[BACK]Return to plus28.html CVS log [TXT][DIR] Up to [local] / www

Annotation of www/plus28.html, Revision 1.35

1.23      naddy       1: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
1.1       deraadt     2: <html>
                      3: <head>
1.25      deraadt     4: <title>OpenBSD 2.8 changes</title>
1.23      naddy       5: <link rev=made href="mailto:www@openbsd.org">
1.1       deraadt     6: <meta name="resource-type" content="document">
                      7: <meta name="description" content="the main OpenBSD page">
                      8: <meta name="keywords" content="openbsd,main">
                      9: <meta name="distribution" content="global">
                     10: <meta name="copyright" content="This document copyright 1996 by OpenBSD.">
                     11: </head>
                     12:
1.27      david      13: <body bgcolor="#ffffff" text="#000000" link="#23238E">
1.1       deraadt    14:
1.19      jsyn       15: <a href="index.html"><img alt="[OpenBSD]" height="30" width="141" src="images/smalltitle.gif" border="0"></a>
1.1       deraadt    16: <p>
1.23      naddy      17: <h2><font color="#e00000">Changes made between OpenBSD 2.7 and OpenBSD-2.8</font></h2>
                     18: <hr>
1.1       deraadt    19:
                     20: <p>
                     21: This is a partial list of the major machine independent changes
                     22: (i.e., these are the changes people ask about most often).  Port
                     23: specific changes have also been made, and are sometimes mentioned
                     24: in the pages for the specific <a href=plat.html>ports</a> if you
                     25: are interested in further port-specific details.  Many ports
                     26: have had architecture-specific enhancements relative to NetBSD,
                     27: but when they do not they certainly have plenty of platform-independent
                     28: changes, starting with those listed below.
                     29:
                     30: <p>
1.23      naddy      31: Note: <font color="#e00000">Problems for which patches exist are marked in red</font>.
1.1       deraadt    32:
                     33: <p>
                     34: <h3>
1.22      deraadt    35: For changes in other releases, click below:<br>
                     36: <a href="plus20.html">2.0</a>,
                     37: <a href="plus21.html">2.1</a>,
                     38: <a href="plus22.html">2.2</a>,
                     39: <a href="plus23.html">2.3</a>,
                     40: <a href="plus24.html">2.4</a>,
                     41: <a href="plus25.html">2.5</a>,
                     42: <a href="plus26.html">2.6</a>,
                     43: <a href="plus27.html">2.7</a>,
                     44: <a href="plus29.html">2.9</a>,
                     45: <a href="plus30.html">3.0</a>,
                     46: <a href="plus31.html">3.1</a>,
                     47: <a href="plus32.html">3.2</a>,
1.24      deraadt    48: <a href="plus33.html">3.3</a>,
1.26      david      49: <a href="plus34.html">3.4</a>,
1.28      deraadt    50: <a href="plus35.html">3.5</a>,
1.30      miod       51: <a href="plus36.html">3.6</a>,
1.31      deraadt    52: <a href="plus37.html">3.7</a>,
1.33      deraadt    53: <a href="plus38.html">3.8</a>,
1.34      deraadt    54: <a href="plus39.html">3.9</a>,
1.35    ! deraadt    55: <a href="plus40.html">4.0</a>,
1.22      deraadt    56: <a href="plus.html">current</a>.
1.1       deraadt    57: <br>
                     58: </h3>
                     59:
                     60: <hr>
                     61:
                     62: <p>
1.23      naddy      63: <h3><font color="#0000e0">OpenBSD 2.8 released (December 1, 2000).</font></h3><p>
1.1       deraadt    64: <ul>
1.23      naddy      65: <li><font color="#e00000"><strong>RELIABILITY FIX: Carefully check that a.out executable objects are rounded to a page.<br>
                     66:     <a href="errata27.html#execsubr">A patch is available</a></strong></font>.<br>
                     67:     <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
1.6       jason      68: <li>OpenSSH 2.3.0 released.<br>
1.23      naddy      69:     <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
                     70: <li><font color="#e00000"><strong>SECURITY FIX: Hostile servers can force OpenSSH clients to do agent or X11 forwarding.<br>
                     71:     <a href="errata27.html#sshforwarding">A patch is available</a></strong></font>.<br>
                     72:     <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
                     73: <li>Support Macronix 98727/98732 chips in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dc&amp;sektion=4">dc(4)</a>.
                     74: <li>Use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mkstemp&amp;sektion=3">mkstemp(3)</a> in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=csh&amp;sektion=1">csh(1)</a>.
                     75: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhclient&amp;sektion=8">dhclient(8)</a>, accept unknown options by default.
                     76: <li>Repair mips support in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=gcc&amp;sektion=1">gcc(1)</a>.
                     77: <li>Repair <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=config&amp;sektion=8">config(8)</a> ECOFF support.
                     78: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=config&amp;sektion=8">config(8)</a>, permit redefinition of pseudo-device directives.
                     79: <li>Get rid of ST506 phantoms in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wdc&amp;sektion=4">wdc(4)</a>.
                     80: <li>Handle Davicom <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dc&amp;sektion=4">dc(4)</a> devices better.
                     81: <li>Deny agent/X11 forwarding unless requested, in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&amp;sektion=8">sshd(8)</a>.
                     82: <li>Non-blocking IO on pty channels in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&amp;sektion=8">sshd(8)</a>.
1.1       deraadt    83: <li>Avoid accidental random subsystem re-seeding.
                     84: <li>Change BUFCACHEPERCENT calculations.
1.23      naddy      85: <li>Remove the notion of "Copybuffer ownership" from <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pcvt&amp;sektion=4">pcvt(4)</a>.
                     86: <li>Minor tweaks to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&amp;sektion=8">isakmpd(8)</a>.
1.1       deraadt    87: <li>Significant pcidevs update.
                     88: <li>Many man page changes.
1.23      naddy      89: <li>Handle more Via chipsets in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pcibios&amp;sektion=4">pcibios(4)</a> interrupt repair.
                     90: <li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bpf&amp;sektion=4">bpf(4)</a> support in powerpc <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=gm&amp;sektion=4">gm(4)</a> driver.
                     91: <li>Support Xircom X3201-based cardbus cards in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dc&amp;sektion=4">dc(4)</a>.
                     92: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhclient&amp;sektion=8">dhclient(8)</a>, only DHCPNAK bootreplies may be a yiaddr of 0.0.0.0.
                     93: <li>Support older vandyke software in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&amp;sektion=8">sshd(8)</a>.
1.1       deraadt    94: <li>Man page fixes.
1.23      naddy      95: <li>Avoid NULL-deref in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ipsec&amp;sektion=4">ipsec(4)</a> + pmtu case.
                     96: <li>Stop IPv6 multicast moaning and groaning on <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=enc&amp;sektion=4">enc(4)</a> interfaces.
1.1       deraadt    97: <li>Mark swap16() and swap32() with __extension__.
                     98: <li>Restore i386 boot block pciprobe code, since some non-PCIBIOS machines need it to determine of pci bus is in mode 1 or 2.
1.23      naddy      99: <li>spltty protection in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pcvt&amp;sektion=4">pcvt(4)</a> mouse support.
                    100: <li>Unsigned counters in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=vmstat&amp;sektion=8">vmstat(8)</a>.
1.1       deraadt   101: <li>Support ^T status messages on the install media.
1.23      naddy     102: <li>Add shared library awareness to powerpc <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=gdb&amp;sektion=1">gdb(1)</a>.
                    103: <li>Fix setupterm() issues in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=telnetd&amp;sektion=8">telnetd(8)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=telnet&amp;sektion=1">telnet(1)</a>.
                    104: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=hifn&amp;sektion=4">hifn(4)</a>, only accept interrupts the driver really generated.
                    105: <li><font color="#e00000"><strong>SECURITY FIX: 2 possible overflows exist in X11 xtrans code.<br>
                    106:     <a href="errata27.html#xtrans">A patch is available</a></strong></font>.
1.1       deraadt   107: <li>Solve some of the powerpc data fault issues.
                    108: <li>Many more vax improvements.
1.23      naddy     109: <li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=hifn&amp;sektion=4">hifn(4)</a> on very fast machines, like p3/933.
                    110: <li>Fix alignment fault in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&amp;sektion=1">ssh(1)</a>.
1.1       deraadt   111: <li>Many documentation cleanups.
1.23      naddy     112: <li>Use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=clearerr&amp;sektion=3">clearerr(3)</a> in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=disklabel&amp;sektion=1">disklabel(1)</a> so that ^D works in aborts.
1.1       deraadt   113: <li>Update to ncurses 5.2
1.23      naddy     114: <li>Fix noprint/print/octal options in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=vi&amp;sektion=1">vi(1)</a>.
1.1       deraadt   115: <li>Add support for i815 motherboards and their devices.
1.23      naddy     116: <li>Disable DMA support for Opti <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pciide&amp;sektion=4">pciide(4)</a> devices, since there are some boards that apparently wired them up wrong...
                    117: <li>Use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=echo&amp;sektion=1">echo(1)</a> instead of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=printf&amp;sektion=1">printf(1)</a> to repair the format string bugs in <b>/etc/security</b>
                    118: <li>Do not free an uninitialized variable in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=curses&amp;sektion=3">curses(3)</a>.
1.1       deraadt   119: <li>Switch to 2.8 release numbering.
                    120: <li>Print powerpc MHz ratings.
                    121: <li>Add support for major/minor numbers to powerpc shared library implementation.
1.23      naddy     122: <li>Support <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ulpt&amp;sektion=4">ulpt(4)</a> printers on powerpc.
                    123: <li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=random&amp;sektion=4">random(4)</a> ioctl functions, to work as intended.
1.1       deraadt   124: <li>Fix <b>-fpack-struct</b> bug in i386 boot blocks.
1.23      naddy     125: <li>Support random number generators on more Intel <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pchb&amp;sektion=4">pchb(4)</a> devices.
                    126: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcpdump&amp;sektion=8">tcpdump(8)</a> support for STP (spanning tree) packets.
                    127: <li>Discover correct ethernet address for powerpc <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=gm&amp;sektion=4">gm(4)</a> ethernet driver.
                    128: <li>Fix nasty dl_strcmp() bug in powerpc <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ld.so&amp;sektion=1">ld.so(1)</a>.
                    129: <li>Generate proper <b>/etc/resolv.conf</b> files from <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhclient&amp;sektion=8">dhclient(8)</a>.
                    130: <li>Repair quotas greater than 4GB in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=quota&amp;sektion=1">quota(1)</a>.
                    131: <li><font color="#e00000"><strong>SECURITY FIX: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=httpd&amp;sektion=8">httpd(8)</a> mod_rewrite and
1.1       deraadt   132: mod_vhost_alias modules could expose files on server if used.<br>
1.23      naddy     133:     <a href="errata27.html#httpd">A patch is available</a></strong></font>.<br>
                    134:     <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
1.1       deraadt   135: <li>More cool vax stuff.
1.23      naddy     136: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=perl&amp;sektion=1">perl(1)</a>, set <b>siteprefix</b> and <b>siteprefixexp</b> to <b>/usr/local</b> as they should be.
                    137: <li>Give <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bridge&amp;sektion=4">bridge(4)</a> devices their own IFT_BRIDGE type, so that IPv6 does not attempt to configure up.
                    138: <li>Repair a short read issue in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=scp&amp;sektion=1">scp(1)</a>.
                    139: <li>For i386 <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=apm&amp;sektion=4">apm(4)</a>, if periodic checking fails repeatedly, shut it down.
                    140: <li>Very amusing <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=printf&amp;sektion=1">printf(1)</a>-based format string bugs in <b>/etc/security</b>.
                    141: <li>Prevent <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=vlan&amp;sektion=4">vlan(4)</a> status changes until configuration is complete.
1.1       deraadt   142: <li>Workaround i386 bios serial call problem (helps DSR issues on some BIOS).<br>
1.23      naddy     143:     <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
                    144: <li>Better error message out of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ftp&amp;sektion=1">ftp(1)</a> regarding invalid port numbers.
                    145: <li>Repair certain copyout() calls in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bridge&amp;sektion=4">bridge(4)</a>.
                    146: <li>New <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=amphy&amp;sektion=4">amphy(4)</a> driver, replacing <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dmphy&amp;sektion=4">dmphy(4)</a>.
                    147: <li>Update <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tx&amp;sektion=4">tx(4)</a> driver.
                    148: <li>Authentication support in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ray&amp;sektion=4">ray(4)</a>.
                    149: <li>Fix file descriptor leak in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&amp;sektion=3">ssl(3)</a>.
1.1       deraadt   150: <li>isakmpd update.
1.23      naddy     151: <li>Fix byte order bug in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ipsecadm&amp;sektion=8">ipsecadm(8)</a>.
                    152: <li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=httpd&amp;sektion=8">httpd(8)</a> building for <b>gcc -shared</b>.
1.1       deraadt   153: <li>On i386, build a private descriptor for bios32 accesses, thus fixing even more pcibios(4) bugs.
1.23      naddy     154: <li>Fix channel printing for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pciide&amp;sektion=4">pciide(4)</a>.
                    155: <li>Repair probe vs attach confusion in the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mii&amp;sektion=4">mii(4)</a> layer.
                    156: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pcibios&amp;sektion=4">pcibios(4)</a>, protect %edx register from being whacked.
                    157: <li>Update nearly entire <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isp&amp;sektion=4">isp(4)</a> device driver.
                    158: <li>Update <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isp&amp;sektion=4">isp(4)</a> sbus microcode.
                    159: <li>Various small fixes to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=moused&amp;sektion=8">moused(8)</a> to make it more reliable.
                    160: <li>Enable <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=gm&amp;sektion=4">gm(4)</a> ethernet driver on G4-style powerpc machines.
1.1       deraadt   161: <li>Lots of documentation improvements.
1.23      naddy     162: <li>Repair <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=gcc&amp;sektion=1">gcc(1)</a> shared library linking on powerpc.
                    163: <li>Fix an uninitialized variable issue in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xl&amp;sektion=4">xl(4)</a> that prevented dual NICs from working.
                    164: <li>Repair empty password support in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=login&amp;sektion=1">login(1)</a>, for when kerberos is compiled in.
                    165: <li>The 3c556 MiniPCI cards now work in the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xl&amp;sektion=4">xl(4)</a> driver.
                    166: <li>Fix key option handling in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&amp;sektion=8">sshd(8)</a>.
                    167: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&amp;sektion=8">sshd(8)</a> implementation of <b>AllowTcpForwarding</b>.
                    168: <li>For <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ipsec&amp;sektion=4">ipsec(4)</a>, an ASKPOLICY message implementation in pfkeyv2.
1.1       deraadt   169: <li>TCP wrapper support for IPv6.
1.23      naddy     170: <li>Vax support in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&amp;sektion=3">ssl(3)</a>.
1.1       deraadt   171: <li>Fix a library buffer overflow in the X11 libraries.
                    172: <li>Build a minimal powerpc CD boot image.
1.23      naddy     173: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&amp;sektion=8">sshd(8)</a>, rijndael/aes support in SSH2 protocol.
                    174: <li>Fix <b>-i</b> handling in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wicontrol&amp;sektion=8">wicontrol(8)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ancontrol&amp;sektion=8">ancontrol(8)</a>.
                    175: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&amp;sektion=8">sshd(8)</a>, a kludge for F-Secure Macintosh < 1.0.2.
                    176: <li>Add <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=lmccontrol&amp;sektion=8">lmccontrol(8)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=spppcontrol&amp;sektion=8">spppcontrol(8)</a>.
                    177: <li>Fix TM_YEAR_BASE issue in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=touch&amp;sektion=1">touch(1)</a>.
                    178: <li>More <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&amp;sektion=8">isakmpd(8)</a> updates.
                    179: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=setenv&amp;sektion=3">setenv(3)</a> cleanups in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=make&amp;sektion=1">make(1)</a>.
1.1       deraadt   180: <li>Change powerpc crt0 startup code to deal with ctors/dtors properly.
1.23      naddy     181: <li>New <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=aue&amp;sektion=4">aue(4)</a> supplies support for the usb(4) Kingston KNU101TX USB Ethernet adapter.
                    182: <li>Some more DELAY() calls in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=hifn&amp;sektion=4">hifn(4)</a> permits some fast machines to work better.
1.1       deraadt   183: <li>Avoid a nasty mbuf sharing case in ip_forward().
1.23      naddy     184: <li>Nuke old timeout code in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mii&amp;sektion=4">mii(4)</a> drivers, which collided with new timeout code in the same blocks.
1.1       deraadt   185: <li>Many manual page cleanups.
                    186: <li>Change <b>/root</b> to be mode 0700 instead of 0755.
                    187: <li>Enable DES support in SSH1 protocol clients (for compat with exported Cisco routers).
1.23      naddy     188: <li>Fix numerous erroneous <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mmap&amp;sektion=3">mmap(3)</a> calls in the source tree.
                    189: <li>Fix <b>cc -shared</b> issues in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=perl&amp;sektion=1">perl(1)</a>.
                    190: <li>Fix scan code bug in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pcvt&amp;sektion=4">pcvt(4)</a> that prevented RIGHT_SHIFT+PGUP/DN key combinations from activating scrollback.
                    191: <li>New cipher framework in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&amp;sektion=8">sshd(8)</a>.
                    192: <li>Add support for s/key (kbd-interactive) support in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&amp;sektion=8">sshd(8)</a> SSH2 protocol.
                    193: <li>Implement <b>-o</b> support in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=scp&amp;sektion=1">scp(1)</a>.
                    194: <li>Use terminfo(5) interfaces in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tn3270&amp;sektion=1">tn3270(1)</a>.
                    195: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dc&amp;sektion=4">dc(4)</a>, fix ethernet address reading on ADMtek AN983.
                    196: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=inetd.conf&amp;sektion=5">inetd.conf(5)</a>, disable <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=talkd&amp;sektion=8">talkd(8)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fingerd&amp;sektion=8">fingerd(8)</a> by default.
1.1       deraadt   197: <li>Nuke IPv4 mapped address support in IPv6.
1.23      naddy     198: <li>Implement diffie-hellman group exchange in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&amp;sektion=1">ssh(1)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&amp;sektion=8">sshd(8)</a>.
                    199: <li>Add <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mkhybrid&amp;sektion=8">mkhybrid(8)</a> [need this for the powerpc port HFS CD].
1.1       deraadt   200: <li>Deal with KA52/53 in vax port, and other vax stuff.
                    201: <li>Add <b>/etc/primes</b>, used for diffie-hellman key exchange.
1.23      naddy     202: <li>Link <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=telnetd&amp;sektion=8">telnetd(8)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=telnet&amp;sektion=1">telnet(1)</a> against <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=curses&amp;sektion=3">curses(3)</a> instead of ocurses(3).
                    203: <li>Correct environment variable handling in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=curses&amp;sektion=3">curses(3)</a> library.
                    204: <li>fd_set overflow handling in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=curses&amp;sektion=3">curses(3)</a> library.
                    205: <li>ICMP and RST rate limitation code, controlled using <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sysctl&amp;sektion=8">sysctl(8)</a> on <b>net.inet.icmp.errppslimit</b>, <b>net.inet6.icmp6.errppslimit</b>, and <b>net.inet.tcp.rstppslimit</b>.
                    206: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ppsratecheck&amp;sektion=9">ppsratecheck(9)</a> code added.
                    207: <li>Alpha portability for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=routed6&amp;sektion=8">routed6(8)</a>.
                    208: <li><font color="#e00000"><strong>SECURITY FIX: Prune more environment variables in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=telnetd&amp;sektion=8">telnetd(8)</a>.<br>
                    209:     <a href="errata27.html#telnetd">A patch is available</a></strong></font>.<br>
                    210:     <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
                    211: <li>Avoid fd_set overflow in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=kerberos&amp;sektion=8">kerberos(8)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=identd&amp;sektion=8">identd(8)</a>.
                    212: <li><font color="#e00000"><strong>RELIABILITY FIX: Repair non-exploitable buffer overflow in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sendmail&amp;sektion=8">sendmail(8)</a>.<br>
                    213:     <a href="errata27.html#sendmail">A patch is available</a></strong></font>.<br>
                    214:     <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
1.1       deraadt   215: <li>libkeynote update.
1.23      naddy     216: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&amp;sektion=8">isakmpd(8)</a> update.
                    217: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=login.conf&amp;sektion=5">login.conf(5)</a>, crank maxproc for staff login class.
                    218: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dump&amp;sektion=8">dump(8)</a>, do not dump core if the raw device cannot be determined.
1.1       deraadt   219: <li>More vax fixes.
1.23      naddy     220: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ppp&amp;sektion=8">ppp(8)</a>, try to deal with bugs in pppoe(8).
1.1       deraadt   221: <li>Permit install time passwords to contain meta-characters.
1.23      naddy     222: <li>AES support in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ipsec&amp;sektion=4">ipsec(4)</a>.
                    223: <li>Uninitialized variable in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bridge&amp;sektion=4">bridge(4)</a>.
                    224: <li>Move <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=gcc&amp;sektion=1">gcc(1)</a> to using -shared, as well as -fpic or -fPIC as relevant.
1.1       deraadt   225: <li>ncurses-5.1-20001007
1.23      naddy     226: <li>Add support for Symbios 53C1510 and 53C1510D to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ncr&amp;sektion=4">ncr(4)</a>.
                    227: <li>New <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&amp;sektion=8">isakmpd(8)</a>.
                    228: <li>Permit <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=moused&amp;sektion=8">moused(8)</a> and X11 to coexist.
                    229: <li>For now, work around powerpc pmap/cache bug by having <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ld.so&amp;sektion=1">ld.so(1)</a> do extre cache flushes.
                    230: <li>Use -q flag to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ls&amp;sektion=1">ls(1)</a> in /etc/security, for safety against non-printable characters.
                    231: <li>Avoid fd_set overflows in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ping&amp;sektion=8">ping(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ping6&amp;sektion=8">ping6(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=traceroute&amp;sektion=8">traceroute(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=traceroute6&amp;sektion=8">traceroute6(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ampd&amp;sektion=8">ampd(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=kadmin&amp;sektion=8">kadmin(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getty&amp;sektion=8">getty(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ppp&amp;sektion=8">ppp(8)</a>,
                    232: <li>Remove unimplemented -edebug flag from <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=telnetd&amp;sektion=8">telnetd(8)</a>.
                    233: <li>Various improvements to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ppp&amp;sektion=8">ppp(8)</a>.
1.1       deraadt   234: <li>pthread support on the powerpc.
                    235: <li>Check for root privs on SIOCSIFPHY*, and SIOCGIFP*ADDR repairs<br>
1.23      naddy     236:     <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
                    237: <li>Fix format string bug in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=top&amp;sektion=1">top(1)</a>.
1.1       deraadt   238: <li>Finally make sparc pthread support work.
                    239: <li>Many vax fixes.
1.23      naddy     240: <li>Fix bugs in libc <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=db&amp;sektion=3">db(3)</a> functions.
                    241: <li>Enhance hash buffer size in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dev_mkdb&amp;sektion=8">dev_mkdb(8)</a>).
                    242: <li>IKE support in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcpdump&amp;sektion=8">tcpdump(8)</a>.
                    243: <li>More careful byte order handling in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcpdump&amp;sektion=8">tcpdump(8)</a> bgp support.
                    244: <li><font color="#e00000"><strong>SECURITY FIX: Ignore $HOME/.termlib in curses for setuid/setgid executables.<br>
                    245:     <a href="errata27.html#curses">A patch is available</a></strong></font>.<br>
                    246:     <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
1.1       deraadt   247: <li>Routing header typo in inet6 fixed.<br>
1.23      naddy     248:     <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
                    249: <li><font color="#e00000"><strong>SECURITY FIX: talkd(8) format string vulnerability.<br>
                    250:     <a href="errata27.html#talkd">A patch is available</a></strong></font>.<br>
                    251:     <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
1.1       deraadt   252: <li>More (low priority) format string errors.
1.23      naddy     253: <li>Prevent panic in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=speaker&amp;sektion=4">speaker(4)</a>.
                    254: <li>Attempt to deal with Davicom DM9102A homePNA bugs in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dc&amp;sektion=4">dc(4)</a>.
                    255: <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=moused&amp;sektion=8">moused(8)</a> support work in modes other than 25-line.
                    256: <li>Do not attempt to use a copybuffer in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pcvt&amp;sektion=4">pcvt(4)</a> before it has been set.
                    257: <li>Fix recently introduced bugs in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rbootd&amp;sektion=8">rbootd(8)</a>.
1.1       deraadt   258: <li>New libkeynote.
1.23      naddy     259: <li>Fix an <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ipsec&amp;sektion=4">ipsec(4)</a> panic on alphas.
                    260: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=chpass&amp;sektion=1">chpass(1)</a>, do not permit non-printable characters in the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=passwd&amp;sektion=5">passwd(5)</a> file.
1.1       deraadt   261: <li>Implement getnulldev() machine-dependent API, and use it for the hack that stops fd 0, 1, and 2 from being played with in setuid programs.
                    262: <li>More games fixes!
1.23      naddy     263: <li>Cleanups in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=nc&amp;sektion=1">nc(1)</a>.
1.16      jsyn      264: <li>Ensure that ICMPs generated from date over IPSEC go back over the same IPSEC tunnel, if at all possible.
1.23      naddy     265: <li>Performance improvement to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=twe&amp;sektion=4">twe(4)</a>.
                    266: <li>Fix off-by-one in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getnameinfo&amp;sektion=3">getnameinfo(3)</a>.
                    267: <li>Support i82562 <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fxp&amp;sektion=4">fxp(4)</a> device.
                    268: <li>More tweaking in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pcibios&amp;sektion=4">pcibios(4)</a> code for dealing with busted BIOS implementations.
1.1       deraadt   269: <li>gcc 2.95.pre3
                    270: <li>Attempt to deal with a cardbus shutdown hang on some Toshiba systems.
                    271: <li>Fix memory leak in kernel internal fdalloc() function.
1.23      naddy     272: <li>Fix a locking bug in the pthreads implementation of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getgrent&amp;sektion=3">getgrent(3)</a> functions.
1.1       deraadt   273: <li>More games fixes.
1.23      naddy     274: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=newfs&amp;sektion=8">newfs(8)</a>, if a cylinder group does not fit inside a block, adjust secpercyl and ntracks until it does.  Perhaps weird geometry setups to still build filesystems.
                    275: <li>Clear <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pcvt&amp;sektion=4">pcvt(4)</a> copy buffer as soon as any console device gets a last close.
                    276: <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pcvt&amp;sektion=4">pcvt(4)</a> mouse copying mimic xterm functionality more.
                    277: <li>Repair a mapping problem in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pcibios&amp;sektion=4">pcibios(4)</a>.
                    278: <li>Repair random number generation in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pms&amp;sektion=4">pms(4)</a>.
                    279: <li>More volatiles in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=hifn&amp;sektion=4">hifn(4)</a> (but all the bugs are not yet gone).
                    280: <li>Trim RSS text relocation warnings in old <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ld&amp;sektion=1">ld(1)</a>.
                    281: <li>Extend auth methods support in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&amp;sektion=8">sshd(8)</a>.
                    282: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&amp;sektion=1">ssh(1)</a>, more bug compat for old ssh.com software.
                    283: <li>Panic bugfix to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tl&amp;sektion=4">tl(4)</a>.
                    284: <li>Correct some -fPIC handling in old <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ld&amp;sektion=1">ld(1)</a>.
                    285: <li>Fix year handling in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=touch&amp;sektion=1">touch(1)</a>.
1.1       deraadt   286: <li>Some pcibios changes, mostly in addresses repair.
                    287: <li>Lots more ipsec changes, for automatic IKE setup.
                    288: <li>Support 64 bit BARs on PCI.
                    289: <li>subr_extent had a off by one in a validity check.
                    290: <li>Correctly calculate MSS in tcp pmtu cases.
1.23      naddy     291: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ipsec&amp;sektion=4">ipsec(4)</a> pfkeyv2, allow IDENTITY payloads in ADDFLOW messages.
1.1       deraadt   292: <li>Various ioctl additions so that X11 works on the powerpc.
                    293: <li>On powerpc, use BATs to map devices.
                    294: <li>Lots and lots of changes to ipsec internal layout.
1.23      naddy     295: <li>Display SPD entries in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=netstat&amp;sektion=8">netstat(8)</a>'s -r option.
                    296: <li>Path MTU discovery support in openbsd, enabled using the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sysctl&amp;sektion=3">sysctl(3)</a> variable <b>net.inet.ip.mtudisc</b>.
1.1       deraadt   297: <li>Repair AFS support on the mips platforms.
                    298: <li>Some more fixes to the games!
                    299: <li>Fix old bug with wildcard interfaces<br>
1.23      naddy     300:     <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
                    301: <li>Various fixes to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=clcs&amp;sektion=4">clcs(4)</a> PCI audio driver.
                    302: <li><font color="#e00000"><strong>RELIABILITY FIX: Drop dubious ESP/AH packets without crashing.<br>
                    303:     <a href="errata27.html#ipsec">A patch is available</a></strong></font>.<br>
                    304:     <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
                    305: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ldd&amp;sektion=1">ldd(1)</a> for powerpc ELF binaries.
                    306: <li>Other misc improvements to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&amp;sektion=1">ssh(1)</a>.
                    307: <li>Support <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fxp&amp;sektion=4">fxp(4)</a> devices on <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cardbus&amp;sektion=4">cardbus(4)</a>, including detach.
                    308: <li>Support 3C3FE575CT CardBus <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xl&amp;sektion=4">xl(4)</a> devices.
                    309: <li>Attempt to support 3C556[B] MiniPCI <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xl&amp;sektion=4">xl(4)</a> devices.
1.1       deraadt   310: <li>Repair IPv6 multicast support.<br>
1.23      naddy     311:     <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
                    312: <li>Fixes to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=faithd&amp;sektion=8">faithd(8)</a>.
                    313: <li>Many improvements in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ep&amp;sektion=4">ep(4)</a> support, including support for more eject/mii, and other newer models.
                    314: <li>Support <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=twe&amp;sektion=4">twe(4)</a>, the 3Ware IDE raid controller.
                    315: <li>Check all calls to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=setenv&amp;sektion=3">setenv(3)</a> in userland.
                    316: <li>More <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=puc&amp;sektion=4">puc(4)</a> devices.
                    317: <li>Support IPSEC data flow in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ppp&amp;sektion=8">ppp(8)</a>.
                    318: <li>More cleanups in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=make&amp;sektion=1">make(1)</a>.
                    319: <li>Use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=vis&amp;sektion=3">vis(3)</a> for outputting data in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=syslogd&amp;sektion=8">syslogd(8)</a>.
1.1       deraadt   320: <li>Fix sorting bugs in the miniroot.
1.23      naddy     321: <li>Multiple debug levels in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&amp;sektion=1">ssh(1)</a>.
                    322: <li>Cause <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getsid&amp;sektion=2">getsid(2)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getpgid&amp;sektion=2">getpgid(2)</a> to return EPERM if requesting out of session/pgrp, as well as fix other bugs.
1.1       deraadt   323: <li>natm fixes.
                    324: <li>binutils 2.10
                    325: <li>Fix INET6 components of atm support.
                    326: <li>Update powerpc miniroot install stuff.
1.23      naddy     327: <li>Handle LBA partitions even better in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fdisk&amp;sektion=8">fdisk(8)</a>
                    328: <li>Fix user quota reporting in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=repquota&amp;sektion=8">repquota(8)</a>
1.1       deraadt   329: <li>arla-current
1.23      naddy     330: <li>Re-enable <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ray&amp;sektion=4">ray(4)</a> after resume.
1.1       deraadt   331: <li>Linux mmap() ignores the fd argument when MAP_ANON is set.
1.23      naddy     332: <li>Some reliability fixes to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=asc&amp;sektion=4">asc(4)</a> for pmax.
                    333: <li>Another one byte overflow in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getty&amp;sektion=8">getty(8)</a>
                    334: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ums&amp;sektion=4">ums(4)</a> support.
                    335: <li>More cleanups in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pcibios&amp;sektion=4">pcibios(4)</a>
                    336: <li>Clarify licencing on components of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&amp;sektion=1">ssh(1)</a> and such.
1.1       deraadt   337: <li>Repair dcphy(4) problems for Macronix PMAC 98715 and family.
                    338: <li>Fix TAILQ_FOREACH_REVERSE.
                    339: <li>More use of new timeouts in the kernel.
                    340: <li>Avoid excessive wakeup() in crypto subsystem.
                    341: <li>Run powerhooks at splhigh(), and backwards from initialization order.
                    342: <li>Bounds checking code in compat/emul code.
1.23      naddy     343: <li>Open a file with egid in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wall&amp;sektion=1">wall(1)</a>.
                    344: <li>Inconsequential Buf overflow in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getty&amp;sektion=8">getty(8)</a>.
1.16      jsyn      345: <li>When cards come up with very bad MAC addresses, generate a fake one.
1.1       deraadt   346: <li>tzdata2000f.
1.23      naddy     347: <li>Start <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sendmail&amp;sektion=8">sendmail(8)</a> even more carefully in /etc/rc, to avoid whining.
                    348: <li>Mag tape ioctl emulation for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=compat_osf1&amp;sektion=8">compat_osf1(8)</a>.
                    349: <li>Many improvements to powerpc, including <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wscons&amp;sektion=4">wscons(4)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=usb&amp;sektion=4">usb(4)</a>, and rebooting support, amongst many other things.
                    350: <li>Support different font sizes in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wscons&amp;sektion=4">wscons(4)</a>.
                    351: <li>Fix inquiry problems in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=adw&amp;sektion=4">adw(4)</a>.
1.1       deraadt   352: <li>Various fixes to SACK and FACK.
1.23      naddy     353: <li>Powerhook workaround, so that <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wi&amp;sektion=4">wi(4)</a> suspends wake up properly.
                    354: <li>Enable <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh-add&amp;sektion=1">ssh-add(1)</a> deletion support for DSA keys.
                    355: <li>Support detach for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cardbus&amp;sektion=4">cardbus(4)</a> <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xl&amp;sektion=4">xl(4)</a> devices.
                    356: <li>Fix IO/memory space allocation in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cardbus&amp;sektion=4">cardbus(4)</a>/<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pci&amp;sektion=4">pci(4)</a> rbus handling, so that some devices do not map on top of each other.
                    357: <li>Increase page use in i82365 <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pcic&amp;sektion=4">pcic(4)</a>.
                    358: <li>Portability fixes to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sftp-server&amp;sektion=8">sftp-server(8)</a>.
                    359: <li>Fix login time handling in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&amp;sektion=8">sshd(8)</a>.
                    360: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&amp;sektion=8">sshd(8)</a>, cause SSH_ORIGINAL_COMMAND environment variable to be initialized.
                    361: <li>Fix file descriptor leak in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&amp;sektion=1">ssh(1)</a>.
1.1       deraadt   362: <li>Install kerberosIV info file.
1.23      naddy     363: <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pcvt&amp;sektion=4">pcvt(4)</a> mouse support act more like an xterm.
                    364: <li>Improvements in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pcic&amp;sektion=4">pcic(4)</a> attachment on <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pci&amp;sektion=4">pci(4)</a>.
                    365: <li>Fix EDP register handling in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xe&amp;sektion=4">xe(4)</a>.
                    366: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ray&amp;sektion=4">ray(4)</a>, fix panic on detach.
1.1       deraadt   367: <li>More changes to hppa.
                    368: <li>Add the <b>L:</b> modifier to all tweakable var tests in various Makefiles.
1.23      naddy     369: <li>Various fixes to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ppp&amp;sektion=8">ppp(8)</a>.
                    370: <li>Fix parsing problems in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=netstart&amp;sektion=8">netstart(8)</a> when reading <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=hostname.if&amp;sektion=5">hostname.if(5)</a>.
                    371: <li>Cleanup and fix <b>-S</b> support in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=scp&amp;sektion=1">scp(1)</a>.
                    372: <li>Add <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=joy&amp;sektion=4&amp;arch=amiga">joy(4)</a> driver for amiga.
                    373: <li>Import <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=moused&amp;sektion=8">moused(8)</a>, a userland mouse daemon the for new <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pcvt&amp;sektion=4">pcvt(4)</a> features.
                    374: <li>Add kernel console mouse support to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pcvt&amp;sektion=4">pcvt(4)</a>.
                    375: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rtadvd&amp;sektion=8">rtadvd(8)</a>, repair a routine to grab interface MTU information.<br>
                    376:     <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
                    377: <li>Add <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sftp-server&amp;sektion=8">sftp-server(8)</a>, capable of doing the things needed by ssh.com's scp2 and sftp clients.  We have no client to talk the protocol ourselves.
1.1       deraadt   378: <li>Various build tweaks in kerberos.
1.23      naddy     379: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getaddrinfo&amp;sektion=3">getaddrinfo(3)</a>, fix canonical name for /etc/hosts file-based search.
1.1       deraadt   380: <li>OpenSSH 2.2.0 released.<br>
1.23      naddy     381:     <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
                    382: <li>Use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=arc4random&amp;sektion=3">arc4random(3)</a> in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ppp&amp;sektion=8">ppp(8)</a> plus various other fixes.
                    383: <li>Correctly read MAC addresses on all <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ne&amp;sektion=4">ne(4)</a> cards.
1.1       deraadt   384: <li>More svr4 emulation fixes.
1.23      naddy     385: <li>Prevent <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=csh&amp;sektion=1">csh(1)</a> from coredumping in some situations.
                    386: <li>Use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=srandom&amp;sektion=3">srandom(3)</a> in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ppp&amp;sektion=8">ppp(8)</a>.
1.1       deraadt   387: <li>x11-ssh-askpass 1.0.1.
                    388: <li>In IPv6, do not forward packets with unspecified source.
1.23      naddy     389: <li>Add filters logging and radius accounting support to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ppp&amp;sektion=8">ppp(8)</a>.
1.1       deraadt   390: <li>Lot of sun3 changes.
1.23      naddy     391: <li>Various <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&amp;sektion=1">ssh(1)</a> improvements.
                    392: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=brgphy&amp;sektion=4">brgphy(4)</a> driver for broadcom 5400 and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xmphy&amp;sektion=4">xmphy(4)</a> for XAQTI XMACII phys.
                    393: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&amp;sektion=1">ssh(1)</a> compatibility with future ssh.com versions (which contain a bug in their HMAC handling).
                    394: <li>Add detach support for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xe&amp;sektion=4">xe(4)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=aue">aue(4)</a>.
                    395: <li>Import newer <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mii&amp;sektion=4">mii(4)</a> code, supporting mii subdevice detach.
                    396: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dc&amp;sektion=4">dc(4)</a>, avoid freezes on large data transfers.
                    397: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&amp;sektion=1">ssh(1)</a> now talks to ssh.com 2.3.0.
                    398: <li>Some clarifications in manual pages regarding the format string bug in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=printf&amp;sektion=3">printf(3)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=setproctitle&amp;sektion=3">setproctitle(3)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=syslog&amp;sektion=3">syslog(3)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=warn&amp;sektion=3">warn(3)</a>, and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=err&amp;sektion=3">err(3)</a>.
                    399: <li>Performance improvements to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sis&amp;sektion=4">sis(4)</a>.
                    400: <li>Correctly match Promise Ultra/100 in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pciide&amp;sektion=4">pciide(4)</a>.
1.1       deraadt   401: <li>Fix shared library creation problems on mips.
                    402: <li>Fix IPSEC flow deletion problem when using <b>-transport</b>.<br>
1.23      naddy     403:     <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
                    404: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=scp&amp;sektion=1">scp(1)</a>, repair copying of files 2GB in size or larger.
                    405: <li>Crank some defaults in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=login.conf&amp;sektion=5">login.conf(5)</a>.
                    406: <li>Various fixes to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=lpc&amp;sektion=8">lpc(8)</a>.
                    407: <li>Repair <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sendmail&amp;sektion=8">sendmail(8)</a> options handling.
1.1       deraadt   408: <li>Make timeouts happen with the expected frequency.
                    409: <li>Implement svr4 emulation for pread64, pwrite64 and fcntl DUP2FD.
                    410: <li>Manpage fixes.
                    411: <li>We're at 2.8-beta now.
                    412: <li>Use the user's default groups if user is specified in inetd.conf, but group is not.
1.23      naddy     413: <li>Be more paranoid in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cron&amp;sektion=8">cron(8)</a>.
                    414: <li>Fix var handling in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=make&amp;sektion=1">make(1)</a>.
1.1       deraadt   415: <li>Support <b>FIONBIO</b> and <b>FIOASYNC</b> on rnd.<br>
1.23      naddy     416:     <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
                    417: <li>Proper template file creation on <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ksh&amp;sektion=1">ksh(1)</a>.
1.1       deraadt   418: <li>Implement resource limits in several daemons.
1.23      naddy     419: <li>Add <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=login.conf&amp;sektion=5">login.conf(5)</a> support, making possible limiting resources per class.
1.1       deraadt   420: <li>Minor bug fixes associated with the use of the <b>UseLogin</b> directive in sshd_config.
                    421: <li>Bypass key generation in mod_ssl if SSL is not enabled in any (virtual) servers.
1.23      naddy     422: <li>Add SSH2/DSA support to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh-agent&amp;sektion=1">ssh-agent(1)</a> and some DSA related cleanups.
                    423: <li>Use specified home directory, if specified, and other fixes to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=user&amp;sektion=8">user(8).</a><br>
                    424:     <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
                    425: <li>Resolve a driver name conflict in the pmax platform. The pmax <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dc&amp;sektion=4">dc(4)</a> driver has been renamed to dz.
                    426: <li>Many updates to the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ubsec&amp;sektion=4">ubsec(4)</a> code.
1.1       deraadt   427: <li>Various IPv6 fixes.
1.23      naddy     428: <li>Add <b>-S</b> option to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=scp&amp;sektion=1">scp(1)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&amp;sektion=1">ssh(1)</a> to use a program for encrypted connections.
1.1       deraadt   429: <li>Lot of manpage updates.
                    430: <li>Various improvements to linux emulation.
1.23      naddy     431: <li>Add IPv6 support to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=telnetd&amp;sektion=8">telnetd(8)</a>.
                    432: <li>Allow <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ppp&amp;sektion=8">ppp(8)</a> to be used without SUID privs.
                    433: <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pcibios&amp;sektion=4">pcibios(4)</a> a real device making possible the use of flags.
                    434: <li>Avoid duplicate utmp entries in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&amp;sektion=1">ssh(1)</a>.
                    435: <li>Update <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=awi&amp;sektion=4">awi(4)</a> driver.
                    436: <li>Various <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ppp&amp;sektion=8">ppp(8)</a> improvements.
                    437: <li>More fixes to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ubsec&amp;sektion=4">ubsec(4)</a> auth+enc code.
                    438: <li>Convert <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pccom&amp;sektion=4">pccom(4)</a> to new timeouts.
                    439: <li>Implement <b>-a</b> option on <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wicontrol&amp;sektion=8">wicontrol(8)</a>, was documented but not present.
                    440: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mail.local&amp;sektion=8">mail.local(8)</a>, fix <b>sendmail.cf</b> location.
                    441: <li>Catch bogus <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=MAKEDEV&amp;sektion=8">MAKEDEV(8)</a> mouse and spit out an reasonable error.
                    442: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ppp&amp;sektion=8">ppp(8)</a>, ISDN B channels have a bandwidth of 64000, not 65535.
1.1       deraadt   443: <li>More format string paranoia.
1.23      naddy     444: <li>Several <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=setproctitle&amp;sektion=3">setproctitle(3)</a> fixes in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ppp&amp;sektion=8">ppp(8)</a>.
                    445: <li><font color="#e00000"><strong>SECURITY ISSUE: format string localhost root vulnerability in xlock(1)</strong></font>.<br>
                    446:     <a href="errata27.html#xlock">A patch is available</a>.<br>
                    447:     <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
1.1       deraadt   448: <li>Improvements and fixes in hppa land.
1.23      naddy     449: <li>Increase if_obytes and if_omcasts in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=vlan&amp;sektion=4">vlan(4)</a> output routine as done in <b>ether_output</b>.
                    450: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ubsec&amp;sektion=4">ubsec(4)</a>, deallocate resources on attachment failure.
                    451: <li>Fix auth-only mode in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ubsec&amp;sektion=4">ubsec(4)</a>.
                    452: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=hifn&amp;sektion=4">hifn(4)</a>, deallocate resources on error and workaround memory problems in rev A boards.
                    453: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&amp;sektion=8">mod_ssl 2.6.6</a>.
                    454: <li> fix locking in threaded <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getgrent&amp;sektion=3">getgrent(3)</a><br>
                    455:     <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
                    456: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=gdt&amp;sektion=4">gdt(4)</a> cache fixes and additional card support<br>
                    457:     <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
                    458: <li><font color="#e00000"><strong>SECURITY ISSUE: several DoS holes in libX11, libICE and X clients.<br>
                    459:     <a href="errata27.html#X11_libs">A patch is available</a></strong></font>.<br>
                    460:     <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
                    461: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&amp;sektion=8">mod_ssl 2.6.5</a>
1.1       deraadt   462: <li>Repair ntpd/ntpdate handlings in /etc/rc.
1.23      naddy     463: <li>Various improvements and fixes to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ppp&amp;sektion=8">ppp(8)</a>.
1.1       deraadt   464: <li>Correctly handle <b>ip_off</b> in a corner case of IPSEC.<br>
1.23      naddy     465:     <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
1.1       deraadt   466: <li>i386 now has another install floppy:  floppyC27 contains cardbus support.
1.23      naddy     467: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&amp;sektion=1">ssh(1)</a>, disable <b>FallBackToRsh</b> by default.
1.1       deraadt   468: <li>In TCP, compute correct window scale when recvpipe option is set in route.
                    469: <li>KTH Kerberos4 1.0.2
1.23      naddy     470: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&amp;sektion=8">sshd(8)</a>, fix <b>MaxStartups</b> code to work with <b>-d</b>.
                    471: <li><font color="#e00000"><strong>RE-RELEASE: Re-release pmax release after <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dmesg&amp;sektion=8">dmesg(8)</a> and <b>/kern/msgbuf</b> was fixed.<br>
                    472:     <a href="errata27.html#pmax_msgbuf">A patch is available</a></strong></font>.<br>
                    473:     <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
1.1       deraadt   474: <li>Fix simpleroot support.
                    475: <li>ncurses 5.1
1.23      naddy     476: <li>Do not default to empty passwords in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=adduser&amp;sektion=8">adduser(8)</a>, simply because it's stupid.
                    477: <li>Use strsep(3) instead of strtok(3) in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&amp;sektion=1">ssh(1)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&amp;sektion=8">sshd(8)</a>.
                    478: <li>Add <b>-flags</b> option to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=find&amp;sektion=1">find(1)</a>.
                    479: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=inetd&amp;sektion=8">inetd(8)</a>, handle IPv6 addresses in hostname specifiers.
                    480: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=systat&amp;sektion=1">systat(1)</a>, correct layout of the <b>io</b> page.
                    481: <li>Support Intel 440MX Ultra/33 controller in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pciide&amp;sektion=4">pciide(4)</a>.
                    482: <li>Handle Promise Ultra/100, deal with D2 AMD K7 controllers, and various other tweaks to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pciide&amp;sektion=4">pciide(4)</a>.
                    483: <li>New <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=release&amp;sektion=8">release(8)</a> page describes how to build a distribution.
                    484: <li>Fix an spinning <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=select&amp;sektion=2">select(2)</a> loop in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=nc&amp;sektion=1">nc(1)</a>.
                    485: <li>For <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=select&amp;sektion=2">select(2)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=poll&amp;sektion=2">poll(2)</a>, if we are awakened by a collision the timeout must be recalculated.
1.1       deraadt   486: <li>On powerpc, handle late configuration of the interrupt controller.
1.23      naddy     487: <li>Fix port and X11 forwarding in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&amp;sektion=8">sshd(8)</a>.
                    488: <li>Change <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fingerd&amp;sektion=8">fingerd(8)</a> back to using <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fgets&amp;sektion=3">fgets(3)</a> instead of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fgetln&amp;sektion=3">fgetln(3)</a>, to reduce denial of service attacks.
                    489: <li>Change <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=compat_linux&amp;sektion=8">compat_linux(8)</a> so that it logs and returns ENOSYS rathern than deliver SIGSYS for unimplemented system calls.
                    490: <li>Add <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ucomm&amp;sektion=4">ucomm(4)</a> support to MAKEDEV.
                    491: <li>Delay slightly longer after reset in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xl&amp;sektion=4">xl(4)</a> for some configurations.
                    492: <li>Add support for National Semiconductor DP83815 fast ethernet to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sis&amp;sektion=4">sis(4)</a>.
1.1       deraadt   493: <li>Ensure PCIBIOS32 does not panic if the BIOS lies.
                    494: <li>Add support for 82801AA_LPC in PCIBIOS32.
                    495: <li>Add spllowersoftclock() on all architectures, and correct splsoftclock() to avoid races.
                    496: <li>Fix pmap activation on mvme68k.
1.23      naddy     497: <li>Support <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ddb&amp;sektion=4">ddb(4)</a> entry from <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cl&amp;sektion=4">cl(4)</a> on mvme68k.
                    498: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=user&amp;sektion=8">user(8)</a>, ensure that we do not generate passwd lines longer than 1023 characters.<br>
                    499:     <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
                    500: <li>Latest <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wx&amp;sektion=4">wx(4)</a> driver, works better with more switches.
1.1       deraadt   501: <li>Improve support for Ricoh cardbus bridges.
1.29      mickey    502: <li>CardBus and PCIBIOS32 support enabled by default in i386 GENERIC kernel.
1.23      naddy     503: <li>Update <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isp&amp;sektion=4">isp(4)</a> driver.
1.1       deraadt   504: <li>Add a timeout structure per scsi transfer, so that controllers can do timeouts easier.
1.23      naddy     505: <li>Fixed numerous cases of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=printf&amp;sektion=3">printf(3)</a>-style functions being called with their first argument being user controlled, where it should be <b>%s</b>
1.1       deraadt   506: <li>More careful handling of IPV6 mapped addresses in the IPV6 code.
1.23      naddy     507: <li>Repair X11 forwarding in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&amp;sektion=1">ssh(1)</a>.
                    508: <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dmesg&amp;sektion=8">dmesg(8)</a> once again work on the alpha.
                    509: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=setproctitle&amp;sektion=3">setproctitle(3)</a> misuse in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=faithd&amp;sektion=8">faithd(8)</a>.
                    510: <li><font color="#e00000"><strong>SECURITY ISSUE: remote hole via <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=setproctitle&amp;sektion=3">setproctitle(3)</a> misuses in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ftpd&amp;sektion=8">ftpd(8)</a>.<br>
                    511:     <a href="errata27.html#ftpd">A patch is available</a></strong></font>.<br>
                    512:     <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
                    513: <li>In <b>/etc/rc</b>, start <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sendmail&amp;sektion=8">sendmail(8)</a> in the background.
                    514: <li>Prepare <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ddb&amp;sektion=4">ddb(4)</a> internals for KGDB support.
                    515: <li>Fix spl usage in sparc <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=magma&amp;sektion=4&amp;arch=sparc">magma(4)</a>.
                    516: <li>Stop kernel sleeps from returning up to a tick early by fixing <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=hzto&amp;sektion=9">hzto(9)</a>.
                    517: <li>Latest version of the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pcvt&amp;sektion=4&amp;arch=i386">pcvt(4)</a> scrolling region patch...<br>
                    518:     <a href="errata27.html#pcvt">A patch is available</a>.<br>
                    519:     <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
                    520: <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getaddrinfo&amp;sektion=3">getaddrinfo(3)</a> return EAI_NODATA for name resolution errors.
                    521: <li>Greater care of rlimit handling in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sbrk&amp;sektion=2">sbrk(2)</a>.<br>
                    522:     <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
1.1       deraadt   523: <li>Cleanup spl handling on the sparc.
1.23      naddy     524: <li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dmesg&amp;sektion=8">dmesg(8)</a> and <b>/kern/msgbuf</b> on the pmax.
                    525: <li>Support bigendian hardware in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ahc&amp;sektion=4">ahc(4)</a>.
1.1       deraadt   526: <li>Fix tail queue leakage in the crypto queue support.
                    527: <li>New wscons on the alpha.
1.23      naddy     528: <li>More carefully reset pcic registers when testing for working <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pcmcia&amp;sektion=4">pcmcia(4)</a> interrupts.
                    529: <li>Plug two memory leaks in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=brconfig&amp;sektion=8">brconfig(8)</a>.
                    530: <li>Various <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=gcc&amp;sektion=1">gcc(1)</a> fixes for the vax.
                    531: <li><font color="#e00000"><strong>SECURITY ISSUE: Buffer oflows in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mopd&amp;sektion=8">mopd(8)</a>.<br>
                    532:     <a href="errata27.html#mopd">A patch is available</a></strong></font>.<br>
                    533:     <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
1.1       deraadt   534: <li>More fixes in the games.
1.23      naddy     535: <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ipnat&amp;sektion=4&amp;manpath=OpenBSD+2.7">ipnat(4)</a> detaching work with <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pcmcia&amp;sektion=4">pcmcia(4)</a>.
                    536: <li>Correct interrupt sharing types in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pcmcia&amp;sektion=4">pcmcia(4)</a>.
1.1       deraadt   537: <li>Fix to a fix in uvm.<br>
1.23      naddy     538:     <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
1.1       deraadt   539: <li>Change to 16 partitions in sun3 port.
1.23      naddy     540: <li>Dynamically size the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=m4&amp;sektion=1">m4(1)</a> internal machine stack.
                    541: <li>Faster C version of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ffs&amp;sektion=3">ffs(3)</a>.
                    542: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=vr&amp;sektion=4">vr(4)</a>, support VIA vt6102.
                    543: <li>Import <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wsconsctl&amp;sektion=8">wsconsctl(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wsconscfg&amp;sektion=8">wsconscfg(8)</a>, and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wsfontload&amp;sektion=8">wsfontload(8)</a>.
                    544: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fdisk&amp;sektion=8">fdisk(8)</a>, be more verbose about partition layout errors.
                    545: <li>To <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=aucat&amp;sektion=1">aucat(1)</a>, add <b>-f</b> option for specifying audio device.
                    546: <li>More regression tests for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=m4&amp;sektion=1">m4(1)</a>.
                    547: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xl&amp;sektion=4">xl(4)</a>, add support for 3CCFE575BT and 3CCFEM656C.
                    548: <li>Import a regression suite for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=m4&amp;sektion=1">m4(1)</a>.
                    549: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=make&amp;sektion=1">make(1)</a>, recognize <b>+cmd</b> as a command that should still execute in <b>make -n</b> mode.
                    550: <li>Correct giftunnel handling in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ifconfig&amp;sektion=8">ifconfig(8)</a>.
                    551: <li>New fix for the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pcvt&amp;sektion=4">pcvt(4)</a> scrolling region bug.<br>
                    552:     <a href="errata27.html#pcvt">A patch is available</a>.<br>
                    553:     <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
                    554: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&amp;sektion=8">mod_ssl 2.6.4</a>
                    555: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=clcs&amp;sektion=4">clcs(4)</a> driver for the cs4280 Crystal Clear audio hardware found in some laptops.
1.1       deraadt   556: <li>Make UVM work on the powerpc.
1.23      naddy     557: <li>Convert much kernel code to the new <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=timeout_add&amp;sektion=9">timeout API</a>.
                    558: <li>Fix multicast hashing problem in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xl&amp;sektion=4">xl(4)</a>.<br>
                    559:     <a href="errata27.html#xlhash">A patch is available</a>.<br>
                    560:     <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
1.1       deraadt   561: <li>Fix numerous more bugs in the games.
1.23      naddy     562: <li>Fix MAC address matching in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pcap&amp;sektion=3">pcap(3)</a>.
                    563: <li>Make the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ep&amp;sektion=4">ep(4)</a> driver more friendly during detach.
                    564: <li>Fix bpf code in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ray&amp;sektion=4">ray(4)</a>.
                    565: <li>For the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=err&amp;sektion=3">err(3)</a> family of calls and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=syslog&amp;sektion=3">syslog(3)</a>, ensure that dynamic content never appears as the second argument -- use at least <b>%s</b>.
                    566: <li>Update <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=adw&amp;sektion=4">adw(4)</a> driver.
1.1       deraadt   567: <li>Add creat64 and mmap64 system calls to svr4 emulation.
1.23      naddy     568: <li>Handle <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=strtol&amp;sektion=3">strtol(3)</a> instead of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=atoi&amp;sektion=3">atoi(3)</a> in the <b>kill</b> implementation in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=csh&amp;sektion=1">csh(1)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ksh&amp;sektion=1">ksh(1)</a>.
1.1       deraadt   569: <li>Fix COPTS vs CFLAGS issues in the source tree.
                    570: <li>Fix panic message from i386 in_cksum.
                    571: <li>Fix path to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=kerberos">kerberos</a> master key file.<br>
1.23      naddy     572:     <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
                    573: <li><font color="#e00000"><strong>SECURITY ISSUE: Stop libedit from opening the <b>.editrc</b> file in the current directory.<br>
                    574:     <a href="errata27.html#libedit">A patch is available</a></strong></font>.<br>
                    575:     <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
                    576: <li>Fix an infinite loop in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fsck_msdos&amp;sektion=8">fsck_msdos(8)</a>.
                    577: <li>Fix some racy interaction between <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pcmcia&amp;sektion=4">pcmcia(4)</a> insertion and suspends.
                    578: <li>Add <b>-U</b> option to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ldconfig&amp;sektion=8">ldconfig(8)</a>.
                    579: <li>Fix a stupid bug in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=m4&amp;sektion=1">m4(1)</a> argument handling.<br>
                    580:     <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
                    581: <li>Repair stupid bugs in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ste&amp;sektion=4">ste(4)</a>, which prevented it from working in 2.7 release.<br>
                    582:     <a href="errata27.html#ste">A patch is available</a>.<br>    <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
                    583: <li>Connection limitation code for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&amp;sektion=8">sshd(8)</a>.
                    584: <li>Allow <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=vnd&amp;sektion=4">svnd(4)</a> to work on sparse files.
                    585: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pciide&amp;sektion=4">pciide(4)</a>, support CMD 648/649 UDMA66 controllers, and also fix the Promise UDMA66 cable check code.
1.1       deraadt   586: <li>ncurses 2000/6/10 update to <b>termtypes.master</b>.
1.23      naddy     587: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ne&amp;sektion=4">ne(4)</a>, re-fix Linksys Combo PCMCIA EthernetCard (EC2T) after AX88190 broke it.
                    588: <li>Disable automatic <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=crash&amp;sektion=8">crash(8)</a> dumps for swap encryption.
                    589: <li><font color="#e00000"><strong>SECURITY ISSUE: Be much more careful about <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhclient&amp;sektion=8">dhclient(8)</a>'s handling of external variables.<br>
                    590:     <a href="errata27.html#dhclient">A patch is available</a></strong></font>.<br>
                    591:     <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
1.1       deraadt   592: <li>Implement svr4 emulation for getdents64, lstat64 and stat64.
                    593: <li>Do not start snmpd by default if it is installed.
1.23      naddy     594: <li>Implement <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sort&amp;sektion=1">sort(1)</a> as a shell function on the boot floppies, to save a lot of space.
                    595: <li>Ensure <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&amp;sektion=8">sshd(8)</a> does not misbehave if the skey key file is missing.
                    596: <li>Cleanups to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tail&amp;sektion=1">tail(1)</a>.
                    597: <li>Significant performance improvements to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=make&amp;sektion=1">make(1)</a>.
                    598: <li>Numerous more fixes to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=an&amp;sektion=4">an(4)</a>, regarding bridging, ipv6, bpf logic, and pcmcia detach.
                    599: <li>Newer <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ppp&amp;sektion=8">ppp(8)</a> code.
                    600: <li>Change <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhcpd&amp;sektion=8">dhcpd(8)</a> so that it is not as susceptible to abandoning addresses.<br>
                    601:     <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
                    602: <li>For crypted <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=vnd&amp;sektion=4">vnd(4)</a>, zero the key on unconfig.
1.1       deraadt   603: <li>Kill the legacy vtrace(2) system call.
                    604: <li>Avoid using 3c905b-specific multicast hash code, it is buggy.<br>
1.23      naddy     605:     <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
1.1       deraadt   606: <li>IPv6 support in the resolver.  The <b>nameserver</b> line can now take ipv6 addresses.
                    607: <li>Soft updates is now free.
1.23      naddy     608: <li>Add <b>epsv4</b> command to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ftp&amp;sektion=1">ftp(1)</a>, to disable <b>epsv</b> negotiations on IPv4 connections.
1.1       deraadt   609: <li>Fix various bugs in ip gatewaying that angelos introduced.
1.23      naddy     610: <li>Sync with newed <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ndp&amp;sektion=8">ndp(8)</a>.
                    611: <li>Allow <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=vnconfig&amp;sektion=8">vnconfig(8)</a> to turn on encryption for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=vnd&amp;sektion=4">vnd(4)</a>.
                    612: <li>Fix bpf mishandlings in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=an&amp;sektion=4">an(4)</a>.
                    613: <li>Avoid using IO port 0x370 on laptops for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pcmcia&amp;sektion=4">pcmcia(4)</a>, since some sound cards sometimes land there.
1.32      david     614: <li>On i386, if only one CPU family is specified, pass flags to the optimizer.
1.23      naddy     615: <li>Merge in new <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&amp;sektion=8">isakmpd(8)</a> changes.
1.1       deraadt   616: <li>Funnel crypto completion events via crypto_done(), not directly to the caller.
1.23      naddy     617: <li>Closer towards making some more <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sm&amp;sektion=4">sm(4)</a> <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pcmcia&amp;sektion=4">pcmcia(4)</a> cards work.
                    618: <li>More verbose information for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pppoe&amp;sektion=8">pppoe(8)</a> in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcpdump&amp;sektion=8">tcpdump(8)</a>.
1.14      horacio   619: <li>Teach ipv6 AH &amp; ip-over-ip code to deal with ipv6 scoped addresses better.
1.23      naddy     620: <li>Initialize mtu/hlim for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=enc&amp;sektion=4">enc(4)</a> so that IPv6 icmp reflect works properly.
                    621: <li>Do not double-log <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ipf&amp;sektion=8&amp;manpath=OpenBSD+2.7">ipf(8)</a> information into <b>/var/log/messages</b>.
                    622: <li>Repair bridging issues in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=an&amp;sektion=4">an(4)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tl&amp;sektion=4">tl(4)</a>.
1.1       deraadt   623: <li>Fix ipv6 ipsec AH length checks.
                    624: <li>ncurses-5.0-20000617.
1.23      naddy     625: <li>ipv6 <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ipsec&amp;sektion=4">ipsec(4)</a> outbound direction code.
                    626: <li>De-#ifdef <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bpf&amp;sektion=4">bpf(4)</a> code.
                    627: <li>Start at fixing <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ubsec&amp;sektion=4">ubsec(4)</a> AH support.
                    628: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&amp;sektion=8">isakmpd(8)</a> update.
                    629: <li>Honor scopeid in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=inetd&amp;sektion=8">inetd(8)</a>.
                    630: <li>Fix sun3 pmap, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=MAKEDEV&amp;sektion=8">MAKEDEV</a>, and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=disktab&amp;sektion=5">disktab(5)</a> bugs.
                    631: <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&amp;sektion=1">ssh(1)</a> userauth+pubkey interoperate with ssh.com-2.2.0.
                    632: <li>More bugs in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=an&amp;sektion=4">an(4)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wi&amp;sektion=4">wi(4)</a>.  Anyone see a trend?<br>
                    633:     <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
                    634: <li>Kill <b>/etc/ifaliases</b> in favor of the functionality in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=hostname.if&amp;sektion=5">hostname.if(5)</a>.
                    635: <li>Fix more pesky buffer overflows in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ancontrol&amp;sektion=8">ancontrol(8)</a>.
                    636: <li>Import <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mount_tcfs&amp;sektion=8">tcfs</a> userland tools: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcfsuse&amp;sektion=1">tcfsuse(1)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcfsmng&amp;sektion=8">tcfsmng(8)</a>.
                    637: <li>Fix pesky buffer overflows in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ancontrol&amp;sektion=8&amp;arch=i386">ancontrol(8)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wicontrol&amp;sektion=8">wicontrol(8)</a>.
                    638: <li>Fix many more things in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mount_tcfs&amp;sektion=8">tcfs</a>.
1.1       deraadt   639: <li>Parse <b>${local_rcconf}</b> in <b>/etc/rc.conf</b> instead of <b>/etc/netstart</b>.
1.23      naddy     640: <li>More fixes to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=an&amp;sektion=4">an(4)</a>.<br>
                    641:     <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
                    642: <li>Modify <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=vmstat&amp;sektion=8">vmstat(8)</a>'s <b>-f</b> option to show kernel threads as yet another kind of process.
                    643: <li>Modify <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ps&amp;sektion=1">ps(1)</a> to hide system processes unless <b>-k</b> is given.
1.1       deraadt   644: <li>Mark kernel threads as system processes.
1.23      naddy     645: <li>Cleanup some things in sparc <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=hme&amp;sektion=4">hme(4)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=qe&amp;sektion=4">qe(4)</a>.
1.1       deraadt   646: <li>Numerous other IPV6 kernel changes.<br>
                    647:     Too many for me to list in detail, but Itojun is busy in the other room hunched over a laptop screen with Angelos, and we are sure more are coming.
1.23      naddy     648: <li>Do not mess with non-blocking mode on ttys in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&amp;sektion=1">ssh(1)</a>.
1.1       deraadt   649: <li>Repair some multicast problems with IPV6.<br>
1.23      naddy     650:     <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
                    651: <li>Fake FIONBIO and FIOASYNC in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=random&amp;sektion=4">random(4)</a>.
                    652: <li>Support i82559ER in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fxp&amp;sektion=4">fxp(4)</a>.
                    653: <li>Improve handling of RIP in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcpdump&amp;sektion=8">tcpdump(8)</a>.
                    654: <li>Add Rijndael support to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ipsec&amp;sektion=4">ipsec(4)</a>.
                    655: <li>Import <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pppoe&amp;sektion=8">pppoe(8)</a>.
                    656: <li>Fix some bugs in the IPSEC <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getsockopt&amp;sektion=2">getsockopt(2)/setsockopt(2)</a> API regarding sizeof(int) vs sizeof(u_char).
                    657: <li>Support IPV6 in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=identd&amp;sektion=8">identd(8)</a>.
1.1       deraadt   658: <li>Move IPV6 mbuf alignment requirements into input routine, removing the last performance critical one in loopback.
1.23      naddy     659: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ubsec&amp;sektion=4">ubsec(4)</a> fixes to queue requests to the hardware properly.  The device can now do ipsec with itself over loopback or the network, but something is still mangled about the actual ipsec packets.
                    660: <li><font color="#e00000"><strong>SECURITY ISSUE: Two localhost denial of service problems in the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=an&amp;sektion=4">an(4)</a> Aironet Communications 4500/4800 IEEE 802.11DS driver. One bug prevents <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ancontrol&amp;sektion=8">ancontrol(8)</a> from working correctly, instead causing a panic, while the other allows unauthorized users to change settings.<br>
                    661:     <a href="errata27.html#if_an">A patch is available</a></strong></font>.<br>
                    662:     <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
                    663: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=crypto&amp;sektion=9">crypto(9)</a> kernel thread permits hardware crypto devices to run at any spl they prefer.
                    664: <li>Initial <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&amp;sektion=8">OpenSSH</a> support for ssh.com's 2.2.0.
                    665: <li>For <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=setsockopt&amp;sektion=2">setsockopt(2)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getsockopt&amp;sektion=2">getsockopt(2)</a>, do not assume non-PF_INET6 address family to be PF_INET.
                    666: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&amp;sektion=8">sshd(8)</a>, implement bug compatibility with ssh-2.0.13.
                    667: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&amp;sektion=1">ssh(1)</a>, include <b>=</b> in WHITESPACE, permitting commands like <b>ssh -o keyword=argument</b>.
                    668: <li>Enable IPV6 support in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sendmail&amp;sektion=8">sendmail(8)</a>.
1.1       deraadt   669: <li>Change ipsec processing sequence to handle inner and outer layers much better.
1.23      naddy     670: <li>Add support for SSH2 subsystems in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&amp;sektion=8">sshd(8)</a>.
                    671: <li>On <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ifconfig&amp;sektion=8">ifconfig(8)</a> down &amp; up operations, mark all radix tree routes down or up for the specified interface.
                    672: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mount_ffs&amp;sektion=8">mount_ffs(8)</a>, permit the <b>-f</b> command to mount dirty file systems.  This is dangerous, but makes more sense now that we are moving towards soft update file systems, where the inherent danger is much less.
                    673: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ftpd&amp;sektion=8">ftpd(8)</a>, make <b>-u</b> block the chmod client command.
                    674: <li>Allow extended server banners in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&amp;sektion=8">sshd(8)</a>.
                    675: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mount&amp;sektion=8">mount(8)</a>, <b>-o</b> force is not a negative option.
1.1       deraadt   676: <li>Add support for AMD 53c974 scsi chipset.
1.23      naddy     677: <li>Import of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mount_tcfs&amp;sektion=8">tcfs</a> into the kernel, a file content crypto file system.
                    678: <li>Remove traffic-time debugging messages in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&amp;sektion=1">ssh(1)</a>.
                    679: <li>Repair small list-based errors and uglinesses in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=make&amp;sektion=1">make(1)</a>.
1.1       deraadt   680: <li>Commonalize MIN() and MAX() macros inside the kernel.
1.23      naddy     681: <li>Use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=memcmp&amp;sektion=3">memcmp(3)</a> in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bridge&amp;sektion=4">bridge(4)</a> to fix a hashing algorithm error.<br>
                    682:     <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
                    683: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=memcmp&amp;sektion=3">memcmp(3)</a> in the kernel as well, since implementing it in terms of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bcmp&amp;sektion=3">bcmp(3)</a> is very wrong.
                    684: <li>Update vnode flag printing in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pstat&amp;sektion=8">pstat(8)</a>.
                    685: <li>Do not whack directory in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=user&amp;sektion=8">user(8)</a>.<br>
                    686:     <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
1.1       deraadt   687: <li>Hardware random number generator in i840 also works, like i810.
1.23      naddy     688: <li>Fix an ESP status message in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=netstat&amp;sektion=1">netstat(1)</a>.
                    689: <li>Put RSA into our <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&amp;sektion=3">ssl(3)</a> tree.  Since our next release is not till after the patent expires, it's OK.
1.1       deraadt   690: <li>Split sysctl information for swapencrypt into an tree, and add more gunk.
1.23      naddy     691: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ftpd&amp;sektion=8">ftpd(8)</a> correct STAT command output for LPSV output.
                    692: <li>Correct an <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ipsec&amp;sektion=4">ipsec</a> esp bug.
                    693: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ftp&amp;sektion=1">ftp(1)</a> make both <b>ls</b> and <b>dir</b> send a <b>LIST</b> command.
1.1       deraadt   694: <li>Minor bug fixes and optimizations in <b>/etc/rc</b>.
1.23      naddy     695: <li>Update of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ppp&amp;sektion=8">ppp(8)</a>.
                    696: <li>Put an upper bound on transaction queue of the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ubsec&amp;sektion=4">ubsec(4)</a>.
                    697: <li>Correct source length calculation in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=hifn&amp;sektion=4">hifn(4)</a>.<br>
                    698:     <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
                    699: <li>Initial import of ELF <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rtld&amp;sektion=1">ld.so</a>, for powerpc initially.
                    700: <li>Correct secondary mbuf setup in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=hifn&amp;sektion=4">hifn(4)</a>.
                    701: <li>Broadcom Bluesteel 5x0x <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ubsec&amp;sektion=4">ubsec(4)</a> crypto cards now supports ESP 3DES modes properly.  No AH or MAC stuff yet.
                    702: <li>Make flags field in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=newsyslog&amp;sektion=8">newsyslog(8)</a> files optional.
                    703: <li>Modifications to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=traceroute6&amp;sektion=8">traceroute6(8)</a>
                    704: <li>Fix ADMtek identity crisis in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dc&amp;sektion=4">dc(4)</a>.
                    705: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ftpd&amp;sektion=8">ftpd(8)</a> make sure that <b>-h</b> does high port binding in EPSV.
                    706: <li>Correct ENI_SALEN case in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getnameinfo&amp;sektion=3">getnameinfo(3)</a>.
                    707: <li>Correct <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getnameinfo&amp;sektion=3">getnameinfo(3)</a> behaviour against invalid sockaddr.<br>
                    708:     <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
                    709: <li>Better fix for the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pcvt&amp;sektion=4">pcvt(4)</a> scrolling region problem.
                    710: <li>Grok Plan9 file systems in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fdisk&amp;sektion=8">fdisk(8)</a>.
                    711: <li>Merge newer <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ppp&amp;sektion=8">ppp(8)</a> code.
                    712: <li>Do not add empty lines to history in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ftp&amp;sektion=1">ftp(1)</a>.
                    713: <li>Grok QNX file systems in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fdisk&amp;sektion=8">fdisk(8)</a>.
                    714: <li>Fix about 10 bugs in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ubsec&amp;sektion=4">ubsec(4)</a>, which can now move a few packets before dying.
                    715: <li>Support multiple pid files in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=newsyslog&amp;sektion=8">newsyslog(8)</a>.<br>
                    716:     <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
                    717: <li>On-going cleanup to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=make&amp;sektion=1">make(1)</a>.
                    718: <li>Add <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pci&amp;sektion=4">pci(4)</a> routines for dealing with Cypress 82c693 chips.
                    719: <li>Minor cleanup to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pax&amp;sektion=1">pax(1)</a>.
                    720: <li>Merge <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=chgrp&amp;sektion=1">chgrp(1)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=chown&amp;sektion=8">chown(8)</a> into <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=chmod&amp;sektion=1">chmod(1)</a>, and provide backwards compat hard and soft links.
                    721: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xl&amp;sektion=4">xl(4)</a>, add support for 3c656, which is just the 3c575 + 56k modem.
                    722: <li><font color="#e00000"><strong>SECURITY ISSUE: A serious bug in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd_&amp;sektion=8">isakmpd(8)</a> policy handling wherein policy verification could be completely bypassed in isakmpd.<br>
                    723:     <a href="errata27.html#isakmpd">A patch is available</a></strong></font>.<br>
                    724:     <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
                    725: <li>Merge to new <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&amp;sektion=8">isakmpd(8)</a>.
                    726: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&amp;sektion=1">OpenSSH</a> is now at version 2.1.1<br>
                    727:     <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
                    728: <li><font color="#e00000"><strong>RELIABILITY FIX: Avoid extra vrele in msdosfs, which would lead to a panic in some operations.<br>
                    729:     <a href="errata27.html#msdosfs">A patch is available</a></strong></font>.<br>
                    730:     <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
                    731: <li><font color="#e00000"><strong>RELIABILITY FIX: Permit NFS export of CDs without panicing the system.<br>
                    732:     <a href="errata27.html#cd9660">A patch is available</a></strong></font>.<br>
                    733:     <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
                    734: <li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ping6&amp;sektion=8">ping6(8)</a> <b>-w</b> option.
                    735: <li>Let flags in kernel <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=config&amp;sektion=8">config(8)</a> specify apm protocol version and other operation modes for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=apm&amp;sektion=4&amp;arch=i386">apm(4)</a>, for machines apm fails on.
1.1       deraadt   736: <li>Change amiga ports loadbsd command to act more like other bsd loaders.
1.23      naddy     737: <li>Add <strong>-iname</strong> support to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=find&amp;sektion=1">find(1)</a>.
                    738: <li>Sort option list in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=find&amp;sektion=1">find(1)</a>; oops, "-and" was broken.
                    739: <li>Catch a <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=malloc&amp;sektion=3">malloc(3)</a> failure in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=paste&amp;sektion=1">paste(1)</a>.
                    740: <li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=linux_compat&amp;sektion=8">linux_compat(8)</a> [gs]etrlimit emulation.<br>
                    741:     <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
                    742: <li>Update <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ti&amp;sektion=4">ti(4)</a> to support newer cards with more memory.
                    743: <li>Kernel <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=malloc&amp;sektion=9">malloc(9)</a> debug code.
                    744: <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=quot&amp;sektion=1">quot(1)</a> work when passed mount points.
                    745: <li>Fix stack mishandling bugs in i387 libm, in particular, in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=exp&amp;sektion=3">exp(3)</a> and friends.<br>
                    746:     <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
                    747: <li>Be more careful about tuples in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pcmcia&amp;sektion=4">pcmcia(4)</a>.
                    748: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=gcc&amp;sektion=1">gcc 2.95.3 (pre-release)</a>
                    749: <li>Busify <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=eg&amp;sektion=4">eg(4)</a>, to avoid conflict with ne2000 at 0x300.
                    750: <li><font color="#e00000"><strong>SECURITY ISSUE: Do not use the (non-default) <b>UseLogin</b> option in OpenSSH 2.1.*, it has a hole on other operating systems and does not work right in OpenBSD.<br>
                    751:     <a href="errata27.html#uselogin">Update to OpenSSH 2.1.1 or later, or simply avoid using UseLogin</a></strong></font>.<br>
                    752:     <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
                    753: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sudo&amp;sektion=8">sudo 1.6.3p4</a>
                    754: <li>Fix a kernel race in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=_exit&amp;sektion=2">_exit(2)</a>.
                    755: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cut&amp;sektion=1">cut(1)</a> deal with last input line not containing a newline
                    756: <li>One byte overflow in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=systat&amp;sektion=8">systat(8)</a>.
                    757: <li>Add <strong>D</strong> and <strong>z</strong> commands to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=disklabel&amp;sektion=8">disklabel(8)</a> to use the default partition or zero it.
                    758: <li>A SIGCHLD fix in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cron&amp;sektion=8">cron(8)</a>.
                    759: <li>More work on <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ubsec&amp;sektion=4">ubsec(4)</a>.
                    760: <li>Bug fixes to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=spif&amp;sektion=4&amp;arch=sparc">spif(4)</a>.
1.1       deraadt   761: <li>Bridge packets before vlan'ing them.
1.23      naddy     762: <li>Fix a subtle bug in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xe&amp;sektion=4">xe(4)</a> which had a number of side effects.
                    763: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&amp;sektion=8">sshd(8)</a>, fix login count failures in SSH2 support.
                    764: <li>Whack packet m_recvif field on bridged packets, permitting <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ipnat&amp;sektion=4&amp;manpath=OpenBSD+2.7">ipnat(4)</a> to work with the bridge.
                    765: <li>More visible /tmp file (and failure removal) in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=makewhatis&amp;sektion=8">makewhatis(8)</a>.
                    766: <li>Be more careful reading panic string from core in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=savecore&amp;sektion=8">savecore(8)</a>.<br>
                    767:     <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
                    768: <li>Many other changes to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&amp;sektion=1">ssh(1)</a>.
                    769: <li>Fix short malloc in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=faithd&amp;sektion=8">faithd(8)</a>.
                    770: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&amp;sektion=1">ssh(1)</a>, permit logins if temporary file systems are full.
                    771: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ich&amp;sektion=4">ich(4)</a> audio driver onboard the Intel 810/820/440MX-based machines.
                    772: <li>Support ax88190 in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ne&amp;sektion=4">ne(4)</a>.
                    773: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=apm&amp;sektion=4&amp;sektion=i386">apm(4)</a> the time is kept in hours, not minutes.
                    774: <li>Add <strong>-A</strong> support to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&amp;sektion=1">ssh(1)</a>.
                    775: <li>Support for 3c574 and 3CCFEM556BI <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pcmcia&amp;sektion=4">pcmcia(4)</a> in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ep&amp;sektion=4">ep(4)</a>.
                    776: <li>A start at documenting what goes on inside <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=config&amp;sektion=8">config(8)</a> files.
                    777: <li>Enable <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mg&amp;sektion=1">mg(1)</a>.
                    778: <li>Space treatment in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ipcs&amp;sektion=1">ipcs(1)</a>.
                    779: <li>Do not treat <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bind&amp;sektion=2">bind(2)</a> with <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ip&amp;sektion=4">IPv4</a> mapped address in a special way.
1.1       deraadt   780: <li>Creation of 2.7-stable release, see our <a href="stable.html">page describing it</a>.
                    781: <li>Convert <a href="amiga.html">amiga</a> port to UVM.
1.23      naddy     782: <li>Arrange to have <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ahc&amp;sektion=4">ahc(4)</a> support Adaptec 2930CU.
                    783: <li><font color="#e00000"><strong>SECURITY ISSUE: It was possible to bypass the <b>learning</b> flag on a bridge.<br>
                    784:     <a href="errata27.html#bridge">A patch is available</a></strong></font>.<br>
                    785:     <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
                    786: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ftp&amp;sektion=1">ftp(1)</a>, do not attach <b>Host:</b> directive if we are using the proxy.
1.1       deraadt   787: <li>Make almost all manual pages machine independent.
1.23      naddy     788: <li><font color="#e00000"><strong>DRIVER FIX: The <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isapnp&amp;sektion=4">isapnp(4)</a> <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ef&amp;sektion=4">ef(4)</a> driver failed to configure properly.<br>
                    789:     <a href="errata27.html#ef">A patch is available</a></strong></font>.<br>
                    790:     <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
                    791: <li>Helper script cleanup in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=httpd&amp;sektion=8">httpd(8)</a>.
                    792: <li><font color="#e00000"><strong>SECURITY ISSUE: Update to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ipf&amp;sektion=8&amp;manpath=OpenBSD+2.7">ipf</a> 3.3.16.<br>
                    793:     <a href="errata27.html#ipf">A patch is available</a></strong></font>.<br>
                    794:     <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
1.1       deraadt   795: <li>On i386, place extra byte at end of pcb so that the iomap works for last 8 ports.
1.23      naddy     796: <li>Fix some key parsing routines in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&amp;sektion=1">ssh(1)</a>.
1.1       deraadt   797: <li>Permit detach of audio devices.
1.23      naddy     798: <li>Properly configure multicast table in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wi&amp;sektion=4">wi(4)</a>.
                    799: <li>Handle 64 bit architectures in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pstat&amp;sektion=8">pstat(8)</a> -f.
                    800: <li>Update <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rtadvd&amp;sektion=8">rtadvd(8)</a>.
                    801: <li>Remove <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=nfsiod&amp;sektion=8&amp;manpath=OpenBSD+2.7">nfsiod(8)</a> and replace it with an in-kernel thread based implementation.
                    802: <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&amp;sektion=1">ssh(1)</a> X11 forwarding work on localhost.
1.1       deraadt   803: <li>Crank vnode use counts to 32 bits.
1.23      naddy     804: <li>Correct <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ifconfig&amp;sektion=8">ifconfig(8)</a> printing of gif physical address on non-IPV6 kernel.
                    805: <li><font color="#e00000"><strong> RELIABILITY FIX: Repair a routing table panic.<br>
                    806:     <a href="errata27.html#route">A patch is available</a></strong></font>.<br>
                    807:     <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
                    808: <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ancontrol&amp;sektion=8">ancontrol(8)</a> act like our changed <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wicontrol&amp;sektion=8&amp;arch=i386">wicontrol(8)</a> semantics.
                    809: <li>Use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getifaddrs&amp;sektion=3">getifaddrs(3)</a> in libc rpc code.
                    810: <li>For <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=boot_config&amp;sektion=8">boot_config(8)</a> code, save enable command in the history for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=config&amp;sektion=8">config(8)</a>'s -eu updating.
1.1       deraadt   811: <li>Update multicasting support for IPV6.
1.23      naddy     812: <li>Fix usage printing in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=passwd&amp;sektion=1">passwd(1)</a>.
                    813: <li>By default, do not vsync blank sparc <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cgsix&amp;sektion=4&amp;arch=sparc">cgsix(4)</a> monitors, but provide a sysctl to do so.
1.1       deraadt   814: <li>Start at a BlueSteel (Broadcom) 5[56]01 crypto accelerator driver.
1.23      naddy     815: <li>Accept empty shell specifications in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&amp;sektion=8">sshd(8)</a>.
                    816: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&amp;sektion=1">ssh(1)</a>, do non-blocking on ssh1 protocol sockets too.
                    817: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=makewhatis&amp;sektion=8">makewhatis(8)</a>, do not stop if the directory does not exist.<br>
                    818:     <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
                    819: <li>Some additions to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=keynote&amp;sektion=3">keynote(3)</a>.
1.1       deraadt   820: <li>Crank rt_refcnt to 32 bits.
                    821: <li>Supply entropy from i386 mouse drivers to the kernel random number generator.
1.23      naddy     822: <li>Correct p2p interface address handling and various other bugs in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=route6d&amp;sektion=8">route6d(8)</a>.
1.1       deraadt   823: <li>Few more tweaks to pcvt termcap definition.
                    824: <li>Ensure SIOCSETVLAN gets a valid vlan tag.
1.23      naddy     825: <li>After <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ftp&amp;sektion=1">ftp(1)</a> finishes downloading, change progress meter to show the total elapsed time.
                    826: <li>Handle 0-size files in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ftp&amp;sektion=1">ftp(1)</a>'s progress meter.
                    827: <li>Parse RFC2732 ftp URLs in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ftp&amp;sektion=1">ftp(1)</a>.
1.1       deraadt   828: <li>In IPV6, perform NUD on p2p link, only if the destination/gateway is real neighbor.
1.23      naddy     829: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getaddrinfo&amp;sektion=3">getaddrinfo(3)</a>, translate DNS error code into getaddrinfo error code (EAI_xxx).<br>
                    830:     <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
                    831: <li><font color="#e00000"><strong> RELIABILITY FIX: Parse IPv4 options more carefully.<br>
                    832:     <a href="errata27.html#ipopts">A patch is available</a></strong></font>.<br>
                    833:     <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
                    834: <li>Translate DNS error codes in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getaddrinfo&amp;sektion=3">getaddrinfo(3)</a>.
                    835: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cardbus&amp;sektion=4">cardbus(4)</a> <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=com&amp;sektion=4">com(4)</a> driver.
1.1       deraadt   836: <li>Support debugging libraries via DEBUGLIBS in <b>/etc/mk.conf</b>.
1.23      naddy     837: <li>Driver for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcic&amp;sektion=4">tcic(4)</a> style pcmcia adapters.
                    838: <li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ipsec&amp;sektion=4">ipsec(4)</a> ESP sanity checks that caused really short packets to be dropped.  Only icmp was affected.
1.1       deraadt   839: </ul>
                    840: <p>
                    841:
                    842: This list mentions mostly platform-independent changes.  For a list of changes
                    843: made in a particular platform, please check the page for that platform.  If you
                    844: find them not listed there, the changes are either (1) not being documented or
                    845: (2) are documented here.<br><br>
                    846:
                    847: <hr>
                    848: <p>
                    849: <h3>
1.22      deraadt   850: For changes in other releases, click below:<br>
                    851: <a href="plus20.html">2.0</a>,
                    852: <a href="plus21.html">2.1</a>,
                    853: <a href="plus22.html">2.2</a>,
                    854: <a href="plus23.html">2.3</a>,
                    855: <a href="plus24.html">2.4</a>,
                    856: <a href="plus25.html">2.5</a>,
                    857: <a href="plus26.html">2.6</a>,
                    858: <a href="plus27.html">2.7</a>,
                    859: <a href="plus29.html">2.9</a>,
                    860: <a href="plus30.html">3.0</a>,
                    861: <a href="plus31.html">3.1</a>,
                    862: <a href="plus32.html">3.2</a>,
1.24      deraadt   863: <a href="plus33.html">3.3</a>,
1.26      david     864: <a href="plus34.html">3.4</a>,
1.28      deraadt   865: <a href="plus35.html">3.5</a>,
1.30      miod      866: <a href="plus36.html">3.6</a>,
1.31      deraadt   867: <a href="plus37.html">3.7</a>,
1.33      deraadt   868: <a href="plus38.html">3.8</a>,
1.34      deraadt   869: <a href="plus39.html">3.9</a>,
1.35    ! deraadt   870: <a href="plus40.html">4.0</a>,
1.22      deraadt   871: <a href="plus.html">current</a>.
1.1       deraadt   872: <br>
                    873: </h3>
                    874:
                    875: <hr>
                    876: <a href="index.html"><img height=24 width=24 src=back.gif border=0 alt=OpenBSD></a>
1.23      naddy     877: <a href="mailto:www@openbsd.org">www@openbsd.org</a>
1.35    ! deraadt   878: <br><small>$OpenBSD: plus28.html,v 1.34 2006/03/08 01:40:57 deraadt Exp $</small>
1.1       deraadt   879:
                    880: </body>
                    881: </html>