OpenBSD 2.6 is now available for purchase.
+
OpenBSD 2.7 to be released June 15, 2000.
We are working on OpenBSD-current.
-- Fix kerberos slave server startup.
-
- Fix a pkg_add(8) bug in %f handling.
-
- OpenSSH is now at version 2.1.
-
- Handle \ escapes in real ssh key format files.
-
- Fix a X11 forwarding draining bug in sshd(8).
-
- Be compatible to various bugs in various other real ssh versions.
-
- Handle very large mbuf chains in hifn(4).
-
- Complain about invalid ciphers in ssh(1).
-
- Fix 12 hour handling in leave(1).
-
- Fix a timeout queue crash.
-
- Various nice tweaks to the install script for 2.7.
-
- In ppp(8), correct a bad bug in m_prepend().
-
- Support sparc tape installs.
-
- Work around a sysctl-based kvm(4) vs exit(2) race.
-
- Fix the same basic ip timestamp bug in ipf(4).
-
- On the ip(4) input path, avoid unaligned accesses for strangely placed ip timestamp options.
-
- Fix resource limit race at exit time, if accounting is enabled.
-
- Fix inet6(4) pcmcia(4) detach.
-
- Support all ServerWorks and 451NX pchb(4) machines.
-
- Many fixes to user(8).
-
- Repair padding a uuencode stuff in sshd(8).
-
- Do not support DMA on PCTECH RZ1000, it's dma support is fundamentally broken.
-
- Undo a broken i386 pmap fix.
-
- Fix IEEE underflow in ps(8), affected 68060 machines with precise exceptions enabled by default.
-
- Fix context memory sizing for various models of static ram hifn(4) cards.
-
- dhclient(8) support for the hp300 ramdisk.
-
- Improve mountd(8) behaviour for unresolveable hosts.
-
- Add DSA/SSH2 information to the ssh(1), sshd(8), and ssh-keygen(1) manual pages.
-
- Improve key generation in vpn(8).
-
- Document our new ipsec(4) bridge(4) stuff.
-
- New packages(7) man page.
-
- Various isakmpd(8) updates.
-
- Install isakmpd(8) sample files.
-
- Correct proctitle updating in sshd(8).
-
- Change pmax dc(4) driver to dz(4), to avoid name conflict.
-
- Do not use an undocumented semconfig(2) system call in ipcs(1), in fact, remove the system call altogether.
-
- More mount(8) tweaks for dealing with weird paths.
-
- Fix more pkg_add(1) bugs.
-
- Support another RCC ServerWorks PCI host bridge.
-
- sshd(8) now has a pidfile.
-
- Better file descriptor handling in sshd(8).
-
- buf mishandling in ed(1).
-
- A fix for mandatory cache sun4m architectures like the SM71 and SM81.
-
- Fix a race in scp(1).
-
- ipf 3.3.13.
-
- Prettier warnings from telnet(1) if bad port names are given.
-
- Add emulation for memcpy(3) and such to i386 for non-optimized kernel builds.
-
- Add OPENDEV_BLCK flag to opendev(3).
-
- Repair groff(1) mkstemp(3) use.
-
- Fix some perl 5.6.0 buglets.
-
- Use more perl 5.6.0 feature in makewhatis(8) for greater security and reliability.
-
- In the /etc/daily file cleaner, prune at /.X11-unix and ssh-* directories.
-
- In sshd(8), check for keysize errors better.
-
- ktrace(2) no longer follows symbolic links.
-
- On the amiga, recognize Linux ados disk labels.
-
- Fixes to the ray(4) driver.
-
- Fix -H option in sudo(8).
-
- Disable pcmcia(4) handling of non-CIS cards, since there are many bugs in it.
-
- Document many afs(4) configuration files.
-
- Fix a modify-after-free bug in tcp(4).
-
- Attempt to have ld(1) and ld.so(1) deal better with C++ shared libraries on
-a.out architectures (i386, m68k, sparc...).
-
- Document what sendmail(8) now does on port 587.
-
- Deal with more non-compliant PHY setups in mii(4).
-
- cmpci(4) driver for C-Media CMI8x38 Audio Chip present on several motherboards.
-
- Support ext2fs properly.
-
- ssh(1), sshd(8), and companions now support SSH 2 protocol as well as SSH 1 protocol! To properly use this, you want to make sure you update your /etc/rc, /etc/netstart, and /etc/rc.conf. Or just test the new snapshot...
-
- Various additions and improvements in tcpdump(8).
-
- libpcap 0.5.
-
- Support jumbo frames in the fxp(4) models which support it.
-
- Add support for the RCC ServerWorks pchb(4) which has additional pci(4) bridges on it. Huge PC's with 6+ pci busses now work fine.
-
- On the i386, fix an errata relating to the Intel 82443BX pchb(4).
-
- Various changes related to vlan(4) support.
-
- Add a sysexits(3) man page.
-
- getaddrinfo(3) and getnameinfo(3) improvements, repairs, and greater care.
-
- Start of the vax port resurrection.
-
- Fix more i386 isadmaattach bugs. At least 2GB of memory on an i386 now works.
-
- Avoid divide by zero in igmp networking code.
-
- In mail(1), make "new" count after an "inc" command reflect the new messages, as in SunOS.
-
- ktrace(2) no longer follows symbolic links.
-
- Repair adosfs(4).
-
- The damned hifn(4) always dealing with aligned data causes even more of a fuss.
-
- Repair a few hifn(4) bugs that slipped in recently.
-
- Fix ipsec(4) for big-endian machines again.
-
- Omit RC5 from ssl(3).
-
- userinfo(8), userdel(8), useradd(8), groupmod(8), usermod(8), groupdel(8), groupadd(8), and groupinfo(8) commands added.
-
- mii(4) detach support, needed by xe(4).
-
- Fix promiscuous mode in xe(4).
-
- Fix order of interrupt disabling for pcmcia(4) disabling; much more reliable.
-
- Wait a bit longer after enabling pcmcia(4) cards; more pcmcia(4) cards now work.
-
- Fix dump calculations in the i386 kernel crash dump code.
-
- More careful dmesg(8) handling in the install script.
-
- pcmcia(4) ep(4) now supports 3C1 and 3CCFEM556BI.
-
- Repair a bug in fdalloc() that caused a panic in dup(2). This bug was introduced by the recent file descriptor allocation optimizations.
-
- Support DOSPTYP_EXTENDL partitions in the kernel disklabel reader.
-
- In ld(1), avoid duplicates in search path.
-
- Support RFC2732 IPv6 address literal URLs in ftp(1).
-
- Improve makewhatis(8) again, using new parts of perl(1) 5.6.0.
-
- Fix a bug in at(1).
-
- Add -keyfile and -authkeyfile options to ipsecadm(8).
-
- Significant manual page improvements, as is usual just before a release.
-
- Use fgetln(3) instead of fgets(3) in mail.local(8), and thus avoid header mangling.
-
- Support for /etc/rc.conf.local, as documented in rc.conf(8).
-
- https support in lynx(1).
-
- Add CPAN File::Temp for perl(1) versions of mkstemp(3) and such.
-
- Fix the vi recover script to be safe for multiuser running (needed O_NOFOLLOW).
-
- Move apm into a kernel thread, so that filesystem syncing is less likely to block and cause panics. suspending just got a lot more reliable.
-
- For open(2), support O_FSYNC better.
-
- For open(2), add a O_NOFOLLOW flag for dealing with symbolic links. This should not be used by generic software -- only use this for very rare and specific problems.
-
- traceroute(8) gets a new option, -f skips early node checks.
-
- Fix "freeing free block" panics.
-
- Support /etc/resolv.conf.tail, as documented in dhclient-script(8).
-
- Rewrite uio hog.
-
- Do not abuse malloc for small structures inside ktrace(2).
-
- Add pread(2), pwrite(2), preadv(2), and pwritev(2) system calls.
-
- In fdisk(8), favor BIOS geometry over physical geometry, fixing numerous problems with larger disks.
-
- Split fxp(4) and dc(4) for pci(4) and cardbus(4).
-
- In ktrace(2), if user does a large IO operation, split the loggin to avoid kmem starvation.
-
- Make nfsstat(1) on a live system use sysctl(3) instead of kvm snooping.
-
- Set mii(4) parameters for all varients of xl(4), cardbus(4) models.
-
- scsi cd(4) detach is now possible.
-
- Do even more scsi device locking via common routines.
-
- In make(1), report errors with a Makefile line number, making large Makefile debugging much easier.
-
- Significantly cleanup the isa(4), pci(4), isapnp(4), and related manual pages, making it easier to see what we currently support.
-
- Deal with byte-order challenged Compaq laptops.
-
- Fix memory leaks in sshd(8).
-
- Numerous modifications for pkg_add(1) and companions, to better import various new styles of packages..
-
- Fix even more braindamaged random device mis-handlings in ssl(3).
-
- Make kvm(3) on the i386 understand the new core dump format.
-
- In script(1), propogate window size changes to slave.
-
- tzcode2000c.
-
- Permit i386 kernel to compile without pccom(4) or com(4) drivers.
-
- After scp(1) completes, replace progress bar ETA counter with a total elapsed time.
-
- Fix more random device mis-handlings in ssl(3).
-
- Fix exit code in du(1).
-
- Fix sync(2) to actually sync all filesystems.
-
- urio(4) driver for Diamond Multimedia RIO 500.
-
- xlockmore 4.16.
-
- OpenSSL 0.9.5a.
-
- Change window(1) to use curses instead of ocurses.
-
- Do some repair on sys/queue.h.
-
- Add colour support to pcvt25 termcap entry.
-
- In window(1), do not assume that termcap entries start with 2 character short names.
-
- Repair random(4) for the alpha.
-
- In ssh, check payload for (illegal) extra data.
-
- make "option TCPDEBUG" kernel compile.
-
- Initialize the bus dma tag for EISA.
-
- Use getifaddrs(3) instead of SIOCGIFCONF in ifconfig(8), rarpd(8), etc.
-
- ifconfig(8)'s -a flag had been changed to be the same as -A. Fix that.
-
- Have ahc(4) support Adaptec 2930U2.
-
- Revert to up-to-date ipf(4) man pages, but ugly as sin. Everyone remind kjell to finish this job, ok?
-
- When fragmenting a packet in ip_output(), inherit the multicast and broadcast flags so that link layer can choose the right address.
-
- Use getifaddrs(3) in libpcap.
-
- Make ahc(4) support Adaptec 2930U2 controller.
-
- Match netsec hifn(4) 7751 card.
-
- neo(4) is a Neomagic 256AV/ZX audio driver.
-
- Unmute ac97 mixers by default.
-
- ipf 3.3.12a.
-
- ssh protocol 2 is now useable.
-
- Add Protocols and Cipher keywords to ssh(1) and sshd(8).
-
- compat_linux(8) emulation for setfsuid() and getfsuid().
-
- If realpath(3) fails, just use old name in umount(8).
-
- Add 802.11 nwid and mtu commands to ifconfig(8).
-
- More bug fixes to hifn(4). Hifn support is now fully working.
-
- Some fixes to route6d(8).
-
- Use getifaddrs(3) instead of SIOCGIFCONF in ypbind(8).
-
- Do not lose file descriptors in ftpd(8).
-
- In random(4), first true random number source, based on intel 82802 firmware hub embedded true random number generator.
-
- In random(4), make it use more sources for an entropy; make playing .mp3s produce entropy, big time, big time.
-
- Improve range checking in timeouts.
-
- Thread repair in malloc(3).
-
- Various bug fixes to hifn(4), which is now even more reliable.
-
- Fix another m4(1) bug.
-
- PCI an(4) driver.
-
- Repair spl bug in bridge(4).
-
- wdc(4) and wd(4) detach logic, but missing scsi(4) disconnect for atapi(4).
-
- Permit address setting on enc(4) interfaces, and various other tweaks leading to better bridge(4) integration.
-
- Add various autoconfiguration child detach logic.
-
- Rewrite and commonize disk driver locking which varied between drivers.
-
- After the recent revamp of icmp reply byte order, correct one last thing: Pass ip_off and ip_len correctly.
-
- groff 1.15
-
- In cd(4), do not trust the TOC as much when reading the disklabel.
-
- Fix umass(4) so that it handles some non-compliant devices.
-
- Modify the scsi(4) subsystem so that it can attach without polling.
-
- Arrange so that IFF_LINK0 on enc(4) means IP-in-IP instead of Ethernet-in-IP.
-
- Initial check-in of cardbus(4) support. xl(4) works on cardbus at the moment.
-
- Set our status to 2.7-beta.
-
- Update ppp(8).
-
- Update isakmpd(8).
-
- sendmail 8.10.1
-
- sendmail 8.10.0: You must put your /etc/sendmail.cf file in /etc/mail/sendmail.cf now.
-
- perl 5.6.0
-
- Update to isp(4), mostly for Fiber Channel.
-
- Seed perl(1) srandom() /dev/arandom, to avoid losing a lot of entropy.
-
- Some kernel functions were eating a little bit too much entropy.
-
- ipf 3.3.12
-
- ahc(4) now supports AHA-29160 and other Ultra160 varients.
-
- USB umodem(4) support.
-
- USB umass(4) driver. Works with various devices, but does not support disconnection yet.
-
- Support hmac processing in hifn(4).
-
- ncurses-5.0-20000401
-
- Put an expert mode into disklabel(8), that hides a lot of details. But most of the interface remains 100% the same.
-
- Protocol 2 support in ssh(1) and sshd(8).
-
- Do not have /etc/netstart pass -E to ipf(8), since our kernel now enables it by default.
-
- Many more man page improvements. Aren't we pedantic?
-
- compat_linux(8) system call emulation for pread() and pwrite().
-
- Make ahc(4) do tagged queueing, and fix some locking bugs.
-
- Support root drive detection for G4 powermac.
-
- Add srandomdev(3) to libc.
-
- DSA key exchange for sshd(8) and friends, moving us much closer to protocol 2 support.
-
- Fix various flaws in the OpenSSL set of manual pages.
-
- an(4) driver supporting AiroNet 802.11DS cards.
-
- Repair some races and deadlocks in adw(4).
-
- Fix buf oflow in ed(1).
-
- Support USB Mass Storage devices.
-
- Make zic(8)'s -l option actually work.
-
- Some ppp(8) updates.
-
- Auto-detect size of seeprom for fxp(4), for newer cards.
-
- Some improvements in kerberos(1) man pages.
-
- DES and 3DES hardware acceleration for ipsec(4) working in hifn(4) driver.
-
- Run pod2man on the openssl pod documents, and carefully install them in the base system.
-
- Expose MDXTransform functions for MD5 and MD4.
-
- Permit wss(4) to work on irq 5.
-
- Implement compat_linux(8) rt_sigreturn() emulation.
-
- On the i386, enlarge pcic0 memory address space.
-
- Implement compat_linux(8) getcwd(3) emulation.
-
- IPSEC ingress ACL-checking is now on by default.
-
- sudo 1.6.3
-
- i386 PCI interrupt routing repair code (disabled by default, has lots of issues).
-
- Drivers for USB ethernet adapters.
-
- Sync USB.
-
- lynx 2.8.2
-
- Fix a number if ipsec esp and ah related bugs introduced during the crypto splitout.
-
- Numerous man page link repairs, so that just about any part of the system has a matching man page.
-
- Make f_bsize signed.
-
- Support newer Qlogic isp(4) scsi cards.
-
- Support AMD 756 IDE controller in pciide(4).
-
- Add FNM_NOSYS to fnmatch(3) for XPG conformance.
-
- Flesh out mdoc.samples(7).
-
- Disallow pkg_delete(1) when the pkg_prefix is on a read-only filesystem.
-
- Handle expansion of @exec better in pkg_add(1).
-
- Initial support for DSA keys in sshd(8).
-
- In ssh(1), switch to raw mode only if we got a pty.
-
- Replace kernel timeout(9) mechanism with one which permits dynamic allocation of timeout structures.
-
- In fdisk(8), do not use BIOS geometry by default, a lot of newer BIOS's get upset when this is done with larger drives.
-
- Make script(1) exit with a proper (and documented) exit code.
-
- Fix AMD K6 mtrr(4).
-
- Fix overflow in ftp(1).
-
- Fix directory mishandlings in who(1).
-
- Fix overflow in ul(1).
-
- Fix modes for ch(4) and st(4) devices so that operator is more powerful.
-
- ray(4) supports the raytheon/webgear ieee 802.11 FH wireless ethernet.
-
- ahc(4) driver now supports 789x chipset based controllers (7892/9 not verified).
-
- Add SIOCGIFMTU/SIOCSIFMTU.
-
- Support for the uninorth PCI bridge on the G4 macs.
-
- bus_dma support in the powerpc port.
-
- apache 1.3.12 + mod_ssl 2.6.2
-
- OpenSSL 0.9.5
-
- Fix parsing of @-style commands in crontab(5) files.
-
- Make m4(1) compatible enough with GNU m4 to handle autoconf 2.13.
-
- Add ratecheck(9) API to the kernel.
-
- Quieten, secure, and improve ipv6 boot-time route setup.
-
- Cryptographic hardware services framework, first meant for use by ipsec(4).
-
- Fix interrupt handling issue in dc(4).
-
- Newer UVM code.
-
- Prevent overflow in subr_extent code.
-
- Support FAT32 msdos partitions over 4GB.
-
- Many man page improvements.
-
- Disable suffix removal code in make(1), since it is buggy.
-
- Fix blink and underline attribute handling for new PC display mode.
-
- ncurses-5.0-20000311
-
- IPFilter 3.3.11
-
- Support more eisa ep(4) cards.
-
- Implement realtime signal routines in linux compat.
-
- Disable K6 MTRR until it is fixed.
-
- Update rtadvd(8)
-
- Get rid of leading NULs in /kern/msgbuf.
-
- Disallow packets to malicious 6to4 prefixes.
-
- Fix radix tree mishandling bug in routing code.
-
- Add more gnu-compatible options to m4(1)
-
- Repair sub-shell execution handling in hostname.if(5)
-
- Reverse engineer crypto lockout function on the aeon crypto card.
-
- Fix file descriptor leak in compress(1)
-
- Fix a memory corruption bug in the ipsec(4) skipjack implementation.
-
- ncurses-5.0-20000304.
-
- Disallow root password guessing in sshd(8).
-
- grep(1) 2.4.1
-
- Multiple inclusion protection problem solution on the sparc.
-
- isakmpd(8) update.
-
- Add support for new signals to the compat_linux(8) emulation routines.
-
- Add 802.1Q support to tcpdump(8).
-
- OpenSSH 1.2.3 released.
-
- Fix a pipe close race in sshd(8).
-
- Fix a panic in compat_ibcs2(8) emulation code.
-
- Make P_tmpdir point to /tmp, not /var/tmp.
-
- Attempt to handle corrupt inetd.conf files better.
-
- Try to fix the uio hog problem.
-
- Fix STAT in ftpd(8) to be RFC959 compliant.
-
- Optimized kernel fdalloc()
-
- Add some missing compat_linux(8) emulation routines.
-
- Move kernel crypto code to /sys/crypto
-
- Many ppp(8) fixes.
-
- Some libc_r fixes.
-
- mg(1) version 2a added to the source tree, and we are fixing many things in it.
-
- Fix an entropy-robbing bug in the ssl(8) libcrypto.
-
- Change wicontrol(8) so that multiple parameters can be set at the same time.
-
- Add -m parameter to strings(1).
-
- Add getifaddrs(3).
-
- Permit enlarging of msgbuf on the various architectures.
-
- On sun4m machines, replace .{u,}{mul,div,mod} functions with faster versions using the new sun4m instructions. A very significant performance improvement.
-
- Add fseeko(3) and ftello(3) interfaces.
-
- Two TCP SACK fixes -- SACK now appears to be completely reliable.
-
- Optimize bridge(4) code by allocating less mbufs.
-
- Fix alignment fault in amd(8) on the alpha.
-
- Add support for ses(4) devices, and the sesd(8) tools for probing.
-
- Add support for 12160 (Ultra3) in isp(4).
-
- Buffer overflows in mopd(8)
-
- Complete hypersparc support.
-
- Link sparc boot and bootxx bootblocks at different addresses; repairs booting on the hypersparc.
-
- update to latest KTH kerberosIV 1.0
-
- Update to newer compile_et(1).
-
- Full support for serial console on the i386, see boot(8).
-
- Support PPPoE in tcpdump(8).
-
- Fix alignment problem for ancillary data; affected 64 bit machines.
-
- Do not call sleep(3) in rcmd(3).
-
- On sparc, avoid flushing unmapped memory from the cache in dvma_mapout().
-
- ipf 3.3.9
-
- Move smrsh(8) to /usr/libexec.
-
- Add traceroute6(8).
-
- Use extents instead of rmaps to manage sparc dvma space.
-
- Have extent_alloc_subregion() also handle an alignment offset.
-
- More fixes to xl(4) for non-MII cards.
-
- In sshd(8), move XAUTHORITY to a subdirectory, fixing security issues.
-
- Handle directly connected lines better in pppd(8).
-
- Y2K repairs in cvs(1).
-
- Let weak symbols take precedence over second hand symbols in ld(1).
-
- wx(4) driver supporting the Intel 82452 gigabit ethernet card.
-
- Support hundreds of interfaces in dhclient(8) and dhcpd(8).
-
- texinfo 4.0
-
- Split i386 memory <16MB into it's own freelist, permitting large memory machines to work better.
-
- New fhopen(2), fhstat(2), and fhstatfs(2) system calls to easier support userland filesystems.
-
- Support newer LVD models in the ncr(4) driver.
-
- gdt(4) driver for the ICP-Vortex RAID card series.
-
- Update to FreeBSD newfs_msdos(8), which can support hard drives too
-
- New OpenBSD art page.
-
- Updates to the lmc(4) device driver.
-
- uaudio(4) support.
-
- ti(4) also supports Farallon PN9000SX.
-
- ncurses-5.0-20000205.
-
- adw(4) now supports Advansys U2W scsi cards.
-
- Further sparc pmap improvements.
-
- Allow ssh-keygen(1) to be used for generating signatures of any ssh(1) control file.
-
- In sparc port, handle SM30 specially because it starts up with the cache running.
-
- import usbdevs(8).
-
- When handling an apm(4) suspend, power down pcmcia devices; when unsuspending, power them back up. Very nice.
-
- Rewrite makewhatis(8) in perl(1).
-
- Deal with empty path element in LD_LIBRARY_PATH variable.
-
- On i386 prevent overflow in computation of buffer cache limitation, thus supporting machines with lots of memory.
-
- Hardware encryption support added to wi(4) (the wavelan driver).
-
- Performance optimizations to m4(1).
-
- Fix a panic in nfsd(8).
-
- Have mkdir -m support sticky and setuid bits.
-
- Support -R flag in rtadvd(8).
-
- Without a subcommand, have atactl(8) assume that the "identify" command is implied.
-
- Workaround in ftp(1), for Y2K broken ftp servers that return 19100 for the year. Remind is this is here in the year 19098, ok?
-
- ipf 3.3.8
-
- Fix a pty close race in sshd(8).
-
- Arrange so that dhclient(8) does not update /etc/resolv.conf if no DNS information is found.
-
- isakmpd(8) update.
-
- Support 93C66 and 93C56 SEEPROM chips (used by more modern ahc(4) cards).
-
- Fix a number of bugs in fsplit(1).
-
- Use ed(1) in /etc/rc, since grep(1) is in /usr.
-
- i386 now runs libkvm instead of libkvm.old.
-
- Add a dmesg(8) alias to the install media.
-
- In gcc, add an i386 specific peephole optimization for stack adjustment.
-
- Fix some APM version 1.2 issues, thus making IBM Thinkpads work.
-
- On the i386, now use the memory map information supplied by the bootblocks.
-
- Use alloca(3) instead of malloc(3) in execl(3) and execle(3), so that they are vfork(2) safe.
-
- sudo 1.6.2p1
-
- Arrange so that sshd(8) does not do port forwarding until shell successfully starts.
-
- Repair a stupid cache-lockdown bug in the sparc pmap.
-
- Repair memory leak in freeaddrinfo(3).
-
- Significant code shrinkage in ipsec(4), as most AH and ESP code starts sharing more subfunctions.
-
- Enable ipv6 support in rsh(1), rlogin(1), rshd(8), and rlogind(8).
-
- Fix rcmd(3), iruserok(3), and ruserok(3) to be IPv6 capable, also add more address family indepedent routines: rcmd_af(3) and iruserok_sa(3).
-
- Handle MVME1x2 boards with only one ZS serial chip.
-
- Avoid some more cache flushes in the sparc pmap module.
-
- Handle memory shortage better in yacc(1), closing some memory leaks.
-
- Sparc pmap performance improved by optimizing some more pte table walks.
-
- isakmpd(8) update.
-
- Many more man page improvements.
-
- More getaddrinfo(3) improvements to further match RFC2553.
-
- Add MAC address filtering in the bridge(4) code.
-
- Fix timestamp bug in make(1).
-
- Apache 1.3.11 + mod_ssl 2.5.0 merge
-
- MVME328 scsi card support in mvme68k port.
-
- Portable code for handling architectures with backwards-running stacks, like hppa.
-
- Fix Y2K non-compliancy in amiga port's clock chip code.
-
- some minor repairs to grdc(6).
-
- MVME376 ethernet card support in mvme68k port.
-
- mvme68k and mvme88k ramdisk repairs.
-
- sudo 1.6.2.
-
- Make application mode arrow keys work in ksh(1).
-
- Protocol independence added to bindresvport(3).
-
- OpenSSH version 1.2.2 released.
-
- Lots of ipsec(4) pfkey improvements.
-
- Repair exception handling in gcc i386 position independent code.
-
- ncurses-5.0-20000122
-
- Don't allow time to be set far forwards and thus wrap, and a warn for for time reversing if securelevel(7) > 1.
-
- Some compat_sunos(8) emulation improvements, particularily for getdents.
-
- Various powerpc port fixes -- it is getting close to actually working well.
-
- Handle SIGINT failures in ssh(1)/scp(1)/cvs(1) better.
-
- Fix bugs in the robots(6), tetris(6), and grdc(6) games.
-
- Make pax(1)/tar(1)/cpio(1) deal with files larger than 2 GB.
-
- Deal with getcwd(3) returning NULL in at(1).
-
- Rename ip4.allow sysctl(8) to ipip.allow. This variable no longer controls any explictly configured IP-over-IP tunnels.
-
- Deal with getcwd(3) returning NULL in the supfilesrv.
-
- DRIVER IMPROVEMENT: Intel fxp(4) cards with nsphy could not negotiate and maintain 100mbit link. A source code patch is available.
-
- Fix a buffer overflow in the i386 bootblocks!
-
- Fix vi(1) recover script to use sysopen(), to avoid magic in perl open().
-
- Fix race condition in make(1) (only applies to make -j, which noone in OpenBSD ever uses).
-
- Reduce console loggin in sshd(8).
-
- Fix sshd -i.
-
- SECURITY FIX: Systems with procfs enabled and mounted contain a root hole due to a tricky exploit.A source code patch is available.
-
- Fix a possible NULL dereference in execve(2).
-
- gcc 2.95.2
-
- add rip6query(8).
-
- Many man page fixes.
-
- Change pcvt(4) so that all regular function key presses go to straight to the application.
-
- Avoid botches in ftpd(8) and mtree(8) introduced from blind replacement of getwd(3) with getcwd(3).
-
- Disable agent forwarding in ssh(1) protocol 1.3.
-
- Support for another gigabit ethernet card using the alteon chipset.
-
- Fix a garbage printout in ftpd(8).
-
- Error message repair in from(1).
-
- Fix fxp+nsphy problems.
-
- Tons more man page repairs.
-
- Fix a bug in the pipe(2) system call.
-
- v6 support in fstat(1).
-
- Documentation improvements.
-
- Fix "traceroute -P 41" codepath blocked by inet6 import.
-
- Another fix improving on the earlier ld.so version number fix.
-
- tcpdump(8) support for L2TP, Mobile IP, BGP, VLAN 802.1q, and INET6.
-
- ncurses-5.0-20000115
-
- Crank pms(4) delay to 4000 for another laptop that takes a long time.
-
- Make kernel know about the Coppermine cpus.
-
- Special case one PCI bridge device... which is not a PCI bridge at all.
-
- Handle SNAP encapsulated packets for the bridging blocknoip option.
-
- Improve sparc pte handling for performance.
-
- Show blackhole routes in route(8) and netstat(1).
-
- Fix a Y2001 bug in the hp300 boot code and kernel.
-
- Update the powerpc code. UVM kernels do not work yet.
-
- Avoid touching the sdh register too often during atapi device probe; some devices freak.
-
- More m4(1) fixes.
-
- Fix an obscure bug in ld(1) that caused it to treat directory names called "lib" differently.
-
- Y2K fix for a groff(1) macro.
-
- Remove gifconfig(8); replaced by syntax in ifconfig(8).
-
- Show problematic expressions in m4(1)'s expr error messages.
-
- Recursion depth control in gre(4), similar to what is in gif(4).
-
- Various cleanups are happening to the netipx codebase.
-
- Fix Promise Ultra/66 and SiS 5513 pciide support.
-
- blocknonip option in if_bridge and brconfig(8).
-
- pn(4) cards now use dc(4).
-
- More channel fixes in ssh(1).
-
- XFree86 3.3.6
-
- Handle glob() return values better in restore(8).
-
- Hi/Fn 7751 is the same as the Invertex board, the aeon driver.
-
- Support command-execution in /etc/hostname.* files, using ! syntax.
-
- Handle the bootpath properly in sbus isp(4).
-
- ipsec ingress control.
-
- Merge IPV6 into the GENERIC kernel. As far as the kernel is concerned, we are ipv6 ready now. However, lots of userland changes remain..
-
- Reduce recursion in gif(4).
-
- Support Davicom DM910x in if_dc.
-
- Numerous IPSec fixes and enhancements.
-
- Allow aeon driver to match Hi/Fn 7751.
-
- Fix printing of SAs in route.
-
- Add ESP/AH statistics to netstat(1).
-
- Fix to use network byte order in several places.
-
- Allow booting from Qlogic isp cards.
-
- Several IPSec-related sysctls added.
-
- Various termtypes fixes.
-
- ncurses-5.0-20000108
-
- Add fake dcphy(4).
-
- In UKC, add a timezone command.
-
- Handle fxp(4) using iophy(4); broken in 2.6 release.
-
- Support LBA-mapped extended partitions in fdisk(8).
-
- Use arc4random(3) in IPV6 code.
-
- Import of GRE code.
-
- Early check for udp destination port 0.
-
- Newer raidframe code.
-
- userland ppp 2.26.
-
- Make NFS swap devices work once again.
-
- In the mvme68k port, add support for the '060 based MVME177 card.
-
- Make some macros in m4(1) special.
-
- Improve column handling in ls(1).
-
- V6 support in systat(1).
-
- Y2K FIX: The at(1) command was unable to parse some kinds of dates. A source code patch is available.
-
- Improve sleep(1) for out-of-range values.
-
- Do not use kvm snooping in rtsold(8).
-
- Fix ftp(1) URL support accidentally broken by KAME.
-
- Fix a bug in smtpd(8).
-
- Make ssh IPV6 clean. KerberosIV only works on a v4 connection.
-
- Fix mbuf out-of-bounds write which caused great grief for NFSv2 in an INET6 kernel.
-
- Add rmoption/rmoptions command to config(8), thus permitting a config file to include GENERIC and then remove things.
-
- Various small improvements and fixes to ssh(1).
-
- Fix pthreads(3) handling on the sparc.
-
- Using weak symbols, support a real libpthread.
-
- The mknod(8) -m option should ignore the umask.
-
- More man page cleanups, as always.
-
- Y2K FIX: A minor problem; the sparc eeprom(8) command is not Y2K compliant. A source code patch is available.
-
- Permit midi compilation without other audio code.
-
- Y2K FIX: A minor problem in the logging support for the adduser(8) command. A source code patch is available.
-
- In config(8), permit multiple maxuser definitions. Newest overrides older ones.
-
- Use the dc(4) driver instead for a few other tulip-like cards.
-
- Change libc syslog() code to try to reopen the socket if a send fails. This handles the case of a restarted syslogd(8) better.
-
- Correct SIGTERM handling in ssh-agent(1).
-
- ncurses-5.0-20000101
-
- Permit non-IPSEC kernels to compile.
-
- Improve argument handling in wicontrol(8).
-
- Various fixes to LKM(4) unloading.
-
- Make ld/ld.so search all directories before accepting the best version of a shared library.
-
- Do in6_if_up() at splsoftnet(), permitting drivers to get interrupts during the processing of their multicast reprogramming.
-
- Provide sysctl net.inet6.icmp6.nodeinfo to permit admin to enable ICMPv6 node information query if so desired.
-
- Support various kinds of inet6 entries and in /etc/netstart as well.
-
- Improve handling of signed math in NFS kernel code.
-
- Parse /etc/sysctl.conf earlier in /etc/rc.
-
- Move sysctl to /sbin.
-
- For other architectures, also check db_panic in kdb_trap().
-
- Remove PIC versions of libarch and libresolv from the distribution.
-
- Correctly copy pkthdr in m_split().
-
- Fix udp multicast option handling.
-
- DRIVER IMPROVEMENT: Fix mii autoselect support for 3c900b. A source code patch is available.
-
- Fix signed errors in df(1).
-
- Repair netstat -ss.
-
- Optional swap encryption support in uvm; see new options(4) page.
-
- Do not strip international characters in fmt(1).
-
- Initialize lo0 for ipv6 automatically.
-
- Avoid a memory leak in telnet(1).
-
- Honour the ddb.panic sysctl better.
-
- Enable scopeid hack in ifconfig(8), ping6(8), and netstat(1).
-
- Replace NRL get{addr,name}info() with KAME get{addr,name}info() in libc.
-
- Fix a terminfo problem relating to unset capabilities.
-
- More ISA PnP NE2000 clones - see ne(4)
-
- TCP new reno
-
- Fix IP multicast kernel panic
-
- Upgrade ipf(4), now version 3.3.6
-
- Major cleanup of make(1)
-
- 3c450-TX HomeConnect, see xl(4).
-
- Add Qlogic 1240/1280 support to isp(4).
-
- Update curses(3) to ncurses-19991218.
-
- Speed up blowfish encryption by > 20%.
-
- More ipf(8) changes. Avoid rw_enter panic, coredumps when processing rules.
-
- Preliminary token ring support.
-
- Continuing ssh(1) improvements.
-
- Add srcsa, dstsa, clearsa to ifconfig(8)
-
- New ioctls for binding enc(4) interfaces when bridging.
-
- Yet more make(1) cleanup.
-
- Preserve file flags in mv(1).
-
- Added the gif(4) interface for tunnelling IPv4/IPv6. See gif(4), gifconfig(8).
-
- Add more PCMCIA NE2000 devices.
-
- Fix and re-enable TCP SACK code. Eliminate TCP_NEWRENO. See options(4).
-
- Continuing IPV6 improvements.
-
- Print ipv6 addresses correctly ipsec flows. See netstat(1), route(8).
-
- ipsecadm(8) now accepts ipv6 addresses.
-
- Improve timeout handling for some ATAPI devices.
-
- Add man pages for icmp6(4) and ip6(4)
-
- traceroute(8) fixes. Add -c, -I. Fix -P.
-
- Fix multicast kernel panic in ip_output.
-
- Add forward reference for sockaddr to netinet/in.h
-
- Some game fixes: fortune(6) and robots(6).
-
- More make(1) cleanup.
-
- Various IPV6 changes.
-
- ipmon(8) -F now works properly.
-
- Import of IPFilter 3.3.5. See ipf(8).
-
- Long overdue make(1) cleanup.
-
- ipf(8) can now use interface names.
-
- Add support for Qlogic 1240 and 1280.
-
- Preliminary awi driver code.
-
- Fix privilege error in wi(4) driver.
-
- Replace pn(4) driver with dc(4).
-
- Overflows in at(1), ar(1), cdio(1).
-
- Import of IPFilter 3.3.4. See ipf(8).
-
- Changed termcap providers
-
- Various fixes to hunt(6).
-
- TI TNETE2101 PHY
-
- Fix dlfcn(3) prototypes
-
- Sync awk(1) with June 6, 1999 version
-
- New dc(4) driver for DEC/Intel 21143 and clones
-
- Don't use stdio for getpass(3).
-
- Update of PHY subsystem
-
- Various sparc and i386 pmap fixes for UVM
-
- Sundance ST201 Ethernet from FreeBSD. See ste(4)
-
- IPSec cleanup
-
- Cleanup of make(1).
-
- Lots of UVM work
-
- MFS unmount race fixes
-
- Add bindresvport_af(3) and rresvport(3) APIs to libc.
-
- Updated curses(3) to ncurses-19991211
-
- Overflows in crunchgen
-
- Fix chpass(1) temp file handling
-
- Various soft update fixes
-
- Integration of KAME IPv6
-
- Features added to find(1).
-
- Fixes to eap(4) driver
-
- Overflows is split(1), jot(1), ssio, telnet(1), file(1).
-
- SiS 900/7016 Ethernet from FreeBSD. See sis(4)
-
- Tape support and major code changes to atapiscsi(4).
-
- The third ssh jumbo patch is now available. Numerous (non-security) additions/changes have been made to OpenSSH since the OpenBSD 2.6 release. A jumbo patch is available which adds many features.
-
- The second ssh jumbo patch is now available. Numerous (non-security) additions/changes have been made to OpenSSH since the OpenBSD 2.6 release. A jumbo patch is available which adds many features.
-
- Some overflows in patch(1).
-
- Buffer overflow in dnsquery(1).
-
- Buffer overflow in error(1).
-
- Fix a buffer overflow in dhclient(8).
-
- Fix two crashes in awk(1).
-
- Fix off-by-one in apply(1).
-
- Fix bug in pr(1).
-
- Make soft updates mostly work with UVM.
-
- SECURITY FIX: The USA version of the ssl library package, called sslUSA26, contained buffer overflows. A binary patch is available for people who installed before December 3.
-
- Remove ctm(1) from the src tree -- look for it in ports now.
-
- libkvm.old hacks for UVM.
-
- Fix utmp handling in ftpd(8), for when running in daemon mode.
-
- More m4(1) fixes.
-
- Fix append keyword in dhclient(8).
-
- Buglet in sort(1).
-
- DPT SmartCache III/IV SCSI PCI/EISA driver.
-
- mkisofs 1.11.3
-
- Fix mangled files for put command in ftpd(8).
-
- RELIABILITY FIX: Be more careful in poll(2). A source patch is available.
-
- ncurses-5.0-19991127
-
- Enable TI16750 UART support.
-
- driver for ISA hostess 4-channel serial card.
-
- Import ssh-askpass into our X11 src tree.
-
- For i386: Winchip c6 TSC is broken, ignore it.
-
- Fix descriptor leaks and potential double fclose() calls in skey(1) library code.
-
- Correct icmp packet length in ipmon(8).
-
- Remove unused functionality from the i386 pcvt driver.
-
- Allow machine-dependent code to set the PAGE_SIZE constant, and set it it in MD code if possible -- performance improvement.
-
- new pthreads(3) code.
-
- Parsing error fix to calendar(1).
-
- Some more m4(1) fixes.
-
- Set SO_REUSEADDR and SO_LINGER on forwarded ports in ssh(1).
-
- SECURITY FIX: Limit newaliases run to root and trusted users. A source patch is available.
-
- SSH_ASKPASS support in ssh-add(1).
-
- Numerous ssh(1) and sshd(8) improvements... too many to mention.
-
- Newer version of the isp(4) driver.
-
- Fix a bug in rarpd(8).
-
- Add support for SIGIO to lms(4), pms(4), and mms(4).
-
- Fix two bugs in info(1).
-
- select on pipes was broken, and occasionally someone would notice it (in particular rsync).
-
- Use mkstemp(3) in crontab(1).
-
- Improve egcs performance.
-
- Add memconfig(8).
-
- Add mtrr(4) support from freebsd.
-
- SSH_CMSG_MAX_PACKET_SIZE support in sshd(8).
-
- Improve whois(1) even more.
-
- Many man page fixes.
-
- sudo 1.6 (BSD licenced now!)
-
- Fix more m4(1) bugs.
-
- In scp(1), do not display banner if process is in the background.
-
- Permit kernel to compile without FFS once again.
-
- More links to man pages.
-
- Bug fixes to rl(4) and tx(4) driver.
-
- More ATAPI disk fixes (may come as a patch file later).
-
- Other misc ssh(1) improvements.
-
- RSA key fingerprints in the ssh(1) commands.
-
- Do ANSI cursor save/restore in i386 pcvt(4) driver.
-
- Fix more m4(1) bugs; patch for this problem is included in previous m4 errata entry.
-
- A bit more playing around in sshd to deal with the broken key sizes that Datafellows ssh gives.
-
- Honour ddb.console in the mac68k port.
-
- Fix retransmission problem in TCP.
-
- Improve whois(1) significantly to use *.whois-servers.net.
-
- In lots of daemons, do not syslog getpeername complaints.
-
- In ksh(1), quote metacharacters when completing filenames.
-
- Fix a signal race crash in ksh(1).
-
- link window(1) with -locurses.
-
- top(1) should use stathz, not hz, for calculating process run times.
-
- Shrink the puc(4) dmesg output.
-
- Add OSS audio support to the BSD/OS emulation.
-
- A kernel reliability fix for the alpha. A patch is available.
-
- A kernel reliability fix for all m68k architectures. A patch is available (which all m68k architectures share).
-
- Numerous (non-security) additions/changes have been made to OpenSSH since the OpenBSD 2.6 release. A jumbo patch is available which adds many features.
-
- A kernel reliability fix for the sparc. A patch is available.
-
- Counter overflow fix to scp(1).
-
- Merge dvdio.h support into cdio.h, and cleanup various unportabile bits.
-
- Various other ssh(1) cleanups.
-
- Print all bad options in sshd(8) and ssh(1) before exiting with a failure.
-
- sshd(8) now has a IgnoreUserKnownHosts flag.
-
- Optionally run a command in newsyslog(1), instead of sending a signal.
-
- Some make(1) fixes.
-
- Improve dhcp integration into the install media.
-
- Logging cleanup of ssh(1).
-
- Have sshd check check the user's personal ~/.ssh/known_hosts file.
-
- NOTE: OpenSSH does not have the ssh 1.2.27 rsa bug.
-
- Install a shared libperl.
-
- Fix m4, accidentally broken in 2.6. A patch is available.
-
- Users should not be able to change the media configuration of interfaces. A patch is available.
-
- Add strtok_r(3).
-
- newsyslog race condition fixes. A patch is available.
-
- Various make(1) fixes.
-
- screen blanker code for the amiga.
-
- Default network name in wi(4) is "", not "ANY".
-
- Start of DVD support.
-
- New sf(4) driver supports Adaptec "StarFire" AIC6915-based Ethernet PCI cards.
-
- Numerous more ssh(1) and sshd(8) cleanups.
-
- Slow down ATAPI IDENTIFY (final critical fix which shipped in 2.6).
-
- Another critical i386 memory allocation fix (shipped in 2.6).
-
- Critical brooktree driver fix (shipped in 2.6).
-
- Fix some more atapi bugs (shipped in 2.6).
-
- Fix byte order bugs in the new wdc/atapi code.
-
- Sparc uses UVM by default now.
-
- Allow rarpd(8) to work on aliased interfaces.
-
- Support multiple enc(4) interfaces.
-
- Reliability fixes for the ATAPI code (shipped in 2.6).
-
- New driver: al(4) supports the ADMtek AL981/AN985 PCI ethernet cards.
-
- Various other ssh(1) and sshd(8) cleanups.
-
- Add ethernet-IP encapsulation.
-
- In ssh, use libssl(8) md5 routines instead of our libc routines.
-
- Disassociate interfaces from ipnat(8) after they've been removed from the interface list.
-
- Make ASYNC pipes capable of generating SIGIO.
-
- Emulate FreeBSD F[GS]ETOWN.
-
- Fix some further ARP problems in bridge(4).
-
- Fix scp(1) counters for > 1 hour.
-
- Support LMC1200 in lmc(4).
-
- Repair multicast routing description block in afterboot(8).
-
- Support missing tty flags in stty(1).
-
- libkeynote update.
-
- Support UVM throughout userland.
-
- Support for puc(4) (PCI serial/parallel cards).
-
- Make disklabel.h safe for C++ use.
-
- Use reference-copies of the mbuf in bridge(4) code again, instead of full copies.
-
- Make ssh print the correct remote version number.
-
- Make ssh(1) compile faster by using a library.
-
- In ti(4), use bus_dma routines instead of uvm_page_alloc_contig.
-
- Cleanup i386 disktab.
@@ -799,6 +66,7 @@
For changes leading up to OpenBSD 2.4, click here.
For changes leading up to OpenBSD 2.5, click here.
For changes leading up to OpenBSD 2.6, click here.
+For changes leading up to OpenBSD 2.7, click here.
For changes in OpenBSD-current, click here.
