===================================================================
RCS file: /cvsrepo/anoncvs/cvs/www/plus.html,v
retrieving revision 1.593
retrieving revision 1.594
diff -u -r1.593 -r1.594
--- www/plus.html	2000/06/18 02:20:45	1.593
+++ www/plus.html	2000/06/18 06:56:02	1.594
@@ -48,9 +48,19 @@
 <h3><font color=#0000e0>OpenBSD 2.7 to be released June 15, 2000.<p>
 We are working on OpenBSD-current.</font></h3><p>
 <ul>
+<li>Support IPV6 in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=identd&sektion=8">identd(8)</a>.
+<li>Move IPV6 mbuf alignment requirements into input routine, removing the last performance critical one in loopback.
+<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ubsec&sektion=4">ubsec(4)</a> fixes to queue requests to the hardware properly.  The device can now do ipsec with itself over loopback or the network, but something is still mangled about the actual ipsec packets.
+<li><font color=#e00000><strong>SECURITY ISSUE: Two localhost denial of service problems in the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=an&sektion=4">an(4)</a> Aironet Communications 4500/4800 IEEE 802.11DS driver. One bug prevents <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ancontrol&sektion=8">ancontrol(8)</a> from working correctly, instead causing a panic, while the other allows unauthorized users to change settings.<br>
+    <a href=errata.html#if_an>A patch is available</a></strong></font>.<br>
+    <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
+<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=crypto&sektion=9">crypto(9)</a> kernel thread permits hardware crypto devices to run at any spl they prefer.  
+<li>Initial <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">OpenSSH</a> support for ssh.com's 2.2.0.
+<li>For setsockopt() and getsockopt(), do not assume non-PF_INET6 address family to be PF_INET.
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a>, implement bug compatibility with ssh-2.0.13.
+<li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a>, implement bug compatibility with ssh-2.0.13.
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>, include <b>=</b> in WHITESPACE, permitting commands like <b>ssh -o keyword=argument</b>.
-<li>Enable IPv6 support in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sendmail&sektion=8">sendmail(8)</a>.
+<li>Enable IPV6 support in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sendmail&sektion=8">sendmail(8)</a>.
 <li>Change ipsec processing sequence to handle inner and outer layers much better.
 <li>Add support for SSH2 subsystems in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a>.
 <li>On ifconfig down & up operations, mark all radix tree routes down or up for the specified interface.
@@ -68,7 +78,7 @@
 <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=memcmp&sektion=3">memcmp(3)</a> in the kernel as well, since implementing it in terms of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bcmp&sektion=3">bcmp(3)</a> is very wrong.
 <li>Update vnode flag printing in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pstat&sektion=8">pstat(8)</a>.
 <li>Do not whack directory in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=user&sektion=8">user(8)</a>.<br>
-    <a href="stable.html"><font color=#00b000>[Will be applied to stable]</font></a>
+    <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
 <li>Hardware random number generator in i840 also works, like i810.
 <li>Fix an ESP status message in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=netstat&sektion=1">netstat(1)</a>.
 <li>Put RSA into our <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&sektion=3">ssl(3)</a> tree.  Since our next release is not till after the patent expires, it's OK.
@@ -79,7 +89,8 @@
 <li>Minor bug fixes and optimizations in <b>/etc/rc</b>.
 <li>Update of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ppp&sektion=8">ppp(8)</a>.
 <li>Put an upper bound on transaction queue of the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ubsec&sektion=4">ubsec(4)</a>.
-<li>Correct source length calculation in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=hifn&sektion=4">hifn(4)</a>.
+<li>Correct source length calculation in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=hifn&sektion=4">hifn(4)</a>.<br>
+    <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
 <li>Initial import of ELF ld.so, for powerpc initially.
 <li>Correct secondary mbuf setup in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=hifn&sektion=4">hifn(4)</a>.
 <li>Broadcom Bluesteel 5x0x <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ubsec&sektion=4">ubsec(4)</a> crypto cards now supports ESP 3DES modes properly.  No AH or MAC stuff yet.
@@ -189,7 +200,7 @@
 <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ancontrol&sektion=8">ancontrol(8)</a> act like our changed <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wicontrol&sektion=4">wicontrol(4)</a> semantics.
 <li>Use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getifaddrs&sektion=3">getifaddrs(3)</a> in libc rpc code.
 <li>For <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=boot_config&sektion=8">boot_config(8)</a> code, save enable command in the history for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=config&sektion=8">config(8)</a>'s -eu updating.
-<li>Update multicasting support for ipv6.
+<li>Update multicasting support for IPV6.
 <li>Fix usage printing in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=passwd&sektion=1">passwd(1)</a>.
 <li>By default, do not vsync blank sparc cgsix(4) monitors, but provide a sysctl to do so.
 <li>Start at a BlueSteel (Broadcom) 5[56]01 crypto accelerator driver.
@@ -204,7 +215,7 @@
 <li>After <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ftp&sektion=1">ftp(1)</a> finishes downloading, change progress meter to show the total elapsed time.
 <li>Handle 0-size files in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ftp&sektion=1">ftp(1)</a>'s progress meter.
 <li>Parse RFC2732 ftp URLs in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ftp&sektion=1">ftp(1)</a>.
-<li>In ipv6, perform NUD on p2p link, only if the destination/gateway is real neighbor.
+<li>In IPV6, perform NUD on p2p link, only if the destination/gateway is real neighbor.
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getaddrinfo&sektion=3">getaddrinfo(3)</a>, translate DNS error code into getaddrinfo error code (EAI_xxx).<br>
     <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
 <li><font color=#e00000><strong> RELIABILITY FIX: Parse IPv4 options more carefully.<br>
@@ -241,7 +252,7 @@
 <hr>
 <a href="index.html"><img height=24 width=24 src=back.gif border=0 alt=OpenBSD></a> 
 <a href=mailto:www@openbsd.org>www@openbsd.org</a>
-<br><small>$OpenBSD: plus.html,v 1.593 2000/06/18 02:20:45 jason Exp $</small>
+<br><small>$OpenBSD: plus.html,v 1.594 2000/06/18 06:56:02 deraadt Exp $</small>
 
 </body>
 </html>