Annotation of www/plus29.html, Revision 1.89
1.81 bentley 1: <!doctype html>
2: <html lang=en id=plus>
3: <meta charset=utf-8>
1.71 tj 4: <title>OpenBSD 2.9 Changelog</title>
1.53 schwarze 5: <meta name="description" content="OpenBSD 2.9 changes">
1.69 deraadt 6: <meta name="viewport" content="width=device-width, initial-scale=1">
7: <link rel="stylesheet" type="text/css" href="openbsd.css">
1.73 tb 8: <link rel="canonical" href="https://www.openbsd.org/plus29.html">
1.81 bentley 9: <style>
10: a[href="stable.html"] {
11: color: var(--green);
12: }
1.1 deraadt 13:
1.81 bentley 14: strong {
15: color: var(--red);
16: }
1.1 deraadt 17:
1.81 bentley 18: h3 {
19: color: var(--blue);
20: }
21:
22: p strong {
23: font-weight: normal;
24: }
25: </style>
26:
27: <h2 id=OpenBSD>
1.69 deraadt 28: <a href="index.html">
1.81 bentley 29: <i>Open</i><b>BSD</b></a>
30: 2.9 Changelog
1.71 tj 31: </h2>
1.28 naddy 32: <hr>
1.1 deraadt 33:
34: <p>
35: This is a partial list of the major machine independent changes
1.45 sobrado 36: (i.e., these are the changes people ask about most often). Machine
1.1 deraadt 37: specific changes have also been made, and are sometimes mentioned
38: in the pages for the specific <a href="plat.html">platforms</a>.
39:
40: <p>
1.81 bentley 41: Note: <strong>Problems for which patches exist are marked in red</strong>.
1.1 deraadt 42:
43: <p>
1.26 deraadt 44: For changes in other releases, click below:<br>
45: <a href="plus20.html">2.0</a>,
46: <a href="plus21.html">2.1</a>,
47: <a href="plus22.html">2.2</a>,
48: <a href="plus23.html">2.3</a>,
49: <a href="plus24.html">2.4</a>,
50: <a href="plus25.html">2.5</a>,
51: <a href="plus26.html">2.6</a>,
52: <a href="plus27.html">2.7</a>,
53: <a href="plus28.html">2.8</a>,
54: <a href="plus30.html">3.0</a>,
55: <a href="plus31.html">3.1</a>,
56: <a href="plus32.html">3.2</a>,
1.29 deraadt 57: <a href="plus33.html">3.3</a>,
1.31 david 58: <a href="plus34.html">3.4</a>,
1.33 deraadt 59: <a href="plus35.html">3.5</a>,
1.34 miod 60: <a href="plus36.html">3.6</a>,
1.59 deraadt 61: <a href="plus37.html">3.7</a>,
1.44 deraadt 62: <br>
1.37 deraadt 63: <a href="plus38.html">3.8</a>,
1.39 deraadt 64: <a href="plus39.html">3.9</a>,
1.40 deraadt 65: <a href="plus40.html">4.0</a>,
1.41 deraadt 66: <a href="plus41.html">4.1</a>,
1.42 deraadt 67: <a href="plus42.html">4.2</a>,
1.43 deraadt 68: <a href="plus43.html">4.3</a>,
1.44 deraadt 69: <a href="plus44.html">4.4</a>,
1.46 deraadt 70: <a href="plus45.html">4.5</a>,
1.47 deraadt 71: <a href="plus46.html">4.6</a>,
1.48 deraadt 72: <a href="plus47.html">4.7</a>,
1.49 deraadt 73: <a href="plus48.html">4.8</a>,
1.51 deraadt 74: <a href="plus49.html">4.9</a>,
1.52 nick 75: <a href="plus50.html">5.0</a>,
1.53 schwarze 76: <a href="plus51.html">5.1</a>,
1.54 nick 77: <a href="plus52.html">5.2</a>,
1.55 deraadt 78: <a href="plus53.html">5.3</a>,
1.56 deraadt 79: <a href="plus54.html">5.4</a>,
1.57 deraadt 80: <br>
1.59 deraadt 81: <a href="plus55.html">5.5</a>,
1.61 brett 82: <a href="plus56.html">5.6</a>,
1.62 deraadt 83: <a href="plus57.html">5.7</a>,
1.65 deraadt 84: <a href="plus58.html">5.8</a>,
1.66 deraadt 85: <a href="plus59.html">5.9</a>,
1.72 deraadt 86: <a href="plus60.html">6.0</a>,
1.75 deraadt 87: <a href="plus61.html">6.1</a>,
1.77 deraadt 88: <a href="plus62.html">6.2</a>,
1.78 deraadt 89: <a href="plus63.html">6.3</a>,
1.79 deraadt 90: <a href="plus64.html">6.4</a>,
1.80 pamela 91: <a href="plus65.html">6.5</a>,
1.83 pamela 92: <a href="plus66.html">6.6</a>,
1.84 deraadt 93: <a href="plus67.html">6.7</a>,
1.86 pamela 94: <a href="plus68.html">6.8</a>,
95: <a href="plus69.html">6.9</a>,
1.87 deraadt 96: <a href="plus70.html">7.0</a>,
1.89 ! deraadt 97: <a href="plus71.html">7.1</a>,
1.26 deraadt 98: <a href="plus.html">current</a>.
1.1 deraadt 99: <br>
100:
1.60 deraadt 101: <p>
1.81 bentley 102: <h3>Changes made between OpenBSD 2.8 and 2.9</h3>
1.60 deraadt 103: <p>
1.1 deraadt 104:
105: <ul>
1.81 bentley 106: <li><strong>SECURITY FIX: Avoid DoS attack in <a href="https://man.openbsd.org/ftpd.8">ftpd</a> using <a href="https://man.openbsd.org/glob.3">glob</a> patch.</strong><br>
1.10 pvalchev 107: <a href="errata28.html#glob_limit">A patch is available</a>.<br>
1.81 bentley 108: <a href="stable.html">[Applied to stable]</a>
1.1 deraadt 109: <li>...
1.81 bentley 110: <li><strong>SECURITY FIX: Fix <a href="https://man.openbsd.org/ipf.8">ipf(8)</a> fragment caching bug.</strong><br>
1.10 pvalchev 111: <a href="errata28.html#ipf_frag">A patch is available</a>.<br>
1.81 bentley 112: <a href="stable.html">[Applied to stable]</a>
1.1 deraadt 113: <li>...
1.81 bentley 114: <li><strong>SECURITY FIX: Fix buffer overflows contained in <a href="https://man.openbsd.org/glob.3">glob(3)</a> function.</strong><br>
1.10 pvalchev 115: <a href="errata28.html#glob">A patch is available</a>.<br>
1.81 bentley 116: <a href="stable.html">[Applied to stable]</a>
1.1 deraadt 117: <li>...
1.81 bentley 118: <li>Check for short packets and bad types sent to <a href="https://man.openbsd.org/timed.8">timed(8)</a>.<br>
119: <a href="stable.html">[Applied to stable]</a>
1.1 deraadt 120: <li>...
1.74 tb 121: <li><a href="https://www.openssh.com/">OpenSSH</a> 2.5.2 released.<br>
1.81 bentley 122: <a href="stable.html">[Applied to stable]</a>
1.1 deraadt 123: <li>...
1.81 bentley 124: <li><strong>SECURITY FIX: Be careful with file permissions in readline library</strong><br>
1.10 pvalchev 125: <a href="errata28.html#readline">A patch is available</a>.<br>
1.81 bentley 126: <a href="stable.html">[Applied to stable]</a>
1.1 deraadt 127: <li>...
128: <li>Make buffer size 8k on NE1000, and 16k otherwise for
1.81 bentley 129: <a href="https://man.openbsd.org/ne.4">ne</a>.<br>
130: <a href="stable.html">[Applied to stable]</a>
1.1 deraadt 131: <li>...
1.81 bentley 132: <li>Move bogus packet length test in udp packets to avoid being stuck at <a href="https://man.openbsd.org/splsoftnet.9">splsoftnet</a>.<br>
133: <a href="stable.html">[Applied to stable]</a>
1.1 deraadt 134: <li>...
1.81 bentley 135: <li><strong>SECURITY FIX: on i386, check arguments to USER_LDT (not enabled by default) mappings.</strong><br>
1.10 pvalchev 136: <a href="errata28.html#userldt">A patch is available</a>.<br>
1.81 bentley 137: <a href="stable.html">[Applied to stable]</a>
1.1 deraadt 138: <li>...
1.81 bentley 139: <li><strong>IMPLEMENTATION FIX: fix port number computation in libwrap client side ident implementation.</strong><br>
1.10 pvalchev 140: <a href="errata28.html#libwrap">A patch is available</a>.<br>
1.81 bentley 141: <a href="stable.html">[Applied to stable]</a>
1.1 deraadt 142: <li>...
1.4 millert 143: <li>Fix several copyin/copyout bugs in sys/compat.
144: <li>Provide a random start for tcp timestamps.
145: <li>Support sharing disks between MacOS and the PowerPC port.
1.81 bentley 146: <li>Add support for the SaramNcom NS-1100M in the <a href="https://man.openbsd.org/wi.4">wi(4)</a> driver.
147: <li>Fix support for the D-Link DE660 pcmcia card in <a href="https://man.openbsd.org/ne.4">ne(4)</a>
148: <li>In <a href="https://man.openbsd.org/sis.4">sis(4)</a> add support for reading the MAC address from the APC CMOS RAM in SiS630E-based chipsets.
149: <li>In <a href="https://man.openbsd.org/ne.4">ne(4)</a>, changes in media type initializion on DP8390-compatibles.
150: <li>Implement read/write access to an IEEE 802.3u <a href="https://man.openbsd.org/mii.4">mii(4)</a> bus using the bit-bang method.
1.4 millert 151: <li>Add support for DOZE mode on powerpc processors that support it.
1.81 bentley 152: <li>Add support for the Symbios 53c1010 in the <a href="https://man.openbsd.org/siop.4">siop(4)</a> driver.
153: <li>Implement <a href="https://man.openbsd.org/mincore.2">mincore(2)</a>, <a href="https://man.openbsd.org/mlockall.2">mlockall(2)</a> and <a href="https://man.openbsd.org/munlockall.2">munlockall(2)</a>.
154: <li>Added support for <a href="https://man.openbsd.org/ami.4">ami(4)</a> MegaRAID Controllers.
155: <li>Fixed several occurrences of exit(-#); <a href="https://man.openbsd.org/exit.3">exit(3)</a> only passes the lower 8 bits of status on to the parent.
1.12 pvalchev 156: <li>Fixed several occurrences of PATH_MAX+1 that should be PATH_MAX.
1.4 millert 157: <li>Fix interrupt handler registration on the mvme88k port, remove 68k-isms and add UKC support.
158: <li>Add some non-US encodings to the USB keyboard driver.
1.81 bentley 159: <li>Disable bogus file check in <a href="https://man.openbsd.org/cvs.1">cvs(1)</a>.<br>
160: <a href="stable.html">[Applied to stable]</a>
161: <li>Enable tag queuing and fix some wide/sync negotiation problems in the <a href="https://man.openbsd.org/siop.4">siop(4)</a> driver.
162: <li>Add support for <a href="https://man.openbsd.org/isapnp.4">isapnp(4)</a> i82365-based <a href="https://man.openbsd.org/pcmcia.4">pcmcia(4)</a> controllers.
1.4 millert 163: <li>Many man page fixes.
1.81 bentley 164: <li>Fix checksum calculations in <a href="https://man.openbsd.org/bridge.4">bridge(4)</a> setups.
165: <li>Avoid reading some AC97 registers in <a href="https://man.openbsd.org/neo.4">neo(4)</a> driver as needed by some devices.
1.4 millert 166: <li>Avoid a deadlock condition in the syncer.
1.81 bentley 167: <li><a href="https://man.openbsd.org/wscons.4">wscons(4)</a> support for powerpc adb keyboard.
168: <li>Plug many memory leaks in the libc <a href="https://man.openbsd.org/rpc.3">rpc(3)</a> code.
1.4 millert 169: <li>Drop packets with 127.0.0.0/8 in header field, if the packet is from outside. RFC1122 dictates that 127.0.0.8 must not appear on the wire.
1.81 bentley 170: <li>In <a href="https://man.openbsd.org/sudo.8">sudo(8)</a>, fix negation of path-type Defaults entries in a boolean context in <a href="https://man.openbsd.org/sudoers.5">sudoers(5)</a>.
1.4 millert 171: <li>Add open hashing functions to libc.
1.81 bentley 172: <li><a href="https://man.openbsd.org/fsck.8">fsck(8)</a> changes for soft updates support.
173: <li>Extend <a href="https://man.openbsd.org/kqueue.2">kqueue(2)</a> down to the device layer for better device support.
1.4 millert 174: <li>ncurses-5.2-20010224
1.81 bentley 175: <li>In the i386 <a href="https://man.openbsd.org/i386/bios.4">bios(4)</a> driver, add a check for ROMs mapped into memory and setup an extent for each one found. This fixes a problem with ISA cards using iomem space already claimed by a ROM.
176: <li>Update to <a href="https://man.openbsd.org/sendmail.8">sendmail(8)</a> 8.11.3 which fixes potential data loss if a machine crashes.
1.4 millert 177: <li>A number of filesystem races and locking problems have been fixed.
1.81 bentley 178: <li>In <a href="https://man.openbsd.org/ne.4">ne(4)</a>, add support for a D-Link DFE-650 model with a different vendor ID.
1.4 millert 179: <li>Improved stability with soft updates.
1.81 bentley 180: <li>WEP support for the <a href="https://man.openbsd.org/an.4">an(4)</a> Aironet driver.
181: <li>Default SSID in the <a href="https://man.openbsd.org/an.4">an(4)</a> Aironet driver; now it will connect to any SSID.
1.4 millert 182: <li>Better detection of the VAX VS4000/VLC and MV3100/{3,4}0.
183: <li>Improved S3 Savage X11 driver for XFree86 3.3.6.
1.81 bentley 184: <li>Add <a href="https://man.openbsd.org/mii.4">mii(4)</a> support to the <a href="https://man.openbsd.org/vr.4">vr(4)</a> Via Rhine network driver.
185: <li>Add support for the Dlink 530TX+ to the <a href="https://man.openbsd.org/rl.4">rl(4)</a> RealTek 8129/8139 network driver.
186: <li><strong>SECURITY FIX: for <a href="https://man.openbsd.org/ipsec.4">ipsec(4)</a>, handle AH packets with IP options more strictly.</strong><br>
1.10 pvalchev 187: <a href="errata28.html#ipsec_ah">A patch is available</a>.<br>
1.81 bentley 188: <a href="stable.html">[Applied to stable]</a>
1.2 aaron 189: <li>In the powerpc port, add edge/level sense detection capability to the interrupt controller.
1.81 bentley 190: <li>Add <a href="https://man.openbsd.org/uftdi.4">uftdi(4)</a> driver for the FTDI USB->Serial converter device.
1.2 aaron 191: <li>Tone down the verbosity levels in many SCSI drivers.
1.74 tb 192: <li><a href="https://www.openssh.com/">OpenSSH</a> 2.5.1 released.<br>
1.81 bentley 193: <a href="stable.html">[Applied to stable]</a>
194: <li>Fix DMA memory allocations in <a href="https://man.openbsd.org/twe.4">twe(4)</a>.
195: <li><strong>SECURITY FIX: update to <a href="https://man.openbsd.org/sudo.8">sudo</a>-1.6.3p6 which fixes a non-exploitable buffer overflow on very long argv components.</strong><br>
1.10 pvalchev 196: <a href="errata28.html#sudo">A patch is available</a>.<br>
1.81 bentley 197: <a href="stable.html">[Applied to stable]</a>
198: <li>Correctly detect Daylight Saving Time changes in <a href="https://man.openbsd.org/cron.8">cron(8)</a>.
199: <li>Add bash-like double-tab completion support to <a href="https://man.openbsd.org/ksh.1">ksh(1)</a>.
1.2 aaron 200: <li>Avoid losing RTC after suspend/resume on some laptops.
1.81 bentley 201: <li>Repair an integer conversion bug in <a href="https://man.openbsd.org/pms.4">pms(4)</a> which fixes the mouse resolution setting in X.
202: <li>Fix non-TCP protocol mappings in <a href="https://man.openbsd.org/ipnat.4">ipnat(4)</a>.
1.88 tj 203: <li>In <a href="https://man.openbsd.org/isakmpd.8">isakmpd(8)</a>, encode X.509 expirations into KeyNote credientials/policies.
1.81 bentley 204: <li>In <a href="https://man.openbsd.org/pppoe.8">pppoe(8)</a>, try every BPF device, not just even-numbered ones.
205: <li>Support -C flag in <a href="https://man.openbsd.org/nm.1">nm(1)</a>.
206: <li>Update ISC <a href="https://man.openbsd.org/cron.8">cron(8)</a> to 4.0b1, maintaining our local changes, including signal handling fixes.
207: <li>Rename old mvme68k and mvme88k <a href="https://man.openbsd.org/siop.4">siop(4)</a> driver to ssh(4) to avoid naming conflicts.
208: <li>Fix an uninitialized variable in <a href="https://man.openbsd.org/wsmouse.4">wsmouse(4)</a>.
1.2 aaron 209: <li>Some games fixes.
1.81 bentley 210: <li>Nuke <a href="https://man.openbsd.org/nlist.3">nlist(3)</a> and kvm(3) usage in <a href="https://man.openbsd.org/top.1">top(1)</a>.
211: <li>More careful buffer handling in <a href="https://man.openbsd.org/rusers.1">rusers(1)</a>.
212: <li>Add MII support to the <a href="https://man.openbsd.org/vr.4">vr(4)</a> driver.
213: <li>Several <a href="https://man.openbsd.org/ip6.4">IPv6(4)</a> improvements from KAME.
1.74 tb 214: <li><a href="https://www.openssh.com/">OpenSSH</a> 2.5.0 released.<br>
1.81 bentley 215: <a href="stable.html">[Applied to stable]</a>
1.2 aaron 216: <li>Sync many parts of the alpha port with NetBSD.
1.81 bentley 217: <li>Fix 64-bit issues with the <a href="https://man.openbsd.org/ip6.4">IPv6(4)</a> multicast API.
1.2 aaron 218: <li>Rewrite libwrap RFC931 support to avoid stdio issues with sockets.
219: <li>Many man page fixes.
1.81 bentley 220: <li>Pull in latest <a href="https://man.openbsd.org/faithd.8">faithd(8)</a> daemon from KAME.
221: <li>In <a href="https://man.openbsd.org/tcpdump.8">tcpdump(8)</a>, deobfuscate some IP protocols and improve <a href="https://man.openbsd.org/ipsec.4">IPsec(4)</a> tunnelmode printing.
222: <li>Set the offset for SCSI chain B properly in the VAX <a href="https://man.openbsd.org/ncr.4">ncr(4)</a> driver.
1.8 angelos 223: <li>Import XFree86 4.0.3.
1.81 bentley 224: <li>Long username fixes to <a href="https://man.openbsd.org/lpd.8">lpd(8)</a> and <a href="https://man.openbsd.org/lprm.1">lprm(1)</a>.
225: <li>Convert the powerpc port to <a href="https://man.openbsd.org/uvm.9">UVM(9)</a>.
226: <li>Import <a href="https://man.openbsd.org/siop.4">siop(4)</a>, a replacement for the <a href="https://man.openbsd.org/ncr.4">ncr(4)</a> SCSI driver.
1.1 deraadt 227: <li>Support more NE2000 PCMCIA devices.
228: <li>Avoid passing shared mbufs around the kernel to prevent accidental overwrites.
1.81 bentley 229: <li>Add <a href="https://man.openbsd.org/pcscp.4">pcscp(4)</a>, a driver which supports AMD Am53c974 SCSI controllers.
230: <li>Modify <a href="https://man.openbsd.org/sliplogin.8">sliplogin(8)</a> to handle long usernames.
231: <li>Allow X to work without <a href="https://man.openbsd.org/i386/pcvt.4">pcvt(4)</a>.
232: <li>Fix an authorizer removal problem in <a href="https://man.openbsd.org/keynote.3">keynote(3)</a>.
1.1 deraadt 233: <li>Deactivate function pointers upon interface detach to avoid crashes.
234: <li>Deal with the real time clock losing interrupts on i386.
235: <li>Bump maxusers to 32 in the alpha port.
1.81 bentley 236: <li>Avoid a theoretical buffer overflow in <a href="https://man.openbsd.org/getpwent.3">getpwent(3)</a>.
237: <li>Fix an uninitialized variable in <a href="https://man.openbsd.org/bsd.port.mk.5">bsd.port.mk(5)</a>.
238: <li>Disregard ospeed in <a href="https://man.openbsd.org/tetris.6">tetris(6)</a>.
239: <li>Modify <a href="https://man.openbsd.org/wall.1">wall(1)</a> to handle long usernames.
240: <li>Many <a href="https://man.openbsd.org/isp.4">isp(4)</a> SCSI driver improvements and updates.
241: <li>Fix goto-line 0 case in <a href="https://man.openbsd.org/mg.1">mg(1)</a>.
242: <li>Fix PermitRootLogin option in <a href="https://man.openbsd.org/ssh.1">ssh(1)</a>.
243: <li>In <a href="https://man.openbsd.org/brconfig.8">brconfig(8)</a>, skip empty lines in the rulefile.
1.1 deraadt 244: <li>Fix HTTP installs, which were broken for quite awhile.
245: <li>Repair statclock on mvme88k.
246: <li>Ensure softupdates is enabled before performing softupdates-specific operations.
1.81 bentley 247: <li>Define a <a href="https://man.openbsd.org/sendmail.8">sendmail(8)</a> variable to workaround broken name servers.
248: <li>Allow up to 12 virtual terminals in <a href="https://man.openbsd.org/wscons.4">wscons(4)</a>.
1.1 deraadt 249: <li>Correct VAX signal handling.
250: <li>Cleanup MAC support in SSH2.
251: <li>Support attachment of Cheetah devices to vsbus as well as ibus in the VAX port.
1.81 bentley 252: <li>Disable a bogus file check in <a href="https://man.openbsd.org/cvs.1">cvs(1)</a> to ease the pain of having replicated repositories.
253: <li>Ensure $RSH is set in the <a href="https://man.openbsd.org/rcmd.3">rcmd(3)</a> functions.
254: <li>String table fixes to <a href="https://man.openbsd.org/ddb.4">ddb(4)</a> and <a href="https://man.openbsd.org/modload.8">modload(8)</a>.
255: <li>Update <a href="https://man.openbsd.org/wscons.4">wscons(4)</a> code.
256: <li>Pull in fixes for potential buffer overflows in <a href="https://man.openbsd.org/xdm.1">xdm(1)</a>.
257: <li>Compatibility fixes to <a href="https://man.openbsd.org/tar.1">tar(1)</a>.
1.74 tb 258: <li>Many <a href="https://www.openssh.com/">OpenSSH</a> cleanups and improvements.
1.81 bentley 259: <li>New ELF symbol handling in <a href="https://man.openbsd.org/ddb.4">ddb(4)</a>.
260: <li>Enable <a href="https://man.openbsd.org/wscons.4">wscons</a> support in XFree86.
261: <li>Modify PCI power state for <a href="https://man.openbsd.org/clct.4">clct(4)</a> devices so they work after warm reboots.
262: <li>Repair BPF support in <a href="https://man.openbsd.org/gre.4">gre(4)</a>.
263: <li>Fix an uninitialized variable in <a href="https://man.openbsd.org/wsdisplay.4">wsdisplay(4)</a>.
264: <li>Fix file attribute passing in <a href="https://man.openbsd.org/sftp-server.8">sftp-server(8)</a>.
265: <li>Correct a memory usage error in <a href="https://man.openbsd.org/ssh-keyscan.1">ssh-keyscan(1)</a>.
1.1 deraadt 266: <li>Add support to the powerpc for loading the bootloader and kernel from an HFS filesystem.
1.81 bentley 267: <li>Better failure handling in <a href="https://man.openbsd.org/vr.4">vr(4)</a>.
268: <li>Add support to <a href="https://man.openbsd.org/dc.4">dc(4)</a> for parsing media blocks from Intel 21143 SROMs.
1.1 deraadt 269: <li>Strengthen SSH1 to make traffic analysis more difficult.
1.81 bentley 270: <li>Updates to <a href="https://man.openbsd.org/services.5">/etc/services</a> from IANA.
271: <li>In <a href="https://man.openbsd.org/ssh.1">ssh(1)</a>, enforce non-batch_mode if StrictHostKeyChecking is set to "ask".
1.1 deraadt 272: <li>Backport a buffer overflow fix from XFree86 4.0.2 to in-tree XFree 3.3.6.
1.74 tb 273: <li>Stricter prototypes, type fixes, and other cleanups in <a href="https://www.openssh.com/">OpenSSH</a>.
1.81 bentley 274: <li>Switch <a href="https://man.openbsd.org/ip6.4">IPv6</a> raw socket code from NRL to KAME.
1.1 deraadt 275: <li>Stricter checking in SSH2.
1.74 tb 276: <li><a href="https://www.openssh.com/">OpenSSH</a> 2.3.2 released.<br>
1.81 bentley 277: <a href="stable.html">[Applied to stable]</a>
278: <li>Implement an upper limit for <a href="https://man.openbsd.org/icmp6.4">icmp6(4)</a> redirects.
279: <li>Fix <a href="https://man.openbsd.org/rwhod.8">rwhod(8)</a> to work, and make debug code a flag option.
280: <li>Mark our tree such that we use <a href="https://man.openbsd.org/wscons.4">wscons(4)</a> as if it is vt220, instead of vt100.
281: <li>In <a href="https://man.openbsd.org/wscons.4">wscons(4)</a>, when scrolled back, if a new key is pressed, reset us to our previous location, as <a href="https://man.openbsd.org/i386/pcvt.4">pcvt(4)</a> used to do.
282: <li>Permit <a href="https://man.openbsd.org/sftp.1">sftp(1)</a> over SSH1 protocol.
283: <li>In <a href="https://man.openbsd.org/sftp.1">sftp(1)</a>, do not forward agent or X11 traffic.
284: <li>In <a href="https://man.openbsd.org/tar.1">tar(1)</a>, fix -T option and add support for -C option
285: <li>Honor TMPDIR variable in <a href="https://man.openbsd.org/tar.1">tar(1)</a>, <a href="https://man.openbsd.org/cpio.1">cpio(1)</a>, and <a href="https://man.openbsd.org/pax.1">pax(1)</a>.
286: <li><a href="https://man.openbsd.org/perl.1">perl(1)</a> patch CHANGE6214.
287: <li>New <a href="https://man.openbsd.org/route6d.8">route6d(8)</a>.
288: <li>Numerous more changes to <a href="https://man.openbsd.org/sftp-server.8">sftp-server(8)</a> and <a href="https://man.openbsd.org/sftp.1">sftp(1)</a>.
289: <li>Changes to <a href="https://man.openbsd.org/accept.2">accept(2)</a> to permit return of ECONNABORTED.
290: <li>Quieten <a href="https://man.openbsd.org/ip6.4">IPv6</a> DN message reporting by default.
291: <li>Improve xmalloc() and friends in <a href="https://man.openbsd.org/ssh.1">ssh(1)</a> code..
1.1 deraadt 292: <li>Remove dead architecture support from the tree.
1.81 bentley 293: <li>Remove support for #! from <a href="https://man.openbsd.org/syslogd.8">syslogd(8)</a>.
294: <li><a href="https://man.openbsd.org/cac.4">cac(4)</a> driver to support Compaq Smart ARRAY RAID controllers.
295: <li>Ignore blank lines in <a href="https://man.openbsd.org/hostname.if.5">hostname.if(5)</a> files.
296: <li>In <a href="https://man.openbsd.org/ssh.1">ssh(1)</a>, add -1 option to force protocol 1.
297: <li>Enable <a href="https://man.openbsd.org/sftp-server.8">sftp-server(8)</a> by default.
298: <li>Numerous bug fixes to <a href="https://man.openbsd.org/sftp-server.8">sftp-server(8)</a> and <a href="https://man.openbsd.org/sftp.1">sftp(1)</a>.
1.1 deraadt 299: <li>Make scsi work on the vaxstation 4000/90.
1.81 bentley 300: <li>Same for <a href="https://man.openbsd.org/tun.4">tun(4)</a>, <a href="https://man.openbsd.org/gif.4">gif(4)</a>, and others..
301: <li>Change <a href="https://man.openbsd.org/lo.4">lo(4)</a> initialization code so that boot -c pseudo-device editing code can affect it in the expected fashion.
302: <li>If kernel has <a href="https://man.openbsd.org/ddb.4">ddb(4)</a> support, add a ddb sub-command inside boot -c.
1.1 deraadt 303: <li>Teach the bridge to deal with ARP alignment in the presence of numerous previous layers...
1.81 bentley 304: <li>EtherIP support in <a href="https://man.openbsd.org/tcpdump.8">tcpdump(8)</a>.
305: <li>Fix a bug introduced a few weeks ago in <a href="https://man.openbsd.org/yppush.8">yppush(8)</a>.
1.1 deraadt 306: <li>A bit of a trawl through the source tree to please the alpha, since various problems occur in the absence of perfect weak symbols.
307: <li>libc_r works on the alpha now.
1.81 bentley 308: <li>Many new fixes to <a href="https://man.openbsd.org/sort.1">sort(1)</a>.
1.1 deraadt 309: <li>Teach config -e and boot -c about pseudo-devices.
1.81 bentley 310: <li>Fix <a href="https://man.openbsd.org/perl.1">perl(1)</a> h2ph scripts.
311: <li>More <a href="https://man.openbsd.org/bridge.4">bridge(4)</a> fixes for unicast learning.
312: <li>Add <a href="https://man.openbsd.org/sftp.1">sftp(1)</a> client.
313: <li>Fix an off-by-{1,2,4} error in i386_space_copy(). <a href="https://man.openbsd.org/wscons.4">wscons(4)</a> now works perfectly.
314: <li>More fixes to <a href="https://man.openbsd.org/rtadvd.8">rtadvd(8)</a>.
315: <li>Fix bugs in <a href="https://man.openbsd.org/atc.6">atc(6)</a>, <a href="https://man.openbsd.org/snake.6">snake(6)</a>, <a href="https://man.openbsd.org/battlestar.6">battlestar(6)</a>, <a href="https://man.openbsd.org/phantasia.6">phantasia(6)</a>, and <a href="https://man.openbsd.org/adventure.6">adventure(6)</a>.
1.1 deraadt 316: <li>Enable scrollback from USB keyboards.
1.81 bentley 317: <li>Numerous improvements in <a href="https://man.openbsd.org/ppp.8">ppp(8)</a>.
318: <li>At ELF <a href="https://man.openbsd.org/execve.2">execve(2)</a> time, check for the OpenBSD note first, so that native binaries run best.
1.1 deraadt 319: <li>Attempt to share crtbegin/crtend in ELF csu, including an OS note.
1.81 bentley 320: <li>Change powerpc <a href="https://man.openbsd.org/ld.so.1">ld.so(1)</a> so all architectures use DT_INIT for ctors/init.
1.1 deraadt 321: <li>Fix overlapping bus space copy operations on i386.
322: <li>Move EtherIP to version 3 (2 byte padded header).
1.81 bentley 323: <li>Art does battle with <a href="https://man.openbsd.org/ksyms.4">ksyms(4)</a>, gets wounded, but eventually wins.
324: <li>In <a href="https://man.openbsd.org/sshd.8">sshd(8)</a>, <a href="https://man.openbsd.org/otp-rmd160.1">S/Key</a> is now called ChallengeResponse.
1.1 deraadt 325: <li>Make ReverseMappingCheck optional in sshd_config.
326: <li>Mickey the madman goes on a new timeout crawl through pci and isa drivers.
1.81 bentley 327: <li>Fix <a href="https://man.openbsd.org/nlist.3">nlist(3)</a> emulation for cases where the ELF header does not exist; permits <a href="https://man.openbsd.org/ksyms.4">/dev/ksyms</a> to work on ELF machines.
328: <li>Emulate some new freebsd <a href="https://man.openbsd.org/signal.2">signal(2)</a> related things in <a href="https://man.openbsd.org/compat_freebsd.8">compat_freebsd(8)</a>.
329: <li>In <a href="https://man.openbsd.org/ip6.4">IPv6</a>, avoid panic when packet to nonexistent link-local address is issued.
330: <li><a href="https://man.openbsd.org/xl.4">xl(4)</a> no longer needs to whine about tx underruns.
331: <li>Fix ELF support for <a href="https://man.openbsd.org/compat_freebsd.8">compat_freebsd(8)</a>.
332: <li>Catch the alpha up to <a href="https://man.openbsd.org/wscons.4">wscons(4)</a> changes.
333: <li>Fix <a href="https://man.openbsd.org/wscons.4">wscons(4)</a> <a href="https://man.openbsd.org/wsmux.4">wsmux(4)</a> attachment.
1.1 deraadt 334: <li>Support mvme188 card in mvme88k port.
1.81 bentley 335: <li>If a <a href="https://man.openbsd.org/pccbb.4">pccbb(4)</a> bridge does not have the right voltages, assume it is dead. Permits single connector adapters to work.
336: <li>Fix some bugs in the <a href="https://man.openbsd.org/bridge.4">bridge(4)</a>, especially regarding <a href="https://man.openbsd.org/gif.4">gif(4)</a>.
337: <li><strong>IMPLEMENTATION FIX: fix memory allocation in the PCI LANCE ethernet driver, <a href="https://man.openbsd.org/i386/le.4">le(4)</a>.</strong><br>
1.10 pvalchev 338: <a href="errata28.html#lepci">A patch is available</a>.<br>
1.81 bentley 339: <a href="stable.html">[Applied to stable]</a>
340: <li>In <a href="https://man.openbsd.org/config.8">config(8)</a> -e and -u, do not write out a new kernel if nothing changed.
341: <li>Numerous fat <a href="https://man.openbsd.org/utmp.5">utmp(5)</a> changes to utilities.
342: <li>Move <a href="https://man.openbsd.org/utmp.5">utmp(5)</a> to large format.
343: <li>Fix some incorrect return values for <a href="https://man.openbsd.org/mmap.2">mmap(2)</a> functions.<br>
344: <a href="stable.html">[Applied to stable]</a>
345: <li>Make <a href="https://man.openbsd.org/top.1">top(1)</a> not setgid.
1.1 deraadt 346: <li>Update X11 to support the new i386 changes.
1.81 bentley 347: <li>Configure <a href="https://man.openbsd.org/wscons.4">wscons(4)</a> defaults to be what our users expect.
348: <li><a href="https://man.openbsd.org/i386/moused.8">moused(8)</a> is dead for now.
349: <li>Enable <a href="https://man.openbsd.org/uhci.4">uhci(4)</a> and <a href="https://man.openbsd.org/ohci.4">ohci(4)</a> devices by default in GENERIC.
350: <li>Range-check invalid .max fields in <a href="https://man.openbsd.org/inetd.8">inetd(8)</a>.
351: <li>Various post-merge <a href="https://man.openbsd.org/ipf.8">ipf(8)</a> fixes. Some previous fixes got removed and had to be put back in.
1.1 deraadt 352: <li>In ATAPI code, ignore PIOMODE errors.
353: <li>On many architectures, change console name to ttyC? instead of ttyE?.
1.81 bentley 354: <li>Add -U option to ELF <a href="https://man.openbsd.org/ldconfig.8">ldconfig(8)</a>.
355: <li>Move i386 to <a href="https://man.openbsd.org/wscons.4">wscons(4)</a>.
1.1 deraadt 356: <li>Re-org the alpha boot floppies.
357: <li>More improvements against the Bleichenbacher pkcs#1 attack.
1.81 bentley 358: <li>Fix more select overflow issues in <a href="https://man.openbsd.org/ssh.1">ssh(1)</a>.
1.1 deraadt 359: <li>gcc 2.95.3, test 2.
1.81 bentley 360: <li><a href="https://man.openbsd.org/ises.4">ises(4)</a>, start of a driver for the Pijnenburg PCC-ISES crypto chip. Does random entropy insertion.
1.1 deraadt 361: <li>Permit many compat system calls to match to the same native call (was not permitted before).
362: <li>A bunch of people are doing a kernel trawl to update drivers to new timeouts.
363: <li>Support boot -c on the sparc.
364: <li>Fix an early timeout bug in wdc/ata support, which caused problems with atapi tape drives.
365: <li>Niklas runs through the tree doing commits in an attempt to keep up with Todd's much higher commit count.
1.81 bentley 366: <li>Receive random numbers from <a href="https://man.openbsd.org/ubsec.4">ubsec(4)</a> cards.
1.1 deraadt 367: <li>Make wdc mode printing more portable, so that the powerpc can use it too.
1.81 bentley 368: <li><a href="https://man.openbsd.org/adb.4">adb(4)</a> drivers in powerpc port.
369: <li>New <a href="https://man.openbsd.org/upl.4">upl(4)</a> driver for Prolific PL2301/PL2302 USB host-to-host driver. This acts like a network device.
370: <li>Remove -Q flag from <a href="https://man.openbsd.org/sshd.8">sshd(8)</a>.
1.1 deraadt 371: <li>Change audio-driver interface so drivers can supply a minimum delta for mixer value changes.
372: <li><a
1.81 bentley 373: href="https://man.openbsd.org/usb.4">USB</a> sync.
374: <li><strong>SECURITY FIX: fix some buffer overflows in <a href="https://man.openbsd.org/named.8">named(8)</a>.</strong><br>
1.10 pvalchev 375: <a href="errata28.html#named">A patch is available</a>.<br>
1.81 bentley 376: <a href="stable.html">[Applied to stable]</a>
1.1 deraadt 377: <li>Support Cheetah vaxes.
1.81 bentley 378: <li>Improve <a href="https://man.openbsd.org/MAKEDEV.8">MAKEDEV(8)</a> manual pages on many architectures.
379: <li>Cause <a href="https://man.openbsd.org/pcibios.4">pcibios(4)</a> to route interrupts via the pci router at the time interrupts are established for each driver, not before.
380: <li>Optimize pcidevs, <a href="https://man.openbsd.org/usbdevs.8">usbdevs(8)</a>, and other tables in the kernel.
381: <li>Both <a href="https://man.openbsd.org/wi.4">wi(4)</a> and <a href="https://man.openbsd.org/awi.4">awi(4)</a> now support more models of cards.
382: <li><a href="https://man.openbsd.org/skey.1">skey(1)</a> SHA1 is supposed to be little endian.
383: <li>Improve <a href="https://man.openbsd.org/ping6.8">ping6(8)</a> signal handling further.
384: <li>Merge <a href="https://man.openbsd.org/isakmpd.8">isakmpd(8)</a> in. It is no longer separate.
385: <li>Many <a href="https://man.openbsd.org/ppp.8">ppp(8)</a> improvements.
1.1 deraadt 386: <li>Handle binary data in install floppy dmesg.
1.81 bentley 387: <li>Improve ELF handling of <a href="https://man.openbsd.org/nlist.3">nlist(3)</a>.
1.1 deraadt 388: <li>Print CPU speed in GHz if it is that fast.
1.36 david 389: <li>Detect Transmeta CPUs.
1.1 deraadt 390: <li>On powerpc, ensure that signal delivery fills in rval[1]; at least pthread was affected.
391: <li>Move powerpc to MACHINE_NEW_NONCONTIG.
1.81 bentley 392: <li>In <a href="https://man.openbsd.org/mg.1">mg(1)</a>, do not use <a href="https://man.openbsd.org/rename.2">rename(2)</a> on the ~ file; make a new copy so that <a href="https://man.openbsd.org/vipw.8">vipw(8)</a> and <a href="https://man.openbsd.org/crontab.1">crontab(1)</a> do the right thing.
1.1 deraadt 393: <li>Tweak alpha so it sends SIGBUS for unaligned access, and does NOT do a fixup. This encourages people to fix their code.
394: <li>KGDB support for the i386.
395: <li>Pack alpha definition of infinity properly, other architectures too.
1.36 david 396: <li>Recognize Intel P4 CPU.
1.1 deraadt 397: <li>Various space optimizations for alpha boot floppies.
398: <li>Fix CF wdc, which was broken for a while.
1.81 bentley 399: <li>Add "enable" keyword in <a href="https://man.openbsd.org/config.8">config(8)</a> files.
1.1 deraadt 400: <li>Merge and simplify emulation directory handling code.
1.81 bentley 401: <li>Support Initio INI-91xx cards via new <a href="https://man.openbsd.org/iha.4">iha(4)</a> driver.
402: <li>In <a href="https://man.openbsd.org/accept.2">accept(2)</a>, when peer disconnects before accept is issued, do not return junk in mbuf by setting length to 0.
1.1 deraadt 403: <li>Support Hardware RNG on i850 and i860 hubs.
1.81 bentley 404: <li>Fix <a href="https://man.openbsd.org/sysctl.3">sysctl(3)</a> so that you can clear a string with it.
405: <li>In <a href="https://man.openbsd.org/sshd.8">sshd(8)</a>, rename "skey" to "challenge response", since this mechanism is now more flexible.
1.1 deraadt 406: <li>Reduce how long we wait for scsi devices to come ready; 50 seconds is enough.
1.81 bentley 407: <li><a href="https://man.openbsd.org/i386/pcvt.4">pcvt(4)</a> keyboard LED update lockup patch.
1.1 deraadt 408: <li>ncurses-5.2-20010114
1.81 bentley 409: <li>Fix many more <a href="https://man.openbsd.org/sshd.8">sshd(8)</a> memory leaks.
410: <li>Fix memory leak in <a href="https://man.openbsd.org/isakmpd.8">isakmpd(8)</a>.
411: <li>In <a href="https://man.openbsd.org/timed.8">timed(8)</a>, do not accept packets with an unterminated hostname.<br>
412: <a href="stable.html">[Applied to stable]</a>
1.1 deraadt 413: <li>Alias map bios rom at both real address and it's own zero-relative address, because bios roms contain bugs.
1.81 bentley 414: <li>In <a href="https://man.openbsd.org/rtadvd.8">rtadvd(8)</a>, sync router renumbering flag bit to conform to 2292bis-02 and RR RFC.
415: <li>Get rid of -R flag in <a href="https://man.openbsd.org/ssh-keygen.1">ssh-keygen(1)</a>.
416: <li>Avoid memory leak in <a href="https://man.openbsd.org/ndp.8">ndp(8)</a>.
417: <li>Establish <a href="https://man.openbsd.org/pccbb.4">pccbb(4)</a>, <a href="https://man.openbsd.org/ohci.4">ohci(4)</a>, and <a href="https://man.openbsd.org/uhci.4">uhci(4)</a> interrupt handler much earlier, because of coming <a href="https://man.openbsd.org/pcibios.4">pcibios(4)</a> changes.
418: <li>Numerous small fixes to <a href="https://man.openbsd.org/sshd.8">sshd(8)</a> and friends.
419: <li>In <a href="https://man.openbsd.org/ssh.1">ssh(1)</a>, fix SIGSEGV for -o "".
1.1 deraadt 420: <li>On i386, validate gate targets.
421: <li>The easy delete key always returns ^?, while the more difficult one returns ^H.
422: <li>Incorporate a set of post-4.4BSD changes to the kernel routing code.
423: <li>Support more than 256MB of ram on powerpc.
424: <li>Be more careful with assuming with VIA chips can handle U66.
1.81 bentley 425: <li>Document better how code using <a href="https://man.openbsd.org/sigblock.3">sigblock(3)</a> and <a href="https://man.openbsd.org/sigsetmask.3">sigsetmask(3)</a> would be converted to use <a href="https://man.openbsd.org/sigprocmask.2">sigprocmask(2)</a>.
426: <li>Get <a href="https://man.openbsd.org/sshd.8">sshd(8)</a> ready for auth-login.
427: <li>In <a href="https://man.openbsd.org/ifconfig.8">ifconfig(8)</a>, permit prefixlen to work against ipv4 addresses.
428: <li>Change <a href="https://man.openbsd.org/savecore.8">savecore(8)</a> to deal with machines dumping 1GB or more..
1.1 deraadt 429: <li>Attempt to deal with inverted signal races in terminal handlers better, throughout the source tree -- ie. main code is deep inside stdio, signal handler calls exit().
1.81 bentley 430: <li>Document rules that apply to signal handlers in <a href="https://man.openbsd.org/signal.3">signal(3)</a> and <a href="https://man.openbsd.org/sigaction.2">sigaction(2)</a>.
1.1 deraadt 431: <li>ipf 3.4.15
1.81 bentley 432: <li>Fix a <a href="https://man.openbsd.org/vi.1">vi(1)</a> crash.
433: <li><strong>SECURITY FIX: The <a href="https://man.openbsd.org/random.4">rnd(4)</a> device does not use all of its input when data is written to it.</strong><br>
1.10 pvalchev 434: <a href="errata28.html#rnd">A patch is available</a>.<br>
1.81 bentley 435: <a href="stable.html">[Applied to stable]</a>
436: <li>Fix C sequence point issues in <a href="https://man.openbsd.org/dd.1">dd(1)</a>, <a href="https://man.openbsd.org/monop.6">monop(6)</a>, <a href="https://man.openbsd.org/tail.1">tail(1)</a>, and <a href="https://man.openbsd.org/rbootd.8">rbootd(8)</a>.
437: <li>Fix previous <a href="https://man.openbsd.org/inetd.8">inetd(8)</a> fix.
438: <li>Fix signal handler race in <a href="https://man.openbsd.org/apmd.8">apmd(8)</a>, <a href="https://man.openbsd.org/bootpd.8">bootpd(8)</a>, <a href="https://man.openbsd.org/syslogd.8">syslogd(8)</a>.
439: <li>Constrain <a href="https://man.openbsd.org/isp.4">isp(4)</a> openings to 128, since the vendor code lies, cheats, steals, and makes us cry.
440: <li>Fully support SSH2 RSA keys in <a href="https://man.openbsd.org/sshd.8">sshd(8)</a>.
1.1 deraadt 441: <li>Change alpha bootblocks to ELF.
1.81 bentley 442: <li>Fix fd_set overflows and signal races in <a href="https://man.openbsd.org/pppoe.1">pppoe(1)</a>.
1.1 deraadt 443: <li>Important pthread fix.
1.81 bentley 444: <li>Large block of documentation and functionality changes to <a href="https://man.openbsd.org/mail.1">mail(1)</a>.
445: <li>fd_set overflow fix to <a href="https://man.openbsd.org/routed.8">routed(8)</a>.
446: <li>Signal handler fix to <a href="https://man.openbsd.org/newfs.1">newfs(1)</a>.
447: <li>Cleanup various signal races and buffer overflows in <a href="https://man.openbsd.org/ed.1">ed(1)</a>.
448: <li>Fix signal race in <a href="https://man.openbsd.org/mountd.8">mountd(8)</a> by writing our own svc_run() routine.
449: <li>Fix uninitialized variable bug in <a href="https://man.openbsd.org/config.8">config(8)</a> UKC code that ignored first command sometimes.
450: <li>Various changes ensure that all known <a href="https://man.openbsd.org/le.4">le(4)</a> cards now work on sun4, sun4c, and sun4m machines.
1.1 deraadt 451: <li>Tweak subr_extent code with respect to boundary cases.
1.81 bentley 452: <li><a href="https://man.openbsd.org/sftp-server.8">sftp-server(8)</a> draft came out; convert our <a href="https://man.openbsd.org/sftp-server.8">sftp-server(8)</a> to be compliant.
1.1 deraadt 453: <li>sendmail 8.11.2
1.81 bentley 454: <li>Signal race fixes to <a href="https://man.openbsd.org/fsck_ffs.8">fsck_ffs(8)</a>, <a href="https://man.openbsd.org/rcp.1">rcp(1)</a>, <a href="https://man.openbsd.org/slattach.8">slattach(8)</a>, <a href="https://man.openbsd.org/shutdown.8">shutdown(8)</a>.
1.1 deraadt 455: <li>Change asm and volatile to __asm__ and __volatile__ in any file which might be compiled using -ansi -pedantic or similar.
1.81 bentley 456: <li>Some signal handler cleanup in <a href="https://man.openbsd.org/rcp.1">rcp(1)</a>.
457: <li>Cleanup timeout code in <a href="https://man.openbsd.org/adw.4">adw(4)</a>.
1.1 deraadt 458: <li>Numerous alpha catchups.
1.81 bentley 459: <li>New <a href="https://man.openbsd.org/rtadvd.8">rtadvd(8)</a> code.
460: <li>Compute UDP checksum in <a href="https://man.openbsd.org/dhcpd.8">dhcpd(8)</a>.
461: <li>Move mvme88k to <a href="https://man.openbsd.org/uvm.9">UVM(9)</a>.
462: <li><a href="https://man.openbsd.org/clct.4">clct(4)</a> driver for Cirrus Logic CS4281 sound chips.
463: <li>Support {Allow,Deny}Groups in <a href="https://man.openbsd.org/sshd.8">sshd(8)</a>.
464: <li><a href="https://man.openbsd.org/sshd.8">sshd(8)</a> SSH2 protocol support for keepalives, IPTOS_LOWDELAY, TCP_NODELAY, and IPTOS_THROUGHPUT.
465: <li>Add <a href="https://man.openbsd.org/kerberos.1">kerberos(1)</a> password handling in <a href="https://man.openbsd.org/sshd.8">sshd(8)</a> for kerberosIV.
466: <li>More memory leak fixes to <a href="https://man.openbsd.org/sshd.8">sshd(8)</a> and <a href="https://man.openbsd.org/ssh.1">ssh(1)</a>.
467: <li>Tweak <a href="https://man.openbsd.org/strlcat.3">strlcat(3)</a> to not crash for a certain "illegal pointers, length 0" situation.
468: <li>Clarify <a href="https://man.openbsd.org/setjmp.3">setjmp(3)</a> variants in the manual pages.
469: <li>Correct fd_set and signals in <a href="https://man.openbsd.org/ping6.8">ping6(8)</a>.
470: <li>Un-race three signal handlers, and fix select overflows in <a href="https://man.openbsd.org/inetd.8">inetd(8)</a>.
471: <li>Fix signal race in <a href="https://man.openbsd.org/route6d.8">route6d(8)</a>.
1.1 deraadt 472: <li>Move mvme88k to MACHINE_NEW_NONCONTIG.
1.81 bentley 473: <li>Fix signal races in <a href="https://man.openbsd.org/rwhod.8">rwhod(8)</a>.
474: <li>Fix fd_set overflow in <a href="https://man.openbsd.org/yppush.8">yppush(8)</a>.
475: <li>Fix closedown stub generated and hand-whacked by <a href="https://man.openbsd.org/rpcgen.1">rpcgen(1)</a> in <a href="https://man.openbsd.org/ypserv.8">ypserv(8)</a>.
476: <li>Audio driver for most ESS <a href="https://man.openbsd.org/maestro.8">maestro(8)</a> models.
477: <li>Signal race repairs in <a href="https://man.openbsd.org/talkd.8">talkd(8)</a> and <a href="https://man.openbsd.org/comsat.8">comsat(8)</a>.
478: <li>Fix select overflow in <a href="https://man.openbsd.org/ssh-agent.1">ssh-agent(1)</a>.
479: <li>Fix <a href="https://man.openbsd.org/rpcgen.1">rpcgen(1)</a> to deal with large fd_set.
1.1 deraadt 480: <li>Document various signal races in the source tree which are very difficult to fix, or which turn out to be safe even if they look flawed.
1.81 bentley 481: <li>Rename <a href="https://man.openbsd.org/ich.4">ich(4)</a> to <a href="https://man.openbsd.org/auich.4">auich(4)</a>.
482: <li>Cleanup the <a href="https://man.openbsd.org/sftp-server.8">sftp-server(8)</a> implementation.
483: <li>Support !command feature in <a href="https://man.openbsd.org/bridgename.if.5">bridgename.if(5)</a> files as well.
484: <li>Numerous other small changes to <a href="https://man.openbsd.org/isakmpd.8">isakmpd(8)</a>.
485: <li>Handle memory failures in <a href="https://man.openbsd.org/passwd.1">passwd(1)</a>.
486: <li>In <a href="https://man.openbsd.org/finger.1">finger(1)</a>, fail nicely if memory allocation fails.
487: <li>Handle DELETE payloads in <a href="https://man.openbsd.org/isakmpd.8">isakmpd(8)</a>.
488: <li>Remove signal races from <a href="https://man.openbsd.org/sshd.8">sshd(8)</a>.
489: <li>Ease support for road-warrior scenarios in <a href="https://man.openbsd.org/isakmpd.8">isakmpd(8)</a>, by intuiting the Local-ID when possible.
1.1 deraadt 490: <li>Change 802.11 DS drivers to operate in BSS mode by default.
1.81 bentley 491: <li>Create links for <a href="https://man.openbsd.org/FD_SET.3">FD_SET(3)</a> and such to point to the <a href="https://man.openbsd.org/select.2">select(2)</a> page.
492: <li>Support TCP_NDELAY on <a href="https://man.openbsd.org/ip6.4">ipv6(4)</a> in <a href="https://man.openbsd.org/ssh.1">ssh(1)</a>.
1.1 deraadt 493: <li>Numerous spelling error corrections in the system.
494: <li>Various other calendar updates.
1.81 bentley 495: <li>Ensure replydirname in <a href="https://man.openbsd.org/ftpd.8">ftpd(8)</a> does not ever truncate names.
496: <li>Ensure <a href="https://man.openbsd.org/ftpd.8">ftpd(8)</a> does not sometimes return a stray " at the end of a string.
497: <li>Various large updates to <a href="https://man.openbsd.org/isp.4">isp(4)</a>.
498: <li>In <a href="https://man.openbsd.org/restore.8">restore(8)</a>, do not skip TS_BITS or TS_CLRI are set.
1.1 deraadt 499: <li>Change our own custom EtherIP protocol to the standard one (which is very badly designed, but we are trying to get them to fix that).
500: <li>Fix KerberosIV code to build better if src and obj are in strange places.
1.81 bentley 501: <li>Support Banner option in <a href="https://man.openbsd.org/sshd.8">sshd(8)</a>.
1.1 deraadt 502: <li>Make the openssh-p effort a bit easier by merging some simpler portability hacks.
1.81 bentley 503: <li>Various missing <a href="https://man.openbsd.org/free.3">free(3)</a> calls repaired in <a href="https://man.openbsd.org/ssh.1">ssh(1)</a>.
1.1 deraadt 504: <li>Attempt to support cardbus 3CXFEM656C 56k Global modem.
1.81 bentley 505: <li>In <a href="https://man.openbsd.org/pciide.4">pciide(4)</a>, support U100 on ICH2, U66 on Via Apollo, and other repairs to Promise.
1.1 deraadt 506: <li>Spelling changes to calendar files.
1.81 bentley 507: <li>Be more careful with <a href="https://man.openbsd.org/stat.2">stat(2)</a> handling in <a href="https://man.openbsd.org/mv.1">mv(1)</a>.
508: <li>Fix %p handling in <a href="https://man.openbsd.org/strptime.3">strptime(3)</a>.
509: <li>Fix various buffer overflows and other fixes in <a href="https://man.openbsd.org/indent.1">indent(1)</a>.
510: <li>Do not spit out <a href="https://man.openbsd.org/icmp6.4">icmp6</a> checksum messages if not a debug kernel.
1.1 deraadt 511:
512: <li>Permit stripped VAX kernels to load despite unexpected values from libsa.
1.81 bentley 513: <li>Simplify locking and a few more fixes to <a href="https://man.openbsd.org/twe.4">twe(4)</a>.
1.1 deraadt 514: <li>Plug some memory leaks in OpenSSH.
1.81 bentley 515: <li>Fix -P in <a href="https://man.openbsd.org/ftpd.8">ftpd(8)</a>.
1.1 deraadt 516: <li>Emulation fixes to the VAX code.
1.81 bentley 517: <li>Protect bits of <a href="https://man.openbsd.org/dhclient.8">dhclient(8)</a> with a locking mechanism to prevent multiple instances from using the leases file simultaneously.
518: <li>Fix 3 cases in <a href="https://man.openbsd.org/mv.1">mv(1)</a> relating to the moving of symlinks across filesystems.
519: <li>In <a href="https://man.openbsd.org/ftpd.8">ftpd(8)</a>, expand the tilde character in ftp-dir login.conf variable.
520: <li>Prohibit binding to an anycast, notready, or detached <a href="https://man.openbsd.org/ip6.4">IPv6</a> address.
521: <li>Rename <a href="https://man.openbsd.org/fsinfo.8">fsinfo(8)</a> to xfsinfo in X11 to avoid naming conflict.
522: <li>Set the correct pfkeyv2 direction for KAME SPD entries in <a href="https://man.openbsd.org/isakmpd.8">isakmpd(8)</a>.
523: <li>Save and restore errno properly in <a href="https://man.openbsd.org/flex.1">flex(1)</a> since it may be whacked by <a href="https://man.openbsd.org/isatty.3">isatty(3)</a>.
524: <li>Fix sending/receiving passwords in <a href="https://man.openbsd.org/routed.8">routed(8)</a>.
525: <li>Add an i386-specific <a href="https://man.openbsd.org/sysctl.3">sysctl(3)</a> that modifies halt -p processing in APM to deal with some quirky machines.
1.1 deraadt 526: <li>More sun3 fixes, mostly to conform better to other m68k architecture code.
1.81 bentley 527: <li>Handle login banners better in SSH2 instances of <a href="https://man.openbsd.org/ssh.1">ssh(1)</a>.
1.1 deraadt 528: <li>Various spelling and grammar fixes across the tree.
1.81 bentley 529: <li>Use new <a href="https://man.openbsd.org/sysctl.3">sysctl(3)</a> interface for kernel memory bucket statistics and clock information.
530: <li>Correctly check for empty <a href="https://man.openbsd.org/mailq.1">mailq(1)</a> in /etc/daily.
1.1 deraadt 531: <li>Y2K fix in the mvme68k NVRAM code.
1.81 bentley 532: <li>Extend <a href="https://man.openbsd.org/sysctl.3">sysctl(3)</a> to support quad values.
533: <li>Improve SMB packet printing in <a href="https://man.openbsd.org/tcpdump.8">tcpdump(8)</a>.
1.1 deraadt 534: <li>Add common pidfile-writing code to DHCP so each program doesn't need to roll its own.
1.81 bentley 535: <li>To please <a href="https://man.openbsd.org/cap_mkdb.1">cap_mkdb(1)</a>, make it an error to open a zero-length file for read-only access in <a href="https://man.openbsd.org/hash.3">hash(3)</a>.
1.1 deraadt 536: <li>Some sun3 architecture fixes.
1.81 bentley 537: <li>Ignore environment variables in <a href="https://man.openbsd.org/ssl.8">libssl</a> if we're running <a href="https://man.openbsd.org/issetugid.2">setugid</a>.
538: <li>In <a href="https://man.openbsd.org/ssh.1">ssh(1)</a>, log the remote IP address on disconnect.
539: <li>Check for memory allocation failure in <a href="https://man.openbsd.org/vmstat.8">vmstat(8)</a>.
540: <li>Fix a buffer overflow in <a href="https://man.openbsd.org/fsinfo.8">fsinfo(8)</a>.
541: <li>Handle another special case in <a href="https://man.openbsd.org/i386/apm.4">apm(4)</a>.
542: <li>Fix a panic in the <a href="https://man.openbsd.org/raid.4">RAIDframe</a> locking management code.
543: <li>Add setpid command to <a href="https://man.openbsd.org/i386/fdisk.8">fdisk(8)</a> for setting the partition ID.
544: <li>Change <a href="https://man.openbsd.org/bridge.4">bridge(4)</a> to use gif* instead of enc*.
545: <li>Set SO_REUSEPORT socket option in <a href="https://man.openbsd.org/dhcp.8">DHCP</a> code, so multiple dhclients work.
546: <li>Allow printing of 8-bit ASCII characters in <a href="https://man.openbsd.org/talk.1">talk(1)</a> through an option.
547: <li>Do not perform getnetbyname() in <a href="https://man.openbsd.org/mountd.8">mountd(8)</a> if the address is already in dot-notation.
548: <li>In <a href="https://man.openbsd.org/ftpd.8">ftpd(8)</a>, log the actual number of bytes transferred instead of the original file size.
1.1 deraadt 549: <li>Fix ^C in termtype prompt.
1.81 bentley 550: <li>Prevent <a href="https://man.openbsd.org/fsck_ffs.8">fsck_ffs(8)</a> from marking a filesystem clean if <a href="https://man.openbsd.org/fsck.8">fsck(8)</a> needs to be rerun.
551: <li>Resolve scheduling conflict in <a href="https://man.openbsd.org/newsyslog.8">newsyslog(8)</a>.
552: <li>In <a href="https://man.openbsd.org/dhclient.8">dhclient(8)</a>, set a reasonable default lease time if the server does not provide one.
553: <li>Suppress uninteresting PCI bus error messages in <a href="https://man.openbsd.org/ahc.4">ahc(4)</a>.
554: <li>Add m88k support to <a href="https://man.openbsd.org/gprof.1">gprof(1)</a>.
555: <li>Add HostKeyAlias option to <a href="https://man.openbsd.org/ssh.1">ssh(1)</a>.
556: <li>Behave nicely with fixed-rate codecs in <a href="https://man.openbsd.org/auvia.4">auvia(4)</a>.
557: <li>Fix a minor off-by-one error in <a href="https://man.openbsd.org/gprof.1">gprof(1)</a>.
1.1 deraadt 558: <li>In the ports infrastructure, take the old non-fake code out-of-line.
1.81 bentley 559: <li>Repair a disgusting <a href="https://man.openbsd.org/rwhod.8">rwhod(8)</a> crash.
560: <li>Fix buffer overflow in <a href="https://man.openbsd.org/csh.1">csh(1)</a> builtin <a href="https://man.openbsd.org/printf.1">printf(1)</a> implementation.
561: <li>Convert <a href="https://man.openbsd.org/atoi.3">atoi(3)</a> to <a href="https://man.openbsd.org/strtoul.3">strtoul(3)</a> in <a href="https://man.openbsd.org/top.1">top(1)</a>.
1.1 deraadt 562: <li>Emulate Linux truncate64, stat64, lstat64, and fstat64 syscalls.
1.81 bentley 563: <li>Revoke root privileges earlier in <a href="https://man.openbsd.org/ping6.8">ping6(8)</a> and <a href="https://man.openbsd.org/traceroute6.8">traceroute6(8)</a>.<br>
564: <a href="stable.html">[Applied to stable]</a>
1.1 deraadt 565: <li>Many man page fixes.
1.81 bentley 566: <li>Use <a href="https://man.openbsd.org/arc4random.3">arc4random(3)</a> in <a href="https://man.openbsd.org/jot.1">jot(1)</a>.
567: <li>Handle quotas over 4GB in <a href="https://man.openbsd.org/edquota.8">edquota(8)</a> and <a href="https://man.openbsd.org/repquota.8">repquota(8)</a>.
568: <li>Fix <a href="https://man.openbsd.org/ip6.4">IPv6</a> Path MTU Discovery.
569: <li>Give up euid more carefully in <a href="https://man.openbsd.org/mrinfo.8">mrinfo(8)</a> and <a href="https://man.openbsd.org/mtrace.8">mtrace(8)</a>.
1.1 deraadt 570: <li>Various OpenSSH fixes.
571: <li>Add support for ActivCard, CRYPTOCard, and SNK-004 authentication for the BSD authentication framework.
1.81 bentley 572: <li>In <a href="https://man.openbsd.org/ksh.1">ksh(1)</a>, remain in non-blocking mode if the shell is not interactive.
573: <li><strong>SECURITY FIX: xlock now authenticates via a pipe.</strong><br>
1.10 pvalchev 574: <a href="errata28.html#xlock">A patch is available</a>.<br>
1.81 bentley 575: <a href="stable.html">[Applied to stable]</a>
576: <li><strong>IMPLEMENTATION FIX: PS/2 mouse driver, <a href="https://man.openbsd.org/i386/pms.4">pms</a>, lockup fix.</strong><br>
1.10 pvalchev 577: <a href="errata28.html#pms">A patch is available</a>.<br>
1.81 bentley 578: <a href="stable.html">[Applied to stable]</a>
579: <li>Implement a workaround in <a href="https://man.openbsd.org/atapiscsi.4">atapiscsi(4)</a> for buggy Toshiba drivers.
580: <li><strong>SECURITY FIX: Fix holes in <a href="https://man.openbsd.org/mount_procfs.8">procfs(8)</a>.</strong><br>
1.10 pvalchev 581: <a href="errata28.html#procfs">A patch is available</a>.<br>
1.81 bentley 582: <a href="stable.html">[Applied to stable]</a>
583: <li>Put <a href="https://man.openbsd.org/strlcat.3">strlcat(3)</a> and <a href="https://man.openbsd.org/strlcpy.3">strlcpy(3)</a> into libkern for kernel use.
584: <li>Fix setting of nwid for <a href="https://man.openbsd.org/wi.4">wi(4)</a>.<br>
585: <a href="stable.html">[Applied to stable]</a>
1.1 deraadt 586: <li>Change /etc/security to spit out unified diffs.
1.81 bentley 587: <li>Add driver for Compaq SMART Array RAID controllers, <a href="https://man.openbsd.org/cac.4">cac(4)</a>.
588: <li>Extend the i386 allowaperture <a href="https://man.openbsd.org/sysctl.3">sysctl(3)</a> to allow access to the whole 1st MB of memory.
1.1 deraadt 589: <li>Add some more sanity checking to the PCMCIA code to fix some obscure panics.
590: <li>Import Apache 1.3.14 + mod_ssl 2.7.1.
591: <li>Support multiple pfkeyv2 keying daemons.
1.81 bentley 592: <li>Compute <a href="https://man.openbsd.org/dh.3">diffie-hellman</a> in parallel between server and client in <a href="https://www.openssh.com/">OpenSSH</a>.
1.1 deraadt 593: <li>Support Amigas with more than 64MB of RAM.
594: <li>Ensure /etc/sudoers is created with a proper secure mode.
1.81 bentley 595: <li>Import <a href="https://man.openbsd.org/openssl.1">OpenSSL</a> 0.9.6.
596: <li>More <a href="https://man.openbsd.org/photurisd.8">photurisd(8)</a> improvements.
1.1 deraadt 597: <li>Update kernel pfkeyv2 code for better conformance to the RFC.
598: <li>Enable loading of ELF kernels for alpha.
1.81 bentley 599: <li>Add extraction support for shell archives to the <a href="https://man.openbsd.org/bsd.port.mk.5">bsd.port.mk</a> infrastructure.
600: <li>In <a href="https://man.openbsd.org/ipsec.4">ipsec(4)</a>, look for TDB if gateway is unspecified.<br>
601: <a href="stable.html">[Applied to stable]</a>
602: <li>Fixes to <a href="https://man.openbsd.org/patch.1">patch(1)</a> -f and -b.
603: <li>Convert some more drivers to the new <a href="https://man.openbsd.org/timeout.9">timeout(9)</a> interface.
604: <li>Add bytecounter statistics reporting to <a href="https://man.openbsd.org/netstat.1">netstat(1)</a>.
1.1 deraadt 605: <li>Instrument more random TCP sequence numbers.
1.81 bentley 606: <li><strong>IMPLEMENTATION FIX: Compute <a href="https://man.openbsd.org/crypto.9">crypto(9)</a> session IDs correctly for kernel.</strong><br>
1.10 pvalchev 607: <a href="errata28.html#hwcrypto">A patch is available</a>.<br>
1.81 bentley 608: <a href="stable.html">[Applied to stable]</a>
609: <li>In <a href="https://man.openbsd.org/sshd.8">sshd(8)</a>, permit logins with read-only root filesystems if the tty already has sane modes set.
610: <li>Source port < 1024 is no longer required for rhosts-rsa in <a href="https://man.openbsd.org/sshd.8">sshd(8)</a>.
611: <li>Remove dead code in <a href="https://man.openbsd.org/hifn.4">hifn(4)</a> driver.
612: <li>Proper <a href="https://man.openbsd.org/getopt.3">getopt(3)</a> usage in <a href="https://man.openbsd.org/compress.1">compress(1)</a>.
613: <li>Fix a time specification in <a href="https://man.openbsd.org/last.1">last(1)</a>.
1.1 deraadt 614: <li>Do not disable PMTU for established TCP connections unless there is data to send.
1.81 bentley 615: <li>Add support for the 802.1D spanning tree protocol to <a href="https://man.openbsd.org/bridge.4">bridge(4)</a>.
1.1 deraadt 616: <li>New BSD authentication login scripts.
1.81 bentley 617: <li>Listen to pfkeyv2 acquire messages in <a href="https://man.openbsd.org/photurisd.8">photurisd(8)</a>, and setup SAs accordingly.
618: <li><a href="https://man.openbsd.org/isakmpd.8">isakmpd(8)</a> update.
619: <li><a href="https://man.openbsd.org/i386/apm.4">apm(4)</a> bug fix that helps a few laptops.
620: <li>Remove unnecessary code from <a href="https://man.openbsd.org/photurisd.8">photurisd(8)</a> in preparation of new SPD framework.
621: <li>Repair a memory leak in <a href="https://man.openbsd.org/icmp6.4">ICMPv6</a> code.
622: <li>Turn off PMTU when <a href="https://man.openbsd.org/icmp.4">ICMP</a> needfrag messages get blocked.
1.1 deraadt 623: <li>Finnish updates for inter.phone.
1.81 bentley 624: <li>Display number of successful <a href="https://man.openbsd.org/ip6.4">IPv6</a> PMTU changes in <a href="https://man.openbsd.org/netstat.1">netstat(1)</a> -s output.
625: <li>Do not re-print ETA on completion in <a href="https://man.openbsd.org/scp.1">scp(1)</a> when copying 0-sized files.
626: <li>Validate <a href="https://man.openbsd.org/icmp6.4">ICMPv6</a> "too big" messages based on PCB.
627: <li>Do not use already-freed memory in <a href="https://man.openbsd.org/route.8">route(8)</a>.
628: <li>Avoid repeated host controller halted messages in <a href="https://man.openbsd.org/uhci.4">uhci(4)</a>.
1.1 deraadt 629: <li>Remove unused libgmp.
1.81 bentley 630: <li>Import <a href="https://man.openbsd.org/kerberos.1">KerberosIV</a> v1.0.4.
631: <li>Always request a new challenge for skey/tis-auth in <a href="https://man.openbsd.org/ssh.1">ssh(1)</a>.
632: <li>Support newer <a href="https://man.openbsd.org/cy.4">cy(4)</a> communication cards.
633: <li>Provide new international keymaps for <a href="https://man.openbsd.org/i386/pcvt.4">pcvt(4)</a>.
1.1 deraadt 634: <li>Ignore filesystems marked "xx" in the install scripts.
1.81 bentley 635: <li>Document that <a href="https://man.openbsd.org/pipe.2">pipe(2)</a> is bidirectional, although this behavior is unportable.
636: <li>Move the default <a href="https://man.openbsd.org/cvs.1">cvs(1)</a> connection protocol from <a href="https://man.openbsd.org/rsh.1">rsh(1)</a> to <a href="https://man.openbsd.org/ssh.1">ssh(1)</a>.
637: <li>Remove a bogus memory free in <a href="https://man.openbsd.org/getnetgrent.3">getnetgrent(3)</a>.
638: <li>Fix a buffer overflow in <a href="https://man.openbsd.org/i386/bad144.8">bad144(8)</a>.
1.1 deraadt 639: <li>Revert back to the old rijndael implementation and solve byte ordering bugs there instead.
1.81 bentley 640: <li>Drop unneeded support for RTF_TUNNEL in <a href="https://man.openbsd.org/route.8">route(8)</a>.
641: <li>Maintain count of routing table timer entries in <a href="https://man.openbsd.org/route.8">route(8)</a>.
642: <li>In <a href="https://man.openbsd.org/makewhatis.8">makewhatis(8)</a>, strip weird characters first, then sequences of spaces.
643: <li>Big improvements to <a href="https://man.openbsd.org/adw.4">adw(4)</a>.
644: <li>Teach <a href="https://man.openbsd.org/tcpdump.8">tcpdump(8)</a> about VRRP, SMB, and timed.
645: <li>Force <a href="https://man.openbsd.org/calendar.1">calendar(1)</a> to only accept real calendar files as input.
646: <li>Fix various <a href="https://man.openbsd.org/perror.3">perror(3)</a> overflows in <a href="https://man.openbsd.org/i386/pcvt.4">pcvt(4)</a>.
647: <li>Repair a <a href="https://man.openbsd.org/tftp.1">tftp(1)</a> argv parsing overflow.
648: <li>Conditionalize some <a href="https://man.openbsd.org/bpf.4">BPF</a> code in <a href="https://man.openbsd.org/wx.4">wx(4)</a>.
649: <li>Finally remove remaining references to extra <a href="https://man.openbsd.org/rsa.3">RSA</a> libs, since the patent has expired.
1.1 deraadt 650: <li>New rijndael implementation which solves endian issues.
1.81 bentley 651: <li>Support Intel 82801BA <a href="https://man.openbsd.org/pciide.4">pciide(4)</a> controllers.
652: <li>Exercise more paranoia with passed KRB environment settings in <a href="https://man.openbsd.org/telnetd.8">telnetd(8)</a>.
653: <li>Convert some more drivers to the new <a href="https://man.openbsd.org/timeout.9">timeout(9)</a> interface.
654: <li>Many improvements and modernizations to <a href="https://man.openbsd.org/isp.4">isp(4)</a>.
655: <li>Update <a href="https://man.openbsd.org/wx.4">wx(4)</a> with LIVENGOOD support.
656: <li>Recognize and support the IODATA USB-ET/T Ethernet adapter in <a href="https://man.openbsd.org/kue.4">kue(4)</a>.
657: <li>Implement asynchronous connections for <a href="https://man.openbsd.org/ssh.1">ssh(1)</a> -R and -L.
658: <li>Simplify <a href="https://man.openbsd.org/atrun.8">atrun(8)</a> tasks by using <a href="https://man.openbsd.org/asprintf.3">asprintf(3)</a>.
1.1 deraadt 659: <li>Kill unused libtermlib.
1.81 bentley 660: <li>Import new <a href="https://man.openbsd.org/pool.9">pool(9)</a> code.
661: <li>Fix RIPv0 packet printing and <a href="https://man.openbsd.org/nfsd.8">NFS</a> port number parsing in <a href="https://man.openbsd.org/tcpdump.8">tcpdump(8)</a>.
662: <li>Make <a href="https://man.openbsd.org/pcap.3">pcap(3)</a>-generated <a href="https://man.openbsd.org/bpf.4">BPF</a> filters work on the <a href="https://man.openbsd.org/tun.4">tun(4)</a> interface.
663: <li>Import David Maziere's <a href="https://man.openbsd.org/ssh-keyscan.1">ssh-keyscan(1)</a>.
664: <li><strong>SECURITY FIX: Fix buffer overflow in <a href="https://man.openbsd.org/ftpd.8">ftpd(8)</a>.</strong><br>
1.10 pvalchev 665: <a href="errata28.html#ftpd">A patch is available</a>.<br>
1.81 bentley 666: <a href="stable.html">[Applied to stable]</a>
667: <li><strong>IMPLEMENTATION FIX: Fix fastroute related panic.</strong><br>
1.10 pvalchev 668: <a href="errata28.html#fastroute">A patch is available</a>.<br>
1.81 bentley 669: <a href="stable.html">[Applied to stable]</a>
1.74 tb 670: <li>Teach <a href="https://www.openssh.com/">OpenSSH</a> about more version strings to improve interoperability.
1.81 bentley 671: <li><strong>SECURITY FIX: Fix another security problem in the <a href="https://man.openbsd.org/kerberos.1">KerberosIV</a> code.</strong><br>
1.10 pvalchev 672: <a href="errata28.html#kerberos2">A patch is available</a>.<br>
1.81 bentley 673: <a href="stable.html">[Applied to stable]</a>
674: <li><strong>SECURITY FIX: Fix two security problems in the <a href="https://man.openbsd.org/kerberos.1">KerberosIV</a> code.</strong><br>
1.10 pvalchev 675: <a href="errata28.html#kerberos">A patch is available</a>.<br>
1.81 bentley 676: <a href="stable.html">[Applied to stable]</a>
677: <li>Permit <a href="https://man.openbsd.org/ftpd.8">ftpd(8)</a> umask setting via both the command line and through a login class in <a href="https://man.openbsd.org/login.conf.5">login.conf(5)</a>.
678: <li>Prevent <a href="https://man.openbsd.org/vlan.4">vlan(4)</a> devices from emitting packets if the parent interface is not up and running.
679: <li>Better error checking in <a href="https://man.openbsd.org/ping6.8">ping6(8)</a>.<br>
680: <a href="stable.html">[Applied to stable]</a>
681: <li>Some stability fixes to <a href="https://man.openbsd.org/isakmpd.8">isakmpd(8)</a>.
682: <li>In <a href="https://man.openbsd.org/ssh.1">ssh(1)</a>, disable agent/X11 port forwarding if the hostkey has changed.
683: <li>Fix a coredump in <a href="https://man.openbsd.org/ssh-agent.1">ssh-agent(1)</a>.
684: <li>Reset 16-bit PCMCIA during chip initialization in <a href="https://man.openbsd.org/pccbb.4">pccbb(4)</a>.
685: <li>Correct PCI interrupt setup for TI PCI113X <a href="https://man.openbsd.org/cbb.4">CardBus</a> bridges.
686: <li>Properly powerdown PC cards in <a href="https://man.openbsd.org/pccbb.4">pccbb(4)</a> at shutdown time.
687: <li>Add -D option to <a href="https://man.openbsd.org/sshd.8">sshd(8)</a> to cause startup without a daemon.
688: <li>Show both the IP address and hostname when a new key is encountered in <a href="https://man.openbsd.org/ssh.1">ssh(1)</a>.
689: <li>Fix a bug in MSChapv2 challenge hashing in <a href="https://man.openbsd.org/ppp.8">ppp(8)</a>.
690: <li>More <a href="https://man.openbsd.org/make.1">make(1)</a> tweaks.
1.1 deraadt 691: <li>Use -n to test for non-zero variables in /etc/netstart.
692: <li>Be more careful with ARP packets.
1.81 bentley 693: <li>Fix deletion of flows in pf_key_v2 handling of <a href="https://man.openbsd.org/isakmpd.8">isakmpd(8)</a><br>
694: <a href="stable.html">[Applied to stable]</a>
695: <li>Prevent <a href="https://man.openbsd.org/setusercontext.3">setusercontext(3)</a> in <a href="https://man.openbsd.org/ftpd.8">ftpd(8)</a> from setting the umask as this conflicts with any command-line umask specification.
696: <li><a href="https://man.openbsd.org/clock.3">clock(3)</a> fixes for the alpha architecture.
697: <li>Print select collisions in <a href="https://man.openbsd.org/vmstat.8">vmstat(8)</a> -s output.
698: <li>Implement <a href="https://man.openbsd.org/login_check_expire.3">login_check_expire(3)</a> for libutil.
699: <li>Add -u username support to <a href="https://man.openbsd.org/pwd_mkdb.8">pwd_mkdb(8)</a>.
1.1 deraadt 700: <li>Properly implement errno handling for the threaded libc (libc_r) on powerpc.
1.81 bentley 701: <li>In <a href="https://man.openbsd.org/adduser.8">adduser(8)</a>, get rid of a race condition and use /etc/ptmp as a lock file.
702: <li>Set reasonable defaults for <a href="https://man.openbsd.org/rsa.3">RSA1</a>, <a href="https://man.openbsd.org/rsa.3">RSA</a>, and <a href="https://man.openbsd.org/dsa.3">DSA</a> keys in <a href="https://man.openbsd.org/ssh-keygen.1">ssh-keygen(1)</a>.
703: <li>Reorder check for illegal ciphers in <a href="https://man.openbsd.org/ssh.1">ssh(1)</a> protocol 1 connection code.
704: <li>Fix <a href="https://man.openbsd.org/pciide.4">pciide(4)</a> support on Alpha 164SX models.
1.1 deraadt 705: <li>Support 16 slices per device on VAX machines.
1.81 bentley 706: <li>Considerable cleanups to <a href="https://man.openbsd.org/make.1">make(1)</a>.
707: <li>Improve key repeat logic in <a href="https://man.openbsd.org/wskbd.4">wskbd(4)</a>.
708: <li>Changes from KAME to make ifm_data available in <a href="https://man.openbsd.org/getifaddrs.3">getifaddrs(3)</a>.
709: <li>Fix absolute path handling in <a href="https://man.openbsd.org/crunchgen.1">crunchgen(1)</a>.
1.1 deraadt 710: <li>Shorten /dev/ttyC* device names.
1.81 bentley 711: <li>Complain about invalid ciphers in <a href="https://man.openbsd.org/ssh.1">ssh(1)</a>, falling back to reasonable defaults when necessary.
712: <li>Avoid tty races in <a href="https://man.openbsd.org/wsdisplay.4">wsdisplay(4)</a> when switching virtual terminals.
713: <li>Update <a href="https://man.openbsd.org/isakmpd.8">isakmpd(8)</a>.
714: <li>Repair lun support in <a href="https://man.openbsd.org/umass.4">umass(4)</a>.
1.1 deraadt 715: <li>Zero pw_passwd before freeing its memory in the libc BSD authentication routines.
1.81 bentley 716: <li>Train <a href="https://man.openbsd.org/makewhatis.8">makewhatis(8)</a> to handle more special cases.
717: <li>Avoid double <a href="https://man.openbsd.org/fclose.3">fclose(3)</a> in <a href="https://man.openbsd.org/getcap.3">getcap(3)</a>.
718: <li>Increase delay in RAM probe for <a href="https://man.openbsd.org/hifn.4">hifn(4)</a>.
719: <li>Suffix list fix in <a href="https://man.openbsd.org/make.1">make(1)</a>.
720: <li>Various bug fixes in <a href="https://man.openbsd.org/ksh.1">ksh(1)</a>.
721: <li>When using the <a href="https://man.openbsd.org/tail.1">tail(1)</a> -f flag on stdin, don't reopen a local file named stdin.
722: <li>Extend <a href="https://man.openbsd.org/kqueue.2">kqueue(2)</a> to support kernel events on <a href="https://man.openbsd.org/vnode.9">vnodes</a>.
723: <li>Bring in BSD authentication support for <a href="https://man.openbsd.org/sudo.8">sudo(8)</a>.
724: <li>Zap MULOG in <a href="https://man.openbsd.org/inetd.8">inetd(8)</a> to improve code readability.
725: <li>Avoid whacking errno in <a href="https://man.openbsd.org/top.1">top(1)</a> signal handlers.
726: <li>Do not include MFS partitions in <a href="https://man.openbsd.org/quot.8">quot(8)</a> statistics output.
1.1 deraadt 727: <li>Add support for the Acenic Copper and Netgear GA620T Gigabit Ethernet cards.
1.81 bentley 728: <li>Prevent a type overflow in <a href="https://man.openbsd.org/recno.3">recno(3)</a>.
729: <li><strong>IMPLEMENTATION FIX: Imac DV reports the VGA device improperly.</strong><br>
1.10 pvalchev 730: <a href="errata28.html#imacdv">A patch is available</a>.<br>
1.81 bentley 731: <a href="stable.html">[Applied to stable]</a>
1.1 deraadt 732: <li>Import BSD authentication mechanisms from BSDI BSD/OS.
1.81 bentley 733: <li>Implement <a href="https://man.openbsd.org/pw_dup.3">pw_dup(3)</a>, a function which copies struct passwd.
734: <li>Replace <a href="https://man.openbsd.org/getpass.3">getpass(3)</a> with a more flexible <a href="https://man.openbsd.org/readpassphrase.3">readpassphrase(3)</a> interface.
735: <li>Add <a href="https://man.openbsd.org/strnvis.3">strnvis(3)</a>, a length-bounded version of the <a href="https://man.openbsd.org/strvis.3">strvis(3)</a> libc function.
1.1 deraadt 736: <li>Better prompting logic in libskey.
737: <li>Resurrect binutils on alpha.
1.81 bentley 738: <li>Recognize newer Intel audio devices in <a href="https://man.openbsd.org/auich.4">auich(4)</a>.
739: <li>Stop <a href="https://man.openbsd.org/amphy.4">amphy(4)</a> from attaching to network devices it doesn't belong to.
740: <li>Enable support for <a href="https://man.openbsd.org/pciide.4">pciide(4)</a> found in newer Intel chipsets.
1.1 deraadt 741: <li>Correct URL handling in the install scripts.
1.81 bentley 742: <li>Limit the number of SCSI luns in <a href="https://man.openbsd.org/umass.4">umass(4)</a>.
1.1 deraadt 743: <li>Page size fixes to the alpha port.
744: <li>Import ssh-ask-pass support for X11.
1.81 bentley 745: <li>Fix a signal race in <a href="https://man.openbsd.org/ypserv.8">ypserv(8)</a> SIGHUP handling.
746: <li>Enable <a href="https://man.openbsd.org/uaudio.4">uaudio(4)</a> by default in GENERIC/i386.
747: <li>Reserve all-1s addresses in the <a href="https://man.openbsd.org/ipsec.4">IPsec</a> code for future policy discovery features.
1.12 pvalchev 748: <li>Resolve HMAC nomenclature issues.
1.81 bentley 749: <li>Be sure to clear passwords out of memory after use in <a href="https://man.openbsd.org/ppp.8">ppp(8)</a>.
1.1 deraadt 750: <li>Support kernel event queues.
1.81 bentley 751: <li>Add support for USB scanners through the <a href="https://man.openbsd.org/uscanner.4">uscanner(4)</a> driver.
752: <li>More fixes to <a href="https://man.openbsd.org/sparc/qec.4">qec(4)</a>.
1.1 deraadt 753: <li>Recognize newer AMD CPUs.
1.81 bentley 754: <li>Repair incorrect buffer size logic in <a href="https://man.openbsd.org/telnetd.8">telnetd(8)</a>.
755: <li>Add a slew of devices to <a href="https://man.openbsd.org/usbdevs.8">usbdevs(8)</a>.
756: <li>Do not use <a href="https://man.openbsd.org/perror.3">perror(3)</a> in <a href="https://man.openbsd.org/sshd.8">sshd(8)</a> after forking a child.
757: <li><strong>RELIABILITY FIX: The <a href="https://man.openbsd.org/sparc/qec.4">qec</a>+<a href="https://man.openbsd.org/sparc/qe.4">qe</a> ethernet cards should not generate NMIs.</strong><br>
1.10 pvalchev 758: <a href="errata28.html#qe">A patch is available</a>.<br>
1.81 bentley 759: <a href="stable.html">[Applied to stable]</a>
760: <li>Add <a href="https://man.openbsd.org/ifmedia.4">ifmedia(4)</a> support to <a href="https://man.openbsd.org/sparc/qec.4">qec(4)</a>, among other improvements.
761: <li>Extra sanity checking in <a href="https://man.openbsd.org/skeyinit.1">skeyinit(1)</a>.
762: <li>Repair timeout computations in <a href="https://man.openbsd.org/atapiscsi.4">atapiscsi(4)</a>.
1.1 deraadt 763: <li>Add initial support for DEC Alpha 21264 systems.
764: <li>Bring the alpha port a bit closer to a fully operational console.
765: <li>Support Accton EN2242 MiniPCI Ethernet adapters.
766: <li>Permit O_RDWR on FIFOs to handle legacy applications that depend on it.
1.81 bentley 767: <li>Add scrollback support to <a href="https://man.openbsd.org/wscons.4">wscons(4)</a> through the <a href="https://man.openbsd.org/vga.4">vga(4)</a> driver.
768: <li>Color change in <a href="https://man.openbsd.org/wscons.4">wscons(4)</a> vt100 emulation to more closely imitate PCVT.
769: <li>Repair overriding of pseudo devices in <a href="https://man.openbsd.org/config.8">config(8)</a><br>
770: <a href="stable.html">[Applied to stable]</a>
771: <li>Accept -inet and -inet6 as options for the show command in <a href="https://man.openbsd.org/route.8">route(8)</a>.
772: <li>Don't reorder keys in <a href="https://man.openbsd.org/ssh-agent.1">ssh-agent(1)</a> upon key removal.
773: <li>Avoid parsing options in <a href="https://man.openbsd.org/ssh.1">ssh(1)</a> if there is an <a href="https://man.openbsd.org/rsa.3">RSA</a> key mismatch.
774: <li>Various cleanups to <a href="https://man.openbsd.org/ftpd.8">ftpd(8)</a>.
1.1 deraadt 775: <li>In many programs, sync usage() output with their respective man page SYNOPSIS.
1.81 bentley 776: <li><strong>RELIABILITY FIX: The ThunderLAN driver, <a href="https://man.openbsd.org/tl.4">tl(4)</a>, should not claim all interrupts.</strong><br>
1.10 pvalchev 777: <a href="errata28.html#tl">A patch is available</a>.<br>
1.81 bentley 778: <a href="stable.html">[Applied to stable]</a>
779: <li>In <a href="https://man.openbsd.org/pciide.4">pciide(4)</a>, do not map unsafe registers from controllers that require 16-bit I/O space.
780: <li>Import new <a href="https://man.openbsd.org/pckbc.4">pckbc(4)</a>, <a href="https://man.openbsd.org/pckbd.4">pckbd(4)</a>, <a href="https://man.openbsd.org/vga.4">vga(4)</a>, <a href="https://man.openbsd.org/pcdisplay.4">pcdisplay(4)</a>, and ega(4) drivers for <a href="https://man.openbsd.org/wscons.4">wscons(4)</a>.
781: <li>In <a href="https://man.openbsd.org/ftpd.8">ftpd(8)</a>, assert check_login upon receipt of EPSV/LPSV.
782: <li>Make the <a href="https://man.openbsd.org/aha.4">aha(4)</a> driver compile without UVM.
1.1 deraadt 783: <li>Enforce non-cacheable device space on real 80386 machines.
1.81 bentley 784: <li>Add <a href="https://man.openbsd.org/rsa.3">RSA</a> authentication support for SSH2 to <a href="https://www.openssh.com/">OpenSSH</a>.
785: <li>Allow serial mice to work with <a href="https://man.openbsd.org/moused.8">moused(8)</a> and XFree86 simultaneously.
786: <li>Repair an off-by-one error in <a href="https://man.openbsd.org/ssh-agent.1">ssh-agent(1)</a>.
787: <li>Convert some old drivers to the new <a href="https://man.openbsd.org/timeout.9">timeout(9)</a> interface.
788: <li><strong>RELIABILITY FIX: repair AES (rijndael) kernel support.</strong><br>
1.10 pvalchev 789: <a href="errata28.html#rijndael">A patch is available</a>.<br>
1.81 bentley 790: <a href="stable.html">[Applied to stable]</a>
1.1 deraadt 791: <li>Import PCI support for Alpha EB164 machines.
792: <li>Add bus_space_barrier macros for the powerpc.
793: <li>Endian fixes to the USB code.
1.81 bentley 794: <li>Better command line parsing in <a href="https://man.openbsd.org/encrypt.1">encrypt(1)</a>.
1.1 deraadt 795: <li>Numbering fixups in pfkeyv2 to match IANA assignments.
1.81 bentley 796: <li>Crank maximum mbuf size in <a href="https://man.openbsd.org/ppp.8">ppp(8)</a> in order to handle full-sized HDLC frames.
797: <li>Improve handling of <a href="https://man.openbsd.org/ip6.4">IPv6</a> Node Information Query packets for better specification conformance.
798: <li>Fix a panic induced by assigning lo0 an <a href="https://man.openbsd.org/ip6.4">IPv6</a> alias.
799: <li><strong>IMPLEMENTATION FIX: In <a href="https://man.openbsd.org/sshd.8">sshd(8)</a>, fix skey support in SSH1 protocol.</strong><br>
1.10 pvalchev 800: <a href="errata28.html#sshskey">A patch is available</a>.<br>
1.81 bentley 801: <a href="stable.html">[Applied to stable]</a>
802: <li>Deprecate pltime=0 in <a href="https://man.openbsd.org/ifconfig.8">ifconfig(8)</a>.
803: <li>Modifications to the <a href="https://man.openbsd.org/ktrace.2">ktrace(2)</a> interface to reduce redundancy.
804: <li>Do not advertise dynamic/cloned routes in <a href="https://man.openbsd.org/route6d.8">route6d(8)</a>.
805: <li>Allow <a href="https://man.openbsd.org/ping6.8">ping6(8)</a> to send <a href="https://man.openbsd.org/icmp6.4">ICMP6</a> packets smaller than 8 bytes.<br>
806: <a href="stable.html">[Applied to stable]</a>
807: <li>Correct free-before-reference bugs in <a href="https://man.openbsd.org/rshd.8">rshd(8)</a> and <a href="https://man.openbsd.org/rlogind.8">rlogind(8)</a>.
808: <li>Improve queue handling in <a href="https://man.openbsd.org/gdt.4">gdt(4)</a>.
809: <li>New Adaptec FSA RAID driver called <a href="https://man.openbsd.org/aac.4">aac(4)</a>.
810: <li>Fix DMA error problems in <a href="https://man.openbsd.org/adw.4">adw(4)</a>.<br>
811: <a href="stable.html">[Applied to stable]</a>
1.1 deraadt 812: <li>If MANPS environment variable is set, the system will also build and install postscript manual pages into /usr/share/man/ps[1-9]/.
1.81 bentley 813: <li>In <a href="https://man.openbsd.org/date.1">date(1)</a>, fix an off-by-one error which would happen when changing time over DST.
814: <li>Permit -Tps in <a href="https://man.openbsd.org/nroff.1">nroff(1)</a>.
1.1 deraadt 815: <li>Make some pfkeyv2 interfaces conform to RFC 2367 numbering.
816: <li>New timeouts in a couple of network drivers.
1.81 bentley 817: <li>Prevent <a href="https://man.openbsd.org/nfsd.8">nfsd(8)</a> from swapping out.
1.1 deraadt 818: <li>Use PHOLD/PRELE in various kernel components.
1.81 bentley 819: <li>Buffer overflow fix to <a href="https://man.openbsd.org/telnet.1">telnet(1)</a>.
1.1 deraadt 820: <li>Many man page improvements.
1.81 bentley 821: <li>Permit handling more than 6 arguments in a <a href="https://man.openbsd.org/hostname.if.5">hostname.if(5)</a> file.
822: <li>kcore handling in <a href="https://man.openbsd.org/kvm.3">kvm(3)</a> for alpha.
823: <li>Update <a href="https://man.openbsd.org/usb.4">usb(4)</a> code.
1.1 deraadt 824: <li>Update alpha architecture support. A snapshot will come out soon.
1.81 bentley 825: <li>In <a href="https://man.openbsd.org/pchb.4">pchb(4)</a>, for Intel random devices, do not busy wait for data.
826: <li>Switch amiga to <a href="https://man.openbsd.org/uvm.9">uvm(9)</a>.
1.1 deraadt 827: <li>Fix amiga pmap module submap allocations.
828: <li>Centralized netisr dispatching.
1.81 bentley 829: <li><a href="https://man.openbsd.org/ppp.8">ppp(8)</a> updated.
830: <li>In <a href="https://man.openbsd.org/aue.4">aue(4)</a>, fix multicast filter programming.
831: <li>Repair an uninitialized variable bug in <a href="https://man.openbsd.org/ipsec.4">ipsec(4)</a> output.<br>
832: <a href="stable.html">[Applied to stable]</a>
833: <li>Add <a href="https://man.openbsd.org/i386/pcibios.4">pcibios(4)</a> interrupt setup support for AMD750 chipset.
834: <li><strong>RELIABILITY FIX: In sparc <a href="https://man.openbsd.org/sparc/zs.4">zs(4)</a>, when using serial console, the interrupt routine was unable to distinguish it's own interrupts.</strong><br>
1.10 pvalchev 835: <a href="errata28.html#zsconsole">A patch is available</a>.<br>
1.81 bentley 836: <a href="stable.html">[Applied to stable]</a>
837: <li>Generate new hashkey every time a <a href="https://man.openbsd.org/bridge.4">bridge(4)</a> is brought up.
838: <li>Change <a href="https://man.openbsd.org/bridge.4">bridge(4)</a> code to use lower spl.
839: <li>Passive FTP support in <a href="https://man.openbsd.org/lynx.1">lynx(1)</a>.
840: <li>In <a href="https://man.openbsd.org/ssh.1">ssh(1)</a>, downgrade to SSH1.3 if server is SSH1.4.
841: <li>In <a href="https://man.openbsd.org/sshd.8">sshd(8)</a>, do not disable rhosts(rsa) if server port greater 1024.
842: <li>In <a href="https://man.openbsd.org/sshd.8">sshd(8)</a> Agent forwarding and -R support for SSH2 protocol.
843: <li><a href="https://man.openbsd.org/ipsecadm.8">ipsecadm(8)</a> man page repairs.<br>
844: <a href="stable.html">[Applied to stable]</a>
1.1 deraadt 845: <li>In pfkeyv2, send the message to registered promiscuous listeners.<br>
1.81 bentley 846: <a href="stable.html">[Applied to stable]</a>
847: <li>Some minor <a href="https://man.openbsd.org/bridge.4">bridge(4)</a> fixes.
848: <li><a href="https://man.openbsd.org/ld.so.1">ld.so(1)</a> support for the pmax.
1.1 deraadt 849: <li>On powerpc, print out the size of the L2 cache size on G3 and G4 machines.
1.82 deraadt 850: <li>2.8 release builds are running, but some of us are already working on post-release hacking.
1.1 deraadt 851: </ul>
![[BACK]](/icons/back.gif){kind=icon}
Return to plus29.html CVS log ![[TXT]](/icons/text.gif){kind=icon}
![[DIR]](/icons/dir.gif){kind=icon}
Up to [local] / www