Annotation of www/plus29.html, Revision 1.73
1.28 naddy 1: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
1.1 deraadt 2: <html>
3: <head>
1.71 tj 4: <title>OpenBSD 2.9 Changelog</title>
1.53 schwarze 5: <meta name="description" content="OpenBSD 2.9 changes">
1.1 deraadt 6: <meta name="copyright" content="This document copyright 1996-2001 by OpenBSD.">
1.69 deraadt 7: <meta name="viewport" content="width=device-width, initial-scale=1">
8: <link rel="stylesheet" type="text/css" href="openbsd.css">
1.73 ! tb 9: <link rel="canonical" href="https://www.openbsd.org/plus29.html">
1.1 deraadt 10: </head>
11:
12: <body bgcolor="#ffffff" text="#000000" link="#23238e">
13:
1.69 deraadt 14: <h2>
15: <a href="index.html">
16: <font color="#0000ff"><i>Open</i></font><font color="#000084">BSD</font></a>
1.71 tj 17: <font color="#e00000">2.9 Changelog</font>
18: </h2>
1.28 naddy 19: <hr>
1.1 deraadt 20:
21: <p>
22: This is a partial list of the major machine independent changes
1.45 sobrado 23: (i.e., these are the changes people ask about most often). Machine
1.1 deraadt 24: specific changes have also been made, and are sometimes mentioned
25: in the pages for the specific <a href="plat.html">platforms</a>.
26:
27: <p>
1.28 naddy 28: Note: <font color="#e00000">Problems for which patches exist are marked in red</font>.
1.1 deraadt 29:
30: <p>
1.26 deraadt 31: For changes in other releases, click below:<br>
32: <a href="plus20.html">2.0</a>,
33: <a href="plus21.html">2.1</a>,
34: <a href="plus22.html">2.2</a>,
35: <a href="plus23.html">2.3</a>,
36: <a href="plus24.html">2.4</a>,
37: <a href="plus25.html">2.5</a>,
38: <a href="plus26.html">2.6</a>,
39: <a href="plus27.html">2.7</a>,
40: <a href="plus28.html">2.8</a>,
41: <a href="plus30.html">3.0</a>,
42: <a href="plus31.html">3.1</a>,
43: <a href="plus32.html">3.2</a>,
1.29 deraadt 44: <a href="plus33.html">3.3</a>,
1.31 david 45: <a href="plus34.html">3.4</a>,
1.33 deraadt 46: <a href="plus35.html">3.5</a>,
1.34 miod 47: <a href="plus36.html">3.6</a>,
1.59 deraadt 48: <a href="plus37.html">3.7</a>,
1.44 deraadt 49: <br>
1.37 deraadt 50: <a href="plus38.html">3.8</a>,
1.39 deraadt 51: <a href="plus39.html">3.9</a>,
1.40 deraadt 52: <a href="plus40.html">4.0</a>,
1.41 deraadt 53: <a href="plus41.html">4.1</a>,
1.42 deraadt 54: <a href="plus42.html">4.2</a>,
1.43 deraadt 55: <a href="plus43.html">4.3</a>,
1.44 deraadt 56: <a href="plus44.html">4.4</a>,
1.46 deraadt 57: <a href="plus45.html">4.5</a>,
1.47 deraadt 58: <a href="plus46.html">4.6</a>,
1.48 deraadt 59: <a href="plus47.html">4.7</a>,
1.49 deraadt 60: <a href="plus48.html">4.8</a>,
1.51 deraadt 61: <a href="plus49.html">4.9</a>,
1.52 nick 62: <a href="plus50.html">5.0</a>,
1.53 schwarze 63: <a href="plus51.html">5.1</a>,
1.54 nick 64: <a href="plus52.html">5.2</a>,
1.55 deraadt 65: <a href="plus53.html">5.3</a>,
1.56 deraadt 66: <a href="plus54.html">5.4</a>,
1.57 deraadt 67: <br>
1.59 deraadt 68: <a href="plus55.html">5.5</a>,
1.61 brett 69: <a href="plus56.html">5.6</a>,
1.62 deraadt 70: <a href="plus57.html">5.7</a>,
1.65 deraadt 71: <a href="plus58.html">5.8</a>,
1.66 deraadt 72: <a href="plus59.html">5.9</a>,
1.72 deraadt 73: <a href="plus60.html">6.0</a>,
1.26 deraadt 74: <a href="plus.html">current</a>.
1.1 deraadt 75: <br>
76:
1.60 deraadt 77: <p>
78: <h3><font color="#0000e0">Changes made between OpenBSD 2.8 and 2.9</font></h3>
79: <p>
1.1 deraadt 80:
81: <ul>
1.68 sthen 82: <li><font color="#e00000"><strong>SECURITY FIX: Avoid DoS attack in <a href="http://man.openbsd.org/?query=ftpd&sektion=8">ftpd</a> using <a href="http://man.openbsd.org/?query=glob&sektion=3">glob</a> patch.</strong></font><br>
1.10 pvalchev 83: <a href="errata28.html#glob_limit">A patch is available</a>.<br>
1.28 naddy 84: <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
1.1 deraadt 85: <li>...
1.68 sthen 86: <li><font color="#e00000"><strong>SECURITY FIX: Fix <a href="http://man.openbsd.org/?query=ipf&sektion=8&manpath=OpenBSD+2.7">ipf(8)</a> fragment caching bug.</strong></font><br>
1.10 pvalchev 87: <a href="errata28.html#ipf_frag">A patch is available</a>.<br>
1.28 naddy 88: <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
1.1 deraadt 89: <li>...
1.68 sthen 90: <li><font color="#e00000"><strong>SECURITY FIX: Fix buffer overflows contained in <a href="http://man.openbsd.org/?query=glob&sektion=3">glob(3)</a> function.</strong></font><br>
1.10 pvalchev 91: <a href="errata28.html#glob">A patch is available</a>.<br>
1.28 naddy 92: <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
1.1 deraadt 93: <li>...
1.68 sthen 94: <li>Check for short packets and bad types sent to <a href="http://man.openbsd.org/?query=timed&sektion=8">timed(8)</a>.<br>
1.28 naddy 95: <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
1.1 deraadt 96: <li>...
97: <li><a href="http://www.openssh.com/">OpenSSH</a> 2.5.2 released.<br>
1.28 naddy 98: <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
1.1 deraadt 99: <li>...
1.28 naddy 100: <li><font color="#e00000"><strong>SECURITY FIX: Be careful with file permissions in readline library</strong></font><br>
1.10 pvalchev 101: <a href="errata28.html#readline">A patch is available</a>.<br>
1.28 naddy 102: <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
1.1 deraadt 103: <li>...
104: <li>Make buffer size 8k on NE1000, and 16k otherwise for
1.68 sthen 105: <a href="http://man.openbsd.org/?query=ne&sektion=4">ne</a>.<br>
1.28 naddy 106: <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
1.1 deraadt 107: <li>...
1.68 sthen 108: <li>Move bogus packet length test in udp packets to avoid being stuck at <a href="http://man.openbsd.org/?query=splsoftnet&sektion=9">splsoftnet</a>.<br>
1.28 naddy 109: <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
1.1 deraadt 110: <li>...
1.28 naddy 111: <li><font color="#e00000"><strong>SECURITY FIX: on i386, check arguments to USER_LDT (not enabled by default) mappings.</strong></font><br>
1.10 pvalchev 112: <a href="errata28.html#userldt">A patch is available</a>.<br>
1.28 naddy 113: <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
1.1 deraadt 114: <li>...
1.28 naddy 115: <li><font color="#e00000"><strong>IMPLEMENTATION FIX: fix port number computation in libwrap client side ident implementation.</strong></font><br>
1.10 pvalchev 116: <a href="errata28.html#libwrap">A patch is available</a>.<br>
1.28 naddy 117: <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
1.1 deraadt 118: <li>...
1.4 millert 119: <li>Fix several copyin/copyout bugs in sys/compat.
120: <li>Provide a random start for tcp timestamps.
121: <li>Support sharing disks between MacOS and the PowerPC port.
1.68 sthen 122: <li>Add support for the SaramNcom NS-1100M in the <a href="http://man.openbsd.org/?query=wi&sektion=4">wi(4)</a> driver.
123: <li>Fix support for the D-Link DE660 pcmcia card in <a href="http://man.openbsd.org/?query=ne&sektion=4">ne(4)</a>
124: <li>In <a href="http://man.openbsd.org/?query=sis&sektion=4">sis(4)</a> add support for reading the MAC address from the APC CMOS RAM in SiS630E-based chipsets.
125: <li>In <a href="http://man.openbsd.org/?query=ne&sektion=4">ne(4)</a>, changes in media type initializion on DP8390-compatibles.
126: <li>Implement read/write access to an IEEE 802.3u <a href="http://man.openbsd.org/?query=mii&sektion=4">mii(4)</a> bus using the bit-bang method.
1.4 millert 127: <li>Add support for DOZE mode on powerpc processors that support it.
1.68 sthen 128: <li>Add support for the Symbios 53c1010 in the <a href="http://man.openbsd.org/?query=siop&sektion=4">siop(4)</a> driver.
129: <li>Implement <a href="http://man.openbsd.org/?query=mincore&sektion=2">mincore(2)</a>, <a href="http://man.openbsd.org/?query=mlockall&sektion=2">mlockall(2)</a> and <a href="http://man.openbsd.org/?query=munlockall&sektion=2">munlockall(2)</a>.
130: <li>Added support for <a href="http://man.openbsd.org/?query=ami&sektion=4">ami(4)</a> MegaRAID Controllers.
131: <li>Fixed several occurrences of exit(-#); <a href="http://man.openbsd.org/?query=exit&sektion=3">exit(3)</a> only passes the lower 8 bits of status on to the parent.
1.12 pvalchev 132: <li>Fixed several occurrences of PATH_MAX+1 that should be PATH_MAX.
1.4 millert 133: <li>Fix interrupt handler registration on the mvme88k port, remove 68k-isms and add UKC support.
134: <li>Add some non-US encodings to the USB keyboard driver.
1.68 sthen 135: <li>Disable bogus file check in <a href="http://man.openbsd.org/?query=cvs&sektion=1">cvs(1)</a>.<br>
1.28 naddy 136: <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
1.68 sthen 137: <li>Enable tag queuing and fix some wide/sync negotiation problems in the <a href="http://man.openbsd.org/?query=siop&sektion=4">siop(4)</a> driver.
138: <li>Add support for <a href="http://man.openbsd.org/?query=isapnp&sektion=4">isapnp(4)</a> i82365-based <a href="http://man.openbsd.org/?query=pcmcia&sektion=4">pcmcia(4)</a> controllers.
1.4 millert 139: <li>Many man page fixes.
1.68 sthen 140: <li>Fix checksum calculations in <a href="http://man.openbsd.org/?query=bridge&sektion=4">bridge(4)</a> setups.
141: <li>Avoid reading some AC97 registers in <a href="http://man.openbsd.org/?query=neo&sektion=4">neo(4)</a> driver as needed by some devices.
1.4 millert 142: <li>Avoid a deadlock condition in the syncer.
1.68 sthen 143: <li><a href="http://man.openbsd.org/?query=wscons&sektion=4">wscons(4)</a> support for powerpc adb keyboard.
144: <li>Plug many memory leaks in the libc <a href="http://man.openbsd.org/?query=rpc&sektion=3">rpc(3)</a> code.
1.4 millert 145: <li>Drop packets with 127.0.0.0/8 in header field, if the packet is from outside. RFC1122 dictates that 127.0.0.8 must not appear on the wire.
1.68 sthen 146: <li>In <a href="http://man.openbsd.org/?query=sudo&sektion=8">sudo(8)</a>, fix negation of path-type Defaults entries in a boolean context in <a href="http://man.openbsd.org/?query=sudoers&sektion=5">sudoers(5)</a>.
1.4 millert 147: <li>Add open hashing functions to libc.
1.68 sthen 148: <li><a href="http://man.openbsd.org/?query=fsck&sektion=8">fsck(8)</a> changes for soft updates support.
149: <li>Extend <a href="http://man.openbsd.org/?query=kqueue&sektion=2">kqueue(2)</a> down to the device layer for better device support.
1.4 millert 150: <li>ncurses-5.2-20010224
1.68 sthen 151: <li>In the i386 <a href="http://man.openbsd.org/?query=bios&sektion=4&arch=i386">bios(4)</a> driver, add a check for ROMs mapped into memory and setup an extent for each one found. This fixes a problem with ISA cards using iomem space already claimed by a ROM.
152: <li>Update to <a href="http://man.openbsd.org/?query=sendmail&sektion=8">sendmail(8)</a> 8.11.3 which fixes potential data loss if a machine crashes.
1.4 millert 153: <li>A number of filesystem races and locking problems have been fixed.
1.68 sthen 154: <li>In <a href="http://man.openbsd.org/?query=ne&sektion=4">ne(4)</a>, add support for a D-Link DFE-650 model with a different vendor ID.
1.4 millert 155: <li>Improved stability with soft updates.
1.68 sthen 156: <li>WEP support for the <a href="http://man.openbsd.org/?query=an&sektion=4">an(4)</a> Aironet driver.
157: <li>Default SSID in the <a href="http://man.openbsd.org/?query=an&sektion=4">an(4)</a> Aironet driver; now it will connect to any SSID.
1.4 millert 158: <li>Better detection of the VAX VS4000/VLC and MV3100/{3,4}0.
159: <li>Improved S3 Savage X11 driver for XFree86 3.3.6.
1.68 sthen 160: <li>Add <a href="http://man.openbsd.org/?query=mii&sektion=4">mii(4)</a> support to the <a href="http://man.openbsd.org/?query=vr&sektion=4">vr(4)</a> Via Rhine network driver.
161: <li>Add support for the Dlink 530TX+ to the <a href="http://man.openbsd.org/?query=rl&sektion=4">rl(4)</a> RealTek 8129/8139 network driver.
162: <li><font color="#e00000"><strong>SECURITY FIX: for <a href="http://man.openbsd.org/?query=ipsec&sektion=4">ipsec(4)</a>, handle AH packets with IP options more strictly.</strong></font><br>
1.10 pvalchev 163: <a href="errata28.html#ipsec_ah">A patch is available</a>.<br>
1.28 naddy 164: <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
1.2 aaron 165: <li>In the powerpc port, add edge/level sense detection capability to the interrupt controller.
1.68 sthen 166: <li>Add <a href="http://man.openbsd.org/?query=uftdi&sektion=4">uftdi(4)</a> driver for the FTDI USB->Serial converter device.
1.2 aaron 167: <li>Tone down the verbosity levels in many SCSI drivers.
1.3 aaron 168: <li><a href="http://www.openssh.com/">OpenSSH</a> 2.5.1 released.<br>
1.28 naddy 169: <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
1.68 sthen 170: <li>Fix DMA memory allocations in <a href="http://man.openbsd.org/?query=twe&sektion=4">twe(4)</a>.
171: <li><font color="#e00000"><strong>SECURITY FIX: update to <a href="http://man.openbsd.org/?query=sudo&sektion=8">sudo</a>-1.6.3p6 which fixes a non-exploitable buffer overflow on very long argv components.</strong></font><br>
1.10 pvalchev 172: <a href="errata28.html#sudo">A patch is available</a>.<br>
1.28 naddy 173: <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
1.68 sthen 174: <li>Correctly detect Daylight Saving Time changes in <a href="http://man.openbsd.org/?query=cron&sektion=8">cron(8)</a>.
175: <li>Add bash-like double-tab completion support to <a href="http://man.openbsd.org/?query=ksh&sektion=1">ksh(1)</a>.
1.2 aaron 176: <li>Avoid losing RTC after suspend/resume on some laptops.
1.68 sthen 177: <li>Repair an integer conversion bug in <a href="http://man.openbsd.org/?query=pms&sektion=4">pms(4)</a> which fixes the mouse resolution setting in X.
178: <li>Fix non-TCP protocol mappings in <a href="http://man.openbsd.org/?query=ipnat&sektion=4&manpath=OpenBSD+2.7">ipnat(4)</a>.
179: <li>In <a href="http://man.openbsd.org/?query=isakmpd&sektion=8">isakmpd(8)</a>, encode X509 expirations into KeyNote credientials/policies.
180: <li>In <a href="http://man.openbsd.org/?query=pppoe&sektion=8">pppoe(8)</a>, try every BPF device, not just even-numbered ones.
181: <li>Support -C flag in <a href="http://man.openbsd.org/?query=nm&sektion=1">nm(1)</a>.
182: <li>Update ISC <a href="http://man.openbsd.org/?query=cron&sektion=8">cron(8)</a> to 4.0b1, maintaining our local changes, including signal handling fixes.
183: <li>Rename old mvme68k and mvme88k <a href="http://man.openbsd.org/?query=siop&sektion=4">siop(4)</a> driver to ssh(4) to avoid naming conflicts.
184: <li>Fix an uninitialized variable in <a href="http://man.openbsd.org/?query=wsmouse&sektion=4">wsmouse(4)</a>.
1.2 aaron 185: <li>Some games fixes.
1.68 sthen 186: <li>Nuke <a href="http://man.openbsd.org/?query=nlist&sektion=3">nlist(3)</a> and kvm(3) usage in <a href="http://man.openbsd.org/?query=top&sektion=1">top(1)</a>.
187: <li>More careful buffer handling in <a href="http://man.openbsd.org/?query=rusers&sektion=1">rusers(1)</a>.
188: <li>Add MII support to the <a href="http://man.openbsd.org/?query=vr&sektion=4">vr(4)</a> driver.
189: <li>Several <a href="http://man.openbsd.org/?query=ip6&sektion=4">IPv6(4)</a> improvements from KAME.
1.3 aaron 190: <li><a href="http://www.openssh.com/">OpenSSH</a> 2.5.0 released.<br>
1.28 naddy 191: <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
1.2 aaron 192: <li>Sync many parts of the alpha port with NetBSD.
1.68 sthen 193: <li>Fix 64-bit issues with the <a href="http://man.openbsd.org/?query=ip6&sektion=4">IPv6(4)</a> multicast API.
1.2 aaron 194: <li>Rewrite libwrap RFC931 support to avoid stdio issues with sockets.
195: <li>Many man page fixes.
1.68 sthen 196: <li>Pull in latest <a href="http://man.openbsd.org/?query=faithd&sektion=8">faithd(8)</a> daemon from KAME.
197: <li>In <a href="http://man.openbsd.org/?query=tcpdump&sektion=8">tcpdump(8)</a>, deobfuscate some IP protocols and improve <a href="http://man.openbsd.org/?query=ipsec&sektion=4">IPsec(4)</a> tunnelmode printing.
198: <li>Set the offset for SCSI chain B properly in the VAX <a href="http://man.openbsd.org/?query=ncr&sektion=4">ncr(4)</a> driver.
1.8 angelos 199: <li>Import XFree86 4.0.3.
1.68 sthen 200: <li>Long username fixes to <a href="http://man.openbsd.org/?query=lpd&sektion=8">lpd(8)</a> and <a href="http://man.openbsd.org/?query=lprm&sektion=1">lprm(1)</a>.
201: <li>Convert the powerpc port to <a href="http://man.openbsd.org/?query=uvm&sektion=9">UVM(9)</a>.
202: <li>Import <a href="http://man.openbsd.org/?query=siop&sektion=4">siop(4)</a>, a replacement for the <a href="http://man.openbsd.org/?query=ncr&sektion=4">ncr(4)</a> SCSI driver.
1.1 deraadt 203: <li>Support more NE2000 PCMCIA devices.
204: <li>Avoid passing shared mbufs around the kernel to prevent accidental overwrites.
1.68 sthen 205: <li>Add <a href="http://man.openbsd.org/?query=pcscp&sektion=4">pcscp(4)</a>, a driver which supports AMD Am53c974 SCSI controllers.
206: <li>Modify <a href="http://man.openbsd.org/?query=sliplogin&sektion=8">sliplogin(8)</a> to handle long usernames.
207: <li>Allow X to work without <a href="http://man.openbsd.org/?query=pcvt&sektion=4&manpath=OpenBSD+2.7&arch=i386">pcvt(4)</a>.
208: <li>Fix an authorizer removal problem in <a href="http://man.openbsd.org/?query=keynote&sektion=3">keynote(3)</a>.
1.1 deraadt 209: <li>Deactivate function pointers upon interface detach to avoid crashes.
210: <li>Deal with the real time clock losing interrupts on i386.
211: <li>Bump maxusers to 32 in the alpha port.
1.68 sthen 212: <li>Avoid a theoretical buffer overflow in <a href="http://man.openbsd.org/?query=getpwent&sektion=3">getpwent(3)</a>.
213: <li>Fix an uninitialized variable in <a href="http://man.openbsd.org/?query=bsd.port.mk&sektion=5">bsd.port.mk(5)</a>.
214: <li>Disregard ospeed in <a href="http://man.openbsd.org/?query=tetris&sektion=6">tetris(6)</a>.
215: <li>Modify <a href="http://man.openbsd.org/?query=wall&sektion=1">wall(1)</a> to handle long usernames.
216: <li>Many <a href="http://man.openbsd.org/?query=isp&sektion=4">isp(4)</a> SCSI driver improvements and updates.
217: <li>Fix goto-line 0 case in <a href="http://man.openbsd.org/?query=mg&sektion=1">mg(1)</a>.
218: <li>Fix PermitRootLogin option in <a href="http://man.openbsd.org/?query=ssh&sektion=1">ssh(1)</a>.
219: <li>In <a href="http://man.openbsd.org/?query=brconfig&sektion=8">brconfig(8)</a>, skip empty lines in the rulefile.
1.1 deraadt 220: <li>Fix HTTP installs, which were broken for quite awhile.
221: <li>Repair statclock on mvme88k.
222: <li>Ensure softupdates is enabled before performing softupdates-specific operations.
1.68 sthen 223: <li>Define a <a href="http://man.openbsd.org/?query=sendmail&sektion=8">sendmail(8)</a> variable to workaround broken name servers.
224: <li>Allow up to 12 virtual terminals in <a href="http://man.openbsd.org/?query=wscons&sektion=4">wscons(4)</a>.
1.1 deraadt 225: <li>Correct VAX signal handling.
226: <li>Cleanup MAC support in SSH2.
227: <li>Support attachment of Cheetah devices to vsbus as well as ibus in the VAX port.
1.68 sthen 228: <li>Disable a bogus file check in <a href="http://man.openbsd.org/?query=cvs&sektion=1">cvs(1)</a> to ease the pain of having replicated repositories.
229: <li>Ensure $RSH is set in the <a href="http://man.openbsd.org/?query=rcmd&sektion=3">rcmd(3)</a> functions.
230: <li>String table fixes to <a href="http://man.openbsd.org/?query=ddb&sektion=4">ddb(4)</a> and <a href="http://man.openbsd.org/?query=modload&sektion=8">modload(8)</a>.
231: <li>Update <a href="http://man.openbsd.org/?query=wscons&sektion=4">wscons(4)</a> code.
232: <li>Pull in fixes for potential buffer overflows in <a href="http://man.openbsd.org/?query=xdm&sektion=1">xdm(1)</a>.
233: <li>Compatibility fixes to <a href="http://man.openbsd.org/?query=tar&sektion=1">tar(1)</a>.
1.1 deraadt 234: <li>Many <a href="http://www.openssh.com/">OpenSSH</a> cleanups and improvements.
1.68 sthen 235: <li>New ELF symbol handling in <a href="http://man.openbsd.org/?query=ddb&sektion=4">ddb(4)</a>.
236: <li>Enable <a href="http://man.openbsd.org/?query=wscons&sektion=4">wscons</a> support in XFree86.
237: <li>Modify PCI power state for <a href="http://man.openbsd.org/?query=clct&sektion=4">clct(4)</a> devices so they work after warm reboots.
238: <li>Repair BPF support in <a href="http://man.openbsd.org/?query=gre&sektion=4">gre(4)</a>.
239: <li>Fix an uninitialized variable in <a href="http://man.openbsd.org/?query=wsdisplay&sektion=4">wsdisplay(4)</a>.
240: <li>Fix file attribute passing in <a href="http://man.openbsd.org/?query=sftp-server&sektion=8">sftp-server(8)</a>.
241: <li>Correct a memory usage error in <a href="http://man.openbsd.org/?query=ssh-keyscan&sektion=1">ssh-keyscan(1)</a>.
1.1 deraadt 242: <li>Add support to the powerpc for loading the bootloader and kernel from an HFS filesystem.
1.68 sthen 243: <li>Better failure handling in <a href="http://man.openbsd.org/?query=vr&sektion=4">vr(4)</a>.
244: <li>Add support to <a href="http://man.openbsd.org/?query=dc&sektion=4">dc(4)</a> for parsing media blocks from Intel 21143 SROMs.
1.1 deraadt 245: <li>Strengthen SSH1 to make traffic analysis more difficult.
1.68 sthen 246: <li>Updates to <a href="http://man.openbsd.org/?query=services&sektion=5">/etc/services</a> from IANA.
247: <li>In <a href="http://man.openbsd.org/?query=ssh&sektion=1">ssh(1)</a>, enforce non-batch_mode if StrictHostKeyChecking is set to "ask".
1.1 deraadt 248: <li>Backport a buffer overflow fix from XFree86 4.0.2 to in-tree XFree 3.3.6.
249: <li>Stricter prototypes, type fixes, and other cleanups in <a href="http://www.openssh.com/">OpenSSH</a>.
1.68 sthen 250: <li>Switch <a href="http://man.openbsd.org/?query=ip6&sektion=4">IPv6</a> raw socket code from NRL to KAME.
1.1 deraadt 251: <li>Stricter checking in SSH2.
1.3 aaron 252: <li><a href="http://www.openssh.com/">OpenSSH</a> 2.3.2 released.<br>
1.28 naddy 253: <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
1.68 sthen 254: <li>Implement an upper limit for <a href="http://man.openbsd.org/?query=icmp6&sektion=4">icmp6(4)</a> redirects.
255: <li>Fix <a href="http://man.openbsd.org/?query=rwhod&sektion=8">rwhod(8)</a> to work, and make debug code a flag option.
256: <li>Mark our tree such that we use <a href="http://man.openbsd.org/?query=wscons&sektion=4">wscons(4)</a> as if it is vt220, instead of vt100.
257: <li>In <a href="http://man.openbsd.org/?query=wscons&sektion=4">wscons(4)</a>, when scrolled back, if a new key is pressed, reset us to our previous location, as <a href="http://man.openbsd.org/?query=pcvt&sektion=4&manpath=OpenBSD+2.7&arch=i386">pcvt(4)</a> used to do.
258: <li>Permit <a href="http://man.openbsd.org/?query=sftp&sektion=1">sftp(1)</a> over SSH1 protocol.
259: <li>In <a href="http://man.openbsd.org/?query=sftp&sektion=1">sftp(1)</a>, do not forward agent or X11 traffic.
260: <li>In <a href="http://man.openbsd.org/?query=tar&sektion=1">tar(1)</a>, fix -T option and add support for -C option
261: <li>Honor TMPDIR variable in <a href="http://man.openbsd.org/?query=tar&sektion=1">tar(1)</a>, <a href="http://man.openbsd.org/?query=cpio&sektion=1">cpio(1)</a>, and <a href="http://man.openbsd.org/?query=pax&sektion=1">pax(1)</a>.
262: <li><a href="http://man.openbsd.org/?query=perl&sektion=1">perl(1)</a> patch CHANGE6214.
263: <li>New <a href="http://man.openbsd.org/?query=route6d&sektion=8">route6d(8)</a>.
264: <li>Numerous more changes to <a href="http://man.openbsd.org/?query=sftp-server&sektion=8">sftp-server(8)</a> and <a href="http://man.openbsd.org/?query=sftp&sektion=1">sftp(1)</a>.
265: <li>Changes to <a href="http://man.openbsd.org/?query=accept&sektion=2">accept(2)</a> to permit return of ECONNABORTED.
266: <li>Quieten <a href="http://man.openbsd.org/?query=ip6&sektion=4">IPv6</a> DN message reporting by default.
267: <li>Improve xmalloc() and friends in <a href="http://man.openbsd.org/?query=ssh&sektion=1">ssh(1)</a> code..
1.1 deraadt 268: <li>Remove dead architecture support from the tree.
1.68 sthen 269: <li>Remove support for #! from <a href="http://man.openbsd.org/?query=syslogd&sektion=8">syslogd(8)</a>.
270: <li><a href="http://man.openbsd.org/?query=cac&sektion=4">cac(4)</a> driver to support Compaq Smart ARRAY RAID controllers.
271: <li>Ignore blank lines in <a href="http://man.openbsd.org/?query=hostname.if&sektion=5">hostname.if(5)</a> files.
272: <li>In <a href="http://man.openbsd.org/?query=ssh&sektion=1">ssh(1)</a>, add -1 option to force protocol 1.
273: <li>Enable <a href="http://man.openbsd.org/?query=sftp-server&sektion=8">sftp-server(8)</a> by default.
274: <li>Numerous bug fixes to <a href="http://man.openbsd.org/?query=sftp-server&sektion=8">sftp-server(8)</a> and <a href="http://man.openbsd.org/?query=sftp&sektion=1">sftp(1)</a>.
1.1 deraadt 275: <li>Make scsi work on the vaxstation 4000/90.
1.68 sthen 276: <li>Same for <a href="http://man.openbsd.org/?query=tun&sektion=4">tun(4)</a>, <a href="http://man.openbsd.org/?query=gif&sektion=4">gif(4)</a>, and others..
277: <li>Change <a href="http://man.openbsd.org/?query=lo&sektion=4">lo(4)</a> initialization code so that boot -c pseudo-device editing code can affect it in the expected fashion.
278: <li>If kernel has <a href="http://man.openbsd.org/?query=ddb&sektion=4">ddb(4)</a> support, add a ddb sub-command inside boot -c.
1.1 deraadt 279: <li>Teach the bridge to deal with ARP alignment in the presence of numerous previous layers...
1.68 sthen 280: <li>EtherIP support in <a href="http://man.openbsd.org/?query=tcpdump&sektion=8">tcpdump(8)</a>.
281: <li>Fix a bug introduced a few weeks ago in <a href="http://man.openbsd.org/?query=yppush&sektion=8">yppush(8)</a>.
1.1 deraadt 282: <li>A bit of a trawl through the source tree to please the alpha, since various problems occur in the absence of perfect weak symbols.
283: <li>libc_r works on the alpha now.
1.68 sthen 284: <li>Many new fixes to <a href="http://man.openbsd.org/?query=sort&sektion=1">sort(1)</a>.
1.1 deraadt 285: <li>Teach config -e and boot -c about pseudo-devices.
1.68 sthen 286: <li>Fix <a href="http://man.openbsd.org/?query=perl&sektion=1">perl(1)</a> h2ph scripts.
287: <li>More <a href="http://man.openbsd.org/?query=bridge&sektion=4">bridge(4)</a> fixes for unicast learning.
288: <li>Add <a href="http://man.openbsd.org/?query=sftp&sektion=1">sftp(1)</a> client.
289: <li>Fix an off-by-{1,2,4} error in i386_space_copy(). <a href="http://man.openbsd.org/?query=wscons&sektion=4">wscons(4)</a> now works perfectly.
290: <li>More fixes to <a href="http://man.openbsd.org/?query=rtadvd&sektion=8">rtadvd(8)</a>.
291: <li>Fix bugs in <a href="http://man.openbsd.org/?query=atc&sektion=6">atc(6)</a>, <a href="http://man.openbsd.org/?query=snake&sektion=6">snake(6)</a>, <a href="http://man.openbsd.org/?query=battlestar&sektion=6">battlestar(6)</a>, <a href="http://man.openbsd.org/?query=phantasia&sektion=6">phantasia(6)</a>, and <a href="http://man.openbsd.org/?query=adventure&sektion=6">adventure(6)</a>.
1.1 deraadt 292: <li>Enable scrollback from USB keyboards.
1.68 sthen 293: <li>Numerous improvements in <a href="http://man.openbsd.org/?query=ppp&sektion=8">ppp(8)</a>.
294: <li>At ELF <a href="http://man.openbsd.org/?query=execve&sektion=2">execve(2)</a> time, check for the OpenBSD note first, so that native binaries run best.
1.1 deraadt 295: <li>Attempt to share crtbegin/crtend in ELF csu, including an OS note.
1.68 sthen 296: <li>Change powerpc <a href="http://man.openbsd.org/?query=ld.so&sektion=1">ld.so(1)</a> so all architectures use DT_INIT for ctors/init.
1.1 deraadt 297: <li>Fix overlapping bus space copy operations on i386.
298: <li>Move EtherIP to version 3 (2 byte padded header).
1.68 sthen 299: <li>Art does battle with <a href="http://man.openbsd.org/?query=ksyms&sektion=4">ksyms(4)</a>, gets wounded, but eventually wins.
300: <li>In <a href="http://man.openbsd.org/?query=sshd&sektion=8">sshd(8)</a>, <a href="http://man.openbsd.org/?query=otp-rmd160&sektion=1">S/Key</a> is now called ChallengeResponse.
1.1 deraadt 301: <li>Make ReverseMappingCheck optional in sshd_config.
302: <li>Mickey the madman goes on a new timeout crawl through pci and isa drivers.
1.68 sthen 303: <li>Fix <a href="http://man.openbsd.org/?query=nlist&sektion=3">nlist(3)</a> emulation for cases where the ELF header does not exist; permits <a href="http://man.openbsd.org/?query=ksyms&sektion=4">/dev/ksyms</a> to work on ELF machines.
304: <li>Emulate some new freebsd <a href="http://man.openbsd.org/?query=signal&sektion=2">signal(2)</a> related things in <a href="http://man.openbsd.org/?query=compat_freebsd&sektion=8">compat_freebsd(8)</a>.
305: <li>In <a href="http://man.openbsd.org/?query=ip6&sektion=4">IPv6</a>, avoid panic when packet to nonexistent link-local address is issued.
306: <li><a href="http://man.openbsd.org/?query=xl&sektion=4">xl(4)</a> no longer needs to whine about tx underruns.
307: <li>Fix ELF support for <a href="http://man.openbsd.org/?query=compat_freebsd&sektion=8">compat_freebsd(8)</a>.
308: <li>Catch the alpha up to <a href="http://man.openbsd.org/?query=wscons&sektion=4">wscons(4)</a> changes.
309: <li>Fix <a href="http://man.openbsd.org/?query=wscons&sektion=4">wscons(4)</a> <a href="http://man.openbsd.org/?query=wsmux&sektion=4">wsmux(4)</a> attachment.
1.1 deraadt 310: <li>Support mvme188 card in mvme88k port.
1.68 sthen 311: <li>If a <a href="http://man.openbsd.org/?query=pccbb&sektion=4">pccbb(4)</a> bridge does not have the right voltages, assume it is dead. Permits single connector adapters to work.
312: <li>Fix some bugs in the <a href="http://man.openbsd.org/?query=bridge&sektion=4">bridge(4)</a>, especially regarding <a href="http://man.openbsd.org/?query=gif&sektion=4">gif(4)</a>.
313: <li><font color="#e00000"><strong>IMPLEMENTATION FIX: fix memory allocation in the PCI LANCE ethernet driver, <a href="http://man.openbsd.org/?query=le&sektion=4&arch=i386">le(4)</a>.</strong></font><br>
1.10 pvalchev 314: <a href="errata28.html#lepci">A patch is available</a>.<br>
1.28 naddy 315: <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
1.68 sthen 316: <li>In <a href="http://man.openbsd.org/?query=config&sektion=8">config(8)</a> -e and -u, do not write out a new kernel if nothing changed.
317: <li>Numerous fat <a href="http://man.openbsd.org/?query=utmp&sektion=5">utmp(5)</a> changes to utilities.
318: <li>Move <a href="http://man.openbsd.org/?query=utmp&sektion=5">utmp(5)</a> to large format.
319: <li>Fix some incorrect return values for <a href="http://man.openbsd.org/?query=mmap&sektion=2">mmap(2)</a> functions.<br>
1.28 naddy 320: <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
1.68 sthen 321: <li>Make <a href="http://man.openbsd.org/?query=top&sektion=1">top(1)</a> not setgid.
1.1 deraadt 322: <li>Update X11 to support the new i386 changes.
1.68 sthen 323: <li>Configure <a href="http://man.openbsd.org/?query=wscons&sektion=4">wscons(4)</a> defaults to be what our users expect.
324: <li><a href="http://man.openbsd.org/?query=moused&sektion=8&arch=i386">moused(8)</a> is dead for now.
325: <li>Enable <a href="http://man.openbsd.org/?query=uhci&sektion=4">uhci(4)</a> and <a href="http://man.openbsd.org/?query=ohci&sektion=4">ohci(4)</a> devices by default in GENERIC.
326: <li>Range-check invalid .max fields in <a href="http://man.openbsd.org/?query=inetd&sektion=8">inetd(8)</a>.
327: <li>Various post-merge <a href="http://man.openbsd.org/?query=ipf&sektion=8&manpath=OpenBSD+2.7">ipf(8)</a> fixes. Some previous fixes got removed and had to be put back in.
1.1 deraadt 328: <li>In ATAPI code, ignore PIOMODE errors.
329: <li>On many architectures, change console name to ttyC? instead of ttyE?.
1.68 sthen 330: <li>Add -U option to ELF <a href="http://man.openbsd.org/?query=ldconfig&sektion=8">ldconfig(8)</a>.
331: <li>Move i386 to <a href="http://man.openbsd.org/?query=wscons&sektion=4">wscons(4)</a>.
1.1 deraadt 332: <li>Re-org the alpha boot floppies.
333: <li>More improvements against the Bleichenbacher pkcs#1 attack.
1.68 sthen 334: <li>Fix more select overflow issues in <a href="http://man.openbsd.org/?query=ssh&sektion=1">ssh(1)</a>.
1.1 deraadt 335: <li>gcc 2.95.3, test 2.
1.68 sthen 336: <li><a href="http://man.openbsd.org/?query=ises&sektion=4">ises(4)</a>, start of a driver for the Pijnenburg PCC-ISES crypto chip. Does random entropy insertion.
1.1 deraadt 337: <li>Permit many compat system calls to match to the same native call (was not permitted before).
338: <li>A bunch of people are doing a kernel trawl to update drivers to new timeouts.
339: <li>Support boot -c on the sparc.
340: <li>Fix an early timeout bug in wdc/ata support, which caused problems with atapi tape drives.
341: <li>Niklas runs through the tree doing commits in an attempt to keep up with Todd's much higher commit count.
1.68 sthen 342: <li>Receive random numbers from <a href="http://man.openbsd.org/?query=ubsec&sektion=4">ubsec(4)</a> cards.
1.1 deraadt 343: <li>Make wdc mode printing more portable, so that the powerpc can use it too.
1.68 sthen 344: <li><a href="http://man.openbsd.org/?query=adb&sektion=4">adb(4)</a> drivers in powerpc port.
345: <li>New <a href="http://man.openbsd.org/?query=upl&sektion=4">upl(4)</a> driver for Prolific PL2301/PL2302 USB host-to-host driver. This acts like a network device.
346: <li>Remove -Q flag from <a href="http://man.openbsd.org/?query=sshd&sektion=8">sshd(8)</a>.
1.1 deraadt 347: <li>Change audio-driver interface so drivers can supply a minimum delta for mixer value changes.
348: <li><a
1.68 sthen 349: href="http://man.openbsd.org/?query=usb&sektion=4">USB</a> sync.
350: <li><font color="#e00000"><strong>SECURITY FIX: fix some buffer overflows in <a href="http://man.openbsd.org/?query=named&sektion=8">named(8)</a>.</strong></font><br>
1.10 pvalchev 351: <a href="errata28.html#named">A patch is available</a>.<br>
1.28 naddy 352: <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
1.1 deraadt 353: <li>Support Cheetah vaxes.
1.68 sthen 354: <li>Improve <a href="http://man.openbsd.org/?query=MAKEDEV&sektion=8">MAKEDEV(8)</a> manual pages on many architectures.
355: <li>Cause <a href="http://man.openbsd.org/?query=pcibios&sektion=4">pcibios(4)</a> to route interrupts via the pci router at the time interrupts are established for each driver, not before.
356: <li>Optimize pcidevs, <a href="http://man.openbsd.org/?query=usbdevs&sektion=8">usbdevs(8)</a>, and other tables in the kernel.
357: <li>Both <a href="http://man.openbsd.org/?query=wi&sektion=4">wi(4)</a> and <a href="http://man.openbsd.org/?query=awi&sektion=4">awi(4)</a> now support more models of cards.
358: <li><a href="http://man.openbsd.org/?query=skey&sektion=1">skey(1)</a> SHA1 is supposed to be little endian.
359: <li>Improve <a href="http://man.openbsd.org/?query=ping6&sektion=8">ping6(8)</a> signal handling further.
360: <li>Merge <a href="http://man.openbsd.org/?query=isakmpd&sektion=8">isakmpd(8)</a> in. It is no longer separate.
361: <li>Many <a href="http://man.openbsd.org/?query=ppp&sektion=8">ppp(8)</a> improvements.
1.1 deraadt 362: <li>Handle binary data in install floppy dmesg.
1.68 sthen 363: <li>Improve ELF handling of <a href="http://man.openbsd.org/?query=nlist&sektion=3">nlist(3)</a>.
1.1 deraadt 364: <li>Print CPU speed in GHz if it is that fast.
1.36 david 365: <li>Detect Transmeta CPUs.
1.1 deraadt 366: <li>On powerpc, ensure that signal delivery fills in rval[1]; at least pthread was affected.
367: <li>Move powerpc to MACHINE_NEW_NONCONTIG.
1.68 sthen 368: <li>In <a href="http://man.openbsd.org/?query=mg&sektion=1">mg(1)</a>, do not use <a href="http://man.openbsd.org/?query=rename&sektion=2">rename(2)</a> on the ~ file; make a new copy so that <a href="http://man.openbsd.org/?query=vipw&sektion=8">vipw(8)</a> and <a href="http://man.openbsd.org/?query=crontab&sektion=1">crontab(1)</a> do the right thing.
1.1 deraadt 369: <li>Tweak alpha so it sends SIGBUS for unaligned access, and does NOT do a fixup. This encourages people to fix their code.
370: <li>KGDB support for the i386.
371: <li>Pack alpha definition of infinity properly, other architectures too.
1.36 david 372: <li>Recognize Intel P4 CPU.
1.1 deraadt 373: <li>Various space optimizations for alpha boot floppies.
374: <li>Fix CF wdc, which was broken for a while.
1.68 sthen 375: <li>Add "enable" keyword in <a href="http://man.openbsd.org/?query=config&sektion=8">config(8)</a> files.
1.1 deraadt 376: <li>Merge and simplify emulation directory handling code.
1.68 sthen 377: <li>Support Initio INI-91xx cards via new <a href="http://man.openbsd.org/?query=iha&sektion=4">iha(4)</a> driver.
378: <li>In <a href="http://man.openbsd.org/?query=accept&sektion=2">accept(2)</a>, when peer disconnects before accept is issued, do not return junk in mbuf by setting length to 0.
1.1 deraadt 379: <li>Support Hardware RNG on i850 and i860 hubs.
1.68 sthen 380: <li>Fix <a href="http://man.openbsd.org/?query=sysctl&sektion=3">sysctl(3)</a> so that you can clear a string with it.
381: <li>In <a href="http://man.openbsd.org/?query=sshd&sektion=8">sshd(8)</a>, rename "skey" to "challenge response", since this mechanism is now more flexible.
1.1 deraadt 382: <li>Reduce how long we wait for scsi devices to come ready; 50 seconds is enough.
1.68 sthen 383: <li><a href="http://man.openbsd.org/?query=pcvt&sektion=4&manpath=OpenBSD+2.7&arch=i386">pcvt(4)</a> keyboard LED update lockup patch.
1.1 deraadt 384: <li>ncurses-5.2-20010114
1.68 sthen 385: <li>Fix many more <a href="http://man.openbsd.org/?query=sshd&sektion=8">sshd(8)</a> memory leaks.
386: <li>Fix memory leak in <a href="http://man.openbsd.org/?query=isakmpd&sektion=8">isakmpd(8)</a>.
387: <li>In <a href="http://man.openbsd.org/?query=timed&sektion=8">timed(8)</a>, do not accept packets with an unterminated hostname.<br>
1.28 naddy 388: <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
1.1 deraadt 389: <li>Alias map bios rom at both real address and it's own zero-relative address, because bios roms contain bugs.
1.68 sthen 390: <li>In <a href="http://man.openbsd.org/?query=rtadvd&sektion=8">rtadvd(8)</a>, sync router renumbering flag bit to conform to 2292bis-02 and RR RFC.
391: <li>Get rid of -R flag in <a href="http://man.openbsd.org/?query=ssh-keygen&sektion=1">ssh-keygen(1)</a>.
392: <li>Avoid memory leak in <a href="http://man.openbsd.org/?query=ndp&sektion=8">ndp(8)</a>.
393: <li>Establish <a href="http://man.openbsd.org/?query=pccbb&sektion=4">pccbb(4)</a>, <a href="http://man.openbsd.org/?query=ohci&sektion=4">ohci(4)</a>, and <a href="http://man.openbsd.org/?query=uhci&sektion=4">uhci(4)</a> interrupt handler much earlier, because of coming <a href="http://man.openbsd.org/?query=pcibios&sektion=4">pcibios(4)</a> changes.
394: <li>Numerous small fixes to <a href="http://man.openbsd.org/?query=sshd&sektion=8">sshd(8)</a> and friends.
395: <li>In <a href="http://man.openbsd.org/?query=ssh&sektion=1">ssh(1)</a>, fix SIGSEGV for -o "".
1.1 deraadt 396: <li>On i386, validate gate targets.
397: <li>The easy delete key always returns ^?, while the more difficult one returns ^H.
398: <li>Incorporate a set of post-4.4BSD changes to the kernel routing code.
399: <li>Support more than 256MB of ram on powerpc.
400: <li>Be more careful with assuming with VIA chips can handle U66.
1.68 sthen 401: <li>Document better how code using <a href="http://man.openbsd.org/?query=sigblock&sektion=3">sigblock(3)</a> and <a href="http://man.openbsd.org/?query=sigsetmask&sektion=3">sigsetmask(3)</a> would be converted to use <a href="http://man.openbsd.org/?query=sigprocmask&sektion=2">sigprocmask(2)</a>.
402: <li>Get <a href="http://man.openbsd.org/?query=sshd&sektion=8">sshd(8)</a> ready for auth-login.
403: <li>In <a href="http://man.openbsd.org/?query=ifconfig&sektion=8">ifconfig(8)</a>, permit prefixlen to work against ipv4 addresses.
404: <li>Change <a href="http://man.openbsd.org/?query=savecore&sektion=8">savecore(8)</a> to deal with machines dumping 1GB or more..
1.1 deraadt 405: <li>Attempt to deal with inverted signal races in terminal handlers better, throughout the source tree -- ie. main code is deep inside stdio, signal handler calls exit().
1.68 sthen 406: <li>Document rules that apply to signal handlers in <a href="http://man.openbsd.org/?query=signal&sektion=3">signal(3)</a> and <a href="http://man.openbsd.org/?query=sigaction&sektion=2">sigaction(2)</a>.
1.1 deraadt 407: <li>ipf 3.4.15
1.68 sthen 408: <li>Fix a <a href="http://man.openbsd.org/?query=vi&sektion=1">vi(1)</a> crash.
409: <li><font color="#e00000"><strong>SECURITY FIX: The <a href="http://man.openbsd.org/?query=random&sektion=4">rnd(4)</a> device does not use all of its input when data is written to it.</strong></font><br>
1.10 pvalchev 410: <a href="errata28.html#rnd">A patch is available</a>.<br>
1.28 naddy 411: <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
1.68 sthen 412: <li>Fix C sequence point issues in <a href="http://man.openbsd.org/?query=dd&sektion=1">dd(1)</a>, <a href="http://man.openbsd.org/?query=monop&sektion=6">monop(6)</a>, <a href="http://man.openbsd.org/?query=tail&sektion=1">tail(1)</a>, and <a href="http://man.openbsd.org/?query=rbootd&sektion=8">rbootd(8)</a>.
413: <li>Fix previous <a href="http://man.openbsd.org/?query=inetd&sektion=8">inetd(8)</a> fix.
414: <li>Fix signal handler race in <a href="http://man.openbsd.org/?query=apmd&sektion=8">apmd(8)</a>, <a href="http://man.openbsd.org/?query=bootpd&sektion=8">bootpd(8)</a>, <a href="http://man.openbsd.org/?query=syslogd&sektion=8">syslogd(8)</a>.
415: <li>Constrain <a href="http://man.openbsd.org/?query=isp&sektion=4">isp(4)</a> openings to 128, since the vendor code lies, cheats, steals, and makes us cry.
416: <li>Fully support SSH2 RSA keys in <a href="http://man.openbsd.org/?query=sshd&sektion=8">sshd(8)</a>.
1.1 deraadt 417: <li>Change alpha bootblocks to ELF.
1.68 sthen 418: <li>Fix fd_set overflows and signal races in <a href="http://man.openbsd.org/?query=pppoe&sektion=1">pppoe(1)</a>.
1.1 deraadt 419: <li>Important pthread fix.
1.68 sthen 420: <li>Large block of documentation and functionality changes to <a href="http://man.openbsd.org/?query=mail&sektion=1">mail(1)</a>.
421: <li>fd_set overflow fix to <a href="http://man.openbsd.org/?query=routed&sektion=8">routed(8)</a>.
422: <li>Signal handler fix to <a href="http://man.openbsd.org/?query=newfs&sektion=1">newfs(1)</a>.
423: <li>Cleanup various signal races and buffer overflows in <a href="http://man.openbsd.org/?query=ed&sektion=1">ed(1)</a>.
424: <li>Fix signal race in <a href="http://man.openbsd.org/?query=mountd&sektion=8">mountd(8)</a> by writing our own svc_run() routine.
425: <li>Fix uninitialized variable bug in <a href="http://man.openbsd.org/?query=config&sektion=8">config(8)</a> UKC code that ignored first command sometimes.
426: <li>Various changes ensure that all known <a href="http://man.openbsd.org/?query=le&sektion=4">le(4)</a> cards now work on sun4, sun4c, and sun4m machines.
1.1 deraadt 427: <li>Tweak subr_extent code with respect to boundary cases.
1.68 sthen 428: <li><a href="http://man.openbsd.org/?query=sftp-server&sektion=8">sftp-server(8)</a> draft came out; convert our <a href="http://man.openbsd.org/?query=sftp-server&sektion=8">sftp-server(8)</a> to be compliant.
1.1 deraadt 429: <li>sendmail 8.11.2
1.68 sthen 430: <li>Signal race fixes to <a href="http://man.openbsd.org/?query=fsck_ffs&sektion=8">fsck_ffs(8)</a>, <a href="http://man.openbsd.org/?query=rcp&sektion=1">rcp(1)</a>, <a href="http://man.openbsd.org/?query=slattach&sektion=8">slattach(8)</a>, <a href="http://man.openbsd.org/?query=shutdown&sektion=8">shutdown(8)</a>.
1.1 deraadt 431: <li>Change asm and volatile to __asm__ and __volatile__ in any file which might be compiled using -ansi -pedantic or similar.
1.68 sthen 432: <li>Some signal handler cleanup in <a href="http://man.openbsd.org/?query=rcp&sektion=1">rcp(1)</a>.
433: <li>Cleanup timeout code in <a href="http://man.openbsd.org/?query=adw&sektion=4">adw(4)</a>.
1.1 deraadt 434: <li>Numerous alpha catchups.
1.68 sthen 435: <li>New <a href="http://man.openbsd.org/?query=rtadvd&sektion=8">rtadvd(8)</a> code.
436: <li>Compute UDP checksum in <a href="http://man.openbsd.org/?query=dhcpd&sektion=8">dhcpd(8)</a>.
437: <li>Move mvme88k to <a href="http://man.openbsd.org/?query=uvm&sektion=9">UVM(9)</a>.
438: <li><a href="http://man.openbsd.org/?query=clct&sektion=4">clct(4)</a> driver for Cirrus Logic CS4281 sound chips.
439: <li>Support {Allow,Deny}Groups in <a href="http://man.openbsd.org/?query=sshd&sektion=8">sshd(8)</a>.
440: <li><a href="http://man.openbsd.org/?query=sshd&sektion=8">sshd(8)</a> SSH2 protocol support for keepalives, IPTOS_LOWDELAY, TCP_NODELAY, and IPTOS_THROUGHPUT.
441: <li>Add <a href="http://man.openbsd.org/?query=kerberos&sektion=1">kerberos(1)</a> password handling in <a href="http://man.openbsd.org/?query=sshd&sektion=8">sshd(8)</a> for kerberosIV.
442: <li>More memory leak fixes to <a href="http://man.openbsd.org/?query=sshd&sektion=8">sshd(8)</a> and <a href="http://man.openbsd.org/?query=ssh&sektion=1">ssh(1)</a>.
443: <li>Tweak <a href="http://man.openbsd.org/?query=strlcat&sektion=3">strlcat(3)</a> to not crash for a certain "illegal pointers, length 0" situation.
444: <li>Clarify <a href="http://man.openbsd.org/?query=setjmp&sektion=3">setjmp(3)</a> variants in the manual pages.
445: <li>Correct fd_set and signals in <a href="http://man.openbsd.org/?query=ping6&sektion=8">ping6(8)</a>.
446: <li>Un-race three signal handlers, and fix select overflows in <a href="http://man.openbsd.org/?query=inetd&sektion=8">inetd(8)</a>.
447: <li>Fix signal race in <a href="http://man.openbsd.org/?query=route6d&sektion=8">route6d(8)</a>.
1.1 deraadt 448: <li>Move mvme88k to MACHINE_NEW_NONCONTIG.
1.68 sthen 449: <li>Fix signal races in <a href="http://man.openbsd.org/?query=rwhod&sektion=8">rwhod(8)</a>.
450: <li>Fix fd_set overflow in <a href="http://man.openbsd.org/?query=yppush&sektion=8">yppush(8)</a>.
451: <li>Fix closedown stub generated and hand-whacked by <a href="http://man.openbsd.org/?query=rpcgen&sektion=1">rpcgen(1)</a> in <a href="http://man.openbsd.org/?query=ypserv&sektion=8">ypserv(8)</a>.
452: <li>Audio driver for most ESS <a href="http://man.openbsd.org/?query=maestro&sektion=8">maestro(8)</a> models.
453: <li>Signal race repairs in <a href="http://man.openbsd.org/?query=talkd&sektion=8">talkd(8)</a> and <a href="http://man.openbsd.org/?query=comsat&sektion=8">comsat(8)</a>.
454: <li>Fix select overflow in <a href="http://man.openbsd.org/?query=ssh-agent&sektion=1">ssh-agent(1)</a>.
455: <li>Fix <a href="http://man.openbsd.org/?query=rpcgen&sektion=1">rpcgen(1)</a> to deal with large fd_set.
1.1 deraadt 456: <li>Document various signal races in the source tree which are very difficult to fix, or which turn out to be safe even if they look flawed.
1.68 sthen 457: <li>Rename <a href="http://man.openbsd.org/?query=ich&sektion=4">ich(4)</a> to <a href="http://man.openbsd.org/?query=auich&sektion=4">auich(4)</a>.
458: <li>Cleanup the <a href="http://man.openbsd.org/?query=sftp-server&sektion=8">sftp-server(8)</a> implementation.
459: <li>Support !command feature in <a href="http://man.openbsd.org/?query=bridgename.if&sektion=5">bridgename.if(5)</a> files as well.
460: <li>Numerous other small changes to <a href="http://man.openbsd.org/?query=isakmpd&sektion=8">isakmpd(8)</a>.
461: <li>Handle memory failures in <a href="http://man.openbsd.org/?query=passwd&sektion=1">passwd(1)</a>.
462: <li>In <a href="http://man.openbsd.org/?query=finger&sektion=1">finger(1)</a>, fail nicely if memory allocation fails.
463: <li>Handle DELETE payloads in <a href="http://man.openbsd.org/?query=isakmpd&sektion=8">isakmpd(8)</a>.
464: <li>Remove signal races from <a href="http://man.openbsd.org/?query=sshd&sektion=8">sshd(8)</a>.
465: <li>Ease support for road-warrior scenarios in <a href="http://man.openbsd.org/?query=isakmpd&sektion=8">isakmpd(8)</a>, by intuiting the Local-ID when possible.
1.1 deraadt 466: <li>Change 802.11 DS drivers to operate in BSS mode by default.
1.68 sthen 467: <li>Create links for <a href="http://man.openbsd.org/?query=FD_SET&sektion=3">FD_SET(3)</a> and such to point to the <a href="http://man.openbsd.org/?query=select&sektion=2">select(2)</a> page.
468: <li>Support TCP_NDELAY on <a href="http://man.openbsd.org/?query=ip6&sektion=4">ipv6(4)</a> in <a href="http://man.openbsd.org/?query=ssh&sektion=1">ssh(1)</a>.
1.1 deraadt 469: <li>Numerous spelling error corrections in the system.
470: <li>Various other calendar updates.
1.68 sthen 471: <li>Ensure replydirname in <a href="http://man.openbsd.org/?query=ftpd&sektion=8">ftpd(8)</a> does not ever truncate names.
472: <li>Ensure <a href="http://man.openbsd.org/?query=ftpd&sektion=8">ftpd(8)</a> does not sometimes return a stray " at the end of a string.
473: <li>Various large updates to <a href="http://man.openbsd.org/?query=isp&sektion=4">isp(4)</a>.
474: <li>In <a href="http://man.openbsd.org/?query=restore&sektion=8">restore(8)</a>, do not skip TS_BITS or TS_CLRI are set.
1.1 deraadt 475: <li>Change our own custom EtherIP protocol to the standard one (which is very badly designed, but we are trying to get them to fix that).
476: <li>Fix KerberosIV code to build better if src and obj are in strange places.
1.68 sthen 477: <li>Support Banner option in <a href="http://man.openbsd.org/?query=sshd&sektion=8">sshd(8)</a>.
1.1 deraadt 478: <li>Make the openssh-p effort a bit easier by merging some simpler portability hacks.
1.68 sthen 479: <li>Various missing <a href="http://man.openbsd.org/?query=free&sektion=3">free(3)</a> calls repaired in <a href="http://man.openbsd.org/?query=ssh&sektion=1">ssh(1)</a>.
1.1 deraadt 480: <li>Attempt to support cardbus 3CXFEM656C 56k Global modem.
1.68 sthen 481: <li>In <a href="http://man.openbsd.org/?query=pciide&sektion=4">pciide(4)</a>, support U100 on ICH2, U66 on Via Apollo, and other repairs to Promise.
1.1 deraadt 482: <li>Spelling changes to calendar files.
1.68 sthen 483: <li>Be more careful with <a href="http://man.openbsd.org/?query=stat&sektion=2">stat(2)</a> handling in <a href="http://man.openbsd.org/?query=mv&sektion=1">mv(1)</a>.
484: <li>Fix %p handling in <a href="http://man.openbsd.org/?query=strptime&sektion=3">strptime(3)</a>.
485: <li>Fix various buffer overflows and other fixes in <a href="http://man.openbsd.org/?query=indent&sektion=1">indent(1)</a>.
486: <li>Do not spit out <a href="http://man.openbsd.org/?query=icmp6&sektion=4">icmp6</a> checksum messages if not a debug kernel.
1.1 deraadt 487:
488: <li>Permit stripped VAX kernels to load despite unexpected values from libsa.
1.68 sthen 489: <li>Simplify locking and a few more fixes to <a href="http://man.openbsd.org/?query=twe&sektion=4">twe(4)</a>.
1.1 deraadt 490: <li>Plug some memory leaks in OpenSSH.
1.68 sthen 491: <li>Fix -P in <a href="http://man.openbsd.org/?query=ftpd&sektion=8">ftpd(8)</a>.
1.1 deraadt 492: <li>Emulation fixes to the VAX code.
1.68 sthen 493: <li>Protect bits of <a href="http://man.openbsd.org/?query=dhclient&sektion=8">dhclient(8)</a> with a locking mechanism to prevent multiple instances from using the leases file simultaneously.
494: <li>Fix 3 cases in <a href="http://man.openbsd.org/?query=mv&sektion=1">mv(1)</a> relating to the moving of symlinks across filesystems.
495: <li>In <a href="http://man.openbsd.org/?query=ftpd&sektion=8">ftpd(8)</a>, expand the tilde character in ftp-dir login.conf variable.
496: <li>Prohibit binding to an anycast, notready, or detached <a href="http://man.openbsd.org/?query=ip6&sektion=4">IPv6</a> address.
497: <li>Rename <a href="http://man.openbsd.org/?query=fsinfo&sektion=8">fsinfo(8)</a> to xfsinfo in X11 to avoid naming conflict.
498: <li>Set the correct pfkeyv2 direction for KAME SPD entries in <a href="http://man.openbsd.org/?query=isakmpd&sektion=8">isakmpd(8)</a>.
499: <li>Save and restore errno properly in <a href="http://man.openbsd.org/?query=flex&sektion=1">flex(1)</a> since it may be whacked by <a href="http://man.openbsd.org/?query=isatty&sektion=3">isatty(3)</a>.
500: <li>Fix sending/receiving passwords in <a href="http://man.openbsd.org/?query=routed&sektion=8">routed(8)</a>.
501: <li>Add an i386-specific <a href="http://man.openbsd.org/?query=sysctl&sektion=3">sysctl(3)</a> that modifies halt -p processing in APM to deal with some quirky machines.
1.1 deraadt 502: <li>More sun3 fixes, mostly to conform better to other m68k architecture code.
1.68 sthen 503: <li>Handle login banners better in SSH2 instances of <a href="http://man.openbsd.org/?query=ssh&sektion=1">ssh(1)</a>.
1.1 deraadt 504: <li>Various spelling and grammar fixes across the tree.
1.68 sthen 505: <li>Use new <a href="http://man.openbsd.org/?query=sysctl&sektion=3">sysctl(3)</a> interface for kernel memory bucket statistics and clock information.
506: <li>Correctly check for empty <a href="http://man.openbsd.org/?query=mailq&sektion=1">mailq(1)</a> in /etc/daily.
1.1 deraadt 507: <li>Y2K fix in the mvme68k NVRAM code.
1.68 sthen 508: <li>Extend <a href="http://man.openbsd.org/?query=sysctl&sektion=3">sysctl(3)</a> to support quad values.
509: <li>Improve SMB packet printing in <a href="http://man.openbsd.org/?query=tcpdump&sektion=8">tcpdump(8)</a>.
1.1 deraadt 510: <li>Add common pidfile-writing code to DHCP so each program doesn't need to roll its own.
1.68 sthen 511: <li>To please <a href="http://man.openbsd.org/?query=cap_mkdb&sektion=1">cap_mkdb(1)</a>, make it an error to open a zero-length file for read-only access in <a href="http://man.openbsd.org/?query=hash&sektion=3">hash(3)</a>.
1.1 deraadt 512: <li>Some sun3 architecture fixes.
1.68 sthen 513: <li>Ignore environment variables in <a href="http://man.openbsd.org/?query=ssl&sektion=8">libssl</a> if we're running <a href="http://man.openbsd.org/?query=issetugid&sektion=2">setugid</a>.
514: <li>In <a href="http://man.openbsd.org/?query=ssh&sektion=1">ssh(1)</a>, log the remote IP address on disconnect.
515: <li>Check for memory allocation failure in <a href="http://man.openbsd.org/?query=vmstat&sektion=8">vmstat(8)</a>.
516: <li>Fix a buffer overflow in <a href="http://man.openbsd.org/?query=fsinfo&sektion=8">fsinfo(8)</a>.
517: <li>Handle another special case in <a href="http://man.openbsd.org/?query=apm&sektion=4&arch=i386">apm(4)</a>.
518: <li>Fix a panic in the <a href="http://man.openbsd.org/?query=raid&sektion=4">RAIDframe</a> locking management code.
519: <li>Add setpid command to <a href="http://man.openbsd.org/?query=fdisk&sektion=8&arch=i386">fdisk(8)</a> for setting the partition ID.
520: <li>Change <a href="http://man.openbsd.org/?query=bridge&sektion=4">bridge(4)</a> to use gif* instead of enc*.
521: <li>Set SO_REUSEPORT socket option in <a href="http://man.openbsd.org/?query=dhcp&sektion=8">DHCP</a> code, so multiple dhclients work.
522: <li>Allow printing of 8-bit ASCII characters in <a href="http://man.openbsd.org/?query=talk&sektion=1">talk(1)</a> through an option.
523: <li>Do not perform getnetbyname() in <a href="http://man.openbsd.org/?query=mountd&sektion=8">mountd(8)</a> if the address is already in dot-notation.
524: <li>In <a href="http://man.openbsd.org/?query=ftpd&sektion=8">ftpd(8)</a>, log the actual number of bytes transferred instead of the original file size.
1.1 deraadt 525: <li>Fix ^C in termtype prompt.
1.68 sthen 526: <li>Prevent <a href="http://man.openbsd.org/?query=fsck_ffs&sektion=8">fsck_ffs(8)</a> from marking a filesystem clean if <a href="http://man.openbsd.org/?query=fsck&sektion=8">fsck(8)</a> needs to be rerun.
527: <li>Resolve scheduling conflict in <a href="http://man.openbsd.org/?query=newsyslog&sektion=8">newsyslog(8)</a>.
528: <li>In <a href="http://man.openbsd.org/?query=dhclient&sektion=8">dhclient(8)</a>, set a reasonable default lease time if the server does not provide one.
529: <li>Suppress uninteresting PCI bus error messages in <a href="http://man.openbsd.org/?query=ahc&sektion=4">ahc(4)</a>.
530: <li>Add m88k support to <a href="http://man.openbsd.org/?query=gprof&sektion=1">gprof(1)</a>.
531: <li>Add HostKeyAlias option to <a href="http://man.openbsd.org/?query=ssh&sektion=1">ssh(1)</a>.
532: <li>Behave nicely with fixed-rate codecs in <a href="http://man.openbsd.org/?query=auvia&sektion=4">auvia(4)</a>.
533: <li>Fix a minor off-by-one error in <a href="http://man.openbsd.org/?query=gprof&sektion=1">gprof(1)</a>.
1.1 deraadt 534: <li>In the ports infrastructure, take the old non-fake code out-of-line.
1.68 sthen 535: <li>Repair a disgusting <a href="http://man.openbsd.org/?query=rwhod&sektion=8">rwhod(8)</a> crash.
536: <li>Fix buffer overflow in <a href="http://man.openbsd.org/?query=csh&sektion=1">csh(1)</a> builtin <a href="http://man.openbsd.org/?query=printf&sektion=1">printf(1)</a> implementation.
537: <li>Convert <a href="http://man.openbsd.org/?query=atoi&sektion=3">atoi(3)</a> to <a href="http://man.openbsd.org/?query=strtoul&sektion=3">strtoul(3)</a> in <a href="http://man.openbsd.org/?query=top&sektion=1">top(1)</a>.
1.1 deraadt 538: <li>Emulate Linux truncate64, stat64, lstat64, and fstat64 syscalls.
1.68 sthen 539: <li>Revoke root privileges earlier in <a href="http://man.openbsd.org/?query=ping6&sektion=8">ping6(8)</a> and <a href="http://man.openbsd.org/?query=traceroute6&sektion=8">traceroute6(8)</a>.<br>
1.28 naddy 540: <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
1.1 deraadt 541: <li>Many man page fixes.
1.68 sthen 542: <li>Use <a href="http://man.openbsd.org/?query=arc4random&sektion=3">arc4random(3)</a> in <a href="http://man.openbsd.org/?query=jot&sektion=1">jot(1)</a>.
543: <li>Handle quotas over 4GB in <a href="http://man.openbsd.org/?query=edquota&sektion=8">edquota(8)</a> and <a href="http://man.openbsd.org/?query=repquota&sektion=8">repquota(8)</a>.
544: <li>Fix <a href="http://man.openbsd.org/?query=ip6&sektion=4">IPv6</a> Path MTU Discovery.
545: <li>Give up euid more carefully in <a href="http://man.openbsd.org/?query=mrinfo&sektion=8">mrinfo(8)</a> and <a href="http://man.openbsd.org/?query=mtrace&sektion=8">mtrace(8)</a>.
1.1 deraadt 546: <li>Various OpenSSH fixes.
547: <li>Add support for ActivCard, CRYPTOCard, and SNK-004 authentication for the BSD authentication framework.
1.68 sthen 548: <li>In <a href="http://man.openbsd.org/?query=ksh&sektion=1">ksh(1)</a>, remain in non-blocking mode if the shell is not interactive.
1.28 naddy 549: <li><font color="#e00000"><strong>SECURITY FIX: xlock now authenticates via a pipe.</strong></font><br>
1.10 pvalchev 550: <a href="errata28.html#xlock">A patch is available</a>.<br>
1.28 naddy 551: <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
1.68 sthen 552: <li><font color="#e00000"><strong>IMPLEMENTATION FIX: PS/2 mouse driver, <a href="http://man.openbsd.org/?query=pms&sektion=4&arch=i386">pms</a>, lockup fix.</strong></font><br>
1.10 pvalchev 553: <a href="errata28.html#pms">A patch is available</a>.<br>
1.28 naddy 554: <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
1.68 sthen 555: <li>Implement a workaround in <a href="http://man.openbsd.org/?query=atapiscsi&sektion=4">atapiscsi(4)</a> for buggy Toshiba drivers.
556: <li><font color="#e00000"><strong>SECURITY FIX: Fix holes in <a href="http://man.openbsd.org/?query=mount_procfs&sektion=8">procfs(8)</a>.</strong></font><br>
1.10 pvalchev 557: <a href="errata28.html#procfs">A patch is available</a>.<br>
1.28 naddy 558: <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
1.68 sthen 559: <li>Put <a href="http://man.openbsd.org/?query=strlcat&sektion=3">strlcat(3)</a> and <a href="http://man.openbsd.org/?query=strlcpy&sektion=3">strlcpy(3)</a> into libkern for kernel use.
560: <li>Fix setting of nwid for <a href="http://man.openbsd.org/?query=wi&sektion=4">wi(4)</a>.<br>
1.28 naddy 561: <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
1.1 deraadt 562: <li>Change /etc/security to spit out unified diffs.
1.68 sthen 563: <li>Add driver for Compaq SMART Array RAID controllers, <a href="http://man.openbsd.org/?query=cac&sektion=4">cac(4)</a>.
564: <li>Extend the i386 allowaperture <a href="http://man.openbsd.org/?query=sysctl&sektion=3">sysctl(3)</a> to allow access to the whole 1st MB of memory.
1.1 deraadt 565: <li>Add some more sanity checking to the PCMCIA code to fix some obscure panics.
566: <li>Import Apache 1.3.14 + mod_ssl 2.7.1.
567: <li>Support multiple pfkeyv2 keying daemons.
1.68 sthen 568: <li>Compute <a href="http://man.openbsd.org/?query=dh&sektion=3">diffie-hellman</a> in parallel between server and client in <a href="http://www.openssh.com/">OpenSSH</a>.
1.1 deraadt 569: <li>Support Amigas with more than 64MB of RAM.
570: <li>Ensure /etc/sudoers is created with a proper secure mode.
1.68 sthen 571: <li>Import <a href="http://man.openbsd.org/?query=openssl&sektion=1">OpenSSL</a> 0.9.6.
572: <li>More <a href="http://man.openbsd.org/?query=photurisd&sektion=8">photurisd(8)</a> improvements.
1.1 deraadt 573: <li>Update kernel pfkeyv2 code for better conformance to the RFC.
574: <li>Enable loading of ELF kernels for alpha.
1.68 sthen 575: <li>Add extraction support for shell archives to the <a href="http://man.openbsd.org/?query=bsd.port.mk&sektion=5">bsd.port.mk</a> infrastructure.
576: <li>In <a href="http://man.openbsd.org/?query=ipsec&sektion=4">ipsec(4)</a>, look for TDB if gateway is unspecified.<br>
1.28 naddy 577: <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
1.68 sthen 578: <li>Fixes to <a href="http://man.openbsd.org/?query=patch&sektion=1">patch(1)</a> -f and -b.
579: <li>Convert some more drivers to the new <a href="http://man.openbsd.org/?query=timeout&sektion=9">timeout(9)</a> interface.
580: <li>Add bytecounter statistics reporting to <a href="http://man.openbsd.org/?query=netstat&sektion=1">netstat(1)</a>.
1.1 deraadt 581: <li>Instrument more random TCP sequence numbers.
1.68 sthen 582: <li><font color="#e00000"><strong>IMPLEMENTATION FIX: Compute <a href="http://man.openbsd.org/?query=crypto&sektion=9">crypto(9)</a> session IDs correctly for kernel.</strong></font><br>
1.10 pvalchev 583: <a href="errata28.html#hwcrypto">A patch is available</a>.<br>
1.28 naddy 584: <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
1.68 sthen 585: <li>In <a href="http://man.openbsd.org/?query=sshd&sektion=8">sshd(8)</a>, permit logins with read-only root filesystems if the tty already has sane modes set.
586: <li>Source port < 1024 is no longer required for rhosts-rsa in <a href="http://man.openbsd.org/?query=sshd&sektion=8">sshd(8)</a>.
587: <li>Remove dead code in <a href="http://man.openbsd.org/?query=hifn&sektion=4">hifn(4)</a> driver.
588: <li>Proper <a href="http://man.openbsd.org/?query=getopt&sektion=3">getopt(3)</a> usage in <a href="http://man.openbsd.org/?query=compress&sektion=1">compress(1)</a>.
589: <li>Fix a time specification in <a href="http://man.openbsd.org/?query=last&sektion=1">last(1)</a>.
1.1 deraadt 590: <li>Do not disable PMTU for established TCP connections unless there is data to send.
1.68 sthen 591: <li>Add support for the 802.1D spanning tree protocol to <a href="http://man.openbsd.org/?query=bridge&sektion=4">bridge(4)</a>.
1.1 deraadt 592: <li>New BSD authentication login scripts.
1.68 sthen 593: <li>Listen to pfkeyv2 acquire messages in <a href="http://man.openbsd.org/?query=photurisd&sektion=8">photurisd(8)</a>, and setup SAs accordingly.
594: <li><a href="http://man.openbsd.org/?query=isakmpd&sektion=8">isakmpd(8)</a> update.
595: <li><a href="http://man.openbsd.org/?query=apm&sektion=4&arch=i386">apm(4)</a> bug fix that helps a few laptops.
596: <li>Remove unnecessary code from <a href="http://man.openbsd.org/?query=photurisd&sektion=8">photurisd(8)</a> in preparation of new SPD framework.
597: <li>Repair a memory leak in <a href="http://man.openbsd.org/?query=icmp6&sektion=4">ICMPv6</a> code.
598: <li>Turn off PMTU when <a href="http://man.openbsd.org/?query=icmp&sektion=4">ICMP</a> needfrag messages get blocked.
1.1 deraadt 599: <li>Finnish updates for inter.phone.
1.68 sthen 600: <li>Display number of successful <a href="http://man.openbsd.org/?query=ip6&sektion=4">IPv6</a> PMTU changes in <a href="http://man.openbsd.org/?query=netstat&sektion=1">netstat(1)</a> -s output.
601: <li>Do not re-print ETA on completion in <a href="http://man.openbsd.org/?query=scp&sektion=1">scp(1)</a> when copying 0-sized files.
602: <li>Validate <a href="http://man.openbsd.org/?query=icmp6&sektion=4">ICMPv6</a> "too big" messages based on PCB.
603: <li>Do not use already-freed memory in <a href="http://man.openbsd.org/?query=route&sektion=8">route(8)</a>.
604: <li>Avoid repeated host controller halted messages in <a href="http://man.openbsd.org/?query=uhci&sektion=4">uhci(4)</a>.
1.1 deraadt 605: <li>Remove unused libgmp.
1.68 sthen 606: <li>Import <a href="http://man.openbsd.org/?query=kerberos&sektion=1">KerberosIV</a> v1.0.4.
607: <li>Always request a new challenge for skey/tis-auth in <a href="http://man.openbsd.org/?query=ssh&sektion=1">ssh(1)</a>.
608: <li>Support newer <a href="http://man.openbsd.org/?query=cy&sektion=4">cy(4)</a> communication cards.
609: <li>Provide new international keymaps for <a href="http://man.openbsd.org/?query=pcvt&sektion=4&manpath=OpenBSD+2.7&arch=i386">pcvt(4)</a>.
1.1 deraadt 610: <li>Ignore filesystems marked "xx" in the install scripts.
1.68 sthen 611: <li>Document that <a href="http://man.openbsd.org/?query=pipe&sektion=2">pipe(2)</a> is bidirectional, although this behavior is unportable.
612: <li>Move the default <a href="http://man.openbsd.org/?query=cvs&sektion=1">cvs(1)</a> connection protocol from <a href="http://man.openbsd.org/?query=rsh&sektion=1">rsh(1)</a> to <a href="http://man.openbsd.org/?query=ssh&sektion=1">ssh(1)</a>.
613: <li>Remove a bogus memory free in <a href="http://man.openbsd.org/?query=getnetgrent&sektion=3">getnetgrent(3)</a>.
614: <li>Fix a buffer overflow in <a href="http://man.openbsd.org/?query=bad144&sektion=8&arch=i386">bad144(8)</a>.
1.1 deraadt 615: <li>Revert back to the old rijndael implementation and solve byte ordering bugs there instead.
1.68 sthen 616: <li>Drop unneeded support for RTF_TUNNEL in <a href="http://man.openbsd.org/?query=route&sektion=8">route(8)</a>.
617: <li>Maintain count of routing table timer entries in <a href="http://man.openbsd.org/?query=route&sektion=8">route(8)</a>.
618: <li>In <a href="http://man.openbsd.org/?query=makewhatis&sektion=8">makewhatis(8)</a>, strip weird characters first, then sequences of spaces.
619: <li>Big improvements to <a href="http://man.openbsd.org/?query=adw&sektion=4">adw(4)</a>.
620: <li>Teach <a href="http://man.openbsd.org/?query=tcpdump&sektion=8">tcpdump(8)</a> about VRRP, SMB, and timed.
621: <li>Force <a href="http://man.openbsd.org/?query=calendar&sektion=1">calendar(1)</a> to only accept real calendar files as input.
622: <li>Fix various <a href="http://man.openbsd.org/?query=perror&sektion=3">perror(3)</a> overflows in <a href="http://man.openbsd.org/?query=pcvt&sektion=4&manpath=OpenBSD+2.7&arch=i386">pcvt(4)</a>.
623: <li>Repair a <a href="http://man.openbsd.org/?query=tftp&sektion=1">tftp(1)</a> argv parsing overflow.
624: <li>Conditionalize some <a href="http://man.openbsd.org/?query=bpf&sektion=4">BPF</a> code in <a href="http://man.openbsd.org/?query=wx&sektion=4">wx(4)</a>.
625: <li>Finally remove remaining references to extra <a href="http://man.openbsd.org/?query=rsa&sektion=3">RSA</a> libs, since the patent has expired.
1.1 deraadt 626: <li>New rijndael implementation which solves endian issues.
1.68 sthen 627: <li>Support Intel 82801BA <a href="http://man.openbsd.org/?query=pciide&sektion=4">pciide(4)</a> controllers.
628: <li>Exercise more paranoia with passed KRB environment settings in <a href="http://man.openbsd.org/?query=telnetd&sektion=8">telnetd(8)</a>.
629: <li>Convert some more drivers to the new <a href="http://man.openbsd.org/?query=timeout&sektion=9">timeout(9)</a> interface.
630: <li>Many improvements and modernizations to <a href="http://man.openbsd.org/?query=isp&sektion=4">isp(4)</a>.
631: <li>Update <a href="http://man.openbsd.org/?query=wx&sektion=4">wx(4)</a> with LIVENGOOD support.
632: <li>Recognize and support the IODATA USB-ET/T Ethernet adapter in <a href="http://man.openbsd.org/?query=kue&sektion=4">kue(4)</a>.
633: <li>Implement asynchronous connections for <a href="http://man.openbsd.org/?query=ssh&sektion=1">ssh(1)</a> -R and -L.
634: <li>Simplify <a href="http://man.openbsd.org/?query=atrun&sektion=8">atrun(8)</a> tasks by using <a href="http://man.openbsd.org/?query=asprintf&sektion=3">asprintf(3)</a>.
1.1 deraadt 635: <li>Kill unused libtermlib.
1.68 sthen 636: <li>Import new <a href="http://man.openbsd.org/?query=pool&sektion=9">pool(9)</a> code.
637: <li>Fix RIPv0 packet printing and <a href="http://man.openbsd.org/?query=nfsd&sektion=8">NFS</a> port number parsing in <a href="http://man.openbsd.org/?query=tcpdump&sektion=8">tcpdump(8)</a>.
638: <li>Make <a href="http://man.openbsd.org/?query=pcap&sektion=3">pcap(3)</a>-generated <a href="http://man.openbsd.org/?query=bpf&sektion=4">BPF</a> filters work on the <a href="http://man.openbsd.org/?query=tun&sektion=4">tun(4)</a> interface.
639: <li>Import David Maziere's <a href="http://man.openbsd.org/?query=ssh-keyscan&sektion=1">ssh-keyscan(1)</a>.
640: <li><font color="#e00000"><strong>SECURITY FIX: Fix buffer overflow in <a href="http://man.openbsd.org/?query=ftpd&sektion=8">ftpd(8)</a>.</strong></font><br>
1.10 pvalchev 641: <a href="errata28.html#ftpd">A patch is available</a>.<br>
1.28 naddy 642: <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
643: <li><font color="#e00000"><strong>IMPLEMENTATION FIX: Fix fastroute related panic.</strong></font><br>
1.10 pvalchev 644: <a href="errata28.html#fastroute">A patch is available</a>.<br>
1.28 naddy 645: <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
1.1 deraadt 646: <li>Teach <a href="http://www.openssh.com/">OpenSSH</a> about more version strings to improve interoperability.
1.68 sthen 647: <li><font color="#e00000"><strong>SECURITY FIX: Fix another security problem in the <a href="http://man.openbsd.org/?query=kerberos&sektion=1">KerberosIV</a> code.</strong></font><br>
1.10 pvalchev 648: <a href="errata28.html#kerberos2">A patch is available</a>.<br>
1.28 naddy 649: <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
1.68 sthen 650: <li><font color="#e00000"><strong>SECURITY FIX: Fix two security problems in the <a href="http://man.openbsd.org/?query=kerberos&sektion=1">KerberosIV</a> code.</strong></font><br>
1.10 pvalchev 651: <a href="errata28.html#kerberos">A patch is available</a>.<br>
1.28 naddy 652: <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
1.68 sthen 653: <li>Permit <a href="http://man.openbsd.org/?query=ftpd&sektion=8">ftpd(8)</a> umask setting via both the command line and through a login class in <a href="http://man.openbsd.org/?query=login.conf&sektion=5">login.conf(5)</a>.
654: <li>Prevent <a href="http://man.openbsd.org/?query=vlan&sektion=4">vlan(4)</a> devices from emitting packets if the parent interface is not up and running.
655: <li>Better error checking in <a href="http://man.openbsd.org/?query=ping6&sektion=8">ping6(8)</a>.<br>
656: <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
657: <li>Some stability fixes to <a href="http://man.openbsd.org/?query=isakmpd&sektion=8">isakmpd(8)</a>.
658: <li>In <a href="http://man.openbsd.org/?query=ssh&sektion=1">ssh(1)</a>, disable agent/X11 port forwarding if the hostkey has changed.
659: <li>Fix a coredump in <a href="http://man.openbsd.org/?query=ssh-agent&sektion=1">ssh-agent(1)</a>.
660: <li>Reset 16-bit PCMCIA during chip initialization in <a href="http://man.openbsd.org/?query=pccbb&sektion=4">pccbb(4)</a>.
661: <li>Correct PCI interrupt setup for TI PCI113X <a href="http://man.openbsd.org/?query=cbb&sektion=4">CardBus</a> bridges.
662: <li>Properly powerdown PC cards in <a href="http://man.openbsd.org/?query=pccbb&sektion=4">pccbb(4)</a> at shutdown time.
663: <li>Add -D option to <a href="http://man.openbsd.org/?query=sshd&sektion=8">sshd(8)</a> to cause startup without a daemon.
664: <li>Show both the IP address and hostname when a new key is encountered in <a href="http://man.openbsd.org/?query=ssh&sektion=1">ssh(1)</a>.
665: <li>Fix a bug in MSChapv2 challenge hashing in <a href="http://man.openbsd.org/?query=ppp&sektion=8">ppp(8)</a>.
666: <li>More <a href="http://man.openbsd.org/?query=make&sektion=1">make(1)</a> tweaks.
1.1 deraadt 667: <li>Use -n to test for non-zero variables in /etc/netstart.
668: <li>Be more careful with ARP packets.
1.68 sthen 669: <li>Fix deletion of flows in pf_key_v2 handling of <a href="http://man.openbsd.org/?query=isakmpd&sektion=8">isakmpd(8)</a><br>
1.28 naddy 670: <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
1.68 sthen 671: <li>Prevent <a href="http://man.openbsd.org/?query=setusercontext&sektion=3">setusercontext(3)</a> in <a href="http://man.openbsd.org/?query=ftpd&sektion=8">ftpd(8)</a> from setting the umask as this conflicts with any command-line umask specification.
672: <li><a href="http://man.openbsd.org/?query=clock&sektion=3">clock(3)</a> fixes for the alpha architecture.
673: <li>Print select collisions in <a href="http://man.openbsd.org/?query=vmstat&sektion=8">vmstat(8)</a> -s output.
674: <li>Implement <a href="http://man.openbsd.org/?query=login_check_expire&sektion=3">login_check_expire(3)</a> for libutil.
675: <li>Add -u username support to <a href="http://man.openbsd.org/?query=pwd_mkdb&sektion=8">pwd_mkdb(8)</a>.
1.1 deraadt 676: <li>Properly implement errno handling for the threaded libc (libc_r) on powerpc.
1.68 sthen 677: <li>In <a href="http://man.openbsd.org/?query=adduser&sektion=8">adduser(8)</a>, get rid of a race condition and use /etc/ptmp as a lock file.
678: <li>Set reasonable defaults for <a href="http://man.openbsd.org/?query=rsa&sektion=3">RSA1</a>, <a href="http://man.openbsd.org/?query=rsa&sektion=3">RSA</a>, and <a href="http://man.openbsd.org/?query=dsa&sektion=3">DSA</a> keys in <a href="http://man.openbsd.org/?query=ssh-keygen&sektion=1">ssh-keygen(1)</a>.
679: <li>Reorder check for illegal ciphers in <a href="http://man.openbsd.org/?query=ssh&sektion=1">ssh(1)</a> protocol 1 connection code.
680: <li>Fix <a href="http://man.openbsd.org/?query=pciide&sektion=4">pciide(4)</a> support on Alpha 164SX models.
1.1 deraadt 681: <li>Support 16 slices per device on VAX machines.
1.68 sthen 682: <li>Considerable cleanups to <a href="http://man.openbsd.org/?query=make&sektion=1">make(1)</a>.
683: <li>Improve key repeat logic in <a href="http://man.openbsd.org/?query=wskbd&sektion=4">wskbd(4)</a>.
684: <li>Changes from KAME to make ifm_data available in <a href="http://man.openbsd.org/?query=getifaddrs&sektion=3">getifaddrs(3)</a>.
685: <li>Fix absolute path handling in <a href="http://man.openbsd.org/?query=crunchgen&sektion=1">crunchgen(1)</a>.
1.1 deraadt 686: <li>Shorten /dev/ttyC* device names.
1.68 sthen 687: <li>Complain about invalid ciphers in <a href="http://man.openbsd.org/?query=ssh&sektion=1">ssh(1)</a>, falling back to reasonable defaults when necessary.
688: <li>Avoid tty races in <a href="http://man.openbsd.org/?query=wsdisplay&sektion=4">wsdisplay(4)</a> when switching virtual terminals.
689: <li>Update <a href="http://man.openbsd.org/?query=isakmpd&sektion=8">isakmpd(8)</a>.
690: <li>Repair lun support in <a href="http://man.openbsd.org/?query=umass&sektion=4">umass(4)</a>.
1.1 deraadt 691: <li>Zero pw_passwd before freeing its memory in the libc BSD authentication routines.
1.68 sthen 692: <li>Train <a href="http://man.openbsd.org/?query=makewhatis&sektion=8">makewhatis(8)</a> to handle more special cases.
693: <li>Avoid double <a href="http://man.openbsd.org/?query=fclose&sektion=3">fclose(3)</a> in <a href="http://man.openbsd.org/?query=getcap&sektion=3">getcap(3)</a>.
694: <li>Increase delay in RAM probe for <a href="http://man.openbsd.org/?query=hifn&sektion=4">hifn(4)</a>.
695: <li>Suffix list fix in <a href="http://man.openbsd.org/?query=make&sektion=1">make(1)</a>.
696: <li>Various bug fixes in <a href="http://man.openbsd.org/?query=ksh&sektion=1">ksh(1)</a>.
697: <li>When using the <a href="http://man.openbsd.org/?query=tail&sektion=1">tail(1)</a> -f flag on stdin, don't reopen a local file named stdin.
698: <li>Extend <a href="http://man.openbsd.org/?query=kqueue&sektion=2">kqueue(2)</a> to support kernel events on <a href="http://man.openbsd.org/?query=vnode&sektion=9">vnodes</a>.
699: <li>Bring in BSD authentication support for <a href="http://man.openbsd.org/?query=sudo&sektion=8">sudo(8)</a>.
700: <li>Zap MULOG in <a href="http://man.openbsd.org/?query=inetd&sektion=8">inetd(8)</a> to improve code readability.
701: <li>Avoid whacking errno in <a href="http://man.openbsd.org/?query=top&sektion=1">top(1)</a> signal handlers.
702: <li>Do not include MFS partitions in <a href="http://man.openbsd.org/?query=quot&sektion=8">quot(8)</a> statistics output.
1.1 deraadt 703: <li>Add support for the Acenic Copper and Netgear GA620T Gigabit Ethernet cards.
1.68 sthen 704: <li>Prevent a type overflow in <a href="http://man.openbsd.org/?query=recno&sektion=3">recno(3)</a>.
1.28 naddy 705: <li><font color="#e00000"><strong>IMPLEMENTATION FIX: Imac DV reports the VGA device improperly.</strong></font><br>
1.10 pvalchev 706: <a href="errata28.html#imacdv">A patch is available</a>.<br>
1.28 naddy 707: <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
1.1 deraadt 708: <li>Import BSD authentication mechanisms from BSDI BSD/OS.
1.68 sthen 709: <li>Implement <a href="http://man.openbsd.org/?query=pw_dup&sektion=3">pw_dup(3)</a>, a function which copies struct passwd.
710: <li>Replace <a href="http://man.openbsd.org/?query=getpass&sektion=3">getpass(3)</a> with a more flexible <a href="http://man.openbsd.org/?query=readpassphrase&sektion=3">readpassphrase(3)</a> interface.
711: <li>Add <a href="http://man.openbsd.org/?query=strnvis&sektion=3">strnvis(3)</a>, a length-bounded version of the <a href="http://man.openbsd.org/?query=strvis&sektion=3">strvis(3)</a> libc function.
1.1 deraadt 712: <li>Better prompting logic in libskey.
713: <li>Resurrect binutils on alpha.
1.68 sthen 714: <li>Recognize newer Intel audio devices in <a href="http://man.openbsd.org/?query=auich&sektion=4">auich(4)</a>.
715: <li>Stop <a href="http://man.openbsd.org/?query=amphy&sektion=4">amphy(4)</a> from attaching to network devices it doesn't belong to.
716: <li>Enable support for <a href="http://man.openbsd.org/?query=pciide&sektion=4">pciide(4)</a> found in newer Intel chipsets.
1.1 deraadt 717: <li>Correct URL handling in the install scripts.
1.68 sthen 718: <li>Limit the number of SCSI luns in <a href="http://man.openbsd.org/?query=umass&sektion=4">umass(4)</a>.
1.1 deraadt 719: <li>Page size fixes to the alpha port.
720: <li>Import ssh-ask-pass support for X11.
1.68 sthen 721: <li>Fix a signal race in <a href="http://man.openbsd.org/?query=ypserv&sektion=8">ypserv(8)</a> SIGHUP handling.
722: <li>Enable <a href="http://man.openbsd.org/?query=uaudio&sektion=4">uaudio(4)</a> by default in GENERIC/i386.
723: <li>Reserve all-1s addresses in the <a href="http://man.openbsd.org/?query=ipsec&sektion=4">IPsec</a> code for future policy discovery features.
1.12 pvalchev 724: <li>Resolve HMAC nomenclature issues.
1.68 sthen 725: <li>Be sure to clear passwords out of memory after use in <a href="http://man.openbsd.org/?query=ppp&sektion=8">ppp(8)</a>.
1.1 deraadt 726: <li>Support kernel event queues.
1.68 sthen 727: <li>Add support for USB scanners through the <a href="http://man.openbsd.org/?query=uscanner&sektion=4">uscanner(4)</a> driver.
728: <li>More fixes to <a href="http://man.openbsd.org/?query=qec&sektion=4&arch=sparc">qec(4)</a>.
1.1 deraadt 729: <li>Recognize newer AMD CPUs.
1.68 sthen 730: <li>Repair incorrect buffer size logic in <a href="http://man.openbsd.org/?query=telnetd&sektion=8">telnetd(8)</a>.
731: <li>Add a slew of devices to <a href="http://man.openbsd.org/?query=usbdevs&sektion=8">usbdevs(8)</a>.
732: <li>Do not use <a href="http://man.openbsd.org/?query=perror&sektion=3">perror(3)</a> in <a href="http://man.openbsd.org/?query=sshd&sektion=8">sshd(8)</a> after forking a child.
733: <li><font color="#e00000"><strong>RELIABILITY FIX: The <a href="http://man.openbsd.org/?query=qec&sektion=4&arch=sparc">qec</a>+<a href="http://man.openbsd.org/?query=qe&sektion=4&arch=sparc">qe</a> ethernet cards should not generate NMIs.</strong></font><br>
1.10 pvalchev 734: <a href="errata28.html#qe">A patch is available</a>.<br>
1.28 naddy 735: <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
1.68 sthen 736: <li>Add <a href="http://man.openbsd.org/?query=ifmedia&sektion=4">ifmedia(4)</a> support to <a href="http://man.openbsd.org/?query=qec&sektion=4&arch=sparc">qec(4)</a>, among other improvements.
737: <li>Extra sanity checking in <a href="http://man.openbsd.org/?query=skeyinit&sektion=1">skeyinit(1)</a>.
738: <li>Repair timeout computations in <a href="http://man.openbsd.org/?query=atapiscsi&sektion=4">atapiscsi(4)</a>.
1.1 deraadt 739: <li>Add initial support for DEC Alpha 21264 systems.
740: <li>Bring the alpha port a bit closer to a fully operational console.
741: <li>Support Accton EN2242 MiniPCI Ethernet adapters.
742: <li>Permit O_RDWR on FIFOs to handle legacy applications that depend on it.
1.68 sthen 743: <li>Add scrollback support to <a href="http://man.openbsd.org/?query=wscons&sektion=4">wscons(4)</a> through the <a href="http://man.openbsd.org/?query=vga&sektion=4">vga(4)</a> driver.
744: <li>Color change in <a href="http://man.openbsd.org/?query=wscons&sektion=4">wscons(4)</a> vt100 emulation to more closely imitate PCVT.
745: <li>Repair overriding of pseudo devices in <a href="http://man.openbsd.org/?query=config&sektion=8">config(8)</a><br>
746: <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
747: <li>Accept -inet and -inet6 as options for the show command in <a href="http://man.openbsd.org/?query=route&sektion=8">route(8)</a>.
748: <li>Don't reorder keys in <a href="http://man.openbsd.org/?query=ssh-agent&sektion=1">ssh-agent(1)</a> upon key removal.
749: <li>Avoid parsing options in <a href="http://man.openbsd.org/?query=ssh&sektion=1">ssh(1)</a> if there is an <a href="http://man.openbsd.org/?query=rsa&sektion=3">RSA</a> key mismatch.
750: <li>Various cleanups to <a href="http://man.openbsd.org/?query=ftpd&sektion=8">ftpd(8)</a>.
1.1 deraadt 751: <li>In many programs, sync usage() output with their respective man page SYNOPSIS.
1.68 sthen 752: <li><font color="#e00000"><strong>RELIABILITY FIX: The ThunderLAN driver, <a href="http://man.openbsd.org/?query=tl&sektion=4">tl(4)</a>, should not claim all interrupts.</strong></font><br>
1.10 pvalchev 753: <a href="errata28.html#tl">A patch is available</a>.<br>
1.28 naddy 754: <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
1.68 sthen 755: <li>In <a href="http://man.openbsd.org/?query=pciide&sektion=4">pciide(4)</a>, do not map unsafe registers from controllers that require 16-bit I/O space.
756: <li>Import new <a href="http://man.openbsd.org/?query=pckbc&sektion=4">pckbc(4)</a>, <a href="http://man.openbsd.org/?query=pckbd&sektion=4">pckbd(4)</a>, <a href="http://man.openbsd.org/?query=vga&sektion=4">vga(4)</a>, <a href="http://man.openbsd.org/?query=pcdisplay&sektion=4">pcdisplay(4)</a>, and ega(4) drivers for <a href="http://man.openbsd.org/?query=wscons&sektion=4">wscons(4)</a>.
757: <li>In <a href="http://man.openbsd.org/?query=ftpd&sektion=8">ftpd(8)</a>, assert check_login upon receipt of EPSV/LPSV.
758: <li>Make the <a href="http://man.openbsd.org/?query=aha&sektion=4">aha(4)</a> driver compile without UVM.
1.1 deraadt 759: <li>Enforce non-cacheable device space on real 80386 machines.
1.68 sthen 760: <li>Add <a href="http://man.openbsd.org/?query=rsa&sektion=3">RSA</a> authentication support for SSH2 to <a href="http://www.openssh.com/">OpenSSH</a>.
761: <li>Allow serial mice to work with <a href="http://man.openbsd.org/?query=moused&sektion=8">moused(8)</a> and XFree86 simultaneously.
762: <li>Repair an off-by-one error in <a href="http://man.openbsd.org/?query=ssh-agent&sektion=1">ssh-agent(1)</a>.
763: <li>Convert some old drivers to the new <a href="http://man.openbsd.org/?query=timeout&sektion=9">timeout(9)</a> interface.
1.28 naddy 764: <li><font color="#e00000"><strong>RELIABILITY FIX: repair AES (rijndael) kernel support.</strong></font><br>
1.10 pvalchev 765: <a href="errata28.html#rijndael">A patch is available</a>.<br>
1.28 naddy 766: <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
1.1 deraadt 767: <li>Import PCI support for Alpha EB164 machines.
768: <li>Add bus_space_barrier macros for the powerpc.
769: <li>Endian fixes to the USB code.
1.68 sthen 770: <li>Better command line parsing in <a href="http://man.openbsd.org/?query=encrypt&sektion=1">encrypt(1)</a>.
1.1 deraadt 771: <li>Numbering fixups in pfkeyv2 to match IANA assignments.
1.68 sthen 772: <li>Crank maximum mbuf size in <a href="http://man.openbsd.org/?query=ppp&sektion=8">ppp(8)</a> in order to handle full-sized HDLC frames.
773: <li>Improve handling of <a href="http://man.openbsd.org/?query=ip6&sektion=4">IPv6</a> Node Information Query packets for better specification conformance.
774: <li>Fix a panic induced by assigning lo0 an <a href="http://man.openbsd.org/?query=ip6&sektion=4">IPv6</a> alias.
775: <li><font color="#e00000"><strong>IMPLEMENTATION FIX: In <a href="http://man.openbsd.org/?query=sshd&sektion=8">sshd(8)</a>, fix skey support in SSH1 protocol.</strong></font><br>
1.10 pvalchev 776: <a href="errata28.html#sshskey">A patch is available</a>.<br>
1.28 naddy 777: <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
1.68 sthen 778: <li>Deprecate pltime=0 in <a href="http://man.openbsd.org/?query=ifconfig&sektion=8">ifconfig(8)</a>.
779: <li>Modifications to the <a href="http://man.openbsd.org/?query=ktrace&sektion=2">ktrace(2)</a> interface to reduce redundancy.
780: <li>Do not advertise dynamic/cloned routes in <a href="http://man.openbsd.org/?query=route6d&sektion=8">route6d(8)</a>.
781: <li>Allow <a href="http://man.openbsd.org/?query=ping6&sektion=8">ping6(8)</a> to send <a href="http://man.openbsd.org/?query=icmp6&sektion=4">ICMP6</a> packets smaller than 8 bytes.<br>
782: <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
783: <li>Correct free-before-reference bugs in <a href="http://man.openbsd.org/?query=rshd&sektion=8">rshd(8)</a> and <a href="http://man.openbsd.org/?query=rlogind&sektion=8">rlogind(8)</a>.
784: <li>Improve queue handling in <a href="http://man.openbsd.org/?query=gdt&sektion=4">gdt(4)</a>.
785: <li>New Adaptec FSA RAID driver called <a href="http://man.openbsd.org/?query=aac&sektion=4">aac(4)</a>.
786: <li>Fix DMA error problems in <a href="http://man.openbsd.org/?query=adw&sektion=4">adw(4)</a>.<br>
1.28 naddy 787: <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
1.1 deraadt 788: <li>If MANPS environment variable is set, the system will also build and install postscript manual pages into /usr/share/man/ps[1-9]/.
1.68 sthen 789: <li>In <a href="http://man.openbsd.org/?query=date&sektion=1">date(1)</a>, fix an off-by-one error which would happen when changing time over DST.
790: <li>Permit -Tps in <a href="http://man.openbsd.org/?query=nroff&sektion=1">nroff(1)</a>.
1.1 deraadt 791: <li>Make some pfkeyv2 interfaces conform to RFC 2367 numbering.
792: <li>New timeouts in a couple of network drivers.
1.68 sthen 793: <li>Prevent <a href="http://man.openbsd.org/?query=nfsd&sektion=8">nfsd(8)</a> from swapping out.
1.1 deraadt 794: <li>Use PHOLD/PRELE in various kernel components.
1.68 sthen 795: <li>Buffer overflow fix to <a href="http://man.openbsd.org/?query=telnet&sektion=1">telnet(1)</a>.
1.1 deraadt 796: <li>Many man page improvements.
1.68 sthen 797: <li>Permit handling more than 6 arguments in a <a href="http://man.openbsd.org/?query=hostname.if&sektion=5">hostname.if(5)</a> file.
798: <li>kcore handling in <a href="http://man.openbsd.org/?query=kvm&sektion=3">kvm(3)</a> for alpha.
799: <li>Update <a href="http://man.openbsd.org/?query=usb&sektion=4">usb(4)</a> code.
1.1 deraadt 800: <li>Update alpha architecture support. A snapshot will come out soon.
1.68 sthen 801: <li>In <a href="http://man.openbsd.org/?query=pchb&sektion=4">pchb(4)</a>, for Intel random devices, do not busy wait for data.
802: <li>Switch amiga to <a href="http://man.openbsd.org/?query=uvm&sektion=9">uvm(9)</a>.
1.1 deraadt 803: <li>Fix amiga pmap module submap allocations.
804: <li>Centralized netisr dispatching.
1.68 sthen 805: <li><a href="http://man.openbsd.org/?query=ppp&sektion=8">ppp(8)</a> updated.
806: <li>In <a href="http://man.openbsd.org/?query=aue&sektion=4">aue(4)</a>, fix multicast filter programming.
807: <li>Repair an uninitialized variable bug in <a href="http://man.openbsd.org/?query=ipsec&sektion=4">ipsec(4)</a> output.<br>
1.28 naddy 808: <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
1.68 sthen 809: <li>Add <a href="http://man.openbsd.org/?query=pcibios&sektion=4&arch=i386">pcibios(4)</a> interrupt setup support for AMD750 chipset.
810: <li><font color="#e00000"><strong>RELIABILITY FIX: In sparc <a href="http://man.openbsd.org/?query=zs&sektion=4&arch=sparc">zs(4)</a>, when using serial console, the interrupt routine was unable to distinguish it's own interrupts.</strong></font><br>
1.10 pvalchev 811: <a href="errata28.html#zsconsole">A patch is available</a>.<br>
1.28 naddy 812: <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
1.68 sthen 813: <li>Generate new hashkey every time a <a href="http://man.openbsd.org/?query=bridge&sektion=4">bridge(4)</a> is brought up.
814: <li>Change <a href="http://man.openbsd.org/?query=bridge&sektion=4">bridge(4)</a> code to use lower spl.
815: <li>Passive FTP support in <a href="http://man.openbsd.org/?query=lynx&sektion=1">lynx(1)</a>.
816: <li>In <a href="http://man.openbsd.org/?query=ssh&sektion=1">ssh(1)</a>, downgrade to SSH1.3 if server is SSH1.4.
817: <li>In <a href="http://man.openbsd.org/?query=sshd&sektion=8">sshd(8)</a>, do not disable rhosts(rsa) if server port greater 1024.
818: <li>In <a href="http://man.openbsd.org/?query=sshd&sektion=8">sshd(8)</a> Agent forwarding and -R support for SSH2 protocol.
819: <li><a href="http://man.openbsd.org/?query=ipsecadm&sektion=8">ipsecadm(8)</a> man page repairs.<br>
1.28 naddy 820: <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
1.1 deraadt 821: <li>In pfkeyv2, send the message to registered promiscuous listeners.<br>
1.28 naddy 822: <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
1.68 sthen 823: <li>Some minor <a href="http://man.openbsd.org/?query=bridge&sektion=4">bridge(4)</a> fixes.
824: <li><a href="http://man.openbsd.org/?query=ld.so&sektion=1">ld.so(1)</a> support for the pmax.
1.1 deraadt 825: <li>On powerpc, print out the size of the L2 cache size on G3 and G4 machines.
826: <li>2.8 release builds are running, but some of us are already working on post-release hacking.
827: </ul>
828: <p>
829:
830: </body>
831: </html>
![[BACK]](/icons/back.gif){kind=icon}
Return to plus29.html CVS log ![[TXT]](/icons/text.gif){kind=icon}
![[DIR]](/icons/dir.gif){kind=icon}
Up to [local] / www