Annotation of www/plus25.html, Revision 1.5
1.1 deraadt 1: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML Strict//EN">
2: <html>
3: <head>
4: <title>OpenBSD 2.5 changes</title>
5: <link rev=made href=mailto:www@openbsd.org>
6: <meta name="resource-type" content="document">
7: <meta name="description" content="the main OpenBSD page">
8: <meta name="keywords" content="openbsd,main">
9: <meta name="distribution" content="global">
10: <meta name="copyright" content="This document copyright 1996 by OpenBSD.">
11: </head>
12:
13: <BODY BGCOLOR="#FFFFFF" TEXT="#000000" LINK="#23238E">
14:
15: <img alt="[OpenBSD]" height=30 width=141 SRC="images/smalltitle.gif">
16: <p>
1.4 deraadt 17: <h2><font color=#e00000>Changes made between OpenBSD 2.4 and OpenBSD 2.5</font><hr></h2>
1.1 deraadt 18:
19: <p>
20: This is a partial list of the major machine independent changes
21: (ie. these are the changes people ask about most often). Port
22: specific changes have also been made, and are sometimes mentioned
23: in the pages for the specific <a href=plat.html>ports</a> if you
24: are interested in further port-specific details. Many ports
25: have had architecture-specific enhancements relative to NetBSD,
26: but when they do not they certainly have plenty of platform-independent
27: changes, starting with those listed below..
28:
29: <p>
30: Note: <font color=#e00000>Problems for which patches exist are marked in red</font>.
31:
32: <p>
33: <h3>
1.5 ! deraadt 34: <a href=plus20.html>For changes leading up to OpenBSD 2.0, click here</a>.<br>
! 35: <a href=plus21.html>For changes leading up to OpenBSD 2.1, click here</a>.<br>
! 36: <a href=plus22.html>For changes leading up to OpenBSD 2.2, click here</a>.<br>
! 37: <a href=plus23.html>For changes leading up to OpenBSD 2.3, click here</a>.<br>
! 38: <a href=plus24.html>For changes leading up to OpenBSD 2.4, click here</a>.<br>
! 39: <a href=plus25.html>For changes leading up to OpenBSD 2.5, click here</a>.<br>
! 40: <a href=plus26.html>For changes leading up to OpenBSD 2.6, click here</a>.<br>
1.1 deraadt 41: <a href=plus.html>For changes in OpenBSD-current, click here</a>.
42: <br>
43: </h3>
44:
45: <hr>
46:
47: <p>
1.2 deraadt 48: <h3><font color=#0000e0>OpenBSD 2.5 released (May 19, 1999).</font></h3><p>
1.1 deraadt 49: <ul>
50:
51: <li>2.5 source tree frozen.
52: <li><font color=#e00000><strong>Fix ln kernel bug in vfs_lookup.c. <a href=errata24.html#lnpanic>A patch is available</a></strong></font>.
53: <li>Fix ipf return-rst panic bug.
54: <li>Add a -q flag to newfs, so that it does not print out information about the superblock backups. This is used by the install process.
55: <li>Do not permit any IPSEC code unless the admin has enabled it using sysctl.
56: <li>More ISAPNP devices.
57: <li>Do not permit local address spoofing using ip4.
58: <li>Do not permit ip4 tunneling unless the admin has enabled it using sysctl.
59: <li>More man page and games fixes.
60: <li>Significant improvements to disklabel(8) and the install procedure.
61: <li>For CD support, if READ_CD_CAPACITY fails as it does on some units, provide nice defaults so that other things do not fail later.
62: <li>Rearrange default interrupt ordering for pcmcia somewhat more.
63: <li>Improve multicast handling in /etc/rc.
64: <li>Silence initgroups(3), it should not spew to stderr on failure.
65: <li>sudo 1.5.9
66: <li>Numerous ipsec changes, further making isakmpd useful, etc. etc.
67: <li>Support hostname.bridge* files.
68: <li>Support some 100Mbit ne2000-like pcmcia cards.
69: <li>Further Qlogic ISP support for PCI and sbus versions..
70: <li>Add ssl log rotation to newsyslog.conf
71:
72: <li>In sun4m trap handler stubs, rd %wim which makes viking cpus much happier.
73: <li>lifetime expiration notifications for the IPSEC stack.
74: <li>PF_KEYv2 support in isakmpd(8).
75: <li>In kvm_mkdb(8), better fallback from /dev/ksyms to /bsd if there are problems with nlist(3).
76: <li>Fix in6 dependence in various netinet header files.
77: <li>Tail anchor search in makewhatis.sed, so that overwritten titles are dealt with right.
78: <li>Fix a problem regarding "\r" translation in talk(1).
79: <li>Some more games fixes.
80: <li>Workaround sun4m STP1020A errata #148494 regarding cache initialization.
81: <li>In ipsend(8), do not crash if no options provided.
82: <li>Various powerpc fixes, including further PIC support, and fix a kernel pmap crash.
83: <li><font color=#e00000><strong>SECURITY ISSUE: In poll(2), constrain the <strong>nfds</strong> parameter better, so that kvm starvation is less likely. <a href=errata24.html#poll>A patch is available</a></strong></font>.
84: <li>Make at(1) easier to use next year (ie. Y2K issue).
85: <li><font color=#e00000><strong>SECURITY ISSUE: Fix TSS fault handling. <a href=errata24.html#tss>A patch is available</a></strong></font>.
86: <li>In the ncr(4) driver, disable tagged queuing by default. Our filesystems and vfs layer is not prepared for this play-it-loose behaviour.
87: <li>Repair <strong>ypwhich -h</strong> support; it was broken when running on non-server machines.
88: <li>Add non-learning and non-discovery modes to the bridging code.
89: <li>Many more man page fixes.
90: <li>Do not allow users to mount umapfs, even if root chooses to permit kern.usermount activity.
91: <li>termtypes database version 10.2.7, with our local modifications.
92: <li>Many more non-standard isapnp devices.
93: <li>On various architectures, more default swapgeneric swap devices.
94: <li>If an MFS IO is successful, set b_resid to 0, so that vnd support works.
95: <li>Add find -W support for white-outs.
96: <li>Brand new version of the isp(4) driver for SBUS and PCI.
97: <li>Ensure that sb(4) devices have at least one drq; thus not falsely probing one particularily stupid isapnp sb-like device.
98: <li>ncurses-4.2-990316
99: <li>A nice ssl(8) man page.
100: <li>Various changes to the ssl install, so that /etc/ssl contains nicer default files.
101: <li>Various disklabel(8) improvements and bug fixes, so that our 2.5 release will be easier to install.
102: <li>Bug fixes to the tx(4) driver.
103: <li>In /etc/daily, do /tmp pruning with a <strong>find -x</strong> so that sub-mounts do not get trashed.
104: <li>Add a f.startwm function to twm(1), so that it can start other window managers.
105:
106: <li>On sparc cypress cpus, do write-through instead of write-back caching.
107: <li>In netstat(1), print subnets containing 0 octets correctly.
108: <li>Fix an NFS bug which previously caused free()'ing of negative lengths.
109: <li>ncurses-4.2-990314
110: <li>In disklabel(8), permit "delete *".
111: <li>Make <strong>ifa_refcnt</strong> a u_int, because of very large routing tables.
112: <li>Kernel scheduler performance improvement.
113: <li>Numerous more man page repairs.
114: <li>A start at powerpc PIC support.
115: <li>Fix atapi cdrom driver bug where last entry in TOC had seconds and frame zeroed.
116: <li>Fix some more games.
117: <li>Numerous more bridge improvements.
118: <li>ncurses-4.2-990307
119: <li>Turns out the RAMDISK for the 2.4 i386 release had errors for the default NE2000 device driver locations.
120: <li>wb(4) PCI driver for Winbond W89C840F 100mbit cards.
121: <li>Fix some more pcidevs and pnpdevs entries -- a few more new devices work as a result.
122: <li>libpthread goes away, since libc_r now works really well.
123: <li>Many more man page fixups.
124: <li>For open(2) with O_TRUNC, both st_ctime and st_mtime are to be updated.
125: <li>On the P3, disable the processor serial number.
126: <li>Fix make depend in kerberosIV sub-tree.
127: <li>On i386, add support for cpuid level 2, permitting L2 cache size probing.
128: <li>In pkg_info(8), handle unterminated comments.
129: <li>sudo 1.5.8p2.
130: <li>Make sure httpd(8) works when the RSA SSL library is not installed.
131: <li>In mountd(8), fix a parsing error for the file /etc/exports.
132:
133: <li>Man page clarifications for strncpy(3) and strncat(3), which people continue to misuse.
134: <li>Fix another ipsec bug.
135: <li>More bridge(4) tweaks.
136: <li>Support <strong>--</strong> argument seperator in less(1).
137: <li>Merge cap_mkdb(1) and info_mkdb(1).
138: <li>Fix RAMDISK sizing problems on i386, alpha, and sparc.
139: <li>Fix a DNS stall problem in login(1), related to AFS.
140: <li>A couple of ipsec pfkey fixes.
141: <li>Handle bogus priority specifications in renice(1).
142: <li>Improve compress performance in compress(1).
143: <li>Handle cs4232 isapnp cards better.
144: <li>Fix various source-tree Makefile build-twice bugs
145: <li>Fix a bug in cvs(1).
146: <li>In calendar(1), correctly handle yearly events occurring on fixed weekdays in all cases.
147: <li>Make more ethernet drivers bridge-aware.
148: <li>In talk(1), print fatal errors to stderr after curses has terminated.
149: <li>De-inline vnode_if stubs. This saves 120K in kernel size.
150: <li>Fix another coredumping case in Kerberos kadm library.
151: <li>Fix uninitialized variable bug in install(1).
152: <li>Implement RFNOWAIT with the exact same semantics as Plan9.
153: <li>Track SATYPE regs per PFKEY socket.
154: <li>Fix skeyinit(1) <strong>-n</strong> without an argument.
155: <li>Fix some panic cases in raidframe(4).
156: <li>Fix NFS3 NFS3ERR_JUKEBOX panic bug.
157: <li>Some ipsec error return patches.
158: <li>Other man page repairs..
159: <li>Add significant detailed information to select(2) manpage, which will help people not repeat mistakes others have made.
160: <li>Document timer{clear,add,sub,cmp,isset} in the getitimer(2) manpage.
161: <li>isapnp wss(4) support.
162: <li>curses 4.2-990301
163: <li>SIGINFO support in fsck_ffs(8). Try ^T during bootup.
164: <li>Support stand-alone "up" command in /etc/hostname.* files, for bridges and such.
165: <li>led driver support for Sun4 machines.
166: <li>Revamp some bridge(4) ioctls.
167: <li>Add mod_ssl 2.2.3 support to apache 1.3.4.
168: <li>Rename disklabel <strong>-p</strong> flag to <strong>-d</strong>, and document for the first time.
169: <li>apache 1.3.4
170: <li>cvs 1.10.5
171: <li>Incorporate extensive configuration work done on egcs, into our gcc tools.
172: <li>Fix infinite recursion bug in libkafs, which hit during login(8) if DNS was dead.
173: <li>On boot media, if swapon(8) exists on the install floppy, attempt to add swap early during install.
174: <li>Rename OpenBSD 2.4 to OpenBSD 2.5 -- we are moving into `release mode'.
175: <li>Divide by zero bugfix to netstat(1).
176: <li>Some fixes to the pkg_*(8) tools.
177: <li>Add more isapnp card identifiers.
178: <li>Fixes to the rl(4), pn(4), mx(4), xl(4), and tl(4) PCI ethernet drivers.
179: <li>Many ethernet drivers were doing an packet ownership check which prevented bridging from working, and was better done in ether_input().
180: <li>network bridging support. The packets go through ipf(8) on their way to delivery. See bridge(4) and brconfig(8).
181: <li>Some nfsd(8) and nfsiod(8) changes.
182: <li>Support the PNIC2 PCI ethernet controller in pn(4).
183: <li>Many many man page fixes.
184: <li>In ipsecadm(8), warn if DES or skipjack are used.
185: <li>isakmpd(8) update.
186: <li>newhashinit() kernel interface replaces hashinit() interface, and permits non-blocking malloc operation.
187: <li>Begin uvm import.
188: <li>Some man page improvements.
189: <li>Move ls(1) into ftpd(8).. directly.
190: <li>In setproctitle(3), if sysctl(2) fails do not crash.
191: <li>Constify getcap(3) API.
192: <li><font color=#e00000><strong>For the i386, fix /boot argument mapping. <a href=errata24.html#bootargv>A patch is available</a></strong></font>.
193: <li>Put skipjack in libc.
194: <li>Continue squishing new bugs in new ipsec PF_KEY code...
195: <li>Fix autosetting of d_type and _dtypename in wd(4).
196: <li><font color=#e00000><strong>SECURITY ISSUE: Fix the nlink overflow in FFS and EXT2FS. <a href=errata24.html#nlink>A patch is available</a></strong></font>.
197: <li>Add zegrep(1) and zfgrep(1).
198: <li>Change IPSEC stack to support PFKEYv2.
199: <li>PentiumIII detection.
200: <li>Fix two bugs in ifconfig(8); do not configure an address if not specified, and complain if more than src and dst addresses are specified.
201: <li>Fix another ping bug regarding payload alignment.
202: <li>Fix -R option in inetd(8).
203: <li>Fix send file function in cu(1).
204: <li>Some man page fixes.
205: <li>ncurses 4.2-990220
206: <li>NRL netinet6 compiles now.
207: <li>Two new kinds of rl(4) and vr(4) ethernet cards.
208: <li>Better promisc and multicast handling in sparc hme(4).
209: <li>Fix an rdist(8) bug.
210: <li>Handle powered-down xl(4) cards better.
211: <li><font color=#e00000><strong>SECURITY ISSUE: Fix an overflow in ping(8). <a href=errata24.html#ping>A patch is available</a></strong></font>.
212: <li>In fork(2), always spare 5 last processes for root.
213: <li>Better vis(3) support in savecore(8).
214: <li>Quiet apm(4) and add machdep.apmwarn sysctl.
215: <li>Fix endian-bug in the blowfish routines.
216: <li>Various vis(3) related overflows (by one char).
217: <li>First step at supporting >2G filess in less(1).
218: <li>Add -x, -p, and -m options to ls(1).
219: <li>In ld(1) and ld.so(1), do not optimize the search path when dealing with duplicate shared library names (even though both alternatives have problems).
220: <li>Fix an kernel ipf bug relating to out-going icmp.
221: <li><font color=#e00000><strong>SECURITY ISSUE: Fix an ipq race in ipintr(). <a href=errata24.html#ipqrace>A patch is available</a>, which must be applied after the <a href=errata24.html#maxqueue>maxqueue patch</a> has been installed.</strong></font>
222: <li>Allocate u-area early in fork1(), instead of vm_fork().
223: <li>Fix msdosfs bug regarding corrupted FAT32 root directories.
224: <li>Improve vfs lkm interface.
225: <li>sudo 1.5.8
226: <li>Make vm_page_alloc_contig() a standard VM system function.
227: <li>Fix DES weak key checking in libdes (and netinet/libdeslite).
228: <li>Improve the ipsec(4) man page.
229: <li>Fix <strong>netstat -A</strong> header.
230: <li><font color=#e00000><strong>SECURITY ISSUE: Improved fragment flood protection in the IP layer. <a href=errata24.html#maxqueue>A patch is available</a></strong></font>.
231: <li>IPSEC skipjack support (do not bother using this unless you are .gov or .mil).
232: <li>Check sub-regions better in subr_extent.c, which affects pcmcia.
233: <li>Add <strong>-f</strong> option to comm(1) for case folding.
234: <li>Some more man page fixups.
235: <li>In traceroute(1), do not permit normal users to set the source address as non-local.
236: <li>Make quoted strings work in the interactive mode in restore(8).
237: <li>Fix a padding byte in ipsec esp new.
238: <li>Use new pipe code on all architectures.
239: <li>Some man page repairs.
240: <li>Fix SIOCGIFCONF code in ypbind(8).
241: <li>New raidframe code.
242: <li>Improgve promisc/multicast support in a few sparc drivers.
243: <li>Merge changes from db.1.86 (but do not merge new hash code, since it has an incompatible format)
244: <li>Handle kernel malloc() failing, for TCP SACK block allocation.
245: <li>Do more careful system call range-checking and introduce socklen_t.
246: <li><font color=#e00000><strong>Fix a bug we introduced before 2.4 shipped: readv(2) and writev(2) with iov_len == 0 is legal. <a href=errata24.html#uio>A patch is available</a></strong></font>.
247: <li>Fix a pcmcia mapping bug regarding address space allocation.
248: <li>For wds(4) and ex(4) drivers, unmap address space if probing fails.
249: <li>In ipsecadm(8), verify that keys and IVs are specified in hex.
250: <li>Document that MD4 is pretty much broken, and MD5 is looking pretty bad too (so much for quality designs from RSA).
251: <li><font color=#e00000><strong>SECURITY ISSUE: i386 T_TRCTRAP DDB handling could cause a system crash. <a href=errata24.html#trctrap>A patch is available</a></strong></font>.
252: <li>tcpdump(8) out-of-range access in LLC decoding.
253: <li>Flesh out the vpn(8) manpage.
254: <li>Add old dbm-compatible interface code, from db-1.86
255: <li>Support Return-Path: in vacation(1).
256: <li>Network byte order for default lease time in dhclient(8).
257: <li>Uninitialized memory in ktrace(2) system call.
258: <li>Fix 88k support in libgmp.
259: <li>Make types(5) more useful.
260: <li>ncurses-4.2-990206
261: <li>Correct various freebsd/linux emulation issues.
262: <li>Correct directory entry reads for numerous binary emulators.
263: <li><font color=#e00000><strong>SECURITY ISSUE: Better RST handling in tcp input. <a href=errata24.html#rst>A patch is available</a></strong></font>.
264: <li>BeOS/i386 support in fdisk(8).
265: <li>Two more nop instructions in sparc locore.s for greater reliability on Viking CPUs.
266: <li>Pluralization fix in rup(1).
267: <li>Much more mvme88k support. The port is coming alive...
268: <li>In ftp(1), if http fetch returns less than Content-Length, error out.
269: <li>gcc/binutils/ld support for mvme88k.
270: <li>Fix cua device handling in com(4) and pccom(4).
271: <li>Handle MNT_NODEV in nullfs.
272: <li>Correct a tcp ISS bug.
273: <li>Support sparc bootpath handling in qe(4) and be(4).
274: <li><font color=#e00000><strong>hp300 X in the 2.4 release has an installation issue. <a href=errata24.html#hp300X>Further details available</a></strong></font>.
275: <li>Fix isa_check_intr() support on the alpha.
276: <li>Fix breaking support in <strong>fold -s</strong>.
277: <li>Improve long line support in hexdump(1).
278: <li>Improve some ipf-related man pages.
279: <li>Fix a server-side NFS issue for the alpha.
280: <li>Sendmail 8.9.3.
281: <li>ipf 3.2.10.
282: <li>Dynamically allocate some buffers in rdist to reduce memory footprint on directories that contain many hard-linked files.
283: <li>Some other random netinet fixes.
284: <li>Do not count ipsec related "route misses" as routing lookup failures.
285: <li>Support MSG_BCAST and MSG_MCAST in recvmsg(2).
286: <li>Allow higher uids in adduser(8).
287: <li>Make h2ph grok hex constants with suffixes, exponential floats, and the [fF] suffixes.
288: <li>Add '-p pattern' option to split for matching with a regexp.
289: <li>More man page fixes.
290: <li>Increase size of routing statistics variables.
291: <li>More info from rarpd in -d (debug) mode.
292: <li>${CC} and ${COPTS} were not always getting passed in Makefile.bsd-wrapper.
293: <li>tail(1) and wc(1) can now deal with files > 2gig.
294: <li>xterm patchlevel 91.
295: <li>Permit non-root users to mkfifo onto NFS filesystems.
296: <li>Fix AFS on mips.
297: <li>sparc sbus spif driver (serial+parallel card).
298: <li>Update curses to ncurses-4.2-990130 and import infocmp(1).
299: <li>Correct handling of negative fields in <strong>df -h</strong>.
300: <li>Fix i386 __asm clobber control, for egcs.
301: <li>Various fixes to the bt848 driver.
302: <li>Fix a multiple free patch in ipnat.
303: <li>preliminary powerpc PIC support.
304: <li>powerpc destructors were being called twice. Now only call them once.
305: <li>Add support for more pcmcia cards.
306: <li>Fix NEWRENO behaviour, which was buggy.
307: <li>tzdata1999a
308: <li>Add <strong>-b</strong> flag to install(1).
309: <li>For the bootblocks, fix error returns when running in decompressing mode.
310: <li>Disable i386 bootblocks E801 memory probing test.
311: <li><font color=#e00000><strong>SECURITY ISSUE: Fix a select(2)/accept(2) race condition. <a href=errata24.html#accept>A patch is available</a></strong></font>.
312: <li>Support & username expansion in sendbug, and fix the /tmp race.
313: <li>Avoid a sendmail DOS regarding huge numbers of header lines.
314: <li>rmdir(".") now returns EBUSY, as XPG2 says.
315: <li>pdksh 5.2.13.7
316: <li>In config(8), order probes according to device attachment, not device declaration.
317: <li>Many more games fixes.
318: <li>More man page fixes.
319: <li>Correct st_blocks for files > 2GB.
320: <li>Fix mktemp(3) behaviour in gcc(1). It now handles files safely! (Took 2 years to get this security issue resolved).
321: <li>Many pid_t fixes to the source tree.
322: <li>PID_MAX has to be at most 32766, due to interactions with sys/compat.
323: <li>texinfo 3.12
324: <li>Addition of raidframe.
325: <li>PNIC ethernet driver.
326: <li>Kernel threads (ie. kthread).
327: <li>Fix a varargs related bug in patch(1).
328: <li>MNT_NOATIME support in msdosfs.
329: <li>VIA Rhine ethernet driver.
330: <li><font color=#e00000><strong>Fix an nfs v3 bug when talking to the pedantic solaris7 server. <a href=errata24.html#nfs3_solaris7>A patch is available</a></strong></font>.
331: <li>Merge other fixes from ksh 5.2.13.6
332: <li>Add RFNOWAIT support to rfork(2).
333: <li>Careful strtol() use in make(1).
334: <li>Fix a vm cache trashing bug.
335: <li>XFree86 3.3.3.1
336: <li>More care in getmntinfo(3).
337: <li>Fix an msdosfs bug.
338: <li>Driver for Macronix 98713, 98713A, 98715 and 98725.
339: <li>Check for more possible divide-by-zero cases in disklabel handling.
340: <li>Fix a display bug in tetris(6).
1.3 deraadt 341: <li>Make lpt accept polled mode when its interrupt is unavailable.
1.1 deraadt 342: <li>uint*_t types from newer POSIX standards.
343: <li>Delay irq allocation for the i82365 pcmcia chipset -- we want better interrupts to be given to pcmcia cards.
344: <li>Import of NRL IPv6.
345: <li>new airports database.
346: <li>Fix an apm bug for <strong>halt -p</strong>.
347: <li>Update CellServDB.
348: <li>In syslogd(8), be careful about <strong>sun_path</strong> termination.
349: <li>Avoid kernel divide-by-zero panics in disklabel handling.
350: <li>newsyslog(8) no longer needs to care about MAX_PID.
351: <li>In find(1), correct ! handling in parethesis
352: <li>In strftime(3), document what an ISO 8601 year is. It's not what you think it is..
353: <li>In rdump(8), use TCP_NODELAY for a significant performance enhancement.
354: <li>Fix nsphy(4) MII driver to work on finicky hme(4) driver.
355: <li>Put some named files in the right place (post-2.4 bug).
356: <li>For nfs booting, print addresses using kernel inet_ntoa().
357: <li>range overflow in edquota(8).
358: <li>Provide pcmcia IO bus mapper with a list of regions where it should preferentially map new devices.
359: <li>In patch(1), remove some local functions and use basename(3) and dirname(3) instead.
360: <li>Integration of NetBSD's MIDI & sequencer support.
361: <li>Sendmail 8.9.2
362: <li>c++ does not permit a structure to have a member that is called the same name as the structure (ie. <strong>netinet/in.h</strong> had <strong>struct ip_opts</strong> containing a member called <strong>ip_opts[]</strong>. Fix that.
363: <li>Fix ${PIPE} uses throughout the source tree (not kernel compiles though).
364: <li>A few htdocs were missing in our httpd(8) install. Add them.
365: <li>Some pcmcia fixes.
366: <li>Correct nested <strong>ip_sum</strong> in icmp packets.
367: <li>Correct the values of <strong>ip_len</strong>, <strong>ip_off</strong>, <strong>ip_id</strong>, and udp <strong>uh_sum</strong> fields for the embedded ip packet inside an icmp packet. (<strong>ip_sum</strong> is still wrong.)
368: <li>More locking fixes in the vfs layer.
369: <li><font color=#e00000><strong>Fix df(1) on NFS v3 filesystems. <a href=errata24.html#nfs3>A source code patch is available which solves this problem</a></strong></font>.
370: <li>Crank PID_MAX to 65535.
371: <li>Do better pcmcia interrupt allocation.
372: <li>Make <strong>ip_id</strong> non-repeating random, like DNS id's.
373: <li>range check signal conversions in the compat layer.
374: <li>make mount(2) return EOPNOTSUPP for filesystem missing in kernel.
375: <li>Fix a pcmcia com(4) driver panic.
376: <li>Many libc_r improvements.
377: <li>In xl(4), if no MII found, do not panic.
378: <li>Fix sh(1) and csh(1) builtin kill(1) clones so that they support -SIGXXX.
379: <li>Activate isakmpd in the build process.
380: <li>Newer version of isakmpd.
381: <li>In kgmon(8), let libkvm decide the default kernel name.
382: <li>Repeat open operations in cdio, in case of slow changers.
383: <li><font color=#e00000><strong>SECURITY ISSUE: Even more bootpd paranoia. Updated patches are available for <a href=errata23.html#bootpd>2.3</a> and <a href=errata24.html#bootpd>2.4</a></strong></font>.
384: <li>Make sa(8) 64bit clean.
385: <li>In install(1), handle sparse files the same way pax(1) does.
386: <li><font color=#e00000><strong>Replace raw termcap/terminfo databases with new ones based on a common and shared termtypes database. <a href=errata24.html#terminfo>Since these databases had problems in the 2.4 release, updated versions are available</a></strong></font>.
387: <li>Permit csh(1)-builtin printf function to have arguments.
388: <li>Fix a display problem in hexdump(1).
389: <li><font color=#e00000><strong>Fix an i386 installboot bug which prevents proper installation when the root partition (or the root partition end) are placed BEYOND the 4GB line. <a href=errata24.html#installboot>A source code patch is available which solves this problem</a></strong></font>.
390: <li>Flesh mktemp(3) manpage out significantly.
391: <li>Working <a href=mvme88k.html>mvme88k</a> port.
392: <li>For IPHDRINCL, check <strong>ip_hl</strong> for validity, too.
393: <li>Fix goal and max parameters in fmt(1).
394: <li>Do not believe SS20 machines that claim to have BURST64 support.
395: <li>In sparc le(3), be more careful about media handling and such.
396: <li>In ftp, if passive connections fail, try active.
397: <li>Morse decoding in morse(6).
398: <li>Numerous fixes to calendar(1), in particular it can now calculate Easter correctly.
399: <li>Various race/deadlock fixes to umount(2).
400: <li>More man page fixes.
401: <li>More isapnp devices.
402: <li>Fix rand(3) bug introduced into 2.4.
403: <li>Fix [:print:] in tr(1).
404: <li>Merge make(1) fixes and changes from other projects.
405: <li>Consider limits in fdavail().
406: <li>Fix layer in VFS layer function vinvalbuf().
407: <li>Fix a tl(4) bug which caused a particular IDE controller to look like an ethernet card...
408: <li>Increase sparc obio le driver memory to 8K, enhances performance.
409: <li>Remove itrunc3 panic case: It is invalid code.
410: <li>fast retransmit statistics in netstat(1).
411: <li>Many new ISA PNP devices.
412: <li>Make -ltermcap be -lcurses; and -lotermcap be -locurses, via links.
413: <li>For kerberosIV, install <strong>prot.h</strong> (some things require it).
414: <li>XFree86 3.3.3
415: <li><font color=#e00000><strong>SECURITY ISSUE: Fix a remote exploit problem in bootpd (which noone runs anyways, without filtering, right?). This fixes a security problem. Patches are available for <a href=errata23.html#bootpd>2.3</a> and <a href=errata24.html#bootpd>2.4</a></strong></font>.
416: <li>In cut(1), avoid an infinite loop.
417: <li>In top(1), skip disabled swap spaces.
418: <li>Even more man page fixes courtesy of our local man page repair fanatic.
419: <li>Fix a crash in ps(1).
420: <li>Make file(1) understand mp3 formats.
421: <li>Repair a recent bug introduced with the SACK/FACK changes (only affected the alpha).
422: <li>Add <strong>-C</strong> support to our patch(1).
423: <li>Numerous IPSEC-related fixes inside the kernel and outside.
424: <li>Many more man page fixes.
425: <li>In ipf(8), do not crash for bad config file.
426: <li>Do not permit tapesize estimate overflows in dump(8).
427: <li>Fix memory leaks in yacc(1), lex(1).
428: <li>In nslookup(1), fix an bug in some previous overflow handling.
429: <li>Permit "Total" bar in "systat swap" to shrink.
430: <li>Fix /tmp race in ctm(1).
431: <li>Make /etc/security consistant to /etc/mtree for the /var/backups directory.
432: <li>Fix a gzip bug.
433: <li>More careful buffer handling in rpc library.
434: <li>Handle spaced-out arguments in lorder(1).
435: <li>Since some drivers occasionally return busted d_secpercyl fields to readdisklabel(), do more checking inside readdisklabel() for those ports that run into this issue.
436: <li>A couple of missing prototypes added.
437: <li>More man page fixes.
438: <li>sudo 1.5.7
439: <li>New getcat(1) manpage.
440: <li>Serious improvements to libc_r. This is becoming useable.
441: <li>More careful mmap handling in various device drivers.
442: <li>Exponential space growth in v?asprintf(3).
443: <li>More manpage fixes.
444: <li>Fix a crash of ksh(1).
445: <li>Ignore out-of-range environment LINES and COLUMNS in libocurses.
446: <li>In libcurses in the issetugid(2) case, ignore $TERMINFO.
447: <li><font color=#e00000><strong>SECURITY ISSUE: In libocurses and libcurses in the issetugid(2) case, only ignore $TERMCAP if it is a path. <a href=errata24.html#termcap>A patch is available</a></strong></font>.
448: <li>Support full set of pty devices in the MAKEDEV scripts.
449: <li>Make rl(4) match the Accton 1207D cards too.
450: <li>Prototype getpgid(2)
451: <li>Handle COMMENTS better in pkg_info(8).
452: <li>64-bit fixes in TCP SACK.
453: <li>Fix a bunch of strtol() range check errors.
454: <li>Improve tty permission checking in wall(1).
455: <li>NEWRENO, SACK, and FACK support in our TCP implementation. SACK and FACK are enabled by default.
456: <li>Added <i>adw</i>, the AdvanSys Ultra Wide PCI SCSI controller driver.
457: <li>Make yacc's skeleton file pass gcc -Wall.
458: <li>ncurses-4.2-981114
459: <li>Fix pcvt attribute handling
460: <li>Fix system() buffer mis-handlings in lynx(1)
461: <li>Use -lcurses in xterm(1)
462: <li>Preserve errno in a libutil/passwd.c function
463: <li>In libm, use write(2,...) instead of stdio code.
464: <li>Fix an IPSEC SPI mishandling bug.
465: <li>ncurses based tset(1).
466: <li>Fix an expression handling bug in as(1).
467: <li>Improve setregid() and setreuid() emulated behaviour.
468: <li>ftok() is now XPG compliant.
469: <li><font color=#e00000><strong>Put userdir support back into httpd(8). <a href=errata24.html#userdir>A patch is available</a></strong></font>.
470: <li>Put userdir support back into httpd(8).
471: <li>New daemon: isakmpd (ISAKMP/Oakley ipsec daemon).
472: <li>Move /tmp/bootpd.dump to /var/run to avoid filesystem race.
473: <li>Fix some manpages
474: <li>sudo 1.5.6p6
475: <li><font color=#e00000><strong>Fix a remote lockup problem in the TCP packet decoding code. This fixes a security problem. Patches are available for <a href=errata23.html#tcpfix>2.3</a> and <a href=errata24.html#tcpfix>2.4</a></strong></font>.
476: <li>Fix a deadlock in deadfs VOP_LOCK().
477: <li>Support -p option in ipmon(8).
478: <li>Change bpf to support full frame-grabbing for FDDI packets.
479: <li>Support more ISAPNP devices.
480: <li><a href=want.html>A new web page contains a list of hardware that the project could use for our development process.</a>
481: <li>Newer soft updates code.
482: <li>More manpage fixups.
483: <li>Driver for rl(4) PCI ethernet cards (rtl8129/8139).
484: <li>New phy drivers.
485: <li>Repair a bad strlcpy(3) manpage error.
486: <li>Support ftpd(8) running out of /etc/rc
487: <li>Fix fsck_ext2fs(8) for FIFOs.
488: <li>Detect and handle dma sbus cards in non-dma sbus slots.
489: <li>Handle scsi devices which terminate inquiry strings with 0xff.
490: <li>Fix append mode in freopen(3).
491: <li>Cache and hash hostnames in ipmon(8).
492: <li>Improvements to up-coming libc_r code.
493: <li>Minor possible security fix to xlock(1).
494: <li>Easter and Y2K leap year fix to calendar(1).
495: <li>Use optimal xfer blocksize in rm(1) instead of assuming 8K.
496: <li>Fix a bug in libocurses.
497: <li>curses 4.2-981017
498: <li>More man page fixes.
499: <li>Be sure to enable pci cards that the BIOS forgot about.
500: <li>Support hppa in rbootd(8)
501: <li>Merge bug fixes from pdksh 5.2.13.4
502: <li>Various new ppp(8) changes.
503: <li>Use correct ioctl for flushing in ipmon(8).
504: <li>Fix various tcp options bugs.
505: <li>Fix tcp timestamps.
506: <li><font color=#e00000><strong>Repair sparc kvm dump header problem. <a href=errata24.html#kvm_mkdb>A patch is available</a></strong></font>.
507: <li>More carefully check /etc/hostname.* file contents before using it.
508: <li>Fix mktemp() problems in lynx(1).
509: </ul>
510: <p>
511:
512: This list mentions mostly platform-independent changes. For a list of changes
513: made in a particular platform, please check the page for that platform. If you
514: find them not listed there, the changes are either (1) not being documented or
515: (2) are documented here.<br><br>
516:
517: <hr>
518: <p>
519: <h3>
1.5 ! deraadt 520: <a href=plus20.html>For changes leading up to OpenBSD 2.0, click here</a>.<br>
! 521: <a href=plus21.html>For changes leading up to OpenBSD 2.1, click here</a>.<br>
! 522: <a href=plus22.html>For changes leading up to OpenBSD 2.2, click here</a>.<br>
! 523: <a href=plus23.html>For changes leading up to OpenBSD 2.3, click here</a>.<br>
! 524: <a href=plus24.html>For changes leading up to OpenBSD 2.4, click here</a>.<br>
! 525: <a href=plus25.html>For changes leading up to OpenBSD 2.5, click here</a>.<br>
! 526: <a href=plus26.html>For changes leading up to OpenBSD 2.6, click here</a>.<br>
1.1 deraadt 527: <a href=plus.html>For changes leading in OpenBSD-current, click here</a>.
528: <br>
529: </h3>
530:
531: <hr>
532: <a href="index.html"><img height=24 width=24 src=back.gif border=0 alt=OpenBSD></a>
533: <a href=mailto:www@openbsd.org>www@openbsd.org</a>
1.5 ! deraadt 534: <br><small>$OpenBSD: plus25.html,v 1.4 1999/09/22 18:33:45 deraadt Exp $</small>
1.1 deraadt 535:
536: </body>
537: </html>
![[BACK]](/icons/back.gif){kind=icon}
Return to plus25.html CVS log ![[TXT]](/icons/text.gif){kind=icon}
![[DIR]](/icons/dir.gif){kind=icon}
Up to [local] / www