showing 'smartcard key.'
   <li>Stop <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=security&amp;sektion=8">security(8)</a> complaining about usernames ending in '$'.
   <li>Speed up <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=m4&amp;sektion=1">m4(1)</a> traced macros, helps with recent GNU autoconf.
   <li>Make queues work on <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tun&amp;sektion=4">tun(4)</a> interfaces. Not recommended (should assign to tun, then queue on physical interface) but sometimes necessary, e.g. for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pppoe&amp;sektion=8">pppoe(8)</a>.
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&amp;sektion=8">pfctl(8)</a> don't apply a netmask to an interface name.<br>
       <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
   <li>Allow the kernel to compile with NFS but without FIFO.
   <li>POSIXify <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xargs&amp;sektion=1">xargs(1)</a>, mostly from FreeBSD.
   <!-- ^ 20030612 -->
   <li>Much ansification and de-registering.
   <li>Add NAT-T dump support to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcpdump&amp;sektion=8">tcpdump(8)</a>.
   <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh-agent&amp;sektion=1">ssh-agent(1)</a> lifetime and confirmation features work with smartcard keys.
   <li>Build <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bs&amp;sektion=6">bs(6)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=hunt&amp;sektion=6">hunt(6)</a> again now that they have good licenses.
   <li>Add option MFS to the kernel on several architectures, to fix upgrade breakage.
   <li>Some RFC3542 Advanced Sockets API for IPv6 updates.
   <li>Add an ARM target for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=gcc&amp;sektion=1">gcc(1)</a>.
   <!-- ^ 20030611 -->
   <li>De-uglify <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhclient-script&amp;sektion=8">dhclient-script(8)</a>, and (mostly) fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=resolv.conf&amp;sektion=5">resolv.conf(5)</a> update problems.
   <li>Allow zero intervals in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=newsyslog&amp;sektion=8">newsyslog(8)</a> config files.
   <li>Fix a missing initialisation in pf_test() and avoid random state table additions.
   <li>Add login class support (-class option) to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=adduser&amp;sektion=8">adduser(8)</a>.
   <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rmail&amp;sektion=8">rmail(8)</a> now tells sendmail to deliver in the foreground.
   <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rmail&amp;sektion=8">rmail(8)</a> pass the -G flag to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sendmail&amp;sektion=8">sendmail(8)</a> as expected.
   <li>Install <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rcs2log&amp;sektion=1">rcs2log(1)</a> properly (PR#3298.)
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=user&amp;sektion=8">user(8)</a> check that a login class exists before using it (PR#2699.)
   <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=user&amp;sektion=8">user(8)</a> changes from NetBSD:<br>
           <ul>
             <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=useradd&amp;sektion=8">useradd(8)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=usermod&amp;sektion=8">usermod(8)</a> now check that the encrypted password length is correct.
             <li>Log user and group modifications via syslog.
             <li>Pickier command line option checks.
             <li>When deleting a user including the profile, remove all references to that user from /etc/group.
             <li>Checks that a group is in the local files (not from YP) before attempting to modify it.
           </ul>
   <li>Don't allow /dev/crypto to be opened at all if the kernel is compiled without the CRYPTO option.<br>
       <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
   <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mount&amp;sektion=2">mount(2)</a> return EROFS instead of EPERM when trying to mount a dirty filesystem.
   <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&amp;sektion=8">isakmpd(8)</a> more robust when faced with unknown ID types.<br>
       <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
   <li>Change the timer pthread uses, allowing threaded apps to be profiled.
   <!-- ^ 20030610 -->
   <li>Allow <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=newsyslog&amp;sektion=8">newsyslog(8)</a> to detect negative numbers in pid files.
   <li>Stop <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sudo&amp;sektion=8">sudo(8)</a> busy-waiting when waiting for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sendmail&amp;sektion=8">sendmail(8)</a> to do its work.
   <li>Better CDDB input checking for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cdio&amp;sektion=1">cdio(1)</a>.
   <li>Make the byte order more uniform in the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&amp;sektion=4">pf(4)</a> nat code.
   <li>Back out tcp_trace IPv6 changes and fix PR#3283.
   <li>Stability fixes for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=siop&amp;sektion=4">siop(4)</a> when under heavy load.<br>
       <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a> <!-- XXX 3.3-stable -->
   <!-- ^ 20030609 -->
   <li>Allow <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=user&amp;sektion=8">user(8)</a>'s -e and -f to accept both month-day-year and seconds-since-epoch times. From NetBSD.
   <li>Detect oversized usernames in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pwd_mkdb&amp;sektion=8">pwd_mkdb(8)</a>.
   <li>Check for oversize group names to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=user&amp;sektion=8">user(8)</a> and fail the command.
   <li>Fix an off-by-one in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=user&amp;sektion=8">user(8)</a>.
   <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=m4&amp;sektion=1">m4(1)</a>'s patsubst command now accepts null patterns. This appears to fix GNU Autoconf 2.57.
   <li>A <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&amp;sektion=4">pf(4)</a> table on an anchor rule creates a real anchor, so <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&amp;sektion=8">pfctl(8)</a> works the way one expects.
 <!-- ^ 20030608 -->  <!-- ^ 20030608 -->
 <li>Stop <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&amp;sektion=8">pfctl(8)</a> (with the -ss option) printing IPv4 address/netmask pairs as a.b.c.d/128.  <li>Stop <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&amp;sektion=8">pfctl(8)</a> (with the -ss option) printing IPv4 address/netmask pairs as a.b.c.d/128.
 <li>Have <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=identd&amp;sektion=8">identd(8)</a> run by default as user _identd if possible, and fall back to user nobody if that fails.  <li>Have <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=identd&amp;sektion=8">identd(8)</a> run by default as user _identd if possible, and fall back to user nobody if that fails.
Line 86 
Line 236 
 <!-- ^ 20030602 -->  <!-- ^ 20030602 -->
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&amp;sektion=8">pfctl(8)</a> process 'show' options before options that change the rulebase.  <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&amp;sektion=8">pfctl(8)</a> process 'show' options before options that change the rulebase.
 <li>Huge license cleanup all over the tree.  <li>Huge license cleanup all over the tree.
 <li>Fix random lockups of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cac&amp;sektion=4">cac(4)</a> devices.  <li>Fix random lockups of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cac&amp;sektion=4">cac(4)</a> devices.<br>
       <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
 <li>Deprecate the dangerous VerifyReverseMapping <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&amp;sektion=8">sshd(8)</a> option, and replace with new UseDNS option (enabled by default.)  <li>Deprecate the dangerous VerifyReverseMapping <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&amp;sektion=8">sshd(8)</a> option, and replace with new UseDNS option (enabled by default.)
 <li>Install OpenSSL include files in /usr/include/openssl instead of ../ssl.  <li>Install OpenSSL include files in /usr/include/openssl instead of ../ssl.
 <li>Remove the advertising clause from many license statements.  <li>Remove the advertising clause from many license statements.
Line 109 
Line 260 
 <li>Add LD_NORANDOM to the list of environment variables that get zapped when running setuid/setgid.  <li>Add LD_NORANDOM to the list of environment variables that get zapped when running setuid/setgid.
 <li>Load dynamic libraries in random order, to reduce the probability of an attacker guessing the address of the loaded code. Define LD_NORANDOM to disable.  <li>Load dynamic libraries in random order, to reduce the probability of an attacker guessing the address of the loaded code. Define LD_NORANDOM to disable.
 <!-- ^ 20030530 -->  <!-- ^ 20030530 -->
 <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhclient&amp;sektion=8">dhclient(8)</a> more robust by accept non-DHCPNAK messages with yiaddr=0.0.0.0, as sent by some common DHCP servers that ignore the RFC.  <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhclient&amp;sektion=8">dhclient(8)</a> more robust by accept non-DHCPNAK messages with yiaddr=0.0.0.0, as sent by some common DHCP servers that ignore the RFC.<br>
       <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
 <li>Reorder the sections in many manpages.  <li>Reorder the sections in many manpages.
 <li>Use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=seteuid&amp;sektion=2">sete[ug]id(2)</a> as well as set[ug]id() in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&amp;sektion=1">ssh(1)</a> when doing privsep and when permanently setting the [ug]id.  <li>Use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=seteuid&amp;sektion=2">sete[ug]id(2)</a> as well as set[ug]id() in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&amp;sektion=1">ssh(1)</a> when doing privsep and when permanently setting the [ug]id.
 <li>When setting the tcp6 mss, fetch the link mtu using IN6_LINKMTU() (which takes neighbour discovery mtu settings into account) instead of always using the interface mtu.  <li>When setting the tcp6 mss, fetch the link mtu using IN6_LINKMTU() (which takes neighbour discovery mtu settings into account) instead of always using the interface mtu.

Legend:
Removed from v.1.880  
changed lines
  Added in v.1.881