===================================================================
RCS file: /cvsrepo/anoncvs/cvs/www/plus27.html,v
retrieving revision 1.68
retrieving revision 1.69
diff -c -r1.68 -r1.69
*** www/plus27.html 2016/03/21 05:46:20 1.68
--- www/plus27.html 2016/03/22 10:54:42 1.69
***************
*** 80,816 ****
- 2.7 source tree frozen.
- Buffer overflow fix to xlockmore(1).
!
- Fix kerberos slave server startup.
!
- Fix a pkg_add(1) bug in %f handling.
!
- OpenSSH is now at version 2.1.
- Handle \ escapes in real ssh key format files.
!
- Fix a X11 forwarding draining bug in sshd(8).
- Be compatible to various bugs in various other real ssh versions.
!
- Handle very large mbuf chains in hifn(4).
!
- Complain about invalid ciphers in ssh(1).
!
- Fix 12 hour handling in leave(1).
- Fix a timeout queue crash.
- Various nice tweaks to the install script for 2.7.
!
- In ppp(8), correct a bad bug in m_prepend().
- Support sparc tape installs.
!
- Work around a sysctl(3)-based kvm(3) vs exit(3) race.
!
- Fix the same basic ip timestamp bug in ipf(4).
!
- On the ip(4) input path, avoid unaligned accesses for strangely placed ip timestamp options.
- Fix resource limit race at exit time, if accounting is enabled.
!
- Fix inet6(4) pcmcia(4) detach.
!
- Support all ServerWorks and 451NX pchb(4) machines.
!
- Many fixes to user(8).
!
- Repair padding a uuencode stuff in sshd(8).
- Do not support DMA on PCTECH RZ1000, its dma support is fundamentally broken.
- Undo a broken i386 pmap fix.
!
- Fix IEEE underflow in ps(1), affected 68060 machines with precise exceptions enabled by default.
!
- Fix context memory sizing for various models of static ram hifn(4) cards.
!
- dhclient(8) support for the hp300 ramdisk.
!
- Improve mountd(8) behaviour for unresolveable hosts.
!
- Add DSA/SSH2 information to the ssh(1), sshd(8), and ssh-keygen(1) manual pages.
!
- Improve key generation in vpn(8).
!
- Document our new IPsec(4) bridge(4) stuff.
!
- New packages(7) man page.
!
- Various isakmpd(8) updates.
!
- Install isakmpd(8) sample files.
!
- Correct proctitle updating in sshd(8).
!
- Change pmax dc driver to dz(4), to avoid name conflict withdc(4).
!
- SECURITY FIX: Do not use an undocumented semconfig(2) system call in ipcs(1), in fact, remove the system call altogether. A source code patch is available.
!
- More mount(8) tweaks for dealing with weird paths.
!
- Fix more pkg_add(1) bugs.
- Support another RCC ServerWorks PCI host bridge.
!
- sshd(8) now has a pidfile.
!
- Better file descriptor handling in sshd(8).
!
- buf mishandling in ed(1).
- A fix for mandatory cache sun4m architectures like the SM71 and SM81.
!
- Fix a race in scp(1).
- ipf 3.3.13.
!
- Prettier warnings from telnet(1) if bad port names are given.
!
- Add emulation for memcpy(3) and such to i386 for non-optimized kernel builds.
!
- Add OPENDEV_BLCK flag to opendev(3).
!
- Repair groff(1) mkstemp(3) use.
!
- Fix some perl 5.6.0 buglets.
!
- Use more perl 5.6.0 feature in makewhatis(8) for greater security and reliability.
- In the /etc/daily file cleaner, prune at /.X11-unix and ssh-* directories.
!
- In sshd(8), check for keysize errors better.
!
- On the amiga, recognize Linux ados(8) disk labels.
!
- Fixes to the ray(4) driver.
!
- Fix -H option in sudo(8).
!
- Disable pcmcia(4) handling of non-CIS cards, since there are many bugs in it.
- Document many afs(4) configuration files.
!
- Fix a modify-after-free bug in tcp(4).
!
- Attempt to have ld(1) and ld.so(1) deal better with C++ shared libraries on
a.out architectures (i386, m68k, sparc...).
!
- Document what sendmail(8) now does on port 587.
!
- Deal with more non-compliant PHY setups in mii(4).
!
- cmpci(4) driver for C-Media CMI8x38 Audio Chip present on several motherboards.
!
- Support ext2fs properly.
!
- ssh(1), sshd(8), and companions now support SSH 2 protocol as well as SSH 1 protocol! To properly use this, you want to make sure you update your /etc/rc(8), /etc/netstart, and /etc/rc.conf(8). Or just test the new snapshot...
!
- Various additions and improvements in tcpdump(8).
!
- libpcap 0.5.
!
- Support jumbo frames in the fxp(4) models which support it.
!
- Add support for the RCC ServerWorks pchb(4) which has additional pci(4) bridges on it. Huge PC's with 6+ pci busses now work fine.
!
- On the i386, fix an errata relating to the Intel 82443BX pchb(4).
!
- Various changes related to vlan(4) support.
!
- Add a sysexits(3) man page.
!
- getaddrinfo(3) and getnameinfo(3) improvements, repairs, and greater care.
- Start of the vax port resurrection.
- Fix more i386 isadmaattach bugs. At least 2GB of memory on an i386 now works.
- Avoid divide by zero in igmp networking code.
!
- In mail(1), make "new" count after an "inc" command reflect the new messages, as in SunOS.
!
- ktrace(2) no longer follows symbolic links.
!
- Repair adosfs(8).
!
- The damned hifn(4) always dealing with aligned data causes even more of a fuss.
!
- Repair a few hifn(4) bugs that slipped in recently.
!
- Fix IPsec(4) for big-endian machines again.
!
- Omit RC5 from ssl(3).
!
- userinfo(8), userdel(8), useradd(8), groupmod(8), usermod(8), groupdel(8), groupadd(8), and groupinfo(8) commands added.
!
- mii(4) detach support, needed by xe(4).
!
- Fix promiscuous mode in xe(4).
!
- Fix order of interrupt disabling for pcmcia(4) disabling; much more reliable.
!
- Wait a bit longer after enabling pcmcia(4) cards; more pcmcia(4) cards now work.
- Fix dump calculations in the i386 kernel crash dump code.
!
- More careful dmesg(8) handling in the install script.
!
- pcmcia(4) ep(4) now supports 3C1 and 3CCFEM556BI.
!
- Repair a bug in fdalloc() that caused a panic in dup(2). This bug was introduced by the recent file descriptor allocation optimizations.
- Support DOSPTYP_EXTENDL partitions in the kernel disklabel reader.
!
- In ld(1), avoid duplicates in search path.
!
- Support RFC2732 IPv6 address literal URLs in ftp(1).
!
- Improve makewhatis(8) again, using new parts of perl(1) 5.6.0.
!
- Fix a bug in at(1).
!
- Add -keyfile and -authkeyfile options to ipsecadm(8).
- Significant manual page improvements, as is usual just before a release.
!
- Use fgetln(3) instead of fgets(3) in mail.local(8), and thus avoid header mangling.
!
- Support for /etc/rc.conf.local, as documented in rc.conf(8).
!
- https support in lynx(1).
!
- Add CPAN File::Temp for perl(1) versions of mkstemp(3) and such.
!
- Fix the vi(1) recover script to be safe for multiuser running (needed O_NOFOLLOW).
!
- Move apm(4) into a kernel thread, so that filesystem syncing is less likely to block and cause panics. Suspending just got a lot more reliable.
!
- For open(2), support O_FSYNC better.
!
- For open(2), add a O_NOFOLLOW flag for dealing with symbolic links. This should not be used by generic software -- only use this for very rare and specific problems.
!
- traceroute(8) gets a new option, -f skips early node checks.
- Fix "freeing free block" panics.
!
- Support /etc/resolv.conf.tail, as documented in dhclient-script(8).
- Rewrite uio hog.
!
- Do not abuse malloc(9) for small structures inside ktrace(2).
!
- Add pread(2), pwrite(2), preadv(2), and pwritev(2) system calls.
!
- In fdisk(8), favor BIOS geometry over physical geometry, fixing numerous problems with larger disks.
!
- Split fxp(4) and dc(4) for pci(4) and cardbus(4).
!
- In ktrace(2), if user does a large IO operation, split the loggin to avoid kmem(4) starvation.
!
- Make nfsstat(1) on a live system use sysctl(3) instead of kvm(3) snooping.
!
- Set mii(4) parameters for all variants of xl(4), cardbus(4) models.
!
- scsi cd(4) detach is now possible.
- Do even more scsi device locking via common routines.
!
- In make(1), report errors with a Makefile line number, making large Makefile debugging much easier.
!
- Significantly cleanup the isa(4), pci(4), isapnp(4), and related manual pages, making it easier to see what we currently support.
- Deal with byte-order challenged Compaq laptops.
!
- Fix memory leaks in sshd(8).
!
- Numerous modifications for pkg_add(1) and companions, to better import various new styles of packages..
!
- Fix even more braindamaged random device mis-handlings in ssl(3).
!
- Make kvm(3) on the i386 understand the new core dump format.
!
- In script(1), propagate window size changes to slave.
- tzcode2000c.
!
- Permit i386 kernel to compile without pccom(4) or com(4) drivers.
!
- After scp(1) completes, replace progress bar ETA counter with a total elapsed time.
!
- Fix more random device mis-handlings in ssl(3).
!
- Fix exit code in du(1).
!
- Fix sync(2) to actually sync all filesystems.
!
- urio(4) driver for Diamond Multimedia RIO 500.
- xlockmore 4.16.
!
- OpenSSL 0.9.5a.
!
- Change window(1) to use curses(3) instead of ocurses.
- Do some repair on sys/queue.h.
!
- Add colour support to pcvt25 termcap(5) entry.
!
- In window(1), do not assume that termcap(5) entries start with 2 character short names.
!
- Repair random(4) for the alpha.
!
- In ssh(1), check payload for (illegal) extra data.
- make "option TCPDEBUG" kernel compile.
- Initialize the bus dma tag for EISA.
!
- Use getifaddrs(3) instead of SIOCGIFCONF in ifconfig(8), rarpd(8), etc.
!
- ifconfig(8)'s -a flag had been changed to be the same as -A. Fix that.
!
- Have ahc(4) support Adaptec 2930U2.
!
- Revert to up-to-date ipf(4) man pages, but ugly as sin. Everyone remind kjell to finish this job, ok?
- When fragmenting a packet in ip_output(), inherit the multicast and broadcast flags so that link layer can choose the right address.
!
- Use getifaddrs(3) in libpcap.
!
- Make ahc(4) support Adaptec 2930U2 controller.
!
- Match netsec hifn(4) 7751 card.
!
- neo(4) is a Neomagic 256AV/ZX audio driver.
- Unmute ac97 mixers by default.
- ipf 3.3.12a.
!
- ssh protocol 2 is now usable.
!
- Add Protocols and Cipher keywords to ssh(1) and sshd(8).
!
- compat_linux(8) emulation for setfsuid() and getfsuid().
!
- If realpath(3) fails, just use old name in umount(8).
!
- Add 802.11 nwid and mtu commands to ifconfig(8).
!
- More bug fixes to hifn(4). Hifn support is now fully working.
!
- Some fixes to route6d(8).
!
- Use getifaddrs(3) instead of SIOCGIFCONF in ypbind(8).
!
- Do not lose file descriptors in ftpd(8).
!
- In random(4), first true random number source, based on intel 82802 firmware hub embedded true random number generator.
!
- In random(4), make it use more sources for an entropy; make playing .mp3s produce entropy, big time, big time.
- Improve range checking in timeouts.
!
- Thread repair in malloc(3).
!
- Various bug fixes to hifn(4), which is now even more reliable.
!
- Fix another m4(1) bug.
!
- PCI an(4) driver.
!
- Repair spl bug in bridge(4).
!
- wdc(4) and wd(4) detach logic, but missing scsi(4) disconnect for atapi(4).
!
- Permit address setting on enc(4) interfaces, and various other tweaks leading to better bridge(4) integration.
- Add various autoconfiguration child detach logic.
- Rewrite and commonize disk driver locking which varied between drivers.
!
- After the recent revamp of icmp(4) reply byte order, correct one last thing: Pass ip_off and ip_len correctly.
!
- groff 1.15
!
- In cd(4), do not trust the TOC as much when reading the disklabel.
!
- Fix umass(4) so that it handles some non-compliant devices.
!
- Modify the scsi(4) subsystem so that it can attach without polling.
!
- Arrange so that IFF_LINK0 on enc(4) means IP-in-IP instead of Ethernet-in-IP.
!
- Initial check-in of cardbus(4) support. xl(4) works on cardbus at the moment.
- Set our status to 2.7-beta.
!
- Update ppp(8).
!
- Update isakmpd(8).
!
- sendmail 8.10.1
!
- sendmail 8.10.0: You must put your /etc/sendmail.cf file in /etc/mail/sendmail.cf now.
!
- perl 5.6.0
!
- Update to isp(4), mostly for Fibre Channel.
!
- Seed perl(1) srandom() /dev/arandom, to avoid losing a lot of entropy.
- Some kernel functions were eating a little bit too much entropy.
- ipf 3.3.12
!
- ahc(4) now supports AHA-29160 and other Ultra160 variants.
!
- USB umodem(4) support.
!
- USB umass(4) driver. Works with various devices, but does not support disconnection yet.
!
- Support hmac processing in hifn(4).
!
- ncurses-5.0-20000401
!
- Put an expert mode into disklabel(8), that hides a lot of details. But most of the interface remains 100% the same.
!
- Protocol 2 support in ssh(1) and sshd(8).
!
- Do not have /etc/netstart pass -E to ipf(8), since our kernel now enables it by default.
- Many more man page improvements. Aren't we pedantic?
!
- compat_linux(8) system call emulation for pread(2) and pwrite(2).
!
- Make ahc(4) do tagged queuing, and fix some locking bugs.
- Support root drive detection for G4 powermac.
!
- Add srandomdev(3) to libc.
!
- DSA key exchange for sshd(8) and friends, moving us much closer to protocol 2 support.
!
- Fix various flaws in the OpenSSL set of manual pages.
!
- an(4) driver supporting AiroNet 802.11DS cards.
!
- Repair some races and deadlocks in adw(4).
!
- Fix buf oflow in ed(1).
- Support USB Mass Storage devices.
!
- Make zic(8)'s -l option actually work.
!
- Some ppp(8) updates.
!
- Auto-detect size of seeprom for fxp(4), for newer cards.
!
- Some improvements in kerberos(1) man pages.
!
- DES and 3DES hardware acceleration for IPsec(4) working in hifn(4) driver.
!
- Run pod2man(1) on the OpenSSL pod documents, and carefully install them in the base system.
- Expose MDXTransform functions for MD5 and MD4.
!
- Permit wss(4) to work on irq 5.
!
- Implement compat_linux(8) rt_sigreturn() emulation.
- On the i386, enlarge pcic0 memory address space.
!
- Implement compat_linux(8) getcwd(3) emulation.
!
- IPsec(4) ingress ACL-checking is now on by default.
!
- sudo 1.6.3
- i386 PCI interrupt routing repair code (disabled by default, has lots of issues).
- Drivers for USB ethernet adapters.
- Sync USB.
!
- lynx 2.8.2
!
- Fix a number if IPsec(4) esp and ah related bugs introduced during the crypto splitout.
- Numerous man page link repairs, so that just about any part of the system has a matching man page.
- Make f_bsize signed.
!
- Support newer Qlogic isp(4) scsi cards.
!
- Support AMD 756 IDE controller in pciide(4).
!
- Add FNM_NOSYS to fnmatch(3) for XPG conformance.
!
- Flesh out mdoc.samples(7).
!
- Disallow pkg_delete(1) when the pkg_prefix is on a read-only filesystem.
!
- Handle expansion of @exec better in pkg_add(1).
!
- Initial support for DSA keys in sshd(8).
!
- In ssh(1), switch to raw mode only if we got a pty.
!
- Replace kernel timeout(9) mechanism with one which permits dynamic allocation of timeout structures.
!
- In fdisk(8), do not use BIOS geometry by default, a lot of newer BIOSs get upset when this is done with larger drives.
!
- Make script(1) exit with a proper (and documented) exit code.
!
- Fix AMD K6 mtrr(4).
!
- Fix overflow in ftp(1).
!
- Fix directory mishandlings in who(1).
!
- Fix overflow in ul(1).
!
- Fix modes for ch(4) and st(4) devices so that operator is more powerful.
!
- ray(4) supports the raytheon/webgear ieee 802.11 FH wireless ethernet.
!
- ahc(4) driver now supports 789x chipset based controllers (7892/9 not verified).
- Add SIOCGIFMTU/SIOCSIFMTU.
- Support for the uninorth PCI bridge on the G4 macs.
- bus_dma support in the powerpc port.
!
- apache 1.3.12 + mod_ssl 2.6.2
!
- OpenSSL 0.9.5
!
- Fix parsing of @-style commands in crontab(5) files.
!
- Make m4(1) compatible enough with GNU m4 to handle autoconf 2.13.
!
- Add ratecheck(9) API to the kernel.
!
- Quieten, secure, and improve ipv6(4) boot-time route setup.
!
- Cryptographic hardware services framework, first meant for use by IPsec(4).
!
- Fix interrupt handling issue in dc(4).
!
- Newer uvm(9) code.
- Prevent overflow in subr_extent code.
!
- Support FAT32 msdos partitions over 4GB.
- Many man page improvements.
!
- Disable suffix removal code in make(1), since it is buggy.
!
- Fix blink and underline attribute handling for new PC display mode.
!
- ncurses-5.0-20000311
- IPFilter 3.3.11
!
- Support more eisa ep(4) cards.
!
- Implement realtime signal routines in compat_linux(8).
- Disable K6 MTRR until it is fixed.
!
- Update rtadvd(8)
- Get rid of leading NULs in /kern/msgbuf.
- Disallow packets to malicious 6to4 prefixes.
- Fix radix tree mishandling bug in routing code.
!
- Add more gnu-compatible options to m4(1)
!
- Repair sub-shell execution handling in hostname.if(5)
- Reverse engineer crypto lockout function on the aeon crypto card.
!
- Fix file descriptor leak in compress(1)
!
- Fix a memory corruption bug in the IPsec(4) skipjack implementation.
!
- ncurses-5.0-20000304.
!
- Disallow root password guessing in sshd(8).
!
- grep(1) 2.4.1
- Multiple inclusion protection problem solution on the sparc.
!
- isakmpd(8) update.
!
- Add support for new signals to the compat_linux(8) emulation routines.
!
- Add 802.1Q support to tcpdump(8).
- OpenSSH 1.2.3 released.
!
- Fix a pipe close race in sshd(8).
!
- Fix a panic in compat_ibcs2(8) emulation code.
- Make P_tmpdir point to /tmp, not /var/tmp.
!
- Attempt to handle corrupt inetd.conf files better.
- Try to fix the uio hog problem.
!
- Fix STAT in ftpd(8) to be RFC959 compliant.
- Optimized kernel fdalloc()
!
- Add some missing compat_linux(8) emulation routines.
- Move kernel crypto code to /sys/crypto
!
- Many ppp(8) fixes.
- Some libc_r fixes.
!
- mg(1) version 2a added to the source tree, and we are fixing many things in it.
!
- Fix an entropy-robbing bug in the ssl(8) libcrypto.
!
- Change wicontrol(8) so that multiple parameters can be set at the same time.
!
- Add -m parameter to strings(1).
!
- Add getifaddrs(3).
- Permit enlarging of msgbuf on the various architectures.
- On sun4m machines, replace .{u,}{mul,div,mod} functions with faster versions using the new sun4m instructions. A very significant performance improvement.
!
- Add fseeko(3) and ftello(3) interfaces.
- Two TCP SACK fixes -- SACK now appears to be completely reliable.
!
- Optimize bridge(4) code by allocating less mbufs.
!
- Fix alignment fault in amd(8) on the alpha.
!
- Add support for ses(4) devices, and the sesd(8) tools for probing.
!
- Add support for 12160 (Ultra3) in isp(4).
!
- Buffer overflows in mopd(8)
- Complete hypersparc support.
- Link sparc boot and bootxx bootblocks at different addresses; repairs booting on the hypersparc.
!
- update to latest KTH kerberosIV 1.0
!
- Update to newer compile_et(1).
!
- Full support for serial console on the i386, see boot(8).
!
- Support PPPoE in tcpdump(8).
- Fix alignment problem for ancillary data; affected 64 bit machines.
!
- Do not call sleep(3) in rcmd(3).
- On sparc, avoid flushing unmapped memory from the cache in dvma_mapout().
- ipf 3.3.9
!
- Move smrsh(8) to /usr/libexec.
!
- Add traceroute6(8).
- Use extents instead of rmaps to manage sparc dvma space.
- Have extent_alloc_subregion() also handle an alignment offset.
!
- More fixes to xl(4) for non-MII cards.
!
- In sshd(8), move XAUTHORITY to a subdirectory, fixing security issues.
!
- Handle directly connected lines better in pppd(8).
!
- Y2K repairs in cvs(1).
!
- Let weak symbols take precedence over second hand symbols in ld(1).
!
- wx(4) driver supporting the Intel 82452 gigabit ethernet card.
!
- Support hundreds of interfaces in dhclient(8) and dhcpd(8).
- texinfo 4.0
- Split i386 memory <16MB into it's own freelist, permitting large memory machines to work better.
!
- New fhopen(2), fhstat(2), and fhstatfs(2) system calls to easier support userland filesystems.
!
- Support newer LVD models in the ncr(4) driver.
!
- gdt(4) driver for the ICP-Vortex RAID card series.
!
- Update to FreeBSD newfs_msdos(8), which can support hard drives too
- New OpenBSD art page.
!
- Updates to the lmc(4) device driver.
!
- uaudio(4) support.
!
- ti(4) also supports Farallon PN9000SX.
!
- ncurses-5.0-20000205.
!
- adw(4) now supports Advansys U2W scsi cards.
- Further sparc pmap improvements.
!
- Allow ssh-keygen(1) to be used for generating signatures of any ssh(1) control file.
- In sparc port, handle SM30 specially because it starts up with the cache running.
!
- import usbdevs(8).
!
- When handling an apm(4) suspend, power down pcmcia devices; when unsuspending, power them back up. Very nice.
!
- Rewrite makewhatis(8) in perl(1).
- Deal with empty path element in LD_LIBRARY_PATH variable.
- On i386 prevent overflow in computation of buffer cache limitation, thus supporting machines with lots of memory.
- Hardware encryption support added to wi(4) (the wavelan driver).
!
- Performance optimizations to m4(1).
!
- Fix a panic in nfsd(8).
!
- Have mkdir -m support sticky and setuid bits.
!
- Support -R flag in rtadvd(8).
!
- Without a subcommand, have atactl(8) assume that the "identify" command is implied.
!
- Workaround in ftp(1), for Y2K broken ftp servers that return 19100 for the year. Remind is this is here in the year 19098, ok?
- ipf 3.3.8
!
- Fix a pty close race in sshd(8).
!
- Arrange so that dhclient(8) does not update /etc/resolv.conf if no DNS information is found.
!
- isakmpd(8) update.
!
- Support 93C66 and 93C56 SEEPROM chips (used by more modern ahc(4) cards).
!
- Fix a number of bugs in fsplit(1).
!
- Use ed(1) in /etc/rc, since grep(1) is in /usr.
- i386 now runs libkvm instead of libkvm.old.
!
- Add a dmesg(8) alias to the install media.
!
- In gcc(1), add an i386 specific peephole optimization for stack adjustment.
!
- Fix some APM version 1.2 issues, thus making IBM Thinkpads work.
- On the i386, now use the memory map information supplied by the bootblocks.
!
- Use alloca(3) instead of malloc(3) in execl(3) and execle(3), so that they are vfork(2) safe.
!
- sudo 1.6.2p1
!
- Arrange so that sshd(8) does not do port forwarding until shell successfully starts.
- Repair a stupid cache-lockdown bug in the sparc pmap.
!
- Repair memory leak in freeaddrinfo(3).
!
- Significant code shrinkage in IPsec(4), as most AH and ESP code starts sharing more subfunctions.
!
- Enable ipv6 support in rsh(1), rlogin(1), rshd(8), and rlogind(8).
!
- Fix rcmd(3), iruserok(3), and ruserok(3) to be IPv6 capable, also add more address family independent routines: rcmd_af(3) and iruserok_sa(3).
- Handle MVME1x2 boards with only one ZS serial chip.
- Avoid some more cache flushes in the sparc pmap module.
!
- Handle memory shortage better in yacc(1), closing some memory leaks.
- Sparc pmap performance improved by optimizing some more pte table walks.
!
- isakmpd(8) update.
- Many more man page improvements.
!
- More getaddrinfo(3) improvements to further match RFC2553.
!
- Add MAC address filtering in the bridge(4) code.
!
- Fix timestamp bug in make(1).
!
- Apache 1.3.11 + mod_ssl 2.5.0 merge
- MVME328 scsi card support in mvme68k port.
- Portable code for handling architectures with backwards-running stacks, like hppa.
- Fix Y2K non-compliancy in amiga port's clock chip code.
!
- some minor repairs to grdc(6).
- MVME376 ethernet card support in mvme68k port.
- mvme68k and mvme88k ramdisk repairs.
!
- sudo 1.6.2.
!
- Make application mode arrow keys work in ksh(1).
!
- Protocol independence added to bindresvport(3).
- OpenSSH version 1.2.2 released.
!
- Lots of IPsec(4) pfkey improvements.
!
- Repair exception handling in gcc(1) i386 position independent code.
!
- ncurses-5.0-20000122
!
- Don't allow time to be set far forwards and thus wrap, and a warn for time reversing if securelevel(7) > 1.
!
- Some compat_sunos(8) emulation improvements, particularly for getdents.
- Various powerpc port fixes -- it is getting close to actually working well.
!
- Handle SIGINT failures in ssh(1)/scp(1)/cvs(1) better.
!
- Fix bugs in the robots(6), tetris(6), and grdc(6) games.
!
- Make pax(1)/tar(1)/cpio(1) deal with files larger than 2 GB.
!
- Deal with getcwd(3) returning NULL in at(1).
!
- Rename ip4.allow sysctl(8) to ipip.allow. This variable no longer controls any explicitly configured IP-over-IP tunnels.
!
- Deal with getcwd(3) returning NULL in the supfilesrv.
!
- DRIVER IMPROVEMENT: Intel fxp(4) cards with nsphy(4) could not negotiate and maintain 100mbit link. A source code patch is available.
!
- Fix a buffer overflow in the i386 bootblocks!
!
- Fix vi(1) recover script to use sysopen(), to avoid magic in perl open().
!
- Fix race condition in make(1) (only applies to make -j, which noone in OpenBSD ever uses).
!
- Reduce console loggin in sshd(8).
!
- Fix sshd -i.
- SECURITY FIX: Systems with procfs enabled and mounted contain a root hole due to a tricky exploit. A source code patch is available.
!
- Fix a possible NULL dereference in execve(2).
!
- gcc 2.95.2
!
- add rip6query(8).
- Many man page fixes.
!
- Change pcvt(4) so that all regular function key presses go to straight to the application.
!
- Avoid botches in ftpd(8) and mtree(8) introduced from blind replacement of getwd(3) with getcwd(3).
!
- Disable agent forwarding in ssh(1) protocol 1.3.
- Support for another gigabit ethernet card using the alteon chipset.
!
- Fix a garbage printout in ftpd(8).
!
- Error message repair in from(1).
!
- Fix fxp(4)+nsphy(4) problems.
!
- Tons more man(1) page repairs.
!
- Fix a bug in the pipe(2) system call.
!
- v6 support in fstat(1).
- Documentation improvements.
!
- Fix "traceroute -P 41" codepath blocked by inet6 import.
!
- Another fix improving on the earlier ld.so(1) version number fix.
!
- tcpdump(8) support for L2TP, Mobile IP, BGP, VLAN 802.1q, and INET6.
- ncurses-5.0-20000115
!
- Crank pms(4) delay to 4000 for another laptop that takes a long time.
- Make kernel know about the Coppermine CPUs.
- Special case: one PCI bridge device... which is not a PCI bridge at all.
- Handle SNAP encapsulated packets for the bridging blocknoip option.
- Improve sparc pte handling for performance.
!
- Show blackhole routes in route(8) and netstat(1).
- Fix a Y2001 bug in the hp300 boot code and kernel.
!
- Update the powerpc code. uvm(9) kernels do not work yet.
!
- Avoid touching the sdh register too often during atapi(4) device probe; some devices freak.
!
- More m4(1) fixes.
!
- Fix an obscure bug in ld(1) that caused it to treat directory names called "lib" differently.
!
- Y2K fix for a groff(1) macro.
!
- Remove gifconfig(8); replaced by syntax in ifconfig(8).
!
- Show problematic expressions in m4(1)'s expr error messages.
!
- Recursion depth control in gre(4), similar to what is in gif(4).
- Various cleanups are happening to the netipx codebase.
- Fix Promise Ultra/66 and SiS 5513 pciide support.
!
- blocknonip option in if_bridge and brconfig(8).
!
- pn(4) cards now use dc(4).
!
- More channel fixes in ssh(1).
- XFree86 3.3.6
!
- Handle glob() return values better in restore(8).
- Hifn 7751 is the same as the Invertex board, the aeon driver.
!
- Support command-execution in /etc/hostname.* files, using ! syntax.
!
- Handle the bootpath properly in sbus isp(4).
!
- IPsec(4) ingress control.
- Merge IPV6 into the GENERIC kernel. As far as the kernel is concerned, we are ipv6 ready now. However, lots of userland changes remain..
!
- Reduce recursion in gif(4).
- Support Davicom DM910x in if_dc.
!
- Numerous IPsec(4) fixes and enhancements.
- Allow aeon driver to match Hifn 7751.
- Fix printing of SAs in route.
!
- Add ESP/AH statistics to netstat(1).
- Fix to use network byte order in several places.
- Allow booting from Qlogic isp cards.
- Several IPsec-related sysctls added.
- Various termtypes fixes.
!
- ncurses-5.0-20000108
- Add fake dcphy(4).
!
- In UKC, add a timezone command.
!
- Handle fxp(4) using iophy(4); broken in 2.6 release.
!
- Support LBA-mapped extended partitions in fdisk(8).
!
- Use arc4random(3) in IPV6 code.
!
- Import of gre(4) code.
- Early check for udp destination port 0.
!
- Newer raidframe code.
!
- userland ppp 2.26.
- Make NFS swap devices work once again.
- In the mvme68k port, add support for the '060 based MVME177 card.
!
- Make some macros in m4(1) special.
!
- Improve column handling in ls(1).
!
- V6 support in systat(1).
!
- Y2K FIX: The at(1) command was unable to parse some kinds of dates. A source code patch is available.
!
- Improve sleep(1) for out-of-range values.
!
- Do not use kvm snooping in rtsold(8).
!
- Fix ftp(1) URL support accidentally broken by KAME.
!
- Fix a bug in smtpd(8).
- Make ssh IPV6 clean. KerberosIV only works on a v4 connection.
- Fix mbuf out-of-bounds write which caused great grief for NFSv2 in an INET6 kernel.
!
- Add rmoption/rmoptions command to config(8), thus permitting a config file to include GENERIC and then remove things.
!
- Various small improvements and fixes to ssh(1).
!
- Fix pthreads(3) handling on the sparc.
- Using weak symbols, support a real libpthread.
!
- The mknod(8) -m option should ignore the umask.
- More man page cleanups, as always.
- Y2K FIX: A minor problem; the sparc eeprom(8) command is not Y2K compliant. A source code patch is available.
- Permit midi compilation without other audio code.
!
- Y2K FIX: A minor problem in the logging support for the adduser(8) command. A source code patch is available.
!
- In config(8), permit multiple maxuser definitions. Newest overrides older ones.
!
- Use the dc(4) driver instead for a few other tulip-like cards.
!
- Change libc syslog() code to try to reopen the socket if a send fails. This handles the case of a restarted syslogd(8) better.
!
- Correct SIGTERM handling in ssh-agent(1).
- ncurses-5.0-20000101
!
- Permit non-IPsec(4) kernels to compile.
!
- Improve argument handling in wicontrol(8).
!
- Various fixes to LKM(4) unloading.
- Make ld/ld.so search all directories before accepting the best version of a shared library.
- Do in6_if_up() at splsoftnet(), permitting drivers to get interrupts during the processing of their multicast reprogramming.
!
- Provide sysctl(8) net.inet6.icmp6.nodeinfo to permit admin to enable icmp6(4) node information query if so desired.
- Support various kinds of inet6 entries and in /etc/netstart as well.
- Improve handling of signed math in NFS kernel code.
!
- Parse /etc/sysctl.conf earlier in /etc/rc.
- Move sysctl to /sbin.
- For other architectures, also check db_panic in kdb_trap().
- Remove PIC versions of libarch and libresolv from the distribution.
- Correctly copy pkthdr in m_split().
- Fix udp multicast option handling.
- DRIVER IMPROVEMENT: Fix mii autoselect support for 3c900b. A source code patch is available.
!
- Fix signed errors in df(1).
!
- Repair netstat -ss.
!
- Optional swap encryption support in uvm; see new options(4) page.
!
- Do not strip international characters in fmt(1).
- Initialize lo0 for ipv6 automatically.
!
- Avoid a memory leak in telnet(1).
- Honour the ddb.panic sysctl better.
!
- Enable scopeid hack in ifconfig(8), ping6(8), and netstat(1).
- Replace NRL get{addr,name}info() with KAME get{addr,name}info() in libc.
- Fix a terminfo problem relating to unset capabilities.
!
- More ISA PnP NE2000 clones - see ne(4)
- TCP new reno
- Fix IP multicast kernel panic
!
- Upgrade ipf(4), now version 3.3.6
!
- Major cleanup of make(1)
!
- 3c450-TX HomeConnect, see xl(4).
!
- Add Qlogic 1240/1280 support to isp(4).
!
- Update curses(3) to ncurses-19991218.
!
- Speed up blowfish(3) encryption by > 20%.
!
- More ipf(8) changes. Avoid rw_enter panic, coredumps when processing rules.
- Preliminary token ring support.
!
- Continuing ssh(1) improvements.
!
- Add srcsa, dstsa, clearsa to ifconfig(8)
!
- New ioctls for binding enc(4) interfaces when bridging.
!
- Yet more make(1) cleanup.
!
- Preserve file flags in mv(1).
!
- Added the gif(4) interface for tunneling IPv4/IPv6. See gif(4), gifconfig(8).
- Add more PCMCIA NE2000 devices.
!
- Fix and re-enable TCP SACK code. Eliminate TCP_NEWRENO. See options(4).
- Continuing IPV6 improvements.
!
- Print ipv6 addresses correctly IPsec(4) flows. See netstat(1), route(8).
!
- ipsecadm(8) now accepts ipv6 addresses.
- Improve timeout handling for some ATAPI devices.
!
- Add man pages for icmp6(4) and ip6(4)
!
- traceroute(8) fixes. Add -c, -I. Fix -P.
- Fix multicast kernel panic in ip_output.
- Add forward reference for sockaddr to netinet/in.h
!
- Some game fixes: fortune(6) and robots(6).
!
- More make(1) cleanup.
- Various IPV6 changes.
!
- ipmon(8) -F now works properly.
!
- Import of IPFilter 3.3.5. See ipf(8).
!
- Long overdue make(1) cleanup.
!
- ipf(8) can now use interface names.
- Add support for Qlogic 1240 and 1280.
- Preliminary awi driver code.
- Fix privilege error in wi(4) driver.
!
- Replace pn(4) driver with dc(4).
!
- Overflows in at(1), ar(1), cdio(1).
!
- Import of IPFilter 3.3.4. See ipf(8).
- Changed termcap providers
!
- Various fixes to hunt(6).
- TI TNETE2101 PHY
!
- Fix dlfcn(3) prototypes
!
- Sync awk(1) with June 6, 1999 version
!
- New dc(4) driver for DEC/Intel 21143 and clones
!
- Don't use stdio for getpass(3).
- Update of PHY subsystem
- Various sparc and i386 pmap fixes for UVM
!
- Sundance ST201 Ethernet from FreeBSD. See ste(4)
- IPsec cleanup
!
- Cleanup of make(1).
- Lots of UVM work
!
- MFS unmount race fixes
!
- Add bindresvport_af(3) and rresvport(3) APIs to libc.
!
- Updated curses(3) to ncurses-19991211
- Overflows in crunchgen
!
- Fix chpass(1) temp file handling
- Various soft update fixes
- Integration of KAME IPv6
!
- Features added to find(1).
!
- Fixes to eap(4) driver
!
- Overflows is split(1), jot(1), ssio, telnet(1), file(1).
!
- SiS 900/7016 Ethernet from FreeBSD. See sis(4)
!
- Tape support and major code changes to atapiscsi(4).
- The third ssh jumbo patch is now available. Numerous (non-security) additions/changes have been made to OpenSSH since the OpenBSD 2.6 release. A jumbo patch is available which adds many features.
- The second ssh jumbo patch is now available. Numerous (non-security) additions/changes have been made to OpenSSH since the OpenBSD 2.6 release. A jumbo patch is available which adds many features.
!
- Some overflows in patch(1).
!
- Buffer overflow in dnsquery(1).
!
- Buffer overflow in error(1).
!
- Fix a buffer overflow in dhclient(8).
!
- Fix two crashes in awk(1).
!
- Fix off-by-one in apply(1).
!
- Fix bug in pr(1).
- Make soft updates mostly work with UVM.
- SECURITY FIX: The USA version of the ssl library package, called sslUSA26, contained buffer overflows. A binary patch is available for people who installed before December 3.
- Remove ctm(1) from the src tree -- look for it in ports now.
- libkvm.old hacks for UVM.
!
- Fix utmp handling in ftpd(8), for when running in daemon mode.
!
- More m4(1) fixes.
!
- Fix append keyword in dhclient(8).
!
- Buglet in sort(1).
- DPT SmartCache III/IV SCSI PCI/EISA driver.
!
- mkisofs 1.11.3
!
- Fix mangled files for put command in ftpd(8).
!
- RELIABILITY FIX: Be more careful in poll(2). A source patch is available.
- ncurses-5.0-19991127
- Enable TI16750 UART support.
- driver for ISA hostess 4-channel serial card.
- Import ssh-askpass into our X11 src tree.
- For i386: Winchip c6 TSC is broken, ignore it.
!
- Fix descriptor leaks and potential double fclose() calls in skey(1) library code.
!
- Correct icmp(4) packet length in ipmon(8).
!
- Remove unused functionality from the i386 pcvt(4) driver.
- Allow machine-dependent code to set the PAGE_SIZE constant, and set it in MD code if possible -- performance improvement.
!
- new pthreads(3) code.
!
- Parsing error fix to calendar(1).
!
- Some more m4(1) fixes.
!
- Set SO_REUSEADDR and SO_LINGER on forwarded ports in ssh(1).
- SECURITY FIX: Limit newaliases run to root and trusted users. A source patch is available.
!
- SSH_ASKPASS support in ssh-add(1).
!
- Numerous ssh(1) and sshd(8) improvements... too many to mention.
!
- Newer version of the isp(4) driver.
!
- Fix a bug in rarpd(8).
- Add support for SIGIO to lms(4), pms(4), and mms(4).
- Fix two bugs in info(1).
- select on pipes was broken, and occasionally someone would notice it (in particular rsync).
!
- Use mkstemp(3) in crontab(1).
!
- Improve egcs performance.
!
- Add memconfig(8).
!
- Add mtrr(4) support from freebsd.
!
- SSH_CMSG_MAX_PACKET_SIZE support in sshd(8).
!
- Improve whois(1) even more.
- Many man page fixes.
!
- sudo 1.6 (BSD licenced now!)
!
- Fix more m4(1) bugs.
!
- In scp(1), do not display banner if process is in the background.
!
- Permit kernel to compile without FFS once again.
- More links to man pages.
!
- Bug fixes to rl(4) and tx(4) driver.
!
- More ATAPI disk fixes (may come as a patch file later).
!
- Other misc ssh(1) improvements.
!
- RSA key fingerprints in the ssh(1) commands.
!
- Do ANSI cursor save/restore in i386 pcvt(4) driver.
!
- Fix more m4(1) bugs; patch for this problem is included in previous m4 errata entry.
- A bit more playing around in sshd to deal with the broken key sizes that Datafellows ssh gives.
!
- Honour ddb.console in the mac68k port.
- Fix retransmission problem in TCP.
!
- Improve whois(1) significantly to use *.whois-servers.net.
- In lots of daemons, do not syslog getpeername complaints.
!
- In ksh(1), quote metacharacters when completing filenames.
!
- Fix a signal race crash in ksh(1).
!
- link window(1) with -locurses.
!
- top(1) should use stathz, not hz, for calculating process run times.
- Shrink the puc(4) dmesg output.
!
- Add OSS audio support to the BSD/OS emulation.
- A kernel reliability fix for the alpha. A patch is available.
- A kernel reliability fix for all m68k architectures. A patch is available (which all m68k architectures share).
- Numerous (non-security) additions/changes have been made to OpenSSH since the OpenBSD 2.6 release. A jumbo patch is available which adds many features.
- A kernel reliability fix for the sparc. A patch is available.
!
- Counter overflow fix to scp(1).
- Merge dvdio.h support into cdio.h, and cleanup various unportable bits.
!
- Various other ssh(1) cleanups.
!
- Print all bad options in sshd(8) and ssh(1) before exiting with a failure.
!
- sshd(8) now has a IgnoreUserKnownHosts flag.
!
- Optionally run a command in newsyslog(1), instead of sending a signal.
!
- Some make(1) fixes.
!
- Improve dhcp integration into the install media.
!
- Logging cleanup of ssh(1).
- Have sshd check the user's personal ~/.ssh/known_hosts file.
- NOTE: OpenSSH does not have the ssh 1.2.27 rsa bug.
- Install a shared libperl.
- Fix m4, accidentally broken in 2.6. A patch is available.
- Users should not be able to change the media configuration of interfaces. A patch is available.
!
- Add strtok_r(3).
- newsyslog race condition fixes. A patch is available.
!
- Various make(1) fixes.
- screen blanker code for the amiga.
!
- Default network name in wi(4) is "", not "ANY".
- Start of DVD support.
!
- New sf(4) driver supports Adaptec "StarFire" AIC6915-based Ethernet PCI cards.
!
- Numerous more ssh(1) and sshd(8) cleanups.
- Slow down ATAPI IDENTIFY (final critical fix which shipped in 2.6).
- Another critical i386 memory allocation fix (shipped in 2.6).
- Critical brooktree driver fix (shipped in 2.6).
!
- Fix some more atapi bugs (shipped in 2.6).
!
- Fix byte order bugs in the new wdc/atapi code.
- Sparc uses UVM by default now.
!
- Allow rarpd(8) to work on aliased interfaces.
!
- Support multiple enc(4) interfaces.
!
- Reliability fixes for the ATAPI code (shipped in 2.6).
!
- New driver: al(4) supports the ADMtek AL981/AN985 PCI ethernet cards.
!
- Various other ssh(1) and sshd(8) cleanups.
- Add ethernet-IP encapsulation.
!
- In ssh, use libssl(8) md5 routines instead of our libc routines.
!
- Disassociate interfaces from ipnat(8) after they've been removed from the interface list.
- Make ASYNC pipes capable of generating SIGIO.
- Emulate FreeBSD F[GS]ETOWN.
!
- Fix some further ARP problems in bridge(4).
!
- Fix scp(1) counters for > 1 hour.
!
- Support LMC1200 in lmc(4).
!
- Repair multicast routing description block in afterboot(8).
!
- Support missing tty flags in stty(1).
!
- libkeynote update.
- Support UVM throughout userland.
!
- Support for puc(4) (PCI serial/parallel cards).
- Make disklabel.h safe for C++ use.
!
- Use reference-copies of the mbuf in bridge(4) code again, instead of full copies.
!
- Make ssh print the correct remote version number.
!
- Make ssh(1) compile faster by using a library.
!
- In ti(4), use bus_dma routines instead of uvm_page_alloc_contig.
- Cleanup i386 disktab.
--- 80,816 ----
- 2.7 source tree frozen.
- Buffer overflow fix to xlockmore(1).
!
- Fix kerberos slave server startup.
!
- Fix a pkg_add(1) bug in %f handling.
!
- OpenSSH is now at version 2.1.
- Handle \ escapes in real ssh key format files.
!
- Fix a X11 forwarding draining bug in sshd(8).
- Be compatible to various bugs in various other real ssh versions.
!
- Handle very large mbuf chains in hifn(4).
!
- Complain about invalid ciphers in ssh(1).
!
- Fix 12 hour handling in leave(1).
- Fix a timeout queue crash.
- Various nice tweaks to the install script for 2.7.
!
- In ppp(8), correct a bad bug in m_prepend().
- Support sparc tape installs.
!
- Work around a sysctl(3)-based kvm(3) vs exit(3) race.
!
- Fix the same basic ip timestamp bug in ipf(4).
!
- On the ip(4) input path, avoid unaligned accesses for strangely placed ip timestamp options.
- Fix resource limit race at exit time, if accounting is enabled.
!
- Fix inet6(4) pcmcia(4) detach.
!
- Support all ServerWorks and 451NX pchb(4) machines.
!
- Many fixes to user(8).
!
- Repair padding a uuencode stuff in sshd(8).
- Do not support DMA on PCTECH RZ1000, its dma support is fundamentally broken.
- Undo a broken i386 pmap fix.
!
- Fix IEEE underflow in ps(1), affected 68060 machines with precise exceptions enabled by default.
!
- Fix context memory sizing for various models of static ram hifn(4) cards.
!
- dhclient(8) support for the hp300 ramdisk.
!
- Improve mountd(8) behaviour for unresolveable hosts.
!
- Add DSA/SSH2 information to the ssh(1), sshd(8), and ssh-keygen(1) manual pages.
!
- Improve key generation in vpn(8).
!
- Document our new IPsec(4) bridge(4) stuff.
!
- New packages(7) man page.
!
- Various isakmpd(8) updates.
!
- Install isakmpd(8) sample files.
!
- Correct proctitle updating in sshd(8).
!
- Change pmax dc driver to dz(4), to avoid name conflict withdc(4).
!
- SECURITY FIX: Do not use an undocumented semconfig(2) system call in ipcs(1), in fact, remove the system call altogether. A source code patch is available.
!
- More mount(8) tweaks for dealing with weird paths.
!
- Fix more pkg_add(1) bugs.
- Support another RCC ServerWorks PCI host bridge.
!
- sshd(8) now has a pidfile.
!
- Better file descriptor handling in sshd(8).
!
- buf mishandling in ed(1).
- A fix for mandatory cache sun4m architectures like the SM71 and SM81.
!
- Fix a race in scp(1).
- ipf 3.3.13.
!
- Prettier warnings from telnet(1) if bad port names are given.
!
- Add emulation for memcpy(3) and such to i386 for non-optimized kernel builds.
!
- Add OPENDEV_BLCK flag to opendev(3).
!
- Repair groff(1) mkstemp(3) use.
!
- Fix some perl 5.6.0 buglets.
!
- Use more perl 5.6.0 feature in makewhatis(8) for greater security and reliability.
- In the /etc/daily file cleaner, prune at /.X11-unix and ssh-* directories.
!
- In sshd(8), check for keysize errors better.
!
- On the amiga, recognize Linux ados(8) disk labels.
!
- Fixes to the ray(4) driver.
!
- Fix -H option in sudo(8).
!
- Disable pcmcia(4) handling of non-CIS cards, since there are many bugs in it.
- Document many afs(4) configuration files.
!
- Fix a modify-after-free bug in tcp(4).
!
- Attempt to have ld(1) and ld.so(1) deal better with C++ shared libraries on
a.out architectures (i386, m68k, sparc...).
!
- Document what sendmail(8) now does on port 587.
!
- Deal with more non-compliant PHY setups in mii(4).
!
- cmpci(4) driver for C-Media CMI8x38 Audio Chip present on several motherboards.
!
- Support ext2fs properly.
!
- ssh(1), sshd(8), and companions now support SSH 2 protocol as well as SSH 1 protocol! To properly use this, you want to make sure you update your /etc/rc(8), /etc/netstart, and /etc/rc.conf(8). Or just test the new snapshot...
!
- Various additions and improvements in tcpdump(8).
!
- libpcap 0.5.
!
- Support jumbo frames in the fxp(4) models which support it.
!
- Add support for the RCC ServerWorks pchb(4) which has additional pci(4) bridges on it. Huge PC's with 6+ pci busses now work fine.
!
- On the i386, fix an errata relating to the Intel 82443BX pchb(4).
!
- Various changes related to vlan(4) support.
!
- Add a sysexits(3) man page.
!
- getaddrinfo(3) and getnameinfo(3) improvements, repairs, and greater care.
- Start of the vax port resurrection.
- Fix more i386 isadmaattach bugs. At least 2GB of memory on an i386 now works.
- Avoid divide by zero in igmp networking code.
!
- In mail(1), make "new" count after an "inc" command reflect the new messages, as in SunOS.
!
- ktrace(2) no longer follows symbolic links.
!
- Repair adosfs(8).
!
- The damned hifn(4) always dealing with aligned data causes even more of a fuss.
!
- Repair a few hifn(4) bugs that slipped in recently.
!
- Fix IPsec(4) for big-endian machines again.
!
- Omit RC5 from ssl(3).
!
- userinfo(8), userdel(8), useradd(8), groupmod(8), usermod(8), groupdel(8), groupadd(8), and groupinfo(8) commands added.
!
- mii(4) detach support, needed by xe(4).
!
- Fix promiscuous mode in xe(4).
!
- Fix order of interrupt disabling for pcmcia(4) disabling; much more reliable.
!
- Wait a bit longer after enabling pcmcia(4) cards; more pcmcia(4) cards now work.
- Fix dump calculations in the i386 kernel crash dump code.
!
- More careful dmesg(8) handling in the install script.
!
- pcmcia(4) ep(4) now supports 3C1 and 3CCFEM556BI.
!
- Repair a bug in fdalloc() that caused a panic in dup(2). This bug was introduced by the recent file descriptor allocation optimizations.
- Support DOSPTYP_EXTENDL partitions in the kernel disklabel reader.
!
- In ld(1), avoid duplicates in search path.
!
- Support RFC2732 IPv6 address literal URLs in ftp(1).
!
- Improve makewhatis(8) again, using new parts of perl(1) 5.6.0.
!
- Fix a bug in at(1).
!
- Add -keyfile and -authkeyfile options to ipsecadm(8).
- Significant manual page improvements, as is usual just before a release.
!
- Use fgetln(3) instead of fgets(3) in mail.local(8), and thus avoid header mangling.
!
- Support for /etc/rc.conf.local, as documented in rc.conf(8).
!
- https support in lynx(1).
!
- Add CPAN File::Temp for perl(1) versions of mkstemp(3) and such.
!
- Fix the vi(1) recover script to be safe for multiuser running (needed O_NOFOLLOW).
!
- Move apm(4) into a kernel thread, so that filesystem syncing is less likely to block and cause panics. Suspending just got a lot more reliable.
!
- For open(2), support O_FSYNC better.
!
- For open(2), add a O_NOFOLLOW flag for dealing with symbolic links. This should not be used by generic software -- only use this for very rare and specific problems.
!
- traceroute(8) gets a new option, -f skips early node checks.
- Fix "freeing free block" panics.
!
- Support /etc/resolv.conf.tail, as documented in dhclient-script(8).
- Rewrite uio hog.
!
- Do not abuse malloc(9) for small structures inside ktrace(2).
!
- Add pread(2), pwrite(2), preadv(2), and pwritev(2) system calls.
!
- In fdisk(8), favor BIOS geometry over physical geometry, fixing numerous problems with larger disks.
!
- Split fxp(4) and dc(4) for pci(4) and cardbus(4).
!
- In ktrace(2), if user does a large IO operation, split the loggin to avoid kmem(4) starvation.
!
- Make nfsstat(1) on a live system use sysctl(3) instead of kvm(3) snooping.
!
- Set mii(4) parameters for all variants of xl(4), cardbus(4) models.
!
- scsi cd(4) detach is now possible.
- Do even more scsi device locking via common routines.
!
- In make(1), report errors with a Makefile line number, making large Makefile debugging much easier.
!
- Significantly cleanup the isa(4), pci(4), isapnp(4), and related manual pages, making it easier to see what we currently support.
- Deal with byte-order challenged Compaq laptops.
!
- Fix memory leaks in sshd(8).
!
- Numerous modifications for pkg_add(1) and companions, to better import various new styles of packages..
!
- Fix even more braindamaged random device mis-handlings in ssl(3).
!
- Make kvm(3) on the i386 understand the new core dump format.
!
- In script(1), propagate window size changes to slave.
- tzcode2000c.
!
- Permit i386 kernel to compile without pccom(4) or com(4) drivers.
!
- After scp(1) completes, replace progress bar ETA counter with a total elapsed time.
!
- Fix more random device mis-handlings in ssl(3).
!
- Fix exit code in du(1).
!
- Fix sync(2) to actually sync all filesystems.
!
- urio(4) driver for Diamond Multimedia RIO 500.
- xlockmore 4.16.
!
- OpenSSL 0.9.5a.
!
- Change window(1) to use curses(3) instead of ocurses.
- Do some repair on sys/queue.h.
!
- Add colour support to pcvt25 termcap(5) entry.
!
- In window(1), do not assume that termcap(5) entries start with 2 character short names.
!
- Repair random(4) for the alpha.
!
- In ssh(1), check payload for (illegal) extra data.
- make "option TCPDEBUG" kernel compile.
- Initialize the bus dma tag for EISA.
!
- Use getifaddrs(3) instead of SIOCGIFCONF in ifconfig(8), rarpd(8), etc.
!
- ifconfig(8)'s -a flag had been changed to be the same as -A. Fix that.
!
- Have ahc(4) support Adaptec 2930U2.
!
- Revert to up-to-date ipf(4) man pages, but ugly as sin. Everyone remind kjell to finish this job, ok?
- When fragmenting a packet in ip_output(), inherit the multicast and broadcast flags so that link layer can choose the right address.
!
- Use getifaddrs(3) in libpcap.
!
- Make ahc(4) support Adaptec 2930U2 controller.
!
- Match netsec hifn(4) 7751 card.
!
- neo(4) is a Neomagic 256AV/ZX audio driver.
- Unmute ac97 mixers by default.
- ipf 3.3.12a.
!
- ssh protocol 2 is now usable.
!
- Add Protocols and Cipher keywords to ssh(1) and sshd(8).
!
- compat_linux(8) emulation for setfsuid() and getfsuid().
!
- If realpath(3) fails, just use old name in umount(8).
!
- Add 802.11 nwid and mtu commands to ifconfig(8).
!
- More bug fixes to hifn(4). Hifn support is now fully working.
!
- Some fixes to route6d(8).
!
- Use getifaddrs(3) instead of SIOCGIFCONF in ypbind(8).
!
- Do not lose file descriptors in ftpd(8).
!
- In random(4), first true random number source, based on intel 82802 firmware hub embedded true random number generator.
!
- In random(4), make it use more sources for an entropy; make playing .mp3s produce entropy, big time, big time.
- Improve range checking in timeouts.
!
- Thread repair in malloc(3).
!
- Various bug fixes to hifn(4), which is now even more reliable.
!
- Fix another m4(1) bug.
!
- PCI an(4) driver.
!
- Repair spl bug in bridge(4).
!
- wdc(4) and wd(4) detach logic, but missing scsi(4) disconnect for atapi(4).
!
- Permit address setting on enc(4) interfaces, and various other tweaks leading to better bridge(4) integration.
- Add various autoconfiguration child detach logic.
- Rewrite and commonize disk driver locking which varied between drivers.
!
- After the recent revamp of icmp(4) reply byte order, correct one last thing: Pass ip_off and ip_len correctly.
!
- groff 1.15
!
- In cd(4), do not trust the TOC as much when reading the disklabel.
!
- Fix umass(4) so that it handles some non-compliant devices.
!
- Modify the scsi(4) subsystem so that it can attach without polling.
!
- Arrange so that IFF_LINK0 on enc(4) means IP-in-IP instead of Ethernet-in-IP.
!
- Initial check-in of cardbus(4) support. xl(4) works on cardbus at the moment.
- Set our status to 2.7-beta.
!
- Update ppp(8).
!
- Update isakmpd(8).
!
- sendmail 8.10.1
!
- sendmail 8.10.0: You must put your /etc/sendmail.cf file in /etc/mail/sendmail.cf now.
!
- perl 5.6.0
!
- Update to isp(4), mostly for Fibre Channel.
!
- Seed perl(1) srandom() /dev/arandom, to avoid losing a lot of entropy.
- Some kernel functions were eating a little bit too much entropy.
- ipf 3.3.12
!
- ahc(4) now supports AHA-29160 and other Ultra160 variants.
!
- USB umodem(4) support.
!
- USB umass(4) driver. Works with various devices, but does not support disconnection yet.
!
- Support hmac processing in hifn(4).
!
- ncurses-5.0-20000401
!
- Put an expert mode into disklabel(8), that hides a lot of details. But most of the interface remains 100% the same.
!
- Protocol 2 support in ssh(1) and sshd(8).
!
- Do not have /etc/netstart pass -E to ipf(8), since our kernel now enables it by default.
- Many more man page improvements. Aren't we pedantic?
!
- compat_linux(8) system call emulation for pread(2) and pwrite(2).
!
- Make ahc(4) do tagged queuing, and fix some locking bugs.
- Support root drive detection for G4 powermac.
!
- Add srandomdev(3) to libc.
!
- DSA key exchange for sshd(8) and friends, moving us much closer to protocol 2 support.
!
- Fix various flaws in the OpenSSL set of manual pages.
!
- an(4) driver supporting AiroNet 802.11DS cards.
!
- Repair some races and deadlocks in adw(4).
!
- Fix buf oflow in ed(1).
- Support USB Mass Storage devices.
!
- Make zic(8)'s -l option actually work.
!
- Some ppp(8) updates.
!
- Auto-detect size of seeprom for fxp(4), for newer cards.
!
- Some improvements in kerberos(1) man pages.
!
- DES and 3DES hardware acceleration for IPsec(4) working in hifn(4) driver.
!
- Run pod2man(1) on the OpenSSL pod documents, and carefully install them in the base system.
- Expose MDXTransform functions for MD5 and MD4.
!
- Permit wss(4) to work on irq 5.
!
- Implement compat_linux(8) rt_sigreturn() emulation.
- On the i386, enlarge pcic0 memory address space.
!
- Implement compat_linux(8) getcwd(3) emulation.
!
- IPsec(4) ingress ACL-checking is now on by default.
!
- sudo 1.6.3
- i386 PCI interrupt routing repair code (disabled by default, has lots of issues).
- Drivers for USB ethernet adapters.
- Sync USB.
!
- lynx 2.8.2
!
- Fix a number if IPsec(4) esp and ah related bugs introduced during the crypto splitout.
- Numerous man page link repairs, so that just about any part of the system has a matching man page.
- Make f_bsize signed.
!
- Support newer Qlogic isp(4) scsi cards.
!
- Support AMD 756 IDE controller in pciide(4).
!
- Add FNM_NOSYS to fnmatch(3) for XPG conformance.
!
- Flesh out mdoc.samples(7).
!
- Disallow pkg_delete(1) when the pkg_prefix is on a read-only filesystem.
!
- Handle expansion of @exec better in pkg_add(1).
!
- Initial support for DSA keys in sshd(8).
!
- In ssh(1), switch to raw mode only if we got a pty.
!
- Replace kernel timeout(9) mechanism with one which permits dynamic allocation of timeout structures.
!
- In fdisk(8), do not use BIOS geometry by default, a lot of newer BIOSs get upset when this is done with larger drives.
!
- Make script(1) exit with a proper (and documented) exit code.
!
- Fix AMD K6 mtrr(4).
!
- Fix overflow in ftp(1).
!
- Fix directory mishandlings in who(1).
!
- Fix overflow in ul(1).
!
- Fix modes for ch(4) and st(4) devices so that operator is more powerful.
!
- ray(4) supports the raytheon/webgear ieee 802.11 FH wireless ethernet.
!
- ahc(4) driver now supports 789x chipset based controllers (7892/9 not verified).
- Add SIOCGIFMTU/SIOCSIFMTU.
- Support for the uninorth PCI bridge on the G4 macs.
- bus_dma support in the powerpc port.
!
- apache 1.3.12 + mod_ssl 2.6.2
!
- OpenSSL 0.9.5
!
- Fix parsing of @-style commands in crontab(5) files.
!
- Make m4(1) compatible enough with GNU m4 to handle autoconf 2.13.
!
- Add ratecheck(9) API to the kernel.
!
- Quieten, secure, and improve ipv6(4) boot-time route setup.
!
- Cryptographic hardware services framework, first meant for use by IPsec(4).
!
- Fix interrupt handling issue in dc(4).
!
- Newer uvm(9) code.
- Prevent overflow in subr_extent code.
!
- Support FAT32 msdos partitions over 4GB.
- Many man page improvements.
!
- Disable suffix removal code in make(1), since it is buggy.
!
- Fix blink and underline attribute handling for new PC display mode.
!
- ncurses-5.0-20000311
- IPFilter 3.3.11
!
- Support more eisa ep(4) cards.
!
- Implement realtime signal routines in compat_linux(8).
- Disable K6 MTRR until it is fixed.
!
- Update rtadvd(8)
- Get rid of leading NULs in /kern/msgbuf.
- Disallow packets to malicious 6to4 prefixes.
- Fix radix tree mishandling bug in routing code.
!
- Add more gnu-compatible options to m4(1)
!
- Repair sub-shell execution handling in hostname.if(5)
- Reverse engineer crypto lockout function on the aeon crypto card.
!
- Fix file descriptor leak in compress(1)
!
- Fix a memory corruption bug in the IPsec(4) skipjack implementation.
!
- ncurses-5.0-20000304.
!
- Disallow root password guessing in sshd(8).
!
- grep(1) 2.4.1
- Multiple inclusion protection problem solution on the sparc.
!
- isakmpd(8) update.
!
- Add support for new signals to the compat_linux(8) emulation routines.
!
- Add 802.1Q support to tcpdump(8).
- OpenSSH 1.2.3 released.
!
- Fix a pipe close race in sshd(8).
!
- Fix a panic in compat_ibcs2(8) emulation code.
- Make P_tmpdir point to /tmp, not /var/tmp.
!
- Attempt to handle corrupt inetd.conf files better.
- Try to fix the uio hog problem.
!
- Fix STAT in ftpd(8) to be RFC959 compliant.
- Optimized kernel fdalloc()
!
- Add some missing compat_linux(8) emulation routines.
- Move kernel crypto code to /sys/crypto
!
- Many ppp(8) fixes.
- Some libc_r fixes.
!
- mg(1) version 2a added to the source tree, and we are fixing many things in it.
!
- Fix an entropy-robbing bug in the ssl(8) libcrypto.
!
- Change wicontrol(8) so that multiple parameters can be set at the same time.
!
- Add -m parameter to strings(1).
!
- Add getifaddrs(3).
- Permit enlarging of msgbuf on the various architectures.
- On sun4m machines, replace .{u,}{mul,div,mod} functions with faster versions using the new sun4m instructions. A very significant performance improvement.
!
- Add fseeko(3) and ftello(3) interfaces.
- Two TCP SACK fixes -- SACK now appears to be completely reliable.
!
- Optimize bridge(4) code by allocating less mbufs.
!
- Fix alignment fault in amd(8) on the alpha.
!
- Add support for ses(4) devices, and the sesd(8) tools for probing.
!
- Add support for 12160 (Ultra3) in isp(4).
!
- Buffer overflows in mopd(8)
- Complete hypersparc support.
- Link sparc boot and bootxx bootblocks at different addresses; repairs booting on the hypersparc.
!
- update to latest KTH kerberosIV 1.0
!
- Update to newer compile_et(1).
!
- Full support for serial console on the i386, see boot(8).
!
- Support PPPoE in tcpdump(8).
- Fix alignment problem for ancillary data; affected 64 bit machines.
!
- Do not call sleep(3) in rcmd(3).
- On sparc, avoid flushing unmapped memory from the cache in dvma_mapout().
- ipf 3.3.9
!
- Move smrsh(8) to /usr/libexec.
!
- Add traceroute6(8).
- Use extents instead of rmaps to manage sparc dvma space.
- Have extent_alloc_subregion() also handle an alignment offset.
!
- More fixes to xl(4) for non-MII cards.
!
- In sshd(8), move XAUTHORITY to a subdirectory, fixing security issues.
!
- Handle directly connected lines better in pppd(8).
!
- Y2K repairs in cvs(1).
!
- Let weak symbols take precedence over second hand symbols in ld(1).
!
- wx(4) driver supporting the Intel 82452 gigabit ethernet card.
!
- Support hundreds of interfaces in dhclient(8) and dhcpd(8).
- texinfo 4.0
- Split i386 memory <16MB into it's own freelist, permitting large memory machines to work better.
!
- New fhopen(2), fhstat(2), and fhstatfs(2) system calls to easier support userland filesystems.
!
- Support newer LVD models in the ncr(4) driver.
!
- gdt(4) driver for the ICP-Vortex RAID card series.
!
- Update to FreeBSD newfs_msdos(8), which can support hard drives too
- New OpenBSD art page.
!
- Updates to the lmc(4) device driver.
!
- uaudio(4) support.
!
- ti(4) also supports Farallon PN9000SX.
!
- ncurses-5.0-20000205.
!
- adw(4) now supports Advansys U2W scsi cards.
- Further sparc pmap improvements.
!
- Allow ssh-keygen(1) to be used for generating signatures of any ssh(1) control file.
- In sparc port, handle SM30 specially because it starts up with the cache running.
!
- import usbdevs(8).
!
- When handling an apm(4) suspend, power down pcmcia devices; when unsuspending, power them back up. Very nice.
!
- Rewrite makewhatis(8) in perl(1).
- Deal with empty path element in LD_LIBRARY_PATH variable.
- On i386 prevent overflow in computation of buffer cache limitation, thus supporting machines with lots of memory.
- Hardware encryption support added to wi(4) (the wavelan driver).
!
- Performance optimizations to m4(1).
!
- Fix a panic in nfsd(8).
!
- Have mkdir -m support sticky and setuid bits.
!
- Support -R flag in rtadvd(8).
!
- Without a subcommand, have atactl(8) assume that the "identify" command is implied.
!
- Workaround in ftp(1), for Y2K broken ftp servers that return 19100 for the year. Remind is this is here in the year 19098, ok?
- ipf 3.3.8
!
- Fix a pty close race in sshd(8).
!
- Arrange so that dhclient(8) does not update /etc/resolv.conf if no DNS information is found.
!
- isakmpd(8) update.
!
- Support 93C66 and 93C56 SEEPROM chips (used by more modern ahc(4) cards).
!
- Fix a number of bugs in fsplit(1).
!
- Use ed(1) in /etc/rc, since grep(1) is in /usr.
- i386 now runs libkvm instead of libkvm.old.
!
- Add a dmesg(8) alias to the install media.
!
- In gcc(1), add an i386 specific peephole optimization for stack adjustment.
!
- Fix some APM version 1.2 issues, thus making IBM Thinkpads work.
- On the i386, now use the memory map information supplied by the bootblocks.
!
- Use alloca(3) instead of malloc(3) in execl(3) and execle(3), so that they are vfork(2) safe.
!
- sudo 1.6.2p1
!
- Arrange so that sshd(8) does not do port forwarding until shell successfully starts.
- Repair a stupid cache-lockdown bug in the sparc pmap.
!
- Repair memory leak in freeaddrinfo(3).
!
- Significant code shrinkage in IPsec(4), as most AH and ESP code starts sharing more subfunctions.
!
- Enable ipv6 support in rsh(1), rlogin(1), rshd(8), and rlogind(8).
!
- Fix rcmd(3), iruserok(3), and ruserok(3) to be IPv6 capable, also add more address family independent routines: rcmd_af(3) and iruserok_sa(3).
- Handle MVME1x2 boards with only one ZS serial chip.
- Avoid some more cache flushes in the sparc pmap module.
!
- Handle memory shortage better in yacc(1), closing some memory leaks.
- Sparc pmap performance improved by optimizing some more pte table walks.
!
- isakmpd(8) update.
- Many more man page improvements.
!
- More getaddrinfo(3) improvements to further match RFC2553.
!
- Add MAC address filtering in the bridge(4) code.
!
- Fix timestamp bug in make(1).
!
- Apache 1.3.11 + mod_ssl 2.5.0 merge
- MVME328 scsi card support in mvme68k port.
- Portable code for handling architectures with backwards-running stacks, like hppa.
- Fix Y2K non-compliancy in amiga port's clock chip code.
!
- some minor repairs to grdc(6).
- MVME376 ethernet card support in mvme68k port.
- mvme68k and mvme88k ramdisk repairs.
!
- sudo 1.6.2.
!
- Make application mode arrow keys work in ksh(1).
!
- Protocol independence added to bindresvport(3).
- OpenSSH version 1.2.2 released.
!
- Lots of IPsec(4) pfkey improvements.
!
- Repair exception handling in gcc(1) i386 position independent code.
!
- ncurses-5.0-20000122
!
- Don't allow time to be set far forwards and thus wrap, and a warn for time reversing if securelevel(7) > 1.
!
- Some compat_sunos(8) emulation improvements, particularly for getdents.
- Various powerpc port fixes -- it is getting close to actually working well.
!
- Handle SIGINT failures in ssh(1)/scp(1)/cvs(1) better.
!
- Fix bugs in the robots(6), tetris(6), and grdc(6) games.
!
- Make pax(1)/tar(1)/cpio(1) deal with files larger than 2 GB.
!
- Deal with getcwd(3) returning NULL in at(1).
!
- Rename ip4.allow sysctl(8) to ipip.allow. This variable no longer controls any explicitly configured IP-over-IP tunnels.
!
- Deal with getcwd(3) returning NULL in the supfilesrv.
!
- DRIVER IMPROVEMENT: Intel fxp(4) cards with nsphy(4) could not negotiate and maintain 100mbit link. A source code patch is available.
!
- Fix a buffer overflow in the i386 bootblocks!
!
- Fix vi(1) recover script to use sysopen(), to avoid magic in perl open().
!
- Fix race condition in make(1) (only applies to make -j, which noone in OpenBSD ever uses).
!
- Reduce console loggin in sshd(8).
!
- Fix sshd -i.
- SECURITY FIX: Systems with procfs enabled and mounted contain a root hole due to a tricky exploit. A source code patch is available.
!
- Fix a possible NULL dereference in execve(2).
!
- gcc 2.95.2
!
- add rip6query(8).
- Many man page fixes.
!
- Change pcvt(4) so that all regular function key presses go to straight to the application.
!
- Avoid botches in ftpd(8) and mtree(8) introduced from blind replacement of getwd(3) with getcwd(3).
!
- Disable agent forwarding in ssh(1) protocol 1.3.
- Support for another gigabit ethernet card using the alteon chipset.
!
- Fix a garbage printout in ftpd(8).
!
- Error message repair in from(1).
!
- Fix fxp(4)+nsphy(4) problems.
!
- Tons more man(1) page repairs.
!
- Fix a bug in the pipe(2) system call.
!
- v6 support in fstat(1).
- Documentation improvements.
!
- Fix "traceroute -P 41" codepath blocked by inet6 import.
!
- Another fix improving on the earlier ld.so(1) version number fix.
!
- tcpdump(8) support for L2TP, Mobile IP, BGP, VLAN 802.1q, and INET6.
- ncurses-5.0-20000115
!
- Crank pms(4) delay to 4000 for another laptop that takes a long time.
- Make kernel know about the Coppermine CPUs.
- Special case: one PCI bridge device... which is not a PCI bridge at all.
- Handle SNAP encapsulated packets for the bridging blocknoip option.
- Improve sparc pte handling for performance.
!
- Show blackhole routes in route(8) and netstat(1).
- Fix a Y2001 bug in the hp300 boot code and kernel.
!
- Update the powerpc code. uvm(9) kernels do not work yet.
!
- Avoid touching the sdh register too often during atapi(4) device probe; some devices freak.
!
- More m4(1) fixes.
!
- Fix an obscure bug in ld(1) that caused it to treat directory names called "lib" differently.
!
- Y2K fix for a groff(1) macro.
!
- Remove gifconfig(8); replaced by syntax in ifconfig(8).
!
- Show problematic expressions in m4(1)'s expr error messages.
!
- Recursion depth control in gre(4), similar to what is in gif(4).
- Various cleanups are happening to the netipx codebase.
- Fix Promise Ultra/66 and SiS 5513 pciide support.
!
- blocknonip option in if_bridge and brconfig(8).
!
- pn(4) cards now use dc(4).
!
- More channel fixes in ssh(1).
- XFree86 3.3.6
!
- Handle glob() return values better in restore(8).
- Hifn 7751 is the same as the Invertex board, the aeon driver.
!
- Support command-execution in /etc/hostname.* files, using ! syntax.
!
- Handle the bootpath properly in sbus isp(4).
!
- IPsec(4) ingress control.
- Merge IPV6 into the GENERIC kernel. As far as the kernel is concerned, we are ipv6 ready now. However, lots of userland changes remain..
!
- Reduce recursion in gif(4).
- Support Davicom DM910x in if_dc.
!
- Numerous IPsec(4) fixes and enhancements.
- Allow aeon driver to match Hifn 7751.
- Fix printing of SAs in route.
!
- Add ESP/AH statistics to netstat(1).
- Fix to use network byte order in several places.
- Allow booting from Qlogic isp cards.
- Several IPsec-related sysctls added.
- Various termtypes fixes.
!
- ncurses-5.0-20000108
- Add fake dcphy(4).
!
- In UKC, add a timezone command.
!
- Handle fxp(4) using iophy(4); broken in 2.6 release.
!
- Support LBA-mapped extended partitions in fdisk(8).
!
- Use arc4random(3) in IPV6 code.
!
- Import of gre(4) code.
- Early check for udp destination port 0.
!
- Newer raidframe code.
!
- userland ppp 2.26.
- Make NFS swap devices work once again.
- In the mvme68k port, add support for the '060 based MVME177 card.
!
- Make some macros in m4(1) special.
!
- Improve column handling in ls(1).
!
- V6 support in systat(1).
!
- Y2K FIX: The at(1) command was unable to parse some kinds of dates. A source code patch is available.
!
- Improve sleep(1) for out-of-range values.
!
- Do not use kvm snooping in rtsold(8).
!
- Fix ftp(1) URL support accidentally broken by KAME.
!
- Fix a bug in smtpd(8).
- Make ssh IPV6 clean. KerberosIV only works on a v4 connection.
- Fix mbuf out-of-bounds write which caused great grief for NFSv2 in an INET6 kernel.
!
- Add rmoption/rmoptions command to config(8), thus permitting a config file to include GENERIC and then remove things.
!
- Various small improvements and fixes to ssh(1).
!
- Fix pthreads(3) handling on the sparc.
- Using weak symbols, support a real libpthread.
!
- The mknod(8) -m option should ignore the umask.
- More man page cleanups, as always.
- Y2K FIX: A minor problem; the sparc eeprom(8) command is not Y2K compliant. A source code patch is available.
- Permit midi compilation without other audio code.
!
- Y2K FIX: A minor problem in the logging support for the adduser(8) command. A source code patch is available.
!
- In config(8), permit multiple maxuser definitions. Newest overrides older ones.
!
- Use the dc(4) driver instead for a few other tulip-like cards.
!
- Change libc syslog() code to try to reopen the socket if a send fails. This handles the case of a restarted syslogd(8) better.
!
- Correct SIGTERM handling in ssh-agent(1).
- ncurses-5.0-20000101
!
- Permit non-IPsec(4) kernels to compile.
!
- Improve argument handling in wicontrol(8).
!
- Various fixes to LKM(4) unloading.
- Make ld/ld.so search all directories before accepting the best version of a shared library.
- Do in6_if_up() at splsoftnet(), permitting drivers to get interrupts during the processing of their multicast reprogramming.
!
- Provide sysctl(8) net.inet6.icmp6.nodeinfo to permit admin to enable icmp6(4) node information query if so desired.
- Support various kinds of inet6 entries and in /etc/netstart as well.
- Improve handling of signed math in NFS kernel code.
!
- Parse /etc/sysctl.conf earlier in /etc/rc.
- Move sysctl to /sbin.
- For other architectures, also check db_panic in kdb_trap().
- Remove PIC versions of libarch and libresolv from the distribution.
- Correctly copy pkthdr in m_split().
- Fix udp multicast option handling.
- DRIVER IMPROVEMENT: Fix mii autoselect support for 3c900b. A source code patch is available.
!
- Fix signed errors in df(1).
!
- Repair netstat -ss.
!
- Optional swap encryption support in uvm; see new options(4) page.
!
- Do not strip international characters in fmt(1).
- Initialize lo0 for ipv6 automatically.
!
- Avoid a memory leak in telnet(1).
- Honour the ddb.panic sysctl better.
!
- Enable scopeid hack in ifconfig(8), ping6(8), and netstat(1).
- Replace NRL get{addr,name}info() with KAME get{addr,name}info() in libc.
- Fix a terminfo problem relating to unset capabilities.
!
- More ISA PnP NE2000 clones - see ne(4)
- TCP new reno
- Fix IP multicast kernel panic
!
- Upgrade ipf(4), now version 3.3.6
!
- Major cleanup of make(1)
!
- 3c450-TX HomeConnect, see xl(4).
!
- Add Qlogic 1240/1280 support to isp(4).
!
- Update curses(3) to ncurses-19991218.
!
- Speed up blowfish(3) encryption by > 20%.
!
- More ipf(8) changes. Avoid rw_enter panic, coredumps when processing rules.
- Preliminary token ring support.
!
- Continuing ssh(1) improvements.
!
- Add srcsa, dstsa, clearsa to ifconfig(8)
!
- New ioctls for binding enc(4) interfaces when bridging.
!
- Yet more make(1) cleanup.
!
- Preserve file flags in mv(1).
!
- Added the gif(4) interface for tunneling IPv4/IPv6. See gif(4), gifconfig(8).
- Add more PCMCIA NE2000 devices.
!
- Fix and re-enable TCP SACK code. Eliminate TCP_NEWRENO. See options(4).
- Continuing IPV6 improvements.
!
- Print ipv6 addresses correctly IPsec(4) flows. See netstat(1), route(8).
!
- ipsecadm(8) now accepts ipv6 addresses.
- Improve timeout handling for some ATAPI devices.
!
- Add man pages for icmp6(4) and ip6(4)
!
- traceroute(8) fixes. Add -c, -I. Fix -P.
- Fix multicast kernel panic in ip_output.
- Add forward reference for sockaddr to netinet/in.h
!
- Some game fixes: fortune(6) and robots(6).
!
- More make(1) cleanup.
- Various IPV6 changes.
!
- ipmon(8) -F now works properly.
!
- Import of IPFilter 3.3.5. See ipf(8).
!
- Long overdue make(1) cleanup.
!
- ipf(8) can now use interface names.
- Add support for Qlogic 1240 and 1280.
- Preliminary awi driver code.
- Fix privilege error in wi(4) driver.
!
- Replace pn(4) driver with dc(4).
!
- Overflows in at(1), ar(1), cdio(1).
!
- Import of IPFilter 3.3.4. See ipf(8).
- Changed termcap providers
!
- Various fixes to hunt(6).
- TI TNETE2101 PHY
!
- Fix dlfcn(3) prototypes
!
- Sync awk(1) with June 6, 1999 version
!
- New dc(4) driver for DEC/Intel 21143 and clones
!
- Don't use stdio for getpass(3).
- Update of PHY subsystem
- Various sparc and i386 pmap fixes for UVM
!
- Sundance ST201 Ethernet from FreeBSD. See ste(4)
- IPsec cleanup
!
- Cleanup of make(1).
- Lots of UVM work
!
- MFS unmount race fixes
!
- Add bindresvport_af(3) and rresvport(3) APIs to libc.
!
- Updated curses(3) to ncurses-19991211
- Overflows in crunchgen
!
- Fix chpass(1) temp file handling
- Various soft update fixes
- Integration of KAME IPv6
!
- Features added to find(1).
!
- Fixes to eap(4) driver
!
- Overflows is split(1), jot(1), ssio, telnet(1), file(1).
!
- SiS 900/7016 Ethernet from FreeBSD. See sis(4)
!
- Tape support and major code changes to atapiscsi(4).
- The third ssh jumbo patch is now available. Numerous (non-security) additions/changes have been made to OpenSSH since the OpenBSD 2.6 release. A jumbo patch is available which adds many features.
- The second ssh jumbo patch is now available. Numerous (non-security) additions/changes have been made to OpenSSH since the OpenBSD 2.6 release. A jumbo patch is available which adds many features.
!
- Some overflows in patch(1).
!
- Buffer overflow in dnsquery(1).
!
- Buffer overflow in error(1).
!
- Fix a buffer overflow in dhclient(8).
!
- Fix two crashes in awk(1).
!
- Fix off-by-one in apply(1).
!
- Fix bug in pr(1).
- Make soft updates mostly work with UVM.
- SECURITY FIX: The USA version of the ssl library package, called sslUSA26, contained buffer overflows. A binary patch is available for people who installed before December 3.
- Remove ctm(1) from the src tree -- look for it in ports now.
- libkvm.old hacks for UVM.
!
- Fix utmp handling in ftpd(8), for when running in daemon mode.
!
- More m4(1) fixes.
!
- Fix append keyword in dhclient(8).
!
- Buglet in sort(1).
- DPT SmartCache III/IV SCSI PCI/EISA driver.
!
- mkisofs 1.11.3
!
- Fix mangled files for put command in ftpd(8).
!
- RELIABILITY FIX: Be more careful in poll(2). A source patch is available.
- ncurses-5.0-19991127
- Enable TI16750 UART support.
- driver for ISA hostess 4-channel serial card.
- Import ssh-askpass into our X11 src tree.
- For i386: Winchip c6 TSC is broken, ignore it.
!
- Fix descriptor leaks and potential double fclose() calls in skey(1) library code.
!
- Correct icmp(4) packet length in ipmon(8).
!
- Remove unused functionality from the i386 pcvt(4) driver.
- Allow machine-dependent code to set the PAGE_SIZE constant, and set it in MD code if possible -- performance improvement.
!
- new pthreads(3) code.
!
- Parsing error fix to calendar(1).
!
- Some more m4(1) fixes.
!
- Set SO_REUSEADDR and SO_LINGER on forwarded ports in ssh(1).
- SECURITY FIX: Limit newaliases run to root and trusted users. A source patch is available.
!
- SSH_ASKPASS support in ssh-add(1).
!
- Numerous ssh(1) and sshd(8) improvements... too many to mention.
!
- Newer version of the isp(4) driver.
!
- Fix a bug in rarpd(8).
- Add support for SIGIO to lms(4), pms(4), and mms(4).
- Fix two bugs in info(1).
- select on pipes was broken, and occasionally someone would notice it (in particular rsync).
!
- Use mkstemp(3) in crontab(1).
!
- Improve egcs performance.
!
- Add memconfig(8).
!
- Add mtrr(4) support from freebsd.
!
- SSH_CMSG_MAX_PACKET_SIZE support in sshd(8).
!
- Improve whois(1) even more.
- Many man page fixes.
!
- sudo 1.6 (BSD licenced now!)
!
- Fix more m4(1) bugs.
!
- In scp(1), do not display banner if process is in the background.
!
- Permit kernel to compile without FFS once again.
- More links to man pages.
!
- Bug fixes to rl(4) and tx(4) driver.
!
- More ATAPI disk fixes (may come as a patch file later).
!
- Other misc ssh(1) improvements.
!
- RSA key fingerprints in the ssh(1) commands.
!
- Do ANSI cursor save/restore in i386 pcvt(4) driver.
!
- Fix more m4(1) bugs; patch for this problem is included in previous m4 errata entry.
- A bit more playing around in sshd to deal with the broken key sizes that Datafellows ssh gives.
!
- Honour ddb.console in the mac68k port.
- Fix retransmission problem in TCP.
!
- Improve whois(1) significantly to use *.whois-servers.net.
- In lots of daemons, do not syslog getpeername complaints.
!
- In ksh(1), quote metacharacters when completing filenames.
!
- Fix a signal race crash in ksh(1).
!
- link window(1) with -locurses.
!
- top(1) should use stathz, not hz, for calculating process run times.
- Shrink the puc(4) dmesg output.
!
- Add OSS audio support to the BSD/OS emulation.
- A kernel reliability fix for the alpha. A patch is available.
- A kernel reliability fix for all m68k architectures. A patch is available (which all m68k architectures share).
- Numerous (non-security) additions/changes have been made to OpenSSH since the OpenBSD 2.6 release. A jumbo patch is available which adds many features.
- A kernel reliability fix for the sparc. A patch is available.
!
- Counter overflow fix to scp(1).
- Merge dvdio.h support into cdio.h, and cleanup various unportable bits.
!
- Various other ssh(1) cleanups.
!
- Print all bad options in sshd(8) and ssh(1) before exiting with a failure.
!
- sshd(8) now has a IgnoreUserKnownHosts flag.
!
- Optionally run a command in newsyslog(1), instead of sending a signal.
!
- Some make(1) fixes.
!
- Improve dhcp integration into the install media.
!
- Logging cleanup of ssh(1).
- Have sshd check the user's personal ~/.ssh/known_hosts file.
- NOTE: OpenSSH does not have the ssh 1.2.27 rsa bug.
- Install a shared libperl.
- Fix m4, accidentally broken in 2.6. A patch is available.
- Users should not be able to change the media configuration of interfaces. A patch is available.
!
- Add strtok_r(3).
- newsyslog race condition fixes. A patch is available.
!
- Various make(1) fixes.
- screen blanker code for the amiga.
!
- Default network name in wi(4) is "", not "ANY".
- Start of DVD support.
!
- New sf(4) driver supports Adaptec "StarFire" AIC6915-based Ethernet PCI cards.
!
- Numerous more ssh(1) and sshd(8) cleanups.
- Slow down ATAPI IDENTIFY (final critical fix which shipped in 2.6).
- Another critical i386 memory allocation fix (shipped in 2.6).
- Critical brooktree driver fix (shipped in 2.6).
!
- Fix some more atapi bugs (shipped in 2.6).
!
- Fix byte order bugs in the new wdc/atapi code.
- Sparc uses UVM by default now.
!
- Allow rarpd(8) to work on aliased interfaces.
!
- Support multiple enc(4) interfaces.
!
- Reliability fixes for the ATAPI code (shipped in 2.6).
!
- New driver: al(4) supports the ADMtek AL981/AN985 PCI ethernet cards.
!
- Various other ssh(1) and sshd(8) cleanups.
- Add ethernet-IP encapsulation.
!
- In ssh, use libssl(8) md5 routines instead of our libc routines.
!
- Disassociate interfaces from ipnat(8) after they've been removed from the interface list.
- Make ASYNC pipes capable of generating SIGIO.
- Emulate FreeBSD F[GS]ETOWN.
!
- Fix some further ARP problems in bridge(4).
!
- Fix scp(1) counters for > 1 hour.
!
- Support LMC1200 in lmc(4).
!
- Repair multicast routing description block in afterboot(8).
!
- Support missing tty flags in stty(1).
!
- libkeynote update.
- Support UVM throughout userland.
!
- Support for puc(4) (PCI serial/parallel cards).
- Make disklabel.h safe for C++ use.
!
- Use reference-copies of the mbuf in bridge(4) code again, instead of full copies.
!
- Make ssh print the correct remote version number.
!
- Make ssh(1) compile faster by using a library.
!
- In ti(4), use bus_dma routines instead of uvm_page_alloc_contig.
- Cleanup i386 disktab.