[BACK]Return to plus32.html CVS log [TXT][DIR] Up to [local] / www

Diff for /www/plus32.html between version 1.51 and 1.52

version 1.51, 2016/03/21 05:46:20 version 1.52, 2016/03/22 10:54:42
Line 80 
Line 80 
 <ul>  <ul>
 <li>Release branch created.  <li>Release branch created.
 <!-- ^^^ 20021003 -->  <!-- ^^^ 20021003 -->
 <li>Cool new <a href="http://man.openbsd.org?query=xdm&amp;sektion=1">xdm(1)</a> images for 3.2.  <li>Cool new <a href="http://man.openbsd.org/?query=xdm&amp;sektion=1">xdm(1)</a> images for 3.2.
 <li><font color="#e00000"><strong>SECURITY FIX: Incorrect argument checking in the <a href="http://man.openbsd.org?query=setitimer&amp;sektion=2">setitimer(2)</a> system call may allow an attacker to write to kernel memory.</strong></font><br>  <li><font color="#e00000"><strong>SECURITY FIX: Incorrect argument checking in the <a href="http://man.openbsd.org/?query=setitimer&amp;sektion=2">setitimer(2)</a> system call may allow an attacker to write to kernel memory.</strong></font><br>
     <a href="errata31.html#kerntime">A source code patch is available</a>.<br>      <a href="errata31.html#kerntime">A source code patch is available</a>.<br>
     <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>      <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
 <!-- ^^^ 20021002 -->  <!-- ^^^ 20021002 -->
 <li>Retrofit the SIGUSR1->SIGUSR2 console switching change to the old X server.  <li>Retrofit the SIGUSR1->SIGUSR2 console switching change to the old X server.
 <li>Fix a couple of crashers in <a href="http://man.openbsd.org?query=kevent&amp;sektion=2">kevent(2)</a>.  <li>Fix a couple of crashers in <a href="http://man.openbsd.org/?query=kevent&amp;sektion=2">kevent(2)</a>.
 <li>OpenBSD 3.2-beta -&gt; 3.2, OpenSSH -&gt; 3.5.  <li>OpenBSD 3.2-beta -&gt; 3.2, OpenSSH -&gt; 3.5.
 <!-- ^^^ 20021001 -->  <!-- ^^^ 20021001 -->
 <li>Try to initialise AGP GART in the privileged startup portion of the X server.  <li>Try to initialise AGP GART in the privileged startup portion of the X server.
 <!-- ^^^ 20020930 -->  <!-- ^^^ 20020930 -->
 <li>Plug a memory leak in <a href="http://man.openbsd.org?query=url&amp;sektion=4">url(4)</a>.  <li>Plug a memory leak in <a href="http://man.openbsd.org/?query=url&amp;sektion=4">url(4)</a>.
 <!-- ^^^ 20020929 -->  <!-- ^^^ 20020929 -->
 <li>login_radius returns, complete with fixed license.  <li>login_radius returns, complete with fixed license.
 <li>Still more cleanup and output trimming in the installer script.  <li>Still more cleanup and output trimming in the installer script.
 <li><a href="http://man.openbsd.org?query=xf86cfg&amp;sektion=1">xf86cfg(1)</a> now runs the server with '-nolisten tcp'.  <li><a href="http://man.openbsd.org/?query=xf86cfg&amp;sektion=1">xf86cfg(1)</a> now runs the server with '-nolisten tcp'.
 <li><a href="http://man.openbsd.org?query=xdm&amp;sektion=1">xdm(1)</a> now drops privileges to run as user _x11 after starting as root.  <li><a href="http://man.openbsd.org/?query=xdm&amp;sektion=1">xdm(1)</a> now drops privileges to run as user _x11 after starting as root.
 <!-- ^^^ 20020928 -->  <!-- ^^^ 20020928 -->
 <li>daddr -&gt; saddr in <a href="http://man.openbsd.org?query=pf&amp;sektion=4">pf(4)</a> binat code. Oops.<br>  <li>daddr -&gt; saddr in <a href="http://man.openbsd.org/?query=pf&amp;sektion=4">pf(4)</a> binat code. Oops.<br>
     <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>      <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
 <li>Add a wildcard client string match against "probe-*" for SSH probes to use.  <li>Add a wildcard client string match against "probe-*" for SSH probes to use.
 <!-- ^^^ 20020927 -->  <!-- ^^^ 20020927 -->
 <li>Disable login_radius, pesky licensing problems again.<br>  <li>Disable login_radius, pesky licensing problems again.<br>
     <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>      <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
 <li><a href="http://man.openbsd.org?query=sppp&amp;sektion=4">sppp(4)</a> and <a href="http://man.openbsd.org?query=lmc&amp;sektion=4">lmc(4)</a> are back, with better licenses.  <li><a href="http://man.openbsd.org/?query=sppp&amp;sektion=4">sppp(4)</a> and <a href="http://man.openbsd.org/?query=lmc&amp;sektion=4">lmc(4)</a> are back, with better licenses.
 <li><a href="http://man.openbsd.org?query=ssh&amp;sektion=1">ssh(1)</a> can now do privsep and krb4 together.  <li><a href="http://man.openbsd.org/?query=ssh&amp;sektion=1">ssh(1)</a> can now do privsep and krb4 together.
 <!-- ^^^ 20020926 -->  <!-- ^^^ 20020926 -->
 <li>Remove RC5 and MDC2 from libcrypto.  <li>Remove RC5 and MDC2 from libcrypto.
 <li>Have the installer set the nosuid flag for mount points that shouldn't contain setuid programs.  <li>Have the installer set the nosuid flag for mount points that shouldn't contain setuid programs.
 <!-- ^^^ 20020925 -->  <!-- ^^^ 20020925 -->
 <li>Fix a sizeof bug in <a href="http://man.openbsd.org?query=bridge&amp;sektion=4">bridge(4)</a> spanning tree protocol support.  <li>Fix a sizeof bug in <a href="http://man.openbsd.org/?query=bridge&amp;sektion=4">bridge(4)</a> spanning tree protocol support.
 <li>New driver <a href="http://man.openbsd.org?query=em&amp;sektion=4">em(4)</a>, supporting Intel Gigibit Ethernet adapters and replacing <a href="http://man.openbsd.org?query=gx&amp;sektion=4&amp;release=OpenBSD+3.1">gx(4)</a>  <li>New driver <a href="http://man.openbsd.org/?query=em&amp;sektion=4">em(4)</a>, supporting Intel Gigibit Ethernet adapters and replacing <a href="http://man.openbsd.org/?query=gx&amp;sektion=4&amp;release=OpenBSD+3.1">gx(4)</a>
 <li>Some memory allocation and other tweaks to <a href="http://man.openbsd.org?query=talkd&amp;sektion=8">talkd(8)</a>.  <li>Some memory allocation and other tweaks to <a href="http://man.openbsd.org/?query=talkd&amp;sektion=8">talkd(8)</a>.
 <!-- ^^^ 20020924 -->  <!-- ^^^ 20020924 -->
 <li>Better handling of IPv6 deprecated addresses.  <li>Better handling of IPv6 deprecated addresses.
 <li>Fix the padding length for an IPv6 PADN option before a jumbo payload option.  <li>Fix the padding length for an IPv6 PADN option before a jumbo payload option.
 <li>Allow SSL session IDs of any length up to 32, removing the non-standard 16-char minimum imposed before.  <li>Allow SSL session IDs of any length up to 32, removing the non-standard 16-char minimum imposed before.
 <li>Add a /dev/X0 entry for <a href="http://man.openbsd.org?query=xdm&amp;sektion=1">xdm(1)</a>, allowing the mouse to work with the upcoming xdm privilege drop. One for the Upgrading Mini-faq.  <li>Add a /dev/X0 entry for <a href="http://man.openbsd.org/?query=xdm&amp;sektion=1">xdm(1)</a>, allowing the mouse to work with the upcoming xdm privilege drop. One for the Upgrading Mini-faq.
 <li>Properly dump radix tree nodes in <a href="http://man.openbsd.org?query=netstat&amp;sektion=1">netstat(1)</a>.  <li>Properly dump radix tree nodes in <a href="http://man.openbsd.org/?query=netstat&amp;sektion=1">netstat(1)</a>.
 <!-- ^^^ 20020923 -->  <!-- ^^^ 20020923 -->
 <li>Template policy support for <a href="http://man.openbsd.org?query=systrace&amp;sektion=1">systrace(1)</a>.  <li>Template policy support for <a href="http://man.openbsd.org/?query=systrace&amp;sektion=1">systrace(1)</a>.
 <li><a href="http://man.openbsd.org?query=sppp&amp;sektion=4">sppp(4)</a>, <a href="http://man.openbsd.org?query=lmc&amp;sektion=4">lmc(4)</a> and <a href="http://man.openbsd.org?query=cz&amp;sektion=4">cz(4)</a> drivers removed from release kernels due to license problems.  <li><a href="http://man.openbsd.org/?query=sppp&amp;sektion=4">sppp(4)</a>, <a href="http://man.openbsd.org/?query=lmc&amp;sektion=4">lmc(4)</a> and <a href="http://man.openbsd.org/?query=cz&amp;sektion=4">cz(4)</a> drivers removed from release kernels due to license problems.
 <li>A bunch of gcc3 tweaks.  <li>A bunch of gcc3 tweaks.
 <li>Don't build Kerberos ticket forwarding programs <a href="http://man.openbsd.org?query=kf&amp;sektion=1&amp;release=OpenBSD+3.1">kf(1)</a> and <a href="http://man.openbsd.org?query=kfd&amp;sektion=8">kfd(8)</a> because of security issues. (Will come back when Heimdal 0.5 gets merged, after 3.2 release.)  <li>Don't build Kerberos ticket forwarding programs <a href="http://man.openbsd.org/?query=kf&amp;sektion=1&amp;release=OpenBSD+3.1">kf(1)</a> and <a href="http://man.openbsd.org/?query=kfd&amp;sektion=8">kfd(8)</a> because of security issues. (Will come back when Heimdal 0.5 gets merged, after 3.2 release.)
 <li>Add support for ELF sections loaded relative to a base section.  <li>Add support for ELF sections loaded relative to a base section.
 <li>Make <a href="http://man.openbsd.org?query=pfctl&amp;sektion=8">pfctl(8)</a>'s antispoof command also block incoming packets with the source set to one of the host's IP addresses.  <li>Make <a href="http://man.openbsd.org/?query=pfctl&amp;sektion=8">pfctl(8)</a>'s antispoof command also block incoming packets with the source set to one of the host's IP addresses.
 <li>Make the VT switching code use SIGUSR2 instead of SIGUSR1. The latter is also used by the X server to synchronise with xinit.  <li>Make the VT switching code use SIGUSR2 instead of SIGUSR1. The latter is also used by the X server to synchronise with xinit.
 <!-- ^^^ 20020922 -->  <!-- ^^^ 20020922 -->
 <li>Have <a href="http://man.openbsd.org?query=newsyslog&amp;sektion=8">newsyslog(8)</a> handle with more grace situations where some archived logfiles have been uncompressed in-place.  <li>Have <a href="http://man.openbsd.org/?query=newsyslog&amp;sektion=8">newsyslog(8)</a> handle with more grace situations where some archived logfiles have been uncompressed in-place.
 <li>Continue to reduce the amount of output the installer generates, so we won't need a magnifier to read the installation instructions in the CD gatefold.  <li>Continue to reduce the amount of output the installer generates, so we won't need a magnifier to read the installation instructions in the CD gatefold.
 <li>Add TBI (Ten-Bit Interface) mode support for fibre-based <a href="http://man.openbsd.org?query=nge&amp;sektion=4">nge(4)</a> cards, as well as some other bug fixes.  <li>Add TBI (Ten-Bit Interface) mode support for fibre-based <a href="http://man.openbsd.org/?query=nge&amp;sektion=4">nge(4)</a> cards, as well as some other bug fixes.
 <!-- ^^^ 20020921 -->  <!-- ^^^ 20020921 -->
 <!-- ^^^ 20020920 -->  <!-- ^^^ 20020920 -->
 <li>Make <a href="http://man.openbsd.org?query=newsyslog&amp;sektion=8">newsyslog(8)</a> actually run the command it's asked to run. Also, add new interpretation of a null command.  <li>Make <a href="http://man.openbsd.org/?query=newsyslog&amp;sektion=8">newsyslog(8)</a> actually run the command it's asked to run. Also, add new interpretation of a null command.
 <li>Fix <a href="http://man.openbsd.org?query=newsyslog&amp;sektion=8">newsyslog(8)</a>'s handling of empty lines.  <li>Fix <a href="http://man.openbsd.org/?query=newsyslog&amp;sektion=8">newsyslog(8)</a>'s handling of empty lines.
 <li>Remove the obsolete access.conf and srm.conf files from <a href="http://man.openbsd.org?query=httpd&amp;sektion=8">httpd(8)</a>.  <li>Remove the obsolete access.conf and srm.conf files from <a href="http://man.openbsd.org/?query=httpd&amp;sektion=8">httpd(8)</a>.
 <!-- ^^^ 20020919 -->  <!-- ^^^ 20020919 -->
 <li>Make sure <a href="http://man.openbsd.org?query=ssh&amp;sektion=1">ssh(1)</a> ProxyCommand programs get killed on exit (portable OpenSSH <a href="http://bugzilla.mindrot.org/show_bug.cgi?id=223">bug #223</a>).  <li>Make sure <a href="http://man.openbsd.org/?query=ssh&amp;sektion=1">ssh(1)</a> ProxyCommand programs get killed on exit (portable OpenSSH <a href="http://bugzilla.mindrot.org/show_bug.cgi?id=223">bug #223</a>).
 <li>Fix a potential FREE() of an uninitialised pointer in the kernel (sys/exec_script.c)  <li>Fix a potential FREE() of an uninitialised pointer in the kernel (sys/exec_script.c)
 <li>Rewrite <a href="http://man.openbsd.org?query=tcpdump&amp;sektion=8">tcpdump(8)</a>'s GRE decoder.  <li>Rewrite <a href="http://man.openbsd.org/?query=tcpdump&amp;sektion=8">tcpdump(8)</a>'s GRE decoder.
 <li>Fix signal trampoline problems with non-exec stack.  <li>Fix signal trampoline problems with non-exec stack.
 <li>Remove EGP decode support from <a href="http://man.openbsd.org?query=tcpdump&amp;sektion=8">tcpdump(8)</a> due to a duff license and apathy.  <li>Remove EGP decode support from <a href="http://man.openbsd.org/?query=tcpdump&amp;sektion=8">tcpdump(8)</a> due to a duff license and apathy.
 <!-- ^^^ 20020918 -->  <!-- ^^^ 20020918 -->
 <li>So farewell, then, <a href="http://man.openbsd.org?query=trsp&amp;sektion=8&amp;release=OpenBSD+3.1">trsp(8)</a>.  <li>So farewell, then, <a href="http://man.openbsd.org/?query=trsp&amp;sektion=8&amp;release=OpenBSD+3.1">trsp(8)</a>.
 <li>Allow <a href="http://man.openbsd.org?query=newsyslog&amp;sektion=8">newsyslog(8)</a> to rotate only specific logfiles.  <li>Allow <a href="http://man.openbsd.org/?query=newsyslog&amp;sektion=8">newsyslog(8)</a> to rotate only specific logfiles.
 <li>Make RAND_poll use <a href="http://man.openbsd.org?query=arc4random&amp;sektion=3">arc4random(3)</a> instead of /dev/arandom, so it works in under a chroot.  <li>Make RAND_poll use <a href="http://man.openbsd.org/?query=arc4random&amp;sektion=3">arc4random(3)</a> instead of /dev/arandom, so it works in under a chroot.
 <li>New -a flag to <a href="http://man.openbsd.org?query=newsyslog&amp;sektion=8">newsyslog(8)</a> allows a directory to be specified for archived logs.  <li>New -a flag to <a href="http://man.openbsd.org/?query=newsyslog&amp;sektion=8">newsyslog(8)</a> allows a directory to be specified for archived logs.
 <li>Set the close-on-exec flag for file descriptors created by <a href="http://man.openbsd.org?query=kvm_open&amp;sektion=3">kvm_open(3)</a>.  <li>Set the close-on-exec flag for file descriptors created by <a href="http://man.openbsd.org/?query=kvm_open&amp;sektion=3">kvm_open(3)</a>.
 <li>Fix DMA-related panics in the <a href="http://man.openbsd.org?query=twe&amp;sektion=4">twe(4)</a> driver.  <li>Fix DMA-related panics in the <a href="http://man.openbsd.org/?query=twe&amp;sektion=4">twe(4)</a> driver.
 <li>In <a href="http://man.openbsd.org?query=ssh&amp;sektion=1">ssh(1)</a>, try harder to create the X11 forwarding listener socket.  <li>In <a href="http://man.openbsd.org/?query=ssh&amp;sektion=1">ssh(1)</a>, try harder to create the X11 forwarding listener socket.
 <!-- ^^^ 20020917 -->  <!-- ^^^ 20020917 -->
 <li>Fix a potential buffer overrun in <a href="http://man.openbsd.org?query=setlocale&amp;sektion=3">setlocale(3)</a> (NetBSD-<a href="ftp://ftp.NetBSD.org/pub/NetBSD/security/advisories/NetBSD-SA2002-012.txt.asc">SA2002-012</a>).  <li>Fix a potential buffer overrun in <a href="http://man.openbsd.org/?query=setlocale&amp;sektion=3">setlocale(3)</a> (NetBSD-<a href="ftp://ftp.NetBSD.org/pub/NetBSD/security/advisories/NetBSD-SA2002-012.txt.asc">SA2002-012</a>).
 <li>Don't chdir to / when <a href="http://man.openbsd.org?query=systrace&amp;sektion=1">systrace(1)</a> goes daemon.  <li>Don't chdir to / when <a href="http://man.openbsd.org/?query=systrace&amp;sektion=1">systrace(1)</a> goes daemon.
 <li>Add __syslog__ string formatting attribute to <a href="http://man.openbsd.org?query=gcc&amp;sektion=1">gcc(1)</a>.  <li>Add __syslog__ string formatting attribute to <a href="http://man.openbsd.org/?query=gcc&amp;sektion=1">gcc(1)</a>.
 <!-- ^^^ 20020916 -->  <!-- ^^^ 20020916 -->
 <li>Periodically save changes to <a href="http://man.openbsd.org?query=systrace&amp;sektion=1">systrace(1)</a> policies.  <li>Periodically save changes to <a href="http://man.openbsd.org/?query=systrace&amp;sektion=1">systrace(1)</a> policies.
 <li>Various fixes to <a href="http://man.openbsd.org?query=newsyslog&amp;sektion=8">newsyslog(8)</a>.  <li>Various fixes to <a href="http://man.openbsd.org/?query=newsyslog&amp;sektion=8">newsyslog(8)</a>.
 <li>Re-sync the <a href="http://man.openbsd.org?query=siop&amp;sektion=4">siop(4)</a> driver with NetBSD.  <li>Re-sync the <a href="http://man.openbsd.org/?query=siop&amp;sektion=4">siop(4)</a> driver with NetBSD.
 <li>Signal fixes in libevent.  <li>Signal fixes in libevent.
 <!-- ^^^ 20020915 -->  <!-- ^^^ 20020915 -->
 <li>Merge in Sendmail 8.12.6.  <li>Merge in Sendmail 8.12.6.
 <li>Give stdio's __cleanup handlers the same mprotect() treatment as <a href="http://man.openbsd.org?query=atexit&amp;sektion=3">atexit(3)</a> now receives.  <li>Give stdio's __cleanup handlers the same mprotect() treatment as <a href="http://man.openbsd.org/?query=atexit&amp;sektion=3">atexit(3)</a> now receives.
 <li>Further tweaks to handling of address families in NAT rules. Try to infer the AF from the rule, if that fails then require the user to specify it.  <li>Further tweaks to handling of address families in NAT rules. Try to infer the AF from the rule, if that fails then require the user to specify it.
 <li>Various fixes to <a href="http://man.openbsd.org?query=cy&amp;sektion=4">cy(4)</a>.  <li>Various fixes to <a href="http://man.openbsd.org/?query=cy&amp;sektion=4">cy(4)</a>.
 <li>Merge in OpenSSL-0.9.7-stable-SNAP-20020911, bump libcrypto minor version.  <li>Merge in OpenSSL-0.9.7-stable-SNAP-20020911, bump libcrypto minor version.
 <!-- ^^^ 20020914 -->  <!-- ^^^ 20020914 -->
 <li>Stop <a href="http://man.openbsd.org?query=newsyslog&amp;sektion=8">newsyslog(8)</a> rotating logfiles that only contain logfile rotation messages.  <li>Stop <a href="http://man.openbsd.org/?query=newsyslog&amp;sektion=8">newsyslog(8)</a> rotating logfiles that only contain logfile rotation messages.
 <!-- ^^^ 20020913 -->  <!-- ^^^ 20020913 -->
 <li>License fixes to <a href="http://man.openbsd.org?query=pppd&amp;sektion=8">pppd(8)</a>, nearly there now.  <li>License fixes to <a href="http://man.openbsd.org/?query=pppd&amp;sektion=8">pppd(8)</a>, nearly there now.
 <li>Add -H option to <a href="http://man.openbsd.org?query=identd&amp;sektion=8">identd(8)</a> which hides info for non-existent users as well as existing ones. Useful when NATing.  <li>Add -H option to <a href="http://man.openbsd.org/?query=identd&amp;sektion=8">identd(8)</a> which hides info for non-existent users as well as existing ones. Useful when NATing.
 <li>Remove the need for /dev/null and /etc/localtime in <a href="http://man.openbsd.org?query=named&amp;sektion=8">named(8)</a>'s chroot jail.  <li>Remove the need for /dev/null and /etc/localtime in <a href="http://man.openbsd.org/?query=named&amp;sektion=8">named(8)</a>'s chroot jail.
 <li>Add 'antispoof' keyword to <a href="http://man.openbsd.org?query=pfctl&amp;sektion=8">pfctl(8)</a>. Oh yes.  <li>Add 'antispoof' keyword to <a href="http://man.openbsd.org/?query=pfctl&amp;sektion=8">pfctl(8)</a>. Oh yes.
 <li>Improvements to <a href="http://man.openbsd.org?query=pfctl&amp;sektion=8">pfctl(8)</a>'s netmask handling.  <li>Improvements to <a href="http://man.openbsd.org/?query=pfctl&amp;sektion=8">pfctl(8)</a>'s netmask handling.
 <!-- ^^^ 20020912 -->  <!-- ^^^ 20020912 -->
 <li>Add a missing pointer initialisation in in6_ifdetach().  <li>Add a missing pointer initialisation in in6_ifdetach().
 <li>Make the <a href="http://man.openbsd.org?query=sftp&amp;sektion=1">sftp(1)</a> client's ls command useful, with globbing and short/long listings.  <li>Make the <a href="http://man.openbsd.org/?query=sftp&amp;sektion=1">sftp(1)</a> client's ls command useful, with globbing and short/long listings.
 <li>Fix initialisation of Broadcom 582x chips by <a href="http://man.openbsd.org?query=ubsec&amp;sektion=4">ubsec(4)</a>.  <li>Fix initialisation of Broadcom 582x chips by <a href="http://man.openbsd.org/?query=ubsec&amp;sektion=4">ubsec(4)</a>.
 <!-- ^^^ 20020911 -->  <!-- ^^^ 20020911 -->
 <li>Various signedness fixes.  <li>Various signedness fixes.
 <li>Versioning info moves to 3.2-beta.  <li>Versioning info moves to 3.2-beta.
 <li>Have <a href="http://man.openbsd.org?query=ssh-agent&amp;sektion=1">ssh-agent(1)</a> check the peer using <a href="http://man.openbsd.org?query=getpeereid&amp;sektion=2">getpeereid(2)</a>.  <li>Have <a href="http://man.openbsd.org/?query=ssh-agent&amp;sektion=1">ssh-agent(1)</a> check the peer using <a href="http://man.openbsd.org/?query=getpeereid&amp;sektion=2">getpeereid(2)</a>.
 <li><a href="http://man.openbsd.org?query=pmap&amp;sektion=9">pmap</a>_{copy,zero}_page API changes.  <li><a href="http://man.openbsd.org/?query=pmap&amp;sektion=9">pmap</a>_{copy,zero}_page API changes.
 <li>Merge in OpenSSL 0.9.7beta3.  <li>Merge in OpenSSL 0.9.7beta3.
 <!-- ^^^ 20020910 -->  <!-- ^^^ 20020910 -->
 <li><a href="http://man.openbsd.org?query=amd&amp;sektion=8">amd(8)</a> now creates a socket listening on 127.0.0.1 as well as one on *, and only responds to amq requests on the former.  <li><a href="http://man.openbsd.org/?query=amd&amp;sektion=8">amd(8)</a> now creates a socket listening on 127.0.0.1 as well as one on *, and only responds to amq requests on the former.
 <li>Add support for the Silicon Image 680 ATA133 chip to the <a href="http://man.openbsd.org?query=pciide&amp;sektion=4">pciide(4)</a> driver.  <li>Add support for the Silicon Image 680 ATA133 chip to the <a href="http://man.openbsd.org/?query=pciide&amp;sektion=4">pciide(4)</a> driver.
 <li><a href="http://man.openbsd.org?query=sshd&amp;sektion=8">sshd(8)</a> now supports Kerberos authentication in PrivSep mode.  <li><a href="http://man.openbsd.org/?query=sshd&amp;sektion=8">sshd(8)</a> now supports Kerberos authentication in PrivSep mode.
 <!-- ^^^ 20020909 -->  <!-- ^^^ 20020909 -->
 <li><a href="http://man.openbsd.org?query=pf&amp;sektion=4">pf(4)</a>'s parser takes more care parsing address families in NAT rules.  <li><a href="http://man.openbsd.org/?query=pf&amp;sektion=4">pf(4)</a>'s parser takes more care parsing address families in NAT rules.
 <li>Add leap second support to <a href="http://man.openbsd.org?query=rdate&amp;sektion=8">rdate(8)</a> running in RFC868 mode (it already supports this in NTP mode with the -N option).  <li>Add leap second support to <a href="http://man.openbsd.org/?query=rdate&amp;sektion=8">rdate(8)</a> running in RFC868 mode (it already supports this in NTP mode with the -N option).
 <li>Correct <a href="http://man.openbsd.org?query=altq&amp;sektion=9">altq(9)</a>'s representation of positive infinity.  <li>Correct <a href="http://man.openbsd.org/?query=altq&amp;sektion=9">altq(9)</a>'s representation of positive infinity.
 <!-- ^^^ 20020908 -->  <!-- ^^^ 20020908 -->
 <li>Signal handler fixes in <a href="http://man.openbsd.org?query=bootpd&amp;sektion=8">bootpd(8)</a><!-- on 20020908 -->, <a href="http://man.openbsd.org?query=rtadvd&amp;sektion=8">rtadvd(8)</a><!-- on 20020909 --> and <a href="http://man.openbsd.org?query=rtsold&amp;sektion=8">rtsold(8)</a><!-- on 20020907 -->.  <li>Signal handler fixes in <a href="http://man.openbsd.org/?query=bootpd&amp;sektion=8">bootpd(8)</a><!-- on 20020908 -->, <a href="http://man.openbsd.org/?query=rtadvd&amp;sektion=8">rtadvd(8)</a><!-- on 20020909 --> and <a href="http://man.openbsd.org/?query=rtsold&amp;sektion=8">rtsold(8)</a><!-- on 20020907 -->.
 <li><a href="http://man.openbsd.org?query=faithd&amp;sektion=8">faithd(8)</a> dies on FD_SET overruns.  <li><a href="http://man.openbsd.org/?query=faithd&amp;sektion=8">faithd(8)</a> dies on FD_SET overruns.
 <li>Fix a couple of off-by-ones in <a href="http://man.openbsd.org?query=mopd&amp;sektion=8">mopd(8)</a>.  <li>Fix a couple of off-by-ones in <a href="http://man.openbsd.org/?query=mopd&amp;sektion=8">mopd(8)</a>.
 <!-- ^^^ 20020907 -->  <!-- ^^^ 20020907 -->
 <li>Make <a href="http://man.openbsd.org?query=fsck&amp;sektion=8">fsck(8)</a> work properly with long block device filenames (handle MAXPATHLEN chars instead of 32).  <li>Make <a href="http://man.openbsd.org/?query=fsck&amp;sektion=8">fsck(8)</a> work properly with long block device filenames (handle MAXPATHLEN chars instead of 32).
 <li>Don't build the somewhat less than ubiquitous <a href="http://man.openbsd.org?query=photurisd&amp;sektion=8&amp;release=OpenBSD+3.1">photurisd(8)</a> by default any more.  <li>Don't build the somewhat less than ubiquitous <a href="http://man.openbsd.org/?query=photurisd&amp;sektion=8&amp;release=OpenBSD+3.1">photurisd(8)</a> by default any more.
 <li>Lots and lots of ANSIfication.  <li>Lots and lots of ANSIfication.
 <li>Lots of int -&gt; socklen_t.  <li>Lots of int -&gt; socklen_t.
 <li>Some signedness fixes to <a href="http://man.openbsd.org?query=arp&amp;sektion=8">arp(8)</a>.  <li>Some signedness fixes to <a href="http://man.openbsd.org/?query=arp&amp;sektion=8">arp(8)</a>.
 <li>Repair a missing msglog() arg in <a href="http://man.openbsd.org?query=routed&amp;sektion=8">routed(8)</a>.  <li>Repair a missing msglog() arg in <a href="http://man.openbsd.org/?query=routed&amp;sektion=8">routed(8)</a>.
 <!-- ^^^ 20020906 -->  <!-- ^^^ 20020906 -->
 <li>Fix <a href="http://man.openbsd.org?query=ahc&amp;sektion=4">ahc(4)</a>'s interrupt sharing.  <li>Fix <a href="http://man.openbsd.org/?query=ahc&amp;sektion=4">ahc(4)</a>'s interrupt sharing.
 <li>lib<a href="http://man.openbsd.org?query=usbhid&amp;sektion=3">usbhid(3)</a> now available in the shared variety.  <li>lib<a href="http://man.openbsd.org/?query=usbhid&amp;sektion=3">usbhid(3)</a> now available in the shared variety.
 <li>Don't allow data to be appended to the receive buffer of a socket that's been shut down (see NetBSD <a href="http://www.netbsd.org/cgi-bin/query-pr-single.pl?number=18185">PR#18185</a>).  <li>Don't allow data to be appended to the receive buffer of a socket that's been shut down (see NetBSD <a href="http://www.netbsd.org/cgi-bin/query-pr-single.pl?number=18185">PR#18185</a>).
 <li>Merge in OpenSSL 0.9.7beta1. To be continued.  <li>Merge in OpenSSL 0.9.7beta1. To be continued.
 <li><a href="http://man.openbsd.org?query=isakmpd&amp;sektion=8">isakmpd(8)</a> interoperability fixes for FreeS/WAN and SSH Sentinel.  <li><a href="http://man.openbsd.org/?query=isakmpd&amp;sektion=8">isakmpd(8)</a> interoperability fixes for FreeS/WAN and SSH Sentinel.
 <!-- ^^^ 20020905 -->  <!-- ^^^ 20020905 -->
 <li>Make <a href="http://man.openbsd.org?query=rwalld&amp;sektion=8">rwalld(8)</a> revoke its group privileges as well as user privs.  <li>Make <a href="http://man.openbsd.org/?query=rwalld&amp;sektion=8">rwalld(8)</a> revoke its group privileges as well as user privs.
 <li>Don't install safe_finger any more.  <li>Don't install safe_finger any more.
 <li>Add support for the SCSI Reduced Block Command Set (RBC).  <li>Add support for the SCSI Reduced Block Command Set (RBC).
 <li>Bump <a href="http://man.openbsd.org?query=sshd&amp;sektion=8">sshd(8)</a>'s LoginGraceTime from one minute to two.  <li>Bump <a href="http://man.openbsd.org/?query=sshd&amp;sektion=8">sshd(8)</a>'s LoginGraceTime from one minute to two.
 <li>Various compatibility fixes and additions to <a href="http://man.openbsd.org?query=ubsec&amp;sektion=4">ubsec(4)</a>.  <li>Various compatibility fixes and additions to <a href="http://man.openbsd.org/?query=ubsec&amp;sektion=4">ubsec(4)</a>.
 <li><a href="http://man.openbsd.org?query=ifconfig&amp;sektion=8">ifconfig(8)</a> can now set whether or not use of IPv6 deprecated addresses are allowed.  <li><a href="http://man.openbsd.org/?query=ifconfig&amp;sektion=8">ifconfig(8)</a> can now set whether or not use of IPv6 deprecated addresses are allowed.
 <!-- ^^^ 20020904 -->  <!-- ^^^ 20020904 -->
 <li>_x11 user and group added for <a href="http://man.openbsd.org?query=xdm&amp;sektion=1">xdm(1)</a> to use.  <li>_x11 user and group added for <a href="http://man.openbsd.org/?query=xdm&amp;sektion=1">xdm(1)</a> to use.
 <li>Pull in XFree86's fix for a serious Xlib security bug (which didn't affect OpenBSD).  <li>Pull in XFree86's fix for a serious Xlib security bug (which didn't affect OpenBSD).
 <li>Fix parsing of NAT port ranges.  <li>Fix parsing of NAT port ranges.
 <li>Check the interface specified with route-to/dup-to/fastroute actually exists. If it does, null terminate its name before moving on.  <li>Check the interface specified with route-to/dup-to/fastroute actually exists. If it does, null terminate its name before moving on.
 <!-- ^^^ 20020902 -->  <!-- ^^^ 20020902 -->
 <li>Fix an uninitialised pointer bug in <a href="http://man.openbsd.org?query=ld.so&amp;sektion=1">ld.so(1)</a>.  <li>Fix an uninitialised pointer bug in <a href="http://man.openbsd.org/?query=ld.so&amp;sektion=1">ld.so(1)</a>.
 <li>The X server now tries to open the aperture driver before trying /dev/mem. Re-enable early privilege drop on i386.  <li>The X server now tries to open the aperture driver before trying /dev/mem. Re-enable early privilege drop on i386.
 <!-- ^^^ 20020901 -->  <!-- ^^^ 20020901 -->
 <!-- ^^^ 20020831 -->  <!-- ^^^ 20020831 -->
 <li><a href="http://man.openbsd.org?query=traceroute&amp;sektion=8">traceroute(8)</a> now warns if DNS returns multiple addresses, like traceroute6.  <li><a href="http://man.openbsd.org/?query=traceroute&amp;sektion=8">traceroute(8)</a> now warns if DNS returns multiple addresses, like traceroute6.
 <li>Add support for the Promise Ultra133 TX2 EIDE controller.  <li>Add support for the Promise Ultra133 TX2 EIDE controller.
 <li>Fix an mbuf leak in <a href="http://man.openbsd.org?query=wi&amp;sektion=4">wi(4)</a>.  <li>Fix an mbuf leak in <a href="http://man.openbsd.org/?query=wi&amp;sektion=4">wi(4)</a>.
 <li>Reenable the <a href="http://man.openbsd.org?query=atexit&amp;sektion=3">atexit(3)</a> handler improvements backed out on 31 July.  <li>Reenable the <a href="http://man.openbsd.org/?query=atexit&amp;sektion=3">atexit(3)</a> handler improvements backed out on 31 July.
 <li>Add -I option to <a href="http://man.openbsd.org?query=traceroute6&amp;sektion=8">traceroute6(8)</a> to get ICMP probes instead of UDP.  <li>Add -I option to <a href="http://man.openbsd.org/?query=traceroute6&amp;sektion=8">traceroute6(8)</a> to get ICMP probes instead of UDP.
 <!-- ^^^ 20020830 -->  <!-- ^^^ 20020830 -->
 <li>Further reduce the amount of time <a href="http://man.openbsd.org?query=ssh&amp;sektion=1">ssh(1)</a> runs as root when installed setuid.  <li>Further reduce the amount of time <a href="http://man.openbsd.org/?query=ssh&amp;sektion=1">ssh(1)</a> runs as root when installed setuid.
 <li>Fudge <a href="http://man.openbsd.org?query=isakmpd&amp;sektion=8">isakmpd(8)</a> so it only honours the requirement to check against a CRL if there is a CRL loaded...  <li>Fudge <a href="http://man.openbsd.org/?query=isakmpd&amp;sektion=8">isakmpd(8)</a> so it only honours the requirement to check against a CRL if there is a CRL loaded...
 <!-- ^^^ 20020829 -->  <!-- ^^^ 20020829 -->
 <li>Update the <a href="http://man.openbsd.org?query=rt&amp;sektion=4">rt(4)</a> Radiotrack driver, add isapnp support.  <li>Update the <a href="http://man.openbsd.org/?query=rt&amp;sektion=4">rt(4)</a> Radiotrack driver, add isapnp support.
 <li>Some casts to make 64-bit kernel work with varargs calls.  <li>Some casts to make 64-bit kernel work with varargs calls.
 <!-- ^^^ 20020828 -->  <!-- ^^^ 20020828 -->
 <li>Fixes to <a href="http://man.openbsd.org?query=gem&amp;sektion=4">gem(4)</a>.  <li>Fixes to <a href="http://man.openbsd.org/?query=gem&amp;sektion=4">gem(4)</a>.
 <li>Properly limit EDNS0 size to 0xffff.  <li>Properly limit EDNS0 size to 0xffff.
 <li>Fix a signedness problem in SSH so that <a href="http://man.openbsd.org?query=RSA_public_decrypt&amp;sektion=3">RSA_public_decrypt(3)</a> errors can be detected.  <li>Fix a signedness problem in SSH so that <a href="http://man.openbsd.org/?query=RSA_public_decrypt&amp;sektion=3">RSA_public_decrypt(3)</a> errors can be detected.
 <li>Make X's module loader set PROT_EXEC using <a href="http://man.openbsd.org?query=mprotect&amp;sektion=2">mprotect(2)</a> on malloc'd pages containing code (needed since the heap is now mapped without PROT_EXEC).  <li>Make X's module loader set PROT_EXEC using <a href="http://man.openbsd.org/?query=mprotect&amp;sektion=2">mprotect(2)</a> on malloc'd pages containing code (needed since the heap is now mapped without PROT_EXEC).
 <li>DNS responses from <a href="http://man.openbsd.org?query=getaddrinfo&amp;sektion=3">getaddrinfo(3)</a>, gethostby*() and getnetby*() now get a 64K receive buffer.<br>  <li>DNS responses from <a href="http://man.openbsd.org/?query=getaddrinfo&amp;sektion=3">getaddrinfo(3)</a>, gethostby*() and getnetby*() now get a 64K receive buffer.<br>
     <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>      <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
 <!-- ^^^ 20020827 -->  <!-- ^^^ 20020827 -->
 <li><a href="http://man.openbsd.org?query=traceroute6&amp;sektion=8">traceroute6(8)</a> warns if DNS returns multiple IP addresses for the target.  <li><a href="http://man.openbsd.org/?query=traceroute6&amp;sektion=8">traceroute6(8)</a> warns if DNS returns multiple IP addresses for the target.
 <li>Do a yyrestart() after a longjmp in <a href="http://man.openbsd.org?query=pcap&amp;sektion=3">pcap(3)</a>.  <li>Do a yyrestart() after a longjmp in <a href="http://man.openbsd.org/?query=pcap&amp;sektion=3">pcap(3)</a>.
 <li>Fix a dangling pointer bug in sbcompress().  <li>Fix a dangling pointer bug in sbcompress().
 <li>Make the X server option NoSilkenMouse work again.  <li>Make the X server option NoSilkenMouse work again.
 <!-- ^^^ 20020826 -->  <!-- ^^^ 20020826 -->
 <li>Make <a href="http://man.openbsd.org?query=portmap&amp;sektion=8">portmap(8)</a> detect failure of <a href="http://man.openbsd.org?query=svc_register&amp;sektion=3">svc_register</a> and die nicely.  <li>Make <a href="http://man.openbsd.org/?query=portmap&amp;sektion=8">portmap(8)</a> detect failure of <a href="http://man.openbsd.org/?query=svc_register&amp;sektion=3">svc_register</a> and die nicely.
 <li>X aperture driver for Alpha, works like i386.  <li>X aperture driver for Alpha, works like i386.
 <!-- ^^^ 20020824 -->  <!-- ^^^ 20020824 -->
 <li>Skeleton <a href="http://man.openbsd.org?query=ld.so&amp;sektion=1">ld.so(1)</a> support for ELF in i386. Not enabled, nor is it promised anytime soon.  <li>Skeleton <a href="http://man.openbsd.org/?query=ld.so&amp;sektion=1">ld.so(1)</a> support for ELF in i386. Not enabled, nor is it promised anytime soon.
 <li><a href="http://man.openbsd.org?query=ld.so&amp;sektion=1">ld.so(1)</a> warns about symbol size mismatches.  <li><a href="http://man.openbsd.org/?query=ld.so&amp;sektion=1">ld.so(1)</a> warns about symbol size mismatches.
 <li><a href="http://man.openbsd.org?query=inet_ntop&amp;sektion=3">inet_ntop(3)</a> handles snprintf errors properly.  <li><a href="http://man.openbsd.org/?query=inet_ntop&amp;sektion=3">inet_ntop(3)</a> handles snprintf errors properly.
 <li>Map the heap non-executable.  <li>Map the heap non-executable.
 <!-- ^^^ 20020823 -->  <!-- ^^^ 20020823 -->
 <li>Change the way FREF() and FRELE() are called w.r.t. getvnode() and getsock().  <li>Change the way FREF() and FRELE() are called w.r.t. getvnode() and getsock().
 <li>Fix a locking problem that can occur when an executable tries to <a href="http://man.openbsd.org?query=exec&amp;sektion=3">exec(3)</a> itself.  <li>Fix a locking problem that can occur when an executable tries to <a href="http://man.openbsd.org/?query=exec&amp;sektion=3">exec(3)</a> itself.
 <li>Avoid a potential int overflow in <a href="http://man.openbsd.org?query=comsat&amp;sektion=8">comsat(8)</a>  <li>Avoid a potential int overflow in <a href="http://man.openbsd.org/?query=comsat&amp;sektion=8">comsat(8)</a>
 <li>Make the resolver ignore DNS AAAA replies containing IPv4-mapped addresses.  <li>Make the resolver ignore DNS AAAA replies containing IPv4-mapped addresses.
 <!-- ^^^ 20020822 -->  <!-- ^^^ 20020822 -->
 <li>Bump the listen() backlog from 5 to 128 (!) in <a href="http://man.openbsd.org?query=ssh-agent&amp;sektion=1">ssh-agent(1)</a>.  <li>Bump the listen() backlog from 5 to 128 (!) in <a href="http://man.openbsd.org/?query=ssh-agent&amp;sektion=1">ssh-agent(1)</a>.
 <li><a href="http://man.openbsd.org?query=sshd&amp;sektion=8">sshd(8)</a>'s default LoginGraceTime reduced from 600 to 60 seconds.  <li><a href="http://man.openbsd.org/?query=sshd&amp;sektion=8">sshd(8)</a>'s default LoginGraceTime reduced from 600 to 60 seconds.
 <li><a href="http://man.openbsd.org?query=wscons&amp;sektion=4">wscons(4)</a> now attaches to each wsdisplay device by default.  <li><a href="http://man.openbsd.org/?query=wscons&amp;sektion=4">wscons(4)</a> now attaches to each wsdisplay device by default.
 <li>Fixes to <a href="http://man.openbsd.org?query=strip&amp;sektion=1">strip(1)</a>. -x now works.  <li>Fixes to <a href="http://man.openbsd.org/?query=strip&amp;sektion=1">strip(1)</a>. -x now works.
 <!-- ^^^ 20020821 -->  <!-- ^^^ 20020821 -->
 <li>net.inet6.ip6_use_deprecated is on by default again...  <li>net.inet6.ip6_use_deprecated is on by default again...
 <li>Fix some (but not all) signal races in <a href="http://man.openbsd.org?query=fsck_ffs&amp;sektion=8">fsck_ffs(8)</a>.  <li>Fix some (but not all) signal races in <a href="http://man.openbsd.org/?query=fsck_ffs&amp;sektion=8">fsck_ffs(8)</a>.
 <li>New -n option to <a href="http://man.openbsd.org?query=ftpd&amp;sektion=8">ftpd(8)</a> that disallows anonymous access even if the ftp user exists.  <li>New -n option to <a href="http://man.openbsd.org/?query=ftpd&amp;sektion=8">ftpd(8)</a> that disallows anonymous access even if the ftp user exists.
 <li>Perform /tmp/.{X11,ICE}-unix fixups before the system goes multiuser.  <li>Perform /tmp/.{X11,ICE}-unix fixups before the system goes multiuser.
 <!-- ^^^ 20020820 -->  <!-- ^^^ 20020820 -->
 <li>Fix sysctl <a href="http://man.openbsd.org?query=copyout&amp;sektion=9">copyout(9)</a>s in IPv6 neigbour discovery.  <li>Fix sysctl <a href="http://man.openbsd.org/?query=copyout&amp;sektion=9">copyout(9)</a>s in IPv6 neigbour discovery.
 <!-- ^^^ 20020819 -->  <!-- ^^^ 20020819 -->
 <li>Audit and cleanup of <a href="http://man.openbsd.org?query=inet_net_ntop&amp;sektion=3">inet_net_ntop(3)</a>, inet_neta() and <a href="http://man.openbsd.org?query=inet_ntop&amp;sektion=3">inet_ntop(3)</a>.  <li>Audit and cleanup of <a href="http://man.openbsd.org/?query=inet_net_ntop&amp;sektion=3">inet_net_ntop(3)</a>, inet_neta() and <a href="http://man.openbsd.org/?query=inet_ntop&amp;sektion=3">inet_ntop(3)</a>.
 <li>TCP now tries to act appropriately w.r.t. net.inet6.ip6_use_deprecated.  <li>TCP now tries to act appropriately w.r.t. net.inet6.ip6_use_deprecated.
 <!-- ^^^ 20020818 -->  <!-- ^^^ 20020818 -->
 <li>Use of IPv6 deprecated addresses switched off by default. (See <a href="http://www.ietf.org/rfc/rfc2462.txt">RFC2462</a> and <a href="http://man.openbsd.org?query=sysctl&amp;sektion=8">sysctl(8)</a> variable net.inet6.ip6_use_deprecated.)  <li>Use of IPv6 deprecated addresses switched off by default. (See <a href="http://www.ietf.org/rfc/rfc2462.txt">RFC2462</a> and <a href="http://man.openbsd.org/?query=sysctl&amp;sektion=8">sysctl(8)</a> variable net.inet6.ip6_use_deprecated.)
 <li>Fixes to the <a href="http://man.openbsd.org?query=isp&amp;sektion=4">isp(4)</a> SCSI driver.  <li>Fixes to the <a href="http://man.openbsd.org/?query=isp&amp;sektion=4">isp(4)</a> SCSI driver.
 <!-- ^^^ 20020817 -->  <!-- ^^^ 20020817 -->
 <li>Correct two sizeof bugs in <a href="http://man.openbsd.org?query=crypto&amp;sektion=9">crypto(9)</a>.  <li>Correct two sizeof bugs in <a href="http://man.openbsd.org/?query=crypto&amp;sektion=9">crypto(9)</a>.
 <li>Allow a raw IP socket to see a <a href="http://man.openbsd.org?query=gre&amp;sektion=4">gre(4)</a> packets for tunnels we haven't configured.  <li>Allow a raw IP socket to see a <a href="http://man.openbsd.org/?query=gre&amp;sektion=4">gre(4)</a> packets for tunnels we haven't configured.
 <!-- ^^^ 20020816 -->  <!-- ^^^ 20020816 -->
 <li>Add some more cross-compilation targets in /usr/src/Makefile.  <li>Add some more cross-compilation targets in /usr/src/Makefile.
 <li>Backfit Perl 5.80's File::Glob implementation (based on OpenBSD's code) to our <a href="http://man.openbsd.org?query=perl&amp;sektion=1">perl(1)</a>.  <li>Backfit Perl 5.80's File::Glob implementation (based on OpenBSD's code) to our <a href="http://man.openbsd.org/?query=perl&amp;sektion=1">perl(1)</a>.
 <li>Fix a null pointer dereference in <a href="http://man.openbsd.org?query=pfctl&amp;sektion=8">pfctl(8)</a>.  <li>Fix a null pointer dereference in <a href="http://man.openbsd.org/?query=pfctl&amp;sektion=8">pfctl(8)</a>.
 <!-- ^^^ 20020815 -->  <!-- ^^^ 20020815 -->
 <!-- ^^^ 20020814 -->  <!-- ^^^ 20020814 -->
 <!-- ^^^ some CVS breakage around here -->  <!-- ^^^ some CVS breakage around here -->
 <!-- ^^^ 20020813 -->  <!-- ^^^ 20020813 -->
 <li>Using the state table instead of a special-purpose list, allow <a href="http://man.openbsd.org?query=pf&amp;sektion=4">pf(4)</a> NAT to use the same proxy port for multiple external peers.  <li>Using the state table instead of a special-purpose list, allow <a href="http://man.openbsd.org/?query=pf&amp;sektion=4">pf(4)</a> NAT to use the same proxy port for multiple external peers.
 <li>Make <a href="http://man.openbsd.org?query=ssh-agent&amp;sektion=1">ssh-agent(1)</a> setgid(_sshagnt). setuid/setgid processes can't be <a href="http://man.openbsd.org?query=ptrace&amp;sektion=2">ptrace(2)</a>ed.  <li>Make <a href="http://man.openbsd.org/?query=ssh-agent&amp;sektion=1">ssh-agent(1)</a> setgid(_sshagnt). setuid/setgid processes can't be <a href="http://man.openbsd.org/?query=ptrace&amp;sektion=2">ptrace(2)</a>ed.
 <li>SPARC consoles now use <a href="http://man.openbsd.org?query=wscons&amp;sektion=4">wscons(4)</a>.  <li>SPARC consoles now use <a href="http://man.openbsd.org/?query=wscons&amp;sektion=4">wscons(4)</a>.
 <!-- ^^^ 20020812 -->  <!-- ^^^ 20020812 -->
 <li><a href="http://man.openbsd.org?query=traceroute&amp;sektion=8">traceroute(8)</a> now displays '!X' when packets come back as ICMP administratively prohibited by filter.  <li><a href="http://man.openbsd.org/?query=traceroute&amp;sektion=8">traceroute(8)</a> now displays '!X' when packets come back as ICMP administratively prohibited by filter.
 <li>Have <a href="http://man.openbsd.org?query=rsh&amp;sektion=1">rsh(1)</a> die on fd_set overruns.  <li>Have <a href="http://man.openbsd.org/?query=rsh&amp;sektion=1">rsh(1)</a> die on fd_set overruns.
 <li>In a number of places, switch the <a href="http://man.openbsd.org?query=calloc&amp;sektion=3">calloc(3)</a> round the right way.  <li>In a number of places, switch the <a href="http://man.openbsd.org/?query=calloc&amp;sektion=3">calloc(3)</a> round the right way.
 <li>Switch SPARC to ELF.  <li>Switch SPARC to ELF.
 <li>Fix an XFree runtime loader problem seen on Alpha, PowerPC, SPARC and SPARC64.  <li>Fix an XFree runtime loader problem seen on Alpha, PowerPC, SPARC and SPARC64.
 <!-- ^^^ 20020811 -->  <!-- ^^^ 20020811 -->
 <li><font color="#e00000"><strong>SECURITY FIX: An insufficient boundary check in the <a href="http://man.openbsd.org?query=select&amp;sektion=2">select(2)</a> and <a href="http://man.openbsd.org?query=poll&amp;sektion=2">poll(2)</a> system calls allows an attacker to overwrite kernel memory and execute arbitrary code in kernel context.</strong></font><br>  <li><font color="#e00000"><strong>SECURITY FIX: An insufficient boundary check in the <a href="http://man.openbsd.org/?query=select&amp;sektion=2">select(2)</a> and <a href="http://man.openbsd.org/?query=poll&amp;sektion=2">poll(2)</a> system calls allows an attacker to overwrite kernel memory and execute arbitrary code in kernel context.</strong></font><br>
     <a href="errata31.html#scarg">A source code patch is available</a>.<br>      <a href="errata31.html#scarg">A source code patch is available</a>.<br>
     <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>      <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
 <!-- ^^^ 20020810 -->  <!-- ^^^ 20020810 -->
 <li><a href="http://man.openbsd.org?query=raid&amp;sektion=4">raid(4)</a> no longer gets loud at boot time unless option RAIDDEBUG is used.  <li><a href="http://man.openbsd.org/?query=raid&amp;sektion=4">raid(4)</a> no longer gets loud at boot time unless option RAIDDEBUG is used.
 <li>Sink a few bugs in <a href="http://man.openbsd.org?query=bs&amp;sektion=6">bs(6)</a>.  <li>Sink a few bugs in <a href="http://man.openbsd.org/?query=bs&amp;sektion=6">bs(6)</a>.
 <!-- ^^^ 20020809 -->  <!-- ^^^ 20020809 -->
 <li>Fix raw socket translation for Linux compatibility mode.  <li>Fix raw socket translation for Linux compatibility mode.
 <li>Properly clear the argument list in pmdb.  <li>Properly clear the argument list in pmdb.
 <li>Die on fd_set overrun in <a href="http://man.openbsd.org?query=mtrace&amp;sektion=8">mtrace(8)</a>, <a href="http://man.openbsd.org?query=map-mbone&amp;sektion=8">map-mbone(8)</a> and <a href="http://man.openbsd.org?query=mrouted&amp;sektion=8">mrouted(8)</a> (not built by default).  <li>Die on fd_set overrun in <a href="http://man.openbsd.org/?query=mtrace&amp;sektion=8">mtrace(8)</a>, <a href="http://man.openbsd.org/?query=map-mbone&amp;sektion=8">map-mbone(8)</a> and <a href="http://man.openbsd.org/?query=mrouted&amp;sektion=8">mrouted(8)</a> (not built by default).
 <li>When emulating Linux, don't have accept()ed sockets inherit flags from the listen socket.<br>  <li>When emulating Linux, don't have accept()ed sockets inherit flags from the listen socket.<br>
     <a href="stable.html">[Applied to 3.1-stable]</a>      <a href="stable.html">[Applied to 3.1-stable]</a>
 <li>Fix snprintf length in <a href="http://man.openbsd.org?query=syslogd&amp;sektion=8">syslogd(8)</a>.  <li>Fix snprintf length in <a href="http://man.openbsd.org/?query=syslogd&amp;sektion=8">syslogd(8)</a>.
 <li>Correct a sizeof bug in <a href="http://man.openbsd.org?query=photurisd&amp;sektion=8">photurisd(8)</a>.  <li>Correct a sizeof bug in <a href="http://man.openbsd.org/?query=photurisd&amp;sektion=8">photurisd(8)</a>.
 <li>Tweak IFF_PROMISC handling in <a href="http://man.openbsd.org?query=wi&amp;sektion=4">wi(4)</a> to avoid some unnecessary initialisations.  <li>Tweak IFF_PROMISC handling in <a href="http://man.openbsd.org/?query=wi&amp;sektion=4">wi(4)</a> to avoid some unnecessary initialisations.
 <li>Fix a potential off-by-one in <a href="http://man.openbsd.org?query=ld.so&amp;sektion=1">ld.so(1)</a> that could cause mmap breakage on some architectures.  <li>Fix a potential off-by-one in <a href="http://man.openbsd.org/?query=ld.so&amp;sektion=1">ld.so(1)</a> that could cause mmap breakage on some architectures.
 <li>Make insertion of data into socket buffers run in constant time, a huge win especially with large buffers.  <li>Make insertion of data into socket buffers run in constant time, a huge win especially with large buffers.
 <li>Relax slightly the conditions under which a TCP SYN packet will trigger the sequence number modulator. Handy for systems with ECN stacks.  <li>Relax slightly the conditions under which a TCP SYN packet will trigger the sequence number modulator. Handy for systems with ECN stacks.
 <li>Fix a number of && -&gt; &amp; bit-test typos in OpenSSH (v1 RSA key use,) <a href="http://man.openbsd.org?query=routed&amp;sektion=8">routed(8)</a>, <a href="http://man.openbsd.org?query=pic&amp;sektion=1">pic(1)</a>, <a href="http://man.openbsd.org?query=fvwm&amp;sektion=1">fvwm(1)</a> and a few in the kernel.  <li>Fix a number of && -&gt; &amp; bit-test typos in OpenSSH (v1 RSA key use,) <a href="http://man.openbsd.org/?query=routed&amp;sektion=8">routed(8)</a>, <a href="http://man.openbsd.org/?query=pic&amp;sektion=1">pic(1)</a>, <a href="http://man.openbsd.org/?query=fvwm&amp;sektion=1">fvwm(1)</a> and a few in the kernel.
 <li>Add a couple of missing <a href="http://man.openbsd.org?query=open&amp;sektion=2">open(2)</a> mode args in <a href="http://man.openbsd.org?query=afsd&amp;sektion=8">afsd(8)</a> and <a href="http://man.openbsd.org?query=msgs&amp;sektion=1">msgs(1)</a>.  <li>Add a couple of missing <a href="http://man.openbsd.org/?query=open&amp;sektion=2">open(2)</a> mode args in <a href="http://man.openbsd.org/?query=afsd&amp;sektion=8">afsd(8)</a> and <a href="http://man.openbsd.org/?query=msgs&amp;sektion=1">msgs(1)</a>.
 <!-- ^^^ 20020808 -->  <!-- ^^^ 20020808 -->
 <li>Improve TX interrupt handing in <a href="http://man.openbsd.org?query=be&amp;sektion=4&amp;arch=sparc">be(4/SPARC,4/SPARC64)</a>.  <li>Improve TX interrupt handing in <a href="http://man.openbsd.org/?query=be&amp;sektion=4&amp;arch=sparc">be(4/SPARC,4/SPARC64)</a>.
 <li>Fixes to <a href="http://man.openbsd.org?query=mrinfo&amp;sektion=8">mrinfo(8)</a> (this isn't built by default).  <li>Fixes to <a href="http://man.openbsd.org/?query=mrinfo&amp;sektion=8">mrinfo(8)</a> (this isn't built by default).
 <li>Improve <a href="http://man.openbsd.org?query=systrace&amp;sektion=1">systrace(1)</a>'s handling of interrupted system calls.  <li>Improve <a href="http://man.openbsd.org/?query=systrace&amp;sektion=1">systrace(1)</a>'s handling of interrupted system calls.
 <li>Fix a free-in-caught-alloc-failure-block (!) in <a href="http://man.openbsd.org?query=ohci&amp;sektion=4">ohci(4)</a>.  <li>Fix a free-in-caught-alloc-failure-block (!) in <a href="http://man.openbsd.org/?query=ohci&amp;sektion=4">ohci(4)</a>.
 <li>Rewrite the CRL support in <a href="http://man.openbsd.org?query=isakmpd&amp;sektion=8">isakmpd(8)</a>. Check for OpenSSL >= 0.9.7, the earliest supported version for now.  <li>Rewrite the CRL support in <a href="http://man.openbsd.org/?query=isakmpd&amp;sektion=8">isakmpd(8)</a>. Check for OpenSSL >= 0.9.7, the earliest supported version for now.
 <!-- ^^^ 20020807 -->  <!-- ^^^ 20020807 -->
 <li>Retrofit the new early privilege revocation code to the old X servers.  <li>Retrofit the new early privilege revocation code to the old X servers.
 <li><a href="http://man.openbsd.org?query=xlock&amp;sektion=1">xlock(1)</a> defaults to blank mode (rather than random mode). Also remove bomb mode altogether, to the annoyance of noone.  <li><a href="http://man.openbsd.org/?query=xlock&amp;sektion=1">xlock(1)</a> defaults to blank mode (rather than random mode). Also remove bomb mode altogether, to the annoyance of noone.
 <li>Several fixes to the <a href="http://man.openbsd.org?query=hme&amp;sektion=4&amp;arch=sparc">hme(4/SPARC, 4/SPARC64)</a> driver.  <li>Several fixes to the <a href="http://man.openbsd.org/?query=hme&amp;sektion=4&amp;arch=sparc">hme(4/SPARC, 4/SPARC64)</a> driver.
 <li>Restore struct link_map ABI compatibility between ld.so and gdb, broken by the split of link.h into separate MI, ELF and a.out files.  <li>Restore struct link_map ABI compatibility between ld.so and gdb, broken by the split of link.h into separate MI, ELF and a.out files.
 <!-- ^^^ 20020806 -->  <!-- ^^^ 20020806 -->
 <li>Move AGP chipset support out of machine-independent section (AGP support is per-arch).  <li>Move AGP chipset support out of machine-independent section (AGP support is per-arch).
 <li><strong><font color="#e00000">REVISED SECURITY FIX</font></strong> for the OpenSSL ASN.1 buffer overflows, see the <a href="errata31.html#ssl">erratum</a>.<br>  <li><strong><font color="#e00000">REVISED SECURITY FIX</font></strong> for the OpenSSL ASN.1 buffer overflows, see the <a href="errata31.html#ssl">erratum</a>.<br>
     <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>      <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
 <!-- ^^^ 20020805 -->  <!-- ^^^ 20020805 -->
 <li>Fix <a href="http://man.openbsd.org?query=auth_call&amp;sektion=3">auth_call(3)</a>'s error logging.  <li>Fix <a href="http://man.openbsd.org/?query=auth_call&amp;sektion=3">auth_call(3)</a>'s error logging.
 <li><a href="http://man.openbsd.org?query=cron&amp;sektion=8">cron(8)</a> cross-checks the crontab filename against the system username.  <li><a href="http://man.openbsd.org/?query=cron&amp;sektion=8">cron(8)</a> cross-checks the crontab filename against the system username.
 <li><a href="http://man.openbsd.org?query=netstat&amp;sektion=1">netstat(1)</a> drops its privileges earlier.  <li><a href="http://man.openbsd.org/?query=netstat&amp;sektion=1">netstat(1)</a> drops its privileges earlier.
 <!-- ^^^ 20020804 -->  <!-- ^^^ 20020804 -->
 <li><a href="http://man.openbsd.org?query=systrace&amp;sektion=1">systrace(1)</a> can log matching rules to syslog.  <li><a href="http://man.openbsd.org/?query=systrace&amp;sektion=1">systrace(1)</a> can log matching rules to syslog.
 <li><a href="http://man.openbsd.org?query=write&amp;sektion=1">write(1)</a> drops privileges after opening the tty.  <li><a href="http://man.openbsd.org/?query=write&amp;sektion=1">write(1)</a> drops privileges after opening the tty.
 <li>Refactor <a href="http://man.openbsd.org?query=vmstat&amp;sektion=8">vmstat(8)</a> slightly so <a href="http://man.openbsd.org?query=kvm&amp;sektion=3">kvm(3)</a> is only ever opened once (it could be opened a second time by dkstats.c before).  <li>Refactor <a href="http://man.openbsd.org/?query=vmstat&amp;sektion=8">vmstat(8)</a> slightly so <a href="http://man.openbsd.org/?query=kvm&amp;sektion=3">kvm(3)</a> is only ever opened once (it could be opened a second time by dkstats.c before).
 <li>Open the <a href="http://man.openbsd.org?query=kvm&amp;sektion=3">kvm(3)</a> library earlier in <a href="http://man.openbsd.org?query=fstat&amp;sektion=1">fstat(1)</a> and <a href="http://man.openbsd.org?query=systat&amp;sektion=1">systat(1)</a>, and so drop privs earlier.  <li>Open the <a href="http://man.openbsd.org/?query=kvm&amp;sektion=3">kvm(3)</a> library earlier in <a href="http://man.openbsd.org/?query=fstat&amp;sektion=1">fstat(1)</a> and <a href="http://man.openbsd.org/?query=systat&amp;sektion=1">systat(1)</a>, and so drop privs earlier.
 <li>Test for a previously unchecked malloc() return value in the RPC library, and die unceremoniously on failure.  <li>Test for a previously unchecked malloc() return value in the RPC library, and die unceremoniously on failure.
 <li>Catch file read errors in <a href="http://man.openbsd.org?query=rdate&amp;sektion=8">rdate(8)</a>'s leapsecond handler.  <li>Catch file read errors in <a href="http://man.openbsd.org/?query=rdate&amp;sektion=8">rdate(8)</a>'s leapsecond handler.
 <li>Cleanup of <a href="http://man.openbsd.org?query=amd&amp;sektion=8">amd(8)</a>.  <li>Cleanup of <a href="http://man.openbsd.org/?query=amd&amp;sektion=8">amd(8)</a>.
 <!-- ^^^ 20020803 -->  <!-- ^^^ 20020803 -->
 <li>Remove Kerberos support from the default <a href="http://man.openbsd.org?query=login.conf&amp;sektion=5">login.conf</a> (and its hardwired defaults for when login.conf is absent). See <a href="http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/etc/login.conf?rev=1.12&amp;content-type=text/x-cvsweb-markup">the log</a> for why.  <li>Remove Kerberos support from the default <a href="http://man.openbsd.org/?query=login.conf&amp;sektion=5">login.conf</a> (and its hardwired defaults for when login.conf is absent). See <a href="http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/etc/login.conf?rev=1.12&amp;content-type=text/x-cvsweb-markup">the log</a> for why.
 <li>No more RPC by default. Expect a lot of 'NFS is broken' email to misc@ when 3.2 is released.  <li>No more RPC by default. Expect a lot of 'NFS is broken' email to misc@ when 3.2 is released.
 <li>Rework some aspects of <a href="http://man.openbsd.org?query=crontab&amp;sektion=1">crontab(1)</a>'s file checks.  <li>Rework some aspects of <a href="http://man.openbsd.org/?query=crontab&amp;sektion=1">crontab(1)</a>'s file checks.
 <li>Provide our own <a href="http://man.openbsd.org?query=RSA_verify&amp;sektion=3">RSA_verify(3)</a> implementation for OpenSSH.  <li>Provide our own <a href="http://man.openbsd.org/?query=RSA_verify&amp;sektion=3">RSA_verify(3)</a> implementation for OpenSSH.
 <li>Add the _sshagnt group for use by <a href="http://man.openbsd.org?query=ssh-agent&amp;sektion=1">ssh-agent(1)</a>.  <li>Add the _sshagnt group for use by <a href="http://man.openbsd.org/?query=ssh-agent&amp;sektion=1">ssh-agent(1)</a>.
 <li>Correct a pointer comparison typo in libssl's ASN.1 parser library.  <li>Correct a pointer comparison typo in libssl's ASN.1 parser library.
 <li>Check for correct return value of <a href="http://man.openbsd.org?query=inet_aton&amp;sektion=3">inet_aton(3)</a> in <a href="http://man.openbsd.org?query=isakmpd&amp;sektion=8">isakmpd(8)</a>.  <li>Check for correct return value of <a href="http://man.openbsd.org/?query=inet_aton&amp;sektion=3">inet_aton(3)</a> in <a href="http://man.openbsd.org/?query=isakmpd&amp;sektion=8">isakmpd(8)</a>.
 <li>Add some overflow checks similar to the <a href="http://man.openbsd.org?query=calloc&amp;sektion=3">calloc(3)</a> patch to <a href="http://man.openbsd.org?query=ssh&amp;sektion=1">ssh(1)</a>.  <li>Add some overflow checks similar to the <a href="http://man.openbsd.org/?query=calloc&amp;sektion=3">calloc(3)</a> patch to <a href="http://man.openbsd.org/?query=ssh&amp;sektion=1">ssh(1)</a>.
 <li><a href="http://man.openbsd.org?query=isakmpd&amp;sektion=8">isakmpd(8)</a> support for certificate revocation lists.  <li><a href="http://man.openbsd.org/?query=isakmpd&amp;sektion=8">isakmpd(8)</a> support for certificate revocation lists.
 <!-- ^^^ 20020802 -->  <!-- ^^^ 20020802 -->
 <li>Prevent integer overflow in i386 USER_LDT code.  <li>Prevent integer overflow in i386 USER_LDT code.
 <li>Fix NFS's handling of zero-length RPC fragments.  <li>Fix NFS's handling of zero-length RPC fragments.
 <li><a href="http://man.openbsd.org?query=systrace&amp;sektion=1">systrace(1)</a> handles unlinking of a symlink correctly.  <li><a href="http://man.openbsd.org/?query=systrace&amp;sektion=1">systrace(1)</a> handles unlinking of a symlink correctly.
 <li>Limit file size to 2^31 * PAGE_SIZE in FFS code.  <li>Limit file size to 2^31 * PAGE_SIZE in FFS code.
 <li>u_short -&gt; u_int16_t in <a href="http://man.openbsd.org?query=mrouted&amp;sektion=8">mtrouted(8)</a>.  <li>u_short -&gt; u_int16_t in <a href="http://man.openbsd.org/?query=mrouted&amp;sektion=8">mtrouted(8)</a>.
 <!-- ^^^ 20020801 -->  <!-- ^^^ 20020801 -->
 <li><strong><font color="#e00000">REVISED SECURITY FIX</font></strong> for the <a href="http://man.openbsd.org?query=xdr_array&amp;sektion=3">xdr_array(3)</a> buffer overflow, see the <a href="errata31.html#xdr">erratum</a>.<br>  <li><strong><font color="#e00000">REVISED SECURITY FIX</font></strong> for the <a href="http://man.openbsd.org/?query=xdr_array&amp;sektion=3">xdr_array(3)</a> buffer overflow, see the <a href="errata31.html#xdr">erratum</a>.<br>
     <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>      <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
 <li>Spot zero-length keys or values in ypmatch_add(), and exit early.  <li>Spot zero-length keys or values in ypmatch_add(), and exit early.
 <li>Broken by the removal of <a href="http://man.openbsd.org?query=atexit&amp;sektion=3">atexit(3)</a>, <a href="http://man.openbsd.org?query=chpass&amp;sektion=1">chpass(1)</a> now cleans up after itself properly again.  <li>Broken by the removal of <a href="http://man.openbsd.org/?query=atexit&amp;sektion=3">atexit(3)</a>, <a href="http://man.openbsd.org/?query=chpass&amp;sektion=1">chpass(1)</a> now cleans up after itself properly again.
 <li>Use <a href="http://man.openbsd.org?query=fork&amp;sektion=2">fork(2)</a> instead of <a href="http://man.openbsd.org?query=vfork&amp;sektion=2">vfork(2)</a> in <a href="http://man.openbsd.org?query=make&amp;sektion=1">make(1)</a>. Fixes hppa breakage.  <li>Use <a href="http://man.openbsd.org/?query=fork&amp;sektion=2">fork(2)</a> instead of <a href="http://man.openbsd.org/?query=vfork&amp;sektion=2">vfork(2)</a> in <a href="http://man.openbsd.org/?query=make&amp;sektion=1">make(1)</a>. Fixes hppa breakage.
 <li>Back out the new <a href="http://man.openbsd.org?query=atexit&amp;sektion=3">atexit(3)</a> handler changes which appear to break Perl somehow. Bugger.  <li>Back out the new <a href="http://man.openbsd.org/?query=atexit&amp;sektion=3">atexit(3)</a> handler changes which appear to break Perl somehow. Bugger.
 <li>Get <a href="http://man.openbsd.org?query=calloc&amp;sektion=3">calloc(3)</a> semantics right, while still not allowing the size_t overflow.<br>  <li>Get <a href="http://man.openbsd.org/?query=calloc&amp;sektion=3">calloc(3)</a> semantics right, while still not allowing the size_t overflow.<br>
     <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>      <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
 <li>Fix <a href="http://man.openbsd.org?query=httpd&amp;sektion=8">httpd(8)</a> compilation without mod_ssl.  <li>Fix <a href="http://man.openbsd.org/?query=httpd&amp;sektion=8">httpd(8)</a> compilation without mod_ssl.
 <!-- ^^^ 20020731 -->  <!-- ^^^ 20020731 -->
 <li>On i386, allow <a href="http://man.openbsd.org?query=mprotect&amp;sektion=2">mprotect(2)</a> to alter the execution protection of the stack.  <li>On i386, allow <a href="http://man.openbsd.org/?query=mprotect&amp;sektion=2">mprotect(2)</a> to alter the execution protection of the stack.
 <li>Fix some more potential null pointer dereferences, this time in pfkey and netiso.  <li>Fix some more potential null pointer dereferences, this time in pfkey and netiso.
 <li>Plug a <a href="http://man.openbsd.org?query=kqueue&amp;sektion=2">kqueue(2)</a> file descriptor leak in the X server.  <li>Plug a <a href="http://man.openbsd.org/?query=kqueue&amp;sektion=2">kqueue(2)</a> file descriptor leak in the X server.
 <li>Have libc <a href="http://man.openbsd.org?query=opendir&amp;sektion=3">opendir(3)</a> and <a href="http://man.openbsd.org?query=scandir&amp;sektion=3">scandir(3)</a> check for size_t overflows like the new calloc().  <li>Have libc <a href="http://man.openbsd.org/?query=opendir&amp;sektion=3">opendir(3)</a> and <a href="http://man.openbsd.org/?query=scandir&amp;sektion=3">scandir(3)</a> check for size_t overflows like the new calloc().
 <li>Like in libc, fix the calloc() implementation in <a href="http://man.openbsd.org?query=named&amp;sektion=8">named(8)</a> (only used by a feature disabled in OpenBSD).  <li>Like in libc, fix the calloc() implementation in <a href="http://man.openbsd.org/?query=named&amp;sektion=8">named(8)</a> (only used by a feature disabled in OpenBSD).
 <li>Lots of work on the sparc and sparc64 console drivers.  <li>Lots of work on the sparc and sparc64 console drivers.
 <li>Kernel IPsec was only doing ESP integrity checks on NICs that had already done so in hardware...  <li>Kernel IPsec was only doing ESP integrity checks on NICs that had already done so in hardware...
 <li>Fix a typo that caused a potential null pointer dereference in kernel NFS.  <li>Fix a typo that caused a potential null pointer dereference in kernel NFS.
 <li>New 'PermitUserEnvironment' option for SSH. Off by default.  <li>New 'PermitUserEnvironment' option for SSH. Off by default.
 <li>Add 'with or without modification' clause to <a href="http://man.openbsd.org?query=gprof&amp;sektion=1">gprof(1)</a> licensing.  <li>Add 'with or without modification' clause to <a href="http://man.openbsd.org/?query=gprof&amp;sektion=1">gprof(1)</a> licensing.
 <li>Sync with OpenSSL 0.9.6e-0.9.7 <a href="http://www.openssl.org/news/patch_20020730_0_9_7.txt">CHANGES file</a>.  <li>Sync with OpenSSL 0.9.6e-0.9.7 <a href="http://www.openssl.org/news/patch_20020730_0_9_7.txt">CHANGES file</a>.
 <li><font color="#e00000"><strong>SECURITY FIX: Several remote buffer overflows can occur in the SSL2 server and SSL3 client of the <a href="http://man.openbsd.org?query=ssl&amp;sektion=8">ssl(8)</a> library, as in the ASN.1 parser code in the <a href="http://man.openbsd.org?query=crypto&amp;sektion=3">crypto(3)</a> library, all of them being potentially remotely exploitable.</strong></font><br>  <li><font color="#e00000"><strong>SECURITY FIX: Several remote buffer overflows can occur in the SSL2 server and SSL3 client of the <a href="http://man.openbsd.org/?query=ssl&amp;sektion=8">ssl(8)</a> library, as in the ASN.1 parser code in the <a href="http://man.openbsd.org/?query=crypto&amp;sektion=3">crypto(3)</a> library, all of them being potentially remotely exploitable.</strong></font><br>
     <a href="errata31.html#ssl">A source code patch is available</a>.<br>      <a href="errata31.html#ssl">A source code patch is available</a>.<br>
     <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>      <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
 <li>In <a href="http://man.openbsd.org?query=pf&amp;sektion=4">pf(4)</a>, allow TCP flags to be specified in all rules that include TCP (before the rules had to be exclusively TCP).  <li>In <a href="http://man.openbsd.org/?query=pf&amp;sektion=4">pf(4)</a>, allow TCP flags to be specified in all rules that include TCP (before the rules had to be exclusively TCP).
 <!-- ^^^ 20020730 -->  <!-- ^^^ 20020730 -->
 <li>Fix a buffer overflow in <a href="http://man.openbsd.org?query=backgammon&amp;sektion=6">backgammon(6)</a>, and replace its gameplay algorithm.  <li>Fix a buffer overflow in <a href="http://man.openbsd.org/?query=backgammon&amp;sektion=6">backgammon(6)</a>, and replace its gameplay algorithm.
 <li>Kill a kernel tty memory leak.<br>  <li>Kill a kernel tty memory leak.<br>
     <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>      <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
 <li>Super-cautious strcpy()->strlcpy() in <a href="http://man.openbsd.org?query=exec&amp;sektion=3">exec*(3)</a>.  <li>Super-cautious strcpy()->strlcpy() in <a href="http://man.openbsd.org/?query=exec&amp;sektion=3">exec*(3)</a>.
 <li>Return failure if the parameters given to <a href="http://man.openbsd.org?query=calloc&amp;sektion=3">calloc(3)</a> would cause an overflow of size_t.<br>  <li>Return failure if the parameters given to <a href="http://man.openbsd.org/?query=calloc&amp;sektion=3">calloc(3)</a> would cause an overflow of size_t.<br>
     <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>      <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
 <li>Don't enable so many authentication methods by default in <a href="http://man.openbsd.org?query=login.conf&amp;sektion=5">login.conf(5)</a>.  <li>Don't enable so many authentication methods by default in <a href="http://man.openbsd.org/?query=login.conf&amp;sektion=5">login.conf(5)</a>.
 <li><font color="#e00000"><strong>SECURITY FIX: A buffer overflow can occur in the <a href="http://man.openbsd.org?query=xdr_array&amp;sektion=3">xdr_array(3)</a> RPC code, leading to possible remote crash.</strong></font><br>  <li><font color="#e00000"><strong>SECURITY FIX: A buffer overflow can occur in the <a href="http://man.openbsd.org/?query=xdr_array&amp;sektion=3">xdr_array(3)</a> RPC code, leading to possible remote crash.</strong></font><br>
     <a href="errata31.html#xdr">A source code patch is available</a>.<br>      <a href="errata31.html#xdr">A source code patch is available</a>.<br>
     <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>      <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
 <li>Privilege drop in new X servers is disabled for now on x86 due to a problem with xf86OpenConsole().  <li>Privilege drop in new X servers is disabled for now on x86 due to a problem with xf86OpenConsole().
 <li>Support DMA for two more ServerWorks <a href="http://man.openbsd.org?query=pciide&amp;sektion=4">pciide(4)</a> devices.  <li>Support DMA for two more ServerWorks <a href="http://man.openbsd.org/?query=pciide&amp;sektion=4">pciide(4)</a> devices.
 <li><font color="#e00000"><strong>SECURITY FIX: A race condition exists in the <a href="http://man.openbsd.org?query=pppd&amp;sektion=8">pppd(8)</a> daemon which may cause it to alter the file permissions of an arbitrary file.</strong></font><br>  <li><font color="#e00000"><strong>SECURITY FIX: A race condition exists in the <a href="http://man.openbsd.org/?query=pppd&amp;sektion=8">pppd(8)</a> daemon which may cause it to alter the file permissions of an arbitrary file.</strong></font><br>
     <a href="errata31.html#pppd">A source code patch is available</a>.<br>      <a href="errata31.html#pppd">A source code patch is available</a>.<br>
     <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>      <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
 <li><a href="http://man.openbsd.org?query=mprotect&amp;sektion=2">mprotect(2)</a> function pointers stored by <a href="http://man.openbsd.org?query=atexit&amp;sektion=3">atexit(3)</a> to stop bad guys tweaking the exit handlers.  <li><a href="http://man.openbsd.org/?query=mprotect&amp;sektion=2">mprotect(2)</a> function pointers stored by <a href="http://man.openbsd.org/?query=atexit&amp;sektion=3">atexit(3)</a> to stop bad guys tweaking the exit handlers.
 <li>"undrugs" <a href="http://man.openbsd.org?query=gpr&amp;sektion=4">gpr(4)</a>.  <li>"undrugs" <a href="http://man.openbsd.org/?query=gpr&amp;sektion=4">gpr(4)</a>.
 <li>Fix two off-by-one bugs in ext2fs.  <li>Fix two off-by-one bugs in ext2fs.
 <li>Add ld.so support for sparc.  <li>Add ld.so support for sparc.
 <li>Lookup of ip6.arpa, then ip6.int for IPv6 reverse resolution. See <a href="http://www.ietf.org/rfc/rfc3152.txt">RFC3152</a> for why.  <li>Lookup of ip6.arpa, then ip6.int for IPv6 reverse resolution. See <a href="http://www.ietf.org/rfc/rfc3152.txt">RFC3152</a> for why.
 <li>Small fix for GCC 3.1.1 in IPv4 checksum code.  <li>Small fix for GCC 3.1.1 in IPv4 checksum code.
 <!-- 20020729 -->  <!-- 20020729 -->
 <li>Apply the 'broken PCI burst-write' workaround to all <a href="http://man.openbsd.org?query=hifn&amp;sektion=4">hifn(4)</a> 7811-based devices.  <li>Apply the 'broken PCI burst-write' workaround to all <a href="http://man.openbsd.org/?query=hifn&amp;sektion=4">hifn(4)</a> 7811-based devices.
 <li>Show <a href="http://man.openbsd.org?query=uftdi&amp;sektion=4">uftdi(4)</a> how to use hardware and software flow control.  <li>Show <a href="http://man.openbsd.org/?query=uftdi&amp;sektion=4">uftdi(4)</a> how to use hardware and software flow control.
 <li>Fix a potential access-after-free() in <a href="http://man.openbsd.org?query=kue&amp;sektion=4">kue(4)</a>.  <li>Fix a potential access-after-free() in <a href="http://man.openbsd.org/?query=kue&amp;sektion=4">kue(4)</a>.
 <!-- ^^^ 20020728 -->  <!-- ^^^ 20020728 -->
 <li>/tmp/.X11-unix and /tmp/.ICE-unix are created in rc, owned by root, removing the need for root privs later on.  <li>/tmp/.X11-unix and /tmp/.ICE-unix are created in rc, owned by root, removing the need for root privs later on.
 <li>Again, this time in <a href="http://man.openbsd.org?query=ld&amp;sektion=1">ld(1)</a>, map BSS non-executable.  <li>Again, this time in <a href="http://man.openbsd.org/?query=ld&amp;sektion=1">ld(1)</a>, map BSS non-executable.
 <li>Rearrange the new XFree86 server so all tasks for which root privs are needed get done early in osinit(). Of course, revoke root right afterwards.  <li>Rearrange the new XFree86 server so all tasks for which root privs are needed get done early in osinit(). Of course, revoke root right afterwards.
 <li>Add Dell-specific PERC (right) product IDs so that <a href="http://man.openbsd.org?query=aac&amp;sektion=4">aac(4)</a> configures Dell PowerEdge 2650 RAID.  <li>Add Dell-specific PERC (right) product IDs so that <a href="http://man.openbsd.org/?query=aac&amp;sektion=4">aac(4)</a> configures Dell PowerEdge 2650 RAID.
 <li>Add leapsecond support to <a href="http://man.openbsd.org?query=rdate&amp;sektion=8">rdate(8)</a>'s NTP client.  <li>Add leapsecond support to <a href="http://man.openbsd.org/?query=rdate&amp;sektion=8">rdate(8)</a>'s NTP client.
 <!-- ^^^ 20020727 -->  <!-- ^^^ 20020727 -->
 <li>The install/upgrade scripts no longer automatically mount NFS filesystems.  <li>The install/upgrade scripts no longer automatically mount NFS filesystems.
 <li>Kernel a.out code now allocates (mostly) non-executable BSS.  <li>Kernel a.out code now allocates (mostly) non-executable BSS.
 <li>Miscellaneous fixes to several games.  <li>Miscellaneous fixes to several games.
 <li>Lots of work on the sparc64 <a href="http://man.openbsd.org?query=creator&amp;sektion=4&amp;arch=sparc64">creator(4/sparc64)</a> framebuffer driver.  <li>Lots of work on the sparc64 <a href="http://man.openbsd.org/?query=creator&amp;sektion=4&amp;arch=sparc64">creator(4/sparc64)</a> framebuffer driver.
 <li>In <a href="http://man.openbsd.org?query=pf&amp;sektion=4">pf(4)</a> the order of the log and quick keywords is now irrelevant.  <li>In <a href="http://man.openbsd.org/?query=pf&amp;sektion=4">pf(4)</a> the order of the log and quick keywords is now irrelevant.
 <!-- ^^^ 20020726 -->  <!-- ^^^ 20020726 -->
 <li>Allow X servers to be built without DGA.  <li>Allow X servers to be built without DGA.
 <li>At securelevel 2, stop an attacker from setting the clock forwards to within a year of the time it wraps around to zero.  <li>At securelevel 2, stop an attacker from setting the clock forwards to within a year of the time it wraps around to zero.
 <li>Allow <a href="http://man.openbsd.org?query=altq&amp;sektion=9">altq(9)</a> to work on pre-Pentium x86 machines that lack pentium_mhz stuff.  <li>Allow <a href="http://man.openbsd.org/?query=altq&amp;sektion=9">altq(9)</a> to work on pre-Pentium x86 machines that lack pentium_mhz stuff.
 <li>Add a distrib note that due to major changes to the port, the sparc installer won't allow upgrades to 3.2  <li>Add a distrib note that due to major changes to the port, the sparc installer won't allow upgrades to 3.2
 <li>Only include a single <a href="http://man.openbsd.org?query=wscons&amp;sektion=4">wscons(4)</a> font when building with option SMALL_KERNEL.  <li>Only include a single <a href="http://man.openbsd.org/?query=wscons&amp;sektion=4">wscons(4)</a> font when building with option SMALL_KERNEL.
 <li>Add a few more RFC2142-suggested mailbox aliases.  <li>Add a few more RFC2142-suggested mailbox aliases.
 <li>Improve <a href="http://man.openbsd.org?query=mg&amp;sektion=1">mg(1)</a>'s filename handling.  <li>Improve <a href="http://man.openbsd.org/?query=mg&amp;sektion=1">mg(1)</a>'s filename handling.
 <li>More <a href="http://man.openbsd.org?query=hifn&amp;sektion=4">hifn(4)</a> fixes.  <li>More <a href="http://man.openbsd.org/?query=hifn&amp;sektion=4">hifn(4)</a> fixes.
 <li>Fix comparison bug in IPv6 multicast routing MTU check.  <li>Fix comparison bug in IPv6 multicast routing MTU check.
 <!-- ^^^ 20020725 -->  <!-- ^^^ 20020725 -->
 <li>Correct bad sizeof() in kernel NFS code.  <li>Correct bad sizeof() in kernel NFS code.
 <li>Checks for <a href="http://man.openbsd.org?query=snprintf&amp;sektion=3">snprintf(3)</a> return values &lt; 0.  <li>Checks for <a href="http://man.openbsd.org/?query=snprintf&amp;sektion=3">snprintf(3)</a> return values &lt; 0.
 <li>Improve <a href="http://man.openbsd.org?query=systrace&amp;sektion=1">systrace(1)</a>'s uid/gid tracking.  <li>Improve <a href="http://man.openbsd.org/?query=systrace&amp;sektion=1">systrace(1)</a>'s uid/gid tracking.
 <li>Fix the <a href="http://man.openbsd.org?query=csh&amp;sektion=1">csh(1)</a> large directory fix.  <li>Fix the <a href="http://man.openbsd.org/?query=csh&amp;sektion=1">csh(1)</a> large directory fix.
 <li>In <a href="http://man.openbsd.org?query=ssh&amp;sektion=1">ssh(1)</a>, help avoid a potential man-in-the-middle attack by showing all known host keys for a host when we're warning about an unknown host key.  <li>In <a href="http://man.openbsd.org/?query=ssh&amp;sektion=1">ssh(1)</a>, help avoid a potential man-in-the-middle attack by showing all known host keys for a host when we're warning about an unknown host key.
 <li>Fix a TAILQ null deref in pmdb.  <li>Fix a TAILQ null deref in pmdb.
 <!-- ^^^ 20020724 -->  <!-- ^^^ 20020724 -->
 <li>Make the second parameter to r?index()/strr?chr() an int instead of a char.  <li>Make the second parameter to r?index()/strr?chr() an int instead of a char.
 <li>Stick a thread mutex around name lookups in <a href="http://man.openbsd.org?query=getaddrinfo&amp;sektion=3">getaddrinfo(3)</a>.  <li>Stick a thread mutex around name lookups in <a href="http://man.openbsd.org/?query=getaddrinfo&amp;sektion=3">getaddrinfo(3)</a>.
 <li>Fix a <a href="http://man.openbsd.org?query=systrace&amp;sektion=1">systrace(1)</a> double free().  <li>Fix a <a href="http://man.openbsd.org/?query=systrace&amp;sektion=1">systrace(1)</a> double free().
 <li>CardBus support for macppc.  <li>CardBus support for macppc.
 <li>Fix <a href="http://man.openbsd.org?query=dc&amp;sektion=4">dc(4)</a> cardbus reads.  <li>Fix <a href="http://man.openbsd.org/?query=dc&amp;sektion=4">dc(4)</a> cardbus reads.
 <li>Remove a signedness bug in <a href="http://man.openbsd.org?query=sshd&amp;sektion=8">sshd(8)</a>'s handling of utmp_len (-u option).  <li>Remove a signedness bug in <a href="http://man.openbsd.org/?query=sshd&amp;sektion=8">sshd(8)</a>'s handling of utmp_len (-u option).
 <li>Fix some bugs in <a href="http://man.openbsd.org?query=pool&amp;sektion=9">pool(9)</a>.  <li>Fix some bugs in <a href="http://man.openbsd.org/?query=pool&amp;sektion=9">pool(9)</a>.
 <!-- ^^^ 20020723 -->  <!-- ^^^ 20020723 -->
 <li>More additions to GNU <a href="http://man.openbsd.org?query=as&amp;sektion=1">as(1)</a>, this time to make Ogle compile.  <li>More additions to GNU <a href="http://man.openbsd.org/?query=as&amp;sektion=1">as(1)</a>, this time to make Ogle compile.
 <li>Fix graceful restarts of chroot'ed <a href="http://man.openbsd.org?query=httpd&amp;sektion=8">httpd(8)</a>.  <li>Fix graceful restarts of chroot'ed <a href="http://man.openbsd.org/?query=httpd&amp;sektion=8">httpd(8)</a>.
 <li>Have SSH fall back to the standard path if setusercontext() can't set it.  <li>Have SSH fall back to the standard path if setusercontext() can't set it.
 <!-- ^^^ 20020722 -->  <!-- ^^^ 20020722 -->
 <li>Add a sequence number to kernel messages for <a href="http://man.openbsd.org?query=systrace&amp;sektion=1">systrace(1)</a>.  <li>Add a sequence number to kernel messages for <a href="http://man.openbsd.org/?query=systrace&amp;sektion=1">systrace(1)</a>.
 <li>Teach pmdb about corefiles.  <li>Teach pmdb about corefiles.
 <li>Map stack pages non-executable.  <li>Map stack pages non-executable.
 <!-- ^^^ 20020721 -->  <!-- ^^^ 20020721 -->
 <li><a href="http://man.openbsd.org?query=noct&amp;sektion=4">noct(4)</a> now works around NSP2000 PCI bridge brokenness. Fix a similar problem in <a href="http://man.openbsd.org?query=hifn&amp;sektion=4">hifn(4)</a>.  <li><a href="http://man.openbsd.org/?query=noct&amp;sektion=4">noct(4)</a> now works around NSP2000 PCI bridge brokenness. Fix a similar problem in <a href="http://man.openbsd.org/?query=hifn&amp;sektion=4">hifn(4)</a>.
 <li>Drop the requirement for commas in many <a href="http://man.openbsd.org?query=pf&amp;sektion=4">pf(4)</a> lists, useful when used in conjunction with the new variable concat feature.  <li>Drop the requirement for commas in many <a href="http://man.openbsd.org/?query=pf&amp;sektion=4">pf(4)</a> lists, useful when used in conjunction with the new variable concat feature.
 <li>Implement string concatenation for variable declarations in <a href="http://man.openbsd.org?query=pf&amp;sektion=4">pf(4)</a>.  <li>Implement string concatenation for variable declarations in <a href="http://man.openbsd.org/?query=pf&amp;sektion=4">pf(4)</a>.
 <li>Big change to the way signal trampolines are stored and called.  <li>Big change to the way signal trampolines are stored and called.
 <li>Add milter build support to <a href="http://man.openbsd.org?query=sendmail&amp;sektion=8">sendmail(8)</a>, see the Makefile.  <li>Add milter build support to <a href="http://man.openbsd.org/?query=sendmail&amp;sektion=8">sendmail(8)</a>, see the Makefile.
 <li>Make <a href="http://man.openbsd.org?query=sudo&amp;sektion=8">sudo(8)</a> and <a href="http://man.openbsd.org?query=inetd&amp;sektion=8">inetd(8)</a> die if setusercontext() fails.  <li>Make <a href="http://man.openbsd.org/?query=sudo&amp;sektion=8">sudo(8)</a> and <a href="http://man.openbsd.org/?query=inetd&amp;sektion=8">inetd(8)</a> die if setusercontext() fails.
 <!-- ^^^ 20020720 -->  <!-- ^^^ 20020720 -->
 <li>Fix a disk masher bug in <a href="http://man.openbsd.org?query=siop&amp;sektion=4">siop(4)</a>, a little too late for some.  <li>Fix a disk masher bug in <a href="http://man.openbsd.org/?query=siop&amp;sektion=4">siop(4)</a>, a little too late for some.
 <li>Don't install <a href="http://man.openbsd.org?query=mk-amd-map&amp;sektion=8&amp;manpath=OpenBSD+3.1">mk-amd-map(8)</a> any more, we don't use it. And it's broken.  <li>Don't install <a href="http://man.openbsd.org/?query=mk-amd-map&amp;sektion=8&amp;manpath=OpenBSD+3.1">mk-amd-map(8)</a> any more, we don't use it. And it's broken.
 <li>Merge Apache 1.3.26 and mod_ssl 2.8.10.  <li>Merge Apache 1.3.26 and mod_ssl 2.8.10.
 <li>Have SSH remove fatal cleanups after calling fork().  <li>Have SSH remove fatal cleanups after calling fork().
 <!-- ^^^ 20020719 -->  <!-- ^^^ 20020719 -->
 <li>/etc/systrace directory added along with policies for <a href="http://man.openbsd.org?query=named&amp;sektion=8">named(8)</a> and <a href="http://man.openbsd.org?query=lpd&amp;sektion=8">lpd(8)</a>.  <li>/etc/systrace directory added along with policies for <a href="http://man.openbsd.org/?query=named&amp;sektion=8">named(8)</a> and <a href="http://man.openbsd.org/?query=lpd&amp;sektion=8">lpd(8)</a>.
 <li>Make OpenSSL use /bin/sh instead of $SHELL when running scripts. Not everyone uses a Bourne-like shell.  <li>Make OpenSSL use /bin/sh instead of $SHELL when running scripts. Not everyone uses a Bourne-like shell.
 <li>String handling and other fixes to <a href="http://man.openbsd.org?query=rogue&amp;sektion=6">rogue(6)</a>.  <li>String handling and other fixes to <a href="http://man.openbsd.org/?query=rogue&amp;sektion=6">rogue(6)</a>.
 <!-- ^^^ 20020718 -->  <!-- ^^^ 20020718 -->
 <li>Fix <a href="http://man.openbsd.org?query=pax&amp;sektion=1">pax(1)</a> -s replacement string truncation.  <li>Fix <a href="http://man.openbsd.org/?query=pax&amp;sektion=1">pax(1)</a> -s replacement string truncation.
 <li>Fix a deref after free() in the kernel's routing socket code.  <li>Fix a deref after free() in the kernel's routing socket code.
 <li>Add 'fdcache' to Apache, part of the work to make graceful restart work properly under the chroot().  <li>Add 'fdcache' to Apache, part of the work to make graceful restart work properly under the chroot().
 <li>The search for a shorter rulebase continues, <a href="http://man.openbsd.org?query=pf&amp;sektion=4">pf(4)</a> now recognises 'self' as an address, meaning all IPv4 and IPv6 addresses on all interfaces.  <li>The search for a shorter rulebase continues, <a href="http://man.openbsd.org/?query=pf&amp;sektion=4">pf(4)</a> now recognises 'self' as an address, meaning all IPv4 and IPv6 addresses on all interfaces.
 <!-- ^^^ 20020717 -->  <!-- ^^^ 20020717 -->
 <li>Fix wayward string termination in <a href="http://man.openbsd.org?query=rbootd&amp;sektion=8">rbootd(8)</a>.  <li>Fix wayward string termination in <a href="http://man.openbsd.org/?query=rbootd&amp;sektion=8">rbootd(8)</a>.
 <li>Fix a DIAGNOSTIC bug in <a href="http://man.openbsd.org?query=ffs_softupdates&amp;sektion=4">ffs_softupdates(4)</a>, and also make panic() calls show the right type.  <li>Fix a DIAGNOSTIC bug in <a href="http://man.openbsd.org/?query=ffs_softupdates&amp;sektion=4">ffs_softupdates(4)</a>, and also make panic() calls show the right type.
 <li>Some mbuf Fixes to the <a href="http://man.openbsd.org?query=hifn&amp;sektion=4">hifn(4)</a> driver, more fixes to come.  <li>Some mbuf Fixes to the <a href="http://man.openbsd.org/?query=hifn&amp;sektion=4">hifn(4)</a> driver, more fixes to come.
 <li>Add DES and 3DES to <a href="http://man.openbsd.org?query=noct&amp;sektion=4">noct(4)</a> as well.  <li>Add DES and 3DES to <a href="http://man.openbsd.org/?query=noct&amp;sektion=4">noct(4)</a> as well.
 <li>Fix some broken memset() and lseek() calls.  <li>Fix some broken memset() and lseek() calls.
 <!-- ^^^ 20020716 -->  <!-- ^^^ 20020716 -->
 <li>Work around some limitations of <a href="http://man.openbsd.org?query=noct&amp;sektion=4">noct(4)</a> hardware. Add MD5 and SHA1 support.  <li>Work around some limitations of <a href="http://man.openbsd.org/?query=noct&amp;sektion=4">noct(4)</a> hardware. Add MD5 and SHA1 support.
 <li>Small additions to <a href="http://man.openbsd.org?query=as&amp;sektion=1">as(1)</a> to make <a href="http://www.gnupg.org/">gnupg</a> compile.  <li>Small additions to <a href="http://man.openbsd.org/?query=as&amp;sektion=1">as(1)</a> to make <a href="http://www.gnupg.org/">gnupg</a> compile.
 <li>Add some new users (names beginning with underscore) to replace user nobody for portmap, rstatd, identd, rusersd and fingerd.  <li>Add some new users (names beginning with underscore) to replace user nobody for portmap, rstatd, identd, rusersd and fingerd.
 <li>Fix <a href="http://man.openbsd.org?query=csh&amp;sektion=1">csh(1)</a> directory completion SIGSEGV with large directories.  <li>Fix <a href="http://man.openbsd.org/?query=csh&amp;sektion=1">csh(1)</a> directory completion SIGSEGV with large directories.
 <li>Make <a href="http://man.openbsd.org?query=atrun&amp;sektion=8">atrun(8)</a> part of <a href="http://man.openbsd.org?query=cron&amp;sektion=8">cron(8)</a>, removing the need for the atrun cronjob.  <li>Make <a href="http://man.openbsd.org/?query=atrun&amp;sektion=8">atrun(8)</a> part of <a href="http://man.openbsd.org/?query=cron&amp;sektion=8">cron(8)</a>, removing the need for the atrun cronjob.
 <li>More <a href="http://man.openbsd.org?query=pf&amp;sektion=4">pf(4)</a>: accept !&lt;interface&gt; syntax. Oh yes.  <li>More <a href="http://man.openbsd.org/?query=pf&amp;sektion=4">pf(4)</a>: accept !&lt;interface&gt; syntax. Oh yes.
 <li><a href="http://man.openbsd.org?query=top&amp;sektion=1">top(1)</a> now has a BSD license.  <li><a href="http://man.openbsd.org/?query=top&amp;sektion=1">top(1)</a> now has a BSD license.
 <li><a href="http://man.openbsd.org?query=pf&amp;sektion=4">pf(4)</a> parser spots more silly combinations (return-rst on non-TCP rules, keep-state on block rules).  <li><a href="http://man.openbsd.org/?query=pf&amp;sektion=4">pf(4)</a> parser spots more silly combinations (return-rst on non-TCP rules, keep-state on block rules).
 <!-- ^^^ 20020715 -->  <!-- ^^^ 20020715 -->
 <li>Fix a double free in BSD authentication.  <li>Fix a double free in BSD authentication.
 <!-- XXX sendmail SuperSafe=... thing ? -->  <!-- XXX sendmail SuperSafe=... thing ? -->
 <li>Make <a href="http://man.openbsd.org?query=ftpd&amp;sektion=8">ftpd(8)</a> always use high port numbers for passive data connections (no more -h option).  <li>Make <a href="http://man.openbsd.org/?query=ftpd&amp;sektion=8">ftpd(8)</a> always use high port numbers for passive data connections (no more -h option).
 <!-- ^^^ 20020714 -->  <!-- ^^^ 20020714 -->
 <li>Add SIGALRM to the list of signals that can be sent (after uid/euid checks) to set[ug]id child processes.  <li>Add SIGALRM to the list of signals that can be sent (after uid/euid checks) to set[ug]id child processes.
 <li>Enable list expansion for <a href="http://man.openbsd.org?query=pf&amp;sektion=4">pf(4)</a> NAT rules, broken since the pf.conf/nat.conf merge.  <li>Enable list expansion for <a href="http://man.openbsd.org/?query=pf&amp;sektion=4">pf(4)</a> NAT rules, broken since the pf.conf/nat.conf merge.
 <li>The XFree86 3.3.x servers that are left now revoke their root privileges right after getting I/O access.  <li>The XFree86 3.3.x servers that are left now revoke their root privileges right after getting I/O access.
 <li>Now that <a href="http://man.openbsd.org?query=xterm&amp;sektion=1">xterm(1)</a> drops its root privileges, install it setgid(utmp) for utmp updates. Revoke setgid too if not needed.  <li>Now that <a href="http://man.openbsd.org/?query=xterm&amp;sektion=1">xterm(1)</a> drops its root privileges, install it setgid(utmp) for utmp updates. Revoke setgid too if not needed.
 <!-- ^^^ 20020713 -->  <!-- ^^^ 20020713 -->
 <li>Fix at least one <a href="http://man.openbsd.org?query=tcpdump&amp;sektion=8">tcpdump(8)</a> buffer overflow.<br>  <li>Fix at least one <a href="http://man.openbsd.org/?query=tcpdump&amp;sektion=8">tcpdump(8)</a> buffer overflow.<br>
     <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>      <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
 <li>Teach MMX (not SSE) to <a href="http://man.openbsd.org?query=as&amp;sektion=1">as(1)</a>.  <li>Teach MMX (not SSE) to <a href="http://man.openbsd.org/?query=as&amp;sektion=1">as(1)</a>.
 <li>Add <a href="http://man.openbsd.org?query=radio&amp;sektion=4">radio(4)</a> device attachment for <a href="http://man.openbsd.org?query=bktr&amp;sektion=4&amp;arch=i386">bktr(4)</a> and <a href="http://man.openbsd.org?query=fms&amp;sektion=4">fms(4)</a>.  <li>Add <a href="http://man.openbsd.org/?query=radio&amp;sektion=4">radio(4)</a> device attachment for <a href="http://man.openbsd.org/?query=bktr&amp;sektion=4&amp;arch=i386">bktr(4)</a> and <a href="http://man.openbsd.org/?query=fms&amp;sektion=4">fms(4)</a>.
 <li>Have <a href="http://man.openbsd.org?query=pcibios&amp;sektion=4&amp;arch=i386">pcibios(4)</a> detect and ignore a too-short PCI IRQ routing table header.  <li>Have <a href="http://man.openbsd.org/?query=pcibios&amp;sektion=4&amp;arch=i386">pcibios(4)</a> detect and ignore a too-short PCI IRQ routing table header.
 <li>Changes to <a href="http://man.openbsd.org?query=ld.so&amp;sektion=1">ld.so(1)</a>: Search order now always looks like a.out, destructors are called on dlclose(), move some libc-like functions into private namespace.  <li>Changes to <a href="http://man.openbsd.org/?query=ld.so&amp;sektion=1">ld.so(1)</a>: Search order now always looks like a.out, destructors are called on dlclose(), move some libc-like functions into private namespace.
 <li>Add support for AGP GART on some i386 AGP chipsets (see <a href="http://man.openbsd.org?query=vga&amp;sektion=4">vga(4)</a> and <a href="http://man.openbsd.org?query=options&amp;sektion=4">options(4)</a>).  <li>Add support for AGP GART on some i386 AGP chipsets (see <a href="http://man.openbsd.org/?query=vga&amp;sektion=4">vga(4)</a> and <a href="http://man.openbsd.org/?query=options&amp;sektion=4">options(4)</a>).
 <li>Remove '\\' -&gt; '\' translation in crontabs to keep the shell happy.  <li>Remove '\\' -&gt; '\' translation in crontabs to keep the shell happy.
 <li>Make <a href="http://man.openbsd.org?query=xterm&amp;sektion=1">xterm(1)</a> revoke its root privileges.  <li>Make <a href="http://man.openbsd.org/?query=xterm&amp;sektion=1">xterm(1)</a> revoke its root privileges.
 <li>Remove a race and some other bugs from the mountpoint locking code. <!-- ok art@ -->  <li>Remove a race and some other bugs from the mountpoint locking code. <!-- ok art@ -->
 <li>Add some flags to <a href="http://man.openbsd.org?query=dohooks&amp;sektion=9">dohooks(8)</a> and fix a time-honoured memory leak in <a href="http://man.openbsd.org?query=hook_disestablish&amp;sektion=9">hook_disestablish(9)</a>.  <li>Add some flags to <a href="http://man.openbsd.org/?query=dohooks&amp;sektion=9">dohooks(8)</a> and fix a time-honoured memory leak in <a href="http://man.openbsd.org/?query=hook_disestablish&amp;sektion=9">hook_disestablish(9)</a>.
 <!-- ^^^ 20020712 -->  <!-- ^^^ 20020712 -->
 <li>New, hard-won firmware image for the <a href="http://man.openbsd.org?query=txp&amp;sektion=4">txp(4)</a> driver.  <li>New, hard-won firmware image for the <a href="http://man.openbsd.org/?query=txp&amp;sektion=4">txp(4)</a> driver.
 <li>Remove the www group's privileges to the mod_ssl mutex semaphore.  <li>Remove the www group's privileges to the mod_ssl mutex semaphore.
 <li>Really remove SuperProbe from X.  <li>Really remove SuperProbe from X.
 <li>Create a skeleton UserDir tree under /var/www/users.  <li>Create a skeleton UserDir tree under /var/www/users.
 <li>Have Apache initialise OpenSSL (opening /dev/crypto) before chroot. No more /var/www/dev/crypto.  <li>Have Apache initialise OpenSSL (opening /dev/crypto) before chroot. No more /var/www/dev/crypto.
 <!-- ^^^ 20020711 -->  <!-- ^^^ 20020711 -->
 <li>Basic IPv6 fragment support (no normalisation yet) in <a href="http://man.openbsd.org?query=pf&amp;sektion=4">pf(4)</a>.  <li>Basic IPv6 fragment support (no normalisation yet) in <a href="http://man.openbsd.org/?query=pf&amp;sektion=4">pf(4)</a>.
 <li>Correct a memcpy error in the kernel and ssh's Rijndael code.  <li>Correct a memcpy error in the kernel and ssh's Rijndael code.
 <li>Make <a href="http://man.openbsd.org?query=systrace&amp;sektion=1">systrace(1)</a> filename intercepts work with chroot().  <li>Make <a href="http://man.openbsd.org/?query=systrace&amp;sektion=1">systrace(1)</a> filename intercepts work with chroot().
 <li>Try to make resetting of USB ports work better.  <li>Try to make resetting of USB ports work better.
 <li>Add fchmod translation support to <a href="http://man.openbsd.org?query=systrace&amp;sektion=1">systrace(1)</a>.  <li>Add fchmod translation support to <a href="http://man.openbsd.org/?query=systrace&amp;sektion=1">systrace(1)</a>.
 <li>Stop <a href="http://man.openbsd.org?query=systrace&amp;sektion=1">systrace(1)</a> closing the std file descriptors when going daemon.  <li>Stop <a href="http://man.openbsd.org/?query=systrace&amp;sektion=1">systrace(1)</a> closing the std file descriptors when going daemon.
 <!-- ^^^ 20020710 -->  <!-- ^^^ 20020710 -->
 <li>Fix ni6_nametodns() pointer bug in icmp6; NetBSD PR17540.  <li>Fix ni6_nametodns() pointer bug in icmp6; NetBSD PR17540.
 <li>Add support in <a href="http://man.openbsd.org?query=uftdi&amp;sektion=4">uftdi(4)</a> for FT8U232AM-based USB serial adapters, likewise add more devices to <a href="http://man.openbsd.org?query=uplcom&amp;sektion=4">uplcom(4)</a>.  <li>Add support in <a href="http://man.openbsd.org/?query=uftdi&amp;sektion=4">uftdi(4)</a> for FT8U232AM-based USB serial adapters, likewise add more devices to <a href="http://man.openbsd.org/?query=uplcom&amp;sektion=4">uplcom(4)</a>.
 <li>Fix miniroot typo that was breaking FTP installs.  <li>Fix miniroot typo that was breaking FTP installs.
 <li>Fix <a href="http://man.openbsd.org?query=sed&amp;sektion=1">sed(1)</a>'s r command (PR2755).  <li>Fix <a href="http://man.openbsd.org/?query=sed&amp;sektion=1">sed(1)</a>'s r command (PR2755).
 <li>Add a daemon mode to <a href="http://man.openbsd.org?query=systrace&amp;sektion=1">systrace(1)</a>.  <li>Add a daemon mode to <a href="http://man.openbsd.org/?query=systrace&amp;sektion=1">systrace(1)</a>.
 <li><a href="http://man.openbsd.org?query=udsbr&amp;sektion=4">udbsr(4)</a> driver for D-Link radio cards added.  <li><a href="http://man.openbsd.org/?query=udsbr&amp;sektion=4">udbsr(4)</a> driver for D-Link radio cards added.
 <li>Add a timeout value to USB I/O calls, rather than having a systemwide timeout.  <li>Add a timeout value to USB I/O calls, rather than having a systemwide timeout.
 <li>Make <a href="http://man.openbsd.org?query=httpd&amp;sektion=8">httpd(8)</a> chroot() and drop root privileges by default. A lot module chroot fixes to come.  <li>Make <a href="http://man.openbsd.org/?query=httpd&amp;sektion=8">httpd(8)</a> chroot() and drop root privileges by default. A lot module chroot fixes to come.
 <li>Add syscall aliasing to <a href="http://man.openbsd.org?query=systrace&amp;sektion=1">systrace(1)</a> (e.g. stat/fstat/readlink/access/... become 'fsread').  <li>Add syscall aliasing to <a href="http://man.openbsd.org/?query=systrace&amp;sektion=1">systrace(1)</a> (e.g. stat/fstat/readlink/access/... become 'fsread').
 <li>Some fixes to <a href="http://man.openbsd.org?query=umidi&amp;sektion=4">umidi(4)</a> and <a href="http://man.openbsd.org?query=uscanner&amp;sektion=4">uscanner(4)</a>.  <li>Some fixes to <a href="http://man.openbsd.org/?query=umidi&amp;sektion=4">umidi(4)</a> and <a href="http://man.openbsd.org/?query=uscanner&amp;sektion=4">uscanner(4)</a>.
 <li>Add SMC 2206 support to <a href="http://man.openbsd.org?query=aue&amp;sektion=4">aue(4)</a>.  <li>Add SMC 2206 support to <a href="http://man.openbsd.org/?query=aue&amp;sektion=4">aue(4)</a>.
 <li>Fix a potential off-by-five error in <a href="http://man.openbsd.org?query=systrace&amp;sektion=1">systrace(1)</a>.  <li>Fix a potential off-by-five error in <a href="http://man.openbsd.org/?query=systrace&amp;sektion=1">systrace(1)</a>.
 <li><a href="http://man.openbsd.org?query=pf&amp;sektion=4">pf(4)</a> now accepts an interface in most of the places it can take an IP address, and picks up all the IPv4 and IPv6 addresses on that interface.  <li><a href="http://man.openbsd.org/?query=pf&amp;sektion=4">pf(4)</a> now accepts an interface in most of the places it can take an IP address, and picks up all the IPv4 and IPv6 addresses on that interface.
 <!-- ^^^ 20020709 -->  <!-- ^^^ 20020709 -->
 <li>Don't try to load a 32-bit quart into a 16-bit pint register in <a href="http://man.openbsd.org?query=xl&amp;sektion=4">xl(4)</a>.  <li>Don't try to load a 32-bit quart into a 16-bit pint register in <a href="http://man.openbsd.org/?query=xl&amp;sektion=4">xl(4)</a>.
 <li>Always load ELF binaries to the address at which they were linked.  <li>Always load ELF binaries to the address at which they were linked.
 <li>Rig <a href="http://man.openbsd.org?query=opendir&amp;sektion=3">opendir(3)</a>'s sort so it can't fail due to lack of memory.  <li>Rig <a href="http://man.openbsd.org/?query=opendir&amp;sektion=3">opendir(3)</a>'s sort so it can't fail due to lack of memory.
 <li>Compatibility fixes for the <a href="http://man.openbsd.org?query=ubsec&amp;sektion=4">ubsec(4)</a> 582x series.  <li>Compatibility fixes for the <a href="http://man.openbsd.org/?query=ubsec&amp;sektion=4">ubsec(4)</a> 582x series.
 <li>Some updates to <a href="http://man.openbsd.org?query=cron&amp;sektion=8">cron(8)</a>.  <li>Some updates to <a href="http://man.openbsd.org/?query=cron&amp;sektion=8">cron(8)</a>.
 <li>Grab a security fix to bcopy/memcpy from FreeBSD. See their cvsweb entry for <a href="http://www.freebsd.org/cgi/cvsweb.cgi/src/lib/libc/i386/string/bcopy.S">bcopy.S</a>.  <li>Grab a security fix to bcopy/memcpy from FreeBSD. See their cvsweb entry for <a href="http://www.freebsd.org/cgi/cvsweb.cgi/src/lib/libc/i386/string/bcopy.S">bcopy.S</a>.
 <li>Work around <a href="http://man.openbsd.org?query=tl&amp;sektion=4">tl(4)</a>'s broken multicast filter.  <li>Work around <a href="http://man.openbsd.org/?query=tl&amp;sektion=4">tl(4)</a>'s broken multicast filter.
 <li>Remove <a href="http://man.openbsd.org?query=ab&amp;manpath=OpenBSD+3.1">ab(1)</a> from the Apache installation.  <li>Remove <a href="http://man.openbsd.org/?query=ab&amp;manpath=OpenBSD+3.1">ab(1)</a> from the Apache installation.
 <li>Remove <a href="http://www.eecis.udel.edu/~ntp/">NTP</a> support from the kernel.  <li>Remove <a href="http://www.eecis.udel.edu/~ntp/">NTP</a> support from the kernel.
 <li>Don't attempt to resubmit a structure we just freed in <a href="http://man.openbsd.org?query=ipsec&amp;sektion=4">ipsec(4)</a> / <a href="http://man.openbsd.org?query=ipcomp&amp;sektion=4">ipcomp(4)</a>.  <li>Don't attempt to resubmit a structure we just freed in <a href="http://man.openbsd.org/?query=ipsec&amp;sektion=4">ipsec(4)</a> / <a href="http://man.openbsd.org/?query=ipcomp&amp;sektion=4">ipcomp(4)</a>.
 <li>Small fixes to IP-in-IP encapsulation code.  <li>Small fixes to IP-in-IP encapsulation code.
 <li>Add Security Mode options to <a href="http://man.openbsd.org?query=atactl&amp;sektion=8">atactl(8)</a>.  <li>Add Security Mode options to <a href="http://man.openbsd.org/?query=atactl&amp;sektion=8">atactl(8)</a>.
 <li>Support a few more HPT <a href="http://man.openbsd.org?query=pciide&amp;sektion=4">pciide(4)</a> cards.  <li>Support a few more HPT <a href="http://man.openbsd.org/?query=pciide&amp;sektion=4">pciide(4)</a> cards.
 <li>Make NEED_VERSION obsolete in <a href="http://man.openbsd.org?query=bsd.port.mk&amp;sektion=5">bsd.port.mk(5)</a>.  <li>Make NEED_VERSION obsolete in <a href="http://man.openbsd.org/?query=bsd.port.mk&amp;sektion=5">bsd.port.mk(5)</a>.
 <li>Fill IPv6 null pointer dereference in <a href="http://man.openbsd.org?query=cvs&amp;sektion=1">cvs(1)</a> pserver.  <li>Fill IPv6 null pointer dereference in <a href="http://man.openbsd.org/?query=cvs&amp;sektion=1">cvs(1)</a> pserver.
 <li>Remove some old upgrade hacks from the installer script.  <li>Remove some old upgrade hacks from the installer script.
 <li><a href="http://man.openbsd.org?query=pf&amp;sektion=4">pf(4)</a> chokes on invalid '! &lt;interface&gt;' syntax, instead of just ignoring the '!'.  <li><a href="http://man.openbsd.org/?query=pf&amp;sektion=4">pf(4)</a> chokes on invalid '! &lt;interface&gt;' syntax, instead of just ignoring the '!'.
 <li>Fix <a href="http://man.openbsd.org?query=pf&amp;sektion=4">pf(4)</a> interface stats, and allow the loginterface feature to be disabled.  <li>Fix <a href="http://man.openbsd.org/?query=pf&amp;sektion=4">pf(4)</a> interface stats, and allow the loginterface feature to be disabled.
 <li>Make signal handler flags in <a href="http://man.openbsd.org?query=isakmpd&amp;sektion=8">isakmpd(8)</a> of type volatile sig_atomic_t.  <li>Make signal handler flags in <a href="http://man.openbsd.org/?query=isakmpd&amp;sektion=8">isakmpd(8)</a> of type volatile sig_atomic_t.
 <li>Fix a few GCC 3.1 moans in <a href="http://man.openbsd.org?query=isakmpd&amp;sektion=8">isakmpd(8)</a>.  <li>Fix a few GCC 3.1 moans in <a href="http://man.openbsd.org/?query=isakmpd&amp;sektion=8">isakmpd(8)</a>.
 <li>Un-bloating of <a href="http://man.openbsd.org?query=ahc&amp;sektion=4">ahc(4)</a>.  <li>Un-bloating of <a href="http://man.openbsd.org/?query=ahc&amp;sektion=4">ahc(4)</a>.
 <li>Cleanup of <a href="http://man.openbsd.org?query=rpcgen&amp;sektion=1">rpcgen(1)</a>.  <li>Cleanup of <a href="http://man.openbsd.org/?query=rpcgen&amp;sektion=1">rpcgen(1)</a>.
 <li><font color="#e00000"><strong>RELIABILITY FIX: Don't assume we have an active exchange during payload validation, otherwise <a href="http://man.openbsd.org?query=isakmpd&amp;sektion=8">isakmpd(8)</a> can be made to crash.</strong></font><br>  <li><font color="#e00000"><strong>RELIABILITY FIX: Don't assume we have an active exchange during payload validation, otherwise <a href="http://man.openbsd.org/?query=isakmpd&amp;sektion=8">isakmpd(8)</a> can be made to crash.</strong></font><br>
     <a href="errata31.html#isakmpd">A source code patch exists to remedy the problem.</a><br>      <a href="errata31.html#isakmpd">A source code patch exists to remedy the problem.</a><br>
     <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>      <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
 <li><a href="http://man.openbsd.org?query=ep&amp;sektion=4">ep(4)</a> on <a href="http://man.openbsd.org?query=isapnp&amp;sektion=4">isapnp(4)</a> now works on <a href="alpha.html">alpha</a>.  <li><a href="http://man.openbsd.org/?query=ep&amp;sektion=4">ep(4)</a> on <a href="http://man.openbsd.org/?query=isapnp&amp;sektion=4">isapnp(4)</a> now works on <a href="alpha.html">alpha</a>.
 <li>Improve the way the installer's fileset selection UI works.  <li>Improve the way the installer's fileset selection UI works.
 <li>Fix a potential buffer overflow in xsystrace.  <li>Fix a potential buffer overflow in xsystrace.
 <li>Add a note to the unwary in distrib/notes about the danger of skipping several versions when upgrading.  <li>Add a note to the unwary in distrib/notes about the danger of skipping several versions when upgrading.
 <li>Don't have <a href="http://man.openbsd.org?query=ssh&amp;sektion=1">ssh(1)</a> allocate memory for stuff we don't need, just to discard it straight away.  <li>Don't have <a href="http://man.openbsd.org/?query=ssh&amp;sektion=1">ssh(1)</a> allocate memory for stuff we don't need, just to discard it straight away.
 <li>Set IP_PORTRANGE_HIGH for active mode data channel of <a href="http://man.openbsd.org?query=ftp&amp;sektion=1">ftp(1)</a>.  <li>Set IP_PORTRANGE_HIGH for active mode data channel of <a href="http://man.openbsd.org/?query=ftp&amp;sektion=1">ftp(1)</a>.
 <li>Add some more <a href="http://man.openbsd.org?query=usb&amp;sektion=4">usb(4)</a> product IDs.  <li>Add some more <a href="http://man.openbsd.org/?query=usb&amp;sektion=4">usb(4)</a> product IDs.
 <li>Fix an off-by-one error in <a href="http://man.openbsd.org?query=rmt&amp;sektion=8">rmt(8)</a> and improve string handling in general.  <li>Fix an off-by-one error in <a href="http://man.openbsd.org/?query=rmt&amp;sektion=8">rmt(8)</a> and improve string handling in general.
 <li>Normalise <a href="http://man.openbsd.org?query=nc&amp;sektion=1">nc(1)</a>'s EOF handling.  <li>Normalise <a href="http://man.openbsd.org/?query=nc&amp;sektion=1">nc(1)</a>'s EOF handling.
 <li>Plug a few <a href="http://man.openbsd.org?query=ssh&amp;sektion=1">ssh(1)</a> memory leaks.  <li>Plug a few <a href="http://man.openbsd.org/?query=ssh&amp;sektion=1">ssh(1)</a> memory leaks.
 <li>Tweak the <a href="http://man.openbsd.org?query=tga&amp;sektion=4&amp;arch=alpha">tga(4/ALPHA)</a> driver.  <li>Tweak the <a href="http://man.openbsd.org/?query=tga&amp;sektion=4&amp;arch=alpha">tga(4/ALPHA)</a> driver.
 <li>Fix several missing or broken <a href="http://man.openbsd.org?query=malloc&amp;sektion=3">malloc(3)</a> and <a href="http://man.openbsd.org?query=realloc&amp;sektion=3">realloc(3)</a> failure checks.  <li>Fix several missing or broken <a href="http://man.openbsd.org/?query=malloc&amp;sektion=3">malloc(3)</a> and <a href="http://man.openbsd.org/?query=realloc&amp;sektion=3">realloc(3)</a> failure checks.
 <li>In <a href="http://man.openbsd.org?query=rcs&amp;sektion=1">rcs(1)</a>, actually <a href="http://man.openbsd.org?query=exit&amp;sektion=3">exit(3)</a> after spotting that LocalId is too long.  <li>In <a href="http://man.openbsd.org/?query=rcs&amp;sektion=1">rcs(1)</a>, actually <a href="http://man.openbsd.org/?query=exit&amp;sektion=3">exit(3)</a> after spotting that LocalId is too long.
 <li>Lots of ANSIfication of function declarations and prototypes.  <li>Lots of ANSIfication of function declarations and prototypes.
 <li>Fix bug causing 'SPL NOT LOWERED' errors from the <a href="http://man.openbsd.org?query=ami&amp;sektion=4">ami(4)</a> RAID controller.  <li>Fix bug causing 'SPL NOT LOWERED' errors from the <a href="http://man.openbsd.org/?query=ami&amp;sektion=4">ami(4)</a> RAID controller.
 <li>Give <a href="http://man.openbsd.org?query=ssh-keysign&amp;sektion=8">ssh-keysign(8)</a> its setuid(root) toys back, but only work at all if HostbasedAuthentication is globally disabled.  <li>Give <a href="http://man.openbsd.org/?query=ssh-keysign&amp;sektion=8">ssh-keysign(8)</a> its setuid(root) toys back, but only work at all if HostbasedAuthentication is globally disabled.
 <li>Use <a href="http://man.openbsd.org?query=RSA_blinding_on&amp;sektion=3">RSA_blinding_on(3)</a> to ward off a <a href="http://www.cryptography.com/resources/whitepapers/TimingAttacks.pdf">Kocher timing attack</a> on <a href="http://man.openbsd.org?query=ssh-keysign&amp;sektion=8">ssh-keysign(8)</a>.  <li>Use <a href="http://man.openbsd.org/?query=RSA_blinding_on&amp;sektion=3">RSA_blinding_on(3)</a> to ward off a <a href="http://www.cryptography.com/resources/whitepapers/TimingAttacks.pdf">Kocher timing attack</a> on <a href="http://man.openbsd.org/?query=ssh-keysign&amp;sektion=8">ssh-keysign(8)</a>.
 <li>Fix <a href="http://man.openbsd.org?query=signal&amp;sektion=3">signal(3)</a> race in <a href="http://man.openbsd.org?query=ping&amp;sektion=8">ping(8)</a>.  <li>Fix <a href="http://man.openbsd.org/?query=signal&amp;sektion=3">signal(3)</a> race in <a href="http://man.openbsd.org/?query=ping&amp;sektion=8">ping(8)</a>.
 <li>Remove <a href="http://man.openbsd.org?query=adv&amp;sektion=4">adv(4)</a> from the i386 RAMDISK kernel until new <a href="http://man.openbsd.org?query=ahc&amp;sektion=4">ahc(4)</a> un-bloats itself.  <li>Remove <a href="http://man.openbsd.org/?query=adv&amp;sektion=4">adv(4)</a> from the i386 RAMDISK kernel until new <a href="http://man.openbsd.org/?query=ahc&amp;sektion=4">ahc(4)</a> un-bloats itself.
 <li>Catch a null pointer dereference when fetching the routing table via <a href="http://man.openbsd.org?query=sysctl&amp;sektion=3">sysctl(3)</a>.  <li>Catch a null pointer dereference when fetching the routing table via <a href="http://man.openbsd.org/?query=sysctl&amp;sektion=3">sysctl(3)</a>.
 <li>Make <a href="http://man.openbsd.org?query=sis&amp;sektion=4">sis(4)</a> compile and work on <a href="alpha.html">alpha</a>.  <li>Make <a href="http://man.openbsd.org/?query=sis&amp;sektion=4">sis(4)</a> compile and work on <a href="alpha.html">alpha</a>.
 <li>Return correct result sizes from <a href="http://man.openbsd.org?query=ubsec&amp;sektion=4">ubsec(4)</a>.  <li>Return correct result sizes from <a href="http://man.openbsd.org/?query=ubsec&amp;sektion=4">ubsec(4)</a>.
 <li><a href="http://man.openbsd.org?query=bridge&amp;sektion=4">bridge(4)</a> will now compile with <a href="http://man.openbsd.org?query=ipsec&amp;sektion=4">ipsec(4)</a> but no <a href="http://man.openbsd.org?query=pf&amp;sektion=4">pf(4)</a>.  <li><a href="http://man.openbsd.org/?query=bridge&amp;sektion=4">bridge(4)</a> will now compile with <a href="http://man.openbsd.org/?query=ipsec&amp;sektion=4">ipsec(4)</a> but no <a href="http://man.openbsd.org/?query=pf&amp;sektion=4">pf(4)</a>.
 <li>Cleanup of <a href="http://man.openbsd.org?query=ftpd&amp;sektion=8">ftpd(8)</a>.  <li>Cleanup of <a href="http://man.openbsd.org/?query=ftpd&amp;sektion=8">ftpd(8)</a>.
 <li>Fix PIO writes code in <a href="http://man.openbsd.org?query=wdc&amp;sektion=4">wdc(4)</a>, broken since OpenBSD 2.5!  <li>Fix PIO writes code in <a href="http://man.openbsd.org/?query=wdc&amp;sektion=4">wdc(4)</a>, broken since OpenBSD 2.5!
 <li>Remove unnecessary <a href="http://man.openbsd.org?query=longjmp&amp;sektion=3">longjmp(3)</a> from <a href="http://man.openbsd.org?query=login&amp;sektion=1">login(1)</a>.  <li>Remove unnecessary <a href="http://man.openbsd.org/?query=longjmp&amp;sektion=3">longjmp(3)</a> from <a href="http://man.openbsd.org/?query=login&amp;sektion=1">login(1)</a>.
 <li>Pages allocated with debug_malloc() aren't ever executed, so don't use VM_PROT_ALL.  <li>Pages allocated with debug_malloc() aren't ever executed, so don't use VM_PROT_ALL.
 <li>Finally fix <a href="http://man.openbsd.org?query=bridge&amp;sektion=4">bridge(4)</a> address cache bug.  <li>Finally fix <a href="http://man.openbsd.org/?query=bridge&amp;sektion=4">bridge(4)</a> address cache bug.
 <li>Properly handle endpoint differences of opinion on <a href="http://man.openbsd.org?query=ssh&amp;sektion=1">ssh(1)</a> Compression options  <li>Properly handle endpoint differences of opinion on <a href="http://man.openbsd.org/?query=ssh&amp;sektion=1">ssh(1)</a> Compression options
 <li>Fix the <a href="http://man.openbsd.org?query=wsdisplay&amp;sektion=4">wsdisplay(4)</a> blanker after the X server has been running.  <li>Fix the <a href="http://man.openbsd.org/?query=wsdisplay&amp;sektion=4">wsdisplay(4)</a> blanker after the X server has been running.
 <li>Make the installer deal correctly with passwords starting with '-X ' for some X, instead of misinterpreting them as options to <a href="http://man.openbsd.org?query=encrypt&amp;sektion=1">encrypt(1)</a>.  <li>Make the installer deal correctly with passwords starting with '-X ' for some X, instead of misinterpreting them as options to <a href="http://man.openbsd.org/?query=encrypt&amp;sektion=1">encrypt(1)</a>.
 <li>Fix some compatibility quirks in <a href="http://man.openbsd.org?query=ppp&amp;sektion=8">ppp(8)</a>.  <li>Fix some compatibility quirks in <a href="http://man.openbsd.org/?query=ppp&amp;sektion=8">ppp(8)</a>.
 <li>Add a pushback buffer to <a href="http://man.openbsd.org?query=pfctl&amp;sektion=8">pfctl(8)</a>'s parser.  <li>Add a pushback buffer to <a href="http://man.openbsd.org/?query=pfctl&amp;sektion=8">pfctl(8)</a>'s parser.
 <li>Remove setuid(root) from <a href="http://man.openbsd.org?query=ssh-keysign&amp;sektion=8">ssh-keysign(8)</a>, disabling it for now.  <li>Remove setuid(root) from <a href="http://man.openbsd.org/?query=ssh-keysign&amp;sektion=8">ssh-keysign(8)</a>, disabling it for now.
 <li>Have <a href="http://man.openbsd.org?query=named&amp;sektion=8">named(8)</a> call <a href="http://man.openbsd.org?query=tzset&amp;sektion=3">tzset(3)</a> so /etc/localtime isn't needed after the <a href="http://man.openbsd.org?query=chroot&amp;sektion=2">chroot(2)</a>.  <li>Have <a href="http://man.openbsd.org/?query=named&amp;sektion=8">named(8)</a> call <a href="http://man.openbsd.org/?query=tzset&amp;sektion=3">tzset(3)</a> so /etc/localtime isn't needed after the <a href="http://man.openbsd.org/?query=chroot&amp;sektion=2">chroot(2)</a>.
 <li>More fixes to the new <a href="http://man.openbsd.org?query=ahc&amp;sektion=4">ahc(4)</a> driver.  <li>More fixes to the new <a href="http://man.openbsd.org/?query=ahc&amp;sektion=4">ahc(4)</a> driver.
 <li>Add AlphaServer 800 and 1000 support.  <li>Add AlphaServer 800 and 1000 support.
 <li>Enable <a href="http://man.openbsd.org?query=lc&amp;sektion=4">lc(4)</a> devices in <a href="alpha.html">alpha</a> GENERIC kernel.  <li>Enable <a href="http://man.openbsd.org/?query=lc&amp;sektion=4">lc(4)</a> devices in <a href="alpha.html">alpha</a> GENERIC kernel.
 <li>Fix <a href="http://man.openbsd.org?query=isapnp&amp;sektion=4">isapnp(4)</a> panics on <a href="alpha.html">alpha</a>.  <li>Fix <a href="http://man.openbsd.org/?query=isapnp&amp;sektion=4">isapnp(4)</a> panics on <a href="alpha.html">alpha</a>.
 <li>Make xf86config give the option of configuring a mouse wheel.  <li>Make xf86config give the option of configuring a mouse wheel.
 <li>Gracefully handle <a href="http://man.openbsd.org?query=i386_iopl&amp;sektion=2&amp;arch=i386">i386_iopl(2)</a> failure in the X server when trying to give up privileges.  <li>Gracefully handle <a href="http://man.openbsd.org/?query=i386_iopl&amp;sektion=2&amp;arch=i386">i386_iopl(2)</a> failure in the X server when trying to give up privileges.
 <li>Add <a href="http://man.openbsd.org?query=wscons&amp;sektion=4">wscons(4)</a> files to <a href="http://man.openbsd.org?query=fbtab&amp;sektion=5">fbtab(5)</a> on <a href="i386.html">i386</a>.  <li>Add <a href="http://man.openbsd.org/?query=wscons&amp;sektion=4">wscons(4)</a> files to <a href="http://man.openbsd.org/?query=fbtab&amp;sektion=5">fbtab(5)</a> on <a href="i386.html">i386</a>.
 <li>Add <a href="http://man.openbsd.org?query=kqueue&amp;sektion=2">kqueue(2)</a> support to <a href="http://man.openbsd.org?query=syslog&amp;sektion=3">syslog(3)</a>.  <li>Add <a href="http://man.openbsd.org/?query=kqueue&amp;sektion=2">kqueue(2)</a> support to <a href="http://man.openbsd.org/?query=syslog&amp;sektion=3">syslog(3)</a>.
 <li>Evolve strtou?q() into strtou?ll(). Use weak aliases if available (wrappers otherwise) to fake strtou?q().  <li>Evolve strtou?q() into strtou?ll(). Use weak aliases if available (wrappers otherwise) to fake strtou?q().
 <li>Run <a href="http://man.openbsd.org?query=rpc.rstatd&amp;sektion=8">rpc.rstatd(8)</a> and <a href="http://man.openbsd.org?query=rpc.rusersd&amp;sektion=8">rpc.rusersd(8)</a> as root from <a href="http://man.openbsd.org?query=inetd&amp;sektion=8">inetd(8)</a> again, but go to nobody's jail at startup.  <li>Run <a href="http://man.openbsd.org/?query=rpc.rstatd&amp;sektion=8">rpc.rstatd(8)</a> and <a href="http://man.openbsd.org/?query=rpc.rusersd&amp;sektion=8">rpc.rusersd(8)</a> as root from <a href="http://man.openbsd.org/?query=inetd&amp;sektion=8">inetd(8)</a> again, but go to nobody's jail at startup.
 <li>Lots more bounds-checking all over the place.  <li>Lots more bounds-checking all over the place.
 <li>Recognise a few more <a href="http://man.openbsd.org?query=fxp&amp;sektion=4">fxp(4)</a> devices.  <li>Recognise a few more <a href="http://man.openbsd.org/?query=fxp&amp;sektion=4">fxp(4)</a> devices.
 <li>Correct misleading cgetclose() entry in <a href="http://man.openbsd.org?query=getcap&amp;sektion=3">getcap(3)</a> manpage.  <li>Correct misleading cgetclose() entry in <a href="http://man.openbsd.org/?query=getcap&amp;sektion=3">getcap(3)</a> manpage.
 <li>Try again with the new <a href="http://man.openbsd.org?query=ahc&amp;sektion=4">ahc(4)</a> driver.  <li>Try again with the new <a href="http://man.openbsd.org/?query=ahc&amp;sektion=4">ahc(4)</a> driver.
 <li>Cleanups of <a href="http://man.openbsd.org?query=chpass&amp;sektion=1">chpass(1)</a> and <a href="http://man.openbsd.org?query=passwd&amp;sektion=1">passwd(1)</a>.  <li>Cleanups of <a href="http://man.openbsd.org/?query=chpass&amp;sektion=1">chpass(1)</a> and <a href="http://man.openbsd.org/?query=passwd&amp;sektion=1">passwd(1)</a>.
 <li><font color="#e00000"><strong>SECURITY FIX: The kernel would let any user <a href="http://man.openbsd.org?query=ktrace&amp;sektion=2">ktrace(2)</a> set[ug]id processes.</strong></font><br>  <li><font color="#e00000"><strong>SECURITY FIX: The kernel would let any user <a href="http://man.openbsd.org/?query=ktrace&amp;sektion=2">ktrace(2)</a> set[ug]id processes.</strong></font><br>
     <a href="errata31.html#ktrace">A source code patch is available</a>.<br>      <a href="errata31.html#ktrace">A source code patch is available</a>.<br>
     <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>      <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
 <li><a href="http://man.openbsd.org?query=newsyslog&amp;sektion=8">newsyslog(8)</a> now doesn't follow symbolic links by default, fixing PR1913.  <li><a href="http://man.openbsd.org/?query=newsyslog&amp;sektion=8">newsyslog(8)</a> now doesn't follow symbolic links by default, fixing PR1913.
 <li>Change web site banner to "One remote hole in the default install, in nearly 6 years!" That's still an awesome record.  <li>Change web site banner to "One remote hole in the default install, in nearly 6 years!" That's still an awesome record.
 <li>More audit of OpenSSH.  <li>More audit of OpenSSH.
 <li><a href="http://www.openssh.com/openbsd.html">OpenSSH 3.4</a> was released, and there was much rejoicing.  <li><a href="http://www.openssh.com/openbsd.html">OpenSSH 3.4</a> was released, and there was much rejoicing.
 <li><font color="#e00000"><strong>SECURITY FIX: All versions of OpenSSH's <a href="http://man.openbsd.org?query=sshd&amp;sektion=8">sshd(8)</a> between 2.3.1 and 3.3 contain an input validation error that can result in an integer overflow and privilege escalation. The problem is fixed in OpenSSH 3.4.</strong></font><br>  <li><font color="#e00000"><strong>SECURITY FIX: All versions of OpenSSH's <a href="http://man.openbsd.org/?query=sshd&amp;sektion=8">sshd(8)</a> between 2.3.1 and 3.3 contain an input validation error that can result in an integer overflow and privilege escalation. The problem is fixed in OpenSSH 3.4.</strong></font><br>
     <a href="errata31.html#sshd">A source code patch is available</a>.<br>      <a href="errata31.html#sshd">A source code patch is available</a>.<br>
     <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>      <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
 <li>Add a number of resource limits to <a href="http://man.openbsd.org?query=ssh&amp;sektion=1">ssh(1)</a>.  <li>Add a number of resource limits to <a href="http://man.openbsd.org/?query=ssh&amp;sektion=1">ssh(1)</a>.
 <li>Increase <a href="i386.html">i386</a> kvm size to 768M.  <li>Increase <a href="i386.html">i386</a> kvm size to 768M.
 <li>The list of great Theo quotes for <a href="http://man.openbsd.org?query=mg&amp;sektion=1">mg(1)</a> continues to grow.  <li>The list of great Theo quotes for <a href="http://man.openbsd.org/?query=mg&amp;sektion=1">mg(1)</a> continues to grow.
 <li><font color="#e00000"><strong>SECURITY FIX: A potential buffer overflow in the DNS resolver has been found.</strong></font><br>  <li><font color="#e00000"><strong>SECURITY FIX: A potential buffer overflow in the DNS resolver has been found.</strong></font><br>
     <a href="errata31.html#resolver">A source code patch is available</a>.<br>      <a href="errata31.html#resolver">A source code patch is available</a>.<br>
     <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>      <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
 <li>Merge in <a href="http://www.sendmail.org/">Sendmail</a> 8.12.5.  <li>Merge in <a href="http://www.sendmail.org/">Sendmail</a> 8.12.5.
 <li>Start work on IP-over-FireWire and IP-over-SCSI.  <li>Start work on IP-over-FireWire and IP-over-SCSI.
 <li>Move a bunch of <a href="http://man.openbsd.org?query=pfctl&amp;sektion=8">pfctl(8)</a> options into <a href="http://man.openbsd.org?query=pf.conf&amp;sektion=5">pf.conf(5)</a>.  <li>Move a bunch of <a href="http://man.openbsd.org/?query=pfctl&amp;sektion=8">pfctl(8)</a> options into <a href="http://man.openbsd.org/?query=pf.conf&amp;sektion=5">pf.conf(5)</a>.
 <li><a href="http://www.openbsd.org/c2k2/">c2k2</a>-inspired changes to the installer.  <li><a href="http://www.openbsd.org/c2k2/">c2k2</a>-inspired changes to the installer.
 <li>Skip routing table lookup when {broad,multi}casting and the outgoing interface is set using <a href="http://man.openbsd.org?query=setsockopt()&amp;sektion=2">setsockopt(2)</a>. Removes the need for a 224/4 route. <!-- XXX it still gets set in /etc/rc though -->  <li>Skip routing table lookup when {broad,multi}casting and the outgoing interface is set using <a href="http://man.openbsd.org/?query=setsockopt()&amp;sektion=2">setsockopt(2)</a>. Removes the need for a 224/4 route. <!-- XXX it still gets set in /etc/rc though -->
 <li>Make X use /dev/wsmouse instead of /dev/wsmouse0 by default.  <li>Make X use /dev/wsmouse instead of /dev/wsmouse0 by default.
 <li>Add some m68k opcode aliases for GNU <a href="http://man.openbsd.org?query=as&amp;sektion=1">as(1)</a> from recent binutils.  <li>Add some m68k opcode aliases for GNU <a href="http://man.openbsd.org/?query=as&amp;sektion=1">as(1)</a> from recent binutils.
 <li>Fix the FTP relay in <a href="http://man.openbsd.org?query=faithd&amp;sektion=8">faithd(8)</a>.  <li>Fix the FTP relay in <a href="http://man.openbsd.org/?query=faithd&amp;sektion=8">faithd(8)</a>.
 <li>Fix <a href="http://man.openbsd.org?query=wi&amp;sektion=4">wi(4)</a> reassociation after an AP reboot.  <li>Fix <a href="http://man.openbsd.org/?query=wi&amp;sektion=4">wi(4)</a> reassociation after an AP reboot.
 <li><font color="#e00000"><strong>SECURITY FIX: A buffer overflow can  <li><font color="#e00000"><strong>SECURITY FIX: A buffer overflow can
 occur in the .htaccess parsing code in the mod_ssl <a href="http://man.openbsd.org?query=httpd&amp;sektion=8">httpd(8)</a> module, leading to possible remote crash or exploit (PR2767.)</strong></font><br>  occur in the .htaccess parsing code in the mod_ssl <a href="http://man.openbsd.org/?query=httpd&amp;sektion=8">httpd(8)</a> module, leading to possible remote crash or exploit (PR2767.)</strong></font><br>
     <a href="errata31.html#modssl">A source code patch is available</a>.<br>      <a href="errata31.html#modssl">A source code patch is available</a>.<br>
     <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>      <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
 <li>Lots of uid_t and gid_t signedness fixes.  <li>Lots of uid_t and gid_t signedness fixes.
 <li><a href="http://man.openbsd.org?query=sshd&amp;sektion=8">sshd(8)</a> no longer calls setsid() when run from <a href="http://man.openbsd.org?query=inetd&amp;sektion=8">inetd(8)</a>.  <li><a href="http://man.openbsd.org/?query=sshd&amp;sektion=8">sshd(8)</a> no longer calls setsid() when run from <a href="http://man.openbsd.org/?query=inetd&amp;sektion=8">inetd(8)</a>.
 <li>Make <a href="http://man.openbsd.org?query=cvs&amp;sektion=1">cvs(1)</a> pserver talk IPv6.  <li>Make <a href="http://man.openbsd.org/?query=cvs&amp;sektion=1">cvs(1)</a> pserver talk IPv6.
 <li>Increment <a href="http://man.openbsd.org?query=boot&amp;sektion=8&amp;arch=i386">boot(8)</a> version to help debug the new memory probe and other fixes.  <li>Increment <a href="http://man.openbsd.org/?query=boot&amp;sektion=8&amp;arch=i386">boot(8)</a> version to help debug the new memory probe and other fixes.
 <li>Make <a href="http://man.openbsd.org?query=wi&amp;sektion=4">wi(4)</a> less twitchy on quick inserts/ejects.  <li>Make <a href="http://man.openbsd.org/?query=wi&amp;sektion=4">wi(4)</a> less twitchy on quick inserts/ejects.
 <li>String handling and bounds checking fixes to <a href="http://man.openbsd.org?query=login_fbtab&amp;sektion=3">login_fbtab(3)</a>.  <li>String handling and bounds checking fixes to <a href="http://man.openbsd.org/?query=login_fbtab&amp;sektion=3">login_fbtab(3)</a>.
 <li>Bump <a href="http://www.openssh.com/">OpenSSH</a> to version 3.3.<br>  <li>Bump <a href="http://www.openssh.com/">OpenSSH</a> to version 3.3.<br>
     <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>      <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
 <li>Start adding <a href="http://man.openbsd.org?query=kqueue&amp;sektion=2">kqueue(2)</a> support to <a href="http://man.openbsd.org?query=noct&amp;sektion=4">noct(4)</a>.  <li>Start adding <a href="http://man.openbsd.org/?query=kqueue&amp;sektion=2">kqueue(2)</a> support to <a href="http://man.openbsd.org/?query=noct&amp;sektion=4">noct(4)</a>.
 <li>System call argument rewriting framework for <a href="http://man.openbsd.org?query=systrace&amp;sektion=4">systrace(4)</a>.  <li>System call argument rewriting framework for <a href="http://man.openbsd.org/?query=systrace&amp;sektion=4">systrace(4)</a>.
 <li>Enable <a href="http://man.openbsd.org?query=wi&amp;sektion=4">wi(4)</a> on sparc64, after a <em>lot</em> of groundwork.  <li>Enable <a href="http://man.openbsd.org/?query=wi&amp;sektion=4">wi(4)</a> on sparc64, after a <em>lot</em> of groundwork.
 <li>Fix some endianness nits in <a href="http://man.openbsd.org?query=wi&amp;sektion=4">wi(4)</a>.  <li>Fix some endianness nits in <a href="http://man.openbsd.org/?query=wi&amp;sektion=4">wi(4)</a>.
 <li>Remove <a href="http://man.openbsd.org?query=ifmcstat&amp;sektion=8&amp;manpath=OpenBSD+3.1">ifmcstat(8)</a>, the same information is available from <a href="http://man.openbsd.org?query=netstat&amp;sektion=1">netstat(1)</a>.  <li>Remove <a href="http://man.openbsd.org/?query=ifmcstat&amp;sektion=8&amp;manpath=OpenBSD+3.1">ifmcstat(8)</a>, the same information is available from <a href="http://man.openbsd.org/?query=netstat&amp;sektion=1">netstat(1)</a>.
 <li>More improvements to 4GB memory probing on <a href="i386.html">i386</a>.  <li>More improvements to 4GB memory probing on <a href="i386.html">i386</a>.
 <li><a href="http://man.openbsd.org?query=ssh&amp;sektion=1">ssh(1)</a> and <a href="http://man.openbsd.org?query=sshd&amp;sektion=8">sshd(8)</a> options are now documented in their own sshd?_config(5) manpage.  <li><a href="http://man.openbsd.org/?query=ssh&amp;sektion=1">ssh(1)</a> and <a href="http://man.openbsd.org/?query=sshd&amp;sektion=8">sshd(8)</a> options are now documented in their own sshd?_config(5) manpage.
 <li>Add option for smooth scrolling to <a href="http://man.openbsd.org?query=talk&amp;sektion=1">talk(1)</a>.  <li>Add option for smooth scrolling to <a href="http://man.openbsd.org/?query=talk&amp;sektion=1">talk(1)</a>.
 <li>Support a few more wireless cards in <a href="http://man.openbsd.org?query=wi&amp;sektion=4">wi(4)</a>.  <li>Support a few more wireless cards in <a href="http://man.openbsd.org/?query=wi&amp;sektion=4">wi(4)</a>.
 <li>Build <a href="http://man.openbsd.org?query=wicontrol&amp;sektion=8">wicontrol(8)</a> on sparc64 as well.  <li>Build <a href="http://man.openbsd.org/?query=wicontrol&amp;sektion=8">wicontrol(8)</a> on sparc64 as well.
 <li>String handling cleanups in <a href="http://man.openbsd.org?query=comsat&amp;sektion=8">comsat(8)</a>.  <li>String handling cleanups in <a href="http://man.openbsd.org/?query=comsat&amp;sektion=8">comsat(8)</a>.
 <li>Support <a href="http://man.openbsd.org?query=magma&amp;sektion=0&amp;arch=sparc">magma(4/SPARC)</a>, <a href="http://man.openbsd.org?query=magma&amp;sektion=0&amp;arch=sparc64">magma(4/SPARC64)</a> serial/parallel boards.  <li>Support <a href="http://man.openbsd.org/?query=magma&amp;sektion=0&amp;arch=sparc">magma(4/SPARC)</a>, <a href="http://man.openbsd.org/?query=magma&amp;sektion=0&amp;arch=sparc64">magma(4/SPARC64)</a> serial/parallel boards.
 <li>Support <a href="http://man.openbsd.org?query=stp&amp;sektion=4">stp(4)</a> sbus-PCMCIA bridge based on STP4020 chipset. (The nell driver on Solaris.)  <li>Support <a href="http://man.openbsd.org/?query=stp&amp;sektion=4">stp(4)</a> sbus-PCMCIA bridge based on STP4020 chipset. (The nell driver on Solaris.)
 <li>Cleanup of <a href="http://man.openbsd.org?query=timed&amp;sektion=8">timed(8)</a>.  <li>Cleanup of <a href="http://man.openbsd.org/?query=timed&amp;sektion=8">timed(8)</a>.
 <li>Removing its setgid(kmem) was not enough, remove <a href="http://man.openbsd.org?query=trsp&amp;sektion=8">trsp(8)</a> altogether.  <li>Removing its setgid(kmem) was not enough, remove <a href="http://man.openbsd.org/?query=trsp&amp;sektion=8">trsp(8)</a> altogether.
 <li>Make <a href="http://man.openbsd.org?query=yacc&amp;sektion=1">yacc(1)</a> errors look like C compiler errors, so parser utilities such as <a href="http://man.openbsd.org?query=error&amp;sektion=1">error(1)</a> can deal with it.  <li>Make <a href="http://man.openbsd.org/?query=yacc&amp;sektion=1">yacc(1)</a> errors look like C compiler errors, so parser utilities such as <a href="http://man.openbsd.org/?query=error&amp;sektion=1">error(1)</a> can deal with it.
 <li>Add <a href="http://man.openbsd.org?query=kqueue&amp;sektion=2">kqueue(2)</a> support to <a href="http://man.openbsd.org?query=random&amp;sektion=9">random(9)</a>.  <li>Add <a href="http://man.openbsd.org/?query=kqueue&amp;sektion=2">kqueue(2)</a> support to <a href="http://man.openbsd.org/?query=random&amp;sektion=9">random(9)</a>.
 <li>Kill file descriptor leak in <a href="http://man.openbsd.org?query=dhcpd&amp;sektion=8">dhcpd(8)</a>.  <li>Kill file descriptor leak in <a href="http://man.openbsd.org/?query=dhcpd&amp;sektion=8">dhcpd(8)</a>.
 <li>Fix lots of format strings in the <a href="http://man.openbsd.org?query=dhcp&amp;sektion=8">dhcp(8)</a> programs.  <li>Fix lots of format strings in the <a href="http://man.openbsd.org/?query=dhcp&amp;sektion=8">dhcp(8)</a> programs.
 <li><a href="http://man.openbsd.org?query=ps&amp;sektion=1">ps(1)</a> shows flag 'x' for <a href="http://man.openbsd.org?query=systrace&amp;sektion=4">systrace(4)</a>'d processes.  <li><a href="http://man.openbsd.org/?query=ps&amp;sektion=1">ps(1)</a> shows flag 'x' for <a href="http://man.openbsd.org/?query=systrace&amp;sektion=4">systrace(4)</a>'d processes.
 <li>Lots of work on the <a href="http://man.openbsd.org?query=gpr&amp;sektion=4">gpr(4)</a> driver.  <li>Lots of work on the <a href="http://man.openbsd.org/?query=gpr&amp;sektion=4">gpr(4)</a> driver.
 <li>Fix <a href="http://man.openbsd.org?query=uftdi&amp;sektion=4">uftdi(4)</a>.  <li>Fix <a href="http://man.openbsd.org/?query=uftdi&amp;sektion=4">uftdi(4)</a>.
 <li>Make <a href="http://man.openbsd.org?query=systat&amp;sektion=1">systat(1)</a> revoke its setgid(kmem) privileges.  <li>Make <a href="http://man.openbsd.org/?query=systat&amp;sektion=1">systat(1)</a> revoke its setgid(kmem) privileges.
 <li>Remove old pccons driver from <a href="i386.html">i386</a>, also the associated XSERVER option from the kernel.  <li>Remove old pccons driver from <a href="i386.html">i386</a>, also the associated XSERVER option from the kernel.
 <li>Fix <a href="http://man.openbsd.org?query=ftpd&amp;sektion=8">ftpd(8)</a>'s SIGALRM handler.  <li>Fix <a href="http://man.openbsd.org/?query=ftpd&amp;sektion=8">ftpd(8)</a>'s SIGALRM handler.
 <li><font color="#e00000"><strong>SECURITY FIX: A buffer overflow can  <li><font color="#e00000"><strong>SECURITY FIX: A buffer overflow can
 occur during the interpretation of chunked encoding in <a href="http://man.openbsd.org?query=httpd&amp;sektion=8">httpd(8)</a>, leading to possible remote crash.</strong></font><br>  occur during the interpretation of chunked encoding in <a href="http://man.openbsd.org/?query=httpd&amp;sektion=8">httpd(8)</a>, leading to possible remote crash.</strong></font><br>
     <a href="errata31.html#httpd">A source code patch is available</a>.<br>      <a href="errata31.html#httpd">A source code patch is available</a>.<br>
     <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>      <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
 <li>Add the punctuation-challenged Nike psa[play^120 USB widget.  <li>Add the punctuation-challenged Nike psa[play^120 USB widget.
 <li>Remove setgid(kmem) from the enormously useful <a href="http://man.openbsd.org?query=trsp&amp;sektion=8">trsp(8)</a>.  <li>Remove setgid(kmem) from the enormously useful <a href="http://man.openbsd.org/?query=trsp&amp;sektion=8">trsp(8)</a>.
 <li>Add UK keyboard map to <a href="macppc.html">macppc</a> (with '#' on Option-3) and also option CAPS_IS_CONTROL.  <li>Add UK keyboard map to <a href="macppc.html">macppc</a> (with '#' on Option-3) and also option CAPS_IS_CONTROL.
 <li>Increase <a href="http://man.openbsd.org?query=xl&amp;sektion=4">xl(4)</a> timeout to squash 'command never completed!' warnings.  <li>Increase <a href="http://man.openbsd.org/?query=xl&amp;sektion=4">xl(4)</a> timeout to squash 'command never completed!' warnings.
 <li>Add <a href="http://man.openbsd.org?query=kqueue&amp;sektion=2">kqueue(2)</a> support to <a href="http://man.openbsd.org?query=audio&amp;sektion=4">audio(4)</a>.  <li>Add <a href="http://man.openbsd.org/?query=kqueue&amp;sektion=2">kqueue(2)</a> support to <a href="http://man.openbsd.org/?query=audio&amp;sektion=4">audio(4)</a>.
 <li>Import <a href="http://man.openbsd.org?query=event&amp;sektion=3">event(3)</a>, an API on top of <a href="http://man.openbsd.org?query=select&amp;sektion=2">select(2)</a> or <a href="http://man.openbsd.org?query=kqueue&amp;sektion=2">kqueue(2)</a>.  <li>Import <a href="http://man.openbsd.org/?query=event&amp;sektion=3">event(3)</a>, an API on top of <a href="http://man.openbsd.org/?query=select&amp;sektion=2">select(2)</a> or <a href="http://man.openbsd.org/?query=kqueue&amp;sektion=2">kqueue(2)</a>.
 <li>Enable DMA on <a href="http://man.openbsd.org?query=xl&amp;sektion=4">xl(4)</a>.  <li>Enable DMA on <a href="http://man.openbsd.org/?query=xl&amp;sektion=4">xl(4)</a>.
 <li>Allow transparent (statically keyed) <a href="http://man.openbsd.org?query=ipsec&amp;sektion=4">ipsec(4)</a> processing on a <a href="http://man.openbsd.org?query=bridge&amp;sektion=4">bridge(4)</a>.  <li>Allow transparent (statically keyed) <a href="http://man.openbsd.org/?query=ipsec&amp;sektion=4">ipsec(4)</a> processing on a <a href="http://man.openbsd.org/?query=bridge&amp;sektion=4">bridge(4)</a>.
 <li>Help <a href="http://man.openbsd.org?query=ppp&amp;sektion=8">ppp(8)</a> to cope with yet more Microsoft PPP attributes.  <li>Help <a href="http://man.openbsd.org/?query=ppp&amp;sektion=8">ppp(8)</a> to cope with yet more Microsoft PPP attributes.
 <li>Extend <a href="http://man.openbsd.org?query=ssh-agent&amp;sektion=1">ssh-agent(1)</a> key lifetime constraints more flexible (i.e. more than just key lifetime).  <li>Extend <a href="http://man.openbsd.org/?query=ssh-agent&amp;sektion=1">ssh-agent(1)</a> key lifetime constraints more flexible (i.e. more than just key lifetime).
 <li>Teach ECN attributes to <a href="http://man.openbsd.org?query=isakmpd&amp;sektion=8">isakmpd(8)</a>.  <li>Teach ECN attributes to <a href="http://man.openbsd.org/?query=isakmpd&amp;sektion=8">isakmpd(8)</a>.
 <li>Add eui64 option to <a href="http://man.openbsd.org?query=ifconfig&amp;sektion=8">ifconfig(8)</a> for configuring the IPv6 interface index.  <li>Add eui64 option to <a href="http://man.openbsd.org/?query=ifconfig&amp;sektion=8">ifconfig(8)</a> for configuring the IPv6 interface index.
 <li>Add a <a href="http://man.openbsd.org?query=sysctl&amp;sektion=3">sysctl(3)</a> to get the CPU type on sparc and sparc64.  <li>Add a <a href="http://man.openbsd.org/?query=sysctl&amp;sektion=3">sysctl(3)</a> to get the CPU type on sparc and sparc64.
 <li>Throw away the first 256 words of arc4 output in <a href="http://man.openbsd.org?query=random&amp;sektion=9">random(9)</a>.  <li>Throw away the first 256 words of arc4 output in <a href="http://man.openbsd.org/?query=random&amp;sektion=9">random(9)</a>.
 <li>Gratuitous pid_t cleanup in /usr/bin.  <li>Gratuitous pid_t cleanup in /usr/bin.
 <li>Grab multicast <a href="http://man.openbsd.org?query=vlan&amp;sektion=4">vlan(4)</a> code from NetBSD.  <li>Grab multicast <a href="http://man.openbsd.org/?query=vlan&amp;sektion=4">vlan(4)</a> code from NetBSD.
 <li>Add some inlined hash functions for the kernel, in &lt;sys/hash.h&gt;.  <li>Add some inlined hash functions for the kernel, in &lt;sys/hash.h&gt;.
 <li>Cleanup work on conditional evaluation in <a href="http://man.openbsd.org?query=make&amp;sektion=1">make(1)</a>.  <li>Cleanup work on conditional evaluation in <a href="http://man.openbsd.org/?query=make&amp;sektion=1">make(1)</a>.
 <li><a href="http://man.openbsd.org?query=isakmpd&amp;sektion=8">isakmpd(8)</a> accepts IPComp flows.  <li><a href="http://man.openbsd.org/?query=isakmpd&amp;sektion=8">isakmpd(8)</a> accepts IPComp flows.
 <li>Drop <a href="http://man.openbsd.org?query=pf&amp;sektion=4">pf(4)</a> scrub(fragcache) syntax in favour of the fragment ... option in scrub rules.  <li>Drop <a href="http://man.openbsd.org/?query=pf&amp;sektion=4">pf(4)</a> scrub(fragcache) syntax in favour of the fragment ... option in scrub rules.
 <li>Teach <a href="http://man.openbsd.org?query=tcpdump&amp;sektion=8">tcpdump(8)</a> about <a href="http://man.openbsd.org?query=ipcomp&amp;sektion=4">ipcomp(4)</a>.  <li>Teach <a href="http://man.openbsd.org/?query=tcpdump&amp;sektion=8">tcpdump(8)</a> about <a href="http://man.openbsd.org/?query=ipcomp&amp;sektion=4">ipcomp(4)</a>.
 <li>Show sparc64's X server which device it wants to mmap().  <li>Show sparc64's X server which device it wants to mmap().
 <li>Add ioctl to <a href="http://man.openbsd.org?query=wscons&amp;sektion=4">wscons(4)</a> allowing sparc64 (other architectures later) to find out which PCI device it's using.  <li>Add ioctl to <a href="http://man.openbsd.org/?query=wscons&amp;sektion=4">wscons(4)</a> allowing sparc64 (other architectures later) to find out which PCI device it's using.
 <li>Enable userland <a href="http://man.openbsd.org?query=crypto&amp;sektion=4">crypto(4)</a> support for DSA. Maybe logging in using ssh2 on a 486 needn't take 20 seconds after all.  <li>Enable userland <a href="http://man.openbsd.org/?query=crypto&amp;sektion=4">crypto(4)</a> support for DSA. Maybe logging in using ssh2 on a 486 needn't take 20 seconds after all.
 <li>Kernel changes and <a href="http://man.openbsd.org?query=sysctl&amp;sektion=3">sysctl(3)</a> switch for hardware asymmetric <a href="http://man.openbsd.org?query=crypto&amp;sektion=4">crypto(4)</a> in userland.  <li>Kernel changes and <a href="http://man.openbsd.org/?query=sysctl&amp;sektion=3">sysctl(3)</a> switch for hardware asymmetric <a href="http://man.openbsd.org/?query=crypto&amp;sektion=4">crypto(4)</a> in userland.
 <li>Add initial Ultra Port Architecture (<a href="http://man.openbsd.org?query=upa&amp;sektion=4&amp;arch=sparc64">upa(4/SPARC64)</a>) support. Attach <a href="http://man.openbsd.org?query=creator&amp;sektion=4&amp;arch=sparc64">creator(4)</a> and <a href="http://man.openbsd.org?query=schizo&amp;sektion=4&amp;arch=sparc64">schizo(4)</a> using it.  <li>Add initial Ultra Port Architecture (<a href="http://man.openbsd.org/?query=upa&amp;sektion=4&amp;arch=sparc64">upa(4/SPARC64)</a>) support. Attach <a href="http://man.openbsd.org/?query=creator&amp;sektion=4&amp;arch=sparc64">creator(4)</a> and <a href="http://man.openbsd.org/?query=schizo&amp;sektion=4&amp;arch=sparc64">schizo(4)</a> using it.
 <li>Import new <a href="vax.html">vax</a> boot code from NetBSD.  <li>Import new <a href="vax.html">vax</a> boot code from NetBSD.
 <li>Add <a href="http://man.openbsd.org?query=umct&amp;sektion=4">umct(4)</a> USB serial driver and .<a href="http://man.openbsd.org?query=umidi&amp;sektion=4">umidi(4)</a> USB MIDI driver. Not tested, not in GENERIC.  <li>Add <a href="http://man.openbsd.org/?query=umct&amp;sektion=4">umct(4)</a> USB serial driver and .<a href="http://man.openbsd.org/?query=umidi&amp;sektion=4">umidi(4)</a> USB MIDI driver. Not tested, not in GENERIC.
 <li>Add IPL_STATCLOCK and add lots of splassert()s.  <li>Add IPL_STATCLOCK and add lots of splassert()s.
 <li><a href="http://man.openbsd.org?query=ssh&amp;sektion=1">ssh(1)</a> spends less time with euid==0 even if it is installed setuid(root).  <li><a href="http://man.openbsd.org/?query=ssh&amp;sektion=1">ssh(1)</a> spends less time with euid==0 even if it is installed setuid(root).
 <li>Much cleanup in distrib/miniroot.  <li>Much cleanup in distrib/miniroot.
 <li>Make <a href="http://man.openbsd.org?query=pfctl&amp;sektion=8">pfctl(8)</a> -s state print UDP and 'other' states nicely.  <li>Make <a href="http://man.openbsd.org/?query=pfctl&amp;sektion=8">pfctl(8)</a> -s state print UDP and 'other' states nicely.
 <li>New scrub(fragcache) ... syntax for <a href="http://man.openbsd.org?query=pf&amp;sektion=4">pf(4)</a>.  <li>New scrub(fragcache) ... syntax for <a href="http://man.openbsd.org/?query=pf&amp;sektion=4">pf(4)</a>.
 <li><a href="http://man.openbsd.org?query=pf&amp;sektion=4">pf(4)</a> NAT proxy port ranges can be specified per-rule.  <li><a href="http://man.openbsd.org/?query=pf&amp;sektion=4">pf(4)</a> NAT proxy port ranges can be specified per-rule.
 <li>Don't <a href="http://man.openbsd.org?query=panic&amp;sektion=9">panic(9)</a> if <a href="http://man.openbsd.org?query=pf&amp;sektion=4">pf(4)</a> tries to insert a duplicate key.  <li>Don't <a href="http://man.openbsd.org/?query=panic&amp;sektion=9">panic(9)</a> if <a href="http://man.openbsd.org/?query=pf&amp;sektion=4">pf(4)</a> tries to insert a duplicate key.
 <li><a href="http://man.openbsd.org?query=pf&amp;sektion=4">pf(4)</a> NAT and filter rules now all go in the one file (normally <a href="http://man.openbsd.org?query=pf.conf&amp;sektion=5">pf.conf(5)</a>). New <a href="http://man.openbsd.org?query=pfctl&amp;sektion=8">pfctl(8)</a> file syntax. Oh yes.  <li><a href="http://man.openbsd.org/?query=pf&amp;sektion=4">pf(4)</a> NAT and filter rules now all go in the one file (normally <a href="http://man.openbsd.org/?query=pf.conf&amp;sektion=5">pf.conf(5)</a>). New <a href="http://man.openbsd.org/?query=pfctl&amp;sektion=8">pfctl(8)</a> file syntax. Oh yes.
 <li>Clean up semantics of <a href="http://man.openbsd.org?query=gre&amp;sektion=4">gre(4)</a> a bit.  <li>Clean up semantics of <a href="http://man.openbsd.org/?query=gre&amp;sektion=4">gre(4)</a> a bit.
 <li><a href="http://man.openbsd.org?query=ifconfig&amp;sektion=8">ifconfig(8)</a> prints the Ethernet address. Yippee!  <li><a href="http://man.openbsd.org/?query=ifconfig&amp;sektion=8">ifconfig(8)</a> prints the Ethernet address. Yippee!
 <li><a href="http://man.openbsd.org?query=route&amp;sektion=8">route(8)</a> now accepts DNS names (and naturally enough treats them as host routes).  <li><a href="http://man.openbsd.org/?query=route&amp;sektion=8">route(8)</a> now accepts DNS names (and naturally enough treats them as host routes).
 <li>Stop <a href="http://man.openbsd.org?query=isakmpd&amp;sektion=8">isakmpd(8)</a> using the same range for SPIs and CPIs.  <li>Stop <a href="http://man.openbsd.org/?query=isakmpd&amp;sektion=8">isakmpd(8)</a> using the same range for SPIs and CPIs.
 <li>Ports can now be specified in <a href="http://man.openbsd.org?query=pf&amp;sektion=4">pf(4)</a> NAT rules.  <li>Ports can now be specified in <a href="http://man.openbsd.org/?query=pf&amp;sektion=4">pf(4)</a> NAT rules.
 <li>Allow <a href="http://man.openbsd.org?query=systrace&amp;sektion=4">systrace(4)</a> to attach to a running process.  <li>Allow <a href="http://man.openbsd.org/?query=systrace&amp;sektion=4">systrace(4)</a> to attach to a running process.
 <li>Add ioctl <a href="http://man.openbsd.org?query=systrace&amp;sektion=4">systrace(4)</a> to retrieve the current emulation of a process.  <li>Add ioctl <a href="http://man.openbsd.org/?query=systrace&amp;sektion=4">systrace(4)</a> to retrieve the current emulation of a process.
 <li>Remove <a href="http://man.openbsd.org?query=dlopen&amp;sektion=3">dlopen(3)</a> stuff from <a href="http://man.openbsd.org?query=isakmpd&amp;sektion=8">isakmpd(8)</a>.  <li>Remove <a href="http://man.openbsd.org/?query=dlopen&amp;sektion=3">dlopen(3)</a> stuff from <a href="http://man.openbsd.org/?query=isakmpd&amp;sektion=8">isakmpd(8)</a>.
 <li>Fix BPF code for a <a href="http://man.openbsd.org?query=gif&amp;sektion=4">gif(4)</a> tunnel, and add some more sanity checks.  <li>Fix BPF code for a <a href="http://man.openbsd.org/?query=gif&amp;sektion=4">gif(4)</a> tunnel, and add some more sanity checks.
 <li>Default RhostsAuthentication and RhostsRSAAuthentication to 'no' now that <a href="http://man.openbsd.org?query=ssh&amp;sektion=1">ssh(1)</a> is now longer setuid(root) by default.  <li>Default RhostsAuthentication and RhostsRSAAuthentication to 'no' now that <a href="http://man.openbsd.org/?query=ssh&amp;sektion=1">ssh(1)</a> is now longer setuid(root) by default.
 <li><a href="http://man.openbsd.org?query=ssh-add&amp;sektion=1">ssh-add(1)</a> key lifetimes can now be specified in nice readable form, e.g. '-t 1h'.  <li><a href="http://man.openbsd.org/?query=ssh-add&amp;sektion=1">ssh-add(1)</a> key lifetimes can now be specified in nice readable form, e.g. '-t 1h'.
 <li>Define __weak_alias() for mvme88k.  <li>Define __weak_alias() for mvme88k.
 <li>Merge GNU TeXinfo 4.2.  <li>Merge GNU TeXinfo 4.2.
 <li>Prevent <a href="http://man.openbsd.org?query=mbuf&amp;sektion=9">mbuf(9)</a> leakage from <a href="http://man.openbsd.org?query=bridge&amp;sektion=4">bridge(4)</a>.  <li>Prevent <a href="http://man.openbsd.org/?query=mbuf&amp;sektion=9">mbuf(9)</a> leakage from <a href="http://man.openbsd.org/?query=bridge&amp;sektion=4">bridge(4)</a>.
 <li>New <a href="http://man.openbsd.org?query=bad144&amp;sektion=8&amp;arch=i386">bad144(8)</a>.  <li>New <a href="http://man.openbsd.org/?query=bad144&amp;sektion=8&amp;arch=i386">bad144(8)</a>.
 <li><a href="http://man.openbsd.org?query=user&amp;sektion=8">user(8)</a> now checks the username length against MaxUserNameLen.  <li><a href="http://man.openbsd.org/?query=user&amp;sektion=8">user(8)</a> now checks the username length against MaxUserNameLen.
 <li>Add <a href="http://man.openbsd.org?query=bio&amp;sektion=4">bio(4)</a> device, so userland can talk to devices that don't have nodes in /dev.  <li>Add <a href="http://man.openbsd.org/?query=bio&amp;sektion=4">bio(4)</a> device, so userland can talk to devices that don't have nodes in /dev.
 <li>Remove KerberosIV startup code from <a href="http://man.openbsd.org?query=rc&amp;sektion=8">rc(8)</a> files.  <li>Remove KerberosIV startup code from <a href="http://man.openbsd.org/?query=rc&amp;sektion=8">rc(8)</a> files.
 <li>Make <a href="http://man.openbsd.org?query=pf&amp;sektion=4">pf(4)</a> NAT rules work more like normal filter rules.  <li>Make <a href="http://man.openbsd.org/?query=pf&amp;sektion=4">pf(4)</a> NAT rules work more like normal filter rules.
 <li>Add SIO*PHYADDR to <a href="http://man.openbsd.org?query=gif&amp;sektion=4">gif(4)</a> so <a href="http://man.openbsd.org?query=ifconfig&amp;sektion=8">ifconfig(8)</a> can set the outer address.  <li>Add SIO*PHYADDR to <a href="http://man.openbsd.org/?query=gif&amp;sektion=4">gif(4)</a> so <a href="http://man.openbsd.org/?query=ifconfig&amp;sektion=8">ifconfig(8)</a> can set the outer address.
 <li>Make published <a href="http://man.openbsd.org?query=arp&amp;sektion=8">arp(8)</a> entries work again (PR2635).  <li>Make published <a href="http://man.openbsd.org/?query=arp&amp;sektion=8">arp(8)</a> entries work again (PR2635).
 <li>Make <a href="http://man.openbsd.org?query=dhcp&amp;sektion=8">dhcp(8)</a> build faster (PR2715).  <li>Make <a href="http://man.openbsd.org/?query=dhcp&amp;sektion=8">dhcp(8)</a> build faster (PR2715).
 <li>Start converting <a href="http://man.openbsd.org?query=netstat&amp;sektion=1">netstat(1)</a> and <a href="http://man.openbsd.org?query=systat&amp;sektion=1">systat(1)</a> to <a href="http://man.openbsd.org?query=sysctl&amp;sektion=3">sysctl(3)</a> instead of kvm.  <li>Start converting <a href="http://man.openbsd.org/?query=netstat&amp;sektion=1">netstat(1)</a> and <a href="http://man.openbsd.org/?query=systat&amp;sektion=1">systat(1)</a> to <a href="http://man.openbsd.org/?query=sysctl&amp;sektion=3">sysctl(3)</a> instead of kvm.
 <li>Set FDDI link MTU the same as IPv4 MTU, fixes PR2714.  <li>Set FDDI link MTU the same as IPv4 MTU, fixes PR2714.
 <li>Allow numeric group IDs in <a href="http://man.openbsd.org?query=systrace&amp;sektion=1">systrace(1)</a>.  <li>Allow numeric group IDs in <a href="http://man.openbsd.org/?query=systrace&amp;sektion=1">systrace(1)</a>.
 <li>Changes to initialisation and media config of <a href="http://man.openbsd.org?query=ep&amp;sektion=4">ep(4)</a>.  <li>Changes to initialisation and media config of <a href="http://man.openbsd.org/?query=ep&amp;sektion=4">ep(4)</a>.
 <li>Add list support for <a href="http://man.openbsd.org?query=pf&amp;sektion=4">pf(4)</a> rdr rules.  <li>Add list support for <a href="http://man.openbsd.org/?query=pf&amp;sektion=4">pf(4)</a> rdr rules.
 <li>Fix a number of bad <a href="http://man.openbsd.org?query=strlcpy&amp;sektion=3">strlcpy(3)</a> calls.  <li>Fix a number of bad <a href="http://man.openbsd.org/?query=strlcpy&amp;sektion=3">strlcpy(3)</a> calls.
 <li>Fix PR2704 resuming <a href="http://man.openbsd.org?query=eso&amp;sektion=4">eso(4)</a> after standby.  <li>Fix PR2704 resuming <a href="http://man.openbsd.org/?query=eso&amp;sektion=4">eso(4)</a> after standby.
 <li>Change a lot of <a href="http://man.openbsd.org?query=index&amp;sektion=3">index(3)</a> calls to <a href="http://man.openbsd.org?query=strchr&amp;sektion=3">strchr(3)</a>.  <li>Change a lot of <a href="http://man.openbsd.org/?query=index&amp;sektion=3">index(3)</a> calls to <a href="http://man.openbsd.org/?query=strchr&amp;sektion=3">strchr(3)</a>.
 <li>Change "'cuz" to "because." Strewth!  <li>Change "'cuz" to "because." Strewth!
 <li>Add another <a href="http://man.openbsd.org?query=mbuf&amp;sektion=9">mbuf(9)</a> flag M_AUTH_AH, changing the meaning of M_AUTH.  <li>Add another <a href="http://man.openbsd.org/?query=mbuf&amp;sektion=9">mbuf(9)</a> flag M_AUTH_AH, changing the meaning of M_AUTH.
 <li>Remove a bunch of '\n's from <a href="http://man.openbsd.org?query=syslog&amp;sektion=3">syslog(3)</a> and <a href="http://man.openbsd.org?query=err&amp;sektion=3">err(3)</a> calls.  <li>Remove a bunch of '\n's from <a href="http://man.openbsd.org/?query=syslog&amp;sektion=3">syslog(3)</a> and <a href="http://man.openbsd.org/?query=err&amp;sektion=3">err(3)</a> calls.
 <li>Make <a href="http://man.openbsd.org?query=isakmpd&amp;sektion=8">isakmpd(8)</a> IKECFG support work for both SET/ACK and REQ/REPLY modes.  <li>Make <a href="http://man.openbsd.org/?query=isakmpd&amp;sektion=8">isakmpd(8)</a> IKECFG support work for both SET/ACK and REQ/REPLY modes.
 <li>Fixes for OpenSSL when talking to hardware <a href="http://man.openbsd.org?query=crypto&amp;sektion=4">crypto(4)</a>.  <li>Fixes for OpenSSL when talking to hardware <a href="http://man.openbsd.org/?query=crypto&amp;sektion=4">crypto(4)</a>.
 <li>Stop <a href="http://man.openbsd.org?query=ftp&amp;sektion=1">ftp(1)</a> and <a href="http://man.openbsd.org?query=ftpd&amp;sektion=8">ftpd(8)</a> spilling the IPv6 scope ID onto the wire.  <li>Stop <a href="http://man.openbsd.org/?query=ftp&amp;sektion=1">ftp(1)</a> and <a href="http://man.openbsd.org/?query=ftpd&amp;sektion=8">ftpd(8)</a> spilling the IPv6 scope ID onto the wire.
 <li>The hardware is willing, and now <a href="http://man.openbsd.org?query=xl&amp;sektion=4">xl(4)</a> is able to offload TCP, UDP and IP checksumming to it.  <li>The hardware is willing, and now <a href="http://man.openbsd.org/?query=xl&amp;sektion=4">xl(4)</a> is able to offload TCP, UDP and IP checksumming to it.
 <li>Support setting MTU on <a href="http://man.openbsd.org?query=sk&amp;sektion=4">sk(4)</a>.  <li>Support setting MTU on <a href="http://man.openbsd.org/?query=sk&amp;sektion=4">sk(4)</a>.
 <li>Add KERN_{NFILES,TTYCOUNT,NUMVNODES,MBSTAT} <a href="http://man.openbsd.org?query=sysctl&amp;sektion=3">sysctl(3)</a> entries.  <li>Add KERN_{NFILES,TTYCOUNT,NUMVNODES,MBSTAT} <a href="http://man.openbsd.org/?query=sysctl&amp;sektion=3">sysctl(3)</a> entries.
 <li>For a <a href="http://man.openbsd.org?query=bridge&amp;sektion=4">bridge(4)</a>, handle IPv4 frag-needed-but-DF-set just like on a regular interface.  <li>For a <a href="http://man.openbsd.org/?query=bridge&amp;sektion=4">bridge(4)</a>, handle IPv4 frag-needed-but-DF-set just like on a regular interface.
 <li>Pull in some <a href="http://man.openbsd.org?query=pciide&amp;sektion=4">pciide(4)</a> fixes from NetBSD.  <li>Pull in some <a href="http://man.openbsd.org/?query=pciide&amp;sektion=4">pciide(4)</a> fixes from NetBSD.
 <li>Remove (arguably) unnecessary setgid(operator) from <a href="http://man.openbsd.org?query=df&amp;sektion=1">df(1)</a>.  <li>Remove (arguably) unnecessary setgid(operator) from <a href="http://man.openbsd.org/?query=df&amp;sektion=1">df(1)</a>.
 <li>Remove setuid(kmem) from <a href="http://man.openbsd.org?query=ps&amp;sektion=1">ps(1)</a> and <a href="http://man.openbsd.org?query=w&amp;sektion=1">w(1)</a> now kvm can use sysctl for some stuff. We don't need no proc filesystem...  <li>Remove setuid(kmem) from <a href="http://man.openbsd.org/?query=ps&amp;sektion=1">ps(1)</a> and <a href="http://man.openbsd.org/?query=w&amp;sektion=1">w(1)</a> now kvm can use sysctl for some stuff. We don't need no proc filesystem...
 <li>Make the <a href="http://man.openbsd.org?query=kvm&amp;sektion=3">kvm(3)</a> library try to use the shiny new sysctls to fetch process arguments and environment.  <li>Make the <a href="http://man.openbsd.org/?query=kvm&amp;sektion=3">kvm(3)</a> library try to use the shiny new sysctls to fetch process arguments and environment.
 <li>Add flag to stop <a href="http://man.openbsd.org?query=kvm_open&amp;sektion=3">kwm_open(3)</a> opening any files, though limiting kvm functionality.  <li>Add flag to stop <a href="http://man.openbsd.org/?query=kvm_open&amp;sektion=3">kwm_open(3)</a> opening any files, though limiting kvm functionality.
 <li>Add <a href="http://man.openbsd.org?query=sysctl&amp;sektion=3">sysctl(3)</a> to retrieve process arguments and environment.  <li>Add <a href="http://man.openbsd.org/?query=sysctl&amp;sektion=3">sysctl(3)</a> to retrieve process arguments and environment.
 <li>Tweak kernel memory allocation on i386 to work better on 4GB machines.  <li>Tweak kernel memory allocation on i386 to work better on 4GB machines.
 <li>Work started on <a href="http://man.openbsd.org?query=schizo&amp;sektion=4&amp;arch=sparc64">schizo(4/SPARC64)</a> PCI controller. Who said that?  <li>Work started on <a href="http://man.openbsd.org/?query=schizo&amp;sektion=4&amp;arch=sparc64">schizo(4/SPARC64)</a> PCI controller. Who said that?
 <li>Install script now puts FQDN in /etc/myname.  <li>Install script now puts FQDN in /etc/myname.
 <li>Make more use of splsoftnet() (instead of splnet()) in IPv6 code.  <li>Make more use of splsoftnet() (instead of splnet()) in IPv6 code.
 <li>lo0 now only gets ::1 when it's brought up.  <li>lo0 now only gets ::1 when it's brought up.
 <li>Merge <a href="http://www.pdc.kth.se/kth-krb/">kth-krb</a> 1.1.1.  <li>Merge <a href="http://www.pdc.kth.se/kth-krb/">kth-krb</a> 1.1.1.
 <li>Enable weak aliases in libc for powerpc, sparc and alpha (already enabled on i386).  <li>Enable weak aliases in libc for powerpc, sparc and alpha (already enabled on i386).
 <li>Add new splusb() to prevent USB initialisation lossage.  <li>Add new splusb() to prevent USB initialisation lossage.
 <li>Improve SMART support in <a href="http://man.openbsd.org?query=atactl&amp;sektion=8">atactl(8)</a>.  <li>Improve SMART support in <a href="http://man.openbsd.org/?query=atactl&amp;sektion=8">atactl(8)</a>.
 <li>Silently ignore deprecated options to <a href="http://man.openbsd.org?query=ssh&amp;sektion=1">ssh(1)</a> since they may be passed in for a remote scp command.  <li>Silently ignore deprecated options to <a href="http://man.openbsd.org/?query=ssh&amp;sektion=1">ssh(1)</a> since they may be passed in for a remote scp command.
 <li>Remove FallbackToRsh from <a href="http://man.openbsd.org?query=scp&amp;sektion=1">scp(1)</a> as well.  <li>Remove FallbackToRsh from <a href="http://man.openbsd.org/?query=scp&amp;sektion=1">scp(1)</a> as well.
 <li><a href="http://man.openbsd.org?query=pf&amp;sektion=4">pf(4)</a> NAT rules now do macro expansion as well.  <li><a href="http://man.openbsd.org/?query=pf&amp;sektion=4">pf(4)</a> NAT rules now do macro expansion as well.
 <li>Add Makefile-like (var += ...) macro concatenation to <a href="http://man.openbsd.org?query=pfctl&amp;sektion=8">pfctl(8)</a>, then remove it again.  <li>Add Makefile-like (var += ...) macro concatenation to <a href="http://man.openbsd.org/?query=pfctl&amp;sektion=8">pfctl(8)</a>, then remove it again.
 <li>Add per-rule state timeouts to <a href="http://man.openbsd.org?query=pf&amp;sektion=4">pf(4)</a>.  <li>Add per-rule state timeouts to <a href="http://man.openbsd.org/?query=pf&amp;sektion=4">pf(4)</a>.
 <li>Fix well-hidden little bug in <a href="http://man.openbsd.org?query=crypto&amp;sektion=3">crypto(3)</a> to unbork <a href="sparc64.html">sparc64</a> SSL/TLS negotiation.  <li>Fix well-hidden little bug in <a href="http://man.openbsd.org/?query=crypto&amp;sektion=3">crypto(3)</a> to unbork <a href="sparc64.html">sparc64</a> SSL/TLS negotiation.
 <li>On <a href="alpha.html">alpha</a>, don't allow kernel symbols to be paged out.  <li>On <a href="alpha.html">alpha</a>, don't allow kernel symbols to be paged out.
 <li>Deprecate FallbackToRsh and UseRsh options in <a href="http://man.openbsd.org?query=ssh&amp;sektion=1">ssh(1)</a>.  <li>Deprecate FallbackToRsh and UseRsh options in <a href="http://man.openbsd.org/?query=ssh&amp;sektion=1">ssh(1)</a>.
 <li><a href="http://man.openbsd.org?query=ssh-keysign&amp;sektion=8">ssh-keysign(8)</a> now insists on 20-byte session IDs.  <li><a href="http://man.openbsd.org/?query=ssh-keysign&amp;sektion=8">ssh-keysign(8)</a> now insists on 20-byte session IDs.
 <li>Remove suspect DIAGNOSTIC block from softdep kernel code.  <li>Remove suspect DIAGNOSTIC block from softdep kernel code.
 <li>Make <a href="http://man.openbsd.org?query=wsdisplay&amp;sektion=4">wsdisplay(4)</a> screen blanker play nice with the X server.  <li>Make <a href="http://man.openbsd.org/?query=wsdisplay&amp;sektion=4">wsdisplay(4)</a> screen blanker play nice with the X server.
 <li><a href="http://man.openbsd.org?query=lpr&amp;sektion=1">lpr(1)</a> and friends go from setuid(root) to setgid(daemon). Connections can come from unprivileged ports for now.  <li><a href="http://man.openbsd.org/?query=lpr&amp;sektion=1">lpr(1)</a> and friends go from setuid(root) to setgid(daemon). Connections can come from unprivileged ports for now.
 <li>Add Realtek 8129/8139 cardbus device support to <a href="http://man.openbsd.org?query=rl&amp;sektion=4">rl(4)</a>.  <li>Add Realtek 8129/8139 cardbus device support to <a href="http://man.openbsd.org/?query=rl&amp;sektion=4">rl(4)</a>.
 <li>Switch <a href="macppc.html">macppc</a> to use gem instead of gm.  <li>Switch <a href="macppc.html">macppc</a> to use gem instead of gm.
 <li>Multicast fixes and Gigabit Ethernet support for <a href="http://man.openbsd.org?query=gem&amp;sektion=4">gem(4)</a>.  <li>Multicast fixes and Gigabit Ethernet support for <a href="http://man.openbsd.org/?query=gem&amp;sektion=4">gem(4)</a>.
 <li>Rule label length increased from 32 to 64 characters.  <li>Rule label length increased from 32 to 64 characters.
 <li>Allow modification of TTL with <a href="http://man.openbsd.org?query=pf&amp;sektion=4">pf(4)</a> return-rst.  <li>Allow modification of TTL with <a href="http://man.openbsd.org/?query=pf&amp;sektion=4">pf(4)</a> return-rst.
 <li>Timeout handling improvements to <a href="http://man.openbsd.org?query=ohci&amp;sektion=4">ohci(4)</a>.  <li>Timeout handling improvements to <a href="http://man.openbsd.org/?query=ohci&amp;sektion=4">ohci(4)</a>.
 <li>Make <a href="http://man.openbsd.org?query=netstat&amp;sektion=1">netstat(1)</a> print RIP6 statistics.  <li>Make <a href="http://man.openbsd.org/?query=netstat&amp;sektion=1">netstat(1)</a> print RIP6 statistics.
 <li>Allow a per-rule limit to the number of state table entries a <a href="http://man.openbsd.org?query=pf.conf&amp;sektion=5">pf.conf(5)</a> rule can create.  <li>Allow a per-rule limit to the number of state table entries a <a href="http://man.openbsd.org/?query=pf.conf&amp;sektion=5">pf.conf(5)</a> rule can create.
 <li>Switch <a href="http://man.openbsd.org?query=pf&amp;sektion=4">pf(4)</a> from AVL to red-black trees.  <li>Switch <a href="http://man.openbsd.org/?query=pf&amp;sektion=4">pf(4)</a> from AVL to red-black trees.
 <li>Add Gemplus GPR400 PCMCIA smartcard reader.  <li>Add Gemplus GPR400 PCMCIA smartcard reader.
 <li>Don't propose IDEA when negotiating SSL connections.  <li>Don't propose IDEA when negotiating SSL connections.
 <li>$srcaddr, $srcport, $dstaddr, $dstport, $proto and $nr (rule number) can now be used in <a href="http://man.openbsd.org?query=pfctl&amp;sektion=8">pfctl(8)</a> rule labels.  <li>$srcaddr, $srcport, $dstaddr, $dstport, $proto and $nr (rule number) can now be used in <a href="http://man.openbsd.org/?query=pfctl&amp;sektion=8">pfctl(8)</a> rule labels.
 <li>Make a kernel TCP RST and a <a href="http://man.openbsd.org?query=pf&amp;sektion=4">pf(4)</a> return-rst look the same, to frustrate the nmap crowd.  <li>Make a kernel TCP RST and a <a href="http://man.openbsd.org/?query=pf&amp;sektion=4">pf(4)</a> return-rst look the same, to frustrate the nmap crowd.
 <li>Some <a href="http://man.openbsd.org?query=systrace&amp;sektion=4">systrace(4)</a> filter list optimizations.  <li>Some <a href="http://man.openbsd.org/?query=systrace&amp;sektion=4">systrace(4)</a> filter list optimizations.
 <li>Remove IPv4 mapped address support from TCP input code, and remove is_ipv6().  <li>Remove IPv4 mapped address support from TCP input code, and remove is_ipv6().
 <li>Add net.inet6.ip6.v6only <a href="http://man.openbsd.org?query=sysctl&amp;sektion=8">sysctl(8)</a> flag.  <li>Add net.inet6.ip6.v6only <a href="http://man.openbsd.org/?query=sysctl&amp;sektion=8">sysctl(8)</a> flag.
 <li>Add ikecfg as a valid flag in <a href="http://man.openbsd.org?query=isakmpd.conf&amp;sektion=5">isakmpd.conf(5)</a>. Start coding SET/ACK mode support.  <li>Add ikecfg as a valid flag in <a href="http://man.openbsd.org/?query=isakmpd.conf&amp;sektion=5">isakmpd.conf(5)</a>. Start coding SET/ACK mode support.
 <li><a href="http://man.openbsd.org?query=inetd&amp;sektion=8">inetd(8)</a> no longer accepts UDP packets if the source is a broadcast address.  <li><a href="http://man.openbsd.org/?query=inetd&amp;sektion=8">inetd(8)</a> no longer accepts UDP packets if the source is a broadcast address.
 <li>Start work on <a href="http://www.xfree86.org/current/Xkdrive.1.html">KDrive</a> (TinyX) low-footprint X server support.  <li>Start work on <a href="http://www.xfree86.org/current/Xkdrive.1.html">KDrive</a> (TinyX) low-footprint X server support.
 <li>Add a missing bzero() in sys/netinet/tcp_input.c to fix link-local TCP.  <li>Add a missing bzero() in sys/netinet/tcp_input.c to fix link-local TCP.
 <li>Add flow type to <a href="http://man.openbsd.org?query=ipsec&amp;sektion=4">ipsec(4)</a> and <a href="http://man.openbsd.org?query=isakmpd&amp;sektion=8">isakmpd(8)</a>.  <li>Add flow type to <a href="http://man.openbsd.org/?query=ipsec&amp;sektion=4">ipsec(4)</a> and <a href="http://man.openbsd.org/?query=isakmpd&amp;sektion=8">isakmpd(8)</a>.
 <li>Fix <a href="http://man.openbsd.org?query=isakmpd&amp;sektion=8">isakmpd(8)</a> crasher PR2729.  <li>Fix <a href="http://man.openbsd.org/?query=isakmpd&amp;sektion=8">isakmpd(8)</a> crasher PR2729.
 <li>Deprecate SIO.*IFPREFIX_IN6 ioctls.  <li>Deprecate SIO.*IFPREFIX_IN6 ioctls.
 <li>Merge <a href="http://www.stacken.kth.se/projekt/arla/">arla</a> release 0.35.7.  <li>Merge <a href="http://www.stacken.kth.se/projekt/arla/">arla</a> release 0.35.7.
 <li>Merge OpenSSL 0.9.7-stable-20020605.  <li>Merge OpenSSL 0.9.7-stable-20020605.
 <li>TCP wrappers and <a href="http://man.openbsd.org?query=pfctl&amp;sektion=8">pfctl(8)</a> accept scoped IPv6 addresses.  <li>TCP wrappers and <a href="http://man.openbsd.org/?query=pfctl&amp;sektion=8">pfctl(8)</a> accept scoped IPv6 addresses.
 <li>Remove [gs]etprogname() from KerberosIV  <li>Remove [gs]etprogname() from KerberosIV
 <li>Fix <a href="http://man.openbsd.org?query=ipsec&amp;sektion=4">ipsec(4)</a> crash described in PR2721.  <li>Fix <a href="http://man.openbsd.org/?query=ipsec&amp;sektion=4">ipsec(4)</a> crash described in PR2721.
 <li>Disable XF86_SVGA drivers in old XFree that are as good or better in XFree86 4.2.0, as defined in their <a href="http://www.xfree86.org/4.2.0/Status.html">status page</a>.  <li>Disable XF86_SVGA drivers in old XFree that are as good or better in XFree86 4.2.0, as defined in their <a href="http://www.xfree86.org/4.2.0/Status.html">status page</a>.
 <li><a href="http://man.openbsd.org?query=bpf&amp;sektion=4">bpf(4)</a> support for <a href="http://man.openbsd.org?query=kqueue&amp;sektion=2">kqueue(2)</a>  <li><a href="http://man.openbsd.org/?query=bpf&amp;sektion=4">bpf(4)</a> support for <a href="http://man.openbsd.org/?query=kqueue&amp;sektion=2">kqueue(2)</a>
 <li>In <a href="http://man.openbsd.org?query=isakmpd&amp;sektion=8">isakmpd(8)</a>, add netmask, subnet and DHCP server request support to IKECFG.  <li>In <a href="http://man.openbsd.org/?query=isakmpd&amp;sektion=8">isakmpd(8)</a>, add netmask, subnet and DHCP server request support to IKECFG.
 <li>Fix <a href="http://man.openbsd.org?query=bktr&amp;sektion=4&amp;arch=i386">bktr(4)</a> stereo.  <li>Fix <a href="http://man.openbsd.org/?query=bktr&amp;sektion=4&amp;arch=i386">bktr(4)</a> stereo.
 <li>Support the RNG of AMD-768 southbridge (device <a href="http://man.openbsd.org?query=amdpm&amp;sektion=4">amdpm(4)</a>).  <li>Support the RNG of AMD-768 southbridge (device <a href="http://man.openbsd.org/?query=amdpm&amp;sektion=4">amdpm(4)</a>).
 <li>Fix DMA handing of <a href="http://man.openbsd.org?query=hme&amp;sektion=4&amp;arch=sparc">hme(4)</a> (SPARC and SPARC64).  <li>Fix DMA handing of <a href="http://man.openbsd.org/?query=hme&amp;sektion=4&amp;arch=sparc">hme(4)</a> (SPARC and SPARC64).
 <li>Pull in libcsu change from NetBSD to allow <a href="http://man.openbsd.org?query=dlopen&amp;sektion=3">dlopen(3)</a> to be used much earlier.  <li>Pull in libcsu change from NetBSD to allow <a href="http://man.openbsd.org/?query=dlopen&amp;sektion=3">dlopen(3)</a> to be used much earlier.
 <li>Add -t key lifetime option to <a href="http://man.openbsd.org?query=ssh-add&amp;sektion=1">ssh-add(1)</a>.  <li>Add -t key lifetime option to <a href="http://man.openbsd.org/?query=ssh-add&amp;sektion=1">ssh-add(1)</a>.
 <li>Use IPv4/IPv6 addresses in /etc/inetd.conf instead of 'localhost' to avoid DNS lookups.  <li>Use IPv4/IPv6 addresses in /etc/inetd.conf instead of 'localhost' to avoid DNS lookups.
 <li>Add predicate suffixes to <a href="http://man.openbsd.org?query=systrace&amp;sektion=1">systrace(1)</a>.  <li>Add predicate suffixes to <a href="http://man.openbsd.org/?query=systrace&amp;sektion=1">systrace(1)</a>.
 <li>Add -x and -X options to respectively lock and unlock <a href="http://man.openbsd.org?query=ssh-agent&amp;sektion=1">ssh-agent(1)</a>.  <li>Add -x and -X options to respectively lock and unlock <a href="http://man.openbsd.org/?query=ssh-agent&amp;sektion=1">ssh-agent(1)</a>.
 <li>Compatibility tweaks to getpid(), getuid() and getgid() under Linux emulation.  <li>Compatibility tweaks to getpid(), getuid() and getgid() under Linux emulation.
 <li>Start work on new debugger, pmdb.  <li>Start work on new debugger, pmdb.
 <li>Additional check (#ifdef DIAGNOSTIC) for duplicate <a href="http://man.openbsd.org?query=uvm&amp;sektion=9">uvm(9)</a> map entries.  <li>Additional check (#ifdef DIAGNOSTIC) for duplicate <a href="http://man.openbsd.org/?query=uvm&amp;sektion=9">uvm(9)</a> map entries.
 <li>If <a href="http://man.openbsd.org?query=syslog&amp;sektion=3">syslog(3)</a> fails with ENOBUFS when sending to /dev/log, it now waits a millisecond and retries.  <li>If <a href="http://man.openbsd.org/?query=syslog&amp;sektion=3">syslog(3)</a> fails with ENOBUFS when sending to /dev/log, it now waits a millisecond and retries.
 <li><a href="http://man.openbsd.org?query=syslogd&amp;sektion=8">syslogd(8)</a> doubles the socket receive buffer size.  <li><a href="http://man.openbsd.org/?query=syslogd&amp;sektion=8">syslogd(8)</a> doubles the socket receive buffer size.
 <li>Automatic policy generation for <a href="http://man.openbsd.org?query=systrace&amp;sektion=4">systrace(4)</a>.  <li>Automatic policy generation for <a href="http://man.openbsd.org/?query=systrace&amp;sektion=4">systrace(4)</a>.
 <li><a href="http://man.openbsd.org?query=lynx&amp;sektion=1">lynx(1)</a> now defaults to passive FTP.  <li><a href="http://man.openbsd.org/?query=lynx&amp;sektion=1">lynx(1)</a> now defaults to passive FTP.
 <li>Remove [gs]etprogname() from KerberosV.  <li>Remove [gs]etprogname() from KerberosV.
 <li>New -a &lt;bind_address&gt; option to <a href="http://man.openbsd.org?query=ssh-agent&amp;sektion=1">ssh-agent(1)</a> so user can specify the agent's UNIX domain socket.  <li>New -a &lt;bind_address&gt; option to <a href="http://man.openbsd.org/?query=ssh-agent&amp;sektion=1">ssh-agent(1)</a> so user can specify the agent's UNIX domain socket.
 <li>Make <a href="http://man.openbsd.org?query=tbrconfig&amp;sektion=8">tbrconfig(8)</a> statically linked.  <li>Make <a href="http://man.openbsd.org/?query=tbrconfig&amp;sektion=8">tbrconfig(8)</a> statically linked.
 <li>Remove assumptions about MTU values for certain media types.  <li>Remove assumptions about MTU values for certain media types.
 <li>Use the same byte-order kung fu as the kernel in <a href="http://man.openbsd.org?query=atactl&amp;sektion=8">atactl(8)</a>.  <li>Use the same byte-order kung fu as the kernel in <a href="http://man.openbsd.org/?query=atactl&amp;sektion=8">atactl(8)</a>.
 <li>Don't automagically set -prefixlen 128 on IPv6 host route.  <li>Don't automagically set -prefixlen 128 on IPv6 host route.
 <li>rasops instead of rcons for <a href="http://man.openbsd.org?query=vgafb&amp;sektion=4&amp;arch=sparc64">vgafb(4/SPARC64)</a>.  <li>rasops instead of rcons for <a href="http://man.openbsd.org/?query=vgafb&amp;sektion=4&amp;arch=sparc64">vgafb(4/SPARC64)</a>.
 <li>Add xsystrace(1) [no manpage yet] UI for <a href="http://man.openbsd.org?query=systrace&amp;sektion=4">systrace(4)</a>.  <li>Add xsystrace(1) [no manpage yet] UI for <a href="http://man.openbsd.org/?query=systrace&amp;sektion=4">systrace(4)</a>.
 <li> Add sbus <a href="http://man.openbsd.org?query=bwtwo&amp;sektion=4&amp;arch=sparc">bwtwo(4)</a> mono framebuffer support (untested).  <li> Add sbus <a href="http://man.openbsd.org/?query=bwtwo&amp;sektion=4&amp;arch=sparc">bwtwo(4)</a> mono framebuffer support (untested).
 <li>PrivSep'd <a href="http://www.openssh.com/">ssh</a> monitor processes check each authentication method is enabled before use.  <li>PrivSep'd <a href="http://www.openssh.com/">ssh</a> monitor processes check each authentication method is enabled before use.
 <li><a href="http://man.openbsd.org?query=systrace&amp;sektion=1">systrace(1)</a> userland import.  <li><a href="http://man.openbsd.org/?query=systrace&amp;sektion=1">systrace(1)</a> userland import.
 <li>Use <a href="http://man.openbsd.org?query=arc4random&amp;sektion=3">arc4random(3)</a> for <a href="http://man.openbsd.org?query=rtadvd&amp;sektion=8">rtadvd(8)</a>.  <li>Use <a href="http://man.openbsd.org/?query=arc4random&amp;sektion=3">arc4random(3)</a> for <a href="http://man.openbsd.org/?query=rtadvd&amp;sektion=8">rtadvd(8)</a>.
 <li>Make <a href="http://man.openbsd.org?query=nice&amp;sektion=3">nice(3)</a> standards compliant.  <li>Make <a href="http://man.openbsd.org/?query=nice&amp;sektion=3">nice(3)</a> standards compliant.
 <li>More <a href="http://man.openbsd.org?query=wi&amp;sektion=4">wi(4)</a> tweaks for Symbol cards.  <li>More <a href="http://man.openbsd.org/?query=wi&amp;sektion=4">wi(4)</a> tweaks for Symbol cards.
 <li>Recognise VIA VT8233 PCI-ISA bridge.  <li>Recognise VIA VT8233 PCI-ISA bridge.
 <li>Fix <a href="sparc64.html">sparc64</a> 64-bit relocation masks in <a href="http://man.openbsd.org?query=ld.so&amp;sektion=1">ld.so(1)</a>.  <li>Fix <a href="sparc64.html">sparc64</a> 64-bit relocation masks in <a href="http://man.openbsd.org/?query=ld.so&amp;sektion=1">ld.so(1)</a>.
 <li>Merge in <a href="http://www.sendmail.org/">Sendmail</a> 8.12.4.  <li>Merge in <a href="http://www.sendmail.org/">Sendmail</a> 8.12.4.
 <li>Detect stereo radio reception in <a href="http://man.openbsd.org?query=fms&amp;sektion=4">fms(4)</a>.  <li>Detect stereo radio reception in <a href="http://man.openbsd.org/?query=fms&amp;sektion=4">fms(4)</a>.
 <li>Compatibility tweaks to <a href="http://man.openbsd.org?query=creator&amp;sektion=0&amp;arch=sparc64">creator(4/SPARC64)</a>.  <li>Compatibility tweaks to <a href="http://man.openbsd.org/?query=creator&amp;sektion=0&amp;arch=sparc64">creator(4/SPARC64)</a>.
 <li>Replace <a href="http://man.openbsd.org?query=mr&amp;sektion=4&amp;manpath=OpenBSD+3.1">mr(4)</a> radio driver with new <a href="http://man.openbsd.org?query=gtp&amp;sektion=4">gtp(4)</a> driver, which is better tested.  <li>Replace <a href="http://man.openbsd.org/?query=mr&amp;sektion=4&amp;manpath=OpenBSD+3.1">mr(4)</a> radio driver with new <a href="http://man.openbsd.org/?query=gtp&amp;sektion=4">gtp(4)</a> driver, which is better tested.
 <li>'<a href="http://man.openbsd.org?query=pfctl&amp;sektion=8">pfctl</a> -s all' now prints labels as well.  <li>'<a href="http://man.openbsd.org/?query=pfctl&amp;sektion=8">pfctl</a> -s all' now prints labels as well.
 <li>Add volatile to sig_atomic_t. Stand well back.  <li>Add volatile to sig_atomic_t. Stand well back.
 <li>Use rasops instead of rcons in <a href="http://man.openbsd.org?query=cgthree&amp;sektion=4&amp;arch=sparc">cgthree(4/SPARC)</a> and <a href="http://man.openbsd.org?query=cgsix&amp;sektion=4&amp;arch=sparc">cgsix(4/SPARC)</a>.  <li>Use rasops instead of rcons in <a href="http://man.openbsd.org/?query=cgthree&amp;sektion=4&amp;arch=sparc">cgthree(4/SPARC)</a> and <a href="http://man.openbsd.org/?query=cgsix&amp;sektion=4&amp;arch=sparc">cgsix(4/SPARC)</a>.
 <li>Simplify IPv6 link MTU code.  <li>Simplify IPv6 link MTU code.
 <li>Implement PMAP_CANFAIL flag for m68k pmap.  <li>Implement PMAP_CANFAIL flag for m68k pmap.
 <li>Enable console blanking on <a href="http://man.openbsd.org?query=cgthree&amp;sektion=4&amp;arch=sparc">cgthree(4/SPARC)</a>.  <li>Enable console blanking on <a href="http://man.openbsd.org/?query=cgthree&amp;sektion=4&amp;arch=sparc">cgthree(4/SPARC)</a>.
 <li>Make sure some struct sockaddr are cleared before use.  <li>Make sure some struct sockaddr are cleared before use.
 <li>Start work on NetOctave NSP2000 (hardware crypto) driver <a href="http://man.openbsd.org?query=noct&amp;sektion=4">noct(4)</a>. Just the RNG for now.  <li>Start work on NetOctave NSP2000 (hardware crypto) driver <a href="http://man.openbsd.org/?query=noct&amp;sektion=4">noct(4)</a>. Just the RNG for now.
 <li>Apply <a href="http://www.dachb0den.com/projects/bsd-airtools.html">BSD Airtools</a> 0.2 patches.  <li>Apply <a href="http://www.dachb0den.com/projects/bsd-airtools.html">BSD Airtools</a> 0.2 patches.
 <li>Teach <a href="http://www.ietf.org/rfc/rfc3168.txt?number=3168">ECN</a> flags to <a href="http://man.openbsd.org?query=pf&amp;sektion=4">pf(4)</a>.  <li>Teach <a href="http://www.ietf.org/rfc/rfc3168.txt?number=3168">ECN</a> flags to <a href="http://man.openbsd.org/?query=pf&amp;sektion=4">pf(4)</a>.
 <li>Dump <a href="http://man.openbsd.org?query=mkisofs&amp;sektion=8&amp;manpath=OpenBSD+3.1">mkisofs(8)</a> in favor of <a href="http://man.openbsd.org?query=mkhybrid&amp;sektion=8">mkhybrid(8)</a>.  <li>Dump <a href="http://man.openbsd.org/?query=mkisofs&amp;sektion=8&amp;manpath=OpenBSD+3.1">mkisofs(8)</a> in favor of <a href="http://man.openbsd.org/?query=mkhybrid&amp;sektion=8">mkhybrid(8)</a>.
 <li>Avoid fd_set overruns in <a href="http://man.openbsd.org?query=rtsold&amp;sektion=8">rtsold(8)</a>, <a href="http://man.openbsd.org?query=route6d&amp;sektion=8">route6d(8)</a> and <a href="http://man.openbsd.org?query=rtadvd&amp;sektion=8">rtadvd(8)</a>.  <li>Avoid fd_set overruns in <a href="http://man.openbsd.org/?query=rtsold&amp;sektion=8">rtsold(8)</a>, <a href="http://man.openbsd.org/?query=route6d&amp;sektion=8">route6d(8)</a> and <a href="http://man.openbsd.org/?query=rtadvd&amp;sektion=8">rtadvd(8)</a>.
 <li>Clue in <a href="http://man.openbsd.org?query=inetd&amp;sektion=8">inetd(8)</a> to IPv6 FTP bounce attacks.  <li>Clue in <a href="http://man.openbsd.org/?query=inetd&amp;sektion=8">inetd(8)</a> to IPv6 FTP bounce attacks.
 <li>Fix /etc/ptmp deletion bug that occurred if <a href="http://man.openbsd.org?query=rmuser&amp;sektion=8">rmuser(8)</a> was aborted.  <li>Fix /etc/ptmp deletion bug that occurred if <a href="http://man.openbsd.org/?query=rmuser&amp;sektion=8">rmuser(8)</a> was aborted.
 <li>IBSS mode for Symbol cards (firmware >= 2.5) using the <a href="http://man.openbsd.org?query=wi">wi(4)</a> driver.  <li>IBSS mode for Symbol cards (firmware >= 2.5) using the <a href="http://man.openbsd.org/?query=wi">wi(4)</a> driver.
 <li>Add leading-zero padding to RSA signatures in <a href="http://www.openssh.com/">ssh</a>.  <li>Add leading-zero padding to RSA signatures in <a href="http://www.openssh.com/">ssh</a>.
 <li>Tweak <a href="http://man.openbsd.org?query=altq&amp;sektion=9">altq(9)</a> <a href="http://man.openbsd.org?query=options&amp;sektion=4">options(4)</a> so the kernel compiles on i[34]86.  <li>Tweak <a href="http://man.openbsd.org/?query=altq&amp;sektion=9">altq(9)</a> <a href="http://man.openbsd.org/?query=options&amp;sektion=4">options(4)</a> so the kernel compiles on i[34]86.
 <li>Add support in the <a href="http://man.openbsd.org?query=fxp&amp;sektion=4">fxp(4)</a> driver for more Intel PRO/100 VM cards.  <li>Add support in the <a href="http://man.openbsd.org/?query=fxp&amp;sektion=4">fxp(4)</a> driver for more Intel PRO/100 VM cards.
 <li>For those that do metric but refuse to work in meters and kilograms, <a href="http://www.unc.edu/~rowlett/units/dictK.html">kayser</a> conversion has been added to <a href="http://man.openbsd.org?query=units&amp;sektion=1">units(1)</a>. Wow.  <li>For those that do metric but refuse to work in meters and kilograms, <a href="http://www.unc.edu/~rowlett/units/dictK.html">kayser</a> conversion has been added to <a href="http://man.openbsd.org/?query=units&amp;sektion=1">units(1)</a>. Wow.
 <li>Fix signal races in <a href="http://man.openbsd.org?query=ping&amp;sektion=8">ping(8)</a>.  <li>Fix signal races in <a href="http://man.openbsd.org/?query=ping&amp;sektion=8">ping(8)</a>.
 <li>Now that the Dungeon Master <a href="http://man.openbsd.org?query=dm&amp;sektion=0&amp;manpath=OpenBSD+3.1">dm(1)</a> has gone into well-earned retirement, make those games that need to save high scores, etc. run setgid games.  <li>Now that the Dungeon Master <a href="http://man.openbsd.org/?query=dm&amp;sektion=0&amp;manpath=OpenBSD+3.1">dm(1)</a> has gone into well-earned retirement, make those games that need to save high scores, etc. run setgid games.
 <li>Per-socket <a href="http://man.openbsd.org?query=ipsec&amp;sektion=4">ipsec(4)</a> policies and options!  <li>Per-socket <a href="http://man.openbsd.org/?query=ipsec&amp;sektion=4">ipsec(4)</a> policies and options!
 <li>Stop a potential <a href="http://man.openbsd.org?query=ipsec&amp;sektion=4">ipsec(4)</a> DoS where an attacker could falsely advance the replay counter and so force valid traffic to be discarded.  <li>Stop a potential <a href="http://man.openbsd.org/?query=ipsec&amp;sektion=4">ipsec(4)</a> DoS where an attacker could falsely advance the replay counter and so force valid traffic to be discarded.
 <li>Add German keyboard map for Apple laptops.  <li>Add German keyboard map for Apple laptops.
 <li>On ELF platforms, allow <a href="http://man.openbsd.org?query=gcc&amp;sektion=1">gcc(1)</a> to link Fortran code with other languages.  <li>On ELF platforms, allow <a href="http://man.openbsd.org/?query=gcc&amp;sektion=1">gcc(1)</a> to link Fortran code with other languages.
 <li>Make sure every PCI interrupt is recorded, so ISA doesn't step on one of them later.  <li>Make sure every PCI interrupt is recorded, so ISA doesn't step on one of them later.
 <li>Better <a href="http://man.openbsd.org?query=radio&amp;sektion=4">radio(4)</a> devices attachment.  <li>Better <a href="http://man.openbsd.org/?query=radio&amp;sektion=4">radio(4)</a> devices attachment.
 <li>Fix VIA8233 support in <a href="http://man.openbsd.org?query=auvia&amp;sektion=4">auvia(4)</a>.  <li>Fix VIA8233 support in <a href="http://man.openbsd.org/?query=auvia&amp;sektion=4">auvia(4)</a>.
 <li>Make <a href="http://man.openbsd.org?query=nc&amp;sektion=1">nc(1)</a> timeouts behave more like netcat.  <li>Make <a href="http://man.openbsd.org/?query=nc&amp;sektion=1">nc(1)</a> timeouts behave more like netcat.
 <li>Make sure user's shell is /usr/sbin/authpf before running <a href="http://man.openbsd.org?query=authpf&amp;sektion=8">authpf(8)</a> to prevent $SSH_CLIENT shenanigans.  <li>Make sure user's shell is /usr/sbin/authpf before running <a href="http://man.openbsd.org/?query=authpf&amp;sektion=8">authpf(8)</a> to prevent $SSH_CLIENT shenanigans.
 <li>In <a href="http://man.openbsd.org?query=ssh&amp;sektion=1">ssh</a>, use OpenSSL's AES implementation instead of our own.  <li>In <a href="http://man.openbsd.org/?query=ssh&amp;sektion=1">ssh</a>, use OpenSSL's AES implementation instead of our own.
 <li>Add -[46] options to <a href="http://man.openbsd.org?query=ftp&amp;sektion=1">ftp(1)</a>.  <li>Add -[46] options to <a href="http://man.openbsd.org/?query=ftp&amp;sektion=1">ftp(1)</a>.
 <li>Warn to syslog if IPv6 neighbor discovery tries to set the link MTU too small.  <li>Warn to syslog if IPv6 neighbor discovery tries to set the link MTU too small.
 <li>Make <a href="http://man.openbsd.org?query=tip&amp;sektion=1">tip(1)</a> query the driver with the user's baud rate setting rather than only accepting a compiled-in list.  <li>Make <a href="http://man.openbsd.org/?query=tip&amp;sektion=1">tip(1)</a> query the driver with the user's baud rate setting rather than only accepting a compiled-in list.
 <li>Cleanup and small fixes to <a href="http://man.openbsd.org?query=skeyaudit&amp;sektion=1">skeyaudit(1)</a>.  <li>Cleanup and small fixes to <a href="http://man.openbsd.org/?query=skeyaudit&amp;sektion=1">skeyaudit(1)</a>.
 <li>Fixes to <a href="http://man.openbsd.org?query=fms&amp;sektion=4">fms(4)</a>.  <li>Fixes to <a href="http://man.openbsd.org/?query=fms&amp;sektion=4">fms(4)</a>.
 <li>Various fixes and enhancements to <a href="http://man.openbsd.org?query=mg&amp;sektion=1">mg(1)</a>.  <li>Various fixes and enhancements to <a href="http://man.openbsd.org/?query=mg&amp;sektion=1">mg(1)</a>.
 <li><a href="http://man.openbsd.org?query=sshd&amp;sektion=8">sshd(8)</a> no longer starts in privilege-separated mode unless the PrivSep user sshd and <a href="http://man.openbsd.org?query=chroot&amp;sektion=2">chroot(2)</a> dir /var/empty are both present.  <li><a href="http://man.openbsd.org/?query=sshd&amp;sektion=8">sshd(8)</a> no longer starts in privilege-separated mode unless the PrivSep user sshd and <a href="http://man.openbsd.org/?query=chroot&amp;sektion=2">chroot(2)</a> dir /var/empty are both present.
 <li>Fix potential time overflow in <a href="http://man.openbsd.org?query=dd&amp;sektion=1">dd(1)</a>.  <li>Fix potential time overflow in <a href="http://man.openbsd.org/?query=dd&amp;sektion=1">dd(1)</a>.
 <li>Make <a href="http://man.openbsd.org?query=bridge&amp;sektion=4">bridge(4)</a> refragment IP packets that are too large for the outgoing interface.  <li>Make <a href="http://man.openbsd.org/?query=bridge&amp;sektion=4">bridge(4)</a> refragment IP packets that are too large for the outgoing interface.
 <li>Remove libdl, support is in libc since a long time already.  <li>Remove libdl, support is in libc since a long time already.
 <li>Recognise Nokia C110 and C111 PC cards as <a href="http://man.openbsd.org?query=wi&amp;sektion=4">wi(4)</a> devices.  <li>Recognise Nokia C110 and C111 PC cards as <a href="http://man.openbsd.org/?query=wi&amp;sektion=4">wi(4)</a> devices.
 <li>Really sanitize <a href="http://man.openbsd.org?query=ld.so&amp;sektion=1">ld.so(1)</a>'s environment as promised in the manpage when running set[ug]id, and test for set[ug]id earlier.  <li>Really sanitize <a href="http://man.openbsd.org/?query=ld.so&amp;sektion=1">ld.so(1)</a>'s environment as promised in the manpage when running set[ug]id, and test for set[ug]id earlier.
 <li>Don't allow <a href="http://man.openbsd.org?query=mktemp&amp;sektion=3">mktemp(3)</a> to back up past the beginning of its input buffer.  <li>Don't allow <a href="http://man.openbsd.org/?query=mktemp&amp;sektion=3">mktemp(3)</a> to back up past the beginning of its input buffer.
 <li>Use the correct string buffer size for printing port numbers in <a href="http://man.openbsd.org?query=pfctl&amp;sektion=8">pfctl(8)</a>.  <li>Use the correct string buffer size for printing port numbers in <a href="http://man.openbsd.org/?query=pfctl&amp;sektion=8">pfctl(8)</a>.
 <li>Remove arc4random_8().  <li>Remove arc4random_8().
 <li>struct ifnet now has an array of pointers to data for each address family. Move per-interface IPv6 state and neighbor discovery stuff here.  <li>struct ifnet now has an array of pointers to data for each address family. Move per-interface IPv6 state and neighbor discovery stuff here.
 <li><a href="http://man.openbsd.org?query=netstat&amp;sektion=1">netstat(1)</a> cleanup.  <li><a href="http://man.openbsd.org/?query=netstat&amp;sektion=1">netstat(1)</a> cleanup.
 <li><a href="http://man.openbsd.org?query=ping6&amp;sektion=8">ping6(8)</a> and <a href="http://man.openbsd.org?query=traceroute6&amp;sektion=8">traceroute6(8)</a> updates from <a href="http://www.kame.net/">KAME</a>.  <li><a href="http://man.openbsd.org/?query=ping6&amp;sektion=8">ping6(8)</a> and <a href="http://man.openbsd.org/?query=traceroute6&amp;sektion=8">traceroute6(8)</a> updates from <a href="http://www.kame.net/">KAME</a>.
 <li>unsigned -&gt; unsigned int cleanup.  <li>unsigned -&gt; unsigned int cleanup.
 <li>Repair machdep.chipset sysctl on alpha.  <li>Repair machdep.chipset sysctl on alpha.
 <li>Audit pid_t type usage.  <li>Audit pid_t type usage.
 <li>Audit incorrect signal(2) usage.  <li>Audit incorrect signal(2) usage.
 <li>Fix big <a href="http://man.openbsd.org?query=snprintf&amp;sektion=3">snprintf(3)</a>  <li>Fix big <a href="http://man.openbsd.org/?query=snprintf&amp;sektion=3">snprintf(3)</a>
 parameter typo in <a href="http://man.openbsd.org?query=strftime&amp;sektion=3">strftime(3)</a>.  parameter typo in <a href="http://man.openbsd.org/?query=strftime&amp;sektion=3">strftime(3)</a>.
 <li>Don't use <a href="http://man.openbsd.org?query=execlp&amp;sektion=3">execlp(3)</a> when invoking <a href="http://man.openbsd.org?query=ssh-keysign&amp;sektion=8">ssh-keysign(8)</a>.  <li>Don't use <a href="http://man.openbsd.org/?query=execlp&amp;sektion=3">execlp(3)</a> when invoking <a href="http://man.openbsd.org/?query=ssh-keysign&amp;sektion=8">ssh-keysign(8)</a>.
 <li>Fix <a href="http://man.openbsd.org?query=kill&amp;sektion=2">kill(2)</a> parameter brainfade in <a href="http://man.openbsd.org?query=amd&amp;sektion=8">amd(8)</a> and KerberosIV's rlogin.  <li>Fix <a href="http://man.openbsd.org/?query=kill&amp;sektion=2">kill(2)</a> parameter brainfade in <a href="http://man.openbsd.org/?query=amd&amp;sektion=8">amd(8)</a> and KerberosIV's rlogin.
 <li><a href="vax.html">vax</a>: Add board type for VXT2000+.  <li><a href="vax.html">vax</a>: Add board type for VXT2000+.
 <li>More IANA interface type values, including IFT_BRIDGE.  <li>More IANA interface type values, including IFT_BRIDGE.
 <li>Split XFree86 bsd_video.c into architecture-specific files.  <li>Split XFree86 bsd_video.c into architecture-specific files.
 <li>Add <a href="http://man.openbsd.org?query=sysctl&amp;sektion=8">sysctl(8)</a> toggle net.inet.icmp.tstamprepl (default: 1) for ICMP timestamp replies.  <li>Add <a href="http://man.openbsd.org/?query=sysctl&amp;sektion=8">sysctl(8)</a> toggle net.inet.icmp.tstamprepl (default: 1) for ICMP timestamp replies.
 <li>Even more steps toward the death of unsafe string functions.  <li>Even more steps toward the death of unsafe string functions.
 <li>In XFree86 build, honour COPTS variable when building third-party apps.  <li>In XFree86 build, honour COPTS variable when building third-party apps.
 <li>Add LIBS option for crunchgen so custom libraries can be added to boot images.  <li>Add LIBS option for crunchgen so custom libraries can be added to boot images.
 <li>Run <a href="http://man.openbsd.org?query=rpc.rstatd&amp;sektion=8">rpc.rstatd(8)</a> and <a href="http://man.openbsd.org?query=rpc.rusersd&amp;sektion=8">rpc.rusersd(8)</a> as user nobody (boo!) from <a href="http://man.openbsd.org?query=inetd&amp;sektion=8">inetd(8)</a>.  <li>Run <a href="http://man.openbsd.org/?query=rpc.rstatd&amp;sektion=8">rpc.rstatd(8)</a> and <a href="http://man.openbsd.org/?query=rpc.rusersd&amp;sektion=8">rpc.rusersd(8)</a> as user nobody (boo!) from <a href="http://man.openbsd.org/?query=inetd&amp;sektion=8">inetd(8)</a>.
 <li>From <a href="http://man.openbsd.org?query=ld.so&amp;sektion=1">ld.so(1)</a>, remove tests that have no license, and for the same reason replace parts of <a href="http://man.openbsd.org?query=ld&amp;sektion=1">ld(1)</a> and <a href="http://man.openbsd.org?query=ldconfig&amp;sektion=8">ldconfig(8)</a>.  <li>From <a href="http://man.openbsd.org/?query=ld.so&amp;sektion=1">ld.so(1)</a>, remove tests that have no license, and for the same reason replace parts of <a href="http://man.openbsd.org/?query=ld&amp;sektion=1">ld(1)</a> and <a href="http://man.openbsd.org/?query=ldconfig&amp;sektion=8">ldconfig(8)</a>.
 <li>Remove unnecessary instruction cache flushes on <a href="sparc64.html">sparc64</a>.  <li>Remove unnecessary instruction cache flushes on <a href="sparc64.html">sparc64</a>.
 <li>Many cleanups in <a href="http://man.openbsd.org?query=ld.so&amp;sektion=1">ld.so(1)</a>.  <li>Many cleanups in <a href="http://man.openbsd.org/?query=ld.so&amp;sektion=1">ld.so(1)</a>.
 <li>Support mixed IPv4/IPv6 address lists in <a href="http://man.openbsd.org?query=pfctl&amp;sektion=8">pfctl(8)</a>.  <li>Support mixed IPv4/IPv6 address lists in <a href="http://man.openbsd.org/?query=pfctl&amp;sektion=8">pfctl(8)</a>.
 <li>Add <a href="http://man.openbsd.org?query=ssh-keysign&amp;sektion=8">ssh-keysign(8)</a>.  <li>Add <a href="http://man.openbsd.org/?query=ssh-keysign&amp;sektion=8">ssh-keysign(8)</a>.
 <li>Remove obsolete <a href="http://man.openbsd.org?query=dm&amp;sektion=8&amp;manpath=OpenBSD+3.0">dm(8)</a>.  <li>Remove obsolete <a href="http://man.openbsd.org/?query=dm&amp;sektion=8&amp;manpath=OpenBSD+3.0">dm(8)</a>.
 <li>Fix <a  <li>Fix <a
 href="http://man.openbsd.org?query=disklabel&amp;sektion=8">disklabel(8)</a>  href="http://man.openbsd.org/?query=disklabel&amp;sektion=8">disklabel(8)</a>
 warnings on CD-ROM  warnings on CD-ROM
 (<a href="http://man.openbsd.org?query=cd&amp;sektion=4">cd(4)</a>)  (<a href="http://man.openbsd.org/?query=cd&amp;sektion=4">cd(4)</a>)
 with no data track.  with no data track.
 <li>Allow incoming <a href="http://man.openbsd.org?query=ssh&amp;sektion=1">ssh(1)</a> connections in the temporary <a href="http://man.openbsd.org?query=pf&amp;sektion=4">pf(4)</a> ruleset installed by <a href="http://man.openbsd.org?query=rc&amp;sektion=8">/etc/rc</a>, just in case the real rulebase fails to load later on.  <li>Allow incoming <a href="http://man.openbsd.org/?query=ssh&amp;sektion=1">ssh(1)</a> connections in the temporary <a href="http://man.openbsd.org/?query=pf&amp;sektion=4">pf(4)</a> ruleset installed by <a href="http://man.openbsd.org/?query=rc&amp;sektion=8">/etc/rc</a>, just in case the real rulebase fails to load later on.
 <li>Hunt for biodone() calls not made at splbio() <a href="http://man.openbsd.org?query=spl&amp;sektion=9">spl(9)</a>, and fix them.  <li>Hunt for biodone() calls not made at splbio() <a href="http://man.openbsd.org/?query=spl&amp;sektion=9">spl(9)</a>, and fix them.
 <li>Improve <a href="http://man.openbsd.org?query=mount_cd9660&amp;sektion=8">cd9660(8)</a> filesystem read-ahead performance.  <li>Improve <a href="http://man.openbsd.org/?query=mount_cd9660&amp;sektion=8">cd9660(8)</a> filesystem read-ahead performance.
 <li>Support software brightness and backlight control on various macppc models.  <li>Support software brightness and backlight control on various macppc models.
 <li>Allow <a href="http://man.openbsd.org?query=wsconsctl&amp;sektion=8">wsconsctl(8)</a> to control brightness and backlight on displays which  <li>Allow <a href="http://man.openbsd.org/?query=wsconsctl&amp;sektion=8">wsconsctl(8)</a> to control brightness and backlight on displays which
 support this.  support this.
 <li>New libc IEEE floating-point code and libm routines for hppa.  <li>New libc IEEE floating-point code and libm routines for hppa.
 <li>splassert (<a href="http://man.openbsd.org?query=spl&amp;sektion=9">spl(9)</a>) on i386.  <li>splassert (<a href="http://man.openbsd.org/?query=spl&amp;sektion=9">spl(9)</a>) on i386.
 <li>More steps toward the death of unsafe string functions.  <li>More steps toward the death of unsafe string functions.
 <li>splassert (<a href="http://man.openbsd.org?query=spl&amp;sektion=9">spl(9)</a>) on sparc64.  <li>splassert (<a href="http://man.openbsd.org/?query=spl&amp;sektion=9">spl(9)</a>) on sparc64.
 <li>Add a <a href="http://man.openbsd.org?query=creator&amp;sektion=4&amp;arch=sparc64">creator(4)</a> driver for sparc64 Creator and Creator3D cards.  <li>Add a <a href="http://man.openbsd.org/?query=creator&amp;sektion=4&amp;arch=sparc64">creator(4)</a> driver for sparc64 Creator and Creator3D cards.
 <li>Jumbo <a href="http://man.openbsd.org?query=lpr&amp;sektion=1">lpr(1)</a> changes including IPv6 support, new features, and bugfixes.  <li>Jumbo <a href="http://man.openbsd.org/?query=lpr&amp;sektion=1">lpr(1)</a> changes including IPv6 support, new features, and bugfixes.
 <li>Still more hppa memory management and low-level code fixes.  <li>Still more hppa memory management and low-level code fixes.
 <li>Simple pmap optimization on macppc.  <li>Simple pmap optimization on macppc.
 <li>Did we mention the cleaning of the installation scripts, adding functionality yet reducing size?  <li>Did we mention the cleaning of the installation scripts, adding functionality yet reducing size?
 <li>Allow <a href="http://man.openbsd.org?query=ddb&amp;sektion=4">ddb(4)</a> to do a stack trace into the kernel message buffer.  <li>Allow <a href="http://man.openbsd.org/?query=ddb&amp;sektion=4">ddb(4)</a> to do a stack trace into the kernel message buffer.
 <li><a href="http://man.openbsd.org?query=isp&amp;sektion=4">isp(4)</a> fixes.  <li><a href="http://man.openbsd.org/?query=isp&amp;sektion=4">isp(4)</a> fixes.
 <li><font color="#e00000"><strong>SECURITY FIX: Fix incorrect ACL check when using BSD authentication in <a href="http://man.openbsd.org?query=sshd&amp;sektion=8">sshd(8)</a>.</strong></font><br>  <li><font color="#e00000"><strong>SECURITY FIX: Fix incorrect ACL check when using BSD authentication in <a href="http://man.openbsd.org/?query=sshd&amp;sektion=8">sshd(8)</a>.</strong></font><br>
     <a href="errata31.html#sshbsdauth">A source code patch is available</a>.<br>      <a href="errata31.html#sshbsdauth">A source code patch is available</a>.<br>
     <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>      <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
 <li>Fix a memory leak in <a href="http://man.openbsd.org?query=mg&amp;sektion=1">mg(1)</a>.  <li>Fix a memory leak in <a href="http://man.openbsd.org/?query=mg&amp;sektion=1">mg(1)</a>.
 <li>New systrace facility.  <li>New systrace facility.
 <li>Better Cyrix CPU support.  <li>Better Cyrix CPU support.
 <li>ECN support.  <li>ECN support.
 <li>Support SNTP in <a href="http://man.openbsd.org?query=rdate&amp;sektion=8">rdate(8)</a>.  <li>Support SNTP in <a href="http://man.openbsd.org/?query=rdate&amp;sektion=8">rdate(8)</a>.
 <li>Fix infinite SIGFPE loop situations on vax.  <li>Fix infinite SIGFPE loop situations on vax.
 <li>Remove unnecessary setuid bit from binaries that either do not need it or  <li>Remove unnecessary setuid bit from binaries that either do not need it or
 whose functionality requiring root privileges should only be invoked by root  whose functionality requiring root privileges should only be invoked by root
 anyways, or which can be changed into a setgid bit for a specific group.  anyways, or which can be changed into a setgid bit for a specific group.
 <li>Switch <a href="http://man.openbsd.org?query=skey&amp;sektion=1">skey(1)</a> management to per-user directories instead of a flat file and drop setuid bit on related tools.  <li>Switch <a href="http://man.openbsd.org/?query=skey&amp;sektion=1">skey(1)</a> management to per-user directories instead of a flat file and drop setuid bit on related tools.
 <li>Lots of <a href="http://man.openbsd.org?query=ppp&amp;sektion=8">ppp(8)</a> goodies.  <li>Lots of <a href="http://man.openbsd.org/?query=ppp&amp;sektion=8">ppp(8)</a> goodies.
 <li>New splassert (see <a href="http://man.openbsd.org?query=spl&amp;sektion=9">spl(9)</a>) debug functionality on sparc.  <li>New splassert (see <a href="http://man.openbsd.org/?query=spl&amp;sektion=9">spl(9)</a>) debug functionality on sparc.
 <li>Enable Altivec instructions in macppc kernels.  <li>Enable Altivec instructions in macppc kernels.
 <li>Support more Hifn cards (7814, 7851, 7854) via the <a href="http://man.openbsd.org?query=nofn&amp;sektion=4">nofn(4)</a> driver.  <li>Support more Hifn cards (7814, 7851, 7854) via the <a href="http://man.openbsd.org/?query=nofn&amp;sektion=4">nofn(4)</a> driver.
 <li>OpenSSL 0.9.7.  <li>OpenSSL 0.9.7.
 <li>Completely rework <a href="http://man.openbsd.org?query=at&amp;sektion=1">at(1)</a> and related binaries, and make them POSIX-compliant.  <li>Completely rework <a href="http://man.openbsd.org/?query=at&amp;sektion=1">at(1)</a> and related binaries, and make them POSIX-compliant.
 <li>More use of hardware crypto cards functionality via <a href="http://man.openbsd.org?query=ubsec&amp;sektion=4">ubsec(4)</a>.  <li>More use of hardware crypto cards functionality via <a href="http://man.openbsd.org/?query=ubsec&amp;sektion=4">ubsec(4)</a>.
 <li>More hppa memory management fixes.  <li>More hppa memory management fixes.
 <li>binutils 2.11.2.  <li>binutils 2.11.2.
 <li>Add per-gid filtering to <a href="http://man.openbsd.org?query=pf&amp;sektion=4">pf(4)</a>.  <li>Add per-gid filtering to <a href="http://man.openbsd.org/?query=pf&amp;sektion=4">pf(4)</a>.
 <li>Switch <a href="http://man.openbsd.org?query=at&amp;sektion=1">at(1)</a> to be setgid crontab as well.  <li>Switch <a href="http://man.openbsd.org/?query=at&amp;sektion=1">at(1)</a> to be setgid crontab as well.
 <li>Handle host names resolving in several addresses in <a href="http://man.openbsd.org?query=pfctl&amp;sektion=8">pfctl(8)</a>.  <li>Handle host names resolving in several addresses in <a href="http://man.openbsd.org/?query=pfctl&amp;sektion=8">pfctl(8)</a>.
 <li>Fix compilation warnings for various userland programs.  <li>Fix compilation warnings for various userland programs.
 <li>Add a new user, crontab, and change <a href="http://man.openbsd.org?query=cron&amp;sektion=8">cron(8)</a> from being setuid root to being setgid crontab.  <li>Add a new user, crontab, and change <a href="http://man.openbsd.org/?query=cron&amp;sektion=8">cron(8)</a> from being setuid root to being setgid crontab.
 <li>Add per-uid filtering to <a href="http://man.openbsd.org?query=pf&amp;sektion=4">pf(4)</a>.  <li>Add per-uid filtering to <a href="http://man.openbsd.org/?query=pf&amp;sektion=4">pf(4)</a>.
 <li>More <a href="http://man.openbsd.org?query=usb&amp;sektion=4">usb(4)</a> support updates.  <li>More <a href="http://man.openbsd.org/?query=usb&amp;sektion=4">usb(4)</a> support updates.
 <li>More <a href="http://man.openbsd.org?query=ubsec&amp;sektion=4">ubsec(4)</a>  <li>More <a href="http://man.openbsd.org/?query=ubsec&amp;sektion=4">ubsec(4)</a>
 hackery to get it to do more crypto operations, and hack  hackery to get it to do more crypto operations, and hack
 <a href="http://man.openbsd.org?query=hifn&amp;sektion=4">hifn(4)</a>  <a href="http://man.openbsd.org/?query=hifn&amp;sektion=4">hifn(4)</a>
 and  and
 <a href="http://man.openbsd.org?query=lofn&amp;sektion=4">lofn(4)</a>  <a href="http://man.openbsd.org/?query=lofn&amp;sektion=4">lofn(4)</a>
 to work with this.  to work with this.
 <li>Your average extensive cleaning of the installation scripts, adding functionality yet reducing size.  <li>Your average extensive cleaning of the installation scripts, adding functionality yet reducing size.
 <li>Fix <a href="http://man.openbsd.org?query=adb&amp;sektion=4&amp;arch=powerpc">adb(4)</a> french keyboard layout on macppc.  <li>Fix <a href="http://man.openbsd.org/?query=adb&amp;sektion=4&amp;arch=powerpc">adb(4)</a> french keyboard layout on macppc.
 <li>Switch ELF platforms to the native <a href="http://man.openbsd.org?query=gprof&amp;sektion=1">gprof(1)</a>.  <li>Switch ELF platforms to the native <a href="http://man.openbsd.org/?query=gprof&amp;sektion=1">gprof(1)</a>.
 <li>Obtain a better licence for the hppa spmath routines.  <li>Obtain a better licence for the hppa spmath routines.
 <li>Add an <a href="http://man.openbsd.org?query=url&amp;sektion=4">url(4)</a> driver for Realtek RTL8150L-based USB cards.  <li>Add an <a href="http://man.openbsd.org/?query=url&amp;sektion=4">url(4)</a> driver for Realtek RTL8150L-based USB cards.
 <li>mvme88k pmap bugfixes.  <li>mvme88k pmap bugfixes.
 <li>Various <a href="http://man.openbsd.org?query=usb&amp;sektion=4">usb(4)</a> driver updates.  <li>Various <a href="http://man.openbsd.org/?query=usb&amp;sektion=4">usb(4)</a> driver updates.
 <li>Remove <a href="http://man.openbsd.org?query=rlogin&amp;sektion=1&amp;manpath=OpenBSD+3.0">rlogin(1)</a>,  <li>Remove <a href="http://man.openbsd.org/?query=rlogin&amp;sektion=1&amp;manpath=OpenBSD+3.0">rlogin(1)</a>,
 <a href="http://man.openbsd.org?query=rlogind&amp;sektion=8&amp;manpath=OpenBSD+3.0">rlogind(8)</a> and  <a href="http://man.openbsd.org/?query=rlogind&amp;sektion=8&amp;manpath=OpenBSD+3.0">rlogind(8)</a> and
 <a href="http://man.openbsd.org?query=rexecd&amp;sektion=8&amp;manpath=OpenBSD+3.0">rexecd(8)</a>.  <a href="http://man.openbsd.org/?query=rexecd&amp;sektion=8&amp;manpath=OpenBSD+3.0">rexecd(8)</a>.
 <li>Fix several wrong computations in <a href="http://man.openbsd.org?query=newfs&amp;sektion=8">newfs(8)</a>.  <li>Fix several wrong computations in <a href="http://man.openbsd.org/?query=newfs&amp;sektion=8">newfs(8)</a>.
 <li>Workaround ghost pcibus detection in <a href="http://man.openbsd.org?query=pchb&amp;sektion=4">pchb(4)</a>.  <li>Workaround ghost pcibus detection in <a href="http://man.openbsd.org/?query=pchb&amp;sektion=4">pchb(4)</a>.
 <li>Add a tuner driver for the <a href="http://man.openbsd.org?query=fms&amp;sektion=4">fms(4)</a> radio cards.  <li>Add a tuner driver for the <a href="http://man.openbsd.org/?query=fms&amp;sektion=4">fms(4)</a> radio cards.
 <li>Allow userland to know which <a href="http://man.openbsd.org?query=pf&amp;sektion=4">pf(4)</a> rule created a specific state.  <li>Allow userland to know which <a href="http://man.openbsd.org/?query=pf&amp;sektion=4">pf(4)</a> rule created a specific state.
 <li>Prevent a 3.0 <a href="http://man.openbsd.org?query=wsmoused&amp;sektion=8&amp;arch=i386">wsmoused(8)</a> binary from panic'ing the kernel.  <li>Prevent a 3.0 <a href="http://man.openbsd.org/?query=wsmoused&amp;sektion=8&amp;arch=i386">wsmoused(8)</a> binary from panic'ing the kernel.
 <li>Enable privsep by default in <a href="http://man.openbsd.org?query=sshd&amp;sektion=8">sshd(8)</a>.  <li>Enable privsep by default in <a href="http://man.openbsd.org/?query=sshd&amp;sektion=8">sshd(8)</a>.
 <li>Fix <a href="http://man.openbsd.org?query=find&amp;sektion=1">find(1)</a>'s -anewer and -cnewer options behaviour.  <li>Fix <a href="http://man.openbsd.org/?query=find&amp;sektion=1">find(1)</a>'s -anewer and -cnewer options behaviour.
 <li>Sprinkle ptrdiff_t and size_t types instead of int all over the tree.  <li>Sprinkle ptrdiff_t and size_t types instead of int all over the tree.
 <li>Support LBA48 addressing in <a href="http://man.openbsd.org?query=wdc&amp;sektion=4">wdc(4)</a>.  <li>Support LBA48 addressing in <a href="http://man.openbsd.org/?query=wdc&amp;sektion=4">wdc(4)</a>.
 <li>Bring back TURBOchannel alpha hardware support.  <li>Bring back TURBOchannel alpha hardware support.
 <li>Fix a slightly incorrect behaviour of the device cloning in UKC (<a href="http://man.openbsd.org?query=boot_config&amp;sektion=8">boot_config(8)</a>).  <li>Fix a slightly incorrect behaviour of the device cloning in UKC (<a href="http://man.openbsd.org/?query=boot_config&amp;sektion=8">boot_config(8)</a>).
 <li><font color="#e00000"><strong>SECURITY FIX: cause the <a href="http://man.openbsd.org?query=exec&amp;sektion=3">exec(3)</a> to fail if we are unable to allocate resources when dup-ing <a href="http://man.openbsd.org?query=null&amp;sektion=4">/dev/null(4)</a> to <a href="http://man.openbsd.org?query=fd&amp;sektion=4">fd(4)</a>'s 0-2 for setuid programs.</strong></font><br>  <li><font color="#e00000"><strong>SECURITY FIX: cause the <a href="http://man.openbsd.org/?query=exec&amp;sektion=3">exec(3)</a> to fail if we are unable to allocate resources when dup-ing <a href="http://man.openbsd.org/?query=null&amp;sektion=4">/dev/null(4)</a> to <a href="http://man.openbsd.org/?query=fd&amp;sektion=4">fd(4)</a>'s 0-2 for setuid programs.</strong></font><br>
     <a href="errata31.html#fdalloc2">A source code patch is available</a>.<br>      <a href="errata31.html#fdalloc2">A source code patch is available</a>.<br>
     <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>      <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
 <li>Extended Attributes code updates.  <li>Extended Attributes code updates.
 <li>Improve PS/2 mouse port detection in <a href="http://man.openbsd.org?query=pckbc&amp;sektion=4">pckbc(4)</a>.  <li>Improve PS/2 mouse port detection in <a href="http://man.openbsd.org/?query=pckbc&amp;sektion=4">pckbc(4)</a>.
 <li>Better <a href="http://man.openbsd.org?query=hifn&amp;sektion=4">hifn(4)</a> initialisation and memory usage.  <li>Better <a href="http://man.openbsd.org/?query=hifn&amp;sektion=4">hifn(4)</a> initialisation and memory usage.
 <li>Extensive cleaning of the installation scripts, adding functionality yet reducing size. No, you're not having a deja vu.  <li>Extensive cleaning of the installation scripts, adding functionality yet reducing size. No, you're not having a deja vu.
 <li>Fix ethernet interrupt level on sparc, and rework the sparc interrupt framework.  <li>Fix ethernet interrupt level on sparc, and rework the sparc interrupt framework.
 <li>Better color depth detection in Xwsfb.  <li>Better color depth detection in Xwsfb.
 <li>64-bit fixes in <a href="http://man.openbsd.org?query=vmstat&amp;sektion=8">vmstat(8)</a>.  <li>64-bit fixes in <a href="http://man.openbsd.org/?query=vmstat&amp;sektion=8">vmstat(8)</a>.
 <li>Improve dma processing in <a href="http://man.openbsd.org?query=bge&amp;sektion=4">bge(4)</a>.  <li>Improve dma processing in <a href="http://man.openbsd.org/?query=bge&amp;sektion=4">bge(4)</a>.
 <li><strong>RELIABILITY FIX: constrain readdirplus request count in the <a href="http://man.openbsd.org?query=mount_nfs&amp;sektion=8">nfs(8)</a> filesystem.</strong><br>  <li><strong>RELIABILITY FIX: constrain readdirplus request count in the <a href="http://man.openbsd.org/?query=mount_nfs&amp;sektion=8">nfs(8)</a> filesystem.</strong><br>
     <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>      <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
 <li>Switch macppc console from the rcons engine to the rasops engine.  <li>Switch macppc console from the rcons engine to the rasops engine.
 <li>Extensive cleaning of the installation scripts, adding functionality yet reducing size. Yes, once again.  <li>Extensive cleaning of the installation scripts, adding functionality yet reducing size. Yes, once again.
 <li>Add IEEE754 floating point completion code on alpha.  <li>Add IEEE754 floating point completion code on alpha.
 <li>Improve dma processing in <a href="http://man.openbsd.org?query=gx&amp;sektion=4">gx(4)</a>.  <li>Improve dma processing in <a href="http://man.openbsd.org/?query=gx&amp;sektion=4">gx(4)</a>.
 <li>Build the XFree86 GLX extension on sparc64.  <li>Build the XFree86 GLX extension on sparc64.
 <li>Hunt for outdated prototypes for character devices entry points and fix them.  <li>Hunt for outdated prototypes for character devices entry points and fix them.
 <li>Switch mvme88k to the new <a href="http://man.openbsd.org?query=MAKEDEV&amp;sektion=8&amp;arch=mvme88k">MAKEDEV(8)</a> generation framework.  <li>Switch mvme88k to the new <a href="http://man.openbsd.org/?query=MAKEDEV&amp;sektion=8&amp;arch=mvme88k">MAKEDEV(8)</a> generation framework.
 <li>Implement the -s option in <a href="http://man.openbsd.org?query=m4&amp;sektion=1">m4(1)</a>, for it to be POSIX-compliant.  <li>Implement the -s option in <a href="http://man.openbsd.org/?query=m4&amp;sektion=1">m4(1)</a>, for it to be POSIX-compliant.
 <li>Kill all mvme68k kernel compilation warnings.  <li>Kill all mvme68k kernel compilation warnings.
 <li>Assorted mac68k code cleanups.  <li>Assorted mac68k code cleanups.
 <li>Shared key support in hostap mode in <a href="http://man.openbsd.org?query=wi&amp;sektion=4">wi(4)</a>.  <li>Shared key support in hostap mode in <a href="http://man.openbsd.org/?query=wi&amp;sektion=4">wi(4)</a>.
 <li>Make Xwsfb support <a href="http://man.openbsd.org?query=tga&amp;sektion=4&amp;arch=alpha">tga(4)</a> cards on alpha.  <li>Make Xwsfb support <a href="http://man.openbsd.org/?query=tga&amp;sektion=4&amp;arch=alpha">tga(4)</a> cards on alpha.
 <li>Fix a lock leak in <a href="http://man.openbsd.org?query=ami&amp;sektion=4">ami(4)</a>.  <li>Fix a lock leak in <a href="http://man.openbsd.org/?query=ami&amp;sektion=4">ami(4)</a>.
 <li><font color="#e00000"><strong>SECURITY FIX: update <a href="http://man.openbsd.org?query=sudo&amp;sektion=8">sudo(8)</a> to sudo 1.6.6.</strong></font><br>  <li><font color="#e00000"><strong>SECURITY FIX: update <a href="http://man.openbsd.org/?query=sudo&amp;sektion=8">sudo(8)</a> to sudo 1.6.6.</strong></font><br>
     <a href="errata31.html#sudo">A source code patch is available</a>.<br>      <a href="errata31.html#sudo">A source code patch is available</a>.<br>
     <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>      <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
 <li><strong>RELIABILITY FIX: avoid buffer overrun on PASV from a malicious server in <a href="http://man.openbsd.org?query=ftp&amp;sektion=1">ftp(1)</a>.</strong><br>  <li><strong>RELIABILITY FIX: avoid buffer overrun on PASV from a malicious server in <a href="http://man.openbsd.org/?query=ftp&amp;sektion=1">ftp(1)</a>.</strong><br>
     <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>      <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
 <li>Add a Soundforte radio driver, <a href="http://man.openbsd.org?query=sfr&amp;sektion=4&amp;arch=i386">sfr(4)</a>.  <li>Add a Soundforte radio driver, <a href="http://man.openbsd.org/?query=sfr&amp;sektion=4&amp;arch=i386">sfr(4)</a>.
 <li>Add dynamic interface -&gt; address translation in <a href="http://man.openbsd.org?query=pf&amp;sektion=4">pf(4)</a>.  <li>Add dynamic interface -&gt; address translation in <a href="http://man.openbsd.org/?query=pf&amp;sektion=4">pf(4)</a>.
 <li>Add kernel hooks on ethernet interfaces, triggered by address changes.  <li>Add kernel hooks on ethernet interfaces, triggered by address changes.
 <li>Extended Attributes code updates.  <li>Extended Attributes code updates.
 <li>Enable the Freetype library on sparc64.  <li>Enable the Freetype library on sparc64.
 <li>Add queuing in the kernel crypto framework.  <li>Add queuing in the kernel crypto framework.
 <li>Make the system includes C++ friendly.  <li>Make the system includes C++ friendly.
 <li>Allow explicit filtering of non-reassembled fragments in <a href="http://man.openbsd.org?query=pf&amp;sektion=4">pf(4)</a>.  <li>Allow explicit filtering of non-reassembled fragments in <a href="http://man.openbsd.org/?query=pf&amp;sektion=4">pf(4)</a>.
 <li>Support more hardware and fix stability issues in the mac68k <a href="http://man.openbsd.org?query=sn&amp;sektion=4&amp;arch=mac68k">sn(4)</a> network driver.  <li>Support more hardware and fix stability issues in the mac68k <a href="http://man.openbsd.org/?query=sn&amp;sektion=4&amp;arch=mac68k">sn(4)</a> network driver.
 <li>Improved Lithuanian keyboard map for <a href="http://man.openbsd.org?query=wscons&amp;sektion=4">wscons(4)</a>.  <li>Improved Lithuanian keyboard map for <a href="http://man.openbsd.org/?query=wscons&amp;sektion=4">wscons(4)</a>.
 <li><font color="#e00000"><strong>SECURITY FIX: fix a buffer overflow in AFS/Kerberos token handling in <a href="http://man.openbsd.org?query=sshd&amp;sektion=8">sshd(8)</a>, and send a complete ticket.</strong></font><br>  <li><font color="#e00000"><strong>SECURITY FIX: fix a buffer overflow in AFS/Kerberos token handling in <a href="http://man.openbsd.org/?query=sshd&amp;sektion=8">sshd(8)</a>, and send a complete ticket.</strong></font><br>
     <a href="errata31.html#sshafs">A source code patch is available</a>.<br>      <a href="errata31.html#sshafs">A source code patch is available</a>.<br>
     <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>      <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
 <li>Fix a memory leak in <a href="http://man.openbsd.org?query=mg&amp;sektion=1">mg(1)</a>.  <li>Fix a memory leak in <a href="http://man.openbsd.org/?query=mg&amp;sektion=1">mg(1)</a>.
 <li>Assorted hppa memory management fixes.  <li>Assorted hppa memory management fixes.
 <li>Allow fractional delays in <a href="http://man.openbsd.org?query=top&amp;sektion=1">top(1)</a>.  <li>Allow fractional delays in <a href="http://man.openbsd.org/?query=top&amp;sektion=1">top(1)</a>.
 <li>Enable upgrade functionality again on alpha installation media.  <li>Enable upgrade functionality again on alpha installation media.
 <li>Extensive cleaning of the installation scripts, adding functionality yet reducing size.  <li>Extensive cleaning of the installation scripts, adding functionality yet reducing size.
 <li>Make <a href="http://man.openbsd.org?query=cvs&amp;sektion=1">cvs(1)</a> create the .cvspass file on a login operation if it does not exist, rather than failing.  <li>Make <a href="http://man.openbsd.org/?query=cvs&amp;sektion=1">cvs(1)</a> create the .cvspass file on a login operation if it does not exist, rather than failing.
 <li>Extend mac68k disklabels to 16 partitions, like all the other platforms.  <li>Extend mac68k disklabels to 16 partitions, like all the other platforms.
 <li>Add cddb support to <a href="http://man.openbsd.org?query=cdio&amp;sektion=1">cdio(1)</a>.  <li>Add cddb support to <a href="http://man.openbsd.org/?query=cdio&amp;sektion=1">cdio(1)</a>.
 <li>Support more network cards with the <a href="http://man.openbsd.org?query=dc&amp;sektion=4">dc(4)</a> driver.  <li>Support more network cards with the <a href="http://man.openbsd.org/?query=dc&amp;sektion=4">dc(4)</a> driver.
 <li>Improve sparc pmap behaviour in some low memory conditions.  <li>Improve sparc pmap behaviour in some low memory conditions.
 <li>sendmail 8.13.  <li>sendmail 8.13.
 <li>Switch mvme68k to the new <a href="http://man.openbsd.org?query=MAKEDEV&amp;sektion=8&amp;arch=mvme68k">MAKEDEV(8)</a> generation framework.  <li>Switch mvme68k to the new <a href="http://man.openbsd.org/?query=MAKEDEV&amp;sektion=8&amp;arch=mvme68k">MAKEDEV(8)</a> generation framework.
 <li>Improve the library logic in <a href="http://man.openbsd.org?query=ld&amp;sektion=1">ld(1)</a> to increase speed and decrease memory usage on a.out platforms.  <li>Improve the library logic in <a href="http://man.openbsd.org/?query=ld&amp;sektion=1">ld(1)</a> to increase speed and decrease memory usage on a.out platforms.
 <li>New mvme68k installation media.  <li>New mvme68k installation media.
 <li>Change fpu probe routine on mac68k.  <li>Change fpu probe routine on mac68k.
 <li>Fix an obscure bug in <a href="http://man.openbsd.org?query=sed&amp;sektion=1">sed(1)</a>.  <li>Fix an obscure bug in <a href="http://man.openbsd.org/?query=sed&amp;sektion=1">sed(1)</a>.
 <li>Support more wireless cards with the <a href="http://man.openbsd.org?query=wi&amp;sektion=4">wi(4)</a> driver, and fix a few issues within.  <li>Support more wireless cards with the <a href="http://man.openbsd.org/?query=wi&amp;sektion=4">wi(4)</a> driver, and fix a few issues within.
 <li>Fix 64-bit issues in <a href="http://man.openbsd.org?query=pfctl&amp;sektion=8">pfctl(8)</a>.  <li>Fix 64-bit issues in <a href="http://man.openbsd.org/?query=pfctl&amp;sektion=8">pfctl(8)</a>.
 <li>Remove the <a href="http://man.openbsd.org?query=wx&amp;sektion=4&amp;manpath=OpenBSD+3.0">wx(4)</a> driver,  <li>Remove the <a href="http://man.openbsd.org/?query=wx&amp;sektion=4&amp;manpath=OpenBSD+3.0">wx(4)</a> driver,
 which had been deprecated in favor of the <a href="http://man.openbsd.org?query=gx&amp;sektion=4">gx(4)</a> driver.  which had been deprecated in favor of the <a href="http://man.openbsd.org/?query=gx&amp;sektion=4">gx(4)</a> driver.
 </ul>  </ul>
 <p>  <p>
   
Legend:
Removed from v.1.51  
changed lines
  Added in v.1.52