Annotation of www/plus26.html, Revision 1.67
1.64 bentley 1: <!doctype html>
2: <html lang=en id=plus>
3: <meta charset=utf-8>
1.55 tj 4: <title>OpenBSD 2.6 Changelog</title>
1.40 schwarze 5: <meta name="description" content="OpenBSD 2.6 changes">
1.54 deraadt 6: <meta name="viewport" content="width=device-width, initial-scale=1">
7: <link rel="stylesheet" type="text/css" href="openbsd.css">
1.58 tb 8: <link rel="canonical" href="https://www.openbsd.org/plus26.html">
1.64 bentley 9: <style>
10: strong {
11: color: var(--red);
12: }
1.1 deraadt 13:
1.64 bentley 14: h3 {
15: color: var(--blue);
16: }
1.1 deraadt 17:
1.64 bentley 18: p strong {
19: font-weight: normal;
20: }
21:
22: code {
23: font-family: serif;
24: font-weight: bolder;
25: }
26: </style>
27:
28: <h2 id=OpenBSD>
1.54 deraadt 29: <a href="index.html">
1.64 bentley 30: <i>Open</i><b>BSD</b></a>
31: 2.6 Changelog
1.55 tj 32: </h2>
1.17 naddy 33: <hr>
1.1 deraadt 34:
35: <p>
36: This is a partial list of the major machine independent changes
1.33 sobrado 37: (i.e., these are the changes people ask about most often). Machine
1.1 deraadt 38: specific changes have also been made, and are sometimes mentioned
1.33 sobrado 39: in the pages for the specific <a href=plat.html>platforms</a> if you
1.1 deraadt 40: are interested in further port-specific details. Many ports
41: have had architecture-specific enhancements relative to NetBSD,
42: but when they do not they certainly have plenty of platform-independent
43: changes, starting with those listed below..
44:
45: <p>
1.64 bentley 46: Note: <strong>Problems for which patches exist are marked in red</strong>.
1.1 deraadt 47:
48: <p>
1.16 deraadt 49: For changes in other releases, click below:<br>
50: <a href="plus20.html">2.0</a>,
51: <a href="plus21.html">2.1</a>,
52: <a href="plus22.html">2.2</a>,
53: <a href="plus23.html">2.3</a>,
54: <a href="plus24.html">2.4</a>,
55: <a href="plus25.html">2.5</a>,
56: <a href="plus27.html">2.7</a>,
57: <a href="plus28.html">2.8</a>,
58: <a href="plus29.html">2.9</a>,
59: <a href="plus30.html">3.0</a>,
60: <a href="plus31.html">3.1</a>,
61: <a href="plus32.html">3.2</a>,
1.18 deraadt 62: <a href="plus33.html">3.3</a>,
1.19 david 63: <a href="plus34.html">3.4</a>,
1.22 deraadt 64: <a href="plus35.html">3.5</a>,
1.23 miod 65: <a href="plus36.html">3.6</a>,
1.46 deraadt 66: <a href="plus37.html">3.7</a>,
1.32 deraadt 67: <br>
1.26 deraadt 68: <a href="plus38.html">3.8</a>,
1.27 deraadt 69: <a href="plus39.html">3.9</a>,
1.28 deraadt 70: <a href="plus40.html">4.0</a>,
1.29 deraadt 71: <a href="plus41.html">4.1</a>,
1.30 deraadt 72: <a href="plus42.html">4.2</a>,
1.31 deraadt 73: <a href="plus43.html">4.3</a>,
1.32 deraadt 74: <a href="plus44.html">4.4</a>,
1.34 deraadt 75: <a href="plus45.html">4.5</a>,
1.35 deraadt 76: <a href="plus46.html">4.6</a>,
1.36 deraadt 77: <a href="plus47.html">4.7</a>,
1.37 deraadt 78: <a href="plus48.html">4.8</a>,
1.38 deraadt 79: <a href="plus49.html">4.9</a>,
1.39 nick 80: <a href="plus50.html">5.0</a>,
1.40 schwarze 81: <a href="plus51.html">5.1</a>,
1.41 nick 82: <a href="plus52.html">5.2</a>,
1.42 deraadt 83: <a href="plus53.html">5.3</a>,
1.43 deraadt 84: <a href="plus54.html">5.4</a>,
1.44 deraadt 85: <br>
1.46 deraadt 86: <a href="plus55.html">5.5</a>,
1.48 brett 87: <a href="plus56.html">5.6</a>,
1.49 deraadt 88: <a href="plus57.html">5.7</a>,
1.52 deraadt 89: <a href="plus58.html">5.8</a>,
1.53 deraadt 90: <a href="plus59.html">5.9</a>,
1.57 deraadt 91: <a href="plus60.html">6.0</a>,
1.59 deraadt 92: <a href="plus61.html">6.1</a>,
1.60 deraadt 93: <a href="plus62.html">6.2</a>,
1.61 deraadt 94: <a href="plus63.html">6.3</a>,
1.62 deraadt 95: <a href="plus64.html">6.4</a>,
1.63 pamela 96: <a href="plus65.html">6.5</a>,
1.66 pamela 97: <a href="plus66.html">6.6</a>,
1.67 ! deraadt 98: <a href="plus67.html">6.7</a>,
1.16 deraadt 99: <a href="plus.html">current</a>.
1.1 deraadt 100: <br>
101:
1.47 deraadt 102: <p>
1.64 bentley 103: <h3>Changes made between OpenBSD 2.5 and 2.6</h3>
1.47 deraadt 104: <p>
1.1 deraadt 105:
106: <ul>
107: <li>2.6 source tree frozen.
108: <li>Merge in some critical ATAPI fixes.
109: <li>Force FDSCRIPTS.
1.64 bentley 110: <li><strong>RELIABILITY ISSUE: Fix a bug in the brooktree driver which permitted any user to crash some OpenBSD/i386 machines. <a href="errata25.html#brooktree">A patch is available</a></strong>.
1.2 espie 111: <li>Separate help(1) command, and a separate help(1) man page.
1.1 deraadt 112: <li>Move wrapper handling to the child process, in sshd(8).
113: <li>Various fixes for the bignum and RSA handling code in sshd(8).
114: <li>ssh 1.5 protocol.
115: <li>isakmpd policy man page.
116: <li>Put gcc-lib in base, because the mac68k installer built-in tar command is stupid, and does not do a mkdir -p type operation internally.
117: <li>In the install script, if the user skips network config and later chooses an option which requires network config, ask for network config to be done then.
118: <li>Make i386 pcvt driver also support the traditional PC display, with 16 colours.
1.2 espie 119: <li>In the install script, support separate international and USA versions of the ssl package.
1.1 deraadt 120: <li>Fix another unmount/mfs race condition.
121: <li>If no sshd_config file, have sshd(8) abort.
122: <li>Fix for the i386 isadmaattach panic.
123: <li>PermitRootLogin in sshd(8).
124: <li>Document how we are dealing with SSL, crypto, and RSA issues in the ssl(8) man page even better.
125: <li>Stir ARC4 after key use in sshd(4).
126: <li>Fix mii tick tock stuff in the fxp(4) driver.
127: <li>Fix connect() race in ssh agent handling.
128: <li>Numerous fixes and improvements to the install scripts.
129: <li>Avoid mbuf corruption in recvmsg(2).
130: <li>Only attempt to read disklabels from CDs with a data track.
1.65 deraadt 131: <li>Fix a bug in newsyslog(8), which caused it to rotate empty log files near first system boot.
1.1 deraadt 132: <li>Do not call VOP_SETATTR on a pipe.
133: <li>SilentDeny option for sshd(8).
134: <li>Avoid an infinite loop in ping(8).
1.65 deraadt 135: <li>Add driver for i82553 phy, used by some fxp(4) cards.
1.1 deraadt 136: <li>Allow root logins in xmd, but provide a nice comment so people can disable it easily.
137: <li>Document -e support in config(8).
138: <li>Use setsid(2) on all connections to sshd(8), since our setlogin(2) is secure and needs that.
139: <li>sshd(8) Allow/Deny Users/Groups features.
140: <li>sshd(8) UseLogin feature.
1.65 deraadt 141: <li>Use a separate perl-based vi.recover script because sh is a terrible language.
1.1 deraadt 142: <li>Check permissions of directories leading up to ssh authorized_keys file.
1.10 pvalchev 143: <li>For AF_UNIX sockets, do not follow symbolic links at creation time, since there is nothing equivalent to O_EXCL.
1.1 deraadt 144: <li>Permit build of system with NFSSERVER but without NFSCLIENT.
145: <li>More keynote man pages.
146: <li>pmax support is back in the tree, various tweaks everywhere.
147: <li>Make eap(4) print it's interrupt at attach time.
148: <li>As well as numerous repairs, now also support "pkg_add *".
149: <li>Many many man page improvements.
150: <li>Support newer model of the fxp(4) card.
151: <li>Further improvements to ATA probing.
152: <li>Support skey in sshd.
153: <li>Use pkg_add -I for the ssl package install, in the install scripts.
154: <li>Repair fd(4) motor off code.
155: <li>Handle most xl(4) devices that lack a PHY.
156: <li>On machines lacking shared libraries, install the ssh utilities with mode 0, so that /etc/rc will run the ones in /usr/local/bin instead.
157: <li>Cluster fixes to ipsec code.
158: <li>implement client NumberOfPasswordPrompts in ssh(1).
159: <li>Support various effect modes on the ym(4) sound cards.
160: <li>Y2K related fixes for some buggy i386 clock chips.
161: <li>Fix various atapi sense detection bugs.
162: <li>Big endian fixes to tcpdump(8).
163: <li>Move sshd auth sockets to a private directory.
164: <li>Various make performance enhancements.
165: <li>Ensonic ES1371 support in the eap(4) driver.
166: <li>Fix a sshd xauth race.
167: <li>Lots of manpage improvements.
168: <li>ssh crc32 compensation attach detection fix from core-sdi.
169: <li>PCI Promise IDE controller support, not perfect yet.
170: <li>Nuke minfd stuff in ssh.
171: <li>config(8) gets -e and -u support.
172: <li>Put sbin and /usr/sbin in the default path.
173: <li>Fix garbled dmesg output on the console in the mvme68k port.
174: <li>DNS spoof checking code in the ssh.
175: <li>Double default shared memory for i386.
176: <li>Various quality of software repairs to sshd, like errno trashing in signal handlers, and other stupid things like that.
177: <li>Fix a missing memory initialization bug in the i386 bootblocks.
178: <li>Avoid use of shutdown(2) in sshd.
179: <li>For fts(3) and find(1), fix various off-by-one errors and some issues with -execdir for multiple relative directories.
180: <li>libwrap support in sshd.
181: <li>Nice setproctitle(3) changes to sshd, so that you can tell which process is which login.
182: <li>Add -q support to whois(1).
183: <li>Remove local blowfish code in ssh.
184: <li>Improve the scp(1) progress meter.
185: <li>Various games fixes.
186: <li>mod_ssl 2.4.5
187: <li>new isakmpd code.
188: <li>Support DSO's in httpd, and build them into the normal tree.
189: <li>sm(4) driver now supports SMC 8020 pcmcia cards.
190: <li>sk(4) driver for SysKonnect 984x gigabit ethernet adapters.
191: <li>add support for external storage to the mbuf layer, managed by external managers.
192: <li>libkeynote 2.0
193: <li>Support more ess(4) sound card models.
194: <li>Numerous other ssh changes...
195: <li>in ssh, use libc md5 code.
196: <li>remove rc4 code from ssh
197: <li>Remove ssh "-c none" code.
198: <li>Improve ftpd's documentation.
199: <li>Improve tcpdump's handling of ISAKMP packages.
1.65 deraadt 200: <li>Make bootblock memory probing work the same as 2.5.
1.1 deraadt 201: <li>More man page repairs and improvements. A day doesn't go by...
202: <li>Some fixes to the games.
203: <li>Many more ssh improvements.
204: <li>Critical ipsec reliability fix for the i386.
205: <li>Run ldconfig before any ssh stuff, because the ssl package now extracts into /usr/local/lib.
206: <li>Apache 1.3.9 + Mod_ssl 2.4.2
207: <li>ssleay(1) goes away, replaced by openssl(1).
208: <li>OpenSSL 0.9.4
209: <li>Fix tun(4) byte counters.
210: <li>To ssh, add X11DisplayOffset, user@host, kerberos4 support, GatewayPorts, ssh -g, etc.
211: <li>Fix rc scripts to start ssh nicely upon first and subsequent boots.
212: <li>Rip all licensed and patented code out of ssh.
213: <li>Support MVME188 and MVME197 models in the mvme88k port.
214: <li>Fixes to the pci wb(4) driver.
215: <li>pkg_add signing capability is being worked on.
216: <li>Put uuencoded install bits for amiga into the tree, so that they can end up in the distribution.
217: <li>Fix hp300 ramdisk.
218: <li>32-bit ie(4) driver for the mvme68k and mvme88k ports.
219: <li>More changes to pcvt scrollback code.
220: <li>More fixes to pci ax(4).
221: <li>In inetd.conf, disable telnet/ftp/login by default.
222: <li>Simplify ssh configuration.
223: <li>New mandoc pages for ssh(1) and friends..
224: <li>Add ssh to the source tree (based on an old version, but all the bugs are fixed, and we are playing RSA license games with libssl/libcrypto and adding all the modern ssh features).
225: <li>Add :L and :U modifiers to make(1).
226: <li>stdbool.h from C9X.
227: <li>Install script changes to support libssl package install. Not nice, but it will be improved.
228: <li>Move towards 2.6-beta.
229: <li>Fix icmp byte-order changes so that ip_forward() aliased packet doesn't bite us.
230: <li>Many man page changes.
231: <li>Some ipsec changes to tcpdump(1).
232: <li>Add atactl(8).
233: <li>Add opendisk(3) API to libutil.
234: <li>Crank some i386 limits, now that kvm is larger.
235: <li>Repair some URL handlings in pkg_install(8).
236: <li>Significant changes to the install scripts.
237: <li>Change makewhatis to accept arguments.
238: <li>AC-97 CODEC support.
1.6 aaron 239: <li>Fix device existence check in hp300 tape support.
1.1 deraadt 240: <li>Grow i386 kvm to 512MB.
241: <li>Merge to tcpdump 3.4.
242: <li>Use writev(3) in libc functions that talk to stderr.
243: <li>Add raw support in tcpdump.
244: <li>In xl(4), Support 3c980c.
245: <li>Fix a FIFO handling bug in xe(4) driver.
246: <li>Fix a caching bug in getpwent(3) seen with setuid binaries and YP.
247: <li>i386 support for "isa0 at pcib?".
248: <li>Upon bootup, permit i386 to modify the rootdev after looking at BIOS disk signatures.
249: <li>Change rc.conf so that sendmail is started with -q30m by default (not -bd).
250: <li>Various speed improvements by using round_page() instead of roundup(foo, NBPG).
251: <li>cvs 1.10.7
252: <li>Import uunencoded binary amiga things which need to be in a release.
253: <li>64bit repair in ls(1)
254: <li>ELF64 support.
255: <li>Some man page improvements.
256: <li>Detach code in the icsphy.
257: <li>Support tadpole sparc microcontroller.
258: <li>Ensure that adduser(8) sends the password to encrypt(1) via stdin, avoid ps(1) snooping.
259: <li>Improved m4(1) extensively.
260: <li>Improved fsck_msdos(8).
261: <li>On i386, expand aperture because XFree86 3.9.15 want to look at the card BIOS.
262: <li>p9100 console support for Tadpole sparc.
263: <li>Scroll-back support for the i386 pcvt driver.
264: <li>Use stathz to calculate CPU time, fixing CPU calculation when stathz is different from hz and profhz (affected i386).
265: <li>Preliminary ATAPI tape drive support.
266: <li>Support "short" mouse protocol for the Tadpole sparc.
267: <li>More queue.h macros.
268: <li>In /etc/rc during vi recovery, ensure vi recovery files are normal.
1.64 bentley 269: <li>Change /etc/rc.shutdown handling, so that /etc/rc.shutdown is completely admin-editable and does not run if in single-user mode.<br> <b>NOTE: If you follow current, this means that people need to install a new /etc/rc file.</b>
1.1 deraadt 270: <li>On sparc, change pagetable pointers using atomic instructions.
271: <li>Change pmap_enter() API.
272: <li>Start doing an atoi(3) audit of the tree; most cases should use strtol() and strtoul().
273: <li>Cleanup handling of signed and unsigned numbers in sysctl(8).
274: <li>Many man page improvements.
275: <li>Print i386 interrupts nicer in vmstat -i.
276: <li>In bridge, do not flush static address when configuring down.
277: <li>Permit bridge control before it is configured up.
278: <li>Cleanup parsing of /etc/hostname.* files, and support new /etc/bridgename.* files.
279: <li>In tcp's input path, for SACK, update the window information correctly.
1.65 deraadt 280: <li>If a patch contains zero patches, have patch(1) error out.
1.1 deraadt 281: <li>Start amd(8) in /etc/amd.
282: <li>Fix buf overflow in amd(8).
283: <li>Support AAA-131CF card in ahc(4) driver.
284: <li>Check SACK hole validity better, and do sequence space arithmetic better.
1.64 bentley 285: <li><strong>SECURITY ISSUE: In cron(8), make sure argv[] is NULL terminated in the fake popen() and run sendmail as the user, not as root. <a href="errata25.html#cron">A patch is available</a></strong>.
1.1 deraadt 286: <li>Some fixes to newsyslog(8).
287: <li>Disable SACK for now; some issues remain.
288: <li>Buffer overflow fixes in from(1).
289: <li>Make res_random and ip_random attacks harder by adding a little xor.
290: <li>Improved handling of BIOS memory maps, which should permit apm to work a bit better on some machines.
291: <li>XFree86 3.3.5
292: <li>Allow userland to figure out whether a scsi device is atapi or not; used by some things like tosha.
293: <li>Fix fgets(3) bug in paste(1).
294: <li>gcc 2.95.1
295: <li>ncurses-5.0-990821
296: <li>Disable -fstrict-aliasing by default: It causes gcc to generate very incorrect code when compiling code which isn't perfectly ANSI-conforming.
297: <li>Add MOUSEIOCSCOOKED and MOUSEIOCSRAW ioctl() calls to the lms and mms drivers, so that X can figure out what driver is running.
298: <li>Extend support in kbd(1) for the sparc.
299: <li>Change default group ownership for tty and cua devices, so that locking works better in tip(1) and cu(1).
300: <li>Crank kerberos default expiration date.
1.25 david 301: <li>Teach i386 architecture code about Rise CPU models.
1.1 deraadt 302: <li>Build shared library called libperl.
1.65 deraadt 303: <li>Use new <code>arch -s</code> option for building perl.
1.1 deraadt 304: <li>Fix a few possible sparc pmap races.
305: <li>Make ld.so work on mips again.
306: <li>Merge machine(1) and arch(1) commands.
307: <li>Fix a sun4m trap handling bug.
308: <li>Get ready for emulating linux clone(2).
309: <li>Make various forms of rup(1) produce the same formatted output.
310: <li>Many man pages updated.
311: <li>Various tiny fixes.
312: <li>In fortune(6), a fix for a use after free().
313: <li>hp300 CD booting.
314: <li>Fix buglet in fts(3) handling of FTS_NOCHDIR.
315: <li>Various dmesg and space-saving improvements to the pcmcia drivers.
316: <li>Allied Telesis LA-PCM pcmcia ethernet card support.
317: <li>ncurses-5.0-990814
318: <li>Various improvements to the install scripts.
319: <li>Correctly set the type and typename in the wd(4) driver generated label.
320: <li>Support AmbiCom NE2000 pcmcia ethernet.
321: <li>Fix the scheduler problems in the 2.5 release.
322: <li>Driver for ASIX88140A/88141 PCI ethernet, ax(4).
323: <li>In pcmcia ep(4) driver, support 3CXEM556B-INT.
1.65 deraadt 324: <li>Remove useless if_ep shutdown hook.
1.1 deraadt 325: <li>Import USB code.
1.64 bentley 326: <li><strong>SECURITY ISSUE: The procfs and fdescfs filesystems had an overrun in their handling of uio_offset in their readdir() routines. (These filesystems are not enabled by default.) <a href="errata25.html#miscfs">A patch is available</a></strong>.
1.1 deraadt 327: <li>Repair: probe svr4 emulation before linux once again.
328: <li>Support -M and -N flags in uptime(1).
329: <li>Detect IDT WinChip models.
330: <li>If we fail to match an isapnp device, and it looks like it has the resources a com(4) device would have, try seeing if it in fact is.
331: <li>New i82365 pcmcia irq probing code that tries much harder to allocate a proper interrupt for the pcic.
332: <li>Add DIOCRLDINFO ioctl, used by fdisk(8) to indicate that the MBR has been re-written, and the disklabel should be re-read off disk.
333: <li>Support PChome-PCI LANCE (1Mbit phone wire "ethernet") using le(4).
334: <li>Document "Precedence: list" in vacation man page.
335: <li>In tar, fflush(stderr) at a critical point.
336: <li>Skip hostname.* files if the interface does not exist.
337: <li>Make mbuf panic messages unique.
338: <li>Repair interface walking in rarpd(8).
1.64 bentley 339: <li><strong>SECURITY ISSUE: Stop profiling (see profil(2)) when we execve() a new process. <a href="errata25.html#profil">A patch is available</a></strong>.
1.1 deraadt 340: <li>pcmcia device attach/dettachment code, supporting network and serial devices now.
341: <li>vdevgone() internal kernel API.
342: <li>If fread(3) returns EBADF, also set the error flag.
343: <li>Fix a number of uid_t, gid_t and %u changes still broken in the source tree.
344: <li>Split i386 ramdisks up a bit for the next release.
345: <li>Fix sparc interrupt handler to recognize < 0 from an driver interrupt handler means "interrupt may have been for me, but I am not sure".
346: <li>isakmpd(8) updates.
1.64 bentley 347: <li>Add SADB_FLUSH logic to IPSEC PFKEYv2, and a <code>ipsecadm flush</code> subcommand.
1.1 deraadt 348: <li>Update bktr driver.
349: <li>Shrink some device drivers; we're trying to make more fit onto the install floppy.
350: <li>config_defer support in the kernel.
351: <li>Some man page cleanups.
352: <li>Make IDE work again on the alpha.
353: <li>PCI ESS Solo-1 PCI audio card driver, see eso(4).
354: <li>Make poll(2) system call a tiny bit faster for trivial calls.
355: <li>Enable emacs tab completion by default in ksh(1).
356: <li>/tmp race repairs in yacc(1).
1.11 pvalchev 357: <li>Propagate TMPDIR better into locate.updatedb(8).
1.1 deraadt 358: <li>Kill gzip sub-processes in pax(1) instead of letting them die from SIGPIPE.
1.64 bentley 359: <li><strong>SECURITY ISSUE: In /etc/rc, use mktemp(1) for motd re-writing and change the find(1) to use -execdir. <a href="errata25.html#rc">A patch is available</a></strong>.
1.1 deraadt 360: <li>Support for 3c515 isapnp 100mbit ethernet card, in ef(4).
361: <li>Chown/chmod all of the pty devices.
362: <li>If /etc/fstab is 0-length or not a regular file, have setfsent(3) fail.
363: <li>Import of mailwrapper(8) into the tree.
364: <li>Games updated.
1.64 bentley 365: <li><strong>SECURITY ISSUE: Do not permit regular users to chflags(2) or fchflags(2) character or block devices. <a href="errata25.html#chflags">A patch is available</a></strong>.
1.1 deraadt 366: <li>New raidframe code.
367: <li>Make sure install scripts remove async mount conditions before attempting to installboot(8).
1.65 deraadt 368: <li>Have <code>route flush</code> skip PF_KEY flows.
1.1 deraadt 369: <li>tcpdump 3.4 merged.
370: <li>Have pkg_create(1) use tar -T.
371: <li>Add -T option to tar(1).
372: <li>Fix fgetln(3) issue in pax(1).
1.64 bentley 373: <li><strong>SECURITY ISSUE: Make nroff(1) call groff(1) with the -S option. <a href="errata25.html#nroff">A patch is available</a></strong>.
374: <li>If src file does not exist, have <code>mv -i</code> complain immediately.
1.1 deraadt 375: <li>Bug fix to pkg_add(8).
376: <li>More man page cleanups.
377: <li>Clean dmesg output from various drivers.
378: <li>Make rc.shutdown work from single-user mode too.
379: <li>PCI Tigon I and Tigon II driver, ti(4).
380: <li>Disable DMA on Acer Labs PCI IDE chipset, for now.
381: <li>Switch to new ATA/ATAPISCSI code for most architectures.
382: <li>Make the i386 dkcsum stuff be quieter for empty removeable media devices.
383: <li>Do installs faster by mounting the filesystems async.
384: <li>Fix various bugs in bridging support, especially SIOCBRDGRTS.
385: <li>Make tun(4) return EMSGSIZE for zero-length writes.
386: <li>Fix a field count bug in join(1).
1.65 deraadt 387: <li>In ipnat(8), fix -n to work with -v.
1.1 deraadt 388: <li>Missing newline in id(1).
389: <li>New drivers for the force CPU-5V (vme, sys config, D/A board driver, flash).
390: <li>Handle _POSIX_VDISABLE better in telnet(1).
391: <li>Run i386 audio at higher IPL.
1.65 deraadt 392: <li>Take greater care in head(1).
1.1 deraadt 393: <li>Less dmesg verbosity from media routines.
394: <li>Various atapi/scsi/ide changes being worked on (LS-120 works).
395: <li>powerpc ieeefp library routines.
396: <li>insque is no longer in libiberty.
397: <li>egcs-990718.
398: <li>Bring back TCP_SIGNATURE support.
399: <li>1000baseXX media support.
400: <li>For isapnp drivers, we can do more resource checking in the xxmatch() function, and less in the xxattach() function.
401: <li>Add fparseln(3).
402: <li>new swap16_multi() macro in sys/endian.h.
403: <li>More man pages.
404: <li>wdc(4) on isapnp(4).
405: <li>inetd(8)-started daemons should syslog(3) on startup failure.
406: <li>wdc(4) on pcmcia(4).
407: <li>More sparc keyboards in kbd(1).
408: <li>rc.shutdown(8) manpage.
409: <li>Add fpuparseln(3) to -lutil.
410: <li>First cut at isapnp mpu, and ym mpu.
411: <li>Document and complete skey(1) support in telnet(1).
412: <li>Correct os_mask handling in OLF execve code.
1.11 pvalchev 413: <li>Accommodations in the vm system for backward growing stack architectures.
1.1 deraadt 414: <li>Do not cache page tables on microsparc1 either.
415: <li>Many more man page fixes.
416: <li>Support floating accent and compose in sparc kbd driver.
417: <li>libpcap 0.4 changes brought in.
418: <li>In pcap library, fix pcap_open_offline() to handle snaplengths of -1.
1.65 deraadt 419: <li>Fix a memory mishandling in mixerctl(1).
1.1 deraadt 420: <li>Further fixes for some strange wss isapnp variants.
421: <li>Create /var/db/host.random at install time.
422: <li>Complete /etc/rc.shutdown support in reboot(8) and shutdown(8).
423: <li>Lock ARP entries to an interface, and provide more diagnostics.
424: <li>Import of PCI ATA/IDE stuff from NetBSD.
425: <li>Retire libm_i387.
1.65 deraadt 426: <li>Remove some shared libraries that are better used in static form.
1.1 deraadt 427: <li>Support non-US sparc keyboards using kbd(8) command.
428: <li>At execve() time, clear the P_NOCLDWAIT flag.
429: <li>egcs 990629
430: <li>Finer timing interval and standard deviation additions to ping(8).
431: <li>Add pci_mapreg*() interfaces.
432: <li>Implement more linux compat ioctl's.
433: <li>Undo recent tcp_input changes which caused crashes.
434: <li>Fix panic bug in readdisklabel() on several architectures.
435: <li>Improve IPSEC SA hashing function.
436: <li>New mii code that does async negotiation.
437: <li>Default ksh(1) and sh(1) to emacs editing mode.
438: <li>Generalize bc wrapper program.
439: <li>Move /etc/host.random to /var/db.
440: <li>In ipsec, demand keying for PF_KEY.
441: <li>In disklabel(8), put in check for architectures that require partition a to start at sector 0.
1.25 david 442: <li>For sparc svr4 emulation, put sun4X CPU class into SVR4_SI_PLATFORM.
1.1 deraadt 443: <li>pdksh-5.2.14
444: <li>Introduce fdremove() kernel API; makes fdalloc() faster by making sure fd_freefile is correct.
445: <li>Some small improvements to adduser(8) and rmuser(8).
446: <li>pcmcia wavelan driver, wi(4).
447: <li>Extend pcmcia IO space.
448: <li>ncurses-990710
449: <li>Fix a SIGSEGV in vi(1).
450: <li>Many man page improvements.
451: <li>Newer version of isakmpd(8).
452: <li>Support PAGER properly in pkg_install(8).
1.64 bentley 453: <li><strong>SECURITY ISSUE: Fix an ipsec_in_use out-of-sync condition. <a href="errata25.html#ipsec_in_use">A patch is available</a></strong>.
1.1 deraadt 454: <li>Add support for TCP MD5 (RFC 2385) option called TCP_SIGNATURE used for authenticating BGP sessions.
455: <li>Support SIGUSR1 in init(8), used by i386 keyboard halt code, and make init(8) smart enough to run /etc/rc.shutdown
456: <li>On i386 pcvt console, have CTRL-ALT-DEL sent a SIGUSR1 to init.
457: <li>Improve ipf.conf file parsing in ipf(8).
458: <li>New -q option for tar(1).
459: <li>ncurses-5.0-990703
460: <li>For identd(8) token support, constrain characters in the tokens more.
461: <li>Have the resolver ignore SIGs in the answer section for now.
462: <li>Many more man page tweaks.
463: <li>Use getprotobynumber(3) in fstat(8)
464: <li>SVR4 emulation fixes to systeminfo() system call.
465: <li>m_apply() function permits a function to be run on an mbuf.
466: <li>lmc(4) T1/T3 driver.
467: <li>tzcode 1999d.
468: <li>Support nullfs in fstat(1).
469: <li>More man page improvements.
470: <li>Fix a bug in savecore(8).
471: <li>Add joliet support to the iso9660 filesystem.
472: <li>Improve libm man pages.
473: <li>Split out more crypto algorithm knowledge from the actual IPSEC engine.
474: <li>Fix bpf attachment of bridges.
1.10 pvalchev 475: <li>Fix arc4random(3) to still work correctly inside a chroot space, by adding a sysctl somewhat equivalent to /dev/arandom.
1.1 deraadt 476: <li>Permit tcpdump(8) of address-less interfaces.
477: <li>ncurses version of tput, finally.
478: <li>More man page improvements.
479: <li>Improvements to many pci ethernet drivers.
480: <li>ncurses-5.0-990626
481: <li>Add net_addrcmp(3) to libc.
482: <li>Add getaddrinfo(3), getnameinfo(3), if_indextoname(3), if_nameindex(3), and if_nametoindex(3) to libc.
483: <li>In ksh(1), avoid reusing fd 0-2 even moreso than before, since ksh caches
484: open files.
485: <li>Improved SYSV shared memory support.
486: <li>ESS audio driver.
487: <li>Move sparc bootblocks in memory, because possible kernel sizes have gone up.
488: <li>rangelan2 wireless network pcmcia driver.
489: <li>Split out ipsec crypto transform handling.
490: <li>egcs 990608
491: <li>Return to UDP NFS until TCP NFS is properly fixed.
492: <li>Fix breakpoint continues on the sparc.
493: <li>Constrain strlcat(3) from walking past the specified length.
494: <li>Fixed overflow issue in edquota(8).
495: <li>Fix PIC label handling code in i386 as(1).
496: <li>ncurses-5.0-990614
497: <li>Handle multicast packets in ipf, too.
498: <li>pdksh 5.2.13.7
499: <li>Improvements to units(1).
500: <li>In c++ mode, define NULL to be __null for better type checking.
501: <li>Remove TCPCOOKIE stuff, which never worked in differentially SYN-filtering environments.
502: <li>In various programs, handle PAGER environment variable according XPG.
503: <li>Some large partition fixes in scan_ffs(8).
504: <li>Bump maximum number of sockets in X server to 128.
505: <li>Return ICMP_UNREACH_PROTOCOL for unimplemented protocols.
506: <li>Fix an ipsec tdb_delete() bug.
507: <li>Replace pipe() in libc and kernel with new version which does the data copy in kernel, making EFAULT possible.
508: <li>Do not leak file descriptors in socketpair(2).
509: <li>Propagate more build variables in the gnu sub-tree.
510: <li>Add struct sockaddr_storage per RFC2553.
511: <li>Drop a volatile into the ncr(4) driver; who knows how it worked before.
512: <li>Crank sparc DFLDSIZ to 24MB.
513: <li>Make adjtime(2) return an EFAULT for a bad olddelta ptr.
514: <li>Permit non-broadcast replies in dhclient(8).
515: <li>ncurses-4.2-990605
516: <li>In sed(1), make 'G' create a newline if the hold buffer is empty.
517: <li>Add dot_quad_addr_new() API to libwrap, which uses inet_aton(3) instead of inet_addr(3), and hence can handle masks of 255.255.255.255.
518: <li>Sparc cs4231 audio support (SS5 audio).
519: <li>Use inet_aton(3) instead of inet_addr(3) in many programs.
520: <li>Use mkstemp(3) in httpd(8).
1.65 deraadt 521: <li>In the resolver, permit '/' in CNAMES to PTRs, same as forward references permit.
1.1 deraadt 522: <li>Use __builtin_next_arg() for va_start(), on i386 and m68k, to handle unaligned stdarg processing.
523: <li>Support subject inclusion in vacation(1).
1.11 pvalchev 524: <li>In ipnat, decode interface aliases before hostnames.
1.1 deraadt 525: <li>Handle misaligned file struct's coming out of the KERN_FILE sysctl(3) call.
526: <li>More isakmpd(8) improvements.
527: <li>Use auto mode by default in ukphy.
528: <li>Avoid gcc fixinc (We do not want to run it, and even 1 second of machine time skew would screw up the previous avoidance tactic).
529: <li>Another memory leak fix in the ipsec kernel code.
530: <li>Change struct statfs use in the kernel, so that mount(8) can print more info.
531: <li>For NFSv3, prefer TCP connections.
532: <li>Fix a few more mkstemp(3) checks.
533: <li>Make install(1) compare work for files > 8G in size.
534: <li>Tons of man page improvements.
535: <li>For crontab(1) and vipw(8), check file size change as well as mtime to detect change.
536: <li>Better headphone/speaker handling in am7930 driver on sparc.
537: <li>Implement DLT_RAW, DLT_SLIP, and DLT_PPP in bpf
538: <li>egcs replaces gcc
539: <li>Some improvements to the libc_r threading code.
1.65 deraadt 540: <li>Further keynote documentation improvements.
1.1 deraadt 541: <li>Move bsd.port.mk and friends into the ports tree.
542: <li>On hp300, handle hil configuration more robustly.
543: <li>Numerous -mandoc man page upgrades.
544: <li>Permit mixed PIC/pic relocations on the sparc.
545: <li>Change bridge code to use a NETISR. Significant performance improvement.
546: <li>Set close-on-exec flag in vi, on files that are opened.
547: <li>*NULL dereference in wall(1).
548: <li>Permit threading using libutil/pty.c
549: <li>Fix exit code in sa(8).
550: <li>Dynamically allocate memory in sort(1), so that -k has no limit.
551: <li>Correct handling of out-of-window SYNs in our TCP code.
552: <li>Fix poll(2) return value.
553: <li>Add Keynote trust management system.
554: <li>Support mac68k Classic II video.
1.11 pvalchev 555: <li>swapctl(8) and the necessary kernel support.
1.1 deraadt 556: <li>Longer delay in the i386 pms(4) probe routine, for Thinkpads.
557: <li>Correct some DTR handling in pccom(4).
1.64 bentley 558: <li>Add <code>-p</code> flag to encrypt(1).
1.1 deraadt 559: <li>Newer version of bktr(4) driver.
560: <li>ncurses-4.2-990516
1.64 bentley 561: <li><strong>Correct some realloc(3) misuses in the fts(3) routines. <a href="errata25.html#fts">A patch is available</a></strong>.
1.1 deraadt 562: <li>Add xe(4) xircom ethernet driver.
563: <li>Add support for static arp entries that cannot be overwritten.
564: <li>Many man page fixes.
565: <li>Numerous performance and reliability fixes to isakmpd(8) and IPSEC.
566: <li>Some more pthreads fixes.
567: <li>Fix blowfish CBC mode.
568: <li>Fix some more ipsec and tcp interaction bugs.
569: <li>In vmstat(8), increase width of -i field.
570: <li>Final unicast check ethernet driver fixes for bridging.
571: <li>Fix bounds control in msgs(1).
572: <li>Fix 'X' check in gcc printf format checker.
573: <li>Fix divide by zero in libcurses.
1.64 bentley 574: <li><strong>A reliability patch for TCP over IPSEC ESP tunnels. <a href="errata25.html#ipsec1">A patch is available</a></strong>.
1.1 deraadt 575: <li>Improvements to the ss(4) driver.
576: <li>Fix various endian related problems in nm(1), ranlib(1), strip(1), and size(1).
577: <li>Do not rotate kerberos logs using newsyslog.conf
578: <li>Fix xxsize() routines so that they do not call xxopen() and xxclose().
579: <li>On i386, handle apm segments in low memory.
580: <li>Add libcurses++.
581: <li>ncurses-4.2-990424
582: <li>More improvements to isakmpd(8), and ppp(8).
583: <li>In sparc cgsix(4) driver, turn off sync so that monitors will go into standby.
584: <li>Various improvements to the xl(4) driver.
585: <li>Repair TIOCFLUSH use in telnet(1).
586: <li>Fix an unlink related bug in cp(1).
1.65 deraadt 587: <li>For sparc, delay in CPU-forced power-down, so that serial port output does not get garbled.
1.1 deraadt 588: <li>Move perl lib files to /usr/libdata/perl5.
589: <li>For make(1), permit embedded : or ! in target names.
590: <li>Better range checking in inet_addr(3) functions.
591: <li>gzip 1.2.4a
592: <li>Support Vadem pcmcia controllers.
593: <li>Add 3p man page sub-tree for perl pages.
594: <li>In ls(1), defer conversion for non-printables till after symbolic link lookup.
595: <li>For msdosfs, do not require the boot signatures in a filesystem.
596: <li>Add support for new pipes to fstat(8).
597: <li>Newer version of AFS code.
598: <li>perl5.005_03
599: <li>Y2K improvement in shutdown(8).
600: <li>solve blocking daemon problem in ftpd(8).
601: <li>Check for failure of strdup(3) in pax(1).
602: <li>Greater care in tail(1), when going backwards.
603: <li>Add wdt(4) driver for Industrial Computer Source PCI-WDT50x watchdog timers.
1.64 bentley 604: <li>Implement <code>-U username</code> in ps(1).
1.1 deraadt 605: <li>Add "verbose" command to boot_config(8).
606: <li>Check correct argument in sliplogin(8).
607: <li>New kernel hashinit().
1.65 deraadt 608: <li>More ppp(8) improvements and bug fixes.
1.1 deraadt 609: <li>More isakmpd(8) improvements and bug fixes.
610: <li>In calendar(1), fix offset bug for yearly events.
1.64 bentley 611: <li><strong>A reliability patch for ext2fs. <a href="errata25.html#bmap_trap">A patch is available</a></strong>.
1.1 deraadt 612: <li>Repair a mis-handling of non-terminated utmp strings in w(1).
613: <li>m68k optimized asm version of strlcpy(3).
614: <li>Do not accept incoming packets on a down interface.
615: <li>More strict isapnp detection for the isa ep(8) cards.
616: <li>kcore handling for the m68k ports.
1.64 bentley 617: <li><strong>A serious reliability patch for the powerpc port, regarding traps and signals. <a href="errata25.html#powerpc_trap">Patches are available</a></strong>.
1.1 deraadt 618: <li>Support power-down mode in the mac68k port.
619: <li>Fix a retransmission problem in tcp_newreno.
620: <li>Fix a sequence wraparound bug in very large tcp transfers.
621: <li>Greater care with arguments in pwd_mkdb(8).
622: <li>Support the -susv2 macro in nroff tmac doc-syms.
623: <li>Save a copy of the dmesg(8) output in /var/run/dmesg.boot.
624: <li>Improve ddb ps output.
625: <li>Repair filesystem mounting failure message in mount_msdos(8).
626: <li>Merge IP-in-IP tunnel code so that both MROUTING and IPSEC versions work together, properly.
627: <li>Do not let calendar(1) assume that it is run as root.
628: <li>Fix /tmp cleanup code in lynx(1).
629: <li>Move ipfstat(8) output files to /var/run to avoid a race.
630: <li>Reenable TCP_SACK and TCP_FACK, so that development cycle can test them sufficiently.
631: <li>Various man page fixes.
632: <li>Various isakmpd(8) fixes and improvements.
633: <li>Fix probing of ISA ex(4) cards.
634: <li>More amiga keymaps.
635: <li>Add yyfix(1), from 4.4BSD.
1.64 bentley 636: <li>Merge mkfifo into mknod, so that mknod ends up having support for the <code>-p</code> option.
1.1 deraadt 637: <li>Fix a output buffer overflow in msgrcv(2).
638: <li>Fix odbm support and permit opening a zero-length hash file.
639: <li>new true awk, April 16 release.
640: <li>Support sparc xbox sbus expansion box.
1.65 deraadt 641: <li>Bug fixes to sparc spif(4), hme(4), be(4) drivers.
1.1 deraadt 642: <li>Updated distrib/notes which shipped with the 2.5 release.
643: </ul>