[BACK]Return to plus.html CVS log [TXT][DIR] Up to [local] / www
File: [local] / www / plus.html (download) (as text)

Revision 1.746, Sun Apr 1 05:57:16 2001 UTC (23 years, 2 months ago) by jason
Branch: MAIN
Changes since 1.745: +5 -2 lines 

two timed fixes in 2.7 and 2.8 patch branches.

<!DOCTYPE HTML PUBLIC  "-//IETF//DTD HTML Strict//EN">
<html>
<head>
<title>OpenBSD-current changes</title>
<link rev="made" href="mailto:www@openbsd.org">
<meta name="resource-type" content="document">
<meta name="description" content="OpenBSD-current changes">
<meta name="keywords" content="openbsd,current,changes">
<meta name="distribution" content="global">
<meta name="copyright" content="This document copyright 1996-2001 by OpenBSD.">
</head>

<body bgcolor="#ffffff" text="#000000" link="#23238e">

<img alt="[OpenBSD]" height=30 width=141 src="images/smalltitle.gif">
<p>
<h2><font color=#e00000>Changes made between OpenBSD 2.8 and OpenBSD-current</font><hr></h2>

<p>
This is a partial list of the major machine independent changes
(i.e., these are the changes people ask about most often).  Port
specific changes have also been made, and are sometimes mentioned
in the pages for the specific <a href="plat.html">platforms</a>.

<p>
Changes to the <a href="ports.html">ports</a> collection are documented
<a href="portsplus.html">here</a>.

<p>
Note: <font color=#e00000>Problems for which patches exist are marked in red</font>.

<p>
<h3>
<a href="plus20.html">For changes leading up to OpenBSD 2.0, click here</a>.<br>
<a href="plus21.html">For changes leading up to OpenBSD 2.1, click here</a>.<br>
<a href="plus22.html">For changes leading up to OpenBSD 2.2, click here</a>.<br>
<a href="plus23.html">For changes leading up to OpenBSD 2.3, click here</a>.<br>
<a href="plus24.html">For changes leading up to OpenBSD 2.4, click here</a>.<br>
<a href="plus25.html">For changes leading up to OpenBSD 2.5, click here</a>.<br>
<a href="plus26.html">For changes leading up to OpenBSD 2.6, click here</a>.<br>
<a href="plus27.html">For changes leading up to OpenBSD 2.7, click here</a>.<br>
<a href="plus28.html">For changes leading up to OpenBSD 2.8, click here</a>.<br>
<br>
</h3>

<hr>

<p>
<h3><font color=#0000e0>We are working on OpenBSD-current.</font></h3><p>
<ul>
<li>Check for short packets and bad types sent to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=timed?sektion=8">timed</a>.<br>
    <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
<li><a href="http://www.openssh.com/">OpenSSH</a> 2.5.2 released.<br>
    <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
<li><font color=#e00000><strong>SECURITY FIX: Be careful with file permissions in readline library</strong></font><br>
    <a href="errata.html#readline">A patch is available</a></strong>.<br>
    <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
<li>Make buffer size 8k on NE1000, and 16k otherwise for
<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ne&sektion=4">ne</a>.<br>
    <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
<li>Move bogus packet length test in udp packets to avoid being stuck at <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=splsoftnet&sektion=9">splsoftnet</a>.<br>
    <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
<li><font color=#e00000><strong>SECURITY FIX: for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ipsec&sektion=4">ipsec(4)</a>, handle AH packets with IP options more strictly.</strong></font><br>
    <a href="errata.html#ipsec_ah">A patch is available</a></strong>.<br>
    <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
<li><font color=#e00000><strong>SECURITY FIX: on i386, check arguments to USER_LDT (not enabled by default) mappings.</strong></font><br>
    <a href="errata.html#userldt">A patch is available</a></strong>.<br>
    <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
<li><font color=#e00000><strong>SECURITY FIX: update to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sudo&sektion=8">sudo</a>-1.6.3p6 which fixes a buffer overflow on very long argv components.</strong></font><br>
    <a href="errata.html#sudo">A patch is available</a></strong>.<br>
    <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
<li><a href="http://www.openssh.com/">OpenSSH</a> 2.5.1 released.<br>
    <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
<li><font color=#e00000><strong>IMPLEMENTATION FIX: fix port number computation in libwrap client side ident implementation.</strong></font><br>
    <a href="errata.html#libwrap">A patch is available</a></strong>.<br>
    <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
<li>Disable bogus file check in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cvs&sektion=1">cvs(1)</a>.<br>
    <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
<li><a href="http://www.openssh.com/">OpenSSH</a> 2.5.0 released.<br>
    <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
<li><a href="http://www.openssh.com/">OpenSSH</a> 2.3.2 released.<br>
    <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
<li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rwhod&sektion=8">rwhod(8)</a> to work, and make debug code a flag option.
<li>Mark our tree such that we use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wscons&sektion=4">wscons(4)</a> as if it is vt220, instead of vt100.
<li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wscons&sektion=4">wscons(4)</a>, when scrolled back, if a new key is pressed, reset us to our previous location, as <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pcvt&sektion=4">pcvt(4)</a> used to do.
<li>Permit <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sftp&sektion=1">sftp(1)</a> over SSH1 protocol.
<li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sftp&sektion=1">sftp(1)</a>, do not forward agent or X11 traffic.
<li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tar&sektion=1">tar(1)</a>, fix -T option and add support for -C option
<li>Honor TMPDIR variable in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tar&sektion=1">tar(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cpio&sektion=1">cpio(1)</a>, and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pax&sektion=1">pax(1)</a>.
<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=perl&sektion=1">perl(1)</a> patch CHANGE6214.
<li>New <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=route6d&sektion=8">route6d(8)</a>.
<li>Numerous more changes to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sftp-server&sektion=8">sftp-server(8)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sftp&sektion=1">sftp(1)</a>.
<li>Changes to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=accept&sektion=2">accept(2)</a> to permit return of ECONNABORTED.
<li>Quieten IPv6 DN message reporting by default.
<li>Improve xmalloc() and friends in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> code..
<li>Remove dead architecture support from the tree.
<li>Remove support for #! from <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=syslogd&sektion=8">syslogd(8)</a>.
<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cac&sektion=4">cac(4)</a> driver to support Compaq Smart ARRAY RAID controllers.
<li>Ignore blank lines in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=hostname.if&sektion=5">hostname.if(5)</a> files.
<li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>, add -1 option to force protocol 1.
<li>Enable <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sftp-server&sektion=8">sftp-server(8)</a> by default.
<li>Numerous bug fixes to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sftp-server&sektion=8">sftp-server(8)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sftp&sektion=1">sftp(1)</a>.
<li>Make scsi work on the vaxstation 4000/90.
<li>Same for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tun&sektion=4">tun(4)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=gif&sektion=4">gif(4)</a>, and others..
<li>Change <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=lo&sektion=4">lo(4)</a> initialization code so that boot -c pseudo-device editing code can affect it in the expected fashion.
<li>If kernel has <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ddb&sektion=4">ddb(4)</a> support, add a ddb sub-command inside boot -c.
<li>Teach the bridge to deal with ARP alignment in the presence of numerous previous layers...
<li>EtherIP support in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcpdump&sektion=8">tcpdump(8)</a>.
<li>Fix a bug introduced a few weeks ago in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=yppush&sektion=8">yppush(8)</a>.
<li>A bit of a trawl through the source tree to please the alpha, since various problems occur in the absence of perfect weak symbols.
<li>libc_r works on the alpha now.
<li>Many new fixes to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sort&sektion=1">sort(1)</a>.
<li>Teach config -e and boot -c about pseudo-devices.
<li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=perl&sektion=1">perl(1)</a> h2ph scripts.
<li>More <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bridge&sektion=4">bridge(4)</a> fixes for unicast learning.
<li>Add <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sftp&sektion=1">sftp(1)</a> client.
<li>Fix an off-by-{1,2,4} error in i386_space_copy().  <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wscons&sektion=4">wscons(4)</a> now works perfectly.
<li>More fixes to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rtadvd&sektion=8">rtadvd(8)</a>.
<li>Fix bugs in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=atc&sektion=6">atc(6)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=snake&sektion=6">snake(6)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=battlestar&sektion=6">battlestar(6)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=phantasia&sektion=6">phantasia(6)</a>, and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=adventure&sektion=6">adventure(6)</a>.
<li>Enable scrollback from USB keyboards.
<li>Numerous improvements in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ppp&sektion=8">ppp(8)</a>.
<li>At ELF <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=execve&sektion=2">execve(2)</a> time, check for the OpenBSD note first, so that native binaries run best.
<li>Attempt to share crtbegin/crtend in ELF csu, including an OS note.
<li>Change powerpc <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ld.so&sektion=1">ld.so(1)</a> so all architectures use DT_INIT for ctors/init.
<li>Fix overlapping bus space copy operations on i386.
<li>Move EtherIP to version 3 (2 byte padded header).
<li>Art does battle with ksyms, gets wounded, but eventually wins.
<li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a>, S/Key is now called ChallengeResponse.
<li>Make ReverseMappingCheck optional in sshd_config.
<li>Mickey the madman goes on a new timeout crawl through pci and isa drivers.
<li>Fix nlist emulation for cases where the ELF header does not exist; permits /dev/ksyms to work on ELF machines.
<li>Emulate some new freebsd <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=signal&sektion=2">signal(2)</a> related things in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=compat_freebsd&sektion=8">compat_freebsd(8)</a>.
<li>In IPv6, avoid panic when packet to nonexistent link-local address is issued.
<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xl&sektion=4">xl(4)</a> no longer needs to whine about tx underruns.
<li>Fix ELF support for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=compat_freebsd&sektion=8">compat_freebsd(8)</a>.
<li>Catch the alpha up to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wscons&sektion=4">wscons(4)</a> changes.
<li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wscons&sektion=4">wscons(4)</a> <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wsmux&sektion=4">wsmux(4)</a> attachment.
<li>Support mvme188 card in mvme88k port.
<li>If a <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pccbb&sektion=4">pccbb(4)</a> bridge does not have the right voltages, assume it is dead.  Permits single connector adapters to work.
<li>Fix some bugs in the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bridge&sektion=4">bridge(4)</a>, especially regarding <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=gif&sektion=4">gif(4)</a>.
<li><font color=#e00000><strong>IMPLEMENTATION FIX: fix memory allocation in the PCI LANCE ethernet driver, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=le&sektion=4&arch=i386">le(4)</a>.</strong></font><br>
    <a href="errata.html#lepci">A patch is available</a></strong>.<br>
    <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
<li>In config(8) -e and -u, do not write out a new kernel if nothing changed.
<li>Numerous fat utmp(5) changes to utilities.
<li>Move utmp(5) to large format.
<li>Fix some incorrect return values for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mmap&sektion=2">mmap(2)</a> functions.<br>
    <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
<li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=top&sektion=1">top(1)</a> not setgid.
<li>Update X11 to support the new i386 changes.
<li>Configure <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wscons&sektion=4">wscons(4)</a> defaults to be what our users expect.
<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=moused&sektion=8&arch=i386">moused(8)</a> is dead for now.
<li>Enable uhci(4) and ohci(4) devices by default in GENERIC.
<li>Range-check invalid .max fields in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=inetd&sektion=8">inetd(8)</a>.
<li>Various post-merge ipf fixes.  Some previous fixes got removed and had to be put back in.
<li>In ATAPI code, ignore PIOMODE errors.
<li>On many architectures, change console name to ttyC? instead of ttyE?.
<li>Add -U option to ELF <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ldconfig&sektion=8">ldconfig(8)</a>.
<li>Move i386 to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wscons&sektion=4">wscons(4)</a>.
<li>Re-org the alpha boot floppies.
<li>More improvements against the Bleichenbacher pkcs#1 attack.
<li>Fix more select overflow issues in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>.
<li>gcc 2.95.3, test 2.
<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ises&sektion=4">ises(4)</a>, start of a driver for the Pijnenburg PCC-ISES crypto chip.  Does random entropy insertion.
<li>Permit many compat system calls to match to the same native call (was not permitted before).
<li>A bunch of people are doing a kernel trawl to update drivers to new timeouts.
<li>Support boot -c on the sparc.
<li>Fix an early timeout bug in wdc/ata support, which caused problems with atapi tape drives.
<li>Niklas runs through the tree doing commits in an attempt to keep up with Todd's much higher commit count.
<li>Receive random numbers from <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ubsec&sektion=4">ubsec(4)</a> cards.
<li>Make wdc mode printing more portable, so that the powerpc can use it too.
<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=adb&sektion=4">adb(4)</a> drivers in powerpc port.
<li>New <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=upl&sektion=4">upl(4)</a> driver for Prolific PL2301/PL2302 USB host-to-host driver.  This acts like a network device.
<li>Remove -Q flag from <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a>.
<li>Change audio-driver interface so drivers can supply a minimum delta for mixer value changes.
<li>USB sync.
<li><font color=#e00000><strong>SECURITY FIX: fix some buffer overflows in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=named&sektion=8">named(8)</a>.</strong></font><br>
    <a href="errata.html#named">A patch is available</a></strong>.<br>
    <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
<li>Support Cheetah vaxes.
<li>Improve <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=MAKEDEV&sektion=8">MAKEDEV(8)</a> manual pages on many architectures.
<li>Cause <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pcibios&sektion=4">pcibios(4)</a> to route interrupts via the pci router at the time interrupts are established for each driver, not before.
<li>Optimize pcidevs, usbdevs, and other tables in the kernel.
<li>Both <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wi&sektion=4">wi(4)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=awi&sektion=4">awi(4)</a> now support more models of cards.
<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=skey&sektion=1">skey(1)</a> SHA1 is supposed to be little endian.
<li>Improve <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ping6&sektion=8">ping6(8)</a> signal handling further.
<li>Merge <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a> in.  It is no longer separate.
<li>Many <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ppp&sektion=8">ppp(8)</a> improvements.
<li>Handle binary data in install floppy dmesg.
<li>Improve ELF handling of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=nlist&sektion=3">nlist(3)</a>.
<li>Print CPU speed in GHz if it is that fast.
<li>Detect Transmeta cpus.
<li>On powerpc, ensure that signal delivery fills in rval[1]; at least pthread was affected.
<li>Move powerpc to MACHINE_NEW_NONCONTIG.
<li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mg&sektion=1">mg(1)</a>, do not use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rename&sektion=2">rename(2)</a> on the ~ file; make a new copy so that <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=vipw&sektion=8">vipw(8)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=crontab&sektion=1">crontab(1)</a> do the right thing.
<li>Tweak alpha so it sends SIGBUS for unaligned access, and does NOT do a fixup.  This encourages people to fix their code.
<li>KGDB support for the i386.
<li>Pack alpha definition of infinity properly, other architectures too.
<li>Recognize Intel P4 cpu.
<li>Various space optimizations for alpha boot floppies.
<li>Fix CF wdc, which was broken for a while.
<li>Add "enable" keyword in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=config&sektion=8">config(8)</a> files.
<li>Merge and simplify emulation directory handling code.
<li>Support Initio INI-91xx cards via new <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=iha&sektion=4">iha(4)</a> driver.
<li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=accept&sektion=2">accept(2)</a>, when peer disconnects before accept is issued, do not return junk in mbuf by setting length to 0.
<li>Support Hardware RNG on i850 and i860 hubs.
<li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sysctl&sektion=3">sysctl(3)</a> so that you can clear a string with it.
<li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a>, rename "skey" to "challenge response", since this mechanism is now more flexible.
<li>Reduce how long we wait for scsi devices to come ready; 50 seconds is enough.
<li>pcvt keyboard LED update lockup patch.
<li>ncurses-5.2-20010114
<li>Fix many more <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a> memory leaks.
<li>Fix memory leak in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a>.
<li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=timed&sektion=8">timed(8)</a>, do not accept packets with an unterminated hostname.<br>
    <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
<li>Alias map bios rom at both real address and it's own zero-relative address, because bios roms contain bugs.
<li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rtadvd&sektion=8">rtadvd(8)</a>, sync router renumbering flag bit to conform to 2292bis-02 and RR RFC.
<li>Get rid of -R flag in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh-keygen&sektion=1">ssh-keygen(1)</a>.
<li>Avoid memory leak in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ndp&sektion=8">ndp(8)</a>.
<li>Establish <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pccbb&sektion=4">pccbb(4)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ohci&sektion=4">ohci(4)</a>, and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=uhci&sektion=4">uhci(4)</a> interrupt handler much earlier, because of coming <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pcibios&sektion=4">pcibios(4)</a> changes.
<li>Numerous small fixes to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a> and friends.
<li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>, fix SIGSEGV for -o "".
<li>On i386, validate gate targets.
<li>The easy delete key always returns ^?, while the more difficult one returns ^H.
<li>Incorporate a set of post-4.4BSD changes to the kernel routing code.
<li>Support more than 256MB of ram on powerpc.
<li>Be more careful with assuming with VIA chips can handle U66.
<li>Document better how code using <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sigblock&sektion=3">sigblock(3)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sigsetmask&sektion=3">sigsetmask(3)</a> would be converted to use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sigprocmask&sektion=2">sigprocmask(2)</a>.
<li>Get <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a> ready for auth-login.
<li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ifconfig&sektion=8">ifconfig(8)</a>, permit prefixlen to work against ipv4 addresses.
<li>Change <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=savecore&sektion=8">savecore(8)</a> to deal with machines dumping 1GB or more..
<li>Attempt to deal with inverted signal races in terminal handlers better, throughout the source tree -- ie. main code is deep inside stdio, signal handler calls exit().
<li>Document rules that apply to signal handlers in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=signal&sektion=3">signal(3)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sigaction&sektion=2">sigaction(2)</a>.
<li>ipf 3.4.15
<li>Fix a <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=vi&sektion=1">vi(1)</a> crash.
<li><font color=#e00000><strong>SECURITY FIX: The <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=random&sektion=4">rnd(4)</a> device does not use all of its input when data is written to it.</strong></font><br>
    <a href="errata.html#rnd">A patch is available</a></strong>.<br>
    <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
<li>Fix C sequence point issues in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dd&sektion=1">dd(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=monop&sektion=6">monop(6)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tail&sektion=1">tail(1)</a>, and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rbootd&sektion=8">rbootd(8)</a>.
<li>Fix previous <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=inetd&sektion=8">inetd(8)</a> fix.
<li>Fix signal handler race in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=apmd&sektion=8">apmd(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bootpd&sektion=8">bootpd(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=syslogd&sektion=8">syslogd(8)</a>.
<li>Constrain <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isp&sektion=4">isp(4)</a> openings to 128, since the vendor code lies, cheats, steals, and makes us cry.
<li>Fully support SSH2 RSA keys in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a>.
<li>Change alpha bootblocks to ELF.
<li>Fix fd_set overflows and signal races in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pppoe&sektion=1">pppoe(1)</a>.
<li>Important pthread fix.
<li>Large block of documentation and functionality changes to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mail&sektion=1">mail(1)</a>.
<li>fd_set overflow fix to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=routed&sektion=8">routed(8)</a>.
<li>Signal handler fix to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=newfs&sektion=1">newfs(1)</a>.
<li>Cleanup various signal races and buffer overflows in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ed&sektion=1">ed(1)</a>.
<li>Fix signal race in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mountd&sektion=8">mountd(8)</a> by writing our own svc_run() routine.
<li>Fix uninitialized variable bug in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=config&sektion=8">config(8)</a> UKC code that ignored first command sometimes.
<li>Various changes ensure that all known <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=le&sektion=4">le(4)</a> cards now work on sun4, sun4c, and sun4m machines.
<li>Tweak subr_extent code with respect to boundary cases.
<li>sftp-server draft came out; convert our sftp-server to be compliant.
<li>sendmail 8.11.2
<li>Signal race fixes to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fsck_ffs&sektion=8">fsck_ffs(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rcp&sektion=1">rcp(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=slattach&sektion=8">slattach(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=shutdown&sektion=8">shutdown(8)</a>.
<li>Change asm and volatile to __asm__ and __volatile__ in any file which might be compiled using -ansi -pedantic or similar.
<li>Some signal handler cleanup in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rcp&sektion=1">rcp(1)</a>.
<li>Cleanup timeout code in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=adw&sektion=4">adw(4)</a>.
<li>Numerous alpha catchups.
<li>New <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rtadvd&sektion=8">rtadvd(8)</a> code.
<li>Compute UDP checksum in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhcpd&sektion=8">dhcpd(8)</a>.
<li>Move mvme88k to UVM.
<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=clct&sektion=4">clct(4)</a> driver for Cirrus Logic CS4281 sound chips.
<li>Support {Allow,Deny}Groups in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a>.
<li>sshd(8) SSH2 protocol support for keepalives, IPTOS_LOWDELAY, TCP_NODELAY, and IPTOS_THROUGHPUT.
<li>Add kerberos password handling in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a> for kerberosIV.
<li>More memory leak fixes to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>.
<li>Tweak <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=strlcat&sektion=3">strlcat(3)</a> to not crash for a certain "illegal pointers, length 0" situation.
<li>Clarify <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=setjmp&sektion=3">setjmp(3)</a> variants in the manual pages.
<li>Correct fd_set and signals in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ping6&sektion=8">ping6(8)</a>.
<li>Un-race three signal handlers, and fix select overflows in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=inetd&sektion=8">inetd(8)</a>.
<li>Fix signal race in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=route6d&sektion=8">route6d(8)</a>.
<li>Move mvme88k to MACHINE_NEW_NONCONTIG.
<li>Fix signal races in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rwhod&sektion=8">rwhod(8)</a>.
<li>Fix fd_set overflow in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=yppush&sektion=8">yppush(8)</a>.
<li>Fix closedown stub generated and hand-whacked by <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rpcgen&sektion=1">rpcgen(1)</a> in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ypserv&sektion=8">ypserv(8)</a>.
<li>Audio driver for most ESS <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=maestro&sektion=8">maestro(8)</a> models.
<li>Signal race repairs in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=talkd&sektion=8">talkd(8)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=comsat&sektion=8">comsat(8)</a>.
<li>Fix select overflow in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh-agent&sektion=1">ssh-agent(1)</a>.
<li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rpcgen&sektion=1">rpcgen(1)</a> to deal with large fd_set.
<li>Document various signal races in the source tree which are very difficult to fix, or which turn out to be safe even if they look flawed.
<li>Rename <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ich&sektion=4">ich(4)</a> to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=auich&sektion=4">auich(4)</a>.
<li>Cleanup the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sftp-server&sektion=8">sftp-server(8)</a> implementation.
<li>Support !command feature in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bridename.if&sektion=5">bridename.if(5)</a> files as well.
<li>Numerous other small changes to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a>.
<li>Handle memory failures in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=passwd&sektion=1">passwd(1)</a>.
<li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=finger&sektion=1">finger(1)</a>, fail nicely if memory allocation fails.
<li>Handle DELETE payloads in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a>.
<li>Remove signal races from <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a>.
<li>Ease support for road-warrior scenarious in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a>, by intuiting the Local-ID when possible.
<li>Change 802.11 DS drivers to operate in BSS mode by default.
<li>Create links for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=FD_SET&sektion=3">FD_SET(3)</a> and such to point to the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=select&sektion=2">select(2)</a> page.
<li>Support TCP_NDELAY on ipv6 in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>.
<li>Numerous spelling error corrections in the system.
<li>Various other calendar updates.
<li>Ensure replydirname in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ftpd&sektion=8">ftpd(8)</a> does not ever truncate names.
<li>Ensure <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ftpd&sektion=8">ftpd(8)</a> does not sometimes return a stray " at the end of a string.
<li>Various large updates to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isp&sektion=4">isp(4)</a>.
<li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=restore&sektion=8">restore(8)</a>, do not skip TS_BITS or TS_CLRI are set.
<li>Change our own custom EtherIP protocol to the standard one (which is very badly designed, but we are trying to get them to fix that).
<li>Fix KerberosIV code to build better if src and obj are in strange places.
<li>Support Banner option in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a>.
<li>Make the openssh-p effort a bit easier by merging some simpler portability hacks.
<li>Various missing <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=free&sektion=3">free(3)</a> calls repaired in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>.
<li>Attempt to support cardbus 3CXFEM656C 56k Global modem.
<li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pciide&sektion=4">pciide(4)</a>, support U100 on ICH2, U66 on Via Apollo, and other repairs to Promise.
<li>Spelling changes to calendar files.
<li>Be more careful with <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=stat&sektion=2">stat(2)</a> handling in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mv&sektion=1">mv(1)</a>.
<li>Fix %p handling in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=strptime&sektion=3">strptime(3)</a>.
<li>Fix various buffer overflows and other fixes in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=indent&sektion=1">indent(1)</a>.
<li>Do not spit out icmp6 checksum messages if not a debug kernel.

<li>Permit stripped VAX kernels to load despite unexpected values from libsa.
<li>Simplify locking and a few more fixes to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=twe&sektion=4">twe(4)</a>.
<li>Plug some memory leaks in OpenSSH.
<li>Fix -P in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ftpd&sektion8">ftpd(8)</a>.
<li>Emulation fixes to the VAX code.
<li>Protect bits of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhclient&sektion=8">dhclient(8)</a> with a locking mechanism to prevent multiple instances from using the leases file simultaneously.
<li>Fix 3 cases in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mv&sektion=1">mv(1)</a> relating to the moving of symlinks across filesystems.
<li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ftpd&sektion=8">ftpd(8)</a>, expand the tilde character in ftp-dir login.conf variable.
<li>Prohibit binding to an anycast, notready, or detached <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ip6&sektion=4">IPv6</a> address.
<li>Rename <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fsinfo&sektion=8">fsinfo(8)</a> to xfsinfo in X11 to avoid naming conflict.
<li>Set the correct pfkeyv2 direction for KAME SPD entries in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a>.
<li>Save and restore errno properly in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=flex&sektion=1">flex(1)</a> since it may be whacked by <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isatty&sektion=3">isatty(3)</a>.
<li>Fix sending/receiving passwords in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=routed&sektion=8">routed(8)</a>.
<li>Add an i386-specific <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sysctl&sektion=3">sysctl(3)</a> that modifies halt -p processing in APM to deal with some quirky machines.
<li>More sun3 fixes, mostly to conform better to other m68k architecture code.
<li>Handle login banners better in SSH2 instances of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>.
<li>Various spelling and grammar fixes across the tree.
<li>Use new <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sysctl&sektion=3">sysctl(3)</a> interface for kernel memory bucket statistics and clock information.
<li>Correctly check for empty <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mailq&sektion=1">mailq(1)</a> in /etc/daily.
<li>Y2K fix in the mvme68k NVRAM code.
<li>Extend <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sysctl&sektion=3">sysctl(3)</a> to support quad values.
<li>Improve SMB packet printing in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcpdump&sektion=8">tcpdump(8)</a>.
<li>Add common pidfile-writing code to DHCP so each program doesn't need to roll its own.
<li>To please <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cap_mkdb&sektion=1">cap_mkdb(1)</a>, make it an error to open a zero-length file for read-only access in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=hash&sektion=3">hash(3)</a>.
<li>Some sun3 architecture fixes.
<li>Ignore environment variables in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&sektion=8">libssl</a> if we're running <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=issetugid&sektion=2">setugid</a>.
<li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>, log the remote IP address on disconnect.
<li>Check for memory allocation failure in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=vmstat&sektion=8">vmstat(8)</a>.
<li>Fix a buffer overflow in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fsinfo&sektion=8">fsinfo(8)</a>.
<li>Handle another special case in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=apm&sektion=4&arch=i386">apm(4)</a>.
<li>Fix a panic in the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=raid&sektion=4">RAIDframe</a> locking management code.
<li>Add setpid command to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fdisk&sektion=8&arch=i386">fdisk(8)</a> for setting the partition ID.
<li>Change <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bridge&sektion=4">bridge(4)</a> to use gif* instead of enc*.
<li>Set SO_REUSEPORT socket option in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhcp&sektion=8">DHCP</a> code, so multiple dhclients work.
<li>Allow printing of 8-bit ASCII characters in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=talk&sektion=1">talk(1)</a> through an option.
<li>Do not perform getnetbyname() in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mountd&sektion=8">mountd(8)</a> if the address is already in dot-notation.
<li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ftpd&sektion=8">ftpd(8)</a>, log the actual number of bytes transferred instead of the original file size.
<li>Fix ^C in termtype prompt.
<li>Prevent <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fsck_ffs&sektion=8">fsck_ffs(8)</a> from marking a filesystem clean if <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fsck&sektion=8">fsck(8)</a> needs to be rerun.
<li>Resolve scheduling conflict in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=newsyslog&sektion=8">newsyslog(8)</a>.
<li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhclient&sektion=8">dhclient(8)</a>, set a reasonable default lease time if the server does not provide one.
<li>Suppress uninteresting PCI bus error messages in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ahc&sektion=4">ahc(4)</a>.
<li>Add m88k support to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=gprof&sektion=1">gprof(1)</a>.
<li>Add HostKeyAlias option to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>.
<li>Behave nicely with fixed-rate codecs in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=auvia&sektion=4">auvia(4)</a>.
<li>Fix a minor off-by-one error in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=gprof&sektion=1">gprof(1)</a>.
<li>In the ports infrastructure, take the old non-fake code out-of-line.
<li>Repair a disgusting <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rwhod&sektion=8">rwhod(8)</a> crash.
<li>Fix buffer overflow in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=csh&sektion=1">csh(1)</a> builtin <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=printf&sektion=1">printf(1)</a> implementation.
<li>Convert <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=atoi&sektion=3">atoi(3)</a> to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=strtoul&sektion=3">strtoul(3)</a> in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=top&sektion=1">top(1)</a>.
<li>Emulate Linux truncate64, stat64, lstat64, and fstat64 syscalls.
<li>Revoke root privileges earlier in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ping6&sektion=8">ping6(8)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=traceroute6&sektion=8">traceroute6(8)</a>.<br>
    <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
<li>Many man page fixes.
<li>Use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=arc4random&sektion=3">arc4random(3)</a> in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=jot&sektion=1">jot(1)</a>.
<li>Handle quotas over 4GB in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=edquota&sektion=8">edquota(8)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=repquota&sektion=8">repquota(8)</a>.
<li>Fix IPv6 Path MTU Discovery.
<li>Give up euid more carefully in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mrinfo&sektion=8">mrinfo(8)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mtrace&sektion=8">mtrace(8)</a>.
<li>Various OpenSSH fixes.
<li>Add support for ActivCard, CRYPTOCard, and SNK-004 authentication for the BSD authentication framework.
<li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ksh&sektion=1">ksh(1)</a>, remain in non-blocking mode if the shell is not interactive.
<li><font color=#e00000><strong>SECURITY FIX: xlock now authenticates via a pipe.</strong></font><br>
    <a href="errata.html#xlock">A patch is available</a></strong>.<br>
    <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
<li><font color=#e00000><strong>IMPLEMENTATION FIX: PS/2 mouse driver, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pms&sektion=4&arch=i386">pms</a>, lockup fix.</strong></font><br>
    <a href="errata.html#pms">A patch is available</a></strong>.<br>
    <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
<li>Implement a workaround in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=atapiscsi&sektion=4">atapiscsi(4)</a> for buggy Toshiba drivers.
<li><font color=#e00000><strong>SECURITY FIX: Fix holes in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mount_procfs&sektion=8">procfs(8)</a>.</strong></font><br>
    <a href="errata.html#procfs">A patch is available</a></strong>.<br>
    <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
<li>Put <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=strlcat&sektion=3">strlcat(3)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=strlcpy&sektion=3">strlcpy(3)</a> into libkern for kernel use.
<li>Fix setting of nwid for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wi&sektion=4">wi(4)</a>.<br>
    <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
<li>Change /etc/security to spit out unified diffs.
<li>Add driver for Compaq SMART Array RAID controllers, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cac&sektion=4">cac(4)</a>.
<li>Extend the i386 allowaperature <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sysctl&sektion=3">sysctl(3)</a> to allow access to the whole 1st MB of memory.
<li>Add some more sanity checking to the PCMCIA code to fix some obscure panics.
<li>Import Apache 1.3.14 + mod_ssl 2.7.1.
<li>Support multiple pfkeyv2 keying daemons.
<li>Compute <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dh&sektion3">diffie-hellman</a> in parallel between server and client in <a href="http://www.openssh.com/">OpenSSH</a>.
<li>Support Amigas with more than 64MB of RAM.
<li>Ensure /etc/sudoers is created with a proper secure mode.
<li>Import <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=openssl&sektion=1">OpenSSL</a> 0.9.6.
<li>More <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=photurisd&sektion=8">photurisd(8)</a> improvements.
<li>Update kernel pfkeyv2 code for better conformance to the RFC.
<li>Enable loading of ELF kernels for alpha.
<li>Add extraction support for shell archives to the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bsd.port.mk&sektion=5">bsd.port.mk</a> infrastructure.
<li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ipsec&sektion=4">ipsec(9)</a>, look for TDB if gateway is unspecified.<br>
    <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
<li>Fixes to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=patch&sektion=1">patch(1)</a> -f and -b.
<li>Convert some more drivers to the new <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=timeout&sektion=9">timeout(9)</a> interface.
<li>Add bytecounter statistics reporting to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=netstat&sektion=1">netstat(1)</a>.
<li>Instrument more random TCP sequence numbers.
<li><font color=#e00000><strong>IMPLEMENTATION FIX: Compute <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=crypto&sektion=9">crypto(9)</a> session IDs correctly for kernel.</strong></font><br>
    <a href="errata.html#hwcrypto">A patch is available</a></font>.<br>
    <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
<li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a>, permit logins with read-only root filesystems if the tty already has sane modes set.
<li>Source port &lt; 1024 is no longer required for rhosts-rsa in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a>.
<li>Remove dead code in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=hifn&sektion=4">hifn(4)</a> driver.
<li>Proper <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getopt&sektion=3">getopt(3)</a> usage in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=compress&sektion=1">compress(1)</a>.
<li>Fix a time specification in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=last&sektion=1">last(1)</a>.
<li>Do not disable PMTU for established TCP connections unless there is data to send.
<li>Add support for the 802.1D spanning tree protocol to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bridge&sektion=4">bridge(4)</a>.
<li>New BSD authentication login scripts.
<li>Listen to pfkeyv2 acquire messages in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=photurisd&sektion=8">photurisd(8)</a>, and setup SAs accordingly.
<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a> update.
<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=apm&sektion=4&arch=i386">apm(4)</a> bug fix that helps a few laptops.
<li>Remove unnecessary code from <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=photurisd&sektion=8">photurisd(8)</a> in preparation of new SPD framework.
<li>Repair a memory leak in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=icmp6&sektion=4">ICMPv6</a> code.
<li>Turn off PMTU when <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=icmp&sektion=4">ICMP</a> needfrag messages get blocked.
<li>Finnish updates for inter.phone.
<li>Display number of successful IPv6 PMTU changes in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=netstat&sektion=1">netstat(1)</a> -s output.
<li>Do not re-print ETA on completion in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=scp&sektion=1">scp(1)</a> when copying 0-sized files.
<li>Validate <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=icmp6&sektion=4">ICMPv6</a> "too big" messages based on PCB.
<li>Do not use already-freed memory in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=route&sektion=8">route(8)</a>.
<li>Avoid repeated host controller halted messages in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=uhci&sektion=4">uhci(4)</a>.
<li>Remove unused libgmp.
<li>Import <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=kerberos&sektion=1">KerberosIV</a> v1.0.4.
<li>Always request a new challenge for skey/tis-auth in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>.
<li>Support newer <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cy&sektion=4">cy(4)</a> communication cards.
<li>Provide new international keymaps for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pcvt&sektion=4&arch=i386">pcvt(4)</a>.
<li>Ignore filesystems marked "xx" in the install scripts.
<li>Document that <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pipe&sektion=2">pipe(2)</a> is bidirectional, although this behavior is unportable.
<li>Move the default <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cvs&sektion=1">cvs(1)</a> connection protocol from <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rsh&sektion=1">rsh(1)</a> to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>.
<li>Remove a bogus memory free in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getnetgrent&sektion=3">getnetgrent(3)</a>.
<li>Fix a buffer overflow in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bad144&sektion=8&arch=i386">bad144(8)</a>.
<li>Revert back to the old rijndael implementation and solve byte ordering bugs there instead.
<li>Drop unneeded support for RTF_TUNNEL in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=route&sektion=8">route(8)</a>.
<li>Maintain count of routing table timer entries in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=route&sektion=8">route(8)</a>.
<li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=makewhatis&sektion=8">makewhatis(8)</a>, strip weird characters first, then sequences of spaces.
<li>Big improvements to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=adw&sektion=4">adw(4)</a>.
<li>Teach <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcpdump&sektion=8">tcpdump(8)</a> about VRRP, SMB, and timed.
<li>Force <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=calendar&sektion=1">calendar(1)</a> to only accept real calendar files as input.
<li>Fix various <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=perror&sektion=3">perror(3)</a> overflows in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pcvt&sektion=4&arch=i386">pcvt(4)</a>.
<li>Repair a <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tftp&sektion=1">tftp(1)</a> argv parsing overflow.
<li>Conditionalize some <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bpf&sektion=4">BPF</a> code in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wx&sektion=4">wx(4)</a>.
<li>Finally remove remaining references to extra <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rsa&sektion=3">RSA</a> libs, since the patent has expired.
<li>New rijndael implementation which solves endian issues.
<li>Support Intel 82801BA <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pciide&sektion=4">pciide(4)</a> controllers.
<li>Exercise more paranoia with passed KRB environment settings in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=telnetd&sektion=8">telnetd(8)</a>.
<li>Convert some more drivers to the new <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=timeout&sektion=9">timeout(9)</a> interface.
<li>Many improvements and modernizations to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isp&sektion=4">isp(4)</a>.
<li>Update <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wx&sektion=4">wx(4)</a> with LIVENGOOD support.
<li>Recognize and support the IODATA USB-ET/T Ethernet adapter in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=kue&sektion=4">kue(4)</a>.
<li>Implement asynchronous connections for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> -R and -L.
<li>Simplify <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=atrun&sektion=8">atrun(8)</a> tasks by using <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=asprintf&sektion=3">asprintf(3)</a>.
<li>Kill unused libtermlib.
<li>Import new <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pool&sektion=9">pool(9)</a> code.
<li>Fix RIPv0 packet printing and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=nfsd&sektion=8">NFS</a> port number parsing in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcpdump&sektion=8">tcpdump(8)</a>.
<li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pcap&sektion=3">pcap(3)</a>-generated <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bpf&sektion=4">BPF</a> filters work on the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tun&sektion=4">tun(4)</a> interface.
<li>Import David Maziere's <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh-keyscan&sektion=1">ssh-keyscan(1)</a>.
<li><font color=#e00000><strong>SECURITY FIX: Fix buffer overflow in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ftpd&sektion=8">ftpd(8)</a>.</strong></font><br>
    <a href="errata.html#ftpd">A patch is available</a></strong>.<br>
    <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
<li><font color=#e00000><strong>IMPLEMENTATION FIX: Fix fastroute related panic.</strong></font><br>
    <a href="errata.html#fastroute">A patch is available</a></strong>.<br>
    <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
<li>Teach <a href="http://www.openssh.com/">OpenSSH</a> about more version strings to improve interoperability.
<li><font color=#e00000><strong>SECURITY FIX: Fix another security problem in the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=kerberos&sektion=1">KerberosIV</a> code.</strong></font><br>
    <a href="errata.html#kerberos2">A patch is available</a></strong>.<br>
    <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
<li><font color=#e00000><strong>SECURITY FIX: Fix two security problems in the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=kerberos&sektion=1">KerberosIV</a> code.</strong></font><br>
    <a href="errata.html#kerberos">A patch is available</a></strong>.<br>
    <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
<li>Permit <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ftpd&sektion=8">ftpd(8)</a> umask setting via both the command line and through a login class in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=login.conf&sektion=5">login.conf(5)</a>.
<li>Prevent <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=vlan&sektion=4">vlan(4)</a> devices from emitting packets if the parent interface is not up and running.
<li>Better error checking in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ping6&sektion=8">ping6(8)</a>.<br>
    <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
<li>Some stability fixes to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a>.
<li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>, disable agent/X11 port forwarding if the hostkey has changed.
<li>Fix a coredump in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh-agent&sektion=1">ssh-agent(1)</a>.
<li>Reset 16-bit PCMCIA during chip initialization in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pccbb&sektion=4">pccbb(4)</a>.
<li>Correct PCI interrupt setup for TI PCI113X <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cbb&sektion=4">CardBus</a> bridges.
<li>Properly powerdown PC cards in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pccbb&sektion=4">pccbb(4)</a> at shutdown time.
<li>Add -D option to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a> to cause startup without a daemon.
<li>Show both the IP address and hostname when a new key is encountered in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>.
<li>Fix a bug in MSChapv2 challenge hashing in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ppp&sektion=8">ppp(8)</a>.
<li>More <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=make&sektion=1">make(1)</a> tweaks.
<li>Use -n to test for non-zero variables in /etc/netstart.
<li>Be more careful with ARP packets.
<li>Fix deletion of flows in pf_key_v2 handling of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a><br>
    <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
<li>Prevent <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=setusercontext&sektion=3">setusercontext(3)</a> in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ftpd&sektion=8">ftpd(8)</a> from setting the umask as this conflicts with any command-line umask specification.
<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=clock&sektion=3">clock(3)</a> fixes for the alpha architecture.
<li>Print select collisions in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=vmstat&sektion=8">vmstat(8)</a> -s output.
<li>Implement <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=login_check_expire&sektion=3">login_check_expire(3)</a> for libutil.
<li>Add -u username support to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pwd_mkdb&sektion=8">pwd_mkdb(8)</a>.
<li>Properly implement errno handling for the threaded libc (libc_r) on powerpc.
<li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=adduser&sektion=8">adduser(8)</a>, get rid of a race condition and use /etc/ptmp as a lock file.
<li>Set reasonable defaults for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rsa&sektion=3">RSA1</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rsa&sektion=3">RSA</a>, and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dsa&sektion=3">DSA</a> keys in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh-keygen&sektion=1">ssh-keygen(1)</a>.
<li>Reorder check for illegal ciphers in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> protocol 1 connection code.
<li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pciide&sektion=4">pciide(4)</a> support on Alpha 164SX models.
<li>Support 16 slices per device on VAX machines.
<li>Considerable cleanups to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=make&sektion=1">make(1)</a>.
<li>Improve key repeat logic in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wskbd&sektion=4">wskbd(4)</a>.
<li>Changes from KAME to make ifm_data available in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getifaddrs&sektion=3">getifaddrs(3)</a>.
<li>Fix absolute path handling in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=crunchgen&sektion=1">crunchgen(1)</a>.
<li>Shorten /dev/ttyC* device names.
<li>Complain about invalid ciphers in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>, falling back to reasonable defaults when necessary.
<li>Avoid tty races in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wsdisplay&sektion=4">wsdisplay(4)</a> when switching virtual terminals.
<li>Update <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a>.
<li>Repair lun support in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=umass&sektion=4">umass(4)</a>.
<li>Zero pw_passwd before freeing its memory in the libc BSD authentication routines.
<li>Train <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=makewhatis&sektion=8">makewhatis(8)</a> to handle more special cases.
<li>Avoid double <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fclose&sektion=3">fclose(3)</a> in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getcap&sektion=3">getcap(3)</a>.
<li>Increase delay in RAM probe for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=hifn&sektion=4">hifn(4)</a>.
<li>Suffix list fix in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=make&sektion=1">make(1)</a>.
<li>Various bug fixes in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ksh&sektion=1">ksh(1)</a>.
<li>When using the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tail&sektion=1">tail(1)</a> -f flag on stdin, don't reopen a local file named stdin.
<li>Extend <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=kqueue&sektion=2">kqueue(2)</a> to support kernel events on <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=vnode&sektion=9">vnodes</a>.
<li>Bring in BSD authentication support for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sudo&sektion=8">sudo(8)</a>.
<li>Zap MULOG in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=inetd&sektion=8">inetd(8)</a> to improve code readability.
<li>Avoid whacking errno in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=top&sektion=1">top(1)</a> signal handlers.
<li>Do not include MFS partitions in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=quot&sektion=8">quot(8)</a> statistics output.
<li>Add support for the Acenic Copper and Netgear GA620T Gigabit Ethernet cards.
<li>Prevent a type overflow in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=recno&sektion=3">recno(3)</a>.
<li><font color=#e00000><strong>IMPLEMENTATION FIX: Imac DV reports the VGA device improperly.</strong></font><br>
    <a href="errata.html#imacdv">A patch is available</a></strong>.<br>
    <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
<li>Import BSD authentication mechanisms from BSDI BSD/OS.
<li>Implement <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pw_dup&sektion=3">pw_dup(3)</a>, a function which copies struct passwd.
<li>Replace <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getpass&sektion=3">getpass(3)</a> with a more flexible <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=readpassphrase&sektion=3">readpassphrase(3)</a> interface.
<li>Add <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=strnvis&sektion=3">strnvis(3)</a>, a length-bounded version of the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=strvis&sektion=3">strvis(3)</a> libc function.
<li>Better prompting logic in libskey.
<li>Resurrect binutils on alpha.
<li>Recognize newer Intel audio devices in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=auich&sektion=4">auich(4)</a>.
<li>Stop <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=amphy&sektion=4">amphy(4)</a> from attaching to network devices it doesn't belong to.
<li>Enable support for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pciide&sektion=4">pciide(4)</a> found in newer Intel chipsets.
<li>Correct URL handling in the install scripts.
<li>Limit the number of SCSI luns in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=umass&sektion=4">umass(4)</a>.
<li>Page size fixes to the alpha port.
<li>Import ssh-ask-pass support for X11.
<li>Fix a signal race in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ypserv&sektion=8">ypserv(8)</a> SIGHUP handling.
<li>Enable <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=uaudio&sektion=4">uaudio(4)</a> by default in GENERIC/i386.
<li>Reserve all-1s addresses in the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ipsec&sektion=4">IPSec</a> code for future policy discovery features.
<li>Resolve HMAC nomenclautre issues.
<li>Be sure to clear passwords out of memory after use in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ppp&sektion=8">ppp(8)</a>.
<li>Support kernel event queues.
<li>Add support for USB scanners through the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=uscanner&sektion=4">uscanner(4)</a> driver.
<li>More fixes to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=qec&sektion=4&arch=sparc">qec(4)</a>.
<li>Recognize newer AMD CPUs.
<li>Repair incorrect buffer size logic in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=telnetd&sektion=8">telnetd(8)</a>.
<li>Add a slew of devices to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=usbdevs&sektion=8">usbdevs(8)</a>.
<li>Do not use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=perror&sektion=3">perror(3)</a> in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a> after forking a child.
<li><font color=#e00000><strong>RELIABILITY FIX: The <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=qec&sektion=4&arch=sparc">qec</a>+<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=qe&sektion=4&arch=sparc">qe</a> ethernet cards should not generate NMIs.</strong></font><br>
    <a href="errata.html#qe">A patch is available</a></strong>.<br>
    <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
<li>Add <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ifmedia&sektion=4">ifmedia(4)</a> support to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=qec&sektion=4&arch=sparc">qec(4)</a>, among other improvements.
<li>Extra sanity checking in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=skeyinit&sektion=1">skeyinit(1)</a>.
<li>Repair timeout computations in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=atapiscsi&sektion=4">atapiscsi(4)</a>.
<li>Add initial support for DEC Alpha 21264 systems.
<li>Bring the alpha port a bit closer to a fully operational console.
<li>Support Accton EN2242 MiniPCI Ethernet adapters.
<li>Permit O_RDWR on FIFOs to handle legacy applications that depend on it.
<li>Add scrollback support to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wscons&sektion=4">wscons(4)</a> through the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=vga&sektion=4">vga(4)</a> driver.
<li>Color change in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wscons&sektion=4">wscons(4)</a> vt100 emulation to more closely imitate PCVT.
<li>Repair overriding of pseudo devices in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=config&sektion=8">config(8)</a><br>
    <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
<li>Accept -inet and -inet6 as options for the show command in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=route&sektion=8">route(8)</a>.
<li>Don't reorder keys in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh-agent&sektion=1">ssh-agent(1)</a> upon key removal.
<li>Avoid parsing options in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> if there is an <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rsa&sektion=3">RSA</a> key mismatch.
<li>Various cleanups to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ftpd&sektion=8">ftpd(8)</a>.
<li>In many programs, sync usage() output with their respective man page SYNOPSIS.
<li><font color=#e00000><strong>RELIABILITY FIX: The ThunderLAN driver, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tl&sektion=4">tl(4)</a>, should not claim all interrupts.</font><br>
    <a href="errata.html#tl">A patch is available</a></strong>.<br>
    <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
<li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pciide&sektion=4">pciide(4)</a>, do not map unsafe registers from controllers that require 16-bit I/O space.
<li>Import new <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pckbc&sektion=4">pckbc(4)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pckbd&sektion=4">pckbd(4)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=vga&sektion=4">vga(4)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pcdisplay&sektion=4">pcdisplay(4)</a>, and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ega&sektion=4">ega(4)</a> drivers for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wscons&sektion=4">wscons(4)</a>.
<li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ftpd&sektion=8">ftpd(8)</a>, assert check_login upon receipt of EPSV/LPSV.
<li>Make the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=aha&sektion=4">aha(4)</a> driver compile without UVM.
<li>Enforce non-cacheable device space on real 80386 machines.
<li>Add <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rsa&sektion=3">RSA</a> authentication support for SSH2 to <a href="http://www.openssh.com/">OpenSSH</a>.
<li>Allow serial mice to work with <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=moused&sektion=8">moused(8)</a> and XFree86 simultaneously.
<li>Repair an off-by-one error in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh-agent&sektion=1">ssh-agent(1)</a>.
<li>Convert some old drivers to the new <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=timeout&sektion=9">timeout(9)</a> interface.
<li><font color=#e00000><strong>RELIABILITY FIX: repair AES (rijndael)
kernel support.</strong></font><br>
    <a href="errata.html#rijndael">A patch is available</a></strong>.<br>
    <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
<li>Import PCI support for Alpha EB164 machines.
<li>Add bus_space_barrier macros for the powerpc.
<li>Endian fixes to the USB code.
<li>Better command line parsing in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=encrypt&sektion=1">encrypt(1)</a>.
<li>Numbering fixups in pfkeyv2 to match IANA assignments.
<li>Crank maximum mbuf size in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ppp&sektion=8">ppp(8)</a> in order to handle full-sized HDLC frames.
<li>Improve handling of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ip6&sektion=4">IPv6</a> Node Information Query packets for better specification conformance.
<li>Fix a panic induced by assigning lo0 an <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ip6&sektion=4">IPv6</a> alias.
<li><font color=#e00000><strong>IMPLEMENTATION FIX: In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a>, fix skey support in SSH1 protocol.</font><br>
    <a href="errata.html#sshskey">A patch is available</a></strong>.<br>
    <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
<li>Deprecate pltime=0 in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ifconfig&sektion=8">ifconfig(8)</a>.
<li>Modifications to the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ktrace&sektion=2">ktrace(2)</a> interface to reduce redundancy.
<li>Do not advertise dynamic/cloned routes in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=route6d&sektion=8">route6d(8)</a>.
<li>Allow <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ping6&sektion=8">ping6(8)</a> to send <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=icmp6&sektion=4">ICMP6</a> packets smaller than 8 bytes.<br>
    <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
<li>Correct free-before-reference bugs in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rshd&sektion=8">rshd(8)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rlogind&sektion=8">rlogind(8)</a>.
<li>Improve queue handling in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=gdt&sektion=4">gdt(4)</a>.
<li>New Adaptec FSA RAID driver called <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=aac&sektion=4">aac(4)</a>.
<li>Fix DMA error problems in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=adw&sektion=4">adw(4)</a>.<br>
    <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
<li>If MANPS environment variable is set, the system will also build and install postscript manual pages into /usr/share/man/ps[1-9]/.
<li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=date&sektion=1">date(1)</a>, fix an off-by-one error which would happen when changing time over DST.
<li>Permit -Tps in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=nroff&sektion=1">nroff(1)</a>.
<li>Make some pfkeyv2 interfaces conform to RFC 2367 numbering.
<li>New timeouts in a couple of network drivers.
<li>Prevent <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=nfsd&sektion=8">nfsd(8)</a> from swapping out.
<li>Use PHOLD/PRELE in various kernel components.
<li>Buffer overflow fix to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=telnet&sektion=1">telnet(1)</a>.
<li>Many man page improvements.
<li>Permit handling more than 6 arguments in a <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=hostname.if&sektion=5">hostname.if(5)</a> file.
<li>kcore handling in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=kvm&sektion=3">kvm(3)</a> for alpha.
<li>Update <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=usb&sektion=4">usb</a> code.
<li>Update alpha architecture support.  A snapshot will come out soon.
<li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pchb&sektion=4">pchb(4)</a>, for Intel random devices, do not busy wait for data.
<li>Switch amiga to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=uvm&sektion=9">uvm(9)</a>.
<li>Fix amiga pmap module submap allocations.
<li>Centralized netisr dispatching.
<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ppp&sektion=8">ppp(8)</a> updated.
<li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=aue&sektion=4">aue(4)</a>, fix multicast filter programming.
<li>Repair an uninitialized variable bug in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ipsec&sektion=4">ipsec(4)</a> output.<br>
    <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
<li>Add <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pcibios&sektion=4&arch=i386">pcibios(4)</a> interrupt setup support for AMD750 chipset.
<li><font color=#e00000><strong>RELIABILITY FIX: In sparc <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=zs&sektion=4&arch=sparc">zs(4)</a>, when using serial console, the interrupt routine was unable to distinguish it's own interrupts.</strong></font><br>
    <a href="errata.html#zsconsole">A patch is available</a></strong>.<br>
    <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
<li>Generate new hashkey every time a <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bridge&sektion=4">bridge(4)</a> is brought up.
<li>Change <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bridge&sektion=4">bridge(4)</a> code to use lower spl.
<li>Passive FTP support in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=lynx&sektion=1">lynx(1)</a>.
<li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>, downgrade to SSH1.3 if server is SSH1.4.
<li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a>, do not disable rhosts(rsa) if server port greater 1024.
<li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a> Agent forwarding and -R support for SSH2 protocol.
<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ipsecadm&sektion=8">ipsecadm(8)</a> man page repairs.<br>
    <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
<li>In pfkeyv2, send the message to registered promiscuous listeners.<br>
    <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
<li>Some minor <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bridge&sektion=4">bridge(4)</a> fixes.
<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ld.so&sektion=1">ld.so(1)</a> support for the pmax.
<li>On powerpc, print out the size of the L2 cache size on G3 and G4 machines.
<li>2.8 release builds are running, but some of us are already working on post-release hacking. 
</ul>
<p>

This list mentions mostly platform-independent changes.  For a list of changes
made in a particular platform, please check the page for that platform.  If you
find them not listed there, the changes are either (1) not being documented or
(2) are documented here.<br><br>

<hr>
<p>
<h3>
<a href="plus20.html">For changes leading up to OpenBSD 2.0, click here</a>.<br>
<a href="plus21.html">For changes leading up to OpenBSD 2.1, click here</a>.<br>
<a href="plus22.html">For changes leading up to OpenBSD 2.2, click here</a>.<br>
<a href="plus23.html">For changes leading up to OpenBSD 2.3, click here</a>.<br>
<a href="plus24.html">For changes leading up to OpenBSD 2.4, click here</a>.<br>
<a href="plus25.html">For changes leading up to OpenBSD 2.5, click here</a>.<br>
<a href="plus26.html">For changes leading up to OpenBSD 2.6, click here</a>.<br>
<a href="plus27.html">For changes leading up to OpenBSD 2.7, click here</a>.<br>
<a href="plus28.html">For changes leading up to OpenBSD 2.8, click here</a>.<br>
<br>
</h3>

<hr>
<a href="index.html"><img height=24 width=24 src="back.gif" border=0 alt="OpenBSD"></a> 
<a href="mailto:www@openbsd.org">www@openbsd.org</a>
<br><small>$OpenBSD: plus.html,v 1.746 2001/04/01 05:57:16 jason Exp $</small>

</body>
</html>