Annotation of www/plus.html, Revision 1.595
1.14 deraadt 1: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML Strict//EN">
2: <html>
3: <head>
1.424 deraadt 4: <title>OpenBSD-current changes</title>
1.14 deraadt 5: <link rev=made href=mailto:www@openbsd.org>
6: <meta name="resource-type" content="document">
7: <meta name="description" content="the main OpenBSD page">
8: <meta name="keywords" content="openbsd,main">
9: <meta name="distribution" content="global">
1.59 deraadt 10: <meta name="copyright" content="This document copyright 1996 by OpenBSD.">
1.14 deraadt 11: </head>
12:
1.64 downsj 13: <BODY BGCOLOR="#FFFFFF" TEXT="#000000" LINK="#23238E">
1.14 deraadt 14:
1.292 pauls 15: <img alt="[OpenBSD]" height=30 width=141 SRC="images/smalltitle.gif">
1.64 downsj 16: <p>
1.562 deraadt 17: <h2><font color=#e00000>Changes made between OpenBSD 2.7 and OpenBSD-current</font><hr></h2>
1.14 deraadt 18:
19: <p>
1.29 deraadt 20: This is a partial list of the major machine independent changes
21: (ie. these are the changes people ask about most often). Port
22: specific changes have also been made, and are sometimes mentioned
23: in the pages for the specific <a href=plat.html>ports</a> if you
1.392 deraadt 24: are interested in further port-specific details. Many ports
1.29 deraadt 25: have had architecture-specific enhancements relative to NetBSD,
26: but when they do not they certainly have plenty of platform-independent
1.490 ian 27: changes, starting with those listed below.
1.14 deraadt 28:
1.17 deraadt 29: <p>
1.185 deraadt 30: Note: <font color=#e00000>Problems for which patches exist are marked in red</font>.
31:
32: <p>
1.186 deraadt 33: <h3>
1.477 deraadt 34: <a href=plus20.html>For changes leading up to OpenBSD 2.0, click here</a>.<br>
35: <a href=plus21.html>For changes leading up to OpenBSD 2.1, click here</a>.<br>
36: <a href=plus22.html>For changes leading up to OpenBSD 2.2, click here</a>.<br>
37: <a href=plus23.html>For changes leading up to OpenBSD 2.3, click here</a>.<br>
38: <a href=plus24.html>For changes leading up to OpenBSD 2.4, click here</a>.<br>
39: <a href=plus25.html>For changes leading up to OpenBSD 2.5, click here</a>.<br>
40: <a href=plus26.html>For changes leading up to OpenBSD 2.6, click here</a>.<br>
1.560 deraadt 41: <a href=plus27.html>For changes leading up to OpenBSD 2.7, click here</a>.<br>
1.422 deraadt 42: <br>
1.186 deraadt 43: </h3>
44:
45: <hr>
1.280 deraadt 46:
1.186 deraadt 47: <p>
1.560 deraadt 48: <h3><font color=#0000e0>OpenBSD 2.7 to be released June 15, 2000.<p>
1.480 deraadt 49: We are working on OpenBSD-current.</font></h3><p>
1.422 deraadt 50: <ul>
1.595 ! deraadt 51: <li>Support i82559ER in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fxp&sektion=4">fxp(4)</a>.
! 52: <li>Improve handling of RIP in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcpdump&sektion=8">tcpdump(8)</a>.
! 53: <li>Add Rijndael support to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ipsec&sektion=4">ipsec(4)</a>.
! 54: <li>Import <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pppoe&sektion=8">pppoe(8)</a>.
! 55: <li>Fix some bugs in the IPSEC getsockopt/setsockopt API regarding sizeof(int) vs sizeof(u_char).
1.594 deraadt 56: <li>Support IPV6 in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=identd&sektion=8">identd(8)</a>.
57: <li>Move IPV6 mbuf alignment requirements into input routine, removing the last performance critical one in loopback.
58: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ubsec&sektion=4">ubsec(4)</a> fixes to queue requests to the hardware properly. The device can now do ipsec with itself over loopback or the network, but something is still mangled about the actual ipsec packets.
59: <li><font color=#e00000><strong>SECURITY ISSUE: Two localhost denial of service problems in the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=an&sektion=4">an(4)</a> Aironet Communications 4500/4800 IEEE 802.11DS driver. One bug prevents <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ancontrol&sektion=8">ancontrol(8)</a> from working correctly, instead causing a panic, while the other allows unauthorized users to change settings.<br>
60: <a href=errata.html#if_an>A patch is available</a></strong></font>.<br>
61: <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
62: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=crypto&sektion=9">crypto(9)</a> kernel thread permits hardware crypto devices to run at any spl they prefer.
63: <li>Initial <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">OpenSSH</a> support for ssh.com's 2.2.0.
64: <li>For setsockopt() and getsockopt(), do not assume non-PF_INET6 address family to be PF_INET.
1.591 provos 65: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a>, implement bug compatibility with ssh-2.0.13.
1.590 deraadt 66: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>, include <b>=</b> in WHITESPACE, permitting commands like <b>ssh -o keyword=argument</b>.
1.594 deraadt 67: <li>Enable IPV6 support in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sendmail&sektion=8">sendmail(8)</a>.
1.590 deraadt 68: <li>Change ipsec processing sequence to handle inner and outer layers much better.
69: <li>Add support for SSH2 subsystems in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a>.
70: <li>On ifconfig down & up operations, mark all radix tree routes down or up for the specified interface.
1.591 provos 71: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mount_ffs&sektion=8">mount_ffs(8)</a>, permit the <b>-f</b> command to mount dirty file systems. This is dangerous, but makes more sense now that we are moving towards soft update file systems, where the inherent danger is much less.
1.590 deraadt 72: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ftpd&sektion=8">ftpd(8)</a>, make <b>-u</b> block the chmod client command.
73: <li>Allow extended server banners in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a>.
74: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mount&sektion=8">mount(8)</a>, -o force is not a negative option.
75: <li>Add support for AMD 53c974 scsi chipset.
1.592 provos 76: <li>Import of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mount_tcfs&sektion=8">tcfs</a> into the kernel, a file content crypto file system.
1.590 deraadt 77: <li>Remove traffic-time debugging messages in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>.
78: <li>Repair small list-based errors and uglinesses in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=make&sektion=1">make(1)</a>.
79: <li>Commonalize MIN() and MAX() macros inside the kernel.
80: <li>Use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=memcmp&sektion=3">memcmp(3)</a> in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bridge&sektion=4">bridge(4)</a> to fix a hashing algorithm error.<br>
1.593 jason 81: <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
1.591 provos 82: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=memcmp&sektion=3">memcmp(3)</a> in the kernel as well, since implementing it in terms of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bcmp&sektion=3">bcmp(3)</a> is very wrong.
1.590 deraadt 83: <li>Update vnode flag printing in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pstat&sektion=8">pstat(8)</a>.
84: <li>Do not whack directory in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=user&sektion=8">user(8)</a>.<br>
1.594 deraadt 85: <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
1.590 deraadt 86: <li>Hardware random number generator in i840 also works, like i810.
87: <li>Fix an ESP status message in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=netstat&sektion=1">netstat(1)</a>.
88: <li>Put RSA into our <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&sektion=3">ssl(3)</a> tree. Since our next release is not till after the patent expires, it's OK.
1.589 deraadt 89: <li>Split sysctl information for swapencrypt into an tree, and add more gunk.
1.586 deraadt 90: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ftpd&sektion=8">ftpd(8)</a> correct STAT command output for LPSV output.
91: <li>Correct an <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ipsec&sektion=4">ipsec</a> esp bug.
92: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ftp&sektion=1">ftp(1)</a> make both <b>ls</b> and </b>dir</b> send a <b>LIST</b> command.
93: <li>Minor bug fixes and optimizations in <b>/etc/rc</b>.
94: <li>Update of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ppp&sektion=8">ppp(8)</a>.
1.587 deraadt 95: <li>Put an upper bound on transaction queue of the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ubsec&sektion=4">ubsec(4)</a>.
1.594 deraadt 96: <li>Correct source length calculation in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=hifn&sektion=4">hifn(4)</a>.<br>
97: <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
1.586 deraadt 98: <li>Initial import of ELF ld.so, for powerpc initially.
99: <li>Correct secondary mbuf setup in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=hifn&sektion=4">hifn(4)</a>.
1.584 deraadt 100: <li>Broadcom Bluesteel 5x0x <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ubsec&sektion=4">ubsec(4)</a> crypto cards now supports ESP 3DES modes properly. No AH or MAC stuff yet.
1.582 deraadt 101: <li>Make flags field in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=newsyslog&sektion=8">newsyslog(8)</a> files optional.
1.585 deraadt 102: <li>Modifications to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=traceroute6&sektion=8">traceroute6(8)</a>
1.582 deraadt 103: <li>Fix ADMtek identity crisis in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dc&sektion=4">dc(4)</a>.
104: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ftpd&sektion=8">ftpd(8)</a> make sure that <b>-h</b> does high port binding in EPSV.
1.580 deraadt 105: <li>Correct ENI_SALEN case in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getnameinfo&sektion=3">getnameinfo(3)</a>.
106: <li>Correct <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getnameinfo&sektion=3">getnameinfo(3)</a> behaviour against invalid sockaddr.<br>
107: <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
1.578 deraadt 108: <li>Better fix for the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pcvt&sektion=4">pcvt(4)</a> scrolling region problem.
1.591 provos 109: <li>Grok Plan9 file systems in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fdisk&sektion=8">fdisk(8)</a>.
1.578 deraadt 110: <li>Merge newer <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ppp&sektion=8">ppp(8)</a> code.
111: <li>Do not add empty lines to history in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ftp&sektion=1">ftp(1)</a>.
1.591 provos 112: <li>Grok QNX file systems in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fdisk&sektion=8">fdisk(8)</a>.
1.577 deraadt 113: <li>Fix about 10 bugs in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ubsec&sektion=4">ubsec(4)</a>, which can now move a few packets before dying.
114: <li>Support multiple pid files in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=newsyslog&sektion=8">newsyslog(8)</a>.<br>
115: <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
1.581 espie 116: <li>On-going cleanup to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=make&sektion=1">make(1)</a>.
1.577 deraadt 117: <li>Add <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pci&sektion=4">pci(4)</a> routines for dealing with Cypress 82c693 chips.
118: <li>Minor cleanup to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pax&sektion=1">pax(1)</a>.
119: <li>Merge <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=chgrp&sektion=1">chgrp(1)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=chown&sektion=8">chown(8)</a> into <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=chmod&sektion=1">chmod(1)</a>, and provide backwards compat hard and soft links.
120: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xl&sektion=4">xl(4)</a>, add support for 3c656, which is just the 3c575 + 56k modem.
1.576 deraadt 121: <li><font color=#e00000><strong>SECURITY ISSUE: A serious bug in isakmpd(8) policy handling wherein policy verification could be completely bypassed in isakmpd.<br>
122: <a href=errata.html#isakmpd>A patch is available</a></strong></font>.<br>
123: <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
1.577 deraadt 124: <li>Merge to new <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a>.
1.578 deraadt 125: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">OpenSSH</a> is now at version 2.1.1<br>
126: <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
1.576 deraadt 127: <li><font color=#e00000><strong>RELIABILITY FIX: Avoid extra vrele in msdosfs, which would lead to a panic in some operations.<br>
128: <a href=errata.html#msdosfs>A patch is available</a></strong></font>.<br>
129: <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
130: <li><font color=#e00000><strong>RELIABILITY FIX: Permit NFS export of CDs without panicing the system.<br>
131: <a href=errata.html#cd9660>A patch is available</a></strong></font>.<br>
132: <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
1.577 deraadt 133: <li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ping6&sektion=8">ping6(8)</a> -w option.
1.588 mickey 134: <li>Let flags in kernel <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=config&sektion=8">config(8)</a> specify apm protocol version and other operation modes for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=apm&sektion=4">apm(4)</a>, for machines apm fails on.
1.572 deraadt 135: <li>Change amiga ports loadbsd command to act more like other bsd loaders.
1.577 deraadt 136: <li>Add <strong>-iname</strong> support to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=find&sektion=1">find(1)</a>.
137: <li>Sort option list in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=find&sektion=1">find(1)</a>; oops, "-and" was broken.
138: <li>Catch a <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=malloc&sektion=3">malloc(3)</a> failure in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=paste&sektion=1">paste(1)</a>.
139: <li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=linux_compat&sektion=8">linux_compat(8)</a> [gs]etrlimit emulation.
140: <li>Update <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ti&sektion=4">ti(4)</a> to support newer cards with more memory.
141: <li>Kernel <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=malloc&sektion=9">malloc(9)</a> debug code.
1.569 ericj 142: <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=quot&sektion=1">quot(1)</a> work when passed mount points.
143: <li>Fix stack mishandling bugs in i387 libm, in particular, in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=exp&sektion=3">exp(3)</a> and friends.
144: <li>Be more careful about tuples in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pcmcia&sektion=4">pcmcia(4)</a>.
1.573 espie 145: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=gcc&sektion=1">gcc 2.95.3 (pre-release)</a>
1.569 ericj 146: <li>Busify <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=eg&sektion=4">eg(4)</a>, to avoid conflict with ne2000 at 0x300.
1.576 deraadt 147: <li><font color=#e00000><strong>SECURITY ISSUE: Do not use the (non-default) <i>UseLogin</i> option in OpenSSH 2.1.*, it has a hole on other operating systems and does not work right in OpenBSD.<br>
148: <a href=errata.html#uselogin>Update to OpenSSH 2.1.1 or later, or simply avoid using UseLogin</a></strong></font>.<br>
149: <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
1.585 deraadt 150: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sudo&sektion=8">sudo 1.6.3p4</a>
1.569 ericj 151: <li>Fix a kernel race in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=exit&sektion=2">exit(2)</a>.
152: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cut&sektion=1">cut(1)</a> deal with last input line not containing a newline
153: <li>One byte overflow in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=systat&sektion=8">systat(8)</a>.
1.583 miod 154: <li>Add <strong>D</strong> and <strong>z</strong> commands to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=disklabel&sektion=8">disklabel(8)</a> to use the default partition or zero it.
1.569 ericj 155: <li>A SIGCHLD fix in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cron&sektion=8">cron(8)</a>.
156: <li>More work on <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ubsec&sektion=4">ubsec(4)</a>.
157: <li>Bug fixes to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=spif&sektion=4">spif(4)</a>.
1.567 deraadt 158: <li>Bridge packets before vlan'ing them.
1.569 ericj 159: <li>Fix a subtle bug in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xe&sektion=4">xe(4)</a> which had a number of side effects.
160: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a>, fix login count failures in SSH2 support.
1.567 deraadt 161: <li>Whack packet m_recvif field on bridged packets, permitting ipnat to work with the bridge.
1.569 ericj 162: <li>More visible /tmp file (and failure removal) in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=makewhatis&sektion=8">makewhatis(8)</a>.
163: <li>Be more careful reading panic string from core in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=savecore&sektion=8">savecore(8)</a>.
164: <li>Many other changes to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>.
165: <li>Fix short malloc in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=faithd&sektion=8">faithd(8)</a>.
1.591 provos 166: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>, permit logins if temporary file systems are full.
1.569 ericj 167: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ich&sektion=4">ich(4)</a> audio driver onboard the Intel 810/820/440MX-based machines.
168: <li>Support ax88190 in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ne&sektion=4">ne(4)</a>.
169: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=apm&sektion=4">apm(4)</a> the time is kept in hours, not minutes.
1.585 deraadt 170: <li>Add <strong>-A</strong> support to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>.
1.569 ericj 171: <li>Support for 3c574 and 3CCFEM556BI <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pcmcia&sektion=4">pcmcia(4)</a> in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ep&sektion=4">ep(4)</a>.
1.566 deraadt 172: <li>A start at documenting what goes on inside <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=config&sektion=8">config(8)</a> files.
173: <li>Enable <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mg&sektion=1">mg(1)</a>.
174: <li>Space treatment in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ipcs&sektion=1">ipcs(1)</a>.
175: <li>Do not treat <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bind&sektion=2">bind(2)</a> with <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ip&sektion=4">IPv4</a> mapped address in a special way.
176: <li>Creation of 2.7-stable release, see our <a href="stable.html">page describing it</a>.
177: <li>Convert <a href="amiga.html">amiga</a> port to UVM.
1.564 ericj 178: <li>Arrange to have <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ahc&sektion=4">ahc(4)</a> support Adaptec 2930CU.
1.576 deraadt 179: <li><font color=#e00000><strong>SECURITY ISSUE: It was possible to bypass the <i>learning</i> flag on a bridge.<br>
180: <a href=errata.html#bridge>A patch is available</a></strong></font>.<br>
181: <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
1.566 deraadt 182: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ftp&sektion=1">ftp(1)</a>, do not attach <i>Host:</i> directive if we are using the proxy.
1.563 deraadt 183: <li>Make almost all manual pages machine independent.
1.585 deraadt 184: <li><font color=#e00000><strong>DRIVER FIX: The <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isapnp&sektion=4">isapnp(4)</a> <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ef&sektion=4">ef(4)</a> driver failed to configure properly.<br>
1.576 deraadt 185: <a href=errata.html#ef>A patch is available</a></strong></font>.<br>
186: <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
1.585 deraadt 187: <li>Helper script cleanup in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=httpd&sektion=8">httpd(8)</a>.
188: <li><font color=#e00000><strong>SECURITY ISSUE: Update to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ipf&sektion=4">ipf 3.3.16</a>.<br>
1.576 deraadt 189: <a href=errata.html#ipf>A patch is available</a></strong></font>.<br>
190: <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
1.563 deraadt 191: <li>On i386, place extra byte at end of pcb so that the iomap works for last 8 ports.
1.585 deraadt 192: <li>Fix some key parsing routines in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>.
1.563 deraadt 193: <li>Permit detach of audio devices.
1.585 deraadt 194: <li>Properly configure multicast table in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wi&sektion=4">wi(4)</a>.
195: <li>Handle 64 bit architectures in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pstat&sektion=8">pstat(8)</a> -f.
196: <li>Update <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rtadvd&sektion=8">rtadvd(8)</a>.
1.591 provos 197: <li>Remove <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=nfsiod&sektion=8">nfsiod(8)</a> and replace it with an in-kernel thread based implementation.
1.585 deraadt 198: <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> X11 forwarding work on localhost.
1.563 deraadt 199: <li>Crank vnode use counts to 32 bits.
1.585 deraadt 200: <li>Correct <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ifconfig&sektion=8">ifconfig(8)</a> printing of gif physical address on non-IPV6 kernel.
1.576 deraadt 201: <li><font color=#e00000><strong> RELIABILITY FIX: Repair a routing table panic.<br>
202: <a href=errata.html#route>A patch is available</a></strong></font>.<br>
203: <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
1.585 deraadt 204: <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ancontrol&sektion=8">ancontrol(8)</a> act like our changed <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wicontrol&sektion=4">wicontrol(4)</a> semantics.
1.564 ericj 205: <li>Use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getifaddrs&sektion=3">getifaddrs(3)</a> in libc rpc code.
1.585 deraadt 206: <li>For <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=boot_config&sektion=8">boot_config(8)</a> code, save enable command in the history for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=config&sektion=8">config(8)</a>'s -eu updating.
1.594 deraadt 207: <li>Update multicasting support for IPV6.
1.585 deraadt 208: <li>Fix usage printing in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=passwd&sektion=1">passwd(1)</a>.
1.561 deraadt 209: <li>By default, do not vsync blank sparc cgsix(4) monitors, but provide a sysctl to do so.
210: <li>Start at a BlueSteel (Broadcom) 5[56]01 crypto accelerator driver.
1.564 ericj 211: <li>Accept empty shell specifications in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a>.
1.585 deraadt 212: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>, do non-blocking on ssh1 protocol sockets too.
213: <li>Some additions to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=keynote&sektion=3">keynote(3)</a>.
1.561 deraadt 214: <li>Crank rt_refcnt to 32 bits.
215: <li>Supply entropy from i386 mouse drivers to the kernel random number generator.
1.585 deraadt 216: <li>Correct p2p interface address handling and various other bugs in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=route6d&sektion=8">route6d(8)</a>.
1.561 deraadt 217: <li>Few more tweaks to pcvt termcap definition.
218: <li>Ensure SIOCSETVLAN gets a valid vlan tag.
1.585 deraadt 219: <li>After <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ftp&sektion=1">ftp(1)</a> finishes downloading, change progress meter to show the total elapsed time.
220: <li>Handle 0-size files in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ftp&sektion=1">ftp(1)</a>'s progress meter.
221: <li>Parse RFC2732 ftp URLs in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ftp&sektion=1">ftp(1)</a>.
1.594 deraadt 222: <li>In IPV6, perform NUD on p2p link, only if the destination/gateway is real neighbor.
1.580 deraadt 223: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getaddrinfo&sektion=3">getaddrinfo(3)</a>, translate DNS error code into getaddrinfo error code (EAI_xxx).<br>
224: <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
1.576 deraadt 225: <li><font color=#e00000><strong> RELIABILITY FIX: Parse IPv4 options more carefully.<br>
226: <a href=errata.html#ipopts>A patch is available</a></strong></font>.<br>
227: <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
1.585 deraadt 228: <li>Translate DNS error codes in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getaddrinfo&sektion=3">getaddrinfo(3)</a>.
229: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cardbus&sektion=4">cardbus(4)</a> <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=com&sektion=4">com(4)</a> driver.
1.561 deraadt 230: <li>Support debugging libraries via DEBUGLIBS in /etc/mk.conf.
231: <li>Driver for tcic(4) style pcmcia adapters.
1.585 deraadt 232: <li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ipsec&sektion=4">ipsec(4)</a> ESP sanity checks that caused really short packets to be dropped. Only icmp was affected.
1.422 deraadt 233: </ul>
234: <p>
1.203 deraadt 235:
1.95 deraadt 236: This list mentions mostly platform-independent changes. For a list of changes
237: made in a particular platform, please check the page for that platform. If you
238: find them not listed there, the changes are either (1) not being documented or
239: (2) are documented here.<br><br>
1.14 deraadt 240:
241: <hr>
1.424 deraadt 242: <p>
243: <h3>
1.477 deraadt 244: <a href=plus20.html>For changes leading up to OpenBSD 2.0, click here</a>.<br>
245: <a href=plus21.html>For changes leading up to OpenBSD 2.1, click here</a>.<br>
246: <a href=plus22.html>For changes leading up to OpenBSD 2.2, click here</a>.<br>
247: <a href=plus23.html>For changes leading up to OpenBSD 2.3, click here</a>.<br>
248: <a href=plus24.html>For changes leading up to OpenBSD 2.4, click here</a>.<br>
249: <a href=plus25.html>For changes leading up to OpenBSD 2.5, click here</a>.<br>
250: <a href=plus26.html>For changes leading up to OpenBSD 2.6, click here</a>.<br>
1.560 deraadt 251: <a href=plus27.html>For changes leading up to OpenBSD 2.7, click here</a>.<br>
1.424 deraadt 252: <a href=plus.html>For changes in OpenBSD-current, click here</a>.
253: <br>
254: </h3>
255:
256: <hr>
1.292 pauls 257: <a href="index.html"><img height=24 width=24 src=back.gif border=0 alt=OpenBSD></a>
1.14 deraadt 258: <a href=mailto:www@openbsd.org>www@openbsd.org</a>
1.594 deraadt 259: <br><small>$OpenBSD: plus.html,v 1.593 2000/06/18 02:20:45 jason Exp $</small>
1.14 deraadt 260:
261: </body>
262: </html>
![[BACK]](/icons/back.gif){kind=icon}
Return to plus.html CVS log ![[TXT]](/icons/text.gif){kind=icon}
![[DIR]](/icons/dir.gif){kind=icon}
Up to [local] / www