version 1.64, 2019/04/08 16:14:53 |
version 1.65, 2019/05/27 22:55:22 |
|
|
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"> |
<!doctype html> |
<html> |
<html lang=en id=plus> |
<head> |
<meta charset=utf-8> |
<title>OpenBSD 2.5 Changelog</title> |
<title>OpenBSD 2.5 Changelog</title> |
<meta name="description" content="OpenBSD 2.5 changes"> |
<meta name="description" content="OpenBSD 2.5 changes"> |
<meta name="copyright" content="This document copyright 1996-1999 by OpenBSD."> |
|
<meta name="viewport" content="width=device-width, initial-scale=1"> |
<meta name="viewport" content="width=device-width, initial-scale=1"> |
<link rel="stylesheet" type="text/css" href="openbsd.css"> |
<link rel="stylesheet" type="text/css" href="openbsd.css"> |
<link rel="canonical" href="https://www.openbsd.org/plus25.html"> |
<link rel="canonical" href="https://www.openbsd.org/plus25.html"> |
</head> |
<style> |
|
strong { |
|
color: var(--red); |
|
} |
|
|
<body bgcolor="#ffffff" text="#000000" link="#23238E"> |
h3 { |
|
color: var(--blue); |
|
} |
|
|
<h2> |
p strong { |
|
font-weight: normal; |
|
} |
|
|
|
code { |
|
font-family: serif; |
|
font-weight: bolder; |
|
} |
|
</style> |
|
|
|
<h2 id=OpenBSD> |
<a href="index.html"> |
<a href="index.html"> |
<font color="#0000ff"><i>Open</i></font><font color="#000084">BSD</font></a> |
<i>Open</i><b>BSD</b></a> |
<font color="#e00000">2.5 Changelog</font> |
2.5 Changelog |
</h2> |
</h2> |
<hr> |
<hr> |
|
|
|
|
changes, starting with those listed below.. |
changes, starting with those listed below.. |
|
|
<p> |
<p> |
Note: <font color="#e00000">Problems for which patches exist are marked in red</font>. |
Note: <strong>Problems for which patches exist are marked in red</strong>. |
|
|
<p> |
<p> |
For changes in other releases, click below:<br> |
For changes in other releases, click below:<br> |
|
|
<br> |
<br> |
|
|
<p> |
<p> |
<h3><font color="#0000e0">Changes made between OpenBSD 2.4 and 2.5</font></h3> |
<h3>Changes made between OpenBSD 2.4 and 2.5</h3> |
<p> |
<p> |
|
|
<ul> |
<ul> |
<li>2.5 source tree frozen. |
<li>2.5 source tree frozen. |
<li><font color="#e00000"><strong>Fix ln kernel bug in vfs_lookup.c. <a href="errata24.html#lnpanic">A patch is available</a></strong></font>. |
<li><strong>Fix ln kernel bug in vfs_lookup.c. <a href="errata24.html#lnpanic">A patch is available</a></strong>. |
<li>Fix ipf return-rst panic bug. |
<li>Fix ipf return-rst panic bug. |
<li>Add a -q flag to newfs, so that it does not print out information about the superblock backups. This is used by the install process. |
<li>Add a -q flag to newfs, so that it does not print out information about the superblock backups. This is used by the install process. |
<li>Do not permit any IPSEC code unless the admin has enabled it using sysctl. |
<li>Do not permit any IPSEC code unless the admin has enabled it using sysctl. |
|
|
<li>Workaround sun4m STP1020A errata #148494 regarding cache initialization. |
<li>Workaround sun4m STP1020A errata #148494 regarding cache initialization. |
<li>In ipsend(8), do not crash if no options provided. |
<li>In ipsend(8), do not crash if no options provided. |
<li>Various powerpc fixes, including further PIC support, and fix a kernel pmap crash. |
<li>Various powerpc fixes, including further PIC support, and fix a kernel pmap crash. |
<li><font color="#e00000"><strong>SECURITY ISSUE: In poll(2), constrain the <strong>nfds</strong> parameter better, so that kvm starvation is less likely. <a href="errata24.html#poll">A patch is available</a></strong></font>. |
<li><strong>SECURITY ISSUE: In poll(2), constrain the <code>nfds</code> parameter better, so that kvm starvation is less likely. <a href="errata24.html#poll">A patch is available</a></strong>. |
<li>Make at(1) easier to use next year (ie. Y2K issue). |
<li>Make at(1) easier to use next year (ie. Y2K issue). |
<li><font color="#e00000"><strong>SECURITY ISSUE: Fix TSS fault handling. <a href="errata24.html#tss">A patch is available</a></strong></font>. |
<li><strong>SECURITY ISSUE: Fix TSS fault handling. <a href="errata24.html#tss">A patch is available</a></strong>. |
<li>In the ncr(4) driver, disable tagged queuing by default. Our filesystems and vfs layer is not prepared for this play-it-loose behaviour. |
<li>In the ncr(4) driver, disable tagged queuing by default. Our filesystems and vfs layer is not prepared for this play-it-loose behaviour. |
<li>Repair <strong>ypwhich -h</strong> support; it was broken when running on non-server machines. |
<li>Repair <code>ypwhich -h</code> support; it was broken when running on non-server machines. |
<li>Add non-learning and non-discovery modes to the bridging code. |
<li>Add non-learning and non-discovery modes to the bridging code. |
<li>Many more man page fixes. |
<li>Many more man page fixes. |
<li>Do not allow users to mount umapfs, even if root chooses to permit kern.usermount activity. |
<li>Do not allow users to mount umapfs, even if root chooses to permit kern.usermount activity. |
|
|
<li>Various changes to the ssl install, so that /etc/ssl contains nicer default files. |
<li>Various changes to the ssl install, so that /etc/ssl contains nicer default files. |
<li>Various disklabel(8) improvements and bug fixes, so that our 2.5 release will be easier to install. |
<li>Various disklabel(8) improvements and bug fixes, so that our 2.5 release will be easier to install. |
<li>Bug fixes to the tx(4) driver. |
<li>Bug fixes to the tx(4) driver. |
<li>In /etc/daily, do /tmp pruning with a <strong>find -x</strong> so that sub-mounts do not get trashed. |
<li>In /etc/daily, do /tmp pruning with a <code>find -x</code> so that sub-mounts do not get trashed. |
<li>Add a f.startwm function to twm(1), so that it can start other window managers. |
<li>Add a f.startwm function to twm(1), so that it can start other window managers. |
|
|
<li>On sparc cypress CPUs, do write-through instead of write-back caching. |
<li>On sparc cypress CPUs, do write-through instead of write-back caching. |
|
|
<li>Fix an NFS bug which previously caused free()'ing of negative lengths. |
<li>Fix an NFS bug which previously caused free()'ing of negative lengths. |
<li>ncurses-4.2-990314 |
<li>ncurses-4.2-990314 |
<li>In disklabel(8), permit "delete *". |
<li>In disklabel(8), permit "delete *". |
<li>Make <strong>ifa_refcnt</strong> a u_int, because of very large routing tables. |
<li>Make <code>ifa_refcnt</code> a u_int, because of very large routing tables. |
<li>Kernel scheduler performance improvement. |
<li>Kernel scheduler performance improvement. |
<li>Numerous more man page repairs. |
<li>Numerous more man page repairs. |
<li>A start at powerpc PIC support. |
<li>A start at powerpc PIC support. |
|
|
<li>Man page clarifications for strncpy(3) and strncat(3), which people continue to misuse. |
<li>Man page clarifications for strncpy(3) and strncat(3), which people continue to misuse. |
<li>Fix another ipsec bug. |
<li>Fix another ipsec bug. |
<li>More bridge(4) tweaks. |
<li>More bridge(4) tweaks. |
<li>Support <strong>--</strong> argument separator in less(1). |
<li>Support <code>--</code> argument separator in less(1). |
<li>Merge cap_mkdb(1) and info_mkdb(1). |
<li>Merge cap_mkdb(1) and info_mkdb(1). |
<li>Fix RAMDISK sizing problems on i386, alpha, and sparc. |
<li>Fix RAMDISK sizing problems on i386, alpha, and sparc. |
<li>Fix a DNS stall problem in login(1), related to AFS. |
<li>Fix a DNS stall problem in login(1), related to AFS. |
|
|
<li>Fix uninitialized variable bug in install(1). |
<li>Fix uninitialized variable bug in install(1). |
<li>Implement RFNOWAIT with the exact same semantics as Plan9. |
<li>Implement RFNOWAIT with the exact same semantics as Plan9. |
<li>Track SATYPE regs per PFKEY socket. |
<li>Track SATYPE regs per PFKEY socket. |
<li>Fix skeyinit(1) <strong>-n</strong> without an argument. |
<li>Fix skeyinit(1) <code>-n</code> without an argument. |
<li>Fix some panic cases in raidframe(4). |
<li>Fix some panic cases in raidframe(4). |
<li>Fix NFS3 NFS3ERR_JUKEBOX panic bug. |
<li>Fix NFS3 NFS3ERR_JUKEBOX panic bug. |
<li>Some ipsec error return patches. |
<li>Some ipsec error return patches. |
|
|
<li>led driver support for Sun4 machines. |
<li>led driver support for Sun4 machines. |
<li>Revamp some bridge(4) ioctls. |
<li>Revamp some bridge(4) ioctls. |
<li>Add mod_ssl 2.2.3 support to apache 1.3.4. |
<li>Add mod_ssl 2.2.3 support to apache 1.3.4. |
<li>Rename disklabel <strong>-p</strong> flag to <strong>-d</strong>, and document for the first time. |
<li>Rename disklabel <code>-p</code> flag to <code>-d</code>, and document for the first time. |
<li>apache 1.3.4 |
<li>apache 1.3.4 |
<li>cvs 1.10.5 |
<li>cvs 1.10.5 |
<li>Incorporate extensive configuration work done on egcs, into our gcc tools. |
<li>Incorporate extensive configuration work done on egcs, into our gcc tools. |
<li>Fix infinite recursion bug in libkafs, which hit during login(8) if DNS was dead. |
<li>Fix infinite recursion bug in libkafs, which hit during login(8) if DNS was dead. |
<li>On boot media, if swapon(8) exists on the install floppy, attempt to add swap early during install. |
<li>On boot media, if swapon(8) exists on the install floppy, attempt to add swap early during install. |
<li>Rename OpenBSD 2.4 to OpenBSD 2.5 -- we are moving into `release mode'. |
<li>Rename OpenBSD 2.4 to OpenBSD 2.5 -- we are moving into 'release mode'. |
<li>Divide by zero bugfix to netstat(1). |
<li>Divide by zero bugfix to netstat(1). |
<li>Some fixes to the pkg_*(8) tools. |
<li>Some fixes to the pkg_*(8) tools. |
<li>Add more isapnp card identifiers. |
<li>Add more isapnp card identifiers. |
|
|
<li>Move ls(1) into ftpd(8).. directly. |
<li>Move ls(1) into ftpd(8).. directly. |
<li>In setproctitle(3), if sysctl(2) fails do not crash. |
<li>In setproctitle(3), if sysctl(2) fails do not crash. |
<li>Constify getcap(3) API. |
<li>Constify getcap(3) API. |
<li><font color="#e00000"><strong>For the i386, fix /boot argument mapping. <a href="errata24.html#bootargv">A patch is available</a></strong></font>. |
<li><strong>For the i386, fix /boot argument mapping. <a href="errata24.html#bootargv">A patch is available</a></strong>. |
<li>Put skipjack in libc. |
<li>Put skipjack in libc. |
<li>Continue squishing new bugs in new ipsec PF_KEY code... |
<li>Continue squishing new bugs in new ipsec PF_KEY code... |
<li>Fix autosetting of d_type and _dtypename in wd(4). |
<li>Fix autosetting of d_type and _dtypename in wd(4). |
<li><font color="#e00000"><strong>SECURITY ISSUE: Fix the nlink overflow in FFS and EXT2FS. <a href="errata24.html#nlink">A patch is available</a></strong></font>. |
<li><strong>SECURITY ISSUE: Fix the nlink overflow in FFS and EXT2FS. <a href="errata24.html#nlink">A patch is available</a></strong>. |
<li>Add zegrep(1) and zfgrep(1). |
<li>Add zegrep(1) and zfgrep(1). |
<li>Change IPSEC stack to support PFKEYv2. |
<li>Change IPSEC stack to support PFKEYv2. |
<li>PentiumIII detection. |
<li>PentiumIII detection. |
|
|
<li>Better promisc and multicast handling in sparc hme(4). |
<li>Better promisc and multicast handling in sparc hme(4). |
<li>Fix an rdist(8) bug. |
<li>Fix an rdist(8) bug. |
<li>Handle powered-down xl(4) cards better. |
<li>Handle powered-down xl(4) cards better. |
<li><font color="#e00000"><strong>SECURITY ISSUE: Fix an overflow in ping(8). <a href="errata24.html#ping">A patch is available</a></strong></font>. |
<li><strong>SECURITY ISSUE: Fix an overflow in ping(8). <a href="errata24.html#ping">A patch is available</a></strong>. |
<li>In fork(2), always spare 5 last processes for root. |
<li>In fork(2), always spare 5 last processes for root. |
<li>Better vis(3) support in savecore(8). |
<li>Better vis(3) support in savecore(8). |
<li>Quiet apm(4) and add machdep.apmwarn sysctl. |
<li>Quiet apm(4) and add machdep.apmwarn sysctl. |
|
|
<li>Add -x, -p, and -m options to ls(1). |
<li>Add -x, -p, and -m options to ls(1). |
<li>In ld(1) and ld.so(1), do not optimize the search path when dealing with duplicate shared library names (even though both alternatives have problems). |
<li>In ld(1) and ld.so(1), do not optimize the search path when dealing with duplicate shared library names (even though both alternatives have problems). |
<li>Fix an kernel ipf bug relating to out-going icmp. |
<li>Fix an kernel ipf bug relating to out-going icmp. |
<li><font color="#e00000"><strong>SECURITY ISSUE: Fix an ipq race in ipintr(). <a href="errata24.html#ipqrace">A patch is available</a>, which must be applied after the <a href="errata24.html#maxqueue">maxqueue patch</a> has been installed.</strong></font> |
<li><strong>SECURITY ISSUE: Fix an ipq race in ipintr(). <a href="errata24.html#ipqrace">A patch is available</a>, which must be applied after the <a href="errata24.html#maxqueue">maxqueue patch</a> has been installed.</strong> |
<li>Allocate u-area early in fork1(), instead of vm_fork(). |
<li>Allocate u-area early in fork1(), instead of vm_fork(). |
<li>Fix msdosfs bug regarding corrupted FAT32 root directories. |
<li>Fix msdosfs bug regarding corrupted FAT32 root directories. |
<li>Improve vfs lkm interface. |
<li>Improve vfs lkm interface. |
|
|
<li>Make vm_page_alloc_contig() a standard VM system function. |
<li>Make vm_page_alloc_contig() a standard VM system function. |
<li>Fix DES weak key checking in libdes (and netinet/libdeslite). |
<li>Fix DES weak key checking in libdes (and netinet/libdeslite). |
<li>Improve the ipsec(4) man page. |
<li>Improve the ipsec(4) man page. |
<li>Fix <strong>netstat -A</strong> header. |
<li>Fix <code>netstat -A</code> header. |
<li><font color="#e00000"><strong>SECURITY ISSUE: Improved fragment flood protection in the IP layer. <a href="errata24.html#maxqueue">A patch is available</a></strong></font>. |
<li><strong>SECURITY ISSUE: Improved fragment flood protection in the IP layer. <a href="errata24.html#maxqueue">A patch is available</a></strong>. |
<li>IPSEC skipjack support (do not bother using this unless you are .gov or .mil). |
<li>IPSEC skipjack support (do not bother using this unless you are .gov or .mil). |
<li>Check sub-regions better in subr_extent.c, which affects pcmcia. |
<li>Check sub-regions better in subr_extent.c, which affects pcmcia. |
<li>Add <strong>-f</strong> option to comm(1) for case folding. |
<li>Add <code>-f</code> option to comm(1) for case folding. |
<li>Some more man page fixups. |
<li>Some more man page fixups. |
<li>In traceroute(1), do not permit normal users to set the source address as non-local. |
<li>In traceroute(1), do not permit normal users to set the source address as non-local. |
<li>Make quoted strings work in the interactive mode in restore(8). |
<li>Make quoted strings work in the interactive mode in restore(8). |
|
|
<li>Merge changes from db.1.86 (but do not merge new hash code, since it has an incompatible format) |
<li>Merge changes from db.1.86 (but do not merge new hash code, since it has an incompatible format) |
<li>Handle kernel malloc() failing, for TCP SACK block allocation. |
<li>Handle kernel malloc() failing, for TCP SACK block allocation. |
<li>Do more careful system call range-checking and introduce socklen_t. |
<li>Do more careful system call range-checking and introduce socklen_t. |
<li><font color="#e00000"><strong>Fix a bug we introduced before 2.4 shipped: readv(2) and writev(2) with iov_len == 0 is legal. <a href="errata24.html#uio">A patch is available</a></strong></font>. |
<li><strong>Fix a bug we introduced before 2.4 shipped: readv(2) and writev(2) with iov_len == 0 is legal. <a href="errata24.html#uio">A patch is available</a></strong>. |
<li>Fix a pcmcia mapping bug regarding address space allocation. |
<li>Fix a pcmcia mapping bug regarding address space allocation. |
<li>For wds(4) and ex(4) drivers, unmap address space if probing fails. |
<li>For wds(4) and ex(4) drivers, unmap address space if probing fails. |
<li>In ipsecadm(8), verify that keys and IVs are specified in hex. |
<li>In ipsecadm(8), verify that keys and IVs are specified in hex. |
<li>Document that MD4 is pretty much broken, and MD5 is looking pretty bad too (so much for quality designs from RSA). |
<li>Document that MD4 is pretty much broken, and MD5 is looking pretty bad too (so much for quality designs from RSA). |
<li><font color="#e00000"><strong>SECURITY ISSUE: i386 T_TRCTRAP DDB handling could cause a system crash. <a href="errata24.html#trctrap">A patch is available</a></strong></font>. |
<li><strong>SECURITY ISSUE: i386 T_TRCTRAP DDB handling could cause a system crash. <a href="errata24.html#trctrap">A patch is available</a></strong>. |
<li>tcpdump(8) out-of-range access in LLC decoding. |
<li>tcpdump(8) out-of-range access in LLC decoding. |
<li>Flesh out the vpn(8) manpage. |
<li>Flesh out the vpn(8) manpage. |
<li>Add old dbm-compatible interface code, from db-1.86 |
<li>Add old dbm-compatible interface code, from db-1.86 |
|
|
<li>ncurses-4.2-990206 |
<li>ncurses-4.2-990206 |
<li>Correct various freebsd/linux emulation issues. |
<li>Correct various freebsd/linux emulation issues. |
<li>Correct directory entry reads for numerous binary emulators. |
<li>Correct directory entry reads for numerous binary emulators. |
<li><font color="#e00000"><strong>SECURITY ISSUE: Better RST handling in tcp input. <a href="errata24.html#rst">A patch is available</a></strong></font>. |
<li><strong>SECURITY ISSUE: Better RST handling in tcp input. <a href="errata24.html#rst">A patch is available</a></strong>. |
<li>BeOS/i386 support in fdisk(8). |
<li>BeOS/i386 support in fdisk(8). |
<li>Two more nop instructions in sparc locore.s for greater reliability on Viking CPUs. |
<li>Two more nop instructions in sparc locore.s for greater reliability on Viking CPUs. |
<li>Pluralization fix in rup(1). |
<li>Pluralization fix in rup(1). |
|
|
<li>Handle MNT_NODEV in nullfs. |
<li>Handle MNT_NODEV in nullfs. |
<li>Correct a tcp ISS bug. |
<li>Correct a tcp ISS bug. |
<li>Support sparc bootpath handling in qe(4) and be(4). |
<li>Support sparc bootpath handling in qe(4) and be(4). |
<li><font color="#e00000"><strong>hp300 X in the 2.4 release has an installation issue. <a href="errata24.html#hp300X">Further details available</a></strong></font>. |
<li><strong>hp300 X in the 2.4 release has an installation issue. <a href="errata24.html#hp300X">Further details available</a></strong>. |
<li>Fix isa_check_intr() support on the alpha. |
<li>Fix isa_check_intr() support on the alpha. |
<li>Fix breaking support in <strong>fold -s</strong>. |
<li>Fix breaking support in <code>fold -s</code>. |
<li>Improve long line support in hexdump(1). |
<li>Improve long line support in hexdump(1). |
<li>Improve some ipf-related man pages. |
<li>Improve some ipf-related man pages. |
<li>Fix a server-side NFS issue for the alpha. |
<li>Fix a server-side NFS issue for the alpha. |
|
|
<li>Fix AFS on mips. |
<li>Fix AFS on mips. |
<li>sparc sbus spif driver (serial+parallel card). |
<li>sparc sbus spif driver (serial+parallel card). |
<li>Update curses to ncurses-4.2-990130 and import infocmp(1). |
<li>Update curses to ncurses-4.2-990130 and import infocmp(1). |
<li>Correct handling of negative fields in <strong>df -h</strong>. |
<li>Correct handling of negative fields in <code>df -h</code>. |
<li>Fix i386 __asm clobber control, for egcs. |
<li>Fix i386 __asm clobber control, for egcs. |
<li>Various fixes to the bt848 driver. |
<li>Various fixes to the bt848 driver. |
<li>Fix a multiple free patch in ipnat. |
<li>Fix a multiple free patch in ipnat. |
|
|
<li>Add support for more pcmcia cards. |
<li>Add support for more pcmcia cards. |
<li>Fix NEWRENO behaviour, which was buggy. |
<li>Fix NEWRENO behaviour, which was buggy. |
<li>tzdata1999a |
<li>tzdata1999a |
<li>Add <strong>-b</strong> flag to install(1). |
<li>Add <code>-b</code> flag to install(1). |
<li>For the bootblocks, fix error returns when running in decompressing mode. |
<li>For the bootblocks, fix error returns when running in decompressing mode. |
<li>Disable i386 bootblocks E801 memory probing test. |
<li>Disable i386 bootblocks E801 memory probing test. |
<li><font color="#e00000"><strong>SECURITY ISSUE: Fix a select(2)/accept(2) race condition. <a href="errata24.html#accept">A patch is available</a></strong></font>. |
<li><strong>SECURITY ISSUE: Fix a select(2)/accept(2) race condition. <a href="errata24.html#accept">A patch is available</a></strong>. |
<li>Support & username expansion in sendbug, and fix the /tmp race. |
<li>Support & username expansion in sendbug, and fix the /tmp race. |
<li>Avoid a sendmail DOS regarding huge numbers of header lines. |
<li>Avoid a sendmail DOS regarding huge numbers of header lines. |
<li>rmdir(".") now returns EBUSY, as XPG2 says. |
<li>rmdir(".") now returns EBUSY, as XPG2 says. |
|
|
<li>Fix a varargs related bug in patch(1). |
<li>Fix a varargs related bug in patch(1). |
<li>MNT_NOATIME support in msdosfs. |
<li>MNT_NOATIME support in msdosfs. |
<li>VIA Rhine ethernet driver. |
<li>VIA Rhine ethernet driver. |
<li><font color="#e00000"><strong>Fix an nfs v3 bug when talking to the pedantic solaris7 server. <a href="errata24.html#nfs3_solaris7">A patch is available</a></strong></font>. |
<li><strong>Fix an nfs v3 bug when talking to the pedantic solaris7 server. <a href="errata24.html#nfs3_solaris7">A patch is available</a></strong>. |
<li>Merge other fixes from ksh 5.2.13.6 |
<li>Merge other fixes from ksh 5.2.13.6 |
<li>Add RFNOWAIT support to rfork(2). |
<li>Add RFNOWAIT support to rfork(2). |
<li>Careful strtol() use in make(1). |
<li>Careful strtol() use in make(1). |
|
|
<li>Delay irq allocation for the i82365 pcmcia chipset -- we want better interrupts to be given to pcmcia cards. |
<li>Delay irq allocation for the i82365 pcmcia chipset -- we want better interrupts to be given to pcmcia cards. |
<li>Import of NRL IPv6. |
<li>Import of NRL IPv6. |
<li>new airports database. |
<li>new airports database. |
<li>Fix an apm bug for <strong>halt -p</strong>. |
<li>Fix an apm bug for <code>halt -p</code>. |
<li>Update CellServDB. |
<li>Update CellServDB. |
<li>In syslogd(8), be careful about <strong>sun_path</strong> termination. |
<li>In syslogd(8), be careful about <code>sun_path</code> termination. |
<li>Avoid kernel divide-by-zero panics in disklabel handling. |
<li>Avoid kernel divide-by-zero panics in disklabel handling. |
<li>newsyslog(8) no longer needs to care about MAX_PID. |
<li>newsyslog(8) no longer needs to care about MAX_PID. |
<li>In find(1), correct ! handling in parenthesis |
<li>In find(1), correct ! handling in parenthesis |
|
|
<li>In patch(1), remove some local functions and use basename(3) and dirname(3) instead. |
<li>In patch(1), remove some local functions and use basename(3) and dirname(3) instead. |
<li>Integration of NetBSD's MIDI & sequencer support. |
<li>Integration of NetBSD's MIDI & sequencer support. |
<li>Sendmail 8.9.2 |
<li>Sendmail 8.9.2 |
<li>c++ does not permit a structure to have a member that is called the same name as the structure (ie. <strong>netinet/in.h</strong> had <strong>struct ip_opts</strong> containing a member called <strong>ip_opts[]</strong>. Fix that. |
<li>c++ does not permit a structure to have a member that is called the same name as the structure (ie. <code>netinet/in.h</code> had <code>struct ip_opts</code> containing a member called <code>ip_opts[]</code>. Fix that. |
<li>Fix ${PIPE} uses throughout the source tree (not kernel compiles though). |
<li>Fix ${PIPE} uses throughout the source tree (not kernel compiles though). |
<li>A few htdocs were missing in our httpd(8) install. Add them. |
<li>A few htdocs were missing in our httpd(8) install. Add them. |
<li>Some pcmcia fixes. |
<li>Some pcmcia fixes. |
<li>Correct nested <strong>ip_sum</strong> in icmp packets. |
<li>Correct nested <code>ip_sum</code> in icmp packets. |
<li>Correct the values of <strong>ip_len</strong>, <strong>ip_off</strong>, <strong>ip_id</strong>, and udp <strong>uh_sum</strong> fields for the embedded ip packet inside an icmp packet. (<strong>ip_sum</strong> is still wrong). |
<li>Correct the values of <code>ip_len</code>, <code>ip_off</code>, <code>ip_id</code>, and udp <code>uh_sum</code> fields for the embedded ip packet inside an icmp packet. (<code>ip_sum</code> is still wrong). |
<li>More locking fixes in the vfs layer. |
<li>More locking fixes in the vfs layer. |
<li><font color="#e00000"><strong>Fix df(1) on NFS v3 filesystems. <a href="errata24.html#nfs3">A source code patch is available which solves this problem</a></strong></font>. |
<li><strong>Fix df(1) on NFS v3 filesystems. <a href="errata24.html#nfs3">A source code patch is available which solves this problem</a></strong>. |
<li>Crank PID_MAX to 65535. |
<li>Crank PID_MAX to 65535. |
<li>Do better pcmcia interrupt allocation. |
<li>Do better pcmcia interrupt allocation. |
<li>Make <strong>ip_id</strong> non-repeating random, like DNS id's. |
<li>Make <code>ip_id</code> non-repeating random, like DNS id's. |
<li>range check signal conversions in the compat layer. |
<li>range check signal conversions in the compat layer. |
<li>make mount(2) return EOPNOTSUPP for filesystem missing in kernel. |
<li>make mount(2) return EOPNOTSUPP for filesystem missing in kernel. |
<li>Fix a pcmcia com(4) driver panic. |
<li>Fix a pcmcia com(4) driver panic. |
|
|
<li>Newer version of isakmpd. |
<li>Newer version of isakmpd. |
<li>In kgmon(8), let libkvm decide the default kernel name. |
<li>In kgmon(8), let libkvm decide the default kernel name. |
<li>Repeat open operations in cdio, in case of slow changers. |
<li>Repeat open operations in cdio, in case of slow changers. |
<li><font color="#e00000"><strong>SECURITY ISSUE: Even more bootpd paranoia. Updated patches are available for <a href="errata23.html#bootpd">2.3</a> and <a href="errata24.html#bootpd">2.4</a></strong></font>. |
<li><strong>SECURITY ISSUE: Even more bootpd paranoia. Updated patches are available for <a href="errata23.html#bootpd">2.3</a> and <a href="errata24.html#bootpd">2.4</a></strong>. |
<li>Make sa(8) 64bit clean. |
<li>Make sa(8) 64bit clean. |
<li>In install(1), handle sparse files the same way pax(1) does. |
<li>In install(1), handle sparse files the same way pax(1) does. |
<li><font color="#e00000"><strong>Replace raw termcap/terminfo databases with new ones based on a common and shared termtypes database. <a href="errata24.html#terminfo">Since these databases had problems in the 2.4 release, updated versions are available</a></strong></font>. |
<li><strong>Replace raw termcap/terminfo databases with new ones based on a common and shared termtypes database. <a href="errata24.html#terminfo">Since these databases had problems in the 2.4 release, updated versions are available</a></strong>. |
<li>Permit csh(1)-builtin printf function to have arguments. |
<li>Permit csh(1)-builtin printf function to have arguments. |
<li>Fix a display problem in hexdump(1). |
<li>Fix a display problem in hexdump(1). |
<li><font color="#e00000"><strong>Fix an i386 installboot bug which prevents proper installation when the root partition (or the root partition end) are placed BEYOND the 4GB line. <a href="errata24.html#installboot">A source code patch is available which solves this problem</a></strong></font>. |
<li><strong>Fix an i386 installboot bug which prevents proper installation when the root partition (or the root partition end) are placed BEYOND the 4GB line. <a href="errata24.html#installboot">A source code patch is available which solves this problem</a></strong>. |
<li>Flesh mktemp(3) manpage out significantly. |
<li>Flesh mktemp(3) manpage out significantly. |
<li>Working <a href=mvme88k.html>mvme88k</a> port. |
<li>Working <a href=mvme88k.html>mvme88k</a> port. |
<li>For IPHDRINCL, check <strong>ip_hl</strong> for validity, too. |
<li>For IPHDRINCL, check <code>ip_hl</code> for validity, too. |
<li>Fix goal and max parameters in fmt(1). |
<li>Fix goal and max parameters in fmt(1). |
<li>Do not believe SS20 machines that claim to have BURST64 support. |
<li>Do not believe SS20 machines that claim to have BURST64 support. |
<li>In sparc le(3), be more careful about media handling and such. |
<li>In sparc le(3), be more careful about media handling and such. |
|
|
<li>fast retransmit statistics in netstat(1). |
<li>fast retransmit statistics in netstat(1). |
<li>Many new ISA PNP devices. |
<li>Many new ISA PNP devices. |
<li>Make -ltermcap be -lcurses; and -lotermcap be -locurses, via links. |
<li>Make -ltermcap be -lcurses; and -lotermcap be -locurses, via links. |
<li>For kerberosIV, install <strong>prot.h</strong> (some things require it). |
<li>For kerberosIV, install <code>prot.h</code> (some things require it). |
<li>XFree86 3.3.3 |
<li>XFree86 3.3.3 |
<li><font color="#e00000"><strong>SECURITY ISSUE: Fix a remote exploit problem in bootpd (which noone runs anyways, without filtering, right?). This fixes a security problem. Patches are available for <a href="errata23.html#bootpd">2.3</a> and <a href="errata24.html#bootpd">2.4</a></strong></font>. |
<li><strong>SECURITY ISSUE: Fix a remote exploit problem in bootpd (which noone runs anyways, without filtering, right?). This fixes a security problem. Patches are available for <a href="errata23.html#bootpd">2.3</a> and <a href="errata24.html#bootpd">2.4</a></strong>. |
<li>In cut(1), avoid an infinite loop. |
<li>In cut(1), avoid an infinite loop. |
<li>In top(1), skip disabled swap spaces. |
<li>In top(1), skip disabled swap spaces. |
<li>Even more man page fixes courtesy of our local man page repair fanatic. |
<li>Even more man page fixes courtesy of our local man page repair fanatic. |
<li>Fix a crash in ps(1). |
<li>Fix a crash in ps(1). |
<li>Make file(1) understand mp3 formats. |
<li>Make file(1) understand mp3 formats. |
<li>Repair a recent bug introduced with the SACK/FACK changes (only affected the alpha). |
<li>Repair a recent bug introduced with the SACK/FACK changes (only affected the alpha). |
<li>Add <strong>-C</strong> support to our patch(1). |
<li>Add <code>-C</code> support to our patch(1). |
<li>Numerous IPSEC-related fixes inside the kernel and outside. |
<li>Numerous IPSEC-related fixes inside the kernel and outside. |
<li>Many more man page fixes. |
<li>Many more man page fixes. |
<li>In ipf(8), do not crash for bad config file. |
<li>In ipf(8), do not crash for bad config file. |
|
|
<li>Fix a crash of ksh(1). |
<li>Fix a crash of ksh(1). |
<li>Ignore out-of-range environment LINES and COLUMNS in libocurses. |
<li>Ignore out-of-range environment LINES and COLUMNS in libocurses. |
<li>In libcurses in the issetugid(2) case, ignore $TERMINFO. |
<li>In libcurses in the issetugid(2) case, ignore $TERMINFO. |
<li><font color="#e00000"><strong>SECURITY ISSUE: In libocurses and libcurses in the issetugid(2) case, only ignore $TERMCAP if it is a path. <a href="errata24.html#termcap">A patch is available</a></strong></font>. |
<li><strong>SECURITY ISSUE: In libocurses and libcurses in the issetugid(2) case, only ignore $TERMCAP if it is a path. <a href="errata24.html#termcap">A patch is available</a></strong>. |
<li>Support full set of pty devices in the MAKEDEV scripts. |
<li>Support full set of pty devices in the MAKEDEV scripts. |
<li>Make rl(4) match the Accton 1207D cards too. |
<li>Make rl(4) match the Accton 1207D cards too. |
<li>Prototype getpgid(2) |
<li>Prototype getpgid(2) |
|
|
<li>Fix an expression handling bug in as(1). |
<li>Fix an expression handling bug in as(1). |
<li>Improve setregid() and setreuid() emulated behaviour. |
<li>Improve setregid() and setreuid() emulated behaviour. |
<li>ftok() is now XPG compliant. |
<li>ftok() is now XPG compliant. |
<li><font color="#e00000"><strong>Put userdir support back into httpd(8). <a href="errata24.html#userdir">A patch is available</a></strong></font>. |
<li><strong>Put userdir support back into httpd(8). <a href="errata24.html#userdir">A patch is available</a></strong>. |
<li>Put userdir support back into httpd(8). |
<li>Put userdir support back into httpd(8). |
<li>New daemon: isakmpd (ISAKMP/Oakley ipsec daemon). |
<li>New daemon: isakmpd (ISAKMP/Oakley ipsec daemon). |
<li>Move /tmp/bootpd.dump to /var/run to avoid filesystem race. |
<li>Move /tmp/bootpd.dump to /var/run to avoid filesystem race. |
<li>Fix some manpages |
<li>Fix some manpages |
<li>sudo 1.5.6p6 |
<li>sudo 1.5.6p6 |
<li><font color="#e00000"><strong>Fix a remote lockup problem in the TCP packet decoding code. This fixes a security problem. Patches are available for <a href="errata23.html#tcpfix">2.3</a> and <a href="errata24.html#tcpfix">2.4</a></strong></font>. |
<li><strong>Fix a remote lockup problem in the TCP packet decoding code. This fixes a security problem. Patches are available for <a href="errata23.html#tcpfix">2.3</a> and <a href="errata24.html#tcpfix">2.4</a></strong>. |
<li>Fix a deadlock in deadfs VOP_LOCK(). |
<li>Fix a deadlock in deadfs VOP_LOCK(). |
<li>Support -p option in ipmon(8). |
<li>Support -p option in ipmon(8). |
<li>Change bpf to support full frame-grabbing for FDDI packets. |
<li>Change bpf to support full frame-grabbing for FDDI packets. |
|
|
<li>Use correct ioctl for flushing in ipmon(8). |
<li>Use correct ioctl for flushing in ipmon(8). |
<li>Fix various tcp options bugs. |
<li>Fix various tcp options bugs. |
<li>Fix tcp timestamps. |
<li>Fix tcp timestamps. |
<li><font color="#e00000"><strong>Repair sparc kvm dump header problem. <a href="errata24.html#kvm_mkdb">A patch is available</a></strong></font>. |
<li><strong>Repair sparc kvm dump header problem. <a href="errata24.html#kvm_mkdb">A patch is available</a></strong>. |
<li>More carefully check /etc/hostname.* file contents before using it. |
<li>More carefully check /etc/hostname.* file contents before using it. |
<li>Fix mktemp() problems in lynx(1). |
<li>Fix mktemp() problems in lynx(1). |
</ul> |
</ul> |
<p> |
|
|
|
</body> |
|
</html> |
|