Annotation of www/plus26.html, Revision 1.1
1.1 ! deraadt 1: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML Strict//EN">
! 2: <html>
! 3: <head>
! 4: <title>OpenBSD 2.6 changes</title>
! 5: <link rev=made href=mailto:www@openbsd.org>
! 6: <meta name="resource-type" content="document">
! 7: <meta name="description" content="the main OpenBSD page">
! 8: <meta name="keywords" content="openbsd,main">
! 9: <meta name="distribution" content="global">
! 10: <meta name="copyright" content="This document copyright 1996 by OpenBSD.">
! 11: </head>
! 12:
! 13: <BODY BGCOLOR="#FFFFFF" TEXT="#000000" LINK="#23238E">
! 14:
! 15: <img alt="[OpenBSD]" height=30 width=141 SRC="images/smalltitle.gif">
! 16: <p>
! 17: <h2><font color=#e00000>Changes made between OpenBSD 2.5 and OpenBSD 2.6</font><hr></h2>
! 18:
! 19: <p>
! 20: This is a partial list of the major machine independent changes
! 21: (ie. these are the changes people ask about most often). Port
! 22: specific changes have also been made, and are sometimes mentioned
! 23: in the pages for the specific <a href=plat.html>ports</a> if you
! 24: are interested in further port-specific details. Many ports
! 25: have had architecture-specific enhancements relative to NetBSD,
! 26: but when they do not they certainly have plenty of platform-independent
! 27: changes, starting with those listed below..
! 28:
! 29: <p>
! 30: Note: <font color=#e00000>Problems for which patches exist are marked in red</font>.
! 31:
! 32: <p>
! 33: <h3>
! 34: <a href=plus20.html>For changes leading up to OpenBSD 2.0, click here</a>.<br>
! 35: <a href=plus21.html>For changes leading up to OpenBSD 2.1, click here</a>.<br>
! 36: <a href=plus22.html>For changes leading up to OpenBSD 2.2, click here</a>.<br>
! 37: <a href=plus23.html>For changes leading up to OpenBSD 2.3, click here</a>.<br>
! 38: <a href=plus24.html>For changes leading up to OpenBSD 2.4, click here</a>.<br>
! 39: <a href=plus25.html>For changes leading up to OpenBSD 2.5, click here</a>.<br>
! 40: <a href=plus26.html>For changes leading up to OpenBSD 2.6, click here</a>.<br>
! 41: <a href=plus.html>For changes in OpenBSD-current, click here</a>.
! 42: <br>
! 43: </h3>
! 44:
! 45: <hr>
! 46:
! 47: <p>
! 48: <h3><font color=#0000e0>We are working on OpenBSD-current.</font></h3><p>
! 49: <ul>
! 50: <li>2.6 source tree frozen.
! 51: <li>Merge in some critical ATAPI fixes.
! 52: <li>Force FDSCRIPTS.
! 53: <li>Seperate help(1) command, and a seperate help(1) man page.
! 54: <li>Move wrapper handling to the child process, in sshd(8).
! 55: <li>Various fixes for the bignum and RSA handling code in sshd(8).
! 56: <li>ssh 1.5 protocol.
! 57: <li>isakmpd policy man page.
! 58: <li>Put gcc-lib in base, because the mac68k installer built-in tar command is stupid, and does not do a mkdir -p type operation internally.
! 59: <li>In the install script, if the user skips network config and later chooses an option which requires network config, ask for network config to be done then.
! 60: <li>Make i386 pcvt driver also support the traditional PC display, with 16 colours.
! 61: <li>In the install script, support seperate international and USA versions of the ssl package.
! 62: <li>Fix another unmount/mfs race condition.
! 63: <li>If no sshd_config file, have sshd(8) abort.
! 64: <li>Fix for the i386 isadmaattach panic.
! 65: <li>PermitRootLogin in sshd(8).
! 66: <li>Document how we are dealing with SSL, crypto, and RSA issues in the ssl(8) man page even better.
! 67: <li>Stir ARC4 after key use in sshd(4).
! 68: <li>Fix mii tick tock stuff in the fxp(4) driver.
! 69: <li>Fix connect() race in ssh agent handling.
! 70: <li>Numerous fixes and improvements to the install scripts.
! 71: <li>Avoid mbuf corruption in recvmsg(2).
! 72: <li>Only attempt to read disklabels from CDs with a data track.
! 73: <li>Fix a bug in newsyslog(8), which caused it to rotate empty log files near first system boot.
! 74: <li>Do not call VOP_SETATTR on a pipe.
! 75: <li>SilentDeny option for sshd(8).
! 76: <li>Avoid an infinite loop in ping(8).
! 77: <li>Add driver for i82553 phy, used by some fxp(4) cards.
! 78: <li>Allow root logins in xmd, but provide a nice comment so people can disable it easily.
! 79: <li>Document -e support in config(8).
! 80: <li>Use setsid(2) on all connections to sshd(8), since our setlogin(2) is secure and needs that.
! 81: <li>sshd(8) Allow/Deny Users/Groups features.
! 82: <li>sshd(8) UseLogin feature.
! 83: <li>Use a seperate perl-based vi.recover script because sh is a terrible language.
! 84: <li>Check permissions of directories leading up to ssh authorized_keys file.
! 85: <li>For AF_UNIX sockets, do not follow symbolic links at creation time, since there is nothing equivelent to O_EXCL.
! 86: <li>Permit build of system with NFSSERVER but without NFSCLIENT.
! 87: <li>More keynote man pages.
! 88: <li>pmax support is back in the tree, various tweaks everywhere.
! 89: <li>Make eap(4) print it's interrupt at attach time.
! 90: <li>As well as numerous repairs, now also support "pkg_add *".
! 91: <li>Many many man page improvements.
! 92: <li>Support newer model of the fxp(4) card.
! 93: <li>Further improvements to ATA probing.
! 94: <li>Support skey in sshd.
! 95: <li>Use pkg_add -I for the ssl package install, in the install scripts.
! 96: <li>Repair fd(4) motor off code.
! 97: <li>Handle most xl(4) devices that lack a PHY.
! 98: <li>On machines lacking shared libraries, install the ssh utilities with mode 0, so that /etc/rc will run the ones in /usr/local/bin instead.
! 99: <li>Cluster fixes to ipsec code.
! 100: <li>implement client NumberOfPasswordPrompts in ssh(1).
! 101: <li>Support various effect modes on the ym(4) sound cards.
! 102: <li>Y2K related fixes for some buggy i386 clock chips.
! 103: <li>Fix various atapi sense detection bugs.
! 104: <li>Big endian fixes to tcpdump(8).
! 105: <li>Move sshd auth sockets to a private directory.
! 106: <li>Various make performance enhancements.
! 107: <li>Ensonic ES1371 support in the eap(4) driver.
! 108: <li>Fix a sshd xauth race.
! 109: <li>Lots of manpage improvements.
! 110: <li>ssh crc32 compensation attach detection fix from core-sdi.
! 111: <li>PCI Promise IDE controller support, not perfect yet.
! 112: <li>Nuke minfd stuff in ssh.
! 113: <li>config(8) gets -e and -u support.
! 114: <li>Put sbin and /usr/sbin in the default path.
! 115: <li>Fix garbled dmesg output on the console in the mvme68k port.
! 116: <li>DNS spoof checking code in the ssh.
! 117: <li>Double default shared memory for i386.
! 118: <li>Various quality of software repairs to sshd, like errno trashing in signal handlers, and other stupid things like that.
! 119: <li>Fix a missing memory initialization bug in the i386 bootblocks.
! 120: <li>Avoid use of shutdown(2) in sshd.
! 121: <li>For fts(3) and find(1), fix various off-by-one errors and some issues with -execdir for multiple relative directories.
! 122: <li>libwrap support in sshd.
! 123: <li>Nice setproctitle(3) changes to sshd, so that you can tell which process is which login.
! 124: <li>Add -q support to whois(1).
! 125: <li>Remove local blowfish code in ssh.
! 126: <li>Improve the scp(1) progress meter.
! 127: <li>Various games fixes.
! 128: <li>mod_ssl 2.4.5
! 129: <li>new isakmpd code.
! 130: <li>Support DSO's in httpd, and build them into the normal tree.
! 131: <li>sm(4) driver now supports SMC 8020 pcmcia cards.
! 132: <li>sk(4) driver for SysKonnect 984x gigabit ethernet adapters.
! 133: <li>add support for external storage to the mbuf layer, managed by external managers.
! 134: <li>libkeynote 2.0
! 135: <li>Support more ess(4) sound card models.
! 136: <li>Numerous other ssh changes...
! 137: <li>in ssh, use libc md5 code.
! 138: <li>remove rc4 code from ssh
! 139: <li>Remove ssh "-c none" code.
! 140: <li>Improve ftpd's documentation.
! 141: <li>Improve tcpdump's handling of ISAKMP packages.
! 142: <li>Make bootblock memory probing work the same as 2.5.
! 143: <li>More man page repairs and improvements. A day doesn't go by...
! 144: <li>Some fixes to the games.
! 145: <li>Many more ssh improvements.
! 146: <li>Critical ipsec reliability fix for the i386.
! 147: <li>Run ldconfig before any ssh stuff, because the ssl package now extracts into /usr/local/lib.
! 148: <li>Apache 1.3.9 + Mod_ssl 2.4.2
! 149: <li>ssleay(1) goes away, replaced by openssl(1).
! 150: <li>OpenSSL 0.9.4
! 151: <li>Fix tun(4) byte counters.
! 152: <li>To ssh, add X11DisplayOffset, user@host, kerberos4 support, GatewayPorts, ssh -g, etc.
! 153: <li>Fix rc scripts to start ssh nicely upon first and subsequent boots.
! 154: <li>Rip all licensed and patented code out of ssh.
! 155: <li>Support MVME188 and MVME197 models in the mvme88k port.
! 156: <li>Fixes to the pci wb(4) driver.
! 157: <li>pkg_add signing capability is being worked on.
! 158: <li>Put uuencoded install bits for amiga into the tree, so that they can end up in the distribution.
! 159: <li>Fix hp300 ramdisk.
! 160: <li>32-bit ie(4) driver for the mvme68k and mvme88k ports.
! 161: <li>More changes to pcvt scrollback code.
! 162: <li>More fixes to pci ax(4).
! 163: <li>In inetd.conf, disable telnet/ftp/login by default.
! 164: <li>Simplify ssh configuration.
! 165: <li>New mandoc pages for ssh(1) and friends..
! 166: <li>Add ssh to the source tree (based on an old version, but all the bugs are fixed, and we are playing RSA license games with libssl/libcrypto and adding all the modern ssh features).
! 167: <li>Add :L and :U modifiers to make(1).
! 168: <li>stdbool.h from C9X.
! 169: <li>Install script changes to support libssl package install. Not nice, but it will be improved.
! 170: <li>Move towards 2.6-beta.
! 171: <li>Fix icmp byte-order changes so that ip_forward() aliased packet doesn't bite us.
! 172: <li>Many man page changes.
! 173: <li>Some ipsec changes to tcpdump(1).
! 174: <li>Add atactl(8).
! 175: <li>Add opendisk(3) API to libutil.
! 176: <li>Crank some i386 limits, now that kvm is larger.
! 177: <li>Repair some URL handlings in pkg_install(8).
! 178: <li>Significant changes to the install scripts.
! 179: <li>Change makewhatis to accept arguments.
! 180: <li>AC-97 CODEC support.
! 181: <li>Fix device existance check in hp300 tape support.
! 182: <li>Grow i386 kvm to 512MB.
! 183: <li>Merge to tcpdump 3.4.
! 184: <li>Use writev(3) in libc functions that talk to stderr.
! 185: <li>Add raw support in tcpdump.
! 186: <li>In xl(4), Support 3c980c.
! 187: <li>Fix a FIFO handling bug in xe(4) driver.
! 188: <li>Fix a caching bug in getpwent(3) seen with setuid binaries and YP.
! 189: <li>i386 support for "isa0 at pcib?".
! 190: <li>Upon bootup, permit i386 to modify the rootdev after looking at BIOS disk signatures.
! 191: <li>Change rc.conf so that sendmail is started with -q30m by default (not -bd).
! 192: <li>Various speed improvements by using round_page() instead of roundup(foo, NBPG).
! 193: <li>cvs 1.10.7
! 194: <li>Import uunencoded binary amiga things which need to be in a release.
! 195: <li>64bit repair in ls(1)
! 196: <li>ELF64 support.
! 197: <li>Some man page improvements.
! 198: <li>Detach code in the icsphy.
! 199: <li>Support tadpole sparc microcontroller.
! 200: <li>Ensure that adduser(8) sends the password to encrypt(1) via stdin, avoid ps(1) snooping.
! 201: <li>Improved m4(1) extensively.
! 202: <li>Improved fsck_msdos(8).
! 203: <li>On i386, expand aperture because XFree86 3.9.15 want to look at the card BIOS.
! 204: <li>p9100 console support for Tadpole sparc.
! 205: <li>Scroll-back support for the i386 pcvt driver.
! 206: <li>Use stathz to calculate CPU time, fixing CPU calculation when stathz is different from hz and profhz (affected i386).
! 207: <li>Preliminary ATAPI tape drive support.
! 208: <li>Support "short" mouse protocol for the Tadpole sparc.
! 209: <li>More queue.h macros.
! 210: <li>In /etc/rc during vi recovery, ensure vi recovery files are normal.
! 211: <li>Change /etc/rc.shutdown handling, so that /etc/rc.shutdown is completely admin-editable and does not run if in single-user mode.<br> <strong>NOTE: If you follow current, this means that people need to install a new /etc/rc file.</strong>
! 212: <li>On sparc, change pagetable pointers using atomic instructions.
! 213: <li>Change pmap_enter() API.
! 214: <li>Start doing an atoi(3) audit of the tree; most cases should use strtol() and strtoul().
! 215: <li>Cleanup handling of signed and unsigned numbers in sysctl(8).
! 216: <li>Many man page improvements.
! 217: <li>Print i386 interrupts nicer in vmstat -i.
! 218: <li>In bridge, do not flush static address when configuring down.
! 219: <li>Permit bridge control before it is configured up.
! 220: <li>Cleanup parsing of /etc/hostname.* files, and support new /etc/bridgename.* files.
! 221: <li>In tcp's input path, for SACK, update the window information correctly.
! 222: <li>If a patch contains zero patches, have patch(1) error out.
! 223: <li>Start amd(8) in /etc/amd.
! 224: <li>Fix buf overflow in amd(8).
! 225: <li>Support AAA-131CF card in ahc(4) driver.
! 226: <li>Check SACK hole validity better, and do sequence space arithmetic better.
! 227: <li><font color=#e00000><strong>SECURITY ISSUE: In cron(8), make sure argv[] is NULL terminated in the fake popen() and run sendmail as the user, not as root. <a href=errata.html#cron>A patch is available</a></strong></font>.
! 228: <li>Some fixes to newsyslog(8).
! 229: <li>Disable SACK for now; some issues remain.
! 230: <li>Buffer overflow fixes in from(1).
! 231: <li>Make res_random and ip_random attacks harder by adding a little xor.
! 232: <li>Improved handling of BIOS memory maps, which should permit apm to work a bit better on some machines.
! 233: <li>XFree86 3.3.5
! 234: <li>Allow userland to figure out whether a scsi device is atapi or not; used by some things like tosha.
! 235: <li>Fix fgets(3) bug in paste(1).
! 236: <li>gcc 2.95.1
! 237: <li>ncurses-5.0-990821
! 238: <li>Disable -fstrict-aliasing by default: It causes gcc to generate very incorrect code when compiling code which isn't perfectly ANSI-conforming.
! 239: <li>Add MOUSEIOCSCOOKED and MOUSEIOCSRAW ioctl() calls to the lms and mms drivers, so that X can figure out what driver is running.
! 240: <li>Extend support in kbd(1) for the sparc.
! 241: <li>Change default group ownership for tty and cua devices, so that locking works better in tip(1) and cu(1).
! 242: <li>Crank kerberos default expiration date.
! 243: <li>Teach i386 architecture code about Rise cpu models.
! 244: <li>Build shared library called libperl.
! 245: <li>Use new <strong>arch -s</strong> option for building perl.
! 246: <li>Fix a few possible sparc pmap races.
! 247: <li>Make ld.so work on mips again.
! 248: <li>Merge machine(1) and arch(1) commands.
! 249: <li>Fix a sun4m trap handling bug.
! 250: <li>Get ready for emulating linux clone(2).
! 251: <li>Make various forms of rup(1) produce the same formatted output.
! 252: <li>Many man pages updated.
! 253: <li>Various tiny fixes.
! 254: <li>In fortune(6), a fix for a use after free().
! 255: <li>hp300 CD booting.
! 256: <li>Fix buglet in fts(3) handling of FTS_NOCHDIR.
! 257: <li>Various dmesg and space-saving improvements to the pcmcia drivers.
! 258: <li>Allied Telesis LA-PCM pcmcia ethernet card support.
! 259: <li>ncurses-5.0-990814
! 260: <li>Various improvements to the install scripts.
! 261: <li>Correctly set the type and typename in the wd(4) driver generated label.
! 262: <li>Support AmbiCom NE2000 pcmcia ethernet.
! 263: <li>Fix the scheduler problems in the 2.5 release.
! 264: <li>Driver for ASIX88140A/88141 PCI ethernet, ax(4).
! 265: <li>In pcmcia ep(4) driver, support 3CXEM556B-INT.
! 266: <li>Remove useless if_ep shutdown hook.
! 267: <li>Import USB code.
! 268: <li><font color=#e00000><strong>SECURITY ISSUE: The procfs and fdescfs filesystems had an overrun in their handling of uio_offset in their readdir() routines. (These filesystems are not enabled by default). <a href=errata.html#miscfs>A patch is available</a></strong></font>.
! 269: <li>Repair: probe svr4 emulation before linux once again.
! 270: <li>Support -M and -N flags in uptime(1).
! 271: <li>Detect IDT WinChip models.
! 272: <li>If we fail to match an isapnp device, and it looks like it has the resources a com(4) device would have, try seeing if it in fact is.
! 273: <li>New i82365 pcmcia irq probing code that tries much harder to allocate a proper interrupt for the pcic.
! 274: <li>Add DIOCRLDINFO ioctl, used by fdisk(8) to indicate that the MBR has been re-written, and the disklabel should be re-read off disk.
! 275: <li>Support PChome-PCI LANCE (1Mbit phone wire "ethernet") using le(4).
! 276: <li>Document "Precedence: list" in vacation man page.
! 277: <li>In tar, fflush(stderr) at a critical point.
! 278: <li>Skip hostname.* files if the interface does not exist.
! 279: <li>Make mbuf panic messages unique.
! 280: <li>Repair interface walking in rarpd(8).
! 281: <li><font color=#e00000><strong>SECURITY ISSUE: Stop profiling (see profil(2)) when we execve() a new process. <a href=errata.html#profil>A patch is available</a></strong></font>.
! 282: <li>pcmcia device attach/dettachment code, supporting network and serial devices now.
! 283: <li>vdevgone() internal kernel API.
! 284: <li>If fread(3) returns EBADF, also set the error flag.
! 285: <li>Fix a number of uid_t, gid_t and %u changes still broken in the source tree.
! 286: <li>Split i386 ramdisks up a bit for the next release.
! 287: <li>Fix sparc interrupt handler to recognize < 0 from an driver interrupt handler means "interrupt may have been for me, but I am not sure".
! 288: <li>isakmpd(8) updates.
! 289: <li>Add SADB_FLUSH logic to IPSEC PFKEYv2, and a <strong>ipsecadm flush</strong> subcommand.
! 290: <li>Update bktr driver.
! 291: <li>Shrink some device drivers; we're trying to make more fit onto the install floppy.
! 292: <li>config_defer support in the kernel.
! 293: <li>Some man page cleanups.
! 294: <li>Make IDE work again on the alpha.
! 295: <li>PCI ESS Solo-1 PCI audio card driver, see eso(4).
! 296: <li>Make poll(2) system call a tiny bit faster for trivial calls.
! 297: <li>Enable emacs tab completion by default in ksh(1).
! 298: <li>/tmp race repairs in yacc(1).
! 299: <li>Propogate TMPDIR better into locate.updatedb(8).
! 300: <li>Kill gzip sub-processes in pax(1) instead of letting them die from SIGPIPE.
! 301: <li><font color=#e00000><strong>SECURITY ISSUE: In /etc/rc, use mktemp(1) for motd re-writing and change the find(1) to use -execdir. <a href=errata.html#rc>A patch is available</a></strong></font>.
! 302: <li>Support for 3c515 isapnp 100mbit ethernet card, in ef(4).
! 303: <li>Chown/chmod all of the pty devices.
! 304: <li>If /etc/fstab is 0-length or not a regular file, have setfsent(3) fail.
! 305: <li>Import of mailwrapper(8) into the tree.
! 306: <li>Games updated.
! 307: <li><font color=#e00000><strong>SECURITY ISSUE: Do not permit regular users to chflags(2) or fchflags(2) character or block devices. <a href=errata.html#chflags>A patch is available</a></strong></font>.
! 308: <li>New raidframe code.
! 309: <li>Make sure install scripts remove async mount conditions before attempting to installboot(8).
! 310: <li>Have <strong>route flush</strong> skip PF_KEY flows.
! 311: <li>tcpdump 3.4 merged.
! 312: <li>Have pkg_create(1) use tar -T.
! 313: <li>Add -T option to tar(1).
! 314: <li>Fix fgetln(3) issue in pax(1).
! 315: <li><font color=#e00000><strong>SECURITY ISSUE: Make nroff(1) call groff(1) with the -S option. <a href=errata.html#nroff>A patch is available</a></strong></font>.
! 316: <li>If src file does not exist, have <strong>mv -i</strong> complain immediately.
! 317: <li>Bug fix to pkg_add(8).
! 318: <li>More man page cleanups.
! 319: <li>Clean dmesg output from various drivers.
! 320: <li>Make rc.shutdown work from single-user mode too.
! 321: <li>PCI Tigon I and Tigon II driver, ti(4).
! 322: <li>Disable DMA on Acer Labs PCI IDE chipset, for now.
! 323: <li>Switch to new ATA/ATAPISCSI code for most architectures.
! 324: <li>Make the i386 dkcsum stuff be quieter for empty removeable media devices.
! 325: <li>Do installs faster by mounting the filesystems async.
! 326: <li>Fix various bugs in bridging support, especially SIOCBRDGRTS.
! 327: <li>Make tun(4) return EMSGSIZE for zero-length writes.
! 328: <li>Fix a field count bug in join(1).
! 329: <li>In ipnat(8), fix -n to work with -v.
! 330: <li>Missing newline in id(1).
! 331: <li>New drivers for the force CPU-5V (vme, sys config, D/A board driver, flash).
! 332: <li>Handle _POSIX_VDISABLE better in telnet(1).
! 333: <li>Run i386 audio at higher IPL.
! 334: <li>Take greater care in head(1).
! 335: <li>Less dmesg verbosity from media routines.
! 336: <li>Various atapi/scsi/ide changes being worked on (LS-120 works).
! 337: <li>powerpc ieeefp library routines.
! 338: <li>insque is no longer in libiberty.
! 339: <li>egcs-990718.
! 340: <li>Bring back TCP_SIGNATURE support.
! 341: <li>1000baseXX media support.
! 342: <li>For isapnp drivers, we can do more resource checking in the xxmatch() function, and less in the xxattach() function.
! 343: <li>Add fparseln(3).
! 344: <li>new swap16_multi() macro in sys/endian.h.
! 345: <li>More man pages.
! 346: <li>wdc(4) on isapnp(4).
! 347: <li>inetd(8)-started daemons should syslog(3) on startup failure.
! 348: <li>wdc(4) on pcmcia(4).
! 349: <li>More sparc keyboards in kbd(1).
! 350: <li>rc.shutdown(8) manpage.
! 351: <li>Add fpuparseln(3) to -lutil.
! 352: <li>First cut at isapnp mpu, and ym mpu.
! 353: <li>Document and complete skey(1) support in telnet(1).
! 354: <li>Correct os_mask handling in OLF execve code.
! 355: <li>Accomodations in the vm system for backward growing stack architectures.
! 356: <li>Do not cache page tables on microsparc1 either.
! 357: <li>Many more man page fixes.
! 358: <li>Support floating accent and compose in sparc kbd driver.
! 359: <li>libpcap 0.4 changes brought in.
! 360: <li>In pcap library, fix pcap_open_offline() to handle snaplengths of -1.
! 361: <li>Fix a memory mishandling in mixerctl(1).
! 362: <li>Further fixes for some strange wss isapnp variants.
! 363: <li>Create /var/db/host.random at install time.
! 364: <li>Complete /etc/rc.shutdown support in reboot(8) and shutdown(8).
! 365: <li>Lock ARP entries to an interface, and provide more diagnostics.
! 366: <li>Import of PCI ATA/IDE stuff from NetBSD.
! 367: <li>Retire libm_i387.
! 368: <li>Remove some shared libraries that are better used in static form.
! 369: <li>Support non-US sparc keyboards using kbd(8) command.
! 370: <li>At execve() time, clear the P_NOCLDWAIT flag.
! 371: <li>egcs 990629
! 372: <li>Finer timing interval and standard deviation additions to ping(8).
! 373: <li>Add pci_mapreg*() interfaces.
! 374: <li>Implement more linux compat ioctl's.
! 375: <li>Undo recent tcp_input changes which caused crashes.
! 376: <li>Fix panic bug in readdisklabel() on several architectures.
! 377: <li>Improve IPSEC SA hashing function.
! 378: <li>New mii code that does async negotiation.
! 379: <li>Default ksh(1) and sh(1) to emacs editing mode.
! 380: <li>Generalize bc wrapper program.
! 381: <li>Move /etc/host.random to /var/db.
! 382: <li>In ipsec, demand keying for PF_KEY.
! 383: <li>In disklabel(8), put in check for architectures that require partition a to start at sector 0.
! 384: <li>For sparc svr4 emulation, put sun4X cpu class into SVR4_SI_PLATFORM.
! 385: <li>pdksh-5.2.14
! 386: <li>Introduce fdremove() kernel API; makes fdalloc() faster by making sure fd_freefile is correct.
! 387: <li>Some small improvements to adduser(8) and rmuser(8).
! 388: <li>pcmcia wavelan driver, wi(4).
! 389: <li>Extend pcmcia IO space.
! 390: <li>ncurses-990710
! 391: <li>Fix a SIGSEGV in vi(1).
! 392: <li>Many man page improvements.
! 393: <li>Newer version of isakmpd(8).
! 394: <li>Support PAGER properly in pkg_install(8).
! 395: <li><font color=#e00000><strong>SECURITY ISSUE: Fix an ipsec_in_use out-of-sync condition. <a href=errata.html#ipsec_in_use>A patch is available</a></strong></font>.
! 396: <li>Add support for TCP MD5 (RFC 2385) option called TCP_SIGNATURE used for authenticating BGP sessions.
! 397: <li>Support SIGUSR1 in init(8), used by i386 keyboard halt code, and make init(8) smart enough to run /etc/rc.shutdown
! 398: <li>On i386 pcvt console, have CTRL-ALT-DEL sent a SIGUSR1 to init.
! 399: <li>Improve ipf.conf file parsing in ipf(8).
! 400: <li>New -q option for tar(1).
! 401: <li>ncurses-5.0-990703
! 402: <li>For identd(8) token support, constrain characters in the tokens more.
! 403: <li>Have the resolver ignore SIGs in the answer section for now.
! 404: <li>Many more man page tweaks.
! 405: <li>Use getprotobynumber(3) in fstat(8)
! 406: <li>SVR4 emulation fixes to systeminfo() system call.
! 407: <li>m_apply() function permits a function to be run on an mbuf.
! 408: <li>lmc(4) T1/T3 driver.
! 409: <li>tzcode 1999d.
! 410: <li>Support nullfs in fstat(1).
! 411: <li>More man page improvements.
! 412: <li>Fix a bug in savecore(8).
! 413: <li>Add joliet support to the iso9660 filesystem.
! 414: <li>Improve libm man pages.
! 415: <li>Split out more crypto algorithm knowledge from the actual IPSEC engine.
! 416: <li>Fix bpf attachment of bridges.
! 417: <li>Fix arc4random(3) to still work correctly inside a chroot space, by adding a sysctl somewhat equivelant to /dev/arandom.
! 418: <li>Permit tcpdump(8) of address-less interfaces.
! 419: <li>ncurses version of tput, finally.
! 420: <li>More man page improvements.
! 421: <li>Improvements to many pci ethernet drivers.
! 422: <li>ncurses-5.0-990626
! 423: <li>Add net_addrcmp(3) to libc.
! 424: <li>Add getaddrinfo(3), getnameinfo(3), if_indextoname(3), if_nameindex(3), and if_nametoindex(3) to libc.
! 425: <li>In ksh(1), avoid reusing fd 0-2 even moreso than before, since ksh caches
! 426: open files.
! 427: <li>Improved SYSV shared memory support.
! 428: <li>ESS audio driver.
! 429: <li>Move sparc bootblocks in memory, because possible kernel sizes have gone up.
! 430: <li>rangelan2 wireless network pcmcia driver.
! 431: <li>Split out ipsec crypto transform handling.
! 432: <li>egcs 990608
! 433: <li>Return to UDP NFS until TCP NFS is properly fixed.
! 434: <li>Fix breakpoint continues on the sparc.
! 435: <li>Constrain strlcat(3) from walking past the specified length.
! 436: <li>Fixed overflow issue in edquota(8).
! 437: <li>Fix PIC label handling code in i386 as(1).
! 438: <li>ncurses-5.0-990614
! 439: <li>Handle multicast packets in ipf, too.
! 440: <li>pdksh 5.2.13.7
! 441: <li>Improvements to units(1).
! 442: <li>In c++ mode, define NULL to be __null for better type checking.
! 443: <li>Remove TCPCOOKIE stuff, which never worked in differentially SYN-filtering environments.
! 444: <li>In various programs, handle PAGER environment variable according XPG.
! 445: <li>Some large partition fixes in scan_ffs(8).
! 446: <li>Bump maximum number of sockets in X server to 128.
! 447: <li>Return ICMP_UNREACH_PROTOCOL for unimplemented protocols.
! 448: <li>Fix an ipsec tdb_delete() bug.
! 449: <li>Replace pipe() in libc and kernel with new version which does the data copy in kernel, making EFAULT possible.
! 450: <li>Do not leak file descriptors in socketpair(2).
! 451: <li>Propagate more build variables in the gnu sub-tree.
! 452: <li>Add struct sockaddr_storage per RFC2553.
! 453: <li>Drop a volatile into the ncr(4) driver; who knows how it worked before.
! 454: <li>Crank sparc DFLDSIZ to 24MB.
! 455: <li>Make adjtime(2) return an EFAULT for a bad olddelta ptr.
! 456: <li>Permit non-broadcast replies in dhclient(8).
! 457: <li>ncurses-4.2-990605
! 458: <li>In sed(1), make 'G' create a newline if the hold buffer is empty.
! 459: <li>Add dot_quad_addr_new() API to libwrap, which uses inet_aton(3) instead of inet_addr(3), and hence can handle masks of 255.255.255.255.
! 460: <li>Sparc cs4231 audio support (SS5 audio).
! 461: <li>Use inet_aton(3) instead of inet_addr(3) in many programs.
! 462: <li>Use mkstemp(3) in httpd(8).
! 463: <li>In the resolver, permit '/' in CNAMES to PTRs, same as forward references permit.
! 464: <li>Use __builtin_next_arg() for va_start(), on i386 and m68k, to handle unaligned stdarg processing.
! 465: <li>Support subject inclusion in vacation(1).
! 466: <li>In ipnat, decode interface aliaseses before hostnames.
! 467: <li>Handle misaligned file struct's coming out of the KERN_FILE sysctl(3) call.
! 468: <li>More isakmpd(8) improvements.
! 469: <li>Use auto mode by default in ukphy.
! 470: <li>Avoid gcc fixinc (We do not want to run it, and even 1 second of machine time skew would screw up the previous avoidance tactic).
! 471: <li>Another memory leak fix in the ipsec kernel code.
! 472: <li>Change struct statfs use in the kernel, so that mount(8) can print more info.
! 473: <li>For NFSv3, prefer TCP connections.
! 474: <li>Fix a few more mkstemp(3) checks.
! 475: <li>Make install(1) compare work for files > 8G in size.
! 476: <li>Tons of man page improvements.
! 477: <li>For crontab(1) and vipw(8), check file size change as well as mtime to detect change.
! 478: <li>Better headphone/speaker handling in am7930 driver on sparc.
! 479: <li>Implement DLT_RAW, DLT_SLIP, and DLT_PPP in bpf
! 480: <li>egcs replaces gcc
! 481: <li>Some improvements to the libc_r threading code.
! 482: <li>Further keynote documentation improvements.
! 483: <li>Move bsd.port.mk and friends into the ports tree.
! 484: <li>On hp300, handle hil configuration more robustly.
! 485: <li>Numerous -mandoc man page upgrades.
! 486: <li>Permit mixed PIC/pic relocations on the sparc.
! 487: <li>Change bridge code to use a NETISR. Significant performance improvement.
! 488: <li>Set close-on-exec flag in vi, on files that are opened.
! 489: <li>*NULL dereference in wall(1).
! 490: <li>Permit threading using libutil/pty.c
! 491: <li>Fix exit code in sa(8).
! 492: <li>Dynamically allocate memory in sort(1), so that -k has no limit.
! 493: <li>Correct handling of out-of-window SYNs in our TCP code.
! 494: <li>Fix poll(2) return value.
! 495: <li>Add Keynote trust management system.
! 496: <li>Support mac68k Classic II video.
! 497: <li>swapctl(8) and the neccessary kernel support.
! 498: <li>Longer delay in the i386 pms(4) probe routine, for Thinkpads.
! 499: <li>Correct some DTR handling in pccom(4).
! 500: <li>Add <strong>-p</strong> flag to encrypt(1).
! 501: <li>Newer version of bktr(4) driver.
! 502: <li>ncurses-4.2-990516
! 503: <li><font color=#e00000><strong>Correct some realloc(3) misuses in the fts(3) routines. <a href=errata.html#fts>A patch is available</a></strong></font>.
! 504: <li>Add xe(4) xircom ethernet driver.
! 505: <li>Add support for static arp entries that cannot be overwritten.
! 506: <li>Many man page fixes.
! 507: <li>Numerous performance and reliability fixes to isakmpd(8) and IPSEC.
! 508: <li>Some more pthreads fixes.
! 509: <li>Fix blowfish CBC mode.
! 510: <li>Fix some more ipsec and tcp interaction bugs.
! 511: <li>In vmstat(8), increase width of -i field.
! 512: <li>Final unicast check ethernet driver fixes for bridging.
! 513: <li>Fix bounds control in msgs(1).
! 514: <li>Fix 'X' check in gcc printf format checker.
! 515: <li>Fix divide by zero in libcurses.
! 516: <li><font color=#e00000><strong>A reliability patch for TCP over IPSEC ESP tunnels. <a href=errata.html#ipsec1>A patch is available</a></strong></font>.
! 517: <li>Improvements to the ss(4) driver.
! 518: <li>Fix various endian related problems in nm(1), ranlib(1), strip(1), and size(1).
! 519: <li>Do not rotate kerberos logs using newsyslog.conf
! 520: <li>Fix xxsize() routines so that they do not call xxopen() and xxclose().
! 521: <li>On i386, handle apm segments in low memory.
! 522: <li>Add libcurses++.
! 523: <li>ncurses-4.2-990424
! 524: <li>More improvements to isakmpd(8), and ppp(8).
! 525: <li>In sparc cgsix(4) driver, turn off sync so that monitors will go into standby.
! 526: <li>Various improvements to the xl(4) driver.
! 527: <li>Repair TIOCFLUSH use in telnet(1).
! 528: <li>Fix an unlink related bug in cp(1).
! 529: <li>For sparc, delay in cpu-forced power-down, so that serial port output does not get garbled.
! 530: <li>Move perl lib files to /usr/libdata/perl5.
! 531: <li>For make(1), permit embedded : or ! in target names.
! 532: <li>Better range checking in inet_addr(3) functions.
! 533: <li>gzip 1.2.4a
! 534: <li>Support Vadem pcmcia controllers.
! 535: <li>Add 3p man page sub-tree for perl pages.
! 536: <li>In ls(1), defer conversion for non-printables till after symbolic link lookup.
! 537: <li>For msdosfs, do not require the boot signatures in a filesystem.
! 538: <li>Add support for new pipes to fstat(8).
! 539: <li>Newer version of AFS code.
! 540: <li>perl5.005_03
! 541: <li>Y2K improvement in shutdown(8).
! 542: <li>solve blocking daemon problem in ftpd(8).
! 543: <li>Check for failure of strdup(3) in pax(1).
! 544: <li>Greater care in tail(1), when going backwards.
! 545: <li>Add wdt(4) driver for Industrial Computer Source PCI-WDT50x watchdog timers.
! 546: <li>Implement <strong>-U username</strong> in ps(1).
! 547: <li>Add "verbose" command to boot_config(8).
! 548: <li>Check correct argument in sliplogin(8).
! 549: <li>New kernel hashinit().
! 550: <li>More ppp(8) improvements and bug fixes.
! 551: <li>More isakmpd(8) improvements and bug fixes.
! 552: <li>In calendar(1), fix offset bug for yearly events.
! 553: <li><font color=#e00000><strong>A reliability patch for ext2fs. <a href=errata.html#bmap_trap>A patch is available</a></strong></font>.
! 554: <li>Repair a mis-handling of non-terminated utmp strings in w(1).
! 555: <li>m68k optimized asm version of strlcpy(3).
! 556: <li>Do not accept incoming packets on a down interface.
! 557: <li>More strict isapnp detection for the isa ep(8) cards.
! 558: <li>kcore handling for the m68k ports.
! 559: <li><font color=#e00000><strong>A serious reliability patch for the powerpc port, regarding traps and signals. <a href=errata.html#powerpc_trap>Patches are available</a></strong></font>.
! 560: <li>Support power-down mode in the mac68k port.
! 561: <li>Fix a retransmission problem in tcp_newreno.
! 562: <li>Fix a sequence wraparound bug in very large tcp transfers.
! 563: <li>Greater care with arguments in pwd_mkdb(8).
! 564: <li>Support the -susv2 macro in nroff tmac doc-syms.
! 565: <li>Save a copy of the dmesg(8) output in /var/run/dmesg.boot.
! 566: <li>Improve ddb ps output.
! 567: <li>Repair filesystem mounting failure message in mount_msdos(8).
! 568: <li>Merge IP-in-IP tunnel code so that both MROUTING and IPSEC versions work together, properly.
! 569: <li>Do not let calendar(1) assume that it is run as root.
! 570: <li>Fix /tmp cleanup code in lynx(1).
! 571: <li>Move ipfstat(8) output files to /var/run to avoid a race.
! 572: <li>Reenable TCP_SACK and TCP_FACK, so that development cycle can test them sufficiently.
! 573: <li>Various man page fixes.
! 574: <li>Various isakmpd(8) fixes and improvements.
! 575: <li>Fix probing of ISA ex(4) cards.
! 576: <li>More amiga keymaps.
! 577: <li>Add yyfix(1), from 4.4BSD.
! 578: <li>Merge mkfifo into mknod, so that mknod ends up having support for the <strong>-p</strong> option.
! 579: <li>Fix a output buffer overflow in msgrcv(2).
! 580: <li>Fix odbm support and permit opening a zero-length hash file.
! 581: <li>new true awk, April 16 release.
! 582: <li>Support sparc xbox sbus expansion box.
! 583: <li>Bug fixes to sparc spif(4), hme(4), be(4) drivers.
! 584: <li>Updated distrib/notes which shipped with the 2.5 release.
! 585: </ul>
! 586: <p>
! 587:
! 588: This list mentions mostly platform-independent changes. For a list of changes
! 589: made in a particular platform, please check the page for that platform. If you
! 590: find them not listed there, the changes are either (1) not being documented or
! 591: (2) are documented here.<br><br>
! 592:
! 593: <hr>
! 594: <p>
! 595: <h3>
! 596: <a href=plus20.html>For changes leading up to OpenBSD 2.0, click here</a>.<br>
! 597: <a href=plus21.html>For changes leading up to OpenBSD 2.1, click here</a>.<br>
! 598: <a href=plus22.html>For changes leading up to OpenBSD 2.2, click here</a>.<br>
! 599: <a href=plus23.html>For changes leading up to OpenBSD 2.3, click here</a>.<br>
! 600: <a href=plus24.html>For changes leading up to OpenBSD 2.4, click here</a>.<br>
! 601: <a href=plus25.html>For changes leading up to OpenBSD 2.5, click here</a>.<br>
! 602: <a href=plus26.html>For changes leading up to OpenBSD 2.6, click here</a>.<br>
! 603: <a href=plus.html>For changes in OpenBSD-current, click here</a>.
! 604: <br>
! 605: </h3>
! 606:
! 607: <hr>
! 608: <a href="index.html"><img height=24 width=24 src=back.gif border=0 alt=OpenBSD></a>
! 609: <a href=mailto:www@openbsd.org>www@openbsd.org</a>
! 610: <br><small>$OpenBSD: plus.html,v 1.476 1999/10/19 05:50:14 deraadt Exp $</small>
! 611:
! 612: </body>
! 613: </html>
![[BACK]](/icons/back.gif){kind=icon}
Return to plus26.html CVS log ![[TXT]](/icons/text.gif){kind=icon}
![[DIR]](/icons/dir.gif){kind=icon}
Up to [local] / www