===================================================================
RCS file: /cvsrepo/anoncvs/cvs/www/plus27.html,v
retrieving revision 1.15
retrieving revision 1.16
diff -c -r1.15 -r1.16
*** www/plus27.html 2001/07/06 07:13:28 1.15
--- www/plus27.html 2001/07/11 16:46:29 1.16
***************
*** 80,86 ****
Improve mountd(8) behaviour for unresolveable hosts.
Add DSA/SSH2 information to the ssh(1), sshd(8), and ssh-keygen(1) manual pages.
Improve key generation in vpn(8).
! Document our new ipsec(4) bridge(4) stuff.
New packages(7) man page.
Various isakmpd(8) updates.
Install isakmpd(8) sample files.
--- 80,86 ----
Improve mountd(8) behaviour for unresolveable hosts.
Add DSA/SSH2 information to the ssh(1), sshd(8), and ssh-keygen(1) manual pages.
Improve key generation in vpn(8).
! Document our new IPsec(4) bridge(4) stuff.
New packages(7) man page.
Various isakmpd(8) updates.
Install isakmpd(8) sample files.
***************
*** 133,139 ****
Repair adosfs(8).
The damned hifn(4) always dealing with aligned data causes even more of a fuss.
Repair a few hifn(4) bugs that slipped in recently.
! Fix ipsec(4) for big-endian machines again.
Omit RC5 from ssl(3).
userinfo(8), userdel(8), useradd(8), groupmod(8), usermod(8), groupdel(8), groupadd(8), and groupinfo(8) commands added.
mii(4) detach support, needed by xe(4).
--- 133,139 ----
Repair adosfs(8).
The damned hifn(4) always dealing with aligned data causes even more of a fuss.
Repair a few hifn(4) bugs that slipped in recently.
! Fix IPsec(4) for big-endian machines again.
Omit RC5 from ssl(3).
userinfo(8), userdel(8), useradd(8), groupmod(8), usermod(8), groupdel(8), groupadd(8), and groupinfo(8) commands added.
mii(4) detach support, needed by xe(4).
***************
*** 269,288 ****
Some ppp(8) updates.
Auto-detect size of seeprom for fxp(4), for newer cards.
Some improvements in kerberos(1) man pages.
! DES and 3DES hardware acceleration for ipsec(4) working in hifn(4) driver.
! Run pod2man on the openssl pod documents, and carefully install them in the base system.
Expose MDXTransform functions for MD5 and MD4.
Permit wss(4) to work on irq 5.
Implement compat_linux(8) rt_sigreturn() emulation.
On the i386, enlarge pcic0 memory address space.
Implement compat_linux(8) getcwd(3) emulation.
! IPSEC ingress ACL-checking is now on by default.
sudo 1.6.3
i386 PCI interrupt routing repair code (disabled by default, has lots of issues).
Drivers for USB ethernet adapters.
Sync USB.
lynx 2.8.2
! Fix a number if ipsec esp and ah related bugs introduced during the crypto splitout.
Numerous man page link repairs, so that just about any part of the system has a matching man page.
Make f_bsize signed.
Support newer Qlogic isp(4) scsi cards.
--- 269,288 ----
Some ppp(8) updates.
Auto-detect size of seeprom for fxp(4), for newer cards.
Some improvements in kerberos(1) man pages.
! DES and 3DES hardware acceleration for IPsec(4) working in hifn(4) driver.
! Run pod2man(1) on the OpenSSL pod documents, and carefully install them in the base system.
Expose MDXTransform functions for MD5 and MD4.
Permit wss(4) to work on irq 5.
Implement compat_linux(8) rt_sigreturn() emulation.
On the i386, enlarge pcic0 memory address space.
Implement compat_linux(8) getcwd(3) emulation.
! IPsec(4) ingress ACL-checking is now on by default.
sudo 1.6.3
i386 PCI interrupt routing repair code (disabled by default, has lots of issues).
Drivers for USB ethernet adapters.
Sync USB.
lynx 2.8.2
! Fix a number if IPsec(4) esp and ah related bugs introduced during the crypto splitout.
Numerous man page link repairs, so that just about any part of the system has a matching man page.
Make f_bsize signed.
Support newer Qlogic isp(4) scsi cards.
***************
*** 312,318 ****
Make m4(1) compatible enough with GNU m4 to handle autoconf 2.13.
Add ratecheck(9) API to the kernel.
Quieten, secure, and improve ipv6(4) boot-time route setup.
! Cryptographic hardware services framework, first meant for use by ipsec(4).
Fix interrupt handling issue in dc(4).
Newer uvm(9) code.
Prevent overflow in subr_extent code.
--- 312,318 ----
Make m4(1) compatible enough with GNU m4 to handle autoconf 2.13.
Add ratecheck(9) API to the kernel.
Quieten, secure, and improve ipv6(4) boot-time route setup.
! Cryptographic hardware services framework, first meant for use by IPsec(4).
Fix interrupt handling issue in dc(4).
Newer uvm(9) code.
Prevent overflow in subr_extent code.
***************
*** 333,339 ****
Repair sub-shell execution handling in hostname.if(5)
Reverse engineer crypto lockout function on the aeon crypto card.
Fix file descriptor leak in compress(1)
! Fix a memory corruption bug in the ipsec(4) skipjack implementation.
ncurses-5.0-20000304.
Disallow root password guessing in sshd(8).
grep(1) 2.4.1
--- 333,339 ----
Repair sub-shell execution handling in hostname.if(5)
Reverse engineer crypto lockout function on the aeon crypto card.
Fix file descriptor leak in compress(1)
! Fix a memory corruption bug in the IPsec(4) skipjack implementation.
ncurses-5.0-20000304.
Disallow root password guessing in sshd(8).
grep(1) 2.4.1
***************
*** 432,438 ****
Arrange so that sshd(8) does not do port forwarding until shell successfully starts.
Repair a stupid cache-lockdown bug in the sparc pmap.
Repair memory leak in freeaddrinfo(3).
! Significant code shrinkage in ipsec(4), as most AH and ESP code starts sharing more subfunctions.
Enable ipv6 support in rsh(1), rlogin(1), rshd(8), and rlogind(8).
Fix rcmd(3), iruserok(3), and ruserok(3) to be IPv6 capable, also add more address family independent routines: rcmd_af(3) and iruserok_sa(3).
Handle MVME1x2 boards with only one ZS serial chip.
--- 432,438 ----
Arrange so that sshd(8) does not do port forwarding until shell successfully starts.
Repair a stupid cache-lockdown bug in the sparc pmap.
Repair memory leak in freeaddrinfo(3).
! Significant code shrinkage in IPsec(4), as most AH and ESP code starts sharing more subfunctions.
Enable ipv6 support in rsh(1), rlogin(1), rshd(8), and rlogind(8).
Fix rcmd(3), iruserok(3), and ruserok(3) to be IPv6 capable, also add more address family independent routines: rcmd_af(3) and iruserok_sa(3).
Handle MVME1x2 boards with only one ZS serial chip.
***************
*** 455,461 ****
Make application mode arrow keys work in ksh(1).
Protocol independence added to bindresvport(3).
OpenSSH version 1.2.2 released.
! Lots of ipsec(4) pfkey improvements.
Repair exception handling in gcc(1) i386 position independent code.
ncurses-5.0-20000122
Don't allow time to be set far forwards and thus wrap, and a warn for for time reversing if securelevel(7) > 1.
--- 455,461 ----
Make application mode arrow keys work in ksh(1).
Protocol independence added to bindresvport(3).
OpenSSH version 1.2.2 released.
! Lots of IPsec(4) pfkey improvements.
Repair exception handling in gcc(1) i386 position independent code.
ncurses-5.0-20000122
Don't allow time to be set far forwards and thus wrap, and a warn for for time reversing if securelevel(7) > 1.
***************
*** 518,528 ****
Hi/Fn 7751 is the same as the Invertex board, the aeon driver.
Support command-execution in /etc/hostname.* files, using ! syntax.
Handle the bootpath properly in sbus isp(4).
! ipsec ingress control.
Merge IPV6 into the GENERIC kernel. As far as the kernel is concerned, we are ipv6 ready now. However, lots of userland changes remain..
Reduce recursion in gif(4).
Support Davicom DM910x in if_dc.
! Numerous IPSec fixes and enhancements.
Allow aeon driver to match Hi/Fn 7751.
Fix printing of SAs in route.
Add ESP/AH statistics to netstat(1).
--- 518,528 ----
Hi/Fn 7751 is the same as the Invertex board, the aeon driver.
Support command-execution in /etc/hostname.* files, using ! syntax.
Handle the bootpath properly in sbus isp(4).
! IPsec(4) ingress control.
Merge IPV6 into the GENERIC kernel. As far as the kernel is concerned, we are ipv6 ready now. However, lots of userland changes remain..
Reduce recursion in gif(4).
Support Davicom DM910x in if_dc.
! Numerous IPsec(4) fixes and enhancements.
Allow aeon driver to match Hi/Fn 7751.
Fix printing of SAs in route.
Add ESP/AH statistics to netstat(1).
***************
*** 566,572 ****
Change libc syslog() code to try to reopen the socket if a send fails. This handles the case of a restarted syslogd(8) better.
Correct SIGTERM handling in ssh-agent(1).
ncurses-5.0-20000101
! Permit non-IPSEC kernels to compile.
Improve argument handling in wicontrol(8).
Various fixes to LKM(4) unloading.
Make ld/ld.so search all directories before accepting the best version of a shared library.
--- 566,572 ----
Change libc syslog() code to try to reopen the socket if a send fails. This handles the case of a restarted syslogd(8) better.
Correct SIGTERM handling in ssh-agent(1).
ncurses-5.0-20000101
! Permit non-IPsec(4) kernels to compile.
Improve argument handling in wicontrol(8).
Various fixes to LKM(4) unloading.
Make ld/ld.so search all directories before accepting the best version of a shared library.
***************
*** 611,617 ****
Add more PCMCIA NE2000 devices.
Fix and re-enable TCP SACK code. Eliminate TCP_NEWRENO. See options(4).
Continuing IPV6 improvements.
! Print ipv6 addresses correctly ipsec flows. See netstat(1), route(8).
ipsecadm(8) now accepts ipv6 addresses.
Improve timeout handling for some ATAPI devices.
Add man pages for icmp6(4) and ip6(4)
--- 611,617 ----
Add more PCMCIA NE2000 devices.
Fix and re-enable TCP SACK code. Eliminate TCP_NEWRENO. See options(4).
Continuing IPV6 improvements.
! Print ipv6 addresses correctly IPsec(4) flows. See netstat(1), route(8).
ipsecadm(8) now accepts ipv6 addresses.
Improve timeout handling for some ATAPI devices.
Add man pages for icmp6(4) and ip6(4)
***************
*** 810,816 ****
www@openbsd.org
!
$OpenBSD: plus27.html,v 1.15 2001/07/06 07:13:28 horacio Exp $