Annotation of www/plus.html, Revision 1.600
1.14 deraadt 1: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML Strict//EN">
2: <html>
3: <head>
1.424 deraadt 4: <title>OpenBSD-current changes</title>
1.14 deraadt 5: <link rev=made href=mailto:www@openbsd.org>
6: <meta name="resource-type" content="document">
7: <meta name="description" content="the main OpenBSD page">
8: <meta name="keywords" content="openbsd,main">
9: <meta name="distribution" content="global">
1.59 deraadt 10: <meta name="copyright" content="This document copyright 1996 by OpenBSD.">
1.14 deraadt 11: </head>
12:
1.64 downsj 13: <BODY BGCOLOR="#FFFFFF" TEXT="#000000" LINK="#23238E">
1.14 deraadt 14:
1.292 pauls 15: <img alt="[OpenBSD]" height=30 width=141 SRC="images/smalltitle.gif">
1.64 downsj 16: <p>
1.562 deraadt 17: <h2><font color=#e00000>Changes made between OpenBSD 2.7 and OpenBSD-current</font><hr></h2>
1.14 deraadt 18:
19: <p>
1.29 deraadt 20: This is a partial list of the major machine independent changes
21: (ie. these are the changes people ask about most often). Port
22: specific changes have also been made, and are sometimes mentioned
23: in the pages for the specific <a href=plat.html>ports</a> if you
1.392 deraadt 24: are interested in further port-specific details. Many ports
1.29 deraadt 25: have had architecture-specific enhancements relative to NetBSD,
26: but when they do not they certainly have plenty of platform-independent
1.490 ian 27: changes, starting with those listed below.
1.14 deraadt 28:
1.17 deraadt 29: <p>
1.185 deraadt 30: Note: <font color=#e00000>Problems for which patches exist are marked in red</font>.
31:
32: <p>
1.186 deraadt 33: <h3>
1.477 deraadt 34: <a href=plus20.html>For changes leading up to OpenBSD 2.0, click here</a>.<br>
35: <a href=plus21.html>For changes leading up to OpenBSD 2.1, click here</a>.<br>
36: <a href=plus22.html>For changes leading up to OpenBSD 2.2, click here</a>.<br>
37: <a href=plus23.html>For changes leading up to OpenBSD 2.3, click here</a>.<br>
38: <a href=plus24.html>For changes leading up to OpenBSD 2.4, click here</a>.<br>
39: <a href=plus25.html>For changes leading up to OpenBSD 2.5, click here</a>.<br>
40: <a href=plus26.html>For changes leading up to OpenBSD 2.6, click here</a>.<br>
1.560 deraadt 41: <a href=plus27.html>For changes leading up to OpenBSD 2.7, click here</a>.<br>
1.422 deraadt 42: <br>
1.186 deraadt 43: </h3>
44:
45: <hr>
1.280 deraadt 46:
1.186 deraadt 47: <p>
1.560 deraadt 48: <h3><font color=#0000e0>OpenBSD 2.7 to be released June 15, 2000.<p>
1.480 deraadt 49: We are working on OpenBSD-current.</font></h3><p>
1.422 deraadt 50: <ul>
1.600 ! provos 51: <li>allow <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=vnconfig&sektion=8">vnconfig(8)</a> to turn on encryption for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=vnd&sektion=4">vnd(4)</a>.
1.597 deraadt 52: <li>de-#ifdef <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bpf&sektion=4">bpf(4)</a> code.
53: <li>Start at fixing <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ubsec&sektion=4">ubsec(4)</a> AH support.
1.599 ericj 54: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a> update.
55: <li>Honor scopeid in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=inetd&sektion=8">inetd(8)</a>.
56: <li>Fix sun3 pmap, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=MAKEDEV&sektion=8">MAKEDEV</a>, and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=disktab&sektion=5">disktab(5)</a> bugs.
1.597 deraadt 57: <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> userauth+pubkey interoperate with ssh.com-2.2.0.
58: <li>More bugs in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=an&sektion=8">an(4)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wi&sektion=8">wi(4)</a>. Anyone see a trend?<br>
59: <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
60: <li>Kill <b>/etc/ifaliases</b> in favor of the functionality in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=hostname.if&sektion=5">hostname.if(5)</a>.
61: <li>Fix more pesky buffer overflows in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ancontrol&sektion=8">ancontrol(8)</a>.
62: <li>Import <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mount_tcfs&sektion=8">tcfs</a> userland tools: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcfsuse&sektion=1">tcfsuse(1)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcfsmng&sektion=8">tcfsmng(8)</a>.
63: <li>Fix pesky buffer overflows in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ancontrol&sektion=8">ancontrol(8)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wicontrol&sektion=8">wicontrol(8)</a>.
64: <li>Fix many more things in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mount_tcfs&sektion=8">tcfs</a>.
65: <li>Parse <b>${local_rcconf}</b> in /etc/rc.conf instead of /etc/netstart.
66: <li>More fixes to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=an&sektion=4">an(4)</a>.<br>
67: <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
1.598 espie 68: <li>Modify <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=vmstat&sektion=8">vmstat(8)</a>'s <b>-f</b> option to show kernel threads as yet another kind of process.
1.597 deraadt 69: <li>Modify <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ps&sektion=1">ps(1)</a> to hide system processes unless <b>-k</b> is given.
70: <li>Mark kernel threads as system processes.
71: <li>Cleanup some things in sparc <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=hme&sektion=4">hme(4)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=qe&sektion=4">qe(4)</a>.
72: <li>Numerous other IPV6 kernel changes.<br>
73: Too many for me to list in detail, but Itojun is busy in the other room hunched over a laptop screen with Angelos, and we are sure more are coming.
74: <li>Do not mess with non-blocking mode on ttys in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>.
1.596 jason 75: <li>Repair some multicast problems with IPV6.<br>
76: <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
1.597 deraadt 77: <li>Fake FIONBIO and FIOASYNC in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=random&sektion=4">random(4)</a>.
1.595 deraadt 78: <li>Support i82559ER in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fxp&sektion=4">fxp(4)</a>.
79: <li>Improve handling of RIP in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcpdump&sektion=8">tcpdump(8)</a>.
80: <li>Add Rijndael support to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ipsec&sektion=4">ipsec(4)</a>.
81: <li>Import <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pppoe&sektion=8">pppoe(8)</a>.
1.599 ericj 82: <li>Fix some bugs in the IPSEC <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getsockopt&sektion=2">getsockopt(2)/setsockopt(2)</a> API regarding sizeof(int) vs sizeof(u_char).
1.594 deraadt 83: <li>Support IPV6 in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=identd&sektion=8">identd(8)</a>.
84: <li>Move IPV6 mbuf alignment requirements into input routine, removing the last performance critical one in loopback.
85: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ubsec&sektion=4">ubsec(4)</a> fixes to queue requests to the hardware properly. The device can now do ipsec with itself over loopback or the network, but something is still mangled about the actual ipsec packets.
86: <li><font color=#e00000><strong>SECURITY ISSUE: Two localhost denial of service problems in the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=an&sektion=4">an(4)</a> Aironet Communications 4500/4800 IEEE 802.11DS driver. One bug prevents <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ancontrol&sektion=8">ancontrol(8)</a> from working correctly, instead causing a panic, while the other allows unauthorized users to change settings.<br>
87: <a href=errata.html#if_an>A patch is available</a></strong></font>.<br>
88: <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
89: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=crypto&sektion=9">crypto(9)</a> kernel thread permits hardware crypto devices to run at any spl they prefer.
90: <li>Initial <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">OpenSSH</a> support for ssh.com's 2.2.0.
1.599 ericj 91: <li>For <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=setsockopt&sektion=2">setsockopt(2)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getsockopt&sektion=2">getsockopt(2)</a>, do not assume non-PF_INET6 address family to be PF_INET.
1.591 provos 92: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a>, implement bug compatibility with ssh-2.0.13.
1.590 deraadt 93: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>, include <b>=</b> in WHITESPACE, permitting commands like <b>ssh -o keyword=argument</b>.
1.594 deraadt 94: <li>Enable IPV6 support in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sendmail&sektion=8">sendmail(8)</a>.
1.590 deraadt 95: <li>Change ipsec processing sequence to handle inner and outer layers much better.
96: <li>Add support for SSH2 subsystems in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a>.
1.599 ericj 97: <li>On <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ifconfig&sektion=8">ifconfig(8)</a> down & up operations, mark all radix tree routes down or up for the specified interface.
1.591 provos 98: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mount_ffs&sektion=8">mount_ffs(8)</a>, permit the <b>-f</b> command to mount dirty file systems. This is dangerous, but makes more sense now that we are moving towards soft update file systems, where the inherent danger is much less.
1.590 deraadt 99: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ftpd&sektion=8">ftpd(8)</a>, make <b>-u</b> block the chmod client command.
100: <li>Allow extended server banners in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a>.
101: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mount&sektion=8">mount(8)</a>, -o force is not a negative option.
102: <li>Add support for AMD 53c974 scsi chipset.
1.592 provos 103: <li>Import of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mount_tcfs&sektion=8">tcfs</a> into the kernel, a file content crypto file system.
1.590 deraadt 104: <li>Remove traffic-time debugging messages in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>.
105: <li>Repair small list-based errors and uglinesses in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=make&sektion=1">make(1)</a>.
106: <li>Commonalize MIN() and MAX() macros inside the kernel.
107: <li>Use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=memcmp&sektion=3">memcmp(3)</a> in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bridge&sektion=4">bridge(4)</a> to fix a hashing algorithm error.<br>
1.593 jason 108: <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
1.591 provos 109: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=memcmp&sektion=3">memcmp(3)</a> in the kernel as well, since implementing it in terms of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bcmp&sektion=3">bcmp(3)</a> is very wrong.
1.590 deraadt 110: <li>Update vnode flag printing in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pstat&sektion=8">pstat(8)</a>.
111: <li>Do not whack directory in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=user&sektion=8">user(8)</a>.<br>
1.594 deraadt 112: <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
1.590 deraadt 113: <li>Hardware random number generator in i840 also works, like i810.
114: <li>Fix an ESP status message in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=netstat&sektion=1">netstat(1)</a>.
115: <li>Put RSA into our <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&sektion=3">ssl(3)</a> tree. Since our next release is not till after the patent expires, it's OK.
1.589 deraadt 116: <li>Split sysctl information for swapencrypt into an tree, and add more gunk.
1.586 deraadt 117: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ftpd&sektion=8">ftpd(8)</a> correct STAT command output for LPSV output.
118: <li>Correct an <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ipsec&sektion=4">ipsec</a> esp bug.
119: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ftp&sektion=1">ftp(1)</a> make both <b>ls</b> and </b>dir</b> send a <b>LIST</b> command.
120: <li>Minor bug fixes and optimizations in <b>/etc/rc</b>.
121: <li>Update of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ppp&sektion=8">ppp(8)</a>.
1.587 deraadt 122: <li>Put an upper bound on transaction queue of the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ubsec&sektion=4">ubsec(4)</a>.
1.594 deraadt 123: <li>Correct source length calculation in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=hifn&sektion=4">hifn(4)</a>.<br>
124: <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
1.599 ericj 125: <li>Initial import of ELF <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rtld&sektion=1">ld.so</a>, for powerpc initially.
1.586 deraadt 126: <li>Correct secondary mbuf setup in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=hifn&sektion=4">hifn(4)</a>.
1.584 deraadt 127: <li>Broadcom Bluesteel 5x0x <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ubsec&sektion=4">ubsec(4)</a> crypto cards now supports ESP 3DES modes properly. No AH or MAC stuff yet.
1.582 deraadt 128: <li>Make flags field in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=newsyslog&sektion=8">newsyslog(8)</a> files optional.
1.585 deraadt 129: <li>Modifications to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=traceroute6&sektion=8">traceroute6(8)</a>
1.582 deraadt 130: <li>Fix ADMtek identity crisis in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dc&sektion=4">dc(4)</a>.
131: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ftpd&sektion=8">ftpd(8)</a> make sure that <b>-h</b> does high port binding in EPSV.
1.580 deraadt 132: <li>Correct ENI_SALEN case in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getnameinfo&sektion=3">getnameinfo(3)</a>.
133: <li>Correct <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getnameinfo&sektion=3">getnameinfo(3)</a> behaviour against invalid sockaddr.<br>
134: <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
1.578 deraadt 135: <li>Better fix for the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pcvt&sektion=4">pcvt(4)</a> scrolling region problem.
1.591 provos 136: <li>Grok Plan9 file systems in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fdisk&sektion=8">fdisk(8)</a>.
1.578 deraadt 137: <li>Merge newer <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ppp&sektion=8">ppp(8)</a> code.
138: <li>Do not add empty lines to history in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ftp&sektion=1">ftp(1)</a>.
1.591 provos 139: <li>Grok QNX file systems in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fdisk&sektion=8">fdisk(8)</a>.
1.577 deraadt 140: <li>Fix about 10 bugs in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ubsec&sektion=4">ubsec(4)</a>, which can now move a few packets before dying.
141: <li>Support multiple pid files in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=newsyslog&sektion=8">newsyslog(8)</a>.<br>
142: <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
1.581 espie 143: <li>On-going cleanup to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=make&sektion=1">make(1)</a>.
1.577 deraadt 144: <li>Add <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pci&sektion=4">pci(4)</a> routines for dealing with Cypress 82c693 chips.
145: <li>Minor cleanup to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pax&sektion=1">pax(1)</a>.
146: <li>Merge <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=chgrp&sektion=1">chgrp(1)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=chown&sektion=8">chown(8)</a> into <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=chmod&sektion=1">chmod(1)</a>, and provide backwards compat hard and soft links.
147: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xl&sektion=4">xl(4)</a>, add support for 3c656, which is just the 3c575 + 56k modem.
1.576 deraadt 148: <li><font color=#e00000><strong>SECURITY ISSUE: A serious bug in isakmpd(8) policy handling wherein policy verification could be completely bypassed in isakmpd.<br>
149: <a href=errata.html#isakmpd>A patch is available</a></strong></font>.<br>
150: <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
1.577 deraadt 151: <li>Merge to new <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a>.
1.578 deraadt 152: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">OpenSSH</a> is now at version 2.1.1<br>
153: <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
1.576 deraadt 154: <li><font color=#e00000><strong>RELIABILITY FIX: Avoid extra vrele in msdosfs, which would lead to a panic in some operations.<br>
155: <a href=errata.html#msdosfs>A patch is available</a></strong></font>.<br>
156: <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
157: <li><font color=#e00000><strong>RELIABILITY FIX: Permit NFS export of CDs without panicing the system.<br>
158: <a href=errata.html#cd9660>A patch is available</a></strong></font>.<br>
159: <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
1.577 deraadt 160: <li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ping6&sektion=8">ping6(8)</a> -w option.
1.588 mickey 161: <li>Let flags in kernel <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=config&sektion=8">config(8)</a> specify apm protocol version and other operation modes for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=apm&sektion=4">apm(4)</a>, for machines apm fails on.
1.572 deraadt 162: <li>Change amiga ports loadbsd command to act more like other bsd loaders.
1.577 deraadt 163: <li>Add <strong>-iname</strong> support to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=find&sektion=1">find(1)</a>.
164: <li>Sort option list in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=find&sektion=1">find(1)</a>; oops, "-and" was broken.
165: <li>Catch a <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=malloc&sektion=3">malloc(3)</a> failure in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=paste&sektion=1">paste(1)</a>.
166: <li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=linux_compat&sektion=8">linux_compat(8)</a> [gs]etrlimit emulation.
167: <li>Update <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ti&sektion=4">ti(4)</a> to support newer cards with more memory.
168: <li>Kernel <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=malloc&sektion=9">malloc(9)</a> debug code.
1.569 ericj 169: <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=quot&sektion=1">quot(1)</a> work when passed mount points.
170: <li>Fix stack mishandling bugs in i387 libm, in particular, in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=exp&sektion=3">exp(3)</a> and friends.
171: <li>Be more careful about tuples in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pcmcia&sektion=4">pcmcia(4)</a>.
1.573 espie 172: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=gcc&sektion=1">gcc 2.95.3 (pre-release)</a>
1.569 ericj 173: <li>Busify <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=eg&sektion=4">eg(4)</a>, to avoid conflict with ne2000 at 0x300.
1.576 deraadt 174: <li><font color=#e00000><strong>SECURITY ISSUE: Do not use the (non-default) <i>UseLogin</i> option in OpenSSH 2.1.*, it has a hole on other operating systems and does not work right in OpenBSD.<br>
175: <a href=errata.html#uselogin>Update to OpenSSH 2.1.1 or later, or simply avoid using UseLogin</a></strong></font>.<br>
176: <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
1.585 deraadt 177: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sudo&sektion=8">sudo 1.6.3p4</a>
1.569 ericj 178: <li>Fix a kernel race in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=exit&sektion=2">exit(2)</a>.
179: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cut&sektion=1">cut(1)</a> deal with last input line not containing a newline
180: <li>One byte overflow in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=systat&sektion=8">systat(8)</a>.
1.583 miod 181: <li>Add <strong>D</strong> and <strong>z</strong> commands to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=disklabel&sektion=8">disklabel(8)</a> to use the default partition or zero it.
1.569 ericj 182: <li>A SIGCHLD fix in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cron&sektion=8">cron(8)</a>.
183: <li>More work on <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ubsec&sektion=4">ubsec(4)</a>.
184: <li>Bug fixes to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=spif&sektion=4">spif(4)</a>.
1.567 deraadt 185: <li>Bridge packets before vlan'ing them.
1.569 ericj 186: <li>Fix a subtle bug in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xe&sektion=4">xe(4)</a> which had a number of side effects.
187: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a>, fix login count failures in SSH2 support.
1.567 deraadt 188: <li>Whack packet m_recvif field on bridged packets, permitting ipnat to work with the bridge.
1.569 ericj 189: <li>More visible /tmp file (and failure removal) in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=makewhatis&sektion=8">makewhatis(8)</a>.
190: <li>Be more careful reading panic string from core in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=savecore&sektion=8">savecore(8)</a>.
191: <li>Many other changes to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>.
192: <li>Fix short malloc in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=faithd&sektion=8">faithd(8)</a>.
1.591 provos 193: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>, permit logins if temporary file systems are full.
1.569 ericj 194: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ich&sektion=4">ich(4)</a> audio driver onboard the Intel 810/820/440MX-based machines.
195: <li>Support ax88190 in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ne&sektion=4">ne(4)</a>.
196: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=apm&sektion=4">apm(4)</a> the time is kept in hours, not minutes.
1.585 deraadt 197: <li>Add <strong>-A</strong> support to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>.
1.569 ericj 198: <li>Support for 3c574 and 3CCFEM556BI <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pcmcia&sektion=4">pcmcia(4)</a> in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ep&sektion=4">ep(4)</a>.
1.566 deraadt 199: <li>A start at documenting what goes on inside <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=config&sektion=8">config(8)</a> files.
200: <li>Enable <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mg&sektion=1">mg(1)</a>.
201: <li>Space treatment in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ipcs&sektion=1">ipcs(1)</a>.
202: <li>Do not treat <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bind&sektion=2">bind(2)</a> with <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ip&sektion=4">IPv4</a> mapped address in a special way.
203: <li>Creation of 2.7-stable release, see our <a href="stable.html">page describing it</a>.
204: <li>Convert <a href="amiga.html">amiga</a> port to UVM.
1.564 ericj 205: <li>Arrange to have <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ahc&sektion=4">ahc(4)</a> support Adaptec 2930CU.
1.576 deraadt 206: <li><font color=#e00000><strong>SECURITY ISSUE: It was possible to bypass the <i>learning</i> flag on a bridge.<br>
207: <a href=errata.html#bridge>A patch is available</a></strong></font>.<br>
208: <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
1.566 deraadt 209: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ftp&sektion=1">ftp(1)</a>, do not attach <i>Host:</i> directive if we are using the proxy.
1.563 deraadt 210: <li>Make almost all manual pages machine independent.
1.585 deraadt 211: <li><font color=#e00000><strong>DRIVER FIX: The <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isapnp&sektion=4">isapnp(4)</a> <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ef&sektion=4">ef(4)</a> driver failed to configure properly.<br>
1.576 deraadt 212: <a href=errata.html#ef>A patch is available</a></strong></font>.<br>
213: <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
1.585 deraadt 214: <li>Helper script cleanup in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=httpd&sektion=8">httpd(8)</a>.
215: <li><font color=#e00000><strong>SECURITY ISSUE: Update to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ipf&sektion=4">ipf 3.3.16</a>.<br>
1.576 deraadt 216: <a href=errata.html#ipf>A patch is available</a></strong></font>.<br>
217: <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
1.563 deraadt 218: <li>On i386, place extra byte at end of pcb so that the iomap works for last 8 ports.
1.585 deraadt 219: <li>Fix some key parsing routines in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>.
1.563 deraadt 220: <li>Permit detach of audio devices.
1.585 deraadt 221: <li>Properly configure multicast table in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wi&sektion=4">wi(4)</a>.
222: <li>Handle 64 bit architectures in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pstat&sektion=8">pstat(8)</a> -f.
223: <li>Update <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rtadvd&sektion=8">rtadvd(8)</a>.
1.591 provos 224: <li>Remove <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=nfsiod&sektion=8">nfsiod(8)</a> and replace it with an in-kernel thread based implementation.
1.585 deraadt 225: <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> X11 forwarding work on localhost.
1.563 deraadt 226: <li>Crank vnode use counts to 32 bits.
1.585 deraadt 227: <li>Correct <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ifconfig&sektion=8">ifconfig(8)</a> printing of gif physical address on non-IPV6 kernel.
1.576 deraadt 228: <li><font color=#e00000><strong> RELIABILITY FIX: Repair a routing table panic.<br>
229: <a href=errata.html#route>A patch is available</a></strong></font>.<br>
230: <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
1.585 deraadt 231: <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ancontrol&sektion=8">ancontrol(8)</a> act like our changed <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wicontrol&sektion=4">wicontrol(4)</a> semantics.
1.564 ericj 232: <li>Use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getifaddrs&sektion=3">getifaddrs(3)</a> in libc rpc code.
1.585 deraadt 233: <li>For <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=boot_config&sektion=8">boot_config(8)</a> code, save enable command in the history for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=config&sektion=8">config(8)</a>'s -eu updating.
1.594 deraadt 234: <li>Update multicasting support for IPV6.
1.585 deraadt 235: <li>Fix usage printing in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=passwd&sektion=1">passwd(1)</a>.
1.561 deraadt 236: <li>By default, do not vsync blank sparc cgsix(4) monitors, but provide a sysctl to do so.
237: <li>Start at a BlueSteel (Broadcom) 5[56]01 crypto accelerator driver.
1.564 ericj 238: <li>Accept empty shell specifications in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a>.
1.585 deraadt 239: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>, do non-blocking on ssh1 protocol sockets too.
240: <li>Some additions to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=keynote&sektion=3">keynote(3)</a>.
1.561 deraadt 241: <li>Crank rt_refcnt to 32 bits.
242: <li>Supply entropy from i386 mouse drivers to the kernel random number generator.
1.585 deraadt 243: <li>Correct p2p interface address handling and various other bugs in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=route6d&sektion=8">route6d(8)</a>.
1.561 deraadt 244: <li>Few more tweaks to pcvt termcap definition.
245: <li>Ensure SIOCSETVLAN gets a valid vlan tag.
1.585 deraadt 246: <li>After <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ftp&sektion=1">ftp(1)</a> finishes downloading, change progress meter to show the total elapsed time.
247: <li>Handle 0-size files in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ftp&sektion=1">ftp(1)</a>'s progress meter.
248: <li>Parse RFC2732 ftp URLs in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ftp&sektion=1">ftp(1)</a>.
1.594 deraadt 249: <li>In IPV6, perform NUD on p2p link, only if the destination/gateway is real neighbor.
1.580 deraadt 250: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getaddrinfo&sektion=3">getaddrinfo(3)</a>, translate DNS error code into getaddrinfo error code (EAI_xxx).<br>
251: <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
1.576 deraadt 252: <li><font color=#e00000><strong> RELIABILITY FIX: Parse IPv4 options more carefully.<br>
253: <a href=errata.html#ipopts>A patch is available</a></strong></font>.<br>
254: <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
1.585 deraadt 255: <li>Translate DNS error codes in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getaddrinfo&sektion=3">getaddrinfo(3)</a>.
256: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cardbus&sektion=4">cardbus(4)</a> <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=com&sektion=4">com(4)</a> driver.
1.561 deraadt 257: <li>Support debugging libraries via DEBUGLIBS in /etc/mk.conf.
258: <li>Driver for tcic(4) style pcmcia adapters.
1.585 deraadt 259: <li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ipsec&sektion=4">ipsec(4)</a> ESP sanity checks that caused really short packets to be dropped. Only icmp was affected.
1.422 deraadt 260: </ul>
261: <p>
1.203 deraadt 262:
1.95 deraadt 263: This list mentions mostly platform-independent changes. For a list of changes
264: made in a particular platform, please check the page for that platform. If you
265: find them not listed there, the changes are either (1) not being documented or
266: (2) are documented here.<br><br>
1.14 deraadt 267:
268: <hr>
1.424 deraadt 269: <p>
270: <h3>
1.477 deraadt 271: <a href=plus20.html>For changes leading up to OpenBSD 2.0, click here</a>.<br>
272: <a href=plus21.html>For changes leading up to OpenBSD 2.1, click here</a>.<br>
273: <a href=plus22.html>For changes leading up to OpenBSD 2.2, click here</a>.<br>
274: <a href=plus23.html>For changes leading up to OpenBSD 2.3, click here</a>.<br>
275: <a href=plus24.html>For changes leading up to OpenBSD 2.4, click here</a>.<br>
276: <a href=plus25.html>For changes leading up to OpenBSD 2.5, click here</a>.<br>
277: <a href=plus26.html>For changes leading up to OpenBSD 2.6, click here</a>.<br>
1.560 deraadt 278: <a href=plus27.html>For changes leading up to OpenBSD 2.7, click here</a>.<br>
1.424 deraadt 279: <a href=plus.html>For changes in OpenBSD-current, click here</a>.
280: <br>
281: </h3>
282:
283: <hr>
1.292 pauls 284: <a href="index.html"><img height=24 width=24 src=back.gif border=0 alt=OpenBSD></a>
1.14 deraadt 285: <a href=mailto:www@openbsd.org>www@openbsd.org</a>
1.600 ! provos 286: <br><small>$OpenBSD: plus.html,v 1.599 2000/06/20 14:50:16 ericj Exp $</small>
1.14 deraadt 287:
288: </body>
289: </html>
![[BACK]](/icons/back.gif){kind=icon}
Return to plus.html CVS log ![[TXT]](/icons/text.gif){kind=icon}
![[DIR]](/icons/dir.gif){kind=icon}
Up to [local] / www