Annotation of www/plus23.html, Revision 1.47
1.23 naddy 1: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
1.1 deraadt 2: <html>
3: <head>
4: <title>OpenBSD 2.3 changes</title>
1.23 naddy 5: <link rev=made href="mailto:www@openbsd.org">
1.1 deraadt 6: <meta name="resource-type" content="document">
1.47 ! schwarze 7: <meta name="description" content="OpenBSD 2.3 changes">
! 8: <meta name="keywords" content="openbsd,changes">
1.1 deraadt 9: <meta name="distribution" content="global">
1.47 ! schwarze 10: <meta name="copyright" content="This document copyright 1996-1998 by OpenBSD.">
1.1 deraadt 11: </head>
12:
1.27 david 13: <body bgcolor="#ffffff" text="#000000" link="#23238E">
1.1 deraadt 14:
1.19 jsyn 15: <a href="index.html"><img alt="[OpenBSD]" height="30" width="141" src="images/smalltitle.gif" border="0"></a>
1.1 deraadt 16: <p>
1.23 naddy 17: <h2><font color="#e00000">Changes made between OpenBSD 2.2 and OpenBSD 2.3</font></h2>
18: <hr>
1.1 deraadt 19:
20: <p>
21: This is a partial list of the major machine independent changes
1.40 sobrado 22: (i.e., these are the changes people ask about most often). Machine
1.1 deraadt 23: specific changes have also been made, and are sometimes mentioned
1.40 sobrado 24: in the pages for the specific <a href=plat.html>platforms</a> if you
1.1 deraadt 25: are interested in further port-specific details. Many ports
26: have had architecture-specific enhancements relative to NetBSD,
27: but when they do not they certainly have plenty of platform-independent
28: changes, starting with those listed below..
29:
30: <p>
1.23 naddy 31: Note: <font color="#e00000">Problems for which patches exist are marked in red</font>.
1.1 deraadt 32:
33: <p>
34: <h3>
1.21 deraadt 35: For changes in other releases, click below:<br>
36: <a href="plus20.html">2.0</a>,
37: <a href="plus21.html">2.1</a>,
38: <a href="plus22.html">2.2</a>,
39: <a href="plus24.html">2.4</a>,
40: <a href="plus25.html">2.5</a>,
41: <a href="plus26.html">2.6</a>,
42: <a href="plus27.html">2.7</a>,
43: <a href="plus28.html">2.8</a>,
44: <a href="plus29.html">2.9</a>,
45: <a href="plus30.html">3.0</a>,
46: <a href="plus31.html">3.1</a>,
47: <a href="plus32.html">3.2</a>,
1.24 deraadt 48: <a href="plus33.html">3.3</a>,
1.26 david 49: <a href="plus34.html">3.4</a>,
1.29 deraadt 50: <a href="plus35.html">3.5</a>,
1.30 miod 51: <a href="plus36.html">3.6</a>,
1.39 deraadt 52: <br>
1.31 deraadt 53: <a href="plus37.html">3.7</a>,
1.32 deraadt 54: <a href="plus38.html">3.8</a>,
1.33 deraadt 55: <a href="plus39.html">3.9</a>,
1.34 deraadt 56: <a href="plus40.html">4.0</a>,
1.35 deraadt 57: <a href="plus41.html">4.1</a>,
1.36 deraadt 58: <a href="plus42.html">4.2</a>,
1.38 deraadt 59: <a href="plus43.html">4.3</a>,
1.39 deraadt 60: <a href="plus44.html">4.4</a>,
1.41 deraadt 61: <a href="plus45.html">4.5</a>,
1.42 deraadt 62: <a href="plus46.html">4.6</a>,
1.43 deraadt 63: <a href="plus47.html">4.7</a>,
1.44 deraadt 64: <a href="plus48.html">4.8</a>,
1.45 deraadt 65: <a href="plus49.html">4.9</a>,
1.46 nick 66: <a href="plus50.html">5.0</a>,
1.47 ! schwarze 67: <a href="plus51.html">5.1</a>,
1.21 deraadt 68: <a href="plus.html">current</a>.
1.1 deraadt 69: <br>
70: </h3>
71:
72: <hr>
73:
1.23 naddy 74: <h3><font color="#0000e0">OpenBSD 2.3 released (May 19, 1998).</font></h3><p>
1.1 deraadt 75: <ul>
1.23 naddy 76: <li><font color="#e00000"><strong>A security problem due to buffer mismanagement exists in lprm(1). <a href="errata22.html#rmjob">A patch exists</a></strong></font>.
77: <li><font color="#e00000"><strong>A security problem due to a buffer overflow exists in uucpd(8) (which is not enabled by default in our releases). <a href="errata22.html#uucpd">A patch exists</a></strong></font>.
1.1 deraadt 78: <li>On the i386, fix installboot(8) so it works reliably on various filesystem layouts that did not work before.
79: <li>Support lots of file descriptors in named(8), for when many virtual interfaces exist.
80: <li>Fix installboot(8) on the sparc Sun4 models.
81: <li>In disklabel(8)'s <strong>-E</strong> mode, set the bootblock sizes so that the hp300 install does not freak out.
82: <li>In mktemp(3), repair a bug in the filename incrementing loop.
83: <li>Various other install script fixes.
84: <li>Fix /etc/fbtab handling in init(8).
85: <li>Make disklabel(8) mentions IDE (which is an alias for ESDI).
86: <li>For the i386, have the install procedure ask if the xf86 driver should be enabled by default.
1.8 rohee 87: <li>Make install procedure prompt & set the initial root password.
1.1 deraadt 88: <li>When root logs in for the first time, let him find that he has an interesting piece of mail about how the system works.
89: <li>Fix ipsec encap notifies.
1.25 deraadt 90: <li>Configure xdm(1) and the fwvm window manager sensibly enough for default users to not feel utterly lost.
1.1 deraadt 91: <li>Fix 'u'ndo support in disklabel(8)'s <strong>-E</strong> mode, and also add a new 'r' command.
92: <li>Repair the pkg_add(1) sufficiently for the 2.3 release...
93: <li>Fix a race condition in unmount(2).
94: <li>Add support for the XR16850 serial chip (128 byte fifos).
95: <li>mkisofs 1.11.2
96: <li>Disable console ddb by default. sysctl can re-enable it.
97: <li>Fix backtraces in gdb on m68k platforms.
98: <li>Support 3c905B (well, actually, our support falls over. We need a card to do further work).
99: <li>Modify i386 PS/2 driver to be read/write; this permits new XFree86 source to put mice into advanced modes of operation.
100: <li>Remove KTH Kerberos "eavesdropping" message from telnet(1) and telnetd(8).
101: <li>Fix bug oflow in ping(8) <strong>-R</strong> option.
102: <li>In tar(1), only preserve the uid/gid if the <strong>-p</strong> flag is given.
103: <li>sudo version 1.5.5
104: <li>Do not prepend /usr/local/bin to the PATH in zdiff(1), zforce(1), zgrep(1), zmore(1), znew(1), or rcsfreeze(1).
105: <li>Fix DNS fake-iquery bug.
106: <li>In the <strong>le</strong> ethernet driver, if the detected ethernet address is ff:ff:ff:ff:ff ... fail.
107: <li>Fixes for various (minor) Y2K problems.
108: <li>Switch a.out ports in the tree (sparc, m68k, i386) to use the newer version of gdb that is part of the binutils tree.
109: <li>Significantly improve the system install scripts.
110: <li>Add disklabel spoofing to the hp300 port.
111: <li>Add xlockmore(1) to the X11 tree.
112: <li>Fix <strong>ru_majflt</strong> counting in the VM system.
113: <li>Add AFS token fetching capability to various parts of the source tree.
114: <li>In login(1), handle cleanup of environment variables correctly.
115: <li>In ftp(1), for HTTP requests pass the hostname so that virtual hosts work.
116: <li>In utimes(2) and futimes(2), handle <strong>tv_sec</strong> values of -1 more carefully, as they are really illegal cases.
117: <li>Import <strong>kx</strong> into our X11 source tree.
118: <li>Add a <strong>SIOCGIFDATA</strong> ifreq-style ioctl which will get the ifdata informational structure attached to each interface.
119: <li>Add httpd(8) to the OpenBSD tree. It is apache 1.2.6.
120: <li>Import <strong>xpm</strong> into our X11 source tree.
121: <li>Support QLogic PCI scsi controllers (at least on the i386).
1.4 deraadt 122: <li>Fix rmd160(3) (and also the IPSEC algorithm) to properly handle data beyond its block boundary.
1.1 deraadt 123: <li>Emulate SunOS <strong>otimes(2)</strong> system call so that Netscape doesn't explode.
124: <li>Fix rarpd(8) interaction with routed(8); too much routing information would pile up un-read on the AF_ROUTE socket and rarpd(8) would get too grumpy.
125: <li>Remove libtelnet.so.* from the distribution. People compiling kerberos into their system were generating significantly different shared libraries; thus it is wrong to make this a shared library.
1.16 jsyn 126: <li>Make edquota(8) handle numeric names as uids only after checking that an account named so does not exist.
1.1 deraadt 127: <li>Add UID_MAX and GID_MAX to <machine/limits.h> on each architecture.
128: <li>Fix ch(4) operation on ncr(4) scsi controllers.
1.37 tobias 129: <li>On the sparc, switch to an alternate font if the console is < 800*600 resolution.
1.1 deraadt 130: <li>Add ISAPNP driver for the 3c509 cards.
131: <li>Change <strong>SIOCGIFNETMASK</strong>, <strong>SIOCGIFDSTADDR</strong>, and <strong>SIOCGIFBRDADDR</strong> to return information for named/addressed mappings rather than simply named mappings, so that these calls can work on interface aliases.
132: <li>Add (complete?) support for KerberosIV to our X11R6.
133: <li>In mktemp(1), document why this should be used for temporary filename generation.
134: <li>In telnet(1), fix connecting to IP addresses; this was recently broken by the new KTH kerberos telnet integration.
135: <li>Make <strong>-R path</strong> work a well as <strong>-Rpath</strong> in cc(1).
136: <li>In the ksh(1) manpage, clarify the behaviour of the <strong>CDPATH</strong> variable.
137: <li>Add support for more PCI NE2000 cards.
138: <li>Make <strong>%Y</strong> override an earlier <strong>%y</strong> in strptime(3).
139: <li>Add support for <strong>atalk</strong> to ifconfig(8).
140: <li>Make the functions described in ethers(3) more careful.
141: <li>Fix support for VFS loadable kernel modules.
142: <li>In get*ent() family of routines in libc, use fgetln(3) instead of fgets(3) so that parsing of overly long lines is more correct.
143: <li>Add options(4). This manpage describes what all the kernel options do. If you spot an error in it, notify us immediately.
144: <li>In strptime(3), make <strong>%C</strong> influence <strong>%y</strong> regardless of ordering.
145: <li>Fix a NULL deference bug in make(1) when using the <strong>-j</strong> flag.
146: <li>Fix <strong>%m</strong>, <strong>%I</strong>, <strong>%S</strong>, <strong>%y</strong>, <strong>%C</strong>, and <strong>%j</strong> conversions in strptime(3).
1.9 wvdputte 147: <li>Merge Kirk McKusick's <a href="faq/faq14.html#14.5">soft update</a> code. This code is still experimental and under a non-commercial license. It will be included in the next release as an optional compile flag; we cannot ship it enabled by default.
1.1 deraadt 148: <li>Flesh out the man pages and explain the security problems behind mktemp(3) and other similar functions, plus explain how to handle these problems better.
149: <li>Fully working KerberosIV encryption in telnet(1) and telnetd(8).
150: <li>Fixes to a few more games.
151: <li>CVS version 1.9.26
152: <li>Fix mktemp(3) problems in two more YP tools.
153: <li>Fix an interaction bug in inetd(8) due to SIGPIPE blocking; caused a bad effect in rlogind(8) or other inetd(8) children.
154: <li>Configure cc(1) to pass the <strong>-R</strong> flag on to ld(1).
155: <li>Add lynx 2.8 to the system.
156: <li>Add support for 82553 and 82555B PHY in the fxp driver.
157: <li>Fix tmpfile(3) to fchown() the file after unlink() (taking umask() into consideration, too). This is required by standards.
158: <li>Fix vnd and ccd drivers to work properly with soft updates.
159: <li>Fix a crash case in compress(1).
160: <li>Add <strong>-s</strong> and <strong>-c</strong> options to last(1).
161: <li>Add support for <strong>-s section</strong> and <strong>-S subsection</strong> to man(1).
162: <li>Change the configuration of man(1) so that man4 is read much later; this makes it easier to see pages in man8 with similar names.
163: <li>Fix KerberosIV password changing.
164: <li>On the sparc, support 128KB lebuffer devices.
165: <li>On the sparc, print hotfix information at the right place in the dmesg log.
166: <li>Fix passwd(1) so that YP passwords do not get edited in the local password file.
167: <li>Significant efforts made at fleshing out the device driver man page tree better.
168: <li>Upgrade to gcc 2.8.1
169: <li>Rename 2.2 to 2.3 tree-wide, for the upcoming release.
170: <li>Improve IPSEC performance.
171: <li>Add many new machine-dependent man4 man pages.
172: <li>XFree86 3.3.2 is now in our X11 source tree.
173: <li>Add another missing ntohl() in ipnat(8).
174: <li>Use a p_os field to sub-divide operating system emulation capabilities (like for SVR4 binaries).
175: <li>Spend almost a week finding and fixing minor goobers discovered by gcc 2.8 throughout the source tree.
176: <li>Fix syslog(3) sockaddr initialization.
177: <li>Add support for <strong>TIOCM*</strong> family of ioctl(2) values to the sparc serial driver.
178: <li>New photurisd(8) that complies with <strong>draft-simpson-photuris-18.txt</strong>.
179: <li>Fix a race bug in mkstemp(3) itself that would make mkstemp(3) have occasionally fail strangely.
180: <li>Fix a few more mktemp(3) problems in f77 libraries, and other assorted GNU software.
181: <li>Upgrade to gcc 2.8.0
182: <li>Upgrade to libg++ 2.8.0
183: <li>Make ping(8) work with very large packet sizes on all types of interfaces.
184: <li>Correct behaviour <strong>-x</strong> and <strong>-p</strong> flags in tar(1) to be traditional.
185: <li>Remove one of the two copies of math.h in the source tree.
186: <li>Improve blowfish performance by a factor of 2, and hence increase the rounds by 1 in passwd.conf.
187: <li>Handle unknown hostnames in mountd(8) better.
188: <li>Inside the kernel, change struct file's members f_count and f_msgcount to longs, and then add checking for overflows as well.
189: <li>Add XDM-AUTHORIZATION to X11.
190: <li>In old gas, move to late resolution of symbols because gcc 2.8 will require this.
191: <li>Fix a configuration file parsing bug in ipf(8).
192: <li>In libpcap and tcpdump, use our system ethers(5) parsing routines.
193: <li>Make <strong>netstat -r</strong> report better information about non-standard netmasks.
194: <li>Fix some bugs in the 3c[59]xx device driver.
1.23 naddy 195: <li><font color="#e00000"><strong>The 3rd revision of the patch for the mmap() security problem is available, and <a href="errata22.html#mmap">has been placed on top of the 2nd revision</a></strong></font>.
1.1 deraadt 196: <li>Add a command to ddb that reports out the extent tables.
197: <li>Add a clarifying statement to all the Kerberos code that explains how it came to be that this code was released from the USA's crypto stranglehold.
198: <li>In the RPC code, ensure that __svc_fdsetsize is always manipulated as a bitcount.
199: <li>Clarify crypt(3) manpage as to how many characters each transform actually considers in its calculation.
200: <li>Do not permit TCP connections to any of the broadcast addresses.
201: <li>Do not let a user set their password to "s/key".
202: <li>Permit the disabling of skey system-wide.
203: <li>Convert the xdr(3) and rpc(3) manpages to mandoc format.
204: <li>In mail.local(8), document how to use quotas on a mail spool.
205: <li>Add <strong>-p</strong> option to uname(1), to display detailed CPU information.
206: <li>Support for the ST16650 32-byte FIFO uart.
207: <li>Do not copy from off the end of an nfs boot mbuf.
208: <li>Some more repair in the games.
209: <li>Support <strong>-rpath dir</strong>, <strong>-shared</strong>, <strong>-soname</strong>, <strong>--whole-archive</strong>, and <strong>--no-whole-archive</strong> in the old ld used on many of our platforms.
210: <li>CVS version 1.9.24
211: <li>For OLF/ELF binaries, remember the OS tag in execve(), so that emulation code can reference it later.
212: <li>Make the kernel compile properly (with full warnings) under gcc 2.8.
1.23 naddy 213: <li><font color="#e00000"><strong>Do not permit a read+write mmap() operation on a read-only file descriptor open on a device. This is a security problem in OpenBSD 2.2, and is <a href="errata22.html#mmap"> described and fixed with a patch</a></strong></font>.
1.1 deraadt 214: <li>Rename /etc/nat.rules to /etc/ipnat.rules.
215: <li>Add kerberos kauthd(8).
1.15 pvalchev 216: <li>On the i386, move XFree86 aperture driver into the kernel. The new sysctl(8) variable <strong>machdep.allowaperture</strong> decides if this driver is active or not. (This variable can only be modified at high securelevel).
1.1 deraadt 217: <li>Remove the ftp(1) `stdout redirection' hack and replace it with a <strong>-o filename</strong> option (which also understands a filename of "-" to mean stdout).
218: <li>Pull in all the NetBSD changes to the old version of gas over the last year or so.
219: <li>Fix two bugs in adduser(8).
220: <li>Change chflags(2) and fchflags(2) to take a u_int for the second parameter.
1.23 naddy 221: <li><a href="ftp://ftp.openbsd.org/pub/OpenBSD/tools/openbsdpower.gif">New fancy OpenBSD logo for your use</a>.
1.1 deraadt 222: <li>Add XPG4 <strong>-r</strong> option to du(1).
223: <li>Support <strong>-[width]</strong> option in fmt(1).
224: <li>New quirk for another Archive VIPER scsi tape drive.
225: <li>Fix another signal handler bug in mail(1).
1.23 naddy 226: <li><font color="#e00000"><strong>The mac68k 2.2 CD release had a few problems. These problems have been resolved in the FTP release. <a href="errata22.html#mac68k">For more details...</a></strong></font>
1.1 deraadt 227: <li>Make lpd(8) use keepalives so that it can detect dead network printers.
228: <li>Support the WINBOND pci ethernet cards.
229: <li>Fixed "%c" in strftime(3).
230: <li>Various fixes to some of the games, ie. rain, worms, wump.
231: <li>If <strong>link0</strong> is set on a loopback interface (ie. lo1) make the address/netmask sets on it make supernets instead of subnets.
1.4 deraadt 232: <li>Place separate so_ruid and so_euid fields in struct socket, so that in_pcb.c can still do its job, but also so that identd(8) can be fast and return the proper uid.
1.23 naddy 233: <li><font color="#e00000"><strong>In the sparc 2.2 release, the SS4/SS5 kernel was not very reliable. <a href="errata22.html#sparciommu">A simple reliability patch is now available</a></strong></font>.
1.1 deraadt 234: <li>Fix a map corruption bug in ypxfr(8).
235: <li>Make stty(1) recognize STRIPDISC.
236: <li>In compress(1), if the st_flags is 0, do not attempt a chflags(2) call.
1.23 naddy 237: <li><font color="#e00000"><strong>Make ruserok() significantly more paranoid when parsing the .rhosts file. This along with another issue is a security problem in OpenBSD 2.2, and is <a href="errata22.html#ruserok"> described and fixed with a patch</a></strong></font>.
1.1 deraadt 238: <li>raise IPPORT_USERRESERVED significantly. Random port numbers will now look much more random than they did before.
239: <li>New <strong>-a logdev</strong> argument for syslogd(8), useful for setting up additional /dev/log devices in various chroot spaces.
240: <li>Permit restore(8) to work on a filesystem that has a basic blocksize smaller than the blocksize of the filesystem that was dumped.
241: <li>Make MIPS ldconfig emulate the <strong>-m</strong> flag better.
242: <li>The web pages now have a new section on <a href=security.html> security advisories</a>.
243: <li>New compat_ibcs2(8) manpage.
244: <li>Fix rarpd(8) to work properly in the presence of massive routing traffic.
245: <li>A start at full lint library support.
246: <li>smtpd(8) integration spiffied up. Everything you need is now in the system.
247: <li>Emulate that disgusting linux connect() braindamage even better.
248: <li>Fix some bugs in vacation(1).
249: <li>Fix /etc/yp/domainname support in ypbind(8).
1.23 naddy 250: <li><font color="#e00000"><strong>In the 2.2 release, the sparc scsi driver caused problems for the Sun 4/300 machines. <a href="errata22.html#sparc">Patches are now available</a></strong></font>.
1.1 deraadt 251: <li>Add <strong>FS_CCD</strong> partition type so that the ccd driver can ensure it has the right components.
252: <li>Add <strong>/etc/sysctl.conf</strong> which specifies sysctl variables to change at boottime.
253: <li>Fix a free page count bug in the vm system.
254: <li>Create two new sysctl options: <strong>ddb.panic</strong> decides whether the kernel should enter ddb when it panics, and <strong>ddb.console</strong> controls if it is possible to enter ddb from the console via a hot-key.
255: <li>Add scan_ffs(8), a very useful tool for reconstructing disks.
256: <li>Add strptime(3).
1.23 naddy 257: <li><font color="#e00000"><strong>Buffer overflow fix in the MIPS ld.so. Replacement binaries for the <a href="errata22.html#pmax">pmax</a> and <a href="errata22.html#arc">arc</a> platforms are available</strong></font>.
1.1 deraadt 258: <li>Avoid DNS lookup timing effects in ping -R.
259: <li>Fix the __{CTOR,DTOR}_LIST__ declarations in c++rt0.c
1.23 naddy 260: <li><font color="#e00000"><strong>Two bugs existed in the 2.2 pmax release which all users should be aware of. <a href="errata22.html#pmax">Patches are now available</a></strong></font>.
261: <li><font color="#e00000"><strong>Be more careful about sourcerouted packets, including never forwarding them. This is a security problem in OpenBSD 2.2, and is <a href="errata22.html#sourceroute"> described and fixed with a patch</a></strong></font>.
1.1 deraadt 262: <li>Teach the kernel about newer PCI device types.
263: <li>Workaround a race condition in syslogd's handling of SIGHUP.
264: <li>Some man page fixes so that <strong>man -k</strong> is happier.
265: <li>Low-memory bug fix in setenv(3).
266: <li>Self-extending kernel maps in the vm subsystem.
267: <li>In rc.local, bail on starting cfsd(8) if mountd(8) is not running.
268: <li>Require commands started from in /etc/rc to be executable -- not just readable.
269: <li>Glob extensions for XPG4.
270: <li>Cleanups in wump(6).
271: <li>Check both old and new shells in rpc.yppasswdd(8).
272: <li>Add <strong>-a</strong> flag to which(1).
273: <li>On binutils platforms, make ldd(1) work on static executables.
274: <li>IPF 3.2.3. When you upgrade to this version, you <strong>must</strong> also upgrade the userland utilities (ipf, ipnat, etc.). You also need to get the latest MAKEDEV and run "sh MAKEDEV ipl" in /dev to create new device entries.
275: <li>Fix a race in mkdir(1).
1.16 jsyn 276: <li>More cdrom ioctls in Linux emulation.
1.1 deraadt 277: <li>Fix select(2) use in sudo(8) so that it can handle large fd_set sizes.
278: <li>In termcap databases, map the keyboard backspace key to DEL instead of BS as that is how it really is.
279: <li>Fix argument handling in expand(1).
280: <li>If tar(1) extracts as root, preserve uid/gid as is traditional.
281: <li>Repaired the expansion of the kernel panic string.
282: <li>Much more complete KerberosIV documentation.
283: <li>Start at bus_dma support.
284: <li>Properly error out if yp_match() or yp_first() is asked to lookup long keys.
285: <li>Groff 1.11a
286: <li>Properly ignore whitespace between a conversion and %n in *scanf(3).
287: <li>Import of tzcode1998b and tzdata1998b.
288: <li>Use new ypwhich(1) flag in ypinit(8) script to get maps from the real master server.
289: <li>Support <strong>-h host</strong> flag to ypwhich(1).
290: <li>pppd 2.3.3
291: <li>Handle unparseable ulimit specifications as an error, not as the value 0.
292: <li>ncurses 4.1-980103
293: <li>In w(1), handle processes that set argv[0] to NULL, by printing p_pcomm.
294: <li>Make pkg_install(1) feed a -p option to tar.
295: <li>sudo version 1.5.4.
296: <li>Merge some slight standardization fixes for *printf(3) from FreeBSD (some unlikely cases get handled better).
297: <li>Bring gethostent() back to life, even though it is a bad interface.
298: <li>In disklabel(8), make IDE drive type handling more obvious and intuitive.
299: <li>Support all kinds of keyboards in pcvt, like pccons does.
300: <li>Support for FAT32 partitions.
301: <li>For scsi tape drives, be silent in the presence of ILI errors.
302: <li>Fix a vnode creation race.
303: <li>Fix a output error in finger(1).
1.28 deraadt 304: <li>Do not permit dumping corefiles over symbolic links. (We have wanted this changed for a long time, but it required Lite2 vfs.)
1.1 deraadt 305: <li>Permit extra / terminators in some path-based system calls.
1.15 pvalchev 306: <li>Fix some problems regarding transfer of secure yp maps.
1.1 deraadt 307: <li>New rc.conf(7) manpage.
308: <li>Make sure it is clear that so_linger is in seconds.
309: <li>Add sysctl net.inet.icmp.bmcastecho to block the smurf problem.
310: <li>Some fixes to fdisk(8) and disklabel(8).
311: <li>Workaround a problem that happens if a TCP socket is shutdown(2)'d more than once.
312: <li>Some more manpage cleanups.
313: <li>Some slight changes to the PCI device subsystem to make it probe devices nicer (mostly dmesg printing).
314: <li>Make md5(1), rmd160(1), and sha1(1) use getopt().
315: <li>Make {f,}chflags(.., -1) return error EINVAL.
316: <li>Make mmap() return void * instead of caddr_t, and add the MAP_FAILED define required by new standards.
317: <li>Fix some gzip buf oflows.
318: <li>Correct an splx botch in the tunnel driver.
319: <li>Add sysctl ddb.panic_ddb; indicates whether to drop into ddb on a panic.
320: <li>Swap quit and exit commands in fdisk.
321: <li>Correct exit code of nohup(1).
1.11 deraadt 322: <li>lockf() implementation.
1.1 deraadt 323: <li>Handle DST changeovers automatically in cron.
324: <li>IBCS2 emulation also requires fcntl() F_FREESP support.
325: <li>The new KTH KerberosIV integration (and security audit) is almost complete.
326: <li>If mountd(8) discovers getfh(2) not supported, it now aborts nicely.
327: <li>Support fcntl() GETLK,SETLK,UNLK variants in SunOS emulation.
328: <li>Fix a bug in make(1) regarding SYSV style : substitution on null variables.
329: <li>Check the values of the ftp PORT command even more carefully.
330: <li>Fail better for over-long usernames.
331: <li>Change ftp(1) so that tries to use passive mode, and falls back to active mode. Provide environment variables to fall back. This is incredibly cool.
332: <li>Provide workaround for the Cyrix 6x86 COMA bug. (A workaround for 2.2 is not available).
333: <li>Implement fcntl() of F_FREESP in SVR4 emulation. Does this belong in ibcs2 also?
334: <li>Fix Linux accept/recvmsg if kernel is compiled with other compat options.
335: <li>In numerous programs, avoid fd_set overflows.
336: <li>Fix MAKEDEV script regarding /dev/fd/* for some architectures.
337: <li>Fix a kernel bug related to "route change ...".
338: <li>Support IP_HDRINCL in Linux emulation.
339: <li>Update the pkg_* tools a bit.
340: <li>Honour TMPDIR in the locate(8) tools.
341: <li>Make route(8) non-setuid.
342: <li>In ftpd, default to RFC non-conforming behaviour for the PORT command, but provide a runtime switch for those who like holes.
343: <li>Addition of Obtuse smtpd(8) and smtpfwd(8) v2.0.
1.23 naddy 344: <li><font color="#e00000"><strong>Due to timing constraints, mac68k X11 binaries did not make it onto the 2.2 CDROM. <a href="errata22.html#mac68k">But it is now available for ftp</a></strong></font>.
1.1 deraadt 345: <li>Do not clear the setuid/setgid file mode bits for a call to {,f,l}chmod(-1, -1).
346: <li>Enable new FreeBSD ppp(8) daemon. There are now two ppp daemons in the source tree, they have quite different feature sets.
1.23 naddy 347: <li><font color="#e00000"><strong>Fixed a panic problem in the i386 apm driver. <a href="errata22.html#i386">A patch is available for 2.2</a></strong></font>.
1.1 deraadt 348: <li>Repair a number of retry operation problems in the wdc driver that mostly affected sleeping laptops.
349: <li>Handle the controlling tty ioctl in linux emulation.
350: <li>Handle SIOCGIFMETRIC and SIOCGIFMTU in linux emulation.
351: <li>Handle nanosleep() in linux emulation.
1.8 rohee 352: <li>Use recursive vnode locks to solve a page-in panic reported by chuck & chuck.
1.1 deraadt 353: <li>Handle SIOCGIFHWADDR ioctl in linux emulation.
354: <li>Handle the cdrom ejecting ioctl in linux emulation.
355: <li>Correct an XPG violation in stdlib.h.
356: <li>Fix a problem in -current regarding open() of O_TRUNC and O_SHLOCK.
357: <li>Fix numerous problems with new KTH kerberos.
1.23 naddy 358: <li><font color="#e00000"><strong>A workaround for the Intel P5 F00F lockup problem. <a href="errata22.html#i386">A patch is available for 2.2</a></strong></font>.
1.1 deraadt 359: <li>Fix minor numbers for /dev/ch* in the MAKEDEV scripts.
360: <li>Add a <strong>kern.nosuidcoredump</strong> sysctl.
361: <li>Enhance the performance of pwd_mkdb(8) by expanding the db(3) cache based on input filesize.
362: <li>Use <strong>cp -R</strong> instead of <strong>cp -r</strong> for local copies in rcp(1).
363: <li>Flesh out scsi(8) a tiny bit more.
364: <li>In linux compat, handle the CDROM ioctl() calls.
365: <li>Indicate connect direction for tcp sockets in fstat(1).
366: <li>Fix scsi CDIOCREADSUBCHANNEL.
1.37 tobias 367: <li>Prevent ipf/ipnnat configuration changes when securelevel > 1.
1.1 deraadt 368: <li>Fix an overflow in top(1).
369: <li>Fix a deadlock on cd9660.
370: <li>Update to ncurses-4.1-971129
1.23 naddy 371: <li><font color="#e00000"><strong>On the i386, handle the nasty problem with distinguishing SVR4 and Linux binaries. <a href="errata22.html#i386">A patch is available for 2.2</a></strong></font>.
1.1 deraadt 372: <li>Newer ncr device driver.
373: <li>Fix SunOS emulation of TIOCGPGRP.
374: <li>Add some more XPG4.2 *_t types.
375: <li>Import perl 5.004_04.
376: <li>Add hosts.equiv(3) and .rhosts(3) man page.
377: <li>Add asprintf(3) and vasprintf(3).
378: <li>Fix /etc/rc scripts to require IPF if NAT is requested.
379: <li>Moving towards KTH kerberos 4-0.9.7.
380: <li>Fix <strong>-amin</strong> option in find(1).
381: <li>Fix arp(8) ethernet address parsing for the illegal cases.
382: <li>Massive performance optimization of the ccd device (RAID-like striping disk driver).
383: <li>Work around stupid linux emulation behaviour involving non-blocking connect(2).
384: <li>Update to ncurses 4.1.
385: <li>Fix a mget prompting error in ftp(1).
386: <li>add <strong>-t</strong> option to disklabel(8).
387: <li>Some man page cleanups.
388: <li>Fix a memory leak in the kernel process group manipulation code.
389: <li>Import of FreeBSD's ppp(8) program.
390: <li>Update sudo(8).
391: <li>Fixed bug in 'systat vm' output.
392: <li>Fix the internals of open(2) when O_TRUNC and either O_SHLOCK or O_EXLOCK are set. (That was a nasty kernel bug).
393: <li>Clean /var earlier in the /etc/rc script.
1.23 naddy 394: <li><font color="#e00000"><strong>make readlink(1) terminate its buffer correctly. <a href="errata22.html#all">This affects CDROM builds so a patch is available for 2.2</a></strong></font>.
1.1 deraadt 395: <li>Make fstat(2) on AF_UNIX socket return proper st_[acm]time field values.
396: <li>Implement FIONBIO in ibcs2 emulation code.
397: <li>Consider only the 0177777 bits of the umask(2) value, as documented.
398: <li>Added mode rangecheck in chmod(2) and fchmod(2).
399: <li>Fix some Y2K problems in the nroff tmac macros.
400: <li>Minor logging feature changes in fingerd(8).
401: <li>in chat(8), replace Mini Getopt from hell with real getopt().
402: <li>Add <strong>SHUT_RD</strong>, <strong>SHUT_WR</strong>, and <strong>SHUT_RDWR</strong> values for shutdown(2) as specified by XPG4.2.
403: <li>Make the <strong>-Ss</strong> flag in rpcgen(1) work right.
404: <li>Range-check the "how" argument for shutdown(2).
405: <li>Change various system calls to take void * instead of caddr_t.
406: <li>Fix a line continuation bug in sed(1).
407: <li>Add inetd(8) <strong>-R rate</strong> flag, and crank default rate to 256.
408: <li>Clear CLOCAL mode in pppd if modem is set but modem_chat is not.
409: <li>Make the if_de driver support more cards.
410: <li>Make msync(2) POSIX compliant.
411: <li>Fix a ONLCR + FLUSHO situation in tty.c
412: <li>Support -mmin, -amin, and -cmin in find(1).
413: <li>Support an "object" keyword in config(8).
414: <li>Make "expr a : /" work.
415: <li>Make dumpfs(8) report if soft updates are requested by the superblock.
416: <li>Add getsid(2) system call as mandated by XPG4.2.
417: <li>Some minor fixes for the libc/db/btree code.
418: <li>Flesh out compat_freebsd a fair bit more.
419: <li>Some compat_svr4 fixes.
420: <li>Update getNAME(8) and fix makewhatis(8) to use it more optimally.
421: <li>Fix EXTPROC in pty code.
422: <li>Correct TCP's handling of RST.
423: <li>Add more things to afterboot(8).
424: <li>Fix tty suspend during <strong>sh -c "less file"</strong>.
425: <li>double MAX_KMAPENT and MAX_KMAP
426: <li>sendmail 8.8.8
427: <li>add uu_lock(), uu_unlock() and uu_lockerr() to libutil.
428: <li>Start named(8) earlier in /etc/rc.
429: <li>Support execution sections in syslog.conf.
430: <li>4.4BSD lite2 vfs integration.
431: <li>usleep(3) returns int, and add useconds_t type as required by XPG4.2
432: <li>Fixed ps(1) LIM and STAT columns.
433: <li>makewhatis(8) manpage added.
434: <li>Fix rpc.rquotad support if the quotas file resides on another filesystem.
435: <li>Truncate large uid and gid values in ranlib(1), in the same way as this is handled in ar(1).
436: <li>Document how crypt(3) handles blowfish and MD5 passwords.
437: <li>Fix some memory leaks in the RPC code.
438: <li>Fix an as(1) parsing bug relating to the .ascii directive.
439: <li>Handle C++ and other languages in yacc(1) far better.
440: <li>Be more careful with getpwent() information inside rcp(1).
441: <li>Replace kernel printf with Torek's libc printf.
442: <li>Make disklabel -E deal with multiple partitions which overlap.
1.16 jsyn 443: <li>If a non-existent user logs in and asks for s/key authentication, fake a proper s/key prompt.
1.1 deraadt 444: <li>SIGWINCH handling in systat(1).
445: <li>Add blowfish and cast encryption to IPSEC.
446: <li>In tftpd(8), permit syslog() to work when running chroot(2)'d.
447: <li>a buffer underrun in ctags(1).
448: <li>Make kdump(1) handle the newer emulations.
449: <li>Add svr4 jioctl() compat interface.
450: </ul>
451: <p>
452:
453: This list mentions mostly platform-independent changes. For a list of changes
454: made in a particular platform, please check the page for that platform. If you
455: find them not listed there, the changes are either (1) not being documented or
456: (2) are documented here.<br><br>
457:
458: <hr>
459: <p>
460: <h3>
1.21 deraadt 461: For changes in other releases, click below:<br>
462: <a href="plus20.html">2.0</a>,
463: <a href="plus21.html">2.1</a>,
464: <a href="plus22.html">2.2</a>,
465: <a href="plus24.html">2.4</a>,
466: <a href="plus25.html">2.5</a>,
467: <a href="plus26.html">2.6</a>,
468: <a href="plus27.html">2.7</a>,
469: <a href="plus28.html">2.8</a>,
470: <a href="plus29.html">2.9</a>,
471: <a href="plus30.html">3.0</a>,
472: <a href="plus31.html">3.1</a>,
473: <a href="plus32.html">3.2</a>,
1.24 deraadt 474: <a href="plus33.html">3.3</a>,
1.26 david 475: <a href="plus34.html">3.4</a>,
1.29 deraadt 476: <a href="plus35.html">3.5</a>,
1.30 miod 477: <a href="plus36.html">3.6</a>,
1.39 deraadt 478: <br>
1.31 deraadt 479: <a href="plus37.html">3.7</a>,
1.32 deraadt 480: <a href="plus38.html">3.8</a>,
1.33 deraadt 481: <a href="plus39.html">3.9</a>,
1.34 deraadt 482: <a href="plus40.html">4.0</a>,
1.35 deraadt 483: <a href="plus41.html">4.1</a>,
1.36 deraadt 484: <a href="plus42.html">4.2</a>,
1.38 deraadt 485: <a href="plus43.html">4.3</a>,
1.39 deraadt 486: <a href="plus44.html">4.4</a>,
1.41 deraadt 487: <a href="plus45.html">4.5</a>,
1.42 deraadt 488: <a href="plus46.html">4.6</a>,
1.43 deraadt 489: <a href="plus47.html">4.7</a>,
1.44 deraadt 490: <a href="plus48.html">4.8</a>,
1.45 deraadt 491: <a href="plus49.html">4.9</a>,
1.46 nick 492: <a href="plus50.html">5.0</a>,
1.47 ! schwarze 493: <a href="plus51.html">5.1</a>,
1.21 deraadt 494: <a href="plus.html">current</a>.
1.1 deraadt 495: <br>
496: </h3>
497:
498: <hr>
499: <a href="index.html"><img height=24 width=24 src=back.gif border=0 alt=OpenBSD></a>
1.23 naddy 500: <a href="mailto:www@openbsd.org">www@openbsd.org</a>
1.47 ! schwarze 501: <br><small>$OpenBSD: plus23.html,v 1.46 2011/09/07 03:36:35 nick Exp $</small>
1.1 deraadt 502:
503: </body>
504: </html>