| version 1.16, 2002/10/17 08:47:58 |
version 1.17, 2003/03/06 16:27:10 |
|
|
| <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML Strict//EN"> |
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"> |
| <html> |
<html> |
| <head> |
<head> |
| <title>OpenBSD 2.6 changes</title> |
<title>OpenBSD 2.6 changes</title> |
| <link rev=made href=mailto:www@openbsd.org> |
<link rev=made href="mailto:www@openbsd.org"> |
| <meta name="resource-type" content="document"> |
<meta name="resource-type" content="document"> |
| <meta name="description" content="the main OpenBSD page"> |
<meta name="description" content="the main OpenBSD page"> |
| <meta name="keywords" content="openbsd,main"> |
<meta name="keywords" content="openbsd,main"> |
|
|
| |
|
| <a href="index.html"><img alt="[OpenBSD]" height="30" width="141" src="images/smalltitle.gif" border="0"></a> |
<a href="index.html"><img alt="[OpenBSD]" height="30" width="141" src="images/smalltitle.gif" border="0"></a> |
| <p> |
<p> |
| <h2><font color=#e00000>Changes made between OpenBSD 2.5 and OpenBSD 2.6</font><hr></h2> |
<h2><font color="#e00000">Changes made between OpenBSD 2.5 and OpenBSD 2.6</font></h2> |
| |
<hr> |
| |
|
| <p> |
<p> |
| This is a partial list of the major machine independent changes |
This is a partial list of the major machine independent changes |
|
|
| changes, starting with those listed below.. |
changes, starting with those listed below.. |
| |
|
| <p> |
<p> |
| Note: <font color=#e00000>Problems for which patches exist are marked in red</font>. |
Note: <font color="#e00000">Problems for which patches exist are marked in red</font>. |
| |
|
| <p> |
<p> |
| <h3> |
<h3> |
|
|
| <hr> |
<hr> |
| |
|
| <p> |
<p> |
| <h3><font color=#0000e0>OpenBSD 2.6 released (December 1, 1999).</font></h3><p> |
<h3><font color="#0000e0">OpenBSD 2.6 released (December 1, 1999).</font></h3><p> |
| <ul> |
<ul> |
| <li>2.6 source tree frozen. |
<li>2.6 source tree frozen. |
| <li>Merge in some critical ATAPI fixes. |
<li>Merge in some critical ATAPI fixes. |
| <li>Force FDSCRIPTS. |
<li>Force FDSCRIPTS. |
| <li><font color=#e00000><strong>RELIABILITY ISSUE: Fix a bug in the brooktree driver which permitted any user to crash some OpenBSD/i386 machines. <a href=errata25.html#brooktree>A patch is available</a></strong></font>. |
<li><font color="#e00000"><strong>RELIABILITY ISSUE: Fix a bug in the brooktree driver which permitted any user to crash some OpenBSD/i386 machines. <a href="errata25.html#brooktree">A patch is available</a></strong></font>. |
| <li>Separate help(1) command, and a separate help(1) man page. |
<li>Separate help(1) command, and a separate help(1) man page. |
| <li>Move wrapper handling to the child process, in sshd(8). |
<li>Move wrapper handling to the child process, in sshd(8). |
| <li>Various fixes for the bignum and RSA handling code in sshd(8). |
<li>Various fixes for the bignum and RSA handling code in sshd(8). |
|
|
| <li>Fix buf overflow in amd(8). |
<li>Fix buf overflow in amd(8). |
| <li>Support AAA-131CF card in ahc(4) driver. |
<li>Support AAA-131CF card in ahc(4) driver. |
| <li>Check SACK hole validity better, and do sequence space arithmetic better. |
<li>Check SACK hole validity better, and do sequence space arithmetic better. |
| <li><font color=#e00000><strong>SECURITY ISSUE: In cron(8), make sure argv[] is NULL terminated in the fake popen() and run sendmail as the user, not as root. <a href=errata25.html#cron>A patch is available</a></strong></font>. |
<li><font color="#e00000"><strong>SECURITY ISSUE: In cron(8), make sure argv[] is NULL terminated in the fake popen() and run sendmail as the user, not as root. <a href="errata25.html#cron">A patch is available</a></strong></font>. |
| <li>Some fixes to newsyslog(8). |
<li>Some fixes to newsyslog(8). |
| <li>Disable SACK for now; some issues remain. |
<li>Disable SACK for now; some issues remain. |
| <li>Buffer overflow fixes in from(1). |
<li>Buffer overflow fixes in from(1). |
|
|
| <li>In pcmcia ep(4) driver, support 3CXEM556B-INT. |
<li>In pcmcia ep(4) driver, support 3CXEM556B-INT. |
| <li>Remove useless if_ep shutdown hook. |
<li>Remove useless if_ep shutdown hook. |
| <li>Import USB code. |
<li>Import USB code. |
| <li><font color=#e00000><strong>SECURITY ISSUE: The procfs and fdescfs filesystems had an overrun in their handling of uio_offset in their readdir() routines. (These filesystems are not enabled by default). <a href=errata25.html#miscfs>A patch is available</a></strong></font>. |
<li><font color="#e00000"><strong>SECURITY ISSUE: The procfs and fdescfs filesystems had an overrun in their handling of uio_offset in their readdir() routines. (These filesystems are not enabled by default). <a href="errata25.html#miscfs">A patch is available</a></strong></font>. |
| <li>Repair: probe svr4 emulation before linux once again. |
<li>Repair: probe svr4 emulation before linux once again. |
| <li>Support -M and -N flags in uptime(1). |
<li>Support -M and -N flags in uptime(1). |
| <li>Detect IDT WinChip models. |
<li>Detect IDT WinChip models. |
|
|
| <li>Skip hostname.* files if the interface does not exist. |
<li>Skip hostname.* files if the interface does not exist. |
| <li>Make mbuf panic messages unique. |
<li>Make mbuf panic messages unique. |
| <li>Repair interface walking in rarpd(8). |
<li>Repair interface walking in rarpd(8). |
| <li><font color=#e00000><strong>SECURITY ISSUE: Stop profiling (see profil(2)) when we execve() a new process. <a href=errata25.html#profil>A patch is available</a></strong></font>. |
<li><font color="#e00000"><strong>SECURITY ISSUE: Stop profiling (see profil(2)) when we execve() a new process. <a href="errata25.html#profil">A patch is available</a></strong></font>. |
| <li>pcmcia device attach/dettachment code, supporting network and serial devices now. |
<li>pcmcia device attach/dettachment code, supporting network and serial devices now. |
| <li>vdevgone() internal kernel API. |
<li>vdevgone() internal kernel API. |
| <li>If fread(3) returns EBADF, also set the error flag. |
<li>If fread(3) returns EBADF, also set the error flag. |
|
|
| <li>/tmp race repairs in yacc(1). |
<li>/tmp race repairs in yacc(1). |
| <li>Propagate TMPDIR better into locate.updatedb(8). |
<li>Propagate TMPDIR better into locate.updatedb(8). |
| <li>Kill gzip sub-processes in pax(1) instead of letting them die from SIGPIPE. |
<li>Kill gzip sub-processes in pax(1) instead of letting them die from SIGPIPE. |
| <li><font color=#e00000><strong>SECURITY ISSUE: In /etc/rc, use mktemp(1) for motd re-writing and change the find(1) to use -execdir. <a href=errata25.html#rc>A patch is available</a></strong></font>. |
<li><font color="#e00000"><strong>SECURITY ISSUE: In /etc/rc, use mktemp(1) for motd re-writing and change the find(1) to use -execdir. <a href="errata25.html#rc">A patch is available</a></strong></font>. |
| <li>Support for 3c515 isapnp 100mbit ethernet card, in ef(4). |
<li>Support for 3c515 isapnp 100mbit ethernet card, in ef(4). |
| <li>Chown/chmod all of the pty devices. |
<li>Chown/chmod all of the pty devices. |
| <li>If /etc/fstab is 0-length or not a regular file, have setfsent(3) fail. |
<li>If /etc/fstab is 0-length or not a regular file, have setfsent(3) fail. |
| <li>Import of mailwrapper(8) into the tree. |
<li>Import of mailwrapper(8) into the tree. |
| <li>Games updated. |
<li>Games updated. |
| <li><font color=#e00000><strong>SECURITY ISSUE: Do not permit regular users to chflags(2) or fchflags(2) character or block devices. <a href=errata25.html#chflags>A patch is available</a></strong></font>. |
<li><font color="#e00000"><strong>SECURITY ISSUE: Do not permit regular users to chflags(2) or fchflags(2) character or block devices. <a href="errata25.html#chflags">A patch is available</a></strong></font>. |
| <li>New raidframe code. |
<li>New raidframe code. |
| <li>Make sure install scripts remove async mount conditions before attempting to installboot(8). |
<li>Make sure install scripts remove async mount conditions before attempting to installboot(8). |
| <li>Have <strong>route flush</strong> skip PF_KEY flows. |
<li>Have <strong>route flush</strong> skip PF_KEY flows. |
|
|
| <li>Have pkg_create(1) use tar -T. |
<li>Have pkg_create(1) use tar -T. |
| <li>Add -T option to tar(1). |
<li>Add -T option to tar(1). |
| <li>Fix fgetln(3) issue in pax(1). |
<li>Fix fgetln(3) issue in pax(1). |
| <li><font color=#e00000><strong>SECURITY ISSUE: Make nroff(1) call groff(1) with the -S option. <a href=errata25.html#nroff>A patch is available</a></strong></font>. |
<li><font color="#e00000"><strong>SECURITY ISSUE: Make nroff(1) call groff(1) with the -S option. <a href="errata25.html#nroff">A patch is available</a></strong></font>. |
| <li>If src file does not exist, have <strong>mv -i</strong> complain immediately. |
<li>If src file does not exist, have <strong>mv -i</strong> complain immediately. |
| <li>Bug fix to pkg_add(8). |
<li>Bug fix to pkg_add(8). |
| <li>More man page cleanups. |
<li>More man page cleanups. |
|
|
| <li>Many man page improvements. |
<li>Many man page improvements. |
| <li>Newer version of isakmpd(8). |
<li>Newer version of isakmpd(8). |
| <li>Support PAGER properly in pkg_install(8). |
<li>Support PAGER properly in pkg_install(8). |
| <li><font color=#e00000><strong>SECURITY ISSUE: Fix an ipsec_in_use out-of-sync condition. <a href=errata25.html#ipsec_in_use>A patch is available</a></strong></font>. |
<li><font color="#e00000"><strong>SECURITY ISSUE: Fix an ipsec_in_use out-of-sync condition. <a href="errata25.html#ipsec_in_use">A patch is available</a></strong></font>. |
| <li>Add support for TCP MD5 (RFC 2385) option called TCP_SIGNATURE used for authenticating BGP sessions. |
<li>Add support for TCP MD5 (RFC 2385) option called TCP_SIGNATURE used for authenticating BGP sessions. |
| <li>Support SIGUSR1 in init(8), used by i386 keyboard halt code, and make init(8) smart enough to run /etc/rc.shutdown |
<li>Support SIGUSR1 in init(8), used by i386 keyboard halt code, and make init(8) smart enough to run /etc/rc.shutdown |
| <li>On i386 pcvt console, have CTRL-ALT-DEL sent a SIGUSR1 to init. |
<li>On i386 pcvt console, have CTRL-ALT-DEL sent a SIGUSR1 to init. |
|
|
| <li>Add <strong>-p</strong> flag to encrypt(1). |
<li>Add <strong>-p</strong> flag to encrypt(1). |
| <li>Newer version of bktr(4) driver. |
<li>Newer version of bktr(4) driver. |
| <li>ncurses-4.2-990516 |
<li>ncurses-4.2-990516 |
| <li><font color=#e00000><strong>Correct some realloc(3) misuses in the fts(3) routines. <a href=errata25.html#fts>A patch is available</a></strong></font>. |
<li><font color="#e00000"><strong>Correct some realloc(3) misuses in the fts(3) routines. <a href="errata25.html#fts">A patch is available</a></strong></font>. |
| <li>Add xe(4) xircom ethernet driver. |
<li>Add xe(4) xircom ethernet driver. |
| <li>Add support for static arp entries that cannot be overwritten. |
<li>Add support for static arp entries that cannot be overwritten. |
| <li>Many man page fixes. |
<li>Many man page fixes. |
|
|
| <li>Fix bounds control in msgs(1). |
<li>Fix bounds control in msgs(1). |
| <li>Fix 'X' check in gcc printf format checker. |
<li>Fix 'X' check in gcc printf format checker. |
| <li>Fix divide by zero in libcurses. |
<li>Fix divide by zero in libcurses. |
| <li><font color=#e00000><strong>A reliability patch for TCP over IPSEC ESP tunnels. <a href=errata25.html#ipsec1>A patch is available</a></strong></font>. |
<li><font color="#e00000"><strong>A reliability patch for TCP over IPSEC ESP tunnels. <a href="errata25.html#ipsec1">A patch is available</a></strong></font>. |
| <li>Improvements to the ss(4) driver. |
<li>Improvements to the ss(4) driver. |
| <li>Fix various endian related problems in nm(1), ranlib(1), strip(1), and size(1). |
<li>Fix various endian related problems in nm(1), ranlib(1), strip(1), and size(1). |
| <li>Do not rotate kerberos logs using newsyslog.conf |
<li>Do not rotate kerberos logs using newsyslog.conf |
|
|
| <li>More ppp(8) improvements and bug fixes. |
<li>More ppp(8) improvements and bug fixes. |
| <li>More isakmpd(8) improvements and bug fixes. |
<li>More isakmpd(8) improvements and bug fixes. |
| <li>In calendar(1), fix offset bug for yearly events. |
<li>In calendar(1), fix offset bug for yearly events. |
| <li><font color=#e00000><strong>A reliability patch for ext2fs. <a href=errata25.html#bmap_trap>A patch is available</a></strong></font>. |
<li><font color="#e00000"><strong>A reliability patch for ext2fs. <a href="errata25.html#bmap_trap">A patch is available</a></strong></font>. |
| <li>Repair a mis-handling of non-terminated utmp strings in w(1). |
<li>Repair a mis-handling of non-terminated utmp strings in w(1). |
| <li>m68k optimized asm version of strlcpy(3). |
<li>m68k optimized asm version of strlcpy(3). |
| <li>Do not accept incoming packets on a down interface. |
<li>Do not accept incoming packets on a down interface. |
| <li>More strict isapnp detection for the isa ep(8) cards. |
<li>More strict isapnp detection for the isa ep(8) cards. |
| <li>kcore handling for the m68k ports. |
<li>kcore handling for the m68k ports. |
| <li><font color=#e00000><strong>A serious reliability patch for the powerpc port, regarding traps and signals. <a href=errata25.html#powerpc_trap>Patches are available</a></strong></font>. |
<li><font color="#e00000"><strong>A serious reliability patch for the powerpc port, regarding traps and signals. <a href="errata25.html#powerpc_trap">Patches are available</a></strong></font>. |
| <li>Support power-down mode in the mac68k port. |
<li>Support power-down mode in the mac68k port. |
| <li>Fix a retransmission problem in tcp_newreno. |
<li>Fix a retransmission problem in tcp_newreno. |
| <li>Fix a sequence wraparound bug in very large tcp transfers. |
<li>Fix a sequence wraparound bug in very large tcp transfers. |
|
|
| |
|
| <hr> |
<hr> |
| <a href="index.html"><img height=24 width=24 src=back.gif border=0 alt=OpenBSD></a> |
<a href="index.html"><img height=24 width=24 src=back.gif border=0 alt=OpenBSD></a> |
| <a href=mailto:www@openbsd.org>www@openbsd.org</a> |
<a href="mailto:www@openbsd.org">www@openbsd.org</a> |
| <br><small>$OpenBSD$</small> |
<br><small>$OpenBSD$</small> |
| |
|
| </body> |
</body> |
![[BACK]](/icons/back.gif){kind=icon}
Return to plus26.html CVS log ![[TXT]](/icons/text.gif){kind=icon}
![[DIR]](/icons/dir.gif){kind=icon}
Up to [local] / www