=================================================================== RCS file: /cvsrepo/anoncvs/cvs/www/plus.html,v retrieving revision 1.647 retrieving revision 1.648 diff -u -r1.647 -r1.648 --- www/plus.html 2000/09/01 01:09:16 1.647 +++ www/plus.html 2000/09/01 04:08:31 1.648 @@ -72,7 +72,7 @@
  • Performance improvements to sis(4).
  • Correctly match Promise Ultra/100 in pciide(4).
  • Fix shared library creation problems on mips. -
  • Fix IPSEC flow deletion problem when using -transport.
    +
  • Fix IPSEC flow deletion problem when using -transport.
    [To be applied to stable]
  • In scp(1), repair copying of files 2GB in size or larger.
  • Crank some defaults in login.conf(5). @@ -85,30 +85,30 @@
  • Use the user's default groups if user is specified in inetd.conf, but group is not.
  • Be more paranoid in cron(8).
  • Fix var handling in make(1). -
  • Support FIONBIO and FIOASYNC on rnd(4).
    +
  • Support FIONBIO and FIOASYNC on rnd.
    [Applied to stable]
  • Proper template file creation on ksh(1).
  • Implement resource limits in several daemons.
  • Add login.conf(5) support, making possible limiting resources per class. -
  • Minor bug fixes associated with the use of the UseLogin directive in sshd_config. +
  • Minor bug fixes associated with the use of the UseLogin directive in sshd_config.
  • Bypass key generation in mod_ssl if SSL is not enabled in any (virtual) servers.
  • Add SSH2/DSA support to ssh-agent(1) and some DSA related cleanups.
  • Resolve a driver name conflict in the pmax platform. The pmax dc(4) driver has been renamed to dz.
  • Many updates to the ubsec(4) code.
  • Various IPv6 fixes. -
  • Add -S option to scp(1) and ssh(1) to use a program for encrypted connections. +
  • Add -S option to scp(1) and ssh(1) to use a program for encrypted connections.
  • Lot of manpage updates.
  • Various improvements to linux emulation.
  • Add IPv6 support to telnetd(8).
  • Allow ppp(8) to be used without SUID privs. -
  • Make pcibios(4) a real device making possible the use of flags. +
  • Make pcibios(4) a real device making possible the use of flags.
  • Avoid duplicate utmp entries in ssh(1).
  • Update awi(4) driver.
  • Various ppp(8) improvements.
  • More fixes to ubsec(4) auth+enc code.
  • Convert pccom(4) to new timeouts. -
  • Implement -a option on wicontrol(8), was documented but not present. -
  • In mail.local(8), fix sendmail.cf location. +
  • Implement -a option on wicontrol(8), was documented but not present. +
  • In mail.local(8), fix sendmail.cf location.
  • Catch bogus MAKEDEV(8) mouse and spit out an reasonable error.
  • In ppp(8), ISDN B channels have a bandwidth of 64000, not 65535.
  • More format string paranoia. @@ -117,12 +117,14 @@ A patch is available.
    [Applied to stable]
  • Improvements and fixes in hppa land. -
  • Increase if_obytes and if_omcasts in vlan(4) output routine as done in ether_output. +
  • Increase if_obytes and if_omcasts in vlan(4) output routine as done in ether_output.
  • In ubsec(4), deallocate resources on attachment failure.
  • Fix auth-only mode in ubsec(4).
  • In hifn(4), deallocate resources on error and workaround memory problems in rev A boards.
  • mod_ssl 2.6.6. +
  • ... about 3 months of missing updates here.. +
  • SECURITY ISSUE: several DoS holes in libX11, libICE and X clients.
    A patch is available.
    [Applied to stable] @@ -413,7 +415,7 @@
  • Be more careful about tuples in pcmcia(4).
  • gcc 2.95.3 (pre-release)
  • Busify eg(4), to avoid conflict with ne2000 at 0x300. -
  • SECURITY ISSUE: Do not use the (non-default) UseLogin option in OpenSSH 2.1.*, it has a hole on other operating systems and does not work right in OpenBSD.
    +
  • SECURITY ISSUE: Do not use the (non-default) UseLogin option in OpenSSH 2.1.*, it has a hole on other operating systems and does not work right in OpenBSD.
    Update to OpenSSH 2.1.1 or later, or simply avoid using UseLogin    .
    [Applied to stable]
  • sudo 1.6.3p4 @@ -446,10 +448,10 @@
  • Creation of 2.7-stable release, see our page describing it.
  • Convert amiga port to UVM.
  • Arrange to have ahc(4) support Adaptec 2930CU. -
  • SECURITY ISSUE: It was possible to bypass the learning flag on a bridge.
    +
  • SECURITY ISSUE: It was possible to bypass the learning flag on a bridge.
    A patch is available    .
    [Applied to stable] -
  • In ftp(1), do not attach Host: directive if we are using the proxy. +
  • In ftp(1), do not attach Host: directive if we are using the proxy.
  • Make almost all manual pages machine independent.
  • DRIVER FIX: The isapnp(4) ef(4) driver failed to configure properly.
    A patch is available    .
    @@ -528,7 +530,7 @@
    OpenBSD www@openbsd.org -
    $OpenBSD: plus.html,v 1.647 2000/09/01 01:09:16 fgsch Exp $ +
    $OpenBSD: plus.html,v 1.648 2000/09/01 04:08:31 fgsch Exp $