Annotation of www/plus26.html, Revision 1.49
1.17 naddy 1: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
1.1 deraadt 2: <html>
3: <head>
4: <title>OpenBSD 2.6 changes</title>
5: <meta name="resource-type" content="document">
1.40 schwarze 6: <meta name="description" content="OpenBSD 2.6 changes">
7: <meta name="keywords" content="openbsd,changes">
1.1 deraadt 8: <meta name="distribution" content="global">
1.40 schwarze 9: <meta name="copyright" content="This document copyright 1996-1999 by OpenBSD.">
1.1 deraadt 10: </head>
11:
1.20 david 12: <body bgcolor="#ffffff" text="#000000" link="#23238E">
1.1 deraadt 13:
1.14 jsyn 14: <a href="index.html"><img alt="[OpenBSD]" height="30" width="141" src="images/smalltitle.gif" border="0"></a>
1.1 deraadt 15: <p>
1.47 deraadt 16: <h2><font color="#e00000">OpenBSD 2.6 released (December 1, 1999)</font></h2>
1.17 naddy 17: <hr>
1.1 deraadt 18:
19: <p>
20: This is a partial list of the major machine independent changes
1.33 sobrado 21: (i.e., these are the changes people ask about most often). Machine
1.1 deraadt 22: specific changes have also been made, and are sometimes mentioned
1.33 sobrado 23: in the pages for the specific <a href=plat.html>platforms</a> if you
1.1 deraadt 24: are interested in further port-specific details. Many ports
25: have had architecture-specific enhancements relative to NetBSD,
26: but when they do not they certainly have plenty of platform-independent
27: changes, starting with those listed below..
28:
29: <p>
1.17 naddy 30: Note: <font color="#e00000">Problems for which patches exist are marked in red</font>.
1.1 deraadt 31:
32: <p>
1.16 deraadt 33: For changes in other releases, click below:<br>
34: <a href="plus20.html">2.0</a>,
35: <a href="plus21.html">2.1</a>,
36: <a href="plus22.html">2.2</a>,
37: <a href="plus23.html">2.3</a>,
38: <a href="plus24.html">2.4</a>,
39: <a href="plus25.html">2.5</a>,
40: <a href="plus27.html">2.7</a>,
41: <a href="plus28.html">2.8</a>,
42: <a href="plus29.html">2.9</a>,
43: <a href="plus30.html">3.0</a>,
44: <a href="plus31.html">3.1</a>,
45: <a href="plus32.html">3.2</a>,
1.18 deraadt 46: <a href="plus33.html">3.3</a>,
1.19 david 47: <a href="plus34.html">3.4</a>,
1.22 deraadt 48: <a href="plus35.html">3.5</a>,
1.23 miod 49: <a href="plus36.html">3.6</a>,
1.46 deraadt 50: <a href="plus37.html">3.7</a>,
1.32 deraadt 51: <br>
1.26 deraadt 52: <a href="plus38.html">3.8</a>,
1.27 deraadt 53: <a href="plus39.html">3.9</a>,
1.28 deraadt 54: <a href="plus40.html">4.0</a>,
1.29 deraadt 55: <a href="plus41.html">4.1</a>,
1.30 deraadt 56: <a href="plus42.html">4.2</a>,
1.31 deraadt 57: <a href="plus43.html">4.3</a>,
1.32 deraadt 58: <a href="plus44.html">4.4</a>,
1.34 deraadt 59: <a href="plus45.html">4.5</a>,
1.35 deraadt 60: <a href="plus46.html">4.6</a>,
1.36 deraadt 61: <a href="plus47.html">4.7</a>,
1.37 deraadt 62: <a href="plus48.html">4.8</a>,
1.38 deraadt 63: <a href="plus49.html">4.9</a>,
1.39 nick 64: <a href="plus50.html">5.0</a>,
1.40 schwarze 65: <a href="plus51.html">5.1</a>,
1.41 nick 66: <a href="plus52.html">5.2</a>,
1.42 deraadt 67: <a href="plus53.html">5.3</a>,
1.43 deraadt 68: <a href="plus54.html">5.4</a>,
1.44 deraadt 69: <br>
1.46 deraadt 70: <a href="plus55.html">5.5</a>,
1.48 brett 71: <a href="plus56.html">5.6</a>,
1.49 ! deraadt 72: <a href="plus57.html">5.7</a>,
1.16 deraadt 73: <a href="plus.html">current</a>.
1.1 deraadt 74: <br>
75:
1.47 deraadt 76: <p>
77: <h3><font color="#0000e0">Changes made between OpenBSD 2.5 and 2.6</font></h3>
78: <p>
1.1 deraadt 79:
80: <ul>
81: <li>2.6 source tree frozen.
82: <li>Merge in some critical ATAPI fixes.
83: <li>Force FDSCRIPTS.
1.17 naddy 84: <li><font color="#e00000"><strong>RELIABILITY ISSUE: Fix a bug in the brooktree driver which permitted any user to crash some OpenBSD/i386 machines. <a href="errata25.html#brooktree">A patch is available</a></strong></font>.
1.2 espie 85: <li>Separate help(1) command, and a separate help(1) man page.
1.1 deraadt 86: <li>Move wrapper handling to the child process, in sshd(8).
87: <li>Various fixes for the bignum and RSA handling code in sshd(8).
88: <li>ssh 1.5 protocol.
89: <li>isakmpd policy man page.
90: <li>Put gcc-lib in base, because the mac68k installer built-in tar command is stupid, and does not do a mkdir -p type operation internally.
91: <li>In the install script, if the user skips network config and later chooses an option which requires network config, ask for network config to be done then.
92: <li>Make i386 pcvt driver also support the traditional PC display, with 16 colours.
1.2 espie 93: <li>In the install script, support separate international and USA versions of the ssl package.
1.1 deraadt 94: <li>Fix another unmount/mfs race condition.
95: <li>If no sshd_config file, have sshd(8) abort.
96: <li>Fix for the i386 isadmaattach panic.
97: <li>PermitRootLogin in sshd(8).
98: <li>Document how we are dealing with SSL, crypto, and RSA issues in the ssl(8) man page even better.
99: <li>Stir ARC4 after key use in sshd(4).
100: <li>Fix mii tick tock stuff in the fxp(4) driver.
101: <li>Fix connect() race in ssh agent handling.
102: <li>Numerous fixes and improvements to the install scripts.
103: <li>Avoid mbuf corruption in recvmsg(2).
104: <li>Only attempt to read disklabels from CDs with a data track.
105: <li>Fix a bug in newsyslog(8), which caused it to rotate empty log files near first system boot.
106: <li>Do not call VOP_SETATTR on a pipe.
107: <li>SilentDeny option for sshd(8).
108: <li>Avoid an infinite loop in ping(8).
109: <li>Add driver for i82553 phy, used by some fxp(4) cards.
110: <li>Allow root logins in xmd, but provide a nice comment so people can disable it easily.
111: <li>Document -e support in config(8).
112: <li>Use setsid(2) on all connections to sshd(8), since our setlogin(2) is secure and needs that.
113: <li>sshd(8) Allow/Deny Users/Groups features.
114: <li>sshd(8) UseLogin feature.
1.2 espie 115: <li>Use a separate perl-based vi.recover script because sh is a terrible language.
1.1 deraadt 116: <li>Check permissions of directories leading up to ssh authorized_keys file.
1.10 pvalchev 117: <li>For AF_UNIX sockets, do not follow symbolic links at creation time, since there is nothing equivalent to O_EXCL.
1.1 deraadt 118: <li>Permit build of system with NFSSERVER but without NFSCLIENT.
119: <li>More keynote man pages.
120: <li>pmax support is back in the tree, various tweaks everywhere.
121: <li>Make eap(4) print it's interrupt at attach time.
122: <li>As well as numerous repairs, now also support "pkg_add *".
123: <li>Many many man page improvements.
124: <li>Support newer model of the fxp(4) card.
125: <li>Further improvements to ATA probing.
126: <li>Support skey in sshd.
127: <li>Use pkg_add -I for the ssl package install, in the install scripts.
128: <li>Repair fd(4) motor off code.
129: <li>Handle most xl(4) devices that lack a PHY.
130: <li>On machines lacking shared libraries, install the ssh utilities with mode 0, so that /etc/rc will run the ones in /usr/local/bin instead.
131: <li>Cluster fixes to ipsec code.
132: <li>implement client NumberOfPasswordPrompts in ssh(1).
133: <li>Support various effect modes on the ym(4) sound cards.
134: <li>Y2K related fixes for some buggy i386 clock chips.
135: <li>Fix various atapi sense detection bugs.
136: <li>Big endian fixes to tcpdump(8).
137: <li>Move sshd auth sockets to a private directory.
138: <li>Various make performance enhancements.
139: <li>Ensonic ES1371 support in the eap(4) driver.
140: <li>Fix a sshd xauth race.
141: <li>Lots of manpage improvements.
142: <li>ssh crc32 compensation attach detection fix from core-sdi.
143: <li>PCI Promise IDE controller support, not perfect yet.
144: <li>Nuke minfd stuff in ssh.
145: <li>config(8) gets -e and -u support.
146: <li>Put sbin and /usr/sbin in the default path.
147: <li>Fix garbled dmesg output on the console in the mvme68k port.
148: <li>DNS spoof checking code in the ssh.
149: <li>Double default shared memory for i386.
150: <li>Various quality of software repairs to sshd, like errno trashing in signal handlers, and other stupid things like that.
151: <li>Fix a missing memory initialization bug in the i386 bootblocks.
152: <li>Avoid use of shutdown(2) in sshd.
153: <li>For fts(3) and find(1), fix various off-by-one errors and some issues with -execdir for multiple relative directories.
154: <li>libwrap support in sshd.
155: <li>Nice setproctitle(3) changes to sshd, so that you can tell which process is which login.
156: <li>Add -q support to whois(1).
157: <li>Remove local blowfish code in ssh.
158: <li>Improve the scp(1) progress meter.
159: <li>Various games fixes.
160: <li>mod_ssl 2.4.5
161: <li>new isakmpd code.
162: <li>Support DSO's in httpd, and build them into the normal tree.
163: <li>sm(4) driver now supports SMC 8020 pcmcia cards.
164: <li>sk(4) driver for SysKonnect 984x gigabit ethernet adapters.
165: <li>add support for external storage to the mbuf layer, managed by external managers.
166: <li>libkeynote 2.0
167: <li>Support more ess(4) sound card models.
168: <li>Numerous other ssh changes...
169: <li>in ssh, use libc md5 code.
170: <li>remove rc4 code from ssh
171: <li>Remove ssh "-c none" code.
172: <li>Improve ftpd's documentation.
173: <li>Improve tcpdump's handling of ISAKMP packages.
174: <li>Make bootblock memory probing work the same as 2.5.
175: <li>More man page repairs and improvements. A day doesn't go by...
176: <li>Some fixes to the games.
177: <li>Many more ssh improvements.
178: <li>Critical ipsec reliability fix for the i386.
179: <li>Run ldconfig before any ssh stuff, because the ssl package now extracts into /usr/local/lib.
180: <li>Apache 1.3.9 + Mod_ssl 2.4.2
181: <li>ssleay(1) goes away, replaced by openssl(1).
182: <li>OpenSSL 0.9.4
183: <li>Fix tun(4) byte counters.
184: <li>To ssh, add X11DisplayOffset, user@host, kerberos4 support, GatewayPorts, ssh -g, etc.
185: <li>Fix rc scripts to start ssh nicely upon first and subsequent boots.
186: <li>Rip all licensed and patented code out of ssh.
187: <li>Support MVME188 and MVME197 models in the mvme88k port.
188: <li>Fixes to the pci wb(4) driver.
189: <li>pkg_add signing capability is being worked on.
190: <li>Put uuencoded install bits for amiga into the tree, so that they can end up in the distribution.
191: <li>Fix hp300 ramdisk.
192: <li>32-bit ie(4) driver for the mvme68k and mvme88k ports.
193: <li>More changes to pcvt scrollback code.
194: <li>More fixes to pci ax(4).
195: <li>In inetd.conf, disable telnet/ftp/login by default.
196: <li>Simplify ssh configuration.
197: <li>New mandoc pages for ssh(1) and friends..
198: <li>Add ssh to the source tree (based on an old version, but all the bugs are fixed, and we are playing RSA license games with libssl/libcrypto and adding all the modern ssh features).
199: <li>Add :L and :U modifiers to make(1).
200: <li>stdbool.h from C9X.
201: <li>Install script changes to support libssl package install. Not nice, but it will be improved.
202: <li>Move towards 2.6-beta.
203: <li>Fix icmp byte-order changes so that ip_forward() aliased packet doesn't bite us.
204: <li>Many man page changes.
205: <li>Some ipsec changes to tcpdump(1).
206: <li>Add atactl(8).
207: <li>Add opendisk(3) API to libutil.
208: <li>Crank some i386 limits, now that kvm is larger.
209: <li>Repair some URL handlings in pkg_install(8).
210: <li>Significant changes to the install scripts.
211: <li>Change makewhatis to accept arguments.
212: <li>AC-97 CODEC support.
1.6 aaron 213: <li>Fix device existence check in hp300 tape support.
1.1 deraadt 214: <li>Grow i386 kvm to 512MB.
215: <li>Merge to tcpdump 3.4.
216: <li>Use writev(3) in libc functions that talk to stderr.
217: <li>Add raw support in tcpdump.
218: <li>In xl(4), Support 3c980c.
219: <li>Fix a FIFO handling bug in xe(4) driver.
220: <li>Fix a caching bug in getpwent(3) seen with setuid binaries and YP.
221: <li>i386 support for "isa0 at pcib?".
222: <li>Upon bootup, permit i386 to modify the rootdev after looking at BIOS disk signatures.
223: <li>Change rc.conf so that sendmail is started with -q30m by default (not -bd).
224: <li>Various speed improvements by using round_page() instead of roundup(foo, NBPG).
225: <li>cvs 1.10.7
226: <li>Import uunencoded binary amiga things which need to be in a release.
227: <li>64bit repair in ls(1)
228: <li>ELF64 support.
229: <li>Some man page improvements.
230: <li>Detach code in the icsphy.
231: <li>Support tadpole sparc microcontroller.
232: <li>Ensure that adduser(8) sends the password to encrypt(1) via stdin, avoid ps(1) snooping.
233: <li>Improved m4(1) extensively.
234: <li>Improved fsck_msdos(8).
235: <li>On i386, expand aperture because XFree86 3.9.15 want to look at the card BIOS.
236: <li>p9100 console support for Tadpole sparc.
237: <li>Scroll-back support for the i386 pcvt driver.
238: <li>Use stathz to calculate CPU time, fixing CPU calculation when stathz is different from hz and profhz (affected i386).
239: <li>Preliminary ATAPI tape drive support.
240: <li>Support "short" mouse protocol for the Tadpole sparc.
241: <li>More queue.h macros.
242: <li>In /etc/rc during vi recovery, ensure vi recovery files are normal.
243: <li>Change /etc/rc.shutdown handling, so that /etc/rc.shutdown is completely admin-editable and does not run if in single-user mode.<br> <strong>NOTE: If you follow current, this means that people need to install a new /etc/rc file.</strong>
244: <li>On sparc, change pagetable pointers using atomic instructions.
245: <li>Change pmap_enter() API.
246: <li>Start doing an atoi(3) audit of the tree; most cases should use strtol() and strtoul().
247: <li>Cleanup handling of signed and unsigned numbers in sysctl(8).
248: <li>Many man page improvements.
249: <li>Print i386 interrupts nicer in vmstat -i.
250: <li>In bridge, do not flush static address when configuring down.
251: <li>Permit bridge control before it is configured up.
252: <li>Cleanup parsing of /etc/hostname.* files, and support new /etc/bridgename.* files.
253: <li>In tcp's input path, for SACK, update the window information correctly.
254: <li>If a patch contains zero patches, have patch(1) error out.
255: <li>Start amd(8) in /etc/amd.
256: <li>Fix buf overflow in amd(8).
257: <li>Support AAA-131CF card in ahc(4) driver.
258: <li>Check SACK hole validity better, and do sequence space arithmetic better.
1.17 naddy 259: <li><font color="#e00000"><strong>SECURITY ISSUE: In cron(8), make sure argv[] is NULL terminated in the fake popen() and run sendmail as the user, not as root. <a href="errata25.html#cron">A patch is available</a></strong></font>.
1.1 deraadt 260: <li>Some fixes to newsyslog(8).
261: <li>Disable SACK for now; some issues remain.
262: <li>Buffer overflow fixes in from(1).
263: <li>Make res_random and ip_random attacks harder by adding a little xor.
264: <li>Improved handling of BIOS memory maps, which should permit apm to work a bit better on some machines.
265: <li>XFree86 3.3.5
266: <li>Allow userland to figure out whether a scsi device is atapi or not; used by some things like tosha.
267: <li>Fix fgets(3) bug in paste(1).
268: <li>gcc 2.95.1
269: <li>ncurses-5.0-990821
270: <li>Disable -fstrict-aliasing by default: It causes gcc to generate very incorrect code when compiling code which isn't perfectly ANSI-conforming.
271: <li>Add MOUSEIOCSCOOKED and MOUSEIOCSRAW ioctl() calls to the lms and mms drivers, so that X can figure out what driver is running.
272: <li>Extend support in kbd(1) for the sparc.
273: <li>Change default group ownership for tty and cua devices, so that locking works better in tip(1) and cu(1).
274: <li>Crank kerberos default expiration date.
1.25 david 275: <li>Teach i386 architecture code about Rise CPU models.
1.1 deraadt 276: <li>Build shared library called libperl.
277: <li>Use new <strong>arch -s</strong> option for building perl.
278: <li>Fix a few possible sparc pmap races.
279: <li>Make ld.so work on mips again.
280: <li>Merge machine(1) and arch(1) commands.
281: <li>Fix a sun4m trap handling bug.
282: <li>Get ready for emulating linux clone(2).
283: <li>Make various forms of rup(1) produce the same formatted output.
284: <li>Many man pages updated.
285: <li>Various tiny fixes.
286: <li>In fortune(6), a fix for a use after free().
287: <li>hp300 CD booting.
288: <li>Fix buglet in fts(3) handling of FTS_NOCHDIR.
289: <li>Various dmesg and space-saving improvements to the pcmcia drivers.
290: <li>Allied Telesis LA-PCM pcmcia ethernet card support.
291: <li>ncurses-5.0-990814
292: <li>Various improvements to the install scripts.
293: <li>Correctly set the type and typename in the wd(4) driver generated label.
294: <li>Support AmbiCom NE2000 pcmcia ethernet.
295: <li>Fix the scheduler problems in the 2.5 release.
296: <li>Driver for ASIX88140A/88141 PCI ethernet, ax(4).
297: <li>In pcmcia ep(4) driver, support 3CXEM556B-INT.
298: <li>Remove useless if_ep shutdown hook.
299: <li>Import USB code.
1.21 deraadt 300: <li><font color="#e00000"><strong>SECURITY ISSUE: The procfs and fdescfs filesystems had an overrun in their handling of uio_offset in their readdir() routines. (These filesystems are not enabled by default.) <a href="errata25.html#miscfs">A patch is available</a></strong></font>.
1.1 deraadt 301: <li>Repair: probe svr4 emulation before linux once again.
302: <li>Support -M and -N flags in uptime(1).
303: <li>Detect IDT WinChip models.
304: <li>If we fail to match an isapnp device, and it looks like it has the resources a com(4) device would have, try seeing if it in fact is.
305: <li>New i82365 pcmcia irq probing code that tries much harder to allocate a proper interrupt for the pcic.
306: <li>Add DIOCRLDINFO ioctl, used by fdisk(8) to indicate that the MBR has been re-written, and the disklabel should be re-read off disk.
307: <li>Support PChome-PCI LANCE (1Mbit phone wire "ethernet") using le(4).
308: <li>Document "Precedence: list" in vacation man page.
309: <li>In tar, fflush(stderr) at a critical point.
310: <li>Skip hostname.* files if the interface does not exist.
311: <li>Make mbuf panic messages unique.
312: <li>Repair interface walking in rarpd(8).
1.17 naddy 313: <li><font color="#e00000"><strong>SECURITY ISSUE: Stop profiling (see profil(2)) when we execve() a new process. <a href="errata25.html#profil">A patch is available</a></strong></font>.
1.1 deraadt 314: <li>pcmcia device attach/dettachment code, supporting network and serial devices now.
315: <li>vdevgone() internal kernel API.
316: <li>If fread(3) returns EBADF, also set the error flag.
317: <li>Fix a number of uid_t, gid_t and %u changes still broken in the source tree.
318: <li>Split i386 ramdisks up a bit for the next release.
319: <li>Fix sparc interrupt handler to recognize < 0 from an driver interrupt handler means "interrupt may have been for me, but I am not sure".
320: <li>isakmpd(8) updates.
321: <li>Add SADB_FLUSH logic to IPSEC PFKEYv2, and a <strong>ipsecadm flush</strong> subcommand.
322: <li>Update bktr driver.
323: <li>Shrink some device drivers; we're trying to make more fit onto the install floppy.
324: <li>config_defer support in the kernel.
325: <li>Some man page cleanups.
326: <li>Make IDE work again on the alpha.
327: <li>PCI ESS Solo-1 PCI audio card driver, see eso(4).
328: <li>Make poll(2) system call a tiny bit faster for trivial calls.
329: <li>Enable emacs tab completion by default in ksh(1).
330: <li>/tmp race repairs in yacc(1).
1.11 pvalchev 331: <li>Propagate TMPDIR better into locate.updatedb(8).
1.1 deraadt 332: <li>Kill gzip sub-processes in pax(1) instead of letting them die from SIGPIPE.
1.17 naddy 333: <li><font color="#e00000"><strong>SECURITY ISSUE: In /etc/rc, use mktemp(1) for motd re-writing and change the find(1) to use -execdir. <a href="errata25.html#rc">A patch is available</a></strong></font>.
1.1 deraadt 334: <li>Support for 3c515 isapnp 100mbit ethernet card, in ef(4).
335: <li>Chown/chmod all of the pty devices.
336: <li>If /etc/fstab is 0-length or not a regular file, have setfsent(3) fail.
337: <li>Import of mailwrapper(8) into the tree.
338: <li>Games updated.
1.17 naddy 339: <li><font color="#e00000"><strong>SECURITY ISSUE: Do not permit regular users to chflags(2) or fchflags(2) character or block devices. <a href="errata25.html#chflags">A patch is available</a></strong></font>.
1.1 deraadt 340: <li>New raidframe code.
341: <li>Make sure install scripts remove async mount conditions before attempting to installboot(8).
342: <li>Have <strong>route flush</strong> skip PF_KEY flows.
343: <li>tcpdump 3.4 merged.
344: <li>Have pkg_create(1) use tar -T.
345: <li>Add -T option to tar(1).
346: <li>Fix fgetln(3) issue in pax(1).
1.17 naddy 347: <li><font color="#e00000"><strong>SECURITY ISSUE: Make nroff(1) call groff(1) with the -S option. <a href="errata25.html#nroff">A patch is available</a></strong></font>.
1.1 deraadt 348: <li>If src file does not exist, have <strong>mv -i</strong> complain immediately.
349: <li>Bug fix to pkg_add(8).
350: <li>More man page cleanups.
351: <li>Clean dmesg output from various drivers.
352: <li>Make rc.shutdown work from single-user mode too.
353: <li>PCI Tigon I and Tigon II driver, ti(4).
354: <li>Disable DMA on Acer Labs PCI IDE chipset, for now.
355: <li>Switch to new ATA/ATAPISCSI code for most architectures.
356: <li>Make the i386 dkcsum stuff be quieter for empty removeable media devices.
357: <li>Do installs faster by mounting the filesystems async.
358: <li>Fix various bugs in bridging support, especially SIOCBRDGRTS.
359: <li>Make tun(4) return EMSGSIZE for zero-length writes.
360: <li>Fix a field count bug in join(1).
361: <li>In ipnat(8), fix -n to work with -v.
362: <li>Missing newline in id(1).
363: <li>New drivers for the force CPU-5V (vme, sys config, D/A board driver, flash).
364: <li>Handle _POSIX_VDISABLE better in telnet(1).
365: <li>Run i386 audio at higher IPL.
366: <li>Take greater care in head(1).
367: <li>Less dmesg verbosity from media routines.
368: <li>Various atapi/scsi/ide changes being worked on (LS-120 works).
369: <li>powerpc ieeefp library routines.
370: <li>insque is no longer in libiberty.
371: <li>egcs-990718.
372: <li>Bring back TCP_SIGNATURE support.
373: <li>1000baseXX media support.
374: <li>For isapnp drivers, we can do more resource checking in the xxmatch() function, and less in the xxattach() function.
375: <li>Add fparseln(3).
376: <li>new swap16_multi() macro in sys/endian.h.
377: <li>More man pages.
378: <li>wdc(4) on isapnp(4).
379: <li>inetd(8)-started daemons should syslog(3) on startup failure.
380: <li>wdc(4) on pcmcia(4).
381: <li>More sparc keyboards in kbd(1).
382: <li>rc.shutdown(8) manpage.
383: <li>Add fpuparseln(3) to -lutil.
384: <li>First cut at isapnp mpu, and ym mpu.
385: <li>Document and complete skey(1) support in telnet(1).
386: <li>Correct os_mask handling in OLF execve code.
1.11 pvalchev 387: <li>Accommodations in the vm system for backward growing stack architectures.
1.1 deraadt 388: <li>Do not cache page tables on microsparc1 either.
389: <li>Many more man page fixes.
390: <li>Support floating accent and compose in sparc kbd driver.
391: <li>libpcap 0.4 changes brought in.
392: <li>In pcap library, fix pcap_open_offline() to handle snaplengths of -1.
393: <li>Fix a memory mishandling in mixerctl(1).
394: <li>Further fixes for some strange wss isapnp variants.
395: <li>Create /var/db/host.random at install time.
396: <li>Complete /etc/rc.shutdown support in reboot(8) and shutdown(8).
397: <li>Lock ARP entries to an interface, and provide more diagnostics.
398: <li>Import of PCI ATA/IDE stuff from NetBSD.
399: <li>Retire libm_i387.
400: <li>Remove some shared libraries that are better used in static form.
401: <li>Support non-US sparc keyboards using kbd(8) command.
402: <li>At execve() time, clear the P_NOCLDWAIT flag.
403: <li>egcs 990629
404: <li>Finer timing interval and standard deviation additions to ping(8).
405: <li>Add pci_mapreg*() interfaces.
406: <li>Implement more linux compat ioctl's.
407: <li>Undo recent tcp_input changes which caused crashes.
408: <li>Fix panic bug in readdisklabel() on several architectures.
409: <li>Improve IPSEC SA hashing function.
410: <li>New mii code that does async negotiation.
411: <li>Default ksh(1) and sh(1) to emacs editing mode.
412: <li>Generalize bc wrapper program.
413: <li>Move /etc/host.random to /var/db.
414: <li>In ipsec, demand keying for PF_KEY.
415: <li>In disklabel(8), put in check for architectures that require partition a to start at sector 0.
1.25 david 416: <li>For sparc svr4 emulation, put sun4X CPU class into SVR4_SI_PLATFORM.
1.1 deraadt 417: <li>pdksh-5.2.14
418: <li>Introduce fdremove() kernel API; makes fdalloc() faster by making sure fd_freefile is correct.
419: <li>Some small improvements to adduser(8) and rmuser(8).
420: <li>pcmcia wavelan driver, wi(4).
421: <li>Extend pcmcia IO space.
422: <li>ncurses-990710
423: <li>Fix a SIGSEGV in vi(1).
424: <li>Many man page improvements.
425: <li>Newer version of isakmpd(8).
426: <li>Support PAGER properly in pkg_install(8).
1.17 naddy 427: <li><font color="#e00000"><strong>SECURITY ISSUE: Fix an ipsec_in_use out-of-sync condition. <a href="errata25.html#ipsec_in_use">A patch is available</a></strong></font>.
1.1 deraadt 428: <li>Add support for TCP MD5 (RFC 2385) option called TCP_SIGNATURE used for authenticating BGP sessions.
429: <li>Support SIGUSR1 in init(8), used by i386 keyboard halt code, and make init(8) smart enough to run /etc/rc.shutdown
430: <li>On i386 pcvt console, have CTRL-ALT-DEL sent a SIGUSR1 to init.
431: <li>Improve ipf.conf file parsing in ipf(8).
432: <li>New -q option for tar(1).
433: <li>ncurses-5.0-990703
434: <li>For identd(8) token support, constrain characters in the tokens more.
435: <li>Have the resolver ignore SIGs in the answer section for now.
436: <li>Many more man page tweaks.
437: <li>Use getprotobynumber(3) in fstat(8)
438: <li>SVR4 emulation fixes to systeminfo() system call.
439: <li>m_apply() function permits a function to be run on an mbuf.
440: <li>lmc(4) T1/T3 driver.
441: <li>tzcode 1999d.
442: <li>Support nullfs in fstat(1).
443: <li>More man page improvements.
444: <li>Fix a bug in savecore(8).
445: <li>Add joliet support to the iso9660 filesystem.
446: <li>Improve libm man pages.
447: <li>Split out more crypto algorithm knowledge from the actual IPSEC engine.
448: <li>Fix bpf attachment of bridges.
1.10 pvalchev 449: <li>Fix arc4random(3) to still work correctly inside a chroot space, by adding a sysctl somewhat equivalent to /dev/arandom.
1.1 deraadt 450: <li>Permit tcpdump(8) of address-less interfaces.
451: <li>ncurses version of tput, finally.
452: <li>More man page improvements.
453: <li>Improvements to many pci ethernet drivers.
454: <li>ncurses-5.0-990626
455: <li>Add net_addrcmp(3) to libc.
456: <li>Add getaddrinfo(3), getnameinfo(3), if_indextoname(3), if_nameindex(3), and if_nametoindex(3) to libc.
457: <li>In ksh(1), avoid reusing fd 0-2 even moreso than before, since ksh caches
458: open files.
459: <li>Improved SYSV shared memory support.
460: <li>ESS audio driver.
461: <li>Move sparc bootblocks in memory, because possible kernel sizes have gone up.
462: <li>rangelan2 wireless network pcmcia driver.
463: <li>Split out ipsec crypto transform handling.
464: <li>egcs 990608
465: <li>Return to UDP NFS until TCP NFS is properly fixed.
466: <li>Fix breakpoint continues on the sparc.
467: <li>Constrain strlcat(3) from walking past the specified length.
468: <li>Fixed overflow issue in edquota(8).
469: <li>Fix PIC label handling code in i386 as(1).
470: <li>ncurses-5.0-990614
471: <li>Handle multicast packets in ipf, too.
472: <li>pdksh 5.2.13.7
473: <li>Improvements to units(1).
474: <li>In c++ mode, define NULL to be __null for better type checking.
475: <li>Remove TCPCOOKIE stuff, which never worked in differentially SYN-filtering environments.
476: <li>In various programs, handle PAGER environment variable according XPG.
477: <li>Some large partition fixes in scan_ffs(8).
478: <li>Bump maximum number of sockets in X server to 128.
479: <li>Return ICMP_UNREACH_PROTOCOL for unimplemented protocols.
480: <li>Fix an ipsec tdb_delete() bug.
481: <li>Replace pipe() in libc and kernel with new version which does the data copy in kernel, making EFAULT possible.
482: <li>Do not leak file descriptors in socketpair(2).
483: <li>Propagate more build variables in the gnu sub-tree.
484: <li>Add struct sockaddr_storage per RFC2553.
485: <li>Drop a volatile into the ncr(4) driver; who knows how it worked before.
486: <li>Crank sparc DFLDSIZ to 24MB.
487: <li>Make adjtime(2) return an EFAULT for a bad olddelta ptr.
488: <li>Permit non-broadcast replies in dhclient(8).
489: <li>ncurses-4.2-990605
490: <li>In sed(1), make 'G' create a newline if the hold buffer is empty.
491: <li>Add dot_quad_addr_new() API to libwrap, which uses inet_aton(3) instead of inet_addr(3), and hence can handle masks of 255.255.255.255.
492: <li>Sparc cs4231 audio support (SS5 audio).
493: <li>Use inet_aton(3) instead of inet_addr(3) in many programs.
494: <li>Use mkstemp(3) in httpd(8).
495: <li>In the resolver, permit '/' in CNAMES to PTRs, same as forward references permit.
496: <li>Use __builtin_next_arg() for va_start(), on i386 and m68k, to handle unaligned stdarg processing.
497: <li>Support subject inclusion in vacation(1).
1.11 pvalchev 498: <li>In ipnat, decode interface aliases before hostnames.
1.1 deraadt 499: <li>Handle misaligned file struct's coming out of the KERN_FILE sysctl(3) call.
500: <li>More isakmpd(8) improvements.
501: <li>Use auto mode by default in ukphy.
502: <li>Avoid gcc fixinc (We do not want to run it, and even 1 second of machine time skew would screw up the previous avoidance tactic).
503: <li>Another memory leak fix in the ipsec kernel code.
504: <li>Change struct statfs use in the kernel, so that mount(8) can print more info.
505: <li>For NFSv3, prefer TCP connections.
506: <li>Fix a few more mkstemp(3) checks.
507: <li>Make install(1) compare work for files > 8G in size.
508: <li>Tons of man page improvements.
509: <li>For crontab(1) and vipw(8), check file size change as well as mtime to detect change.
510: <li>Better headphone/speaker handling in am7930 driver on sparc.
511: <li>Implement DLT_RAW, DLT_SLIP, and DLT_PPP in bpf
512: <li>egcs replaces gcc
513: <li>Some improvements to the libc_r threading code.
514: <li>Further keynote documentation improvements.
515: <li>Move bsd.port.mk and friends into the ports tree.
516: <li>On hp300, handle hil configuration more robustly.
517: <li>Numerous -mandoc man page upgrades.
518: <li>Permit mixed PIC/pic relocations on the sparc.
519: <li>Change bridge code to use a NETISR. Significant performance improvement.
520: <li>Set close-on-exec flag in vi, on files that are opened.
521: <li>*NULL dereference in wall(1).
522: <li>Permit threading using libutil/pty.c
523: <li>Fix exit code in sa(8).
524: <li>Dynamically allocate memory in sort(1), so that -k has no limit.
525: <li>Correct handling of out-of-window SYNs in our TCP code.
526: <li>Fix poll(2) return value.
527: <li>Add Keynote trust management system.
528: <li>Support mac68k Classic II video.
1.11 pvalchev 529: <li>swapctl(8) and the necessary kernel support.
1.1 deraadt 530: <li>Longer delay in the i386 pms(4) probe routine, for Thinkpads.
531: <li>Correct some DTR handling in pccom(4).
532: <li>Add <strong>-p</strong> flag to encrypt(1).
533: <li>Newer version of bktr(4) driver.
534: <li>ncurses-4.2-990516
1.17 naddy 535: <li><font color="#e00000"><strong>Correct some realloc(3) misuses in the fts(3) routines. <a href="errata25.html#fts">A patch is available</a></strong></font>.
1.1 deraadt 536: <li>Add xe(4) xircom ethernet driver.
537: <li>Add support for static arp entries that cannot be overwritten.
538: <li>Many man page fixes.
539: <li>Numerous performance and reliability fixes to isakmpd(8) and IPSEC.
540: <li>Some more pthreads fixes.
541: <li>Fix blowfish CBC mode.
542: <li>Fix some more ipsec and tcp interaction bugs.
543: <li>In vmstat(8), increase width of -i field.
544: <li>Final unicast check ethernet driver fixes for bridging.
545: <li>Fix bounds control in msgs(1).
546: <li>Fix 'X' check in gcc printf format checker.
547: <li>Fix divide by zero in libcurses.
1.17 naddy 548: <li><font color="#e00000"><strong>A reliability patch for TCP over IPSEC ESP tunnels. <a href="errata25.html#ipsec1">A patch is available</a></strong></font>.
1.1 deraadt 549: <li>Improvements to the ss(4) driver.
550: <li>Fix various endian related problems in nm(1), ranlib(1), strip(1), and size(1).
551: <li>Do not rotate kerberos logs using newsyslog.conf
552: <li>Fix xxsize() routines so that they do not call xxopen() and xxclose().
553: <li>On i386, handle apm segments in low memory.
554: <li>Add libcurses++.
555: <li>ncurses-4.2-990424
556: <li>More improvements to isakmpd(8), and ppp(8).
557: <li>In sparc cgsix(4) driver, turn off sync so that monitors will go into standby.
558: <li>Various improvements to the xl(4) driver.
559: <li>Repair TIOCFLUSH use in telnet(1).
560: <li>Fix an unlink related bug in cp(1).
1.25 david 561: <li>For sparc, delay in CPU-forced power-down, so that serial port output does not get garbled.
1.1 deraadt 562: <li>Move perl lib files to /usr/libdata/perl5.
563: <li>For make(1), permit embedded : or ! in target names.
564: <li>Better range checking in inet_addr(3) functions.
565: <li>gzip 1.2.4a
566: <li>Support Vadem pcmcia controllers.
567: <li>Add 3p man page sub-tree for perl pages.
568: <li>In ls(1), defer conversion for non-printables till after symbolic link lookup.
569: <li>For msdosfs, do not require the boot signatures in a filesystem.
570: <li>Add support for new pipes to fstat(8).
571: <li>Newer version of AFS code.
572: <li>perl5.005_03
573: <li>Y2K improvement in shutdown(8).
574: <li>solve blocking daemon problem in ftpd(8).
575: <li>Check for failure of strdup(3) in pax(1).
576: <li>Greater care in tail(1), when going backwards.
577: <li>Add wdt(4) driver for Industrial Computer Source PCI-WDT50x watchdog timers.
578: <li>Implement <strong>-U username</strong> in ps(1).
579: <li>Add "verbose" command to boot_config(8).
580: <li>Check correct argument in sliplogin(8).
581: <li>New kernel hashinit().
582: <li>More ppp(8) improvements and bug fixes.
583: <li>More isakmpd(8) improvements and bug fixes.
584: <li>In calendar(1), fix offset bug for yearly events.
1.17 naddy 585: <li><font color="#e00000"><strong>A reliability patch for ext2fs. <a href="errata25.html#bmap_trap">A patch is available</a></strong></font>.
1.1 deraadt 586: <li>Repair a mis-handling of non-terminated utmp strings in w(1).
587: <li>m68k optimized asm version of strlcpy(3).
588: <li>Do not accept incoming packets on a down interface.
589: <li>More strict isapnp detection for the isa ep(8) cards.
590: <li>kcore handling for the m68k ports.
1.17 naddy 591: <li><font color="#e00000"><strong>A serious reliability patch for the powerpc port, regarding traps and signals. <a href="errata25.html#powerpc_trap">Patches are available</a></strong></font>.
1.1 deraadt 592: <li>Support power-down mode in the mac68k port.
593: <li>Fix a retransmission problem in tcp_newreno.
594: <li>Fix a sequence wraparound bug in very large tcp transfers.
595: <li>Greater care with arguments in pwd_mkdb(8).
596: <li>Support the -susv2 macro in nroff tmac doc-syms.
597: <li>Save a copy of the dmesg(8) output in /var/run/dmesg.boot.
598: <li>Improve ddb ps output.
599: <li>Repair filesystem mounting failure message in mount_msdos(8).
600: <li>Merge IP-in-IP tunnel code so that both MROUTING and IPSEC versions work together, properly.
601: <li>Do not let calendar(1) assume that it is run as root.
602: <li>Fix /tmp cleanup code in lynx(1).
603: <li>Move ipfstat(8) output files to /var/run to avoid a race.
604: <li>Reenable TCP_SACK and TCP_FACK, so that development cycle can test them sufficiently.
605: <li>Various man page fixes.
606: <li>Various isakmpd(8) fixes and improvements.
607: <li>Fix probing of ISA ex(4) cards.
608: <li>More amiga keymaps.
609: <li>Add yyfix(1), from 4.4BSD.
610: <li>Merge mkfifo into mknod, so that mknod ends up having support for the <strong>-p</strong> option.
611: <li>Fix a output buffer overflow in msgrcv(2).
612: <li>Fix odbm support and permit opening a zero-length hash file.
613: <li>new true awk, April 16 release.
614: <li>Support sparc xbox sbus expansion box.
615: <li>Bug fixes to sparc spif(4), hme(4), be(4) drivers.
616: <li>Updated distrib/notes which shipped with the 2.5 release.
617: </ul>
618: <p>
619:
620: </body>
621: </html>