Annotation of www/plus.html, Revision 1.900
1.863 naddy 1: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
1.14 deraadt 2: <html>
3: <head>
1.424 deraadt 4: <title>OpenBSD-current changes</title>
1.728 horacio 5: <link rev="made" href="mailto:www@openbsd.org">
1.14 deraadt 6: <meta name="resource-type" content="document">
1.716 deraadt 7: <meta name="description" content="OpenBSD-current changes">
8: <meta name="keywords" content="openbsd,current,changes">
1.14 deraadt 9: <meta name="distribution" content="global">
1.810 horacio 10: <meta name="copyright" content="This document copyright 1996-2002 by OpenBSD.">
1.14 deraadt 11: </head>
12:
1.728 horacio 13: <body bgcolor="#ffffff" text="#000000" link="#23238e">
1.14 deraadt 14:
1.828 jsyn 15: <a href="index.html"><img alt="[OpenBSD]" height="30" width="141" src="images/smalltitle.gif" border="0"></a>
1.64 downsj 16: <p>
1.889 david 17: <h2><font color="#e00000">Changes made between OpenBSD 3.4 and OpenBSD-current</font></h2>
1.863 naddy 18: <hr>
1.14 deraadt 19:
20: <p>
1.823 jsyn 21: This is a partial list of the major machine-independent changes
1.602 aaron 22: (i.e., these are the changes people ask about most often). Port
1.29 deraadt 23: specific changes have also been made, and are sometimes mentioned
1.728 horacio 24: in the pages for the specific <a href="plat.html">platforms</a>.
1.14 deraadt 25:
1.17 deraadt 26: <p>
1.725 naddy 27: Changes to the <a href="ports.html">ports</a> collection are documented
1.747 naddy 28: <a href="portsplus/index.html">here</a>.
1.725 naddy 29:
30: <p>
1.863 naddy 31: Note: <font color="#e00000">Problems for which patches exist are marked in red</font>.
1.185 deraadt 32:
33: <p>
1.186 deraadt 34: <h3>
1.846 deraadt 35: For changes in other releases, click below:<br>
36: <a href="plus20.html">2.0</a>,
37: <a href="plus21.html">2.1</a>,
38: <a href="plus22.html">2.2</a>,
39: <a href="plus23.html">2.3</a>,
40: <a href="plus24.html">2.4</a>,
41: <a href="plus25.html">2.5</a>,
42: <a href="plus26.html">2.6</a>,
43: <a href="plus27.html">2.7</a>,
44: <a href="plus28.html">2.8</a>,
45: <a href="plus29.html">2.9</a>,
46: <a href="plus30.html">3.0</a>,
47: <a href="plus31.html">3.1</a>,
1.868 deraadt 48: <a href="plus32.html">3.2</a>,
1.889 david 49: <a href="plus33.html">3.3</a>,
50: <a href="plus34.html">3.4</a>.
1.422 deraadt 51: <br>
1.186 deraadt 52: </h3>
53:
54: <p>
1.863 naddy 55: <h3><font color="#0000e0">We are working on OpenBSD-current.</font></h3><p>
1.900 ! deraadt 56: The following list sums up (almost) all the changes made up to December 31.
1.847 deraadt 57: <p>
58:
1.422 deraadt 59: <ul>
1.900 ! deraadt 60: <!-- ^ 20040101 -->
! 61: <li>Undefer and handle pending signals in all code paths of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pthread_join&sektion=3">pthread_join(3)</a>.
! 62: <li>On i386, stop the FPU exception tests hanging amd64 and new Transmeta CPUs.
! 63: <li>Have <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xdm&sektion=1">xdm(1)</a>'s Xsession script reap the SSH agent on session shutdown even if the user has a ~/.xsession file.
! 64: <li>Make 'vi -r foo' work the way the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=vi&sektion=1">vi(1)</a> manpage says it should instead of dying.
! 65: <li>Many improvements to network interface handling in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a>. See the <a href="http://www.openbsd.org/cgi-bin/cvsweb/src/sys/net/pf.c#rev1.414">commit log</a> for details.
! 66: <li>Add <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=svc_getreq_poll&sektion=3">svc_getreq_poll(3)</a> and switch libc RPC code to use its <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=poll&sektion=2">poll(2)</a> interface instead of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=select&sektion=2">select(2)</a>.
! 67: <li>Have <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> properly ignore an (unupported) SSH2 password change request and the suggested new password.
! 68: <li>Change <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wait4&sektion=2">wait4(2)</a>'s prototype to take a pid_t instead of an int for the first argument, like the manpage says.
! 69: <!-- ^ 20031231 -->
! 70: <li>Define _FFR_DEAL_WITH_ERROR_SSL to stop SSL errors sending <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sendmail&sektion=8">sendmail(8)</a> into an endless loop.
! 71: <li>Don't do <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=TAILQ_REMOVE&sektion=3">TAILQ_REMOVE(3)</a> while inside a TAILQ_FOREACH loop in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&sektion=8">pfctl(8)</a>.
! 72: <!-- ^ 20031230 -->
! 73: <li>As system startup, run vi.recover after <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ldconfig&sektion=8">ldconfig(8)</a> so that <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=perl&sektion=1">perl(1)</a> and the MTA can find their shared libraries.
! 74: <li>Convert <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=syslogd&sektion=8">syslogd(8)</a> to use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=poll&sektion=2">poll(2)</a> instead of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=select&sektion=2">select(2)</a> in its main event loop.
! 75: <li>Once <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=grep&sektion=1">grep(1)</a> and friends have identified a file as binary, seek back to the beginning before continuing.
! 76: <li>Unbreak <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=zgrep&sektion=1">zgrep(1)</a> when the uncompressed file begins with a newline.
! 77: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=disklabel&sektion=8">disklabel(8)</a> add new size unit types '%' and '&' to specify, respectively, percentage of disk size and percentage of remaining disk space.
! 78: <li>Allow a precision (-p option) of zero in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=jot&sektion=1">jot(1)</a>.
! 79: <li>On i386, properly recognise SiS CPUs.
! 80: <li>Hack around a reentrancy bug in the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cvs&sektion=1">cvs(1)</a> server's abnormal exit handler.
! 81: <li>Allocate what's required for an identifier in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=config&sektion=8">config(8)</a> instead of an arbitrary 500-byte buffer (PR#3614.)
! 82: <li>Stop libcurses++ fooling with libstdc++ internals so it compiles under gcc3.
! 83: <!-- ^ 20031229 -->
! 84: <li>Add -4 and -6 options to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=telnet&sektion=1">telnet(1)</a> for IPv4- and IPv6-only operation (PR#1974.)
! 85: <li>Tag <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ahc&sektion=4">ahc(4)</a> I/O operations requeued as a result of aborts, timeouts etc. so that they're not treated as successfully completed operations.
! 86: <li>Update <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=security&sektion=8">security(8)</a> after the recent <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=join&sektion=1">join(1)</a> change prompted by PR#2208.
! 87: <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=join&sektion=1">join(1)</a> more POSIX for non-matching lines (PR#2208.)
! 88: <li>Add dirhash feature from FreeBSD, which uses an in-memory hash table for lookups in large directories. Not enabled by default yet. See UFS_DIRHASH in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=options&sektion=4">options(4)</a>.
! 89: <li>Extend the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfsync&sektion=4">pfsync(4)</a> protocol to allow a peer to query for complete state information should it receive an update for a state it knows nothing about.
! 90: <li>Check for oversize allocations earlier in kernel <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=malloc&sektion=9">malloc(9)</a>.
! 91: <li>Fix some peculiar macro token pasting in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fvwm&sektion=1">fvwm(1)</a>.
! 92: <li>Properly initialise the C++ constructor and destructor lists for ELF, killing a gcc3 warning in libstdc++.
! 93: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=huntd&sektion=6">huntd(6)</a>, stop doing <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=va_end&sektion=3">va_end(3)</a> on the varargs format string.
! 94: <!-- ^ 20031228 -->
! 95: <li>Add a missing zero-fill before contructing <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfsync&sektion=4">pfsync(4)</a> output in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcpdump&sektion=8">tcpdump(8)</a>.
! 96: <li>Fix a couple of bugs with negative values in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fmt_scaled&sektion=3">fmt_scaled(3)</a>, and don't print fractions of bytes.
1.899 deraadt 97: <!-- ^ 20031227 -->
98: <li>Overhaul <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpd&sektion=8">bgpd(8)</a>'s error handling and logging.
99: <li>Allow an 'arch' annotation to be stored within packages by <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pkg_create&sektion=1">pkg_create(1)</a>.
100: <li>Have <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pkg_add&sektion=1">pkg_add(1)</a> report on the amount of space used on each filesystem.
101: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpd&sektion=8">bgpd(8)</a>, treat localhost network 127/8 as if it were a connected network and don't allow it to be deleted.
102: <li>Halve the amount of space allocated for AES in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ipsec&sektion=4">ipsec(4)</a> by making the contexts encryption- or decryption-specific.
103: <li>Enable nexthop verification in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpd&sektion=8">bgpd(8)</a>.
104: <!-- ^ 20031226 -->
105: <li>On m68k, m88k, sparc, sparc64 and vax, fix a signed comparison bug in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=brk&sektion=2">brk(2)</a>.<br>
106: <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
107: <li>Update libiberty to that from binutils-2.14.
108: <li>Add passive mode (no TCP connection to the peer) to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpd&sektion=8">bgpd(8)</a>.
109: <!-- ^ 20031225 -->
110: <li>Huge sync of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ahc&sektion=4">ahc(4)</a> to NetBSD, which in turn is sync'd to FreeBSD. Many bugs fixed, several left to fix.
111: <li>Connect <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpd&sektion=8">bgpd(8)</a> to the build, along with an example <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpd.conf&sektion=5">bgpd.conf(5)</a> file. Lots of work still needed.
112: <li>Let the pkg_* tools' new virtual filesystem to cope with mount points with no options, e.g. AFS.
113: <li>Enable hw.cpuspeed <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sysctl&sektion=3">sysctl(3)</a> on macppc.
114: <!-- ^ 20031224 -->
115: <li>Add stubs for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pthread_setconcurrency&sektion=3">pthread_[gs]etconcurrency(3)</a>. From FreeBSD.
116: <li>Fix a descriptor leak in libpthread when doing <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=close&sektion=2">close(2)</a> on fds 0,1 or 2. Based on a fix in FreeBSD, but implemented differently.
117: <li>In libpthread, make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=accept&sektion=2">accept(2)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=connect&sektion=2">connect(2)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=recvfrom&sektion=2">recvfrom(2)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=recvmsg&sektion=2">recvmsg(2)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sendmsg&sektion=2">sendmsg(2)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sendto&sektion=2">sendto(2)</a> cancellation points as required by POSIX.1-2001. From FreeBSD.
118: <li>Deallocate <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xl&sektion=4">xl(4)</a> resources on attach failures.
119: <li>Enable bus mastering on <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fxp&sektion=4">fxp(4)</a>. Oh yes.
120: <li>New <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a> option KerberosGetAFSToken.
121: <li>Have <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ifconfig&sektion=8">ifconfig(8)</a> automagically create network pseudo-interfaces.
122: <li>Mercifully, turn the non-monotonic time warning off #ifndef DEBUG.
123: <li>Initialise the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=url&sektion=4">url(4)</a> MAC address properly (PR#3612.)
124: <li>When <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sudo&sektion=8">sudo(8)</a> is run with -k or -K only compain about missing usernames to stderr and don't log anything, since we may be running in a .logout script at shutdown and the YP etc. daemon may have gone away.
125: <!-- ^ 20031223 -->
126: <li>Fix a remotely exploitable crasher in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcpdump&sektion=8">tcpdump(8)</a>'s l2tp parser (PR#3610.)<br>
127: <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
128: <li>Properly clean up 3DES cipher contexts in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>.
129: <li>Make sure a signal handler-modified variable in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sensorsd&sektion=8">sensorsd(8)</a> is typed as volatile sig_atomic_t.
130: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wsmoused&sektion=8&arch=i386">wsmoused(8)</a> (and bgpd) don't set up a handler for SIGKILL since that signal isn't passed to the process at all ever.
131: <li>Fix a pasto (from the recent source-tracking additions) in the implementation of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> DIOCSTART.
132: <li>Fix end-of-tape handling under pthreads. Fix from FreeBSD PR#56274, including the fix to the fix in FreeBSD PR#59291.
133: <!-- ^ 20031222 -->
134: <li>Use a virtual filesystem in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pkg_add&sektion=1">pkg_add(1)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pkg_delete&sektion=1">pkg_delete(1)</a> so they can test for available space and writeability before attempting to do the real operations.
135: <li>Much work on the new bgpd.
1.898 miod 136: <li>Remove the recursive format string option '%:' from kernel <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=printf&sektion=9">printf(9)</a>.
1.897 deraadt 137: <li>Change in*_pcbnotify() to return the number of matches.
138: <li>Check for multicasts earlier when processing TCP input, to reduce the amount of redundant processing.
139: <!-- ^ 20031221 -->
140: <li>For <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=semop&sektion=2">semop(2)</a> calls with a small number of operations, use the stack instead of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=malloc&sektion=9">malloc(9)</a>'d memory to reduce overhead. Adapted from FreeBSD.
141: <li>Fix some unbounded <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sscanf&sektion=3">sscanf(3)</a>s in the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=usbhid&sektion=3">usbhid(3)</a> library.
142: <li>On i386, add a driver for the Pentium 4's thermal control circuit.
143: <!-- ^ 20031220 -->
144: <li>Stop <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcpdump&sektion=8">tcpdump(8)</a> printing garbage <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfsync&sektion=4">pfsync(4)</a> states when the snaplen is less than the sender's MTU.
145: <li>Have <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dc&sektion=1">dc(1)</a> handle SIGINT in a rational way, and have <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bc&sektion=1">bc(1)</a> pass SIGINT to dc to handle in a rational way.
146: <li>When updating process stats, check for non-monotonically-increasing time from <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=microtime&sektion=9">microtime(9)</a>, deal with it by doing nothing instead of zeroing the counter, and complain #ifdef DIAGNOSTIC.
147: <!-- ^ 20031219 -->
148: <li>Enhanced Intel SpeedStep support on i386.
149: <li>New <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sysctl&sektion=3">sysctl(3)</a> variables hw.cpuspeed and hw.setperf on i386, used to control LongRun.
150: <li>Only modulate the TCP timestamp (<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> scrub reassemble tcp) if there's a valid timestamp to be modulated.
151: <li>Allow ARP replies containing Ethernet multicast addresses, since some HA products want to do this.
152: <li>Show <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcpdump&sektion=8">tcpdump(8)</a> how to recognise IKE NAT-D and NAT-OA payloads.
153: <li>When <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a> gives up on a message, show the exchange name in the log.
154: <!-- ^ 20031218 -->
155: <li>Change <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfsync&sektion=4">pfsync(4)</a> multicast group to 224.0.0.240, and IP protocol (pfsync in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=protocols&sektion=5">protocols(5)</a>) to 240.
156: <li>New pseudo-user _bgpd with matching group.
157: <li>Begin spanning tree operation when a <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bridge&sektion=4">bridge(4)</a> interface comes up.
158: <li>New BGP daemon, bgpd. Not complete, and not built by default yet.
159: <li>Do a real inverse-colour cursor for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rasops&sektion=9">rasops(9)</a>-based consoles. Based on a similar change in NetBSD.
160: <li>New <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=kqueue&sektion=2">kqueue(2)</a> filters NOTE_EOF and NOTE_TRUNCATE.
161: <li>Add <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ccd&sektion=4">ccd(4)</a> and a newly-shrunken version of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ccdconfig&sektion=8">ccdconfig(8)</a> to the i386 CD ramdisk kernel.
162: <!-- ^ 20031217 -->
163: <li>Update the kernel zlib to 1.2.1.
164: <li>Shrink even more the special gzip used for boot floppies. It now does decompress only and is directly compiled in.
165: <li>Update userland zlib to 1.2.1, with local fixes. New major version, libz.so.3.0.
166: <li>Don't let <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cvs&sektion=1">cvs(1)</a> pass null labels through to its diff command when <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=stat&sektion=2">stat(2)</a> fails for an input file.
167: <li>When filtering on a <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bridge&sektion=4">bridge(4)</a>, compare the destination in the filter with the destination address of the packet, not the source address.
168: <li>New <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=queue&sektion=3">queue(3)</a> macros SLIST_FOREACH_PREVPTR (from FreeBSD) and SLIST_REMOVE_NEXT.
169: <li>Allow cloner interfaces to return an error from their destroy function.
170: <li>Much string cleaning and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=abort&sektion=3">abort(3)</a> -> <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=exit&sektion=3">exit(3)</a> in the AFS library.
171: <li>Stop <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=newsyslog&sektion=8">newsyslog(8)</a> segfaulting when given an empty command (PR#3578.)
172: <li>Fix a couple of missing <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=printf&sektion=3">printf(3)</a> args in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=monop&sektion=6">monop(6)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mopd&sektion=8">mopd(8)</a>.
173: <li>New environment variable MANPAGER for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=man&sektion=1">man(1)</a> (PR#3563.)
174: <li>Add app-layer keepalive option 'ServerAliveInterval' to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>, analogous to ClientAliveInterval on the server.
175: <li>Don't do expensive <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfsync&sektion=4">pfsync(4)</a> processing if noone is using it (i.e. no <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bpf&sektion=4">bpf(4)</a> listeners, and no network synchronisation.)
176: <li>Shorten or '#ifdef SMALL'-out some long message strings in the kernel.
177: <li>A round of boot floppy space-saving begins.
178: <!-- ^ 20031216 -->
179: <li>When calculating CPU time usage, check for a time-going-backwards bug in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=microtime&sektion=9">microtime(9)</a> found on some dual-clock systems.
180: <li>Fix some fallout from the rlim_t change from signed to unsigned.
181: <li>Add support for groups 14 through 18 (modp{2048,2072,4096,6144,8192} - see RFC 3526) to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a>.
182: <li>Initial support for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> state synchronisation over the network. See <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfsync&sektion=4">pfsync(4)</a>.
183: <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sh&sektion=1">sh(1)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ksh&sektion=1">ksh(1)</a> functions work the way the manual page suggests with respect to non-exported environment variables (PR#2450.)
184: <li>Allow <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> to track stateful connections based on the source IP address. Especially useful for load balancing configurations.
185: <!-- ^ 20031215 -->
186: <li>Add <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=awk&sektion=1">awk(1)</a> USD paper in /usr/share/doc/usd/16.awk.
187: <li>Don't assume that the IKE port is always 500 in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a> log output.
188: <li>Alignment fixes for kernel and libc RMD160 functions.
189: <!-- ^ 20031214 -->
1.896 deraadt 190: <li>Initial support for ifconfig destroy in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ppp&sektion=4">ppp(4)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sl&sektion=4">sl(4)</a>
191: <!-- ^ 20031213 -->
192: <li>Don't accept absolute pathnames for module names in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cvs&sektion=1">cvs(1)</a>. From CVS 1.11.10.
193: <li>Cleanup and POSIXness for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=join&sektion=1">join(1)</a>. From FreeBSD.
194: <!-- ^ 20031212 -->
195: <li>More POSIX type definitions (rlim_t now unsigned, RLIM_SAVED_{CUR,MAX} defined, id_t defined.)
196: <li>Kill annoying <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> assertion failure messages, and correct the underlying problem with NAT and table stats (PR#3587.)
197: <li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sis&sektion=4">sis(4)</a> short cable problems properly. From Linux and the datasheets, via FreeBSD.
198: <!-- ^ 20031211 -->
199: <li>Also for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=poll&sektion=2">poll(2)</a>, add pollfd_t (= struct pollfd) as in Solaris.
200: <li>Add type nfds_t for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=poll&sektion=2">poll(2)</a> as per POSIX.
201: <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pkg_delete&sektion=1">pkg_delete(1)</a> flag an attempt to delete a non-existent package as an error.
202: <li>For IPv6 multicast sockets, validate the get/<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=setsockopt&sektion=2">setsockopt(2)</a> argument more strictly to preventing a local user causing a kernel panic. From KAME.
203: <li>Big register declaration purge in sys/net*.
204: <li>Better non-repetitive ID generation for IPv4, IPv6 and resolver query IDs.
205: <li>Some improvements to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=authpf&sektion=8">authpf(8)</a>'s logging output.
206: <li>Fix up netinet and netinet6 interface lookup code after the introduction of clonable devices.
207: <!-- ^ 20031210 -->
208: <li>Clear the exit code when <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> with -N is terminated with SIGTERM.
209: <li>Sync <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=em&sektion=4">em(4)</a> with FreeBSD, enabling support for a few more models.
210: <li>Fix some *printf(char *) silliness in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=identd&sektion=8">identd(8)</a>.
211: <li>Rename the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> option KeepAlive to TCPKeepAlive to help people who just won't read manual pages.
212: <li>Better -n handling for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pkg_add&sektion=1">pkg_add(1)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pkg_delete&sektion=1">pkg_delete(1)</a> when dependencies are involved.
213: <li>Make explicit the base package to which <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pkg_add&sektion=1">pkg_add(1)</a>'s dependency resolution output applies.
214: <li>Fix error-handling logic in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pkg_add&sektion=1">pkg_add(1)</a> that affected the -n option.
215: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a>, don't modify argv when parsing the -o option (unbreaks HUP for sshd.)
216: <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> option ClientKeepAlive work when the -N option (no login shell) is in effect.
217: <li>Stop <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh-keygen&sektion=1">ssh-keygen(1)</a>'s -T option from accepting primes with no known generator.
218: <li>Add some PostScript docs for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=lex&sektion=1">lex(1)</a>.
219: <li>Fix some missing <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=printf&sektion=3">printf(3)</a> args in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tn3270&sektion=1">tn3270(1)</a> and kernfs.
220: <li>Some cleanup in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=compress&sektion=1">compress(1)</a>.
1.899 deraadt 221: <li>Allow more than one user at a time to use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ftp&sektion=1">ftp(1)</a> in active mode (PR#3596.)<br>
222: <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
223: <li>Unbreak xfs symlinks (PR#3552.)<br>
224: <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
1.895 deraadt 225: <!-- ^ 20031209 -->
226: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=patch&sektion=1">patch(1)</a>, get a private mapping from <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mmap&sektion=2">mmap(2)</a> instead of a default (file) mapping.
227: <li>Fix a crash in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=troff&sektion=1">troff(1)</a>.
228: <li>Don't drop the newest TCP connection when doing SYN flood avoidance when we meant to drop the oldest.
1.899 deraadt 229: <li>Fix an endianness bug in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=gre&sektion=4">gre(4)</a> when sending to ip_output.<br>
230: <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
1.895 deraadt 231: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a>, make IPv6 redirects to loopback work the same way as for IPv4 and not require an additional route-to line.
232: <li>Fix a too-low <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=spl&sektion=9">spl(9)</a> in the nfs client code.
233: <li>New <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ifconfig&sektion=8">ifconfig(8)</a> option -C (and supporting <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ioctl&sektion=2">ioctl(2)</a> SIOCIFGCLONERS) that lists all cloning-capable devices.
234: <li>New <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mbuf_tags&sektion=9">mbuf_tags(9)</a> type ...PF_TRANSLATE_LOCALHOST, used so that <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> redirection to localhost doesn't defeat the ability of programs like <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=portmap&sektion=8">portmap(8)</a> to tell localhost connections from remote connections.
235: <!-- ^ 20031208 -->
1.896 deraadt 236: <li>Add ifconfig create support to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ppp&sektion=4">ppp(4)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sl&sektion=4">sl(4)</a>. No ifconfig destroy yet.
1.895 deraadt 237: <li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=regex&sektion=3">regex(3)</a> handling of non-ASCII characters (PR#3594.) Fix from FreeBSD.
238: <!-- ^ 20031207 -->
239: <li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=grep&sektion=1">grep(1)</a>'s handling of certain patterns containing multiple dots (PR#3597.)
240: <li>Make ifconfig destroy work on <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tun&sektion=4">tun(4)</a>.
241: <!-- ^ 20031206 -->
242: <li>Fix an endianness bug that was causing <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wicontrol&sektion=8">wicontrol(8)</a> to crash.
243: <li>Set <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=madvise&sektion=2">madvise(2)</a> flag MADV_RANDOM for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mfs&sektion=8">mfs(8)</a> filesystems.
244: <!-- ^ 20031205 -->
245: <li>Validate the SPIs presented in DELETE messages when doing an <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a> informational exchange.
246: <li>Have the installer ask whether <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a> should be enabled at first boot. The default is to enable it.
247: <li>Enable multicast reception for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=em&sektion=4">em(4)</a>.
248: <li>Do a screen split when more than one file is opened on <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mg&sektion=1">mg(1)</a>'s command line.
249: <li>Unbreak <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mg&sektion=1">mg(1)</a>'s META key support.
250: <!-- ^ 20031204 -->
251: <li>Fix a sign comparison bug in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=semop&sektion=2">semop(2)</a>.
252: <li>Add cloning support to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bridge&sektion=4">bridge(4)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=carp&sektion=4">carp(4)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=faith&sektion=4">faith(4)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=gif&sektion=4">gif(4)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=gre&sektion=4">gre(4)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=lo&sektion=4">lo(4)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tun&sektion=4">tun(4)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=vlan&sektion=4">vlan(4)</a>.
253: <li>Support for interface 'cloning,' accessed by <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ifconfig&sektion=8">ifconfig(8)</a> commands <em>create</em> and <em>destroy</em>. E.g. 'ifconfig vlan100 create'
254: <li>Add a dmesg command to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ddb&sektion=4">ddb(4)</a>.
255: <li>Don't allow too many network interfaces (>65535) to be attached.
256: <li>Merge Perl 5.8.2.
257: <!-- ^ 20031203 -->
258: <li>Add an hppa target to gcc3.
259: <li>Add support for UDP encapsulation of ESP in transport mode (see draft-ietf-ipsec-udp-encaps-XX.txt,) enabled via new <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sysctl&sektion=3">sysctl(3)</a> toggle net.inet.esp.udpencap.
260: <li>Use a consistent, high listen backlog for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh-agent&sektion=1">ssh-agent(1)</a> and forwarding sockets.
261: <li>Fix an off-by-one in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dc&sektion=1">dc(1)</a>.
262: <li>Cosmetic improvements to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>'s progress meter.
263: <li>Let <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bc&sektion=1">bc(1)</a> compile programs with more than 10,000 lines.
264: <li>Add support for long variable names to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bc&sektion=1">bc(1)</a>, another non-portable extension.
265: <li>Add <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=kqueue&sektion=2">kqueue(2)</a> support to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tun&sektion=4">tun(4)</a>.
266: <li>Use now instead of the epoch as the timebase for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=compat_linux&sektion=8">compat_linux(8)</a> function alarm().
267: <li>Avoid a null-deref in uvm_swap_markbad().
268: <li>Check signedness before dereferencing in kernel descriptor management code.
269: <!-- ^ 20031202 -->
270: <li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=csh&sektion=1">csh(1)</a> variable substitution when shortening strings (PR#3591.)
271: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=aliases&sektion=5">aliases(5)</a>, direct mail for most fake users (e.g. _syslogd) to /dev/null instead of spamming root.
272: <li>Add an amd64 target to gcc3.
273: <li>Add extended register support in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dc&sektion=1">dc(1)</a> (-x option,) ready for long variable names support coming to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bc&sektion=1">bc(1)</a> soon.
274: <li>Cleanup of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mopd&sektion=8">mopd(8)</a>.
275: <!-- ^ 20031201 -->
276: <!-- ^ 20031130 -->
277: <li>Add OpenBSD-specific options to gcc3.
278: <li>Import (but do not yet enable) GCC 3.3.2, without the ADA frontend for space reasons.
279: <li>New ':' (inclusive range) operator for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a>, works anywhere in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf.conf&sektion=5">pf.conf(5)</a> that '><' (exclusive range) works.
280: <!-- ^ 20031129 -->
281: <li>Fix the regex in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=security&sektion=8">security(8)</a> that tests for valid group names.
282: <li>More fixes to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> stats gathering.
283: <li>Fix NFS-over-TCP speed when OpenBSD is serving Linux clients (PR#3561.)
284: <!-- ^ 20031128 -->
285: <li>Allow <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=systrace&sektion=1">systrace(1)</a> to accept usernames ending in '$'.
286: <li>Fix missing <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=printf&sektion=3">printf(3)</a> arguments in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=eeprom&sektion=8&arch=sparc">eeprom(8)</a>, elf2aout and elf2ecoff.
287: <!-- ^ 20031127 -->
288: <li>Discard the first 256 bytes of the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=arc4random&sektion=3">arc4random(3)</a> keystream as recommended by the "Weaknesses in the Key Scheduling Algorithm of RC4" <a href="http://www.wisdom.weizmann.ac.il/~itsik/RC4/Papers/Rc4_ksa.ps">paper</a>.
289: <li>Fix a core dump in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dc&sektion=1">dc(1)</a> when reading uninitialised array locations.
290: <li>Some gcc3 compatibility cleanup.
291: <!-- ^ 20031126 -->
292: <li>Fix SIOCGIFHWADDR under <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=compat_linux&sektion=8">compat_linux(8)</a>.
293: <li>Build more components of libiberty in preparation for gcc3.
294: <li>Sync libiberty with the version from GCC 3.3.2.
295: <li>Sync libedit with that of NetBSD on 8 Nov 2003.
296: <!-- ^ 20031125 -->
297: <li>Move libiberty into src/gnu/lib/libiberty, removing it from the egcs directory. The new library is a sync'd to "somewhere between binutils-2.10 and 2.11" with some local changes.
298: <li>Avoid a double-free in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pcap_setfilter&sektion=3">pcap_setfilter(3)</a>.
299: <li>Have the kernel's MD5 code use the per-architecture optimised bcopy() instead of its own implementation (PR#3549.)
300: <li>New meaning for the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> -k option, it's now equivalent to GSSAPIDelegateCredentials=no.
301: <!-- ^ 20031124 -->
302: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh-keyscan&sektion=1">ssh-keyscan(1)</a>, use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sysconf&sektion=3">sysconf(3)</a> to get the maximum fd limit instead of returning an arbitrary number.
303: <li>Fix an out-of-bounds access typo in the implementation of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sysctl&sektion=3">sysctl(3)</a> KERN_VNODE.
304: <li>Another <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getpass&sektion=3">getpass(3)</a> return value check, this time in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=encrypt&sektion=1">encrypt(1)</a>.
305: <li>Fix a sign overflow in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=compat_svr4&sektion=8">compat_svr4(8)</a> streams code.
306: <li>Make usernames containing underscores work in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=systrace&sektion=1">systrace(1)</a>.
307: <!-- ^ 20031123 -->
308: <li>While we're fixing <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=diff&sektion=1">diff(1)</a> return values, fix that of the -q option which got broken when -i was fixed.
309: <li>Stop the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=install&sektion=1">install(1)</a> madvise() change breaking 'make release'.
310: <li>Stop <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&sektion=8">pfctl(8)</a> allowing an antispoof for an interface without an IP address, since that amounts to blocking all on every other interface. Bad.
311: <li>Add a few more <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pkg_create&sektion=1">pkg_create(1)</a> packing list sanity checks.
1.894 deraadt 312: <!-- ^ 20031122 -->
313: <li>Also give <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cmp&sektion=1">cmp(1)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=patch&sektion=1">patch(1)</a> the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=madvise&sektion=2">madvise(2)</a> sequential treatment.
314: <li>Speed up <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=install&sektion=1">install(1)</a> by using <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=madvise&sektion=2">madvise(2)</a> with the MADV_SEQUENTIAL flag.
315: <li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=httpd&sektion=8">httpd(8)</a> mod_access IP address tests on sparc64.
316: <li>New -o option to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=kvm_mkdb&sektion=8">kvm_mkdb(8)</a>, to put the database somewhere other than /var/db.
317: <li>Fix return code from <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=diff&sektion=1">diff(1)</a> when the -i option is in use.
318: <!-- ^ 20031121 -->
319: <li>Build <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ftp&sektion=1">ftp(1)</a> statically linked, to help out when things go wrong.
320: <li><font color="#e00000"><strong>RELIABILITY FIX: An improper bounds check makes it possible for a local user to cause a crash by passing the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=semctl&sektion=2">semctl(2)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=semop&sektion=2">semop(2)</a> functions certain arguments.</strong></font><br>
321: <a href="errata.html#sem">A source code patch is available</a>.<br>
322: <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
323: <li><font color="#e00000"><strong>RELIABILITY FIX: It is possible for a local user to cause a crash via <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sysctl&sektion=3">sysctl(3)</a> with certain arguments.</strong></font><br>
324: <a href="errata.html#uvm">A source code patch is available</a>.<br>
325: <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
326: <li>Add <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=gcc&sektion=1">gcc(1)</a> flags -fnobuiltin-{log,print} for kernel builds on some architectures, the others to be done as test results are collected.
327: <li>Re-enable build of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=named&sektion=8">named(8)</a>'s DNSSEC programs.
328: <!-- ^ 20031120 -->
329: <li>More <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wdc&sektion=4">wdc(4)</a> probe fixes, sync'ing with NetBSD.
330: <li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=timed&sektion=8">timed(8)</a> breakage caused by the change from <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=select&sektion=2">select(2)</a> to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=poll&sektion=2">poll(2)</a>.
331: <!-- ^ 20031119 -->
332: <li>Add <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rc&sektion=8">rc(8)</a> startup for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sensorsd&sektion=8">sensorsd(8)</a>.
333: <li>Merge in BIND v9.2.3.
334: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=crypto&sektion=3">crypto(3)</a>, enable assembler BN functions on vax, and assembler for most things on i386.
335: <li>Fix password blinding for non-existent users in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a>.
336: <li>Add new lightweight kernel reader/writer lock code, not used for anything yet.
337: <li>Performance improvements to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pool&sektion=9">pool(9)</a>.
338: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a>, fix the test for a valid authentication context when processing -R port forwards.
339: <!-- ^ 20031118 -->
340: <li>Fix unnecessary delays in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wdc&sektion=4">wdc(4)</a>'s device probe. From NetBSD.
341: <li>Fix a missing initialisation in libkvm.
342: <li>Don't expose the contents of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=named&sektion=8">named(8)</a>'s rndc.key file when diff'd by <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=security&sektion=8">security(8)</a>.
343: <li>Merge in Apache 1.3.29 and mod_ssl 2.8.16.
344: <li>Add a missing bounds check and fix an int overflow in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=compat_ibcs2&sektion=8">compat_ibcs2(8)</a> (not enabled by default.)<br>
345: <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
346: <li>Two more non-portable extensions to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bc&sektion=1">bc(1)</a>: Add new boolean operators, and allow relational operators to appear anywhere.
347: <li>Add drop operator 'R' to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dc&sektion=1">dc(1)</a>.
348: <li>Replace <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> authentication mechanism 'gssapi' with 'gssapi-with-mic'.
349: <!-- ^ 20031117 -->
350: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> stateful connections for generic protocols now work for IPv6 as well as IPv4.
351: <li>Pull in a patch from XFree86 4.3, preventing a crash on Riva128 cards.
352: <li>Remove win32 support files from the BIND tree.
353: <!-- ^ 20031116 -->
354: <li>Set the atime, ctime and mtime of the kernfs boottime file to, uh, the boot time. Useful for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=find&sektion=1">find(1)</a>.
355: <li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=savecore&sektion=8">savecore(8)</a> on big-endian 64-bit architectures.
356: <li>More fine-grained CPU type detection on i386.
357: <li>Test for a NULL return from <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getpass&sektion=3">getpass(3)</a> in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bdes&sektion=1">bdes(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pppctl&sektion=8">pppctl(8)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tn3270&sektion=1">tn3270(1)</a>.
358: <!-- ^ 20031115 -->
359: <li>Fix bogus <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=read&sektion=2">read(2)</a> error check in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mg&sektion=1">mg(1)</a> when writing a backup file.
360: <li>Let <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=compress&sektion=1">compress(1)</a> inflate multiple concatenated files just like GNU gzip.
361: <li>Support in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dc&sektion=1">dc(1)</a> for boolean operations soon to appear in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bc&sektion=1">bc(1)</a>.
362: <li>Allow the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&sektion=8">pfctl(8)</a> debug level to be set from <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf.conf&sektion=5">pf.conf(5)</a> with 'set debug'.
363: <li>Some fixes in the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> GSSAPI client code.
364: <li>Don't include the KAME interface index (used for IPv6 link-local addresses) in the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=carp&sektion=4">carp(4)</a> HMAC value.
365: <!-- ^ 20031114 -->
366: <li>Strip out some slightly pointless tests in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wdc&sektion=4">wdc(4)</a> for an 8-bit value < <em>n</em>, where <em>n</em> > 255.
367: <li>Fix a bug in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bc&sektion=1">bc(1)</a>'s print statement that left garbage on <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dc&sektion=1">dc(1)</a>'s stack.
368: <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bc&sektion=1">bc(1)</a>'s exponentiation operator '^' right- instead of left-associative.
369: <!-- ^ 20031113 -->
370: <li>Fix a potential DoS in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ftpd&sektion=8">ftpd(8)</a> where an attacker could tie up the data port for long periods. From FreeBSD.<br>
371: <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
372: <li>New behaviour for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> option VerifyHostKeyDNS, allowing implicit trust for DNSSEC-verified SSHFP records.
373: <li>Have <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=scp&sektion=1">scp(1)</a> pass through the -q flag to its underlying <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> process, suppressing SSH2 banners.
374: <!-- ^ 20031112 -->
1.893 deraadt 375: <li>Merge in OpenSSL 0.9.7c.
376: <li>Some nonportable syntactic sugar for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dc&sektion=1">dc(1)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bc&sektion=1">bc(1)</a>.
377: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=free&sektion=9">free(9)</a>ing stack variables is a bad idea, don't do it in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ubsa&sektion=4">ubsa(4)</a>.
378: <li>Don't leak memory from <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ld.so&sektion=1">ld.so(1)</a> if the library name is invalid.
379: <li>Better parsing of library version numbers in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ld.so&sektion=1">ld.so(1)</a>, so 'libpython2.1.so.0.0' and 'libpython2.2.so.0.0' can coexist in peace.
380: <li>New 'print' statement for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bc&sektion=1">bc(1)</a>, a non-portable extension.
381: <!-- ^ 20031111 -->
382: <li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ksh&sektion=1">ksh(1)</a>'s handling of redirection of a file to the same file, e.g. '2>&2'.
383: <li>Add more privacy flags to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sendmail&sektion=8">sendmail(8)</a> cf/openbsd-proto.mc, requiring HELO/EHLO and disabling EXPN/VRFY.
384: <li>Add a classic paper on password security in /usr/share/doc/smm/17.password.
385: <li>Send <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=diff&sektion=1">diff(1)</a> output 'no newline at end of file' to stderr instead of stdout, for compatibility.
386: <li>Stop <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pkg_add&sektion=1">pkg_add(1)</a> considering as errors attempts to add an already-added package.
387: <!-- ^ 20031110 -->
388: <li>Keep track of errors when adding multiple packages with <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pkg_add&sektion=1">pkg_add(1)</a>, and set a useful error code on return.
389: <li>Remove the automatic setting of packing-list prefix from the first @cwd.
390: <li>Restore printing of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=vlan&sektion=4">vlan(4)</a> information in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ifconfig&sektion=8">ifconfig(8)</a>, accidentally broken when <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=carp&sektion=4">carp(4)</a> was added.
391: <li>Really fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mg&sektion=1">mg(1)</a> insert-file.
392: <li>Safer region handling in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mg&sektion=1">mg(1)</a>.
393: <li>Restore the terminal correctly when aborting out of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mg&sektion=1">mg(1)</a>.
394: <li>Undo the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mg&sektion=1">mg(1)</a> insert-file operation properly.
395: <!-- ^ 20031109 -->
396: <li>Unbreak the anchor rule number returned by <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfsync&sektion=4">pfsync(4)</a>.
397: <li>Avoid a race condition when swapping in a process.
398: <li>On i386, fix a crash that occurred with a large number (>1500) of processes (PR#3528.)
399: <li>New 'no sync' state option to prevent state transitions for a particular rule appearing on the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfsync&sektion=4">pfsync(4)</a> interface.
400: <!-- ^ 20031108 -->
401: <li>Check that <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=carp&sektion=4">carp(4)</a> packets are received on a carp-enabled interface.
402: <li>Fix setting of the interface index for IPv6 link-local multicast joins.
403: <li>Stop <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=carp&sektion=4">carp(4)</a> responding to ARPs when the interface is down.
404: <li>Fix a buffer overflow in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sed&sektion=1">sed(1)</a> when doing regex substitutions. From FreeBSD.
405: <!-- ^ 20031107 -->
406: <li>Add non-portable extensions to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dc&sektion=1">dc(1)</a>: '#' (comment), 'n' (print without newline) and 'a' (byte to char).
407: <li>Better <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pkg_add&sektion=1">pkg_add(1)</a> dependency resolution.
408: <li>Don't call the post-install script of packages that didn't fully install, and allow such packages to be fully removed.
409: <li>Let <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pkg_add&sektion=1">pkg_add(1)</a> install packages coming from stdin.
410: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pkg_delete&sektion=1">pkg_delete(1)</a> allows the path to an installed package on the command line, so e.g. 'pkg_delete /var/db/pkg/zsh-*' now works.
411: <li>The package tools now automatically use the target of the first @cwd in the packing list as the prefix.
412: <li>Temporarily back out the recent reordering of interface capability tests and pf_test(). <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> rdr rules are now generating some bogus checksums.
413: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a>, require encrypted messages are soon as we have the keystate for it, require DELETE payloads to be accompanied by HASHes, and add validation for HASH payloads without active exchanges.
414: <li>Allow <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> tags to use the same macros as labels (see <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf.conf&sektion=5">pf.conf(5)</a>.)
415: <li>Teach <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=gdb&sektion=1">gdb(1)</a> about SIGINFO (PR#3173.)
416: <li>Add commented-out LoadModule config lines, along with a short description, for each <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=httpd&sektion=8">httpd(8)</a> module in the standard build.
417: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=newfs&sektion=8">newfs(8)</a> don't write the magic to the superblock until filesystem creation is completed.
418: <li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=netstat&sektion=1">netstat(1)</a>'s display of IPv6 link-local multicast addresses.
419: <!-- ^ 20031106 -->
420: <li>Redo the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wdc&sektion=4">wdc(4)</a> drive reset changes, more cautious this time.
421: <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcpdump&sektion=8">tcpdump(8)</a>'s -x flag work for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfsync&sektion=4">pfsync(4)</a> devices.
422: <!-- ^ 20031105 -->
423: <li>Use hash tables where possible for listen socket lookup as well.
424: <li>Add a route when we're the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=carp&sektion=4">carp(4)</a> master host, so the local machine can use the common address.
425: <li>Have <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pkg_create&sektion=1">pkg_create(1)</a> spot duplicate packaging list entries and die noisily when it does so.
426: <li>Stop <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=carp&sektion=4">carp(4)</a> pretending that everything it sends to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bpf&sektion=4">bpf(4)</a> comes from AF_INET6.
427: <li>Add GNU-compatible 'r' operator (swaps the top two stack items) to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dc&sektion=1">dc(1)</a>.
428: <li>Kill an IPv4 pasto in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=carp&sektion=4">carp(4)</a> IPv6 support when setting the interface address.
429: <!-- ^ 20031104 -->
430: <li><font color="#e00000"><strong>RELIABILITY FIX: It is possible for a local user to cause a system panic by executing a specially crafted binary with an invalid header.</strong></font><br>
431: <a href="errata.html#exec">A source code patch is available</a>.<br>
432: <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
433: <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pkg_delete&sektion=1">pkg_delete(1)</a> handle dependencies properly when using package name stems.
434: <li>Don't try to free a static string when checking <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> host keys.
435: <li>In regular (non-<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a>) IP output code, defer the interface tests for hardware IPsec and checksum capability until after pf_test(), since pf might drop the packet, or send it to a different interface.
436: <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a>-routed packets check the target interface for hardware IPsec and checksum capability.
437: <li>Fix a memory leak when <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=carp&sektion=4">carp(4)</a> fails to put the interface into promiscuous mode.
438: <li>Add a missing check in IPv6 <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=carp&sektion=4">carp(4)</a> for an interface on its way down.
439: <!-- ^ 20031103 -->
1.892 deraadt 440: <li>Preserve the debug flag when enabling <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a>.
441: <!-- ^ 20031102 -->
442: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=top&sektion=1">top(1)</a>, check for signals at the right time and handle stdin failures better.
443: <!-- ^ 20031101 -->
444: <li>Have <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=patch&sektion=1">patch(1)</a> determine the filename in same manner as GNU patch.
445: <li>New --posix option for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=patch&sektion=1">patch(1)</a> for, uh, strict POSIX conformance.
446: <li>Set pkgpath in the correct order in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pkg_add&sektion=1">pkg_add(1)</a> etc.
447: <li>Re-add the SATA mode detection and reset-pause-IDENTIFY fixes to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wdc&sektion=4">wdc(4)</a>. Drive reset fixes need further testing.
448: <li>Allocate the right number of elements in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=hashinit&sektion=9">hashinit(9)</a> (PR#3537.)
449: <li>Look up the groupname (not the username) when getting the gid from a tarfile in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pkg_add&sektion=1">pkg_add(1)</a> and friends. Also set file ownership before the mode.
450: <li>Add IPv6 support to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=carp&sektion=4">carp(4)</a>.
451: <li>Sync libedit to NetBSD as of 2003-10-01, with some local string cleaning and history bug fixes. There are some api changes as a result of this update.
452: <li>New port, <a href="http://www.openbsd.org/pegasos.html">OPENBSD/pegasos</a>.
453: <li>Fix insufficient length check in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=route6d&sektion=8">route6d(8)</a> (KAME PR#507.)
454: <!-- ^ 20031031 -->
455: <li>Try to deal with <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=strdup&sektion=3">strdup(3)</a> failures in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=init&sektion=8">init(8)</a>.
456: <li>More detective work from the spelling police, double-word branch.
457: <li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=lc&sektion=4">lc(4)</a> multicast filter initialisation.
458: <!-- ^ 20031030 -->
459: <li>Backout recent <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wdc&sektion=4">wdc(4)</a> reset, identify and mode detection changes, they are breaking things.
460: <li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> binat for incoming connections when a netblock (not just a single address) is used as the rule source (PR#3535.)<br>
461: <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
462: <li><font color="#e00000"><strong>RELIABILITY FIX: A user with write permission to httpd.conf or a .htaccess file can crash <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=httpd&sektion=8">httpd(8)</a> or potentially run arbitrary code as the user</strong> www <strong> (although it is believed that ProPolice will prevent code execution.)</strong></font><br>
463: <a href="errata.html#httpd">A source code patch is available</a>.<br>
464: <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
465: <!-- ^ 20031029 -->
466: <li>Do a better job of finding the proper partition in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=growfs&sektion=8">growfs(8)</a>.
467: <li>Evaluate dependencies earlier in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pkg_delete&sektion=1">pkg_delete(1)</a>, and if the check fails just give a list of the required removals and quit.
468: <li>Don't die if getsockopt(..., TCP_NODELAY, ...) fails in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>.
469: <!-- ^ 20031028 -->
470: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wdc&sektion=4">wdc(4)</a>, add a pause between a drive reset and an IDENTIFY command, to allow for units that are sick just after a reset.
471: <li>Don't do ATA mode detection for SATA drives, some drives really don't like it.
472: <li>Set the skew properly when rescheduling <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=carp&sektion=4">carp(4)</a> advertisements.
473: <li>Fix an <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mg&sektion=1">mg(1)</a> startup crash.
474: <li>Don't schedule a <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=carp&sektion=4">carp(4)</a> advertisement if the interface is on its way down and we run out of mbufs.
475: <li>Really stop sending advertisements if the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=carp&sektion=4">carp(4)</a> interface is downed.
476: <!-- ^ 20031027 -->
477: <li>Set the maximum value for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sysctl&sektion=3">sysctl(3)</a> kern.stackgap_random maximum to 256MB.
478: <li>Remove artificial limit on the number of partitions that may be stretched by <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=growfs&sektion=8">growfs(8)</a>.
479: <li>Early support in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wi&sektion=4">wi(4)</a> for PRISM 2.5/3 USB adapters. Very limited for now.
480: <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wdc&sektion=4">wdc(4)</a> reset code more like that in FreeBSD and NetBSD, fixing slave device detection when the master behaves strangely.
481: <!-- ^ 20031026 -->
482: <li>Reorganise <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> state searches for a 30% memory saving.
483: <li>Don't leak mbufs on carp_output() failures.
484: <li>Replace a linked list with a hash table for local IP port lookup, dramatically reducing the lookup time (in_pcblookup()) when there are many sockets.
485: <li>Precompute as much of the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=carp&sektion=4">carp(4)</a> sha1 hash as possible.
486: <!-- ^ 20031025 -->
487: <li>Prevent occasional <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=syslogd&sektion=8">syslogd(8)</a> hangs on receipt of a SIGHUP with a modified syslog.conf file.
488: <li>Remove a few comparisons of an int to NULL.
489: <li>Do <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=initgroups&sektion=3">initgroups(3)</a> before chrooting <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=httpd&sektion=8">httpd(8)</a> instead of after, since /etc/group may be of use.
490: <li>Stop the new <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bpf&sektion=4">bpf(4)</a> write filter blocking everything when no filter is set, and so unbreak DHCP.
491: <!-- ^ 20031024 -->
492: <li>Only try to remove a dependent package once in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pkg_delete&sektion=1">pkg_delete(1)</a>.
493: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=carp&sektion=4">carp(4)</a>, stir in the full inner hash instead of just sizeof(pointer) bytes of it.
494: <li>Finally, stop the long long pause for i386 laptop users with disconnected floppy drives.
495: <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pkg_info&sektion=1">pkg_info(1)</a> do the right thing with multiple packages sharing a common stem, e.g. multiple responses for 'pkg_info autoconf'.
496: <li>Allow <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pkg_delete&sektion=1">pkg_delete(1)</a> to work with package name stems. Oh yes.
497: <!-- ^ 20031023 -->
498: <li>Another missing <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=strdup&sektion=3">strdup(3)</a> error check, this time in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tn3270&sektion=1">tn3270(1)</a>.
499: <li>Reduce the amount of logging <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=spamd&sektion=8">spamd(8)</a> does by default. The new -v option does verbose logging.
500: <li>Have privilege-separated <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=syslogd&sektion=8">syslogd(8)</a> call setgroups when changing dropping privileges, in line with the same change in newly-separated <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pflogd&sektion=8">pflogd(8)</a>.
501: <li>Fix a panic when traversing a corrupt msdos filesystem. From NetBSD.<br>
502: <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
503: <li>Implement privilege separation in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pflogd&sektion=8">pflogd(8)</a>. Requires creation of _pflogd user and group.
504: <li>Add locking and write-filtering to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bpf&sektion=4">bpf(4)</a>, so programs running as non-root can hold bpf descriptors without being able to write whatever they like at the link layer or issue dangerous <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ioctl&sektion=2">ioctl(2)</a>s.
505: <li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dc&sektion=1">dc(1)</a>'s J operator with the new extended comparisons.
506: <li>Switch <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=carp&sektion=4">carp(4)</a> from keyed sha1 to hmac-sha1.
507: <li>Implement extended comparison operators in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dc&sektion=1">dc(1)</a>, to allow for an if ... else construct in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bc&sektion=1">bc(1)</a>.
508: <li>Make un-getting a character from a string work the same as from a file in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dc&sektion=1">dc(1)</a>.
509: <li>Fix a <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=kqueue&sektion=2">kqueue(2)</a> file descriptor leak under libpthread.
510: <li>In libpthread, don't bother resetting O_NONBLOCK on descriptors that are not flagged to survive the imminent <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=execve&sektion=2">execve(2)</a>.
511: <!-- ^ 20031022 -->
512: <li>Add missing <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=strdup&sektion=3">strdup(3)</a> error check in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tic&sektion=1">tic(1)</a>.
513: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mg&sektion=1">mg(1)</a>, make undo work per-window instead of per-buffer.
514: <li>Fix late definition of enum XML_Status in <expat.h>. From expat CVS.
515: <li>A huge number of comment spelling fixes all over the tree.
516: <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> choke on too-short GSSAPI OIDs.
517: <!-- ^ 20031021 -->
518: <li>Switch over to the new package tools.
519: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=netstart&sektion=8">netstart(8)</a>, don't try to initialise <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=carp&sektion=4">carp(4)</a> interfaces until after physical interfaces are configured.
520: <li>Fix an endianness bug in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=carp&sektion=4">carp(4)</a> sha1 code.
521: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=realloc&sektion=3">realloc(3)</a> cleanup in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ppp&sektion=8">ppp(8)</a>.
522: <li>Stop all <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=carp&sektion=4">carp(4)</a> hosts advertising master status when preempt is disabled.
523: <li>When doing <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=carp&sektion=4">carp(4)</a>, Only give an error in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ifconfig&sektion=8">ifconfig(8)</a> when the user tries to set both of advbase and advskew to zero.
524: <!-- ^ 20031020 -->
525: <li>Correct a missing <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=strdup&sektion=3">strdup(3)</a> return value check in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=nc&sektion=1">nc(1)</a>.
526: <li>Fix numfds==0 case in pthreads-optimised <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=select&sektion=2">select(2)</a>.
527: <li>Add functions to find package name 'stems' (package names without the version number) and use them in the soon-to-be-enabled new <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pkg_info&sektion=1">pkg_info(1)</a>.
528: <li>Add direct support in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=named&sektion=8">named(8)</a> for SSHFP resource records.
529: <!-- ^ 20031019 -->
530: <li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bc&sektion=1">bc(1)</a>'s assignment operators (+=, -= etc.)
531: <li>Add J(jump) and M(mark) operators in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dc&sektion=1">dc(1)</a>, and use them to implement the continue statement in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bc&sektion=1">bc(1)</a>.
532: <li>Fix out-of-bounds reads in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=make&sektion=1">make(1)</a>, libfreetype and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xterm&sektion=1">xterm(1)</a>.
533: <!-- ^ 20031018 -->
534: <li>Make the recent <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=vnd&sektion=4">vnd(4)</a> numbering change work the way it should.
535: <li>Enter <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=carp&sektion=4">carp(4)</a>, OpenBSD's Common Address Redundancy Protocol for IP high availability and load balancing.
536: <li>Unbreak <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=httpd&sektion=8">httpd(8)</a> SHA1 code on 64-bit architectures.
537: <li>Make sure the inode generation number (obtained using arc4random()) is positive.
538: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pciide&sektion=4">pciide(4)</a> DMA reliability fixes. From NetBSD.
1.890 deraadt 539: <!-- ^ 20031017 -->
540: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=strlcpy&sektion=3">strlcpy(3)</a> -> <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=memcpy&sektion=3">memcpy(3)</a> for non-string buffers in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=vi&sektion=1">vi(1)</a>, along with some extra paranoia.
541: <li>Check for signals earlier in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mountd&sektion=8">mountd(8)</a>, so they can be handled before we <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=select&sektion=2">select(2)</a> until a mount request comes in.
1.892 deraadt 542: <li>Import new package management tools under src/usr.sbin/pkg_add. Not built by default yet.
1.890 deraadt 543: <li>New 'G' malloc.conf option to add a guard page after pagesize-or-larger chunks, and to return less-than-pagesize chunks in random order.
544: <li>Better SATA support in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wdc&sektion=4">wdc(4)</a>.
545: <li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=faithd&sektion=8">faithd(8)</a> args to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=poll&sektion=2">poll(2)</a>.
546: <!-- ^ 20031016 -->
547: <li>Fix a out-of-bounds read in libcurses.
548: <li>Have <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tip&sektion=1">tip(1)</a> return the terminal to a sensible state on fatal errors.
549: <li>Change <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=malloc&sektion=3">malloc(3)</a> so that it aborts the process on any error other than running out of memory. This is different to the 'A' malloc.conf switch that aborts on any error.
550: <!-- ^ 20031015 -->
551: <li>More randomness for temporary directories created by <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh-agent&sektion=1">ssh-agent(1)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a>.
552: <li>Switch on the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> DNS fingerprint (sshfp) lookup code, previously not build by default. Still needs switched on in the config file.
553: <li>Make e.g. 'MAKEDEV tty08 - tty7f' work.
554: <li>Only endian-flip the fragment offset once on IPv6 input.
555: <!-- ^ 20031014 -->
556: <li>Do a hardware receive checksum in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sk&sektion=4">sk(4)</a> too, working around the fact that sometimes the hardware gets it wrong.
557: <li>On <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=em&sektion=4">em(4)</a> devices that support it, offload receive checksum calculation to the hardware. From FreeBSD.
558: <li>Update timezone files again, this time to tzcode2003d.
559: <li>Bring <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bge&sektion=4">bge(4)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=brgphy&sektion=4">brgphy(4)</a> more in line with updates in FreeBSD and NetBSD, both bug fixes and additional device support.
560: <li>Remember the filename given when using ^X^W in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mg&sektion=1">mg(1)</a>.
561: <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=shmat&sektion=2">shmat(2)</a> under Linux compat work as expected.
562: <li>Fix a buffer overflow in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=timedc&sektion=8">timedc(8)</a>. Found by FreeBSD, fixed differently here.
563: <!-- ^ 20031012 -->
564: <li>Add division and modulus operator '~' to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dc&sektion=1">dc(1)</a>.
565: <li>Remove GNU bc and dc from the tree.
566: <li>Merge in expat 1.95.6 from XFree86 4.3.99.14.
567: <li>Search for keys in the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> agent in reverse order to solve duplicate key problems (OpenSSH bug #684.)
568: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> option ForwardX11 now has <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xauth&sektion=1">xauth(1)</a> generate untrusted keys by default. Option ForwardX11Trusted restores the old behaviour.
569: <li>Change <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=vnd&sektion=4">vnd(4)</a> major/minor numbering to allow more devices. Requires a MAKEDEV.
570: <!-- ^ 20031011 -->
571: <li>Do nfs-specific 'test -x' stuff in the right order in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ksh&sektion=1">ksh(1)</a> (PR#3465.)
572: <li>More work on <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=vr&sektion=4">vr(4)</a>.
573: <li>Have the linker generate a warning when using 43compat's <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getwd&sektion=3">getwd(3)</a>.
574: <li>Better calibration code for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=auich&sektion=4">auich(4)</a>. From FreeBSD/NetBSD.
575: <!-- ^ 20031010 -->
576: <!-- ^ 20031009 -->
577: <li>Re-enable the random increment on the return value of uvm_map_hint() (called by <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=uvm_map&sektion=9">uvm_map(9)</a>.)
578: <li>Install a sample config file for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sensorsd&sektion=8">sensorsd(8)</a>.
579: <li>Prevent symlink races in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=systrace&sektion=1">systrace(1)</a>.
580: <li>Have GSSAPI default to off in the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> client as well as the server.
581: <li>Unbreak <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> on 64-bit architectures.
582: <li>Hack <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=httpd&sektion=8">httpd(8)</a> so digest authentication works with IE, Safari, etc. From FreeBSD.
583: <li>Fix potential signedness bug in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fgets&sektion=3">fgets(3)</a> (PR#1709.)
584: <!-- ^ 20031008 -->
585: <li>Correct __bounded__ attributes for {MD4,MD5,RMD160,SHA1}DATA functions (PR#3505.)
1.893 deraadt 586: <li>Allow <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=newfs&sektion=8">newfs(8)</a> to build small filesystems again by making sure ncyls >= 2.<br>
587: <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
1.890 deraadt 588: <li>Plug a memory leak in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=netstat&sektion=1">netstat(1)</a>.
589: <li>Add nfs attribute cache tuning parameters to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mount_nfs&sektion=8">mount_nfs(8)</a> (Inspired by PR#2567.)
590: <li>Kill a null deref in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=make&sektion=1">make(1)</a>.
591: <li>Allow a semicolon to terminate label strings in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sed&sektion=1">sed(1)</a>, so one-liners with labels can work.
592: <li>A few string and memory fixes in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rup&sektion=1">rup(1)</a>.
593: <li>Stability fixes for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=vr&sektion=4">vr(4)</a>. From FreeBSD.
594: <li>Add arc4 support to the kernel, and have <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wi&sektion=4">wi(4)</a> use it instead of rolling its own.
595: <li>Unbreak <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sftp&sektion=1">sftp(1)</a>'s handling of quotes in pathnames.
596: <li>More propolice fixes and improvements.
597: <!-- ^ 20031007 -->
598: <li>Remove <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=httpd&sektion=8">httpd(8)</a> addon-breaking <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=newsyslog.conf&sektion=5">newsyslog.conf(5)</a> sample lines.
599: <li>Install <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sensorsd&sektion=8">sensorsd(8)</a> by default.
600: <li>Really really give xfs a <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=poll&sektion=2">poll(2)</a> backend.
601: <li>Fix a badly broken <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=gcc&sektion=1">gcc(1)</a> optimisation when calculating structure offsets under certain conditions. See the <a href="http://www.openbsd.org/cgi-bin/cvsweb/src/gnu/egcs/gcc/combine.c#rev1.5">commit log</a> for details.
602: <li>Unbreak <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=lge&sektion=4">lge(4)</a> compile.
603: <li>Update timezone info files to tzcode2003c.
604: <!-- ^ 20031006 -->
605: <li>Stop <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=em&sektion=4">em(4)</a> stripping 802.1q headers from packets in a <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bridge&sektion=4">bridge(4)</a>.
606: <li>Add <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=vlan&sektion=4">vlan(4)</a> support to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=em&sektion=4">em(4)</a>.
607: <li>Avoid a division-by-zero panic when benchmarking the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pchb&sektion=4">pchb(4)</a> RNG device.
608: <li>A couple of read-from-device fixes to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=an&sektion=4">an(4)</a>. From FreeBSD.
609: <!-- ^ 20031005 -->
610: <li>Remove non-free licensed <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xlock&sektion=1">xlock(1)</a> bitmaps.
611: <li>Properly free resources when ffs_mountroot() fails.
612: <li>Stop <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a> crashing when the value for LIFE_DURATION is missing.
613: <li>Back out the new environment variable load in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ld.so&sektion=1">ld.so(1)</a> due to sparc breakage.
614: <li>Unbreak the new xfs poll backend.
615: <li>Fix a long-standing memory leak in kernel libz (PR#2886.) From NetBSD.
616: <li>Print a more useful error message when a bad port number is given to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=whois&sektion=1">whois(1)</a>.
617: <li>Fix broken time parsing in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=kadmin&sektion=8">kadmin(8)</a> (PR#3292.)
618: <!-- ^ 20031004 -->
619: <li>Initialise environment variables in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ld.so&sektion=1">ld.so(1)</a> before calling constructors and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=atexit&sektion=3">atexit(3)</a> functions
620: <li>Have <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=inetd&sektion=8">inetd(8)</a> exit if no config file is found.
621: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sendmail&sektion=8">sendmail(8)</a> submit.mc/cf, bind the msp to 127.0.0.1 instead of localhost just in case localhost doesn't resolve correctly.
622: <li>Teach <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=netstat&sektion=1">netstat(1)</a> how to deal with KAME embedded scope IDs for -f encap route dumps.
623: <li>Use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=arc4random&sektion=3">arc4random(3)</a> to generate cookies in the XSecurity extension.
624: <li>Fix a few off-by-ones in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=gethostbyname&sektion=3">gethostbyname(3)</a> and friends.
625: <li>Allow multiple RCPTs in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=spamd&sektion=8">spamd(8)</a>, and stop looping on invalid commands.
626: <li>Bring in a number of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pipe&sektion=2">pipe(2)</a> stability fixes from FreeBSD.
627: <!-- ^ 20031003 -->
628: <li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=httpd&sektion=8">httpd(8)</a>'s handling of SSLCertificateChainFile under the chroot.
629: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a> usage output now dumps the OpenSSL version too.
630: <li>Don't try to send incomplete IPv4 fragments in the ENOBUFS case. Note that this is a behaviour change from 4.4BSD and applies to output from <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bridge&sektion=4">bridge(4)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> as well as vanilla IP output.
631: <li>A couple of endianness fixes when setting the IPv4 output fragment offset.
632: <li>A couple of minor <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=malloc&sektion=3">malloc(3)</a> fixes related to recursive calls and debugging.
633: <!-- ^ 20031002 -->
634: <li>Clean up IPv6 flowlabel handling.
635: <li>New IPv6 ID and flowlabel generation code using <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=arc4random&sektion=9">arc4random(9)</a>.
636: <li>Remove a bad <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=m_cat&sektion=9">m_cat(9)</a> call when fragmenting outbound IPv6 packets.
637: <li>Add a missing initialisation in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pflog&sektion=4">pflog(4)</a> that allowed kernel stack garbage to leak into .pcap files.
638: <li>Have the libc stack protector code use the kernel __sysctl() call directly instead of using the libc <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sysctl&sektion=3">sysctl(3)</a> interface.
639: <li>Stop reading ~/.signature to pre-fill the Organisation: field in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sendbug&sektion=1">sendbug(1)</a> (PR#3499.)
640: <li>Fixes to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=event&sektion=3">event(3)</a> poll code.
641: <li>Have <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ftpd&sektion=8">ftpd(8)</a> listen on both IPv4 and IPv6 ports by default.
642: <li>Fix an out-of-bounds memory access in kernel <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=compat_ibcs2&sektion=8">compat_ibcs2(8)</a> code.
643: <li>Add missing check for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=strdup&sektion=3">strdup(3)</a> error in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=talk&sektion=1">talk(1)</a>.
644: <li>Correct a couple of off-by-ones in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=banner&sektion=1">banner(1)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&sektion=3">ssl(3)</a> (src/ssl/ssl_ciph.c.)
645: <li>Fix the code that grows ifindex2ifnet in sys/net/if.c.
646: <li>Add a stack of missing switch break statements needed after the _dl_errno changes to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ld.so&sektion=1">ld.so(1)</a>.
647: <!-- ^ 20031001 -->
648: <li>Teach <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=size&sektion=1">size(1)</a> how to read ELF objects.
649: <li>POSIX and interoperability fixes for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bc&sektion=1">bc(1)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dc&sektion=1">dc(1)</a>,
650: <li><font color="#e00000"><strong>SECURITY FIX: The use of certain ASN.1 encodings or malformed public keys may allow an attacker to mount a denial of service attack against applications linked with <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&sektion=3">ssl(3)</a>.</strong></font> This does not affect OpenSSH.<br>
651: <a href="errata.html#asn1">A source code patch is available</a>.<br>
652: <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
653: <!-- ^ 20030930 -->
654: <li>Properly free resources on <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fxp&sektion=4">fxp(4)</a> attach failures.
655: <li>Some reliability fixes in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ahc&sektion=4">ahc(4)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=siop&sektion=4">siop(4)</a>.
656: <li>Allow <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sensorsd&sektion=8">sensorsd(8)</a> to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=daemon&sektion=3">daemon(3)</a>ize itself.
657: <li>Fix an unchecked <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=strdup&sektion=3">strdup(3)</a> in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getnetgrent&sektion=3">getnetgrent(3)</a>.
658: <!-- ^ 20030929 -->
659: <li>Fix several kernel networking off-by-ones w.r.t. PRC_NCMDS.
660: <li>Better error checking for new <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bc&sektion=1">bc(1)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dc&sektion=1">dc(1)</a>.
661: <li>Make new <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bc&sektion=1">bc(1)</a> compile on sparc64.
662: <!-- ^ 20030928 -->
663: <!-- ^ 20030927 -->
664: <li>Further <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=realloc&sektion=3">realloc(3)</a> cleanup.
665: <li>Fix bogus getutmp() error check in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=battlestar&sektion=6">battlestar(6)</a>.
666: <li>Change the xfs backend from select to poll.
667: <li>Introduce 64-bit <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=byteorder&sektion=3">byteorder(3)</a> macros.
668: <li>strdup -> strlcpy in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=apmd&sektion=8&arch=i386">apmd(8)</a>, and make sure the socket gets unlinked at exit.
669: <li>Better <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=malloc&sektion=3">malloc(3)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=realloc&sektion=3">realloc(3)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=strdup&sektion=3">strdup(3)</a> error checks in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=config&sektion=8">config(8)</a>.
670: <li>Stop <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pflogd&sektion=8">pflogd(8)</a> shouting 'Reopened logfile' at syslog.
671: <li>Add a number of missing checks for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=strdup&sektion=3">strdup(3)</a> failure.
672: <li>Add an <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sscanf&sektion=3">sscanf(3)</a> bounds check to the neighbour cache file code in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ndp&sektion=8">ndp(8)</a>.
673: <li>Reorder the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> statistics counter code and fix some miscount bugs.
674: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a>, don't listen on INADDR_ANY if the Listen-on option is specified.
675: <li>Fix an off-by-one and a bad string bounds length in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=atc&sektion=6">atc(6)</a>.
676: <li>Don't set <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a>'s listen socket to non-blocking mode.
677: <li>Build the new BSD <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bc&sektion=1">bc(1)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dc&sektion=1">dc(1)</a> in favour of the GNU versions.
678: <li>Drop <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=authpf&sektion=8">authpf(8)</a>'s 15-character username restriction, it's no longer necessary (PR#3491.)
679: <li>Allocate a buffer large enough to store a full IPX address in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ipx_ntoa&sektion=3">ipx_ntoa(3)</a>.
680: <li>Unbreak <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=netstat&sektion=1">netstat(1)</a> -i display columns for interfaces with no address.
681: <li>Stop <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=spamd&sektion=8">spamd(8)</a> dying unceremoniously on <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=accept&sektion=2">accept(2)</a> failures.
682: <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=talk&sektion=1">talk(1)</a> retry if <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=accept&sektion=2">accept(2)</a> returns ECONNABORTED (the same as it does for EINTR.)
683: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=realloc&sektion=3">realloc(3)</a> fixes in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=brconfig&sektion=8">brconfig(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhclient&sektion=8">dhclient(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=lpd&sektion=8">lpd(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pppd&sektion=8">pppd(8)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rwhod&sektion=8">rwhod(8)</a>.
684: <li>Add a 'recipe' datafile to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fortune&sektion=6">fortune(6)</a>, starting with some barbecue recipes from the hackathon.
685: <li>Use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=arc4random&sektion=3">arc4random(3)</a> instead of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=srand&sektion=3">srand(3)</a> to generate a more random salt for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=htpasswd&sektion=1">htpasswd(1)</a>.
686: <li>Start removing unnecessary null checks before doing <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=free&sektion=3">free(3)</a> on a possibly null pointer.
687: <!-- ^ 20030926 -->
688: <li>Fix scrambled display when resuming a suspended <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=less&sektion=1">less(1)</a> process.
689: <li>Use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=strlcpy&sektion=3">strlcpy(3)</a> instead of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bcopy&sektion=3">bcopy(3)</a> to avoid overflowing the nodename and netname in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=an&sektion=4">an(4)</a>.
690: <li>Fix a couple of off-by-ones in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=adventure&sektion=6">adventure(6)</a>.
691: <li>Fix an out-of-bounds write in the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a> privsep monitor code.
692: <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dlerror&sektion=3">dlerror(3)</a> clear _dl_errno as expected (PR#3441.)
693: <li>Correct a couple of off-by-ones in libc.
694: <li>Fix overflows in the X font server overflow fix. Sigh.
695: <li>Add a missing free in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cvs&sektion=1">cvs(1)</a>.
696: <li>New, BSD-licensed version of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bc&sektion=1">bc(1)</a>.
697: <li>Fix an off-by-one in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=csh&sektion=1">csh(1)</a> (PR#3163.)
698: <li>More <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=realloc&sektion=3">realloc(3)</a> fixes.
699: <li>Fix a bad bounds check that could crash <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sort&sektion=1">sort(1)</a>.
700: <!-- ^ 20030925 -->
701: <li>More paranoid privsep parent/child communication in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=syslogd&sektion=8">syslogd(8)</a>.
702: <li><font color="#e00000"><strong>SECURITY FIX: It is possible for a local user to cause a system panic by flooding it with spoofed ARP requests.</strong></font><br>
703: <a href="errata.html#arp">A source code patch is available</a>.<br>
704: <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
1.891 deraadt 705: <li>A number of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=realloc&sektion=3">realloc(3)</a> fixes (removing instances of the bad idiom described in the manpage) in several programs.
1.890 deraadt 706: <li>New program <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sensorsd&sektion=8">sensorsd(8)</a> to monitor hardware sensors as exposed by the hw.sensors sysctl. Not installed yet.
707: <li>Unbreak <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tftp&sektion=1">tftp(1)</a> put command.
708: <li>Remove and re-add SHA2 support in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a>, minus OpenSSL EVP-related fd leaks.
709: <li>Fix some realloc bugs in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&sektion=8">pfctl(8)</a> tables code.
710: <li>Initial HIFN 7955/7956 crypto accelerator support.
711: <li>Increase <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=spamd&sektion=8">spamd(8)</a> maximum connections from 200 to 800.
712: <!-- ^ 20030924 -->
713: <li>Install a more complete set of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sendmail&sektion=8">sendmail(8)</a> empty config files under /etc/mail.
714: <li>Throttle 'proc: table is full' messages to once every ten seconds. From NetBSD.
715: <li>Further improvements to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>'s fatal exit handling.
716: <li>Use the much simpler <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getifaddrs&sektion=3">getifaddrs(3)</a> instead of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sysctl&sektion=3">sysctl(3)</a> in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rtadvd&sektion=8">rtadvd(8)</a>.
717: <li>Use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getaddrinfo&sektion=3">getaddrinfo(3)</a> for name-to-address resolution in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a>.
718: <li>Replace kernel <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=select&sektion=2">select(2)</a> backends with <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=poll&sektion=2">poll(2)</a> backends. This allows for more complete poll() functionality. From NetBSD.
719: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mtrace&sektion=8">mtrace(8)</a> only do mask checks for AF_INET.
720: <li>Add <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=poll&sektion=2">poll(2)</a> support for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=event&sektion=3">event(3)</a>.
721: <li>Fix a few suspect <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=strlcpy&sektion=3">strlcpy(3)</a> calls in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ifconfig&sektion=8">ifconfig(8)</a>.
722: <!-- ^ 20030923 -->
723: <li>Allow <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getopt_long&sektion=3">getopt_long(3)</a> to accept an optional argument separated by whitespace, unlike GNU getopt_long.
724: <li>Stop <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tsort&sektion=1">tsort(1)</a> reading past the end of its buffer.
725: <li>Plug a realloc memory leak in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mg&sektion=1">mg(1)</a>.
726: <li>Off-by-one fixes in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=nc&sektion=1">nc(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pmdb&sektion=1">pmdb(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ppp&sektion=8">ppp(8)</a>, libssl, libpthread and a few in the kernel.
727: <li>Sync up <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=named&sektion=8">named(8)</a> with BIND 9.2.2-P3, with support for new zone type 'delegation-only'.
728: <li>In the new <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dc&sektion=1">dc(1)</a>, Make all registers contain zero initially for compatibility.
729: <li>Fix, clean up and simplify the installer's handling of yes/no responses from the user.
730: <li>Use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=poll&sektion=2">poll(2)</a> instead of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=select&sektion=2">select(2)</a> in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=skey_authenticate&sektion=3">skey_authenticate(3)</a>.
731: <li>Plug a memory leak in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rtadvd&sektion=8">rtadvd(8)</a>.
732: <li>Stop extraneous 'no disk label' warnings in the installer.
733: <!-- ^ 20030921 -->
734: <li>Implement hardwareflow (hf) option for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tip&sektion=1">tip(1)</a>. Off by default.
735: <li>Fix an out-of-order free() in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rpc&sektion=3">rpc(3)</a>.
736: <li>Don't leak memory if memory allocation fails in libc <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rpc&sektion=3">rpc(3)</a> code.
737: <!-- ^ 20030920 -->
738: <li>Change the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ld&sektion=1">ld(1)</a> script to make contructors and destructors in dynamic binaries non-writable.
739: <li>Completely new BSD-licensed version of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dc&sektion=1">dc(1)</a> using the OpenSSL <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bn&sektion=3">bn(3)</a> routines.
740: <li>Have <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=scp&sektion=1">scp(1)</a> check for an error code in remote->remote mode.
741: <li>When chrooting <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=httpd&sektion=8">httpd(8)</a>, use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=initgroups&sektion=3">initgroups(3)</a> so that supplementary group IDs are initialised as well.
1.892 deraadt 742: <li>Temporarily disable soft interrupts support in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=usb&sektion=4">usb(4)</a> for stability reasons.<br>
743: <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
1.890 deraadt 744: <li>Several abnormal exit handler fixes to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>.
745: <li>Better disk device probe on i386.
746: <li>Correct the signal number validity check in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=csh&sektion=1">csh(1)</a>'s kill command.
747: <!-- ^ 20030919 -->
748: <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=grep&sektion=1">grep(1)</a>'s binary file test work for gzipped files the same as for other files, testing against <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isspace&sektion=3">isspace(3)</a> as well as <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isprint&sektion=3">isprint(3)</a>.
749: <li>Make sure <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=whois&sektion=1">whois(1)</a> can't zap straight past the beginning of the buffer when removing spaces from line endings.
750: <li>Stop <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&sektion=8">pfctl(8)</a> checking for a netmask if the address type being examined is a table.
751: <li>Fix a subtle use-after-free in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=modload&sektion=8">modload(8)</a>.
752: <li>Some int -> u_int paranoia in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>.
753: <li>More <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> buffer management fixes (CAN-2003-0682.)
754: <li>Further EDD detection improvements on i386.
755: <li>Properly flush the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> RSA1 public key from memory when its output file cannot be opened (OpenSSH PR#662.)
756: <li>Correct a double-free in the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> buffer management code (OpenSSH PR#660.)
757: <li>Fix the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> ConnectTimeout option (OpenSSH PR#656.)
758: <li>On i386, try harder to boot from removable media by allowing for their removal and insertion.
759: <!-- 20030918 -->
760: <li>Updated and better-commented openbsd-proto.mc for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sendmail&sektion=8">sendmail(8)</a>.
761: <li>Upgrade <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sendmail&sektion=8">sendmail(8)</a> to version 8.12.10. The address parsing security fix went into 3.4 and -stable, but not the full version update.
762: <!-- ^ 20030917 -->
763: <!-- ^ 20030916 -->
764: <li>3.4 -> 3.4-current.
765: <!-- ^ 20030915 -->
1.422 deraadt 766: </ul>
767: <p>
1.203 deraadt 768:
1.95 deraadt 769: This list mentions mostly platform-independent changes. For a list of changes
770: made in a particular platform, please check the page for that platform. If you
771: find them not listed there, the changes are either (1) not being documented or
772: (2) are documented here.<br><br>
1.14 deraadt 773:
774: <hr>
1.424 deraadt 775: <p>
776: <h3>
1.846 deraadt 777: For changes in other releases, click below:<br>
778: <a href="plus20.html">2.0</a>,
779: <a href="plus21.html">2.1</a>,
780: <a href="plus22.html">2.2</a>,
781: <a href="plus23.html">2.3</a>,
782: <a href="plus24.html">2.4</a>,
783: <a href="plus25.html">2.5</a>,
784: <a href="plus26.html">2.6</a>,
785: <a href="plus27.html">2.7</a>,
786: <a href="plus28.html">2.8</a>,
787: <a href="plus29.html">2.9</a>,
788: <a href="plus30.html">3.0</a>,
789: <a href="plus31.html">3.1</a>,
1.868 deraadt 790: <a href="plus32.html">3.2</a>,
1.889 david 791: <a href="plus33.html">3.3</a>,
792: <a href="plus34.html">3.4</a>.
1.424 deraadt 793: <br>
794: </h3>
795:
796: <hr>
1.729 horacio 797: <a href="index.html"><img height=24 width=24 src="back.gif" border=0 alt="OpenBSD"></a>
798: <a href="mailto:www@openbsd.org">www@openbsd.org</a>
1.900 ! deraadt 799: <br><small>$OpenBSD: plus.html,v 1.899 2003/12/27 19:43:37 deraadt Exp $</small>
1.14 deraadt 800:
801: </body>
802: </html>
![[BACK]](/icons/back.gif){kind=icon}
Return to plus.html CVS log ![[TXT]](/icons/text.gif){kind=icon}
![[DIR]](/icons/dir.gif){kind=icon}
Up to [local] / www