Annotation of www/plus.html, Revision 1.668
1.14 deraadt 1: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML Strict//EN">
2: <html>
3: <head>
1.424 deraadt 4: <title>OpenBSD-current changes</title>
1.14 deraadt 5: <link rev=made href=mailto:www@openbsd.org>
6: <meta name="resource-type" content="document">
7: <meta name="description" content="the main OpenBSD page">
8: <meta name="keywords" content="openbsd,main">
9: <meta name="distribution" content="global">
1.59 deraadt 10: <meta name="copyright" content="This document copyright 1996 by OpenBSD.">
1.14 deraadt 11: </head>
12:
1.64 downsj 13: <BODY BGCOLOR="#FFFFFF" TEXT="#000000" LINK="#23238E">
1.14 deraadt 14:
1.292 pauls 15: <img alt="[OpenBSD]" height=30 width=141 SRC="images/smalltitle.gif">
1.64 downsj 16: <p>
1.562 deraadt 17: <h2><font color=#e00000>Changes made between OpenBSD 2.7 and OpenBSD-current</font><hr></h2>
1.14 deraadt 18:
19: <p>
1.29 deraadt 20: This is a partial list of the major machine independent changes
1.602 aaron 21: (i.e., these are the changes people ask about most often). Port
1.29 deraadt 22: specific changes have also been made, and are sometimes mentioned
23: in the pages for the specific <a href=plat.html>ports</a> if you
1.392 deraadt 24: are interested in further port-specific details. Many ports
1.29 deraadt 25: have had architecture-specific enhancements relative to NetBSD,
26: but when they do not they certainly have plenty of platform-independent
1.490 ian 27: changes, starting with those listed below.
1.14 deraadt 28:
1.17 deraadt 29: <p>
1.185 deraadt 30: Note: <font color=#e00000>Problems for which patches exist are marked in red</font>.
31:
32: <p>
1.186 deraadt 33: <h3>
1.477 deraadt 34: <a href=plus20.html>For changes leading up to OpenBSD 2.0, click here</a>.<br>
35: <a href=plus21.html>For changes leading up to OpenBSD 2.1, click here</a>.<br>
36: <a href=plus22.html>For changes leading up to OpenBSD 2.2, click here</a>.<br>
37: <a href=plus23.html>For changes leading up to OpenBSD 2.3, click here</a>.<br>
38: <a href=plus24.html>For changes leading up to OpenBSD 2.4, click here</a>.<br>
39: <a href=plus25.html>For changes leading up to OpenBSD 2.5, click here</a>.<br>
40: <a href=plus26.html>For changes leading up to OpenBSD 2.6, click here</a>.<br>
1.560 deraadt 41: <a href=plus27.html>For changes leading up to OpenBSD 2.7, click here</a>.<br>
1.422 deraadt 42: <br>
1.186 deraadt 43: </h3>
44:
45: <hr>
1.280 deraadt 46:
1.186 deraadt 47: <p>
1.602 aaron 48: <h3><font color=#0000e0>OpenBSD 2.7 released (June 15, 2000).<p>
1.480 deraadt 49: We are working on OpenBSD-current.</font></h3><p>
1.422 deraadt 50: <ul>
1.665 jason 51: <li>workaround i386 bios serial call problem<br>
52: <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
1.662 beck 53: <li><font color=#e00000><strong>SECURITY FIX: Apache mod_rewrite and
54: mod_vhost_alias modules could expose files on server if used.<br>
55: <a href=errata.html#httpd>A patch is available</a></strong></font>.<br>
1.663 jason 56: <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
1.661 deraadt 57: <li><font color=#e00000><strong>SECURITY FIX: Ignore $HOME/.termlib in curses for setuid/setgid executables.<br>
58: <a href=errata.html#curses>A patch is available</a></strong></font>.<br>
59: <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
60: <li><font color=#e00000><strong>SECURITY FIX: talkd(8) format string vulnerability.<br>
61: <a href=errata.html#talkd>A patch is available</a></strong></font>.<br>
62: <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
1.664 jason 63:
1.661 deraadt 64: <li>... many lines missing
1.659 deraadt 65: <li>Some more fixes to the games!
1.664 jason 66: <li>Fix old bug with wildcard interfaces<br>
67: <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
1.659 deraadt 68: <li>Various fixes to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=clcs&sektion=4">clcs(4)</a> PCI audio driver.
1.660 deraadt 69: <li><font color=#e00000><strong>RELIABILITY FIX: Drop dubious ESP/AH packets without crashing.<br>
1.659 deraadt 70: <a href=errata.html#ipsec>A patch is available</a></strong></font>.<br>
71: <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
72: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ldd&sektion=1">ldd(1)</a> for powerpc ELF binaries.
73: <li>Other misc improvements to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>.
74: <li>Support <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fxp&sektion=4">fxp(4)</a> devices on <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cardbus&sektion=4">cardbus(4)</a>, including detach.
75: <li>Support 3C3FE575CT CardBus <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xl&sektion=4">xl(4)</a> devices.
76: <li>Attempt to support 3C556[B] MiniPCI <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xl&sektion=4">xl(4)</a> devices.
77: <li>Repair IPv6 multicast support.<br>
78: <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
79: <li>Fixes to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=faithd&sektion=8">faithd(8)</a>.
80: <li>Many improvements in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ep&sektion=4">ep(4)</a> support, including support for more eject/mii, and other newer models.
81: <li>Support <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=twe&sektion=4">twe(4)</a>, the 3Ware IDE raid controller.
82: <li>Check all calls to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=setenv&sektion=3">setenv(3)</a> in userland.
83: <li>More <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=puc&sektion=4">puc(4)</a> devices.
84: <li>Support IPSEC data flow in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ppp&sektion=8">ppp(8)</a>.
85: <li>More cleanups in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=make&sektion=1">make(1)</a>.
86: <li>Use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=vis&sektion=3">vis(3)</a> for outputting data in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=syslogd&sektion=8">syslogd(8)</a>.
87: <li>Fix sorting bugs in the miniroot.
88: <li>Multiple debug levels in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>.
89: <li>Cause <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getsid&sektion=2">getsid(2)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getpgid&sektion=2">getpgid(2)</a> to return EPERM if requesting out of session/pgrp, as well as fix other bugs.
90: <li>natm fixes.
91: <li>binutils 2.10
1.657 deraadt 92: <li>Fix INET6 components of atm support.
93: <li>Update powerpc miniroot install stuff.
94: <li>Handle LBA partitions even better in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fdisk&sektion=8">fdisk(8)</a>
95: <li>Fix user quota reporting in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=repquota&sektion=8">repquota(8)</a>
96: <li>arla-current
97: <li>Re-enable <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ray&sektion=4">ray(4)</a> after resume.
98: <li>Linux mmap() ignores the fd argument when MAP_ANON is set.
99: <li>Some reliability fixes to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=asc&sektion=4">asc(4)</a> for pmax.
1.656 deraadt 100: <li>Another one byte overflow in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getty&sektion=8">getty(8)</a>
101: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ums&sektion=4">ums(4)</a> support.
102: <li>More cleanups in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pcibios&sektion=4">pcibios(4)</a>
103: <li>Clarify licencing on components of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> and such.
104: <li>Repair dcphy(4) problems for Macronix PMAC 98715 and family.
105: <li>Fix TAILQ_FOREACH_REVERSE.
106: <li>More use of new timeouts in the kernel.
1.654 deraadt 107: <li>Avoid excessive wakeup() in crypto subsystem.
108: <li>Run powerhooks at splhigh(), and backwards from initialization order.
109: <li>Bounds checking code in compat/emul code.
1.655 fgsch 110: <li>Open a file with egid in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wall&sektion=1">wall(1)</a>.
1.654 deraadt 111: <li>Inconsequential Buf overflow in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getty&sektion=8">getty(8)</a>.
112: <li>When cards come up with verybad MAC addresses, generate a fake one.
1.655 fgsch 113: <li>tzdata2000f.
1.654 deraadt 114: <li>Start <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sendmail&sektion=8">sendmail(8)</a> even more carefully in /etc/rc, to avoid whining.
115: <li>Mag tape ioctl emulation for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=compat_osf1&sektion=8">compat_osf1(8)</a>.
116: <li>Many improvements to powerpc, including <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wscons&sektion=4">wscons(4)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=usb&sektion=4">usb(4)</a>, and rebooting support, amongst many other things.
117: <li>Support different font sizes in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wscons&sektion=4">wscons(4)</a>.
118: <li>Fix inquiry problems in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=adw&sektion=4">adw(4)</a>.
119: <li>Various fixes to SACK and FACK.
120: <li>Powerhook workaround, so that <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wi&sektion=4">wi(4)</a> suspends wake up properly.
121: <li>Enable <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh-add&sektion=1">ssh-add(1)</a> deletion support for DSA keys.
122: <li>Support detach for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cardbus&sektion=4">cardbus(4)</a> <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xl&sektion=4">xl(4)</a> devices.
123: <li>Fix IO/memory space allocation in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cardbus&sektion=4">cardbus(4)</a>/<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pci&sektion=4">pci(4)</a> rbus handling, so that some devices do not map on top of each other.
124: <li>Increase page use in i82365 <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pcic&sektion=4">pcic(4)</a>.
125: <li>Portability fixes to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sftp-server&sektion=8">sftp-server(8)</a>.
126: <li>Fix login time handling in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a>.
1.655 fgsch 127: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a>, cause SSH_ORIGINAL_COMMAND environment variable to be initialized.
1.654 deraadt 128: <li>Fix file descriptor leak in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>.
129: <li>Install kerberosIV info file.
130: <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pcvt&sektion=4">pcvt(4)</a> mouse support act more like an xterm.
131: <li>Improvements in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pcic&sektion=4">pcic(4)</a> attachment on <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pci&sektion=4">pci(4)</a>.
132: <li>Fix EDP register handling in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xe&sektion=4">xe(4)</a>.
1.652 fgsch 133: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ray&sektion=4">ray(4)</a>, fix panic on detach.
134: <li>More changes to hppa.
135: <li>Add the <b>L:</b> modifier to all tweakable var tests in various Makefiles.
136: <li>Various fixes to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ppp&sektion=8">ppp(8)</a>.
1.653 fgsch 137: <li>Fix parsing problems in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=netstart&sektion=8">netstart(8)</a> when reading <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=hostname.if&sektion=5">hostname.if(5)</a>.
1.652 fgsch 138: <li>Cleanup and fix <b>-S</b> support in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=scp&sektion=1">scp(1)</a>.
139: <li>Add <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=joy&sektion=4&arch=amiga">joy(4)</a> driver for amiga.
1.651 fgsch 140: <li>Import <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=moused&sektion=8">moused(8)</a>, a userland mouse daemon the for new <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pcvt&sektion=4">pcvt(4)</a> features.
141: <li>Add kernel console mouse support to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pcvt&sektion=4">pcvt(4)</a>.
142: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rtadvd&sektion=8">rtadvd(8)</a>, repair a routine to grab interface MTU information.
1.646 deraadt 143: <li>Add <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sftp-server&sektion=8">sftp-server(8)</a>, capable of doing the things needed by ssh.com's scp2 and sftp clients. We have no client to talk the protocol ourselves.
144: <li>Various build tweaks in kerberos.
145: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getaddrinfo&sektion=3">getaddrinfo(3)</a>, fix canonical name for /etc/hosts file-based search.
1.650 jason 146: <li>OpenSSH 2.2.0 released.<br>
147: <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
1.645 deraadt 148: <li>Use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=arc4random&sektion=3">arc4random(3)</a> in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ppp&sektion=8">ppp(8)</a> plus various other fixes.
1.644 fgsch 149: <li>Correctly read MAC addresses on all <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ne&sektion=4">ne(4)</a> cards.
1.636 fgsch 150: <li>More svr4 emulation fixes.
151: <li>Prevent <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=csh&sektion=1">csh(1)</a> from coredumping in some situations.
1.645 deraadt 152: <li>Use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=srandom&sektion=3">srandom(3)</a> in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ppp&sektion=8">ppp(8)</a>.
1.638 fgsch 153: <li>x11-ssh-askpass 1.0.1.
1.645 deraadt 154: <li>In IPv6, do not forward packets with unspecified source.
1.638 fgsch 155: <li>Add filters logging and radius accounting support to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ppp&sektion=8">ppp(8)</a>.
1.636 fgsch 156: <li>Lot of sun3 changes.
1.638 fgsch 157: <li>Various <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> improvements.
1.636 fgsch 158: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=brgphy&sektion=4">brgphy(4)</a> driver for broadcom 5400 and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xmphy&sektion=4">xmphy(4)</a> for XAQTI XMACII phys.
1.645 deraadt 159: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> compatibility with future ssh.com versions (which contain a bug in their HMAC handling).
1.640 fgsch 160: <li>Add detach support for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xe&sektion=4">xe(4)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=aue">aue(4)</a>.
1.645 deraadt 161: <li>Import newer <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mii&sektion=4">mii(4)</a> code, supporting mii subdevice detach.
162: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dc&sektion=4">dc(4)</a>, avoid freezes on large data transfers.
1.638 fgsch 163: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> now talks to ssh.com 2.3.0.
1.646 deraadt 164: <li>Some clarifications in manual pages regarding the format string bug in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=printf&sektion=3">printf(3)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=setproctitle&sektion=3">setproctitle(3)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=syslog&sektion=3">syslog(3)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=warn&sektion=3">warn(3)</a>, and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=err&sektion=3">err(3)</a>.
1.638 fgsch 165: <li>Performance improvements to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sis&sektion=4">sis(4)</a>.
1.645 deraadt 166: <li>Correctly match Promise Ultra/100 in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pciide&sektion=4">pciide(4)</a>.
1.638 fgsch 167: <li>Fix shared library creation problems on mips.
1.648 fgsch 168: <li>Fix IPSEC flow deletion problem when using <b>-transport</b>.<br>
1.649 jason 169: <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
1.645 deraadt 170: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=scp&sektion=1">scp(1)</a>, repair copying of files 2GB in size or larger.
171: <li>Crank some defaults in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=login.conf&sektion=5">login.conf(5)</a>.
1.638 fgsch 172: <li>Various fixes to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=lpc&sektion=8">lpc(8)</a>.
173: <li>Repair <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sendmail&sektion=8">sendmail(8)</a> options handling.
174: <li>Make timeouts happen with the expected frequency.
1.640 fgsch 175: <li>Implement svr4 emulation for pread64, pwrite64 and fcntl DUP2FD.
1.639 fgsch 176: <li>Manpage fixes.
1.645 deraadt 177: <li>We're at 2.8-beta now.
178: <li>Use the user's default groups if user is specified in inetd.conf, but group is not.
1.640 fgsch 179: <li>Be more paranoid in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cron&sektion=8">cron(8)</a>.
1.639 fgsch 180: <li>Fix var handling in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=make&sektion=1">make(1)</a>.
1.648 fgsch 181: <li>Support <b>FIONBIO</b> and <b>FIOASYNC</b> on rnd.<br>
1.639 fgsch 182: <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
183: <li>Proper template file creation on <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ksh&sektion=1">ksh(1)</a>.
184: <li>Implement resource limits in several daemons.
1.641 fgsch 185: <li>Add <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=login.conf&sektion=5">login.conf(5)</a> support, making possible limiting resources per class.
1.648 fgsch 186: <li>Minor bug fixes associated with the use of the <b>UseLogin</b> directive in sshd_config.
1.643 fgsch 187: <li>Bypass key generation in mod_ssl if SSL is not enabled in any (virtual) servers.
1.640 fgsch 188: <li>Add SSH2/DSA support to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh-agent&sektion=1">ssh-agent(1)</a> and some DSA related cleanups.
189: <li>Resolve a driver name conflict in the pmax platform. The pmax <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dc&sektion=4">dc(4)</a> driver has been renamed to dz.
190: <li>Many updates to the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ubsec&sektion=4">ubsec(4)</a> code.
191: <li>Various IPv6 fixes.
1.648 fgsch 192: <li>Add <b>-S</b> option to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=scp&sektion=1">scp(1)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> to use a program for encrypted connections.
1.640 fgsch 193: <li>Lot of manpage updates.
194: <li>Various improvements to linux emulation.
195: <li>Add IPv6 support to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=telnetd&sektion=8">telnetd(8)</a>.
196: <li>Allow <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ppp&sektion=8">ppp(8)</a> to be used without SUID privs.
1.648 fgsch 197: <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pcibios&sektion=4">pcibios(4)</a> a real device making possible the use of flags.
1.641 fgsch 198: <li>Avoid duplicate utmp entries in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>.
199: <li>Update <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=awi&sektion=4">awi(4)</a> driver.
200: <li>Various <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ppp&sektion=8">ppp(8)</a> improvements.
1.643 fgsch 201: <li>More fixes to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ubsec&sektion=4">ubsec(4)</a> auth+enc code.
1.641 fgsch 202: <li>Convert <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pccom&sektion=4">pccom(4)</a> to new timeouts.
1.648 fgsch 203: <li>Implement <b>-a</b> option on <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wicontrol&sektion=8">wicontrol(8)</a>, was documented but not present.
204: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mail.local&sektion=8">mail.local(8)</a>, fix <b>sendmail.cf</b> location.
1.647 fgsch 205: <li>Catch bogus <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=MAKEDEV&sektion=8">MAKEDEV(8)</a> mouse and spit out an reasonable error.
206: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ppp&sektion=8">ppp(8)</a>, ISDN B channels have a bandwidth of 64000, not 65535.
207: <li>More format string paranoia.
208: <li>Several <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=setproctitle&sektion=3">setproctitle(3)</a> fixes in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ppp&sektion=8">ppp(8)</a>.
1.633 deraadt 209: <li><font color=#e00000><strong>SECURITY ISSUE: format string localhost root vulnerability in xlock(1)</strong></font>.<br>
210: <a href=errata.html#xlock>A patch is available</a></strong></font>.<br>
1.637 jason 211: <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
1.647 fgsch 212: <li>Improvements and fixes in hppa land.
1.648 fgsch 213: <li>Increase if_obytes and if_omcasts in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=vlan&sektion=4">vlan(4)</a> output routine as done in <b>ether_output</b>.
1.647 fgsch 214: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ubsec&sektion=4">ubsec(4)</a>, deallocate resources on attachment failure.
215: <li>Fix auth-only mode in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ubsec&sektion=4">ubsec(4)</a>.
216: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=hifn&sektion=4">hifn(4)</a>, deallocate resources on error and workaround memory problems in rev A boards.
217: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&sektion=8">mod_ssl 2.6.6</a>.
1.648 fgsch 218:
1.668 ! jason 219: <li> fix locking in threaded <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getgrent&sektion=3">getgrent(3)<br>
! 220: <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
! 221:
1.633 deraadt 222: <li>... about 3 months of missing updates here..
1.648 fgsch 223:
1.667 jason 224: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=gdt&sektion=4">gdt(4)</a> cache fixes and additional card support<br>
225: <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
1.632 deraadt 226: <li><font color=#e00000><strong>SECURITY ISSUE: several DoS holes in libX11, libICE and X clients</strong></font>.<br>
227: <a href=errata.html#X11_libs>A patch is available</a></strong></font>.<br>
228: <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
1.642 brad 229: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&sektion=8">mod_ssl 2.6.5</a>
1.625 deraadt 230: <li>Repair ntpd/ntpdate handlings in /etc/rc.
1.630 deraadt 231: <li>Various improvements and fixes to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ppp&sektion=8">ppp(8)</a>.
1.626 jason 232: <li>Correctly handle <b>ip_off</b> in a corner case of IPSEC.<br>
233: <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
1.625 deraadt 234: <li>i386 now has another install floppy: floppyC27 contains cardbus support.
1.630 deraadt 235: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>, disable <b>FallBackToRsh</b> by default.
1.625 deraadt 236: <li>In TCP, compute correct window scale when recvpipe option is set in route.
237: <li>KTH Kerberos4 1.0.2
1.630 deraadt 238: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a>, fix <b>MaxStartups</b> code to work with <b>-d</b>.
239: <li><font color=#e00000><strong>RE-RELEASE: Re-release pmax release after <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dmesg&sektion=8">dmesg(8)</a> and <b>/kern/msgbuf</b> was fixed.<br>
1.625 deraadt 240: <a href=errata.html#pmax_msgbuf>A patch is available</a></strong></font>.<br>
241: <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
242: <li>Fix simpleroot support.
243: <li>ncurses 5.1
1.630 deraadt 244: <li>Do not default to empty passwords in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=adduser&sektion=8">adduser(8)</a>, simply because it's stupid.
245: <li>Use strsep(3) instead of strtok(3) in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a>.
246: <li>Add <b>-flags</b> option to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=find&sektion=1">find(1)</a>.
247: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=inetd&sektion=8">inetd(8)</a>, handle IPv6 addresses in hostname specifiers.
248: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=systat&sektion=1">systat(1)</a>, correct layout of the <b>io</b> page.
249: <li>Support Intel 440MX Ultra/33 controller in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pciide&sektion=4">pciide(4)</a>.
250: <li>Handle Promise Ultra/100, deal with D2 AMD K7 controllers, and various other tweaks to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pciide&sektion=4">pciide(4)</a>.
251: <li>New <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=release&sektion=8">release(8)</a> page describes how to build a distribution.
252: <li>Fix an spinning <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=select&sektion=2">select(2)</a> loop in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=nc&sektion=1">nc(1)</a>.
253: <li>For <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=select&sektion=2">select(2)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=poll&sektion=2">poll(2)</a>, if we are awakened by a collision the timeout must be recalculated.
1.625 deraadt 254: <li>On powerpc, handle late configuration of the interrupt controller.
1.630 deraadt 255: <li>Fix port and X11 forwarding in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a>.
256: <li>Change <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fingerd&sektion=8">fingerd(8)</a> back to using <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fgets&sektion=3">fgets(3)</a> instead of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fgetln&sektion=3">fgetln(3)</a>, to reduce denial of service attacks.
1.658 deraadt 257: <li>Change <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=compat_linux&sektion=8">compat_linux(8)</a> so that it logs and returns ENOSYS rathern than deliver SIGSYS for unimplemented system calls.
1.630 deraadt 258: <li>Add <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ucomm&sektion=4">ucomm(4)</a> support to MAKEDEV.
259: <li>Delay slightly longer after reset in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xl&sektion=4">xl(4)</a> for some configurations.
260: <li>Add support for National Semiconductor DP83815 fast ethernet to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sis&sektion=4">sis(4)</a>.
1.625 deraadt 261: <li>Ensure PCIBIOS32 does not panic if the BIOS lies.
262: <li>Add support for 82801AA_LPC in PCIBIOS32.
263: <li>Add spllowersoftclock() on all architectures, and correct splsoftclock() to avoid races.
264: <li>Fix pmap activation on mvme68k.
1.630 deraadt 265: <li>Support <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ddb&sektion=4">ddb(4)</a> entry from <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cl&sektion=4">cl(4)</a> on mvme68k.
266: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=user&sektion=8">user(8)</a>, ensure that we do not generate passwd lines longer than 1023 characters.<br>
1.626 jason 267: <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
1.630 deraadt 268: <li>Latest <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wx&sektion=4">wx(4)</a> driver, works better with more switches.
1.625 deraadt 269: <li>Improve support for Ricoh cardbus bridges.
270: <li>Cardbus and PCIBIOS32 support enabled by default in i386 GENERIC kernel.
1.630 deraadt 271: <li>Update <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isp&sektion=4">isp(4)</a> driver.
1.625 deraadt 272: <li>Add a timeout structure per scsi transfer, so that controllers can do timeouts easier.
273: <li>Fixed numerous cases of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=printf&sektion=3">printf(3)</a>-style functions being called with their first argument being user controlled, where it should be <b>%s</b>
274: <li>More careful handling of IPV6 mapped addresses in the IPV6 code.
1.619 ericj 275: <li>Repair X11 forwarding in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>.
276: <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dmesg&sektion=8">dmesg(8)</a> once again work on the alpha.
1.621 deraadt 277: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=setproctitle&sektion=3">setproctitle(3)</a> misuse in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=faithd&sektion=8">faithd(8)</a>.
1.619 ericj 278: <li><font color=#e00000><strong>SECURITY ISSUE: remote hole via <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=setproctitle&sektion=3">setproctitle(3)</a> misuses in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ftpd&sektion=8">ftpd(8)</a>.<br>
1.618 deraadt 279: <a href=errata.html#ftpd>A patch is available</a></strong></font>.<br>
280: <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
1.619 ericj 281: <li>In <b>/etc/rc</b>, start <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sendmail&sektion=8">sendmail(8)</a> in the background.
1.621 deraadt 282: <li>Prepare <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ddb&sektion=4">ddb(4)</a> internals for KGDB support.
1.620 aaron 283: <li>Fix spl usage in sparc <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=magma&sektion=4&arch=sparc">magma(4)</a>.
1.619 ericj 284: <li>Stop kernel sleeps from returning up to a tick early by fixing <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=hzto&sektion=9">hzto(9)</a>.
1.623 ericj 285: <li>Latest version of the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pcvt&sektion=4&arch=i386">pcvt(4)</a> scrolling region patch...<br>
1.618 deraadt 286: <a href=errata.html#pcvt>A patch is available</a></strong></font>.<br>
287: <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
1.621 deraadt 288: <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getaddrinfo&sektion=3">getaddrinfo(3)</a> return EAI_NODATA for name resolution errors.
289: <li>Greater care of rlimit handling in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sbrk&sektion=2">sbrk(2)</a>.<br>
1.618 deraadt 290: <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
291: <li>Cleanup spl handling on the sparc.
1.621 deraadt 292: <li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dmesg&sektion=8">dmesg(8)</a> and <b>/kern/msgbuf</b> on the pmax.
293: <li>Support bigendian hardware in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ahc&sektion=4">ahc(4)</a>.
1.618 deraadt 294: <li>Fix tail queue leakage in the crypto queue support.
295: <li>New wscons on the alpha.
1.621 deraadt 296: <li>More carefully reset pcic registers when testing for working <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pcmcia&sektion=4">pcmcia(4)</a> interrupts.
297: <li>Plug two memory leaks in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=brconfig&sektion=8">brconfig(8)</a>.
298: <li>Various <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=gcc&sektion=1">gcc(1)</a> fixes for the vax.
299: <li><font color=#e00000><strong>SECURITY ISSUE: Buffer oflows in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mopd&sektion=8">mopd(8)</a>.<br>
1.618 deraadt 300: <a href=errata.html#mopd>A patch is available</a></strong></font>.<br>
301: <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
302: <li>More fixes in the games.
1.621 deraadt 303: <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ipnat&sektion=4">ipnat(4)</a> detaching work with <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pcmcia&sektion=4">pcmcia(4)</a>.
304: <li>Correct interrupt sharing types in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pcmcia&sektion=4">pcmcia(4)</a>.
1.664 jason 305: <li>Fix to a fix in uvm.<br>
306: <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
1.618 deraadt 307: <li>Change to 16 partitions in sun3 port.
1.621 deraadt 308: <li>Dynamically size the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=m4&sektion=1">m4(1)</a> internal machine stack.
309: <li>Faster C version of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ffs&sektion=3">ffs(3)</a>.
310: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=vr&sektion=4">vr(4)</a>, support VIA vt6102.
311: <li>Import <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wsconsctl&sektion=8">wsconsctl(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wsconscfg&sektion=8">wsconscfg(8)</a>, and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wsfontload&sektion=8">wsfontload(8)</a>.
312: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fdisk&sektion=8">fdisk(8)</a>, be more verbose about partition layout errors.
313: <li>To <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=aucat&sektion=1">aucat(1)</a>, add <b>-f</b> option for specifying audio device.
314: <li>More regression tests for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=m4&sektion=1">m4(1)</a>.
1.611 ericj 315: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xl&sektion=4">xl(4)</a>, add support for 3CCFE575BT and 3CCFEM656C.
316: <li>Import a regression suite for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=m4&sektion=1">m4(1)</a>.
317: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=make&sektion=1">make(1)</a>, recognize <b>+cmd</b> as a command that should still execute in <b>make -n</b> mode.
318: <li>Correct giftunnel handling in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ifconfig&sektion=8">ifconfig(8)</a>.
319: <li>New fix for the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pcvt&sektion=4">pcvt(4)</a> scrolling region bug.<br>
1.609 deraadt 320: <a href=errata.html#pcvt>A patch is available</a></strong></font>.<br>
1.612 jason 321: <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
1.611 ericj 322: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&sektion=8">mod_ssl 2.6.4</a>
1.618 deraadt 323: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=clcs&sektion=4">clcs(4)</a> driver for the cs4280 Crystal Clear audio hardware found in some laptops.
1.609 deraadt 324: <li>Make UVM work on the powerpc.
1.611 ericj 325: <li>Convert much kernel code to the new <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=timeout_add&sektion=9">timeout API</a>.
1.616 aaron 326: <li>Fix multicast hashing problem in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xl&sektion=4">xl(4)</a>.<br>
1.609 deraadt 327: <a href=errata.html#xlhash>A patch is available</a></strong></font>.<br>
1.613 jason 328: <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
1.609 deraadt 329: <li>Fix numerous more bugs in the games.
1.611 ericj 330: <li>Fix MAC address matching in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pcap&sektion=3">pcap(3)</a>.
1.616 aaron 331: <li>Make the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ep&sektion=4">ep(4)</a> driver more friendly during detach.
1.611 ericj 332: <li>Fix bpf code in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ray&sektion=4">ray(4)</a>.
333: <li>For the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=err&sektion=3">err(3)</a> family of calls and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=syslog&sektion=3">syslog(3)</a>, ensure that dynamic content never appears as the second argument -- use at least <b>%s</b>.
334: <li>Update <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=adw&sektion=4">adw(4)</a> driver.
1.614 fgsch 335: <li>Add creat64 and mmap64 system calls to svr4 emulation.
1.616 aaron 336: <li>Handle <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=strtol&sektion=3">strtol(3)</a> instead of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=atoi&sektion=3">atoi(3)</a> in the <b>kill</b> implementation in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=csh&sektion=1">csh(1)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ksh&sektion=1">ksh(1)</a>.
1.609 deraadt 337: <li>Fix COPTS vs CFLAGS issues in the source tree.
338: <li>Fix panic message from i386 in_cksum.
1.611 ericj 339: <li>Fix path to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=kerberos">kerberos</a> master key file.<br>
1.627 jason 340: <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
1.604 deraadt 341: <li><font color=#e00000><strong>SECURITY ISSUE: Stop libedit from opening the <b>.editrc</b> file in the current directory.<br>
342: <a href=errata.html#libedit>A patch is available</a></strong></font>.<br>
343: <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
1.603 deraadt 344: <li>Fix an infinite loop in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fsck_msdos&sektion=8">fsck_msdos(8)</a>.
345: <li>Fix some racy interaction between <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pcmcia&sektion=4">pcmcia(4)</a> insertion and suspends.
346: <li>Add <b>-U</b> option to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ldconfig&sektion=8">ldconfig(8)</a>.
347: <li>Fix a stupid bug in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=m4&sektion=1">m4(1)</a> argument handling.<br>
348: <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
349: <li>Repair stupid bugs in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ste&sektion=4">ste(4)</a>, which prevented it from working in 2.7 release.<br>
1.610 deraadt 350: <a href=errata.html#ste>A patch is available</a></strong></font>.<br> <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
1.603 deraadt 351: <li>Connection limitation code for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a>.
1.602 aaron 352: <li>Allow <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=vnd&sektion=4">svnd(4)</a> to work on sparse files.
1.603 deraadt 353: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pciide&sektion=4">pciide(4)</a>, support CMD 648/649 UDMA66 controllers, and also fix the Promise UDMA66 cable check code.
354: <li>ncurses 2000/6/10 update to <b>termtypes.master</b>.
355: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ne&sektion=4">ne(4)</a>, re-fix Linksys Combo PCMCIA EthernetCard (EC2T) after AX88190 broke it.
1.602 aaron 356: <li>Disable automatic <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=crash&sektion=8">crash(8)</a> dumps for swap encryption.
1.621 deraadt 357: <li><font color=#e00000><strong>SECURITY ISSUE: Be much more careful about <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhclient&sektion=8">dhclient(8)</a>'s handling of external variables.<br>
1.603 deraadt 358: <a href=errata.html#dhclient>A patch is available</a></strong></font>.<br>
359: <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
1.606 espie 360: <li>Implement svr4 emulation for getdents64, lstat64 and stat64.
1.608 fgsch 361: <li>Do not start snmpd by default if it is installed.
1.617 ericj 362: <li>Implement <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sort&sektion=1">sort(1)</a> as a shell function on the boot floppies, to save a lot of space.
363: <li>Ensure <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a> does not misbehave if the skey key file is missing.
364: <li>Cleanups to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tail&sektion=1">tail(1)</a>.
365: <li>Significant performance improvements to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=make&sektion=1">make(1)</a>.
366: <li>Numerous more fixes to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=an&sektion=4">an(4)</a>, regarding bridging, ipv6, bpf logic, and pcmcia detach.
367: <li>Newer <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ppp&sektion=8">ppp(8)</a> code.
368: <li>Change <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhcpd&sektion=8">dhcpd(8)</a> so that it is not as susceptible to abandoning addresses.<br>
1.605 jason 369: <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
1.617 ericj 370: <li>For crypted <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=vnd&sektion=4">vnd(4)</a>, zero the key on unconfig.
1.603 deraadt 371: <li>Kill the legacy vtrace(2) system call.
372: <li>Avoid using 3c905b-specific multicast hash code, it is buggy.<br>
373: <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
374: <li>IPv6 support in the resolver. The <b>nameserver</b> line can now take ipv6 addresses.
375: <li>Soft updates is now free.
1.617 ericj 376: <li>Add <b>epsv4</b> command to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ftp&sektion=1">ftp(1)</a>, to disable <b>epsv</b> negotiations on IPv4 connections.
1.603 deraadt 377: <li>Fix various bugs in ip gatewaying that angelos introduced.
1.617 ericj 378: <li>Sync with newed <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ndp&sektion=8">ndp(8)</a>.
1.602 aaron 379: <li>Allow <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=vnconfig&sektion=8">vnconfig(8)</a> to turn on encryption for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=vnd&sektion=4">vnd(4)</a>.
1.617 ericj 380: <li>Fix bpf mishandlings in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=an&sektion=4">an(4)</a>.
381: <li>Avoid using IO port 0x370 on laptops for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pcmcia&sektion=4">pcmcia(4)</a>, since some sound cards sometimes land there.
1.603 deraadt 382: <li>On i386, if only one cpu family is specified, pass flags to the optimizer.
1.617 ericj 383: <li>Merge in new <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a> changes.
1.603 deraadt 384: <li>Funnel crypto completion events via crypto_done(), not directly to the caller.
1.617 ericj 385: <li>Closer towards making some more <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sm&sektion=4">sm(4)</a> <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pcmcia&sektion=4">pcmcia(4)</a> cards work.
386: <li>More verbose information for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pppoe&sektion=8">pppoe(8)</a> in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcpdump&sektion=8">tcpdump(8)</a>.
1.603 deraadt 387: <li>Teach ipv6 AH & ip-over-ip code to deal with ipv6 scoped addresses better.
388: <li>Initialize mtu/hlim for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=enc&sektion=4">enc(4)</a> so that IPv6 icmp reflect works properly.
389: <li>Do not double-log ipf information into <b>/var/log/messages</b>.
1.607 aaron 390: <li>Repair bridging issues in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=an&sektion=4">an(4)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tl&sektion=4">tl(4)</a>.
1.603 deraadt 391: <li>Fix ipv6 ipsec AH length checks.
392: <li>ncurses-5.0-20000617.
393: <li>ipv6 <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ipsec&sektion=4">ipsec(4)</a> outbound direction code.
1.602 aaron 394: <li>De-#ifdef <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bpf&sektion=4">bpf(4)</a> code.
1.597 deraadt 395: <li>Start at fixing <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ubsec&sektion=4">ubsec(4)</a> AH support.
1.599 ericj 396: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a> update.
397: <li>Honor scopeid in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=inetd&sektion=8">inetd(8)</a>.
398: <li>Fix sun3 pmap, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=MAKEDEV&sektion=8">MAKEDEV</a>, and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=disktab&sektion=5">disktab(5)</a> bugs.
1.597 deraadt 399: <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> userauth+pubkey interoperate with ssh.com-2.2.0.
1.603 deraadt 400: <li>More bugs in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=an&sektion=4">an(4)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wi&sektion=4">wi(4)</a>. Anyone see a trend?<br>
1.597 deraadt 401: <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
402: <li>Kill <b>/etc/ifaliases</b> in favor of the functionality in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=hostname.if&sektion=5">hostname.if(5)</a>.
403: <li>Fix more pesky buffer overflows in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ancontrol&sektion=8">ancontrol(8)</a>.
404: <li>Import <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mount_tcfs&sektion=8">tcfs</a> userland tools: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcfsuse&sektion=1">tcfsuse(1)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcfsmng&sektion=8">tcfsmng(8)</a>.
1.622 ericj 405: <li>Fix pesky buffer overflows in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ancontrol&sektion=8&arch=i386">ancontrol(8)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wicontrol&sektion=8">wicontrol(8)</a>.
1.597 deraadt 406: <li>Fix many more things in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mount_tcfs&sektion=8">tcfs</a>.
1.602 aaron 407: <li>Parse <b>${local_rcconf}</b> in <b>/etc/rc.conf</b> instead of <b>/etc/netstart</b>.
1.597 deraadt 408: <li>More fixes to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=an&sektion=4">an(4)</a>.<br>
409: <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
1.598 espie 410: <li>Modify <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=vmstat&sektion=8">vmstat(8)</a>'s <b>-f</b> option to show kernel threads as yet another kind of process.
1.597 deraadt 411: <li>Modify <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ps&sektion=1">ps(1)</a> to hide system processes unless <b>-k</b> is given.
412: <li>Mark kernel threads as system processes.
413: <li>Cleanup some things in sparc <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=hme&sektion=4">hme(4)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=qe&sektion=4">qe(4)</a>.
414: <li>Numerous other IPV6 kernel changes.<br>
415: Too many for me to list in detail, but Itojun is busy in the other room hunched over a laptop screen with Angelos, and we are sure more are coming.
416: <li>Do not mess with non-blocking mode on ttys in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>.
1.596 jason 417: <li>Repair some multicast problems with IPV6.<br>
418: <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
1.597 deraadt 419: <li>Fake FIONBIO and FIOASYNC in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=random&sektion=4">random(4)</a>.
1.595 deraadt 420: <li>Support i82559ER in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fxp&sektion=4">fxp(4)</a>.
421: <li>Improve handling of RIP in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcpdump&sektion=8">tcpdump(8)</a>.
422: <li>Add Rijndael support to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ipsec&sektion=4">ipsec(4)</a>.
423: <li>Import <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pppoe&sektion=8">pppoe(8)</a>.
1.599 ericj 424: <li>Fix some bugs in the IPSEC <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getsockopt&sektion=2">getsockopt(2)/setsockopt(2)</a> API regarding sizeof(int) vs sizeof(u_char).
1.594 deraadt 425: <li>Support IPV6 in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=identd&sektion=8">identd(8)</a>.
426: <li>Move IPV6 mbuf alignment requirements into input routine, removing the last performance critical one in loopback.
427: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ubsec&sektion=4">ubsec(4)</a> fixes to queue requests to the hardware properly. The device can now do ipsec with itself over loopback or the network, but something is still mangled about the actual ipsec packets.
428: <li><font color=#e00000><strong>SECURITY ISSUE: Two localhost denial of service problems in the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=an&sektion=4">an(4)</a> Aironet Communications 4500/4800 IEEE 802.11DS driver. One bug prevents <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ancontrol&sektion=8">ancontrol(8)</a> from working correctly, instead causing a panic, while the other allows unauthorized users to change settings.<br>
429: <a href=errata.html#if_an>A patch is available</a></strong></font>.<br>
430: <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
431: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=crypto&sektion=9">crypto(9)</a> kernel thread permits hardware crypto devices to run at any spl they prefer.
432: <li>Initial <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">OpenSSH</a> support for ssh.com's 2.2.0.
1.599 ericj 433: <li>For <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=setsockopt&sektion=2">setsockopt(2)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getsockopt&sektion=2">getsockopt(2)</a>, do not assume non-PF_INET6 address family to be PF_INET.
1.591 provos 434: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a>, implement bug compatibility with ssh-2.0.13.
1.590 deraadt 435: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>, include <b>=</b> in WHITESPACE, permitting commands like <b>ssh -o keyword=argument</b>.
1.594 deraadt 436: <li>Enable IPV6 support in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sendmail&sektion=8">sendmail(8)</a>.
1.590 deraadt 437: <li>Change ipsec processing sequence to handle inner and outer layers much better.
438: <li>Add support for SSH2 subsystems in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a>.
1.599 ericj 439: <li>On <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ifconfig&sektion=8">ifconfig(8)</a> down & up operations, mark all radix tree routes down or up for the specified interface.
1.591 provos 440: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mount_ffs&sektion=8">mount_ffs(8)</a>, permit the <b>-f</b> command to mount dirty file systems. This is dangerous, but makes more sense now that we are moving towards soft update file systems, where the inherent danger is much less.
1.590 deraadt 441: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ftpd&sektion=8">ftpd(8)</a>, make <b>-u</b> block the chmod client command.
442: <li>Allow extended server banners in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a>.
1.602 aaron 443: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mount&sektion=8">mount(8)</a>, <b>-o</b> force is not a negative option.
1.590 deraadt 444: <li>Add support for AMD 53c974 scsi chipset.
1.592 provos 445: <li>Import of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mount_tcfs&sektion=8">tcfs</a> into the kernel, a file content crypto file system.
1.590 deraadt 446: <li>Remove traffic-time debugging messages in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>.
447: <li>Repair small list-based errors and uglinesses in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=make&sektion=1">make(1)</a>.
448: <li>Commonalize MIN() and MAX() macros inside the kernel.
449: <li>Use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=memcmp&sektion=3">memcmp(3)</a> in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bridge&sektion=4">bridge(4)</a> to fix a hashing algorithm error.<br>
1.593 jason 450: <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
1.591 provos 451: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=memcmp&sektion=3">memcmp(3)</a> in the kernel as well, since implementing it in terms of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bcmp&sektion=3">bcmp(3)</a> is very wrong.
1.590 deraadt 452: <li>Update vnode flag printing in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pstat&sektion=8">pstat(8)</a>.
453: <li>Do not whack directory in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=user&sektion=8">user(8)</a>.<br>
1.594 deraadt 454: <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
1.590 deraadt 455: <li>Hardware random number generator in i840 also works, like i810.
456: <li>Fix an ESP status message in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=netstat&sektion=1">netstat(1)</a>.
457: <li>Put RSA into our <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&sektion=3">ssl(3)</a> tree. Since our next release is not till after the patent expires, it's OK.
1.589 deraadt 458: <li>Split sysctl information for swapencrypt into an tree, and add more gunk.
1.586 deraadt 459: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ftpd&sektion=8">ftpd(8)</a> correct STAT command output for LPSV output.
460: <li>Correct an <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ipsec&sektion=4">ipsec</a> esp bug.
461: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ftp&sektion=1">ftp(1)</a> make both <b>ls</b> and </b>dir</b> send a <b>LIST</b> command.
462: <li>Minor bug fixes and optimizations in <b>/etc/rc</b>.
463: <li>Update of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ppp&sektion=8">ppp(8)</a>.
1.587 deraadt 464: <li>Put an upper bound on transaction queue of the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ubsec&sektion=4">ubsec(4)</a>.
1.594 deraadt 465: <li>Correct source length calculation in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=hifn&sektion=4">hifn(4)</a>.<br>
466: <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
1.599 ericj 467: <li>Initial import of ELF <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rtld&sektion=1">ld.so</a>, for powerpc initially.
1.586 deraadt 468: <li>Correct secondary mbuf setup in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=hifn&sektion=4">hifn(4)</a>.
1.584 deraadt 469: <li>Broadcom Bluesteel 5x0x <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ubsec&sektion=4">ubsec(4)</a> crypto cards now supports ESP 3DES modes properly. No AH or MAC stuff yet.
1.582 deraadt 470: <li>Make flags field in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=newsyslog&sektion=8">newsyslog(8)</a> files optional.
1.585 deraadt 471: <li>Modifications to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=traceroute6&sektion=8">traceroute6(8)</a>
1.582 deraadt 472: <li>Fix ADMtek identity crisis in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dc&sektion=4">dc(4)</a>.
473: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ftpd&sektion=8">ftpd(8)</a> make sure that <b>-h</b> does high port binding in EPSV.
1.580 deraadt 474: <li>Correct ENI_SALEN case in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getnameinfo&sektion=3">getnameinfo(3)</a>.
475: <li>Correct <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getnameinfo&sektion=3">getnameinfo(3)</a> behaviour against invalid sockaddr.<br>
476: <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
1.578 deraadt 477: <li>Better fix for the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pcvt&sektion=4">pcvt(4)</a> scrolling region problem.
1.591 provos 478: <li>Grok Plan9 file systems in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fdisk&sektion=8">fdisk(8)</a>.
1.578 deraadt 479: <li>Merge newer <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ppp&sektion=8">ppp(8)</a> code.
480: <li>Do not add empty lines to history in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ftp&sektion=1">ftp(1)</a>.
1.591 provos 481: <li>Grok QNX file systems in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fdisk&sektion=8">fdisk(8)</a>.
1.577 deraadt 482: <li>Fix about 10 bugs in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ubsec&sektion=4">ubsec(4)</a>, which can now move a few packets before dying.
483: <li>Support multiple pid files in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=newsyslog&sektion=8">newsyslog(8)</a>.<br>
484: <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
1.581 espie 485: <li>On-going cleanup to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=make&sektion=1">make(1)</a>.
1.577 deraadt 486: <li>Add <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pci&sektion=4">pci(4)</a> routines for dealing with Cypress 82c693 chips.
487: <li>Minor cleanup to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pax&sektion=1">pax(1)</a>.
488: <li>Merge <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=chgrp&sektion=1">chgrp(1)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=chown&sektion=8">chown(8)</a> into <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=chmod&sektion=1">chmod(1)</a>, and provide backwards compat hard and soft links.
489: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xl&sektion=4">xl(4)</a>, add support for 3c656, which is just the 3c575 + 56k modem.
1.621 deraadt 490: <li><font color=#e00000><strong>SECURITY ISSUE: A serious bug in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd_&sektion=8">isakmpd(8)</a> policy handling wherein policy verification could be completely bypassed in isakmpd.<br>
1.576 deraadt 491: <a href=errata.html#isakmpd>A patch is available</a></strong></font>.<br>
492: <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
1.577 deraadt 493: <li>Merge to new <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a>.
1.578 deraadt 494: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">OpenSSH</a> is now at version 2.1.1<br>
495: <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
1.576 deraadt 496: <li><font color=#e00000><strong>RELIABILITY FIX: Avoid extra vrele in msdosfs, which would lead to a panic in some operations.<br>
497: <a href=errata.html#msdosfs>A patch is available</a></strong></font>.<br>
498: <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
499: <li><font color=#e00000><strong>RELIABILITY FIX: Permit NFS export of CDs without panicing the system.<br>
500: <a href=errata.html#cd9660>A patch is available</a></strong></font>.<br>
501: <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
1.602 aaron 502: <li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ping6&sektion=8">ping6(8)</a> <b>-w</b> option.
1.622 ericj 503: <li>Let flags in kernel <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=config&sektion=8">config(8)</a> specify apm protocol version and other operation modes for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=apm&sektion=4&arch=i386">apm(4)</a>, for machines apm fails on.
1.572 deraadt 504: <li>Change amiga ports loadbsd command to act more like other bsd loaders.
1.577 deraadt 505: <li>Add <strong>-iname</strong> support to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=find&sektion=1">find(1)</a>.
506: <li>Sort option list in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=find&sektion=1">find(1)</a>; oops, "-and" was broken.
507: <li>Catch a <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=malloc&sektion=3">malloc(3)</a> failure in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=paste&sektion=1">paste(1)</a>.
1.618 deraadt 508: <li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=linux_compat&sektion=8">linux_compat(8)</a> [gs]etrlimit emulation.<br>
509: <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
1.577 deraadt 510: <li>Update <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ti&sektion=4">ti(4)</a> to support newer cards with more memory.
511: <li>Kernel <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=malloc&sektion=9">malloc(9)</a> debug code.
1.569 ericj 512: <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=quot&sektion=1">quot(1)</a> work when passed mount points.
1.631 jason 513: <li>Fix stack mishandling bugs in i387 libm, in particular, in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=exp&sektion=3">exp(3)</a> and friends.<br>
514: <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
1.569 ericj 515: <li>Be more careful about tuples in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pcmcia&sektion=4">pcmcia(4)</a>.
1.573 espie 516: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=gcc&sektion=1">gcc 2.95.3 (pre-release)</a>
1.569 ericj 517: <li>Busify <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=eg&sektion=4">eg(4)</a>, to avoid conflict with ne2000 at 0x300.
1.648 fgsch 518: <li><font color=#e00000><strong>SECURITY ISSUE: Do not use the (non-default) <b>UseLogin</b> option in OpenSSH 2.1.*, it has a hole on other operating systems and does not work right in OpenBSD.<br>
1.576 deraadt 519: <a href=errata.html#uselogin>Update to OpenSSH 2.1.1 or later, or simply avoid using UseLogin</a></strong></font>.<br>
520: <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
1.585 deraadt 521: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sudo&sektion=8">sudo 1.6.3p4</a>
1.622 ericj 522: <li>Fix a kernel race in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=_exit&sektion=2">_exit(2)</a>.
1.569 ericj 523: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cut&sektion=1">cut(1)</a> deal with last input line not containing a newline
524: <li>One byte overflow in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=systat&sektion=8">systat(8)</a>.
1.583 miod 525: <li>Add <strong>D</strong> and <strong>z</strong> commands to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=disklabel&sektion=8">disklabel(8)</a> to use the default partition or zero it.
1.569 ericj 526: <li>A SIGCHLD fix in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cron&sektion=8">cron(8)</a>.
527: <li>More work on <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ubsec&sektion=4">ubsec(4)</a>.
1.622 ericj 528: <li>Bug fixes to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=spif&sektion=4&arch=sparc">spif(4)</a>.
1.567 deraadt 529: <li>Bridge packets before vlan'ing them.
1.569 ericj 530: <li>Fix a subtle bug in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xe&sektion=4">xe(4)</a> which had a number of side effects.
531: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a>, fix login count failures in SSH2 support.
1.567 deraadt 532: <li>Whack packet m_recvif field on bridged packets, permitting ipnat to work with the bridge.
1.569 ericj 533: <li>More visible /tmp file (and failure removal) in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=makewhatis&sektion=8">makewhatis(8)</a>.
1.624 jason 534: <li>Be more careful reading panic string from core in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=savecore&sektion=8">savecore(8)</a>.<br>
535: <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
1.569 ericj 536: <li>Many other changes to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>.
537: <li>Fix short malloc in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=faithd&sektion=8">faithd(8)</a>.
1.591 provos 538: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>, permit logins if temporary file systems are full.
1.569 ericj 539: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ich&sektion=4">ich(4)</a> audio driver onboard the Intel 810/820/440MX-based machines.
540: <li>Support ax88190 in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ne&sektion=4">ne(4)</a>.
1.622 ericj 541: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=apm&sektion=4&sektion=i386">apm(4)</a> the time is kept in hours, not minutes.
1.585 deraadt 542: <li>Add <strong>-A</strong> support to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>.
1.569 ericj 543: <li>Support for 3c574 and 3CCFEM556BI <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pcmcia&sektion=4">pcmcia(4)</a> in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ep&sektion=4">ep(4)</a>.
1.566 deraadt 544: <li>A start at documenting what goes on inside <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=config&sektion=8">config(8)</a> files.
545: <li>Enable <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mg&sektion=1">mg(1)</a>.
546: <li>Space treatment in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ipcs&sektion=1">ipcs(1)</a>.
547: <li>Do not treat <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bind&sektion=2">bind(2)</a> with <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ip&sektion=4">IPv4</a> mapped address in a special way.
548: <li>Creation of 2.7-stable release, see our <a href="stable.html">page describing it</a>.
549: <li>Convert <a href="amiga.html">amiga</a> port to UVM.
1.564 ericj 550: <li>Arrange to have <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ahc&sektion=4">ahc(4)</a> support Adaptec 2930CU.
1.648 fgsch 551: <li><font color=#e00000><strong>SECURITY ISSUE: It was possible to bypass the <b>learning</b> flag on a bridge.<br>
1.576 deraadt 552: <a href=errata.html#bridge>A patch is available</a></strong></font>.<br>
553: <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
1.648 fgsch 554: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ftp&sektion=1">ftp(1)</a>, do not attach <b>Host:</b> directive if we are using the proxy.
1.563 deraadt 555: <li>Make almost all manual pages machine independent.
1.585 deraadt 556: <li><font color=#e00000><strong>DRIVER FIX: The <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isapnp&sektion=4">isapnp(4)</a> <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ef&sektion=4">ef(4)</a> driver failed to configure properly.<br>
1.576 deraadt 557: <a href=errata.html#ef>A patch is available</a></strong></font>.<br>
558: <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
1.585 deraadt 559: <li>Helper script cleanup in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=httpd&sektion=8">httpd(8)</a>.
560: <li><font color=#e00000><strong>SECURITY ISSUE: Update to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ipf&sektion=4">ipf 3.3.16</a>.<br>
1.576 deraadt 561: <a href=errata.html#ipf>A patch is available</a></strong></font>.<br>
562: <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
1.563 deraadt 563: <li>On i386, place extra byte at end of pcb so that the iomap works for last 8 ports.
1.585 deraadt 564: <li>Fix some key parsing routines in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>.
1.563 deraadt 565: <li>Permit detach of audio devices.
1.585 deraadt 566: <li>Properly configure multicast table in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wi&sektion=4">wi(4)</a>.
567: <li>Handle 64 bit architectures in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pstat&sektion=8">pstat(8)</a> -f.
568: <li>Update <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rtadvd&sektion=8">rtadvd(8)</a>.
1.622 ericj 569: <li>Remove <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=nfsiod&sektion=8&manpath=OpenBSD+2.7">nfsiod(8)</a> and replace it with an in-kernel thread based implementation.
1.585 deraadt 570: <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> X11 forwarding work on localhost.
1.563 deraadt 571: <li>Crank vnode use counts to 32 bits.
1.585 deraadt 572: <li>Correct <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ifconfig&sektion=8">ifconfig(8)</a> printing of gif physical address on non-IPV6 kernel.
1.576 deraadt 573: <li><font color=#e00000><strong> RELIABILITY FIX: Repair a routing table panic.<br>
574: <a href=errata.html#route>A patch is available</a></strong></font>.<br>
575: <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
1.622 ericj 576: <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ancontrol&sektion=8">ancontrol(8)</a> act like our changed <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wicontrol&sektion=8&arch=i386">wicontrol(8)</a> semantics.
1.564 ericj 577: <li>Use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getifaddrs&sektion=3">getifaddrs(3)</a> in libc rpc code.
1.585 deraadt 578: <li>For <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=boot_config&sektion=8">boot_config(8)</a> code, save enable command in the history for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=config&sektion=8">config(8)</a>'s -eu updating.
1.594 deraadt 579: <li>Update multicasting support for IPV6.
1.585 deraadt 580: <li>Fix usage printing in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=passwd&sektion=1">passwd(1)</a>.
1.622 ericj 581: <li>By default, do not vsync blank sparc <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cgsix&sektion=4&arch=sparc">cgsix(4)</a> monitors, but provide a sysctl to do so.
1.561 deraadt 582: <li>Start at a BlueSteel (Broadcom) 5[56]01 crypto accelerator driver.
1.564 ericj 583: <li>Accept empty shell specifications in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a>.
1.585 deraadt 584: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>, do non-blocking on ssh1 protocol sockets too.
1.629 jason 585: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=makewhatis&sektion=8">makewhatis(8)</a>, do not stop if the directory does not exist.<br>
1.628 jason 586: <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
1.585 deraadt 587: <li>Some additions to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=keynote&sektion=3">keynote(3)</a>.
1.561 deraadt 588: <li>Crank rt_refcnt to 32 bits.
589: <li>Supply entropy from i386 mouse drivers to the kernel random number generator.
1.585 deraadt 590: <li>Correct p2p interface address handling and various other bugs in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=route6d&sektion=8">route6d(8)</a>.
1.561 deraadt 591: <li>Few more tweaks to pcvt termcap definition.
592: <li>Ensure SIOCSETVLAN gets a valid vlan tag.
1.585 deraadt 593: <li>After <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ftp&sektion=1">ftp(1)</a> finishes downloading, change progress meter to show the total elapsed time.
594: <li>Handle 0-size files in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ftp&sektion=1">ftp(1)</a>'s progress meter.
595: <li>Parse RFC2732 ftp URLs in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ftp&sektion=1">ftp(1)</a>.
1.594 deraadt 596: <li>In IPV6, perform NUD on p2p link, only if the destination/gateway is real neighbor.
1.580 deraadt 597: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getaddrinfo&sektion=3">getaddrinfo(3)</a>, translate DNS error code into getaddrinfo error code (EAI_xxx).<br>
598: <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
1.576 deraadt 599: <li><font color=#e00000><strong> RELIABILITY FIX: Parse IPv4 options more carefully.<br>
600: <a href=errata.html#ipopts>A patch is available</a></strong></font>.<br>
601: <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
1.585 deraadt 602: <li>Translate DNS error codes in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getaddrinfo&sektion=3">getaddrinfo(3)</a>.
603: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cardbus&sektion=4">cardbus(4)</a> <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=com&sektion=4">com(4)</a> driver.
1.602 aaron 604: <li>Support debugging libraries via DEBUGLIBS in <b>/etc/mk.conf</b>.
1.621 deraadt 605: <li>Driver for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcic&sektion=4">tcic(4)</a> style pcmcia adapters.
1.585 deraadt 606: <li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ipsec&sektion=4">ipsec(4)</a> ESP sanity checks that caused really short packets to be dropped. Only icmp was affected.
1.422 deraadt 607: </ul>
608: <p>
1.203 deraadt 609:
1.95 deraadt 610: This list mentions mostly platform-independent changes. For a list of changes
611: made in a particular platform, please check the page for that platform. If you
612: find them not listed there, the changes are either (1) not being documented or
613: (2) are documented here.<br><br>
1.14 deraadt 614:
615: <hr>
1.424 deraadt 616: <p>
617: <h3>
1.477 deraadt 618: <a href=plus20.html>For changes leading up to OpenBSD 2.0, click here</a>.<br>
619: <a href=plus21.html>For changes leading up to OpenBSD 2.1, click here</a>.<br>
620: <a href=plus22.html>For changes leading up to OpenBSD 2.2, click here</a>.<br>
621: <a href=plus23.html>For changes leading up to OpenBSD 2.3, click here</a>.<br>
622: <a href=plus24.html>For changes leading up to OpenBSD 2.4, click here</a>.<br>
623: <a href=plus25.html>For changes leading up to OpenBSD 2.5, click here</a>.<br>
624: <a href=plus26.html>For changes leading up to OpenBSD 2.6, click here</a>.<br>
1.560 deraadt 625: <a href=plus27.html>For changes leading up to OpenBSD 2.7, click here</a>.<br>
1.424 deraadt 626: <a href=plus.html>For changes in OpenBSD-current, click here</a>.
627: <br>
628: </h3>
629:
630: <hr>
1.292 pauls 631: <a href="index.html"><img height=24 width=24 src=back.gif border=0 alt=OpenBSD></a>
1.14 deraadt 632: <a href=mailto:www@openbsd.org>www@openbsd.org</a>
1.668 ! jason 633: <br><small>$OpenBSD: plus.html,v 1.667 2000/10/21 04:43:45 jason Exp $</small>
1.14 deraadt 634:
635: </body>
636: </html>