===================================================================
RCS file: /cvsrepo/anoncvs/cvs/www/plus32.html,v
retrieving revision 1.11
retrieving revision 1.12
diff -c -r1.11 -r1.12
*** www/plus32.html 2003/10/24 22:12:41 1.11
--- www/plus32.html 2004/03/25 02:41:50 1.12
***************
*** 547,553 ****
RELIABILITY FIX: Don't assume we have an active exchange during payload validation, otherwise isakmpd(8) can be made to crash.
A source code patch exists to remedy the problem.
[Applied to stable]
! ep(4) on isapnp(4) now works on alpha.
Improve the way the installer's fileset selection UI works.
Fix a potential buffer overflow in xsystrace.
Add a note to the unwary in distrib/notes about the danger of skipping several versions when upgrading.
--- 547,553 ----
RELIABILITY FIX: Don't assume we have an active exchange during payload validation, otherwise isakmpd(8) can be made to crash.
A source code patch exists to remedy the problem.
[Applied to stable]
! ep(4) on isapnp(4) now works on alpha.
Improve the way the installer's fileset selection UI works.
Fix a potential buffer overflow in xsystrace.
Add a note to the unwary in distrib/notes about the danger of skipping several versions when upgrading.
***************
*** 567,573 ****
Fix signal(3) race in ping(8).
Remove adv(4) from the i386 RAMDISK kernel until new ahc(4) un-bloats itself.
Catch a null pointer dereference when fetching the routing table via sysctl(3).
! Make sis(4) compile and work on alpha.
Return correct result sizes from ubsec(4).
bridge(4) will now compile with ipsec(4) but no pf(4).
Cleanup of ftpd(8).
--- 567,573 ----
Fix signal(3) race in ping(8).
Remove adv(4) from the i386 RAMDISK kernel until new ahc(4) un-bloats itself.
Catch a null pointer dereference when fetching the routing table via sysctl(3).
! Make sis(4) compile and work on alpha.
Return correct result sizes from ubsec(4).
bridge(4) will now compile with ipsec(4) but no pf(4).
Cleanup of ftpd(8).
***************
*** 584,594 ****
Have named(8) call tzset(3) so /etc/localtime isn't needed after the chroot(2).
More fixes to the new ahc(4) driver.
Add AlphaServer 800 and 1000 support.
! Enable lc(4) devices in alpha GENERIC kernel.
! Fix isapnp(4) panics on alpha.
Make xf86config give the option of configuring a mouse wheel.
Gracefully handle i386_iopl(2) failure in the X server when trying to give up privileges.
! Add wscons(4) files to fbtab(5) on i386.
Add kqueue(2) support to syslog(3).
Evolve strtou?q() into strtou?ll(). Use weak aliases if available (wrappers otherwise) to fake strtou?q().
Run rpc.rstatd(8) and rpc.rusersd(8) as root from inetd(8) again, but go to nobody's jail at startup.
--- 584,594 ----
Have named(8) call tzset(3) so /etc/localtime isn't needed after the chroot(2).
More fixes to the new ahc(4) driver.
Add AlphaServer 800 and 1000 support.
! Enable lc(4) devices in alpha GENERIC kernel.
! Fix isapnp(4) panics on alpha.
Make xf86config give the option of configuring a mouse wheel.
Gracefully handle i386_iopl(2) failure in the X server when trying to give up privileges.
! Add wscons(4) files to fbtab(5) on i386.
Add kqueue(2) support to syslog(3).
Evolve strtou?q() into strtou?ll(). Use weak aliases if available (wrappers otherwise) to fake strtou?q().
Run rpc.rstatd(8) and rpc.rusersd(8) as root from inetd(8) again, but go to nobody's jail at startup.
***************
*** 608,614 ****
A source code patch is available.
[Applied to stable]
Add a number of resource limits to ssh(1).
! Increase i386 kvm size to 768M.
The list of great Theo quotes for mg(1) continues to grow.
SECURITY FIX: A potential buffer overflow in the DNS resolver has been found.
A source code patch is available.
--- 608,614 ----
A source code patch is available.
[Applied to stable]
Add a number of resource limits to ssh(1).
! Increase i386 kvm size to 768M.
The list of great Theo quotes for mg(1) continues to grow.
SECURITY FIX: A potential buffer overflow in the DNS resolver has been found.
A source code patch is available.
***************
*** 639,645 ****
Enable wi(4) on sparc64, after a lot of groundwork.
Fix some endianness nits in wi(4).
Remove ifmcstat(8), the same information is available from netstat(1).
! More improvements to 4GB memory probing on i386.
ssh(1) and sshd(8) options are now documented in their own sshd?_config(5) manpage.
Add option for smooth scrolling to talk(1).
Support a few more wireless cards in wi(4).
--- 639,645 ----
Enable wi(4) on sparc64, after a lot of groundwork.
Fix some endianness nits in wi(4).
Remove ifmcstat(8), the same information is available from netstat(1).
! More improvements to 4GB memory probing on i386.
ssh(1) and sshd(8) options are now documented in their own sshd?_config(5) manpage.
Add option for smooth scrolling to talk(1).
Support a few more wireless cards in wi(4).
***************
*** 657,663 ****
Lots of work on the gpr(4) driver.
Fix uftdi(4).
Make systat(1) revoke its setgid(kmem) privileges.
! Remove old pccons driver from i386, also the associated XSERVER option from the kernel.
Fix ftpd(8)'s SIGALRM handler.
SECURITY FIX: A buffer overflow can
occur during the interpretation of chunked encoding in httpd(8), leading to possible remote crash.
--- 657,663 ----
Lots of work on the gpr(4) driver.
Fix uftdi(4).
Make systat(1) revoke its setgid(kmem) privileges.
! Remove old pccons driver from i386, also the associated XSERVER option from the kernel.
Fix ftpd(8)'s SIGALRM handler.
SECURITY FIX: A buffer overflow can
occur during the interpretation of chunked encoding in httpd(8), leading to possible remote crash.
***************
*** 665,671 ****
[Applied to stable]
Add the punctuation-challenged Nike psa[play^120 USB widget.
Remove setgid(kmem) from the enormously useful trsp(8).
! Add UK keyboard map to macppc (with '#' on Option-3) and also option CAPS_IS_CONTROL.
Increase xl(4) timeout to squash 'command never completed!' warnings.
Add kqueue(2) support to audio(4).
Import event(3), an API on top of select(2) or kqueue(2).
--- 665,671 ----
[Applied to stable]
Add the punctuation-challenged Nike psa[play^120 USB widget.
Remove setgid(kmem) from the enormously useful trsp(8).
! Add UK keyboard map to macppc (with '#' on Option-3) and also option CAPS_IS_CONTROL.
Increase xl(4) timeout to squash 'command never completed!' warnings.
Add kqueue(2) support to audio(4).
Import event(3), an API on top of select(2) or kqueue(2).
***************
*** 689,695 ****
Enable userland crypto(4) support for DSA. Maybe logging in using ssh2 on a 486 needn't take 20 seconds after all.
Kernel changes and sysctl(3) switch for hardware asymmetric crypto(4) in userland.
Add initial Ultra Port Architecture (upa(4/SPARC64)) support. Attach creator(4) and schizo(4) using it.
! Import new vax boot code from NetBSD.
Add umct(4) USB serial driver and .umidi(4) USB MIDI driver. Not tested, not in GENERIC.
Add IPL_STATCLOCK and add lots of splassert()s.
ssh(1) spends less time with euid==0 even if it is installed setuid(root).
--- 689,695 ----
Enable userland crypto(4) support for DSA. Maybe logging in using ssh2 on a 486 needn't take 20 seconds after all.
Kernel changes and sysctl(3) switch for hardware asymmetric crypto(4) in userland.
Add initial Ultra Port Architecture (upa(4/SPARC64)) support. Attach creator(4) and schizo(4) using it.
! Import new vax boot code from NetBSD.
Add umct(4) USB serial driver and .umidi(4) USB MIDI driver. Not tested, not in GENERIC.
Add IPL_STATCLOCK and add lots of splassert()s.
ssh(1) spends less time with euid==0 even if it is installed setuid(root).
***************
*** 759,773 ****
pf(4) NAT rules now do macro expansion as well.
Add Makefile-like (var += ...) macro concatenation to pfctl(8), then remove it again.
Add per-rule state timeouts to pf(4).
! Fix well-hidden little bug in crypto(3) to unbork sparc64 SSL/TLS negotiation.
! On alpha, don't allow kernel symbols to be paged out.
Deprecate FallbackToRsh and UseRsh options in ssh(1).
ssh-keysign(8) now insists on 20-byte session IDs.
Remove suspect DIAGNOSTIC block from softdep kernel code.
Make wsdisplay(4) screen blanker play nice with the X server.
lpr(1) and friends go from setuid(root) to setgid(daemon). Connections can come from unprivileged ports for now.
Add Realtek 8129/8139 cardbus device support to rl(4).
! Switch macppc to use gem instead of gm.
Multicast fixes and Gigabit Ethernet support for gem(4).
Rule label length increased from 32 to 64 characters.
Allow modification of TTL with pf(4) return-rst.
--- 759,773 ----
pf(4) NAT rules now do macro expansion as well.
Add Makefile-like (var += ...) macro concatenation to pfctl(8), then remove it again.
Add per-rule state timeouts to pf(4).
! Fix well-hidden little bug in crypto(3) to unbork sparc64 SSL/TLS negotiation.
! On alpha, don't allow kernel symbols to be paged out.
Deprecate FallbackToRsh and UseRsh options in ssh(1).
ssh-keysign(8) now insists on 20-byte session IDs.
Remove suspect DIAGNOSTIC block from softdep kernel code.
Make wsdisplay(4) screen blanker play nice with the X server.
lpr(1) and friends go from setuid(root) to setgid(daemon). Connections can come from unprivileged ports for now.
Add Realtek 8129/8139 cardbus device support to rl(4).
! Switch macppc to use gem instead of gm.
Multicast fixes and Gigabit Ethernet support for gem(4).
Rule label length increased from 32 to 64 characters.
Allow modification of TTL with pf(4) return-rst.
***************
*** 827,833 ****
Make nice(3) standards compliant.
More wi(4) tweaks for Symbol cards.
Recognise VIA VT8233 PCI-ISA bridge.
! Fix sparc64 64-bit relocation masks in ld.so(1).
Merge in Sendmail 8.12.4.
Detect stereo radio reception in fms(4).
Compatibility tweaks to creator(4/SPARC64).
--- 827,833 ----
Make nice(3) standards compliant.
More wi(4) tweaks for Symbol cards.
Recognise VIA VT8233 PCI-ISA bridge.
! Fix sparc64 64-bit relocation masks in ld.so(1).
Merge in Sendmail 8.12.4.
Detect stereo radio reception in fms(4).
Compatibility tweaks to creator(4/SPARC64).
***************
*** 889,895 ****
parameter typo in strftime(3).
Don't use execlp(3) when invoking ssh-keysign(8).
Fix kill(2) parameter brainfade in amd(8) and KerberosIV's rlogin.
! vax: Add board type for VXT2000+.
More IANA interface type values, including IFT_BRIDGE.
Split XFree86 bsd_video.c into architecture-specific files.
Add sysctl(8) toggle net.inet.icmp.tstamprepl (default: 1) for ICMP timestamp replies.
--- 889,895 ----
parameter typo in strftime(3).
Don't use execlp(3) when invoking ssh-keysign(8).
Fix kill(2) parameter brainfade in amd(8) and KerberosIV's rlogin.
! vax: Add board type for VXT2000+.
More IANA interface type values, including IFT_BRIDGE.
Split XFree86 bsd_video.c into architecture-specific files.
Add sysctl(8) toggle net.inet.icmp.tstamprepl (default: 1) for ICMP timestamp replies.
***************
*** 898,904 ****
Add LIBS option for crunchgen so custom libraries can be added to boot images.
Run rpc.rstatd(8) and rpc.rusersd(8) as user nobody (boo!) from inetd(8).
From ld.so(1), remove tests that have no license, and for the same reason replace parts of ld(1) and ldconfig(8).
! Remove unnecessary instruction cache flushes on sparc64.
Many cleanups in ld.so(1).
Support mixed IPv4/IPv6 address lists in pfctl(8).
Add ssh-keysign(8).
--- 898,904 ----
Add LIBS option for crunchgen so custom libraries can be added to boot images.
Run rpc.rstatd(8) and rpc.rusersd(8) as user nobody (boo!) from inetd(8).
From ld.so(1), remove tests that have no license, and for the same reason replace parts of ld(1) and ldconfig(8).
! Remove unnecessary instruction cache flushes on sparc64.
Many cleanups in ld.so(1).
Support mixed IPv4/IPv6 address lists in pfctl(8).
Add ssh-keysign(8).
***************
*** 1078,1084 ****
www@openbsd.org
!
$OpenBSD: plus32.html,v 1.11 2003/10/24 22:12:41 david Exp $