@@ -29,7 +43,7 @@
changes, starting with those listed below..
-Note: Problems for which patches exist are marked in red.
+Note: Problems for which patches exist are marked in red.
For changes in other releases, click below:
@@ -84,16 +98,16 @@
-
Changes made between OpenBSD 2.2 and 2.3
+
Changes made between OpenBSD 2.2 and 2.3
-
A security problem due to buffer mismanagement exists in lprm(1). A patch exists.
-
A security problem due to a buffer overflow exists in uucpd(8) (which is not enabled by default in our releases). A patch exists.
+
A security problem due to buffer mismanagement exists in lprm(1). A patch exists.
+
A security problem due to a buffer overflow exists in uucpd(8) (which is not enabled by default in our releases). A patch exists.
On the i386, fix installboot(8) so it works reliably on various filesystem layouts that did not work before.
Support lots of file descriptors in named(8), for when many virtual interfaces exist.
Fix installboot(8) on the sparc Sun4 models.
-
In disklabel(8)'s -E mode, set the bootblock sizes so that the hp300 install does not freak out.
+
In disklabel(8)'s -E mode, set the bootblock sizes so that the hp300 install does not freak out.
In mktemp(3), repair a bug in the filename incrementing loop.
Various other install script fixes.
Fix /etc/fbtab handling in init(8).
@@ -103,7 +117,7 @@
When root logs in for the first time, let him find that he has an interesting piece of mail about how the system works.
Fix ipsec encap notifies.
Configure xdm(1) and the fwvm window manager sensibly enough for default users to not feel utterly lost.
-
Fix 'u'ndo support in disklabel(8)'s -E mode, and also add a new 'r' command.
+
Fix 'u'ndo support in disklabel(8)'s -E mode, and also add a new 'r' command.
Repair the pkg_add(1) sufficiently for the 2.3 release...
Fix a race condition in unmount(2).
Add support for the XR16850 serial chip (128 byte fifos).
@@ -113,29 +127,29 @@
Support 3c905B (well, actually, our support falls over. We need a card to do further work).
Modify i386 PS/2 driver to be read/write; this permits new XFree86 source to put mice into advanced modes of operation.
Remove KTH Kerberos "eavesdropping" message from telnet(1) and telnetd(8).
-
Fix bug oflow in ping(8) -R option.
-
In tar(1), only preserve the uid/gid if the -p flag is given.
+
Fix bug oflow in ping(8) -R option.
+
In tar(1), only preserve the uid/gid if the -p flag is given.
sudo version 1.5.5
Do not prepend /usr/local/bin to the PATH in zdiff(1), zforce(1), zgrep(1), zmore(1), znew(1), or rcsfreeze(1).
Fix DNS fake-iquery bug.
-
In the le ethernet driver, if the detected ethernet address is ff:ff:ff:ff:ff ... fail.
+
In the le ethernet driver, if the detected ethernet address is ff:ff:ff:ff:ff ... fail.
Fixes for various (minor) Y2K problems.
Switch a.out ports in the tree (sparc, m68k, i386) to use the newer version of gdb that is part of the binutils tree.
Significantly improve the system install scripts.
Add disklabel spoofing to the hp300 port.
Add xlockmore(1) to the X11 tree.
-
Fix ru_majflt counting in the VM system.
+
Fix ru_majflt counting in the VM system.
Add AFS token fetching capability to various parts of the source tree.
In login(1), handle cleanup of environment variables correctly.
In ftp(1), for HTTP requests pass the hostname so that virtual hosts work.
-
In utimes(2) and futimes(2), handle tv_sec values of -1 more carefully, as they are really illegal cases.
-
Import kx into our X11 source tree.
-
Add a SIOCGIFDATA ifreq-style ioctl which will get the ifdata informational structure attached to each interface.
+
In utimes(2) and futimes(2), handle tv_sec values of -1 more carefully, as they are really illegal cases.
+
Import kx into our X11 source tree.
+
Add a SIOCGIFDATA ifreq-style ioctl which will get the ifdata informational structure attached to each interface.
Add httpd(8) to the OpenBSD tree. It is apache 1.2.6.
-
Import xpm into our X11 source tree.
+
Import xpm into our X11 source tree.
Support QLogic PCI scsi controllers (at least on the i386).
Fix rmd160(3) (and also the IPSEC algorithm) to properly handle data beyond its block boundary.
-
Emulate SunOS otimes(2) system call so that Netscape doesn't explode.
+
Emulate SunOS otimes(2) system call so that Netscape doesn't explode.
Fix rarpd(8) interaction with routed(8); too much routing information would pile up un-read on the AF_ROUTE socket and rarpd(8) would get too grumpy.
Remove libtelnet.so.* from the distribution. People compiling kerberos into their system were generating significantly different shared libraries; thus it is wrong to make this a shared library.
Make edquota(8) handle numeric names as uids only after checking that an account named so does not exist.
@@ -143,22 +157,22 @@
Fix ch(4) operation on ncr(4) scsi controllers.
On the sparc, switch to an alternate font if the console is < 800*600 resolution.
Add ISAPNP driver for the 3c509 cards.
-
Change SIOCGIFNETMASK, SIOCGIFDSTADDR, and SIOCGIFBRDADDR to return information for named/addressed mappings rather than simply named mappings, so that these calls can work on interface aliases.
+
Change SIOCGIFNETMASK, SIOCGIFDSTADDR, and SIOCGIFBRDADDR to return information for named/addressed mappings rather than simply named mappings, so that these calls can work on interface aliases.
Add (complete?) support for KerberosIV to our X11R6.
In mktemp(1), document why this should be used for temporary filename generation.
In telnet(1), fix connecting to IP addresses; this was recently broken by the new KTH kerberos telnet integration.
-
Make -R path work a well as -Rpath in cc(1).
-
In the ksh(1) manpage, clarify the behaviour of the CDPATH variable.
+
Make -R path work a well as -Rpath in cc(1).
+
In the ksh(1) manpage, clarify the behaviour of the CDPATH variable.
Add support for more PCI NE2000 cards.
-
Make %Y override an earlier %y in strptime(3).
-
Add support for atalk to ifconfig(8).
+
Make %Y override an earlier %y in strptime(3).
+
Add support for atalk to ifconfig(8).
Make the functions described in ethers(3) more careful.
Fix support for VFS loadable kernel modules.
In get*ent() family of routines in libc, use fgetln(3) instead of fgets(3) so that parsing of overly long lines is more correct.
Add options(4). This manpage describes what all the kernel options do. If you spot an error in it, notify us immediately.
-
In strptime(3), make %C influence %y regardless of ordering.
-
Fix a NULL deference bug in make(1) when using the -j flag.
-
Fix %m, %I, %S, %y, %C, and %j conversions in strptime(3).
+
In strptime(3), make %C influence %y regardless of ordering.
+
Fix a NULL deference bug in make(1) when using the -j flag.
+
Fix %m, %I, %S, %y, %C, and %j conversions in strptime(3).
Merge Kirk McKusick's soft update code. This code is still experimental and under a non-commercial license. It will be included in the next release as an optional compile flag; we cannot ship it enabled by default.
Flesh out the man pages and explain the security problems behind mktemp(3) and other similar functions, plus explain how to handle these problems better.
Fully working KerberosIV encryption in telnet(1) and telnetd(8).
@@ -166,14 +180,14 @@
CVS version 1.9.26
Fix mktemp(3) problems in two more YP tools.
Fix an interaction bug in inetd(8) due to SIGPIPE blocking; caused a bad effect in rlogind(8) or other inetd(8) children.
-
Configure cc(1) to pass the -R flag on to ld(1).
+
Configure cc(1) to pass the -R flag on to ld(1).
Add lynx 2.8 to the system.
Add support for 82553 and 82555B PHY in the fxp driver.
Fix tmpfile(3) to fchown() the file after unlink() (taking umask() into consideration, too). This is required by standards.
Fix vnd and ccd drivers to work properly with soft updates.
Fix a crash case in compress(1).
-
Add -s and -c options to last(1).
-
Add support for -s section and -S subsection to man(1).
+
Add -s and -c options to last(1).
+
Add support for -s section and -S subsection to man(1).
Change the configuration of man(1) so that man4 is read much later; this makes it easier to see pages in man8 with similar names.
Fix KerberosIV password changing.
On the sparc, support 128KB lebuffer devices.
@@ -189,14 +203,14 @@
Use a p_os field to sub-divide operating system emulation capabilities (like for SVR4 binaries).
Spend almost a week finding and fixing minor goobers discovered by gcc 2.8 throughout the source tree.
Fix syslog(3) sockaddr initialization.
-
Add support for TIOCM* family of ioctl(2) values to the sparc serial driver.
-
New photurisd(8) that complies with draft-simpson-photuris-18.txt.
+
Add support for TIOCM* family of ioctl(2) values to the sparc serial driver.
+
New photurisd(8) that complies with draft-simpson-photuris-18.txt.
Fix a race bug in mkstemp(3) itself that would make mkstemp(3) have occasionally fail strangely.
Fix a few more mktemp(3) problems in f77 libraries, and other assorted GNU software.
Upgrade to gcc 2.8.0
Upgrade to libg++ 2.8.0
Make ping(8) work with very large packet sizes on all types of interfaces.
-
Correct behaviour -x and -p flags in tar(1) to be traditional.
+
Correct behaviour -x and -p flags in tar(1) to be traditional.
Remove one of the two copies of math.h in the source tree.
Improve blowfish performance by a factor of 2, and hence increase the rounds by 1 in passwd.conf.
Handle unknown hostnames in mountd(8) better.
@@ -205,9 +219,9 @@
In old gas, move to late resolution of symbols because gcc 2.8 will require this.
Fix a configuration file parsing bug in ipf(8).
In libpcap and tcpdump, use our system ethers(5) parsing routines.
-
Make netstat -r report better information about non-standard netmasks.
+
Make netstat -r report better information about non-standard netmasks.
Add a command to ddb that reports out the extent tables.
Add a clarifying statement to all the Kerberos code that explains how it came to be that this code was released from the USA's crypto stranglehold.
In the RPC code, ensure that __svc_fdsetsize is always manipulated as a bitcount.
@@ -217,43 +231,43 @@
Permit the disabling of skey system-wide.
Convert the xdr(3) and rpc(3) manpages to mandoc format.
In mail.local(8), document how to use quotas on a mail spool.
-
Add -p option to uname(1), to display detailed CPU information.
+
Add -p option to uname(1), to display detailed CPU information.
Support for the ST16650 32-byte FIFO uart.
Do not copy from off the end of an nfs boot mbuf.
Some more repair in the games.
-
Support -rpath dir, -shared, -soname, --whole-archive, and --no-whole-archive in the old ld used on many of our platforms.
+
Support -rpath dir, -shared, -soname, --whole-archive, and --no-whole-archive in the old ld used on many of our platforms.
CVS version 1.9.24
For OLF/ELF binaries, remember the OS tag in execve(), so that emulation code can reference it later.
Make the kernel compile properly (with full warnings) under gcc 2.8.
-
Do not permit a read+write mmap() operation on a read-only file descriptor open on a device. This is a security problem in OpenBSD 2.2, and is described and fixed with a patch.
+
Do not permit a read+write mmap() operation on a read-only file descriptor open on a device. This is a security problem in OpenBSD 2.2, and is described and fixed with a patch.
Rename /etc/nat.rules to /etc/ipnat.rules.
Add kerberos kauthd(8).
-
On the i386, move XFree86 aperture driver into the kernel. The new sysctl(8) variable machdep.allowaperture decides if this driver is active or not. (This variable can only be modified at high securelevel).
-
Remove the ftp(1) `stdout redirection' hack and replace it with a -o filename option (which also understands a filename of "-" to mean stdout).
+
On the i386, move XFree86 aperture driver into the kernel. The new sysctl(8) variable machdep.allowaperture decides if this driver is active or not. (This variable can only be modified at high securelevel).
+
Remove the ftp(1) 'stdout redirection' hack and replace it with a -o filename option (which also understands a filename of "-" to mean stdout).
Pull in all the NetBSD changes to the old version of gas over the last year or so.
Fix two bugs in adduser(8).
Change chflags(2) and fchflags(2) to take a u_int for the second parameter.
New quirk for another Archive VIPER scsi tape drive.
Fix another signal handler bug in mail(1).
-
The mac68k 2.2 CD release had a few problems. These problems have been resolved in the FTP release. For more details...
+
The mac68k 2.2 CD release had a few problems. These problems have been resolved in the FTP release. For more details...
Make lpd(8) use keepalives so that it can detect dead network printers.
Support the WINBOND pci ethernet cards.
Fixed "%c" in strftime(3).
Various fixes to some of the games, ie. rain, worms, wump.
-
If link0 is set on a loopback interface (ie. lo1) make the address/netmask sets on it make supernets instead of subnets.
+
If link0 is set on a loopback interface (ie. lo1) make the address/netmask sets on it make supernets instead of subnets.
Place separate so_ruid and so_euid fields in struct socket, so that in_pcb.c can still do its job, but also so that identd(8) can be fast and return the proper uid.
-
In compress(1), if the st_flags is 0, do not attempt a chflags(2) call.
-
Make ruserok() significantly more paranoid when parsing the .rhosts file. This along with another issue is a security problem in OpenBSD 2.2, and is described and fixed with a patch.
+
Make ruserok() significantly more paranoid when parsing the .rhosts file. This along with another issue is a security problem in OpenBSD 2.2, and is described and fixed with a patch.
raise IPPORT_USERRESERVED significantly. Random port numbers will now look much more random than they did before.
-
New -a logdev argument for syslogd(8), useful for setting up additional /dev/log devices in various chroot spaces.
+
New -a logdev argument for syslogd(8), useful for setting up additional /dev/log devices in various chroot spaces.
Permit restore(8) to work on a filesystem that has a basic blocksize smaller than the blocksize of the filesystem that was dumped.
-
Fix rarpd(8) to work properly in the presence of massive routing traffic.
@@ -262,21 +276,21 @@
Emulate that disgusting linux connect() braindamage even better.
Fix some bugs in vacation(1).
Fix /etc/yp/domainname support in ypbind(8).
-
In the 2.2 release, the sparc scsi driver caused problems for the Sun 4/300 machines. Patches are now available.
-
Add FS_CCD partition type so that the ccd driver can ensure it has the right components.
-
Add /etc/sysctl.conf which specifies sysctl variables to change at boottime.
+
In the 2.2 release, the sparc scsi driver caused problems for the Sun 4/300 machines. Patches are now available.
+
Add FS_CCD partition type so that the ccd driver can ensure it has the right components.
+
Add /etc/sysctl.conf which specifies sysctl variables to change at boottime.
Fix a free page count bug in the vm system.
-
Create two new sysctl options: ddb.panic decides whether the kernel should enter ddb when it panics, and ddb.console controls if it is possible to enter ddb from the console via a hot-key.
+
Create two new sysctl options: ddb.panic decides whether the kernel should enter ddb when it panics, and ddb.console controls if it is possible to enter ddb from the console via a hot-key.
Add scan_ffs(8), a very useful tool for reconstructing disks.
Add strptime(3).
-
Buffer overflow fix in the MIPS ld.so. Replacement binaries for the pmax and arc platforms are available.
+
Buffer overflow fix in the MIPS ld.so. Replacement binaries for the pmax and arc platforms are available.
Avoid DNS lookup timing effects in ping -R.
Fix the __{CTOR,DTOR}_LIST__ declarations in c++rt0.c
-
Two bugs existed in the 2.2 pmax release which all users should be aware of. Patches are now available.
-
Be more careful about sourcerouted packets, including never forwarding them. This is a security problem in OpenBSD 2.2, and is described and fixed with a patch.
+
Two bugs existed in the 2.2 pmax release which all users should be aware of. Patches are now available.
+
Be more careful about sourcerouted packets, including never forwarding them. This is a security problem in OpenBSD 2.2, and is described and fixed with a patch.
Teach the kernel about newer PCI device types.
Workaround a race condition in syslogd's handling of SIGHUP.
-
Some man page fixes so that man -k is happier.
+
Some man page fixes so that man -k is happier.
Low-memory bug fix in setenv(3).
Self-extending kernel maps in the vm subsystem.
In rc.local, bail on starting cfsd(8) if mountd(8) is not running.
@@ -284,9 +298,9 @@
Glob extensions for XPG4.
Cleanups in wump(6).
Check both old and new shells in rpc.yppasswdd(8).
-
Add -a flag to which(1).
+
Add -a flag to which(1).
On binutils platforms, make ldd(1) work on static executables.
-
IPF 3.2.3. When you upgrade to this version, you must also upgrade the userland utilities (ipf, ipnat, etc.). You also need to get the latest MAKEDEV and run "sh MAKEDEV ipl" in /dev to create new device entries.
+
IPF 3.2.3. When you upgrade to this version, you must also upgrade the userland utilities (ipf, ipnat, etc.). You also need to get the latest MAKEDEV and run "sh MAKEDEV ipl" in /dev to create new device entries.
Fix a race in mkdir(1).
More cdrom ioctls in Linux emulation.
Fix select(2) use in sudo(8) so that it can handle large fd_set sizes.
@@ -301,7 +315,7 @@
Properly ignore whitespace between a conversion and %n in *scanf(3).
Import of tzcode1998b and tzdata1998b.
Use new ypwhich(1) flag in ypinit(8) script to get maps from the real master server.
-
Support -h host flag to ypwhich(1).
+
Support -h host flag to ypwhich(1).
pppd 2.3.3
Handle unparseable ulimit specifications as an error, not as the value 0.
ncurses 4.1-980103
@@ -356,10 +370,10 @@
Make route(8) non-setuid.
In ftpd, default to RFC non-conforming behaviour for the PORT command, but provide a runtime switch for those who like holes.
Addition of Obtuse smtpd(8) and smtpfwd(8) v2.0.
-
