[BACK]Return to plus23.html CVS log [TXT][DIR] Up to [local] / www

Annotation of www/plus23.html, Revision 1.64

1.23      naddy       1: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
1.1       deraadt     2: <html>
                      3: <head>
1.62      tj          4: <title>OpenBSD 2.3 Changelog</title>
1.47      schwarze    5: <meta name="description" content="OpenBSD 2.3 changes">
                      6: <meta name="copyright" content="This document copyright 1996-1998 by OpenBSD.">
1.61      deraadt     7: <meta name="viewport" content="width=device-width, initial-scale=1">
                      8: <link rel="stylesheet" type="text/css" href="openbsd.css">
1.64    ! tb          9: <link rel="canonical" href="https://www.openbsd.org/plus23.html">
1.1       deraadt    10: </head>
                     11:
1.27      david      12: <body bgcolor="#ffffff" text="#000000" link="#23238E">
1.1       deraadt    13:
1.61      deraadt    14: <h2>
                     15: <a href="index.html">
                     16: <font color="#0000ff"><i>Open</i></font><font color="#000084">BSD</font></a>
1.62      tj         17: <font color="#e00000">2.3 Changelog</font>
                     18: </h2>
1.23      naddy      19: <hr>
1.1       deraadt    20:
                     21: <p>
                     22: This is a partial list of the major machine independent changes
1.40      sobrado    23: (i.e., these are the changes people ask about most often).  Machine
1.1       deraadt    24: specific changes have also been made, and are sometimes mentioned
1.40      sobrado    25: in the pages for the specific <a href=plat.html>platforms</a> if you
1.1       deraadt    26: are interested in further port-specific details.  Many ports
                     27: have had architecture-specific enhancements relative to NetBSD,
                     28: but when they do not they certainly have plenty of platform-independent
                     29: changes, starting with those listed below..
                     30:
                     31: <p>
1.23      naddy      32: Note: <font color="#e00000">Problems for which patches exist are marked in red</font>.
1.1       deraadt    33:
                     34: <p>
1.21      deraadt    35: For changes in other releases, click below:<br>
                     36: <a href="plus20.html">2.0</a>,
                     37: <a href="plus21.html">2.1</a>,
                     38: <a href="plus22.html">2.2</a>,
                     39: <a href="plus24.html">2.4</a>,
                     40: <a href="plus25.html">2.5</a>,
                     41: <a href="plus26.html">2.6</a>,
                     42: <a href="plus27.html">2.7</a>,
                     43: <a href="plus28.html">2.8</a>,
                     44: <a href="plus29.html">2.9</a>,
                     45: <a href="plus30.html">3.0</a>,
                     46: <a href="plus31.html">3.1</a>,
                     47: <a href="plus32.html">3.2</a>,
1.24      deraadt    48: <a href="plus33.html">3.3</a>,
1.26      david      49: <a href="plus34.html">3.4</a>,
1.29      deraadt    50: <a href="plus35.html">3.5</a>,
1.30      miod       51: <a href="plus36.html">3.6</a>,
1.53      deraadt    52: <a href="plus37.html">3.7</a>,
1.39      deraadt    53: <br>
1.32      deraadt    54: <a href="plus38.html">3.8</a>,
1.33      deraadt    55: <a href="plus39.html">3.9</a>,
1.34      deraadt    56: <a href="plus40.html">4.0</a>,
1.35      deraadt    57: <a href="plus41.html">4.1</a>,
1.36      deraadt    58: <a href="plus42.html">4.2</a>,
1.38      deraadt    59: <a href="plus43.html">4.3</a>,
1.39      deraadt    60: <a href="plus44.html">4.4</a>,
1.41      deraadt    61: <a href="plus45.html">4.5</a>,
1.42      deraadt    62: <a href="plus46.html">4.6</a>,
1.43      deraadt    63: <a href="plus47.html">4.7</a>,
1.44      deraadt    64: <a href="plus48.html">4.8</a>,
1.45      deraadt    65: <a href="plus49.html">4.9</a>,
1.46      nick       66: <a href="plus50.html">5.0</a>,
1.47      schwarze   67: <a href="plus51.html">5.1</a>,
1.48      nick       68: <a href="plus52.html">5.2</a>,
1.49      deraadt    69: <a href="plus53.html">5.3</a>,
1.50      deraadt    70: <a href="plus54.html">5.4</a>,
1.51      deraadt    71: <br>
1.53      deraadt    72: <a href="plus55.html">5.5</a>,
1.55      brett      73: <a href="plus56.html">5.6</a>,
1.56      deraadt    74: <a href="plus57.html">5.7</a>,
1.59      deraadt    75: <a href="plus58.html">5.8</a>,
1.60      deraadt    76: <a href="plus59.html">5.9</a>,
1.63      deraadt    77: <a href="plus60.html">6.0</a>,
1.21      deraadt    78: <a href="plus.html">current</a>.
1.1       deraadt    79: <br>
                     80:
1.54      deraadt    81: <p>
                     82: <h3><font color="#0000e0">Changes made between OpenBSD 2.2 and 2.3</font></h3>
                     83: <p>
1.1       deraadt    84:
                     85: <ul>
1.23      naddy      86: <li><font color="#e00000"><strong>A security problem due to buffer mismanagement exists in lprm(1). <a href="errata22.html#rmjob">A patch exists</a></strong></font>.
                     87: <li><font color="#e00000"><strong>A security problem due to a buffer overflow exists in uucpd(8) (which is not enabled by default in our releases). <a href="errata22.html#uucpd">A patch exists</a></strong></font>.
1.1       deraadt    88: <li>On the i386, fix installboot(8) so it works reliably on various filesystem layouts that did not work before.
                     89: <li>Support lots of file descriptors in named(8), for when many virtual interfaces exist.
                     90: <li>Fix installboot(8) on the sparc Sun4 models.
                     91: <li>In disklabel(8)'s <strong>-E</strong> mode, set the bootblock sizes so that the hp300 install does not freak out.
                     92: <li>In mktemp(3), repair a bug in the filename incrementing loop.
                     93: <li>Various other install script fixes.
                     94: <li>Fix /etc/fbtab handling in init(8).
                     95: <li>Make disklabel(8) mentions IDE (which is an alias for ESDI).
                     96: <li>For the i386, have the install procedure ask if the xf86 driver should be enabled by default.
1.8       rohee      97: <li>Make install procedure prompt &amp; set the initial root password.
1.1       deraadt    98: <li>When root logs in for the first time, let him find that he has an interesting piece of mail about how the system works.
                     99: <li>Fix ipsec encap notifies.
1.25      deraadt   100: <li>Configure xdm(1) and the fwvm window manager sensibly enough for default users to not feel utterly lost.
1.1       deraadt   101: <li>Fix 'u'ndo support in disklabel(8)'s <strong>-E</strong> mode, and also add a new 'r' command.
                    102: <li>Repair the pkg_add(1) sufficiently for the 2.3 release...
                    103: <li>Fix a race condition in unmount(2).
                    104: <li>Add support for the XR16850 serial chip (128 byte fifos).
                    105: <li>mkisofs 1.11.2
                    106: <li>Disable console ddb by default.  sysctl can re-enable it.
                    107: <li>Fix backtraces in gdb on m68k platforms.
                    108: <li>Support 3c905B (well, actually, our support falls over. We need a card to do further work).
                    109: <li>Modify i386 PS/2 driver to be read/write; this permits new XFree86 source to put mice into advanced modes of operation.
                    110: <li>Remove KTH Kerberos "eavesdropping" message from telnet(1) and telnetd(8).
                    111: <li>Fix bug oflow in ping(8) <strong>-R</strong> option.
                    112: <li>In tar(1), only preserve the uid/gid if the <strong>-p</strong> flag is given.
                    113: <li>sudo version 1.5.5
                    114: <li>Do not prepend /usr/local/bin to the PATH in zdiff(1), zforce(1), zgrep(1), zmore(1), znew(1), or rcsfreeze(1).
                    115: <li>Fix DNS fake-iquery bug.
                    116: <li>In the <strong>le</strong> ethernet driver, if the detected ethernet address is ff:ff:ff:ff:ff ... fail.
                    117: <li>Fixes for various (minor) Y2K problems.
                    118: <li>Switch a.out ports in the tree (sparc, m68k, i386) to use the newer version of gdb that is part of the binutils tree.
                    119: <li>Significantly improve the system install scripts.
                    120: <li>Add disklabel spoofing to the hp300 port.
                    121: <li>Add xlockmore(1) to the X11 tree.
                    122: <li>Fix <strong>ru_majflt</strong> counting in the VM system.
                    123: <li>Add AFS token fetching capability to various parts of the source tree.
                    124: <li>In login(1), handle cleanup of environment variables correctly.
                    125: <li>In ftp(1), for HTTP requests pass the hostname so that virtual hosts work.
                    126: <li>In utimes(2) and futimes(2), handle <strong>tv_sec</strong> values of -1 more carefully, as they are really illegal cases.
                    127: <li>Import <strong>kx</strong> into our X11 source tree.
                    128: <li>Add a <strong>SIOCGIFDATA</strong> ifreq-style ioctl which will get the ifdata informational structure attached to each interface.
                    129: <li>Add httpd(8) to the OpenBSD tree.  It is apache 1.2.6.
                    130: <li>Import <strong>xpm</strong> into our X11 source tree.
                    131: <li>Support QLogic PCI scsi controllers (at least on the i386).
1.4       deraadt   132: <li>Fix rmd160(3) (and also the IPSEC algorithm) to properly handle data beyond its block boundary.
1.1       deraadt   133: <li>Emulate SunOS <strong>otimes(2)</strong> system call so that Netscape doesn't explode.
                    134: <li>Fix rarpd(8) interaction with routed(8); too much routing information would pile up un-read on the AF_ROUTE socket and rarpd(8) would get too grumpy.
                    135: <li>Remove libtelnet.so.* from the distribution.  People compiling kerberos into their system were generating significantly different shared libraries; thus it is wrong to make this a shared library.
1.16      jsyn      136: <li>Make edquota(8) handle numeric names as uids only after checking that an account named so does not exist.
1.1       deraadt   137: <li>Add UID_MAX and GID_MAX to &lt;machine/limits.h&gt; on each architecture.
                    138: <li>Fix ch(4) operation on ncr(4) scsi controllers.
1.37      tobias    139: <li>On the sparc, switch to an alternate font if the console is &lt; 800*600 resolution.
1.1       deraadt   140: <li>Add ISAPNP driver for the 3c509 cards.
                    141: <li>Change <strong>SIOCGIFNETMASK</strong>, <strong>SIOCGIFDSTADDR</strong>, and <strong>SIOCGIFBRDADDR</strong> to return information for named/addressed mappings rather than simply named mappings, so that these calls can work on interface aliases.
                    142: <li>Add (complete?) support for KerberosIV to our X11R6.
                    143: <li>In mktemp(1), document why this should be used for temporary filename generation.
                    144: <li>In telnet(1), fix connecting to IP addresses; this was recently broken by the new KTH kerberos telnet integration.
                    145: <li>Make <strong>-R path</strong> work a well as <strong>-Rpath</strong> in cc(1).
                    146: <li>In the ksh(1) manpage, clarify the behaviour of the <strong>CDPATH</strong> variable.
                    147: <li>Add support for more PCI NE2000 cards.
                    148: <li>Make <strong>%Y</strong> override an earlier <strong>%y</strong> in strptime(3).
                    149: <li>Add support for <strong>atalk</strong> to ifconfig(8).
                    150: <li>Make the functions described in ethers(3) more careful.
                    151: <li>Fix support for VFS loadable kernel modules.
                    152: <li>In get*ent() family of routines in libc, use fgetln(3) instead of fgets(3) so that parsing of overly long lines is more correct.
                    153: <li>Add options(4).  This manpage describes what all the kernel options do.  If you spot an error in it, notify us immediately.
                    154: <li>In strptime(3), make <strong>%C</strong> influence <strong>%y</strong> regardless of ordering.
                    155: <li>Fix a NULL deference bug in make(1) when using the <strong>-j</strong> flag.
                    156: <li>Fix <strong>%m</strong>, <strong>%I</strong>, <strong>%S</strong>, <strong>%y</strong>, <strong>%C</strong>, and <strong>%j</strong>  conversions in strptime(3).
1.9       wvdputte  157: <li>Merge Kirk McKusick's <a href="faq/faq14.html#14.5">soft update</a> code. This code is still experimental and under a non-commercial license.  It will be included in the next release as an optional compile flag; we cannot ship it enabled by default.
1.1       deraadt   158: <li>Flesh out the man pages and explain the security problems behind mktemp(3) and other similar functions, plus explain how to handle these problems better.
                    159: <li>Fully working KerberosIV encryption in telnet(1) and telnetd(8).
                    160: <li>Fixes to a few more games.
                    161: <li>CVS version 1.9.26
                    162: <li>Fix mktemp(3) problems in two more YP tools.
                    163: <li>Fix an interaction bug in inetd(8) due to SIGPIPE blocking; caused a bad effect in rlogind(8) or other inetd(8) children.
                    164: <li>Configure cc(1) to pass the <strong>-R</strong> flag on to ld(1).
                    165: <li>Add lynx 2.8 to the system.
                    166: <li>Add support for 82553 and 82555B PHY in the fxp driver.
                    167: <li>Fix tmpfile(3) to fchown() the file after unlink() (taking umask() into consideration, too).  This is required by standards.
                    168: <li>Fix vnd and ccd drivers to work properly with soft updates.
                    169: <li>Fix a crash case in compress(1).
                    170: <li>Add <strong>-s</strong> and <strong>-c</strong> options to last(1).
                    171: <li>Add support for <strong>-s section</strong> and <strong>-S subsection</strong> to man(1).
                    172: <li>Change the configuration of man(1) so that man4 is read much later; this makes it easier to see pages in man8 with similar names.
                    173: <li>Fix KerberosIV password changing.
                    174: <li>On the sparc, support 128KB lebuffer devices.
                    175: <li>On the sparc, print hotfix information at the right place in the dmesg log.
                    176: <li>Fix passwd(1) so that YP passwords do not get edited in the local password file.
                    177: <li>Significant efforts made at fleshing out the device driver man page tree better.
                    178: <li>Upgrade to gcc 2.8.1
                    179: <li>Rename 2.2 to 2.3 tree-wide, for the upcoming release.
                    180: <li>Improve IPSEC performance.
                    181: <li>Add many new machine-dependent man4 man pages.
                    182: <li>XFree86 3.3.2 is now in our X11 source tree.
                    183: <li>Add another missing ntohl() in ipnat(8).
                    184: <li>Use a p_os field to sub-divide operating system emulation capabilities (like for SVR4 binaries).
                    185: <li>Spend almost a week finding and fixing minor goobers discovered by gcc 2.8 throughout the source tree.
                    186: <li>Fix syslog(3) sockaddr initialization.
                    187: <li>Add support for <strong>TIOCM*</strong> family of ioctl(2) values to the sparc serial driver.
                    188: <li>New photurisd(8) that complies with <strong>draft-simpson-photuris-18.txt</strong>.
                    189: <li>Fix a race bug in mkstemp(3) itself that would make mkstemp(3) have occasionally fail strangely.
                    190: <li>Fix a few more mktemp(3) problems in f77 libraries, and other assorted GNU software.
                    191: <li>Upgrade to gcc 2.8.0
                    192: <li>Upgrade to libg++ 2.8.0
                    193: <li>Make ping(8) work with very large packet sizes on all types of interfaces.
                    194: <li>Correct behaviour <strong>-x</strong> and <strong>-p</strong> flags in tar(1) to be traditional.
                    195: <li>Remove one of the two copies of math.h in the source tree.
                    196: <li>Improve blowfish performance by a factor of 2, and hence increase the rounds by 1 in passwd.conf.
                    197: <li>Handle unknown hostnames in mountd(8) better.
                    198: <li>Inside the kernel, change struct file's members f_count and f_msgcount to longs, and then add checking for overflows as well.
                    199: <li>Add XDM-AUTHORIZATION to X11.
                    200: <li>In old gas, move to late resolution of symbols because gcc 2.8 will require this.
                    201: <li>Fix a configuration file parsing bug in ipf(8).
                    202: <li>In libpcap and tcpdump, use our system ethers(5) parsing routines.
                    203: <li>Make <strong>netstat -r</strong> report better information about non-standard netmasks.
                    204: <li>Fix some bugs in the 3c[59]xx device driver.
1.23      naddy     205: <li><font color="#e00000"><strong>The 3rd revision of the patch for the mmap() security problem is available, and <a href="errata22.html#mmap">has been placed on top of the 2nd revision</a></strong></font>.
1.1       deraadt   206: <li>Add a command to ddb that reports out the extent tables.
                    207: <li>Add a clarifying statement to all the Kerberos code that explains how it came to be that this code was released from the USA's crypto stranglehold.
                    208: <li>In the RPC code, ensure that __svc_fdsetsize is always manipulated as a bitcount.
                    209: <li>Clarify crypt(3) manpage as to how many characters each transform actually considers in its calculation.
                    210: <li>Do not permit TCP connections to any of the broadcast addresses.
                    211: <li>Do not let a user set their password to "s/key".
                    212: <li>Permit the disabling of skey system-wide.
                    213: <li>Convert the xdr(3) and rpc(3) manpages to mandoc format.
                    214: <li>In mail.local(8), document how to use quotas on a mail spool.
                    215: <li>Add <strong>-p</strong> option to uname(1), to display detailed CPU information.
                    216: <li>Support for the ST16650 32-byte FIFO uart.
                    217: <li>Do not copy from off the end of an nfs boot mbuf.
                    218: <li>Some more repair in the games.
                    219: <li>Support <strong>-rpath dir</strong>, <strong>-shared</strong>, <strong>-soname</strong>, <strong>--whole-archive</strong>, and <strong>--no-whole-archive</strong> in the old ld used on many of our platforms.
                    220: <li>CVS version 1.9.24
                    221: <li>For OLF/ELF binaries, remember the OS tag in execve(), so that emulation code can reference it later.
                    222: <li>Make the kernel compile properly (with full warnings) under gcc 2.8.
1.23      naddy     223: <li><font color="#e00000"><strong>Do not permit a read+write mmap() operation on a read-only file descriptor open on a device.  This is a security problem in OpenBSD 2.2, and is <a href="errata22.html#mmap"> described and fixed with a patch</a></strong></font>.
1.1       deraadt   224: <li>Rename /etc/nat.rules to /etc/ipnat.rules.
                    225: <li>Add kerberos kauthd(8).
1.15      pvalchev  226: <li>On the i386, move XFree86 aperture driver into the kernel.  The new sysctl(8) variable <strong>machdep.allowaperture</strong> decides if this driver is active or not.  (This variable can only be modified at high securelevel).
1.1       deraadt   227: <li>Remove the ftp(1) `stdout redirection' hack and replace it with a <strong>-o filename</strong> option (which also understands a filename of "-" to mean stdout).
                    228: <li>Pull in all the NetBSD changes to the old version of gas over the last year or so.
                    229: <li>Fix two bugs in adduser(8).
                    230: <li>Change chflags(2) and fchflags(2) to take a u_int for the second parameter.
1.23      naddy     231: <li><a href="ftp://ftp.openbsd.org/pub/OpenBSD/tools/openbsdpower.gif">New fancy OpenBSD logo for your use</a>.
1.1       deraadt   232: <li>Add XPG4 <strong>-r</strong> option to du(1).
                    233: <li>Support <strong>-[width]</strong> option in fmt(1).
                    234: <li>New quirk for another Archive VIPER scsi tape drive.
                    235: <li>Fix another signal handler bug in mail(1).
1.23      naddy     236: <li><font color="#e00000"><strong>The mac68k 2.2 CD release had a few problems. These problems have been resolved in the FTP release. <a href="errata22.html#mac68k">For more details...</a></strong></font>
1.1       deraadt   237: <li>Make lpd(8) use keepalives so that it can detect dead network printers.
                    238: <li>Support the WINBOND pci ethernet cards.
                    239: <li>Fixed "%c" in strftime(3).
                    240: <li>Various fixes to some of the games, ie. rain, worms, wump.
                    241: <li>If <strong>link0</strong> is set on a loopback interface (ie. lo1) make the address/netmask sets on it make supernets instead of subnets.
1.4       deraadt   242: <li>Place separate so_ruid and so_euid fields in struct socket, so that in_pcb.c can still do its job, but also so that identd(8) can be fast and return the proper uid.
1.23      naddy     243: <li><font color="#e00000"><strong>In the sparc 2.2 release, the SS4/SS5 kernel was not very reliable.  <a href="errata22.html#sparciommu">A simple reliability patch is now available</a></strong></font>.
1.1       deraadt   244: <li>Fix a map corruption bug in ypxfr(8).
                    245: <li>Make stty(1) recognize STRIPDISC.
                    246: <li>In compress(1), if the st_flags is 0, do not attempt a chflags(2) call.
1.23      naddy     247: <li><font color="#e00000"><strong>Make ruserok() significantly more paranoid when parsing the .rhosts file.  This along with another issue is a security problem in OpenBSD 2.2, and is <a href="errata22.html#ruserok"> described and fixed with a patch</a></strong></font>.
1.1       deraadt   248: <li>raise IPPORT_USERRESERVED significantly. Random port numbers will now look much more random than they did before.
                    249: <li>New <strong>-a logdev</strong> argument for syslogd(8), useful for setting up additional /dev/log devices in various chroot spaces.
                    250: <li>Permit restore(8) to work on a filesystem that has a basic blocksize smaller than the blocksize of the filesystem that was dumped.
                    251: <li>Make MIPS ldconfig emulate the <strong>-m</strong> flag better.
                    252: <li>The web pages now have a new section on <a href=security.html> security advisories</a>.
                    253: <li>New compat_ibcs2(8) manpage.
                    254: <li>Fix rarpd(8) to work properly in the presence of massive routing traffic.
                    255: <li>A start at full lint library support.
                    256: <li>smtpd(8) integration spiffied up. Everything you need is now in the system.
                    257: <li>Emulate that disgusting linux connect() braindamage even better.
                    258: <li>Fix some bugs in vacation(1).
                    259: <li>Fix /etc/yp/domainname support in ypbind(8).
1.23      naddy     260: <li><font color="#e00000"><strong>In the 2.2 release, the sparc scsi driver caused problems for the Sun 4/300 machines. <a href="errata22.html#sparc">Patches are now available</a></strong></font>.
1.1       deraadt   261: <li>Add <strong>FS_CCD</strong> partition type so that the ccd driver can ensure it has the right components.
                    262: <li>Add <strong>/etc/sysctl.conf</strong> which specifies sysctl variables to change at boottime.
                    263: <li>Fix a free page count bug in the vm system.
                    264: <li>Create two new sysctl options: <strong>ddb.panic</strong> decides whether the kernel should enter ddb when it panics, and <strong>ddb.console</strong> controls if it is possible to enter ddb from the console via a hot-key.
                    265: <li>Add scan_ffs(8), a very useful tool for reconstructing disks.
                    266: <li>Add strptime(3).
1.23      naddy     267: <li><font color="#e00000"><strong>Buffer overflow fix in the MIPS ld.so. Replacement binaries for the <a href="errata22.html#pmax">pmax</a> and <a href="errata22.html#arc">arc</a> platforms are available</strong></font>.
1.1       deraadt   268: <li>Avoid DNS lookup timing effects in ping -R.
                    269: <li>Fix the __{CTOR,DTOR}_LIST__ declarations in c++rt0.c
1.23      naddy     270: <li><font color="#e00000"><strong>Two bugs existed in the 2.2 pmax release which all users should be aware of.  <a href="errata22.html#pmax">Patches are now available</a></strong></font>.
                    271: <li><font color="#e00000"><strong>Be more careful about sourcerouted packets, including never forwarding them.  This is a security problem in OpenBSD 2.2, and is <a href="errata22.html#sourceroute"> described and fixed with a patch</a></strong></font>.
1.1       deraadt   272: <li>Teach the kernel about newer PCI device types.
                    273: <li>Workaround a race condition in syslogd's handling of SIGHUP.
                    274: <li>Some man page fixes so that <strong>man -k</strong> is happier.
                    275: <li>Low-memory bug fix in setenv(3).
                    276: <li>Self-extending kernel maps in the vm subsystem.
                    277: <li>In rc.local, bail on starting cfsd(8) if mountd(8) is not running.
                    278: <li>Require commands started from in /etc/rc to be executable -- not just readable.
                    279: <li>Glob extensions for XPG4.
                    280: <li>Cleanups in wump(6).
                    281: <li>Check both old and new shells in rpc.yppasswdd(8).
                    282: <li>Add <strong>-a</strong> flag to which(1).
                    283: <li>On binutils platforms, make ldd(1) work on static executables.
                    284: <li>IPF 3.2.3.  When you upgrade to this version, you <strong>must</strong> also upgrade the userland utilities (ipf, ipnat, etc.).  You also need to get the latest MAKEDEV and run "sh MAKEDEV ipl" in /dev to create new device entries.
                    285: <li>Fix a race in mkdir(1).
1.16      jsyn      286: <li>More cdrom ioctls in Linux emulation.
1.1       deraadt   287: <li>Fix select(2) use in sudo(8) so that it can handle large fd_set sizes.
                    288: <li>In termcap databases, map the keyboard backspace key to DEL instead of BS as that is how it really is.
                    289: <li>Fix argument handling in expand(1).
                    290: <li>If tar(1) extracts as root, preserve uid/gid as is traditional.
                    291: <li>Repaired the expansion of the kernel panic string.
                    292: <li>Much more complete KerberosIV documentation.
                    293: <li>Start at bus_dma support.
                    294: <li>Properly error out if yp_match() or yp_first() is asked to lookup long keys.
                    295: <li>Groff 1.11a
                    296: <li>Properly ignore whitespace between a conversion and %n in *scanf(3).
                    297: <li>Import of tzcode1998b and tzdata1998b.
                    298: <li>Use new ypwhich(1) flag in ypinit(8) script to get maps from the real master server.
                    299: <li>Support <strong>-h host</strong> flag to ypwhich(1).
                    300: <li>pppd 2.3.3
                    301: <li>Handle unparseable ulimit specifications as an error, not as the value 0.
                    302: <li>ncurses 4.1-980103
                    303: <li>In w(1), handle processes that set argv[0] to NULL, by printing p_pcomm.
                    304: <li>Make pkg_install(1) feed a -p option to tar.
                    305: <li>sudo version 1.5.4.
                    306: <li>Merge some slight standardization fixes for *printf(3) from FreeBSD (some unlikely cases get handled better).
                    307: <li>Bring gethostent() back to life, even though it is a bad interface.
                    308: <li>In disklabel(8), make IDE drive type handling more obvious and intuitive.
                    309: <li>Support all kinds of keyboards in pcvt, like pccons does.
                    310: <li>Support for FAT32 partitions.
                    311: <li>For scsi tape drives, be silent in the presence of ILI errors.
                    312: <li>Fix a vnode creation race.
                    313: <li>Fix a output error in finger(1).
1.28      deraadt   314: <li>Do not permit dumping corefiles over symbolic links. (We have wanted this changed for a long time, but it required Lite2 vfs.)
1.1       deraadt   315: <li>Permit extra / terminators in some path-based system calls.
1.15      pvalchev  316: <li>Fix some problems regarding transfer of secure yp maps.
1.1       deraadt   317: <li>New rc.conf(7) manpage.
                    318: <li>Make sure it is clear that so_linger is in seconds.
                    319: <li>Add sysctl net.inet.icmp.bmcastecho to block the smurf problem.
                    320: <li>Some fixes to fdisk(8) and disklabel(8).
                    321: <li>Workaround a problem that happens if a TCP socket is shutdown(2)'d more than once.
                    322: <li>Some more manpage cleanups.
                    323: <li>Some slight changes to the PCI device subsystem to make it probe devices nicer (mostly dmesg printing).
                    324: <li>Make md5(1), rmd160(1), and sha1(1) use getopt().
                    325: <li>Make {f,}chflags(.., -1) return error EINVAL.
                    326: <li>Make mmap() return void * instead of caddr_t, and add the MAP_FAILED define required by new standards.
                    327: <li>Fix some gzip buf oflows.
                    328: <li>Correct an splx botch in the tunnel driver.
                    329: <li>Add sysctl ddb.panic_ddb; indicates whether to drop into ddb on a panic.
                    330: <li>Swap quit and exit commands in fdisk.
                    331: <li>Correct exit code of nohup(1).
1.11      deraadt   332: <li>lockf() implementation.
1.1       deraadt   333: <li>Handle DST changeovers automatically in cron.
                    334: <li>IBCS2 emulation also requires fcntl() F_FREESP support.
                    335: <li>The new KTH KerberosIV integration (and security audit) is almost complete.
                    336: <li>If mountd(8) discovers getfh(2) not supported, it now aborts nicely.
                    337: <li>Support fcntl() GETLK,SETLK,UNLK variants in SunOS emulation.
                    338: <li>Fix a bug in make(1) regarding SYSV style : substitution on null variables.
                    339: <li>Check the values of the ftp PORT command even more carefully.
                    340: <li>Fail better for over-long usernames.
                    341: <li>Change ftp(1) so that tries to use passive mode, and falls back to active mode.  Provide environment variables to fall back.  This is incredibly cool.
                    342: <li>Provide workaround for the Cyrix 6x86 COMA bug.  (A workaround for 2.2 is not available).
                    343: <li>Implement fcntl() of F_FREESP in SVR4 emulation. Does this belong in ibcs2 also?
                    344: <li>Fix Linux accept/recvmsg if kernel is compiled with other compat options.
                    345: <li>In numerous programs, avoid fd_set overflows.
                    346: <li>Fix MAKEDEV script regarding /dev/fd/* for some architectures.
                    347: <li>Fix a kernel bug related to "route change ...".
                    348: <li>Support IP_HDRINCL in Linux emulation.
                    349: <li>Update the pkg_* tools a bit.
                    350: <li>Honour TMPDIR in the locate(8) tools.
                    351: <li>Make route(8) non-setuid.
                    352: <li>In ftpd, default to RFC non-conforming behaviour for the PORT command, but provide a runtime switch for those who like holes.
                    353: <li>Addition of Obtuse smtpd(8) and smtpfwd(8) v2.0.
1.23      naddy     354: <li><font color="#e00000"><strong>Due to timing constraints, mac68k X11 binaries did not make it onto the 2.2 CDROM. <a href="errata22.html#mac68k">But it is now available for ftp</a></strong></font>.
1.1       deraadt   355: <li>Do not clear the setuid/setgid file mode bits for a call to {,f,l}chmod(-1, -1).
                    356: <li>Enable new FreeBSD ppp(8) daemon.  There are now two ppp daemons in the source tree, they have quite different feature sets.
1.23      naddy     357: <li><font color="#e00000"><strong>Fixed a panic problem in the i386 apm driver. <a href="errata22.html#i386">A patch is available for 2.2</a></strong></font>.
1.1       deraadt   358: <li>Repair a number of retry operation problems in the wdc driver that mostly affected sleeping laptops.
                    359: <li>Handle the controlling tty ioctl in linux emulation.
                    360: <li>Handle SIOCGIFMETRIC and SIOCGIFMTU in linux emulation.
                    361: <li>Handle nanosleep() in linux emulation.
1.8       rohee     362: <li>Use recursive vnode locks to solve a page-in panic reported by chuck &amp; chuck.
1.1       deraadt   363: <li>Handle SIOCGIFHWADDR ioctl in linux emulation.
                    364: <li>Handle the cdrom ejecting ioctl in linux emulation.
                    365: <li>Correct an XPG violation in stdlib.h.
                    366: <li>Fix a problem in -current regarding open() of O_TRUNC and O_SHLOCK.
                    367: <li>Fix numerous problems with new KTH kerberos.
1.23      naddy     368: <li><font color="#e00000"><strong>A workaround for the Intel P5 F00F lockup problem. <a href="errata22.html#i386">A patch is available for 2.2</a></strong></font>.
1.1       deraadt   369: <li>Fix minor numbers for /dev/ch* in the MAKEDEV scripts.
                    370: <li>Add a <strong>kern.nosuidcoredump</strong> sysctl.
                    371: <li>Enhance the performance of pwd_mkdb(8) by expanding the db(3) cache based on input filesize.
                    372: <li>Use <strong>cp -R</strong> instead of <strong>cp -r</strong> for local copies in rcp(1).
                    373: <li>Flesh out scsi(8) a tiny bit more.
                    374: <li>In linux compat, handle the CDROM ioctl() calls.
                    375: <li>Indicate connect direction for tcp sockets in fstat(1).
                    376: <li>Fix scsi CDIOCREADSUBCHANNEL.
1.37      tobias    377: <li>Prevent ipf/ipnnat configuration changes when securelevel &gt; 1.
1.1       deraadt   378: <li>Fix an overflow in top(1).
                    379: <li>Fix a deadlock on cd9660.
                    380: <li>Update to ncurses-4.1-971129
1.23      naddy     381: <li><font color="#e00000"><strong>On the i386, handle the nasty problem with distinguishing SVR4 and Linux binaries. <a href="errata22.html#i386">A patch is available for 2.2</a></strong></font>.
1.1       deraadt   382: <li>Newer ncr device driver.
                    383: <li>Fix SunOS emulation of TIOCGPGRP.
                    384: <li>Add some more XPG4.2 *_t types.
                    385: <li>Import perl 5.004_04.
                    386: <li>Add hosts.equiv(3) and .rhosts(3) man page.
                    387: <li>Add asprintf(3) and vasprintf(3).
                    388: <li>Fix /etc/rc scripts to require IPF if NAT is requested.
                    389: <li>Moving towards KTH kerberos 4-0.9.7.
                    390: <li>Fix <strong>-amin</strong> option in find(1).
                    391: <li>Fix arp(8) ethernet address parsing for the illegal cases.
                    392: <li>Massive performance optimization of the ccd device (RAID-like striping disk driver).
                    393: <li>Work around stupid linux emulation behaviour involving non-blocking connect(2).
                    394: <li>Update to ncurses 4.1.
                    395: <li>Fix a mget prompting error in ftp(1).
                    396: <li>add <strong>-t</strong> option to disklabel(8).
                    397: <li>Some man page cleanups.
                    398: <li>Fix a memory leak in the kernel process group manipulation code.
                    399: <li>Import of FreeBSD's ppp(8) program.
                    400: <li>Update sudo(8).
                    401: <li>Fixed bug in 'systat vm' output.
                    402: <li>Fix the internals of open(2) when O_TRUNC and either O_SHLOCK or O_EXLOCK are set.  (That was a nasty kernel bug).
                    403: <li>Clean /var earlier in the /etc/rc script.
1.23      naddy     404: <li><font color="#e00000"><strong>make readlink(1) terminate its buffer correctly. <a href="errata22.html#all">This affects CDROM builds so a patch is available for 2.2</a></strong></font>.
1.1       deraadt   405: <li>Make fstat(2) on AF_UNIX socket return proper st_[acm]time field values.
                    406: <li>Implement FIONBIO in ibcs2 emulation code.
                    407: <li>Consider only the 0177777 bits of the umask(2) value, as documented.
                    408: <li>Added mode rangecheck in chmod(2) and fchmod(2).
                    409: <li>Fix some Y2K problems in the nroff tmac macros.
                    410: <li>Minor logging feature changes in fingerd(8).
                    411: <li>in chat(8), replace Mini Getopt from hell with real getopt().
                    412: <li>Add <strong>SHUT_RD</strong>, <strong>SHUT_WR</strong>, and <strong>SHUT_RDWR</strong> values for shutdown(2) as specified by XPG4.2.
                    413: <li>Make the <strong>-Ss</strong> flag in rpcgen(1) work right.
                    414: <li>Range-check the "how" argument for shutdown(2).
                    415: <li>Change various system calls to take void * instead of caddr_t.
                    416: <li>Fix a line continuation bug in sed(1).
                    417: <li>Add inetd(8) <strong>-R rate</strong> flag, and crank default rate to 256.
                    418: <li>Clear CLOCAL mode in pppd if modem is set but modem_chat is not.
                    419: <li>Make the if_de driver support more cards.
                    420: <li>Make msync(2) POSIX compliant.
                    421: <li>Fix a ONLCR + FLUSHO situation in tty.c
                    422: <li>Support -mmin, -amin, and -cmin in find(1).
                    423: <li>Support an "object" keyword in config(8).
                    424: <li>Make "expr a : /" work.
                    425: <li>Make dumpfs(8) report if soft updates are requested by the superblock.
                    426: <li>Add getsid(2) system call as mandated by XPG4.2.
                    427: <li>Some minor fixes for the libc/db/btree code.
                    428: <li>Flesh out compat_freebsd a fair bit more.
                    429: <li>Some compat_svr4 fixes.
                    430: <li>Update getNAME(8) and fix makewhatis(8) to use it more optimally.
                    431: <li>Fix EXTPROC in pty code.
                    432: <li>Correct TCP's handling of RST.
                    433: <li>Add more things to afterboot(8).
                    434: <li>Fix tty suspend during <strong>sh -c "less file"</strong>.
                    435: <li>double MAX_KMAPENT and MAX_KMAP
                    436: <li>sendmail 8.8.8
                    437: <li>add uu_lock(), uu_unlock() and uu_lockerr() to libutil.
                    438: <li>Start named(8) earlier in /etc/rc.
                    439: <li>Support execution sections in syslog.conf.
                    440: <li>4.4BSD lite2 vfs integration.
                    441: <li>usleep(3) returns int, and add useconds_t type as required by XPG4.2
                    442: <li>Fixed ps(1) LIM and STAT columns.
                    443: <li>makewhatis(8) manpage added.
                    444: <li>Fix rpc.rquotad support if the quotas file resides on another filesystem.
                    445: <li>Truncate large uid and gid values in ranlib(1), in the same way as this is handled in ar(1).
                    446: <li>Document how crypt(3) handles blowfish and MD5 passwords.
                    447: <li>Fix some memory leaks in the RPC code.
                    448: <li>Fix an as(1) parsing bug relating to the .ascii directive.
                    449: <li>Handle C++ and other languages in yacc(1) far better.
                    450: <li>Be more careful with getpwent() information inside rcp(1).
                    451: <li>Replace kernel printf with Torek's libc printf.
                    452: <li>Make disklabel -E deal with multiple partitions which overlap.
1.16      jsyn      453: <li>If a non-existent user logs in and asks for s/key authentication, fake a proper s/key prompt.
1.1       deraadt   454: <li>SIGWINCH handling in systat(1).
                    455: <li>Add blowfish and cast encryption to IPSEC.
                    456: <li>In tftpd(8), permit syslog() to work when running chroot(2)'d.
                    457: <li>a buffer underrun in ctags(1).
                    458: <li>Make kdump(1) handle the newer emulations.
                    459: <li>Add svr4 jioctl() compat interface.
                    460: </ul>
                    461: <p>
                    462:
                    463: </body>
                    464: </html>