version 1.913, 2004/03/26 22:28:11 |
version 1.914, 2004/03/28 09:44:05 |
|
|
<!-- Erratum 015 (isakmpd) applied to stable here, -current is 20040310 --> |
<!-- Erratum 015 (isakmpd) applied to stable here, -current is 20040310 --> |
<li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=spamd&sektion=8">spamd(8)</a>'s logging when the blacklist limit is hit. |
<li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=spamd&sektion=8">spamd(8)</a>'s logging when the blacklist limit is hit. |
<li>Allow users with write access to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpd&sektion=8">bgpd(8)</a>'s control socket to send queries. |
<li>Allow users with write access to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpd&sektion=8">bgpd(8)</a>'s control socket to send queries. |
<li>Fix an out-of-bounds read in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&sektion=3">ssl(3)</a> (CAN-2004-0112.) This code isn't used in OpenBSD. |
<li>Fix an out-of-bounds read in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&sektion=3">ssl(3)</a> (CAN-2004-0112). This code isn't used in OpenBSD. |
<li>Always read at least DEV_BSIZE (512) bytes of the disklabel, some disks have smaller block sizes. |
<li>Always read at least DEV_BSIZE (512) bytes of the disklabel, some disks have smaller block sizes. |
<li><font color="#e00000"><strong>RELIABILITY FIX: A missing check for a NULL-pointer dereference has been found in ssl(3).</strong></font> A remote attacker can use the bug to cause an OpenSSL application to crash; this may lead to a denial of service.<br> |
<li><font color="#e00000"><strong>RELIABILITY FIX: A missing check for a NULL-pointer dereference has been found in ssl(3).</strong></font> A remote attacker can use the bug to cause an OpenSSL application to crash; this may lead to a denial of service.<br> |
<a href="errata.html#openssl">A source code patch is available</a>.<br> |
<a href="errata.html#openssl">A source code patch is available</a>.<br> |
|
|
<li>If running at <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=securelevel&sektion=7">securelevel(7)</a> 2, use the -x option to increase the chances of ntpd using slew mode, since stepping backwards is disabled at this level. |
<li>If running at <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=securelevel&sektion=7">securelevel(7)</a> 2, use the -x option to increase the chances of ntpd using slew mode, since stepping backwards is disabled at this level. |
<li>Some <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mpt&sektion=4">mpt(4)</a> stability fixes. |
<li>Some <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mpt&sektion=4">mpt(4)</a> stability fixes. |
<!-- ^ 20040317 --> |
<!-- ^ 20040317 --> |
<li>Don't signal <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mountd&sektion=8">mountd(8)</a> from <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mount&sektion=8">mount(8)</a> when all that's required is a listing of mounts (PR#3695.) |
<li>Don't signal <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mountd&sektion=8">mountd(8)</a> from <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mount&sektion=8">mount(8)</a> when all that's required is a listing of mounts (PR#3695). |
<li>Create <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpd&sektion=8">bgpd(8)</a>'s control socket later in the startup. |
<li>Create <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpd&sektion=8">bgpd(8)</a>'s control socket later in the startup. |
<li>Remember to unlock USB <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wi&sektion=4">wi(4)</a> devices on errors. |
<li>Remember to unlock USB <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wi&sektion=4">wi(4)</a> devices on errors. |
<li>Since we've allocated a cache for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pax&sektion=1">pax(1)</a>, let's go right ahead and use it. |
<li>Since we've allocated a cache for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pax&sektion=1">pax(1)</a>, let's go right ahead and use it. |
|
|
<li>Check the return code of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=chdir&sektion=2">chdir(2)</a> after the privsep <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=chroot&sektion=2">chroot(2)</a> in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pflogd&sektion=8">pflogd(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=syslogd&sektion=8">syslogd(8)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcpdump&sektion=8">tcpdump(8)</a>. |
<li>Check the return code of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=chdir&sektion=2">chdir(2)</a> after the privsep <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=chroot&sektion=2">chroot(2)</a> in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pflogd&sektion=8">pflogd(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=syslogd&sektion=8">syslogd(8)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcpdump&sektion=8">tcpdump(8)</a>. |
<li>Disable <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=crypto&sektion=9">crypto(9)</a> MAC functions for now, no current hardware can use them. |
<li>Disable <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=crypto&sektion=9">crypto(9)</a> MAC functions for now, no current hardware can use them. |
<li>Some <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=oosiop&sektion=4">oosiop(4)</a> cleanup based on <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=osiop&sektion=4">osiop(4)</a>. |
<li>Some <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=oosiop&sektion=4">oosiop(4)</a> cleanup based on <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=osiop&sektion=4">osiop(4)</a>. |
<li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wskbd&sektion=4">wskbd(4)</a>, make the caps lock key do caps lock instead of shift lock (PR#2555.) |
<li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wskbd&sektion=4">wskbd(4)</a>, make the caps lock key do caps lock instead of shift lock (PR#2555). |
<!-- ^ 20040314 --> |
<!-- ^ 20040314 --> |
<li>Make it easier to kill <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=spamd&sektion=8">spamd(8)</a> greylisted processes. |
<li>Make it easier to kill <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=spamd&sektion=8">spamd(8)</a> greylisted processes. |
<li>Do <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfsync&sektion=4">pfsync(4)</a> interface setup last in /etc/<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=netstart&sektion=8">netstart(8)</a>, so that hopefully the syncif gets set up beforehand. |
<li>Do <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfsync&sektion=4">pfsync(4)</a> interface setup last in /etc/<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=netstart&sektion=8">netstart(8)</a>, so that hopefully the syncif gets set up beforehand. |
|
|
<li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wi&sektion=4">wi(4)</a> software WEP on big-endian machines. |
<li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wi&sektion=4">wi(4)</a> software WEP on big-endian machines. |
<li>Unbreak <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tail&sektion=1">tail(1)</a> -f mode for filesystems not blessed with <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=kqueue&sektion=2">kqueue(2)</a> support. |
<li>Unbreak <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tail&sektion=1">tail(1)</a> -f mode for filesystems not blessed with <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=kqueue&sektion=2">kqueue(2)</a> support. |
<li>Implement privilege separation for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=named&sektion=8">named(8)</a>. And there was much rejoicing. |
<li>Implement privilege separation for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=named&sektion=8">named(8)</a>. And there was much rejoicing. |
<li>Plug a rtentry leak when TCP gives up on a cached route (in_pcb.c:in_losing().) |
<li>Plug a rtentry leak when TCP gives up on a cached route (in_pcb.c:in_losing()). |
<li>Fix (guess what?) a memory leak in the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=yacc&sektion=1">yacc(1)</a> skeleton code. |
<li>Fix (guess what?) a memory leak in the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=yacc&sektion=1">yacc(1)</a> skeleton code. |
<li>Check the payload size more carefully when printing IKE messages in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcpdump&sektion=8">tcpdump(8)</a>. |
<li>Check the payload size more carefully when printing IKE messages in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcpdump&sektion=8">tcpdump(8)</a>. |
<li>Plug a memory leak in the error path of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=execve&sektion=2">execve(2)</a>. |
<li>Plug a memory leak in the error path of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=execve&sektion=2">execve(2)</a>. |
|
|
<li>Sync the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=spamd&sektion=8">spamd(8)</a> greylist database after each db operation, to minimise the likelihood of corruption. |
<li>Sync the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=spamd&sektion=8">spamd(8)</a> greylist database after each db operation, to minimise the likelihood of corruption. |
<li>Add basic community support to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpd&sektion=8">bgpd(8)</a>. |
<li>Add basic community support to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpd&sektion=8">bgpd(8)</a>. |
<li>Correct a missing <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=malloc&sektion=3">malloc(3)</a> error check in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpctl&sektion=8">bgpctl(8)</a>. |
<li>Correct a missing <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=malloc&sektion=3">malloc(3)</a> error check in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpctl&sektion=8">bgpctl(8)</a>. |
<li>Fix byte-ordering problems in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=routed&sektion=8">routed(8)</a> (PR#3704.) Based on NetBSD. |
<li>Fix byte-ordering problems in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=routed&sektion=8">routed(8)</a> (PR#3704). Based on NetBSD. |
<!-- ^ 20040311 --> |
<!-- ^ 20040311 --> |
<!-- I know the erratum says March 17, but this is when the -current patch goes in. --> |
<!-- I know the erratum says March 17, but this is when the -current patch goes in. --> |
<li><font color="#e00000"><strong>RELIABILITY FIX: Defects in the payload validation and processing functions of isakmpd(8) have been discovered.</strong></font> An attacker could send malformed ISAKMP messages and cause isakmpd to crash or to loop endlessly.<br> |
<li><font color="#e00000"><strong>RELIABILITY FIX: Defects in the payload validation and processing functions of isakmpd(8) have been discovered.</strong></font> An attacker could send malformed ISAKMP messages and cause isakmpd to crash or to loop endlessly.<br> |
|
|
<li>Fix missing checks for NULL returned from <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getpass&sektion=3">getpass(3)</a> in login_*(8). |
<li>Fix missing checks for NULL returned from <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getpass&sektion=3">getpass(3)</a> in login_*(8). |
<li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpd&sektion=8">bgpd(8)</a> work harder to clean up after itself on exit. |
<li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpd&sektion=8">bgpd(8)</a> work harder to clean up after itself on exit. |
<li>More work on capability announcements in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpd&sektion=8">bgpd(8)</a>. |
<li>More work on capability announcements in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpd&sektion=8">bgpd(8)</a>. |
<li>Fix an <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a> crash when deleting an ESP SA with no authentication (PR#2429.) |
<li>Fix an <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a> crash when deleting an ESP SA with no authentication (PR#2429). |
<li>Symlink-handling improvements in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pkg_add&sektion=1">pkg_add(1)</a> etc.'s virtual filesystem code. |
<li>Symlink-handling improvements in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pkg_add&sektion=1">pkg_add(1)</a> etc.'s virtual filesystem code. |
<li>Simplify the new <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=scsi&sektion=4">scsi(4)</a> LUN scanning logic, and print better diagnostics. |
<li>Simplify the new <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=scsi&sektion=4">scsi(4)</a> LUN scanning logic, and print better diagnostics. |
<li>New -b option to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=spamd&sektion=8">spamd(8)</a>, used to set the local bind address. |
<li>New -b option to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=spamd&sektion=8">spamd(8)</a>, used to set the local bind address. |
<!-- ^ 20040310 --> |
<!-- ^ 20040310 --> |
<li>Allow the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wsdisplay&sektion=4">wsdisplay(4)</a> screen blanker to be turned off again (PR#3123.) |
<li>Allow the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wsdisplay&sektion=4">wsdisplay(4)</a> screen blanker to be turned off again (PR#3123). |
<li>3.5-beta -> 3.5. |
<li>3.5-beta -> 3.5. |
<li>Increase the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> X11 cookie lifetime from two to twenty minutes. |
<li>Increase the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> X11 cookie lifetime from two to twenty minutes. |
<li>Plug some memory leaks in error paths of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a>. |
<li>Plug some memory leaks in error paths of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a>. |
|
|
<li>Extend <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=md5&sektion=1">md5(1)</a>'s -c option so it can parse the output of GNU md5sum. |
<li>Extend <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=md5&sektion=1">md5(1)</a>'s -c option so it can parse the output of GNU md5sum. |
<li>Remove dynamic bufq support from <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wd&sektion=4">wd(4)</a> due to problems. |
<li>Remove dynamic bufq support from <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wd&sektion=4">wd(4)</a> due to problems. |
<li>Plug some memory leaks in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpd&sektion=8">bgpd(8)</a>. |
<li>Plug some memory leaks in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpd&sektion=8">bgpd(8)</a>. |
<li>Stop libreadline segfaulting when writing an empty history list to a file (PR#3690.) |
<li>Stop libreadline segfaulting when writing an empty history list to a file (PR#3690). |
<li>Fixes to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sftp&sektion=1">sftp(1)</a>'s progress meter. |
<li>Fixes to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sftp&sektion=1">sftp(1)</a>'s progress meter. |
<li>Change <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a> child processes' proctitle to '[accepted]' after the, uh, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=accept&sektion=2">accept(2)</a> completes. |
<li>Change <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a> child processes' proctitle to '[accepted]' after the, uh, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=accept&sektion=2">accept(2)</a> completes. |
<li>Repair procfs status output (PR#2102.) |
<li>Repair procfs status output (PR#2102). |
<li>Fix unintentional ordering dependency in kernel module loading and unloading (PR#2910.) |
<li>Fix unintentional ordering dependency in kernel module loading and unloading (PR#2910). |
<li>Allow forced <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=unmount&sektion=2">unmount(2)</a>s of nullfs, procfs (both from PR#2394,) and umapfs. |
<li>Allow forced <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=unmount&sektion=2">unmount(2)</a>s of nullfs, procfs (both from PR#2394,) and umapfs. |
<li>Fix an off-by-one in procfs so that it can be successfully unmounted (PR#2327.) |
<li>Fix an off-by-one in procfs so that it can be successfully unmounted (PR#2327). |
<li>Clean up <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=badsect&sektion=8">badsect(8)</a>'s error reporting (PR#3679.) |
<li>Clean up <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=badsect&sektion=8">badsect(8)</a>'s error reporting (PR#3679). |
<li>Start <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=spamd&sektion=8">spamd(8)</a> later in /etc/<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rc&sektion=8">rc(8)</a>. |
<li>Start <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=spamd&sektion=8">spamd(8)</a> later in /etc/<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rc&sektion=8">rc(8)</a>. |
<!-- ^ 20040303 --> |
<!-- ^ 20040303 --> |
<li>Fix an <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mbuf&sektion=9">mbuf(9)</a> leak in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tun&sektion=4">tun(4)</a> under failure conditions. From NetBSD. |
<li>Fix an <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mbuf&sektion=9">mbuf(9)</a> leak in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tun&sektion=4">tun(4)</a> under failure conditions. From NetBSD. |
|
|
<li>Use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=daemon&sektion=3">daemon(3)</a> instead of DIY in new <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhclient&sektion=8">dhclient(8)</a>. |
<li>Use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=daemon&sektion=3">daemon(3)</a> instead of DIY in new <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhclient&sektion=8">dhclient(8)</a>. |
<li>Start <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a> earlier in /etc/<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rc&sektion=8">rc(8)</a>. |
<li>Start <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a> earlier in /etc/<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rc&sektion=8">rc(8)</a>. |
<li>Generate new <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhclient&sektion=8">dhclient(8)</a>'s transaction id (xid) using <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=arc4random&sektion=3">arc4random(3)</a> instead of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=random&sektion=3">random(3)</a>. |
<li>Generate new <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhclient&sektion=8">dhclient(8)</a>'s transaction id (xid) using <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=arc4random&sektion=3">arc4random(3)</a> instead of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=random&sektion=3">random(3)</a>. |
<li>Have <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhclient&sektion=8">dhclient(8)</a> (old and new) exit cleanly if its interface goes away (PR#3648.) |
<li>Have <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhclient&sektion=8">dhclient(8)</a> (old and new) exit cleanly if its interface goes away (PR#3648). |
<li>New <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sysctl&sektion=3">sysctl(3)</a> net.inet.tcp.reasslimit, to control the size of the memory pool for TCP out-of-order segment reassembly that was introduced in the last erratum. |
<li>New <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sysctl&sektion=3">sysctl(3)</a> net.inet.tcp.reasslimit, to control the size of the memory pool for TCP out-of-order segment reassembly that was introduced in the last erratum. |
<li><font color="#e00000"><strong>RELIABILITY FIX: OpenBSD's TCP/IP stack did not impose limits on how many out-of-order TCP segments are queued in the system. An attacker could send out-of-order TCP segments and trick the system into using all available memory buffers.</strong></font><br> |
<li><font color="#e00000"><strong>RELIABILITY FIX: OpenBSD's TCP/IP stack did not impose limits on how many out-of-order TCP segments are queued in the system. An attacker could send out-of-order TCP segments and trick the system into using all available memory buffers.</strong></font><br> |
<a href="errata.html#tcp">A source code patch is available</a>.<br> |
<a href="errata.html#tcp">A source code patch is available</a>.<br> |
<a href="stable.html"><font color="#00b000">[Applied to stable]</font></a> |
<a href="stable.html"><font color="#00b000">[Applied to stable]</font></a> |
<li>Strip out all the multiple-interfaces code from new <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhclient&sektion=8">dhclient(8)</a>, it's not used any more. |
<li>Strip out all the multiple-interfaces code from new <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhclient&sektion=8">dhclient(8)</a>, it's not used any more. |
<li>Be sure to call fifofs' reclaim function from its host filesystems (ext2fs, ffs, nfs.)<br> |
<li>Be sure to call fifofs' reclaim function from its host filesystems (ext2fs, ffs, nfs).<br> |
<a href="stable.html"><font color="#00b000">[Applied to stable]</font></a> |
<a href="stable.html"><font color="#00b000">[Applied to stable]</font></a> |
<li>Give fifofs a real reclaim function to prevent memory leaks on rovocation, and fix a potential null deref.<br> |
<li>Give fifofs a real reclaim function to prevent memory leaks on rovocation, and fix a potential null deref.<br> |
<a href="stable.html"><font color="#00b000">[Applied to stable]</font></a> |
<a href="stable.html"><font color="#00b000">[Applied to stable]</font></a> |
|
|
<li>Cleanup and paranoia in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=spamdb&sektion=8">spamdb(8)</a>. |
<li>Cleanup and paranoia in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=spamdb&sektion=8">spamdb(8)</a>. |
<li>Support 'tagged <name>' specifiers on <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> anchor rules. |
<li>Support 'tagged <name>' specifiers on <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> anchor rules. |
<li>Better IPv4 address validation in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=spamd&sektion=8">spamd(8)</a>. |
<li>Better IPv4 address validation in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=spamd&sektion=8">spamd(8)</a>. |
<li>Process NOTE_TRUNCATE messages in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tail&sektion=1">tail(1)</a> and unbreak file truncation handling in -f mode (PR#3689.) |
<li>Process NOTE_TRUNCATE messages in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tail&sektion=1">tail(1)</a> and unbreak file truncation handling in -f mode (PR#3689). |
<li>Allow <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpd&sektion=8">bgpd(8)</a> to run in route-collector mode, i.e. disable the decision process. |
<li>Allow <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpd&sektion=8">bgpd(8)</a> to run in route-collector mode, i.e. disable the decision process. |
<li>Build libf2c for GCC3 architectures. |
<li>Build libf2c for GCC3 architectures. |
<li>New -d option for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=nc&sektion=1">nc(1)</a>, which disables reading from stdin (PR#3694.) |
<li>New -d option for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=nc&sektion=1">nc(1)</a>, which disables reading from stdin (PR#3694). |
<!-- ^ 20040301 --> |
<!-- ^ 20040301 --> |
<li>Fix a memory leak when the control socket detaches from <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpd&sektion=8">bgpd(8)</a>. |
<li>Fix a memory leak when the control socket detaches from <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpd&sektion=8">bgpd(8)</a>. |
<li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpctl&sektion=8">bgpctl(8)</a>'s control socket nonblocking. |
<li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpctl&sektion=8">bgpctl(8)</a>'s control socket nonblocking. |
|
|
<!-- ^ 20040229 --> |
<!-- ^ 20040229 --> |
<li>Sync the installer with the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ftp&sektion=1">ftp(1)</a> fetch-mode fix. |
<li>Sync the installer with the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ftp&sektion=1">ftp(1)</a> fetch-mode fix. |
<li>Open a new connection for each file pulled down by <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ftp&sektion=1">ftp(1)</a> in fetch mode. Fixes problems where 'CWD /' does unexpected things. |
<li>Open a new connection for each file pulled down by <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ftp&sektion=1">ftp(1)</a> in fetch mode. Fixes problems where 'CWD /' does unexpected things. |
<li>Fix the test that disallows interface unit numbers greater than INT_MAX (to avoid signedness confusion.) |
<li>Fix the test that disallows interface unit numbers greater than INT_MAX (to avoid signedness confusion). |
<li>Don't allow leading zeros in cloner interface names. |
<li>Don't allow leading zeros in cloner interface names. |
<li>Upgrade 3.4-stable to OpenSSH 3.8. |
<li>Upgrade 3.4-stable to OpenSSH 3.8. |
<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=spamd&sektion=8">spamd(8)</a> greylist cleanup and fixes. |
<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=spamd&sektion=8">spamd(8)</a> greylist cleanup and fixes. |
|
|
<li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ifconfig&sektion=8">ifconfig(8)</a>'s matching of multi-digit interface names, e.g. stop vlan10 matching as vlan1. |
<li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ifconfig&sektion=8">ifconfig(8)</a>'s matching of multi-digit interface names, e.g. stop vlan10 matching as vlan1. |
<li>Add __va_copy() in <stdarg.h>, following old ISO C89 behaviour. Used by GNU software. |
<li>Add __va_copy() in <stdarg.h>, following old ISO C89 behaviour. Used by GNU software. |
<li>Support dumping of the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpd&sektion=8">bgpd(8)</a> RIB via <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpctl&sektion=8">bgpctl(8)</a>. |
<li>Support dumping of the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpd&sektion=8">bgpd(8)</a> RIB via <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpctl&sektion=8">bgpctl(8)</a>. |
<li>Have <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpd&sektion=8">bgpd(8)</a> check that the nexthop is a valid range (i.e. not a class D, class E or a loopback.) |
<li>Have <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpd&sektion=8">bgpd(8)</a> check that the nexthop is a valid range (i.e. not a class D, class E or a loopback). |
<li>Better logging for ifstated(8), taken from bgpd. |
<li>Better logging for ifstated(8), taken from bgpd. |
<li>More enhancements to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpd&sektion=8">bgpd(8)</a>'s filter language. |
<li>More enhancements to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpd&sektion=8">bgpd(8)</a>'s filter language. |
<li>Include tcps_rcvmemdrop in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=netstat&sektion=1">netstat(1)</a>'s TCP statistics output. |
<li>Include tcps_rcvmemdrop in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=netstat&sektion=1">netstat(1)</a>'s TCP statistics output. |
|
|
<li>Extra <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bzero&sektion=3">bzero(3)</a> paranoia for data coming out of the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=scsi&sektion=4">scsi(4)</a> xfer pool. |
<li>Extra <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bzero&sektion=3">bzero(3)</a> paranoia for data coming out of the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=scsi&sektion=4">scsi(4)</a> xfer pool. |
<li>Memory and string cleanup in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=procmap&sektion=1">procmap(1)</a>. |
<li>Memory and string cleanup in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=procmap&sektion=1">procmap(1)</a>. |
<li>Implement <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=kevent&sektion=2">kevent(2)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=kqueue&sektion=2">kqueue(2)</a> under FreeBSD emulation, using the native calls. |
<li>Implement <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=kevent&sektion=2">kevent(2)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=kqueue&sektion=2">kqueue(2)</a> under FreeBSD emulation, using the native calls. |
<li>Fix mishandling of numeric options in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sed&sektion=1">sed(1)</a> (PR#3677.) |
<li>Fix mishandling of numeric options in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sed&sektion=1">sed(1)</a> (PR#3677). |
<li>Add -i option to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&sektion=8">pfctl(8)</a>, restricting operations to the given interface. Only -sI implemented for now. |
<li>Add -i option to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&sektion=8">pfctl(8)</a>, restricting operations to the given interface. Only -sI implemented for now. |
<li>sparc64 alignment fixes in gcc3 propolice. |
<li>sparc64 alignment fixes in gcc3 propolice. |
<!-- ^ 20040217 --> |
<!-- ^ 20040217 --> |
|
|
<li>Add a missing <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=realloc&sektion=3">realloc(3)</a> failure check in asn1_compile. |
<li>Add a missing <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=realloc&sektion=3">realloc(3)</a> failure check in asn1_compile. |
<li>Generate the MAKEDEV(8) manpages automagically based on the same information as the MAKEDEV scripts themselves. |
<li>Generate the MAKEDEV(8) manpages automagically based on the same information as the MAKEDEV scripts themselves. |
<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=gcc&sektion=1">gcc(1)</a> propolice fixes on i386. |
<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=gcc&sektion=1">gcc(1)</a> propolice fixes on i386. |
<li>First cut at <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=procmap&sektion=1">procmap(1)</a> from NetBSD (where it's called pmap.) Not yet built by default. |
<li>First cut at <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=procmap&sektion=1">procmap(1)</a> from NetBSD (where it's called pmap). Not yet built by default. |
<!-- ^ 20040216 --> |
<!-- ^ 20040216 --> |
<li>New 'split' option in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=iostat&sektion=8">iostat(8)</a> for the newly-separated disk read/write stats. |
<li>New 'split' option in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=iostat&sektion=8">iostat(8)</a> for the newly-separated disk read/write stats. |
<li>Check for TDB entries marked as invalid when looking up tcpmd5 connections. |
<li>Check for TDB entries marked as invalid when looking up tcpmd5 connections. |
|
|
<!-- ^ 20040211 --> |
<!-- ^ 20040211 --> |
<li>Install <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpd.conf&sektion=5">bgpd.conf(5)</a> root:wheel, mode 0600 and make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpd&sektion=8">bgpd(8)</a> insist it be so. |
<li>Install <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpd.conf&sektion=5">bgpd.conf(5)</a> root:wheel, mode 0600 and make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpd&sektion=8">bgpd(8)</a> insist it be so. |
<li>Reduce the default number of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pty&sektion=4">pty(4)</a> devices from 64 to 16, now that additional ptys will be created on demand. |
<li>Reduce the default number of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pty&sektion=4">pty(4)</a> devices from 64 to 16, now that additional ptys will be created on demand. |
<li>Fix an off-by-one when generating <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pty&sektion=4">pty(4)</a> device names (ptydevname().) |
<li>Fix an off-by-one when generating <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pty&sektion=4">pty(4)</a> device names (ptydevname()). |
<li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcpdump&sektion=8">tcpdump(8)</a>'s <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfsync&sektion=4">pfsync(4)</a> output more consistent with other tcpdump output. |
<li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcpdump&sektion=8">tcpdump(8)</a>'s <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfsync&sektion=4">pfsync(4)</a> output more consistent with other tcpdump output. |
<li>Plug an <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mbuf&sektion=9">mbuf(9)</a> leak by making ip_fragment() free the mbuf on errors instead of expecting the caller to do it.<br> |
<li>Plug an <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mbuf&sektion=9">mbuf(9)</a> leak by making ip_fragment() free the mbuf on errors instead of expecting the caller to do it.<br> |
<a href="stable.html"><font color="#00b000">[Applied to stable]</font></a> |
<a href="stable.html"><font color="#00b000">[Applied to stable]</font></a> |
<li>Add a flag so that hardware sensors can be marked as invalid if, for example, they're disconnected. |
<li>Add a flag so that hardware sensors can be marked as invalid if, for example, they're disconnected. |
<li>Make picky mode in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=makewhatis&sektion=8">makewhatis(8)</a> even pickier. |
<li>Make picky mode in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=makewhatis&sektion=8">makewhatis(8)</a> even pickier. |
<li>Fix an off-by-one in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a>'s interface management code. |
<li>Fix an off-by-one in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a>'s interface management code. |
<li>Have <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ndp&sektion=8">ndp(8)</a> flush stdout before sleeping in -A mode (KAME pr#584.) |
<li>Have <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ndp&sektion=8">ndp(8)</a> flush stdout before sleeping in -A mode (KAME pr#584). |
<li>In the new <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhclient&sektion=8">dhclient(8)</a>, don't send pointless DHCPDISCOVER messages on interfaces that are known to have an inactive link status. |
<li>In the new <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhclient&sektion=8">dhclient(8)</a>, don't send pointless DHCPDISCOVER messages on interfaces that are known to have an inactive link status. |
<li>Allow for the presence of tcpmd5 signatures in the TCP MSS calculation. |
<li>Allow for the presence of tcpmd5 signatures in the TCP MSS calculation. |
<li>Have <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&sektion=8">pfctl(8)</a> display a filter uptime now that we keep track of when it was last enabled. |
<li>Have <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&sektion=8">pfctl(8)</a> display a filter uptime now that we keep track of when it was last enabled. |
|
|
<li>Have <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=lex&sektion=1">lex(1)</a> declare errno for c++ users too. |
<li>Have <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=lex&sektion=1">lex(1)</a> declare errno for c++ users too. |
<li>Allow libstdc++ to build on architectures with no shared libraries. |
<li>Allow libstdc++ to build on architectures with no shared libraries. |
<!-- ^ 20040209 --> |
<!-- ^ 20040209 --> |
<li>Fix a panic when cleaning up after an interface (e.g a PC Card <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wi&sektion=4">wi(4)</a>) has gone away (PR#3649.) |
<li>Fix a panic when cleaning up after an interface (e.g a PC Card <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wi&sektion=4">wi(4)</a>) has gone away (PR#3649). |
<li>Unstick the -a option from <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ps&sektion=1">ps(1)</a> (PR#3676.) |
<li>Unstick the -a option from <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ps&sektion=1">ps(1)</a> (PR#3676). |
<li>Sync the installer network startup with changes in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=netstart&sektion=8">netstart(8)</a>. |
<li>Sync the installer network startup with changes in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=netstart&sektion=8">netstart(8)</a>. |
<li>Fix a memory allocation-related panic in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfsync&sektion=4">pfsync(4)</a> that can occur under very high loads. |
<li>Fix a memory allocation-related panic in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfsync&sektion=4">pfsync(4)</a> that can occur under very high loads. |
<li>Fix a buffer overflow in XFree font aliasing. From XFree86 CVS.<br> |
<li>Fix a buffer overflow in XFree font aliasing. From XFree86 CVS.<br> |
|
|
<a href="errata.html#sysvshm">A source code patch is available</a>.<br> |
<a href="errata.html#sysvshm">A source code patch is available</a>.<br> |
<a href="stable.html"><font color="#00b000">[Applied to stable]</font></a> |
<a href="stable.html"><font color="#00b000">[Applied to stable]</font></a> |
<li>Fix a CVS merge error in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xterm&sektion=1">xterm(1)</a>'s app-defaults file. |
<li>Fix a CVS merge error in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xterm&sektion=1">xterm(1)</a>'s app-defaults file. |
<li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&sektion=8">pfctl(8)</a> -vvsq loop again (PR#3675.) |
<li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&sektion=8">pfctl(8)</a> -vvsq loop again (PR#3675). |
<li>Unbreak the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> progress meter ETA for files larger than 4GB (OpenSSH bugzilla #791.) |
<li>Unbreak the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> progress meter ETA for files larger than 4GB (OpenSSH bugzilla #791). |
<li>Fix a memory leak in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhclient&sektion=8">dhclient(8)</a> (PR#3668.) |
<li>Fix a memory leak in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhclient&sektion=8">dhclient(8)</a> (PR#3668). |
<li>If <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> is in privsep mode, pass the SIGALRM from LoginGraceTime expiry through to the child process. |
<li>If <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> is in privsep mode, pass the SIGALRM from LoginGraceTime expiry through to the child process. |
<li>Apply the same strict RFC 2460 interpretation used for the IPv6 MTU to the TCP MSS calculation. |
<li>Apply the same strict RFC 2460 interpretation used for the IPv6 MTU to the TCP MSS calculation. |
<!-- ^ 20040205 --> |
<!-- ^ 20040205 --> |
<li>New parser for ifstated(8), and more features. Still more to come. |
<li>New parser for ifstated(8), and more features. Still more to come. |
<li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=grep&sektion=1">grep(1)</a>'s ^ and $ anchors that were broken by the recent -w fixes. |
<li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=grep&sektion=1">grep(1)</a>'s ^ and $ anchors that were broken by the recent -w fixes. |
<li>For programs that don't support long options, stop <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getopt&sektion=3">getopt(3)</a> treating '--foo' the same way it treats '--', as per POSIX (PR#3666.)<br> |
<li>For programs that don't support long options, stop <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getopt&sektion=3">getopt(3)</a> treating '--foo' the same way it treats '--', as per POSIX (PR#3666).<br> |
<a href="stable.html"><font color="#00b000">[Applied to stable]</font></a> |
<a href="stable.html"><font color="#00b000">[Applied to stable]</font></a> |
<li>Let <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&sektion=8">pfctl(8)</a> deal gracefully with 'modulate state' on rules with protos to which it might not apply in the same way as 'keep state', e.g. 'pass proto {tcp udp} modulate state' is now acceptable. |
<li>Let <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&sektion=8">pfctl(8)</a> deal gracefully with 'modulate state' on rules with protos to which it might not apply in the same way as 'keep state', e.g. 'pass proto {tcp udp} modulate state' is now acceptable. |
<li>Don't use a valid user id as a flag value in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ps&sektion=1">ps(1)</a>. |
<li>Don't use a valid user id as a flag value in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ps&sektion=1">ps(1)</a>. |
|
|
<li>Huge amount of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=style&sektion=9">style(9)</a>, ANSI and other cleanup in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhclient&sektion=8">dhclient(8)</a>. More to come. |
<li>Huge amount of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=style&sektion=9">style(9)</a>, ANSI and other cleanup in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhclient&sektion=8">dhclient(8)</a>. More to come. |
<!-- ^ 20040204 --> |
<!-- ^ 20040204 --> |
<li>Some std:: namespace and other C++ mode fixes for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=flex&sektion=1">flex(1)</a>. From NetBSD. |
<li>Some std:: namespace and other C++ mode fixes for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=flex&sektion=1">flex(1)</a>. From NetBSD. |
<li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&sektion=8">pfctl(8)</a> macro expansion in tags (PR#3664.) |
<li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&sektion=8">pfctl(8)</a> macro expansion in tags (PR#3664). |
<li>Unbreak and reapply the don't-use-<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=inet_net_pton&sektion=3">inet_net_pton(3)</a>-without-a-slash fix (PR#3638.) |
<li>Unbreak and reapply the don't-use-<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=inet_net_pton&sektion=3">inet_net_pton(3)</a>-without-a-slash fix (PR#3638). |
<li>Teach lib<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=crypto&sektion=3">crypto(3)</a> how to use the VIA C3 crypto functions for (seriously) accelerated aes-{128,192,256}-cbc. |
<li>Teach lib<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=crypto&sektion=3">crypto(3)</a> how to use the VIA C3 crypto functions for (seriously) accelerated aes-{128,192,256}-cbc. |
<!-- ^ 20040203 --> |
<!-- ^ 20040203 --> |
<li>Do temp file cleanup for signals as well as exits in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=spell&sektion=1">spell(1)</a>. |
<li>Do temp file cleanup for signals as well as exits in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=spell&sektion=1">spell(1)</a>. |
|
|
<li>Allow '-' as a valid character in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=as&sektion=1">as(1)</a> mnemonics, as required by a few VIA C3 instructions. |
<li>Allow '-' as a valid character in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=as&sektion=1">as(1)</a> mnemonics, as required by a few VIA C3 instructions. |
<li>Add a 'paper.txt' <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=make&sektion=1">make(1)</a> target to generate ASCII output for the documents under /usr/share/doc. |
<li>Add a 'paper.txt' <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=make&sektion=1">make(1)</a> target to generate ASCII output for the documents under /usr/share/doc. |
<li>Sync i386 option USER_LDT code with NetBSD, fixing some ports panics. |
<li>Sync i386 option USER_LDT code with NetBSD, fixing some ports panics. |
<li>In libpthread, add a simple work-around for deadlocking on recursive readlocks on a rwlock while there are writers waiting (from FreeBSD PR#24641.) |
<li>In libpthread, add a simple work-around for deadlocking on recursive readlocks on a rwlock while there are writers waiting (from FreeBSD PR#24641). |
<li>Add ARM support and a new port for <a href="cats.html">cats</a> boards. |
<li>Add ARM support and a new port for <a href="cats.html">cats</a> boards. |
<!-- ^ 20040201 --> |
<!-- ^ 20040201 --> |
<li>Rename TCP socket option from TCP_SIGNATURE_ENABLE to TCP_MD5SIG. |
<li>Rename TCP socket option from TCP_SIGNATURE_ENABLE to TCP_MD5SIG. |
|
|
<li>On i386 systems with SSE2, halve the time taken to zero a page of memory. Based on FreeBSD. |
<li>On i386 systems with SSE2, halve the time taken to zero a page of memory. Based on FreeBSD. |
<li>Switch the new <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sigaltstack&sektion=2">sigaltstack(2)</a> code back on again on alpha and sparc64. |
<li>Switch the new <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sigaltstack&sektion=2">sigaltstack(2)</a> code back on again on alpha and sparc64. |
<li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ddb&sektion=4">ddb(4)</a>'s ps /n command show the correct state for a process. |
<li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ddb&sektion=4">ddb(4)</a>'s ps /n command show the correct state for a process. |
<li>Reset the TCP keepalive timer to tcp.keepidle (normally four hours) after the three-way handshake completes. (syncache sets it to tcp.keepinittime, normally 150 seconds.) |
<li>Reset the TCP keepalive timer to tcp.keepidle (normally four hours) after the three-way handshake completes. (syncache sets it to tcp.keepinittime, normally 150 seconds). |
<li>Allow a single listen socket to be used for connections with and without tcpmd5. |
<li>Allow a single listen socket to be used for connections with and without tcpmd5. |
<li>Avoid a long <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=scsi&sektion=4">scsi(4)</a> freeze when attaching live scsibus* devices. |
<li>Avoid a long <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=scsi&sektion=4">scsi(4)</a> freeze when attaching live scsibus* devices. |
<li>Support RFC 3390 'Increasing TCP's initial window' extension, enabled using <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sysctl&sektion=8">sysctl(8)</a> net.inet.tcp.rfc3390. |
<li>Support RFC 3390 'Increasing TCP's initial window' extension, enabled using <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sysctl&sektion=8">sysctl(8)</a> net.inet.tcp.rfc3390. |
|
|
<li>Track the number of ftp or http connections to a host in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pkg_add&sektion=1">pkg_add(1)</a>. Limit to one connection for now. |
<li>Track the number of ftp or http connections to a host in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pkg_add&sektion=1">pkg_add(1)</a>. Limit to one connection for now. |
<li>New -L option to set (<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pkg_create&sektion=1">pkg_create(1)</a>) or use (<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pkg_add&sektion=1">pkg_add(1)</a>) the package LOCALBASE. See <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bsd.port.mk&sektion=5">bsd.port.mk(5)</a> for details. |
<li>New -L option to set (<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pkg_create&sektion=1">pkg_create(1)</a>) or use (<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pkg_add&sektion=1">pkg_add(1)</a>) the package LOCALBASE. See <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bsd.port.mk&sektion=5">bsd.port.mk(5)</a> for details. |
<li>Use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=_exit&sektion=2">_exit(2)</a> instead of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=abort&sektion=3">abort(3)</a> when <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xfs&sektion=1">xfs(1)</a> dies due to an error. |
<li>Use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=_exit&sektion=2">_exit(2)</a> instead of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=abort&sektion=3">abort(3)</a> when <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xfs&sektion=1">xfs(1)</a> dies due to an error. |
<li>Fix a potential double-free in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=m_split&sektion=9">m_split(9)</a> (PR#3651.) |
<li>Fix a potential double-free in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=m_split&sektion=9">m_split(9)</a> (PR#3651). |
<li>Add privilege separation for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcpdump&sektion=8">tcpdump(8)</a>. |
<li>Add privilege separation for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcpdump&sektion=8">tcpdump(8)</a>. |
<li>Move gcc2-specific files into the architecure-specific distribution setlists. Gulp. |
<li>Move gcc2-specific files into the architecure-specific distribution setlists. Gulp. |
<li>Don't dump core in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=patch&sektion=1">patch(1)</a> when the file can't be found but user says to patch anyway. |
<li>Don't dump core in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=patch&sektion=1">patch(1)</a> when the file can't be found but user says to patch anyway. |
|
|
<li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pkg_add&sektion=1">pkg_add(1)</a>, exit instead of carrying on regardless when the pre-addition stage fails. |
<li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pkg_add&sektion=1">pkg_add(1)</a>, exit instead of carrying on regardless when the pre-addition stage fails. |
<li>Better pfkeyv2 interface when setting up tcpmd5 in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpd&sektion=8">bgpd(8)</a>. More to do. |
<li>Better pfkeyv2 interface when setting up tcpmd5 in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpd&sektion=8">bgpd(8)</a>. More to do. |
<li>Add support for -f (force) option to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pkg_add&sektion=1">pkg_add(1)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pkg_delete&sektion=1">pkg_delete(1)</a>. |
<li>Add support for -f (force) option to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pkg_add&sektion=1">pkg_add(1)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pkg_delete&sektion=1">pkg_delete(1)</a>. |
<li>Allow <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=skey&sektion=1">skey(1)</a>-format usernames (<em>user</em>:skey) in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sftp&sektion=1">sftp(1)</a> (OpenSSH bugzilla #777.) |
<li>Allow <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=skey&sektion=1">skey(1)</a>-format usernames (<em>user</em>:skey) in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sftp&sektion=1">sftp(1)</a> (OpenSSH bugzilla #777). |
<li>In pf_test and pf_test6, immediately drop packets on any interface that doesn't have an associated pfi_kif structure. |
<li>In pf_test and pf_test6, immediately drop packets on any interface that doesn't have an associated pfi_kif structure. |
<li>Hash tcpmd5 TDB lookups by source address instead of the spi |
<li>Hash tcpmd5 TDB lookups by source address instead of the spi |
<li>Add missing case for TCP MD5 sigs in SADB_GETPROTO(). |
<li>Add missing case for TCP MD5 sigs in SADB_GETPROTO(). |
|
|
<a href="stable.html"><font color="#00b000">[Applied to stable]</font></a> |
<a href="stable.html"><font color="#00b000">[Applied to stable]</font></a> |
<li>Stop <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mixerctl&sektion=1">mixerctl(1)</a> segfaulting on non-existent fields. |
<li>Stop <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mixerctl&sektion=1">mixerctl(1)</a> segfaulting on non-existent fields. |
<li>Add a simple 802.3x printer to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcpdump&sektion=8">tcpdump(8)</a>. |
<li>Add a simple 802.3x printer to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcpdump&sektion=8">tcpdump(8)</a>. |
<li>Allow <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ftp-proxy&sektion=8">ftp-proxy(8)</a> to set the outgoing address with the new -a option (PR#3538.) |
<li>Allow <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ftp-proxy&sektion=8">ftp-proxy(8)</a> to set the outgoing address with the new -a option (PR#3538). |
<li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&sektion=8">pfctl(8)</a>, only use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=inet_net_pton&sektion=3">inet_net_pton(3)</a> on addresses containing a '/', otherwise use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=inet_pton&sektion=3">inet_pton(3)</a> (PR#3638.) |
<li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&sektion=8">pfctl(8)</a>, only use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=inet_net_pton&sektion=3">inet_net_pton(3)</a> on addresses containing a '/', otherwise use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=inet_pton&sektion=3">inet_pton(3)</a> (PR#3638). |
<li>New -S option to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=nc&sektion=1">nc(1)</a>, enabling the TCP MD5 signature option. |
<li>New -S option to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=nc&sektion=1">nc(1)</a>, enabling the TCP MD5 signature option. |
<li>Fix collapsing of multiple <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfsync&sektion=4">pfsync(4)</a> update messages into one. |
<li>Fix collapsing of multiple <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfsync&sektion=4">pfsync(4)</a> update messages into one. |
<li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfsync&sektion=4">pfsync(4)</a> state timeouts. |
<li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfsync&sektion=4">pfsync(4)</a> state timeouts. |
|
|
<li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=grep&sektion=1">grep(1)</a>'s -b option. |
<li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=grep&sektion=1">grep(1)</a>'s -b option. |
<li>Fix a missing <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=malloc&sektion=3">malloc(3)</a> error check in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=syslogd&sektion=8">syslogd(8)</a>. |
<li>Fix a missing <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=malloc&sektion=3">malloc(3)</a> error check in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=syslogd&sektion=8">syslogd(8)</a>. |
<li>New user _tcpdump for upcoming privsep of, uh, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcpdump&sektion=8">tcpdump(8)</a>. |
<li>New user _tcpdump for upcoming privsep of, uh, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcpdump&sektion=8">tcpdump(8)</a>. |
<li>Avoid half-open deadlock in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> (OpenSSH bugzilla #790.) |
<li>Avoid half-open deadlock in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> (OpenSSH bugzilla #790). |
<li>Some sane defaults for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=afsd.conf&sektion=5">afsd.conf(5)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ThisCell&sektion=5">ThisCell(5)</a>. |
<li>Some sane defaults for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=afsd.conf&sektion=5">afsd.conf(5)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ThisCell&sektion=5">ThisCell(5)</a>. |
<li>Update <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sendmail&sektion=8">sendmail(8)</a> to 8.12.11. |
<li>Update <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sendmail&sektion=8">sendmail(8)</a> to 8.12.11. |
<!-- ^ 20040119 --> |
<!-- ^ 20040119 --> |
|
|
<li>Use the right type when checking the magic number in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=savecore&sektion=8">savecore(8)</a>. |
<li>Use the right type when checking the magic number in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=savecore&sektion=8">savecore(8)</a>. |
<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=printf&sektion=3">printf(3)</a> integer type cleanup in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=netstat&sektion=1">netstat(1)</a>. |
<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=printf&sektion=3">printf(3)</a> integer type cleanup in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=netstat&sektion=1">netstat(1)</a>. |
<li>Correct a use-after-free in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cvs&sektion=1">cvs(1)</a>, fixing a coredump when the user hits ^C. |
<li>Correct a use-after-free in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cvs&sektion=1">cvs(1)</a>, fixing a coredump when the user hits ^C. |
<li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=authpf&sektion=8">authpf(8)</a> ruleset names that contain the username (PR#3627.) |
<li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=authpf&sektion=8">authpf(8)</a> ruleset names that contain the username (PR#3627). |
<li>'=' != '==' in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fsck&sektion=8">fsck(8)</a>. |
<li>'=' != '==' in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fsck&sektion=8">fsck(8)</a>. |
<li>Let <ctype.h> compile on non-gcc compilers. |
<li>Let <ctype.h> compile on non-gcc compilers. |
<li>Reintroduce old TCP MD5 signature (RFC 2385) code from 4.5 years ago, hopefully with a reduced likelihood of kernel borkage. |
<li>Reintroduce old TCP MD5 signature (RFC 2385) code from 4.5 years ago, hopefully with a reduced likelihood of kernel borkage. |
<li>Improvements to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sftp&sektion=1">sftp(1)</a> batch mode: Allow batchfile input from stdin, and remove stderr junk (OpenSSH bugzilla #754.) |
<li>Improvements to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sftp&sektion=1">sftp(1)</a> batch mode: Allow batchfile input from stdin, and remove stderr junk (OpenSSH bugzilla #754). |
<li>Add IPv6 loopback routes and allow connection to the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=carp&sektion=4">carp(4)</a> shared IPv6 address from the MASTER host, like for IPv4. |
<li>Add IPv6 loopback routes and allow connection to the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=carp&sektion=4">carp(4)</a> shared IPv6 address from the MASTER host, like for IPv4. |
<li>Fix a signed buffer length variable in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=syslogd&sektion=8">syslogd(8)</a>. |
<li>Fix a signed buffer length variable in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=syslogd&sektion=8">syslogd(8)</a>. |
<li>Build local <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=nm&sektion=1">nm(1)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=size&sektion=1">size(1)</a> instead of those from binutils. |
<li>Build local <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=nm&sektion=1">nm(1)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=size&sektion=1">size(1)</a> instead of those from binutils. |
|
|
<li>Logic fixes in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=diff3&sektion=1">diff3(1)</a> where one file has changes but the other does not. |
<li>Logic fixes in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=diff3&sektion=1">diff3(1)</a> where one file has changes but the other does not. |
<li>Some <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=scsi&sektion=4">scsi(4)</a> probe cleanups and fixes, inspired by NetBSD. |
<li>Some <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=scsi&sektion=4">scsi(4)</a> probe cleanups and fixes, inspired by NetBSD. |
<li>Implement the truly wonderful -p option for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=diff&sektion=1">diff(1)</a>. |
<li>Implement the truly wonderful -p option for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=diff&sektion=1">diff(1)</a>. |
<li>Fix an i386 crash in the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ahc&sektion=4">ahc(4)</a> device probe (PR#3630.) |
<li>Fix an i386 crash in the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ahc&sektion=4">ahc(4)</a> device probe (PR#3630). |
<li>Add a field for the emulation type in the struct returned by the KERN_PROC2 <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sysctl&sektion=3">sysctl(3)</a>. |
<li>Add a field for the emulation type in the struct returned by the KERN_PROC2 <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sysctl&sektion=3">sysctl(3)</a>. |
<li>Switch <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pkill&sektion=1">pkill(1)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pgrep&sektion=1">pgrep(1)</a> to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=kvm_getproc2&sektion=3">kvm_getproc2(3)</a>, and so enable the -s option to work. |
<li>Switch <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pkill&sektion=1">pkill(1)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pgrep&sektion=1">pgrep(1)</a> to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=kvm_getproc2&sektion=3">kvm_getproc2(3)</a>, and so enable the -s option to work. |
<li>Add <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=kvm_getproc2&sektion=3">kvm_get{argv,envv,proc}2(3)</a> using KERN_PROC2. Based on NetBSD. |
<li>Add <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=kvm_getproc2&sektion=3">kvm_get{argv,envv,proc}2(3)</a> using KERN_PROC2. Based on NetBSD. |
|
|
<li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a> only allow an INITIAL-CONTACT when a main-mode SA is in place, and never delete SPIs based on it.<br> |
<li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a> only allow an INITIAL-CONTACT when a main-mode SA is in place, and never delete SPIs based on it.<br> |
<li>gcc3 handles varargs differently, change the kernel sources to deal with it. |
<li>gcc3 handles varargs differently, change the kernel sources to deal with it. |
<li>Some <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=poll&sektion=2">poll(2)</a>-related fixes to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=select&sektion=2">select(2)</a> under pthreads. From FreeBSD. |
<li>Some <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=poll&sektion=2">poll(2)</a>-related fixes to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=select&sektion=2">select(2)</a> under pthreads. From FreeBSD. |
<li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=objcopy&sektion=1">objcopy(1)</a>'s long options list, unbreaking <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=strip&sektion=1">strip(1)</a>'s -s option and others (PR#3623.)<br> |
<li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=objcopy&sektion=1">objcopy(1)</a>'s long options list, unbreaking <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=strip&sektion=1">strip(1)</a>'s -s option and others (PR#3623).<br> |
<a href="stable.html"><font color="#00b000">[Applied to stable]</font></a> |
<a href="stable.html"><font color="#00b000">[Applied to stable]</font></a> |
<li>Don't create a pid file for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rtsold&sektion=8">rtsold(8)</a>. |
<li>Don't create a pid file for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rtsold&sektion=8">rtsold(8)</a>. |
<li>If the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=scsi&sektion=4">scsi(4)</a> error code is unknown, at least show the code we didn't have a message for. |
<li>If the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=scsi&sektion=4">scsi(4)</a> error code is unknown, at least show the code we didn't have a message for. |
|
|
<li>Allow a precision (-p option) of zero in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=jot&sektion=1">jot(1)</a>. |
<li>Allow a precision (-p option) of zero in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=jot&sektion=1">jot(1)</a>. |
<li>On i386, properly recognise SiS CPUs. |
<li>On i386, properly recognise SiS CPUs. |
<li>Hack around a reentrancy bug in the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cvs&sektion=1">cvs(1)</a> server's abnormal exit handler. |
<li>Hack around a reentrancy bug in the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cvs&sektion=1">cvs(1)</a> server's abnormal exit handler. |
<li>Allocate what's required for an identifier in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=config&sektion=8">config(8)</a> instead of an arbitrary 500-byte buffer (PR#3614.) |
<li>Allocate what's required for an identifier in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=config&sektion=8">config(8)</a> instead of an arbitrary 500-byte buffer (PR#3614). |
<li>Stop libcurses++ fooling with libstdc++ internals so it compiles under gcc3. |
<li>Stop libcurses++ fooling with libstdc++ internals so it compiles under gcc3. |
<!-- ^ 20031229 --> |
<!-- ^ 20031229 --> |
<li>Add -4 and -6 options to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=telnet&sektion=1">telnet(1)</a> for IPv4- and IPv6-only operation (PR#1974.) |
<li>Add -4 and -6 options to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=telnet&sektion=1">telnet(1)</a> for IPv4- and IPv6-only operation (PR#1974). |
<li>Tag <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ahc&sektion=4">ahc(4)</a> I/O operations requeued as a result of aborts, timeouts etc. so that they're not treated as successfully completed operations. |
<li>Tag <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ahc&sektion=4">ahc(4)</a> I/O operations requeued as a result of aborts, timeouts etc. so that they're not treated as successfully completed operations. |
<li>Update <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=security&sektion=8">security(8)</a> after the recent <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=join&sektion=1">join(1)</a> change prompted by PR#2208. |
<li>Update <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=security&sektion=8">security(8)</a> after the recent <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=join&sektion=1">join(1)</a> change prompted by PR#2208. |
<li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=join&sektion=1">join(1)</a> more POSIX for non-matching lines (PR#2208.) |
<li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=join&sektion=1">join(1)</a> more POSIX for non-matching lines (PR#2208). |
<li>Add dirhash feature from FreeBSD, which uses an in-memory hash table for lookups in large directories. Not enabled by default yet. See UFS_DIRHASH in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=options&sektion=4">options(4)</a>. |
<li>Add dirhash feature from FreeBSD, which uses an in-memory hash table for lookups in large directories. Not enabled by default yet. See UFS_DIRHASH in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=options&sektion=4">options(4)</a>. |
<li>Extend the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfsync&sektion=4">pfsync(4)</a> protocol to allow a peer to query for complete state information should it receive an update for a state it knows nothing about. |
<li>Extend the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfsync&sektion=4">pfsync(4)</a> protocol to allow a peer to query for complete state information should it receive an update for a state it knows nothing about. |
<li>Check for oversize allocations earlier in kernel <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=malloc&sektion=9">malloc(9)</a>. |
<li>Check for oversize allocations earlier in kernel <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=malloc&sektion=9">malloc(9)</a>. |
|
|
<li>New <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a> option KerberosGetAFSToken. |
<li>New <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a> option KerberosGetAFSToken. |
<li>Have <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ifconfig&sektion=8">ifconfig(8)</a> automagically create network pseudo-interfaces. |
<li>Have <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ifconfig&sektion=8">ifconfig(8)</a> automagically create network pseudo-interfaces. |
<li>Mercifully, turn the non-monotonic time warning off #ifndef DEBUG. |
<li>Mercifully, turn the non-monotonic time warning off #ifndef DEBUG. |
<li>Initialise the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=url&sektion=4">url(4)</a> MAC address properly (PR#3612.) |
<li>Initialise the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=url&sektion=4">url(4)</a> MAC address properly (PR#3612). |
<li>When <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sudo&sektion=8">sudo(8)</a> is run with -k or -K only complain about missing usernames to stderr and don't log anything, since we may be running in a .logout script at shutdown and the YP etc. daemon may have gone away. |
<li>When <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sudo&sektion=8">sudo(8)</a> is run with -k or -K only complain about missing usernames to stderr and don't log anything, since we may be running in a .logout script at shutdown and the YP etc. daemon may have gone away. |
<!-- ^ 20031223 --> |
<!-- ^ 20031223 --> |
<li>Fix a remotely exploitable crasher in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcpdump&sektion=8">tcpdump(8)</a>'s l2tp parser (PR#3610.)<br> |
<li>Fix a remotely exploitable crasher in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcpdump&sektion=8">tcpdump(8)</a>'s l2tp parser (PR#3610).<br> |
<a href="stable.html"><font color="#00b000">[Applied to stable]</font></a> |
<a href="stable.html"><font color="#00b000">[Applied to stable]</font></a> |
<li>Properly clean up 3DES cipher contexts in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>. |
<li>Properly clean up 3DES cipher contexts in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>. |
<li>Make sure a signal handler-modified variable in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sensorsd&sektion=8">sensorsd(8)</a> is typed as volatile sig_atomic_t. |
<li>Make sure a signal handler-modified variable in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sensorsd&sektion=8">sensorsd(8)</a> is typed as volatile sig_atomic_t. |
|
|
<li>New <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=queue&sektion=3">queue(3)</a> macros SLIST_FOREACH_PREVPTR (from FreeBSD) and SLIST_REMOVE_NEXT. |
<li>New <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=queue&sektion=3">queue(3)</a> macros SLIST_FOREACH_PREVPTR (from FreeBSD) and SLIST_REMOVE_NEXT. |
<li>Allow cloner interfaces to return an error from their destroy function. |
<li>Allow cloner interfaces to return an error from their destroy function. |
<li>Much string cleaning and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=abort&sektion=3">abort(3)</a> -> <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=exit&sektion=3">exit(3)</a> in the AFS library. |
<li>Much string cleaning and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=abort&sektion=3">abort(3)</a> -> <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=exit&sektion=3">exit(3)</a> in the AFS library. |
<li>Stop <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=newsyslog&sektion=8">newsyslog(8)</a> segfaulting when given an empty command (PR#3578.) |
<li>Stop <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=newsyslog&sektion=8">newsyslog(8)</a> segfaulting when given an empty command (PR#3578). |
<li>Fix a couple of missing <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=printf&sektion=3">printf(3)</a> args in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=monop&sektion=6">monop(6)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mopd&sektion=8">mopd(8)</a>. |
<li>Fix a couple of missing <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=printf&sektion=3">printf(3)</a> args in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=monop&sektion=6">monop(6)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mopd&sektion=8">mopd(8)</a>. |
<li>New environment variable MANPAGER for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=man&sektion=1">man(1)</a> (PR#3563.) |
<li>New environment variable MANPAGER for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=man&sektion=1">man(1)</a> (PR#3563). |
<li>Add app-layer keepalive option 'ServerAliveInterval' to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>, analogous to ClientAliveInterval on the server. |
<li>Add app-layer keepalive option 'ServerAliveInterval' to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>, analogous to ClientAliveInterval on the server. |
<li>Don't do expensive <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfsync&sektion=4">pfsync(4)</a> processing if noone is using it (i.e. no <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bpf&sektion=4">bpf(4)</a> listeners, and no network synchronisation.) |
<li>Don't do expensive <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfsync&sektion=4">pfsync(4)</a> processing if noone is using it (i.e. no <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bpf&sektion=4">bpf(4)</a> listeners, and no network synchronisation). |
<li>Shorten or '#ifdef SMALL'-out some long message strings in the kernel. |
<li>Shorten or '#ifdef SMALL'-out some long message strings in the kernel. |
<li>A round of boot floppy space-saving begins. |
<li>A round of boot floppy space-saving begins. |
<!-- ^ 20031216 --> |
<!-- ^ 20031216 --> |
|
|
<li>Fix some fallout from the rlim_t change from signed to unsigned. |
<li>Fix some fallout from the rlim_t change from signed to unsigned. |
<li>Add support for groups 14 through 18 (modp{2048,2072,4096,6144,8192} - see RFC 3526) to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a>. |
<li>Add support for groups 14 through 18 (modp{2048,2072,4096,6144,8192} - see RFC 3526) to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a>. |
<li>Initial support for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> state synchronisation over the network. See <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfsync&sektion=4">pfsync(4)</a>. |
<li>Initial support for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> state synchronisation over the network. See <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfsync&sektion=4">pfsync(4)</a>. |
<li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sh&sektion=1">sh(1)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ksh&sektion=1">ksh(1)</a> functions work the way the manual page suggests with respect to non-exported environment variables (PR#2450.) |
<li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sh&sektion=1">sh(1)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ksh&sektion=1">ksh(1)</a> functions work the way the manual page suggests with respect to non-exported environment variables (PR#2450). |
<li>Allow <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> to track stateful connections based on the source IP address. Especially useful for load balancing configurations. |
<li>Allow <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> to track stateful connections based on the source IP address. Especially useful for load balancing configurations. |
<!-- ^ 20031215 --> |
<!-- ^ 20031215 --> |
<li>Add <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=awk&sektion=1">awk(1)</a> USD paper in /usr/share/doc/usd/16.awk. |
<li>Add <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=awk&sektion=1">awk(1)</a> USD paper in /usr/share/doc/usd/16.awk. |
|
|
<li>Don't accept absolute pathnames for module names in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cvs&sektion=1">cvs(1)</a>. From CVS 1.11.10. |
<li>Don't accept absolute pathnames for module names in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cvs&sektion=1">cvs(1)</a>. From CVS 1.11.10. |
<li>Cleanup and POSIXness for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=join&sektion=1">join(1)</a>. From FreeBSD. |
<li>Cleanup and POSIXness for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=join&sektion=1">join(1)</a>. From FreeBSD. |
<!-- ^ 20031212 --> |
<!-- ^ 20031212 --> |
<li>More POSIX type definitions (rlim_t now unsigned, RLIM_SAVED_{CUR,MAX} defined, id_t defined.) |
<li>More POSIX type definitions (rlim_t now unsigned, RLIM_SAVED_{CUR,MAX} defined, id_t defined). |
<li>Kill annoying <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> assertion failure messages, and correct the underlying problem with NAT and table stats (PR#3587.) |
<li>Kill annoying <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> assertion failure messages, and correct the underlying problem with NAT and table stats (PR#3587). |
<li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sis&sektion=4">sis(4)</a> short cable problems properly. From Linux and the datasheets, via FreeBSD. |
<li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sis&sektion=4">sis(4)</a> short cable problems properly. From Linux and the datasheets, via FreeBSD. |
<!-- ^ 20031211 --> |
<!-- ^ 20031211 --> |
<li>Also for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=poll&sektion=2">poll(2)</a>, add pollfd_t (= struct pollfd) as in Solaris. |
<li>Also for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=poll&sektion=2">poll(2)</a>, add pollfd_t (= struct pollfd) as in Solaris. |
|
|
<li>Better -n handling for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pkg_add&sektion=1">pkg_add(1)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pkg_delete&sektion=1">pkg_delete(1)</a> when dependencies are involved. |
<li>Better -n handling for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pkg_add&sektion=1">pkg_add(1)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pkg_delete&sektion=1">pkg_delete(1)</a> when dependencies are involved. |
<li>Make explicit the base package to which <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pkg_add&sektion=1">pkg_add(1)</a>'s dependency resolution output applies. |
<li>Make explicit the base package to which <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pkg_add&sektion=1">pkg_add(1)</a>'s dependency resolution output applies. |
<li>Fix error-handling logic in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pkg_add&sektion=1">pkg_add(1)</a> that affected the -n option. |
<li>Fix error-handling logic in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pkg_add&sektion=1">pkg_add(1)</a> that affected the -n option. |
<li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a>, don't modify argv when parsing the -o option (unbreaks HUP for sshd.) |
<li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a>, don't modify argv when parsing the -o option (unbreaks HUP for sshd). |
<li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> option ClientKeepAlive work when the -N option (no login shell) is in effect. |
<li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> option ClientKeepAlive work when the -N option (no login shell) is in effect. |
<li>Stop <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh-keygen&sektion=1">ssh-keygen(1)</a>'s -T option from accepting primes with no known generator. |
<li>Stop <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh-keygen&sektion=1">ssh-keygen(1)</a>'s -T option from accepting primes with no known generator. |
<li>Add some PostScript docs for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=lex&sektion=1">lex(1)</a>. |
<li>Add some PostScript docs for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=lex&sektion=1">lex(1)</a>. |
<li>Fix some missing <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=printf&sektion=3">printf(3)</a> args in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tn3270&sektion=1">tn3270(1)</a> and kernfs. |
<li>Fix some missing <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=printf&sektion=3">printf(3)</a> args in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tn3270&sektion=1">tn3270(1)</a> and kernfs. |
<li>Some cleanup in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=compress&sektion=1">compress(1)</a>. |
<li>Some cleanup in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=compress&sektion=1">compress(1)</a>. |
<li>Allow more than one user at a time to use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ftp&sektion=1">ftp(1)</a> in active mode (PR#3596.)<br> |
<li>Allow more than one user at a time to use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ftp&sektion=1">ftp(1)</a> in active mode (PR#3596).<br> |
<a href="stable.html"><font color="#00b000">[Applied to stable]</font></a> |
<a href="stable.html"><font color="#00b000">[Applied to stable]</font></a> |
<li>Unbreak xfs symlinks (PR#3552.)<br> |
<li>Unbreak xfs symlinks (PR#3552).<br> |
<a href="stable.html"><font color="#00b000">[Applied to stable]</font></a> |
<a href="stable.html"><font color="#00b000">[Applied to stable]</font></a> |
<!-- ^ 20031209 --> |
<!-- ^ 20031209 --> |
<li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=patch&sektion=1">patch(1)</a>, get a private mapping from <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mmap&sektion=2">mmap(2)</a> instead of a default (file) mapping. |
<li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=patch&sektion=1">patch(1)</a>, get a private mapping from <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mmap&sektion=2">mmap(2)</a> instead of a default (file) mapping. |
|
|
<li>New <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mbuf_tags&sektion=9">mbuf_tags(9)</a> type ...PF_TRANSLATE_LOCALHOST, used so that <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> redirection to localhost doesn't defeat the ability of programs like <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=portmap&sektion=8">portmap(8)</a> to tell localhost connections from remote connections. |
<li>New <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mbuf_tags&sektion=9">mbuf_tags(9)</a> type ...PF_TRANSLATE_LOCALHOST, used so that <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> redirection to localhost doesn't defeat the ability of programs like <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=portmap&sektion=8">portmap(8)</a> to tell localhost connections from remote connections. |
<!-- ^ 20031208 --> |
<!-- ^ 20031208 --> |
<li>Add ifconfig create support to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ppp&sektion=4">ppp(4)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sl&sektion=4">sl(4)</a>. No ifconfig destroy yet. |
<li>Add ifconfig create support to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ppp&sektion=4">ppp(4)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sl&sektion=4">sl(4)</a>. No ifconfig destroy yet. |
<li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=regex&sektion=3">regex(3)</a> handling of non-ASCII characters (PR#3594.) Fix from FreeBSD. |
<li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=regex&sektion=3">regex(3)</a> handling of non-ASCII characters (PR#3594). Fix from FreeBSD. |
<!-- ^ 20031207 --> |
<!-- ^ 20031207 --> |
<li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=grep&sektion=1">grep(1)</a>'s handling of certain patterns containing multiple dots (PR#3597.) |
<li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=grep&sektion=1">grep(1)</a>'s handling of certain patterns containing multiple dots (PR#3597). |
<li>Make ifconfig destroy work on <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tun&sektion=4">tun(4)</a>. |
<li>Make ifconfig destroy work on <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tun&sektion=4">tun(4)</a>. |
<!-- ^ 20031206 --> |
<!-- ^ 20031206 --> |
<li>Fix an endianness bug that was causing <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wicontrol&sektion=8">wicontrol(8)</a> to crash. |
<li>Fix an endianness bug that was causing <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wicontrol&sektion=8">wicontrol(8)</a> to crash. |
|
|
<li>Avoid a null-deref in uvm_swap_markbad(). |
<li>Avoid a null-deref in uvm_swap_markbad(). |
<li>Check signedness before dereferencing in kernel descriptor management code. |
<li>Check signedness before dereferencing in kernel descriptor management code. |
<!-- ^ 20031202 --> |
<!-- ^ 20031202 --> |
<li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=csh&sektion=1">csh(1)</a> variable substitution when shortening strings (PR#3591.) |
<li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=csh&sektion=1">csh(1)</a> variable substitution when shortening strings (PR#3591). |
<li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=aliases&sektion=5">aliases(5)</a>, direct mail for most fake users (e.g. _syslogd) to /dev/null instead of spamming root. |
<li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=aliases&sektion=5">aliases(5)</a>, direct mail for most fake users (e.g. _syslogd) to /dev/null instead of spamming root. |
<li>Add an amd64 target to gcc3. |
<li>Add an amd64 target to gcc3. |
<li>Add extended register support in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dc&sektion=1">dc(1)</a> (-x option,) ready for long variable names support coming to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bc&sektion=1">bc(1)</a> soon. |
<li>Add extended register support in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dc&sektion=1">dc(1)</a> (-x option,) ready for long variable names support coming to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bc&sektion=1">bc(1)</a> soon. |
|
|
<!-- ^ 20031129 --> |
<!-- ^ 20031129 --> |
<li>Fix the regex in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=security&sektion=8">security(8)</a> that tests for valid group names. |
<li>Fix the regex in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=security&sektion=8">security(8)</a> that tests for valid group names. |
<li>More fixes to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> stats gathering. |
<li>More fixes to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> stats gathering. |
<li>Fix NFS-over-TCP speed when OpenBSD is serving Linux clients (PR#3561.) |
<li>Fix NFS-over-TCP speed when OpenBSD is serving Linux clients (PR#3561). |
<!-- ^ 20031128 --> |
<!-- ^ 20031128 --> |
<li>Allow <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=systrace&sektion=1">systrace(1)</a> to accept usernames ending in '$'. |
<li>Allow <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=systrace&sektion=1">systrace(1)</a> to accept usernames ending in '$'. |
<li>Fix missing <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=printf&sektion=3">printf(3)</a> arguments in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=eeprom&sektion=8&arch=sparc">eeprom(8)</a>, elf2aout and elf2ecoff. |
<li>Fix missing <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=printf&sektion=3">printf(3)</a> arguments in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=eeprom&sektion=8&arch=sparc">eeprom(8)</a>, elf2aout and elf2ecoff. |
|
|
<!-- ^ 20031125 --> |
<!-- ^ 20031125 --> |
<li>Move libiberty into src/gnu/lib/libiberty, removing it from the egcs directory. The new library is a sync'd to "somewhere between binutils-2.10 and 2.11" with some local changes. |
<li>Move libiberty into src/gnu/lib/libiberty, removing it from the egcs directory. The new library is a sync'd to "somewhere between binutils-2.10 and 2.11" with some local changes. |
<li>Avoid a double-free in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pcap_setfilter&sektion=3">pcap_setfilter(3)</a>. |
<li>Avoid a double-free in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pcap_setfilter&sektion=3">pcap_setfilter(3)</a>. |
<li>Have the kernel's MD5 code use the per-architecture optimised bcopy() instead of its own implementation (PR#3549.) |
<li>Have the kernel's MD5 code use the per-architecture optimised bcopy() instead of its own implementation (PR#3549). |
<li>New meaning for the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> -k option, it's now equivalent to GSSAPIDelegateCredentials=no. |
<li>New meaning for the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> -k option, it's now equivalent to GSSAPIDelegateCredentials=no. |
<!-- ^ 20031124 --> |
<!-- ^ 20031124 --> |
<li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh-keyscan&sektion=1">ssh-keyscan(1)</a>, use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sysconf&sektion=3">sysconf(3)</a> to get the maximum fd limit instead of returning an arbitrary number. |
<li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh-keyscan&sektion=1">ssh-keyscan(1)</a>, use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sysconf&sektion=3">sysconf(3)</a> to get the maximum fd limit instead of returning an arbitrary number. |
|
|
<li>Fix a missing initialisation in libkvm. |
<li>Fix a missing initialisation in libkvm. |
<li>Don't expose the contents of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=named&sektion=8">named(8)</a>'s rndc.key file when diff'd by <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=security&sektion=8">security(8)</a>. |
<li>Don't expose the contents of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=named&sektion=8">named(8)</a>'s rndc.key file when diff'd by <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=security&sektion=8">security(8)</a>. |
<li>Merge in Apache 1.3.29 and mod_ssl 2.8.16. |
<li>Merge in Apache 1.3.29 and mod_ssl 2.8.16. |
<li>Add a missing bounds check and fix an int overflow in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=compat_ibcs2&sektion=8">compat_ibcs2(8)</a> (not enabled by default.)<br> |
<li>Add a missing bounds check and fix an int overflow in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=compat_ibcs2&sektion=8">compat_ibcs2(8)</a> (not enabled by default).<br> |
<a href="stable.html"><font color="#00b000">[Applied to stable]</font></a> |
<a href="stable.html"><font color="#00b000">[Applied to stable]</font></a> |
<li>Two more non-portable extensions to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bc&sektion=1">bc(1)</a>: Add new boolean operators, and allow relational operators to appear anywhere. |
<li>Two more non-portable extensions to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bc&sektion=1">bc(1)</a>: Add new boolean operators, and allow relational operators to appear anywhere. |
<li>Add drop operator 'R' to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dc&sektion=1">dc(1)</a>. |
<li>Add drop operator 'R' to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dc&sektion=1">dc(1)</a>. |
|
|
<!-- ^ 20031109 --> |
<!-- ^ 20031109 --> |
<li>Unbreak the anchor rule number returned by <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfsync&sektion=4">pfsync(4)</a>. |
<li>Unbreak the anchor rule number returned by <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfsync&sektion=4">pfsync(4)</a>. |
<li>Avoid a race condition when swapping in a process. |
<li>Avoid a race condition when swapping in a process. |
<li>On i386, fix a crash that occurred with a large number (>1500) of processes (PR#3528.) |
<li>On i386, fix a crash that occurred with a large number (>1500) of processes (PR#3528). |
<li>New 'no sync' state option to prevent state transitions for a particular rule appearing on the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfsync&sektion=4">pfsync(4)</a> interface. |
<li>New 'no sync' state option to prevent state transitions for a particular rule appearing on the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfsync&sektion=4">pfsync(4)</a> interface. |
<!-- ^ 20031108 --> |
<!-- ^ 20031108 --> |
<li>Check that <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=carp&sektion=4">carp(4)</a> packets are received on a carp-enabled interface. |
<li>Check that <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=carp&sektion=4">carp(4)</a> packets are received on a carp-enabled interface. |
|
|
<li>The package tools now automatically use the target of the first @cwd in the packing list as the prefix. |
<li>The package tools now automatically use the target of the first @cwd in the packing list as the prefix. |
<li>Temporarily back out the recent reordering of interface capability tests and pf_test(). <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> rdr rules are now generating some bogus checksums. |
<li>Temporarily back out the recent reordering of interface capability tests and pf_test(). <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> rdr rules are now generating some bogus checksums. |
<li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a>, require encrypted messages as soon as we have the keystate for it, require DELETE payloads to be accompanied by HASHes, and add validation for HASH payloads without active exchanges. |
<li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a>, require encrypted messages as soon as we have the keystate for it, require DELETE payloads to be accompanied by HASHes, and add validation for HASH payloads without active exchanges. |
<li>Allow <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> tags to use the same macros as labels (see <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf.conf&sektion=5">pf.conf(5)</a>.) |
<li>Allow <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> tags to use the same macros as labels (see <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf.conf&sektion=5">pf.conf(5)</a>). |
<li>Teach <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=gdb&sektion=1">gdb(1)</a> about SIGINFO (PR#3173.) |
<li>Teach <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=gdb&sektion=1">gdb(1)</a> about SIGINFO (PR#3173). |
<li>Add commented-out LoadModule config lines, along with a short description, for each <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=httpd&sektion=8">httpd(8)</a> module in the standard build. |
<li>Add commented-out LoadModule config lines, along with a short description, for each <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=httpd&sektion=8">httpd(8)</a> module in the standard build. |
<li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=newfs&sektion=8">newfs(8)</a> don't write the magic to the superblock until filesystem creation is completed. |
<li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=newfs&sektion=8">newfs(8)</a> don't write the magic to the superblock until filesystem creation is completed. |
<li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=netstat&sektion=1">netstat(1)</a>'s display of IPv6 link-local multicast addresses. |
<li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=netstat&sektion=1">netstat(1)</a>'s display of IPv6 link-local multicast addresses. |
|
|
<li>New --posix option for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=patch&sektion=1">patch(1)</a> for, uh, strict POSIX conformance. |
<li>New --posix option for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=patch&sektion=1">patch(1)</a> for, uh, strict POSIX conformance. |
<li>Set pkgpath in the correct order in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pkg_add&sektion=1">pkg_add(1)</a> etc. |
<li>Set pkgpath in the correct order in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pkg_add&sektion=1">pkg_add(1)</a> etc. |
<li>Re-add the SATA mode detection and reset-pause-IDENTIFY fixes to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wdc&sektion=4">wdc(4)</a>. Drive reset fixes need further testing. |
<li>Re-add the SATA mode detection and reset-pause-IDENTIFY fixes to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wdc&sektion=4">wdc(4)</a>. Drive reset fixes need further testing. |
<li>Allocate the right number of elements in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=hashinit&sektion=9">hashinit(9)</a> (PR#3537.) |
<li>Allocate the right number of elements in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=hashinit&sektion=9">hashinit(9)</a> (PR#3537). |
<li>Look up the groupname (not the username) when getting the gid from a tarfile in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pkg_add&sektion=1">pkg_add(1)</a> and friends. Also set file ownership before the mode. |
<li>Look up the groupname (not the username) when getting the gid from a tarfile in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pkg_add&sektion=1">pkg_add(1)</a> and friends. Also set file ownership before the mode. |
<li>Add IPv6 support to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=carp&sektion=4">carp(4)</a>. |
<li>Add IPv6 support to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=carp&sektion=4">carp(4)</a>. |
<li>Sync libedit to NetBSD as of 2003-10-01, with some local string cleaning and history bug fixes. There are some api changes as a result of this update. |
<li>Sync libedit to NetBSD as of 2003-10-01, with some local string cleaning and history bug fixes. There are some api changes as a result of this update. |
<li>New port, <a href="pegasos.html">OPENBSD/pegasos</a>. |
<li>New port, <a href="pegasos.html">OPENBSD/pegasos</a>. |
<li>Fix insufficient length check in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=route6d&sektion=8">route6d(8)</a> (KAME PR#507.) |
<li>Fix insufficient length check in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=route6d&sektion=8">route6d(8)</a> (KAME PR#507). |
<!-- ^ 20031031 --> |
<!-- ^ 20031031 --> |
<li>Try to deal with <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=strdup&sektion=3">strdup(3)</a> failures in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=init&sektion=8">init(8)</a>. |
<li>Try to deal with <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=strdup&sektion=3">strdup(3)</a> failures in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=init&sektion=8">init(8)</a>. |
<li>More detective work from the spelling police, double-word branch. |
<li>More detective work from the spelling police, double-word branch. |
<li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=lc&sektion=4">lc(4)</a> multicast filter initialisation. |
<li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=lc&sektion=4">lc(4)</a> multicast filter initialisation. |
<!-- ^ 20031030 --> |
<!-- ^ 20031030 --> |
<li>Backout recent <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wdc&sektion=4">wdc(4)</a> reset, identify and mode detection changes, they are breaking things. |
<li>Backout recent <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wdc&sektion=4">wdc(4)</a> reset, identify and mode detection changes, they are breaking things. |
<li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> binat for incoming connections when a netblock (not just a single address) is used as the rule source (PR#3535.)<br> |
<li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> binat for incoming connections when a netblock (not just a single address) is used as the rule source (PR#3535).<br> |
<a href="stable.html"><font color="#00b000">[Applied to stable]</font></a> |
<a href="stable.html"><font color="#00b000">[Applied to stable]</font></a> |
<li><font color="#e00000"><strong>RELIABILITY FIX: A user with write permission to httpd.conf or a .htaccess file can crash <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=httpd&sektion=8">httpd(8)</a> or potentially run arbitrary code as the user</strong> www <strong> (although it is believed that ProPolice will prevent code execution.)</strong></font><br> |
<li><font color="#e00000"><strong>RELIABILITY FIX: A user with write permission to httpd.conf or a .htaccess file can crash <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=httpd&sektion=8">httpd(8)</a> or potentially run arbitrary code as the user</strong> www <strong> (although it is believed that ProPolice will prevent code execution).</strong></font><br> |
<a href="errata.html#httpd">A source code patch is available</a>.<br> |
<a href="errata.html#httpd">A source code patch is available</a>.<br> |
<a href="stable.html"><font color="#00b000">[Applied to stable]</font></a> |
<a href="stable.html"><font color="#00b000">[Applied to stable]</font></a> |
<!-- ^ 20031029 --> |
<!-- ^ 20031029 --> |
|
|
<li>Add division and modulus operator '~' to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dc&sektion=1">dc(1)</a>. |
<li>Add division and modulus operator '~' to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dc&sektion=1">dc(1)</a>. |
<li>Remove GNU bc and dc from the tree. |
<li>Remove GNU bc and dc from the tree. |
<li>Merge in expat 1.95.6 from XFree86 4.3.99.14. |
<li>Merge in expat 1.95.6 from XFree86 4.3.99.14. |
<li>Search for keys in the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> agent in reverse order to solve duplicate key problems (OpenSSH bugzilla #684.) |
<li>Search for keys in the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> agent in reverse order to solve duplicate key problems (OpenSSH bugzilla #684). |
<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> option ForwardX11 now has <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xauth&sektion=1">xauth(1)</a> generate untrusted keys by default. Option ForwardX11Trusted restores the old behaviour. |
<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> option ForwardX11 now has <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xauth&sektion=1">xauth(1)</a> generate untrusted keys by default. Option ForwardX11Trusted restores the old behaviour. |
<li>Change <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=vnd&sektion=4">vnd(4)</a> major/minor numbering to allow more devices. Requires a MAKEDEV. |
<li>Change <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=vnd&sektion=4">vnd(4)</a> major/minor numbering to allow more devices. Requires a MAKEDEV. |
<!-- ^ 20031011 --> |
<!-- ^ 20031011 --> |
<li>Do nfs-specific 'test -x' stuff in the right order in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ksh&sektion=1">ksh(1)</a> (PR#3465.) |
<li>Do nfs-specific 'test -x' stuff in the right order in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ksh&sektion=1">ksh(1)</a> (PR#3465). |
<li>More work on <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=vr&sektion=4">vr(4)</a>. |
<li>More work on <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=vr&sektion=4">vr(4)</a>. |
<li>Have the linker generate a warning when using 43compat's <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getwd&sektion=3">getwd(3)</a>. |
<li>Have the linker generate a warning when using 43compat's <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getwd&sektion=3">getwd(3)</a>. |
<li>Better calibration code for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=auich&sektion=4">auich(4)</a>. From FreeBSD/NetBSD. |
<li>Better calibration code for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=auich&sektion=4">auich(4)</a>. From FreeBSD/NetBSD. |
<!-- ^ 20031010 --> |
<!-- ^ 20031010 --> |
<!-- ^ 20031009 --> |
<!-- ^ 20031009 --> |
<li>Re-enable the random increment on the return value of uvm_map_hint() (called by <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=uvm_map&sektion=9">uvm_map(9)</a>.) |
<li>Re-enable the random increment on the return value of uvm_map_hint() (called by <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=uvm_map&sektion=9">uvm_map(9)</a>). |
<li>Install a sample config file for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sensorsd&sektion=8">sensorsd(8)</a>. |
<li>Install a sample config file for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sensorsd&sektion=8">sensorsd(8)</a>. |
<li>Prevent symlink races in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=systrace&sektion=1">systrace(1)</a>. |
<li>Prevent symlink races in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=systrace&sektion=1">systrace(1)</a>. |
<li>Have GSSAPI default to off in the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> client as well as the server. |
<li>Have GSSAPI default to off in the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> client as well as the server. |
<li>Unbreak <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> on 64-bit architectures. |
<li>Unbreak <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> on 64-bit architectures. |
<li>Hack <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=httpd&sektion=8">httpd(8)</a> so digest authentication works with IE, Safari, etc. From FreeBSD. |
<li>Hack <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=httpd&sektion=8">httpd(8)</a> so digest authentication works with IE, Safari, etc. From FreeBSD. |
<li>Fix potential signedness bug in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fgets&sektion=3">fgets(3)</a> (PR#1709.) |
<li>Fix potential signedness bug in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fgets&sektion=3">fgets(3)</a> (PR#1709). |
<!-- ^ 20031008 --> |
<!-- ^ 20031008 --> |
<li>Correct __bounded__ attributes for {MD4,MD5,RMD160,SHA1}DATA functions (PR#3505.) |
<li>Correct __bounded__ attributes for {MD4,MD5,RMD160,SHA1}DATA functions (PR#3505). |
<li>Allow <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=newfs&sektion=8">newfs(8)</a> to build small filesystems again by making sure ncyls >= 2.<br> |
<li>Allow <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=newfs&sektion=8">newfs(8)</a> to build small filesystems again by making sure ncyls >= 2.<br> |
<a href="stable.html"><font color="#00b000">[Applied to stable]</font></a> |
<a href="stable.html"><font color="#00b000">[Applied to stable]</font></a> |
<li>Plug a memory leak in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=netstat&sektion=1">netstat(1)</a>. |
<li>Plug a memory leak in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=netstat&sektion=1">netstat(1)</a>. |
<li>Add nfs attribute cache tuning parameters to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mount_nfs&sektion=8">mount_nfs(8)</a> (Inspired by PR#2567.) |
<li>Add nfs attribute cache tuning parameters to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mount_nfs&sektion=8">mount_nfs(8)</a> (Inspired by PR#2567). |
<li>Kill a null deref in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=make&sektion=1">make(1)</a>. |
<li>Kill a null deref in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=make&sektion=1">make(1)</a>. |
<li>Allow a semicolon to terminate label strings in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sed&sektion=1">sed(1)</a>, so one-liners with labels can work. |
<li>Allow a semicolon to terminate label strings in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sed&sektion=1">sed(1)</a>, so one-liners with labels can work. |
<li>A few string and memory fixes in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rup&sektion=1">rup(1)</a>. |
<li>A few string and memory fixes in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rup&sektion=1">rup(1)</a>. |
|
|
<li>Stop <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a> crashing when the value for LIFE_DURATION is missing. |
<li>Stop <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a> crashing when the value for LIFE_DURATION is missing. |
<li>Back out the new environment variable load in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ld.so&sektion=1">ld.so(1)</a> due to sparc breakage. |
<li>Back out the new environment variable load in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ld.so&sektion=1">ld.so(1)</a> due to sparc breakage. |
<li>Unbreak the new xfs poll backend. |
<li>Unbreak the new xfs poll backend. |
<li>Fix a long-standing memory leak in kernel libz (PR#2886.) From NetBSD. |
<li>Fix a long-standing memory leak in kernel libz (PR#2886). From NetBSD. |
<li>Print a more useful error message when a bad port number is given to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=whois&sektion=1">whois(1)</a>. |
<li>Print a more useful error message when a bad port number is given to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=whois&sektion=1">whois(1)</a>. |
<li>Fix broken time parsing in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=kadmin&sektion=8">kadmin(8)</a> (PR#3292.) |
<li>Fix broken time parsing in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=kadmin&sektion=8">kadmin(8)</a> (PR#3292). |
<!-- ^ 20031004 --> |
<!-- ^ 20031004 --> |
<li>Initialise environment variables in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ld.so&sektion=1">ld.so(1)</a> before calling constructors and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=atexit&sektion=3">atexit(3)</a> functions |
<li>Initialise environment variables in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ld.so&sektion=1">ld.so(1)</a> before calling constructors and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=atexit&sektion=3">atexit(3)</a> functions |
<li>Have <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=inetd&sektion=8">inetd(8)</a> exit if no config file is found. |
<li>Have <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=inetd&sektion=8">inetd(8)</a> exit if no config file is found. |
|
|
<li>Remove a bad <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=m_cat&sektion=9">m_cat(9)</a> call when fragmenting outbound IPv6 packets. |
<li>Remove a bad <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=m_cat&sektion=9">m_cat(9)</a> call when fragmenting outbound IPv6 packets. |
<li>Add a missing initialisation in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pflog&sektion=4">pflog(4)</a> that allowed kernel stack garbage to leak into .pcap files. |
<li>Add a missing initialisation in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pflog&sektion=4">pflog(4)</a> that allowed kernel stack garbage to leak into .pcap files. |
<li>Have the libc stack protector code use the kernel __sysctl() call directly instead of using the libc <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sysctl&sektion=3">sysctl(3)</a> interface. |
<li>Have the libc stack protector code use the kernel __sysctl() call directly instead of using the libc <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sysctl&sektion=3">sysctl(3)</a> interface. |
<li>Stop reading ~/.signature to pre-fill the Organisation: field in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sendbug&sektion=1">sendbug(1)</a> (PR#3499.) |
<li>Stop reading ~/.signature to pre-fill the Organisation: field in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sendbug&sektion=1">sendbug(1)</a> (PR#3499). |
<li>Fixes to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=event&sektion=3">event(3)</a> poll code. |
<li>Fixes to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=event&sektion=3">event(3)</a> poll code. |
<li>Have <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ftpd&sektion=8">ftpd(8)</a> listen on both IPv4 and IPv6 ports by default. |
<li>Have <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ftpd&sektion=8">ftpd(8)</a> listen on both IPv4 and IPv6 ports by default. |
<li>Fix an out-of-bounds memory access in kernel <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=compat_ibcs2&sektion=8">compat_ibcs2(8)</a> code. |
<li>Fix an out-of-bounds memory access in kernel <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=compat_ibcs2&sektion=8">compat_ibcs2(8)</a> code. |
<li>Add missing check for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=strdup&sektion=3">strdup(3)</a> error in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=talk&sektion=1">talk(1)</a>. |
<li>Add missing check for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=strdup&sektion=3">strdup(3)</a> error in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=talk&sektion=1">talk(1)</a>. |
<li>Correct a couple of off-by-ones in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=banner&sektion=1">banner(1)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&sektion=3">ssl(3)</a> (src/ssl/ssl_ciph.c.) |
<li>Correct a couple of off-by-ones in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=banner&sektion=1">banner(1)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&sektion=3">ssl(3)</a> (src/ssl/ssl_ciph.c). |
<li>Fix the code that grows ifindex2ifnet in sys/net/if.c. |
<li>Fix the code that grows ifindex2ifnet in sys/net/if.c. |
<li>Add a stack of missing switch break statements needed after the _dl_errno changes to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ld.so&sektion=1">ld.so(1)</a>. |
<li>Add a stack of missing switch break statements needed after the _dl_errno changes to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ld.so&sektion=1">ld.so(1)</a>. |
<!-- ^ 20031001 --> |
<!-- ^ 20031001 --> |
|
|
<li>Fix an off-by-one and a bad string bounds length in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=atc&sektion=6">atc(6)</a>. |
<li>Fix an off-by-one and a bad string bounds length in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=atc&sektion=6">atc(6)</a>. |
<li>Don't set <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a>'s listen socket to non-blocking mode. |
<li>Don't set <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a>'s listen socket to non-blocking mode. |
<li>Build the new BSD <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bc&sektion=1">bc(1)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dc&sektion=1">dc(1)</a> in favour of the GNU versions. |
<li>Build the new BSD <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bc&sektion=1">bc(1)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dc&sektion=1">dc(1)</a> in favour of the GNU versions. |
<li>Drop <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=authpf&sektion=8">authpf(8)</a>'s 15-character username restriction, it's no longer necessary (PR#3491.) |
<li>Drop <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=authpf&sektion=8">authpf(8)</a>'s 15-character username restriction, it's no longer necessary (PR#3491). |
<li>Allocate a buffer large enough to store a full IPX address in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ipx_ntoa&sektion=3">ipx_ntoa(3)</a>. |
<li>Allocate a buffer large enough to store a full IPX address in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ipx_ntoa&sektion=3">ipx_ntoa(3)</a>. |
<li>Unbreak <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=netstat&sektion=1">netstat(1)</a> -i display columns for interfaces with no address. |
<li>Unbreak <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=netstat&sektion=1">netstat(1)</a> -i display columns for interfaces with no address. |
<li>Stop <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=spamd&sektion=8">spamd(8)</a> dying unceremoniously on <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=accept&sektion=2">accept(2)</a> failures. |
<li>Stop <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=spamd&sektion=8">spamd(8)</a> dying unceremoniously on <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=accept&sektion=2">accept(2)</a> failures. |
<li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=talk&sektion=1">talk(1)</a> retry if <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=accept&sektion=2">accept(2)</a> returns ECONNABORTED (the same as it does for EINTR.) |
<li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=talk&sektion=1">talk(1)</a> retry if <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=accept&sektion=2">accept(2)</a> returns ECONNABORTED (the same as it does for EINTR). |
<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=realloc&sektion=3">realloc(3)</a> fixes in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=brconfig&sektion=8">brconfig(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhclient&sektion=8">dhclient(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=lpd&sektion=8">lpd(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pppd&sektion=8">pppd(8)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rwhod&sektion=8">rwhod(8)</a>. |
<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=realloc&sektion=3">realloc(3)</a> fixes in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=brconfig&sektion=8">brconfig(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhclient&sektion=8">dhclient(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=lpd&sektion=8">lpd(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pppd&sektion=8">pppd(8)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rwhod&sektion=8">rwhod(8)</a>. |
<li>Add a 'recipe' datafile to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fortune&sektion=6">fortune(6)</a>, starting with some barbecue recipes from the hackathon. |
<li>Add a 'recipe' datafile to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fortune&sektion=6">fortune(6)</a>, starting with some barbecue recipes from the hackathon. |
<li>Use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=arc4random&sektion=3">arc4random(3)</a> instead of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=srand&sektion=3">srand(3)</a> to generate a more random salt for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=htpasswd&sektion=1">htpasswd(1)</a>. |
<li>Use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=arc4random&sektion=3">arc4random(3)</a> instead of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=srand&sektion=3">srand(3)</a> to generate a more random salt for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=htpasswd&sektion=1">htpasswd(1)</a>. |
|
|
<li>Use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=strlcpy&sektion=3">strlcpy(3)</a> instead of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bcopy&sektion=3">bcopy(3)</a> to avoid overflowing the nodename and netname in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=an&sektion=4">an(4)</a>. |
<li>Use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=strlcpy&sektion=3">strlcpy(3)</a> instead of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bcopy&sektion=3">bcopy(3)</a> to avoid overflowing the nodename and netname in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=an&sektion=4">an(4)</a>. |
<li>Fix a couple of off-by-ones in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=adventure&sektion=6">adventure(6)</a>. |
<li>Fix a couple of off-by-ones in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=adventure&sektion=6">adventure(6)</a>. |
<li>Fix an out-of-bounds write in the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a> privsep monitor code. |
<li>Fix an out-of-bounds write in the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a> privsep monitor code. |
<li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dlerror&sektion=3">dlerror(3)</a> clear _dl_errno as expected (PR#3441.) |
<li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dlerror&sektion=3">dlerror(3)</a> clear _dl_errno as expected (PR#3441). |
<li>Correct a couple of off-by-ones in libc. |
<li>Correct a couple of off-by-ones in libc. |
<li>Fix overflows in the X font server overflow fix. Sigh. |
<li>Fix overflows in the X font server overflow fix. Sigh. |
<li>Add a missing free in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cvs&sektion=1">cvs(1)</a>. |
<li>Add a missing free in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cvs&sektion=1">cvs(1)</a>. |
<li>New, BSD-licensed version of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bc&sektion=1">bc(1)</a>. |
<li>New, BSD-licensed version of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bc&sektion=1">bc(1)</a>. |
<li>Fix an off-by-one in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=csh&sektion=1">csh(1)</a> (PR#3163.) |
<li>Fix an off-by-one in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=csh&sektion=1">csh(1)</a> (PR#3163). |
<li>More <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=realloc&sektion=3">realloc(3)</a> fixes. |
<li>More <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=realloc&sektion=3">realloc(3)</a> fixes. |
<li>Fix a bad bounds check that could crash <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sort&sektion=1">sort(1)</a>. |
<li>Fix a bad bounds check that could crash <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sort&sektion=1">sort(1)</a>. |
<!-- ^ 20030925 --> |
<!-- ^ 20030925 --> |
|
|
<li>Stop <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&sektion=8">pfctl(8)</a> checking for a netmask if the address type being examined is a table. |
<li>Stop <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&sektion=8">pfctl(8)</a> checking for a netmask if the address type being examined is a table. |
<li>Fix a subtle use-after-free in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=modload&sektion=8">modload(8)</a>. |
<li>Fix a subtle use-after-free in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=modload&sektion=8">modload(8)</a>. |
<li>Some int -> u_int paranoia in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>. |
<li>Some int -> u_int paranoia in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>. |
<li>More <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> buffer management fixes (CAN-2003-0682.) |
<li>More <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> buffer management fixes (CAN-2003-0682). |
<li>Further EDD detection improvements on i386. |
<li>Further EDD detection improvements on i386. |
<li>Properly flush the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> RSA1 public key from memory when its output file cannot be opened (OpenSSH bugzilla #662.) |
<li>Properly flush the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> RSA1 public key from memory when its output file cannot be opened (OpenSSH bugzilla #662). |
<li>Correct a double-free in the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> buffer management code (OpenSSH PR#660.) |
<li>Correct a double-free in the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> buffer management code (OpenSSH PR#660). |
<li>Fix the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> ConnectTimeout option (OpenSSH PR#656.) |
<li>Fix the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> ConnectTimeout option (OpenSSH PR#656). |
<li>On i386, try harder to boot from removable media by allowing for their removal and insertion. |
<li>On i386, try harder to boot from removable media by allowing for their removal and insertion. |
<!-- ^ 20030918 --> |
<!-- ^ 20030918 --> |
<li>Updated and better-commented openbsd-proto.mc for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sendmail&sektion=8">sendmail(8)</a>. |
<li>Updated and better-commented openbsd-proto.mc for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sendmail&sektion=8">sendmail(8)</a>. |