=================================================================== RCS file: /cvsrepo/anoncvs/cvs/www/plus.html,v retrieving revision 1.829 retrieving revision 1.830 diff -u -r1.829 -r1.830 --- www/plus.html 2002/06/19 19:03:10 1.829 +++ www/plus.html 2002/07/02 01:20:25 1.830 @@ -47,9 +47,8 @@
-This file is not currently maintained, because the people who can edit -and maintain it are WAY too busy to keep it updated. Eventually we hope -to catch up. Really. +This file is lagging some way behind -current at the moment, but we +are trying to catch up. Honest.

@@ -61,11 +60,118 @@ A source code patch is available.
[Applied to stable]

  • ... +
  • Add -t key lifetime option to ssh-add(1). +
  • Use IPv4/IPv6 addresses in /etc/inetd.conf instead of 'localhost' to avoid DNS lookups. +
  • Add predicate suffixes to systrace(1). +
  • Add -x and -X options to respectively lock and unlock ssh-agent(1). +
  • Compatibility tweaks to getpid(), getuid() and getgid() under Linux emulation. +
  • Start work on new debugger, pmdb. +
  • Additional check (#ifdef DIAGNOSTIC) for duplicate uvm(9) map entries. +
  • If syslog(3) fails with ENOBUFS when sending to /dev/log, it now waits a millisecond and retries. +
  • syslogd(8) doubles the socket receive buffer size. +
  • Automatic policy generation for systrace(1). +
  • lynx(1) now defaults to passive FTP. +
  • Remove [gs]etprogname() from KerberosV. +
  • New -a <bind_address> option to ssh-agent(1) so user can specify the agent's UNIX domain socket. +
  • Make tbrconfig(8) statically linked. +
  • Make sure the IPv6 MTU isn't set too high because of a high layer 2 MTU (e.g. FDDI or ARCnet.) +
  • Use the same byte-order kung fu as the kernel in atactl(8). +
  • Don't automagically set -prefixlen 128 on IPv6 host route. +
  • rasops instead of rcons for vgafb(4/SPARC64). +
  • Add xsystrace(1) [no manpage yet] UI for systrace(1). +
  • Add sbus bwtwo(4) mono framebuffer support (untested, undocumented.) +
  • PrivSep'd ssh monitor processes check each authentication method is enabled before use. +
  • systrace(1) userland import. +
  • Use arc4random(3) for rtadvd(8). +
  • Make nice(3) standards compliant. +
  • More wi(4) tweaks for Symbol cards. +
  • Recognise VIA VT8233 PCI-ISA bridge. +
  • Fix sparc64 64-bit relocation masks in ld.so(1). +
  • Merge in Sendmail 8.12.4. +
  • Detect stereo radio reception in fms(4). +
  • Compatibility tweaks to creator(4/SPARC64). +
  • Replace mr(4) radio driver with new gtp(4) driver, which is better tested. +
  • 'pfctl -s all' now prints labels as well. +
  • Add volatile to sig_atomic_t. Stand well back. +
  • Use rasops instead of rcons in cgthree(4/SPARC) and cgsix(4/SPARC). +
  • Stop IPv6 making assumptions about interface MTU, use the actual interface values. +
  • Stop maintaining 2.9-stable. +
  • Bump 2.9-stable to OpenSSH version 3.2.3. +
  • Bump 3.0-stable to OpenSSH version 3.2.3. +
  • Implement PMAP_CANFAIL flag for m68k pmap. +
  • Enable console blanking on cgthree(4/SPARC). +
  • Make sure some struct sockaddr are cleared before use. +
  • Start work on NetOctave NSP2000 driver. +
  • Apply BSD Airtools 0.2 patches. +
  • Teach ECN flags to pf(4). +
  • Dump mkisofs in favor of mkhybrid. +
  • Fix fd_set overrun in rtsold(8). +
  • Clue in inetd(8) to IPv6 FTP bounce attacks. +
  • Fix /etc/ptmp deletion bug that occurred if rmuser(8) was aborted. +
  • IBSS mode for Symbol cards (firmware >= 2.5) using the wi(4) driver. +
  • Add leading-zero padding to RSA signatures in ssh. +
  • Tweak altq(4) options(4) so the kernel compiles on i[34]86. +
  • Add support in the fxp(4) driver for more Intel PRO/100 VM cards. +
  • For those that do metric but refuse to work in meters and kilograms, kayser conversion has been added to units(1). +
  • Fix signal races in ping(8). +
  • Now that the Dungeon Master dm(1) has gone into well-earned retirement, make those games that need to save high scores, etc. run setgid games. +
  • Per-socket ipsec(4) policies and options! +
  • Stop a potential ipsec(4) DoS where an attacker could falsely advance the replay counter and so force valid traffic to be discarded. +
  • Add German keyboard map for Apple iBook. +
  • On ELF platforms, allow gcc(1) to link Fortran code with other languages. +
  • Pull ldconfig(8) strlcpy() fix into -stable. +
  • Make sure every PCI interrupt is recorded, so ISA doesn't step on one of them later. +
  • Attach radio(4) devices properly. +
  • Fix VIA8233 support in auvia(4). +
  • Make nc(1) timeouts behave more like netcat. +
  • Make sure user's shell is /usr/sbin/authpf before running authpf(8) to prevent $SSH_CLIENT shenanigans. +
  • In ssh, use OpenSSL's AES implementation instead of our own. +
  • Add -[46] options to ftp(1). +
  • Warn if IPv6 neighbor discovery tries to set the link MTU too small. +
  • Make tip(1) query the driver with the user's baud rate setting rather than only accepting a compiled-in list. +
  • Support Sun type 5 keyboards, as helpfully some key mappings are switched around from type 4. +
  • Cleanup and small fixes to skeyaudit(8). +
  • Fixes to fms(4). +
  • Various fixes and enhancements to mg(1). +
  • sshd(8) no longer starts in privilege-separated mode unless the PrivSep user sshd and chroot(2) dir /var/empty are both present. +
  • Recognise Intel 830 (laptop Celery support) and 312 southbridge. +
  • Fix potential time overflow in dd(1). +
  • Make bridge(4) refragment IP packets that are too large for the outgoing interface. +
  • Remove libdl, support is now in libc. +
  • Recognise Nokia C110 and C111 PC cards as wi(4) devices. +
  • Really sanitize ld.so(1)'s environment as promised in the manpage when running set[ug]id, and test for set[ug]id earlier. +
  • Don't allow mktemp(3) to back up past the beginning of its input buffer. +
  • Use the correct string buffer size for printing port numbers in pfctl(8). +
  • Remove arc4random_8(). +
  • struct ifnet now has an array of pointers to data for each address family. Move per-interface IPv6 state and neighbor discovery stuff here. +
  • netstat(8) cleanup. +
  • ping6(8) and traceroute6(8) updates from KAME. +
  • unsigned -> unsigned int cleanup. +
  • pid_t type cleanup. +
  • Fix big snprintf(3) +parameter typo in strftime(3). +
  • Don't use execlp(3) when invoking ssh-keysign(8). +
  • Fix kill(2) parameter brainfade in amd(8) and KerberosIV's rlogin. +
  • vax: Add board type for VXT2000+. +
  • More IANA interface type values, including IFT_BRIDGE. +
  • Split XFree86 bsd_video.c into architecture-specific files. +
  • Add sysctl(8) toggle net.inet.icmp.tstamprepl (default: 1) for ICMP timestamp replies. +
  • Yet more safe string function fixes. +
  • In XFree86 build, honour COPTS variable when building third-party apps. +
  • Add LIBS option for crunchgen so custom libraries can be added to boot images. +
  • Run rpc.rstatd(8) and rpc.rusersd(8) as user nobody (boo!) from inetd(8). +
  • From ld.so(1), remove tests that have no license, and for the same reason replace parts of ld(1) and ldconfig(8). +
  • Remove unnecessary instruction cache flushes on sparc64. +
  • Many cleanups in ld.so(1). +
  • Fix disklabel(8) warnings on a SCSI +cd(4) with no data track. +
  • Allow incoming ssh(1) connections in the temporary pf(4) ruleset installed by /etc/rc, just in case the real rulebase fails to load later on. +
  • Support mixed IPv4/IPv6 address lists in pfctl(8).
  • Add ssh-keysign(8).
  • Remove obsolete dm(8).
  • Hunt for biodone() calls not made at splbio() spl(9), and fix them. -
  • Improve cd9660 filesystem read-ahead performance. +
  • Improve cd9660(8) filesystem read-ahead performance.
  • Support software brightness and backlight control on various macppc models.
  • Allow wsconsctl(8) to control brightness and backlight on displays which support this. @@ -229,7 +335,7 @@
    OpenBSD www@openbsd.org -
    $OpenBSD: plus.html,v 1.829 2002/06/19 19:03:10 miod Exp $ +
    $OpenBSD: plus.html,v 1.830 2002/07/02 01:20:25 deraadt Exp $