Annotation of www/plus30.html, Revision 1.65
1.60 bentley 1: <!doctype html>
2: <html lang=en id=plus>
3: <meta charset=utf-8>
1.51 tj 4: <title>OpenBSD 3.0 Changelog</title>
1.1 deraadt 5: <meta name="description" content="OpenBSD 3.0 changes">
1.49 deraadt 6: <meta name="viewport" content="width=device-width, initial-scale=1">
7: <link rel="stylesheet" type="text/css" href="openbsd.css">
1.53 tb 8: <link rel="canonical" href="https://www.openbsd.org/plus30.html">
1.60 bentley 9: <style>
10: a[href="stable.html"] {
11: color: var(--green);
12: }
1.1 deraadt 13:
1.60 bentley 14: strong {
15: color: var(--red);
16: }
1.1 deraadt 17:
1.60 bentley 18: h3 {
19: color: var(--blue);
20: }
21:
22: p strong {
23: font-weight: normal;
24: }
25:
26: code {
27: font-family: serif;
28: font-weight: bolder;
29: }
30: </style>
31:
32: <h2 id=OpenBSD>
1.49 deraadt 33: <a href="index.html">
1.60 bentley 34: <i>Open</i><b>BSD</b></a>
35: 3.0 Changelog
1.51 tj 36: </h2>
1.10 naddy 37: <hr>
1.1 deraadt 38:
39: <p>
40: This is a partial list of the major machine independent changes
1.25 sobrado 41: (i.e., these are the changes people ask about most often). Machine
1.1 deraadt 42: specific changes have also been made, and are sometimes mentioned
43: in the pages for the specific <a href="plat.html">platforms</a>.
44:
45: <p>
1.60 bentley 46: Note: <strong>Problems for which patches exist are marked in red</strong>.
1.1 deraadt 47:
48: <p>
1.8 deraadt 49: For changes in other releases, click below:<br>
50: <a href="plus20.html">2.0</a>,
51: <a href="plus21.html">2.1</a>,
52: <a href="plus22.html">2.2</a>,
53: <a href="plus23.html">2.3</a>,
54: <a href="plus24.html">2.4</a>,
55: <a href="plus25.html">2.5</a>,
56: <a href="plus26.html">2.6</a>,
57: <a href="plus27.html">2.7</a>,
58: <a href="plus28.html">2.8</a>,
59: <a href="plus29.html">2.9</a>,
60: <a href="plus31.html">3.1</a>,
61: <a href="plus32.html">3.2</a>,
1.11 deraadt 62: <a href="plus33.html">3.3</a>,
1.12 david 63: <a href="plus34.html">3.4</a>,
1.13 deraadt 64: <a href="plus35.html">3.5</a>,
1.15 miod 65: <a href="plus36.html">3.6</a>,
1.39 deraadt 66: <a href="plus37.html">3.7</a>,
1.24 deraadt 67: <br>
1.20 david 68: <a href="plus38.html">3.8</a>,
1.17 deraadt 69: <a href="plus39.html">3.9</a>,
1.18 deraadt 70: <a href="plus40.html">4.0</a>,
1.19 deraadt 71: <a href="plus41.html">4.1</a>,
1.21 deraadt 72: <a href="plus42.html">4.2</a>,
1.23 deraadt 73: <a href="plus43.html">4.3</a>,
1.24 deraadt 74: <a href="plus44.html">4.4</a>,
1.26 deraadt 75: <a href="plus45.html">4.5</a>,
1.27 deraadt 76: <a href="plus46.html">4.6</a>,
1.28 deraadt 77: <a href="plus47.html">4.7</a>,
1.29 deraadt 78: <a href="plus48.html">4.8</a>,
1.31 deraadt 79: <a href="plus49.html">4.9</a>,
1.32 nick 80: <a href="plus50.html">5.0</a>,
1.33 schwarze 81: <a href="plus51.html">5.1</a>,
1.34 nick 82: <a href="plus52.html">5.2</a>,
1.35 deraadt 83: <a href="plus53.html">5.3</a>,
1.36 deraadt 84: <a href="plus54.html">5.4</a>,
1.37 deraadt 85: <br>
1.39 deraadt 86: <a href="plus55.html">5.5</a>,
1.41 brett 87: <a href="plus56.html">5.6</a>,
1.42 deraadt 88: <a href="plus57.html">5.7</a>,
1.45 deraadt 89: <a href="plus58.html">5.8</a>,
1.46 deraadt 90: <a href="plus59.html">5.9</a>,
1.52 deraadt 91: <a href="plus60.html">6.0</a>,
1.54 deraadt 92: <a href="plus61.html">6.1</a>,
1.56 deraadt 93: <a href="plus62.html">6.2</a>,
1.57 deraadt 94: <a href="plus63.html">6.3</a>,
1.58 deraadt 95: <a href="plus64.html">6.4</a>,
1.59 pamela 96: <a href="plus65.html">6.5</a>,
1.61 pamela 97: <a href="plus66.html">6.6</a>,
1.62 deraadt 98: <a href="plus67.html">6.7</a>,
1.63 deraadt 99: <a href="plus68.html">6.8</a>,
1.64 pamela 100: <a href="plus69.html">6.9</a>,
1.65 ! deraadt 101: <a href="plus70.html">7.0</a>,
1.8 deraadt 102: <a href="plus.html">current</a>.
1.1 deraadt 103: <br>
104:
105: <p>
1.60 bentley 106: <h3>Changes made between OpenBSD 2.9 and 3.0</h3>
1.40 deraadt 107: <p>
108:
1.1 deraadt 109: <ul>
1.60 bentley 110: <li>In <a href="https://man.openbsd.org/pf.4">pf(4)</a>, block packets that have IP options set by default.
111: <li>Disable <a href="https://man.openbsd.org/fd.4">fd(4)</a> sharing.
112: <li>Repair a <a href="https://man.openbsd.org/umask.2">umask(2)</a> in <a href="https://man.openbsd.org/pflogd.8">pflogd(8)</a>.
113: <li>Fiddle with channel handling in <a href="https://man.openbsd.org/ssh.8">ssh(8)</a> and <a href="https://man.openbsd.org/ssh.1">ssh(1)</a>.
114: <li>Add interface name to address translation to <a href="https://man.openbsd.org/pfctl.8">pfctl(8)</a>.
115: <li>Avoid /tmp races in <a href="https://man.openbsd.org/cvs.1">cvs(1)</a> by utilizing <a href="https://man.openbsd.org/mktemp.1">mktemp(1)</a>.
116: <li>Handle illegal <a href="https://man.openbsd.org/whois.1">whois(1)</a> server output that lacks a trailing newline.
117: <li>Bring in FM <a href="https://man.openbsd.org/radio.9">radio(9)</a> driver support; configuration through <a href="https://man.openbsd.org/radioctl.1">radioctl(1)</a>.
1.2 deraadt 118: <li>Work around buggy HTTP servers that need the Host: field to only contain the port number.
1.60 bentley 119: <li>Use bpf_timeval instead of timeval in <a href="https://man.openbsd.org/pcap.3">pcap(3)</a>, <a href="https://man.openbsd.org/isakmpd.8">isakmpd(8)</a>, <a href="https://man.openbsd.org/bpf.4">bpf(4)</a>, and <a href="https://man.openbsd.org/tcpdump.8">tcpdump(8)</a>, improving portability.
120: <li>Fix a network/host order bug in <a href="https://man.openbsd.org/pf.4">pf(4)</a> that broke state searching on <a href="https://man.openbsd.org/icmp.4">icmp(4)</a> packets with the DF flag set.
121: <li>New <a href="https://man.openbsd.org/ssh.1">ssh(1)</a> configuration option NoHostAuthenticationForLocalhost.
122: <li>Import a new <a href="https://man.openbsd.org/rmd160.1">rmd160(1)</a> implementation.
123: <li>Upgrade to <a href="https://man.openbsd.org/sendmail.8">sendmail(8)</a> 8.12.1, fixing a potential local security hole.
124: <li>New -t and -d flags for <a href="https://man.openbsd.org/mktemp.1">mktemp(1)</a> to account for the TMPDIR environment variable.
125: <li>Add a -l flag to <a href="https://man.openbsd.org/mtree.8">mtree(8)</a> to do loose permissions checks.
126: <li>Report error when the -N and -R flags of <a href="https://man.openbsd.org/pfctl.8">pfctl(8)</a> can't open the specified file.
127: <li>Have <a href="https://man.openbsd.org/rcp.1">rcp(1)</a> and <a href="https://man.openbsd.org/scp.1">scp(1)</a> skip filenames containing newlines.
1.2 deraadt 128: <li>Big install documentation overhaul.
1.60 bentley 129: <li>Support selectable preset FSM optimizations in <a href="https://man.openbsd.org/pf.4">pf(4)</a>.
1.2 deraadt 130: <li>Lots of RAIDFrame work.
1.60 bentley 131: <li>Filter forwarded <a href="https://man.openbsd.org/ip6.4">ip6(4)</a> packets with <a href="https://man.openbsd.org/pf.4">pf(4)</a>.
132: <li>Upgrade <a href="https://man.openbsd.org/cvs.1">cvs(1)</a>.
133: <li>New <a href="https://man.openbsd.org/pidfile.3">pidfile(3)</a> call to write a daemon PID file.
134: <li>Read user configuration first in <a href="https://man.openbsd.org/ssh.1">ssh(1)</a>.
135: <li>Allow macro names to contain underscores in <a href="https://man.openbsd.org/pf.conf.5">pf.conf(5)</a>.
136: <li>Overhaul /tmp handling in <a href="https://man.openbsd.org/gzip.1">gzip(1)</a>.
137: <li>Improve string handling in <a href="https://man.openbsd.org/rwho.1">rwho(1)</a>.
138: <li>Fix handling of <a href="https://man.openbsd.org/icmp.4">icmp(4)</a> packets in <a href="https://man.openbsd.org/pf.4">pf(4)</a>.
139: <li>Plug memory leak in <a href="https://man.openbsd.org/ssh.1">ssh(1)</a>'s compression.
140: <li>Connect <a href="https://man.openbsd.org/usb.4">usb(4)</a> keyboards to the display after attach.
141: <li>Correctly free mbuf when dropping a packet in the <a href="https://man.openbsd.org/ip6.4">ip6(4)</a> subsystem.
142: <li>Default to 9600 baud in <a href="https://man.openbsd.org/cu.1">cu(1)</a>.
143: <li>Many repairs to <a href="https://man.openbsd.org/getcap.3">getcap(3)</a>, including an off-by-one <a href="https://man.openbsd.org/malloc.3">malloc(3)</a> error and a buffer overflow.
144: <li>Import a new <a href="https://man.openbsd.org/grep.1">grep(1)</a>.
145: <li>Update <a href="https://man.openbsd.org/popa3d.8">popa3d(8)</a> to 0.4.9.4, adding support for selectable stand-alone or inetd use and <a href="https://man.openbsd.org/tcpd.8">tcpd(8)</a>.
146: <li>Start <a href="https://man.openbsd.org/pflogd.8">pflogd(8)</a> differently so it doesn't block NFS in diskless situations.
147: <li>Avoid a memory leak in <a href="https://man.openbsd.org/uvm.9">uvm(9)</a>.
148: <li>Remove signal race from <a href="https://man.openbsd.org/rpc.rstatd.8">rpc.rstatd(8)</a>.
149: <li>Re-order shlib_dirs in <a href="https://man.openbsd.org/rc.8">rc(8)</a>, prioritizing X11R6/lib over local/lib.
150: <li>Speedup <a href="https://man.openbsd.org/m4.1">m4(1)</a> by using inlines for common operations.
151: <li>Cleanup the set of <a href="https://man.openbsd.org/user.8">user(8)</a> tools.
1.2 deraadt 152: <li>Implement a buffer flushing daemon, solving problems related to the syncer and improving performance with large numbers of buffers.
1.60 bentley 153: <li>Remove buggy STATIC memory optimization from <a href="https://man.openbsd.org/m4.1">m4(1)</a>.
154: <li>Have <a href="https://man.openbsd.org/vi.1">vi(1)</a> abort if it can't create a temporary file.
1.2 deraadt 155: <li>Improve cross building support.
1.60 bentley 156: <li>Repair some buffer handling in <a href="https://man.openbsd.org/mail.1">mail(1)</a>.
1.2 deraadt 157: <li>Add many more length checks when passing data from userland to kernel.
1.60 bentley 158: <li>In <a href="https://man.openbsd.org/pf.4">pf(4)</a>, don't ignore the inner protocol of <a href="https://man.openbsd.org/ip.4">ip(4)</a> <a href="https://man.openbsd.org/icmp.4">icmp(4)</a> packets, thus unbreaking <a href="https://man.openbsd.org/traceroute.8">traceroute(8)</a>, etc.
159: <li>Support insecure1 and insecure2 options in <a href="https://man.openbsd.org/resolv.conf.5">resolv.conf(5)</a>.
160: <li><strong>SECURITY FIX: be careful with long commandline options in <a href="https://man.openbsd.org/uuxqt.8">uuxqt</a> and run <a href="https://man.openbsd.org/uucp.1">uucp</a> as non-root in daily.</strong><br>
1.10 naddy 161: <a href="errata29.html#uucp">A source code patch is available</a>.<br>
1.60 bentley 162: <a href="stable.html">[Applied to stable]</a>
163: <li>Replace ru_SU with ru_RU in <a href="https://man.openbsd.org/vi.1">vi(1)</a>.
164: <li>Import <a href="https://man.openbsd.org/sendmail.8">sendmail(8)</a> 8.12.0, requiring a new smmsp user and group.
165: <li>Mark buffers with dependencies as B_DEFERRED and skip them one time when doing <a href="https://man.openbsd.org/sync.2">sync(2)</a>.
1.2 deraadt 166: <li>Banish uucp to the ports tree.
1.60 bentley 167: <li>Upgrade <a href="https://man.openbsd.org/awk.1">awk(1)</a>.
168: <li>Cleanup <a href="https://man.openbsd.org/adduser.8">adduser(8)</a>; clean up variables, clear hashes correctly, unlock ptmp before closing, etc.
169: <li>Support 1:1 bi-directional Network Address Translation in <a href="https://man.openbsd.org/pf.4">pf(4)</a>.
170: <li>proxy user required for <a href="https://man.openbsd.org/ftp-proxy.8">ftp-proxy(8)</a>.
171: <li>Add a stereo jitter suppressor to the <a href="https://man.openbsd.org/maestro.4">maestro(4)</a> audio driver.
172: <li>Fix erroneous <a href="https://man.openbsd.org/select.2">select(2)</a> FD_SETSIZE uses.
173: <li>Repair <a href="https://man.openbsd.org/wall.1">wall(1)</a>'s -g flag.
174: <li><a href="https://man.openbsd.org/pckbd.4">pckbd(4)</a> supports Ukranian keyboard layouts.
175: <li>Better Russian <a href="https://man.openbsd.org/calendar.1">calendar(1)</a> support.
176: <li>Implement skip steps and parameter lists for interfaces in <a href="https://man.openbsd.org/pf.4">pf(4)</a>.
177: <li>Update username length limit in <a href="https://man.openbsd.org/rmuser.8">rmuser(8)</a>.
1.1 deraadt 178: <li>New src compilation target: cross-env; prints all environment variables that need to be set for cross-building.
1.60 bentley 179: <li>Import <a href="https://man.openbsd.org/usbhidctl.1">usbhidctl(1)</a>, a userland program to manipulate USB HID devices.
180: <li>Import <a href="https://man.openbsd.org/usb.3">usb(3)</a> library libusb for USB HID processing.
1.1 deraadt 181: <li>Rename powerpc port to macppc, allowing for code sharing between different powerpc-based platforms.
1.60 bentley 182: <li>Inherit <a href="https://man.openbsd.org/vlan.4">vlan(4)</a> baudrate from parent.
183: <li>Various <a href="https://man.openbsd.org/lpd.8">lpd(8)</a> improvements and fixes.
184: <li><strong>SECURITY FIX: fix buffer overflow reading queue file in <a href="https://man.openbsd.org/lpd.8">lpd</a>.</strong><br>
1.10 naddy 185: <a href="errata29.html#lpd">A source code patch is available</a>.<br>
1.60 bentley 186: <a href="stable.html">[Applied to stable]</a>
187: <li>Plug memory leak in <a href="https://man.openbsd.org/scp.1">scp(1)</a> and <a href="https://man.openbsd.org/rcp.1">rcp(1)</a>.
188: <li>Avoid segfault in <a href="https://man.openbsd.org/dhclient.8">dhclient(8)</a> when the server specifies its name.
189: <li>Support the ! operator in host parameter lists in <a href="https://man.openbsd.org/pfctl.8">pfctl(8)</a>.
190: <li>Send a reset request for every packet received by <a href="https://man.openbsd.org/ppp.8">ppp(8)</a> when the encryption dictionaries are out of sync.
191: <li>Make <a href="https://man.openbsd.org/pf.4">pf(4)</a> support ISN randomization (aka. phase modulation).
1.1 deraadt 192: <li>Store argc as a long on the stack as opposed to an int.
193: <li>Switch rijndael code to the optimized AES reference release.
1.60 bentley 194: <li>Have <a href="https://man.openbsd.org/isakmpd.8">isakmpd(8)</a> send DELETE notifications for all active SAs when shutting down.
195: <li>In <a href="https://man.openbsd.org/sudo.8">sudo(8)</a>, apply default login class if unable to look one up.
196: <li>Support macro expansion in <a href="https://man.openbsd.org/pf.conf.5">pf.conf(5)</a>.
1.1 deraadt 197: <li>Work some magic on the installation scripts for floppies, shrinking them.
1.60 bentley 198: <li>Correct the setup of the initial <a href="https://man.openbsd.org/tcp.4">tcp(4)</a> state window in <a href="https://man.openbsd.org/pf.4">pf(4)</a>.
199: <li>Import <a href="https://man.openbsd.org/pflogd.8">pflogd(8)</a>, logging daemon that writes <a href="https://man.openbsd.org/pf.4">pf(4)</a> logs in <a href="https://man.openbsd.org/tcpdump.8">tcpdump(8)</a> binary format.
200: <li><strong>SECURITY FIX: fix out of bounds handling in <a href="https://man.openbsd.org/sendmail.8">sendmail</a> debug handling</strong><br>
1.10 naddy 201: <a href="errata29.html#sendmail2">A source code patch is available</a>.<br>
1.60 bentley 202: <a href="stable.html">[Applied to stable]</a>
203: <li>Repair <a href="https://man.openbsd.org/ppp.8">ppp(8)</a>'s iface-alias option.
204: <li>Fix rule flushing code in <a href="https://man.openbsd.org/bridge.4">bridge(4)</a> devices.
205: <li>Support <a href="https://man.openbsd.org/ip6.4">ip6(4)</a> in <a href="https://man.openbsd.org/ppp.8">ppp(8)</a>; crude IPV6CP support; many other smaller changes.
206: <li>Enhance file-change detection in <a href="https://man.openbsd.org/vipw.8">vipw(8)</a> and <a href="https://man.openbsd.org/crontab.1">crontab(1)</a>.
207: <li>Add per-rule statistics and byte counter to <a href="https://man.openbsd.org/pf.4">pf(4)</a>.
208: <li>Don't reset <a href="https://man.openbsd.org/xl.1">xl(1)</a>'s Rx/Tx without first turning them back on after a suspend.
209: <li>Support parameter lists in <a href="https://man.openbsd.org/pfctl.8">pfctl(8)</a>.
210: <li>Be sure to pass the interface to ipip_input() in the net subsystem so it can be used in <a href="https://man.openbsd.org/bpf.4">bpf(4)</a>.
211: <li>Import <a href="https://man.openbsd.org/ftp-proxy.8">ftp-proxy(8)</a>, a transparent ftp proxy.
212: <li>Loosen <a href="https://man.openbsd.org/tcp.4">tcp(4)</a> state code in <a href="https://man.openbsd.org/pf.4">pf(4)</a>, allowing "stupid stacks to shotgun their SYNs and provide better handling for pre-existing connections".
1.1 deraadt 213: <li>Initial import of sparc64 port; much subsequent development, too much to list.
1.60 bentley 214: <li>Add the possibility to add a random offset to the stack on <a href="https://man.openbsd.org/exec.3">exec(3)</a>.
215: <li>Make the <a href="https://man.openbsd.org/siop.4">siop(4)</a> driver pay attention to quirks table, eliminating INQUIRY snooping and ifdef toggling.
216: <li>New -s switch for <a href="https://man.openbsd.org/pwd_mkdb.8">pwd_mkdb(8)</a> to only update the secure .db file.
217: <li>-e switch for <a href="https://man.openbsd.org/nm.1">nm(1)</a> to show extra symbol information.
1.1 deraadt 218: <li>Delay locking the passwd file until we have gotten a new password from the user. Also play with the file locking routine.
1.60 bentley 219: <li>Attempt to recover from PCI aborts in the <a href="https://man.openbsd.org/hifn.4">hifn(4)</a> driver.
220: <li>Import keyconv, a small utility to convert between <a href="https://man.openbsd.org/openssl.1">openssl(1)</a> and DNSSEC key formats.
221: <li>Support trusted public RSA keys as files in <a href="https://man.openbsd.org/isakmpd.8">isakmpd(8)</a>.
1.1 deraadt 222: <li>Fix lengths for PFKEYv2 and KAME messages in IPv4-in-IPv6 and IPv6-in-IPv4 flows.
1.60 bentley 223: <li>Import <a href="https://man.openbsd.org/popa3d.8">popa3d(8)</a>, Solar Designer's POP3 daemon.
1.1 deraadt 224: <li>The valiant vm_extern.h, vm_inherit.h, vm_map.h, and vm_pager.h files ride off into the sunset.
1.60 bentley 225: <li><a href="https://man.openbsd.org/pf.4">pf(4)</a> support for <a href="https://man.openbsd.org/icmp.4">icmp(4)</a> errors referring to <a href="https://man.openbsd.org/icmp.4">icmp(4)</a> queries/replies.
226: <li>Allow file flags in <a href="https://man.openbsd.org/mtree.8">mtree(8)</a>.
227: <li>Don't compare the source address on packets to the one in SA when doing <a href="https://man.openbsd.org/ipsec.4">ipsec(4)</a> processing.
1.1 deraadt 228: <li>Repair rijndael block alignment.
1.60 bentley 229: <li>Unshare <a href="https://man.openbsd.org/sigaction.2">sigaction(2)</a> signal handlers on <a href="https://man.openbsd.org/exec.3">exec(3)</a>.
230: <li>Merge <a href="https://man.openbsd.org/altq.9">altq(9)</a> options into just "altq" for base + red + cbq, and enable it by default.
231: <li>Support the -h flag for <a href="https://man.openbsd.org/ln.1">ln(1)</a> that prevents following a symlink to a directory.
1.1 deraadt 232: <li>Many new timeouts for a wide variety of devices.
233: <li>Remove the IPCOMP option as it's now part of the IPSEC option.
1.60 bentley 234: <li>Rewrite <a href="https://man.openbsd.org/signal.3">signal(3)</a> handlers in <a href="https://man.openbsd.org/altqd.8">altqd(8)</a> to be race-safe.
235: <li>Add support for RC4 operations in the <a href="https://man.openbsd.org/hifn.4">hifn(4)</a> driver.
236: <li>Don't <a href="https://man.openbsd.org/free.3">free(3)</a> unallocated memory in <a href="https://man.openbsd.org/mailwrapper.8">mailwrapper(8)</a>.
237: <li>Change <a href="https://man.openbsd.org/tsleep.9">tsleep(9)</a> into an ltsleep wrapper. ltsleep takes one more argument than <a href="https://man.openbsd.org/tsleep.9">tsleep(9)</a>, a simplelock that it unlocks when safe.
1.1 deraadt 238: <li>Let kerberosV compile entirely on platforms without shared libraries.
1.60 bentley 239: <li>Avoid /tmp race in rcs2log by using <a href="https://man.openbsd.org/mktemp.1">mktemp(1)</a>.
240: <li>Tweak timekeeping code in <a href="https://man.openbsd.org/dd.1">dd(1)</a> to produce a sane bandwidth measure for a short runs.
241: <li>Enable the ESP and AH <a href="https://man.openbsd.org/ipsec.4">ipsec(4)</a> protocols by default.
242: <li>Make kernel <a href="https://man.openbsd.org/crash.8">crash(8)</a> dumps work under mvme68k.
1.1 deraadt 243: <li>No longer drop packets when using an ACQUIRE policy and an error occurs when notifying key management.
1.60 bentley 244: <li>New <a href="https://man.openbsd.org/getrrsetbyname.3">getrrsetbyname(3)</a> function to retrieve arbitrary DNS records.
245: <li>Support protocol version 2 in <a href="https://man.openbsd.org/ssh-keyscan.1">ssh-keyscan(1)</a>.
246: <li>Move <a href="https://man.openbsd.org/xdm.1">xdm(1)</a>'s PID file from xdm-pid to xdm.pid in /var/run, maintaining consistancy.
247: <li>Delay decision to make a new <a href="https://man.openbsd.org/hash.3">hash(3)</a> table or not until after calling <a href="https://man.openbsd.org/open.2">open(2)</a>, clearing up problems with file locking.
248: <li><a href="https://man.openbsd.org/vlan.4">vlan(4)</a> changes: utilize IFCAP_VLAN_MTU and IFCAP_VLAN_HWTAGGING capabilities; LINK0 and MTU ambiguity are no more; MTU's can only be changed within the scope of the parent's MTU.
249: <li>Repair non-blocking mode issues in <a href="https://man.openbsd.org/syslogd.8">syslogd(8)</a>, avoiding grief with locked terminals.
1.1 deraadt 250: <li>Make all cases of .Sh AUTHOR and .Sh EXAMPLE plural in manual pages.
1.60 bentley 251: <li>New <a href="https://man.openbsd.org/sysctl.3">sysctl(3)</a> nkmempages that reports how many pages are in kmem_map.
252: <li>Support stateless <a href="https://man.openbsd.org/tcp.4">tcp(4)</a> normalization in <a href="https://man.openbsd.org/pf.4">pf(4)</a>.
253: <li>Import <a href="https://man.openbsd.org/x99token.1">x99token(1)</a>, a software x99 token calculator.
254: <li>Add support for EDNS0 extended flag DNSSEC OK to the <a href="https://man.openbsd.org/resolver.3">resolver(3)</a> routines.
255: <li>Don't send a NUL on the end of CHAP SUCCESS packets in <a href="https://man.openbsd.org/ppp.8">ppp(8)</a> so that WindowsME and Windows98 won't mysteriously fail when encryption is enabled.
256: <li>Allocate <a href="https://man.openbsd.org/uvm.9">uvm(9)</a> page buckets from kernel_map, saving kmem_map space on machines with lots of physical memory.
257: <li>In <a href="https://man.openbsd.org/ppp.8">ppp(8)</a>, compensate for a Windows 98 bug when sending a CHAP81 challenge response.
258: <li>Support the SmartcardDevice option in <a href="https://man.openbsd.org/ssh.1">ssh(1)</a> to specify which smartcard device to use.
1.1 deraadt 259: <li>Step down only one Ultra DMA mode at a time when downgrading.
260: <li>On DMA timeouts, stop busmaster PCIIDE and reset channel.
1.60 bentley 261: <li>Don't <a href="https://man.openbsd.org/malloc.3">malloc(3)</a> too much and choke in ELF execution.
262: <li>Support rule skipping in <a href="https://man.openbsd.org/pf.4">pf(4)</a>.
263: <li>Allow negative lock length with <a href="https://man.openbsd.org/lockf.3">lockf(3)</a>, making it compliant to specification.
264: <li>In <a href="https://man.openbsd.org/top.1">top(1)</a>, abort if <a href="https://man.openbsd.org/stdout.4">stdout(4)</a> ever produces EOF; prevents spinning output if controlling tty disappears.
265: <li>Implement startup and shutdown hooks via <a href="https://man.openbsd.org/dohooks.9">dohooks(9)</a> and family.
266: <li><strong>SECURITY FIX: check filehandle size copied from userland</strong><br>
1.10 naddy 267: <a href="errata29.html#nfs">A source code patch is available</a>.<br>
1.60 bentley 268: <a href="stable.html">[Applied to stable]</a>
1.1 deraadt 269: <li>Nuke edlabel.
1.60 bentley 270: <li>Add support for disabling swap devices via <a href="https://man.openbsd.org/swapctl.8">swapctl(8)</a>'s -d option.
271: <li>Support <a href="https://man.openbsd.org/sshd.8">sshd(8)</a> configuration file and key testing via the -t option.
1.1 deraadt 272: <li>Change vop_symlink and vop_mknod so that they return the created node in a way that the caller can actually utilize it.
1.60 bentley 273: <li>Use <a href="https://man.openbsd.org/vfork.2">vfork(2)</a> safely in <a href="https://man.openbsd.org/sup.1">sup(1)</a>.
1.1 deraadt 274: <li>New flag PMAP_CANFAIL that tells pmap_enter that it can fail if there aren't enough resources instead of panicing.
1.60 bentley 275: <li>Make non-stateful and stateful <a href="https://man.openbsd.org/pf.4">pf(4)</a> filtering work on <a href="https://man.openbsd.org/bridge.4">bridge(4)</a> devices.
1.1 deraadt 276: <li>Initialize arpcom later; it could be incorrectly initialized if done before bridge_input().
1.60 bentley 277: <li>Enable challenge-response authentication by default in <a href="https://man.openbsd.org/ssh.1">ssh(1)</a>.
278: <li>Fix/complete <a href="https://man.openbsd.org/pf.4">pf(4)</a> binary operators.
279: <li>Repair signal race in <a href="https://man.openbsd.org/m4.1">m4(1)</a>.
280: <li>Ensure <a href="https://man.openbsd.org/make.1">make(1)</a> doesn't dump core when reporting open conditionals.
1.1 deraadt 281: <li>Promote PMAP_NEW option to mandatory status.
282: <li>In the netinet subsystem, zero the TCP checksum field before calculating the new value; fixes problem with bad checksums on keepalives.
1.60 bentley 283: <li>Use 64-bit integers for some ipcomp byte counts, fixing strange results with <a href="https://man.openbsd.org/netstat.1">netstat(1)</a>.
284: <li>Support Addonics FlexPort 8S via <a href="https://man.openbsd.org/addcom.4">addcom(4)</a>.
285: <li>Ignore O_TRUNC on <a href="https://man.openbsd.org/open.2">open(2)</a> when not opening a regular file.
1.1 deraadt 286: <li>On ext2fs, ffs, and ufs partitions, don't truncate anything except for symlinks, directories, and regular files.
287: <li>Repair kern_msgbuf under sparc.
1.60 bentley 288: <li>Support DEC EtherWorks cards via <a href="https://man.openbsd.org/lc.4">lc(4)</a>.
1.1 deraadt 289: <li>Bring na.phone up to date.
1.60 bentley 290: <li>The <a href="https://man.openbsd.org/iha.4">iha(4)</a> driver wasn't able to update the EEPROM, so don't even bother.
291: <li>Rework ata and <a href="https://man.openbsd.org/wdc.4">wdc(4)</a> probing code; deal better with floating buses and supress spurious interrupts.
1.1 deraadt 292: <li>Plug memory leak in pw_copy() found in libutil.
293: <li>Put Kerberos 5 things in libkrb5, out of libkafs.
1.60 bentley 294: <li>Allow <a href="https://man.openbsd.org/sshd.8">sshd(8)</a> to be compatible in all 4 combinations of Kerberos 4 and Kerberos 5 settings.
295: <li>When <a href="https://man.openbsd.org/ssh.1">ssh(1)</a> is reading a password, don't panic if <a href="https://man.openbsd.org/fork.2">fork(2)</a> or <a href="https://man.openbsd.org/pipe.2">pipe(2)</a> fail; just return an empty password.
296: <li>Sync <a href="https://man.openbsd.org/rtsold.8">rtsold(8)</a> to latest KAME, fixing a memory leak and a timer value.
297: <li>Change quad types on alpha to "long long" as opposed to "long", allowing <a href="https://man.openbsd.org/printf.3">printf(3)</a>'s "%lld" format to be used without a bogus cast.
298: <li>In the <a href="https://man.openbsd.org/iha.4">iha(4)</a> driver, allow sync to be negotiated even if wide is not.
299: <li>Modify <a href="https://man.openbsd.org/nv.4">nv(4)</a> <a href="https://man.openbsd.org/XFree86.1">XFree86(1)</a> driver as to avoid the dimming text mode problem.
1.1 deraadt 300: <li>Add a BSD authentication module for radius authentication.
1.60 bentley 301: <li>Make sure that <a href="https://man.openbsd.org/ld.1">ld(1)</a> references all aliases to avoid them being only partially resolved.
302: <li>Ensure <a href="https://man.openbsd.org/ppp.8">ppp(8)</a> calculates the number of key changes correctly.
1.1 deraadt 303: <li>Repair the NFS server's request tracking during write-gathering, thus avoiding client hangs.
1.60 bentley 304: <li>Use <a href="https://man.openbsd.org/login.conf.5">login.conf(5)</a> for <a href="https://man.openbsd.org/passwd.1">passwd(1)</a> variables as opposed to <a href="https://man.openbsd.org/passwd.conf.5">passwd.conf(5)</a>.
305: <li>Yank PF_ENCAP support out of <a href="https://man.openbsd.org/isakmpd.8">isakmpd(8)</a>.
306: <li>Fix-up multicast settings in <a href="https://man.openbsd.org/netstart.8">netstart(8)</a>.
1.1 deraadt 307: <li>Bump MSIZE up to 256.
1.60 bentley 308: <li>IP/TCP/UDP hardware checksumming for <a href="https://man.openbsd.org/nge.4">nge(4)</a>; limited by MTU.
309: <li>Avoid segmentation fault when <a href="https://man.openbsd.org/mg.1">mg(1)</a> can't read an init file.
310: <li>Support for <a href="https://man.openbsd.org/ipcomp.4">ipcomp(4)</a>; disabled by default.
1.1 deraadt 311: <li>Show kern_fthread to the door.
1.60 bentley 312: <li>Userland <a href="https://man.openbsd.org/iopctl.8">iopctl(8)</a> control utility for <a href="https://man.openbsd.org/iop.4">iop(4)</a>.
313: <li>In <a href="https://man.openbsd.org/passwd.1">passwd(1)</a>, lock the <a href="https://man.openbsd.org/passwd.5">passwd(5)</a> file after having gotten a new password from the user; also change the actual locking procedure.
1.1 deraadt 314: <li>Support for /etc/wsconsctl.conf.
1.60 bentley 315: <li>Handle descriptors 0, 1, or 2 being closed when <a href="https://man.openbsd.org/ppp.8">ppp(8)</a> is invoked.
316: <li>Reduce MTU by 2 after MPPE has been negotiated in <a href="https://man.openbsd.org/ppp.8">ppp(8)</a>.
317: <li>Merge pdksh patch into <a href="https://man.openbsd.org/ksh.1">ksh(1)</a>, fixing some problems with propagated return values in multi-command lines.
318: <li>Utilize the welcome variable from <a href="https://man.openbsd.org/login.conf.5">login.conf(5)</a>, in <a href="https://man.openbsd.org/ftpd.8">ftpd(8)</a>, instead of hard-coding /etc/motd.
319: <li>Discipline the <a href="https://man.openbsd.org/audio.4">audio(4)</a> device so it gets along with <a href="https://man.openbsd.org/revoke.2">revoke(2)</a>.
1.1 deraadt 320: <li>Repair NFS-related problem with diskless clients by getting the root filehandle via nfs_root.
1.60 bentley 321: <li>Add support for screen switching to <a href="https://man.openbsd.org/wsconsctl.8">wsconsctl(8)</a>.
322: <li>Change <a href="https://man.openbsd.org/wsconsctl.8">wsconsctl(8)</a>'s interface to be more <a href="https://man.openbsd.org/sysctl.8">sysctl(8)</a>-like.
1.1 deraadt 323: <li>Shuffle around maxlen setting inside the net subsystem to avoid potential problems.
1.60 bentley 324: <li>Make <a href="https://man.openbsd.org/icmp.4">icmp(4)</a> error checking saner.
325: <li>Initial <a href="https://man.openbsd.org/ip6.9">ip6(9)</a> support for <a href="https://man.openbsd.org/isakmpd.8">isakmpd(8)</a>.
326: <li>Packet normalization support for <a href="https://man.openbsd.org/pf.4">pf(4)</a>.
327: <li>Userland <a href="https://man.openbsd.org/sectok.1">sectok(1)</a> control program.
1.1 deraadt 328: <li>Repair kern_fork brain-damage.
1.60 bentley 329: <li><a href="https://man.openbsd.org/uvm.9">uvm(9)</a> and MNN are no longer optional.
330: <li>Import <a href="https://man.openbsd.org/altq.9">altq(9)</a>: alternate queuing support.
1.1 deraadt 331: <li>Poof! The old vm disappears.
332: <li>No more M_COPY_* macros; use M_MOVE_* or M_DUP_*.
1.60 bentley 333: <li>Add <a href="https://man.openbsd.org/dmesg.8">dmesg(8)</a>, <a href="https://man.openbsd.org/wicontrol.8">wicontrol(8)</a>, and <a href="https://man.openbsd.org/ancontrol.8">ancontrol(8)</a> to powerpc's ramdisk.
1.1 deraadt 334: <li>New mvmeppc port.
1.60 bentley 335: <li>Many mvme68k improvements including: switching to <a href="https://man.openbsd.org/uvm.9">uvm(9)</a>, repairing system trace, cleanup of locore.s, KNF, etc.
336: <li><a href="https://man.openbsd.org/pciide.4">pciide(4)</a> support for powerpc.
337: <li>Change <a href="https://man.openbsd.org/icmp6.4">icmp6(4)</a> packet header length computation so it works with both 4.4BSD's M_COPY_PKTHDR and OpenBSD 2.9+'s M_COPY_PKTHDR.
338: <li>Implement <a href="https://man.openbsd.org/getpeereid.2">getpeereid(2)</a>, allowing local-domain servers to determine client credentials.
339: <li>Support generic BSD authentication in <a href="https://man.openbsd.org/xdm.1">xdm(1)</a>.
340: <li>Disable <a href="https://man.openbsd.org/usb.4">usb(4)</a> on alpha by default.
1.1 deraadt 341: <li>Kerberos v5 support for SSH1.
1.60 bentley 342: <li>Hardware RNG support in <a href="https://man.openbsd.org/lofn.4">lofn(4)</a>.
343: <li>Smartcard support in <a href="https://man.openbsd.org/ssh-agent.1">ssh-agent(1)</a> and <a href="https://man.openbsd.org/ssh.1">ssh(1)</a>.
1.1 deraadt 344: <li>Large -Wall/-Werror/-W... ongoing cleanup throughout tree.
345: <li>Nuke mips port.
1.60 bentley 346: <li>Initial import of <a href="https://man.openbsd.org/iop.4">iop(4)</a> (I2O) framework.
347: <li>Rewrite <a href="https://man.openbsd.org/nc.1">nc(1)</a>, adding <a href="https://man.openbsd.org/ip6.4">ip6(4)</a> support.
348: <li>In <a href="https://man.openbsd.org/su.1">su(1)</a>, offload root instances for Kerberos to the auth program.
349: <li>Disable SMB decoding in <a href="https://man.openbsd.org/tcpdump.8">tcpdump(8)</a>.
1.1 deraadt 350: <li>Enable audio on alpha by default.
1.60 bentley 351: <li>Endian fixes in the <a href="https://man.openbsd.org/wi.4">wi(4)</a> driver.
1.1 deraadt 352: <li>Adios NQNFS.
353: <li>Nuke the pmax port.
354: <li>Don't perform TCP/UDP hardware checksumming when doing IP fragmentation.
355: <li>Delayed checksum support in the netinet subsystem.
1.60 bentley 356: <li>Support setting the Ethernet address through <a href="https://man.openbsd.org/ifconfig.8">ifconfig(8)</a> for <a href="https://man.openbsd.org/vr.4">vr(4)</a> cards.
357: <li>Bypass <a href="https://man.openbsd.org/ipsec.4">ipsec(4)</a> for all <a href="https://man.openbsd.org/dhcp.8">dhcp(8)</a> traffic, avoiding potential problems with newly booted clients.
1.1 deraadt 358: <li>Modify timeouts for IP spd expirations.
1.60 bentley 359: <li>Internal fiddling of <a href="https://man.openbsd.org/nfsd.8">nfsd(8)</a>'s handling of its root vnode.
360: <li>Import <a href="https://man.openbsd.org/pf.4">pf(4)</a>, an ipf-compatible packet filter.
1.1 deraadt 361: <li>Avoid panics under i386 if bus/dev/func numbers for PCI are not valid.
1.60 bentley 362: <li>New <a href="https://man.openbsd.org/sysctl.3">sysctl(3)</a> KERN_POOLS to retrieve pool information from the kernel.
363: <li>Cleanup and update <a href="https://man.openbsd.org/dhcp.8">dhcp(8)</a> to 2.0pl5.
364: <li>Utilize <a href="https://man.openbsd.org/readpassphrase.3">readpassphrase(3)</a> in <a href="https://man.openbsd.org/ssh.1">ssh(1)</a>.
1.1 deraadt 365: <li>Allow access to /dev/pci.
1.60 bentley 366: <li>Repair multiple key handling in <a href="https://man.openbsd.org/wicontrol.8">wicontrol(8)</a>.
1.1 deraadt 367: <li>New ether_input_mbuf to ease transition from ether_header in ether_input; drivers will migrate to this.
368: <li>Wave goodbye to kernfs.
1.60 bentley 369: <li>Replace existing <a href="https://man.openbsd.org/telnetd.8">telnetd(8)</a> with the one from heimdal-0.3f.
370: <li>Assorted modifications to <a href="https://man.openbsd.org/uvm.9">uvm(9)</a>.
371: <li><strong>RELIABILITY FIX: link XF86Setup
372: against the right version of libXxf86vm.a.</strong><br> Fix the
1.1 deraadt 373: problem of corrupted XF86Config file produced by XF86Setup.<br>
1.10 naddy 374: <a href="errata29.html#XF86Setup">A source code patch is available</a>.<br>
1.60 bentley 375: <a href="stable.html">[Applied to stable]</a>
376: <li>Avoid a pidfile/sigterm race in <a href="https://man.openbsd.org/sshd.8">sshd(8)</a>.
1.1 deraadt 377: <li>Merge the system's crypto.h into crptodev.h, avoiding name conflicts with OpenSSL.
1.60 bentley 378: <li>Various <a href="https://man.openbsd.org/pool.9">pool(9)</a> improvements including a new pool_cache() function and cleaner locking.
1.1 deraadt 379: <li>Spelling audit throughout the manual pages.
1.60 bentley 380: <li>Try to have <a href="https://man.openbsd.org/ssh-keygen.1">ssh-keygen(1)</a> decode ssh-3.0.0 private RSA keys.
381: <li>New <a href="https://man.openbsd.org/mg.1">mg(1)</a> feature: M-x theo.
1.1 deraadt 382: <li>Support PCI bus configuration from userland.
383: <li>Add TCP, UDP, and IPv4 hardware checksum processing, excluding outbound TCP/UDP.
1.60 bentley 384: <li>Internal shuffling of <a href="https://man.openbsd.org/vnode.9">vnode(9)</a> operations in some filesystems.
385: <li>Disable interrupts in the <a href="https://man.openbsd.org/wi.4">wi(4)</a> driver before mapping and establishing the interrupt, thereby avoiding a race condition.
1.1 deraadt 386: <li>MI loadfile support; currently only used on powerpc.
1.60 bentley 387: <li>Obsolete *known_hosts2 in <a href="https://man.openbsd.org/ssh.1">ssh(1)</a>.
388: <li>Some <a href="https://man.openbsd.org/hifn.4">hifn(4)</a> fixes, largely related to descriptor lengths.
389: <li>Don't let <a href="https://man.openbsd.org/ssh.1">ssh(1)</a> overwrite argv.
390: <li>Shrink <a href="https://man.openbsd.org/dmesg.8">dmesg(8)</a>.
391: <li>Merge authorized_keys2 into authorized_keys in <a href="https://man.openbsd.org/ssh.1">ssh(1)</a>.
392: <li>Provide a <a href="https://man.openbsd.org/sysctl.3">sysctl(3)</a> interface to msgbuf; handy for <a href="https://man.openbsd.org/dmesg.8">dmesg(8)</a>, allowing it to run without setgid.
1.1 deraadt 393: <li>Upgrade to heimdal-0.3f.
1.60 bentley 394: <li>Use <a href="https://man.openbsd.org/moduli.5">moduli(5)</a> instead of the deprecated primes.
395: <li>Add RNG support in <a href="https://man.openbsd.org/hifn.4">hifn(4)</a> for the 7951.
396: <li>In <a href="https://man.openbsd.org/isakmpd.8">isakmpd(8)</a>, fallback to <a href="https://man.openbsd.org/stat.2">stat(2)</a> when <a href="https://man.openbsd.org/readdir.3">readdir(3)</a> doesn't return d_type.
1.1 deraadt 397: <li>Apply KNF to many kernel sources.
1.60 bentley 398: <li>Don't forward <a href="https://man.openbsd.org/ip6.4">ip6(4)</a> packets back into point-to-point link if the packet's destination address matches said p2p link's interface.
1.1 deraadt 399: <li>Lots of manual page cleanups.
400: <li>Upgrade to openssl-engine-0.9.6a.
1.60 bentley 401: <li>Many fixes in the kernel's <a href="https://man.openbsd.org/lockf.3">lockf(3)</a> code including avoiding livelocks on ptrace-related scenarios.
402: <li>Modify file locking routine in the <a href="https://man.openbsd.org/skey.3">skey(3)</a> library, preventing a race condition, plus other modifications; integrate.
403: <li>Document <a href="https://man.openbsd.org/physio.9">physio(9)</a>.
404: <li>More variables in <a href="https://man.openbsd.org/login.conf.5">login.conf(5)</a>: login-timeout, login-tries, and login-backoff.
405: <li>Improve <a href="https://man.openbsd.org/ppp.8">ppp(8)</a>: handle hardware-imposed MTU/MRU limitations; support stateful MPPE (Microsoft encryption).
406: <li>Repair <a href="https://man.openbsd.org/vi.1">vi(1)</a> to avoid spinouts when creating temporary files.
407: <li>Make <a href="https://man.openbsd.org/ftp.1">ftp(1)</a> use binary for transfers as opposed to ascii.
408: <li>Merge <a href="https://man.openbsd.org/passwd.conf.5">passwd.conf(5)</a> into <a href="https://man.openbsd.org/login.conf.5">login.conf(5)</a> and add passwordtime and minpasswordlen variables.
1.1 deraadt 409: <li>Move microcode includes around to avoid erroneously installing them, among other reasons.
410: <li>Overhaul some kern_exec internals, cleaning up the setuid/setgid-checking code.
1.60 bentley 411: <li>Adapt <a href="https://man.openbsd.org/skeyinfo.1">skeyinfo(1)</a> to use BSD authentication and removal of the suid root bit.
1.1 deraadt 412: <li>Improve powerpc's awacs driver; many interrupt fixes.
1.60 bentley 413: <li>Allow the use of ^T in passphrases read by <a href="https://man.openbsd.org/readpassphrase.3">readpassphrase(3)</a>.
414: <li><strong>SECURITY FIX: avoid race in <a href="https://man.openbsd.org/execve.2">execve(2)</a> when checking flags for <a href="https://man.openbsd.org/ptrace.2">ptrace(2)</a>.</strong><br>
1.10 naddy 415: <a href="errata29.html#kernexec">A source code patch is available</a>.<br>
1.60 bentley 416: <a href="stable.html">[Applied to stable]</a>
1.1 deraadt 417: <li>Update if_lastchange when IFF_UP is changed instead of on every packet transmission and receipt.
418: <li>VM renovations on mvme88k.
1.60 bentley 419: <li>Use <a href="https://man.openbsd.org/va_start.3">va_start(3)</a> and <a href="https://man.openbsd.org/va_end.3">va_end(3)</a> for every call to <a href="https://man.openbsd.org/vfprintf.3">vfprintf(3)</a> and associates.
420: <li>Replace commonly used static lists with persistent growable arrays in <a href="https://man.openbsd.org/make.1">make(1)</a>.
421: <li>Have <a href="https://man.openbsd.org/slstats.8">slstats(8)</a> use an <a href="https://man.openbsd.org/ioctl.2">ioctl(2)</a> so it doesn't need to be setgid.
1.1 deraadt 422: <li>Ensure *chi doesn't receive interrupts before being initialized.
423: <li>Let pci_mapreg_map() take an extra argument to limit the size of the PCI region to map so we can still work with things publishing too much PCI memory.
1.60 bentley 424: <li>Use lpd_flags in <a href="https://man.openbsd.org/rc.8">rc(8)</a>, allowing flags to be passed to <a href="https://man.openbsd.org/lpd.8">lpd(8)</a>.
1.1 deraadt 425: <li>Support EDNS0 (RFC2671) buffer size notification for DNS queries.
426: <li>Upgrade to binutils 2.10.1.
427: <li>Protect include files in /usr/include/net against multiple inclusion.
428: <li>Fix unmapped interrupt problems on some VIA-based boards.
1.60 bentley 429: <li>New options, improvements, and fixes for <a href="https://man.openbsd.org/wicontrol.8">wicontrol(8)</a>.
1.1 deraadt 430: <li>Palm support in libsectok.
1.60 bentley 431: <li>Rewrite <a href="https://man.openbsd.org/ldd.1">ldd(1)</a>.
432: <li><strong>RELIABILITY FIX: use correct <a href="https://man.openbsd.org/db.3">db(3)</a> pointers in <a href="https://man.openbsd.org/pwd_mkdb.8">pwd_mkdb(8)</a>, and don't star out empty passwords</strong><br>
1.10 naddy 433: <a href="errata29.html#pwd_mkdb">A source code patch is available</a>.<br>
1.60 bentley 434: <a href="stable.html">[Applied to stable]</a>
435: <li>Assorted <a href="https://man.openbsd.org/ppp.8">ppp(8)</a> alterations.
436: <li>Correct initialization of the policy_id field for SA structures in <a href="https://man.openbsd.org/isakmpd.8">isakmpd(8)</a>.
437: <li>PCI shim for <a href="https://man.openbsd.org/wi.4">wi(4)</a>.
438: <li>Repair preservation option in <a href="https://man.openbsd.org/cp.1">cp(1)</a>.
439: <li>Allow the number of <a href="https://man.openbsd.org/gre.4">gre(4)</a> devices to be changed in <a href="https://man.openbsd.org/boot_config.8">boot_config(8)</a>.
440: <li><a href="https://man.openbsd.org/rc.8">rc(8)</a> no longer starts netatalk -- if installed -- by default.
441: <li><strong>RELIABILITY FIX: compute length correctly on certificates in <a href="https://man.openbsd.org/isakmpd.8">isakmpd(8)</a>.</strong><br>
1.10 naddy 442: <a href="errata29.html#isakmpd">A source code patch is available</a>.<br>
1.60 bentley 443: <a href="stable.html">[Applied to stable]</a>
444: <li>Ensure <a href="https://man.openbsd.org/kqueue.2">kqueue(2)</a> works on <a href="https://man.openbsd.org/mount_ext2fs.8">ext2fs(8)</a>.
1.1 deraadt 445: <li>More pipe fiddling.
1.60 bentley 446: <li>Enforce Remote-ID specified in Phase 1 peer section in <a href="https://man.openbsd.org/isakmpd.8">isakmpd(8)</a>.
1.1 deraadt 447: <li>Ongoing license audit and copyright notice cleanup.
448: <li>Extend pfkeyv2's RFC2367 compliance and fix backward compatibility problems.
449: <li>Adjust routing socket message to the right size.
1.60 bentley 450: <li>Switch UID when <a href="https://man.openbsd.org/sshd.8">sshd(8)</a> cleans up temporary files and sockets.
451: <li>Speed up <a href="https://man.openbsd.org/arc4random.3">arc4random(3)</a> in some net subsystems.
1.1 deraadt 452: <li>Upgrade to XFree86 4.1.0.
453: <li>Use default hoplimit when icmp6_error doesn't know about the incoming interface.
1.60 bentley 454: <li>Create <a href="https://man.openbsd.org/sysctl.3">sysctl(3)</a> parameters for ccpu, diskstats, fscale, nprocs, and physmem.
455: <li>New <a href="https://man.openbsd.org/md5.1">md5(1)</a> implementation with a BSD copyright and other improvements; includes regression test.
456: <li>Improve <a href="https://man.openbsd.org/swapctl.8">swapctl(8)</a>.
457: <li>Don't allow packets that need <a href="https://man.openbsd.org/ipsec.4">IPsec(4)</a> processing to be bridge-broadcast.
458: <li>Expand handling of X509 and KeyNote certificates in <a href="https://man.openbsd.org/isakmpd.8">isakmpd(8)</a>.
459: <li>Fix some <a href="https://man.openbsd.org/tcp.4">tcp(4)</a> behaviour with connections in the CLOSING state.
460: <li>Some <a href="https://man.openbsd.org/ld.so.1">ld.so(1)</a> renovations.
461: <li>Repair <a href="https://man.openbsd.org/kqueue.2">kqueue(2)</a> related panic.
462: <li><strong>SECURITY FIX: verify location when using <a href="https://man.openbsd.org/fts.3">fts(3)</a> to pop up directories.</strong><br>
1.10 naddy 463: <a href="errata29.html#fts">A source code patch is available</a>.<br>
1.60 bentley 464: <a href="stable.html">[Applied to stable]</a>
1.1 deraadt 465: <li>Update root device selection routines for sun3.
1.60 bentley 466: <li>Miscellaneous <a href="https://man.openbsd.org/fxp.4">fxp(4)</a> improvements.
467: <li>Remove <a href="https://man.openbsd.org/ipf.4">ipf(4)</a> from the tree.
468: <li>Remove <a href="https://man.openbsd.org/i386/pcvt.4">pcvt(4)</a> from the tree.
469: <li>Add BSD authentication support to userland programs; authorization defaults in <a href="https://man.openbsd.org/login.conf.5">login.conf(5)</a>.
470: <li><strong>SECURITY FIX: Update to <a href="https://man.openbsd.org/sendmail.8">sendmail(8)</a> 8.11.4 which addresses signal race conditions.</strong><br>
1.10 naddy 471: <a href="errata29.html#sendmail">A source code patch is available</a>.<br>
1.60 bentley 472: <a href="stable.html">[Applied to stable]</a>
1.1 deraadt 473: <li>Hardware clock support on powerpc.
1.60 bentley 474: <li>Fix directory state tracking in <a href="https://man.openbsd.org/fsck.8">fsck(8)</a>.
475: <li>New BIOCGHDRCMPLT and BIOCSHDRCMPLT ioctls for <a href="https://man.openbsd.org/bpf.4">bpf(4)</a> to disable overwriting of the link-level source address.
1.1 deraadt 476: <li>Support interface capabilities.
477: <li>Repair cluster_rbuild() in vfs_cluster.
1.60 bentley 478: <li>Twiddle with the <a href="https://man.openbsd.org/atapiscsi.4">atapiscsi(4)</a> driver.
479: <li><a href="https://man.openbsd.org/fxp.4">fxp(4)</a> bug fixes.
480: <li>Bring back the old (no ECONNABORTED) <a href="https://man.openbsd.org/accept.2">accept(2)</a> behaviour for Unix domain sockets.
481: <li>Support Heimdal's <a href="https://man.openbsd.org/kerberos.1">Kerberos 5</a>.
482: <li>Upgrade to <a href="https://man.openbsd.org/perl.1">Perl 5.6.1</a>.
483: <li>Allow arbitrary atime/mtime setting on <a href="https://man.openbsd.org/mount_ext2fs.8">ext2fs(8)</a> volumes.
484: <li>Fix lookup code in <a href="https://man.openbsd.org/mount_procfs.8">procfs(8)</a>.
485: <li>Many assorted <a href="https://man.openbsd.org/mg.1">mg(1)</a> fixes and improvements.
486: <li>Clean up and shrink <a href="https://man.openbsd.org/make.1">make(1)</a>.
487: <li>Various improvements to the <a href="https://man.openbsd.org/ubsec.4">ubsec(4)</a> driver.
488: <li>Fix panics in the <a href="https://man.openbsd.org/ep.4">ep(4)</a> driver by initializing packet tags.
1.1 deraadt 489: <li>New PCMCIA products from NetBSD.
490: <li>Utilize packet tags in the net subsystems.
1.60 bentley 491: <li>Diversify time parameter parsing in <a href="https://man.openbsd.org/sshd.8">sshd(8)</a>.
492: <li>Better keyboard-interactive support for <a href="https://man.openbsd.org/ssh.1">ssh(1)</a>.
493: <li>Convert <a href="https://man.openbsd.org/lseek.2">lseek(2)</a> <a href="https://man.openbsd.org/read.2">read(2)</a>/<a href="https://man.openbsd.org/write.2">write(2)</a> to <a href="https://man.openbsd.org/pread.2">pread(2)</a>/<a href="https://man.openbsd.org/pwrite.2">pwrite(2)</a> in <a href="https://man.openbsd.org/kvm.3">kvm(3)</a>.
1.1 deraadt 494: <li>Import libsectok, used for ISO 7816 smart cards and iButtons.
495: <li>Tweak delays in the i82365 PCMCIA controller driver to avoid momentary freezes.
1.60 bentley 496: <li>Improve rate support in <a href="https://man.openbsd.org/auich.4">auich(4)</a>.
497: <li>Make vax use <a href="https://man.openbsd.org/wscons.4">wscons(4)</a> and enable the smg framebuffer.
498: <li>More <a href="https://man.openbsd.org/select.2">select(2)</a> fixes in <a href="https://man.openbsd.org/ssh.1">ssh(1)</a>.
499: <li>Fix X11 client bug in <a href="https://man.openbsd.org/ssh.1">ssh(1)</a>.
1.1 deraadt 500: <li>PMAP_NEW support on the vax and hp300.
501: <li>Create COMPAT_23 and COMPAT_25 options.
1.60 bentley 502: <li>In <a href="https://man.openbsd.org/vr.4">vr(4)</a>, handle suspend mode better on the VT6102.
503: <li>Do not check return values for <a href="https://man.openbsd.org/malloc.9">malloc(9)</a> calls with M_WAIT or M_WAITOK.
1.1 deraadt 504: <li>New option: SMALL_KERNEL, subtly changes some kernel semantics to change the kernel size significantly. Use *only* for boot floppies.
505: <li>Change ip_sum semantics in ip_output().
1.60 bentley 506: <li>Compress <a href="https://man.openbsd.org/ac97.4">ac97(4)</a> vendor tables.
507: <li><a href="https://man.openbsd.org/ac97.4">ac97(4)</a> now knows about rev 2.2.
1.1 deraadt 508: <li>Squish compatopts to a more sensible set, killing COMPAT_09, COMPAT_10, COMPAT_11.
509: <li>Shrink the alpha boot blocks a bit.
510: <li>We no longer support ECOFF kernel loading in the alpha boot block.
1.60 bentley 511: <li>Teach <a href="https://man.openbsd.org/ac97.4">ac97(4)</a> about more CODEC models.
512: <li>At boot time, <a href="https://man.openbsd.org/swapon.8">swapon(8)</a> before <a href="https://man.openbsd.org/fsck.8">fsck(8)</a> is run.
513: <li>Fix <a href="https://man.openbsd.org/fts.3">fts(3)</a> to handle very long paths.
514: <li>Repair various signal handler bugs in <a href="https://man.openbsd.org/pppd.8">pppd(8)</a>.
515: <li>Handle memory allocation failures in <a href="https://man.openbsd.org/fsck_ffs.8">fsck_ffs(8)</a> and <a href="https://man.openbsd.org/fsck_ext2fs.8">fsck_ext2fs(8)</a> better.
516: <li>Fix a recently introduced bug in <a href="https://man.openbsd.org/supfilsrv.8">supfilsrv(8)</a>.
517: <li>Correct acceptance of ARP packets coming in on non-IP <a href="https://man.openbsd.org/bridge.4">bridge(4)</a> interfaces.<br>
518: <a href="stable.html">[Applied to stable]</a>
519: <li><a href="https://man.openbsd.org/txp.4">txp(4)</a> now works on the alpha.
520: <li>More fixes to <a href="https://man.openbsd.org/make.1">make(1)</a>.
521: <li>Check a <a href="https://man.openbsd.org/calloc.3">calloc(3)</a> in <a href="https://man.openbsd.org/fsck_ffs.8">fsck_ffs(8)</a>.
1.1 deraadt 522: <li>Add a temporary DTYPE_CRYPTO until device cloning support shows up.
523: <li>Fixes to fdescfs.
1.60 bentley 524: <li>busdma changes to <a href="https://man.openbsd.org/txp.4">txp(4)</a>, preparing for the alpha.
525: <li>Split <a href="https://man.openbsd.org/wi.4">wi(4)</a> into bus dependent and independent parts.
1.1 deraadt 526: <li>On hp300, splhigh() in cpu_exit().
527: <li>Misc cleanup of the shared m68k codebase.
1.60 bentley 528: <li>More <a href="https://man.openbsd.org/bus_dmamap_sync.9">bus_dmamap_sync(9)</a> in <a href="https://man.openbsd.org/hifn.4">hifn(4)</a>.
529: <li>Initial non-working alpha <a href="https://man.openbsd.org/ld.so.1">ld.so(1)</a> support.
530: <li>Support newer versions of the <a href="https://man.openbsd.org/lmc.4">lmc(4)</a> cards.
531: <li>Kill a debug message in <a href="https://man.openbsd.org/ubsec.4">ubsec(4)</a>.
532: <li>Add swiss german keyboard layout to <a href="https://man.openbsd.org/wscons.4">wscons(4)</a>.
1.1 deraadt 533: <li>Smoke out the OLD_PIPE code.
534: <li>krb4-1.0.8
1.60 bentley 535: <li>Bug fix to <a href="https://man.openbsd.org/make.1">make(1)</a>.
1.1 deraadt 536: <li>Speed up top-level tree Makefiles by doing exec for subshells in new directories.
537: <li>Artful fiddling of the kernel pipe stat code.
1.60 bentley 538: <li>No need for setgid kmem on <a href="https://man.openbsd.org/iostat.8">iostat(8)</a> anymore.
539: <li>Add more <a href="https://man.openbsd.org/sysctl.3">sysctl(3)</a> support in the kernel.
1.1 deraadt 540: <li>Make the alpha floppies fit again...
1.60 bentley 541: <li>Make <a href="https://man.openbsd.org/hifn.4">hifn(4)</a> use <a href="https://man.openbsd.org/bus_dma.9">bus_dma(9)</a>. Now works on the alpha.
542: <li>Initial cut at userland hardware <a href="https://man.openbsd.org/crypto.4">crypto(4)</a> support.
543: <li>In <a href="https://man.openbsd.org/ubsec.4">ubsec(4)</a>, initial support for the Broadcom 5820.
1.1 deraadt 544: <li>Honour ddb.console on sun3.
545: <li>On the pmax, fix a curproc misuse.
1.60 bentley 546: <li>In <a href="https://man.openbsd.org/pcibios.4">pcibios(4)</a>, deal with buggy BIOSs which incorrectly leave the router as 000:00:0.
1.1 deraadt 547: <li>hp300 cleanup in progress...
1.60 bentley 548: <li>Solve a problem of Lilliputan proportions in powerpc <a href="https://man.openbsd.org/isinf.3">isinf(3)</a>.
549: <li>Mickey goes mad and does a <a href="https://man.openbsd.org/strlcpy.3">strlcpy(3)</a> whack on src/bin.
550: <li>Unify rdsetroot and <a href="https://man.openbsd.org/rd.4">rd(4)</a> support between almost all architectures.
1.1 deraadt 551: <li>Man page cleanups galore.
1.60 bentley 552: <li>In <a href="https://man.openbsd.org/hifn.4">hifn(4)</a> attempt to support the Hifn 7951.
553: <li>Do stdout/stderr flushing in <a href="https://man.openbsd.org/sshd.8">sshd(8)</a> using non-blocking mode.
1.1 deraadt 554: <li>Fix kerberosIV versioning link problem.
555: <li>Cleanup MAP_COPY flags in the tree.
556: <li>Use genassym.cf on alpha.
1.60 bentley 557: <li>Unify the <a href="https://man.openbsd.org/rd.4">rd(4)</a> support.
558: <li>Update <a href="https://man.openbsd.org/sysctl.8">sysctl(8)</a> and <a href="https://man.openbsd.org/vmstat.8">vmstat(8)</a> to use the new interfaces.
559: <li>Make more data available via the <a href="https://man.openbsd.org/sysctl.3">sysctl(3)</a> interface.
560: <li>Handle fastroute in the <a href="https://man.openbsd.org/bridge.4">bridge(4)</a>.
1.1 deraadt 561: <li>hp300 man page cleanup.
1.60 bentley 562: <li>Fix a resource leak in <a href="https://man.openbsd.org/twe.4">twe(4)</a>.<br>
563: <a href="stable.html">[Applied to stable]</a>
564: <li>Use <a href="https://man.openbsd.org/madvise.2">madvise(2)</a> option with MADV_FREE for <a href="https://man.openbsd.org/malloc.3">malloc(3)</a> 'h' flag.
565: <li>Support MADV_DONTNEED and MADV_FREE in <a href="https://man.openbsd.org/madvise.2">madvise(2)</a>.
1.1 deraadt 566: <li>Switch sparc to UVM and PMAP_NEW.
567: <li>Support HP425e.
1.60 bentley 568: <li>Refill <a href="https://man.openbsd.org/txp.4">txp(4)</a> receive ring only when empty -- performance enhancement.
569: <li>Fix SSH2 <code>-R</code> support in <a href="https://man.openbsd.org/ssh.1">ssh(1)</a>.
1.1 deraadt 570: <li>More pmap/uvm interface changes.
1.60 bentley 571: <li>Correct signal handling in <a href="https://man.openbsd.org/ping6.8">ping6(8)</a>.
572: <li>Implement screen blanker in <a href="https://man.openbsd.org/wscons.4">wscons(4)</a>.
573: <li>Attempt to support hifn7951 in <a href="https://man.openbsd.org/hifn.4">hifn(4)</a>.
574: <li><a href="https://man.openbsd.org/realloc.3">realloc(3)</a> fixes to <a href="https://man.openbsd.org/ipf.8">ipf(8)</a>.
1.1 deraadt 575: <li>ipf 3.4.17
576: <li>Fix kernel extent code to be more careful about ranges.
577: <li>UVM support for mac68k.
1.60 bentley 578: <li>Change i386 in_cksum failure to a <a href="https://man.openbsd.org/printf.9">printf(9)</a>, instead of a <a href="https://man.openbsd.org/panic.9">panic(9)</a>.<br>
579: <a href="stable.html">[Applied to stable]</a>
580: <li>In <a href="https://man.openbsd.org/txp.4">txp(4)</a>, add support for hardware <a href="https://man.openbsd.org/vlan.4">vlan(4)</a>.
581: <li>Fix a bug in <a href="https://man.openbsd.org/make.1">make(1)</a> exposed by the recent jumbo patch.
582: <li>Fix <a href="https://man.openbsd.org/ti.4">ti(4)</a> to handle <a href="https://man.openbsd.org/vlan.4">vlan(4)</a> properly.
1.1 deraadt 583: <li>vsunlock fixes to UVM.
1.60 bentley 584: <li>Signal ignore bug fix to <a href="https://man.openbsd.org/ssh.1">ssh(1)</a>.
1.22 tobias 585: <li>Kill i386 VM & pmap_old support.
1.60 bentley 586: <li>Fix process priority bug in <a href="https://man.openbsd.org/atrun.8">atrun(8)</a>.
587: <li>Enable <a href="https://man.openbsd.org/vlan.4">vlan(4)</a> by default in GENERIC kernels.
588: <li>Fix <a href="https://man.openbsd.org/pread.3">pread(3)</a>, <a href="https://man.openbsd.org/preadv.3">preadv(3)</a>, <a href="https://man.openbsd.org/pwrite.3">pwrite(3)</a>, and <a href="https://man.openbsd.org/pwritev.3">pwritev(3)</a> on big endian architectures.
589: <li>In <a href="https://man.openbsd.org/sendmail.8">sendmail(8)</a>, use FAST_PID_RECYCLE.
1.1 deraadt 590: <li>Remove excess (vaddr_t) casts.
591: <li>Get rid of CLSIZE and friends.
1.60 bentley 592: <li>Increase <a href="https://man.openbsd.org/strlcpy.3">strlcpy(3)</a> in parts of the tree.
593: <li>Some minor changes to <a href="https://man.openbsd.org/isakmpd.8">isakmpd(8)</a>.
1.1 deraadt 594: <li>Cleanup M_* malloc types in the kernel.
595: <li>UVM for the hp300.
1.60 bentley 596: <li>Numerous cleanups to <a href="https://man.openbsd.org/sup.1">sup(1)</a>.
597: <li>In <a href="https://man.openbsd.org/systat.8">systat(8)</a>, handle <a href="https://man.openbsd.org/kvm_nlist.3">kvm_nlist(3)</a> failing.
598: <li>Fix a channel race in <a href="https://man.openbsd.org/sshd.8">sshd(8)</a>.
599: <li>Document that <a href="https://man.openbsd.org/nc.1">nc(1)</a> no longer has a -e option.
600: <li>Fix localhost handling bug in <a href="https://man.openbsd.org/httpd.8">httpd(8)</a>.
601: <li>Jumbo patch to <a href="https://man.openbsd.org/make.1">make(1)</a> that has been brewing for a while.
602: <li>Various improvements to <a href="https://man.openbsd.org/mg.1">mg(1)</a>.
1.1 deraadt 603: <li>Big USB code update.
1.60 bentley 604: <li>Fix a signed vs unsigned error in the <a href="https://man.openbsd.org/gm.4">gm(4)</a> Ethernet driver.
605: <li>In <a href="https://man.openbsd.org/wump.6">wump(6)</a>, improve our cave topology algorithm. Don't ask.
606: <li>Force -h to override the BLOCKSIZE environment in <a href="https://man.openbsd.org/du.1">du(1)</a>.
607: <li>Substantial updates to <a href="https://man.openbsd.org/sup.1">sup(1)</a>.
608: <li>Fix a register save/restore bug in <a href="https://man.openbsd.org/clcs.4">clcs(4)</a> so that suspend/resume works better.
609: <li>Allow the right CTRL+ALT keys to work as the left ones do in <a href="https://man.openbsd.org/wskbd.4">wskbd(4)</a>.
610: <li>Continue to hack our new <a href="https://man.openbsd.org/txp.4">txp(4)</a> driver into shape.
611: <li>In <a href="https://man.openbsd.org/ifconfig.8">ifconfig(8)</a>, implement support for removing tunnel outer IP address pair.
612: <li>Revert a buggy optimization in <a href="https://man.openbsd.org/tsort.1">tsort(1)</a>.
613: <li>Use <a href="https://man.openbsd.org/pread.2">pread(2)</a> in <a href="https://man.openbsd.org/nlist.3">nlist(3)</a> instead of abusing <a href="https://man.openbsd.org/lseek.2">lseek(2)</a> with <a href="https://man.openbsd.org/read.2">read(2)</a>.
1.1 deraadt 614: <li>Remove cruft leftover from the old PCVT console driver.
1.60 bentley 615: <li>Fix filename tab-completion in <a href="https://man.openbsd.org/mg.1">mg(1)</a>.
616: <li>Convert some more drivers to the new <a href="https://man.openbsd.org/timeout.9">timeout(9)</a> interface.
1.1 deraadt 617: <li>Whack dtom() in the kernel. Fo'get about it.
1.60 bentley 618: <li>Avoid a NULL pointer dereference in <a href="https://man.openbsd.org/faithd.8">faithd(8)</a>.
619: <li>Various reset and delay fixes in <a href="https://man.openbsd.org/wdc.4">wdc(4)</a> to help certain ATAPI devices.
620: <li>Deal with suspend/resume more cleanly in <a href="https://man.openbsd.org/pccbb.4">pccbb(4)</a>.
621: <li>Better hints handling and memory allocation in <a href="https://man.openbsd.org/tsort.1">tsort(1)</a>.
1.1 deraadt 622: <li>Correct an error condition in /etc/ksh.kshrc.
1.60 bentley 623: <li>Add a koi8-r keyboard layout for <a href="https://man.openbsd.org/wskbd.4">wskbd(4)</a>.
1.1 deraadt 624: <li>Allow interoperability between OpenSSH and older ssh-2.0.x variants with weaker key generation.
1.60 bentley 625: <li>Instrument improved locking and rework SCSI a bit in <a href="https://man.openbsd.org/ami.4">ami(4)</a>.
626: <li>Cleanups to <a href="https://man.openbsd.org/ancontrol.8">ancontrol(8)</a>.
627: <li>Add a -b option to <a href="https://man.openbsd.org/ssh.1">ssh(1)</a>, similar to <a href="https://man.openbsd.org/telnet.1">telnet(1)</a>'s equivalent.
628: <li>Fix a memory handling bug in <a href="https://man.openbsd.org/telnet.1">telnet(1)</a>.
629: <li>Use <a href="https://man.openbsd.org/pool.9">pool(9)</a> interface for the VFS cache.
1.1 deraadt 630: <li>Improve OpenSSH interoperability with ssh.com-2.0.x clients.
631: <li>In the mvme88k port, replace resource maps with extents.
1.60 bentley 632: <li>Numerous fixes and updates to <a href="https://man.openbsd.org/sup.1">sup(1)</a>.
1.1 deraadt 633: </ul>
![[BACK]](/icons/back.gif){kind=icon}
Return to plus30.html CVS log ![[TXT]](/icons/text.gif){kind=icon}
![[DIR]](/icons/dir.gif){kind=icon}
Up to [local] / www