Annotation of www/plus25.html, Revision 1.44
1.17 naddy 1: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
1.1 deraadt 2: <html>
3: <head>
4: <title>OpenBSD 2.5 changes</title>
1.17 naddy 5: <link rev=made href="mailto:www@openbsd.org">
1.1 deraadt 6: <meta name="resource-type" content="document">
1.42 schwarze 7: <meta name="description" content="OpenBSD 2.5 changes">
8: <meta name="keywords" content="openbsd,changes">
1.1 deraadt 9: <meta name="distribution" content="global">
1.42 schwarze 10: <meta name="copyright" content="This document copyright 1996-1999 by OpenBSD.">
1.1 deraadt 11: </head>
12:
1.20 david 13: <body bgcolor="#ffffff" text="#000000" link="#23238E">
1.1 deraadt 14:
1.14 jsyn 15: <a href="index.html"><img alt="[OpenBSD]" height="30" width="141" src="images/smalltitle.gif" border="0"></a>
1.1 deraadt 16: <p>
1.17 naddy 17: <h2><font color="#e00000">Changes made between OpenBSD 2.4 and OpenBSD 2.5</font></h2>
18: <hr>
1.1 deraadt 19:
20: <p>
21: This is a partial list of the major machine independent changes
1.35 sobrado 22: (i.e., these are the changes people ask about most often). Machine
1.1 deraadt 23: specific changes have also been made, and are sometimes mentioned
1.35 sobrado 24: in the pages for the specific <a href=plat.html>platforms</a> if you
1.1 deraadt 25: are interested in further port-specific details. Many ports
26: have had architecture-specific enhancements relative to NetBSD,
27: but when they do not they certainly have plenty of platform-independent
28: changes, starting with those listed below..
29:
30: <p>
1.17 naddy 31: Note: <font color="#e00000">Problems for which patches exist are marked in red</font>.
1.1 deraadt 32:
33: <p>
34: <h3>
1.16 deraadt 35: For changes in other releases, click below:<br>
36: <a href="plus20.html">2.0</a>,
37: <a href="plus21.html">2.1</a>,
38: <a href="plus22.html">2.2</a>,
39: <a href="plus23.html">2.3</a>,
40: <a href="plus24.html">2.4</a>,
41: <a href="plus26.html">2.6</a>,
42: <a href="plus27.html">2.7</a>,
43: <a href="plus28.html">2.8</a>,
44: <a href="plus29.html">2.9</a>,
45: <a href="plus30.html">3.0</a>,
46: <a href="plus31.html">3.1</a>,
47: <a href="plus32.html">3.2</a>,
1.18 deraadt 48: <a href="plus33.html">3.3</a>,
1.19 david 49: <a href="plus34.html">3.4</a>,
1.22 deraadt 50: <a href="plus35.html">3.5</a>,
1.24 miod 51: <a href="plus36.html">3.6</a>,
1.34 deraadt 52: <br>
1.25 deraadt 53: <a href="plus37.html">3.7</a>,
1.27 deraadt 54: <a href="plus38.html">3.8</a>,
1.28 deraadt 55: <a href="plus39.html">3.9</a>,
1.29 deraadt 56: <a href="plus40.html">4.0</a>,
1.30 deraadt 57: <a href="plus41.html">4.1</a>,
1.31 deraadt 58: <a href="plus42.html">4.2</a>,
1.33 deraadt 59: <a href="plus43.html">4.3</a>,
1.34 deraadt 60: <a href="plus44.html">4.4</a>,
1.36 deraadt 61: <a href="plus45.html">4.5</a>,
1.37 deraadt 62: <a href="plus46.html">4.6</a>,
1.38 deraadt 63: <a href="plus47.html">4.7</a>,
1.39 deraadt 64: <a href="plus48.html">4.8</a>,
1.40 deraadt 65: <a href="plus49.html">4.9</a>,
1.41 nick 66: <a href="plus50.html">5.0</a>,
1.42 schwarze 67: <a href="plus51.html">5.1</a>,
1.43 nick 68: <a href="plus52.html">5.2</a>,
1.44 ! deraadt 69: <a href="plus53.html">5.3</a>,
1.16 deraadt 70: <a href="plus.html">current</a>.
1.1 deraadt 71: <br>
72: </h3>
73:
74: <hr>
75:
76: <p>
1.17 naddy 77: <h3><font color="#0000e0">OpenBSD 2.5 released (May 19, 1999).</font></h3><p>
1.1 deraadt 78: <ul>
79:
80: <li>2.5 source tree frozen.
1.17 naddy 81: <li><font color="#e00000"><strong>Fix ln kernel bug in vfs_lookup.c. <a href="errata24.html#lnpanic">A patch is available</a></strong></font>.
1.1 deraadt 82: <li>Fix ipf return-rst panic bug.
83: <li>Add a -q flag to newfs, so that it does not print out information about the superblock backups. This is used by the install process.
84: <li>Do not permit any IPSEC code unless the admin has enabled it using sysctl.
85: <li>More ISAPNP devices.
86: <li>Do not permit local address spoofing using ip4.
87: <li>Do not permit ip4 tunneling unless the admin has enabled it using sysctl.
88: <li>More man page and games fixes.
89: <li>Significant improvements to disklabel(8) and the install procedure.
90: <li>For CD support, if READ_CD_CAPACITY fails as it does on some units, provide nice defaults so that other things do not fail later.
91: <li>Rearrange default interrupt ordering for pcmcia somewhat more.
92: <li>Improve multicast handling in /etc/rc.
93: <li>Silence initgroups(3), it should not spew to stderr on failure.
94: <li>sudo 1.5.9
95: <li>Numerous ipsec changes, further making isakmpd useful, etc. etc.
96: <li>Support hostname.bridge* files.
97: <li>Support some 100Mbit ne2000-like pcmcia cards.
98: <li>Further Qlogic ISP support for PCI and sbus versions..
99: <li>Add ssl log rotation to newsyslog.conf
100:
1.26 david 101: <li>In sun4m trap handler stubs, rd %wim which makes viking CPUs much happier.
1.1 deraadt 102: <li>lifetime expiration notifications for the IPSEC stack.
103: <li>PF_KEYv2 support in isakmpd(8).
104: <li>In kvm_mkdb(8), better fallback from /dev/ksyms to /bsd if there are problems with nlist(3).
105: <li>Fix in6 dependence in various netinet header files.
106: <li>Tail anchor search in makewhatis.sed, so that overwritten titles are dealt with right.
107: <li>Fix a problem regarding "\r" translation in talk(1).
108: <li>Some more games fixes.
109: <li>Workaround sun4m STP1020A errata #148494 regarding cache initialization.
110: <li>In ipsend(8), do not crash if no options provided.
111: <li>Various powerpc fixes, including further PIC support, and fix a kernel pmap crash.
1.17 naddy 112: <li><font color="#e00000"><strong>SECURITY ISSUE: In poll(2), constrain the <strong>nfds</strong> parameter better, so that kvm starvation is less likely. <a href="errata24.html#poll">A patch is available</a></strong></font>.
1.1 deraadt 113: <li>Make at(1) easier to use next year (ie. Y2K issue).
1.17 naddy 114: <li><font color="#e00000"><strong>SECURITY ISSUE: Fix TSS fault handling. <a href="errata24.html#tss">A patch is available</a></strong></font>.
1.1 deraadt 115: <li>In the ncr(4) driver, disable tagged queuing by default. Our filesystems and vfs layer is not prepared for this play-it-loose behaviour.
116: <li>Repair <strong>ypwhich -h</strong> support; it was broken when running on non-server machines.
117: <li>Add non-learning and non-discovery modes to the bridging code.
118: <li>Many more man page fixes.
119: <li>Do not allow users to mount umapfs, even if root chooses to permit kern.usermount activity.
120: <li>termtypes database version 10.2.7, with our local modifications.
121: <li>Many more non-standard isapnp devices.
122: <li>On various architectures, more default swapgeneric swap devices.
123: <li>If an MFS IO is successful, set b_resid to 0, so that vnd support works.
124: <li>Add find -W support for white-outs.
125: <li>Brand new version of the isp(4) driver for SBUS and PCI.
1.11 pvalchev 126: <li>Ensure that sb(4) devices have at least one drq; thus not falsely probing one particularly stupid isapnp sb-like device.
1.1 deraadt 127: <li>ncurses-4.2-990316
128: <li>A nice ssl(8) man page.
129: <li>Various changes to the ssl install, so that /etc/ssl contains nicer default files.
130: <li>Various disklabel(8) improvements and bug fixes, so that our 2.5 release will be easier to install.
131: <li>Bug fixes to the tx(4) driver.
132: <li>In /etc/daily, do /tmp pruning with a <strong>find -x</strong> so that sub-mounts do not get trashed.
133: <li>Add a f.startwm function to twm(1), so that it can start other window managers.
134:
1.26 david 135: <li>On sparc cypress CPUs, do write-through instead of write-back caching.
1.1 deraadt 136: <li>In netstat(1), print subnets containing 0 octets correctly.
137: <li>Fix an NFS bug which previously caused free()'ing of negative lengths.
138: <li>ncurses-4.2-990314
139: <li>In disklabel(8), permit "delete *".
140: <li>Make <strong>ifa_refcnt</strong> a u_int, because of very large routing tables.
141: <li>Kernel scheduler performance improvement.
142: <li>Numerous more man page repairs.
143: <li>A start at powerpc PIC support.
144: <li>Fix atapi cdrom driver bug where last entry in TOC had seconds and frame zeroed.
145: <li>Fix some more games.
146: <li>Numerous more bridge improvements.
147: <li>ncurses-4.2-990307
148: <li>Turns out the RAMDISK for the 2.4 i386 release had errors for the default NE2000 device driver locations.
149: <li>wb(4) PCI driver for Winbond W89C840F 100mbit cards.
150: <li>Fix some more pcidevs and pnpdevs entries -- a few more new devices work as a result.
151: <li>libpthread goes away, since libc_r now works really well.
152: <li>Many more man page fixups.
153: <li>For open(2) with O_TRUNC, both st_ctime and st_mtime are to be updated.
154: <li>On the P3, disable the processor serial number.
155: <li>Fix make depend in kerberosIV sub-tree.
156: <li>On i386, add support for cpuid level 2, permitting L2 cache size probing.
157: <li>In pkg_info(8), handle unterminated comments.
158: <li>sudo 1.5.8p2.
159: <li>Make sure httpd(8) works when the RSA SSL library is not installed.
160: <li>In mountd(8), fix a parsing error for the file /etc/exports.
161:
162: <li>Man page clarifications for strncpy(3) and strncat(3), which people continue to misuse.
163: <li>Fix another ipsec bug.
164: <li>More bridge(4) tweaks.
1.11 pvalchev 165: <li>Support <strong>--</strong> argument separator in less(1).
1.1 deraadt 166: <li>Merge cap_mkdb(1) and info_mkdb(1).
167: <li>Fix RAMDISK sizing problems on i386, alpha, and sparc.
168: <li>Fix a DNS stall problem in login(1), related to AFS.
169: <li>A couple of ipsec pfkey fixes.
170: <li>Handle bogus priority specifications in renice(1).
171: <li>Improve compress performance in compress(1).
172: <li>Handle cs4232 isapnp cards better.
173: <li>Fix various source-tree Makefile build-twice bugs
174: <li>Fix a bug in cvs(1).
175: <li>In calendar(1), correctly handle yearly events occurring on fixed weekdays in all cases.
176: <li>Make more ethernet drivers bridge-aware.
177: <li>In talk(1), print fatal errors to stderr after curses has terminated.
178: <li>De-inline vnode_if stubs. This saves 120K in kernel size.
179: <li>Fix another coredumping case in Kerberos kadm library.
180: <li>Fix uninitialized variable bug in install(1).
181: <li>Implement RFNOWAIT with the exact same semantics as Plan9.
182: <li>Track SATYPE regs per PFKEY socket.
183: <li>Fix skeyinit(1) <strong>-n</strong> without an argument.
184: <li>Fix some panic cases in raidframe(4).
185: <li>Fix NFS3 NFS3ERR_JUKEBOX panic bug.
186: <li>Some ipsec error return patches.
187: <li>Other man page repairs..
188: <li>Add significant detailed information to select(2) manpage, which will help people not repeat mistakes others have made.
189: <li>Document timer{clear,add,sub,cmp,isset} in the getitimer(2) manpage.
190: <li>isapnp wss(4) support.
191: <li>curses 4.2-990301
192: <li>SIGINFO support in fsck_ffs(8). Try ^T during bootup.
193: <li>Support stand-alone "up" command in /etc/hostname.* files, for bridges and such.
194: <li>led driver support for Sun4 machines.
195: <li>Revamp some bridge(4) ioctls.
196: <li>Add mod_ssl 2.2.3 support to apache 1.3.4.
197: <li>Rename disklabel <strong>-p</strong> flag to <strong>-d</strong>, and document for the first time.
198: <li>apache 1.3.4
199: <li>cvs 1.10.5
200: <li>Incorporate extensive configuration work done on egcs, into our gcc tools.
201: <li>Fix infinite recursion bug in libkafs, which hit during login(8) if DNS was dead.
202: <li>On boot media, if swapon(8) exists on the install floppy, attempt to add swap early during install.
203: <li>Rename OpenBSD 2.4 to OpenBSD 2.5 -- we are moving into `release mode'.
204: <li>Divide by zero bugfix to netstat(1).
205: <li>Some fixes to the pkg_*(8) tools.
206: <li>Add more isapnp card identifiers.
207: <li>Fixes to the rl(4), pn(4), mx(4), xl(4), and tl(4) PCI ethernet drivers.
208: <li>Many ethernet drivers were doing an packet ownership check which prevented bridging from working, and was better done in ether_input().
209: <li>network bridging support. The packets go through ipf(8) on their way to delivery. See bridge(4) and brconfig(8).
210: <li>Some nfsd(8) and nfsiod(8) changes.
211: <li>Support the PNIC2 PCI ethernet controller in pn(4).
212: <li>Many many man page fixes.
213: <li>In ipsecadm(8), warn if DES or skipjack are used.
214: <li>isakmpd(8) update.
215: <li>newhashinit() kernel interface replaces hashinit() interface, and permits non-blocking malloc operation.
216: <li>Begin uvm import.
217: <li>Some man page improvements.
218: <li>Move ls(1) into ftpd(8).. directly.
219: <li>In setproctitle(3), if sysctl(2) fails do not crash.
220: <li>Constify getcap(3) API.
1.17 naddy 221: <li><font color="#e00000"><strong>For the i386, fix /boot argument mapping. <a href="errata24.html#bootargv">A patch is available</a></strong></font>.
1.1 deraadt 222: <li>Put skipjack in libc.
223: <li>Continue squishing new bugs in new ipsec PF_KEY code...
224: <li>Fix autosetting of d_type and _dtypename in wd(4).
1.17 naddy 225: <li><font color="#e00000"><strong>SECURITY ISSUE: Fix the nlink overflow in FFS and EXT2FS. <a href="errata24.html#nlink">A patch is available</a></strong></font>.
1.1 deraadt 226: <li>Add zegrep(1) and zfgrep(1).
227: <li>Change IPSEC stack to support PFKEYv2.
228: <li>PentiumIII detection.
229: <li>Fix two bugs in ifconfig(8); do not configure an address if not specified, and complain if more than src and dst addresses are specified.
230: <li>Fix another ping bug regarding payload alignment.
231: <li>Fix -R option in inetd(8).
232: <li>Fix send file function in cu(1).
233: <li>Some man page fixes.
234: <li>ncurses 4.2-990220
235: <li>NRL netinet6 compiles now.
236: <li>Two new kinds of rl(4) and vr(4) ethernet cards.
237: <li>Better promisc and multicast handling in sparc hme(4).
238: <li>Fix an rdist(8) bug.
239: <li>Handle powered-down xl(4) cards better.
1.17 naddy 240: <li><font color="#e00000"><strong>SECURITY ISSUE: Fix an overflow in ping(8). <a href="errata24.html#ping">A patch is available</a></strong></font>.
1.1 deraadt 241: <li>In fork(2), always spare 5 last processes for root.
242: <li>Better vis(3) support in savecore(8).
243: <li>Quiet apm(4) and add machdep.apmwarn sysctl.
244: <li>Fix endian-bug in the blowfish routines.
245: <li>Various vis(3) related overflows (by one char).
1.11 pvalchev 246: <li>First step at supporting >2G files in less(1).
1.1 deraadt 247: <li>Add -x, -p, and -m options to ls(1).
248: <li>In ld(1) and ld.so(1), do not optimize the search path when dealing with duplicate shared library names (even though both alternatives have problems).
249: <li>Fix an kernel ipf bug relating to out-going icmp.
1.17 naddy 250: <li><font color="#e00000"><strong>SECURITY ISSUE: Fix an ipq race in ipintr(). <a href="errata24.html#ipqrace">A patch is available</a>, which must be applied after the <a href="errata24.html#maxqueue">maxqueue patch</a> has been installed.</strong></font>
1.1 deraadt 251: <li>Allocate u-area early in fork1(), instead of vm_fork().
252: <li>Fix msdosfs bug regarding corrupted FAT32 root directories.
253: <li>Improve vfs lkm interface.
254: <li>sudo 1.5.8
255: <li>Make vm_page_alloc_contig() a standard VM system function.
256: <li>Fix DES weak key checking in libdes (and netinet/libdeslite).
257: <li>Improve the ipsec(4) man page.
258: <li>Fix <strong>netstat -A</strong> header.
1.17 naddy 259: <li><font color="#e00000"><strong>SECURITY ISSUE: Improved fragment flood protection in the IP layer. <a href="errata24.html#maxqueue">A patch is available</a></strong></font>.
1.1 deraadt 260: <li>IPSEC skipjack support (do not bother using this unless you are .gov or .mil).
261: <li>Check sub-regions better in subr_extent.c, which affects pcmcia.
262: <li>Add <strong>-f</strong> option to comm(1) for case folding.
263: <li>Some more man page fixups.
264: <li>In traceroute(1), do not permit normal users to set the source address as non-local.
265: <li>Make quoted strings work in the interactive mode in restore(8).
266: <li>Fix a padding byte in ipsec esp new.
267: <li>Use new pipe code on all architectures.
268: <li>Some man page repairs.
269: <li>Fix SIOCGIFCONF code in ypbind(8).
270: <li>New raidframe code.
271: <li>Improgve promisc/multicast support in a few sparc drivers.
272: <li>Merge changes from db.1.86 (but do not merge new hash code, since it has an incompatible format)
273: <li>Handle kernel malloc() failing, for TCP SACK block allocation.
274: <li>Do more careful system call range-checking and introduce socklen_t.
1.17 naddy 275: <li><font color="#e00000"><strong>Fix a bug we introduced before 2.4 shipped: readv(2) and writev(2) with iov_len == 0 is legal. <a href="errata24.html#uio">A patch is available</a></strong></font>.
1.1 deraadt 276: <li>Fix a pcmcia mapping bug regarding address space allocation.
277: <li>For wds(4) and ex(4) drivers, unmap address space if probing fails.
278: <li>In ipsecadm(8), verify that keys and IVs are specified in hex.
279: <li>Document that MD4 is pretty much broken, and MD5 is looking pretty bad too (so much for quality designs from RSA).
1.17 naddy 280: <li><font color="#e00000"><strong>SECURITY ISSUE: i386 T_TRCTRAP DDB handling could cause a system crash. <a href="errata24.html#trctrap">A patch is available</a></strong></font>.
1.1 deraadt 281: <li>tcpdump(8) out-of-range access in LLC decoding.
282: <li>Flesh out the vpn(8) manpage.
283: <li>Add old dbm-compatible interface code, from db-1.86
284: <li>Support Return-Path: in vacation(1).
285: <li>Network byte order for default lease time in dhclient(8).
286: <li>Uninitialized memory in ktrace(2) system call.
287: <li>Fix 88k support in libgmp.
288: <li>Make types(5) more useful.
289: <li>ncurses-4.2-990206
290: <li>Correct various freebsd/linux emulation issues.
291: <li>Correct directory entry reads for numerous binary emulators.
1.17 naddy 292: <li><font color="#e00000"><strong>SECURITY ISSUE: Better RST handling in tcp input. <a href="errata24.html#rst">A patch is available</a></strong></font>.
1.1 deraadt 293: <li>BeOS/i386 support in fdisk(8).
294: <li>Two more nop instructions in sparc locore.s for greater reliability on Viking CPUs.
295: <li>Pluralization fix in rup(1).
296: <li>Much more mvme88k support. The port is coming alive...
297: <li>In ftp(1), if http fetch returns less than Content-Length, error out.
298: <li>gcc/binutils/ld support for mvme88k.
299: <li>Fix cua device handling in com(4) and pccom(4).
300: <li>Handle MNT_NODEV in nullfs.
301: <li>Correct a tcp ISS bug.
302: <li>Support sparc bootpath handling in qe(4) and be(4).
1.17 naddy 303: <li><font color="#e00000"><strong>hp300 X in the 2.4 release has an installation issue. <a href="errata24.html#hp300X">Further details available</a></strong></font>.
1.1 deraadt 304: <li>Fix isa_check_intr() support on the alpha.
305: <li>Fix breaking support in <strong>fold -s</strong>.
306: <li>Improve long line support in hexdump(1).
307: <li>Improve some ipf-related man pages.
308: <li>Fix a server-side NFS issue for the alpha.
309: <li>Sendmail 8.9.3.
310: <li>ipf 3.2.10.
311: <li>Dynamically allocate some buffers in rdist to reduce memory footprint on directories that contain many hard-linked files.
312: <li>Some other random netinet fixes.
313: <li>Do not count ipsec related "route misses" as routing lookup failures.
314: <li>Support MSG_BCAST and MSG_MCAST in recvmsg(2).
315: <li>Allow higher uids in adduser(8).
316: <li>Make h2ph grok hex constants with suffixes, exponential floats, and the [fF] suffixes.
317: <li>Add '-p pattern' option to split for matching with a regexp.
318: <li>More man page fixes.
319: <li>Increase size of routing statistics variables.
320: <li>More info from rarpd in -d (debug) mode.
321: <li>${CC} and ${COPTS} were not always getting passed in Makefile.bsd-wrapper.
1.32 tobias 322: <li>tail(1) and wc(1) can now deal with files > 2gig.
1.1 deraadt 323: <li>xterm patchlevel 91.
324: <li>Permit non-root users to mkfifo onto NFS filesystems.
325: <li>Fix AFS on mips.
326: <li>sparc sbus spif driver (serial+parallel card).
327: <li>Update curses to ncurses-4.2-990130 and import infocmp(1).
328: <li>Correct handling of negative fields in <strong>df -h</strong>.
329: <li>Fix i386 __asm clobber control, for egcs.
330: <li>Various fixes to the bt848 driver.
331: <li>Fix a multiple free patch in ipnat.
332: <li>preliminary powerpc PIC support.
333: <li>powerpc destructors were being called twice. Now only call them once.
334: <li>Add support for more pcmcia cards.
335: <li>Fix NEWRENO behaviour, which was buggy.
336: <li>tzdata1999a
337: <li>Add <strong>-b</strong> flag to install(1).
338: <li>For the bootblocks, fix error returns when running in decompressing mode.
339: <li>Disable i386 bootblocks E801 memory probing test.
1.17 naddy 340: <li><font color="#e00000"><strong>SECURITY ISSUE: Fix a select(2)/accept(2) race condition. <a href="errata24.html#accept">A patch is available</a></strong></font>.
1.6 rohee 341: <li>Support & username expansion in sendbug, and fix the /tmp race.
1.1 deraadt 342: <li>Avoid a sendmail DOS regarding huge numbers of header lines.
343: <li>rmdir(".") now returns EBUSY, as XPG2 says.
344: <li>pdksh 5.2.13.7
345: <li>In config(8), order probes according to device attachment, not device declaration.
346: <li>Many more games fixes.
347: <li>More man page fixes.
1.32 tobias 348: <li>Correct st_blocks for files > 2GB.
1.1 deraadt 349: <li>Fix mktemp(3) behaviour in gcc(1). It now handles files safely! (Took 2 years to get this security issue resolved).
350: <li>Many pid_t fixes to the source tree.
351: <li>PID_MAX has to be at most 32766, due to interactions with sys/compat.
352: <li>texinfo 3.12
353: <li>Addition of raidframe.
354: <li>PNIC ethernet driver.
355: <li>Kernel threads (ie. kthread).
356: <li>Fix a varargs related bug in patch(1).
357: <li>MNT_NOATIME support in msdosfs.
358: <li>VIA Rhine ethernet driver.
1.17 naddy 359: <li><font color="#e00000"><strong>Fix an nfs v3 bug when talking to the pedantic solaris7 server. <a href="errata24.html#nfs3_solaris7">A patch is available</a></strong></font>.
1.1 deraadt 360: <li>Merge other fixes from ksh 5.2.13.6
361: <li>Add RFNOWAIT support to rfork(2).
362: <li>Careful strtol() use in make(1).
363: <li>Fix a vm cache trashing bug.
364: <li>XFree86 3.3.3.1
365: <li>More care in getmntinfo(3).
366: <li>Fix an msdosfs bug.
367: <li>Driver for Macronix 98713, 98713A, 98715 and 98725.
368: <li>Check for more possible divide-by-zero cases in disklabel handling.
369: <li>Fix a display bug in tetris(6).
1.3 deraadt 370: <li>Make lpt accept polled mode when its interrupt is unavailable.
1.1 deraadt 371: <li>uint*_t types from newer POSIX standards.
372: <li>Delay irq allocation for the i82365 pcmcia chipset -- we want better interrupts to be given to pcmcia cards.
373: <li>Import of NRL IPv6.
374: <li>new airports database.
375: <li>Fix an apm bug for <strong>halt -p</strong>.
376: <li>Update CellServDB.
377: <li>In syslogd(8), be careful about <strong>sun_path</strong> termination.
378: <li>Avoid kernel divide-by-zero panics in disklabel handling.
379: <li>newsyslog(8) no longer needs to care about MAX_PID.
1.11 pvalchev 380: <li>In find(1), correct ! handling in parenthesis
1.1 deraadt 381: <li>In strftime(3), document what an ISO 8601 year is. It's not what you think it is..
382: <li>In rdump(8), use TCP_NODELAY for a significant performance enhancement.
383: <li>Fix nsphy(4) MII driver to work on finicky hme(4) driver.
384: <li>Put some named files in the right place (post-2.4 bug).
385: <li>For nfs booting, print addresses using kernel inet_ntoa().
386: <li>range overflow in edquota(8).
387: <li>Provide pcmcia IO bus mapper with a list of regions where it should preferentially map new devices.
388: <li>In patch(1), remove some local functions and use basename(3) and dirname(3) instead.
1.6 rohee 389: <li>Integration of NetBSD's MIDI & sequencer support.
1.1 deraadt 390: <li>Sendmail 8.9.2
391: <li>c++ does not permit a structure to have a member that is called the same name as the structure (ie. <strong>netinet/in.h</strong> had <strong>struct ip_opts</strong> containing a member called <strong>ip_opts[]</strong>. Fix that.
392: <li>Fix ${PIPE} uses throughout the source tree (not kernel compiles though).
393: <li>A few htdocs were missing in our httpd(8) install. Add them.
394: <li>Some pcmcia fixes.
395: <li>Correct nested <strong>ip_sum</strong> in icmp packets.
1.21 deraadt 396: <li>Correct the values of <strong>ip_len</strong>, <strong>ip_off</strong>, <strong>ip_id</strong>, and udp <strong>uh_sum</strong> fields for the embedded ip packet inside an icmp packet. (<strong>ip_sum</strong> is still wrong).
1.1 deraadt 397: <li>More locking fixes in the vfs layer.
1.17 naddy 398: <li><font color="#e00000"><strong>Fix df(1) on NFS v3 filesystems. <a href="errata24.html#nfs3">A source code patch is available which solves this problem</a></strong></font>.
1.1 deraadt 399: <li>Crank PID_MAX to 65535.
400: <li>Do better pcmcia interrupt allocation.
401: <li>Make <strong>ip_id</strong> non-repeating random, like DNS id's.
402: <li>range check signal conversions in the compat layer.
403: <li>make mount(2) return EOPNOTSUPP for filesystem missing in kernel.
404: <li>Fix a pcmcia com(4) driver panic.
405: <li>Many libc_r improvements.
406: <li>In xl(4), if no MII found, do not panic.
407: <li>Fix sh(1) and csh(1) builtin kill(1) clones so that they support -SIGXXX.
408: <li>Activate isakmpd in the build process.
409: <li>Newer version of isakmpd.
410: <li>In kgmon(8), let libkvm decide the default kernel name.
411: <li>Repeat open operations in cdio, in case of slow changers.
1.17 naddy 412: <li><font color="#e00000"><strong>SECURITY ISSUE: Even more bootpd paranoia. Updated patches are available for <a href="errata23.html#bootpd">2.3</a> and <a href="errata24.html#bootpd">2.4</a></strong></font>.
1.1 deraadt 413: <li>Make sa(8) 64bit clean.
414: <li>In install(1), handle sparse files the same way pax(1) does.
1.17 naddy 415: <li><font color="#e00000"><strong>Replace raw termcap/terminfo databases with new ones based on a common and shared termtypes database. <a href="errata24.html#terminfo">Since these databases had problems in the 2.4 release, updated versions are available</a></strong></font>.
1.1 deraadt 416: <li>Permit csh(1)-builtin printf function to have arguments.
417: <li>Fix a display problem in hexdump(1).
1.17 naddy 418: <li><font color="#e00000"><strong>Fix an i386 installboot bug which prevents proper installation when the root partition (or the root partition end) are placed BEYOND the 4GB line. <a href="errata24.html#installboot">A source code patch is available which solves this problem</a></strong></font>.
1.1 deraadt 419: <li>Flesh mktemp(3) manpage out significantly.
420: <li>Working <a href=mvme88k.html>mvme88k</a> port.
421: <li>For IPHDRINCL, check <strong>ip_hl</strong> for validity, too.
422: <li>Fix goal and max parameters in fmt(1).
423: <li>Do not believe SS20 machines that claim to have BURST64 support.
424: <li>In sparc le(3), be more careful about media handling and such.
425: <li>In ftp, if passive connections fail, try active.
426: <li>Morse decoding in morse(6).
427: <li>Numerous fixes to calendar(1), in particular it can now calculate Easter correctly.
428: <li>Various race/deadlock fixes to umount(2).
429: <li>More man page fixes.
430: <li>More isapnp devices.
431: <li>Fix rand(3) bug introduced into 2.4.
432: <li>Fix [:print:] in tr(1).
433: <li>Merge make(1) fixes and changes from other projects.
434: <li>Consider limits in fdavail().
435: <li>Fix layer in VFS layer function vinvalbuf().
436: <li>Fix a tl(4) bug which caused a particular IDE controller to look like an ethernet card...
437: <li>Increase sparc obio le driver memory to 8K, enhances performance.
438: <li>Remove itrunc3 panic case: It is invalid code.
439: <li>fast retransmit statistics in netstat(1).
440: <li>Many new ISA PNP devices.
441: <li>Make -ltermcap be -lcurses; and -lotermcap be -locurses, via links.
442: <li>For kerberosIV, install <strong>prot.h</strong> (some things require it).
443: <li>XFree86 3.3.3
1.17 naddy 444: <li><font color="#e00000"><strong>SECURITY ISSUE: Fix a remote exploit problem in bootpd (which noone runs anyways, without filtering, right?). This fixes a security problem. Patches are available for <a href="errata23.html#bootpd">2.3</a> and <a href="errata24.html#bootpd">2.4</a></strong></font>.
1.1 deraadt 445: <li>In cut(1), avoid an infinite loop.
446: <li>In top(1), skip disabled swap spaces.
447: <li>Even more man page fixes courtesy of our local man page repair fanatic.
448: <li>Fix a crash in ps(1).
449: <li>Make file(1) understand mp3 formats.
450: <li>Repair a recent bug introduced with the SACK/FACK changes (only affected the alpha).
451: <li>Add <strong>-C</strong> support to our patch(1).
452: <li>Numerous IPSEC-related fixes inside the kernel and outside.
453: <li>Many more man page fixes.
454: <li>In ipf(8), do not crash for bad config file.
455: <li>Do not permit tapesize estimate overflows in dump(8).
456: <li>Fix memory leaks in yacc(1), lex(1).
457: <li>In nslookup(1), fix an bug in some previous overflow handling.
458: <li>Permit "Total" bar in "systat swap" to shrink.
459: <li>Fix /tmp race in ctm(1).
460: <li>Make /etc/security consistant to /etc/mtree for the /var/backups directory.
461: <li>Fix a gzip bug.
462: <li>More careful buffer handling in rpc library.
463: <li>Handle spaced-out arguments in lorder(1).
464: <li>Since some drivers occasionally return busted d_secpercyl fields to readdisklabel(), do more checking inside readdisklabel() for those ports that run into this issue.
465: <li>A couple of missing prototypes added.
466: <li>More man page fixes.
467: <li>sudo 1.5.7
468: <li>New getcat(1) manpage.
1.23 pedro 469: <li>Serious improvements to libc_r. This is becoming usable.
1.1 deraadt 470: <li>More careful mmap handling in various device drivers.
471: <li>Exponential space growth in v?asprintf(3).
472: <li>More manpage fixes.
473: <li>Fix a crash of ksh(1).
474: <li>Ignore out-of-range environment LINES and COLUMNS in libocurses.
475: <li>In libcurses in the issetugid(2) case, ignore $TERMINFO.
1.17 naddy 476: <li><font color="#e00000"><strong>SECURITY ISSUE: In libocurses and libcurses in the issetugid(2) case, only ignore $TERMCAP if it is a path. <a href="errata24.html#termcap">A patch is available</a></strong></font>.
1.1 deraadt 477: <li>Support full set of pty devices in the MAKEDEV scripts.
478: <li>Make rl(4) match the Accton 1207D cards too.
479: <li>Prototype getpgid(2)
480: <li>Handle COMMENTS better in pkg_info(8).
481: <li>64-bit fixes in TCP SACK.
482: <li>Fix a bunch of strtol() range check errors.
483: <li>Improve tty permission checking in wall(1).
484: <li>NEWRENO, SACK, and FACK support in our TCP implementation. SACK and FACK are enabled by default.
485: <li>Added <i>adw</i>, the AdvanSys Ultra Wide PCI SCSI controller driver.
486: <li>Make yacc's skeleton file pass gcc -Wall.
487: <li>ncurses-4.2-981114
488: <li>Fix pcvt attribute handling
489: <li>Fix system() buffer mis-handlings in lynx(1)
490: <li>Use -lcurses in xterm(1)
491: <li>Preserve errno in a libutil/passwd.c function
492: <li>In libm, use write(2,...) instead of stdio code.
493: <li>Fix an IPSEC SPI mishandling bug.
494: <li>ncurses based tset(1).
495: <li>Fix an expression handling bug in as(1).
496: <li>Improve setregid() and setreuid() emulated behaviour.
497: <li>ftok() is now XPG compliant.
1.17 naddy 498: <li><font color="#e00000"><strong>Put userdir support back into httpd(8). <a href="errata24.html#userdir">A patch is available</a></strong></font>.
1.1 deraadt 499: <li>Put userdir support back into httpd(8).
500: <li>New daemon: isakmpd (ISAKMP/Oakley ipsec daemon).
501: <li>Move /tmp/bootpd.dump to /var/run to avoid filesystem race.
502: <li>Fix some manpages
503: <li>sudo 1.5.6p6
1.17 naddy 504: <li><font color="#e00000"><strong>Fix a remote lockup problem in the TCP packet decoding code. This fixes a security problem. Patches are available for <a href="errata23.html#tcpfix">2.3</a> and <a href="errata24.html#tcpfix">2.4</a></strong></font>.
1.1 deraadt 505: <li>Fix a deadlock in deadfs VOP_LOCK().
506: <li>Support -p option in ipmon(8).
507: <li>Change bpf to support full frame-grabbing for FDDI packets.
508: <li>Support more ISAPNP devices.
509: <li><a href=want.html>A new web page contains a list of hardware that the project could use for our development process.</a>
510: <li>Newer soft updates code.
511: <li>More manpage fixups.
512: <li>Driver for rl(4) PCI ethernet cards (rtl8129/8139).
513: <li>New phy drivers.
514: <li>Repair a bad strlcpy(3) manpage error.
515: <li>Support ftpd(8) running out of /etc/rc
516: <li>Fix fsck_ext2fs(8) for FIFOs.
517: <li>Detect and handle dma sbus cards in non-dma sbus slots.
518: <li>Handle scsi devices which terminate inquiry strings with 0xff.
519: <li>Fix append mode in freopen(3).
520: <li>Cache and hash hostnames in ipmon(8).
521: <li>Improvements to up-coming libc_r code.
522: <li>Minor possible security fix to xlock(1).
523: <li>Easter and Y2K leap year fix to calendar(1).
524: <li>Use optimal xfer blocksize in rm(1) instead of assuming 8K.
525: <li>Fix a bug in libocurses.
526: <li>curses 4.2-981017
527: <li>More man page fixes.
528: <li>Be sure to enable pci cards that the BIOS forgot about.
529: <li>Support hppa in rbootd(8)
530: <li>Merge bug fixes from pdksh 5.2.13.4
531: <li>Various new ppp(8) changes.
532: <li>Use correct ioctl for flushing in ipmon(8).
533: <li>Fix various tcp options bugs.
534: <li>Fix tcp timestamps.
1.17 naddy 535: <li><font color="#e00000"><strong>Repair sparc kvm dump header problem. <a href="errata24.html#kvm_mkdb">A patch is available</a></strong></font>.
1.1 deraadt 536: <li>More carefully check /etc/hostname.* file contents before using it.
537: <li>Fix mktemp() problems in lynx(1).
538: </ul>
539: <p>
540:
541: <hr>
542: <a href="index.html"><img height=24 width=24 src=back.gif border=0 alt=OpenBSD></a>
1.17 naddy 543: <a href="mailto:www@openbsd.org">www@openbsd.org</a>
1.44 ! deraadt 544: <br><small>$OpenBSD: plus25.html,v 1.43 2012/08/26 17:16:28 nick Exp $</small>
1.1 deraadt 545:
546: </body>
547: </html>
![[BACK]](/icons/back.gif){kind=icon}
Return to plus25.html CVS log ![[TXT]](/icons/text.gif){kind=icon}
![[DIR]](/icons/dir.gif){kind=icon}
Up to [local] / www