===================================================================
RCS file: /cvsrepo/anoncvs/cvs/www/plus29.html,v
retrieving revision 1.75
retrieving revision 1.76
diff -u -r1.75 -r1.76
--- www/plus29.html 2017/04/07 13:51:34 1.75
+++ www/plus29.html 2017/06/26 17:18:57 1.76
@@ -80,19 +80,19 @@
-- SECURITY FIX: Avoid DoS attack in ftpd using glob patch.
+ - SECURITY FIX: Avoid DoS attack in ftpd using glob patch.
A patch is available.
[Applied to stable]
- ...
-
- SECURITY FIX: Fix ipf(8) fragment caching bug.
+ - SECURITY FIX: Fix ipf(8) fragment caching bug.
A patch is available.
[Applied to stable]
- ...
-
- SECURITY FIX: Fix buffer overflows contained in glob(3) function.
+ - SECURITY FIX: Fix buffer overflows contained in glob(3) function.
A patch is available.
[Applied to stable]
- ...
-
- Check for short packets and bad types sent to timed(8).
+ - Check for short packets and bad types sent to timed(8).
[Applied to stable]
- ...
- OpenSSH 2.5.2 released.
@@ -103,10 +103,10 @@
[Applied to stable]
- ...
- Make buffer size 8k on NE1000, and 16k otherwise for
-ne.
+ne.
[Applied to stable]
- ...
-
- Move bogus packet length test in udp packets to avoid being stuck at splsoftnet.
+ - Move bogus packet length test in udp packets to avoid being stuck at splsoftnet.
[Applied to stable]
- ...
- SECURITY FIX: on i386, check arguments to USER_LDT (not enabled by default) mappings.
@@ -120,709 +120,709 @@
- Fix several copyin/copyout bugs in sys/compat.
- Provide a random start for tcp timestamps.
- Support sharing disks between MacOS and the PowerPC port.
-
- Add support for the SaramNcom NS-1100M in the wi(4) driver.
-
- Fix support for the D-Link DE660 pcmcia card in ne(4)
-
- In sis(4) add support for reading the MAC address from the APC CMOS RAM in SiS630E-based chipsets.
-
- In ne(4), changes in media type initializion on DP8390-compatibles.
-
- Implement read/write access to an IEEE 802.3u mii(4) bus using the bit-bang method.
+
- Add support for the SaramNcom NS-1100M in the wi(4) driver.
+
- Fix support for the D-Link DE660 pcmcia card in ne(4)
+
- In sis(4) add support for reading the MAC address from the APC CMOS RAM in SiS630E-based chipsets.
+
- In ne(4), changes in media type initializion on DP8390-compatibles.
+
- Implement read/write access to an IEEE 802.3u mii(4) bus using the bit-bang method.
- Add support for DOZE mode on powerpc processors that support it.
-
- Add support for the Symbios 53c1010 in the siop(4) driver.
-
- Implement mincore(2), mlockall(2) and munlockall(2).
-
- Added support for ami(4) MegaRAID Controllers.
-
- Fixed several occurrences of exit(-#); exit(3) only passes the lower 8 bits of status on to the parent.
+
- Add support for the Symbios 53c1010 in the siop(4) driver.
+
- Implement mincore(2), mlockall(2) and munlockall(2).
+
- Added support for ami(4) MegaRAID Controllers.
+
- Fixed several occurrences of exit(-#); exit(3) only passes the lower 8 bits of status on to the parent.
- Fixed several occurrences of PATH_MAX+1 that should be PATH_MAX.
- Fix interrupt handler registration on the mvme88k port, remove 68k-isms and add UKC support.
- Add some non-US encodings to the USB keyboard driver.
-
- Disable bogus file check in cvs(1).
+ - Disable bogus file check in cvs(1).
[Applied to stable]
- - Enable tag queuing and fix some wide/sync negotiation problems in the siop(4) driver.
-
- Add support for isapnp(4) i82365-based pcmcia(4) controllers.
+
- Enable tag queuing and fix some wide/sync negotiation problems in the siop(4) driver.
+
- Add support for isapnp(4) i82365-based pcmcia(4) controllers.
- Many man page fixes.
-
- Fix checksum calculations in bridge(4) setups.
-
- Avoid reading some AC97 registers in neo(4) driver as needed by some devices.
+
- Fix checksum calculations in bridge(4) setups.
+
- Avoid reading some AC97 registers in neo(4) driver as needed by some devices.
- Avoid a deadlock condition in the syncer.
-
- wscons(4) support for powerpc adb keyboard.
-
- Plug many memory leaks in the libc rpc(3) code.
+
- wscons(4) support for powerpc adb keyboard.
+
- Plug many memory leaks in the libc rpc(3) code.
- Drop packets with 127.0.0.0/8 in header field, if the packet is from outside. RFC1122 dictates that 127.0.0.8 must not appear on the wire.
-
- In sudo(8), fix negation of path-type Defaults entries in a boolean context in sudoers(5).
+
- In sudo(8), fix negation of path-type Defaults entries in a boolean context in sudoers(5).
- Add open hashing functions to libc.
-
- fsck(8) changes for soft updates support.
-
- Extend kqueue(2) down to the device layer for better device support.
+
- fsck(8) changes for soft updates support.
+
- Extend kqueue(2) down to the device layer for better device support.
- ncurses-5.2-20010224
-
- In the i386 bios(4) driver, add a check for ROMs mapped into memory and setup an extent for each one found. This fixes a problem with ISA cards using iomem space already claimed by a ROM.
-
- Update to sendmail(8) 8.11.3 which fixes potential data loss if a machine crashes.
+
- In the i386 bios(4) driver, add a check for ROMs mapped into memory and setup an extent for each one found. This fixes a problem with ISA cards using iomem space already claimed by a ROM.
+
- Update to sendmail(8) 8.11.3 which fixes potential data loss if a machine crashes.
- A number of filesystem races and locking problems have been fixed.
-
- In ne(4), add support for a D-Link DFE-650 model with a different vendor ID.
+
- In ne(4), add support for a D-Link DFE-650 model with a different vendor ID.
- Improved stability with soft updates.
-
- WEP support for the an(4) Aironet driver.
-
- Default SSID in the an(4) Aironet driver; now it will connect to any SSID.
+
- WEP support for the an(4) Aironet driver.
+
- Default SSID in the an(4) Aironet driver; now it will connect to any SSID.
- Better detection of the VAX VS4000/VLC and MV3100/{3,4}0.
- Improved S3 Savage X11 driver for XFree86 3.3.6.
-
- Add mii(4) support to the vr(4) Via Rhine network driver.
-
- Add support for the Dlink 530TX+ to the rl(4) RealTek 8129/8139 network driver.
-
- SECURITY FIX: for ipsec(4), handle AH packets with IP options more strictly.
+ - Add mii(4) support to the vr(4) Via Rhine network driver.
+
- Add support for the Dlink 530TX+ to the rl(4) RealTek 8129/8139 network driver.
+
- SECURITY FIX: for ipsec(4), handle AH packets with IP options more strictly.
A patch is available.
[Applied to stable]
- In the powerpc port, add edge/level sense detection capability to the interrupt controller.
-
- Add uftdi(4) driver for the FTDI USB->Serial converter device.
+
- Add uftdi(4) driver for the FTDI USB->Serial converter device.
- Tone down the verbosity levels in many SCSI drivers.
- OpenSSH 2.5.1 released.
[Applied to stable]
- - Fix DMA memory allocations in twe(4).
-
- SECURITY FIX: update to sudo-1.6.3p6 which fixes a non-exploitable buffer overflow on very long argv components.
+ - Fix DMA memory allocations in twe(4).
+
- SECURITY FIX: update to sudo-1.6.3p6 which fixes a non-exploitable buffer overflow on very long argv components.
A patch is available.
[Applied to stable]
- - Correctly detect Daylight Saving Time changes in cron(8).
-
- Add bash-like double-tab completion support to ksh(1).
+
- Correctly detect Daylight Saving Time changes in cron(8).
+
- Add bash-like double-tab completion support to ksh(1).
- Avoid losing RTC after suspend/resume on some laptops.
-
- Repair an integer conversion bug in pms(4) which fixes the mouse resolution setting in X.
-
- Fix non-TCP protocol mappings in ipnat(4).
-
- In isakmpd(8), encode X509 expirations into KeyNote credientials/policies.
-
- In pppoe(8), try every BPF device, not just even-numbered ones.
-
- Support -C flag in nm(1).
-
- Update ISC cron(8) to 4.0b1, maintaining our local changes, including signal handling fixes.
-
- Rename old mvme68k and mvme88k siop(4) driver to ssh(4) to avoid naming conflicts.
-
- Fix an uninitialized variable in wsmouse(4).
+
- Repair an integer conversion bug in pms(4) which fixes the mouse resolution setting in X.
+
- Fix non-TCP protocol mappings in ipnat(4).
+
- In isakmpd(8), encode X509 expirations into KeyNote credientials/policies.
+
- In pppoe(8), try every BPF device, not just even-numbered ones.
+
- Support -C flag in nm(1).
+
- Update ISC cron(8) to 4.0b1, maintaining our local changes, including signal handling fixes.
+
- Rename old mvme68k and mvme88k siop(4) driver to ssh(4) to avoid naming conflicts.
+
- Fix an uninitialized variable in wsmouse(4).
- Some games fixes.
-
- Nuke nlist(3) and kvm(3) usage in top(1).
-
- More careful buffer handling in rusers(1).
-
- Add MII support to the vr(4) driver.
-
- Several IPv6(4) improvements from KAME.
+
- Nuke nlist(3) and kvm(3) usage in top(1).
+
- More careful buffer handling in rusers(1).
+
- Add MII support to the vr(4) driver.
+
- Several IPv6(4) improvements from KAME.
- OpenSSH 2.5.0 released.
[Applied to stable]
- Sync many parts of the alpha port with NetBSD.
-
- Fix 64-bit issues with the IPv6(4) multicast API.
+
- Fix 64-bit issues with the IPv6(4) multicast API.
- Rewrite libwrap RFC931 support to avoid stdio issues with sockets.
- Many man page fixes.
-
- Pull in latest faithd(8) daemon from KAME.
-
- In tcpdump(8), deobfuscate some IP protocols and improve IPsec(4) tunnelmode printing.
-
- Set the offset for SCSI chain B properly in the VAX ncr(4) driver.
+
- Pull in latest faithd(8) daemon from KAME.
+
- In tcpdump(8), deobfuscate some IP protocols and improve IPsec(4) tunnelmode printing.
+
- Set the offset for SCSI chain B properly in the VAX ncr(4) driver.
- Import XFree86 4.0.3.
-
- Long username fixes to lpd(8) and lprm(1).
-
- Convert the powerpc port to UVM(9).
-
- Import siop(4), a replacement for the ncr(4) SCSI driver.
+
- Long username fixes to lpd(8) and lprm(1).
+
- Convert the powerpc port to UVM(9).
+
- Import siop(4), a replacement for the ncr(4) SCSI driver.
- Support more NE2000 PCMCIA devices.
- Avoid passing shared mbufs around the kernel to prevent accidental overwrites.
-
- Add pcscp(4), a driver which supports AMD Am53c974 SCSI controllers.
-
- Modify sliplogin(8) to handle long usernames.
-
- Allow X to work without pcvt(4).
-
- Fix an authorizer removal problem in keynote(3).
+
- Add pcscp(4), a driver which supports AMD Am53c974 SCSI controllers.
+
- Modify sliplogin(8) to handle long usernames.
+
- Allow X to work without pcvt(4).
+
- Fix an authorizer removal problem in keynote(3).
- Deactivate function pointers upon interface detach to avoid crashes.
- Deal with the real time clock losing interrupts on i386.
- Bump maxusers to 32 in the alpha port.
-
- Avoid a theoretical buffer overflow in getpwent(3).
-
- Fix an uninitialized variable in bsd.port.mk(5).
-
- Disregard ospeed in tetris(6).
-
- Modify wall(1) to handle long usernames.
-
- Many isp(4) SCSI driver improvements and updates.
-
- Fix goto-line 0 case in mg(1).
-
- Fix PermitRootLogin option in ssh(1).
-
- In brconfig(8), skip empty lines in the rulefile.
+
- Avoid a theoretical buffer overflow in getpwent(3).
+
- Fix an uninitialized variable in bsd.port.mk(5).
+
- Disregard ospeed in tetris(6).
+
- Modify wall(1) to handle long usernames.
+
- Many isp(4) SCSI driver improvements and updates.
+
- Fix goto-line 0 case in mg(1).
+
- Fix PermitRootLogin option in ssh(1).
+
- In brconfig(8), skip empty lines in the rulefile.
- Fix HTTP installs, which were broken for quite awhile.
- Repair statclock on mvme88k.
- Ensure softupdates is enabled before performing softupdates-specific operations.
-
- Define a sendmail(8) variable to workaround broken name servers.
-
- Allow up to 12 virtual terminals in wscons(4).
+
- Define a sendmail(8) variable to workaround broken name servers.
+
- Allow up to 12 virtual terminals in wscons(4).
- Correct VAX signal handling.
- Cleanup MAC support in SSH2.
- Support attachment of Cheetah devices to vsbus as well as ibus in the VAX port.
-
- Disable a bogus file check in cvs(1) to ease the pain of having replicated repositories.
-
- Ensure $RSH is set in the rcmd(3) functions.
-
- String table fixes to ddb(4) and modload(8).
-
- Update wscons(4) code.
-
- Pull in fixes for potential buffer overflows in xdm(1).
-
- Compatibility fixes to tar(1).
+
- Disable a bogus file check in cvs(1) to ease the pain of having replicated repositories.
+
- Ensure $RSH is set in the rcmd(3) functions.
+
- String table fixes to ddb(4) and modload(8).
+
- Update wscons(4) code.
+
- Pull in fixes for potential buffer overflows in xdm(1).
+
- Compatibility fixes to tar(1).
- Many OpenSSH cleanups and improvements.
-
- New ELF symbol handling in ddb(4).
-
- Enable wscons support in XFree86.
-
- Modify PCI power state for clct(4) devices so they work after warm reboots.
-
- Repair BPF support in gre(4).
-
- Fix an uninitialized variable in wsdisplay(4).
-
- Fix file attribute passing in sftp-server(8).
-
- Correct a memory usage error in ssh-keyscan(1).
+
- New ELF symbol handling in ddb(4).
+
- Enable wscons support in XFree86.
+
- Modify PCI power state for clct(4) devices so they work after warm reboots.
+
- Repair BPF support in gre(4).
+
- Fix an uninitialized variable in wsdisplay(4).
+
- Fix file attribute passing in sftp-server(8).
+
- Correct a memory usage error in ssh-keyscan(1).
- Add support to the powerpc for loading the bootloader and kernel from an HFS filesystem.
-
- Better failure handling in vr(4).
-
- Add support to dc(4) for parsing media blocks from Intel 21143 SROMs.
+
- Better failure handling in vr(4).
+
- Add support to dc(4) for parsing media blocks from Intel 21143 SROMs.
- Strengthen SSH1 to make traffic analysis more difficult.
-
- Updates to /etc/services from IANA.
-
- In ssh(1), enforce non-batch_mode if StrictHostKeyChecking is set to "ask".
+
- Updates to /etc/services from IANA.
+
- In ssh(1), enforce non-batch_mode if StrictHostKeyChecking is set to "ask".
- Backport a buffer overflow fix from XFree86 4.0.2 to in-tree XFree 3.3.6.
- Stricter prototypes, type fixes, and other cleanups in OpenSSH.
-
- Switch IPv6 raw socket code from NRL to KAME.
+
- Switch IPv6 raw socket code from NRL to KAME.
- Stricter checking in SSH2.
- OpenSSH 2.3.2 released.
[Applied to stable]
- - Implement an upper limit for icmp6(4) redirects.
-
- Fix rwhod(8) to work, and make debug code a flag option.
-
- Mark our tree such that we use wscons(4) as if it is vt220, instead of vt100.
-
- In wscons(4), when scrolled back, if a new key is pressed, reset us to our previous location, as pcvt(4) used to do.
-
- Permit sftp(1) over SSH1 protocol.
-
- In sftp(1), do not forward agent or X11 traffic.
-
- In tar(1), fix -T option and add support for -C option
-
- Honor TMPDIR variable in tar(1), cpio(1), and pax(1).
-
- perl(1) patch CHANGE6214.
-
- New route6d(8).
-
- Numerous more changes to sftp-server(8) and sftp(1).
-
- Changes to accept(2) to permit return of ECONNABORTED.
-
- Quieten IPv6 DN message reporting by default.
-
- Improve xmalloc() and friends in ssh(1) code..
+
- Implement an upper limit for icmp6(4) redirects.
+
- Fix rwhod(8) to work, and make debug code a flag option.
+
- Mark our tree such that we use wscons(4) as if it is vt220, instead of vt100.
+
- In wscons(4), when scrolled back, if a new key is pressed, reset us to our previous location, as pcvt(4) used to do.
+
- Permit sftp(1) over SSH1 protocol.
+
- In sftp(1), do not forward agent or X11 traffic.
+
- In tar(1), fix -T option and add support for -C option
+
- Honor TMPDIR variable in tar(1), cpio(1), and pax(1).
+
- perl(1) patch CHANGE6214.
+
- New route6d(8).
+
- Numerous more changes to sftp-server(8) and sftp(1).
+
- Changes to accept(2) to permit return of ECONNABORTED.
+
- Quieten IPv6 DN message reporting by default.
+
- Improve xmalloc() and friends in ssh(1) code..
- Remove dead architecture support from the tree.
-
- Remove support for #! from syslogd(8).
-
- cac(4) driver to support Compaq Smart ARRAY RAID controllers.
-
- Ignore blank lines in hostname.if(5) files.
-
- In ssh(1), add -1 option to force protocol 1.
-
- Enable sftp-server(8) by default.
-
- Numerous bug fixes to sftp-server(8) and sftp(1).
+
- Remove support for #! from syslogd(8).
+
- cac(4) driver to support Compaq Smart ARRAY RAID controllers.
+
- Ignore blank lines in hostname.if(5) files.
+
- In ssh(1), add -1 option to force protocol 1.
+
- Enable sftp-server(8) by default.
+
- Numerous bug fixes to sftp-server(8) and sftp(1).
- Make scsi work on the vaxstation 4000/90.
-
- Same for tun(4), gif(4), and others..
-
- Change lo(4) initialization code so that boot -c pseudo-device editing code can affect it in the expected fashion.
-
- If kernel has ddb(4) support, add a ddb sub-command inside boot -c.
+
- Same for tun(4), gif(4), and others..
+
- Change lo(4) initialization code so that boot -c pseudo-device editing code can affect it in the expected fashion.
+
- If kernel has ddb(4) support, add a ddb sub-command inside boot -c.
- Teach the bridge to deal with ARP alignment in the presence of numerous previous layers...
-
- EtherIP support in tcpdump(8).
-
- Fix a bug introduced a few weeks ago in yppush(8).
+
- EtherIP support in tcpdump(8).
+
- Fix a bug introduced a few weeks ago in yppush(8).
- A bit of a trawl through the source tree to please the alpha, since various problems occur in the absence of perfect weak symbols.
- libc_r works on the alpha now.
-
- Many new fixes to sort(1).
+
- Many new fixes to sort(1).
- Teach config -e and boot -c about pseudo-devices.
-
- Fix perl(1) h2ph scripts.
-
- More bridge(4) fixes for unicast learning.
-
- Add sftp(1) client.
-
- Fix an off-by-{1,2,4} error in i386_space_copy(). wscons(4) now works perfectly.
-
- More fixes to rtadvd(8).
-
- Fix bugs in atc(6), snake(6), battlestar(6), phantasia(6), and adventure(6).
+
- Fix perl(1) h2ph scripts.
+
- More bridge(4) fixes for unicast learning.
+
- Add sftp(1) client.
+
- Fix an off-by-{1,2,4} error in i386_space_copy(). wscons(4) now works perfectly.
+
- More fixes to rtadvd(8).
+
- Fix bugs in atc(6), snake(6), battlestar(6), phantasia(6), and adventure(6).
- Enable scrollback from USB keyboards.
-
- Numerous improvements in ppp(8).
-
- At ELF execve(2) time, check for the OpenBSD note first, so that native binaries run best.
+
- Numerous improvements in ppp(8).
+
- At ELF execve(2) time, check for the OpenBSD note first, so that native binaries run best.
- Attempt to share crtbegin/crtend in ELF csu, including an OS note.
-
- Change powerpc ld.so(1) so all architectures use DT_INIT for ctors/init.
+
- Change powerpc ld.so(1) so all architectures use DT_INIT for ctors/init.
- Fix overlapping bus space copy operations on i386.
- Move EtherIP to version 3 (2 byte padded header).
-
- Art does battle with ksyms(4), gets wounded, but eventually wins.
-
- In sshd(8), S/Key is now called ChallengeResponse.
+
- Art does battle with ksyms(4), gets wounded, but eventually wins.
+
- In sshd(8), S/Key is now called ChallengeResponse.
- Make ReverseMappingCheck optional in sshd_config.
- Mickey the madman goes on a new timeout crawl through pci and isa drivers.
-
- Fix nlist(3) emulation for cases where the ELF header does not exist; permits /dev/ksyms to work on ELF machines.
-
- Emulate some new freebsd signal(2) related things in compat_freebsd(8).
-
- In IPv6, avoid panic when packet to nonexistent link-local address is issued.
-
- xl(4) no longer needs to whine about tx underruns.
-
- Fix ELF support for compat_freebsd(8).
-
- Catch the alpha up to wscons(4) changes.
-
- Fix wscons(4) wsmux(4) attachment.
+
- Fix nlist(3) emulation for cases where the ELF header does not exist; permits /dev/ksyms to work on ELF machines.
+
- Emulate some new freebsd signal(2) related things in compat_freebsd(8).
+
- In IPv6, avoid panic when packet to nonexistent link-local address is issued.
+
- xl(4) no longer needs to whine about tx underruns.
+
- Fix ELF support for compat_freebsd(8).
+
- Catch the alpha up to wscons(4) changes.
+
- Fix wscons(4) wsmux(4) attachment.
- Support mvme188 card in mvme88k port.
-
- If a pccbb(4) bridge does not have the right voltages, assume it is dead. Permits single connector adapters to work.
-
- Fix some bugs in the bridge(4), especially regarding gif(4).
-
- IMPLEMENTATION FIX: fix memory allocation in the PCI LANCE ethernet driver, le(4).
+ - If a pccbb(4) bridge does not have the right voltages, assume it is dead. Permits single connector adapters to work.
+
- Fix some bugs in the bridge(4), especially regarding gif(4).
+
- IMPLEMENTATION FIX: fix memory allocation in the PCI LANCE ethernet driver, le(4).
A patch is available.
[Applied to stable]
- - In config(8) -e and -u, do not write out a new kernel if nothing changed.
-
- Numerous fat utmp(5) changes to utilities.
-
- Move utmp(5) to large format.
-
- Fix some incorrect return values for mmap(2) functions.
+ - In config(8) -e and -u, do not write out a new kernel if nothing changed.
+
- Numerous fat utmp(5) changes to utilities.
+
- Move utmp(5) to large format.
+
- Fix some incorrect return values for mmap(2) functions.
[Applied to stable]
- - Make top(1) not setgid.
+
- Make top(1) not setgid.
- Update X11 to support the new i386 changes.
-
- Configure wscons(4) defaults to be what our users expect.
-
- moused(8) is dead for now.
-
- Enable uhci(4) and ohci(4) devices by default in GENERIC.
-
- Range-check invalid .max fields in inetd(8).
-
- Various post-merge ipf(8) fixes. Some previous fixes got removed and had to be put back in.
+
- Configure wscons(4) defaults to be what our users expect.
+
- moused(8) is dead for now.
+
- Enable uhci(4) and ohci(4) devices by default in GENERIC.
+
- Range-check invalid .max fields in inetd(8).
+
- Various post-merge ipf(8) fixes. Some previous fixes got removed and had to be put back in.
- In ATAPI code, ignore PIOMODE errors.
- On many architectures, change console name to ttyC? instead of ttyE?.
-
- Add -U option to ELF ldconfig(8).
-
- Move i386 to wscons(4).
+
- Add -U option to ELF ldconfig(8).
+
- Move i386 to wscons(4).
- Re-org the alpha boot floppies.
- More improvements against the Bleichenbacher pkcs#1 attack.
-
- Fix more select overflow issues in ssh(1).
+
- Fix more select overflow issues in ssh(1).
- gcc 2.95.3, test 2.
-
- ises(4), start of a driver for the Pijnenburg PCC-ISES crypto chip. Does random entropy insertion.
+
- ises(4), start of a driver for the Pijnenburg PCC-ISES crypto chip. Does random entropy insertion.
- Permit many compat system calls to match to the same native call (was not permitted before).
- A bunch of people are doing a kernel trawl to update drivers to new timeouts.
- Support boot -c on the sparc.
- Fix an early timeout bug in wdc/ata support, which caused problems with atapi tape drives.
- Niklas runs through the tree doing commits in an attempt to keep up with Todd's much higher commit count.
-
- Receive random numbers from ubsec(4) cards.
+
- Receive random numbers from ubsec(4) cards.
- Make wdc mode printing more portable, so that the powerpc can use it too.
-
- adb(4) drivers in powerpc port.
-
- New upl(4) driver for Prolific PL2301/PL2302 USB host-to-host driver. This acts like a network device.
-
- Remove -Q flag from sshd(8).
+
- adb(4) drivers in powerpc port.
+
- New upl(4) driver for Prolific PL2301/PL2302 USB host-to-host driver. This acts like a network device.
+
- Remove -Q flag from sshd(8).
- Change audio-driver interface so drivers can supply a minimum delta for mixer value changes.
- USB sync.
-
- SECURITY FIX: fix some buffer overflows in named(8).
+href="https://man.openbsd.org/?query=usb&sektion=4">USB sync.
+ - SECURITY FIX: fix some buffer overflows in named(8).
A patch is available.
[Applied to stable]
- Support Cheetah vaxes.
-
- Improve MAKEDEV(8) manual pages on many architectures.
-
- Cause pcibios(4) to route interrupts via the pci router at the time interrupts are established for each driver, not before.
-
- Optimize pcidevs, usbdevs(8), and other tables in the kernel.
-
- Both wi(4) and awi(4) now support more models of cards.
-
- skey(1) SHA1 is supposed to be little endian.
-
- Improve ping6(8) signal handling further.
-
- Merge isakmpd(8) in. It is no longer separate.
-
- Many ppp(8) improvements.
+
- Improve MAKEDEV(8) manual pages on many architectures.
+
- Cause pcibios(4) to route interrupts via the pci router at the time interrupts are established for each driver, not before.
+
- Optimize pcidevs, usbdevs(8), and other tables in the kernel.
+
- Both wi(4) and awi(4) now support more models of cards.
+
- skey(1) SHA1 is supposed to be little endian.
+
- Improve ping6(8) signal handling further.
+
- Merge isakmpd(8) in. It is no longer separate.
+
- Many ppp(8) improvements.
- Handle binary data in install floppy dmesg.
-
- Improve ELF handling of nlist(3).
+
- Improve ELF handling of nlist(3).
- Print CPU speed in GHz if it is that fast.
- Detect Transmeta CPUs.
- On powerpc, ensure that signal delivery fills in rval[1]; at least pthread was affected.
- Move powerpc to MACHINE_NEW_NONCONTIG.
-
- In mg(1), do not use rename(2) on the ~ file; make a new copy so that vipw(8) and crontab(1) do the right thing.
+
- In mg(1), do not use rename(2) on the ~ file; make a new copy so that vipw(8) and crontab(1) do the right thing.
- Tweak alpha so it sends SIGBUS for unaligned access, and does NOT do a fixup. This encourages people to fix their code.
- KGDB support for the i386.
- Pack alpha definition of infinity properly, other architectures too.
- Recognize Intel P4 CPU.
- Various space optimizations for alpha boot floppies.
- Fix CF wdc, which was broken for a while.
-
- Add "enable" keyword in config(8) files.
+
- Add "enable" keyword in config(8) files.
- Merge and simplify emulation directory handling code.
-
- Support Initio INI-91xx cards via new iha(4) driver.
-
- In accept(2), when peer disconnects before accept is issued, do not return junk in mbuf by setting length to 0.
+
- Support Initio INI-91xx cards via new iha(4) driver.
+
- In accept(2), when peer disconnects before accept is issued, do not return junk in mbuf by setting length to 0.
- Support Hardware RNG on i850 and i860 hubs.
-
- Fix sysctl(3) so that you can clear a string with it.
-
- In sshd(8), rename "skey" to "challenge response", since this mechanism is now more flexible.
+
- Fix sysctl(3) so that you can clear a string with it.
+
- In sshd(8), rename "skey" to "challenge response", since this mechanism is now more flexible.
- Reduce how long we wait for scsi devices to come ready; 50 seconds is enough.
-
- pcvt(4) keyboard LED update lockup patch.
+
- pcvt(4) keyboard LED update lockup patch.
- ncurses-5.2-20010114
-
- Fix many more sshd(8) memory leaks.
-
- Fix memory leak in isakmpd(8).
-
- In timed(8), do not accept packets with an unterminated hostname.
+ - Fix many more sshd(8) memory leaks.
+
- Fix memory leak in isakmpd(8).
+
- In timed(8), do not accept packets with an unterminated hostname.
[Applied to stable]
- Alias map bios rom at both real address and it's own zero-relative address, because bios roms contain bugs.
-
- In rtadvd(8), sync router renumbering flag bit to conform to 2292bis-02 and RR RFC.
-
- Get rid of -R flag in ssh-keygen(1).
-
- Avoid memory leak in ndp(8).
-
- Establish pccbb(4), ohci(4), and uhci(4) interrupt handler much earlier, because of coming pcibios(4) changes.
-
- Numerous small fixes to sshd(8) and friends.
-
- In ssh(1), fix SIGSEGV for -o "".
+
- In rtadvd(8), sync router renumbering flag bit to conform to 2292bis-02 and RR RFC.
+
- Get rid of -R flag in ssh-keygen(1).
+
- Avoid memory leak in ndp(8).
+
- Establish pccbb(4), ohci(4), and uhci(4) interrupt handler much earlier, because of coming pcibios(4) changes.
+
- Numerous small fixes to sshd(8) and friends.
+
- In ssh(1), fix SIGSEGV for -o "".
- On i386, validate gate targets.
- The easy delete key always returns ^?, while the more difficult one returns ^H.
- Incorporate a set of post-4.4BSD changes to the kernel routing code.
- Support more than 256MB of ram on powerpc.
- Be more careful with assuming with VIA chips can handle U66.
-
- Document better how code using sigblock(3) and sigsetmask(3) would be converted to use sigprocmask(2).
-
- Get sshd(8) ready for auth-login.
-
- In ifconfig(8), permit prefixlen to work against ipv4 addresses.
-
- Change savecore(8) to deal with machines dumping 1GB or more..
+
- Document better how code using sigblock(3) and sigsetmask(3) would be converted to use sigprocmask(2).
+
- Get sshd(8) ready for auth-login.
+
- In ifconfig(8), permit prefixlen to work against ipv4 addresses.
+
- Change savecore(8) to deal with machines dumping 1GB or more..
- Attempt to deal with inverted signal races in terminal handlers better, throughout the source tree -- ie. main code is deep inside stdio, signal handler calls exit().
-
- Document rules that apply to signal handlers in signal(3) and sigaction(2).
+
- Document rules that apply to signal handlers in signal(3) and sigaction(2).
- ipf 3.4.15
-
- Fix a vi(1) crash.
-
- SECURITY FIX: The rnd(4) device does not use all of its input when data is written to it.
+ - Fix a vi(1) crash.
+
- SECURITY FIX: The rnd(4) device does not use all of its input when data is written to it.
A patch is available.
[Applied to stable]
- - Fix C sequence point issues in dd(1), monop(6), tail(1), and rbootd(8).
-
- Fix previous inetd(8) fix.
-
- Fix signal handler race in apmd(8), bootpd(8), syslogd(8).
-
- Constrain isp(4) openings to 128, since the vendor code lies, cheats, steals, and makes us cry.
-
- Fully support SSH2 RSA keys in sshd(8).
+
- Fix C sequence point issues in dd(1), monop(6), tail(1), and rbootd(8).
+
- Fix previous inetd(8) fix.
+
- Fix signal handler race in apmd(8), bootpd(8), syslogd(8).
+
- Constrain isp(4) openings to 128, since the vendor code lies, cheats, steals, and makes us cry.
+
- Fully support SSH2 RSA keys in sshd(8).
- Change alpha bootblocks to ELF.
-
- Fix fd_set overflows and signal races in pppoe(1).
+
- Fix fd_set overflows and signal races in pppoe(1).
- Important pthread fix.
-
- Large block of documentation and functionality changes to mail(1).
-
- fd_set overflow fix to routed(8).
-
- Signal handler fix to newfs(1).
-
- Cleanup various signal races and buffer overflows in ed(1).
-
- Fix signal race in mountd(8) by writing our own svc_run() routine.
-
- Fix uninitialized variable bug in config(8) UKC code that ignored first command sometimes.
-
- Various changes ensure that all known le(4) cards now work on sun4, sun4c, and sun4m machines.
+
- Large block of documentation and functionality changes to mail(1).
+
- fd_set overflow fix to routed(8).
+
- Signal handler fix to newfs(1).
+
- Cleanup various signal races and buffer overflows in ed(1).
+
- Fix signal race in mountd(8) by writing our own svc_run() routine.
+
- Fix uninitialized variable bug in config(8) UKC code that ignored first command sometimes.
+
- Various changes ensure that all known le(4) cards now work on sun4, sun4c, and sun4m machines.
- Tweak subr_extent code with respect to boundary cases.
-
- sftp-server(8) draft came out; convert our sftp-server(8) to be compliant.
+
- sftp-server(8) draft came out; convert our sftp-server(8) to be compliant.
- sendmail 8.11.2
-
- Signal race fixes to fsck_ffs(8), rcp(1), slattach(8), shutdown(8).
+
- Signal race fixes to fsck_ffs(8), rcp(1), slattach(8), shutdown(8).
- Change asm and volatile to __asm__ and __volatile__ in any file which might be compiled using -ansi -pedantic or similar.
-
- Some signal handler cleanup in rcp(1).
-
- Cleanup timeout code in adw(4).
+
- Some signal handler cleanup in rcp(1).
+
- Cleanup timeout code in adw(4).
- Numerous alpha catchups.
-
- New rtadvd(8) code.
-
- Compute UDP checksum in dhcpd(8).
-
- Move mvme88k to UVM(9).
-
- clct(4) driver for Cirrus Logic CS4281 sound chips.
-
- Support {Allow,Deny}Groups in sshd(8).
-
- sshd(8) SSH2 protocol support for keepalives, IPTOS_LOWDELAY, TCP_NODELAY, and IPTOS_THROUGHPUT.
-
- Add kerberos(1) password handling in sshd(8) for kerberosIV.
-
- More memory leak fixes to sshd(8) and ssh(1).
-
- Tweak strlcat(3) to not crash for a certain "illegal pointers, length 0" situation.
-
- Clarify setjmp(3) variants in the manual pages.
-
- Correct fd_set and signals in ping6(8).
-
- Un-race three signal handlers, and fix select overflows in inetd(8).
-
- Fix signal race in route6d(8).
+
- New rtadvd(8) code.
+
- Compute UDP checksum in dhcpd(8).
+
- Move mvme88k to UVM(9).
+
- clct(4) driver for Cirrus Logic CS4281 sound chips.
+
- Support {Allow,Deny}Groups in sshd(8).
+
- sshd(8) SSH2 protocol support for keepalives, IPTOS_LOWDELAY, TCP_NODELAY, and IPTOS_THROUGHPUT.
+
- Add kerberos(1) password handling in sshd(8) for kerberosIV.
+
- More memory leak fixes to sshd(8) and ssh(1).
+
- Tweak strlcat(3) to not crash for a certain "illegal pointers, length 0" situation.
+
- Clarify setjmp(3) variants in the manual pages.
+
- Correct fd_set and signals in ping6(8).
+
- Un-race three signal handlers, and fix select overflows in inetd(8).
+
- Fix signal race in route6d(8).
- Move mvme88k to MACHINE_NEW_NONCONTIG.
-
- Fix signal races in rwhod(8).
-
- Fix fd_set overflow in yppush(8).
-
- Fix closedown stub generated and hand-whacked by rpcgen(1) in ypserv(8).
-
- Audio driver for most ESS maestro(8) models.
-
- Signal race repairs in talkd(8) and comsat(8).
-
- Fix select overflow in ssh-agent(1).
-
- Fix rpcgen(1) to deal with large fd_set.
+
- Fix signal races in rwhod(8).
+
- Fix fd_set overflow in yppush(8).
+
- Fix closedown stub generated and hand-whacked by rpcgen(1) in ypserv(8).
+
- Audio driver for most ESS maestro(8) models.
+
- Signal race repairs in talkd(8) and comsat(8).
+
- Fix select overflow in ssh-agent(1).
+
- Fix rpcgen(1) to deal with large fd_set.
- Document various signal races in the source tree which are very difficult to fix, or which turn out to be safe even if they look flawed.
-
- Rename ich(4) to auich(4).
-
- Cleanup the sftp-server(8) implementation.
-
- Support !command feature in bridgename.if(5) files as well.
-
- Numerous other small changes to isakmpd(8).
-
- Handle memory failures in passwd(1).
-
- In finger(1), fail nicely if memory allocation fails.
-
- Handle DELETE payloads in isakmpd(8).
-
- Remove signal races from sshd(8).
-
- Ease support for road-warrior scenarios in isakmpd(8), by intuiting the Local-ID when possible.
+
- Rename ich(4) to auich(4).
+
- Cleanup the sftp-server(8) implementation.
+
- Support !command feature in bridgename.if(5) files as well.
+
- Numerous other small changes to isakmpd(8).
+
- Handle memory failures in passwd(1).
+
- In finger(1), fail nicely if memory allocation fails.
+
- Handle DELETE payloads in isakmpd(8).
+
- Remove signal races from sshd(8).
+
- Ease support for road-warrior scenarios in isakmpd(8), by intuiting the Local-ID when possible.
- Change 802.11 DS drivers to operate in BSS mode by default.
-
- Create links for FD_SET(3) and such to point to the select(2) page.
-
- Support TCP_NDELAY on ipv6(4) in ssh(1).
+
- Create links for FD_SET(3) and such to point to the select(2) page.
+
- Support TCP_NDELAY on ipv6(4) in ssh(1).
- Numerous spelling error corrections in the system.
- Various other calendar updates.
-
- Ensure replydirname in ftpd(8) does not ever truncate names.
-
- Ensure ftpd(8) does not sometimes return a stray " at the end of a string.
-
- Various large updates to isp(4).
-
- In restore(8), do not skip TS_BITS or TS_CLRI are set.
+
- Ensure replydirname in ftpd(8) does not ever truncate names.
+
- Ensure ftpd(8) does not sometimes return a stray " at the end of a string.
+
- Various large updates to isp(4).
+
- In restore(8), do not skip TS_BITS or TS_CLRI are set.
- Change our own custom EtherIP protocol to the standard one (which is very badly designed, but we are trying to get them to fix that).
- Fix KerberosIV code to build better if src and obj are in strange places.
-
- Support Banner option in sshd(8).
+
- Support Banner option in sshd(8).
- Make the openssh-p effort a bit easier by merging some simpler portability hacks.
-
- Various missing free(3) calls repaired in ssh(1).
+
- Various missing free(3) calls repaired in ssh(1).
- Attempt to support cardbus 3CXFEM656C 56k Global modem.
-
- In pciide(4), support U100 on ICH2, U66 on Via Apollo, and other repairs to Promise.
+
- In pciide(4), support U100 on ICH2, U66 on Via Apollo, and other repairs to Promise.
- Spelling changes to calendar files.
-
- Be more careful with stat(2) handling in mv(1).
-
- Fix %p handling in strptime(3).
-
- Fix various buffer overflows and other fixes in indent(1).
-
- Do not spit out icmp6 checksum messages if not a debug kernel.
+
- Be more careful with stat(2) handling in mv(1).
+
- Fix %p handling in strptime(3).
+
- Fix various buffer overflows and other fixes in indent(1).
+
- Do not spit out icmp6 checksum messages if not a debug kernel.
- Permit stripped VAX kernels to load despite unexpected values from libsa.
-
- Simplify locking and a few more fixes to twe(4).
+
- Simplify locking and a few more fixes to twe(4).
- Plug some memory leaks in OpenSSH.
-
- Fix -P in ftpd(8).
+
- Fix -P in ftpd(8).
- Emulation fixes to the VAX code.
-
- Protect bits of dhclient(8) with a locking mechanism to prevent multiple instances from using the leases file simultaneously.
-
- Fix 3 cases in mv(1) relating to the moving of symlinks across filesystems.
-
- In ftpd(8), expand the tilde character in ftp-dir login.conf variable.
-
- Prohibit binding to an anycast, notready, or detached IPv6 address.
-
- Rename fsinfo(8) to xfsinfo in X11 to avoid naming conflict.
-
- Set the correct pfkeyv2 direction for KAME SPD entries in isakmpd(8).
-
- Save and restore errno properly in flex(1) since it may be whacked by isatty(3).
-
- Fix sending/receiving passwords in routed(8).
-
- Add an i386-specific sysctl(3) that modifies halt -p processing in APM to deal with some quirky machines.
+
- Protect bits of dhclient(8) with a locking mechanism to prevent multiple instances from using the leases file simultaneously.
+
- Fix 3 cases in mv(1) relating to the moving of symlinks across filesystems.
+
- In ftpd(8), expand the tilde character in ftp-dir login.conf variable.
+
- Prohibit binding to an anycast, notready, or detached IPv6 address.
+
- Rename fsinfo(8) to xfsinfo in X11 to avoid naming conflict.
+
- Set the correct pfkeyv2 direction for KAME SPD entries in isakmpd(8).
+
- Save and restore errno properly in flex(1) since it may be whacked by isatty(3).
+
- Fix sending/receiving passwords in routed(8).
+
- Add an i386-specific sysctl(3) that modifies halt -p processing in APM to deal with some quirky machines.
- More sun3 fixes, mostly to conform better to other m68k architecture code.
-
- Handle login banners better in SSH2 instances of ssh(1).
+
- Handle login banners better in SSH2 instances of ssh(1).
- Various spelling and grammar fixes across the tree.
-
- Use new sysctl(3) interface for kernel memory bucket statistics and clock information.
-
- Correctly check for empty mailq(1) in /etc/daily.
+
- Use new sysctl(3) interface for kernel memory bucket statistics and clock information.
+
- Correctly check for empty mailq(1) in /etc/daily.
- Y2K fix in the mvme68k NVRAM code.
-
- Extend sysctl(3) to support quad values.
-
- Improve SMB packet printing in tcpdump(8).
+
- Extend sysctl(3) to support quad values.
+
- Improve SMB packet printing in tcpdump(8).
- Add common pidfile-writing code to DHCP so each program doesn't need to roll its own.
-
- To please cap_mkdb(1), make it an error to open a zero-length file for read-only access in hash(3).
+
- To please cap_mkdb(1), make it an error to open a zero-length file for read-only access in hash(3).
- Some sun3 architecture fixes.
-
- Ignore environment variables in libssl if we're running setugid.
-
- In ssh(1), log the remote IP address on disconnect.
-
- Check for memory allocation failure in vmstat(8).
-
- Fix a buffer overflow in fsinfo(8).
-
- Handle another special case in apm(4).
-
- Fix a panic in the RAIDframe locking management code.
-
- Add setpid command to fdisk(8) for setting the partition ID.
-
- Change bridge(4) to use gif* instead of enc*.
-
- Set SO_REUSEPORT socket option in DHCP code, so multiple dhclients work.
-
- Allow printing of 8-bit ASCII characters in talk(1) through an option.
-
- Do not perform getnetbyname() in mountd(8) if the address is already in dot-notation.
-
- In ftpd(8), log the actual number of bytes transferred instead of the original file size.
+
- Ignore environment variables in libssl if we're running setugid.
+
- In ssh(1), log the remote IP address on disconnect.
+
- Check for memory allocation failure in vmstat(8).
+
- Fix a buffer overflow in fsinfo(8).
+
- Handle another special case in apm(4).
+
- Fix a panic in the RAIDframe locking management code.
+
- Add setpid command to fdisk(8) for setting the partition ID.
+
- Change bridge(4) to use gif* instead of enc*.
+
- Set SO_REUSEPORT socket option in DHCP code, so multiple dhclients work.
+
- Allow printing of 8-bit ASCII characters in talk(1) through an option.
+
- Do not perform getnetbyname() in mountd(8) if the address is already in dot-notation.
+
- In ftpd(8), log the actual number of bytes transferred instead of the original file size.
- Fix ^C in termtype prompt.
-
- Prevent fsck_ffs(8) from marking a filesystem clean if fsck(8) needs to be rerun.
-
- Resolve scheduling conflict in newsyslog(8).
-
- In dhclient(8), set a reasonable default lease time if the server does not provide one.
-
- Suppress uninteresting PCI bus error messages in ahc(4).
-
- Add m88k support to gprof(1).
-
- Add HostKeyAlias option to ssh(1).
-
- Behave nicely with fixed-rate codecs in auvia(4).
-
- Fix a minor off-by-one error in gprof(1).
+
- Prevent fsck_ffs(8) from marking a filesystem clean if fsck(8) needs to be rerun.
+
- Resolve scheduling conflict in newsyslog(8).
+
- In dhclient(8), set a reasonable default lease time if the server does not provide one.
+
- Suppress uninteresting PCI bus error messages in ahc(4).
+
- Add m88k support to gprof(1).
+
- Add HostKeyAlias option to ssh(1).
+
- Behave nicely with fixed-rate codecs in auvia(4).
+
- Fix a minor off-by-one error in gprof(1).
- In the ports infrastructure, take the old non-fake code out-of-line.
-
- Repair a disgusting rwhod(8) crash.
-
- Fix buffer overflow in csh(1) builtin printf(1) implementation.
-
- Convert atoi(3) to strtoul(3) in top(1).
+
- Repair a disgusting rwhod(8) crash.
+
- Fix buffer overflow in csh(1) builtin printf(1) implementation.
+
- Convert atoi(3) to strtoul(3) in top(1).
- Emulate Linux truncate64, stat64, lstat64, and fstat64 syscalls.
-
- Revoke root privileges earlier in ping6(8) and traceroute6(8).
+ - Revoke root privileges earlier in ping6(8) and traceroute6(8).
[Applied to stable]
- Many man page fixes.
-
- Use arc4random(3) in jot(1).
-
- Handle quotas over 4GB in edquota(8) and repquota(8).
-
- Fix IPv6 Path MTU Discovery.
-
- Give up euid more carefully in mrinfo(8) and mtrace(8).
+
- Use arc4random(3) in jot(1).
+
- Handle quotas over 4GB in edquota(8) and repquota(8).
+
- Fix IPv6 Path MTU Discovery.
+
- Give up euid more carefully in mrinfo(8) and mtrace(8).
- Various OpenSSH fixes.
- Add support for ActivCard, CRYPTOCard, and SNK-004 authentication for the BSD authentication framework.
-
- In ksh(1), remain in non-blocking mode if the shell is not interactive.
+
- In ksh(1), remain in non-blocking mode if the shell is not interactive.
- SECURITY FIX: xlock now authenticates via a pipe.
A patch is available.
[Applied to stable]
- - IMPLEMENTATION FIX: PS/2 mouse driver, pms, lockup fix.
+ - IMPLEMENTATION FIX: PS/2 mouse driver, pms, lockup fix.
A patch is available.
[Applied to stable]
- - Implement a workaround in atapiscsi(4) for buggy Toshiba drivers.
-
- SECURITY FIX: Fix holes in procfs(8).
+ - Implement a workaround in atapiscsi(4) for buggy Toshiba drivers.
+
- SECURITY FIX: Fix holes in procfs(8).
A patch is available.
[Applied to stable]
- - Put strlcat(3) and strlcpy(3) into libkern for kernel use.
-
- Fix setting of nwid for wi(4).
+ - Put strlcat(3) and strlcpy(3) into libkern for kernel use.
+
- Fix setting of nwid for wi(4).
[Applied to stable]
- Change /etc/security to spit out unified diffs.
-
- Add driver for Compaq SMART Array RAID controllers, cac(4).
-
- Extend the i386 allowaperture sysctl(3) to allow access to the whole 1st MB of memory.
+
- Add driver for Compaq SMART Array RAID controllers, cac(4).
+
- Extend the i386 allowaperture sysctl(3) to allow access to the whole 1st MB of memory.
- Add some more sanity checking to the PCMCIA code to fix some obscure panics.
- Import Apache 1.3.14 + mod_ssl 2.7.1.
- Support multiple pfkeyv2 keying daemons.
-
- Compute diffie-hellman in parallel between server and client in OpenSSH.
+
- Compute diffie-hellman in parallel between server and client in OpenSSH.
- Support Amigas with more than 64MB of RAM.
- Ensure /etc/sudoers is created with a proper secure mode.
-
- Import OpenSSL 0.9.6.
-
- More photurisd(8) improvements.
+
- Import OpenSSL 0.9.6.
+
- More photurisd(8) improvements.
- Update kernel pfkeyv2 code for better conformance to the RFC.
- Enable loading of ELF kernels for alpha.
-
- Add extraction support for shell archives to the bsd.port.mk infrastructure.
-
- In ipsec(4), look for TDB if gateway is unspecified.
+ - Add extraction support for shell archives to the bsd.port.mk infrastructure.
+
- In ipsec(4), look for TDB if gateway is unspecified.
[Applied to stable]
- - Fixes to patch(1) -f and -b.
-
- Convert some more drivers to the new timeout(9) interface.
-
- Add bytecounter statistics reporting to netstat(1).
+
- Fixes to patch(1) -f and -b.
+
- Convert some more drivers to the new timeout(9) interface.
+
- Add bytecounter statistics reporting to netstat(1).
- Instrument more random TCP sequence numbers.
-
- IMPLEMENTATION FIX: Compute crypto(9) session IDs correctly for kernel.
+ - IMPLEMENTATION FIX: Compute crypto(9) session IDs correctly for kernel.
A patch is available.
[Applied to stable]
- - In sshd(8), permit logins with read-only root filesystems if the tty already has sane modes set.
-
- Source port < 1024 is no longer required for rhosts-rsa in sshd(8).
-
- Remove dead code in hifn(4) driver.
-
- Proper getopt(3) usage in compress(1).
-
- Fix a time specification in last(1).
+
- In sshd(8), permit logins with read-only root filesystems if the tty already has sane modes set.
+
- Source port < 1024 is no longer required for rhosts-rsa in sshd(8).
+
- Remove dead code in hifn(4) driver.
+
- Proper getopt(3) usage in compress(1).
+
- Fix a time specification in last(1).
- Do not disable PMTU for established TCP connections unless there is data to send.
-
- Add support for the 802.1D spanning tree protocol to bridge(4).
+
- Add support for the 802.1D spanning tree protocol to bridge(4).
- New BSD authentication login scripts.
-
- Listen to pfkeyv2 acquire messages in photurisd(8), and setup SAs accordingly.
-
- isakmpd(8) update.
-
- apm(4) bug fix that helps a few laptops.
-
- Remove unnecessary code from photurisd(8) in preparation of new SPD framework.
-
- Repair a memory leak in ICMPv6 code.
-
- Turn off PMTU when ICMP needfrag messages get blocked.
+
- Listen to pfkeyv2 acquire messages in photurisd(8), and setup SAs accordingly.
+
- isakmpd(8) update.
+
- apm(4) bug fix that helps a few laptops.
+
- Remove unnecessary code from photurisd(8) in preparation of new SPD framework.
+
- Repair a memory leak in ICMPv6 code.
+
- Turn off PMTU when ICMP needfrag messages get blocked.
- Finnish updates for inter.phone.
-
- Display number of successful IPv6 PMTU changes in netstat(1) -s output.
-
- Do not re-print ETA on completion in scp(1) when copying 0-sized files.
-
- Validate ICMPv6 "too big" messages based on PCB.
-
- Do not use already-freed memory in route(8).
-
- Avoid repeated host controller halted messages in uhci(4).
+
- Display number of successful IPv6 PMTU changes in netstat(1) -s output.
+
- Do not re-print ETA on completion in scp(1) when copying 0-sized files.
+
- Validate ICMPv6 "too big" messages based on PCB.
+
- Do not use already-freed memory in route(8).
+
- Avoid repeated host controller halted messages in uhci(4).
- Remove unused libgmp.
-
- Import KerberosIV v1.0.4.
-
- Always request a new challenge for skey/tis-auth in ssh(1).
-
- Support newer cy(4) communication cards.
-
- Provide new international keymaps for pcvt(4).
+
- Import KerberosIV v1.0.4.
+
- Always request a new challenge for skey/tis-auth in ssh(1).
+
- Support newer cy(4) communication cards.
+
- Provide new international keymaps for pcvt(4).
- Ignore filesystems marked "xx" in the install scripts.
-
- Document that pipe(2) is bidirectional, although this behavior is unportable.
-
- Move the default cvs(1) connection protocol from rsh(1) to ssh(1).
-
- Remove a bogus memory free in getnetgrent(3).
-
- Fix a buffer overflow in bad144(8).
+
- Document that pipe(2) is bidirectional, although this behavior is unportable.
+
- Move the default cvs(1) connection protocol from rsh(1) to ssh(1).
+
- Remove a bogus memory free in getnetgrent(3).
+
- Fix a buffer overflow in bad144(8).
- Revert back to the old rijndael implementation and solve byte ordering bugs there instead.
-
- Drop unneeded support for RTF_TUNNEL in route(8).
-
- Maintain count of routing table timer entries in route(8).
-
- In makewhatis(8), strip weird characters first, then sequences of spaces.
-
- Big improvements to adw(4).
-
- Teach tcpdump(8) about VRRP, SMB, and timed.
-
- Force calendar(1) to only accept real calendar files as input.
-
- Fix various perror(3) overflows in pcvt(4).
-
- Repair a tftp(1) argv parsing overflow.
-
- Conditionalize some BPF code in wx(4).
-
- Finally remove remaining references to extra RSA libs, since the patent has expired.
+
- Drop unneeded support for RTF_TUNNEL in route(8).
+
- Maintain count of routing table timer entries in route(8).
+
- In makewhatis(8), strip weird characters first, then sequences of spaces.
+
- Big improvements to adw(4).
+
- Teach tcpdump(8) about VRRP, SMB, and timed.
+
- Force calendar(1) to only accept real calendar files as input.
+
- Fix various perror(3) overflows in pcvt(4).
+
- Repair a tftp(1) argv parsing overflow.
+
- Conditionalize some BPF code in wx(4).
+
- Finally remove remaining references to extra RSA libs, since the patent has expired.
- New rijndael implementation which solves endian issues.
-
- Support Intel 82801BA pciide(4) controllers.
-
- Exercise more paranoia with passed KRB environment settings in telnetd(8).
-
- Convert some more drivers to the new timeout(9) interface.
-
- Many improvements and modernizations to isp(4).
-
- Update wx(4) with LIVENGOOD support.
-
- Recognize and support the IODATA USB-ET/T Ethernet adapter in kue(4).
-
- Implement asynchronous connections for ssh(1) -R and -L.
-
- Simplify atrun(8) tasks by using asprintf(3).
+
- Support Intel 82801BA pciide(4) controllers.
+
- Exercise more paranoia with passed KRB environment settings in telnetd(8).
+
- Convert some more drivers to the new timeout(9) interface.
+
- Many improvements and modernizations to isp(4).
+
- Update wx(4) with LIVENGOOD support.
+
- Recognize and support the IODATA USB-ET/T Ethernet adapter in kue(4).
+
- Implement asynchronous connections for ssh(1) -R and -L.
+
- Simplify atrun(8) tasks by using asprintf(3).
- Kill unused libtermlib.
-
- Import new pool(9) code.
-
- Fix RIPv0 packet printing and NFS port number parsing in tcpdump(8).
-
- Make pcap(3)-generated BPF filters work on the tun(4) interface.
-
- Import David Maziere's ssh-keyscan(1).
-
- SECURITY FIX: Fix buffer overflow in ftpd(8).
+ - Import new pool(9) code.
+
- Fix RIPv0 packet printing and NFS port number parsing in tcpdump(8).
+
- Make pcap(3)-generated BPF filters work on the tun(4) interface.
+
- Import David Maziere's ssh-keyscan(1).
+
- SECURITY FIX: Fix buffer overflow in ftpd(8).
A patch is available.
[Applied to stable]
- IMPLEMENTATION FIX: Fix fastroute related panic.
A patch is available.
[Applied to stable]
- Teach OpenSSH about more version strings to improve interoperability.
-
- SECURITY FIX: Fix another security problem in the KerberosIV code.
+ - SECURITY FIX: Fix another security problem in the KerberosIV code.
A patch is available.
[Applied to stable]
- - SECURITY FIX: Fix two security problems in the KerberosIV code.
+ - SECURITY FIX: Fix two security problems in the KerberosIV code.
A patch is available.
[Applied to stable]
- - Permit ftpd(8) umask setting via both the command line and through a login class in login.conf(5).
-
- Prevent vlan(4) devices from emitting packets if the parent interface is not up and running.
-
- Better error checking in ping6(8).
+ - Permit ftpd(8) umask setting via both the command line and through a login class in login.conf(5).
+
- Prevent vlan(4) devices from emitting packets if the parent interface is not up and running.
+
- Better error checking in ping6(8).
[Applied to stable]
- - Some stability fixes to isakmpd(8).
-
- In ssh(1), disable agent/X11 port forwarding if the hostkey has changed.
-
- Fix a coredump in ssh-agent(1).
-
- Reset 16-bit PCMCIA during chip initialization in pccbb(4).
-
- Correct PCI interrupt setup for TI PCI113X CardBus bridges.
-
- Properly powerdown PC cards in pccbb(4) at shutdown time.
-
- Add -D option to sshd(8) to cause startup without a daemon.
-
- Show both the IP address and hostname when a new key is encountered in ssh(1).
-
- Fix a bug in MSChapv2 challenge hashing in ppp(8).
-
- More make(1) tweaks.
+
- Some stability fixes to isakmpd(8).
+
- In ssh(1), disable agent/X11 port forwarding if the hostkey has changed.
+
- Fix a coredump in ssh-agent(1).
+
- Reset 16-bit PCMCIA during chip initialization in pccbb(4).
+
- Correct PCI interrupt setup for TI PCI113X CardBus bridges.
+
- Properly powerdown PC cards in pccbb(4) at shutdown time.
+
- Add -D option to sshd(8) to cause startup without a daemon.
+
- Show both the IP address and hostname when a new key is encountered in ssh(1).
+
- Fix a bug in MSChapv2 challenge hashing in ppp(8).
+
- More make(1) tweaks.
- Use -n to test for non-zero variables in /etc/netstart.
- Be more careful with ARP packets.
-
- Fix deletion of flows in pf_key_v2 handling of isakmpd(8)
+ - Fix deletion of flows in pf_key_v2 handling of isakmpd(8)
[Applied to stable]
- - Prevent setusercontext(3) in ftpd(8) from setting the umask as this conflicts with any command-line umask specification.
-
- clock(3) fixes for the alpha architecture.
-
- Print select collisions in vmstat(8) -s output.
-
- Implement login_check_expire(3) for libutil.
-
- Add -u username support to pwd_mkdb(8).
+
- Prevent setusercontext(3) in ftpd(8) from setting the umask as this conflicts with any command-line umask specification.
+
- clock(3) fixes for the alpha architecture.
+
- Print select collisions in vmstat(8) -s output.
+
- Implement login_check_expire(3) for libutil.
+
- Add -u username support to pwd_mkdb(8).
- Properly implement errno handling for the threaded libc (libc_r) on powerpc.
-
- In adduser(8), get rid of a race condition and use /etc/ptmp as a lock file.
-
- Set reasonable defaults for RSA1, RSA, and DSA keys in ssh-keygen(1).
-
- Reorder check for illegal ciphers in ssh(1) protocol 1 connection code.
-
- Fix pciide(4) support on Alpha 164SX models.
+
- In adduser(8), get rid of a race condition and use /etc/ptmp as a lock file.
+
- Set reasonable defaults for RSA1, RSA, and DSA keys in ssh-keygen(1).
+
- Reorder check for illegal ciphers in ssh(1) protocol 1 connection code.
+
- Fix pciide(4) support on Alpha 164SX models.
- Support 16 slices per device on VAX machines.
-
- Considerable cleanups to make(1).
-
- Improve key repeat logic in wskbd(4).
-
- Changes from KAME to make ifm_data available in getifaddrs(3).
-
- Fix absolute path handling in crunchgen(1).
+
- Considerable cleanups to make(1).
+
- Improve key repeat logic in wskbd(4).
+
- Changes from KAME to make ifm_data available in getifaddrs(3).
+
- Fix absolute path handling in crunchgen(1).
- Shorten /dev/ttyC* device names.
-
- Complain about invalid ciphers in ssh(1), falling back to reasonable defaults when necessary.
-
- Avoid tty races in wsdisplay(4) when switching virtual terminals.
-
- Update isakmpd(8).
-
- Repair lun support in umass(4).
+
- Complain about invalid ciphers in ssh(1), falling back to reasonable defaults when necessary.
+
- Avoid tty races in wsdisplay(4) when switching virtual terminals.
+
- Update isakmpd(8).
+
- Repair lun support in umass(4).
- Zero pw_passwd before freeing its memory in the libc BSD authentication routines.
-
- Train makewhatis(8) to handle more special cases.
-
- Avoid double fclose(3) in getcap(3).
-
- Increase delay in RAM probe for hifn(4).
-
- Suffix list fix in make(1).
-
- Various bug fixes in ksh(1).
-
- When using the tail(1) -f flag on stdin, don't reopen a local file named stdin.
-
- Extend kqueue(2) to support kernel events on vnodes.
-
- Bring in BSD authentication support for sudo(8).
-
- Zap MULOG in inetd(8) to improve code readability.
-
- Avoid whacking errno in top(1) signal handlers.
-
- Do not include MFS partitions in quot(8) statistics output.
+
- Train makewhatis(8) to handle more special cases.
+
- Avoid double fclose(3) in getcap(3).
+
- Increase delay in RAM probe for hifn(4).
+
- Suffix list fix in make(1).
+
- Various bug fixes in ksh(1).
+
- When using the tail(1) -f flag on stdin, don't reopen a local file named stdin.
+
- Extend kqueue(2) to support kernel events on vnodes.
+
- Bring in BSD authentication support for sudo(8).
+
- Zap MULOG in inetd(8) to improve code readability.
+
- Avoid whacking errno in top(1) signal handlers.
+
- Do not include MFS partitions in quot(8) statistics output.
- Add support for the Acenic Copper and Netgear GA620T Gigabit Ethernet cards.
-
- Prevent a type overflow in recno(3).
+
- Prevent a type overflow in recno(3).
- IMPLEMENTATION FIX: Imac DV reports the VGA device improperly.
A patch is available.
[Applied to stable]
- Import BSD authentication mechanisms from BSDI BSD/OS.
-
- Implement pw_dup(3), a function which copies struct passwd.
-
- Replace getpass(3) with a more flexible readpassphrase(3) interface.
-
- Add strnvis(3), a length-bounded version of the strvis(3) libc function.
+
- Implement pw_dup(3), a function which copies struct passwd.
+
- Replace getpass(3) with a more flexible readpassphrase(3) interface.
+
- Add strnvis(3), a length-bounded version of the strvis(3) libc function.
- Better prompting logic in libskey.
- Resurrect binutils on alpha.
-
- Recognize newer Intel audio devices in auich(4).
-
- Stop amphy(4) from attaching to network devices it doesn't belong to.
-
- Enable support for pciide(4) found in newer Intel chipsets.
+
- Recognize newer Intel audio devices in auich(4).
+
- Stop amphy(4) from attaching to network devices it doesn't belong to.
+
- Enable support for pciide(4) found in newer Intel chipsets.
- Correct URL handling in the install scripts.
-
- Limit the number of SCSI luns in umass(4).
+
- Limit the number of SCSI luns in umass(4).
- Page size fixes to the alpha port.
- Import ssh-ask-pass support for X11.
-
- Fix a signal race in ypserv(8) SIGHUP handling.
-
- Enable uaudio(4) by default in GENERIC/i386.
-
- Reserve all-1s addresses in the IPsec code for future policy discovery features.
+
- Fix a signal race in ypserv(8) SIGHUP handling.
+
- Enable uaudio(4) by default in GENERIC/i386.
+
- Reserve all-1s addresses in the IPsec code for future policy discovery features.
- Resolve HMAC nomenclature issues.
-
- Be sure to clear passwords out of memory after use in ppp(8).
+
- Be sure to clear passwords out of memory after use in ppp(8).
- Support kernel event queues.
-
- Add support for USB scanners through the uscanner(4) driver.
-
- More fixes to qec(4).
+
- Add support for USB scanners through the uscanner(4) driver.
+
- More fixes to qec(4).
- Recognize newer AMD CPUs.
-
- Repair incorrect buffer size logic in telnetd(8).
-
- Add a slew of devices to usbdevs(8).
-
- Do not use perror(3) in sshd(8) after forking a child.
-
- RELIABILITY FIX: The qec+qe ethernet cards should not generate NMIs.
+ - Repair incorrect buffer size logic in telnetd(8).
+
- Add a slew of devices to usbdevs(8).
+
- Do not use perror(3) in sshd(8) after forking a child.
+
- RELIABILITY FIX: The qec+qe ethernet cards should not generate NMIs.
A patch is available.
[Applied to stable]
- - Add ifmedia(4) support to qec(4), among other improvements.
-
- Extra sanity checking in skeyinit(1).
-
- Repair timeout computations in atapiscsi(4).
+
- Add ifmedia(4) support to qec(4), among other improvements.
+
- Extra sanity checking in skeyinit(1).
+
- Repair timeout computations in atapiscsi(4).
- Add initial support for DEC Alpha 21264 systems.
- Bring the alpha port a bit closer to a fully operational console.
- Support Accton EN2242 MiniPCI Ethernet adapters.
- Permit O_RDWR on FIFOs to handle legacy applications that depend on it.
-
- Add scrollback support to wscons(4) through the vga(4) driver.
-
- Color change in wscons(4) vt100 emulation to more closely imitate PCVT.
-
- Repair overriding of pseudo devices in config(8)
+ - Add scrollback support to wscons(4) through the vga(4) driver.
+
- Color change in wscons(4) vt100 emulation to more closely imitate PCVT.
+
- Repair overriding of pseudo devices in config(8)
[Applied to stable]
- - Accept -inet and -inet6 as options for the show command in route(8).
-
- Don't reorder keys in ssh-agent(1) upon key removal.
-
- Avoid parsing options in ssh(1) if there is an RSA key mismatch.
-
- Various cleanups to ftpd(8).
+
- Accept -inet and -inet6 as options for the show command in route(8).
+
- Don't reorder keys in ssh-agent(1) upon key removal.
+
- Avoid parsing options in ssh(1) if there is an RSA key mismatch.
+
- Various cleanups to ftpd(8).
- In many programs, sync usage() output with their respective man page SYNOPSIS.
-
- RELIABILITY FIX: The ThunderLAN driver, tl(4), should not claim all interrupts.
+ - RELIABILITY FIX: The ThunderLAN driver, tl(4), should not claim all interrupts.
A patch is available.
[Applied to stable]
- - In pciide(4), do not map unsafe registers from controllers that require 16-bit I/O space.
-
- Import new pckbc(4), pckbd(4), vga(4), pcdisplay(4), and ega(4) drivers for wscons(4).
-
- In ftpd(8), assert check_login upon receipt of EPSV/LPSV.
-
- Make the aha(4) driver compile without UVM.
+
- In pciide(4), do not map unsafe registers from controllers that require 16-bit I/O space.
+
- Import new pckbc(4), pckbd(4), vga(4), pcdisplay(4), and ega(4) drivers for wscons(4).
+
- In ftpd(8), assert check_login upon receipt of EPSV/LPSV.
+
- Make the aha(4) driver compile without UVM.
- Enforce non-cacheable device space on real 80386 machines.
-
- Add RSA authentication support for SSH2 to OpenSSH.
-
- Allow serial mice to work with moused(8) and XFree86 simultaneously.
-
- Repair an off-by-one error in ssh-agent(1).
-
- Convert some old drivers to the new timeout(9) interface.
+
- Add RSA authentication support for SSH2 to OpenSSH.
+
- Allow serial mice to work with moused(8) and XFree86 simultaneously.
+
- Repair an off-by-one error in ssh-agent(1).
+
- Convert some old drivers to the new timeout(9) interface.
- RELIABILITY FIX: repair AES (rijndael) kernel support.
A patch is available.
[Applied to stable]
- Import PCI support for Alpha EB164 machines.
- Add bus_space_barrier macros for the powerpc.
- Endian fixes to the USB code.
-
- Better command line parsing in encrypt(1).
+
- Better command line parsing in encrypt(1).
- Numbering fixups in pfkeyv2 to match IANA assignments.
-
- Crank maximum mbuf size in ppp(8) in order to handle full-sized HDLC frames.
-
- Improve handling of IPv6 Node Information Query packets for better specification conformance.
-
- Fix a panic induced by assigning lo0 an IPv6 alias.
-
- IMPLEMENTATION FIX: In sshd(8), fix skey support in SSH1 protocol.
+ - Crank maximum mbuf size in ppp(8) in order to handle full-sized HDLC frames.
+
- Improve handling of IPv6 Node Information Query packets for better specification conformance.
+
- Fix a panic induced by assigning lo0 an IPv6 alias.
+
- IMPLEMENTATION FIX: In sshd(8), fix skey support in SSH1 protocol.
A patch is available.
[Applied to stable]
- - Deprecate pltime=0 in ifconfig(8).
-
- Modifications to the ktrace(2) interface to reduce redundancy.
-
- Do not advertise dynamic/cloned routes in route6d(8).
-
- Allow ping6(8) to send ICMP6 packets smaller than 8 bytes.
+ - Deprecate pltime=0 in ifconfig(8).
+
- Modifications to the ktrace(2) interface to reduce redundancy.
+
- Do not advertise dynamic/cloned routes in route6d(8).
+
- Allow ping6(8) to send ICMP6 packets smaller than 8 bytes.
[Applied to stable]
- - Correct free-before-reference bugs in rshd(8) and rlogind(8).
-
- Improve queue handling in gdt(4).
-
- New Adaptec FSA RAID driver called aac(4).
-
- Fix DMA error problems in adw(4).
+ - Correct free-before-reference bugs in rshd(8) and rlogind(8).
+
- Improve queue handling in gdt(4).
+
- New Adaptec FSA RAID driver called aac(4).
+
- Fix DMA error problems in adw(4).
[Applied to stable]
- If MANPS environment variable is set, the system will also build and install postscript manual pages into /usr/share/man/ps[1-9]/.
-
- In date(1), fix an off-by-one error which would happen when changing time over DST.
-
- Permit -Tps in nroff(1).
+
- In date(1), fix an off-by-one error which would happen when changing time over DST.
+
- Permit -Tps in nroff(1).
- Make some pfkeyv2 interfaces conform to RFC 2367 numbering.
- New timeouts in a couple of network drivers.
-
- Prevent nfsd(8) from swapping out.
+
- Prevent nfsd(8) from swapping out.
- Use PHOLD/PRELE in various kernel components.
-
- Buffer overflow fix to telnet(1).
+
- Buffer overflow fix to telnet(1).
- Many man page improvements.
-
- Permit handling more than 6 arguments in a hostname.if(5) file.
-
- kcore handling in kvm(3) for alpha.
-
- Update usb(4) code.
+
- Permit handling more than 6 arguments in a hostname.if(5) file.
+
- kcore handling in kvm(3) for alpha.
+
- Update usb(4) code.
- Update alpha architecture support. A snapshot will come out soon.
-
- In pchb(4), for Intel random devices, do not busy wait for data.
-
- Switch amiga to uvm(9).
+
- In pchb(4), for Intel random devices, do not busy wait for data.
+
- Switch amiga to uvm(9).
- Fix amiga pmap module submap allocations.
- Centralized netisr dispatching.
-
- ppp(8) updated.
-
- In aue(4), fix multicast filter programming.
-
- Repair an uninitialized variable bug in ipsec(4) output.
+ - ppp(8) updated.
+
- In aue(4), fix multicast filter programming.
+
- Repair an uninitialized variable bug in ipsec(4) output.
[Applied to stable]
- - Add pcibios(4) interrupt setup support for AMD750 chipset.
-
- RELIABILITY FIX: In sparc zs(4), when using serial console, the interrupt routine was unable to distinguish it's own interrupts.
+ - Add pcibios(4) interrupt setup support for AMD750 chipset.
+
- RELIABILITY FIX: In sparc zs(4), when using serial console, the interrupt routine was unable to distinguish it's own interrupts.
A patch is available.
[Applied to stable]
- - Generate new hashkey every time a bridge(4) is brought up.
-
- Change bridge(4) code to use lower spl.
-
- Passive FTP support in lynx(1).
-
- In ssh(1), downgrade to SSH1.3 if server is SSH1.4.
-
- In sshd(8), do not disable rhosts(rsa) if server port greater 1024.
-
- In sshd(8) Agent forwarding and -R support for SSH2 protocol.
-
- ipsecadm(8) man page repairs.
+ - Generate new hashkey every time a bridge(4) is brought up.
+
- Change bridge(4) code to use lower spl.
+
- Passive FTP support in lynx(1).
+
- In ssh(1), downgrade to SSH1.3 if server is SSH1.4.
+
- In sshd(8), do not disable rhosts(rsa) if server port greater 1024.
+
- In sshd(8) Agent forwarding and -R support for SSH2 protocol.
+
- ipsecadm(8) man page repairs.
[Applied to stable]
- In pfkeyv2, send the message to registered promiscuous listeners.
[Applied to stable]
- - Some minor bridge(4) fixes.
-
- ld.so(1) support for the pmax.
+
- Some minor bridge(4) fixes.
+
- ld.so(1) support for the pmax.
- On powerpc, print out the size of the L2 cache size on G3 and G4 machines.
- 2.8 release builds are running, but some of us are already working on post-release hacking.