===================================================================
RCS file: /cvsrepo/anoncvs/cvs/www/plus.html,v
retrieving revision 1.755
retrieving revision 1.756
diff -u -r1.755 -r1.756
--- www/plus.html	2001/04/18 01:08:46	1.755
+++ www/plus.html	2001/04/23 23:03:31	1.756
@@ -48,17 +48,21 @@
 <p>
 <h3><font color=#0000e0>We are working on OpenBSD-current.</font></h3><p>
 <ul>
-<li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ipf&sektion=4">ipf</a> fragment caching bug.<br>
+<li><font color=#e00000><strong>Avoid DoS attack in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ftpd&sektion=8">ftpd</a> using <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=glob&sektion=3">glob</a> patch.</strong></font><br>
+    <a href="errata.html#glob_limit">A patch is available</a>.<br>
     <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
+<li><font color=#e00000><strong>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ipf&sektion=4">ipf</a> fragment caching bug.</strong></font><br>
+    <a href="errata.html#ipf_frag">A patch is available</a>.<br>
+    <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
 <li><font color=#e00000><strong>SECURITY FIX: Fix buffer overflows contained in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=glob&sektion=3">glob(3)</a> function.</strong></font><br>
-    <a href="errata.html#glob">A patch is available</a></strong>.<br>
+    <a href="errata.html#glob">A patch is available</a>.<br>
     <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
 <li>Check for short packets and bad types sent to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=timed&sektion=8">timed(8)</a>.<br>
     <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
 <li><a href="http://www.openssh.com/">OpenSSH</a> 2.5.2 released.<br>
     <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
 <li><font color=#e00000><strong>SECURITY FIX: Be careful with file permissions in readline library</strong></font><br>
-    <a href="errata.html#readline">A patch is available</a></strong>.<br>
+    <a href="errata.html#readline">A patch is available</a>.<br>
     <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
 <li>Make buffer size 8k on NE1000, and 16k otherwise for
 <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ne&sektion=4">ne</a>.<br>
@@ -66,18 +70,18 @@
 <li>Move bogus packet length test in udp packets to avoid being stuck at <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=splsoftnet&sektion=9">splsoftnet</a>.<br>
     <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
 <li><font color=#e00000><strong>SECURITY FIX: for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ipsec&sektion=4">ipsec(4)</a>, handle AH packets with IP options more strictly.</strong></font><br>
-    <a href="errata.html#ipsec_ah">A patch is available</a></strong>.<br>
+    <a href="errata.html#ipsec_ah">A patch is available</a>.<br>
     <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
 <li><font color=#e00000><strong>SECURITY FIX: on i386, check arguments to USER_LDT (not enabled by default) mappings.</strong></font><br>
-    <a href="errata.html#userldt">A patch is available</a></strong>.<br>
+    <a href="errata.html#userldt">A patch is available</a>.<br>
     <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
 <li><font color=#e00000><strong>SECURITY FIX: update to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sudo&sektion=8">sudo</a>-1.6.3p6 which fixes a buffer overflow on very long argv components.</strong></font><br>
-    <a href="errata.html#sudo">A patch is available</a></strong>.<br>
+    <a href="errata.html#sudo">A patch is available</a>.<br>
     <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
 <li><a href="http://www.openssh.com/">OpenSSH</a> 2.5.1 released.<br>
     <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
 <li><font color=#e00000><strong>IMPLEMENTATION FIX: fix port number computation in libwrap client side ident implementation.</strong></font><br>
-    <a href="errata.html#libwrap">A patch is available</a></strong>.<br>
+    <a href="errata.html#libwrap">A patch is available</a>.<br>
     <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
 <li>Disable bogus file check in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cvs&sektion=1">cvs(1)</a>.<br>
     <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
@@ -201,7 +205,7 @@
 <li>If a <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pccbb&sektion=4">pccbb(4)</a> bridge does not have the right voltages, assume it is dead.  Permits single connector adapters to work.
 <li>Fix some bugs in the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bridge&sektion=4">bridge(4)</a>, especially regarding <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=gif&sektion=4">gif(4)</a>.
 <li><font color=#e00000><strong>IMPLEMENTATION FIX: fix memory allocation in the PCI LANCE ethernet driver, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=le&sektion=4&arch=i386">le(4)</a>.</strong></font><br>
-    <a href="errata.html#lepci">A patch is available</a></strong>.<br>
+    <a href="errata.html#lepci">A patch is available</a>.<br>
     <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=config&sektion=8">config(8)</a> -e and -u, do not write out a new kernel if nothing changed.
 <li>Numerous fat <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=utmp&sektion=5">utmp(5)</a> changes to utilities.
@@ -238,7 +242,7 @@
 <li><a
 href="http://www.openbsd.org/cgi-bin/man.cgi?query=usb&sektion=4">USB</a> sync.
 <li><font color=#e00000><strong>SECURITY FIX: fix some buffer overflows in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=named&sektion=8">named(8)</a>.</strong></font><br>
-    <a href="errata.html#named">A patch is available</a></strong>.<br>
+    <a href="errata.html#named">A patch is available</a>.<br>
     <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
 <li>Support Cheetah vaxes.
 <li>Improve <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=MAKEDEV&sektion=8">MAKEDEV(8)</a> manual pages on many architectures.
@@ -297,7 +301,7 @@
 <li>ipf 3.4.15
 <li>Fix a <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=vi&sektion=1">vi(1)</a> crash.
 <li><font color=#e00000><strong>SECURITY FIX: The <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=random&sektion=4">rnd(4)</a> device does not use all of its input when data is written to it.</strong></font><br>
-    <a href="errata.html#rnd">A patch is available</a></strong>.<br>
+    <a href="errata.html#rnd">A patch is available</a>.<br>
     <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
 <li>Fix C sequence point issues in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dd&sektion=1">dd(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=monop&sektion=6">monop(6)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tail&sektion=1">tail(1)</a>, and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rbootd&sektion=8">rbootd(8)</a>.
 <li>Fix previous <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=inetd&sektion=8">inetd(8)</a> fix.
@@ -437,14 +441,14 @@
 <li>Add support for ActivCard, CRYPTOCard, and SNK-004 authentication for the BSD authentication framework.
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ksh&sektion=1">ksh(1)</a>, remain in non-blocking mode if the shell is not interactive.
 <li><font color=#e00000><strong>SECURITY FIX: xlock now authenticates via a pipe.</strong></font><br>
-    <a href="errata.html#xlock">A patch is available</a></strong>.<br>
+    <a href="errata.html#xlock">A patch is available</a>.<br>
     <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
 <li><font color=#e00000><strong>IMPLEMENTATION FIX: PS/2 mouse driver, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pms&sektion=4&arch=i386">pms</a>, lockup fix.</strong></font><br>
-    <a href="errata.html#pms">A patch is available</a></strong>.<br>
+    <a href="errata.html#pms">A patch is available</a>.<br>
     <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
 <li>Implement a workaround in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=atapiscsi&sektion=4">atapiscsi(4)</a> for buggy Toshiba drivers.
 <li><font color=#e00000><strong>SECURITY FIX: Fix holes in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mount_procfs&sektion=8">procfs(8)</a>.</strong></font><br>
-    <a href="errata.html#procfs">A patch is available</a></strong>.<br>
+    <a href="errata.html#procfs">A patch is available</a>.<br>
     <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
 <li>Put <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=strlcat&sektion=3">strlcat(3)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=strlcpy&sektion=3">strlcpy(3)</a> into libkern for kernel use.
 <li>Fix setting of nwid for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wi&sektion=4">wi(4)</a>.<br>
@@ -470,7 +474,7 @@
 <li>Add bytecounter statistics reporting to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=netstat&sektion=1">netstat(1)</a>.
 <li>Instrument more random TCP sequence numbers.
 <li><font color=#e00000><strong>IMPLEMENTATION FIX: Compute <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=crypto&sektion=9">crypto(9)</a> session IDs correctly for kernel.</strong></font><br>
-    <a href="errata.html#hwcrypto">A patch is available</a></font>.<br>
+    <a href="errata.html#hwcrypto">A patch is available</a>.<br>
     <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a>, permit logins with read-only root filesystems if the tty already has sane modes set.
 <li>Source port &lt; 1024 is no longer required for rhosts-rsa in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a>.
@@ -528,17 +532,17 @@
 <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pcap&sektion=3">pcap(3)</a>-generated <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bpf&sektion=4">BPF</a> filters work on the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tun&sektion=4">tun(4)</a> interface.
 <li>Import David Maziere's <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh-keyscan&sektion=1">ssh-keyscan(1)</a>.
 <li><font color=#e00000><strong>SECURITY FIX: Fix buffer overflow in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ftpd&sektion=8">ftpd(8)</a>.</strong></font><br>
-    <a href="errata.html#ftpd">A patch is available</a></strong>.<br>
+    <a href="errata.html#ftpd">A patch is available</a>.<br>
     <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
 <li><font color=#e00000><strong>IMPLEMENTATION FIX: Fix fastroute related panic.</strong></font><br>
-    <a href="errata.html#fastroute">A patch is available</a></strong>.<br>
+    <a href="errata.html#fastroute">A patch is available</a>.<br>
     <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
 <li>Teach <a href="http://www.openssh.com/">OpenSSH</a> about more version strings to improve interoperability.
 <li><font color=#e00000><strong>SECURITY FIX: Fix another security problem in the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=kerberos&sektion=1">KerberosIV</a> code.</strong></font><br>
-    <a href="errata.html#kerberos2">A patch is available</a></strong>.<br>
+    <a href="errata.html#kerberos2">A patch is available</a>.<br>
     <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
 <li><font color=#e00000><strong>SECURITY FIX: Fix two security problems in the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=kerberos&sektion=1">KerberosIV</a> code.</strong></font><br>
-    <a href="errata.html#kerberos">A patch is available</a></strong>.<br>
+    <a href="errata.html#kerberos">A patch is available</a>.<br>
     <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
 <li>Permit <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ftpd&sektion=8">ftpd(8)</a> umask setting via both the command line and through a login class in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=login.conf&sektion=5">login.conf(5)</a>.
 <li>Prevent <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=vlan&sektion=4">vlan(4)</a> devices from emitting packets if the parent interface is not up and running.
@@ -593,7 +597,7 @@
 <li>Add support for the Acenic Copper and Netgear GA620T Gigabit Ethernet cards.
 <li>Prevent a type overflow in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=recno&sektion=3">recno(3)</a>.
 <li><font color=#e00000><strong>IMPLEMENTATION FIX: Imac DV reports the VGA device improperly.</strong></font><br>
-    <a href="errata.html#imacdv">A patch is available</a></strong>.<br>
+    <a href="errata.html#imacdv">A patch is available</a>.<br>
     <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
 <li>Import BSD authentication mechanisms from BSDI BSD/OS.
 <li>Implement <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pw_dup&sektion=3">pw_dup(3)</a>, a function which copies struct passwd.
@@ -621,7 +625,7 @@
 <li>Add a slew of devices to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=usbdevs&sektion=8">usbdevs(8)</a>.
 <li>Do not use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=perror&sektion=3">perror(3)</a> in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a> after forking a child.
 <li><font color=#e00000><strong>RELIABILITY FIX: The <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=qec&sektion=4&arch=sparc">qec</a>+<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=qe&sektion=4&arch=sparc">qe</a> ethernet cards should not generate NMIs.</strong></font><br>
-    <a href="errata.html#qe">A patch is available</a></strong>.<br>
+    <a href="errata.html#qe">A patch is available</a>.<br>
     <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
 <li>Add <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ifmedia&sektion=4">ifmedia(4)</a> support to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=qec&sektion=4&arch=sparc">qec(4)</a>, among other improvements.
 <li>Extra sanity checking in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=skeyinit&sektion=1">skeyinit(1)</a>.
@@ -639,8 +643,8 @@
 <li>Avoid parsing options in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> if there is an <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rsa&sektion=3">RSA</a> key mismatch.
 <li>Various cleanups to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ftpd&sektion=8">ftpd(8)</a>.
 <li>In many programs, sync usage() output with their respective man page SYNOPSIS.
-<li><font color=#e00000><strong>RELIABILITY FIX: The ThunderLAN driver, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tl&sektion=4">tl(4)</a>, should not claim all interrupts.</font><br>
-    <a href="errata.html#tl">A patch is available</a></strong>.<br>
+<li><font color=#e00000><strong>RELIABILITY FIX: The ThunderLAN driver, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tl&sektion=4">tl(4)</a>, should not claim all interrupts.</strong></font><br>
+    <a href="errata.html#tl">A patch is available</a>.<br>
     <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pciide&sektion=4">pciide(4)</a>, do not map unsafe registers from controllers that require 16-bit I/O space.
 <li>Import new <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pckbc&sektion=4">pckbc(4)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pckbd&sektion=4">pckbd(4)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=vga&sektion=4">vga(4)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pcdisplay&sektion=4">pcdisplay(4)</a>, and ega(4) drivers for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wscons&sektion=4">wscons(4)</a>.
@@ -651,9 +655,8 @@
 <li>Allow serial mice to work with <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=moused&sektion=8">moused(8)</a> and XFree86 simultaneously.
 <li>Repair an off-by-one error in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh-agent&sektion=1">ssh-agent(1)</a>.
 <li>Convert some old drivers to the new <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=timeout&sektion=9">timeout(9)</a> interface.
-<li><font color=#e00000><strong>RELIABILITY FIX: repair AES (rijndael)
-kernel support.</strong></font><br>
-    <a href="errata.html#rijndael">A patch is available</a></strong>.<br>
+<li><font color=#e00000><strong>RELIABILITY FIX: repair AES (rijndael) kernel support.</strong></font><br>
+    <a href="errata.html#rijndael">A patch is available</a>.<br>
     <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
 <li>Import PCI support for Alpha EB164 machines.
 <li>Add bus_space_barrier macros for the powerpc.
@@ -663,8 +666,8 @@
 <li>Crank maximum mbuf size in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ppp&sektion=8">ppp(8)</a> in order to handle full-sized HDLC frames.
 <li>Improve handling of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ip6&sektion=4">IPv6</a> Node Information Query packets for better specification conformance.
 <li>Fix a panic induced by assigning lo0 an <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ip6&sektion=4">IPv6</a> alias.
-<li><font color=#e00000><strong>IMPLEMENTATION FIX: In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a>, fix skey support in SSH1 protocol.</font><br>
-    <a href="errata.html#sshskey">A patch is available</a></strong>.<br>
+<li><font color=#e00000><strong>IMPLEMENTATION FIX: In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a>, fix skey support in SSH1 protocol.</strong></font><br>
+    <a href="errata.html#sshskey">A patch is available</a>.<br>
     <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
 <li>Deprecate pltime=0 in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ifconfig&sektion=8">ifconfig(8)</a>.
 <li>Modifications to the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ktrace&sektion=2">ktrace(2)</a> interface to reduce redundancy.
@@ -699,7 +702,7 @@
     <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
 <li>Add <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pcibios&sektion=4&arch=i386">pcibios(4)</a> interrupt setup support for AMD750 chipset.
 <li><font color=#e00000><strong>RELIABILITY FIX: In sparc <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=zs&sektion=4&arch=sparc">zs(4)</a>, when using serial console, the interrupt routine was unable to distinguish it's own interrupts.</strong></font><br>
-    <a href="errata.html#zsconsole">A patch is available</a></strong>.<br>
+    <a href="errata.html#zsconsole">A patch is available</a>.<br>
     <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
 <li>Generate new hashkey every time a <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bridge&sektion=4">bridge(4)</a> is brought up.
 <li>Change <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bridge&sektion=4">bridge(4)</a> code to use lower spl.
@@ -741,7 +744,7 @@
 <hr>
 <a href="index.html"><img height=24 width=24 src="back.gif" border=0 alt="OpenBSD"></a> 
 <a href="mailto:www@openbsd.org">www@openbsd.org</a>
-<br><small>$OpenBSD: plus.html,v 1.755 2001/04/18 01:08:46 jason Exp $</small>
+<br><small>$OpenBSD: plus.html,v 1.756 2001/04/23 23:03:31 jason Exp $</small>
 
 </body>
 </html>