www/plus26.html - diff

Return to plus26.html CVS log

Up to [local] / www

Diff for /www/plus26.html between version 1.63 and 1.64

version 1.63, 2019/04/08 16:14:53

version 1.64, 2019/05/27 22:55:22

Line 1

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">

<!doctype html>

<html>

<head>

<title>OpenBSD 2.6 Changelog</title>

</head>

<style>

strong {

color: var(--red);

}

h3 {

color: var(--blue);

}

<h2>

p strong {

font-weight: normal;

}

code {

font-family: serif;

font-weight: bolder;

}

</style>

OpenBSD</a>

OpenBSD</a>

2.6 Changelog

2.6 Changelog

</h2>

<hr>

Line 29

Line 43

changes, starting with those listed below..

Note: Problems for which patches exist are marked in red.

Note: Problems for which patches exist are marked in red.

For changes in other releases, click below:

Line 84

Line 98

<h3>Changes made between OpenBSD 2.5 and 2.6</h3>

<h3>Changes made between OpenBSD 2.5 and 2.6</h3>

<ul>

<li>2.6 source tree frozen.

<li>Merge in some critical ATAPI fixes.

<li>Force FDSCRIPTS.

<li>RELIABILITY ISSUE: Fix a bug in the brooktree driver which permitted any user to crash some OpenBSD/i386 machines. <a href="errata25.html#brooktree">A patch is available</a>.

<li>RELIABILITY ISSUE: Fix a bug in the brooktree driver which permitted any user to crash some OpenBSD/i386 machines. <a href="errata25.html#brooktree">A patch is available</a>.

<li>Separate help(1) command, and a separate help(1) man page.

<li>Move wrapper handling to the child process, in sshd(8).

<li>Various fixes for the bignum and RSA handling code in sshd(8).

Line 250

Line 264

<li>Support "short" mouse protocol for the Tadpole sparc.

<li>More queue.h macros.

<li>In /etc/rc during vi recovery, ensure vi recovery files are normal.

<li>Change /etc/rc.shutdown handling, so that /etc/rc.shutdown is completely admin-editable and does not run if in single-user mode. NOTE: If you follow current, this means that people need to install a new /etc/rc file.

<li>Change /etc/rc.shutdown handling, so that /etc/rc.shutdown is completely admin-editable and does not run if in single-user mode. NOTE: If you follow current, this means that people need to install a new /etc/rc file.

<li>On sparc, change pagetable pointers using atomic instructions.

<li>Change pmap_enter() API.

<li>Start doing an atoi(3) audit of the tree; most cases should use strtol() and strtoul().

Line 266

Line 280

<li>Fix buf overflow in amd(8).

<li>Support AAA-131CF card in ahc(4) driver.

<li>Check SACK hole validity better, and do sequence space arithmetic better.

<li>SECURITY ISSUE: In cron(8), make sure argv[] is NULL terminated in the fake popen() and run sendmail as the user, not as root. <a href="errata25.html#cron">A patch is available</a>.

<li>SECURITY ISSUE: In cron(8), make sure argv[] is NULL terminated in the fake popen() and run sendmail as the user, not as root. <a href="errata25.html#cron">A patch is available</a>.

<li>Some fixes to newsyslog(8).

<li>Disable SACK for now; some issues remain.

<li>Buffer overflow fixes in from(1).

Line 284

Line 298

<li>Crank kerberos default expiration date.

<li>Teach i386 architecture code about Rise CPU models.

<li>Build shared library called libperl.

<li>Use new arch -s option for building perl.

<li>Use new <code>arch -s</code> option for building perl.

<li>Fix a few possible sparc pmap races.

<li>Make ld.so work on mips again.

<li>Merge machine(1) and arch(1) commands.

Line 307

Line 321

<li>In pcmcia ep(4) driver, support 3CXEM556B-INT.

<li>Remove useless if_ep shutdown hook.

<li>Import USB code.

<li>SECURITY ISSUE: The procfs and fdescfs filesystems had an overrun in their handling of uio_offset in their readdir() routines. (These filesystems are not enabled by default.) <a href="errata25.html#miscfs">A patch is available</a>.

<li>SECURITY ISSUE: The procfs and fdescfs filesystems had an overrun in their handling of uio_offset in their readdir() routines. (These filesystems are not enabled by default.) <a href="errata25.html#miscfs">A patch is available</a>.

<li>Repair: probe svr4 emulation before linux once again.

<li>Support -M and -N flags in uptime(1).

<li>Detect IDT WinChip models.

Line 320

Line 334

<li>Skip hostname.* files if the interface does not exist.

<li>Make mbuf panic messages unique.

<li>Repair interface walking in rarpd(8).

<li>SECURITY ISSUE: Stop profiling (see profil(2)) when we execve() a new process. <a href="errata25.html#profil">A patch is available</a>.

<li>SECURITY ISSUE: Stop profiling (see profil(2)) when we execve() a new process. <a href="errata25.html#profil">A patch is available</a>.

<li>pcmcia device attach/dettachment code, supporting network and serial devices now.

<li>vdevgone() internal kernel API.

<li>If fread(3) returns EBADF, also set the error flag.

Line 328

Line 342

<li>Split i386 ramdisks up a bit for the next release.

<li>Fix sparc interrupt handler to recognize < 0 from an driver interrupt handler means "interrupt may have been for me, but I am not sure".

<li>isakmpd(8) updates.

<li>Add SADB_FLUSH logic to IPSEC PFKEYv2, and a ipsecadm flush subcommand.

<li>Add SADB_FLUSH logic to IPSEC PFKEYv2, and a <code>ipsecadm flush</code> subcommand.

<li>Update bktr driver.

<li>Shrink some device drivers; we're trying to make more fit onto the install floppy.

<li>config_defer support in the kernel.

Line 340

Line 354

<li>/tmp race repairs in yacc(1).

<li>Propagate TMPDIR better into locate.updatedb(8).

<li>Kill gzip sub-processes in pax(1) instead of letting them die from SIGPIPE.

<li>SECURITY ISSUE: In /etc/rc, use mktemp(1) for motd re-writing and change the find(1) to use -execdir. <a href="errata25.html#rc">A patch is available</a>.

<li>SECURITY ISSUE: In /etc/rc, use mktemp(1) for motd re-writing and change the find(1) to use -execdir. <a href="errata25.html#rc">A patch is available</a>.

<li>Support for 3c515 isapnp 100mbit ethernet card, in ef(4).

<li>Chown/chmod all of the pty devices.

<li>If /etc/fstab is 0-length or not a regular file, have setfsent(3) fail.

<li>Import of mailwrapper(8) into the tree.

<li>Games updated.

<li>SECURITY ISSUE: Do not permit regular users to chflags(2) or fchflags(2) character or block devices. <a href="errata25.html#chflags">A patch is available</a>.

<li>SECURITY ISSUE: Do not permit regular users to chflags(2) or fchflags(2) character or block devices. <a href="errata25.html#chflags">A patch is available</a>.

<li>New raidframe code.

<li>Make sure install scripts remove async mount conditions before attempting to installboot(8).

<li>Have route flush skip PF_KEY flows.

<li>Have <code>route flush</code> skip PF_KEY flows.

<li>tcpdump 3.4 merged.

<li>Have pkg_create(1) use tar -T.

<li>Add -T option to tar(1).

<li>Fix fgetln(3) issue in pax(1).

<li>SECURITY ISSUE: Make nroff(1) call groff(1) with the -S option. <a href="errata25.html#nroff">A patch is available</a>.

<li>SECURITY ISSUE: Make nroff(1) call groff(1) with the -S option. <a href="errata25.html#nroff">A patch is available</a>.

<li>If src file does not exist, have mv -i complain immediately.

<li>If src file does not exist, have <code>mv -i</code> complain immediately.

<li>Bug fix to pkg_add(8).

<li>More man page cleanups.

<li>Clean dmesg output from various drivers.

Line 434

Line 448

<li>Many man page improvements.

<li>Newer version of isakmpd(8).

<li>Support PAGER properly in pkg_install(8).

<li>SECURITY ISSUE: Fix an ipsec_in_use out-of-sync condition. <a href="errata25.html#ipsec_in_use">A patch is available</a>.

<li>SECURITY ISSUE: Fix an ipsec_in_use out-of-sync condition. <a href="errata25.html#ipsec_in_use">A patch is available</a>.

<li>Add support for TCP MD5 (RFC 2385) option called TCP_SIGNATURE used for authenticating BGP sessions.

<li>Support SIGUSR1 in init(8), used by i386 keyboard halt code, and make init(8) smart enough to run /etc/rc.shutdown

<li>On i386 pcvt console, have CTRL-ALT-DEL sent a SIGUSR1 to init.

Line 539

Line 553

<li>swapctl(8) and the necessary kernel support.

<li>Longer delay in the i386 pms(4) probe routine, for Thinkpads.

<li>Correct some DTR handling in pccom(4).

<li>Add -p flag to encrypt(1).

<li>Add <code>-p</code> flag to encrypt(1).

<li>Newer version of bktr(4) driver.

<li>ncurses-4.2-990516

<li>Correct some realloc(3) misuses in the fts(3) routines. <a href="errata25.html#fts">A patch is available</a>.

<li>Correct some realloc(3) misuses in the fts(3) routines. <a href="errata25.html#fts">A patch is available</a>.

<li>Add xe(4) xircom ethernet driver.

<li>Add support for static arp entries that cannot be overwritten.

<li>Many man page fixes.

Line 555

Line 569

<li>Fix bounds control in msgs(1).

<li>Fix 'X' check in gcc printf format checker.

<li>Fix divide by zero in libcurses.

<li>A reliability patch for TCP over IPSEC ESP tunnels. <a href="errata25.html#ipsec1">A patch is available</a>.

<li>A reliability patch for TCP over IPSEC ESP tunnels. <a href="errata25.html#ipsec1">A patch is available</a>.

<li>Improvements to the ss(4) driver.

<li>Fix various endian related problems in nm(1), ranlib(1), strip(1), and size(1).

<li>Do not rotate kerberos logs using newsyslog.conf

Line 585

Line 599

<li>Check for failure of strdup(3) in pax(1).

<li>Greater care in tail(1), when going backwards.

<li>Add wdt(4) driver for Industrial Computer Source PCI-WDT50x watchdog timers.

<li>Implement -U username in ps(1).

<li>Implement <code>-U username</code> in ps(1).

<li>Add "verbose" command to boot_config(8).

<li>Check correct argument in sliplogin(8).

<li>New kernel hashinit().

<li>More ppp(8) improvements and bug fixes.

<li>More isakmpd(8) improvements and bug fixes.

<li>In calendar(1), fix offset bug for yearly events.

<li>A reliability patch for ext2fs. <a href="errata25.html#bmap_trap">A patch is available</a>.

<li>A reliability patch for ext2fs. <a href="errata25.html#bmap_trap">A patch is available</a>.

<li>Repair a mis-handling of non-terminated utmp strings in w(1).

<li>m68k optimized asm version of strlcpy(3).

<li>Do not accept incoming packets on a down interface.

<li>More strict isapnp detection for the isa ep(8) cards.

<li>kcore handling for the m68k ports.

<li>A serious reliability patch for the powerpc port, regarding traps and signals. <a href="errata25.html#powerpc_trap">Patches are available</a>.

<li>A serious reliability patch for the powerpc port, regarding traps and signals. <a href="errata25.html#powerpc_trap">Patches are available</a>.

<li>Support power-down mode in the mac68k port.

<li>Fix a retransmission problem in tcp_newreno.

<li>Fix a sequence wraparound bug in very large tcp transfers.

Line 617

Line 631

<li>Fix probing of ISA ex(4) cards.

<li>More amiga keymaps.

<li>Add yyfix(1), from 4.4BSD.

<li>Merge mkfifo into mknod, so that mknod ends up having support for the -p option.

<li>Merge mkfifo into mknod, so that mknod ends up having support for the <code>-p</code> option.

<li>Fix a output buffer overflow in msgrcv(2).

<li>Fix odbm support and permit opening a zero-length hash file.

<li>new true awk, April 16 release.

Line 625

Line 639

<li>Bug fixes to sparc spif(4), hme(4), be(4) drivers.

<li>Updated distrib/notes which shipped with the 2.5 release.

</ul>

</body>

</html>