| version 1.931, 2004/09/06 06:19:36 |
version 1.932, 2004/09/28 02:00:11 |
|
|
| |
|
| <p> |
<p> |
| <h3><font color="#0000e0">We are working on OpenBSD-current.</font></h3><p> |
<h3><font color="#0000e0">We are working on OpenBSD-current.</font></h3><p> |
| The following list sums up (almost) all the changes made up to July 31. |
The following list sums up (almost) all the changes made up to September 12. |
| <p> |
<p> |
| |
|
| <ul> |
<ul> |
| |
<li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcpdump&sektion=8">tcpdump(8)</a>'s <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bpf&sektion=4">bpf(4)</a> attachment on <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=atw&sektion=4">atw(4)</a> devices. |
| |
<!-- ^ 20040912 --> |
| |
<li><font color="#e00000"><strong>SECURITY FIX: Eilko Bos reported that radius authentication, as implemented by login_radius(8), was not checking the shared secret used for replies sent by the radius server.</strong></font> This could allow an attacker to spoof a reply granting access to the attacker. Note that OpenBSD does not ship with radius authentication enabled.<br> |
| |
<a href="errata.html#radius">A source code patch is available</a>.<br> |
| |
<a href="stable.html"><font color="#00b000">[Applied to stable]</font></a> |
| |
<!-- ^ 20040911 --> |
| |
<li>Bail out of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=newfs&sektion=8">newfs(8)</a> on errors when making very small filesystems. |
| |
<!-- ^ 20040910 --> |
| |
<li>Move MIPS to 64-bit. |
| |
<li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=copyout&sektion=9">copyout(9)</a> of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> anchors with relative paths and wildcards. |
| |
<li>Track the peer count correctly in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpd&sektion=8">bgpd(8)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ntpd&sektion=8">ntpd(8)</a>, fixing memory corruption in both. |
| |
<li>Fix a null dereference in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhcpd&sektion=8">dhcpd(8)</a>. |
| |
<li>Just print the raw IP protocol number in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=netstat&sektion=1">netstat(1)</a> instead of fetching the protocol name. |
| |
<!-- ^ 20040909 --> |
| |
<li>Stop <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=routed&sektion=8">routed(8)</a> fiddling with routes controlled by <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpd&sektion=8">bgpd(8)</a>. |
| |
<li><font color="#e00000"><strong>SECURITY FIX: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=httpd&sektion=8">httpd(8)</a>'s mod_rewrite module can be made to write one zero byte in an arbitrary memory position outside of a char array,</strong></font> causing a DoS or possibly buffer overflows. This would require enabling dbm for mod_rewrite and making use of a malicious dbm file.<br> |
| |
<a href="errata.html#httpd2">A source code patch is available</a>.<br> |
| |
<a href="stable.html"><font color="#00b000">[Applied to stable]</font></a> |
| |
<li>Stop <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=telnetd&sektion=8">telnetd(8)</a> closing the slave fd from <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=openpty&sektion=3">openpty(3)</a> and then reopening it. |
| |
<!-- ^ 20040908 --> |
| |
<li>Set a cleanup handler for HUP as well as INT, TERM and WINCH on the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> multiplex control socket. |
| |
<li>Stop <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ntpd&sektion=8">ntpd(8)</a> dying on <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sendmsg&sektion=2">sendmsg(2)</a> failures. |
| |
<li>Unbreak <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=route&sektion=8">route(8)</a>'s -netmask option. |
| |
<li>Fix a bad cast from mode_t to short in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ar&sektion=1">ar(1)</a>. |
| |
<!-- ^ 20040907 --> |
| |
<li>Check for interrupted waits in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=inetd&sektion=8">inetd(8)</a>, fixing late reaping of zombie processes and other ignored signals. |
| |
<!-- ^ 20040906 --> |
| |
<!-- ^ 20040905 --> |
| |
<!-- ^ 20040904 --> |
| |
<li>Don't busy-wait on ENOBUFS in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pppoe&sektion=8">pppoe(8)</a>. |
| |
<!-- ^ 20040903 --> |
| |
<li>Stop the mixer resetting <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=emu&sektion=4">emu(4)</a>'s volume to very very loud. |
| |
<!-- ^ 20040902 --> |
| |
<li>Make sure kernfs_xread() isn't called with a negative offset. |
| |
<li><font color="#e00000"><strong>SECURITY FIX: Chris Evans reported several flaws (stack and integer overflows) in the Xpm library code that parses image files (CAN-2004-0687, CAN-2004-0688).</strong></font> Some of these would be exploitable when parsing malicious image files in an application that handles XPM images, if they could escape ProPolice.<br> |
| |
<a href="errata.html#xpm">A source code patch is available</a>.<br> |
| |
<a href="stable.html"><font color="#00b000">[Applied to stable]</font></a> |
| <!-- ^ 20040901 --> |
<!-- ^ 20040901 --> |
| |
<li>Stop non-MASTER <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=carp&sektion=4">carp(4)</a> hosts replying to ARP requests, as this upsets some layer 3 switches. |
| |
<!-- ^ 20040831 --> |
| |
<li>Stop <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=login&sektion=1">login(1)</a> treating the 'bar' in username foo.bar as a Kerberos instance, that's a krb4 syntax we no longer use. |
| |
<li>Fix fd passing problems with S/Key on sparc*. |
| |
<li>Don't do DNS lookups when reading <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ntpd&sektion=8">ntpd(8)</a>'s config, save them for later. |
| |
<li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ntpd&sektion=8">ntpd(8)</a>, don't log transient network errors from <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sendto&sektion=2">sendto(2)</a>. |
| |
<li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfsync&sektion=4">pfsync(4)</a>'s handling of adaptive timeouts. |
| |
<li>Enforce minimum lease time of 60 seconds in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhclient&sektion=8">dhclient(8)</a>, to stop bogus 0s leases from the server causing the client to spin. |
| |
<li>Fix oversized copies that were causing memory faults in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=usb&sektion=4">usb(4)</a>. |
| |
<!-- ^ 20040830 --> |
| |
<!-- ^ 20040829 --> |
| |
<li>Don't close stdin in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a> unless we're reexec'ing. |
| |
<!-- ^ 20040828 --> |
| |
<li>Make sure <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pkg_create&sektion=1">pkg_create(1)</a> keeps track of the current working directory. |
| |
<!-- ^ 20040827 --> |
| |
<li><font color="#e00000"><strong>RELIABILITY FIX: Due to incorrect error handling in zlib an attacker could potentially cause a denial of service attack (CAN-2004-0797).</strong></font><br> |
| |
<a href="errata.html#libz">A source code patch is available</a>.<br> |
| |
<a href="stable.html"><font color="#00b000">[Applied to stable]</font></a> |
| |
<!-- ^ 20040826 --> |
| |
<li>Have /etc/<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=security&sektion=8">security(8)</a> store a copy of the disklabel and report any changes. |
| |
<!-- ^ 20040825 --> |
| |
<li>Only allow SIOCGET{VIF,SG}CNT from the multicast router socket (PR#3825). |
| |
<li>Document the fact that collisions have been found for MD4, MD5 and ripemd. |
| |
<li>Don't make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ntpd&sektion=8">ntpd(8)</a> explode when <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getaddrinfo&sektion=3">getaddrinfo(3)</a> returns EAI_NONAME. |
| |
<li>Base the value of uvm_km_pages_lowat on the amount of physical memory. |
| |
<li>Back out the IPv6 prefix len 'fix', the old code was right. |
| |
<!-- ^ 20040824 --> |
| |
<li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xargs&sektion=1">xargs(1)</a>' behaviour match the manpage when the utility can't be executed. |
| |
<li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fgetln&sektion=3">fgetln(3)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=realloc&sektion=3">realloc(3)</a> handling in libedit. |
| |
<li>Do the '%s' replacement for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=less&sektion=1">less(1)</a>'s LESSOPEN and LESSCLOSE environment variables ourselves instead of using <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=snprintf&sektion=3">snprintf(3)</a>. |
| |
<li>Don't send a SIGINT or SIGTERM to the entire process group when received by the shell unless the shell is the process group leader (PR#3820). |
| |
<li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a>, fix the test for whether a newly-created SA replaces an old one. |
| |
<li>Enable Dead Peer Detection in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a> by default. |
| |
<li>Don't overwrite the raw IPv6 checksum field in a shared mbuf. |
| |
<!-- ^ 20040823 --> |
| |
<li>Fix high interrupt load in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ste&sektion=4">ste(4)</a>. |
| |
<!-- ^ 20040822 --> |
| |
<li>Remove the need for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd.policy&sektion=5">isakmpd.policy(5)</a> file when starting <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a> from <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rc&sektion=8">rc(8)</a>. |
| |
<li>Fix the IPv6 prefix length sanity checks in in6_are_prefix_equal(). |
| |
<!-- ^ 20040821 --> |
| |
<li>3.6-beta -> 3.6. |
| |
<li>Add a new control message to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpd&sektion=8">bgpd(8)</a> that allows a session to be downed and restarted, accessible with the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpctl&sektion=8">bgpctl(8)</a> command 'clear'. |
| |
<li>Unbreak parsing of multiple -o options to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mount_nfs&sektion=8">mount_nfs(8)</a>. |
| |
<!-- ^ 20040820 --> |
| |
<li>Stop <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bge&sektion=4">bge(4)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sk&sektion=4">sk(4)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ti&sektion=4">ti(4)</a> complaining about a lack of jumbo frame buffers for inbound frames, unless debugging is on. |
| |
<li>On nexthop reachability status changes, only notify the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpd&sektion=8">bgpd(8)</a> RDE if the nexthop was previously unavailable. |
| |
<!-- ^ 20040819 --> |
| |
<li>Don't send bad IP packets via <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bpf&sektion=4">bpf(4)</a> when monitoring a <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=gre&sektion=4">gre(4)</a> interface (PR#3852). |
| |
<!-- ^ 20040818 --> |
| |
<li>Fix descriptor passing in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpd&sektion=8">bgpd(8)</a>. |
| |
<li>Stop networks disappearing on <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpd&sektion=8">bgpd(8)</a> reload by always updating the prefix timestamp. |
| |
<li>Remove a null deref in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a>. |
| |
<li>Implement the SMTP 'QUIT' command in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=spamd&sektion=8">spamd(8)</a>. |
| |
<li>Fix an out-of-bounds read in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=makeinfo&sektion=1">makeinfo(1)</a>. |
| |
<!-- ^ 20040817 --> |
| |
<li>Remove ip6.int from the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=named&sektion=8">named(8)</a> example config files. |
| |
<li>Bump OpenSSH to version 3.9. |
| |
<li>Put in a temporary fix for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wi&sektion=4">wi(4)</a> cards with station firmware < 1.8. Real fix after the 3.6 release. |
| |
<!-- ^ 20040816 --> |
| |
<li>Remove <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=spamd&sektion=8">spamd(8)</a> greylist entries the second they expire. |
| |
<li>Back out the recent <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a>-skips-downed-interfaces change, it breaks IPv6. |
| |
<!-- ^ 20040815 --> |
| |
<li>Add an example <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sendmail&sektion=8">sendmail(8)</a> /etc/mail/genericstable. |
| |
<li>When <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a>'s -K switch is active, check the peer's proposal against <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd.conf&sektion=5">isakmpd.conf(5)</a>. |
| |
<li>Map the whole ld.so hints file for a.out in one <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mmap&sektion=2">mmap(2)</a>, as was done for ELF. |
| |
<!-- ^ 20040814 --> |
| |
<li>Fix auto request sense handling in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ahc&sektion=4">ahc(4)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ahd&sektion=4">ahd(4)</a>. |
| |
<li>Stop a coredump in lib<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=regex&sektion=3">regex(3)</a>. |
| |
<li>Fix a busy-wait on transmit failure in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ntpd&sektion=8">ntpd(8)</a>. |
| |
<li>Add an extra check for a NULL message in the privsep code for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=named&sektion=8">named(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pflogd&sektion=8">pflogd(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=syslogd&sektion=8">syslogd(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcpdump&sektion=8">tcpdump(8)</a> and the X server. |
| |
<!-- ^ 20040813 --> |
| |
<li>Finally fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ntpd&sektion=8">ntpd(8)</a> problems with DNS non-availability at startup. |
| |
<li>Fix a bad dereference in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=gcc&sektion=1">gcc(1)</a>. |
| |
<li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpd&sektion=8">bgpd(8)</a>, ignore RFC2545 and don't allow IPv6 link-local addresses to be a next hop. |
| |
<li>Stop a core dump in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=newfs&sektion=8">newfs(8)</a> by checking the block size against MAXBSIZE. |
| |
<li>Validate the superblock size recorded in the superblock, to prevent a panic. |
| |
<!-- ^ 20040812 --> |
| |
<li>Use atomicio instead of a few pieces of homegrown code in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>. |
| |
<li>Some signedness cleanups in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>. |
| |
<li>Add <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dladdr&sektion=3">dladdr(3)</a> support to the dynamic loader, and extend <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dlsym&sektion=3">dlsym(3)</a> to match 'standards'. |
| |
<li>Plug a memory leak in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=kvm_close&sektion=3">kvm_close(3)</a>. |
| |
<li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpd&sektion=8">bgpd(8)</a> MRT dumps from cloned sessions. |
| |
<li>With -q in effect, stop <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=grep&sektion=1">grep(1)</a> searching as soon as a match is found. |
| |
<li>Skip over non-UP interfaces in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a>, fixing some problems with <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pppd&sektion=8">pppd(8)</a>. |
| |
<li>Fix a missing <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=lseek&sektion=2">lseek(2)</a> error check in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a>. |
| |
<li>Only close a pipe if it's open in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a>. |
| |
<li>Fix a minor memory leak in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a>. |
| |
<li>Surround <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pkg_delete&sektion=1">pkg_delete(1)</a>'s main loop with an eval{} block, so that <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ldconfig&sektion=8">ldconfig(8)</a>, directory removal, manpage and font directory processing always occur. |
| |
<li>Back out the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mmap&sektion=2">mmap(2)</a>-based <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=malloc&sektion=3">malloc(3)</a> for now, some architectures aren't working right yet. |
| |
<li>A stack of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ohci&sektion=4">ohci(4)</a> fixes from NetBSD. |
| |
<!-- ^ 20040811 --> |
| |
<li><font color="#e00000"><strong>RELIABILITY FIX: Improved verification of ICMP errors in order to minimize the impact of ICMP attacks against TCP.</strong></font><br> |
| |
<a href="errata.html#icmp">A source code patch is available</a>.<br> |
| |
<a href="stable.html"><font color="#00b000">[Applied to stable]</font></a> |
| |
<li>Show the difference between the expected and received IP checksum in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcpdump&sektion=8">tcpdump(8)</a>. |
| |
<li>Now that <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcpdump&sektion=8">tcpdump(8)</a> decodes the IP fragment returned in an ICMP error message, allow the TCP parser to print the source and destination ports from incomplete TCP headers. |
| |
<li>When <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcpdump&sektion=8">tcpdump(8)</a> receives an ICMP error and -vv is in effect, also dump the IP packet embedded in the error message. Based on tcpdump.org. |
| |
<li>Fix a bad sizeof in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ntpd&sektion=8">ntpd(8)</a>. |
| |
<li>Implement better RFC 3706 Dead Peer Detection in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a>. |
| |
<li>Fix the MED setting in outgoing <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpd&sektion=8">bgpd(8)</a> updates. |
| |
<li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ntpd&sektion=8">ntpd(8)</a>, handle DNS lookup failures properly in the case of server pools. |
| |
<li>Have <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pkg_add&sektion=1">pkg_add(1)</a>'s @mandir and @fontdir keywords do the right thing on package delete, and have @fontdir do the necessary font processing. |
| |
<li>Fix a dynamic group-related panic in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a>. |
| |
<!-- ^ 20040810 --> |
| |
<li>Support the setenv capability in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=login.conf&sektion=5">login.conf(5)</a> like in NetBSD, including '~' and '$' macro expansion for the homedir and username respectively. |
| |
<li>Import and merge Perl 5.8.5 from CPAN. Crank libperl's major number. |
| |
<li>3.5-current -> 3.6-beta. |
| |
<li>Stability and performance fixes to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ste&sektion=4">ste(4)</a> from FreeBSD. |
| |
<li>Fix an out-of-bounds write in libafs, caught by the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mmap&sektion=2">mmap(2)</a>-based <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=malloc&sektion=3">malloc(3)</a>. |
| |
<!-- ^ 20040809 --> |
| |
<li>Fix a missing initialisation of the route info structure in the kernel and stop a panic. |
| |
<li>Stop doing unnecessary PHY resets on <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=hme&sektion=4">hme(4)</a>. |
| |
<li>Remove the need for -w when setting values in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=radioctl&sektion=1">radioctl(1)</a>. |
| |
<li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=iostat&sektion=8">iostat(8)</a>'s average KB per transfer calculation. |
| |
<!-- ^ 20040808 --> |
| |
<li>Do a <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=chroot&sektion=2">chroot(2)</a> before running <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ldconfig&sektion=8">ldconfig(8)</a> when DESTDIR is set in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pkg_add&sektion=1">pkg_add(1)</a>. |
| |
<li>Add IPv6 router solicitation and router advertisement ICMP messages to the default <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> filter loaded in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rc&sektion=8">rc(8)</a>. |
| |
<!-- ^ 20040807 --> |
| |
<li>Initial work on SGI MIPS64 support. |
| |
<li>Only close the stream passed to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pclose&sektion=3">pclose(3)</a> if it was opened by <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=popen&sektion=3">popen(3)</a>. |
| |
<li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pkg_add&sektion=1">pkg_add(1)</a>, invoke the OpenBSD::Makewhatis module directly insteading of forking <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=makewhatis&sektion=8">makewhatis(8)</a>. |
| |
<li>Reorganise <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=makewhatis&sektion=8">makewhatis(8)</a> to avoid using unnecessary code, and allow invocation as a <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=perl&sektion=1">perl(1)</a> module. |
| |
<li>Big update to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpd&sektion=8">bgpd(8)</a>, moving towards IPv6 support. |
| |
<li>New @lib marker in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pkg_add&sektion=1">pkg_add(1)</a> packing lists, that lets the tools know when to run <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ldconfig&sektion=8">ldconfig(8)</a>. |
| |
<li>Many more <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pkg_add&sektion=1">pkg_add(1)</a> fixes and improvements. |
| |
<!-- ^ 20040806 --> |
| |
<li>Refactor <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pkg_add&sektion=1">pkg_add(1)</a> etc. packing list code. |
| |
<li>Now that <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=malloc&sektion=3">malloc(3)</a> uses <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mmap&sektion=2">mmap(2)</a> instead of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sbrk&sektion=2">sbrk(2)</a>, remove the rlimit check from the userland code and let the kernel do it. |
| |
<li>Use the new fd-passing functionality in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=auth_subr&sektion=3">BSD_AUTH(3)</a> to implement record locking for S/Key logins. |
| |
<li>Stop trying to change the cwd of processes after a forced unmount. |
| |
<!-- ^ 20050805 --> |
| |
<li>Don't send signals from hardclock to prevent SMP problems in the near future. |
| |
<li>Add interrupt coalescing support to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fxp&sektion=4">fxp(4)</a> |
| |
<li>Fix jumbo frames support in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sk&sektion=4">sk(4)</a>. |
| |
<li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>, return DH group 14 when /etc/moduli is empty, fixing a hang. |
| |
<!-- ^ 20040804 --> |
| |
<li>Allow a file descriptor to be passed on the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=auth_subr&sektion=3">BSD_AUTH(3)</a> back channel, to be used for stateful login scripts. |
| |
<li>Do a check for minval>maxval in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=strtonum&sektion=3">strtonum(3)</a> |
| |
<li>Change the minval and maxval parameters to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=strtonum&sektion=3">strtonum(3)</a> from unsigned to signed long long, simplifying the code. |
| |
<li>Allow an autonegotiation to be forced at <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mii&sektion=4">mii(4)</a> attach time. |
| |
<li>Don't crash the kernel in autoconf when matching an indirect device with verbose mode switched on. |
| |
<li>Allow NFS commits to be coalesced instead of always sending a commit for each block. |
| |
<li>MRT dump compatibility fixes for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpd&sektion=8">bgpd(8)</a>. |
| |
<li>Add route label support to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ifconfig&sektion=8">ifconfig(8)</a> via the -label keyword. |
| |
<li>Introduce 'route labels', allowing up to 32 bytes of information to be attached to a route. |
| |
<li>Fix reference counting bugs in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a>, avoiding leaks. |
| |
<li>Make disk geometry parameters in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fdisk&sektion=8&arch=i386">fdisk(8/i386)</a> unsigned values to avoid some signedness problems. |
| |
<li>Don't trim device major and minor numbers to 8 bits when accessing device nodes over NFS. |
| |
<li>Allow <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfsync&sektion=4">pfsync(4)</a> to use a unicast sync peer, via the new 'syncpeer' keyword to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ifconfig&sektion=8">ifconfig(8)</a>. This lets pfsync operate over IPsec. |
| |
<li>Show if locking is present in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pstat&sektion=8">pstat(8)</a> -f output. |
| |
<li>Add <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fxp&sektion=4">fxp(4)</a> microcode for interrupt coalescing. From Intel via FreeBSD. |
| |
<li>Have <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=lint&sektion=1">lint(1)</a> allow more integer types in bitfields. |
| |
<!-- ^ 20040803 --> |
| |
<li>Set initial latency and cacheline size for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cardbus&sektion=4">cardbus(4)</a> devices. |
| |
<li>Out-of-line some functions in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isp&sektion=4">isp(4)</a> to shrink the kernel a bit. |
| |
<li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a> don't expire phase 2 SAs that are not yet established on receipt of a SIGHUP. |
| |
<li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pcmcia&sektion=4">pcmcia(4)</a> crashes (PR#3732, PR#3881). More work required. |
| |
<li>New @man element for packing lists. |
| |
<li>If LK_NOWAIT is passed to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=vget&sektion=9">vget(9)</a>, return EBUSY if the vnode is <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=lock&sektion=9">lock(9)</a>ed. |
| |
<!-- ^ 20040802 --> |
| |
<li>Rewind the tape less often when repositioning an <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=st&sektion=4">st(4)</a> device. |
| |
<li>New <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=malloc&sektion=3">malloc(3)</a> implementation using <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mmap&sektion=2">mmap(2)</a> instead of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sbrk&sektion=2">sbrk(2)</a>. This means that malloc now gets all the benefits of mmap's randomisation feature. |
| |
<li>Deal with upward-growing stacks when checking for the end of the stackgap in sys/compat/common. |
| |
<li>Major updates to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ahc&sektion=4">ahc(4)</a>. From FreeBSD. |
| |
<!-- ^ 20040801 --> |
| <li>Kill GATEWAY and IPFORWARDING <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=config&sektion=8">config(8)</a> options, since their functionality has long been available from <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sysctl&sektion=8">sysctl(8)</a>. |
<li>Kill GATEWAY and IPFORWARDING <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=config&sektion=8">config(8)</a> options, since their functionality has long been available from <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sysctl&sektion=8">sysctl(8)</a>. |
| <li>Have <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=httpd&sektion=8">httpd(8)</a> correctly use port information supplied by the client (if available) when UseCanonicalName is off. |
<li>Have <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=httpd&sektion=8">httpd(8)</a> correctly use port information supplied by the client (if available) when UseCanonicalName is off. |
| <!-- ^ 20040831 --> |
<!-- ^ 20040731 --> |
| <li>New <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpd.conf&sektion=5">bgpd.conf(5)</a> announce type "default-route", which will only announce the default route to a specified neighbour. |
<li>New <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpd.conf&sektion=5">bgpd.conf(5)</a> announce type "default-route", which will only announce the default route to a specified neighbour. |
| <li>Drain <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=hotplug&sektion=4">hotplug(4)</a>'s event queue on close, fixing a hang on shutdown (PR#3874). |
<li>Drain <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=hotplug&sektion=4">hotplug(4)</a>'s event queue on close, fixing a hang on shutdown (PR#3874). |
| <li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=siop&sektion=4">siop(4)</a> probe problems on hppa. |
<li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=siop&sektion=4">siop(4)</a> probe problems on hppa. |
| <li>Call /bin/ksh instead of /bin/sh in the installer scripts, since the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ksh&sektion=1">ksh(1)</a> mannerisms will be disabled when invoked as <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sh&sektion=1">sh(1)</a> soon. |
<li>Call /bin/ksh instead of /bin/sh in the installer scripts, since the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ksh&sektion=1">ksh(1)</a> mannerisms will be disabled when invoked as <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sh&sektion=1">sh(1)</a> soon. |
| <!-- ^ 20040830 --> |
<!-- ^ 20040730 --> |
| <li>Fix a missing initialisation when processing an RDE update in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpd&sektion=8">bgpd(8)</a>. |
<li>Fix a missing initialisation when processing an RDE update in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpd&sektion=8">bgpd(8)</a>. |
| <li>Helpfully, don't truncate the lease file to zero length on <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhcpd&sektion=8">dhcpd(8)</a> startup. |
<li>Helpfully, don't truncate the lease file to zero length on <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhcpd&sektion=8">dhcpd(8)</a> startup. |
| <li>Keep a unique ID for each server <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ntpd&sektion=8">ntpd(8)</a> talks to. |
<li>Keep a unique ID for each server <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ntpd&sektion=8">ntpd(8)</a> talks to. |
|
|
| <li>Fix NAT-T Aggressive Mode by putting NAT-D checks in the right place. |
<li>Fix NAT-T Aggressive Mode by putting NAT-D checks in the right place. |
| <li>Don't set the output filename in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=compress&sektion=1">compress(1)</a> when in -t mode, avoiding an error which the input filename doesn't end in '.gz'. |
<li>Don't set the output filename in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=compress&sektion=1">compress(1)</a> when in -t mode, avoiding an error which the input filename doesn't end in '.gz'. |
| <li>Drop ip6.int query support for IPv6 reverse lookups with <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=gethostbyaddr&sektion=3">gethostbyaddr(3)</a>. |
<li>Drop ip6.int query support for IPv6 reverse lookups with <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=gethostbyaddr&sektion=3">gethostbyaddr(3)</a>. |
| <!-- ^ 20040829 --> |
<!-- ^ 20040729 --> |
| <li>Use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=SHA1Pad&sektion=3">SHA1Pad(3)</a> in libskey, instead of relying on undocumented behaviour from <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=SHA1Final&sektion=3">SHA1Final(3)</a>. |
<li>Use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=SHA1Pad&sektion=3">SHA1Pad(3)</a> in libskey, instead of relying on undocumented behaviour from <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=SHA1Final&sektion=3">SHA1Final(3)</a>. |
| <li>Add new timekeeping code, MI-only for now and not yet enabled anywhere. |
<li>Add new timekeeping code, MI-only for now and not yet enabled anywhere. |
| <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpd&sektion=8">bgpd(8)</a>, prefer the path with the lowest MED value, not the highest. |
<li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpd&sektion=8">bgpd(8)</a>, prefer the path with the lowest MED value, not the highest. |
![[BACK]](/icons/back.gif){kind=icon}
Return to plus.html CVS log ![[TXT]](/icons/text.gif){kind=icon}
![[DIR]](/icons/dir.gif){kind=icon}
Up to [local] / www