OpenBSD 2.7 Changelog

=================================================================== RCS file: /cvsrepo/anoncvs/cvs/www/plus27.html,v retrieving revision 1.81 retrieving revision 1.82 diff -u -r1.81 -r1.82 --- www/plus27.html 2019/04/08 16:14:53 1.81 +++ www/plus27.html 2019/05/27 22:55:22 1.82 @@ -1,20 +1,34 @@ - - - + + + OpenBSD 2.7 Changelog - - + + +

-OpenBSD -2.7 Changelog +OpenBSD +2.7 Changelog

@@ -29,7 +43,7 @@ changes, starting with those listed below.

-Note: Problems for which patches exist are marked in red. +Note: Problems for which patches exist are marked in red.

For changes in other releases, click below:
@@ -84,746 +98,742 @@

Changes made between OpenBSD 2.6 and 2.7

2.7 source tree frozen.
Buffer overflow fix to xlockmore(1). -
Fix kerberos slave server startup. -
Fix a pkg_add(1) bug in %f handling. -
OpenSSH is now at version 2.1. +
Fix kerberos slave server startup. +
Fix a pkg_add(1) bug in %f handling. +
OpenSSH is now at version 2.1.
Handle \ escapes in real ssh key format files. -
Fix a X11 forwarding draining bug in sshd(8). +
Fix a X11 forwarding draining bug in sshd(8).
Be compatible to various bugs in various other real ssh versions. -
Handle very large mbuf chains in hifn(4). -
Complain about invalid ciphers in ssh(1). -
Fix 12 hour handling in leave(1). +
Handle very large mbuf chains in hifn(4). +
Complain about invalid ciphers in ssh(1). +
Fix 12 hour handling in leave(1).
Fix a timeout queue crash.
Various nice tweaks to the install script for 2.7. -
In ppp(8), correct a bad bug in m_prepend(). +
In ppp(8), correct a bad bug in m_prepend().
Support sparc tape installs. -
Work around a sysctl(3)-based kvm(3) vs exit(3) race. -
Fix the same basic ip timestamp bug in ipf(4). -
On the ip(4) input path, avoid unaligned accesses for strangely placed ip timestamp options. +
Work around a sysctl(3)-based kvm(3) vs exit(3) race. +
Fix the same basic ip timestamp bug in ipf(4). +
On the ip(4) input path, avoid unaligned accesses for strangely placed ip timestamp options.
Fix resource limit race at exit time, if accounting is enabled. -
Fix inet6(4) pcmcia(4) detach. -
Support all ServerWorks and 451NX pchb(4) machines. -
Many fixes to user(8). -
Repair padding a uuencode stuff in sshd(8). +
Fix inet6(4) pcmcia(4) detach. +
Support all ServerWorks and 451NX pchb(4) machines. +
Many fixes to user(8). +
Repair padding a uuencode stuff in sshd(8).
Do not support DMA on PCTECH RZ1000, its dma support is fundamentally broken.
Undo a broken i386 pmap fix. -
Fix IEEE underflow in ps(1), affected 68060 machines with precise exceptions enabled by default. -
Fix context memory sizing for various models of static ram hifn(4) cards. -
dhclient(8) support for the hp300 ramdisk. -
Improve mountd(8) behaviour for unresolveable hosts. -
Add DSA/SSH2 information to the ssh(1), sshd(8), and ssh-keygen(1) manual pages. -
Improve key generation in vpn(8). -
Document our new IPsec(4) bridge(4) stuff. -
New packages(7) man page. -
Various isakmpd(8) updates. -
Install isakmpd(8) sample files. -
Correct proctitle updating in sshd(8). -
Change pmax dc driver to dz(4), to avoid name conflict withdc(4). -
SECURITY FIX: Do not use an undocumented semconfig(2) system call in ipcs(1), in fact, remove the system call altogether. A source code patch is available. -
More mount(8) tweaks for dealing with weird paths. -
Fix more pkg_add(1) bugs. +
Fix IEEE underflow in ps(1), affected 68060 machines with precise exceptions enabled by default. +
Fix context memory sizing for various models of static ram hifn(4) cards. +
dhclient(8) support for the hp300 ramdisk. +
Improve mountd(8) behaviour for unresolveable hosts. +
Add DSA/SSH2 information to the ssh(1), sshd(8), and ssh-keygen(1) manual pages. +
Improve key generation in vpn(8). +
Document our new IPsec(4) bridge(4) stuff. +
New packages(7) man page. +
Various isakmpd(8) updates. +
Install isakmpd(8) sample files. +
Correct proctitle updating in sshd(8). +
Change pmax dc driver to dz(4), to avoid name conflict withdc(4). +
SECURITY FIX: Do not use an undocumented semconfig(2) system call in ipcs(1), in fact, remove the system call altogether. A source code patch is available. +
More mount(8) tweaks for dealing with weird paths. +
Fix more pkg_add(1) bugs.
Support another RCC ServerWorks PCI host bridge. -
sshd(8) now has a pidfile. -
Better file descriptor handling in sshd(8). -
buf mishandling in ed(1). +
sshd(8) now has a pidfile. +
Better file descriptor handling in sshd(8). +
buf mishandling in ed(1).
A fix for mandatory cache sun4m architectures like the SM71 and SM81. -
Fix a race in scp(1). +
Fix a race in scp(1).
ipf 3.3.13. -
Prettier warnings from telnet(1) if bad port names are given. -
Add emulation for memcpy(3) and such to i386 for non-optimized kernel builds. -
Add OPENDEV_BLCK flag to opendev(3). -
Repair groff(1) mkstemp(3) use. -
Fix some perl 5.6.0 buglets. -
Use more perl 5.6.0 feature in makewhatis(8) for greater security and reliability. +
Prettier warnings from telnet(1) if bad port names are given. +
Add emulation for memcpy(3) and such to i386 for non-optimized kernel builds. +
Add OPENDEV_BLCK flag to opendev(3). +
Repair groff(1) mkstemp(3) use. +
Fix some perl 5.6.0 buglets. +
Use more perl 5.6.0 feature in makewhatis(8) for greater security and reliability.
In the /etc/daily file cleaner, prune at /.X11-unix and ssh-* directories. -
In sshd(8), check for keysize errors better. -
On the amiga, recognize Linux ados(8) disk labels. -
Fixes to the ray(4) driver. -
Fix -H option in sudo(8). -
Disable pcmcia(4) handling of non-CIS cards, since there are many bugs in it. +
In sshd(8), check for keysize errors better. +
On the amiga, recognize Linux ados(8) disk labels. +
Fixes to the ray(4) driver. +
Fix -H option in sudo(8). +
Disable pcmcia(4) handling of non-CIS cards, since there are many bugs in it.
Document many afs(4) configuration files. -
Fix a modify-after-free bug in tcp(4). -
Attempt to have ld(1) and ld.so(1) deal better with C++ shared libraries on +
Fix a modify-after-free bug in tcp(4). +
Attempt to have ld(1) and ld.so(1) deal better with C++ shared libraries on a.out architectures (i386, m68k, sparc...). -
Document what sendmail(8) now does on port 587. -
Deal with more non-compliant PHY setups in mii(4). -
cmpci(4) driver for C-Media CMI8x38 Audio Chip present on several motherboards. -
Support ext2fs properly. -
ssh(1), sshd(8), and companions now support SSH 2 protocol as well as SSH 1 protocol! To properly use this, you want to make sure you update your /etc/rc(8), /etc/netstart, and /etc/rc.conf(8). Or just test the new snapshot... -
Various additions and improvements in tcpdump(8). -
libpcap 0.5. -
Support jumbo frames in the fxp(4) models which support it. -
Add support for the RCC ServerWorks pchb(4) which has additional pci(4) bridges on it. Huge PC's with 6+ pci busses now work fine. -
On the i386, fix an errata relating to the Intel 82443BX pchb(4). -
Various changes related to vlan(4) support. -
Add a sysexits(3) man page. -
getaddrinfo(3) and getnameinfo(3) improvements, repairs, and greater care. +
Document what sendmail(8) now does on port 587. +
Deal with more non-compliant PHY setups in mii(4). +
cmpci(4) driver for C-Media CMI8x38 Audio Chip present on several motherboards. +
Support ext2fs properly. +
ssh(1), sshd(8), and companions now support SSH 2 protocol as well as SSH 1 protocol! To properly use this, you want to make sure you update your /etc/rc(8), /etc/netstart, and /etc/rc.conf(8). Or just test the new snapshot... +
Various additions and improvements in tcpdump(8). +
libpcap 0.5. +
Support jumbo frames in the fxp(4) models which support it. +
Add support for the RCC ServerWorks pchb(4) which has additional pci(4) bridges on it. Huge PC's with 6+ pci busses now work fine. +
On the i386, fix an errata relating to the Intel 82443BX pchb(4). +
Various changes related to vlan(4) support. +
Add a sysexits(3) man page. +
getaddrinfo(3) and getnameinfo(3) improvements, repairs, and greater care.
Start of the vax port resurrection.
Fix more i386 isadmaattach bugs. At least 2GB of memory on an i386 now works.
Avoid divide by zero in igmp networking code. -
In mail(1), make "new" count after an "inc" command reflect the new messages, as in SunOS. -
ktrace(2) no longer follows symbolic links. -
Repair adosfs(8). -
The damned hifn(4) always dealing with aligned data causes even more of a fuss. -
Repair a few hifn(4) bugs that slipped in recently. -
Fix IPsec(4) for big-endian machines again. -
Omit RC5 from ssl(3). -
userinfo(8), userdel(8), useradd(8), groupmod(8), usermod(8), groupdel(8), groupadd(8), and groupinfo(8) commands added. -
mii(4) detach support, needed by xe(4). -
Fix promiscuous mode in xe(4). -
Fix order of interrupt disabling for pcmcia(4) disabling; much more reliable. -
Wait a bit longer after enabling pcmcia(4) cards; more pcmcia(4) cards now work. +
In mail(1), make "new" count after an "inc" command reflect the new messages, as in SunOS. +
ktrace(2) no longer follows symbolic links. +
Repair adosfs(8). +
The damned hifn(4) always dealing with aligned data causes even more of a fuss. +
Repair a few hifn(4) bugs that slipped in recently. +
Fix IPsec(4) for big-endian machines again. +
Omit RC5 from ssl(3). +
userinfo(8), userdel(8), useradd(8), groupmod(8), usermod(8), groupdel(8), groupadd(8), and groupinfo(8) commands added. +
mii(4) detach support, needed by xe(4). +
Fix promiscuous mode in xe(4). +
Fix order of interrupt disabling for pcmcia(4) disabling; much more reliable. +
Wait a bit longer after enabling pcmcia(4) cards; more pcmcia(4) cards now work.
Fix dump calculations in the i386 kernel crash dump code. -
More careful dmesg(8) handling in the install script. -
pcmcia(4) ep(4) now supports 3C1 and 3CCFEM556BI. -
Repair a bug in fdalloc() that caused a panic in dup(2). This bug was introduced by the recent file descriptor allocation optimizations. +
More careful dmesg(8) handling in the install script. +
pcmcia(4) ep(4) now supports 3C1 and 3CCFEM556BI. +
Repair a bug in fdalloc() that caused a panic in dup(2). This bug was introduced by the recent file descriptor allocation optimizations.
Support DOSPTYP_EXTENDL partitions in the kernel disklabel reader. -
In ld(1), avoid duplicates in search path. -
Support RFC2732 IPv6 address literal URLs in ftp(1). -
Improve makewhatis(8) again, using new parts of perl(1) 5.6.0. -
Fix a bug in at(1). -
Add -keyfile and -authkeyfile options to ipsecadm(8). +
In ld(1), avoid duplicates in search path. +
Support RFC2732 IPv6 address literal URLs in ftp(1). +
Improve makewhatis(8) again, using new parts of perl(1) 5.6.0. +
Fix a bug in at(1). +
Add -keyfile and -authkeyfile options to ipsecadm(8).
Significant manual page improvements, as is usual just before a release. -
Use fgetln(3) instead of fgets(3) in mail.local(8), and thus avoid header mangling. -
Support for /etc/rc.conf.local, as documented in rc.conf(8). -
https support in lynx(1). -
Add CPAN File::Temp for perl(1) versions of mkstemp(3) and such. -
Fix the vi(1) recover script to be safe for multiuser running (needed O_NOFOLLOW). -
Move apm(4) into a kernel thread, so that filesystem syncing is less likely to block and cause panics. Suspending just got a lot more reliable. -
For open(2), support O_FSYNC better. -
For open(2), add a O_NOFOLLOW flag for dealing with symbolic links. This should not be used by generic software -- only use this for very rare and specific problems. -
traceroute(8) gets a new option, -f skips early node checks. +
Use fgetln(3) instead of fgets(3) in mail.local(8), and thus avoid header mangling. +
Support for /etc/rc.conf.local, as documented in rc.conf(8). +
https support in lynx(1). +
Add CPAN File::Temp for perl(1) versions of mkstemp(3) and such. +
Fix the vi(1) recover script to be safe for multiuser running (needed O_NOFOLLOW). +
Move apm(4) into a kernel thread, so that filesystem syncing is less likely to block and cause panics. Suspending just got a lot more reliable. +
For open(2), support O_FSYNC better. +
For open(2), add a O_NOFOLLOW flag for dealing with symbolic links. This should not be used by generic software -- only use this for very rare and specific problems. +
traceroute(8) gets a new option, -f skips early node checks.
Fix "freeing free block" panics. -
Support /etc/resolv.conf.tail, as documented in dhclient-script(8). +
Support /etc/resolv.conf.tail, as documented in dhclient-script(8).
Rewrite uio hog. -
Do not abuse malloc(9) for small structures inside ktrace(2). -
Add pread(2), pwrite(2), preadv(2), and pwritev(2) system calls. -
In fdisk(8), favor BIOS geometry over physical geometry, fixing numerous problems with larger disks. -
Split fxp(4) and dc(4) for pci(4) and cardbus(4). -
In ktrace(2), if user does a large IO operation, split the loggin to avoid kmem(4) starvation. -
Make nfsstat(1) on a live system use sysctl(3) instead of kvm(3) snooping. -
Set mii(4) parameters for all variants of xl(4), cardbus(4) models. -
scsi cd(4) detach is now possible. +
Do not abuse malloc(9) for small structures inside ktrace(2). +
Add pread(2), pwrite(2), preadv(2), and pwritev(2) system calls. +
In fdisk(8), favor BIOS geometry over physical geometry, fixing numerous problems with larger disks. +
Split fxp(4) and dc(4) for pci(4) and cardbus(4). +
In ktrace(2), if user does a large IO operation, split the loggin to avoid kmem(4) starvation. +
Make nfsstat(1) on a live system use sysctl(3) instead of kvm(3) snooping. +
Set mii(4) parameters for all variants of xl(4), cardbus(4) models. +
scsi cd(4) detach is now possible.
Do even more scsi device locking via common routines. -
In make(1), report errors with a Makefile line number, making large Makefile debugging much easier. -
Significantly cleanup the isa(4), pci(4), isapnp(4), and related manual pages, making it easier to see what we currently support. +
In make(1), report errors with a Makefile line number, making large Makefile debugging much easier. +
Significantly cleanup the isa(4), pci(4), isapnp(4), and related manual pages, making it easier to see what we currently support.
Deal with byte-order challenged Compaq laptops. -
Fix memory leaks in sshd(8). -
Numerous modifications for pkg_add(1) and companions, to better import various new styles of packages.. -
Fix even more braindamaged random device mis-handlings in ssl(3). -
Make kvm(3) on the i386 understand the new core dump format. -
In script(1), propagate window size changes to slave. +
Fix memory leaks in sshd(8). +
Numerous modifications for pkg_add(1) and companions, to better import various new styles of packages.. +
Fix even more braindamaged random device mis-handlings in ssl(3). +
Make kvm(3) on the i386 understand the new core dump format. +
In script(1), propagate window size changes to slave.
tzcode2000c. -
Permit i386 kernel to compile without pccom(4) or com(4) drivers. -
After scp(1) completes, replace progress bar ETA counter with a total elapsed time. -
Fix more random device mis-handlings in ssl(3). -
Fix exit code in du(1). -
Fix sync(2) to actually sync all filesystems. -
urio(4) driver for Diamond Multimedia RIO 500. +
Permit i386 kernel to compile without pccom(4) or com(4) drivers. +
After scp(1) completes, replace progress bar ETA counter with a total elapsed time. +
Fix more random device mis-handlings in ssl(3). +
Fix exit code in du(1). +
Fix sync(2) to actually sync all filesystems. +
urio(4) driver for Diamond Multimedia RIO 500.
xlockmore 4.16. -
OpenSSL 0.9.5a. -
Change window(1) to use curses(3) instead of ocurses. +
OpenSSL 0.9.5a. +
Change window(1) to use curses(3) instead of ocurses.
Do some repair on sys/queue.h. -
Add colour support to pcvt25 termcap(5) entry. -
In window(1), do not assume that termcap(5) entries start with 2 character short names. -
Repair random(4) for the alpha. -
In ssh(1), check payload for (illegal) extra data. +
Add colour support to pcvt25 termcap(5) entry. +
In window(1), do not assume that termcap(5) entries start with 2 character short names. +
Repair random(4) for the alpha. +
In ssh(1), check payload for (illegal) extra data.
make "option TCPDEBUG" kernel compile.
Initialize the bus dma tag for EISA. -
Use getifaddrs(3) instead of SIOCGIFCONF in ifconfig(8), rarpd(8), etc. -
ifconfig(8)'s -a flag had been changed to be the same as -A. Fix that. -
Have ahc(4) support Adaptec 2930U2. -
Revert to up-to-date ipf(4) man pages, but ugly as sin. Everyone remind kjell to finish this job, ok? +
Use getifaddrs(3) instead of SIOCGIFCONF in ifconfig(8), rarpd(8), etc. +
ifconfig(8)'s -a flag had been changed to be the same as -A. Fix that. +
Have ahc(4) support Adaptec 2930U2. +
Revert to up-to-date ipf(4) man pages, but ugly as sin. Everyone remind kjell to finish this job, ok?
When fragmenting a packet in ip_output(), inherit the multicast and broadcast flags so that link layer can choose the right address. -
Use getifaddrs(3) in libpcap. -
Make ahc(4) support Adaptec 2930U2 controller. -
Match netsec hifn(4) 7751 card. -
neo(4) is a Neomagic 256AV/ZX audio driver. +
Use getifaddrs(3) in libpcap. +
Make ahc(4) support Adaptec 2930U2 controller. +
Match netsec hifn(4) 7751 card. +
neo(4) is a Neomagic 256AV/ZX audio driver.
Unmute ac97 mixers by default.
ipf 3.3.12a. -
ssh protocol 2 is now usable. -
Add Protocols and Cipher keywords to ssh(1) and sshd(8). -
compat_linux(8) emulation for setfsuid() and getfsuid(). -
If realpath(3) fails, just use old name in umount(8). -
Add 802.11 nwid and mtu commands to ifconfig(8). -
More bug fixes to hifn(4). Hifn support is now fully working. -
Some fixes to route6d(8). -
Use getifaddrs(3) instead of SIOCGIFCONF in ypbind(8). -
Do not lose file descriptors in ftpd(8). -
In random(4), first true random number source, based on intel 82802 firmware hub embedded true random number generator. -
In random(4), make it use more sources for an entropy; make playing .mp3s produce entropy, big time, big time. +
ssh protocol 2 is now usable. +
Add Protocols and Cipher keywords to ssh(1) and sshd(8). +
compat_linux(8) emulation for setfsuid() and getfsuid(). +
If realpath(3) fails, just use old name in umount(8). +
Add 802.11 nwid and mtu commands to ifconfig(8). +
More bug fixes to hifn(4). Hifn support is now fully working. +
Some fixes to route6d(8). +
Use getifaddrs(3) instead of SIOCGIFCONF in ypbind(8). +
Do not lose file descriptors in ftpd(8). +
In random(4), first true random number source, based on intel 82802 firmware hub embedded true random number generator. +
In random(4), make it use more sources for an entropy; make playing .mp3s produce entropy, big time, big time.
Improve range checking in timeouts. -
Thread repair in malloc(3). -
Various bug fixes to hifn(4), which is now even more reliable. -
Fix another m4(1) bug. -
PCI an(4) driver. -
Repair spl bug in bridge(4). -
wdc(4) and wd(4) detach logic, but missing scsi(4) disconnect for atapi(4). -
Permit address setting on enc(4) interfaces, and various other tweaks leading to better bridge(4) integration. +
Thread repair in malloc(3). +
Various bug fixes to hifn(4), which is now even more reliable. +
Fix another m4(1) bug. +
PCI an(4) driver. +
Repair spl bug in bridge(4). +
wdc(4) and wd(4) detach logic, but missing scsi(4) disconnect for atapi(4). +
Permit address setting on enc(4) interfaces, and various other tweaks leading to better bridge(4) integration.
Add various autoconfiguration child detach logic.
Rewrite and commonize disk driver locking which varied between drivers. -
After the recent revamp of icmp(4) reply byte order, correct one last thing: Pass ip_off and ip_len correctly. -
groff 1.15 -
In cd(4), do not trust the TOC as much when reading the disklabel. -
Fix umass(4) so that it handles some non-compliant devices. -
Modify the scsi(4) subsystem so that it can attach without polling. -
Arrange so that IFF_LINK0 on enc(4) means IP-in-IP instead of Ethernet-in-IP. -
Initial check-in of cardbus(4) support. xl(4) works on cardbus at the moment. +
After the recent revamp of icmp(4) reply byte order, correct one last thing: Pass ip_off and ip_len correctly. +
groff 1.15 +
In cd(4), do not trust the TOC as much when reading the disklabel. +
Fix umass(4) so that it handles some non-compliant devices. +
Modify the scsi(4) subsystem so that it can attach without polling. +
Arrange so that IFF_LINK0 on enc(4) means IP-in-IP instead of Ethernet-in-IP. +
Initial check-in of cardbus(4) support. xl(4) works on cardbus at the moment.
Set our status to 2.7-beta. -
Update ppp(8). -
Update isakmpd(8). -
sendmail 8.10.1 -
sendmail 8.10.0: You must put your /etc/sendmail.cf file in /etc/mail/sendmail.cf now. -
perl 5.6.0 -
Update to isp(4), mostly for Fibre Channel. -
Seed perl(1) srandom() /dev/arandom, to avoid losing a lot of entropy. +
Update ppp(8). +
Update isakmpd(8). +
sendmail 8.10.1 +
sendmail 8.10.0: You must put your /etc/sendmail.cf file in /etc/mail/sendmail.cf now. +
perl 5.6.0 +
Update to isp(4), mostly for Fibre Channel. +
Seed perl(1) srandom() /dev/arandom, to avoid losing a lot of entropy.
Some kernel functions were eating a little bit too much entropy.
ipf 3.3.12 -
ahc(4) now supports AHA-29160 and other Ultra160 variants. -
USB umodem(4) support. -
USB umass(4) driver. Works with various devices, but does not support disconnection yet. -
Support hmac processing in hifn(4). -
ncurses-5.0-20000401 -
Put an expert mode into disklabel(8), that hides a lot of details. But most of the interface remains 100% the same. -
Protocol 2 support in ssh(1) and sshd(8). -
Do not have /etc/netstart pass -E to ipf(8), since our kernel now enables it by default. +
ahc(4) now supports AHA-29160 and other Ultra160 variants. +
USB umodem(4) support. +
USB umass(4) driver. Works with various devices, but does not support disconnection yet. +
Support hmac processing in hifn(4). +
ncurses-5.0-20000401 +
Put an expert mode into disklabel(8), that hides a lot of details. But most of the interface remains 100% the same. +
Protocol 2 support in ssh(1) and sshd(8). +
Do not have /etc/netstart pass -E to ipf(8), since our kernel now enables it by default.
Many more man page improvements. Aren't we pedantic? -
compat_linux(8) system call emulation for pread(2) and pwrite(2). -
Make ahc(4) do tagged queuing, and fix some locking bugs. +
compat_linux(8) system call emulation for pread(2) and pwrite(2). +
Make ahc(4) do tagged queuing, and fix some locking bugs.
Support root drive detection for G4 powermac. -
Add srandomdev(3) to libc. -
DSA key exchange for sshd(8) and friends, moving us much closer to protocol 2 support. -
Fix various flaws in the OpenSSL set of manual pages. -
an(4) driver supporting AiroNet 802.11DS cards. -
Repair some races and deadlocks in adw(4). -
Fix buf oflow in ed(1). +
Add srandomdev(3) to libc. +
DSA key exchange for sshd(8) and friends, moving us much closer to protocol 2 support. +
Fix various flaws in the OpenSSL set of manual pages. +
an(4) driver supporting AiroNet 802.11DS cards. +
Repair some races and deadlocks in adw(4). +
Fix buf oflow in ed(1).
Support USB Mass Storage devices. -
Make zic(8)'s -l option actually work. -
Some ppp(8) updates. -
Auto-detect size of seeprom for fxp(4), for newer cards. -
Some improvements in kerberos(1) man pages. -
DES and 3DES hardware acceleration for IPsec(4) working in hifn(4) driver. -
Run pod2man(1) on the OpenSSL pod documents, and carefully install them in the base system. +
Make zic(8)'s -l option actually work. +
Some ppp(8) updates. +
Auto-detect size of seeprom for fxp(4), for newer cards. +
Some improvements in kerberos(1) man pages. +
DES and 3DES hardware acceleration for IPsec(4) working in hifn(4) driver. +
Run pod2man(1) on the OpenSSL pod documents, and carefully install them in the base system.
Expose MDXTransform functions for MD5 and MD4. -
Permit wss(4) to work on irq 5. -
Implement compat_linux(8) rt_sigreturn() emulation. +
Permit wss(4) to work on irq 5. +
Implement compat_linux(8) rt_sigreturn() emulation.
On the i386, enlarge pcic0 memory address space. -
Implement compat_linux(8) getcwd(3) emulation. -
IPsec(4) ingress ACL-checking is now on by default. -
sudo 1.6.3 +
Implement compat_linux(8) getcwd(3) emulation. +
IPsec(4) ingress ACL-checking is now on by default. +
sudo 1.6.3
i386 PCI interrupt routing repair code (disabled by default, has lots of issues).
Drivers for USB ethernet adapters.
Sync USB. -
lynx 2.8.2 -
Fix a number if IPsec(4) esp and ah related bugs introduced during the crypto splitout. +
lynx 2.8.2 +
Fix a number if IPsec(4) esp and ah related bugs introduced during the crypto splitout.
Numerous man page link repairs, so that just about any part of the system has a matching man page.
Make f_bsize signed. -
Support newer Qlogic isp(4) scsi cards. -
Support AMD 756 IDE controller in pciide(4). -
Add FNM_NOSYS to fnmatch(3) for XPG conformance. -
Flesh out mdoc.samples(7). -
Disallow pkg_delete(1) when the pkg_prefix is on a read-only filesystem. -
Handle expansion of @exec better in pkg_add(1). -
Initial support for DSA keys in sshd(8). -
In ssh(1), switch to raw mode only if we got a pty. -
Replace kernel timeout(9) mechanism with one which permits dynamic allocation of timeout structures. -
In fdisk(8), do not use BIOS geometry by default, a lot of newer BIOSs get upset when this is done with larger drives. -
Make script(1) exit with a proper (and documented) exit code. -
Fix AMD K6 mtrr(4). -
Fix overflow in ftp(1). -
Fix directory mishandlings in who(1). -
Fix overflow in ul(1). -
Fix modes for ch(4) and st(4) devices so that operator is more powerful. -
ray(4) supports the raytheon/webgear ieee 802.11 FH wireless ethernet. -
ahc(4) driver now supports 789x chipset based controllers (7892/9 not verified). +
Support newer Qlogic isp(4) scsi cards. +
Support AMD 756 IDE controller in pciide(4). +
Add FNM_NOSYS to fnmatch(3) for XPG conformance. +
Flesh out mdoc.samples(7). +
Disallow pkg_delete(1) when the pkg_prefix is on a read-only filesystem. +
Handle expansion of @exec better in pkg_add(1). +
Initial support for DSA keys in sshd(8). +
In ssh(1), switch to raw mode only if we got a pty. +
Replace kernel timeout(9) mechanism with one which permits dynamic allocation of timeout structures. +
In fdisk(8), do not use BIOS geometry by default, a lot of newer BIOSs get upset when this is done with larger drives. +
Make script(1) exit with a proper (and documented) exit code. +
Fix AMD K6 mtrr(4). +
Fix overflow in ftp(1). +
Fix directory mishandlings in who(1). +
Fix overflow in ul(1). +
Fix modes for ch(4) and st(4) devices so that operator is more powerful. +
ray(4) supports the raytheon/webgear ieee 802.11 FH wireless ethernet. +
ahc(4) driver now supports 789x chipset based controllers (7892/9 not verified).
Add SIOCGIFMTU/SIOCSIFMTU.
Support for the uninorth PCI bridge on the G4 macs.
bus_dma support in the powerpc port. -
apache 1.3.12 + mod_ssl 2.6.2 -
OpenSSL 0.9.5 -
Fix parsing of @-style commands in crontab(5) files. -
Make m4(1) compatible enough with GNU m4 to handle autoconf 2.13. -
Add ratecheck(9) API to the kernel. -
Quieten, secure, and improve ipv6(4) boot-time route setup. -
Cryptographic hardware services framework, first meant for use by IPsec(4). -
Fix interrupt handling issue in dc(4). -
Newer uvm(9) code. +
apache 1.3.12 + mod_ssl 2.6.2 +
OpenSSL 0.9.5 +
Fix parsing of @-style commands in crontab(5) files. +
Make m4(1) compatible enough with GNU m4 to handle autoconf 2.13. +
Add ratecheck(9) API to the kernel. +
Quieten, secure, and improve ipv6(4) boot-time route setup. +
Cryptographic hardware services framework, first meant for use by IPsec(4). +
Fix interrupt handling issue in dc(4). +
Newer uvm(9) code.
Prevent overflow in subr_extent code. -
Support FAT32 msdos partitions over 4GB. +
Support FAT32 msdos partitions over 4GB.
Many man page improvements. -
Disable suffix removal code in make(1), since it is buggy. -
Fix blink and underline attribute handling for new PC display mode. -
ncurses-5.0-20000311 +
Disable suffix removal code in make(1), since it is buggy. +
Fix blink and underline attribute handling for new PC display mode. +
ncurses-5.0-20000311
IPFilter 3.3.11 -
Support more eisa ep(4) cards. -
Implement realtime signal routines in compat_linux(8). +
Support more eisa ep(4) cards. +
Implement realtime signal routines in compat_linux(8).
Disable K6 MTRR until it is fixed. -
Update rtadvd(8) +
Update rtadvd(8)
Get rid of leading NULs in /kern/msgbuf.
Disallow packets to malicious 6to4 prefixes.
Fix radix tree mishandling bug in routing code. -
Add more gnu-compatible options to m4(1) -
Repair sub-shell execution handling in hostname.if(5) +
Add more gnu-compatible options to m4(1) +
Repair sub-shell execution handling in hostname.if(5)
Reverse engineer crypto lockout function on the aeon crypto card. -
Fix file descriptor leak in compress(1) -
Fix a memory corruption bug in the IPsec(4) skipjack implementation. -
ncurses-5.0-20000304. -
Disallow root password guessing in sshd(8). -
grep(1) 2.4.1 +
Fix file descriptor leak in compress(1) +
Fix a memory corruption bug in the IPsec(4) skipjack implementation. +
ncurses-5.0-20000304. +
Disallow root password guessing in sshd(8). +
grep(1) 2.4.1
Multiple inclusion protection problem solution on the sparc. -
isakmpd(8) update. -
Add support for new signals to the compat_linux(8) emulation routines. -
Add 802.1Q support to tcpdump(8). +
isakmpd(8) update. +
Add support for new signals to the compat_linux(8) emulation routines. +
Add 802.1Q support to tcpdump(8).
OpenSSH 1.2.3 released. -
Fix a pipe close race in sshd(8). -
Fix a panic in compat_ibcs2(8) emulation code. +
Fix a pipe close race in sshd(8). +
Fix a panic in compat_ibcs2(8) emulation code.
Make P_tmpdir point to /tmp, not /var/tmp. -
Attempt to handle corrupt inetd.conf files better. +
Attempt to handle corrupt inetd.conf files better.
Try to fix the uio hog problem. -
Fix STAT in ftpd(8) to be RFC959 compliant. +
Fix STAT in ftpd(8) to be RFC959 compliant.
Optimized kernel fdalloc() -
Add some missing compat_linux(8) emulation routines. +
Add some missing compat_linux(8) emulation routines.
Move kernel crypto code to /sys/crypto -
Many ppp(8) fixes. +
Many ppp(8) fixes.
Some libc_r fixes. -
mg(1) version 2a added to the source tree, and we are fixing many things in it. -
Fix an entropy-robbing bug in the ssl(8) libcrypto. -
Change wicontrol(8) so that multiple parameters can be set at the same time. -
Add -m parameter to strings(1). -
Add getifaddrs(3). +
mg(1) version 2a added to the source tree, and we are fixing many things in it. +
Fix an entropy-robbing bug in the ssl(8) libcrypto. +
Change wicontrol(8) so that multiple parameters can be set at the same time. +
Add -m parameter to strings(1). +
Add getifaddrs(3).
Permit enlarging of msgbuf on the various architectures.
On sun4m machines, replace .{u,}{mul,div,mod} functions with faster versions using the new sun4m instructions. A very significant performance improvement. -
Add fseeko(3) and ftello(3) interfaces. +
Add fseeko(3) and ftello(3) interfaces.
Two TCP SACK fixes -- SACK now appears to be completely reliable. -
Optimize bridge(4) code by allocating less mbufs. -
Fix alignment fault in amd(8) on the alpha. -
Add support for ses(4) devices, and the sesd(8) tools for probing. -
Add support for 12160 (Ultra3) in isp(4). -
Buffer overflows in mopd(8) +
Optimize bridge(4) code by allocating less mbufs. +
Fix alignment fault in amd(8) on the alpha. +
Add support for ses(4) devices, and the sesd(8) tools for probing. +
Add support for 12160 (Ultra3) in isp(4). +
Buffer overflows in mopd(8)
Complete hypersparc support.
Link sparc boot and bootxx bootblocks at different addresses; repairs booting on the hypersparc. -
update to latest KTH kerberosIV 1.0 -
Update to newer compile_et(1). -
Full support for serial console on the i386, see boot(8). -
Support PPPoE in tcpdump(8). +
update to latest KTH kerberosIV 1.0 +
Update to newer compile_et(1). +
Full support for serial console on the i386, see boot(8). +
Support PPPoE in tcpdump(8).
Fix alignment problem for ancillary data; affected 64 bit machines. -
Do not call sleep(3) in rcmd(3). +
Do not call sleep(3) in rcmd(3).
On sparc, avoid flushing unmapped memory from the cache in dvma_mapout().
ipf 3.3.9 -
Move smrsh(8) to /usr/libexec. -
Add traceroute6(8). +
Move smrsh(8) to /usr/libexec. +
Add traceroute6(8).
Use extents instead of rmaps to manage sparc dvma space.
Have extent_alloc_subregion() also handle an alignment offset. -
More fixes to xl(4) for non-MII cards. -
In sshd(8), move XAUTHORITY to a subdirectory, fixing security issues. -
Handle directly connected lines better in pppd(8). -
Y2K repairs in cvs(1). -
Let weak symbols take precedence over second hand symbols in ld(1). -
wx(4) driver supporting the Intel 82452 gigabit ethernet card. -
Support hundreds of interfaces in dhclient(8) and dhcpd(8). +
More fixes to xl(4) for non-MII cards. +
In sshd(8), move XAUTHORITY to a subdirectory, fixing security issues. +
Handle directly connected lines better in pppd(8). +
Y2K repairs in cvs(1). +
Let weak symbols take precedence over second hand symbols in ld(1). +
wx(4) driver supporting the Intel 82452 gigabit ethernet card. +
Support hundreds of interfaces in dhclient(8) and dhcpd(8).
texinfo 4.0
Split i386 memory <16MB into it's own freelist, permitting large memory machines to work better. -
New fhopen(2), fhstat(2), and fhstatfs(2) system calls to easier support userland filesystems. -
Support newer LVD models in the ncr(4) driver. -
gdt(4) driver for the ICP-Vortex RAID card series. -
Update to FreeBSD newfs_msdos(8), which can support hard drives too +
New fhopen(2), fhstat(2), and fhstatfs(2) system calls to easier support userland filesystems. +
Support newer LVD models in the ncr(4) driver. +
gdt(4) driver for the ICP-Vortex RAID card series. +
Update to FreeBSD newfs_msdos(8), which can support hard drives too
New OpenBSD art page. -
Updates to the lmc(4) device driver. -
uaudio(4) support. -
ti(4) also supports Farallon PN9000SX. -
ncurses-5.0-20000205. -
adw(4) now supports Advansys U2W scsi cards. +
Updates to the lmc(4) device driver. +
uaudio(4) support. +
ti(4) also supports Farallon PN9000SX. +
ncurses-5.0-20000205. +
adw(4) now supports Advansys U2W scsi cards.
Further sparc pmap improvements. -
Allow ssh-keygen(1) to be used for generating signatures of any ssh(1) control file. +
Allow ssh-keygen(1) to be used for generating signatures of any ssh(1) control file.
In sparc port, handle SM30 specially because it starts up with the cache running. -
import usbdevs(8). -
When handling an apm(4) suspend, power down pcmcia devices; when unsuspending, power them back up. Very nice. -
Rewrite makewhatis(8) in perl(1). +
import usbdevs(8). +
When handling an apm(4) suspend, power down pcmcia devices; when unsuspending, power them back up. Very nice. +
Rewrite makewhatis(8) in perl(1).
Deal with empty path element in LD_LIBRARY_PATH variable.
On i386 prevent overflow in computation of buffer cache limitation, thus supporting machines with lots of memory.
Hardware encryption support added to wi(4) (the wavelan driver). -
Performance optimizations to m4(1). -
Fix a panic in nfsd(8). -
Have mkdir -m support sticky and setuid bits. -
Support -R flag in rtadvd(8). -
Without a subcommand, have atactl(8) assume that the "identify" command is implied. -
Workaround in ftp(1), for Y2K broken ftp servers that return 19100 for the year. Remind is this is here in the year 19098, ok? +
Performance optimizations to m4(1). +
Fix a panic in nfsd(8). +
Have mkdir -m support sticky and setuid bits. +
Support -R flag in rtadvd(8). +
Without a subcommand, have atactl(8) assume that the "identify" command is implied. +
Workaround in ftp(1), for Y2K broken ftp servers that return 19100 for the year. Remind is this is here in the year 19098, ok?
ipf 3.3.8 -
Fix a pty close race in sshd(8). -
Arrange so that dhclient(8) does not update /etc/resolv.conf if no DNS information is found. -
isakmpd(8) update. -
Support 93C66 and 93C56 SEEPROM chips (used by more modern ahc(4) cards). -
Fix a number of bugs in fsplit(1). -
Use ed(1) in /etc/rc, since grep(1) is in /usr. +
Fix a pty close race in sshd(8). +
Arrange so that dhclient(8) does not update /etc/resolv.conf if no DNS information is found. +
isakmpd(8) update. +
Support 93C66 and 93C56 SEEPROM chips (used by more modern ahc(4) cards). +
Fix a number of bugs in fsplit(1). +
Use ed(1) in /etc/rc, since grep(1) is in /usr.
i386 now runs libkvm instead of libkvm.old. -
Add a dmesg(8) alias to the install media. -
In gcc(1), add an i386 specific peephole optimization for stack adjustment. -
Fix some APM version 1.2 issues, thus making IBM Thinkpads work. +
Add a dmesg(8) alias to the install media. +
In gcc(1), add an i386 specific peephole optimization for stack adjustment. +
Fix some APM version 1.2 issues, thus making IBM Thinkpads work.
On the i386, now use the memory map information supplied by the bootblocks. -
Use alloca(3) instead of malloc(3) in execl(3) and execle(3), so that they are vfork(2) safe. -
sudo 1.6.2p1 -
Arrange so that sshd(8) does not do port forwarding until shell successfully starts. +
Use alloca(3) instead of malloc(3) in execl(3) and execle(3), so that they are vfork(2) safe. +
sudo 1.6.2p1 +
Arrange so that sshd(8) does not do port forwarding until shell successfully starts.
Repair a stupid cache-lockdown bug in the sparc pmap. -
Repair memory leak in freeaddrinfo(3). -
Significant code shrinkage in IPsec(4), as most AH and ESP code starts sharing more subfunctions. -
Enable ipv6 support in rsh(1), rlogin(1), rshd(8), and rlogind(8). -
Fix rcmd(3), iruserok(3), and ruserok(3) to be IPv6 capable, also add more address family independent routines: rcmd_af(3) and iruserok_sa(3). +
Repair memory leak in freeaddrinfo(3). +
Significant code shrinkage in IPsec(4), as most AH and ESP code starts sharing more subfunctions. +
Enable ipv6 support in rsh(1), rlogin(1), rshd(8), and rlogind(8). +
Fix rcmd(3), iruserok(3), and ruserok(3) to be IPv6 capable, also add more address family independent routines: rcmd_af(3) and iruserok_sa(3).
Handle MVME1x2 boards with only one ZS serial chip.
Avoid some more cache flushes in the sparc pmap module. -
Handle memory shortage better in yacc(1), closing some memory leaks. +
Handle memory shortage better in yacc(1), closing some memory leaks.
Sparc pmap performance improved by optimizing some more pte table walks. -
isakmpd(8) update. +
isakmpd(8) update.
Many more man page improvements. -
More getaddrinfo(3) improvements to further match RFC2553. -
Add MAC address filtering in the bridge(4) code. -
Fix timestamp bug in make(1). -
Apache 1.3.11 + mod_ssl 2.5.0 merge +
More getaddrinfo(3) improvements to further match RFC2553. +
Add MAC address filtering in the bridge(4) code. +
Fix timestamp bug in make(1). +
Apache 1.3.11 + mod_ssl 2.5.0 merge
MVME328 scsi card support in mvme68k port.
Portable code for handling architectures with backwards-running stacks, like hppa.
Fix Y2K non-compliancy in amiga port's clock chip code. -
some minor repairs to grdc(6). +
some minor repairs to grdc(6).
MVME376 ethernet card support in mvme68k port.
mvme68k and mvme88k ramdisk repairs. -
sudo 1.6.2. -
Make application mode arrow keys work in ksh(1). -
Protocol independence added to bindresvport(3). +
sudo 1.6.2. +
Make application mode arrow keys work in ksh(1). +
Protocol independence added to bindresvport(3).
OpenSSH version 1.2.2 released. -
Lots of IPsec(4) pfkey improvements. -
Repair exception handling in gcc(1) i386 position independent code. -
ncurses-5.0-20000122 -
Don't allow time to be set far forwards and thus wrap, and a warn for time reversing if securelevel(7) > 1. -
Some compat_sunos(8) emulation improvements, particularly for getdents. +
Lots of IPsec(4) pfkey improvements. +
Repair exception handling in gcc(1) i386 position independent code. +
ncurses-5.0-20000122 +
Don't allow time to be set far forwards and thus wrap, and a warn for time reversing if securelevel(7) > 1. +
Some compat_sunos(8) emulation improvements, particularly for getdents.
Various powerpc port fixes -- it is getting close to actually working well. -
Handle SIGINT failures in ssh(1)/scp(1)/cvs(1) better. -
Fix bugs in the robots(6), tetris(6), and grdc(6) games. -
Make pax(1)/tar(1)/cpio(1) deal with files larger than 2 GB. -
Deal with getcwd(3) returning NULL in at(1). -
Rename ip4.allow sysctl(8) to ipip.allow. This variable no longer controls any explicitly configured IP-over-IP tunnels. -
Deal with getcwd(3) returning NULL in the supfilesrv. -
DRIVER IMPROVEMENT: Intel fxp(4) cards with nsphy(4) could not negotiate and maintain 100mbit link. A source code patch is available. -
Fix a buffer overflow in the i386 bootblocks! -
Fix vi(1) recover script to use sysopen(), to avoid magic in perl open(). -
Fix race condition in make(1) (only applies to make -j, which noone in OpenBSD ever uses). -
Reduce console loggin in sshd(8). -
Fix sshd -i. -
SECURITY FIX: Systems with procfs enabled and mounted contain a root hole due to a tricky exploit. A source code patch is available. -
Fix a possible NULL dereference in execve(2). -
gcc 2.95.2 -
add rip6query(8). +
Handle SIGINT failures in ssh(1)/scp(1)/cvs(1) better. +
Fix bugs in the robots(6), tetris(6), and grdc(6) games. +
Make pax(1)/tar(1)/cpio(1) deal with files larger than 2 GB. +
Deal with getcwd(3) returning NULL in at(1). +
Rename ip4.allow sysctl(8) to ipip.allow. This variable no longer controls any explicitly configured IP-over-IP tunnels. +
Deal with getcwd(3) returning NULL in the supfilesrv. +
DRIVER IMPROVEMENT: Intel fxp(4) cards with nsphy(4) could not negotiate and maintain 100mbit link. A source code patch is available. +
Fix a buffer overflow in the i386 bootblocks! +
Fix vi(1) recover script to use sysopen(), to avoid magic in perl open(). +
Fix race condition in make(1) (only applies to make -j, which noone in OpenBSD ever uses). +
Reduce console loggin in sshd(8). +
Fix sshd -i. +
SECURITY FIX: Systems with procfs enabled and mounted contain a root hole due to a tricky exploit. A source code patch is available. +
Fix a possible NULL dereference in execve(2). +
gcc 2.95.2 +
add rip6query(8).
Many man page fixes. -
Change pcvt(4) so that all regular function key presses go to straight to the application. -
Avoid botches in ftpd(8) and mtree(8) introduced from blind replacement of getwd(3) with getcwd(3). -
Disable agent forwarding in ssh(1) protocol 1.3. +
Change pcvt(4) so that all regular function key presses go to straight to the application. +
Avoid botches in ftpd(8) and mtree(8) introduced from blind replacement of getwd(3) with getcwd(3). +
Disable agent forwarding in ssh(1) protocol 1.3.
Support for another gigabit ethernet card using the alteon chipset. -
Fix a garbage printout in ftpd(8). -
Error message repair in from(1). -
Fix fxp(4)+nsphy(4) problems. -
Tons more man(1) page repairs. -
Fix a bug in the pipe(2) system call. -
v6 support in fstat(1). +
Fix a garbage printout in ftpd(8). +
Error message repair in from(1). +
Fix fxp(4)+nsphy(4) problems. +
Tons more man(1) page repairs. +
Fix a bug in the pipe(2) system call. +
v6 support in fstat(1).
Documentation improvements. -
Fix "traceroute -P 41" codepath blocked by inet6 import. -
Another fix improving on the earlier ld.so(1) version number fix. -
tcpdump(8) support for L2TP, Mobile IP, BGP, VLAN 802.1q, and INET6. +
Fix "traceroute -P 41" codepath blocked by inet6 import. +
Another fix improving on the earlier ld.so(1) version number fix. +
tcpdump(8) support for L2TP, Mobile IP, BGP, VLAN 802.1q, and INET6.
ncurses-5.0-20000115 -
Crank pms(4) delay to 4000 for another laptop that takes a long time. +
Crank pms(4) delay to 4000 for another laptop that takes a long time.
Make kernel know about the Coppermine CPUs.
Special case: one PCI bridge device... which is not a PCI bridge at all.
Handle SNAP encapsulated packets for the bridging blocknoip option.
Improve sparc pte handling for performance. -
Show blackhole routes in route(8) and netstat(1). +
Show blackhole routes in route(8) and netstat(1).
Fix a Y2001 bug in the hp300 boot code and kernel. -
Update the powerpc code. uvm(9) kernels do not work yet. -
Avoid touching the sdh register too often during atapi(4) device probe; some devices freak. -
More m4(1) fixes. -
Fix an obscure bug in ld(1) that caused it to treat directory names called "lib" differently. -
Y2K fix for a groff(1) macro. -
Remove gifconfig(8); replaced by syntax in ifconfig(8). -
Show problematic expressions in m4(1)'s expr error messages. -
Recursion depth control in gre(4), similar to what is in gif(4). +
Update the powerpc code. uvm(9) kernels do not work yet. +
Avoid touching the sdh register too often during atapi(4) device probe; some devices freak. +
More m4(1) fixes. +
Fix an obscure bug in ld(1) that caused it to treat directory names called "lib" differently. +
Y2K fix for a groff(1) macro. +
Remove gifconfig(8); replaced by syntax in ifconfig(8). +
Show problematic expressions in m4(1)'s expr error messages. +
Recursion depth control in gre(4), similar to what is in gif(4).
Various cleanups are happening to the netipx codebase.
Fix Promise Ultra/66 and SiS 5513 pciide support. -
blocknonip option in if_bridge and brconfig(8). -
pn(4) cards now use dc(4). -
More channel fixes in ssh(1). +
blocknonip option in if_bridge and brconfig(8). +
pn(4) cards now use dc(4). +
More channel fixes in ssh(1).
XFree86 3.3.6 -
Handle glob() return values better in restore(8). +
Handle glob() return values better in restore(8).
Hifn 7751 is the same as the Invertex board, the aeon driver. -
Support command-execution in /etc/hostname.* files, using ! syntax. -
Handle the bootpath properly in sbus isp(4). -
IPsec(4) ingress control. +
Support command-execution in /etc/hostname.* files, using ! syntax. +
Handle the bootpath properly in sbus isp(4). +
IPsec(4) ingress control.
Merge IPV6 into the GENERIC kernel. As far as the kernel is concerned, we are ipv6 ready now. However, lots of userland changes remain.. -
Reduce recursion in gif(4). +
Reduce recursion in gif(4).
Support Davicom DM910x in if_dc. -
Numerous IPsec(4) fixes and enhancements. +
Numerous IPsec(4) fixes and enhancements.
Allow aeon driver to match Hifn 7751.
Fix printing of SAs in route. -
Add ESP/AH statistics to netstat(1). +
Add ESP/AH statistics to netstat(1).
Fix to use network byte order in several places.
Allow booting from Qlogic isp cards.
Several IPsec-related sysctls added.
Various termtypes fixes. -
ncurses-5.0-20000108 +
ncurses-5.0-20000108
Add fake dcphy(4). -
In UKC, add a timezone command. -
Handle fxp(4) using iophy(4); broken in 2.6 release. -
Support LBA-mapped extended partitions in fdisk(8). -
Use arc4random(3) in IPV6 code. -
Import of gre(4) code. +
In UKC, add a timezone command. +
Handle fxp(4) using iophy(4); broken in 2.6 release. +
Support LBA-mapped extended partitions in fdisk(8). +
Use arc4random(3) in IPV6 code. +
Import of gre(4) code.
Early check for udp destination port 0. -
Newer raidframe code. -
userland ppp 2.26. +
Newer raidframe code. +
userland ppp 2.26.
Make NFS swap devices work once again.
In the mvme68k port, add support for the '060 based MVME177 card. -
Make some macros in m4(1) special. -
Improve column handling in ls(1). -
V6 support in systat(1). -
Y2K FIX: The at(1) command was unable to parse some kinds of dates. A source code patch is available. -
Improve sleep(1) for out-of-range values. -
Do not use kvm snooping in rtsold(8). -
Fix ftp(1) URL support accidentally broken by KAME. -
Fix a bug in smtpd(8). +
Make some macros in m4(1) special. +
Improve column handling in ls(1). +
V6 support in systat(1). +
Y2K FIX: The at(1) command was unable to parse some kinds of dates. A source code patch is available. +
Improve sleep(1) for out-of-range values. +
Do not use kvm snooping in rtsold(8). +
Fix ftp(1) URL support accidentally broken by KAME. +
Fix a bug in smtpd(8).
Make ssh IPV6 clean. KerberosIV only works on a v4 connection.
Fix mbuf out-of-bounds write which caused great grief for NFSv2 in an INET6 kernel. -
Add rmoption/rmoptions command to config(8), thus permitting a config file to include GENERIC and then remove things. -
Various small improvements and fixes to ssh(1). -
Fix pthreads(3) handling on the sparc. +
Add rmoption/rmoptions command to config(8), thus permitting a config file to include GENERIC and then remove things. +
Various small improvements and fixes to ssh(1). +
Fix pthreads(3) handling on the sparc.
Using weak symbols, support a real libpthread. -
The mknod(8) -m option should ignore the umask. +
The mknod(8) -m option should ignore the umask.
More man page cleanups, as always. -
Y2K FIX: A minor problem; the sparc eeprom(8) command is not Y2K compliant. A source code patch is available. +
Y2K FIX: A minor problem; the sparc eeprom(8) command is not Y2K compliant. A source code patch is available.
Permit midi compilation without other audio code. -
Y2K FIX: A minor problem in the logging support for the adduser(8) command. A source code patch is available. -
In config(8), permit multiple maxuser definitions. Newest overrides older ones. -
Use the dc(4) driver instead for a few other tulip-like cards. -
Change libc syslog() code to try to reopen the socket if a send fails. This handles the case of a restarted syslogd(8) better. -
Correct SIGTERM handling in ssh-agent(1). +
Y2K FIX: A minor problem in the logging support for the adduser(8) command. A source code patch is available. +
In config(8), permit multiple maxuser definitions. Newest overrides older ones. +
Use the dc(4) driver instead for a few other tulip-like cards. +
Change libc syslog() code to try to reopen the socket if a send fails. This handles the case of a restarted syslogd(8) better. +
Correct SIGTERM handling in ssh-agent(1).
ncurses-5.0-20000101 -
Permit non-IPsec(4) kernels to compile. -
Improve argument handling in wicontrol(8). -
Various fixes to LKM(4) unloading. +
Permit non-IPsec(4) kernels to compile. +
Improve argument handling in wicontrol(8). +
Various fixes to LKM(4) unloading.
Make ld/ld.so search all directories before accepting the best version of a shared library.
Do in6_if_up() at splsoftnet(), permitting drivers to get interrupts during the processing of their multicast reprogramming. -
Provide sysctl(8) net.inet6.icmp6.nodeinfo to permit admin to enable icmp6(4) node information query if so desired. +
Provide sysctl(8) net.inet6.icmp6.nodeinfo to permit admin to enable icmp6(4) node information query if so desired.
Support various kinds of inet6 entries and in /etc/netstart as well.
Improve handling of signed math in NFS kernel code. -
Parse /etc/sysctl.conf earlier in /etc/rc. +
Parse /etc/sysctl.conf earlier in /etc/rc.
Move sysctl to /sbin.
For other architectures, also check db_panic in kdb_trap().
Remove PIC versions of libarch and libresolv from the distribution.
Correctly copy pkthdr in m_split().
Fix udp multicast option handling. -
DRIVER IMPROVEMENT: Fix mii autoselect support for 3c900b. A source code patch is available. -
Fix signed errors in df(1). -
Repair netstat -ss. -
Optional swap encryption support in uvm; see new options(4) page. -
Do not strip international characters in fmt(1). +
DRIVER IMPROVEMENT: Fix mii autoselect support for 3c900b. A source code patch is available. +
Fix signed errors in df(1). +
Repair netstat -ss. +
Optional swap encryption support in uvm; see new options(4) page. +
Do not strip international characters in fmt(1).
Initialize lo0 for ipv6 automatically. -
Avoid a memory leak in telnet(1). +
Avoid a memory leak in telnet(1).
Honour the ddb.panic sysctl better. -
Enable scopeid hack in ifconfig(8), ping6(8), and netstat(1). +
Enable scopeid hack in ifconfig(8), ping6(8), and netstat(1).
Replace NRL get{addr,name}info() with KAME get{addr,name}info() in libc.
Fix a terminfo problem relating to unset capabilities. -
More ISA PnP NE2000 clones - see ne(4) +
More ISA PnP NE2000 clones - see ne(4)
TCP new reno
Fix IP multicast kernel panic -
Upgrade ipf(4), now version 3.3.6 -
Major cleanup of make(1) -
3c450-TX HomeConnect, see xl(4). -
Add Qlogic 1240/1280 support to isp(4). -
Update curses(3) to ncurses-19991218. -
Speed up blowfish(3) encryption by > 20%. -
More ipf(8) changes. Avoid rw_enter panic, coredumps when processing rules. +
Upgrade ipf(4), now version 3.3.6 +
Major cleanup of make(1) +
3c450-TX HomeConnect, see xl(4). +
Add Qlogic 1240/1280 support to isp(4). +
Update curses(3) to ncurses-19991218. +
Speed up blowfish(3) encryption by > 20%. +
More ipf(8) changes. Avoid rw_enter panic, coredumps when processing rules.
Preliminary token ring support. -
Continuing ssh(1) improvements. -
Add srcsa, dstsa, clearsa to ifconfig(8) -
New ioctls for binding enc(4) interfaces when bridging. -
Yet more make(1) cleanup. -
Preserve file flags in mv(1). -
Added the gif(4) interface for tunneling IPv4/IPv6. See gif(4), gifconfig(8). +
Continuing ssh(1) improvements. +
Add srcsa, dstsa, clearsa to ifconfig(8) +
New ioctls for binding enc(4) interfaces when bridging. +
Yet more make(1) cleanup. +
Preserve file flags in mv(1). +
Added the gif(4) interface for tunneling IPv4/IPv6. See gif(4), gifconfig(8).
Add more PCMCIA NE2000 devices. -
Fix and re-enable TCP SACK code. Eliminate TCP_NEWRENO. See options(4). +
Fix and re-enable TCP SACK code. Eliminate TCP_NEWRENO. See options(4).
Continuing IPV6 improvements. -
Print ipv6 addresses correctly IPsec(4) flows. See netstat(1), route(8). -
ipsecadm(8) now accepts ipv6 addresses. +
Print ipv6 addresses correctly IPsec(4) flows. See netstat(1), route(8). +
ipsecadm(8) now accepts ipv6 addresses.
Improve timeout handling for some ATAPI devices. -
Add man pages for icmp6(4) and ip6(4) -
traceroute(8) fixes. Add -c, -I. Fix -P. +
Add man pages for icmp6(4) and ip6(4) +
traceroute(8) fixes. Add -c, -I. Fix -P.
Fix multicast kernel panic in ip_output.
Add forward reference for sockaddr to netinet/in.h -
Some game fixes: fortune(6) and robots(6). -
More make(1) cleanup. +
Some game fixes: fortune(6) and robots(6). +
More make(1) cleanup.
Various IPV6 changes. -
ipmon(8) -F now works properly. -
Import of IPFilter 3.3.5. See ipf(8). -
Long overdue make(1) cleanup. -
ipf(8) can now use interface names. +
ipmon(8) -F now works properly. +
Import of IPFilter 3.3.5. See ipf(8). +
Long overdue make(1) cleanup. +
ipf(8) can now use interface names.
Add support for Qlogic 1240 and 1280.
Preliminary awi driver code.
Fix privilege error in wi(4) driver. -
Replace pn(4) driver with dc(4). -
Overflows in at(1), ar(1), cdio(1). -
Import of IPFilter 3.3.4. See ipf(8). +
Replace pn(4) driver with dc(4). +
Overflows in at(1), ar(1), cdio(1). +
Import of IPFilter 3.3.4. See ipf(8).
Changed termcap providers -
Various fixes to hunt(6). +
Various fixes to hunt(6).
TI TNETE2101 PHY -
Fix dlfcn(3) prototypes -
Sync awk(1) with June 6, 1999 version -
New dc(4) driver for DEC/Intel 21143 and clones -
Don't use stdio for getpass(3). +
Fix dlfcn(3) prototypes +
Sync awk(1) with June 6, 1999 version +
New dc(4) driver for DEC/Intel 21143 and clones +
Don't use stdio for getpass(3).
Update of PHY subsystem
Various sparc and i386 pmap fixes for UVM -
Sundance ST201 Ethernet from FreeBSD. See ste(4) +
Sundance ST201 Ethernet from FreeBSD. See ste(4)
IPsec cleanup -
Cleanup of make(1). +
Cleanup of make(1).
Lots of UVM work -
MFS unmount race fixes -
Add bindresvport_af(3) and rresvport(3) APIs to libc. -
Updated curses(3) to ncurses-19991211 +
MFS unmount race fixes +
Add bindresvport_af(3) and rresvport(3) APIs to libc. +
Updated curses(3) to ncurses-19991211
Overflows in crunchgen -
Fix chpass(1) temp file handling +
Fix chpass(1) temp file handling
Various soft update fixes
Integration of KAME IPv6 -
Features added to find(1). -
Fixes to eap(4) driver -
Overflows is split(1), jot(1), ssio, telnet(1), file(1). -
SiS 900/7016 Ethernet from FreeBSD. See sis(4) -
Tape support and major code changes to atapiscsi(4). -
The third ssh jumbo patch is now available. Numerous (non-security) additions/changes have been made to OpenSSH since the OpenBSD 2.6 release. A jumbo patch is available which adds many features. -
The second ssh jumbo patch is now available. Numerous (non-security) additions/changes have been made to OpenSSH since the OpenBSD 2.6 release. A jumbo patch is available which adds many features. -
Some overflows in patch(1). -
Buffer overflow in dnsquery(1). -
Buffer overflow in error(1). -
Fix a buffer overflow in dhclient(8). -
Fix two crashes in awk(1). -
Fix off-by-one in apply(1). -
Fix bug in pr(1). +
Features added to find(1). +
Fixes to eap(4) driver +
Overflows is split(1), jot(1), ssio, telnet(1), file(1). +
SiS 900/7016 Ethernet from FreeBSD. See sis(4) +
Tape support and major code changes to atapiscsi(4). +
The third ssh jumbo patch is now available. Numerous (non-security) additions/changes have been made to OpenSSH since the OpenBSD 2.6 release. A jumbo patch is available which adds many features. +
The second ssh jumbo patch is now available. Numerous (non-security) additions/changes have been made to OpenSSH since the OpenBSD 2.6 release. A jumbo patch is available which adds many features. +
Some overflows in patch(1). +
Buffer overflow in dnsquery(1). +
Buffer overflow in error(1). +
Fix a buffer overflow in dhclient(8). +
Fix two crashes in awk(1). +
Fix off-by-one in apply(1). +
Fix bug in pr(1).
Make soft updates mostly work with UVM. -
SECURITY FIX: The USA version of the ssl library package, called sslUSA26, contained buffer overflows. A binary patch is available for people who installed before December 3. +
SECURITY FIX: The USA version of the ssl library package, called sslUSA26, contained buffer overflows. A binary patch is available for people who installed before December 3.
Remove ctm(1) from the src tree -- look for it in ports now.
libkvm.old hacks for UVM. -
Fix utmp handling in ftpd(8), for when running in daemon mode. -
More m4(1) fixes. -
Fix append keyword in dhclient(8). -
Buglet in sort(1). +
Fix utmp handling in ftpd(8), for when running in daemon mode. +
More m4(1) fixes. +
Fix append keyword in dhclient(8). +
Buglet in sort(1).
DPT SmartCache III/IV SCSI PCI/EISA driver. -
mkisofs 1.11.3 -
Fix mangled files for put command in ftpd(8). -
RELIABILITY FIX: Be more careful in poll(2). A source patch is available. +
mkisofs 1.11.3 +
Fix mangled files for put command in ftpd(8). +
RELIABILITY FIX: Be more careful in poll(2). A source patch is available.
ncurses-5.0-19991127
Enable TI16750 UART support.
driver for ISA hostess 4-channel serial card.
Import ssh-askpass into our X11 src tree.
For i386: Winchip c6 TSC is broken, ignore it. -
Fix descriptor leaks and potential double fclose() calls in skey(1) library code. -
Correct icmp(4) packet length in ipmon(8). -
Remove unused functionality from the i386 pcvt(4) driver. +
Fix descriptor leaks and potential double fclose() calls in skey(1) library code. +
Correct icmp(4) packet length in ipmon(8). +
Remove unused functionality from the i386 pcvt(4) driver.
Allow machine-dependent code to set the PAGE_SIZE constant, and set it in MD code if possible -- performance improvement. -
new pthreads(3) code. -
Parsing error fix to calendar(1). -
Some more m4(1) fixes. -
Set SO_REUSEADDR and SO_LINGER on forwarded ports in ssh(1). -
SECURITY FIX: Limit newaliases run to root and trusted users. A source patch is available. -
SSH_ASKPASS support in ssh-add(1). -
Numerous ssh(1) and sshd(8) improvements... too many to mention. -
Newer version of the isp(4) driver. -
Fix a bug in rarpd(8). +
new pthreads(3) code. +
Parsing error fix to calendar(1). +
Some more m4(1) fixes. +
Set SO_REUSEADDR and SO_LINGER on forwarded ports in ssh(1). +
SECURITY FIX: Limit newaliases run to root and trusted users. A source patch is available. +
SSH_ASKPASS support in ssh-add(1). +
Numerous ssh(1) and sshd(8) improvements... too many to mention. +
Newer version of the isp(4) driver. +
Fix a bug in rarpd(8).
Add support for SIGIO to lms(4), pms(4), and mms(4).
Fix two bugs in info(1).
select on pipes was broken, and occasionally someone would notice it (in particular rsync). -
Use mkstemp(3) in crontab(1). -
Improve egcs performance. -
Add memconfig(8). -
Add mtrr(4) support from freebsd. -
SSH_CMSG_MAX_PACKET_SIZE support in sshd(8). -
Improve whois(1) even more. +
Use mkstemp(3) in crontab(1). +
Improve egcs performance. +
Add memconfig(8). +
Add mtrr(4) support from freebsd. +
SSH_CMSG_MAX_PACKET_SIZE support in sshd(8). +
Improve whois(1) even more.
Many man page fixes. -
sudo 1.6 (BSD licenced now!) -
Fix more m4(1) bugs. -
In scp(1), do not display banner if process is in the background. -
Permit kernel to compile without FFS once again. +
sudo 1.6 (BSD licenced now!) +
Fix more m4(1) bugs. +
In scp(1), do not display banner if process is in the background. +
Permit kernel to compile without FFS once again.
More links to man pages. -
Bug fixes to rl(4) and tx(4) driver. -
More ATAPI disk fixes (may come as a patch file later). -
Other misc ssh(1) improvements. -
RSA key fingerprints in the ssh(1) commands. -
Do ANSI cursor save/restore in i386 pcvt(4) driver. -
Fix more m4(1) bugs; patch for this problem is included in previous m4 errata entry. +
Bug fixes to rl(4) and tx(4) driver. +
More ATAPI disk fixes (may come as a patch file later). +
Other misc ssh(1) improvements. +
RSA key fingerprints in the ssh(1) commands. +
Do ANSI cursor save/restore in i386 pcvt(4) driver. +
Fix more m4(1) bugs; patch for this problem is included in previous m4 errata entry.
A bit more playing around in sshd to deal with the broken key sizes that Datafellows ssh gives. -
Honour ddb.console in the mac68k port. +
Honour ddb.console in the mac68k port.
Fix retransmission problem in TCP. -
Improve whois(1) significantly to use *.whois-servers.net. +
Improve whois(1) significantly to use *.whois-servers.net.
In lots of daemons, do not syslog getpeername complaints. -
In ksh(1), quote metacharacters when completing filenames. -
Fix a signal race crash in ksh(1). -
link window(1) with -locurses. -
top(1) should use stathz, not hz, for calculating process run times. +
In ksh(1), quote metacharacters when completing filenames. +
Fix a signal race crash in ksh(1). +
link window(1) with -locurses. +
top(1) should use stathz, not hz, for calculating process run times.
Shrink the puc(4) dmesg output. -
Add OSS audio support to the BSD/OS emulation. -
A kernel reliability fix for the alpha. A patch is available. -
A kernel reliability fix for all m68k architectures. A patch is available (which all m68k architectures share). -
Numerous (non-security) additions/changes have been made to OpenSSH since the OpenBSD 2.6 release. A jumbo patch is available which adds many features. -
A kernel reliability fix for the sparc. A patch is available. -
Counter overflow fix to scp(1). +
Add OSS audio support to the BSD/OS emulation. +
A kernel reliability fix for the alpha. A patch is available. +
A kernel reliability fix for all m68k architectures. A patch is available (which all m68k architectures share). +
Numerous (non-security) additions/changes have been made to OpenSSH since the OpenBSD 2.6 release. A jumbo patch is available which adds many features. +
A kernel reliability fix for the sparc. A patch is available. +
Counter overflow fix to scp(1).
Merge dvdio.h support into cdio.h, and cleanup various unportable bits. -
Various other ssh(1) cleanups. -
Print all bad options in sshd(8) and ssh(1) before exiting with a failure. -
sshd(8) now has a IgnoreUserKnownHosts flag. -
Optionally run a command in newsyslog(1), instead of sending a signal. -
Some make(1) fixes. -
Improve dhcp integration into the install media. -
Logging cleanup of ssh(1). +
Various other ssh(1) cleanups. +
Print all bad options in sshd(8) and ssh(1) before exiting with a failure. +
sshd(8) now has a IgnoreUserKnownHosts flag. +
Optionally run a command in newsyslog(1), instead of sending a signal. +
Some make(1) fixes. +
Improve dhcp integration into the install media. +
Logging cleanup of ssh(1).
Have sshd check the user's personal ~/.ssh/known_hosts file. -
NOTE: OpenSSH does not have the ssh 1.2.27 rsa bug. +
NOTE: OpenSSH does not have the ssh 1.2.27 rsa bug.
Install a shared libperl. -
Fix m4, accidentally broken in 2.6. A patch is available. -
Users should not be able to change the media configuration of interfaces. A patch is available. -
Add strtok_r(3). -
newsyslog race condition fixes. A patch is available. -
Various make(1) fixes. +
Fix m4, accidentally broken in 2.6. A patch is available. +
Users should not be able to change the media configuration of interfaces. A patch is available. +
Add strtok_r(3). +
newsyslog race condition fixes. A patch is available. +
Various make(1) fixes.
screen blanker code for the amiga. -
Default network name in wi(4) is "", not "ANY". +
Default network name in wi(4) is "", not "ANY".
Start of DVD support. -
New sf(4) driver supports Adaptec "StarFire" AIC6915-based Ethernet PCI cards. -
Numerous more ssh(1) and sshd(8) cleanups. +
New sf(4) driver supports Adaptec "StarFire" AIC6915-based Ethernet PCI cards. +
Numerous more ssh(1) and sshd(8) cleanups.
Slow down ATAPI IDENTIFY (final critical fix which shipped in 2.6).
Another critical i386 memory allocation fix (shipped in 2.6).
Critical brooktree driver fix (shipped in 2.6). -
Fix some more atapi bugs (shipped in 2.6). -
Fix byte order bugs in the new wdc/atapi code. +
Fix some more atapi bugs (shipped in 2.6). +
Fix byte order bugs in the new wdc/atapi code.
Sparc uses UVM by default now. -
Allow rarpd(8) to work on aliased interfaces. -
Support multiple enc(4) interfaces. -
Reliability fixes for the ATAPI code (shipped in 2.6). -
New driver: al(4) supports the ADMtek AL981/AN985 PCI ethernet cards. -
Various other ssh(1) and sshd(8) cleanups. +
Allow rarpd(8) to work on aliased interfaces. +
Support multiple enc(4) interfaces. +
Reliability fixes for the ATAPI code (shipped in 2.6). +
New driver: al(4) supports the ADMtek AL981/AN985 PCI ethernet cards. +
Various other ssh(1) and sshd(8) cleanups.
Add ethernet-IP encapsulation. -
In ssh, use libssl(8) md5 routines instead of our libc routines. -
Disassociate interfaces from ipnat(8) after they've been removed from the interface list. +
In ssh, use libssl(8) md5 routines instead of our libc routines. +
Disassociate interfaces from ipnat(8) after they've been removed from the interface list.
Make ASYNC pipes capable of generating SIGIO.
Emulate FreeBSD F[GS]ETOWN. -
Fix some further ARP problems in bridge(4). -
Fix scp(1) counters for > 1 hour. -
Support LMC1200 in lmc(4). -
Repair multicast routing description block in afterboot(8). -
Support missing tty flags in stty(1). -
libkeynote update. +
Fix some further ARP problems in bridge(4). +
Fix scp(1) counters for > 1 hour. +
Support LMC1200 in lmc(4). +
Repair multicast routing description block in afterboot(8). +
Support missing tty flags in stty(1). +
libkeynote update.
Support UVM throughout userland. -
Support for puc(4) (PCI serial/parallel cards). +
Support for puc(4) (PCI serial/parallel cards).
Make disklabel.h safe for C++ use. -
Use reference-copies of the mbuf in bridge(4) code again, instead of full copies. -
Make ssh print the correct remote version number. -
Make ssh(1) compile faster by using a library. -
In ti(4), use bus_dma routines instead of uvm_page_alloc_contig. +
Use reference-copies of the mbuf in bridge(4) code again, instead of full copies. +
Make ssh print the correct remote version number. +
Make ssh(1) compile faster by using a library. +
In ti(4), use bus_dma routines instead of uvm_page_alloc_contig.
Cleanup i386 disktab.

- - -