Annotation of www/plus26.html, Revision 1.6
1.1 deraadt 1: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML Strict//EN">
2: <html>
3: <head>
4: <title>OpenBSD 2.6 changes</title>
5: <link rev=made href=mailto:www@openbsd.org>
6: <meta name="resource-type" content="document">
7: <meta name="description" content="the main OpenBSD page">
8: <meta name="keywords" content="openbsd,main">
9: <meta name="distribution" content="global">
10: <meta name="copyright" content="This document copyright 1996 by OpenBSD.">
11: </head>
12:
13: <BODY BGCOLOR="#FFFFFF" TEXT="#000000" LINK="#23238E">
14:
15: <img alt="[OpenBSD]" height=30 width=141 SRC="images/smalltitle.gif">
16: <p>
17: <h2><font color=#e00000>Changes made between OpenBSD 2.5 and OpenBSD 2.6</font><hr></h2>
18:
19: <p>
20: This is a partial list of the major machine independent changes
21: (ie. these are the changes people ask about most often). Port
22: specific changes have also been made, and are sometimes mentioned
23: in the pages for the specific <a href=plat.html>ports</a> if you
24: are interested in further port-specific details. Many ports
25: have had architecture-specific enhancements relative to NetBSD,
26: but when they do not they certainly have plenty of platform-independent
27: changes, starting with those listed below..
28:
29: <p>
30: Note: <font color=#e00000>Problems for which patches exist are marked in red</font>.
31:
32: <p>
33: <h3>
34: <a href=plus20.html>For changes leading up to OpenBSD 2.0, click here</a>.<br>
35: <a href=plus21.html>For changes leading up to OpenBSD 2.1, click here</a>.<br>
36: <a href=plus22.html>For changes leading up to OpenBSD 2.2, click here</a>.<br>
37: <a href=plus23.html>For changes leading up to OpenBSD 2.3, click here</a>.<br>
38: <a href=plus24.html>For changes leading up to OpenBSD 2.4, click here</a>.<br>
39: <a href=plus25.html>For changes leading up to OpenBSD 2.5, click here</a>.<br>
40: <a href=plus26.html>For changes leading up to OpenBSD 2.6, click here</a>.<br>
41: <a href=plus.html>For changes in OpenBSD-current, click here</a>.
42: <br>
43: </h3>
44:
45: <hr>
46:
47: <p>
1.5 todd 48: <h3><font color=#0000e0>OpenBSD 2.6 released (December 1, 1999).</font></h3><p>
1.1 deraadt 49: <ul>
50: <li>2.6 source tree frozen.
51: <li>Merge in some critical ATAPI fixes.
52: <li>Force FDSCRIPTS.
1.4 deraadt 53: <li><font color=#e00000><strong>RELIABILITY ISSUE: Fix a bug in the brooktree driver which permitted any user to crash some OpenBSD/i386 machines. <a href=errata25.html#brooktree>A patch is available</a></strong></font>.
1.2 espie 54: <li>Separate help(1) command, and a separate help(1) man page.
1.1 deraadt 55: <li>Move wrapper handling to the child process, in sshd(8).
56: <li>Various fixes for the bignum and RSA handling code in sshd(8).
57: <li>ssh 1.5 protocol.
58: <li>isakmpd policy man page.
59: <li>Put gcc-lib in base, because the mac68k installer built-in tar command is stupid, and does not do a mkdir -p type operation internally.
60: <li>In the install script, if the user skips network config and later chooses an option which requires network config, ask for network config to be done then.
61: <li>Make i386 pcvt driver also support the traditional PC display, with 16 colours.
1.2 espie 62: <li>In the install script, support separate international and USA versions of the ssl package.
1.1 deraadt 63: <li>Fix another unmount/mfs race condition.
64: <li>If no sshd_config file, have sshd(8) abort.
65: <li>Fix for the i386 isadmaattach panic.
66: <li>PermitRootLogin in sshd(8).
67: <li>Document how we are dealing with SSL, crypto, and RSA issues in the ssl(8) man page even better.
68: <li>Stir ARC4 after key use in sshd(4).
69: <li>Fix mii tick tock stuff in the fxp(4) driver.
70: <li>Fix connect() race in ssh agent handling.
71: <li>Numerous fixes and improvements to the install scripts.
72: <li>Avoid mbuf corruption in recvmsg(2).
73: <li>Only attempt to read disklabels from CDs with a data track.
74: <li>Fix a bug in newsyslog(8), which caused it to rotate empty log files near first system boot.
75: <li>Do not call VOP_SETATTR on a pipe.
76: <li>SilentDeny option for sshd(8).
77: <li>Avoid an infinite loop in ping(8).
78: <li>Add driver for i82553 phy, used by some fxp(4) cards.
79: <li>Allow root logins in xmd, but provide a nice comment so people can disable it easily.
80: <li>Document -e support in config(8).
81: <li>Use setsid(2) on all connections to sshd(8), since our setlogin(2) is secure and needs that.
82: <li>sshd(8) Allow/Deny Users/Groups features.
83: <li>sshd(8) UseLogin feature.
1.2 espie 84: <li>Use a separate perl-based vi.recover script because sh is a terrible language.
1.1 deraadt 85: <li>Check permissions of directories leading up to ssh authorized_keys file.
86: <li>For AF_UNIX sockets, do not follow symbolic links at creation time, since there is nothing equivelent to O_EXCL.
87: <li>Permit build of system with NFSSERVER but without NFSCLIENT.
88: <li>More keynote man pages.
89: <li>pmax support is back in the tree, various tweaks everywhere.
90: <li>Make eap(4) print it's interrupt at attach time.
91: <li>As well as numerous repairs, now also support "pkg_add *".
92: <li>Many many man page improvements.
93: <li>Support newer model of the fxp(4) card.
94: <li>Further improvements to ATA probing.
95: <li>Support skey in sshd.
96: <li>Use pkg_add -I for the ssl package install, in the install scripts.
97: <li>Repair fd(4) motor off code.
98: <li>Handle most xl(4) devices that lack a PHY.
99: <li>On machines lacking shared libraries, install the ssh utilities with mode 0, so that /etc/rc will run the ones in /usr/local/bin instead.
100: <li>Cluster fixes to ipsec code.
101: <li>implement client NumberOfPasswordPrompts in ssh(1).
102: <li>Support various effect modes on the ym(4) sound cards.
103: <li>Y2K related fixes for some buggy i386 clock chips.
104: <li>Fix various atapi sense detection bugs.
105: <li>Big endian fixes to tcpdump(8).
106: <li>Move sshd auth sockets to a private directory.
107: <li>Various make performance enhancements.
108: <li>Ensonic ES1371 support in the eap(4) driver.
109: <li>Fix a sshd xauth race.
110: <li>Lots of manpage improvements.
111: <li>ssh crc32 compensation attach detection fix from core-sdi.
112: <li>PCI Promise IDE controller support, not perfect yet.
113: <li>Nuke minfd stuff in ssh.
114: <li>config(8) gets -e and -u support.
115: <li>Put sbin and /usr/sbin in the default path.
116: <li>Fix garbled dmesg output on the console in the mvme68k port.
117: <li>DNS spoof checking code in the ssh.
118: <li>Double default shared memory for i386.
119: <li>Various quality of software repairs to sshd, like errno trashing in signal handlers, and other stupid things like that.
120: <li>Fix a missing memory initialization bug in the i386 bootblocks.
121: <li>Avoid use of shutdown(2) in sshd.
122: <li>For fts(3) and find(1), fix various off-by-one errors and some issues with -execdir for multiple relative directories.
123: <li>libwrap support in sshd.
124: <li>Nice setproctitle(3) changes to sshd, so that you can tell which process is which login.
125: <li>Add -q support to whois(1).
126: <li>Remove local blowfish code in ssh.
127: <li>Improve the scp(1) progress meter.
128: <li>Various games fixes.
129: <li>mod_ssl 2.4.5
130: <li>new isakmpd code.
131: <li>Support DSO's in httpd, and build them into the normal tree.
132: <li>sm(4) driver now supports SMC 8020 pcmcia cards.
133: <li>sk(4) driver for SysKonnect 984x gigabit ethernet adapters.
134: <li>add support for external storage to the mbuf layer, managed by external managers.
135: <li>libkeynote 2.0
136: <li>Support more ess(4) sound card models.
137: <li>Numerous other ssh changes...
138: <li>in ssh, use libc md5 code.
139: <li>remove rc4 code from ssh
140: <li>Remove ssh "-c none" code.
141: <li>Improve ftpd's documentation.
142: <li>Improve tcpdump's handling of ISAKMP packages.
143: <li>Make bootblock memory probing work the same as 2.5.
144: <li>More man page repairs and improvements. A day doesn't go by...
145: <li>Some fixes to the games.
146: <li>Many more ssh improvements.
147: <li>Critical ipsec reliability fix for the i386.
148: <li>Run ldconfig before any ssh stuff, because the ssl package now extracts into /usr/local/lib.
149: <li>Apache 1.3.9 + Mod_ssl 2.4.2
150: <li>ssleay(1) goes away, replaced by openssl(1).
151: <li>OpenSSL 0.9.4
152: <li>Fix tun(4) byte counters.
153: <li>To ssh, add X11DisplayOffset, user@host, kerberos4 support, GatewayPorts, ssh -g, etc.
154: <li>Fix rc scripts to start ssh nicely upon first and subsequent boots.
155: <li>Rip all licensed and patented code out of ssh.
156: <li>Support MVME188 and MVME197 models in the mvme88k port.
157: <li>Fixes to the pci wb(4) driver.
158: <li>pkg_add signing capability is being worked on.
159: <li>Put uuencoded install bits for amiga into the tree, so that they can end up in the distribution.
160: <li>Fix hp300 ramdisk.
161: <li>32-bit ie(4) driver for the mvme68k and mvme88k ports.
162: <li>More changes to pcvt scrollback code.
163: <li>More fixes to pci ax(4).
164: <li>In inetd.conf, disable telnet/ftp/login by default.
165: <li>Simplify ssh configuration.
166: <li>New mandoc pages for ssh(1) and friends..
167: <li>Add ssh to the source tree (based on an old version, but all the bugs are fixed, and we are playing RSA license games with libssl/libcrypto and adding all the modern ssh features).
168: <li>Add :L and :U modifiers to make(1).
169: <li>stdbool.h from C9X.
170: <li>Install script changes to support libssl package install. Not nice, but it will be improved.
171: <li>Move towards 2.6-beta.
172: <li>Fix icmp byte-order changes so that ip_forward() aliased packet doesn't bite us.
173: <li>Many man page changes.
174: <li>Some ipsec changes to tcpdump(1).
175: <li>Add atactl(8).
176: <li>Add opendisk(3) API to libutil.
177: <li>Crank some i386 limits, now that kvm is larger.
178: <li>Repair some URL handlings in pkg_install(8).
179: <li>Significant changes to the install scripts.
180: <li>Change makewhatis to accept arguments.
181: <li>AC-97 CODEC support.
1.6 ! aaron 182: <li>Fix device existence check in hp300 tape support.
1.1 deraadt 183: <li>Grow i386 kvm to 512MB.
184: <li>Merge to tcpdump 3.4.
185: <li>Use writev(3) in libc functions that talk to stderr.
186: <li>Add raw support in tcpdump.
187: <li>In xl(4), Support 3c980c.
188: <li>Fix a FIFO handling bug in xe(4) driver.
189: <li>Fix a caching bug in getpwent(3) seen with setuid binaries and YP.
190: <li>i386 support for "isa0 at pcib?".
191: <li>Upon bootup, permit i386 to modify the rootdev after looking at BIOS disk signatures.
192: <li>Change rc.conf so that sendmail is started with -q30m by default (not -bd).
193: <li>Various speed improvements by using round_page() instead of roundup(foo, NBPG).
194: <li>cvs 1.10.7
195: <li>Import uunencoded binary amiga things which need to be in a release.
196: <li>64bit repair in ls(1)
197: <li>ELF64 support.
198: <li>Some man page improvements.
199: <li>Detach code in the icsphy.
200: <li>Support tadpole sparc microcontroller.
201: <li>Ensure that adduser(8) sends the password to encrypt(1) via stdin, avoid ps(1) snooping.
202: <li>Improved m4(1) extensively.
203: <li>Improved fsck_msdos(8).
204: <li>On i386, expand aperture because XFree86 3.9.15 want to look at the card BIOS.
205: <li>p9100 console support for Tadpole sparc.
206: <li>Scroll-back support for the i386 pcvt driver.
207: <li>Use stathz to calculate CPU time, fixing CPU calculation when stathz is different from hz and profhz (affected i386).
208: <li>Preliminary ATAPI tape drive support.
209: <li>Support "short" mouse protocol for the Tadpole sparc.
210: <li>More queue.h macros.
211: <li>In /etc/rc during vi recovery, ensure vi recovery files are normal.
212: <li>Change /etc/rc.shutdown handling, so that /etc/rc.shutdown is completely admin-editable and does not run if in single-user mode.<br> <strong>NOTE: If you follow current, this means that people need to install a new /etc/rc file.</strong>
213: <li>On sparc, change pagetable pointers using atomic instructions.
214: <li>Change pmap_enter() API.
215: <li>Start doing an atoi(3) audit of the tree; most cases should use strtol() and strtoul().
216: <li>Cleanup handling of signed and unsigned numbers in sysctl(8).
217: <li>Many man page improvements.
218: <li>Print i386 interrupts nicer in vmstat -i.
219: <li>In bridge, do not flush static address when configuring down.
220: <li>Permit bridge control before it is configured up.
221: <li>Cleanup parsing of /etc/hostname.* files, and support new /etc/bridgename.* files.
222: <li>In tcp's input path, for SACK, update the window information correctly.
223: <li>If a patch contains zero patches, have patch(1) error out.
224: <li>Start amd(8) in /etc/amd.
225: <li>Fix buf overflow in amd(8).
226: <li>Support AAA-131CF card in ahc(4) driver.
227: <li>Check SACK hole validity better, and do sequence space arithmetic better.
1.3 deraadt 228: <li><font color=#e00000><strong>SECURITY ISSUE: In cron(8), make sure argv[] is NULL terminated in the fake popen() and run sendmail as the user, not as root. <a href=errata25.html#cron>A patch is available</a></strong></font>.
1.1 deraadt 229: <li>Some fixes to newsyslog(8).
230: <li>Disable SACK for now; some issues remain.
231: <li>Buffer overflow fixes in from(1).
232: <li>Make res_random and ip_random attacks harder by adding a little xor.
233: <li>Improved handling of BIOS memory maps, which should permit apm to work a bit better on some machines.
234: <li>XFree86 3.3.5
235: <li>Allow userland to figure out whether a scsi device is atapi or not; used by some things like tosha.
236: <li>Fix fgets(3) bug in paste(1).
237: <li>gcc 2.95.1
238: <li>ncurses-5.0-990821
239: <li>Disable -fstrict-aliasing by default: It causes gcc to generate very incorrect code when compiling code which isn't perfectly ANSI-conforming.
240: <li>Add MOUSEIOCSCOOKED and MOUSEIOCSRAW ioctl() calls to the lms and mms drivers, so that X can figure out what driver is running.
241: <li>Extend support in kbd(1) for the sparc.
242: <li>Change default group ownership for tty and cua devices, so that locking works better in tip(1) and cu(1).
243: <li>Crank kerberos default expiration date.
244: <li>Teach i386 architecture code about Rise cpu models.
245: <li>Build shared library called libperl.
246: <li>Use new <strong>arch -s</strong> option for building perl.
247: <li>Fix a few possible sparc pmap races.
248: <li>Make ld.so work on mips again.
249: <li>Merge machine(1) and arch(1) commands.
250: <li>Fix a sun4m trap handling bug.
251: <li>Get ready for emulating linux clone(2).
252: <li>Make various forms of rup(1) produce the same formatted output.
253: <li>Many man pages updated.
254: <li>Various tiny fixes.
255: <li>In fortune(6), a fix for a use after free().
256: <li>hp300 CD booting.
257: <li>Fix buglet in fts(3) handling of FTS_NOCHDIR.
258: <li>Various dmesg and space-saving improvements to the pcmcia drivers.
259: <li>Allied Telesis LA-PCM pcmcia ethernet card support.
260: <li>ncurses-5.0-990814
261: <li>Various improvements to the install scripts.
262: <li>Correctly set the type and typename in the wd(4) driver generated label.
263: <li>Support AmbiCom NE2000 pcmcia ethernet.
264: <li>Fix the scheduler problems in the 2.5 release.
265: <li>Driver for ASIX88140A/88141 PCI ethernet, ax(4).
266: <li>In pcmcia ep(4) driver, support 3CXEM556B-INT.
267: <li>Remove useless if_ep shutdown hook.
268: <li>Import USB code.
1.3 deraadt 269: <li><font color=#e00000><strong>SECURITY ISSUE: The procfs and fdescfs filesystems had an overrun in their handling of uio_offset in their readdir() routines. (These filesystems are not enabled by default). <a href=errata25.html#miscfs>A patch is available</a></strong></font>.
1.1 deraadt 270: <li>Repair: probe svr4 emulation before linux once again.
271: <li>Support -M and -N flags in uptime(1).
272: <li>Detect IDT WinChip models.
273: <li>If we fail to match an isapnp device, and it looks like it has the resources a com(4) device would have, try seeing if it in fact is.
274: <li>New i82365 pcmcia irq probing code that tries much harder to allocate a proper interrupt for the pcic.
275: <li>Add DIOCRLDINFO ioctl, used by fdisk(8) to indicate that the MBR has been re-written, and the disklabel should be re-read off disk.
276: <li>Support PChome-PCI LANCE (1Mbit phone wire "ethernet") using le(4).
277: <li>Document "Precedence: list" in vacation man page.
278: <li>In tar, fflush(stderr) at a critical point.
279: <li>Skip hostname.* files if the interface does not exist.
280: <li>Make mbuf panic messages unique.
281: <li>Repair interface walking in rarpd(8).
1.3 deraadt 282: <li><font color=#e00000><strong>SECURITY ISSUE: Stop profiling (see profil(2)) when we execve() a new process. <a href=errata25.html#profil>A patch is available</a></strong></font>.
1.1 deraadt 283: <li>pcmcia device attach/dettachment code, supporting network and serial devices now.
284: <li>vdevgone() internal kernel API.
285: <li>If fread(3) returns EBADF, also set the error flag.
286: <li>Fix a number of uid_t, gid_t and %u changes still broken in the source tree.
287: <li>Split i386 ramdisks up a bit for the next release.
288: <li>Fix sparc interrupt handler to recognize < 0 from an driver interrupt handler means "interrupt may have been for me, but I am not sure".
289: <li>isakmpd(8) updates.
290: <li>Add SADB_FLUSH logic to IPSEC PFKEYv2, and a <strong>ipsecadm flush</strong> subcommand.
291: <li>Update bktr driver.
292: <li>Shrink some device drivers; we're trying to make more fit onto the install floppy.
293: <li>config_defer support in the kernel.
294: <li>Some man page cleanups.
295: <li>Make IDE work again on the alpha.
296: <li>PCI ESS Solo-1 PCI audio card driver, see eso(4).
297: <li>Make poll(2) system call a tiny bit faster for trivial calls.
298: <li>Enable emacs tab completion by default in ksh(1).
299: <li>/tmp race repairs in yacc(1).
300: <li>Propogate TMPDIR better into locate.updatedb(8).
301: <li>Kill gzip sub-processes in pax(1) instead of letting them die from SIGPIPE.
1.3 deraadt 302: <li><font color=#e00000><strong>SECURITY ISSUE: In /etc/rc, use mktemp(1) for motd re-writing and change the find(1) to use -execdir. <a href=errata25.html#rc>A patch is available</a></strong></font>.
1.1 deraadt 303: <li>Support for 3c515 isapnp 100mbit ethernet card, in ef(4).
304: <li>Chown/chmod all of the pty devices.
305: <li>If /etc/fstab is 0-length or not a regular file, have setfsent(3) fail.
306: <li>Import of mailwrapper(8) into the tree.
307: <li>Games updated.
1.3 deraadt 308: <li><font color=#e00000><strong>SECURITY ISSUE: Do not permit regular users to chflags(2) or fchflags(2) character or block devices. <a href=errata25.html#chflags>A patch is available</a></strong></font>.
1.1 deraadt 309: <li>New raidframe code.
310: <li>Make sure install scripts remove async mount conditions before attempting to installboot(8).
311: <li>Have <strong>route flush</strong> skip PF_KEY flows.
312: <li>tcpdump 3.4 merged.
313: <li>Have pkg_create(1) use tar -T.
314: <li>Add -T option to tar(1).
315: <li>Fix fgetln(3) issue in pax(1).
1.3 deraadt 316: <li><font color=#e00000><strong>SECURITY ISSUE: Make nroff(1) call groff(1) with the -S option. <a href=errata25.html#nroff>A patch is available</a></strong></font>.
1.1 deraadt 317: <li>If src file does not exist, have <strong>mv -i</strong> complain immediately.
318: <li>Bug fix to pkg_add(8).
319: <li>More man page cleanups.
320: <li>Clean dmesg output from various drivers.
321: <li>Make rc.shutdown work from single-user mode too.
322: <li>PCI Tigon I and Tigon II driver, ti(4).
323: <li>Disable DMA on Acer Labs PCI IDE chipset, for now.
324: <li>Switch to new ATA/ATAPISCSI code for most architectures.
325: <li>Make the i386 dkcsum stuff be quieter for empty removeable media devices.
326: <li>Do installs faster by mounting the filesystems async.
327: <li>Fix various bugs in bridging support, especially SIOCBRDGRTS.
328: <li>Make tun(4) return EMSGSIZE for zero-length writes.
329: <li>Fix a field count bug in join(1).
330: <li>In ipnat(8), fix -n to work with -v.
331: <li>Missing newline in id(1).
332: <li>New drivers for the force CPU-5V (vme, sys config, D/A board driver, flash).
333: <li>Handle _POSIX_VDISABLE better in telnet(1).
334: <li>Run i386 audio at higher IPL.
335: <li>Take greater care in head(1).
336: <li>Less dmesg verbosity from media routines.
337: <li>Various atapi/scsi/ide changes being worked on (LS-120 works).
338: <li>powerpc ieeefp library routines.
339: <li>insque is no longer in libiberty.
340: <li>egcs-990718.
341: <li>Bring back TCP_SIGNATURE support.
342: <li>1000baseXX media support.
343: <li>For isapnp drivers, we can do more resource checking in the xxmatch() function, and less in the xxattach() function.
344: <li>Add fparseln(3).
345: <li>new swap16_multi() macro in sys/endian.h.
346: <li>More man pages.
347: <li>wdc(4) on isapnp(4).
348: <li>inetd(8)-started daemons should syslog(3) on startup failure.
349: <li>wdc(4) on pcmcia(4).
350: <li>More sparc keyboards in kbd(1).
351: <li>rc.shutdown(8) manpage.
352: <li>Add fpuparseln(3) to -lutil.
353: <li>First cut at isapnp mpu, and ym mpu.
354: <li>Document and complete skey(1) support in telnet(1).
355: <li>Correct os_mask handling in OLF execve code.
356: <li>Accomodations in the vm system for backward growing stack architectures.
357: <li>Do not cache page tables on microsparc1 either.
358: <li>Many more man page fixes.
359: <li>Support floating accent and compose in sparc kbd driver.
360: <li>libpcap 0.4 changes brought in.
361: <li>In pcap library, fix pcap_open_offline() to handle snaplengths of -1.
362: <li>Fix a memory mishandling in mixerctl(1).
363: <li>Further fixes for some strange wss isapnp variants.
364: <li>Create /var/db/host.random at install time.
365: <li>Complete /etc/rc.shutdown support in reboot(8) and shutdown(8).
366: <li>Lock ARP entries to an interface, and provide more diagnostics.
367: <li>Import of PCI ATA/IDE stuff from NetBSD.
368: <li>Retire libm_i387.
369: <li>Remove some shared libraries that are better used in static form.
370: <li>Support non-US sparc keyboards using kbd(8) command.
371: <li>At execve() time, clear the P_NOCLDWAIT flag.
372: <li>egcs 990629
373: <li>Finer timing interval and standard deviation additions to ping(8).
374: <li>Add pci_mapreg*() interfaces.
375: <li>Implement more linux compat ioctl's.
376: <li>Undo recent tcp_input changes which caused crashes.
377: <li>Fix panic bug in readdisklabel() on several architectures.
378: <li>Improve IPSEC SA hashing function.
379: <li>New mii code that does async negotiation.
380: <li>Default ksh(1) and sh(1) to emacs editing mode.
381: <li>Generalize bc wrapper program.
382: <li>Move /etc/host.random to /var/db.
383: <li>In ipsec, demand keying for PF_KEY.
384: <li>In disklabel(8), put in check for architectures that require partition a to start at sector 0.
385: <li>For sparc svr4 emulation, put sun4X cpu class into SVR4_SI_PLATFORM.
386: <li>pdksh-5.2.14
387: <li>Introduce fdremove() kernel API; makes fdalloc() faster by making sure fd_freefile is correct.
388: <li>Some small improvements to adduser(8) and rmuser(8).
389: <li>pcmcia wavelan driver, wi(4).
390: <li>Extend pcmcia IO space.
391: <li>ncurses-990710
392: <li>Fix a SIGSEGV in vi(1).
393: <li>Many man page improvements.
394: <li>Newer version of isakmpd(8).
395: <li>Support PAGER properly in pkg_install(8).
1.3 deraadt 396: <li><font color=#e00000><strong>SECURITY ISSUE: Fix an ipsec_in_use out-of-sync condition. <a href=errata25.html#ipsec_in_use>A patch is available</a></strong></font>.
1.1 deraadt 397: <li>Add support for TCP MD5 (RFC 2385) option called TCP_SIGNATURE used for authenticating BGP sessions.
398: <li>Support SIGUSR1 in init(8), used by i386 keyboard halt code, and make init(8) smart enough to run /etc/rc.shutdown
399: <li>On i386 pcvt console, have CTRL-ALT-DEL sent a SIGUSR1 to init.
400: <li>Improve ipf.conf file parsing in ipf(8).
401: <li>New -q option for tar(1).
402: <li>ncurses-5.0-990703
403: <li>For identd(8) token support, constrain characters in the tokens more.
404: <li>Have the resolver ignore SIGs in the answer section for now.
405: <li>Many more man page tweaks.
406: <li>Use getprotobynumber(3) in fstat(8)
407: <li>SVR4 emulation fixes to systeminfo() system call.
408: <li>m_apply() function permits a function to be run on an mbuf.
409: <li>lmc(4) T1/T3 driver.
410: <li>tzcode 1999d.
411: <li>Support nullfs in fstat(1).
412: <li>More man page improvements.
413: <li>Fix a bug in savecore(8).
414: <li>Add joliet support to the iso9660 filesystem.
415: <li>Improve libm man pages.
416: <li>Split out more crypto algorithm knowledge from the actual IPSEC engine.
417: <li>Fix bpf attachment of bridges.
418: <li>Fix arc4random(3) to still work correctly inside a chroot space, by adding a sysctl somewhat equivelant to /dev/arandom.
419: <li>Permit tcpdump(8) of address-less interfaces.
420: <li>ncurses version of tput, finally.
421: <li>More man page improvements.
422: <li>Improvements to many pci ethernet drivers.
423: <li>ncurses-5.0-990626
424: <li>Add net_addrcmp(3) to libc.
425: <li>Add getaddrinfo(3), getnameinfo(3), if_indextoname(3), if_nameindex(3), and if_nametoindex(3) to libc.
426: <li>In ksh(1), avoid reusing fd 0-2 even moreso than before, since ksh caches
427: open files.
428: <li>Improved SYSV shared memory support.
429: <li>ESS audio driver.
430: <li>Move sparc bootblocks in memory, because possible kernel sizes have gone up.
431: <li>rangelan2 wireless network pcmcia driver.
432: <li>Split out ipsec crypto transform handling.
433: <li>egcs 990608
434: <li>Return to UDP NFS until TCP NFS is properly fixed.
435: <li>Fix breakpoint continues on the sparc.
436: <li>Constrain strlcat(3) from walking past the specified length.
437: <li>Fixed overflow issue in edquota(8).
438: <li>Fix PIC label handling code in i386 as(1).
439: <li>ncurses-5.0-990614
440: <li>Handle multicast packets in ipf, too.
441: <li>pdksh 5.2.13.7
442: <li>Improvements to units(1).
443: <li>In c++ mode, define NULL to be __null for better type checking.
444: <li>Remove TCPCOOKIE stuff, which never worked in differentially SYN-filtering environments.
445: <li>In various programs, handle PAGER environment variable according XPG.
446: <li>Some large partition fixes in scan_ffs(8).
447: <li>Bump maximum number of sockets in X server to 128.
448: <li>Return ICMP_UNREACH_PROTOCOL for unimplemented protocols.
449: <li>Fix an ipsec tdb_delete() bug.
450: <li>Replace pipe() in libc and kernel with new version which does the data copy in kernel, making EFAULT possible.
451: <li>Do not leak file descriptors in socketpair(2).
452: <li>Propagate more build variables in the gnu sub-tree.
453: <li>Add struct sockaddr_storage per RFC2553.
454: <li>Drop a volatile into the ncr(4) driver; who knows how it worked before.
455: <li>Crank sparc DFLDSIZ to 24MB.
456: <li>Make adjtime(2) return an EFAULT for a bad olddelta ptr.
457: <li>Permit non-broadcast replies in dhclient(8).
458: <li>ncurses-4.2-990605
459: <li>In sed(1), make 'G' create a newline if the hold buffer is empty.
460: <li>Add dot_quad_addr_new() API to libwrap, which uses inet_aton(3) instead of inet_addr(3), and hence can handle masks of 255.255.255.255.
461: <li>Sparc cs4231 audio support (SS5 audio).
462: <li>Use inet_aton(3) instead of inet_addr(3) in many programs.
463: <li>Use mkstemp(3) in httpd(8).
464: <li>In the resolver, permit '/' in CNAMES to PTRs, same as forward references permit.
465: <li>Use __builtin_next_arg() for va_start(), on i386 and m68k, to handle unaligned stdarg processing.
466: <li>Support subject inclusion in vacation(1).
467: <li>In ipnat, decode interface aliaseses before hostnames.
468: <li>Handle misaligned file struct's coming out of the KERN_FILE sysctl(3) call.
469: <li>More isakmpd(8) improvements.
470: <li>Use auto mode by default in ukphy.
471: <li>Avoid gcc fixinc (We do not want to run it, and even 1 second of machine time skew would screw up the previous avoidance tactic).
472: <li>Another memory leak fix in the ipsec kernel code.
473: <li>Change struct statfs use in the kernel, so that mount(8) can print more info.
474: <li>For NFSv3, prefer TCP connections.
475: <li>Fix a few more mkstemp(3) checks.
476: <li>Make install(1) compare work for files > 8G in size.
477: <li>Tons of man page improvements.
478: <li>For crontab(1) and vipw(8), check file size change as well as mtime to detect change.
479: <li>Better headphone/speaker handling in am7930 driver on sparc.
480: <li>Implement DLT_RAW, DLT_SLIP, and DLT_PPP in bpf
481: <li>egcs replaces gcc
482: <li>Some improvements to the libc_r threading code.
483: <li>Further keynote documentation improvements.
484: <li>Move bsd.port.mk and friends into the ports tree.
485: <li>On hp300, handle hil configuration more robustly.
486: <li>Numerous -mandoc man page upgrades.
487: <li>Permit mixed PIC/pic relocations on the sparc.
488: <li>Change bridge code to use a NETISR. Significant performance improvement.
489: <li>Set close-on-exec flag in vi, on files that are opened.
490: <li>*NULL dereference in wall(1).
491: <li>Permit threading using libutil/pty.c
492: <li>Fix exit code in sa(8).
493: <li>Dynamically allocate memory in sort(1), so that -k has no limit.
494: <li>Correct handling of out-of-window SYNs in our TCP code.
495: <li>Fix poll(2) return value.
496: <li>Add Keynote trust management system.
497: <li>Support mac68k Classic II video.
498: <li>swapctl(8) and the neccessary kernel support.
499: <li>Longer delay in the i386 pms(4) probe routine, for Thinkpads.
500: <li>Correct some DTR handling in pccom(4).
501: <li>Add <strong>-p</strong> flag to encrypt(1).
502: <li>Newer version of bktr(4) driver.
503: <li>ncurses-4.2-990516
1.3 deraadt 504: <li><font color=#e00000><strong>Correct some realloc(3) misuses in the fts(3) routines. <a href=errata25.html#fts>A patch is available</a></strong></font>.
1.1 deraadt 505: <li>Add xe(4) xircom ethernet driver.
506: <li>Add support for static arp entries that cannot be overwritten.
507: <li>Many man page fixes.
508: <li>Numerous performance and reliability fixes to isakmpd(8) and IPSEC.
509: <li>Some more pthreads fixes.
510: <li>Fix blowfish CBC mode.
511: <li>Fix some more ipsec and tcp interaction bugs.
512: <li>In vmstat(8), increase width of -i field.
513: <li>Final unicast check ethernet driver fixes for bridging.
514: <li>Fix bounds control in msgs(1).
515: <li>Fix 'X' check in gcc printf format checker.
516: <li>Fix divide by zero in libcurses.
1.3 deraadt 517: <li><font color=#e00000><strong>A reliability patch for TCP over IPSEC ESP tunnels. <a href=errata25.html#ipsec1>A patch is available</a></strong></font>.
1.1 deraadt 518: <li>Improvements to the ss(4) driver.
519: <li>Fix various endian related problems in nm(1), ranlib(1), strip(1), and size(1).
520: <li>Do not rotate kerberos logs using newsyslog.conf
521: <li>Fix xxsize() routines so that they do not call xxopen() and xxclose().
522: <li>On i386, handle apm segments in low memory.
523: <li>Add libcurses++.
524: <li>ncurses-4.2-990424
525: <li>More improvements to isakmpd(8), and ppp(8).
526: <li>In sparc cgsix(4) driver, turn off sync so that monitors will go into standby.
527: <li>Various improvements to the xl(4) driver.
528: <li>Repair TIOCFLUSH use in telnet(1).
529: <li>Fix an unlink related bug in cp(1).
530: <li>For sparc, delay in cpu-forced power-down, so that serial port output does not get garbled.
531: <li>Move perl lib files to /usr/libdata/perl5.
532: <li>For make(1), permit embedded : or ! in target names.
533: <li>Better range checking in inet_addr(3) functions.
534: <li>gzip 1.2.4a
535: <li>Support Vadem pcmcia controllers.
536: <li>Add 3p man page sub-tree for perl pages.
537: <li>In ls(1), defer conversion for non-printables till after symbolic link lookup.
538: <li>For msdosfs, do not require the boot signatures in a filesystem.
539: <li>Add support for new pipes to fstat(8).
540: <li>Newer version of AFS code.
541: <li>perl5.005_03
542: <li>Y2K improvement in shutdown(8).
543: <li>solve blocking daemon problem in ftpd(8).
544: <li>Check for failure of strdup(3) in pax(1).
545: <li>Greater care in tail(1), when going backwards.
546: <li>Add wdt(4) driver for Industrial Computer Source PCI-WDT50x watchdog timers.
547: <li>Implement <strong>-U username</strong> in ps(1).
548: <li>Add "verbose" command to boot_config(8).
549: <li>Check correct argument in sliplogin(8).
550: <li>New kernel hashinit().
551: <li>More ppp(8) improvements and bug fixes.
552: <li>More isakmpd(8) improvements and bug fixes.
553: <li>In calendar(1), fix offset bug for yearly events.
1.3 deraadt 554: <li><font color=#e00000><strong>A reliability patch for ext2fs. <a href=errata25.html#bmap_trap>A patch is available</a></strong></font>.
1.1 deraadt 555: <li>Repair a mis-handling of non-terminated utmp strings in w(1).
556: <li>m68k optimized asm version of strlcpy(3).
557: <li>Do not accept incoming packets on a down interface.
558: <li>More strict isapnp detection for the isa ep(8) cards.
559: <li>kcore handling for the m68k ports.
1.3 deraadt 560: <li><font color=#e00000><strong>A serious reliability patch for the powerpc port, regarding traps and signals. <a href=errata25.html#powerpc_trap>Patches are available</a></strong></font>.
1.1 deraadt 561: <li>Support power-down mode in the mac68k port.
562: <li>Fix a retransmission problem in tcp_newreno.
563: <li>Fix a sequence wraparound bug in very large tcp transfers.
564: <li>Greater care with arguments in pwd_mkdb(8).
565: <li>Support the -susv2 macro in nroff tmac doc-syms.
566: <li>Save a copy of the dmesg(8) output in /var/run/dmesg.boot.
567: <li>Improve ddb ps output.
568: <li>Repair filesystem mounting failure message in mount_msdos(8).
569: <li>Merge IP-in-IP tunnel code so that both MROUTING and IPSEC versions work together, properly.
570: <li>Do not let calendar(1) assume that it is run as root.
571: <li>Fix /tmp cleanup code in lynx(1).
572: <li>Move ipfstat(8) output files to /var/run to avoid a race.
573: <li>Reenable TCP_SACK and TCP_FACK, so that development cycle can test them sufficiently.
574: <li>Various man page fixes.
575: <li>Various isakmpd(8) fixes and improvements.
576: <li>Fix probing of ISA ex(4) cards.
577: <li>More amiga keymaps.
578: <li>Add yyfix(1), from 4.4BSD.
579: <li>Merge mkfifo into mknod, so that mknod ends up having support for the <strong>-p</strong> option.
580: <li>Fix a output buffer overflow in msgrcv(2).
581: <li>Fix odbm support and permit opening a zero-length hash file.
582: <li>new true awk, April 16 release.
583: <li>Support sparc xbox sbus expansion box.
584: <li>Bug fixes to sparc spif(4), hme(4), be(4) drivers.
585: <li>Updated distrib/notes which shipped with the 2.5 release.
586: </ul>
587: <p>
588:
589: This list mentions mostly platform-independent changes. For a list of changes
590: made in a particular platform, please check the page for that platform. If you
591: find them not listed there, the changes are either (1) not being documented or
592: (2) are documented here.<br><br>
593:
594: <hr>
595: <p>
596: <h3>
597: <a href=plus20.html>For changes leading up to OpenBSD 2.0, click here</a>.<br>
598: <a href=plus21.html>For changes leading up to OpenBSD 2.1, click here</a>.<br>
599: <a href=plus22.html>For changes leading up to OpenBSD 2.2, click here</a>.<br>
600: <a href=plus23.html>For changes leading up to OpenBSD 2.3, click here</a>.<br>
601: <a href=plus24.html>For changes leading up to OpenBSD 2.4, click here</a>.<br>
602: <a href=plus25.html>For changes leading up to OpenBSD 2.5, click here</a>.<br>
603: <a href=plus26.html>For changes leading up to OpenBSD 2.6, click here</a>.<br>
604: <a href=plus.html>For changes in OpenBSD-current, click here</a>.
605: <br>
606: </h3>
607:
608: <hr>
609: <a href="index.html"><img height=24 width=24 src=back.gif border=0 alt=OpenBSD></a>
610: <a href=mailto:www@openbsd.org>www@openbsd.org</a>
1.6 ! aaron 611: <br><small>$OpenBSD: plus26.html,v 1.5 2000/01/14 13:57:43 todd Exp $</small>
1.1 deraadt 612:
613: </body>
614: </html>
![[BACK]](/icons/back.gif){kind=icon}
Return to plus26.html CVS log ![[TXT]](/icons/text.gif){kind=icon}
![[DIR]](/icons/dir.gif){kind=icon}
Up to [local] / www