Annotation of www/plus22.html, Revision 1.20
1.17 naddy 1: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
1.1 deraadt 2: <html>
3: <head>
4: <title>OpenBSD 2.2 changes</title>
1.17 naddy 5: <link rev=made href="mailto:www@openbsd.org">
1.1 deraadt 6: <meta name="resource-type" content="document">
7: <meta name="description" content="the main OpenBSD page">
8: <meta name="keywords" content="openbsd,main">
9: <meta name="distribution" content="global">
10: <meta name="copyright" content="This document copyright 1996 by OpenBSD.">
11: </head>
12:
13: <BODY BGCOLOR="#FFFFFF" TEXT="#000000" LINK="#23238E">
14:
1.14 jsyn 15: <a href="index.html"><img alt="[OpenBSD]" height="30" width="141" src="images/smalltitle.gif" border="0"></a>
1.1 deraadt 16: <p>
1.17 naddy 17: <h2><font color="#e00000">Changes made between OpenBSD 2.1 and OpenBSD 2.2</font></h2>
18: <hr>
1.1 deraadt 19:
20: <p>
21: This is a partial list of the major machine independent changes
22: (ie. these are the changes people ask about most often). Port
23: specific changes have also been made, and are sometimes mentioned
24: in the pages for the specific <a href=plat.html>ports</a> if you
25: are interested in further port-specific details. Many ports
26: have had architecture-specific enhancements relative to NetBSD,
27: but when they do not they certainly have plenty of platform-independent
28: changes, starting with those listed below..
29:
30: <p>
1.17 naddy 31: Note: <font color="#e00000">Problems for which patches exist are marked in red</font>.
1.1 deraadt 32:
33: <p>
34: <h3>
1.16 deraadt 35: For changes in other releases, click below:<br>
36: <a href="plus20.html">2.0</a>,
37: <a href="plus21.html">2.1</a>,
38: <a href="plus23.html">2.3</a>,
39: <a href="plus24.html">2.4</a>,
40: <a href="plus25.html">2.5</a>,
41: <a href="plus26.html">2.6</a>,
42: <a href="plus27.html">2.7</a>,
43: <a href="plus28.html">2.8</a>,
44: <a href="plus29.html">2.9</a>,
45: <a href="plus30.html">3.0</a>,
46: <a href="plus31.html">3.1</a>,
47: <a href="plus32.html">3.2</a>,
1.19 deraadt 48: <a href="plus33.html">3.3</a>,
1.20 ! david 49: <a href="plus34.html">3.4</a>,
1.16 deraadt 50: <a href="plus.html">current</a>.
1.1 deraadt 51: <br>
52: </h3>
53:
54: <hr>
55:
1.17 naddy 56: <h3><font color="#0000e0">OpenBSD 2.2 released (Dec 4, 1997).</font></h3><p>
1.1 deraadt 57: <ul>
58: <li>Prevent open(2) with wrong flag modes.
59: <li><strong>The new afterboot(8) man page. Everyone should look at this</strong>.
60: <li>Addition of 'kbus' port for the Solbourne Series5 sparc-based machines.
61: <li>Make clri(8) mark the filesystem dirty.
62: <li>Add per-host locking support to supfilesrv.
63: <li>Make the ncr scsi driver work on big-endian machines too.
64: <li>Fix a select/read race in identd(8) which would make it spin wildly.
65: <li>Make ac(8) use the correct timestamp if the user specifies a different wtmp file.
1.18 david 66: <li>Fix mktemp() to work correctly when specified against non-existent directories.
1.1 deraadt 67: <li>Fix a memory leak in libdes.
68: <li>Fix one last little problem case in the fts(3) library routine. This is a very complicated piece of code...
69: <li>Some minor tftpd bug fixes.
70: <li>Another lpd security fix.
71: <li>Repair the msdosfs timestamping code so that NT/Win95 do not complain.
72: <li>Make disklabel -E always succeed at writing a label. Now you can load a fictitious label, edit it, and write it out.
73: <li>In fmt(1), support backslashed whitespace inside words better.
74: <li>Support 'q' modifier in kernel vsprintf/kprintf
75: <li>Implementation of the new disklabel -E mode.
76: <li>Handle creation of /var/tmp/vi.recover more securely.
77: <li>Quirks for two kinds of hitachi dk515 scsi drives and the Cipher ST150S tape drive.
78: <li>Handle a potential crash in the bpf driver.
79: <li>Rewrite of fdisk(8).
80: <li>Make /etc/security handle blowfish-a passwd entries.
81: <li>Ignore bogus hostnames in the /etc/exports file.
82: <li>Fix prompting code in pw_edit(3)
83: <li>The random(6) tool (game?) now uses arc4random(3).
84: <li>A few pppd fixes.
85: <li>More IPSEC improvements after the Interop ANX bakeoff.
86: <li>Add -f option to readlink which does a realpath(3).
87: <li>Fix a bug in libform.
88: <li>Add support for FNM_LEADING_DIR, FNM_CASEFOLD, FNM_IGNORECASE to fnmatch(3).
89: <li>Fix a network performance problem introduced with IPSEC.
90: <li>Fix the : and . support in chown so that usernames can have . in them.
91: <li>Make execle() use alloca() instead of malloc(); to ensure execle() can be safely called in a signal hander.
92: <li>Fix an ifconfig bug related to interfaces that do not exist.
93: <li>In struct sigaction, split sa_handler and the new sa_sigaction function pointers as is being done on newer POSIX systems. This permits proper prototyping of signal handlers.
94: <li>Ignore SIGPIPE in inetd(8).
95: <li>Fixed a pstat -s related bug in pcvt.
96: <li>Do not init pgid in /dev/log's logopen().
97: <li>Make ls -d sort directories with files.
98: <li>Fix a few small problems in rarpd(8).
99: <li>Shrink most of the install floppies ;-)
100: <li>Fix tar to deal better with one more kind of strange tar file.
101: <li>Make top(1) work better on very small screens.
102: <li>Deal with some possible buffer overflows in sup.
103: <li>Fixed various MAKEDEV bugs on lots of architectures.
104: <li>Fix ftime(3).
105: <li>Another important disk-full check in pwd_mkdb(8).
106: <li>Run calendar -a in the background. (Points to whoever figures out why).
107: <li>Add mkisofs(8).
108: <li>Add sigaction(2) SA_NOCLDWAIT support.
109: <li>Don't error out of MDTM fails.
110: <li>Fix SA_* sigaction(2) fields in the OS compat code.
111: <li>Some syslogd fixes.
112: <li>Permit a longer path buffer in tgetent(3).
113: <li>Fix a ksh(1) bug.
114: <li>Added ex (EtherExpress Pro/10) driver ported from FreeBSD
115: <li>Always set the SCSI-1 LUN field correctly in all transfers.
116: <li>Make popen(3) safe if vfork(2) does real parent address space borrowing.
117: <li>Some fsck_msdos(8) fixes.
118: <li>Made indent(1) handle unlimited number of -T options.
119: <li>Fixed small pathname buffer in man(1).
120: <li>Some setlogin() and getlogin() fixes in the tree.
121: <li>Make ddb not think 'h' means hangman.
122: <li>Ignore trailing spaces on priority in /etc/syslogd.conf.
123: <li>Fix a long-standing and minor problem with ld.so on m68k.
124: <li>Preliminary manual pages for the IPSEC utils.
125: <li>Fix a coredumping problem in tip(1).
126: <li>Extend buffer lengths in patch(1).
127: <li>make bpfread() return ENXIO for uninitialized descriptors.
128: <li>Cleaned up verbose scsi error reporting.
1.17 naddy 129: <li>make mail(1) be permissive about <CR><LF> pairs in mailbox files.
1.1 deraadt 130: <li>Update ftp(1) to new NetBSD changes.
131: <li>Print system call emulation in ps(1) output. Try "ps -axO emul".
132: <li>New COMPAT_BSDOS binary compatibility subsystem.
133: <li>Another tip(1) overflow fix.
134: <li>ppp 2.3.1...
135: <li>make glob(3) XPG4.2 compliant, which means use GLOB_ABORT.
136: <li>Fix first directory handling in "find -execdir"
137: <li>Some FreeBSD m4(1) fixes.
1.11 jsyn 138: <li>Do permission checking at delivery time for pgids derived from TIOCSPGRP, F_SETOWN, or FIOSETOWN.
1.1 deraadt 139: <li>Correct some remaining small inetd bugs.
140: <li>Handle SIGCHLD better in rlogin.
141: <li>Kill "union wait" in a few more places.
142: <li>More SysVR4 emulation: sockets, NTP, POSIX time functions, pread(2)/pwrite(2).
143: <li>In calendar(1), support "-t date" to let you see the calendar for other days.
144: <li>Further IPSEC enhancement (but still no man pages for it though).
145: <li>Fix a crash in systat(8).
146: <li>Handle setgid lossage in tip(1).
1.5 rohee 147: <li>Lucent Technologies (formerly AT&T) awk version 970821.
1.1 deraadt 148: <li>Correct 'sync' option to dd(1).
149: <li>In dump(8), do not consider tape changing time in the timing estimates.
150: <li>In join(1), require compat options start with '-'.
151: <li>A few fixes to tip(1).
152: <li>Various fixes to battlestar(6).
153: <li>Few more 64 bit fixes in userland, in some rarely used system tools.
154: <li>Don't print duplicate fields in ps(1) when called with silly arguments.
155: <li>basename(1) and dirname(1) no longer give an error for paths starting with '-'.
156: <li>Document a64l(3) and l64a(3).
157: <li>The group vector could end up with duplicates esp. with YP. Now it won't.
158: <li>ash is gone gone gone.
159: <li>Fixed a bug where the kernel could lie about how many file descriptors are available and cause a panic.
160: <li>shutdown(8) now gets its own session as it deserves.
161: <li>Fixed err(3)/warn(3) argument usage in the tree.
162: <li>Buffer overflow fixes in tip(1).
163: <li>XPG4 compatibility for ps(1) format options.
164: <li>Added basename(3) and dirname(3) for XPG4. dirname(1) is now trivial.
165: <li>Verbose SCSI warnings are now available and on by default.
166: <li>Fixed a bug in cp(1) when the -r option is used and the source dir ends in a '/'.
167: <li>Changed realloc(foo,0) semantics to be like malloc(0), not free(foo).
168: <li>More user-friendly error messages from mount_* when the filesystem is not in the kernel.
169: <li>New PCMCIA Wavelan driver.
170: <li>Be more careful about YP groups in getgrouplist().
171: <li>Support simple add/delete operations on ports in the baddynamic masks via sysctl(8)
172: <li>More 1003.2 conformance: cal, cksum, sleep, compress, expr, etc.
173: <li>We are starting to pay attention to good things found in the XPG4 standard. We hope to never be compliant, because XPG4 goes way too far.
174: <li>Put hostname in root crontab mailout subjects.
175: <li>Attempt to deal with archive timestamp and filemode problems in texinfo...
176: <li>ATAPI quirk for MATSHITA CR-574.
177: <li>Fix another procfs security hole.
178: <li>Add top(1) to the source tree. Fix some problems.
179: <li>Be even more paranoid (if it can be believed) in mail.local(8).
180: <li>In mountd(8), handle ext2fs specially, like most exported filesystems.
181: <li>Fix pcap_inject(3) in libpcap.
182: <li>Make gzexe(1) use mktemp to avoid races.
183: <li>Make bad random allocation ports settable via sysctl(8).
184: <li>Import ypserv performance.
185: <li>Optional TCP syn cookie support enabled via TCPCOOKIE kernel option.
186: <li>Change the bounds_check_with_label() API to handle a cpu_disklabel too.
187: <li>Support -n better in pstat(8).
188: <li>Make bsd.doc.mk use DOCDIR.
189: <li>Fix vacation(1) properly.
190: <li>Fix a memory leak in grep(1).
191: <li>Seriously rework the identd daemon even further, to avoid even more input parsing problems and race conditions.
192: <li>Work has started to fix the remainder of the signal handlers in the source tree with respect to errno clobbering.
193: <li>Fix another race condition in identd.
1.11 jsyn 194: <li>Fix pdksh bugs: closed too many fds on exec, fix handling of (( )) to be compatible with POSIX sh spec without breaking $((, and explain how IFS works when splitting text after a substitution.
1.1 deraadt 195: <li>Make 127.0.0.1 assumed OK if /var/yp/securenet is in use.
196: <li>save errno in most of the tree's SIGCHLD handlers, just in case.
197: <li>More mdoc pages.
198: <li>Cyclades driver fixed. Works on alpha, too.
199: <li>Fixed getnetbyaddr() 'always tried DNS' resolution problem from 2.1.
200: <li>Sendmail 8.8.7.
201: <li>Fix a kernel bug regarding double m_freem()..
202: <li>Make if_tun to prefix address family as a host byte order u_int32_t instead of a u_char, so that bpf can deal with the interface.
203: <li>Deal nicer with rfork/execve interactions.
204: <li>Attempt to cleanup identd. A long road left.
205: <li>FSF GNU texinfo 3.11.
206: <li>More fixes to the alpha vga driver. Curses-based programs now work on it.
207: <li>Radius support in tcpdump.
208: <li>Todd Miller is on a rampage, and making every single buffer inside mail(1) dynamically allocated...
209: <li>Support fpx cards with i82555 PHY.
210: <li>routed(8) is now disabled by default.
211: <li>Various fixes and improvements to the 3cXXX ethernet drivers.
212: <li>More buffer overflow fixes in mail(1).
213: <li>An ugly identd race fixed.
214: <li>Fix systat manpage.
215: <li>Man page improvements in many areas.
216: <li>Allocate reserved ports for NFS inside the kernel randomly.
217: <li>Support -H flag in who(1).
218: <li>More mail(1) fixes.... It's amazing Todd hasn't broken it.
219: <li>stime(2) support for SunOS emulation.
220: <li>Switch back to nvi; vim has copyright licensing issues.
221: <li>mremap(2) support for Linux emulation.
222: <li>Use sendmail -t instead of other invocation forms inside lots of programs in the source tree.
223: <li>Hardcode a list of reserved ports that random port allocation should not reuse.
224: <li>Support YP map mail.aliases set of maps.
225: <li>Support lpc(8) "all" keyword option.
226: <li>-d flag for shutdown(8).
227: <li>Add -T support to last(1).
228: <li>Fix pax to not need getcwd(3).
229: <li>Implement IFF_NOARP handling in netinet.
230: <li>make amd(8) use /tmp_mnt by default.
231: <li>Do not use tempnam(3) in mail(1).
232: <li>All Makefile.bsd-wrapper files can now strip GNU binaries during install (pr 188.)
233: <li>Some cribbage(6) fixes.
234: <li>permit ftp(1) to download http pages without Content-Length.
235: <li>Appletalk networking support.
236: <li>S/Key keyfile is now readable only by root. skeyinfo(1) and skeyaudit(1) have been enhanced and rewritten as C programs.
237: <li>mail(1) supports "inc" command.
238: <li>mail(1) behaves correctly when interrupted while getting headers from the user.
239: <li>IPSEC Photuris daemon is integrated into the source tree.
240: <li>make ctags operate a bit better in the presence of extra spacing.
241: <li>Add <strong>-d date</strong> support to last(1).
242: <li>Import of the IPSEC photuris daemon.
243: <li>Add rmd160 hash support throughout the source tree.
244: <li>lpd security fixes.
245: <li>man page cleanups.
246: <li>Updated <a href="http://www.sendmail.org/">Sendmail</a> to 8.8.6.
247: <li>cua devices, new <strong>MAKEDEV</strong> script in the hp300 port.
248: <li>More mail(1) fixes, particularly regarding long lines.
249: <li>Add sha1 digest support to mtree(8).
250: <li>Add sha1 support to md5(1).
251: <li>Lots more IPSEC improvements.
252: <li>Repair symbolic link handling during coredumps (correctly, this time).
253: <li>Replace libc sha1 code with another version that is better in some respects.
254: <li>Fix passive buffer overflow in rusers.
255: <li>Make ed(1) work properly on a non-tty.
256: <li>make compress(1) do gzip support too.
257: <li>Maintain process size stats in forkstat struct for "vmstat -f".
258: <li>Fix ruptime output for machines up > 99 days.
259: <li>Amended issetugid(2) man page to be quite a bit more clear.
260: <li>ATAPI devices may now reside in a kernel without wd (disk) devices.
261: <li>Intel EtherExpress Pro/100B PCI driver.
262: <li>More IPSEC changes. IPSEC is almost fully useable now.
263: <li>Fix a number of rtld dynamic loading problems.
264: <li>split ifconfig -a into -a/-A: -A prints ifaliases, -a does not.
265: <li>Repaired nfs handling in tcpdump.
266: <li>Fixed highscore handling in battlestar(6).
267: <li>Fixed all(?) Makefile wrappers for GNU software to not build and install manpages when NOMAN is set.
268: <li>libedit update with lots of fixes.
269: <li>Many more 64 bit fixes for the alpha, in about 20 more programs.
270: <li>Move libdes out of the kerberos tree so that it can be used by other parts of the system too.
271: <li>Make sleep(1) handle fractions of seconds. This is a nice extension.
272: <li>New kprop/kpropd man pages.
273: <li>Permit tftpd to provide files over 32K blocks in size.
274: <li>Fix readlink(1).
275: <li>Import of cvs-1.9.10.
276: <li>A few more minor netinet problems fixed.
277: <li>Modify inetd to accept a "hostname,[hostname,...]:" token to added to the front of any line in /etc/inetd.conf. This permits services to be supplied only on certain interfaces.
278: <li>Import of the gnu multi-precision math library, libgmp. This will be used by an IPSEC key daemon soon.
279: <li>Support IP option handling in IPSEC packets.
280: <li>Race fix to amd(8).
281: <li>Y2K enhancement to date(1).
282: <li>Repaired hundreds of long != int problems (in a bunch of programs) that affect the alpha.
283: <li>Clip setsockopt SO_SND*/SO_RCV parameters.
284: <li>Use O_EXLOCK for passwd locking to avoid a class of localhost denial of service attacks.
285: <li>Fix a minor problem in popen().
286: <li>IPF 3.1.11 + Darren's patches + 64-bit cleanup.
287: <li>Added automatic power down framework at halt(8) time, currently only supported on sun4m machines with the <i>power</i> device.
288: <li>Slightly improve ftpd log file.
289: <li>More paranoia in procfs.
290: <li>Add ELOOP error handling to realpath(3).
291: <li>Some NLS improvements, notably some more language catalogs.
292: <li>Change mount(2) to return EFTYPE for invalid filesystem.
293: <li>More ipsec changes!
1.11 jsyn 294: <li>add -insecure flag to ypbind(8) so that it can bind to very old ypservs.
1.1 deraadt 295: <li>Make ifconfig(8) print full information about the full set of interface aliases.
296: <li>Support "-d dir" in rpc.yppasswdd(8).
297: <li>Fix some more /tmp races in various programs.
298: <li>add per-interface bindings to inetd(8).
299: <li>Better support for unmounted filesystems in df(1).
300: <li>Correct -n behaviour in sort(1).
301: <li>In newfs(8), fix -o and -m to work better.
302: <li>Add tsearch(3) to libc.
303: <li>Fix /tmp races in make(1).
304: <li>Deal with atapi drives that cannot lock their doors.
305: <li>Improved performance in /dev/*random.
306: <li>Fixed a few netinet bugs as pointed out by TCP/IP Illustrated Vol.2.
307: <li>Add tsearch(3) and friends to libc, as required by XPG3(?).
308: <li>Repair many cross-references and other documentation problems in the section 2 and 3 man pages, and also fix a few minor other bugs discovered by analysis of recent changes in FreeBSD's and NetBSD's libc.
309: <li>Implement hex/octal offsets in cmp(1), as documented.
310: <li>Addition of readlink(1).
311: <li>Move named tmp files to /etc/named/tmp/ to avoid localhost race attacks.
312: <li>document the ddb hangman.
313: <li>tftpd -c flag.
314: <li>Use dynamic fd_set allocation in more places, particularly setuid programs.
315: <li>Use /etc/namedb/tmp/ to avoid /var/tmp race conditions.
316: <li>Ensure TCP RST is within window.
317: <li>fix disklabel support in vnd/svnd.
318: <li>add sysctl net.inet.tcp.{keepidle,keepintvl,slowhz}
319: <li>fix SO_SNDTIMEO.
320: <li>Add <strong>-P proto</strong> support to traceroute.
321: <li>Some more security and robustness changes to traceroute and ping.
322: <li>A few netinet fixes.
323: <li>Kernel now generates random pid values in fork().
1.10 pvalchev 324: <li>fix sendmsg() credential passing on 64 bit machines.
1.1 deraadt 325: <li>kill process timers if execve'ing a setuid/setgid executable.
326: <li>Few more fixes to pax(1).
1.11 jsyn 327: <li>Fix lots more NetBSD PRs.
1.1 deraadt 328: <li>tcp wrappers 7.6
329: <li>Add some more malloc options to malloc(3)
1.4 rohee 330: <li>In ar(1), truncate uid & gid if too large.
1.1 deraadt 331: <li>getpgid(2) from XPG3(?)
332: <li>tail(1) can now notice if the file been replaced or truncated.
333: <li>Fix more overflows and other bugs in mail(1).
334: <li>Lots of man page fixes.
335: <li>New named root.cache from Internic.
336: <li>Support SIGINFO in ping; also add more complete icmp reporting capabilities.
337: <li>Make adduser understand /etc/passwd.conf
338: <li>Newer version of ext2fs that is reliable for read/write operation. This is essentially FULLY OPERATIONAL.
339: <li>Import newer version of vax port.
340: <li>Fix a few more libc functions to generate very large fd_set's properly for select(2).
341: <li>Few quirky changes to the way ISO9660 disklabel spoofing works in some ports.
342: </ul>
343: <p>
344:
345: This list mentions mostly platform-independent changes. For a list of changes
346: made in a particular platform, please check the page for that platform. If you
347: find them not listed there, the changes are either (1) not being documented or
348: (2) are documented here.<br><br>
349:
350: <hr>
351: <p>
352: <h3>
1.16 deraadt 353: For changes in other releases, click below:<br>
354: <a href="plus20.html">2.0</a>,
355: <a href="plus21.html">2.1</a>,
356: <a href="plus23.html">2.3</a>,
357: <a href="plus24.html">2.4</a>,
358: <a href="plus25.html">2.5</a>,
359: <a href="plus26.html">2.6</a>,
360: <a href="plus27.html">2.7</a>,
361: <a href="plus28.html">2.8</a>,
362: <a href="plus29.html">2.9</a>,
363: <a href="plus30.html">3.0</a>,
364: <a href="plus31.html">3.1</a>,
365: <a href="plus32.html">3.2</a>,
1.19 deraadt 366: <a href="plus33.html">3.3</a>,
1.20 ! david 367: <a href="plus34.html">3.4</a>,
1.16 deraadt 368: <a href="plus.html">current</a>.
1.1 deraadt 369: <br>
370: </h3>
371:
372: <hr>
373: <a href="index.html"><img height=24 width=24 src=back.gif border=0 alt=OpenBSD></a>
1.17 naddy 374: <a href="mailto:www@openbsd.org">www@openbsd.org</a>
1.20 ! david 375: <br><small>$OpenBSD: plus22.html,v 1.19 2003/03/26 01:16:40 deraadt Exp $</small>
1.1 deraadt 376:
377: </body>
378: </html>
![[BACK]](/icons/back.gif){kind=icon}
Return to plus22.html CVS log ![[TXT]](/icons/text.gif){kind=icon}
![[DIR]](/icons/dir.gif){kind=icon}
Up to [local] / www