version 1.2, 2001/04/25 20:26:48 |
version 1.3, 2001/04/25 21:46:06 |
|
|
<li>Move bogus packet length test in udp packets to avoid being stuck at <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=splsoftnet&sektion=9">splsoftnet</a>.<br> |
<li>Move bogus packet length test in udp packets to avoid being stuck at <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=splsoftnet&sektion=9">splsoftnet</a>.<br> |
<a href="stable.html"><font color=#00b000>[Applied to stable]</font></a> |
<a href="stable.html"><font color=#00b000>[Applied to stable]</font></a> |
<li>... |
<li>... |
<li><font color=#e00000><strong>SECURITY FIX: for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ipsec&sektion=4">ipsec(4)</a>, handle AH packets with IP options more strictly.</strong></font><br> |
|
<a href="errata.html#ipsec_ah">A patch is available</a>.<br> |
|
<a href="stable.html"><font color=#00b000>[Applied to stable]</font></a> |
|
<li>... |
|
<li><font color=#e00000><strong>SECURITY FIX: on i386, check arguments to USER_LDT (not enabled by default) mappings.</strong></font><br> |
<li><font color=#e00000><strong>SECURITY FIX: on i386, check arguments to USER_LDT (not enabled by default) mappings.</strong></font><br> |
<a href="errata.html#userldt">A patch is available</a>.<br> |
<a href="errata.html#userldt">A patch is available</a>.<br> |
<a href="stable.html"><font color=#00b000>[Applied to stable]</font></a> |
<a href="stable.html"><font color=#00b000>[Applied to stable]</font></a> |
<li>... |
<li>... |
<li><font color=#e00000><strong>SECURITY FIX: update to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sudo&sektion=8">sudo</a>-1.6.3p6 which fixes a buffer overflow on very long argv components.</strong></font><br> |
|
<a href="errata.html#sudo">A patch is available</a>.<br> |
|
<a href="stable.html"><font color=#00b000>[Applied to stable]</font></a> |
|
<li>... |
|
<li><a href="http://www.openssh.com/">OpenSSH</a> 2.5.1 released.<br> |
|
<a href="stable.html"><font color=#00b000>[Applied to stable]</font></a> |
|
<li>... |
|
<li><font color=#e00000><strong>IMPLEMENTATION FIX: fix port number computation in libwrap client side ident implementation.</strong></font><br> |
<li><font color=#e00000><strong>IMPLEMENTATION FIX: fix port number computation in libwrap client side ident implementation.</strong></font><br> |
<a href="errata.html#libwrap">A patch is available</a>.<br> |
<a href="errata.html#libwrap">A patch is available</a>.<br> |
<a href="stable.html"><font color=#00b000>[Applied to stable]</font></a> |
<a href="stable.html"><font color=#00b000>[Applied to stable]</font></a> |
|
|
<li>Disable bogus file check in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cvs&sektion=1">cvs(1)</a>.<br> |
<li>Disable bogus file check in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cvs&sektion=1">cvs(1)</a>.<br> |
<a href="stable.html"><font color=#00b000>[Applied to stable]</font></a> |
<a href="stable.html"><font color=#00b000>[Applied to stable]</font></a> |
<li>... |
<li>... |
<li><a href="http://www.openssh.com/">OpenSSH</a> 2.5.0 released.<br> |
<li><font color=#e00000><strong>SECURITY FIX: for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ipsec&sektion=4">ipsec(4)</a>, handle AH packets with IP options more strictly.</strong></font><br> |
|
<a href="errata.html#ipsec_ah">A patch is available</a>.<br> |
<a href="stable.html"><font color=#00b000>[Applied to stable]</font></a> |
<a href="stable.html"><font color=#00b000>[Applied to stable]</font></a> |
<li>... |
|
<li><a href="http://www.openssh.com/">OpenSSH</a> 2.3.2 released.<br> |
|
<a href="stable.html"><font color=#00b000>[Applied to stable]</font></a> |
|
<li>... |
|
<li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcpdump&sektion=8">tcpdump(8)</a>, deobfuscate some IP protocols and improve IPSEC tunnelmode printing. |
|
<li>... |
|
<li>Set the offset for SCSI chain B properly in the VAX <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ncr&sektion=4">ncr(4)</a> driver. |
|
<li>... |
|
<li>Import XFree86 4.0.2. |
|
<li>... |
|
<li>Long username fixes to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=lpd&sektion=8">lpd(8)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=lprm&sektion=1">lprm(1)</a>. |
|
<li>... |
|
<li>Tighten IPSEC AH IPv4 option header processing. |
|
<li>In the powerpc port, add edge/level sense detection capability to the interrupt controller. |
<li>In the powerpc port, add edge/level sense detection capability to the interrupt controller. |
<li>Add uftdi(4) driver for the FTDI USB->Serial converter device. |
<li>Add uftdi(4) driver for the FTDI USB->Serial converter device. |
<li>Tone down the verbosity levels in many SCSI drivers. |
<li>Tone down the verbosity levels in many SCSI drivers. |
|
<li><a href="http://www.openssh.com/">OpenSSH</a> 2.5.1 released.<br> |
|
<a href="stable.html"><font color=#00b000>[Applied to stable]</font></a> |
<li>Fix DMA memory allocations in twe(4). |
<li>Fix DMA memory allocations in twe(4). |
<li>Import sudo 1.6.3p6. |
<li><font color=#e00000><strong>SECURITY FIX: update to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sudo&sektion=8">sudo</a>-1.6.3p6 which fixes a buffer overflow on very long argv components.</strong></font><br> |
|
<a href="errata.html#sudo">A patch is available</a>.<br> |
|
<a href="stable.html"><font color=#00b000>[Applied to stable]</font></a> |
<li>Correctly detect Daylight Saving Time changes in cron(8). |
<li>Correctly detect Daylight Saving Time changes in cron(8). |
<li>Add double-tab completion support to ksh(1). |
<li>Add double-tab completion support to ksh(1). |
<li>Avoid losing RTC after suspend/resume on some laptops. |
<li>Avoid losing RTC after suspend/resume on some laptops. |
|
|
<li>More careful buffer handling in rusers(1). |
<li>More careful buffer handling in rusers(1). |
<li>Add MII support to the vr(4) driver. |
<li>Add MII support to the vr(4) driver. |
<li>Several IPv6 improvements from KAME. |
<li>Several IPv6 improvements from KAME. |
|
<li><a href="http://www.openssh.com/">OpenSSH</a> 2.5.0 released.<br> |
|
<a href="stable.html"><font color=#00b000>[Applied to stable]</font></a> |
<li>Sync many parts of the alpha port with NetBSD. |
<li>Sync many parts of the alpha port with NetBSD. |
<li>Fix 64-bit issues with the IPv6 multicast API. |
<li>Fix 64-bit issues with the IPv6 multicast API. |
<li>Rewrite libwrap RFC931 support to avoid stdio issues with sockets. |
<li>Rewrite libwrap RFC931 support to avoid stdio issues with sockets. |
<li>Many man page fixes. |
<li>Many man page fixes. |
<li>Pull in latest faithd(8) daemon from KAME. |
<li>Pull in latest faithd(8) daemon from KAME. |
<li>Set offset for SCSI chain B properly in the vax ncr driver. |
<li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcpdump&sektion=8">tcpdump(8)</a>, deobfuscate some IP protocols and improve IPSEC tunnelmode printing. |
|
<li>Set the offset for SCSI chain B properly in the VAX <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ncr&sektion=4">ncr(4)</a> driver. |
<li>Import XFree86 4.0.2. |
<li>Import XFree86 4.0.2. |
|
<li>Long username fixes to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=lpd&sektion=8">lpd(8)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=lprm&sektion=1">lprm(1)</a>. |
<li>Convert the powerpc port to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=uvm&sektion=9">UVM(9)</a>. |
<li>Convert the powerpc port to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=uvm&sektion=9">UVM(9)</a>. |
<li>Import <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=siop&sektion=4">siop(4)</a>, a replacement for the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ncr&sektion=4">ncr(4)</a> SCSI driver. |
<li>Import <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=siop&sektion=4">siop(4)</a>, a replacement for the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ncr&sektion=4">ncr(4)</a> SCSI driver. |
<li>Support more NE2000 PCMCIA devices. |
<li>Support more NE2000 PCMCIA devices. |
|
|
<li>Stricter prototypes, type fixes, and other cleanups in <a href="http://www.openssh.com/">OpenSSH</a>. |
<li>Stricter prototypes, type fixes, and other cleanups in <a href="http://www.openssh.com/">OpenSSH</a>. |
<li>Switch <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ip6&sektion=4">IPv6</a> raw socket code from NRL to KAME. |
<li>Switch <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ip6&sektion=4">IPv6</a> raw socket code from NRL to KAME. |
<li>Stricter checking in SSH2. |
<li>Stricter checking in SSH2. |
|
<li><a href="http://www.openssh.com/">OpenSSH</a> 2.3.2 released.<br> |
|
<a href="stable.html"><font color=#00b000>[Applied to stable]</font></a> |
<li>Implement an upper limit for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=icmp6&sektion=4">icmp6(4)</a> redirects. |
<li>Implement an upper limit for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=icmp6&sektion=4">icmp6(4)</a> redirects. |
<li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rwhod&sektion=8">rwhod(8)</a> to work, and make debug code a flag option. |
<li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rwhod&sektion=8">rwhod(8)</a> to work, and make debug code a flag option. |
<li>Mark our tree such that we use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wscons&sektion=4">wscons(4)</a> as if it is vt220, instead of vt100. |
<li>Mark our tree such that we use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wscons&sektion=4">wscons(4)</a> as if it is vt220, instead of vt100. |