version 1.880, 2003/06/12 20:54:58 |
version 1.881, 2003/07/28 15:15:55 |
|
|
|
|
<p> |
<p> |
<h3><font color="#0000e0">We are working on OpenBSD-current.</font></h3><p> |
<h3><font color="#0000e0">We are working on OpenBSD-current.</font></h3><p> |
The following list sums up (almost) all the changes made up to June 7. |
The following list sums up (almost) all the changes made up to June 24. |
<p> |
<p> |
|
|
<ul> |
<ul> |
|
<!-- ^ 20030625 --> |
|
<li>Add i386 a.out emulation for dynamic binaries. |
|
<li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=grep&sektion=1">grep(1)</a>'s -w option. |
|
<li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=grep&sektion=1">grep(1)</a>'s -E, -F and -G options override the program name, and mutually exclusive. |
|
<li>Make fgrep functionality of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=grep&sektion=1">grep(1)</a> work. |
|
<li>Unbreak POSIX:: functions under Perl 5.8.0. |
|
<li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a>'s route-to option work for IPv6 link-local addresses. |
|
<li>Reintroduce some routing socket code (lost in a previous update) that could cause less-specific routes to be updated by mistake. |
|
<li>Lots of int -> u_int in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>. |
|
<li>IPv6 neighbour discovery updates from KAME. |
|
<!-- ^ 20030624 --> |
|
<li>Avoid using regexes completely for simple string searches in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=grep&sektion=1">grep(1)</a>. |
|
<li>Improve the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=compress&sektion=1">compress(1)</a>-based <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=zmore&sektion=1">zmore(1)</a> script and install instead of the GNU gzip version. |
|
<li>Teach <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=kdump&sektion=1">kdump(1)</a> about many more dev/, net*/ and crypto/ ioctls. |
|
<li>Remove the unnecessary (and broken) printf builtin from <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=csh&sektion=1">csh(1)</a>. |
|
<li>Don't use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getopt&sektion=3">getopt(3)</a> in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=printf&sektion=1">printf(1)</a> since this causes formats beginning with a hyphen to be interpreted as flags. |
|
<li>Add a simple <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=zmore&sektion=1">zmore(1)</a> script using <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=compress&sektion=1">compress(1)</a>. |
|
<li>Add <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pcmcia&sektion=4">pcmcia(4)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wi&sektion=4">wi(4)</a> support for sparc. |
|
<li>Install a host route for a point-to-point interface even if a connected net route via a broadcast interface exists (NetBSD PR 21903.) |
|
<li>Check for nfds<0 in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=poll&sektion=2">poll(2)</a>. <!-- Uh-oh. --> |
|
<li>Better temp file handling in XFree's <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=gccmakedep&sektion=1">gccmakedep(1)</a>. |
|
<li>Temporarily work around a tables-related use-after-free in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a>. |
|
<li>Improve <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=grep&sektion=1">grep(1)</a>'s detection of binary files, and add/fix a number of compatibility options. |
|
<li>Improvements to the installer's handling of network settings when upgrading. |
|
<!-- ^ 20030623 --> |
|
<li>Remove <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ypserv&sektion=8">ypserv(8)</a> files without copyright information. |
|
<li>Install freegrep as {e,f,z,ze,zf}grep as well as <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=grep&sektion=1">grep(1)</a>. |
|
<li>Upgrade (non-GNU) <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=grep&sektion=1">grep(1)</a> to freegrep 0.16. |
|
<li>Remove GNU grep and (most of) GNU gzip from the tree. BSD-licensed alternatives do the same jobs. |
|
<li>Reenable the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ld.so&sektion=1">ld.so(1)</a> library load order randomiser, with fixes. |
|
<!-- ^ 20030622 --> |
|
<li>Make user filename selection in the installer more robust. |
|
<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fflush&sektion=3">fflush(3)</a> stdout when doing continuous queue monitoring with <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&sektion=8">pfctl(8)</a>. |
|
<li>Add fine-grained counters for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> state entries, allowing for traffic reporting via <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfsync&sektion=4">pfsync(4)</a>. |
|
<li>Add per-process exec/fork/exit hooks, use them the fix up <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=brk&sektion=2">brk(2)</a> under Linux emulation, and so fix Java. |
|
<!-- ^ 20030621 --> |
|
<li>Add MSS support to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a>'s synproxy. |
|
<li>Initialise properly before calling <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getusershell&sektion=3">getusershell(3)</a> in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=su&sektion=1">su(1)</a>. |
|
<li>More helpful <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> BAD ICMP debug message. |
|
<li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a> print some log messages when giving up on a response to the last message. |
|
<!-- XXX frame pointer canonicalisation fix for propolice gnu/egcs/gcc/combine.c r1.3-1.4 --> |
|
<!-- ^ 20030620 --> |
|
<li>Use _PW_NAME_LEN instead of a hard-coded 8 char username limit in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=top&sektion=1">top(1)</a>. |
|
<li>Remove roll-your-own string functions from <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=top&sektion=1">top(1)</a>. |
|
<li>Have <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=comsat&sektion=8">comsat(8)</a> use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fseeko&sektion=3">fseeko(3)</a> instead of fseek(). |
|
<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rpcgen&sektion=1">rpcgen(1)</a> now generates much prettier ANSI C code. |
|
<li>Back out the recent <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xdm&sektion=1">xdm(1)</a> '-nolisten tcp' change. |
|
<li>Plug some memory leaks in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=popa3d&sektion=8">popa3d(8)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=systrace&sektion=1">systrace(1)</a>. |
|
<li>Strip the newline from user input when requesting a continuation filename in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=restore&sektion=8">restore(8)</a> (PR#3324.) |
|
<!-- ^ 20030619 --> |
|
<li>Fix a bug that condemned <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fortune&sektion=6">fortune(6)</a> to be always inoffensive. |
|
<li>Have <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bpf&sektion=4">bpf(4)</a> return ENOBUFS on <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=malloc&sektion=9">malloc(9)</a> failure instead of causing a panic (PR#2235,PR#2236,PR#2640.) |
|
<li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=m4&sektion=1">m4(1)</a>'s handling of builtin and user macros more consistent, and allow pushdef to work for builtins. |
|
<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xdm&sektion=1">xdm(1)</a> now passes '-nolisten tcp' to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=Xserver&sektion=1">Xserver(1)</a> by default for local display :0. |
|
<li>Re-enable UDMA mode 5 for HPT370A <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pciide&sektion=4">pciide(4)</a> devices, now that timing and interrupt problems are fixed. |
|
<li>Fix a sizeof oops that broke <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=less&sektion=1">less(1)</a>'s -N option. |
|
<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=hme&sektion=4">hme(4)</a> now advertises its VLAN capability. |
|
<li>Properly display no-route addresses when expanding label macros in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&sektion=8">pfctl(8)</a>. |
|
<li>Back out the recent <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> smartcard key fix, it violates PKCS#1. |
|
<li>When the expansion of the $srcaddr or $dstaddr label macro is a table, have <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&sektion=8">pfctl(8)</a> print the table name instead of garbage. |
|
<li>Unbreak <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=vmstat&sektion=8">vmstat(8)</a> on diskless machines (PR#3322.) |
|
<li>Relax <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rtadvd.conf&sektion=5">rtadvd.conf(5)</a> syntax, removing the need for the addrs option. |
|
<!-- ^ 20030618 --> |
|
<li>Use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getifaddrs&sektion=3">getifaddrs(3)</a> in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=amd&sektion=8">amd(8)</a>, fixing the 'wire' location selector. |
|
<li>Return the correct error message if the user tries to kill a non-existent process from <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=top&sektion=1">top(1)</a>. |
|
<!-- ^ 20030617 --> |
|
<li>Add a few missing dead-key composition entries (PR#3295, with an entry for cedilla as well as for double-quote.) |
|
<li>Avoid a null deref in cnkqfilter() (/dev/console <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=kqueue&sektion=2">kqueue(2)</a> crash, PR#3317.) |
|
<li>Fix a logic bug in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mtree&sektion=8">mtree(8)</a> that was making -U return an error just like -u. |
|
<li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh-add&sektion=1">ssh-add(1)</a> redisplay the key comment when prompting after a bad passphrase. |
|
<li>Fix "bad decrypted len" errors in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> when using smartcard-stored public keys (OpenSSH bug <a href="http://bugzilla.mindrot.org/show_bug.cgi?id=592">592</a>.) |
|
<li>Updates for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=systrace&sektion=1">systrace(1)</a>, support freeing of old policies and escaping of special characters. |
|
<li>Better byte-swapping behaviour in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dc&sektion=4">dc(4)</a>, fixing mac address reads on big-endian architectures. |
|
<li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhclient-script&sektion=8">dhclient-script(8)</a> fix up <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=resolv.conf&sektion=5">resolv.conf(5)</a>'s permissions. |
|
<!-- ^ 20030616 --> |
|
<li>Stop <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a> losing ID information when rekeying. |
|
<!-- ^ 20030615 --> |
|
<li>Add new '-c class' option to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=encrypt&sektion=1">encrypt(1)</a>, which will use the login class to select the password cipher. |
|
<li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=kqueue&sektion=2">kqueue(2)</a> on ptys (PR#3209.) |
|
<li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=user&sektion=8">user(8)</a>, only check login class validity when the login class is set. |
|
<li>Fix some sizeof oopses in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=top&sektion=1">top(1)</a>. |
|
<li>Allocate cleared memory for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a> payload buffers. |
|
<li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> TCP state checks when using a combination of asymmetric window scaling and SACK.<br> |
|
<a href="stable.html"><font color="#00b000">[Applied to stable]</font></a> |
|
<!-- ^ 20030614 --> |
|
<li>Add __LP64__ and _LP64 <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cpp&sektion=1">cpp(1)</a> predefined macros for alpha and sparc. |
|
<li>Sync <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=em&sektion=4">em(4)</a> with FreeBSD updates and enable on sparc64. |
|
<li>Add -0 (zero) flag to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pax&sektion=1">pax(1)</a> allowing the filename separator to be a NUL instead of a newline (PR#3310.) |
|
<li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xargs&sektion=1">xargs(1)</a>, don't close the descriptor we just created with <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dup2&sektion=2">dup2(2)</a>. |
|
<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=security&sektion=8">security(8)</a> allows dots in usernames consistent with <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=user&sektion=8">user(8)</a> changes. |
|
<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&sektion=8">pfctl(8)</a>'s show anchor command now respects the 'quiet' flag. |
|
<li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhclient-script&sektion=8">dhclient-script(8)</a> respect symlinks. |
|
<li>Remove obsolete Rijndael code from libcrypto. |
|
<li>Support more Intel Fast Ethernet and Gigabit Ethernet cards. |
|
<li>Use real varargs in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=top&sektion=1">top(1)</a> instead of hacking it. |
|
<!-- ^ 20030613 --> |
|
<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh-agent&sektion=1">ssh-agent(1)</a> now use the key label from a PKCS#12 cert if one is available, instead of just showing 'smartcard key.' |
|
<li>Stop <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=security&sektion=8">security(8)</a> complaining about usernames ending in '$'. |
|
<li>Speed up <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=m4&sektion=1">m4(1)</a> traced macros, helps with recent GNU autoconf. |
|
<li>Make queues work on <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tun&sektion=4">tun(4)</a> interfaces. Not recommended (should assign to tun, then queue on physical interface) but sometimes necessary, e.g. for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pppoe&sektion=8">pppoe(8)</a>. |
|
<li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&sektion=8">pfctl(8)</a> don't apply a netmask to an interface name.<br> |
|
<a href="stable.html"><font color="#00b000">[Applied to stable]</font></a> |
|
<li>Allow the kernel to compile with NFS but without FIFO. |
|
<li>POSIXify <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xargs&sektion=1">xargs(1)</a>, mostly from FreeBSD. |
|
<!-- ^ 20030612 --> |
|
<li>Much ansification and de-registering. |
|
<li>Add NAT-T dump support to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcpdump&sektion=8">tcpdump(8)</a>. |
|
<li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh-agent&sektion=1">ssh-agent(1)</a> lifetime and confirmation features work with smartcard keys. |
|
<li>Build <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bs&sektion=6">bs(6)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=hunt&sektion=6">hunt(6)</a> again now that they have good licenses. |
|
<li>Add option MFS to the kernel on several architectures, to fix upgrade breakage. |
|
<li>Some RFC3542 Advanced Sockets API for IPv6 updates. |
|
<li>Add an ARM target for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=gcc&sektion=1">gcc(1)</a>. |
|
<!-- ^ 20030611 --> |
|
<li>De-uglify <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhclient-script&sektion=8">dhclient-script(8)</a>, and (mostly) fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=resolv.conf&sektion=5">resolv.conf(5)</a> update problems. |
|
<li>Allow zero intervals in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=newsyslog&sektion=8">newsyslog(8)</a> config files. |
|
<li>Fix a missing initialisation in pf_test() and avoid random state table additions. |
|
<li>Add login class support (-class option) to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=adduser&sektion=8">adduser(8)</a>. |
|
<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rmail&sektion=8">rmail(8)</a> now tells sendmail to deliver in the foreground. |
|
<li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rmail&sektion=8">rmail(8)</a> pass the -G flag to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sendmail&sektion=8">sendmail(8)</a> as expected. |
|
<li>Install <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rcs2log&sektion=1">rcs2log(1)</a> properly (PR#3298.) |
|
<li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=user&sektion=8">user(8)</a> check that a login class exists before using it (PR#2699.) |
|
<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=user&sektion=8">user(8)</a> changes from NetBSD:<br> |
|
<ul> |
|
<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=useradd&sektion=8">useradd(8)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=usermod&sektion=8">usermod(8)</a> now check that the encrypted password length is correct. |
|
<li>Log user and group modifications via syslog. |
|
<li>Pickier command line option checks. |
|
<li>When deleting a user including the profile, remove all references to that user from /etc/group. |
|
<li>Checks that a group is in the local files (not from YP) before attempting to modify it. |
|
</ul> |
|
<li>Don't allow /dev/crypto to be opened at all if the kernel is compiled without the CRYPTO option.<br> |
|
<a href="stable.html"><font color="#00b000">[Applied to stable]</font></a> |
|
<li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mount&sektion=2">mount(2)</a> return EROFS instead of EPERM when trying to mount a dirty filesystem. |
|
<li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a> more robust when faced with unknown ID types.<br> |
|
<a href="stable.html"><font color="#00b000">[Applied to stable]</font></a> |
|
<li>Change the timer pthread uses, allowing threaded apps to be profiled. |
|
<!-- ^ 20030610 --> |
|
<li>Allow <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=newsyslog&sektion=8">newsyslog(8)</a> to detect negative numbers in pid files. |
|
<li>Stop <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sudo&sektion=8">sudo(8)</a> busy-waiting when waiting for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sendmail&sektion=8">sendmail(8)</a> to do its work. |
|
<li>Better CDDB input checking for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cdio&sektion=1">cdio(1)</a>. |
|
<li>Make the byte order more uniform in the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> nat code. |
|
<li>Back out tcp_trace IPv6 changes and fix PR#3283. |
|
<li>Stability fixes for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=siop&sektion=4">siop(4)</a> when under heavy load.<br> |
|
<a href="stable.html"><font color="#00b000">[Applied to stable]</font></a> <!-- XXX 3.3-stable --> |
|
<!-- ^ 20030609 --> |
|
<li>Allow <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=user&sektion=8">user(8)</a>'s -e and -f to accept both month-day-year and seconds-since-epoch times. From NetBSD. |
|
<li>Detect oversized usernames in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pwd_mkdb&sektion=8">pwd_mkdb(8)</a>. |
|
<li>Check for oversize group names to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=user&sektion=8">user(8)</a> and fail the command. |
|
<li>Fix an off-by-one in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=user&sektion=8">user(8)</a>. |
|
<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=m4&sektion=1">m4(1)</a>'s patsubst command now accepts null patterns. This appears to fix GNU Autoconf 2.57. |
|
<li>A <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> table on an anchor rule creates a real anchor, so <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&sektion=8">pfctl(8)</a> works the way one expects. |
<!-- ^ 20030608 --> |
<!-- ^ 20030608 --> |
<li>Stop <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&sektion=8">pfctl(8)</a> (with the -ss option) printing IPv4 address/netmask pairs as a.b.c.d/128. |
<li>Stop <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&sektion=8">pfctl(8)</a> (with the -ss option) printing IPv4 address/netmask pairs as a.b.c.d/128. |
<li>Have <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=identd&sektion=8">identd(8)</a> run by default as user _identd if possible, and fall back to user nobody if that fails. |
<li>Have <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=identd&sektion=8">identd(8)</a> run by default as user _identd if possible, and fall back to user nobody if that fails. |
|
|
<!-- ^ 20030602 --> |
<!-- ^ 20030602 --> |
<li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&sektion=8">pfctl(8)</a> process 'show' options before options that change the rulebase. |
<li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&sektion=8">pfctl(8)</a> process 'show' options before options that change the rulebase. |
<li>Huge license cleanup all over the tree. |
<li>Huge license cleanup all over the tree. |
<li>Fix random lockups of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cac&sektion=4">cac(4)</a> devices. |
<li>Fix random lockups of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cac&sektion=4">cac(4)</a> devices.<br> |
|
<a href="stable.html"><font color="#00b000">[Applied to stable]</font></a> |
<li>Deprecate the dangerous VerifyReverseMapping <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a> option, and replace with new UseDNS option (enabled by default.) |
<li>Deprecate the dangerous VerifyReverseMapping <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a> option, and replace with new UseDNS option (enabled by default.) |
<li>Install OpenSSL include files in /usr/include/openssl instead of ../ssl. |
<li>Install OpenSSL include files in /usr/include/openssl instead of ../ssl. |
<li>Remove the advertising clause from many license statements. |
<li>Remove the advertising clause from many license statements. |
|
|
<li>Add LD_NORANDOM to the list of environment variables that get zapped when running setuid/setgid. |
<li>Add LD_NORANDOM to the list of environment variables that get zapped when running setuid/setgid. |
<li>Load dynamic libraries in random order, to reduce the probability of an attacker guessing the address of the loaded code. Define LD_NORANDOM to disable. |
<li>Load dynamic libraries in random order, to reduce the probability of an attacker guessing the address of the loaded code. Define LD_NORANDOM to disable. |
<!-- ^ 20030530 --> |
<!-- ^ 20030530 --> |
<li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhclient&sektion=8">dhclient(8)</a> more robust by accept non-DHCPNAK messages with yiaddr=0.0.0.0, as sent by some common DHCP servers that ignore the RFC. |
<li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhclient&sektion=8">dhclient(8)</a> more robust by accept non-DHCPNAK messages with yiaddr=0.0.0.0, as sent by some common DHCP servers that ignore the RFC.<br> |
|
<a href="stable.html"><font color="#00b000">[Applied to stable]</font></a> |
<li>Reorder the sections in many manpages. |
<li>Reorder the sections in many manpages. |
<li>Use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=seteuid&sektion=2">sete[ug]id(2)</a> as well as set[ug]id() in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> when doing privsep and when permanently setting the [ug]id. |
<li>Use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=seteuid&sektion=2">sete[ug]id(2)</a> as well as set[ug]id() in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> when doing privsep and when permanently setting the [ug]id. |
<li>When setting the tcp6 mss, fetch the link mtu using IN6_LINKMTU() (which takes neighbour discovery mtu settings into account) instead of always using the interface mtu. |
<li>When setting the tcp6 mss, fetch the link mtu using IN6_LINKMTU() (which takes neighbour discovery mtu settings into account) instead of always using the interface mtu. |