===================================================================
RCS file: /cvsrepo/anoncvs/cvs/www/plus26.html,v
retrieving revision 1.2
retrieving revision 1.3
diff -c -r1.2 -r1.3
*** www/plus26.html	1999/11/03 20:31:39	1.2
--- www/plus26.html	1999/11/09 09:00:36	1.3
***************
*** 224,230 ****
  <li>Fix buf overflow in amd(8).
  <li>Support AAA-131CF card in ahc(4) driver.
  <li>Check SACK hole validity better, and do sequence space arithmetic better.
! <li><font color=#e00000><strong>SECURITY ISSUE: In cron(8), make sure argv[] is NULL terminated in the fake popen() and run sendmail as the user, not as root. <a href=errata.html#cron>A patch is available</a></strong></font>.
  <li>Some fixes to newsyslog(8).
  <li>Disable SACK for now; some issues remain.
  <li>Buffer overflow fixes in from(1).
--- 224,230 ----
  <li>Fix buf overflow in amd(8).
  <li>Support AAA-131CF card in ahc(4) driver.
  <li>Check SACK hole validity better, and do sequence space arithmetic better.
! <li><font color=#e00000><strong>SECURITY ISSUE: In cron(8), make sure argv[] is NULL terminated in the fake popen() and run sendmail as the user, not as root. <a href=errata25.html#cron>A patch is available</a></strong></font>.
  <li>Some fixes to newsyslog(8).
  <li>Disable SACK for now; some issues remain.
  <li>Buffer overflow fixes in from(1).
***************
*** 265,271 ****
  <li>In pcmcia ep(4) driver, support 3CXEM556B-INT.
  <li>Remove useless if_ep shutdown hook. 
  <li>Import USB code.
! <li><font color=#e00000><strong>SECURITY ISSUE: The procfs and fdescfs filesystems had an overrun in their handling of uio_offset in their readdir() routines. (These filesystems are not enabled by default). <a href=errata.html#miscfs>A patch is available</a></strong></font>.
  <li>Repair: probe svr4 emulation before linux once again.
  <li>Support -M and -N flags in uptime(1).
  <li>Detect IDT WinChip models.
--- 265,271 ----
  <li>In pcmcia ep(4) driver, support 3CXEM556B-INT.
  <li>Remove useless if_ep shutdown hook. 
  <li>Import USB code.
! <li><font color=#e00000><strong>SECURITY ISSUE: The procfs and fdescfs filesystems had an overrun in their handling of uio_offset in their readdir() routines. (These filesystems are not enabled by default). <a href=errata25.html#miscfs>A patch is available</a></strong></font>.
  <li>Repair: probe svr4 emulation before linux once again.
  <li>Support -M and -N flags in uptime(1).
  <li>Detect IDT WinChip models.
***************
*** 278,284 ****
  <li>Skip hostname.* files if the interface does not exist.
  <li>Make mbuf panic messages unique.
  <li>Repair interface walking in rarpd(8).
! <li><font color=#e00000><strong>SECURITY ISSUE: Stop profiling (see profil(2)) when we execve() a new process. <a href=errata.html#profil>A patch is available</a></strong></font>.
  <li>pcmcia device attach/dettachment code, supporting network and serial devices now.
  <li>vdevgone() internal kernel API.
  <li>If fread(3) returns EBADF, also set the error flag.
--- 278,284 ----
  <li>Skip hostname.* files if the interface does not exist.
  <li>Make mbuf panic messages unique.
  <li>Repair interface walking in rarpd(8).
! <li><font color=#e00000><strong>SECURITY ISSUE: Stop profiling (see profil(2)) when we execve() a new process. <a href=errata25.html#profil>A patch is available</a></strong></font>.
  <li>pcmcia device attach/dettachment code, supporting network and serial devices now.
  <li>vdevgone() internal kernel API.
  <li>If fread(3) returns EBADF, also set the error flag.
***************
*** 298,310 ****
  <li>/tmp race repairs in yacc(1).
  <li>Propogate TMPDIR better into locate.updatedb(8).
  <li>Kill gzip sub-processes in pax(1) instead of letting them die from SIGPIPE.
! <li><font color=#e00000><strong>SECURITY ISSUE: In /etc/rc, use mktemp(1) for motd re-writing and change the find(1) to use -execdir. <a href=errata.html#rc>A patch is available</a></strong></font>.
  <li>Support for 3c515 isapnp 100mbit ethernet card, in ef(4).
  <li>Chown/chmod all of the pty devices.
  <li>If /etc/fstab is 0-length or not a regular file, have setfsent(3) fail.
  <li>Import of mailwrapper(8) into the tree.
  <li>Games updated.
! <li><font color=#e00000><strong>SECURITY ISSUE: Do not permit regular users to chflags(2) or fchflags(2) character or block devices. <a href=errata.html#chflags>A patch is available</a></strong></font>.
  <li>New raidframe code.
  <li>Make sure install scripts remove async mount conditions before attempting to installboot(8).
  <li>Have <strong>route flush</strong> skip PF_KEY flows. 
--- 298,310 ----
  <li>/tmp race repairs in yacc(1).
  <li>Propogate TMPDIR better into locate.updatedb(8).
  <li>Kill gzip sub-processes in pax(1) instead of letting them die from SIGPIPE.
! <li><font color=#e00000><strong>SECURITY ISSUE: In /etc/rc, use mktemp(1) for motd re-writing and change the find(1) to use -execdir. <a href=errata25.html#rc>A patch is available</a></strong></font>.
  <li>Support for 3c515 isapnp 100mbit ethernet card, in ef(4).
  <li>Chown/chmod all of the pty devices.
  <li>If /etc/fstab is 0-length or not a regular file, have setfsent(3) fail.
  <li>Import of mailwrapper(8) into the tree.
  <li>Games updated.
! <li><font color=#e00000><strong>SECURITY ISSUE: Do not permit regular users to chflags(2) or fchflags(2) character or block devices. <a href=errata25.html#chflags>A patch is available</a></strong></font>.
  <li>New raidframe code.
  <li>Make sure install scripts remove async mount conditions before attempting to installboot(8).
  <li>Have <strong>route flush</strong> skip PF_KEY flows. 
***************
*** 312,318 ****
  <li>Have pkg_create(1) use tar -T.
  <li>Add -T option to tar(1).
  <li>Fix fgetln(3) issue in pax(1).
! <li><font color=#e00000><strong>SECURITY ISSUE: Make nroff(1) call groff(1) with the -S option. <a href=errata.html#nroff>A patch is available</a></strong></font>.
  <li>If src file does not exist, have <strong>mv -i</strong> complain immediately.
  <li>Bug fix to pkg_add(8).
  <li>More man page cleanups.
--- 312,318 ----
  <li>Have pkg_create(1) use tar -T.
  <li>Add -T option to tar(1).
  <li>Fix fgetln(3) issue in pax(1).
! <li><font color=#e00000><strong>SECURITY ISSUE: Make nroff(1) call groff(1) with the -S option. <a href=errata25.html#nroff>A patch is available</a></strong></font>.
  <li>If src file does not exist, have <strong>mv -i</strong> complain immediately.
  <li>Bug fix to pkg_add(8).
  <li>More man page cleanups.
***************
*** 392,398 ****
  <li>Many man page improvements.
  <li>Newer version of isakmpd(8).
  <li>Support PAGER properly in pkg_install(8).
! <li><font color=#e00000><strong>SECURITY ISSUE: Fix an ipsec_in_use out-of-sync condition. <a href=errata.html#ipsec_in_use>A patch is available</a></strong></font>.
  <li>Add support for TCP MD5 (RFC 2385) option called TCP_SIGNATURE used for authenticating BGP sessions.
  <li>Support SIGUSR1 in init(8), used by i386 keyboard halt code, and make init(8) smart enough to run /etc/rc.shutdown
  <li>On i386 pcvt console, have CTRL-ALT-DEL sent a SIGUSR1 to init.
--- 392,398 ----
  <li>Many man page improvements.
  <li>Newer version of isakmpd(8).
  <li>Support PAGER properly in pkg_install(8).
! <li><font color=#e00000><strong>SECURITY ISSUE: Fix an ipsec_in_use out-of-sync condition. <a href=errata25.html#ipsec_in_use>A patch is available</a></strong></font>.
  <li>Add support for TCP MD5 (RFC 2385) option called TCP_SIGNATURE used for authenticating BGP sessions.
  <li>Support SIGUSR1 in init(8), used by i386 keyboard halt code, and make init(8) smart enough to run /etc/rc.shutdown
  <li>On i386 pcvt console, have CTRL-ALT-DEL sent a SIGUSR1 to init.
***************
*** 500,506 ****
  <li>Add <strong>-p</strong> flag to encrypt(1).
  <li>Newer version of bktr(4) driver.
  <li>ncurses-4.2-990516
! <li><font color=#e00000><strong>Correct some realloc(3) misuses in the fts(3) routines. <a href=errata.html#fts>A patch is available</a></strong></font>.
  <li>Add xe(4) xircom ethernet driver.
  <li>Add support for static arp entries that cannot be overwritten.
  <li>Many man page fixes.
--- 500,506 ----
  <li>Add <strong>-p</strong> flag to encrypt(1).
  <li>Newer version of bktr(4) driver.
  <li>ncurses-4.2-990516
! <li><font color=#e00000><strong>Correct some realloc(3) misuses in the fts(3) routines. <a href=errata25.html#fts>A patch is available</a></strong></font>.
  <li>Add xe(4) xircom ethernet driver.
  <li>Add support for static arp entries that cannot be overwritten.
  <li>Many man page fixes.
***************
*** 513,519 ****
  <li>Fix bounds control in msgs(1).
  <li>Fix 'X' check in gcc printf format checker.
  <li>Fix divide by zero in libcurses.
! <li><font color=#e00000><strong>A reliability patch for TCP over IPSEC ESP tunnels. <a href=errata.html#ipsec1>A patch is available</a></strong></font>.
  <li>Improvements to the ss(4) driver.
  <li>Fix various endian related problems in nm(1), ranlib(1), strip(1), and size(1).
  <li>Do not rotate kerberos logs using newsyslog.conf
--- 513,519 ----
  <li>Fix bounds control in msgs(1).
  <li>Fix 'X' check in gcc printf format checker.
  <li>Fix divide by zero in libcurses.
! <li><font color=#e00000><strong>A reliability patch for TCP over IPSEC ESP tunnels. <a href=errata25.html#ipsec1>A patch is available</a></strong></font>.
  <li>Improvements to the ss(4) driver.
  <li>Fix various endian related problems in nm(1), ranlib(1), strip(1), and size(1).
  <li>Do not rotate kerberos logs using newsyslog.conf
***************
*** 550,562 ****
  <li>More ppp(8) improvements and bug fixes. 
  <li>More isakmpd(8) improvements and bug fixes.
  <li>In calendar(1), fix offset bug for yearly events.
! <li><font color=#e00000><strong>A reliability patch for ext2fs. <a href=errata.html#bmap_trap>A patch is available</a></strong></font>.
  <li>Repair a mis-handling of non-terminated utmp strings in w(1).
  <li>m68k optimized asm version of strlcpy(3).
  <li>Do not accept incoming packets on a down interface.
  <li>More strict isapnp detection for the isa ep(8) cards.
  <li>kcore handling for the m68k ports.
! <li><font color=#e00000><strong>A serious reliability patch for the powerpc port, regarding traps and signals. <a href=errata.html#powerpc_trap>Patches are available</a></strong></font>.
  <li>Support power-down mode in the mac68k port.
  <li>Fix a retransmission problem in tcp_newreno.
  <li>Fix a sequence wraparound bug in very large tcp transfers.
--- 550,562 ----
  <li>More ppp(8) improvements and bug fixes. 
  <li>More isakmpd(8) improvements and bug fixes.
  <li>In calendar(1), fix offset bug for yearly events.
! <li><font color=#e00000><strong>A reliability patch for ext2fs. <a href=errata25.html#bmap_trap>A patch is available</a></strong></font>.
  <li>Repair a mis-handling of non-terminated utmp strings in w(1).
  <li>m68k optimized asm version of strlcpy(3).
  <li>Do not accept incoming packets on a down interface.
  <li>More strict isapnp detection for the isa ep(8) cards.
  <li>kcore handling for the m68k ports.
! <li><font color=#e00000><strong>A serious reliability patch for the powerpc port, regarding traps and signals. <a href=errata25.html#powerpc_trap>Patches are available</a></strong></font>.
  <li>Support power-down mode in the mac68k port.
  <li>Fix a retransmission problem in tcp_newreno.
  <li>Fix a sequence wraparound bug in very large tcp transfers.
***************
*** 607,613 ****
  <hr>
  <a href="index.html"><img height=24 width=24 src=back.gif border=0 alt=OpenBSD></a> 
  <a href=mailto:www@openbsd.org>www@openbsd.org</a>
! <br><small>$OpenBSD: plus26.html,v 1.2 1999/11/03 20:31:39 espie Exp $</small>
  
  </body>
  </html>
--- 607,613 ----
  <hr>
  <a href="index.html"><img height=24 width=24 src=back.gif border=0 alt=OpenBSD></a> 
  <a href=mailto:www@openbsd.org>www@openbsd.org</a>
! <br><small>$OpenBSD: plus26.html,v 1.3 1999/11/09 09:00:36 deraadt Exp $</small>
  
  </body>
  </html>