OpenBSD 2.5 Changelog

=================================================================== RCS file: /cvsrepo/anoncvs/cvs/www/plus25.html,v retrieving revision 1.64 retrieving revision 1.65 diff -u -r1.64 -r1.65 --- www/plus25.html 2019/04/08 16:14:53 1.64 +++ www/plus25.html 2019/05/27 22:55:22 1.65 @@ -1,20 +1,34 @@ - - - + + + OpenBSD 2.5 Changelog - - + + +

-OpenBSD -2.5 Changelog +OpenBSD +2.5 Changelog

@@ -29,7 +43,7 @@ changes, starting with those listed below..

-Note: Problems for which patches exist are marked in red. +Note: Problems for which patches exist are marked in red.

For changes in other releases, click below:
@@ -84,12 +98,12 @@

Changes made between OpenBSD 2.4 and 2.5

2.5 source tree frozen. -
Fix ln kernel bug in vfs_lookup.c. A patch is available. +
Fix ln kernel bug in vfs_lookup.c. A patch is available.
Fix ipf return-rst panic bug.
Add a -q flag to newfs, so that it does not print out information about the superblock backups. This is used by the install process.
Do not permit any IPSEC code unless the admin has enabled it using sysctl. @@ -120,11 +134,11 @@
Workaround sun4m STP1020A errata #148494 regarding cache initialization.
In ipsend(8), do not crash if no options provided.
Various powerpc fixes, including further PIC support, and fix a kernel pmap crash. -
SECURITY ISSUE: In poll(2), constrain the nfds parameter better, so that kvm starvation is less likely. A patch is available. +
SECURITY ISSUE: In poll(2), constrain the nfds parameter better, so that kvm starvation is less likely. A patch is available.
Make at(1) easier to use next year (ie. Y2K issue). -
SECURITY ISSUE: Fix TSS fault handling. A patch is available. +
SECURITY ISSUE: Fix TSS fault handling. A patch is available.
In the ncr(4) driver, disable tagged queuing by default. Our filesystems and vfs layer is not prepared for this play-it-loose behaviour. -
Repair ypwhich -h support; it was broken when running on non-server machines. +
Repair ypwhich -h support; it was broken when running on non-server machines.
Add non-learning and non-discovery modes to the bridging code.
Many more man page fixes.
Do not allow users to mount umapfs, even if root chooses to permit kern.usermount activity. @@ -140,7 +154,7 @@
Various changes to the ssl install, so that /etc/ssl contains nicer default files.
Various disklabel(8) improvements and bug fixes, so that our 2.5 release will be easier to install.
Bug fixes to the tx(4) driver. -
In /etc/daily, do /tmp pruning with a find -x so that sub-mounts do not get trashed. +
In /etc/daily, do /tmp pruning with a find -x so that sub-mounts do not get trashed.
Add a f.startwm function to twm(1), so that it can start other window managers.
On sparc cypress CPUs, do write-through instead of write-back caching. @@ -148,7 +162,7 @@
Fix an NFS bug which previously caused free()'ing of negative lengths.
ncurses-4.2-990314
In disklabel(8), permit "delete *". -
Make ifa_refcnt a u_int, because of very large routing tables. +
Make ifa_refcnt a u_int, because of very large routing tables.
Kernel scheduler performance improvement.
Numerous more man page repairs.
A start at powerpc PIC support. @@ -173,7 +187,7 @@
Man page clarifications for strncpy(3) and strncat(3), which people continue to misuse.
Fix another ipsec bug.
More bridge(4) tweaks. -
Support -- argument separator in less(1). +
Support -- argument separator in less(1).
Merge cap_mkdb(1) and info_mkdb(1).
Fix RAMDISK sizing problems on i386, alpha, and sparc.
Fix a DNS stall problem in login(1), related to AFS. @@ -191,7 +205,7 @@
Fix uninitialized variable bug in install(1).
Implement RFNOWAIT with the exact same semantics as Plan9.
Track SATYPE regs per PFKEY socket. -
Fix skeyinit(1) -n without an argument. +
Fix skeyinit(1) -n without an argument.
Fix some panic cases in raidframe(4).
Fix NFS3 NFS3ERR_JUKEBOX panic bug.
Some ipsec error return patches. @@ -205,13 +219,13 @@
led driver support for Sun4 machines.
Revamp some bridge(4) ioctls.
Add mod_ssl 2.2.3 support to apache 1.3.4. -
Rename disklabel -p flag to -d, and document for the first time. +
Rename disklabel -p flag to -d, and document for the first time.
apache 1.3.4
cvs 1.10.5
Incorporate extensive configuration work done on egcs, into our gcc tools.
Fix infinite recursion bug in libkafs, which hit during login(8) if DNS was dead.
On boot media, if swapon(8) exists on the install floppy, attempt to add swap early during install. -
Rename OpenBSD 2.4 to OpenBSD 2.5 -- we are moving into `release mode'. +
Rename OpenBSD 2.4 to OpenBSD 2.5 -- we are moving into 'release mode'.
Divide by zero bugfix to netstat(1).
Some fixes to the pkg_*(8) tools.
Add more isapnp card identifiers. @@ -229,11 +243,11 @@
Move ls(1) into ftpd(8).. directly.
In setproctitle(3), if sysctl(2) fails do not crash.
Constify getcap(3) API. -
For the i386, fix /boot argument mapping. A patch is available. +
For the i386, fix /boot argument mapping. A patch is available.
Put skipjack in libc.
Continue squishing new bugs in new ipsec PF_KEY code...
Fix autosetting of d_type and _dtypename in wd(4). -
SECURITY ISSUE: Fix the nlink overflow in FFS and EXT2FS. A patch is available. +
SECURITY ISSUE: Fix the nlink overflow in FFS and EXT2FS. A patch is available.
Add zegrep(1) and zfgrep(1).
Change IPSEC stack to support PFKEYv2.
PentiumIII detection. @@ -248,7 +262,7 @@
Better promisc and multicast handling in sparc hme(4).
Fix an rdist(8) bug.
Handle powered-down xl(4) cards better. -
SECURITY ISSUE: Fix an overflow in ping(8). A patch is available. +
SECURITY ISSUE: Fix an overflow in ping(8). A patch is available.
In fork(2), always spare 5 last processes for root.
Better vis(3) support in savecore(8).
Quiet apm(4) and add machdep.apmwarn sysctl. @@ -258,7 +272,7 @@
Add -x, -p, and -m options to ls(1).
In ld(1) and ld.so(1), do not optimize the search path when dealing with duplicate shared library names (even though both alternatives have problems).
Fix an kernel ipf bug relating to out-going icmp. -
SECURITY ISSUE: Fix an ipq race in ipintr(). A patch is available, which must be applied after the maxqueue patch has been installed. +
SECURITY ISSUE: Fix an ipq race in ipintr(). A patch is available, which must be applied after the maxqueue patch has been installed.
Allocate u-area early in fork1(), instead of vm_fork().
Fix msdosfs bug regarding corrupted FAT32 root directories.
Improve vfs lkm interface. @@ -266,11 +280,11 @@
Make vm_page_alloc_contig() a standard VM system function.
Fix DES weak key checking in libdes (and netinet/libdeslite).
Improve the ipsec(4) man page. -
Fix netstat -A header. -
SECURITY ISSUE: Improved fragment flood protection in the IP layer. A patch is available. +
Fix netstat -A header. +
SECURITY ISSUE: Improved fragment flood protection in the IP layer. A patch is available.
IPSEC skipjack support (do not bother using this unless you are .gov or .mil).
Check sub-regions better in subr_extent.c, which affects pcmcia. -
Add -f option to comm(1) for case folding. +
Add -f option to comm(1) for case folding.
Some more man page fixups.
In traceroute(1), do not permit normal users to set the source address as non-local.
Make quoted strings work in the interactive mode in restore(8). @@ -283,12 +297,12 @@
Merge changes from db.1.86 (but do not merge new hash code, since it has an incompatible format)
Handle kernel malloc() failing, for TCP SACK block allocation.
Do more careful system call range-checking and introduce socklen_t. -
Fix a bug we introduced before 2.4 shipped: readv(2) and writev(2) with iov_len == 0 is legal. A patch is available. +
Fix a bug we introduced before 2.4 shipped: readv(2) and writev(2) with iov_len == 0 is legal. A patch is available.
Fix a pcmcia mapping bug regarding address space allocation.
For wds(4) and ex(4) drivers, unmap address space if probing fails.
In ipsecadm(8), verify that keys and IVs are specified in hex.
Document that MD4 is pretty much broken, and MD5 is looking pretty bad too (so much for quality designs from RSA). -
SECURITY ISSUE: i386 T_TRCTRAP DDB handling could cause a system crash. A patch is available. +
SECURITY ISSUE: i386 T_TRCTRAP DDB handling could cause a system crash. A patch is available.
tcpdump(8) out-of-range access in LLC decoding.
Flesh out the vpn(8) manpage.
Add old dbm-compatible interface code, from db-1.86 @@ -300,7 +314,7 @@
ncurses-4.2-990206
Correct various freebsd/linux emulation issues.
Correct directory entry reads for numerous binary emulators. -
SECURITY ISSUE: Better RST handling in tcp input. A patch is available. +
SECURITY ISSUE: Better RST handling in tcp input. A patch is available.
BeOS/i386 support in fdisk(8).
Two more nop instructions in sparc locore.s for greater reliability on Viking CPUs.
Pluralization fix in rup(1). @@ -311,9 +325,9 @@
Handle MNT_NODEV in nullfs.
Correct a tcp ISS bug.
Support sparc bootpath handling in qe(4) and be(4). -
hp300 X in the 2.4 release has an installation issue. Further details available. +
hp300 X in the 2.4 release has an installation issue. Further details available.
Fix isa_check_intr() support on the alpha. -
Fix breaking support in fold -s. +
Fix breaking support in fold -s.
Improve long line support in hexdump(1).
Improve some ipf-related man pages.
Fix a server-side NFS issue for the alpha. @@ -336,7 +350,7 @@
Fix AFS on mips.
sparc sbus spif driver (serial+parallel card).
Update curses to ncurses-4.2-990130 and import infocmp(1). -
Correct handling of negative fields in df -h. +
Correct handling of negative fields in df -h.
Fix i386 __asm clobber control, for egcs.
Various fixes to the bt848 driver.
Fix a multiple free patch in ipnat. @@ -345,10 +359,10 @@
Add support for more pcmcia cards.
Fix NEWRENO behaviour, which was buggy.
tzdata1999a -
Add -b flag to install(1). +
Add -b flag to install(1).
For the bootblocks, fix error returns when running in decompressing mode.
Disable i386 bootblocks E801 memory probing test. -
SECURITY ISSUE: Fix a select(2)/accept(2) race condition. A patch is available. +
SECURITY ISSUE: Fix a select(2)/accept(2) race condition. A patch is available.
Support & username expansion in sendbug, and fix the /tmp race.
Avoid a sendmail DOS regarding huge numbers of header lines.
rmdir(".") now returns EBUSY, as XPG2 says. @@ -367,7 +381,7 @@
Fix a varargs related bug in patch(1).
MNT_NOATIME support in msdosfs.
VIA Rhine ethernet driver. -
Fix an nfs v3 bug when talking to the pedantic solaris7 server. A patch is available. +
Fix an nfs v3 bug when talking to the pedantic solaris7 server. A patch is available.
Merge other fixes from ksh 5.2.13.6
Add RFNOWAIT support to rfork(2).
Careful strtol() use in make(1). @@ -383,9 +397,9 @@
Delay irq allocation for the i82365 pcmcia chipset -- we want better interrupts to be given to pcmcia cards.
Import of NRL IPv6.
new airports database. -
Fix an apm bug for halt -p. +
Fix an apm bug for halt -p.
Update CellServDB. -
In syslogd(8), be careful about sun_path termination. +
In syslogd(8), be careful about sun_path termination.
Avoid kernel divide-by-zero panics in disklabel handling.
newsyslog(8) no longer needs to care about MAX_PID.
In find(1), correct ! handling in parenthesis @@ -399,17 +413,17 @@
In patch(1), remove some local functions and use basename(3) and dirname(3) instead.
Integration of NetBSD's MIDI & sequencer support.
Sendmail 8.9.2 -
c++ does not permit a structure to have a member that is called the same name as the structure (ie. netinet/in.h had struct ip_opts containing a member called ip_opts[]. Fix that. +
c++ does not permit a structure to have a member that is called the same name as the structure (ie. netinet/in.h had struct ip_opts containing a member called ip_opts[]. Fix that.
Fix ${PIPE} uses throughout the source tree (not kernel compiles though).
A few htdocs were missing in our httpd(8) install. Add them.
Some pcmcia fixes. -
Correct nested ip_sum in icmp packets. -
Correct the values of ip_len, ip_off, ip_id, and udp uh_sum fields for the embedded ip packet inside an icmp packet. (ip_sum is still wrong). +
Correct nested ip_sum in icmp packets. +
Correct the values of ip_len, ip_off, ip_id, and udp uh_sum fields for the embedded ip packet inside an icmp packet. (ip_sum is still wrong).
More locking fixes in the vfs layer. -
Fix df(1) on NFS v3 filesystems. A source code patch is available which solves this problem. +
Fix df(1) on NFS v3 filesystems. A source code patch is available which solves this problem.
Crank PID_MAX to 65535.
Do better pcmcia interrupt allocation. -
Make ip_id non-repeating random, like DNS id's. +
Make ip_id non-repeating random, like DNS id's.
range check signal conversions in the compat layer.
make mount(2) return EOPNOTSUPP for filesystem missing in kernel.
Fix a pcmcia com(4) driver panic. @@ -420,16 +434,16 @@
Newer version of isakmpd.
In kgmon(8), let libkvm decide the default kernel name.
Repeat open operations in cdio, in case of slow changers. -
SECURITY ISSUE: Even more bootpd paranoia. Updated patches are available for 2.3 and 2.4. +
SECURITY ISSUE: Even more bootpd paranoia. Updated patches are available for 2.3 and 2.4.
Make sa(8) 64bit clean.
In install(1), handle sparse files the same way pax(1) does. -
Replace raw termcap/terminfo databases with new ones based on a common and shared termtypes database. Since these databases had problems in the 2.4 release, updated versions are available. +
Replace raw termcap/terminfo databases with new ones based on a common and shared termtypes database. Since these databases had problems in the 2.4 release, updated versions are available.
Permit csh(1)-builtin printf function to have arguments.
Fix a display problem in hexdump(1). -
Fix an i386 installboot bug which prevents proper installation when the root partition (or the root partition end) are placed BEYOND the 4GB line. A source code patch is available which solves this problem. +
Fix an i386 installboot bug which prevents proper installation when the root partition (or the root partition end) are placed BEYOND the 4GB line. A source code patch is available which solves this problem.
Flesh mktemp(3) manpage out significantly.
Working mvme88k port. -
For IPHDRINCL, check ip_hl for validity, too. +
For IPHDRINCL, check ip_hl for validity, too.
Fix goal and max parameters in fmt(1).
Do not believe SS20 machines that claim to have BURST64 support.
In sparc le(3), be more careful about media handling and such. @@ -450,16 +464,16 @@
fast retransmit statistics in netstat(1).
Many new ISA PNP devices.
Make -ltermcap be -lcurses; and -lotermcap be -locurses, via links. -
For kerberosIV, install prot.h (some things require it). +
For kerberosIV, install prot.h (some things require it).
XFree86 3.3.3 -
SECURITY ISSUE: Fix a remote exploit problem in bootpd (which noone runs anyways, without filtering, right?). This fixes a security problem. Patches are available for 2.3 and 2.4. +
SECURITY ISSUE: Fix a remote exploit problem in bootpd (which noone runs anyways, without filtering, right?). This fixes a security problem. Patches are available for 2.3 and 2.4.
In cut(1), avoid an infinite loop.
In top(1), skip disabled swap spaces.
Even more man page fixes courtesy of our local man page repair fanatic.
Fix a crash in ps(1).
Make file(1) understand mp3 formats.
Repair a recent bug introduced with the SACK/FACK changes (only affected the alpha). -
Add -C support to our patch(1). +
Add -C support to our patch(1).
Numerous IPSEC-related fixes inside the kernel and outside.
Many more man page fixes.
In ipf(8), do not crash for bad config file. @@ -484,7 +498,7 @@
Fix a crash of ksh(1).
Ignore out-of-range environment LINES and COLUMNS in libocurses.
In libcurses in the issetugid(2) case, ignore $TERMINFO. -
SECURITY ISSUE: In libocurses and libcurses in the issetugid(2) case, only ignore $TERMCAP if it is a path. A patch is available. +
SECURITY ISSUE: In libocurses and libcurses in the issetugid(2) case, only ignore $TERMCAP if it is a path. A patch is available.
Support full set of pty devices in the MAKEDEV scripts.
Make rl(4) match the Accton 1207D cards too.
Prototype getpgid(2) @@ -506,13 +520,13 @@
Fix an expression handling bug in as(1).
Improve setregid() and setreuid() emulated behaviour.
ftok() is now XPG compliant. -
Put userdir support back into httpd(8). A patch is available. +
Put userdir support back into httpd(8). A patch is available.
Put userdir support back into httpd(8).
New daemon: isakmpd (ISAKMP/Oakley ipsec daemon).
Move /tmp/bootpd.dump to /var/run to avoid filesystem race.
Fix some manpages
sudo 1.5.6p6 -
Fix a remote lockup problem in the TCP packet decoding code. This fixes a security problem. Patches are available for 2.3 and 2.4. +
Fix a remote lockup problem in the TCP packet decoding code. This fixes a security problem. Patches are available for 2.3 and 2.4.
Fix a deadlock in deadfs VOP_LOCK().
Support -p option in ipmon(8).
Change bpf to support full frame-grabbing for FDDI packets. @@ -543,11 +557,7 @@
Use correct ioctl for flushing in ipmon(8).
Fix various tcp options bugs.
Fix tcp timestamps. -
Repair sparc kvm dump header problem. A patch is available. +
Repair sparc kvm dump header problem. A patch is available.
More carefully check /etc/hostname.* file contents before using it.
Fix mktemp() problems in lynx(1).

- - -