Annotation of www/plus.html, Revision 1.610
1.14 deraadt 1: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML Strict//EN">
2: <html>
3: <head>
1.424 deraadt 4: <title>OpenBSD-current changes</title>
1.14 deraadt 5: <link rev=made href=mailto:www@openbsd.org>
6: <meta name="resource-type" content="document">
7: <meta name="description" content="the main OpenBSD page">
8: <meta name="keywords" content="openbsd,main">
9: <meta name="distribution" content="global">
1.59 deraadt 10: <meta name="copyright" content="This document copyright 1996 by OpenBSD.">
1.14 deraadt 11: </head>
12:
1.64 downsj 13: <BODY BGCOLOR="#FFFFFF" TEXT="#000000" LINK="#23238E">
1.14 deraadt 14:
1.292 pauls 15: <img alt="[OpenBSD]" height=30 width=141 SRC="images/smalltitle.gif">
1.64 downsj 16: <p>
1.562 deraadt 17: <h2><font color=#e00000>Changes made between OpenBSD 2.7 and OpenBSD-current</font><hr></h2>
1.14 deraadt 18:
19: <p>
1.29 deraadt 20: This is a partial list of the major machine independent changes
1.602 aaron 21: (i.e., these are the changes people ask about most often). Port
1.29 deraadt 22: specific changes have also been made, and are sometimes mentioned
23: in the pages for the specific <a href=plat.html>ports</a> if you
1.392 deraadt 24: are interested in further port-specific details. Many ports
1.29 deraadt 25: have had architecture-specific enhancements relative to NetBSD,
26: but when they do not they certainly have plenty of platform-independent
1.490 ian 27: changes, starting with those listed below.
1.14 deraadt 28:
1.17 deraadt 29: <p>
1.185 deraadt 30: Note: <font color=#e00000>Problems for which patches exist are marked in red</font>.
31:
32: <p>
1.186 deraadt 33: <h3>
1.477 deraadt 34: <a href=plus20.html>For changes leading up to OpenBSD 2.0, click here</a>.<br>
35: <a href=plus21.html>For changes leading up to OpenBSD 2.1, click here</a>.<br>
36: <a href=plus22.html>For changes leading up to OpenBSD 2.2, click here</a>.<br>
37: <a href=plus23.html>For changes leading up to OpenBSD 2.3, click here</a>.<br>
38: <a href=plus24.html>For changes leading up to OpenBSD 2.4, click here</a>.<br>
39: <a href=plus25.html>For changes leading up to OpenBSD 2.5, click here</a>.<br>
40: <a href=plus26.html>For changes leading up to OpenBSD 2.6, click here</a>.<br>
1.560 deraadt 41: <a href=plus27.html>For changes leading up to OpenBSD 2.7, click here</a>.<br>
1.422 deraadt 42: <br>
1.186 deraadt 43: </h3>
44:
45: <hr>
1.280 deraadt 46:
1.186 deraadt 47: <p>
1.602 aaron 48: <h3><font color=#0000e0>OpenBSD 2.7 released (June 15, 2000).<p>
1.480 deraadt 49: We are working on OpenBSD-current.</font></h3><p>
1.422 deraadt 50: <ul>
1.609 deraadt 51: <li>In xl(4), add support for 3CCFE575BT and 3CCFEM656C.
52: <li>Import a regression suite for m4(1).
53: <li>In make(1), recognize <b>+cmd</b> as a command that should still execute in <b>make -n</b> mode.
54: <li>Correct giftunnel handling in ifconfig(8).
55: <li>New fix for the pcvt(4) scrolling region bug.<br>
56: <a href=errata.html#pcvt>A patch is available</a></strong></font>.<br>
57: <a href="stable.html"><font color=#00b000>[Should be applied to stable]</font></a>
58: <li>mod_ssl 2.6.4
59: <li>clcs(4) driver for the cs4280 Crystal Clear audio hardware found in some laptops.
60: <li>Make UVM work on the powerpc.
61: <li>Convert much kernel code to the new timeout API.
62: <li>Fix multicast hashing problem in xl(4)<br>
63: <a href=errata.html#xlhash>A patch is available</a></strong></font>.<br>
64: <a href="stable.html"><font color=#00b000>[Should be applied to stable]</font></a>
65: <li>Fix numerous more bugs in the games.
66: <li>Fix MAC address matching in pcap(3).
67: <li>Make the pcmcia ep(4) driver more friendly during detach.
68: <li>Fix bpf code in ray(4).
69: <li>For the err(3) family of calls and syslog(3), ensure that dynamic content never appears as the second argument -- use at least <b>%s</b>.
70: <li>Update adw(4) driver.
71: <li>Add creat64 and mmap64 system calls to linux emulation.
72: <li>Handle strtol(3) instead of atoi(3) in the <b>kill</b> implimentation in csh(1) and ksh(1).
73: <li>Fix COPTS vs CFLAGS issues in the source tree.
74: <li>Fix panic message from i386 in_cksum.
75: <li>Fix path to kerberos master key file.<br>
76: <a href="stable.html"><font color=#00b000>[Will be applied to stable]</font></a>
1.604 deraadt 77: <li><font color=#e00000><strong>SECURITY ISSUE: Stop libedit from opening the <b>.editrc</b> file in the current directory.<br>
78: <a href=errata.html#libedit>A patch is available</a></strong></font>.<br>
79: <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
1.603 deraadt 80: <li>Fix an infinite loop in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fsck_msdos&sektion=8">fsck_msdos(8)</a>.
81: <li>Fix some racy interaction between <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pcmcia&sektion=4">pcmcia(4)</a> insertion and suspends.
82: <li>Add <b>-U</b> option to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ldconfig&sektion=8">ldconfig(8)</a>.
83: <li>Fix a stupid bug in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=m4&sektion=1">m4(1)</a> argument handling.<br>
84: <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
85: <li>Repair stupid bugs in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ste&sektion=4">ste(4)</a>, which prevented it from working in 2.7 release.<br>
1.610 ! deraadt 86: <a href=errata.html#ste>A patch is available</a></strong></font>.<br> <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
1.603 deraadt 87: <li>Connection limitation code for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a>.
1.602 aaron 88: <li>Allow <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=vnd&sektion=4">svnd(4)</a> to work on sparse files.
1.603 deraadt 89: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pciide&sektion=4">pciide(4)</a>, support CMD 648/649 UDMA66 controllers, and also fix the Promise UDMA66 cable check code.
90: <li>ncurses 2000/6/10 update to <b>termtypes.master</b>.
91: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ne&sektion=4">ne(4)</a>, re-fix Linksys Combo PCMCIA EthernetCard (EC2T) after AX88190 broke it.
1.602 aaron 92: <li>Disable automatic <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=crash&sektion=8">crash(8)</a> dumps for swap encryption.
1.603 deraadt 93: <li><font color=#e00000><strong>SECURITY ISSUE: Be much more careful about dhclient(8)'s handling of external variables.<br>
94: <a href=errata.html#dhclient>A patch is available</a></strong></font>.<br>
95: <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
1.606 espie 96: <li>Implement svr4 emulation for getdents64, lstat64 and stat64.
1.608 fgsch 97: <li>Do not start snmpd by default if it is installed.
1.603 deraadt 98: <li>Link floppy binary against scrt0 instead, saving even more space.
1.606 espie 99: <li>Implement sort(1) as a shell function on the boot floppies, to save a lot of space.
1.603 deraadt 100: <li>Ensure sshd(8) does not misbehave if the skey key file is missing.
101: <li>Cleanups to tail(1).
102: <li>Significant performance improvements to make(1).
1.607 aaron 103: <li>Numerous more fixes to an(4), regarding bridging, ipv6, bpf logic, and pcmcia detach.
1.603 deraadt 104: <li>Newer ppp(8) code.
1.607 aaron 105: <li>Change dhcpd(8) so that it is not as susceptible to abandoning addresses.<br>
1.605 jason 106: <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
1.603 deraadt 107: <li>For crypted vnd(4), zero the key on unconfig.
108: <li>Kill the legacy vtrace(2) system call.
109: <li>Avoid using 3c905b-specific multicast hash code, it is buggy.<br>
110: <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
111: <li>IPv6 support in the resolver. The <b>nameserver</b> line can now take ipv6 addresses.
112: <li>Soft updates is now free.
113: <li>Add <b>epsv4</b> command to ftp(1), to disable <b>epsv</b> negotiations on IPv4 connections.
114: <li>Fix various bugs in ip gatewaying that angelos introduced.
115: <li>Sync with newed ndp(8).
1.602 aaron 116: <li>Allow <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=vnconfig&sektion=8">vnconfig(8)</a> to turn on encryption for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=vnd&sektion=4">vnd(4)</a>.
1.603 deraadt 117: <li>Fix bpf mishandlings in an(4).
118: <li>Avoid using IO port 0x370 on laptops for pcmcia(4), since some sound cards sometimes land there.
119: <li>On i386, if only one cpu family is specified, pass flags to the optimizer.
120: <li>Merge in new isakmpd(8) changes.
121: <li>Funnel crypto completion events via crypto_done(), not directly to the caller.
122: <li>Closer towards making some more sm(4) pcmcia(4) cards work.
123: <li>More verbose information for pppoe(8) in tcpdump(8).
124: <li>Teach ipv6 AH & ip-over-ip code to deal with ipv6 scoped addresses better.
125: <li>Initialize mtu/hlim for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=enc&sektion=4">enc(4)</a> so that IPv6 icmp reflect works properly.
126: <li>Do not double-log ipf information into <b>/var/log/messages</b>.
1.607 aaron 127: <li>Repair bridging issues in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=an&sektion=4">an(4)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tl&sektion=4">tl(4)</a>.
1.603 deraadt 128: <li>Fix ipv6 ipsec AH length checks.
129: <li>ncurses-5.0-20000617.
130: <li>ipv6 <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ipsec&sektion=4">ipsec(4)</a> outbound direction code.
1.602 aaron 131: <li>De-#ifdef <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bpf&sektion=4">bpf(4)</a> code.
1.597 deraadt 132: <li>Start at fixing <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ubsec&sektion=4">ubsec(4)</a> AH support.
1.599 ericj 133: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a> update.
134: <li>Honor scopeid in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=inetd&sektion=8">inetd(8)</a>.
135: <li>Fix sun3 pmap, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=MAKEDEV&sektion=8">MAKEDEV</a>, and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=disktab&sektion=5">disktab(5)</a> bugs.
1.597 deraadt 136: <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> userauth+pubkey interoperate with ssh.com-2.2.0.
1.603 deraadt 137: <li>More bugs in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=an&sektion=4">an(4)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wi&sektion=4">wi(4)</a>. Anyone see a trend?<br>
1.597 deraadt 138: <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
139: <li>Kill <b>/etc/ifaliases</b> in favor of the functionality in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=hostname.if&sektion=5">hostname.if(5)</a>.
140: <li>Fix more pesky buffer overflows in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ancontrol&sektion=8">ancontrol(8)</a>.
141: <li>Import <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mount_tcfs&sektion=8">tcfs</a> userland tools: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcfsuse&sektion=1">tcfsuse(1)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcfsmng&sektion=8">tcfsmng(8)</a>.
142: <li>Fix pesky buffer overflows in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ancontrol&sektion=8">ancontrol(8)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wicontrol&sektion=8">wicontrol(8)</a>.
143: <li>Fix many more things in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mount_tcfs&sektion=8">tcfs</a>.
1.602 aaron 144: <li>Parse <b>${local_rcconf}</b> in <b>/etc/rc.conf</b> instead of <b>/etc/netstart</b>.
1.597 deraadt 145: <li>More fixes to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=an&sektion=4">an(4)</a>.<br>
146: <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
1.598 espie 147: <li>Modify <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=vmstat&sektion=8">vmstat(8)</a>'s <b>-f</b> option to show kernel threads as yet another kind of process.
1.597 deraadt 148: <li>Modify <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ps&sektion=1">ps(1)</a> to hide system processes unless <b>-k</b> is given.
149: <li>Mark kernel threads as system processes.
150: <li>Cleanup some things in sparc <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=hme&sektion=4">hme(4)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=qe&sektion=4">qe(4)</a>.
151: <li>Numerous other IPV6 kernel changes.<br>
152: Too many for me to list in detail, but Itojun is busy in the other room hunched over a laptop screen with Angelos, and we are sure more are coming.
153: <li>Do not mess with non-blocking mode on ttys in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>.
1.596 jason 154: <li>Repair some multicast problems with IPV6.<br>
155: <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
1.597 deraadt 156: <li>Fake FIONBIO and FIOASYNC in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=random&sektion=4">random(4)</a>.
1.595 deraadt 157: <li>Support i82559ER in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fxp&sektion=4">fxp(4)</a>.
158: <li>Improve handling of RIP in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcpdump&sektion=8">tcpdump(8)</a>.
159: <li>Add Rijndael support to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ipsec&sektion=4">ipsec(4)</a>.
160: <li>Import <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pppoe&sektion=8">pppoe(8)</a>.
1.599 ericj 161: <li>Fix some bugs in the IPSEC <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getsockopt&sektion=2">getsockopt(2)/setsockopt(2)</a> API regarding sizeof(int) vs sizeof(u_char).
1.594 deraadt 162: <li>Support IPV6 in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=identd&sektion=8">identd(8)</a>.
163: <li>Move IPV6 mbuf alignment requirements into input routine, removing the last performance critical one in loopback.
164: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ubsec&sektion=4">ubsec(4)</a> fixes to queue requests to the hardware properly. The device can now do ipsec with itself over loopback or the network, but something is still mangled about the actual ipsec packets.
165: <li><font color=#e00000><strong>SECURITY ISSUE: Two localhost denial of service problems in the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=an&sektion=4">an(4)</a> Aironet Communications 4500/4800 IEEE 802.11DS driver. One bug prevents <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ancontrol&sektion=8">ancontrol(8)</a> from working correctly, instead causing a panic, while the other allows unauthorized users to change settings.<br>
166: <a href=errata.html#if_an>A patch is available</a></strong></font>.<br>
167: <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
168: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=crypto&sektion=9">crypto(9)</a> kernel thread permits hardware crypto devices to run at any spl they prefer.
169: <li>Initial <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">OpenSSH</a> support for ssh.com's 2.2.0.
1.599 ericj 170: <li>For <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=setsockopt&sektion=2">setsockopt(2)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getsockopt&sektion=2">getsockopt(2)</a>, do not assume non-PF_INET6 address family to be PF_INET.
1.591 provos 171: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a>, implement bug compatibility with ssh-2.0.13.
1.590 deraadt 172: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>, include <b>=</b> in WHITESPACE, permitting commands like <b>ssh -o keyword=argument</b>.
1.594 deraadt 173: <li>Enable IPV6 support in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sendmail&sektion=8">sendmail(8)</a>.
1.590 deraadt 174: <li>Change ipsec processing sequence to handle inner and outer layers much better.
175: <li>Add support for SSH2 subsystems in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a>.
1.599 ericj 176: <li>On <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ifconfig&sektion=8">ifconfig(8)</a> down & up operations, mark all radix tree routes down or up for the specified interface.
1.591 provos 177: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mount_ffs&sektion=8">mount_ffs(8)</a>, permit the <b>-f</b> command to mount dirty file systems. This is dangerous, but makes more sense now that we are moving towards soft update file systems, where the inherent danger is much less.
1.590 deraadt 178: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ftpd&sektion=8">ftpd(8)</a>, make <b>-u</b> block the chmod client command.
179: <li>Allow extended server banners in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a>.
1.602 aaron 180: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mount&sektion=8">mount(8)</a>, <b>-o</b> force is not a negative option.
1.590 deraadt 181: <li>Add support for AMD 53c974 scsi chipset.
1.592 provos 182: <li>Import of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mount_tcfs&sektion=8">tcfs</a> into the kernel, a file content crypto file system.
1.590 deraadt 183: <li>Remove traffic-time debugging messages in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>.
184: <li>Repair small list-based errors and uglinesses in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=make&sektion=1">make(1)</a>.
185: <li>Commonalize MIN() and MAX() macros inside the kernel.
186: <li>Use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=memcmp&sektion=3">memcmp(3)</a> in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bridge&sektion=4">bridge(4)</a> to fix a hashing algorithm error.<br>
1.593 jason 187: <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
1.591 provos 188: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=memcmp&sektion=3">memcmp(3)</a> in the kernel as well, since implementing it in terms of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bcmp&sektion=3">bcmp(3)</a> is very wrong.
1.590 deraadt 189: <li>Update vnode flag printing in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pstat&sektion=8">pstat(8)</a>.
190: <li>Do not whack directory in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=user&sektion=8">user(8)</a>.<br>
1.594 deraadt 191: <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
1.590 deraadt 192: <li>Hardware random number generator in i840 also works, like i810.
193: <li>Fix an ESP status message in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=netstat&sektion=1">netstat(1)</a>.
194: <li>Put RSA into our <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&sektion=3">ssl(3)</a> tree. Since our next release is not till after the patent expires, it's OK.
1.589 deraadt 195: <li>Split sysctl information for swapencrypt into an tree, and add more gunk.
1.586 deraadt 196: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ftpd&sektion=8">ftpd(8)</a> correct STAT command output for LPSV output.
197: <li>Correct an <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ipsec&sektion=4">ipsec</a> esp bug.
198: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ftp&sektion=1">ftp(1)</a> make both <b>ls</b> and </b>dir</b> send a <b>LIST</b> command.
199: <li>Minor bug fixes and optimizations in <b>/etc/rc</b>.
200: <li>Update of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ppp&sektion=8">ppp(8)</a>.
1.587 deraadt 201: <li>Put an upper bound on transaction queue of the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ubsec&sektion=4">ubsec(4)</a>.
1.594 deraadt 202: <li>Correct source length calculation in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=hifn&sektion=4">hifn(4)</a>.<br>
203: <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
1.599 ericj 204: <li>Initial import of ELF <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rtld&sektion=1">ld.so</a>, for powerpc initially.
1.586 deraadt 205: <li>Correct secondary mbuf setup in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=hifn&sektion=4">hifn(4)</a>.
1.584 deraadt 206: <li>Broadcom Bluesteel 5x0x <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ubsec&sektion=4">ubsec(4)</a> crypto cards now supports ESP 3DES modes properly. No AH or MAC stuff yet.
1.582 deraadt 207: <li>Make flags field in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=newsyslog&sektion=8">newsyslog(8)</a> files optional.
1.585 deraadt 208: <li>Modifications to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=traceroute6&sektion=8">traceroute6(8)</a>
1.582 deraadt 209: <li>Fix ADMtek identity crisis in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dc&sektion=4">dc(4)</a>.
210: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ftpd&sektion=8">ftpd(8)</a> make sure that <b>-h</b> does high port binding in EPSV.
1.580 deraadt 211: <li>Correct ENI_SALEN case in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getnameinfo&sektion=3">getnameinfo(3)</a>.
212: <li>Correct <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getnameinfo&sektion=3">getnameinfo(3)</a> behaviour against invalid sockaddr.<br>
213: <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
1.578 deraadt 214: <li>Better fix for the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pcvt&sektion=4">pcvt(4)</a> scrolling region problem.
1.591 provos 215: <li>Grok Plan9 file systems in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fdisk&sektion=8">fdisk(8)</a>.
1.578 deraadt 216: <li>Merge newer <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ppp&sektion=8">ppp(8)</a> code.
217: <li>Do not add empty lines to history in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ftp&sektion=1">ftp(1)</a>.
1.591 provos 218: <li>Grok QNX file systems in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fdisk&sektion=8">fdisk(8)</a>.
1.577 deraadt 219: <li>Fix about 10 bugs in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ubsec&sektion=4">ubsec(4)</a>, which can now move a few packets before dying.
220: <li>Support multiple pid files in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=newsyslog&sektion=8">newsyslog(8)</a>.<br>
221: <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
1.581 espie 222: <li>On-going cleanup to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=make&sektion=1">make(1)</a>.
1.577 deraadt 223: <li>Add <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pci&sektion=4">pci(4)</a> routines for dealing with Cypress 82c693 chips.
224: <li>Minor cleanup to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pax&sektion=1">pax(1)</a>.
225: <li>Merge <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=chgrp&sektion=1">chgrp(1)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=chown&sektion=8">chown(8)</a> into <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=chmod&sektion=1">chmod(1)</a>, and provide backwards compat hard and soft links.
226: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xl&sektion=4">xl(4)</a>, add support for 3c656, which is just the 3c575 + 56k modem.
1.576 deraadt 227: <li><font color=#e00000><strong>SECURITY ISSUE: A serious bug in isakmpd(8) policy handling wherein policy verification could be completely bypassed in isakmpd.<br>
228: <a href=errata.html#isakmpd>A patch is available</a></strong></font>.<br>
229: <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
1.577 deraadt 230: <li>Merge to new <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a>.
1.578 deraadt 231: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">OpenSSH</a> is now at version 2.1.1<br>
232: <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
1.576 deraadt 233: <li><font color=#e00000><strong>RELIABILITY FIX: Avoid extra vrele in msdosfs, which would lead to a panic in some operations.<br>
234: <a href=errata.html#msdosfs>A patch is available</a></strong></font>.<br>
235: <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
236: <li><font color=#e00000><strong>RELIABILITY FIX: Permit NFS export of CDs without panicing the system.<br>
237: <a href=errata.html#cd9660>A patch is available</a></strong></font>.<br>
238: <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
1.602 aaron 239: <li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ping6&sektion=8">ping6(8)</a> <b>-w</b> option.
1.588 mickey 240: <li>Let flags in kernel <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=config&sektion=8">config(8)</a> specify apm protocol version and other operation modes for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=apm&sektion=4">apm(4)</a>, for machines apm fails on.
1.572 deraadt 241: <li>Change amiga ports loadbsd command to act more like other bsd loaders.
1.577 deraadt 242: <li>Add <strong>-iname</strong> support to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=find&sektion=1">find(1)</a>.
243: <li>Sort option list in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=find&sektion=1">find(1)</a>; oops, "-and" was broken.
244: <li>Catch a <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=malloc&sektion=3">malloc(3)</a> failure in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=paste&sektion=1">paste(1)</a>.
245: <li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=linux_compat&sektion=8">linux_compat(8)</a> [gs]etrlimit emulation.
246: <li>Update <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ti&sektion=4">ti(4)</a> to support newer cards with more memory.
247: <li>Kernel <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=malloc&sektion=9">malloc(9)</a> debug code.
1.569 ericj 248: <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=quot&sektion=1">quot(1)</a> work when passed mount points.
249: <li>Fix stack mishandling bugs in i387 libm, in particular, in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=exp&sektion=3">exp(3)</a> and friends.
250: <li>Be more careful about tuples in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pcmcia&sektion=4">pcmcia(4)</a>.
1.573 espie 251: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=gcc&sektion=1">gcc 2.95.3 (pre-release)</a>
1.569 ericj 252: <li>Busify <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=eg&sektion=4">eg(4)</a>, to avoid conflict with ne2000 at 0x300.
1.576 deraadt 253: <li><font color=#e00000><strong>SECURITY ISSUE: Do not use the (non-default) <i>UseLogin</i> option in OpenSSH 2.1.*, it has a hole on other operating systems and does not work right in OpenBSD.<br>
254: <a href=errata.html#uselogin>Update to OpenSSH 2.1.1 or later, or simply avoid using UseLogin</a></strong></font>.<br>
255: <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
1.585 deraadt 256: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sudo&sektion=8">sudo 1.6.3p4</a>
1.569 ericj 257: <li>Fix a kernel race in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=exit&sektion=2">exit(2)</a>.
258: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cut&sektion=1">cut(1)</a> deal with last input line not containing a newline
259: <li>One byte overflow in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=systat&sektion=8">systat(8)</a>.
1.583 miod 260: <li>Add <strong>D</strong> and <strong>z</strong> commands to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=disklabel&sektion=8">disklabel(8)</a> to use the default partition or zero it.
1.569 ericj 261: <li>A SIGCHLD fix in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cron&sektion=8">cron(8)</a>.
262: <li>More work on <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ubsec&sektion=4">ubsec(4)</a>.
263: <li>Bug fixes to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=spif&sektion=4">spif(4)</a>.
1.567 deraadt 264: <li>Bridge packets before vlan'ing them.
1.569 ericj 265: <li>Fix a subtle bug in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xe&sektion=4">xe(4)</a> which had a number of side effects.
266: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a>, fix login count failures in SSH2 support.
1.567 deraadt 267: <li>Whack packet m_recvif field on bridged packets, permitting ipnat to work with the bridge.
1.569 ericj 268: <li>More visible /tmp file (and failure removal) in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=makewhatis&sektion=8">makewhatis(8)</a>.
269: <li>Be more careful reading panic string from core in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=savecore&sektion=8">savecore(8)</a>.
270: <li>Many other changes to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>.
271: <li>Fix short malloc in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=faithd&sektion=8">faithd(8)</a>.
1.591 provos 272: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>, permit logins if temporary file systems are full.
1.569 ericj 273: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ich&sektion=4">ich(4)</a> audio driver onboard the Intel 810/820/440MX-based machines.
274: <li>Support ax88190 in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ne&sektion=4">ne(4)</a>.
275: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=apm&sektion=4">apm(4)</a> the time is kept in hours, not minutes.
1.585 deraadt 276: <li>Add <strong>-A</strong> support to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>.
1.569 ericj 277: <li>Support for 3c574 and 3CCFEM556BI <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pcmcia&sektion=4">pcmcia(4)</a> in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ep&sektion=4">ep(4)</a>.
1.566 deraadt 278: <li>A start at documenting what goes on inside <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=config&sektion=8">config(8)</a> files.
279: <li>Enable <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mg&sektion=1">mg(1)</a>.
280: <li>Space treatment in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ipcs&sektion=1">ipcs(1)</a>.
281: <li>Do not treat <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bind&sektion=2">bind(2)</a> with <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ip&sektion=4">IPv4</a> mapped address in a special way.
282: <li>Creation of 2.7-stable release, see our <a href="stable.html">page describing it</a>.
283: <li>Convert <a href="amiga.html">amiga</a> port to UVM.
1.564 ericj 284: <li>Arrange to have <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ahc&sektion=4">ahc(4)</a> support Adaptec 2930CU.
1.576 deraadt 285: <li><font color=#e00000><strong>SECURITY ISSUE: It was possible to bypass the <i>learning</i> flag on a bridge.<br>
286: <a href=errata.html#bridge>A patch is available</a></strong></font>.<br>
287: <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
1.566 deraadt 288: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ftp&sektion=1">ftp(1)</a>, do not attach <i>Host:</i> directive if we are using the proxy.
1.563 deraadt 289: <li>Make almost all manual pages machine independent.
1.585 deraadt 290: <li><font color=#e00000><strong>DRIVER FIX: The <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isapnp&sektion=4">isapnp(4)</a> <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ef&sektion=4">ef(4)</a> driver failed to configure properly.<br>
1.576 deraadt 291: <a href=errata.html#ef>A patch is available</a></strong></font>.<br>
292: <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
1.585 deraadt 293: <li>Helper script cleanup in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=httpd&sektion=8">httpd(8)</a>.
294: <li><font color=#e00000><strong>SECURITY ISSUE: Update to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ipf&sektion=4">ipf 3.3.16</a>.<br>
1.576 deraadt 295: <a href=errata.html#ipf>A patch is available</a></strong></font>.<br>
296: <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
1.563 deraadt 297: <li>On i386, place extra byte at end of pcb so that the iomap works for last 8 ports.
1.585 deraadt 298: <li>Fix some key parsing routines in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>.
1.563 deraadt 299: <li>Permit detach of audio devices.
1.585 deraadt 300: <li>Properly configure multicast table in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wi&sektion=4">wi(4)</a>.
301: <li>Handle 64 bit architectures in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pstat&sektion=8">pstat(8)</a> -f.
302: <li>Update <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rtadvd&sektion=8">rtadvd(8)</a>.
1.591 provos 303: <li>Remove <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=nfsiod&sektion=8">nfsiod(8)</a> and replace it with an in-kernel thread based implementation.
1.585 deraadt 304: <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> X11 forwarding work on localhost.
1.563 deraadt 305: <li>Crank vnode use counts to 32 bits.
1.585 deraadt 306: <li>Correct <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ifconfig&sektion=8">ifconfig(8)</a> printing of gif physical address on non-IPV6 kernel.
1.576 deraadt 307: <li><font color=#e00000><strong> RELIABILITY FIX: Repair a routing table panic.<br>
308: <a href=errata.html#route>A patch is available</a></strong></font>.<br>
309: <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
1.585 deraadt 310: <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ancontrol&sektion=8">ancontrol(8)</a> act like our changed <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wicontrol&sektion=4">wicontrol(4)</a> semantics.
1.564 ericj 311: <li>Use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getifaddrs&sektion=3">getifaddrs(3)</a> in libc rpc code.
1.585 deraadt 312: <li>For <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=boot_config&sektion=8">boot_config(8)</a> code, save enable command in the history for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=config&sektion=8">config(8)</a>'s -eu updating.
1.594 deraadt 313: <li>Update multicasting support for IPV6.
1.585 deraadt 314: <li>Fix usage printing in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=passwd&sektion=1">passwd(1)</a>.
1.561 deraadt 315: <li>By default, do not vsync blank sparc cgsix(4) monitors, but provide a sysctl to do so.
316: <li>Start at a BlueSteel (Broadcom) 5[56]01 crypto accelerator driver.
1.564 ericj 317: <li>Accept empty shell specifications in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a>.
1.585 deraadt 318: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>, do non-blocking on ssh1 protocol sockets too.
319: <li>Some additions to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=keynote&sektion=3">keynote(3)</a>.
1.561 deraadt 320: <li>Crank rt_refcnt to 32 bits.
321: <li>Supply entropy from i386 mouse drivers to the kernel random number generator.
1.585 deraadt 322: <li>Correct p2p interface address handling and various other bugs in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=route6d&sektion=8">route6d(8)</a>.
1.561 deraadt 323: <li>Few more tweaks to pcvt termcap definition.
324: <li>Ensure SIOCSETVLAN gets a valid vlan tag.
1.585 deraadt 325: <li>After <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ftp&sektion=1">ftp(1)</a> finishes downloading, change progress meter to show the total elapsed time.
326: <li>Handle 0-size files in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ftp&sektion=1">ftp(1)</a>'s progress meter.
327: <li>Parse RFC2732 ftp URLs in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ftp&sektion=1">ftp(1)</a>.
1.594 deraadt 328: <li>In IPV6, perform NUD on p2p link, only if the destination/gateway is real neighbor.
1.580 deraadt 329: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getaddrinfo&sektion=3">getaddrinfo(3)</a>, translate DNS error code into getaddrinfo error code (EAI_xxx).<br>
330: <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
1.576 deraadt 331: <li><font color=#e00000><strong> RELIABILITY FIX: Parse IPv4 options more carefully.<br>
332: <a href=errata.html#ipopts>A patch is available</a></strong></font>.<br>
333: <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
1.585 deraadt 334: <li>Translate DNS error codes in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getaddrinfo&sektion=3">getaddrinfo(3)</a>.
335: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cardbus&sektion=4">cardbus(4)</a> <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=com&sektion=4">com(4)</a> driver.
1.602 aaron 336: <li>Support debugging libraries via DEBUGLIBS in <b>/etc/mk.conf</b>.
1.561 deraadt 337: <li>Driver for tcic(4) style pcmcia adapters.
1.585 deraadt 338: <li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ipsec&sektion=4">ipsec(4)</a> ESP sanity checks that caused really short packets to be dropped. Only icmp was affected.
1.422 deraadt 339: </ul>
340: <p>
1.203 deraadt 341:
1.95 deraadt 342: This list mentions mostly platform-independent changes. For a list of changes
343: made in a particular platform, please check the page for that platform. If you
344: find them not listed there, the changes are either (1) not being documented or
345: (2) are documented here.<br><br>
1.14 deraadt 346:
347: <hr>
1.424 deraadt 348: <p>
349: <h3>
1.477 deraadt 350: <a href=plus20.html>For changes leading up to OpenBSD 2.0, click here</a>.<br>
351: <a href=plus21.html>For changes leading up to OpenBSD 2.1, click here</a>.<br>
352: <a href=plus22.html>For changes leading up to OpenBSD 2.2, click here</a>.<br>
353: <a href=plus23.html>For changes leading up to OpenBSD 2.3, click here</a>.<br>
354: <a href=plus24.html>For changes leading up to OpenBSD 2.4, click here</a>.<br>
355: <a href=plus25.html>For changes leading up to OpenBSD 2.5, click here</a>.<br>
356: <a href=plus26.html>For changes leading up to OpenBSD 2.6, click here</a>.<br>
1.560 deraadt 357: <a href=plus27.html>For changes leading up to OpenBSD 2.7, click here</a>.<br>
1.424 deraadt 358: <a href=plus.html>For changes in OpenBSD-current, click here</a>.
359: <br>
360: </h3>
361:
362: <hr>
1.292 pauls 363: <a href="index.html"><img height=24 width=24 src=back.gif border=0 alt=OpenBSD></a>
1.14 deraadt 364: <a href=mailto:www@openbsd.org>www@openbsd.org</a>
1.610 ! deraadt 365: <br><small>$OpenBSD: plus.html,v 1.609 2000/07/01 04:11:01 deraadt Exp $</small>
1.14 deraadt 366:
367: </body>
368: </html>