[BACK]Return to plus23.html CVS log [TXT][DIR] Up to [local] / www

Diff for /www/plus23.html between version 1.22 and 1.23

version 1.22, 2003/02/24 05:43:54 version 1.23, 2003/03/06 16:27:10
Line 1 
Line 1 
 <!DOCTYPE HTML PUBLIC  "-//IETF//DTD HTML Strict//EN">  <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
 <html>  <html>
 <head>  <head>
 <title>OpenBSD 2.3 changes</title>  <title>OpenBSD 2.3 changes</title>
 <link rev=made href=mailto:www@openbsd.org>  <link rev=made href="mailto:www@openbsd.org">
 <meta name="resource-type" content="document">  <meta name="resource-type" content="document">
 <meta name="description" content="the main OpenBSD page">  <meta name="description" content="the main OpenBSD page">
 <meta name="keywords" content="openbsd,main">  <meta name="keywords" content="openbsd,main">
Line 14 
Line 14 
   
 <a href="index.html"><img alt="[OpenBSD]" height="30" width="141" src="images/smalltitle.gif" border="0"></a>  <a href="index.html"><img alt="[OpenBSD]" height="30" width="141" src="images/smalltitle.gif" border="0"></a>
 <p>  <p>
 <h2><font color=#e00000>Changes made between OpenBSD 2.2 and OpenBSD 2.3</font><hr></h2>  <h2><font color="#e00000">Changes made between OpenBSD 2.2 and OpenBSD 2.3</font></h2>
   <hr>
   
 <p>  <p>
 This is a partial list of the major machine independent changes  This is a partial list of the major machine independent changes
Line 27 
Line 28 
 changes, starting with those listed below..  changes, starting with those listed below..
   
 <p>  <p>
 Note: <font color=#e00000>Problems for which patches exist are marked in red</font>.  Note: <font color="#e00000">Problems for which patches exist are marked in red</font>.
   
 <p>  <p>
 <h3>  <h3>
Line 50 
Line 51 
   
 <hr>  <hr>
   
 <h3><font color=#0000e0>OpenBSD 2.3 released (May 19, 1998).</font></h3><p>  <h3><font color="#0000e0">OpenBSD 2.3 released (May 19, 1998).</font></h3><p>
 <ul>  <ul>
 <li><font color=#e00000><strong>A security problem due to buffer mismanagement exists in lprm(1). <a href=errata22.html#rmjob>A patch exists</a></strong></font>.  <li><font color="#e00000"><strong>A security problem due to buffer mismanagement exists in lprm(1). <a href="errata22.html#rmjob">A patch exists</a></strong></font>.
 <li><font color=#e00000><strong>A security problem due to a buffer overflow exists in uucpd(8) (which is not enabled by default in our releases). <a href=errata22.html#uucpd>A patch exists</a></strong></font>.  <li><font color="#e00000"><strong>A security problem due to a buffer overflow exists in uucpd(8) (which is not enabled by default in our releases). <a href="errata22.html#uucpd">A patch exists</a></strong></font>.
 <li>On the i386, fix installboot(8) so it works reliably on various filesystem layouts that did not work before.  <li>On the i386, fix installboot(8) so it works reliably on various filesystem layouts that did not work before.
 <li>Support lots of file descriptors in named(8), for when many virtual interfaces exist.  <li>Support lots of file descriptors in named(8), for when many virtual interfaces exist.
 <li>Fix installboot(8) on the sparc Sun4 models.  <li>Fix installboot(8) on the sparc Sun4 models.
Line 171 
Line 172 
 <li>In libpcap and tcpdump, use our system ethers(5) parsing routines.  <li>In libpcap and tcpdump, use our system ethers(5) parsing routines.
 <li>Make <strong>netstat -r</strong> report better information about non-standard netmasks.  <li>Make <strong>netstat -r</strong> report better information about non-standard netmasks.
 <li>Fix some bugs in the 3c[59]xx device driver.  <li>Fix some bugs in the 3c[59]xx device driver.
 <li><font color=#e00000><strong>The 3rd revision of the patch for the mmap() security problem is available, and <a href=errata22.html#mmap>has been placed on top of the 2nd revision</a></strong></font>.  <li><font color="#e00000"><strong>The 3rd revision of the patch for the mmap() security problem is available, and <a href="errata22.html#mmap">has been placed on top of the 2nd revision</a></strong></font>.
 <li>Add a command to ddb that reports out the extent tables.  <li>Add a command to ddb that reports out the extent tables.
 <li>Add a clarifying statement to all the Kerberos code that explains how it came to be that this code was released from the USA's crypto stranglehold.  <li>Add a clarifying statement to all the Kerberos code that explains how it came to be that this code was released from the USA's crypto stranglehold.
 <li>In the RPC code, ensure that __svc_fdsetsize is always manipulated as a bitcount.  <li>In the RPC code, ensure that __svc_fdsetsize is always manipulated as a bitcount.
Line 189 
Line 190 
 <li>CVS version 1.9.24  <li>CVS version 1.9.24
 <li>For OLF/ELF binaries, remember the OS tag in execve(), so that emulation code can reference it later.  <li>For OLF/ELF binaries, remember the OS tag in execve(), so that emulation code can reference it later.
 <li>Make the kernel compile properly (with full warnings) under gcc 2.8.  <li>Make the kernel compile properly (with full warnings) under gcc 2.8.
 <li><font color=#e00000><strong>Do not permit a read+write mmap() operation on a read-only file descriptor open on a device.  This is a security problem in OpenBSD 2.2, and is <a href=errata22.html#mmap> described and fixed with a patch</a></strong></font>.  <li><font color="#e00000"><strong>Do not permit a read+write mmap() operation on a read-only file descriptor open on a device.  This is a security problem in OpenBSD 2.2, and is <a href="errata22.html#mmap"> described and fixed with a patch</a></strong></font>.
 <li>Rename /etc/nat.rules to /etc/ipnat.rules.  <li>Rename /etc/nat.rules to /etc/ipnat.rules.
 <li>Add kerberos kauthd(8).  <li>Add kerberos kauthd(8).
 <li>On the i386, move XFree86 aperture driver into the kernel.  The new sysctl(8) variable <strong>machdep.allowaperture</strong> decides if this driver is active or not.  (This variable can only be modified at high securelevel).  <li>On the i386, move XFree86 aperture driver into the kernel.  The new sysctl(8) variable <strong>machdep.allowaperture</strong> decides if this driver is active or not.  (This variable can only be modified at high securelevel).
Line 197 
Line 198 
 <li>Pull in all the NetBSD changes to the old version of gas over the last year or so.  <li>Pull in all the NetBSD changes to the old version of gas over the last year or so.
 <li>Fix two bugs in adduser(8).  <li>Fix two bugs in adduser(8).
 <li>Change chflags(2) and fchflags(2) to take a u_int for the second parameter.  <li>Change chflags(2) and fchflags(2) to take a u_int for the second parameter.
 <li><a href=ftp://ftp.openbsd.org/pub/OpenBSD/tools/openbsdpower.gif>New fancy OpenBSD logo for your use</a>.  <li><a href="ftp://ftp.openbsd.org/pub/OpenBSD/tools/openbsdpower.gif">New fancy OpenBSD logo for your use</a>.
 <li>Add XPG4 <strong>-r</strong> option to du(1).  <li>Add XPG4 <strong>-r</strong> option to du(1).
 <li>Support <strong>-[width]</strong> option in fmt(1).  <li>Support <strong>-[width]</strong> option in fmt(1).
 <li>New quirk for another Archive VIPER scsi tape drive.  <li>New quirk for another Archive VIPER scsi tape drive.
 <li>Fix another signal handler bug in mail(1).  <li>Fix another signal handler bug in mail(1).
 <li><font color=#e00000><strong>The mac68k 2.2 CD release had a few problems. These problems have been resolved in the FTP release. <a href=errata22.html#mac68k>For more details...</a></strong></font>  <li><font color="#e00000"><strong>The mac68k 2.2 CD release had a few problems. These problems have been resolved in the FTP release. <a href="errata22.html#mac68k">For more details...</a></strong></font>
 <li>Make lpd(8) use keepalives so that it can detect dead network printers.  <li>Make lpd(8) use keepalives so that it can detect dead network printers.
 <li>Support the WINBOND pci ethernet cards.  <li>Support the WINBOND pci ethernet cards.
 <li>Fixed "%c" in strftime(3).  <li>Fixed "%c" in strftime(3).
 <li>Various fixes to some of the games, ie. rain, worms, wump.  <li>Various fixes to some of the games, ie. rain, worms, wump.
 <li>If <strong>link0</strong> is set on a loopback interface (ie. lo1) make the address/netmask sets on it make supernets instead of subnets.  <li>If <strong>link0</strong> is set on a loopback interface (ie. lo1) make the address/netmask sets on it make supernets instead of subnets.
 <li>Place separate so_ruid and so_euid fields in struct socket, so that in_pcb.c can still do its job, but also so that identd(8) can be fast and return the proper uid.  <li>Place separate so_ruid and so_euid fields in struct socket, so that in_pcb.c can still do its job, but also so that identd(8) can be fast and return the proper uid.
 <li><font color=#e00000><strong>In the sparc 2.2 release, the SS4/SS5 kernel was not very reliable.  <a href=errata22.html#sparciommu>A simple reliability patch is now available</a></strong></font>.  <li><font color="#e00000"><strong>In the sparc 2.2 release, the SS4/SS5 kernel was not very reliable.  <a href="errata22.html#sparciommu">A simple reliability patch is now available</a></strong></font>.
 <li>Fix a map corruption bug in ypxfr(8).  <li>Fix a map corruption bug in ypxfr(8).
 <li>Make stty(1) recognize STRIPDISC.  <li>Make stty(1) recognize STRIPDISC.
 <li>In compress(1), if the st_flags is 0, do not attempt a chflags(2) call.  <li>In compress(1), if the st_flags is 0, do not attempt a chflags(2) call.
 <li><font color=#e00000><strong>Make ruserok() significantly more paranoid when parsing the .rhosts file.  This along with another issue is a security problem in OpenBSD 2.2, and is <a href=errata22.html#ruserok> described and fixed with a patch</a></strong></font>.  <li><font color="#e00000"><strong>Make ruserok() significantly more paranoid when parsing the .rhosts file.  This along with another issue is a security problem in OpenBSD 2.2, and is <a href="errata22.html#ruserok"> described and fixed with a patch</a></strong></font>.
 <li>raise IPPORT_USERRESERVED significantly. Random port numbers will now look much more random than they did before.  <li>raise IPPORT_USERRESERVED significantly. Random port numbers will now look much more random than they did before.
 <li>New <strong>-a logdev</strong> argument for syslogd(8), useful for setting up additional /dev/log devices in various chroot spaces.  <li>New <strong>-a logdev</strong> argument for syslogd(8), useful for setting up additional /dev/log devices in various chroot spaces.
 <li>Permit restore(8) to work on a filesystem that has a basic blocksize smaller than the blocksize of the filesystem that was dumped.  <li>Permit restore(8) to work on a filesystem that has a basic blocksize smaller than the blocksize of the filesystem that was dumped.
Line 226 
Line 227 
 <li>Emulate that disgusting linux connect() braindamage even better.  <li>Emulate that disgusting linux connect() braindamage even better.
 <li>Fix some bugs in vacation(1).  <li>Fix some bugs in vacation(1).
 <li>Fix /etc/yp/domainname support in ypbind(8).  <li>Fix /etc/yp/domainname support in ypbind(8).
 <li><font color=#e00000><strong>In the 2.2 release, the sparc scsi driver caused problems for the Sun 4/300 machines. <a href=errata22.html#sparc>Patches are now available</a></strong></font>.  <li><font color="#e00000"><strong>In the 2.2 release, the sparc scsi driver caused problems for the Sun 4/300 machines. <a href="errata22.html#sparc">Patches are now available</a></strong></font>.
 <li>Add <strong>FS_CCD</strong> partition type so that the ccd driver can ensure it has the right components.  <li>Add <strong>FS_CCD</strong> partition type so that the ccd driver can ensure it has the right components.
 <li>Add <strong>/etc/sysctl.conf</strong> which specifies sysctl variables to change at boottime.  <li>Add <strong>/etc/sysctl.conf</strong> which specifies sysctl variables to change at boottime.
 <li>Fix a free page count bug in the vm system.  <li>Fix a free page count bug in the vm system.
 <li>Create two new sysctl options: <strong>ddb.panic</strong> decides whether the kernel should enter ddb when it panics, and <strong>ddb.console</strong> controls if it is possible to enter ddb from the console via a hot-key.  <li>Create two new sysctl options: <strong>ddb.panic</strong> decides whether the kernel should enter ddb when it panics, and <strong>ddb.console</strong> controls if it is possible to enter ddb from the console via a hot-key.
 <li>Add scan_ffs(8), a very useful tool for reconstructing disks.  <li>Add scan_ffs(8), a very useful tool for reconstructing disks.
 <li>Add strptime(3).  <li>Add strptime(3).
 <li><font color=#e00000><strong>Buffer overflow fix in the MIPS ld.so. Replacement binaries for the <a href=errata22.html#pmax>pmax</a> and <a href=errata22.html#arc>arc</a> platforms are available</strong></font>.  <li><font color="#e00000"><strong>Buffer overflow fix in the MIPS ld.so. Replacement binaries for the <a href="errata22.html#pmax">pmax</a> and <a href="errata22.html#arc">arc</a> platforms are available</strong></font>.
 <li>Avoid DNS lookup timing effects in ping -R.  <li>Avoid DNS lookup timing effects in ping -R.
 <li>Fix the __{CTOR,DTOR}_LIST__ declarations in c++rt0.c  <li>Fix the __{CTOR,DTOR}_LIST__ declarations in c++rt0.c
 <li><font color=#e00000><strong>Two bugs existed in the 2.2 pmax release which all users should be aware of.  <a href=errata22.html#pmax>Patches are now available</a></strong></font>.  <li><font color="#e00000"><strong>Two bugs existed in the 2.2 pmax release which all users should be aware of.  <a href="errata22.html#pmax">Patches are now available</a></strong></font>.
 <li><font color=#e00000><strong>Be more careful about sourcerouted packets, including never forwarding them.  This is a security problem in OpenBSD 2.2, and is <a href=errata22.html#sourceroute> described and fixed with a patch</a></strong></font>.  <li><font color="#e00000"><strong>Be more careful about sourcerouted packets, including never forwarding them.  This is a security problem in OpenBSD 2.2, and is <a href="errata22.html#sourceroute"> described and fixed with a patch</a></strong></font>.
 <li>Teach the kernel about newer PCI device types.  <li>Teach the kernel about newer PCI device types.
 <li>Workaround a race condition in syslogd's handling of SIGHUP.  <li>Workaround a race condition in syslogd's handling of SIGHUP.
 <li>Some man page fixes so that <strong>man -k</strong> is happier.  <li>Some man page fixes so that <strong>man -k</strong> is happier.
Line 320 
Line 321 
 <li>Make route(8) non-setuid.  <li>Make route(8) non-setuid.
 <li>In ftpd, default to RFC non-conforming behaviour for the PORT command, but provide a runtime switch for those who like holes.  <li>In ftpd, default to RFC non-conforming behaviour for the PORT command, but provide a runtime switch for those who like holes.
 <li>Addition of Obtuse smtpd(8) and smtpfwd(8) v2.0.  <li>Addition of Obtuse smtpd(8) and smtpfwd(8) v2.0.
 <li><font color=#e00000><strong>Due to timing constraints, mac68k X11 binaries did not make it onto the 2.2 CDROM. <a href=errata22.html#mac68k>But it is now available for ftp</a></strong></font>.  <li><font color="#e00000"><strong>Due to timing constraints, mac68k X11 binaries did not make it onto the 2.2 CDROM. <a href="errata22.html#mac68k">But it is now available for ftp</a></strong></font>.
 <li>Do not clear the setuid/setgid file mode bits for a call to {,f,l}chmod(-1, -1).  <li>Do not clear the setuid/setgid file mode bits for a call to {,f,l}chmod(-1, -1).
 <li>Enable new FreeBSD ppp(8) daemon.  There are now two ppp daemons in the source tree, they have quite different feature sets.  <li>Enable new FreeBSD ppp(8) daemon.  There are now two ppp daemons in the source tree, they have quite different feature sets.
 <li><font color=#e00000><strong>Fixed a panic problem in the i386 apm driver. <a href=errata22.html#i386>A patch is available for 2.2</a></strong></font>.  <li><font color="#e00000"><strong>Fixed a panic problem in the i386 apm driver. <a href="errata22.html#i386">A patch is available for 2.2</a></strong></font>.
 <li>Repair a number of retry operation problems in the wdc driver that mostly affected sleeping laptops.  <li>Repair a number of retry operation problems in the wdc driver that mostly affected sleeping laptops.
 <li>Handle the controlling tty ioctl in linux emulation.  <li>Handle the controlling tty ioctl in linux emulation.
 <li>Handle SIOCGIFMETRIC and SIOCGIFMTU in linux emulation.  <li>Handle SIOCGIFMETRIC and SIOCGIFMTU in linux emulation.
Line 334 
Line 335 
 <li>Correct an XPG violation in stdlib.h.  <li>Correct an XPG violation in stdlib.h.
 <li>Fix a problem in -current regarding open() of O_TRUNC and O_SHLOCK.  <li>Fix a problem in -current regarding open() of O_TRUNC and O_SHLOCK.
 <li>Fix numerous problems with new KTH kerberos.  <li>Fix numerous problems with new KTH kerberos.
 <li><font color=#e00000><strong>A workaround for the Intel P5 F00F lockup problem. <a href=errata22.html#i386>A patch is available for 2.2</a></strong></font>.  <li><font color="#e00000"><strong>A workaround for the Intel P5 F00F lockup problem. <a href="errata22.html#i386">A patch is available for 2.2</a></strong></font>.
 <li>Fix minor numbers for /dev/ch* in the MAKEDEV scripts.  <li>Fix minor numbers for /dev/ch* in the MAKEDEV scripts.
 <li>Add a <strong>kern.nosuidcoredump</strong> sysctl.  <li>Add a <strong>kern.nosuidcoredump</strong> sysctl.
 <li>Enhance the performance of pwd_mkdb(8) by expanding the db(3) cache based on input filesize.  <li>Enhance the performance of pwd_mkdb(8) by expanding the db(3) cache based on input filesize.
Line 347 
Line 348 
 <li>Fix an overflow in top(1).  <li>Fix an overflow in top(1).
 <li>Fix a deadlock on cd9660.  <li>Fix a deadlock on cd9660.
 <li>Update to ncurses-4.1-971129  <li>Update to ncurses-4.1-971129
 <li><font color=#e00000><strong>On the i386, handle the nasty problem with distinguishing SVR4 and Linux binaries. <a href=errata22.html#i386>A patch is available for 2.2</a></strong></font>.  <li><font color="#e00000"><strong>On the i386, handle the nasty problem with distinguishing SVR4 and Linux binaries. <a href="errata22.html#i386">A patch is available for 2.2</a></strong></font>.
 <li>Newer ncr device driver.  <li>Newer ncr device driver.
 <li>Fix SunOS emulation of TIOCGPGRP.  <li>Fix SunOS emulation of TIOCGPGRP.
 <li>Add some more XPG4.2 *_t types.  <li>Add some more XPG4.2 *_t types.
Line 370 
Line 371 
 <li>Fixed bug in 'systat vm' output.  <li>Fixed bug in 'systat vm' output.
 <li>Fix the internals of open(2) when O_TRUNC and either O_SHLOCK or O_EXLOCK are set.  (That was a nasty kernel bug).  <li>Fix the internals of open(2) when O_TRUNC and either O_SHLOCK or O_EXLOCK are set.  (That was a nasty kernel bug).
 <li>Clean /var earlier in the /etc/rc script.  <li>Clean /var earlier in the /etc/rc script.
 <li><font color=#e00000><strong>make readlink(1) terminate its buffer correctly. <a href=errata22.html#all>This affects CDROM builds so a patch is available for 2.2</a></strong></font>.  <li><font color="#e00000"><strong>make readlink(1) terminate its buffer correctly. <a href="errata22.html#all">This affects CDROM builds so a patch is available for 2.2</a></strong></font>.
 <li>Make fstat(2) on AF_UNIX socket return proper st_[acm]time field values.  <li>Make fstat(2) on AF_UNIX socket return proper st_[acm]time field values.
 <li>Implement FIONBIO in ibcs2 emulation code.  <li>Implement FIONBIO in ibcs2 emulation code.
 <li>Consider only the 0177777 bits of the umask(2) value, as documented.  <li>Consider only the 0177777 bits of the umask(2) value, as documented.
Line 456 
Line 457 
   
 <hr>  <hr>
 <a href="index.html"><img height=24 width=24 src=back.gif border=0 alt=OpenBSD></a>  <a href="index.html"><img height=24 width=24 src=back.gif border=0 alt=OpenBSD></a>
 <a href=mailto:www@openbsd.org>www@openbsd.org</a>  <a href="mailto:www@openbsd.org">www@openbsd.org</a>
 <br><small>$OpenBSD$</small>  <br><small>$OpenBSD$</small>
   
 </body>  </body>
Legend:
Removed from v.1.22  
changed lines
  Added in v.1.23