www/plus34.html - diff

Return to plus34.html CVS log

Up to [local] / www

Diff for /www/plus34.html between version 1.4 and 1.5

version 1.4, 2004/02/19 03:30:52

version 1.5, 2004/03/28 09:44:05

Line 81

<li>Allocate enough space for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sysctl&sektion=3">sysctl(3)</a> in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pstat&sektion=8">pstat(8)</a>.

<li>Fix the endianness of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcpdump&sektion=8">tcpdump(8)</a>'s icmp echo output.

<li>Match up kernel and userland ioctls for AFS, allowing <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=afsd&sektion=8">afsd(8)</a> to turn on kernel debugging (PR#3442.)

<li>Match up kernel and userland ioctls for AFS, allowing <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=afsd&sektion=8">afsd(8)</a> to turn on kernel debugging (PR#3442).

<li>Mirror the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=crypto&sektion=9">crypto(9)</a> sha2 context fix in libc <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sha2&sektion=3">sha2(3)</a>.

<li>Make an invalid '-<num>' option to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=diff&sektion=1">diff(1)</a> give an error.

Line 89

<li>Resurrect the -u<num> unified context length syntax for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=diff&sektion=1">diff(1)</a>.

<li>Use more bytes of the file when testing for binary in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=grep&sektion=1">grep(1)</a>.

<li>Test more than just the first character of the input file for ASCIIness in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=diff&sektion=1">diff(1)</a>.

<li>Stop <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pppctl&sektion=8">pppctl(8)</a> coredumping (PR#3454.)

<li>Stop <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pppctl&sektion=8">pppctl(8)</a> coredumping (PR#3454).

<li>Fix i386 hang on 'boot -a' (PR#2122, PR#3437.)

<li>Fix i386 hang on 'boot -a' (PR#2122, PR#3437).

<li>Have the upgrader script perform the ssl -> openssl includes dir change, both in /usr/include and /usr/libdata/perl5/site_perl/*-openbsd.

<li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=strxfrm&sektion=3">strxfrm(3)</a> standards-compliant.

Line 98

<li>Add a wi_detach() function for, uh, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wi&sektion=4">wi(4)</a> and use it to shut down PC cards properly.

<li>Sync <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf.os&sektion=5">pf.os(5)</a> database with <a href="http://lcamtuf.coredump.cx/p0f.shtml">p0f</a> 2.0 release.

<li>Allow <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=compress&sektion=1">compress(1)</a> to read from a symlink when writing to stdout (PR#3409.)

<li>Allow <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=compress&sektion=1">compress(1)</a> to read from a symlink when writing to stdout (PR#3409).

<li>Only trigger the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=gcc&sektion=1">gcc(1)</a> bounds checker warning if the bounds length is less than zero, since some legal code uses the zero case.

<li>Fix some bugs in the pkg_* tools (PR#3414.)

<li>Fix some bugs in the pkg_* tools (PR#3414).

<li>Don't leak a socket in the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a> setsockopt error path.

<li>Add a SMALL define in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=compress&sektion=1">compress(1)</a> that leaves out bits not needed by the installer.

<li>Add a null compressor to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=compress&sektion=1">compress(1)</a> so gzcat and friends can work on uncompressed files.

<li>Fix a FILE* leak in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sup&sektion=1">sup(1)</a>.

<li>Fix a crasher in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=netstat&sektion=1">netstat(1)</a> by adding descriptions for icmp types up to ICMP_MAXTYPE (PR#3439.)

<li>Fix a crasher in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=netstat&sektion=1">netstat(1)</a> by adding descriptions for icmp types up to ICMP_MAXTYPE (PR#3439).

<li>Correct some <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ld.so&sektion=1">ld.so(1)</a> logic so that the GOT and PLT always get W^X applied.

<li>Add a GOT symbol lookup cache to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ld.so&sektion=1">ld.so(1)</a>.

<li>A few more bzero(sizeof pointer) fixes.

<li>Temp file security fixes for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sup&sektion=1">sup(1)</a>.

<li>Add dummy syscalls under Linux emulation for *xattr(), all returning ENOATTR.

<li>Make the small window size feature of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=spamd&sektion=8">spamd(8)</a> optional (see PR#3435.)

<li>Make the small window size feature of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=spamd&sektion=8">spamd(8)</a> optional (see PR#3435).

<li>Plug memory leaks in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=lpd&sektion=8">lpd(8)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=lpq&sektion=1">lpq(1)</a> (PR#3425.)

<li>Plug memory leaks in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=lpd&sektion=8">lpd(8)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=lpq&sektion=1">lpq(1)</a> (PR#3425).

<li>Fix sizeof(pointer) <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bzero&sektion=3">bzero(3)</a> args in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=crypto&sektion=9">crypto(9)</a> sha2 code.

<li>Add Broadcom BC5823 crypto accelerator support to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ubsec&sektion=4">ubsec(4)</a>.

Line 135

<li>Fix a use-after-free in libutil <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=check_expire&sektion=3">check_expire(3)</a>.

<li>Bump OpenSSH version to 3.7.

<a href="stable.html">[Applied to stable]</a>

<li>Fix symbol lookup in objects opened with <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dlopen&sektion=3">dlopen(3)</a> (PR#3371.)

<li>Fix symbol lookup in objects opened with <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dlopen&sektion=3">dlopen(3)</a> (PR#3371).

<li>Add Solaris-compatible RTLD_* defines in <dlfch.h>.

<li>Fix a memory leak in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a> GSSAPI authentication.

Line 179

<li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=afsd&sektion=8">afsd(8)</a> crashes on alignment-sensitive architectures.

<li>Do a dummy password calculation for nonexistent usernames in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a>, to prevent username discovery by timing.

<li>Add new <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=route&sektion=4">route(4)</a> flag RTF_CLONED (displayed with a 'c' in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=netstat&sektion=1">netstat(1)</a>,) set for cloned routes and used to delete such routes when the parent goes away.

<li>Don't insert the full <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=gcc&sektion=1">gcc(1)</a> string into objects by default (see -findent in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=gcc-local&sektion=1">gcc-local(1)</a>.)

<li>Have <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&sektion=8">pfctl(8)</a> disallow return-rst ttl values greater than 255.

<li>Add an interface init routine to struct ifnet, required for 802.11 support.

Line 190

<li>Stop <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&sektion=8">pfctl(8)</a> rejecting perfectly legitimate nat-with-tables rules.

<li>When tables are used in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> routing rules with address pools, only allow round-robin mode.

<li>Structure and defines for generic IEEE 802.11 framework.

<li>'Implement' <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pread&sektion=2">pread(2)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pwrite&sektion=2">pwrite(2)</a> under FreeBSD emulation (they're identical to the native calls.)

<li>In the installer, if an interface is configured using DHCP then assume that the default route is via DHCP also.

<li>Improvements to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=spamd&sektion=8">spamd(8)</a>:<ul>

Line 255

<li>In the kernel, change arguments to suser(), and add new suser_ucred() for instances where caller doesn't have a process.

<li>New -S option to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pkg_create&sektion=1">pkg_create(1)</a>, like -s only better.

<li>Zero out unused directory entry fields on FAT12 and FAT16 filesystems, to avoid breakage on Win2k and WinXP (PR#3400.)

<li>Zero out unused directory entry fields on FAT12 and FAT16 filesystems, to avoid breakage on Win2k and WinXP (PR#3400).

<li>Add a bunch more syscall stubs and implement exit_group() under Linux emulation. Needed for newer glibc binaries.

<li>Fix wrongness, memory leakage and a panic on directory reads in other-OS emulation mode on some filesystems.

<li>Have <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh-keygen&sektion=1">ssh-keygen(1)</a> exit nicely after screening candidate primes (-T option.)

<li>Have <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh-keygen&sektion=1">ssh-keygen(1)</a> exit nicely after screening candidate primes (-T option).

<li>Much cleanup in the new <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=safe&sektion=4">safe(4)</a> driver.

<li>Add the POSIX-mandated struct itimerspec to sys/time.h .

Line 274

<li>Merge in xfs from the ARLA-current as of 20030805.

<li>Stop <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pkg_create&sektion=1">pkg_create(1)</a> erasing the last checksum from CONTENTS.

<li>Kill a panic when creating a block device on a full filesystem (NetBSD <a href="http://www.netbsd.org/cgi-bin/query-pr-single.pl?number=22419">PR#22419</a>.)

<li>Kill a panic when creating a block device on a full filesystem (NetBSD <a href="http://www.netbsd.org/cgi-bin/query-pr-single.pl?number=22419">PR#22419</a>).

<a href="stable.html">[Applied to stable]</a>

<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ftp&sektion=1">ftp(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rsh&sektion=1">rsh(1)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=talk&sektion=1">talk(1)</a> now use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=poll&sektion=2">poll(2)</a> instead of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=select&sektion=2">select(2)</a>.

<li>Unbreak <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> DIOCCHANGEADDR.

Line 328

<li>New, BSD-licensed <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=znew&sektion=1">znew(1)</a> script.

<li>Properly check the result of attempts to read from and write to processes in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pmdb&sektion=1">pmdb(1)</a>.

<li>Stop <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ksh&sektion=1">ksh(1)</a>'s Emacs mode yank-pop command dumping core when run twice (PR#3384.)

<li>Stop <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ksh&sektion=1">ksh(1)</a>'s Emacs mode yank-pop command dumping core when run twice (PR#3384).

<li>Correct emulation of Linux ftruncate64().

<li>SECURITY FIX: An off-by-one error exists in the C library function <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=realpath&sektion=3">realpath(3)</a>. Since this same bug resulted in a root compromise in the wu-ftpd ftp server it is possible that this bug may allow an attacker to gain escalated privileges on OpenBSD.

Line 347

<li>Privilege separation for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=syslogd&sektion=8">syslogd(8)</a>. Note new HUP behaviour.

<li>Have <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=patch&sektion=1">patch(1)</a> complain about non-existent lines at most once per patch.

<li>Make sure <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&sektion=8">pfctl(8)</a> doesn't attempt to display no-longer-existent queues.

<li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a>, check that password authentication is enabled before trying to authenticate users using the 'none' method (i.e. a blank password.)

<li>Add a new, BSD-licensed <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=gzexe&sektion=1">gzexe(1)</a>.

<li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=diff&sektion=1">diff(1)</a> exit codes when comparing against stdin.

Line 363

<li>Better TMPDIR environment variable handling in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=patch&sektion=1">patch(1)</a>.

<li>Improved test for output on stdout in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=compress&sektion=1">compress(1)</a>.

<li>New <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> progress meter implementation, with better licensing.

<li>Add 'pass on lo' to the temporary boottime <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf.conf&sektion=5">pf.conf(5)</a> (PR#3376.)

<li>Add 'pass on lo' to the temporary boottime <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf.conf&sektion=5">pf.conf(5)</a> (PR#3376).

<li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ftp-proxy&sektion=8">ftp-proxy(8)</a>'s handling of multiline server responses (PR#3378.)

<li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ftp-proxy&sektion=8">ftp-proxy(8)</a>'s handling of multiline server responses (PR#3378).

<li>Add a new, BSD-licensed <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=zforce&sektion=1">zforce(1)</a> script.

<li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=compress&sektion=1">compress(1)</a> do the right thing when confronted with (e.g.) 'gzip -lN < foo.gz'.

<li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=compress&sektion=1">compress(1)</a> do the right thing when confronted with (e.g). 'gzip -lN < foo.gz'.

<li>Another missing netinet byte-order fixup, this time in fragment reassembly code.

<li>Fix a printf(%s) off-by-one in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a>.

<li>Improvements to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> skip-step calculation.

Line 376

<li>Remove unlicensed MATH_EMULATE code (written by some guy named Torvalds) from the kernel, leaving only the GNU emulation code for the moment.

<li>Don't treat consecutive slashes as path components in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=patch&sektion=1">patch(1)</a>, for POSIX reasons.

<li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=patch&sektion=1">patch(1)</a>'s exit value consistent with POSIX and with <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=diff&sektion=1">diff(1)</a>.

<li>Add <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mbuf&sektion=9">mbuf(9)</a> markup (M_TUNNEL) for tunnel-mode IPsec connections so that <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=gif&sektion=4">gif(4)</a> over IPsec can be detected and unencapsulated consistently (PR#3023.)

<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh-keygen&sektion=1">ssh-keygen(1)</a> can now generate the Diffie-Hellman groups as needed by <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=moduli&sektion=5">moduli(5)</a>.

<li>If <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=compress&sektion=1">compress(1)</a> detects that compressed output would be larger than the input, fail so that the .gz file gets removed.

Line 400

<li>Fix IP packet length setting for IPsec tunnels, lost in recent byte order changes.

<li>Add sha2 support for IPsec.

<li>Add _syslogd user for, um, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=syslogd&sektion=8">syslogd(8)</a>, soon to get the privsep treatment.

<li>Allow the kernel to build with inet enabled but ether disabled (PR#3356.)

<li>Allow the kernel to build with inet enabled but ether disabled (PR#3356).

<li>New APIWARN libc/Makefile define, disabled by default, which makes the linker complain whenever unsafe string functions are used.

<li>Move nasty SCSI utility code out of libutil and into <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=scsi&sektion=8">scsi(8)</a>, the only place it's used.

Line 429

<li>Add <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ftw&sektion=3">ftw(3)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=nftw&sektion=3">nftw(3)</a> functions, implemented using <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fts&sektion=3">fts(3)</a>, for XPG compliance.

<li>Dynamically grow <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=diff&sektion=1">diff(1)</a>'s array of changes as required.

<li>Fix a redraw bug in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=vi&sektion=1">vi(1)</a> that could cause endless recursion.

<li>Compile <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=modload&sektion=8">modload(8)</a> with the -Z option to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ld&sektion=1">ld(1)</a> (disabling W^X.)

<li>Fix a typo in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=md5&sektion=1">md5(1)</a> that created an array of ints instead of chars.

<li>Allow <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=uhid&sektion=4">uhid(4)</a> devices to be used as 'mice' for the X server.

<li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wd&sektion=4">wd(4)</a> only use LBA48 when absolutely necessary, to cut down on register-writing overhead.

<li>Have <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ac&sektion=8">ac(8)</a> ignore entries that go back in time.

<li>Fix a bug causing a segfault in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=grep&sektion=1">grep(1)</a> (PR#3358.)

<li>Fix a bug causing a segfault in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=grep&sektion=1">grep(1)</a> (PR#3358).

<li>With MALLOC_EXTRA_SANITY defined, have <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=malloc&sektion=3">malloc(3)</a> just warn instead of dying on <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mmap&sektion=2">mmap(2)</a>/<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=brk&sektion=2">brk(2)</a> errors.

<li>Updates to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=systrace&sektion=1">systrace(1)</a>: Bug fixes and new 'ask' action.

<li>Fix sftp filename parsing for arguments with escaped quotes (OpenSSH bug <a href="http://bugzilla.mindrot.org/show_bug.cgi?id=517">#517</a>.)

<li>Fix sftp filename parsing for arguments with escaped quotes (OpenSSH bug <a href="http://bugzilla.mindrot.org/show_bug.cgi?id=517">#517</a>).

<li>Don't flip <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=compress&sektion=1">compress(1)</a> into 'zcat' mode if the -o option is given.

<li>Check that the mountpoint of the descriptor passed to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fstatfs&sektion=2">fstatfs(2)</a> is non-NULL.

Line 447

<li>GNU diff compatibility and many other fixes and cleanups to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=diff&sektion=1">diff(1)</a>.

<li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> scrub rule fragment reassembly after the netinet byte order changes.

<li>Add ESP decryption support to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcpdump&sektion=8">tcpdump(8)</a> (-E option.)

<li>Add ESP decryption support to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcpdump&sektion=8">tcpdump(8)</a> (-E option).

<li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=diff&sektion=1">diff(1)</a>'s no-newline-at-end-of-file handling consistent with GNU diff, now that <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=patch&sektion=1">patch(1)</a> is expecting this.

<li>Fix a sizeof(wrongthing) bug in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=grep&sektion=1">grep(1)</a>.

<li>Teach <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=patch&sektion=1">patch(1)</a> how to deal with "\ No newline at end of file" as produced by GNU diff (and soon OpenBSD <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=diff&sektion=1">diff(1)</a> as well.) From NetBSD.

<li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=newfs&sektion=8">newfs(8)</a>, remove the ffs default limit of 16 cylinders per group, and simply set to match other parameters. Change the default frag size to 2048, which bumps the block size to 16k. (From FreeBSD newfs.c late 2001.)

<li>React rationally to bogus line numbers in input to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=patch&sektion=1">patch(1)</a>.

<li>Don't store Kerberos credentials in the privileged <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a> process.

Line 468

<li>Range-check numeric arguments to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=grep&sektion=1">grep(1)</a> against INT_MAX.

<li>Un-swap the sec and usec uptime stats in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=an&sektion=4">an(4)</a>.

<li>Fix file suffix handling code in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=compress&sektion=1">compress(1)</a>.

<li>Allow <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=compress&sektion=1">compress(1)</a> to accept -t and an implied -c when we're taking piped input (normally -t and -c are mutually exclusive.)

<li>Enable build of KerberosV libraries under lib/.

<li>More manpage cleanup.

<li>Remove undocumented <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a> option '-V'.

Line 485

<li>Make sure an unlock message gets sent when handing NFS receive errors.

<li>Add a cast to 64 bits to prevent a <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=statfs&sektion=2">statfs(2)</a> overflow on large disks.

<li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=grep&sektion=1">grep(1)</a>'s -v semantics (print if no match of any pattern.)

<li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=grep&sektion=1">grep(1)</a>'s -v semantics (print if no match of any pattern).

<li>LBA48 support and compatibility tweaks for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=atactl&sektion=8">atactl(8)</a>.

<li>Set the correct return code when <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=grep&sektion=1">grep(1)</a> dies due to an error.

<li>Fix parsing of -<num> (context) option to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=grep&sektion=1">grep(1)</a>.

Line 507

<li>Give <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=gem&sektion=4">gem(4)</a> a performance boost on sparc64 and macppc.

<li>Merge in libevent 0.7a.

<li>New 'remove manpage' option -u to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=makewhatis&sektion=8">makewhatis(8)</a>.

<li>Fix a dangling pointer when deleting multicast router virtual interfaces (option MROUTING required.)

<li>Fix a dangling pointer when deleting multicast router virtual interfaces (option MROUTING required).

<li>Fix some PHY problems in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sis&sektion=4">sis(4)</a>.

<li>Better temp file handling in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=diff&sektion=1">diff(1)</a>.

<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=diff&sektion=1">diff(1)</a>'s -l (paginate) option works again.

Line 528

<li>Pass the right length to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=readlink&sektion=2">readlink(2)</a> in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rdist&sektion=1">rdistd(1)</a>.

<li>When given a unix domain socket name that's too long, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=nc&sektion=1">nc(1)</a> gives a helpful error instead of silently truncating the name.

<li>Implement the cpuid() function for generic i386, not just for longrun.

<li>Print <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dump&sektion=8">dump(8)</a> times correctly (PR#3296.)

<li>Print <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dump&sektion=8">dump(8)</a> times correctly (PR#3296).

<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=raidctl&sektion=8">raidctl(8)</a> dies noisily instead of silently truncating overlong command line options.

<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mount_nfs&sektion=8">mount_nfs(8)</a> now gives a helpful message when the hostname is too long.

Line 570

<li>Under-the-hood improvements to speed up <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=m4&sektion=1">m4(1)</a>.

<li>Add some buffer management functions for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> tables.

<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=unifdef&sektion=1">unifdef(1)</a> fixes from FreeBSD.

<li>Reset <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> interface statistics when the loginterface is changed (PR#3332.)

<li>Reset <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> interface statistics when the loginterface is changed (PR#3332).

<li>Properly purge <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> tags when flushing <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bridge&sektion=4">bridge(4)</a> filter rules.

<li>Don't generate an icmp6 redirect if <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> rewrote the destination address.

<li>Improve <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=compress&sektion=1">compress(1)</a>'s gzip compatibility with silly configure scripts that expect 'gzip -h' to return success.

Line 642

<li>Don't use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getopt&sektion=3">getopt(3)</a> in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=printf&sektion=1">printf(1)</a> since this causes formats beginning with a hyphen to be interpreted as flags.

<li>Add a simple <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=zmore&sektion=1">zmore(1)</a> script using <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=compress&sektion=1">compress(1)</a>.

<li>Add <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pcmcia&sektion=4">pcmcia(4)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wi&sektion=4">wi(4)</a> support for sparc.

<li>Install a host route for a point-to-point interface even if a connected net route via a broadcast interface exists (NetBSD PR 21903.)

<li>Install a host route for a point-to-point interface even if a connected net route via a broadcast interface exists (NetBSD PR 21903).

<li>Check for nfds<0 in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=poll&sektion=2">poll(2)</a>.

<li>Better temp file handling in XFree's <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=gccmakedep&sektion=1">gccmakedep(1)</a>.

<li>Temporarily work around a tables-related use-after-free in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a>.

Line 672

<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rpcgen&sektion=1">rpcgen(1)</a> now generates much prettier ANSI C code.

<li>Back out the recent <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xdm&sektion=1">xdm(1)</a> '-nolisten tcp' change.

<li>Plug some memory leaks in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=popa3d&sektion=8">popa3d(8)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=systrace&sektion=1">systrace(1)</a>.

<li>Strip the newline from user input when requesting a continuation filename in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=restore&sektion=8">restore(8)</a> (PR#3324.)

<li>Strip the newline from user input when requesting a continuation filename in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=restore&sektion=8">restore(8)</a> (PR#3324).

<li>Fix a bug that condemned <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fortune&sektion=6">fortune(6)</a> to be always inoffensive.

<li>Have <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bpf&sektion=4">bpf(4)</a> return ENOBUFS on <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=malloc&sektion=9">malloc(9)</a> failure instead of causing a panic (PR#2235,PR#2236,PR#2640.)

<li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=m4&sektion=1">m4(1)</a>'s handling of builtin and user macros more consistent, and allow pushdef to work for builtins.

<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xdm&sektion=1">xdm(1)</a> now passes '-nolisten tcp' to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=Xserver&sektion=1">Xserver(1)</a> by default for local display :0.

<li>Re-enable UDMA mode 5 for HPT370A <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pciide&sektion=4">pciide(4)</a> devices, now that timing and interrupt problems are fixed.

Line 684

<li>Properly display no-route addresses when expanding label macros in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&sektion=8">pfctl(8)</a>.

<li>Back out the recent <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> smartcard key fix, it violates PKCS#1.

<li>When the expansion of the $srcaddr or $dstaddr label macro is a table, have <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&sektion=8">pfctl(8)</a> print the table name instead of garbage.

<li>Unbreak <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=vmstat&sektion=8">vmstat(8)</a> on diskless machines (PR#3322.)

<li>Unbreak <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=vmstat&sektion=8">vmstat(8)</a> on diskless machines (PR#3322).

<li>Relax <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rtadvd.conf&sektion=5">rtadvd.conf(5)</a> syntax, removing the need for the addrs option.

<li>Use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getifaddrs&sektion=3">getifaddrs(3)</a> in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=amd&sektion=8">amd(8)</a>, fixing the 'wire' location selector.

<li>Return the correct error message if the user tries to kill a non-existent process from <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=top&sektion=1">top(1)</a>.

<li>Add a few missing dead-key composition entries (PR#3295, with an entry for cedilla as well as for double-quote.)

<li>Add a few missing dead-key composition entries (PR#3295, with an entry for cedilla as well as for double-quote).

<li>Avoid a null deref in cnkqfilter() (/dev/console <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=kqueue&sektion=2">kqueue(2)</a> crash, PR#3317.)

<li>Avoid a null deref in cnkqfilter() (/dev/console <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=kqueue&sektion=2">kqueue(2)</a> crash, PR#3317).

<li>Fix a logic bug in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mtree&sektion=8">mtree(8)</a> that was making -U return an error just like -u.

<li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh-add&sektion=1">ssh-add(1)</a> redisplay the key comment when prompting after a bad passphrase.

<li>Fix "bad decrypted len" errors in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> when using smartcard-stored public keys (OpenSSH bug <a href="http://bugzilla.mindrot.org/show_bug.cgi?id=592">592</a>.)

<li>Updates for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=systrace&sektion=1">systrace(1)</a>, support freeing of old policies and escaping of special characters.

<li>Better byte-swapping behaviour in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dc&sektion=4">dc(4)</a>, fixing mac address reads on big-endian architectures.

<li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhclient-script&sektion=8">dhclient-script(8)</a> fix up <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=resolv.conf&sektion=5">resolv.conf(5)</a>'s permissions.

Line 702

<li>Stop <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a> losing ID information when rekeying.

<li>Add new '-c class' option to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=encrypt&sektion=1">encrypt(1)</a>, which will use the login class to select the password cipher.

<li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=kqueue&sektion=2">kqueue(2)</a> on ptys (PR#3209.)

<li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=kqueue&sektion=2">kqueue(2)</a> on ptys (PR#3209).

<li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=user&sektion=8">user(8)</a>, only check login class validity when the login class is set.

<li>Fix some sizeof oopses in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=top&sektion=1">top(1)</a>.

<li>Allocate cleared memory for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a> payload buffers.

Line 711

<li>Add __LP64__ and _LP64 <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cpp&sektion=1">cpp(1)</a> predefined macros for alpha and sparc.

<li>Sync <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=em&sektion=4">em(4)</a> with FreeBSD updates and enable on sparc64.

<li>Add -0 (zero) flag to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pax&sektion=1">pax(1)</a> allowing the filename separator to be a NUL instead of a newline (PR#3310.)

<li>Add -0 (zero) flag to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pax&sektion=1">pax(1)</a> allowing the filename separator to be a NUL instead of a newline (PR#3310).

<li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xargs&sektion=1">xargs(1)</a>, don't close the descriptor we just created with <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dup2&sektion=2">dup2(2)</a>.

<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=security&sektion=8">security(8)</a> allows dots in usernames consistent with <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=user&sektion=8">user(8)</a> changes.

<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&sektion=8">pfctl(8)</a>'s show anchor command now respects the 'quiet' flag.

Line 743

<li>Add login class support (-class option) to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=adduser&sektion=8">adduser(8)</a>.

<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rmail&sektion=8">rmail(8)</a> now tells sendmail to deliver in the foreground.

<li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rmail&sektion=8">rmail(8)</a> pass the -G flag to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sendmail&sektion=8">sendmail(8)</a> as expected.

<li>Install <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rcs2log&sektion=1">rcs2log(1)</a> properly (PR#3298.)

<li>Install <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rcs2log&sektion=1">rcs2log(1)</a> properly (PR#3298).

<li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=user&sektion=8">user(8)</a> check that a login class exists before using it (PR#2699.)

<li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=user&sektion=8">user(8)</a> check that a login class exists before using it (PR#2699).

<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=user&sektion=8">user(8)</a> changes from NetBSD:

<ul>

<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=useradd&sektion=8">useradd(8)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=usermod&sektion=8">usermod(8)</a> now check that the encrypted password length is correct.

Line 789

<li>Teach distrib/special/more how to handle arbitrarily long lines and \r\n line endings.

<li>Set <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rusers&sektion=1">rusers(1)</a>' column width to 80 if stdout isn't a tty.

<li>Add generic '-fno-builtin-<function>' option to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=gcc&sektion=1">gcc(1)</a> (see <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=gcc-local&sektion=1">gcc-local(1)</a>.)

<li>Kill the parent <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> process when <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=scp&sektion=1">scp(1)</a> or <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sftp&sektion=1">sftp(1)</a> receive a signal (OpenSSH bug <a href="http://bugzilla.mindrot.org/show_bug.cgi?id=241">241</a>.)

<li>Only drop setgid privileges the once in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a>.

<li>Disable <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> challenge/response and keyboard-interactive authentication methods if there's a host key mismatch, to reduce the likelihood of MiTM attacks catching out ignorant users (OpenSSH bug <a href="http://bugzilla.mindrot.org/show_bug.cgi?id=580">580</a>.)

<li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=less&sektion=1">less(1)</a>'s --More-- prompt more --less--, less More, and more POSIX.

<li>Fix distrib/special/more on machines with unsigned chars.

<li>Simply and fix tty handing in /distrib/special/more.

Line 806

<li>Huge license cleanup all over the tree.

<li>Fix random lockups of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cac&sektion=4">cac(4)</a> devices.

<a href="stable.html">[Applied to stable]</a>

<li>Deprecate the dangerous VerifyReverseMapping <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a> option, and replace with new UseDNS option (enabled by default.)

<li>Deprecate the dangerous VerifyReverseMapping <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a> option, and replace with new UseDNS option (enabled by default).

<li>Install OpenSSL include files in /usr/include/openssl instead of ../ssl.

<li>Remove the advertising clause from many license statements.

<li>Use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getopt_long&sektion=3">getopt_long(3)</a> for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getopt&sektion=3">getopt(3)</a>, instead of the old implementation.

Line 851

<li>Install the mod_ssl headers under /usr/lib/apache/include/

<li>Add IPv6 support to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=trpt&sektion=8">trpt(8)</a>.

<li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xdm&sektion=1">xdm(1)</a>'s XDMCP queries (XFree86 bug <a href="http://bugs.xfree86.org/cgi-bin/bugzilla/show_bug.cgi?id=277">#277</a>.)

<li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xdm&sektion=1">xdm(1)</a>'s XDMCP queries (XFree86 bug <a href="http://bugs.xfree86.org/cgi-bin/bugzilla/show_bug.cgi?id=277">#277</a>).

<li>Unbreak <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> binat rules after recent netmask check changes.

<li>Improve <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&sektion=8">pfctl(8)</a>'s netmask validity check.

Line 890

<li>Don't build libperl in the libraries pass of 'make build', as we want Perl's configure to pick up details of the libraries that the build may be changing. Another leapfrog-in-waiting.

<li>Add regen target in libkrb5 to remove (again) the dependency on an up-to-date asn1_compile.

<li>Complain more consistently about a missing 80-wire IDE cable (for UDMA mode > 2.)

<li>Complain more consistently about a missing 80-wire IDE cable (for UDMA mode > 2).

<li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=syslogd&sektion=8">syslogd(8)</a> don't use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=strlcpy&sektion=3">strlcpy(3)</a> when printing strings out of struct utmp, since those strings aren't null terminated.

<li>Don't ARP for our IP address aliases, treat them as local.

<li>Merge in a number of USB SCSI device updates from NetBSD.

Line 911

<li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mg&sektion=1">mg(1)</a>'s up and down cursor movement.

<li>Have <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ksh&sektion=1">ksh(1)</a> use the libc <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dup2&sektion=2">dup2(2)</a> instead of its own.

<li>Fare thee well, Kerberos IV.

<li>Another big-bucks firewall feature performed by <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a>: TCP SYN proxy, enabled with 'synproxy state' (this implies modulate state.)

<li>New AddressFamily option for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> that works like the -4 and -6 command line options (portable OpenSSH <a href="http://bugzilla.mindrot.org/show_bug.cgi?id=534">bug 534</a>.)

<li>Allow address comparison in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wi&sektion=4">wi(4)</a> to work on sparc64.

<li>Prevent a <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=spamd-setup&sektion=8">spamd-setup(8)</a> crash with a config file consisting of only invalid input.

Line 938

<li>Remove the rather short-lived kernel option LONGRUN, it's now standard except SMALL_KERNEL is defined.

<li>Enable <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> tagging support for rdr and binat rules.

<li>Add _isakmpd user and group for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a> privsep.

<li>Allow <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> clients to send a BREAK to the remote server if it supports it (SSHv2 only.)

<li>Allow <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> clients to send a BREAK to the remote server if it supports it (SSHv2 only).

<li>Add _kdc and _kadmin users and groups for the respective KerberosV <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=kdc&sektion=8">kdc(8)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=kadmind&sektion=8">kadmind(8)</a> daemons.

<li>On i386, support Transmeta LongRun power management (kernel option LONGRUN, enabled by default.)

<li>On i386, support Transmeta LongRun power management (kernel option LONGRUN, enabled by default).

<li>Add a <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> tag for each rule that matches, not just the last one.

<li>Remove gated stuff from /etc/rc and /etc/rc.conf.

<li>Add experimental support for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> host key fingerprint verification using DNS records (dnsfp.) Not built by default. See src/usr.bin/ssh/README.dns for details and build instructions.

<li>Add experimental support for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> host key fingerprint verification using DNS records (dnsfp). Not built by default. See src/usr.bin/ssh/README.dns for details and build instructions.

<li>Unbreak <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=malloc&sektion=3">malloc(3)</a> map_pages() failure test on 64-bit architectures.

<li>Back out many recent <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a> changes until they're working right.

<li>Disable KerberosIV support in XFree.

<li>Make sure <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> privsep children die when the monitor parent goes away (OpenSSH <a href="http://bugzilla.mindrot.org/show_bug.cgi?id=560">bug 560</a>.)

<li>Upgrade <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pflogd&sektion=8">pflogd(8)</a> to use the new <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bpf&sektion=4">bpf(4)</a> link type too.

<li>Teach <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcpdump&sektion=8">tcpdump(8)</a> and libpcap about the new <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pflog&sektion=4">pflog(4)</a> link type in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bpf&sektion=4">bpf(4)</a>.

<li>Upgrade <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bpf&sektion=4">bpf(4)</a> support for the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pflog&sektion=4">pflog(4)</a> link type to the 'official' and more extensible version from the <a href="http://www.tcpdump.org/">libpcap</a> people.

<li>Start stripping out KerberosIV support from programs.

<li>When handling a numeric nodename in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getaddrinfo&sektion=3">getaddrinfo(3)</a>, set the canonical hostname to the numeric address as per <a href="http://www.ietf.org/rfc/rfc3493.txt">RFC3493</a>.

<li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=vis&sektion=3">vis(3)</a>'s VIS_SAFE behaviour match the manpage w.r.t <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isgraph&sektion=3">isgraph(3)</a>.

<li>Allow tags to be specified for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> block rules (which aren't allowed to keep state.)

<li>Allow tags to be specified for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> block rules (which aren't allowed to keep state).

<li>Allow the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf.conf&sektion=5">pf.conf(5)</a> scrub keyword to take a protocol specifier again.

<li>Remove KerberosIV support from KerberosV code.

<li>Add packet tag support for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> nat rules.

Line 1005

<li>New genfs code for layered filesystem support.

<li>Wash print queue names through <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=vis&sektion=3">vis(3)</a> before output.

<li>Teach <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ctags&sektion=1">ctags(1)</a> to understand '//' comments, ignore declarations of function types, and accept __attribute__. From NetBSD.

<li>Correctly check for empty output from an <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=at&sektion=1">at(1)</a> command (PR#3252.)

<li>Correctly check for empty output from an <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=at&sektion=1">at(1)</a> command (PR#3252).

<li>New <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ddb&sektion=4">ddb(4)</a> command 'show proc' which, er, shows process information.

<li>Sync <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=popa3d&sektion=8">popa3d(8)</a> to version 0.6.2.

<li>Improvements and bugfixes to the installer's handing of ftp and http downloads.

Line 1019

<li>Use the asn1_compile in src/usr.bin instead of that in src/kerberosV.

<li>More string fixes to libreadline, this time with no ABI changes.

<li>Fix a sign overflow in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=csh&sektion=1">csh(1)</a>.

<li>Merge in OpenSSL 0.9.7b (without IDEA, MDC2 and RC5.)

<li>Merge in OpenSSL 0.9.7b (without IDEA, MDC2 and RC5).

<li>Implement adaptive state table timeouts in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a>, reducing the state timeout value inversely with the number of states present.

<li>Break asn1_compile out from KerberosV into src/usr.bin.

Line 1035

<li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a>'s handling of the IPV6_ADDR ID-type.

<li>Remove an unnecessary <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ntohs&sektion=3">ntohs(3)</a> in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&sektion=8">pfctl(8)</a>, unbreaking 'nat ... -> $if port n' rules.

<li>The <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> return keyword now generates an ICMP unreachable message for all protocols other than TCP (rather than just UDP and ICMP.)

<li>Have the compiler generate warnings if unsafe string functions are used in the kernel.

<li>Back out libreadline string fixes until static build works.

<li>Consign <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=swapon&sektion=2&manpath=OpenBSD+2.5">swapon(2)</a> to COMPAT_25 in favour of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=swapctl&sektion=2">swapctl(2)</a>.

Line 1087

<li>Add backquote to the list of characters escaped in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ksh&sektion=1">ksh(1)</a>'s vi-{esc,tab}complete mode.

<li>Fix a couple of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sscanf&sektion=3">sscanf(3)</a> off-by-ones in afs and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=makeinfo&sektion=1">makeinfo(1)</a>.

<li>Write the correct amount of data when disconnecting <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tip&sektion=1">tip(1)</a> on biz22.

<li>Another memory layout change on i386 to allow a larger MAXDSIZ (see the tech@ <a href="http://marc.theaimsgroup.com/?l=openbsd-tech&m=105216246825100&w=2">archive</a> for details.)

<li>Another memory layout change on i386 to allow a larger MAXDSIZ (see the tech@ <a href="http://marc.theaimsgroup.com/?l=openbsd-tech&m=105216246825100&w=2">archive</a> for details).

<li>Add a mail mode to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mg&sektion=1">mg(1)</a> that does proper line wrapping, and add the '-f' command line option to set the mode.

<li>Properly restore the syncer vnode if <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=unmount&sektion=2">unmount(2)</a> fails.

Line 1115

<li>Improve forward compatibility of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fsck_ffs&sektion=8">fsck_ffs(8)</a> by comparing only what we understand instead of trying to ignore what we don't.

<li>Make the newly deprecated omsync() work under NetBSD emulation.

<li>Several <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=strvis&sektion=3">strvis(3)</a> -> <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=strnvis&sektion=3">strnvis(3)</a> changes, all part of the continuing Battle for Safe String Functions.

<li>Fix some pthreads signal bugs that were causing MySQL to crash (PR#3179, PR#3238.)

<li>Fix some pthreads signal bugs that were causing MySQL to crash (PR#3179, PR#3238).

<a href="stable.html">[Applied to stable]</a>

<li>Allow <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> tables to be loaded into anchors. <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&sektion=8">pfctl(8)</a> table options except show and flush now honour -a.

Line 1123

<li>Only build shared libXv if the target arch supports shared libraries.

<li>Consign the omsync() system call to COMPAT_25 obscurity.

<li>Fix parsing of the noac option to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mount_nfs&sektion=8">mount_nfs(8)</a>.

<li>In netinet/tcp_input.c, correct a long-standing typo made when applying a deadlock-avoidance bug fix (TCP/IP Illustrated volume 2 fig. 28.30.)

<li>In netinet/tcp_input.c, correct a long-standing typo made when applying a deadlock-avoidance bug fix (TCP/IP Illustrated volume 2 fig. 28.30).

<li>Fix a crasher in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=lkm&sektion=4">lkm(4)</a>, tripped when loading a module twice.

<li>Make ELF <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dlfcn&sektion=3">dlfcn(3)</a> calls thread-safe.

Line 1138

<li>Remove a potential double-free in the XFree wsfb driver.

<li>Prepare <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> table structures for anchor support.

<li>Much string cleanup in sys/dev.

<li>Fix the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a> fifo 'C set' command (PR#3148.)

<li>Fix the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a> fifo 'C set' command (PR#3148).

<li>Use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=strdup&sektion=3">strdup(3)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=asprintf&sektion=3">asprintf(3)</a> to eliminate some string length guesswork in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rpcgen&sektion=1">rpcgen(1)</a>.

<li>Allocate enough space for a *printf() %u in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rpc.yppasswdd&sektion=8">rpc.yppasswdd(8)</a>.

Line 1146

<li>Fix fat32 filesystem corruption when renaming directories.

<li>New <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=lm&sektion=4">lm(4)</a> (National Semiconductor LM78, LM79 and compatible) and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=viaenv&sektion=4">viaenv(4)</a> (VT82C686A South Bridge) hardware monitor drivers, adapted from NetBSD to use the new sysctl hw.sensor interface.

<li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=funopen&sektion=3">funopen(3)</a>'s declaration match its prototype (PR#3236.)

<li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=funopen&sektion=3">funopen(3)</a>'s declaration match its prototype (PR#3236).

<li>Back out the recent <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mquery&sektion=2">mquery(2)</a>-uses-mmap() API change.

<li>Add new <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sysctl&sektion=3">sysctl(3)</a> node hw.sensors for, er, hardware monitoring sensors.

<li>Don't assume that <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=asprintf&sektion=3">asprintf(3)</a> failures won't clobber the tempfile name in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mktemp&sektion=1">mktemp(1)</a>.

<li>In the IPv4 case of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=inet_net_pton&sektion=3">inet_net_pton(3)</a>, infer the netmask the same way for all address classes (i.e. don't assume multicast networks are always */4.)

<li>Be more portable and check the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=asprintf&sektion=3">asprintf(3)</a> return value against -1 in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&sektion=8">pfctl(8)</a>.

<li>Add size bounds to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sscanf&sektion=3">sscanf(3)</a> strings in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=edquota&sektion=8">edquota(8)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tn3270&sektion=1">tn3270(1)</a>.

<li>Match <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mquery&sektion=2">mquery(2)</a>'s function signature to that of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mmap&sektion=2">mmap(2)</a>.

Line 1158

<a href="stable.html">[Applied to stable]</a>

<li>If one is given, properly copy the second port of a nat proxy spec in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&sektion=8">pfctl(8)</a>.

<li>Fix a bad <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=strlcpy&sektion=3">strlcpy(3)</a> bound in the AFS library (PR#3228.)

<li>Fix a bad <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=strlcpy&sektion=3">strlcpy(3)</a> bound in the AFS library (PR#3228).

<li>Use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=asprintf&sektion=3">asprintf(3)</a> to fix some buffer length problems in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pdisk&sektion=8&arch=mac68k">pdisk(8/MAC68K)</a>

<li>When handling the packet size option in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=traceroute&sektion=8">traceroute(8)</a>, bounds check the right variable.

<li>Properly detect EOF when generating policy interactively.

Line 1177

<li>Copy the null at the end of the name when adding a realm in Kerberos V.

<li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=authpf&sektion=8">authpf(8)</a> die the way it should when authpf.conf is missing (PR#3217.)

<li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=authpf&sektion=8">authpf(8)</a> die the way it should when authpf.conf is missing (PR#3217).

<li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ubsec&sektion=4">ubsec(4)</a> output statistics.

<li>Sync <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sudo&sektion=8">sudo(8)</a> with its CVS and bump the version to 1.6.7p4.

<li>Some typedef perfectionism in libwrap.

Line 1198

<li>Use the new <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mquery&sektion=2">mquery(2)</a> syscall in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ld.so&sektion=1">ld.so(1)</a>, i386 only for now.

<li>Avoid teeth-gnashing delays by making the installer use 'route -n show' instead of 'route show'.

<li>In the kernel ELF loader, use the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=uvm&sektion=9">uvm(9)</a> to make sure that <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ld.so&sektion=1">ld.so(1)</a> doesn't overwrite an area that's already in use.

<li>Fix a buffer overflow that was causing a crash in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mg&sektion=1">mg(1)</a> (PR#3090.)

<li>Fix a buffer overflow that was causing a crash in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mg&sektion=1">mg(1)</a> (PR#3090).

<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=apachectl&sektion=8">apachectl(8)</a> now honours $httpd_flags from <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rc.conf&sektion=8">rc.conf(8)</a>.

<li>Remove a race condition in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mount_mfs&sektion=8">mount_mfs(8)</a>.

Line 1207

<li>Uncomment the line that unloads <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=httpd&sektion=8">httpd(8)</a> shared modules on a server shutdown or restart.

<li>Many string fixes to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=named&sektion=8">named(8)</a>, more to come.

<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&sektion=8">pfctl(8)</a> can now display basic HFSC stats.

<li>Much cleanup in elf2ecoff(1) (not installed by default.)

<li>Much cleanup in elf2ecoff(1) (not installed by default).

<li>Allocate the right <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getaddrinfo&sektion=3">getaddrinfo(3)</a> buffer size in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rip6query&sektion=8">rip6query(8)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=route6d&sektion=8">route6d(8)</a>.

<li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=audioctl&sektion=1">audioctl(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=size&sektion=1">size(1)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=spamd&sektion=8">spamd(8)</a>, don't use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=snprintf&sektion=3">snprintf(3)</a>'s return value for pointer arithmetic.

Line 1219

<li>Include the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=at&sektion=1">at(1)</a> job number in the process title.

<li>Put <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=less&sektion=1">less(1)</a>'s help text back into a separate file, and allow a reduced-size build for the boot floppies.

<li>Stop using hardcoded SOCK_* types when creating sockets in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>, to facilitate ssh-over-<a href="http://www.sctp.de/sctp.html">sctp</a>.

<li>Have <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a> unlink its fifo and pid file on a clean shutdown (PR#3199.)

<li>Have <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a> unlink its fifo and pid file on a clean shutdown (PR#3199).

<li>Allow <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ping&sektion=8">ping(8)</a> to send zero-length packets with the -s0 option.

<li>Some <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=snprintf&sektion=3">snprintf(3)</a> buffer length fixes in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a>.

Line 1242

<li>Back out the earlier fix for PR#2230, which is a no-op since zombies aren't on the allproc list being scanned.

<li>De-allocate bus space on <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wi&sektion=4">wi(4)</a> device failures.

<li>Only print the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=less&sektion=1">less(1)</a> -d prompt if there's enough space left on the status line (PR#3189.)

<li>Only print the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=less&sektion=1">less(1)</a> -d prompt if there's enough space left on the status line (PR#3189).

<li>When fixing up process root and working directories after a filesystem mount, leave zombies well alone. (PR#2230.)

<li>Fix an off-by-one in kernel <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=malloc&sektion=9">malloc(9)</a> diagnostic code.

<li>Correctly initialise xkb memory in the X server.

<li>Plug some file descriptor leaks in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xman&sektion=1">xman(1)</a> (PR#3186.)

<li>Plug some file descriptor leaks in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xman&sektion=1">xman(1)</a> (PR#3186).

<li>Fix a broken sizeof() in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=gcc&sektion=1">gcc(1)</a> when allocating a new sentinel_info.

<li>Demote the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a> 'missing CRL dir' moan to a debug message.

<li>The kernel pf_state structure now points to both a rule and an anchor, so states created on anchors can use rule options properly.

<li>Create the /etc/isakmpd/crls directory from 4.4BSD.dist to stop <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a> complaining about its absence.

<li>Strip trailing whitespace before parsing <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> options (OpenSSH bug <a href="http://bugzilla.mindrot.org/show_bug.cgi?id=528">528</a>.)

<li>Disable <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>'s Kerberos IV support.

<li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=spamd&sektion=8">spamd(8)</a>'s <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=select&sektion=2">select(2)</a> error handling.

Line 1267

<li>Improvements to string handling (not str[ln]* for once) in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=adventure&sektion=6">adventure(6)</a>.

<li>Add fake package information so ports can check for XF4 installation.

<li>Use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ksh&sektion=1">ksh(1)</a> instead of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=csh&sektion=1">csh(1)</a> for XFree distrib scripts.

<li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&sektion=8">pfctl(8)</a> reject invalid ICMP types (>40) and codes (>255.)

<li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&sektion=8">pfctl(8)</a> reject invalid ICMP types (>40) and codes (>255).

<li>Fix a typo in the new <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> rekeying code that was causing the wrong packet state counter to be fetched.

<li>Update <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sudo&sektion=8">sudo(8)</a> to 1.6.7p3.

Line 1291

<li>Update <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sectok_fmt_fid&sektion=3">sectok_fmt_fid(3)</a> to take a string length parameter, and crank libsectok's major version for the new API.

<li>With the XFree86 4.3.0 merge, add an additional definition so that ports libs end up in /usr/local/lib/X11.

<li>Update <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sudo&sektion=8">sudo(8)</a> to 1.6.7p2.

<li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=user&sektion=8">user(8)</a>'s empty group test (PR#3178.)

<li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=user&sektion=8">user(8)</a>'s empty group test (PR#3178).

<li>Improve PRIQ queue id assignment, so same-priority queues on different interfaces work properly.

<li>Use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=realloc&sektion=3">realloc(3)</a> instead of leaking memory in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcpdump&sektion=8">tcpdump(8)</a>.

<li>Some cleanup in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ipcomp&sektion=4">ipcomp(4)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ipsec&sektion=4">ipsec(4)</a>.

<li>Add a missing initialisation in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> (OpenSSH bug <a href="http://bugzilla.mindrot.org/show_bug.cgi?id=526">#526</a>.)

<li>Add a missing initialisation in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> (OpenSSH bug <a href="http://bugzilla.mindrot.org/show_bug.cgi?id=526">#526</a>).

<li>When an interface doesn't support <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=altq&sektion=9">altq(9)</a>, have <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&sektion=8">pfctl(8)</a> print the interface name in the error message.

<li>Add automatic <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> rekeying in accordance with the current secsh newmodes draft, and fix some rekeying bugs.

<li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=kqueue&sektion=2">kqueue(2)</a> notification of immediate-mode <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bpf&sektion=4">bpf(4)</a> events (PR#3175.)

<li>Merge in XFree86 4.3.0.

<li>Update <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sudo&sektion=8">sudo(8)</a> to version 1.6.7p1, to fix some overzealous paranoia.

<li>Bump OpenSSH version to 3.6.1.