mirror of https://github.com/openbsd/www.git
638 lines
54 KiB
HTML
638 lines
54 KiB
HTML
<!doctype html>
|
|
<html lang=en id=plus>
|
|
<meta charset=utf-8>
|
|
<title>OpenBSD 3.0 Changelog</title>
|
|
<meta name="description" content="OpenBSD 3.0 changes">
|
|
<meta name="viewport" content="width=device-width, initial-scale=1">
|
|
<link rel="stylesheet" type="text/css" href="openbsd.css">
|
|
<link rel="canonical" href="https://www.openbsd.org/plus30.html">
|
|
<style>
|
|
a[href="stable.html"] {
|
|
color: var(--green);
|
|
}
|
|
|
|
strong {
|
|
color: var(--red);
|
|
}
|
|
|
|
h3 {
|
|
color: var(--blue);
|
|
}
|
|
|
|
p strong {
|
|
font-weight: normal;
|
|
}
|
|
|
|
code {
|
|
font-family: serif;
|
|
font-weight: bolder;
|
|
}
|
|
</style>
|
|
|
|
<h2 id=OpenBSD>
|
|
<a href="index.html">
|
|
<i>Open</i><b>BSD</b></a>
|
|
3.0 Changelog
|
|
</h2>
|
|
<hr>
|
|
|
|
<p>
|
|
This is a partial list of the major machine independent changes
|
|
(i.e., these are the changes people ask about most often). Machine
|
|
specific changes have also been made, and are sometimes mentioned
|
|
in the pages for the specific <a href="plat.html">platforms</a>.
|
|
|
|
<p>
|
|
Note: <strong>Problems for which patches exist are marked in red</strong>.
|
|
|
|
<p>
|
|
For changes in other releases, click below:<br>
|
|
<a href="plus20.html">2.0</a>,
|
|
<a href="plus21.html">2.1</a>,
|
|
<a href="plus22.html">2.2</a>,
|
|
<a href="plus23.html">2.3</a>,
|
|
<a href="plus24.html">2.4</a>,
|
|
<a href="plus25.html">2.5</a>,
|
|
<a href="plus26.html">2.6</a>,
|
|
<a href="plus27.html">2.7</a>,
|
|
<a href="plus28.html">2.8</a>,
|
|
<a href="plus29.html">2.9</a>,
|
|
<a href="plus31.html">3.1</a>,
|
|
<a href="plus32.html">3.2</a>,
|
|
<a href="plus33.html">3.3</a>,
|
|
<a href="plus34.html">3.4</a>,
|
|
<a href="plus35.html">3.5</a>,
|
|
<a href="plus36.html">3.6</a>,
|
|
<a href="plus37.html">3.7</a>,
|
|
<br>
|
|
<a href="plus38.html">3.8</a>,
|
|
<a href="plus39.html">3.9</a>,
|
|
<a href="plus40.html">4.0</a>,
|
|
<a href="plus41.html">4.1</a>,
|
|
<a href="plus42.html">4.2</a>,
|
|
<a href="plus43.html">4.3</a>,
|
|
<a href="plus44.html">4.4</a>,
|
|
<a href="plus45.html">4.5</a>,
|
|
<a href="plus46.html">4.6</a>,
|
|
<a href="plus47.html">4.7</a>,
|
|
<a href="plus48.html">4.8</a>,
|
|
<a href="plus49.html">4.9</a>,
|
|
<a href="plus50.html">5.0</a>,
|
|
<a href="plus51.html">5.1</a>,
|
|
<a href="plus52.html">5.2</a>,
|
|
<a href="plus53.html">5.3</a>,
|
|
<a href="plus54.html">5.4</a>,
|
|
<br>
|
|
<a href="plus55.html">5.5</a>,
|
|
<a href="plus56.html">5.6</a>,
|
|
<a href="plus57.html">5.7</a>,
|
|
<a href="plus58.html">5.8</a>,
|
|
<a href="plus59.html">5.9</a>,
|
|
<a href="plus60.html">6.0</a>,
|
|
<a href="plus61.html">6.1</a>,
|
|
<a href="plus62.html">6.2</a>,
|
|
<a href="plus63.html">6.3</a>,
|
|
<a href="plus64.html">6.4</a>,
|
|
<a href="plus65.html">6.5</a>,
|
|
<a href="plus66.html">6.6</a>,
|
|
<a href="plus67.html">6.7</a>,
|
|
<a href="plus68.html">6.8</a>,
|
|
<a href="plus69.html">6.9</a>,
|
|
<a href="plus70.html">7.0</a>,
|
|
<a href="plus71.html">7.1</a>,
|
|
<br>
|
|
<a href="plus72.html">7.2</a>,
|
|
<a href="plus73.html">7.3</a>,
|
|
<a href="plus.html">current</a>.
|
|
<br>
|
|
|
|
<p>
|
|
<h3>Changes made between OpenBSD 2.9 and 3.0</h3>
|
|
<p>
|
|
|
|
<ul>
|
|
<li>In <a href="https://man.openbsd.org/pf.4">pf(4)</a>, block packets that have IP options set by default.
|
|
<li>Disable <a href="https://man.openbsd.org/fd.4">fd(4)</a> sharing.
|
|
<li>Repair a <a href="https://man.openbsd.org/umask.2">umask(2)</a> in <a href="https://man.openbsd.org/pflogd.8">pflogd(8)</a>.
|
|
<li>Fiddle with channel handling in <a href="https://man.openbsd.org/ssh.8">ssh(8)</a> and <a href="https://man.openbsd.org/ssh.1">ssh(1)</a>.
|
|
<li>Add interface name to address translation to <a href="https://man.openbsd.org/pfctl.8">pfctl(8)</a>.
|
|
<li>Avoid /tmp races in <a href="https://man.openbsd.org/cvs.1">cvs(1)</a> by utilizing <a href="https://man.openbsd.org/mktemp.1">mktemp(1)</a>.
|
|
<li>Handle illegal <a href="https://man.openbsd.org/whois.1">whois(1)</a> server output that lacks a trailing newline.
|
|
<li>Bring in FM <a href="https://man.openbsd.org/radio.9">radio(9)</a> driver support; configuration through <a href="https://man.openbsd.org/radioctl.1">radioctl(1)</a>.
|
|
<li>Work around buggy HTTP servers that need the Host: field to only contain the port number.
|
|
<li>Use bpf_timeval instead of timeval in <a href="https://man.openbsd.org/pcap.3">pcap(3)</a>, <a href="https://man.openbsd.org/isakmpd.8">isakmpd(8)</a>, <a href="https://man.openbsd.org/bpf.4">bpf(4)</a>, and <a href="https://man.openbsd.org/tcpdump.8">tcpdump(8)</a>, improving portability.
|
|
<li>Fix a network/host order bug in <a href="https://man.openbsd.org/pf.4">pf(4)</a> that broke state searching on <a href="https://man.openbsd.org/icmp.4">icmp(4)</a> packets with the DF flag set.
|
|
<li>New <a href="https://man.openbsd.org/ssh.1">ssh(1)</a> configuration option NoHostAuthenticationForLocalhost.
|
|
<li>Import a new <a href="https://man.openbsd.org/rmd160.1">rmd160(1)</a> implementation.
|
|
<li>Upgrade to <a href="https://man.openbsd.org/sendmail.8">sendmail(8)</a> 8.12.1, fixing a potential local security hole.
|
|
<li>New -t and -d flags for <a href="https://man.openbsd.org/mktemp.1">mktemp(1)</a> to account for the TMPDIR environment variable.
|
|
<li>Add a -l flag to <a href="https://man.openbsd.org/mtree.8">mtree(8)</a> to do loose permissions checks.
|
|
<li>Report error when the -N and -R flags of <a href="https://man.openbsd.org/pfctl.8">pfctl(8)</a> can't open the specified file.
|
|
<li>Have <a href="https://man.openbsd.org/rcp.1">rcp(1)</a> and <a href="https://man.openbsd.org/scp.1">scp(1)</a> skip filenames containing newlines.
|
|
<li>Big install documentation overhaul.
|
|
<li>Support selectable preset FSM optimizations in <a href="https://man.openbsd.org/pf.4">pf(4)</a>.
|
|
<li>Lots of RAIDFrame work.
|
|
<li>Filter forwarded <a href="https://man.openbsd.org/ip6.4">ip6(4)</a> packets with <a href="https://man.openbsd.org/pf.4">pf(4)</a>.
|
|
<li>Upgrade <a href="https://man.openbsd.org/cvs.1">cvs(1)</a>.
|
|
<li>New <a href="https://man.openbsd.org/pidfile.3">pidfile(3)</a> call to write a daemon PID file.
|
|
<li>Read user configuration first in <a href="https://man.openbsd.org/ssh.1">ssh(1)</a>.
|
|
<li>Allow macro names to contain underscores in <a href="https://man.openbsd.org/pf.conf.5">pf.conf(5)</a>.
|
|
<li>Overhaul /tmp handling in <a href="https://man.openbsd.org/gzip.1">gzip(1)</a>.
|
|
<li>Improve string handling in <a href="https://man.openbsd.org/rwho.1">rwho(1)</a>.
|
|
<li>Fix handling of <a href="https://man.openbsd.org/icmp.4">icmp(4)</a> packets in <a href="https://man.openbsd.org/pf.4">pf(4)</a>.
|
|
<li>Plug memory leak in <a href="https://man.openbsd.org/ssh.1">ssh(1)</a>'s compression.
|
|
<li>Connect <a href="https://man.openbsd.org/usb.4">usb(4)</a> keyboards to the display after attach.
|
|
<li>Correctly free mbuf when dropping a packet in the <a href="https://man.openbsd.org/ip6.4">ip6(4)</a> subsystem.
|
|
<li>Default to 9600 baud in <a href="https://man.openbsd.org/cu.1">cu(1)</a>.
|
|
<li>Many repairs to <a href="https://man.openbsd.org/getcap.3">getcap(3)</a>, including an off-by-one <a href="https://man.openbsd.org/malloc.3">malloc(3)</a> error and a buffer overflow.
|
|
<li>Import a new <a href="https://man.openbsd.org/grep.1">grep(1)</a>.
|
|
<li>Update <a href="https://man.openbsd.org/popa3d.8">popa3d(8)</a> to 0.4.9.4, adding support for selectable stand-alone or inetd use and <a href="https://man.openbsd.org/tcpd.8">tcpd(8)</a>.
|
|
<li>Start <a href="https://man.openbsd.org/pflogd.8">pflogd(8)</a> differently so it doesn't block NFS in diskless situations.
|
|
<li>Avoid a memory leak in <a href="https://man.openbsd.org/uvm.9">uvm(9)</a>.
|
|
<li>Remove signal race from <a href="https://man.openbsd.org/rpc.rstatd.8">rpc.rstatd(8)</a>.
|
|
<li>Re-order shlib_dirs in <a href="https://man.openbsd.org/rc.8">rc(8)</a>, prioritizing X11R6/lib over local/lib.
|
|
<li>Speedup <a href="https://man.openbsd.org/m4.1">m4(1)</a> by using inlines for common operations.
|
|
<li>Cleanup the set of <a href="https://man.openbsd.org/user.8">user(8)</a> tools.
|
|
<li>Implement a buffer flushing daemon, solving problems related to the syncer and improving performance with large numbers of buffers.
|
|
<li>Remove buggy STATIC memory optimization from <a href="https://man.openbsd.org/m4.1">m4(1)</a>.
|
|
<li>Have <a href="https://man.openbsd.org/vi.1">vi(1)</a> abort if it can't create a temporary file.
|
|
<li>Improve cross building support.
|
|
<li>Repair some buffer handling in <a href="https://man.openbsd.org/mail.1">mail(1)</a>.
|
|
<li>Add many more length checks when passing data from userland to kernel.
|
|
<li>In <a href="https://man.openbsd.org/pf.4">pf(4)</a>, don't ignore the inner protocol of <a href="https://man.openbsd.org/ip.4">ip(4)</a> <a href="https://man.openbsd.org/icmp.4">icmp(4)</a> packets, thus unbreaking <a href="https://man.openbsd.org/traceroute.8">traceroute(8)</a>, etc.
|
|
<li>Support insecure1 and insecure2 options in <a href="https://man.openbsd.org/resolv.conf.5">resolv.conf(5)</a>.
|
|
<li><strong>SECURITY FIX: be careful with long commandline options in <a href="https://man.openbsd.org/uuxqt.8">uuxqt</a> and run <a href="https://man.openbsd.org/uucp.1">uucp</a> as non-root in daily.</strong><br>
|
|
<a href="errata29.html#uucp">A source code patch is available</a>.<br>
|
|
<a href="stable.html">[Applied to stable]</a>
|
|
<li>Replace ru_SU with ru_RU in <a href="https://man.openbsd.org/vi.1">vi(1)</a>.
|
|
<li>Import <a href="https://man.openbsd.org/sendmail.8">sendmail(8)</a> 8.12.0, requiring a new smmsp user and group.
|
|
<li>Mark buffers with dependencies as B_DEFERRED and skip them one time when doing <a href="https://man.openbsd.org/sync.2">sync(2)</a>.
|
|
<li>Banish uucp to the ports tree.
|
|
<li>Upgrade <a href="https://man.openbsd.org/awk.1">awk(1)</a>.
|
|
<li>Cleanup <a href="https://man.openbsd.org/adduser.8">adduser(8)</a>; clean up variables, clear hashes correctly, unlock ptmp before closing, etc.
|
|
<li>Support 1:1 bi-directional Network Address Translation in <a href="https://man.openbsd.org/pf.4">pf(4)</a>.
|
|
<li>proxy user required for <a href="https://man.openbsd.org/ftp-proxy.8">ftp-proxy(8)</a>.
|
|
<li>Add a stereo jitter suppressor to the <a href="https://man.openbsd.org/maestro.4">maestro(4)</a> audio driver.
|
|
<li>Fix erroneous <a href="https://man.openbsd.org/select.2">select(2)</a> FD_SETSIZE uses.
|
|
<li>Repair <a href="https://man.openbsd.org/wall.1">wall(1)</a>'s -g flag.
|
|
<li><a href="https://man.openbsd.org/pckbd.4">pckbd(4)</a> supports Ukranian keyboard layouts.
|
|
<li>Better Russian <a href="https://man.openbsd.org/calendar.1">calendar(1)</a> support.
|
|
<li>Implement skip steps and parameter lists for interfaces in <a href="https://man.openbsd.org/pf.4">pf(4)</a>.
|
|
<li>Update username length limit in <a href="https://man.openbsd.org/rmuser.8">rmuser(8)</a>.
|
|
<li>New src compilation target: cross-env; prints all environment variables that need to be set for cross-building.
|
|
<li>Import <a href="https://man.openbsd.org/usbhidctl.1">usbhidctl(1)</a>, a userland program to manipulate USB HID devices.
|
|
<li>Import <a href="https://man.openbsd.org/usb.3">usb(3)</a> library libusb for USB HID processing.
|
|
<li>Rename powerpc port to macppc, allowing for code sharing between different powerpc-based platforms.
|
|
<li>Inherit <a href="https://man.openbsd.org/vlan.4">vlan(4)</a> baudrate from parent.
|
|
<li>Various <a href="https://man.openbsd.org/lpd.8">lpd(8)</a> improvements and fixes.
|
|
<li><strong>SECURITY FIX: fix buffer overflow reading queue file in <a href="https://man.openbsd.org/lpd.8">lpd</a>.</strong><br>
|
|
<a href="errata29.html#lpd">A source code patch is available</a>.<br>
|
|
<a href="stable.html">[Applied to stable]</a>
|
|
<li>Plug memory leak in <a href="https://man.openbsd.org/scp.1">scp(1)</a> and <a href="https://man.openbsd.org/rcp.1">rcp(1)</a>.
|
|
<li>Avoid segfault in <a href="https://man.openbsd.org/dhclient.8">dhclient(8)</a> when the server specifies its name.
|
|
<li>Support the ! operator in host parameter lists in <a href="https://man.openbsd.org/pfctl.8">pfctl(8)</a>.
|
|
<li>Send a reset request for every packet received by <a href="https://man.openbsd.org/ppp.8">ppp(8)</a> when the encryption dictionaries are out of sync.
|
|
<li>Make <a href="https://man.openbsd.org/pf.4">pf(4)</a> support ISN randomization (aka. phase modulation).
|
|
<li>Store argc as a long on the stack as opposed to an int.
|
|
<li>Switch rijndael code to the optimized AES reference release.
|
|
<li>Have <a href="https://man.openbsd.org/isakmpd.8">isakmpd(8)</a> send DELETE notifications for all active SAs when shutting down.
|
|
<li>In <a href="https://man.openbsd.org/sudo.8">sudo(8)</a>, apply default login class if unable to look one up.
|
|
<li>Support macro expansion in <a href="https://man.openbsd.org/pf.conf.5">pf.conf(5)</a>.
|
|
<li>Work some magic on the installation scripts for floppies, shrinking them.
|
|
<li>Correct the setup of the initial <a href="https://man.openbsd.org/tcp.4">tcp(4)</a> state window in <a href="https://man.openbsd.org/pf.4">pf(4)</a>.
|
|
<li>Import <a href="https://man.openbsd.org/pflogd.8">pflogd(8)</a>, logging daemon that writes <a href="https://man.openbsd.org/pf.4">pf(4)</a> logs in <a href="https://man.openbsd.org/tcpdump.8">tcpdump(8)</a> binary format.
|
|
<li><strong>SECURITY FIX: fix out of bounds handling in <a href="https://man.openbsd.org/sendmail.8">sendmail</a> debug handling</strong><br>
|
|
<a href="errata29.html#sendmail2">A source code patch is available</a>.<br>
|
|
<a href="stable.html">[Applied to stable]</a>
|
|
<li>Repair <a href="https://man.openbsd.org/ppp.8">ppp(8)</a>'s iface-alias option.
|
|
<li>Fix rule flushing code in <a href="https://man.openbsd.org/bridge.4">bridge(4)</a> devices.
|
|
<li>Support <a href="https://man.openbsd.org/ip6.4">ip6(4)</a> in <a href="https://man.openbsd.org/ppp.8">ppp(8)</a>; crude IPV6CP support; many other smaller changes.
|
|
<li>Enhance file-change detection in <a href="https://man.openbsd.org/vipw.8">vipw(8)</a> and <a href="https://man.openbsd.org/crontab.1">crontab(1)</a>.
|
|
<li>Add per-rule statistics and byte counter to <a href="https://man.openbsd.org/pf.4">pf(4)</a>.
|
|
<li>Don't reset <a href="https://man.openbsd.org/xl.1">xl(1)</a>'s Rx/Tx without first turning them back on after a suspend.
|
|
<li>Support parameter lists in <a href="https://man.openbsd.org/pfctl.8">pfctl(8)</a>.
|
|
<li>Be sure to pass the interface to ipip_input() in the net subsystem so it can be used in <a href="https://man.openbsd.org/bpf.4">bpf(4)</a>.
|
|
<li>Import <a href="https://man.openbsd.org/ftp-proxy.8">ftp-proxy(8)</a>, a transparent ftp proxy.
|
|
<li>Loosen <a href="https://man.openbsd.org/tcp.4">tcp(4)</a> state code in <a href="https://man.openbsd.org/pf.4">pf(4)</a>, allowing "stupid stacks to shotgun their SYNs and provide better handling for pre-existing connections".
|
|
<li>Initial import of sparc64 port; much subsequent development, too much to list.
|
|
<li>Add the possibility to add a random offset to the stack on <a href="https://man.openbsd.org/exec.3">exec(3)</a>.
|
|
<li>Make the <a href="https://man.openbsd.org/siop.4">siop(4)</a> driver pay attention to quirks table, eliminating INQUIRY snooping and ifdef toggling.
|
|
<li>New -s switch for <a href="https://man.openbsd.org/pwd_mkdb.8">pwd_mkdb(8)</a> to only update the secure .db file.
|
|
<li>-e switch for <a href="https://man.openbsd.org/nm.1">nm(1)</a> to show extra symbol information.
|
|
<li>Delay locking the passwd file until we have gotten a new password from the user. Also play with the file locking routine.
|
|
<li>Attempt to recover from PCI aborts in the <a href="https://man.openbsd.org/hifn.4">hifn(4)</a> driver.
|
|
<li>Import keyconv, a small utility to convert between <a href="https://man.openbsd.org/openssl.1">openssl(1)</a> and DNSSEC key formats.
|
|
<li>Support trusted public RSA keys as files in <a href="https://man.openbsd.org/isakmpd.8">isakmpd(8)</a>.
|
|
<li>Fix lengths for PFKEYv2 and KAME messages in IPv4-in-IPv6 and IPv6-in-IPv4 flows.
|
|
<li>Import <a href="https://man.openbsd.org/popa3d.8">popa3d(8)</a>, Solar Designer's POP3 daemon.
|
|
<li>The valiant vm_extern.h, vm_inherit.h, vm_map.h, and vm_pager.h files ride off into the sunset.
|
|
<li><a href="https://man.openbsd.org/pf.4">pf(4)</a> support for <a href="https://man.openbsd.org/icmp.4">icmp(4)</a> errors referring to <a href="https://man.openbsd.org/icmp.4">icmp(4)</a> queries/replies.
|
|
<li>Allow file flags in <a href="https://man.openbsd.org/mtree.8">mtree(8)</a>.
|
|
<li>Don't compare the source address on packets to the one in SA when doing <a href="https://man.openbsd.org/ipsec.4">ipsec(4)</a> processing.
|
|
<li>Repair rijndael block alignment.
|
|
<li>Unshare <a href="https://man.openbsd.org/sigaction.2">sigaction(2)</a> signal handlers on <a href="https://man.openbsd.org/exec.3">exec(3)</a>.
|
|
<li>Merge <a href="https://man.openbsd.org/altq.9">altq(9)</a> options into just "altq" for base + red + cbq, and enable it by default.
|
|
<li>Support the -h flag for <a href="https://man.openbsd.org/ln.1">ln(1)</a> that prevents following a symlink to a directory.
|
|
<li>Many new timeouts for a wide variety of devices.
|
|
<li>Remove the IPCOMP option as it's now part of the IPSEC option.
|
|
<li>Rewrite <a href="https://man.openbsd.org/signal.3">signal(3)</a> handlers in <a href="https://man.openbsd.org/altqd.8">altqd(8)</a> to be race-safe.
|
|
<li>Add support for RC4 operations in the <a href="https://man.openbsd.org/hifn.4">hifn(4)</a> driver.
|
|
<li>Don't <a href="https://man.openbsd.org/free.3">free(3)</a> unallocated memory in <a href="https://man.openbsd.org/mailwrapper.8">mailwrapper(8)</a>.
|
|
<li>Change <a href="https://man.openbsd.org/tsleep.9">tsleep(9)</a> into an ltsleep wrapper. ltsleep takes one more argument than <a href="https://man.openbsd.org/tsleep.9">tsleep(9)</a>, a simplelock that it unlocks when safe.
|
|
<li>Let kerberosV compile entirely on platforms without shared libraries.
|
|
<li>Avoid /tmp race in rcs2log by using <a href="https://man.openbsd.org/mktemp.1">mktemp(1)</a>.
|
|
<li>Tweak timekeeping code in <a href="https://man.openbsd.org/dd.1">dd(1)</a> to produce a sane bandwidth measure for a short runs.
|
|
<li>Enable the ESP and AH <a href="https://man.openbsd.org/ipsec.4">ipsec(4)</a> protocols by default.
|
|
<li>Make kernel <a href="https://man.openbsd.org/crash.8">crash(8)</a> dumps work under mvme68k.
|
|
<li>No longer drop packets when using an ACQUIRE policy and an error occurs when notifying key management.
|
|
<li>New <a href="https://man.openbsd.org/getrrsetbyname.3">getrrsetbyname(3)</a> function to retrieve arbitrary DNS records.
|
|
<li>Support protocol version 2 in <a href="https://man.openbsd.org/ssh-keyscan.1">ssh-keyscan(1)</a>.
|
|
<li>Move <a href="https://man.openbsd.org/xdm.1">xdm(1)</a>'s PID file from xdm-pid to xdm.pid in /var/run, maintaining consistancy.
|
|
<li>Delay decision to make a new <a href="https://man.openbsd.org/hash.3">hash(3)</a> table or not until after calling <a href="https://man.openbsd.org/open.2">open(2)</a>, clearing up problems with file locking.
|
|
<li><a href="https://man.openbsd.org/vlan.4">vlan(4)</a> changes: utilize IFCAP_VLAN_MTU and IFCAP_VLAN_HWTAGGING capabilities; LINK0 and MTU ambiguity are no more; MTU's can only be changed within the scope of the parent's MTU.
|
|
<li>Repair non-blocking mode issues in <a href="https://man.openbsd.org/syslogd.8">syslogd(8)</a>, avoiding grief with locked terminals.
|
|
<li>Make all cases of .Sh AUTHOR and .Sh EXAMPLE plural in manual pages.
|
|
<li>New <a href="https://man.openbsd.org/sysctl.3">sysctl(3)</a> nkmempages that reports how many pages are in kmem_map.
|
|
<li>Support stateless <a href="https://man.openbsd.org/tcp.4">tcp(4)</a> normalization in <a href="https://man.openbsd.org/pf.4">pf(4)</a>.
|
|
<li>Import <a href="https://man.openbsd.org/x99token.1">x99token(1)</a>, a software x99 token calculator.
|
|
<li>Add support for EDNS0 extended flag DNSSEC OK to the <a href="https://man.openbsd.org/resolver.3">resolver(3)</a> routines.
|
|
<li>Don't send a NUL on the end of CHAP SUCCESS packets in <a href="https://man.openbsd.org/ppp.8">ppp(8)</a> so that WindowsME and Windows98 won't mysteriously fail when encryption is enabled.
|
|
<li>Allocate <a href="https://man.openbsd.org/uvm.9">uvm(9)</a> page buckets from kernel_map, saving kmem_map space on machines with lots of physical memory.
|
|
<li>In <a href="https://man.openbsd.org/ppp.8">ppp(8)</a>, compensate for a Windows 98 bug when sending a CHAP81 challenge response.
|
|
<li>Support the SmartcardDevice option in <a href="https://man.openbsd.org/ssh.1">ssh(1)</a> to specify which smartcard device to use.
|
|
<li>Step down only one Ultra DMA mode at a time when downgrading.
|
|
<li>On DMA timeouts, stop busmaster PCIIDE and reset channel.
|
|
<li>Don't <a href="https://man.openbsd.org/malloc.3">malloc(3)</a> too much and choke in ELF execution.
|
|
<li>Support rule skipping in <a href="https://man.openbsd.org/pf.4">pf(4)</a>.
|
|
<li>Allow negative lock length with <a href="https://man.openbsd.org/lockf.3">lockf(3)</a>, making it compliant to specification.
|
|
<li>In <a href="https://man.openbsd.org/top.1">top(1)</a>, abort if <a href="https://man.openbsd.org/stdout.4">stdout(4)</a> ever produces EOF; prevents spinning output if controlling tty disappears.
|
|
<li>Implement startup and shutdown hooks via <a href="https://man.openbsd.org/dohooks.9">dohooks(9)</a> and family.
|
|
<li><strong>SECURITY FIX: check filehandle size copied from userland</strong><br>
|
|
<a href="errata29.html#nfs">A source code patch is available</a>.<br>
|
|
<a href="stable.html">[Applied to stable]</a>
|
|
<li>Nuke edlabel.
|
|
<li>Add support for disabling swap devices via <a href="https://man.openbsd.org/swapctl.8">swapctl(8)</a>'s -d option.
|
|
<li>Support <a href="https://man.openbsd.org/sshd.8">sshd(8)</a> configuration file and key testing via the -t option.
|
|
<li>Change vop_symlink and vop_mknod so that they return the created node in a way that the caller can actually utilize it.
|
|
<li>Use <a href="https://man.openbsd.org/vfork.2">vfork(2)</a> safely in <a href="https://man.openbsd.org/sup.1">sup(1)</a>.
|
|
<li>New flag PMAP_CANFAIL that tells pmap_enter that it can fail if there aren't enough resources instead of panicing.
|
|
<li>Make non-stateful and stateful <a href="https://man.openbsd.org/pf.4">pf(4)</a> filtering work on <a href="https://man.openbsd.org/bridge.4">bridge(4)</a> devices.
|
|
<li>Initialize arpcom later; it could be incorrectly initialized if done before bridge_input().
|
|
<li>Enable challenge-response authentication by default in <a href="https://man.openbsd.org/ssh.1">ssh(1)</a>.
|
|
<li>Fix/complete <a href="https://man.openbsd.org/pf.4">pf(4)</a> binary operators.
|
|
<li>Repair signal race in <a href="https://man.openbsd.org/m4.1">m4(1)</a>.
|
|
<li>Ensure <a href="https://man.openbsd.org/make.1">make(1)</a> doesn't dump core when reporting open conditionals.
|
|
<li>Promote PMAP_NEW option to mandatory status.
|
|
<li>In the netinet subsystem, zero the TCP checksum field before calculating the new value; fixes problem with bad checksums on keepalives.
|
|
<li>Use 64-bit integers for some ipcomp byte counts, fixing strange results with <a href="https://man.openbsd.org/netstat.1">netstat(1)</a>.
|
|
<li>Support Addonics FlexPort 8S via <a href="https://man.openbsd.org/addcom.4">addcom(4)</a>.
|
|
<li>Ignore O_TRUNC on <a href="https://man.openbsd.org/open.2">open(2)</a> when not opening a regular file.
|
|
<li>On ext2fs, ffs, and ufs partitions, don't truncate anything except for symlinks, directories, and regular files.
|
|
<li>Repair kern_msgbuf under sparc.
|
|
<li>Support DEC EtherWorks cards via <a href="https://man.openbsd.org/lc.4">lc(4)</a>.
|
|
<li>Bring na.phone up to date.
|
|
<li>The <a href="https://man.openbsd.org/iha.4">iha(4)</a> driver wasn't able to update the EEPROM, so don't even bother.
|
|
<li>Rework ata and <a href="https://man.openbsd.org/wdc.4">wdc(4)</a> probing code; deal better with floating buses and supress spurious interrupts.
|
|
<li>Plug memory leak in pw_copy() found in libutil.
|
|
<li>Put Kerberos 5 things in libkrb5, out of libkafs.
|
|
<li>Allow <a href="https://man.openbsd.org/sshd.8">sshd(8)</a> to be compatible in all 4 combinations of Kerberos 4 and Kerberos 5 settings.
|
|
<li>When <a href="https://man.openbsd.org/ssh.1">ssh(1)</a> is reading a password, don't panic if <a href="https://man.openbsd.org/fork.2">fork(2)</a> or <a href="https://man.openbsd.org/pipe.2">pipe(2)</a> fail; just return an empty password.
|
|
<li>Sync <a href="https://man.openbsd.org/rtsold.8">rtsold(8)</a> to latest KAME, fixing a memory leak and a timer value.
|
|
<li>Change quad types on alpha to "long long" as opposed to "long", allowing <a href="https://man.openbsd.org/printf.3">printf(3)</a>'s "%lld" format to be used without a bogus cast.
|
|
<li>In the <a href="https://man.openbsd.org/iha.4">iha(4)</a> driver, allow sync to be negotiated even if wide is not.
|
|
<li>Modify <a href="https://man.openbsd.org/nv.4">nv(4)</a> <a href="https://man.openbsd.org/XFree86.1">XFree86(1)</a> driver as to avoid the dimming text mode problem.
|
|
<li>Add a BSD authentication module for radius authentication.
|
|
<li>Make sure that <a href="https://man.openbsd.org/ld.1">ld(1)</a> references all aliases to avoid them being only partially resolved.
|
|
<li>Ensure <a href="https://man.openbsd.org/ppp.8">ppp(8)</a> calculates the number of key changes correctly.
|
|
<li>Repair the NFS server's request tracking during write-gathering, thus avoiding client hangs.
|
|
<li>Use <a href="https://man.openbsd.org/login.conf.5">login.conf(5)</a> for <a href="https://man.openbsd.org/passwd.1">passwd(1)</a> variables as opposed to <a href="https://man.openbsd.org/passwd.conf.5">passwd.conf(5)</a>.
|
|
<li>Yank PF_ENCAP support out of <a href="https://man.openbsd.org/isakmpd.8">isakmpd(8)</a>.
|
|
<li>Fix-up multicast settings in <a href="https://man.openbsd.org/netstart.8">netstart(8)</a>.
|
|
<li>Bump MSIZE up to 256.
|
|
<li>IP/TCP/UDP hardware checksumming for <a href="https://man.openbsd.org/nge.4">nge(4)</a>; limited by MTU.
|
|
<li>Avoid segmentation fault when <a href="https://man.openbsd.org/mg.1">mg(1)</a> can't read an init file.
|
|
<li>Support for <a href="https://man.openbsd.org/ipcomp.4">ipcomp(4)</a>; disabled by default.
|
|
<li>Show kern_fthread to the door.
|
|
<li>Userland <a href="https://man.openbsd.org/iopctl.8">iopctl(8)</a> control utility for <a href="https://man.openbsd.org/iop.4">iop(4)</a>.
|
|
<li>In <a href="https://man.openbsd.org/passwd.1">passwd(1)</a>, lock the <a href="https://man.openbsd.org/passwd.5">passwd(5)</a> file after having gotten a new password from the user; also change the actual locking procedure.
|
|
<li>Support for /etc/wsconsctl.conf.
|
|
<li>Handle descriptors 0, 1, or 2 being closed when <a href="https://man.openbsd.org/ppp.8">ppp(8)</a> is invoked.
|
|
<li>Reduce MTU by 2 after MPPE has been negotiated in <a href="https://man.openbsd.org/ppp.8">ppp(8)</a>.
|
|
<li>Merge pdksh patch into <a href="https://man.openbsd.org/ksh.1">ksh(1)</a>, fixing some problems with propagated return values in multi-command lines.
|
|
<li>Utilize the welcome variable from <a href="https://man.openbsd.org/login.conf.5">login.conf(5)</a>, in <a href="https://man.openbsd.org/ftpd.8">ftpd(8)</a>, instead of hard-coding /etc/motd.
|
|
<li>Discipline the <a href="https://man.openbsd.org/audio.4">audio(4)</a> device so it gets along with <a href="https://man.openbsd.org/revoke.2">revoke(2)</a>.
|
|
<li>Repair NFS-related problem with diskless clients by getting the root filehandle via nfs_root.
|
|
<li>Add support for screen switching to <a href="https://man.openbsd.org/wsconsctl.8">wsconsctl(8)</a>.
|
|
<li>Change <a href="https://man.openbsd.org/wsconsctl.8">wsconsctl(8)</a>'s interface to be more <a href="https://man.openbsd.org/sysctl.8">sysctl(8)</a>-like.
|
|
<li>Shuffle around maxlen setting inside the net subsystem to avoid potential problems.
|
|
<li>Make <a href="https://man.openbsd.org/icmp.4">icmp(4)</a> error checking saner.
|
|
<li>Initial <a href="https://man.openbsd.org/ip6.9">ip6(9)</a> support for <a href="https://man.openbsd.org/isakmpd.8">isakmpd(8)</a>.
|
|
<li>Packet normalization support for <a href="https://man.openbsd.org/pf.4">pf(4)</a>.
|
|
<li>Userland <a href="https://man.openbsd.org/sectok.1">sectok(1)</a> control program.
|
|
<li>Repair kern_fork brain-damage.
|
|
<li><a href="https://man.openbsd.org/uvm.9">uvm(9)</a> and MNN are no longer optional.
|
|
<li>Import <a href="https://man.openbsd.org/altq.9">altq(9)</a>: alternate queuing support.
|
|
<li>Poof! The old vm disappears.
|
|
<li>No more M_COPY_* macros; use M_MOVE_* or M_DUP_*.
|
|
<li>Add <a href="https://man.openbsd.org/dmesg.8">dmesg(8)</a>, <a href="https://man.openbsd.org/wicontrol.8">wicontrol(8)</a>, and <a href="https://man.openbsd.org/ancontrol.8">ancontrol(8)</a> to powerpc's ramdisk.
|
|
<li>New mvmeppc port.
|
|
<li>Many mvme68k improvements including: switching to <a href="https://man.openbsd.org/uvm.9">uvm(9)</a>, repairing system trace, cleanup of locore.s, KNF, etc.
|
|
<li><a href="https://man.openbsd.org/pciide.4">pciide(4)</a> support for powerpc.
|
|
<li>Change <a href="https://man.openbsd.org/icmp6.4">icmp6(4)</a> packet header length computation so it works with both 4.4BSD's M_COPY_PKTHDR and OpenBSD 2.9+'s M_COPY_PKTHDR.
|
|
<li>Implement <a href="https://man.openbsd.org/getpeereid.2">getpeereid(2)</a>, allowing local-domain servers to determine client credentials.
|
|
<li>Support generic BSD authentication in <a href="https://man.openbsd.org/xdm.1">xdm(1)</a>.
|
|
<li>Disable <a href="https://man.openbsd.org/usb.4">usb(4)</a> on alpha by default.
|
|
<li>Kerberos v5 support for SSH1.
|
|
<li>Hardware RNG support in <a href="https://man.openbsd.org/lofn.4">lofn(4)</a>.
|
|
<li>Smartcard support in <a href="https://man.openbsd.org/ssh-agent.1">ssh-agent(1)</a> and <a href="https://man.openbsd.org/ssh.1">ssh(1)</a>.
|
|
<li>Large -Wall/-Werror/-W... ongoing cleanup throughout tree.
|
|
<li>Nuke mips port.
|
|
<li>Initial import of <a href="https://man.openbsd.org/iop.4">iop(4)</a> (I2O) framework.
|
|
<li>Rewrite <a href="https://man.openbsd.org/nc.1">nc(1)</a>, adding <a href="https://man.openbsd.org/ip6.4">ip6(4)</a> support.
|
|
<li>In <a href="https://man.openbsd.org/su.1">su(1)</a>, offload root instances for Kerberos to the auth program.
|
|
<li>Disable SMB decoding in <a href="https://man.openbsd.org/tcpdump.8">tcpdump(8)</a>.
|
|
<li>Enable audio on alpha by default.
|
|
<li>Endian fixes in the <a href="https://man.openbsd.org/wi.4">wi(4)</a> driver.
|
|
<li>Adios NQNFS.
|
|
<li>Nuke the pmax port.
|
|
<li>Don't perform TCP/UDP hardware checksumming when doing IP fragmentation.
|
|
<li>Delayed checksum support in the netinet subsystem.
|
|
<li>Support setting the Ethernet address through <a href="https://man.openbsd.org/ifconfig.8">ifconfig(8)</a> for <a href="https://man.openbsd.org/vr.4">vr(4)</a> cards.
|
|
<li>Bypass <a href="https://man.openbsd.org/ipsec.4">ipsec(4)</a> for all <a href="https://man.openbsd.org/dhcp.8">dhcp(8)</a> traffic, avoiding potential problems with newly booted clients.
|
|
<li>Modify timeouts for IP spd expirations.
|
|
<li>Internal fiddling of <a href="https://man.openbsd.org/nfsd.8">nfsd(8)</a>'s handling of its root vnode.
|
|
<li>Import <a href="https://man.openbsd.org/pf.4">pf(4)</a>, an ipf-compatible packet filter.
|
|
<li>Avoid panics under i386 if bus/dev/func numbers for PCI are not valid.
|
|
<li>New <a href="https://man.openbsd.org/sysctl.3">sysctl(3)</a> KERN_POOLS to retrieve pool information from the kernel.
|
|
<li>Cleanup and update <a href="https://man.openbsd.org/dhcp.8">dhcp(8)</a> to 2.0pl5.
|
|
<li>Utilize <a href="https://man.openbsd.org/readpassphrase.3">readpassphrase(3)</a> in <a href="https://man.openbsd.org/ssh.1">ssh(1)</a>.
|
|
<li>Allow access to /dev/pci.
|
|
<li>Repair multiple key handling in <a href="https://man.openbsd.org/wicontrol.8">wicontrol(8)</a>.
|
|
<li>New ether_input_mbuf to ease transition from ether_header in ether_input; drivers will migrate to this.
|
|
<li>Wave goodbye to kernfs.
|
|
<li>Replace existing <a href="https://man.openbsd.org/telnetd.8">telnetd(8)</a> with the one from heimdal-0.3f.
|
|
<li>Assorted modifications to <a href="https://man.openbsd.org/uvm.9">uvm(9)</a>.
|
|
<li><strong>RELIABILITY FIX: link XF86Setup
|
|
against the right version of libXxf86vm.a.</strong><br> Fix the
|
|
problem of corrupted XF86Config file produced by XF86Setup.<br>
|
|
<a href="errata29.html#XF86Setup">A source code patch is available</a>.<br>
|
|
<a href="stable.html">[Applied to stable]</a>
|
|
<li>Avoid a pidfile/sigterm race in <a href="https://man.openbsd.org/sshd.8">sshd(8)</a>.
|
|
<li>Merge the system's crypto.h into crptodev.h, avoiding name conflicts with OpenSSL.
|
|
<li>Various <a href="https://man.openbsd.org/pool.9">pool(9)</a> improvements including a new pool_cache() function and cleaner locking.
|
|
<li>Spelling audit throughout the manual pages.
|
|
<li>Try to have <a href="https://man.openbsd.org/ssh-keygen.1">ssh-keygen(1)</a> decode ssh-3.0.0 private RSA keys.
|
|
<li>New <a href="https://man.openbsd.org/mg.1">mg(1)</a> feature: M-x theo.
|
|
<li>Support PCI bus configuration from userland.
|
|
<li>Add TCP, UDP, and IPv4 hardware checksum processing, excluding outbound TCP/UDP.
|
|
<li>Internal shuffling of <a href="https://man.openbsd.org/vnode.9">vnode(9)</a> operations in some filesystems.
|
|
<li>Disable interrupts in the <a href="https://man.openbsd.org/wi.4">wi(4)</a> driver before mapping and establishing the interrupt, thereby avoiding a race condition.
|
|
<li>MI loadfile support; currently only used on powerpc.
|
|
<li>Obsolete *known_hosts2 in <a href="https://man.openbsd.org/ssh.1">ssh(1)</a>.
|
|
<li>Some <a href="https://man.openbsd.org/hifn.4">hifn(4)</a> fixes, largely related to descriptor lengths.
|
|
<li>Don't let <a href="https://man.openbsd.org/ssh.1">ssh(1)</a> overwrite argv.
|
|
<li>Shrink <a href="https://man.openbsd.org/dmesg.8">dmesg(8)</a>.
|
|
<li>Merge authorized_keys2 into authorized_keys in <a href="https://man.openbsd.org/ssh.1">ssh(1)</a>.
|
|
<li>Provide a <a href="https://man.openbsd.org/sysctl.3">sysctl(3)</a> interface to msgbuf; handy for <a href="https://man.openbsd.org/dmesg.8">dmesg(8)</a>, allowing it to run without setgid.
|
|
<li>Upgrade to heimdal-0.3f.
|
|
<li>Use <a href="https://man.openbsd.org/moduli.5">moduli(5)</a> instead of the deprecated primes.
|
|
<li>Add RNG support in <a href="https://man.openbsd.org/hifn.4">hifn(4)</a> for the 7951.
|
|
<li>In <a href="https://man.openbsd.org/isakmpd.8">isakmpd(8)</a>, fallback to <a href="https://man.openbsd.org/stat.2">stat(2)</a> when <a href="https://man.openbsd.org/readdir.3">readdir(3)</a> doesn't return d_type.
|
|
<li>Apply KNF to many kernel sources.
|
|
<li>Don't forward <a href="https://man.openbsd.org/ip6.4">ip6(4)</a> packets back into point-to-point link if the packet's destination address matches said p2p link's interface.
|
|
<li>Lots of manual page cleanups.
|
|
<li>Upgrade to openssl-engine-0.9.6a.
|
|
<li>Many fixes in the kernel's <a href="https://man.openbsd.org/lockf.3">lockf(3)</a> code including avoiding livelocks on ptrace-related scenarios.
|
|
<li>Modify file locking routine in the <a href="https://man.openbsd.org/skey.3">skey(3)</a> library, preventing a race condition, plus other modifications; integrate.
|
|
<li>Document <a href="https://man.openbsd.org/physio.9">physio(9)</a>.
|
|
<li>More variables in <a href="https://man.openbsd.org/login.conf.5">login.conf(5)</a>: login-timeout, login-tries, and login-backoff.
|
|
<li>Improve <a href="https://man.openbsd.org/ppp.8">ppp(8)</a>: handle hardware-imposed MTU/MRU limitations; support stateful MPPE (Microsoft encryption).
|
|
<li>Repair <a href="https://man.openbsd.org/vi.1">vi(1)</a> to avoid spinouts when creating temporary files.
|
|
<li>Make <a href="https://man.openbsd.org/ftp.1">ftp(1)</a> use binary for transfers as opposed to ascii.
|
|
<li>Merge <a href="https://man.openbsd.org/passwd.conf.5">passwd.conf(5)</a> into <a href="https://man.openbsd.org/login.conf.5">login.conf(5)</a> and add passwordtime and minpasswordlen variables.
|
|
<li>Move microcode includes around to avoid erroneously installing them, among other reasons.
|
|
<li>Overhaul some kern_exec internals, cleaning up the setuid/setgid-checking code.
|
|
<li>Adapt <a href="https://man.openbsd.org/skeyinfo.1">skeyinfo(1)</a> to use BSD authentication and removal of the suid root bit.
|
|
<li>Improve powerpc's awacs driver; many interrupt fixes.
|
|
<li>Allow the use of ^T in passphrases read by <a href="https://man.openbsd.org/readpassphrase.3">readpassphrase(3)</a>.
|
|
<li><strong>SECURITY FIX: avoid race in <a href="https://man.openbsd.org/execve.2">execve(2)</a> when checking flags for <a href="https://man.openbsd.org/ptrace.2">ptrace(2)</a>.</strong><br>
|
|
<a href="errata29.html#kernexec">A source code patch is available</a>.<br>
|
|
<a href="stable.html">[Applied to stable]</a>
|
|
<li>Update if_lastchange when IFF_UP is changed instead of on every packet transmission and receipt.
|
|
<li>VM renovations on mvme88k.
|
|
<li>Use <a href="https://man.openbsd.org/va_start.3">va_start(3)</a> and <a href="https://man.openbsd.org/va_end.3">va_end(3)</a> for every call to <a href="https://man.openbsd.org/vfprintf.3">vfprintf(3)</a> and associates.
|
|
<li>Replace commonly used static lists with persistent growable arrays in <a href="https://man.openbsd.org/make.1">make(1)</a>.
|
|
<li>Have <a href="https://man.openbsd.org/slstats.8">slstats(8)</a> use an <a href="https://man.openbsd.org/ioctl.2">ioctl(2)</a> so it doesn't need to be setgid.
|
|
<li>Ensure *chi doesn't receive interrupts before being initialized.
|
|
<li>Let pci_mapreg_map() take an extra argument to limit the size of the PCI region to map so we can still work with things publishing too much PCI memory.
|
|
<li>Use lpd_flags in <a href="https://man.openbsd.org/rc.8">rc(8)</a>, allowing flags to be passed to <a href="https://man.openbsd.org/lpd.8">lpd(8)</a>.
|
|
<li>Support EDNS0 (RFC2671) buffer size notification for DNS queries.
|
|
<li>Upgrade to binutils 2.10.1.
|
|
<li>Protect include files in /usr/include/net against multiple inclusion.
|
|
<li>Fix unmapped interrupt problems on some VIA-based boards.
|
|
<li>New options, improvements, and fixes for <a href="https://man.openbsd.org/wicontrol.8">wicontrol(8)</a>.
|
|
<li>Palm support in libsectok.
|
|
<li>Rewrite <a href="https://man.openbsd.org/ldd.1">ldd(1)</a>.
|
|
<li><strong>RELIABILITY FIX: use correct <a href="https://man.openbsd.org/db.3">db(3)</a> pointers in <a href="https://man.openbsd.org/pwd_mkdb.8">pwd_mkdb(8)</a>, and don't star out empty passwords</strong><br>
|
|
<a href="errata29.html#pwd_mkdb">A source code patch is available</a>.<br>
|
|
<a href="stable.html">[Applied to stable]</a>
|
|
<li>Assorted <a href="https://man.openbsd.org/ppp.8">ppp(8)</a> alterations.
|
|
<li>Correct initialization of the policy_id field for SA structures in <a href="https://man.openbsd.org/isakmpd.8">isakmpd(8)</a>.
|
|
<li>PCI shim for <a href="https://man.openbsd.org/wi.4">wi(4)</a>.
|
|
<li>Repair preservation option in <a href="https://man.openbsd.org/cp.1">cp(1)</a>.
|
|
<li>Allow the number of <a href="https://man.openbsd.org/gre.4">gre(4)</a> devices to be changed in <a href="https://man.openbsd.org/boot_config.8">boot_config(8)</a>.
|
|
<li><a href="https://man.openbsd.org/rc.8">rc(8)</a> no longer starts netatalk -- if installed -- by default.
|
|
<li><strong>RELIABILITY FIX: compute length correctly on certificates in <a href="https://man.openbsd.org/isakmpd.8">isakmpd(8)</a>.</strong><br>
|
|
<a href="errata29.html#isakmpd">A source code patch is available</a>.<br>
|
|
<a href="stable.html">[Applied to stable]</a>
|
|
<li>Ensure <a href="https://man.openbsd.org/kqueue.2">kqueue(2)</a> works on <a href="https://man.openbsd.org/mount_ext2fs.8">ext2fs(8)</a>.
|
|
<li>More pipe fiddling.
|
|
<li>Enforce Remote-ID specified in Phase 1 peer section in <a href="https://man.openbsd.org/isakmpd.8">isakmpd(8)</a>.
|
|
<li>Ongoing license audit and copyright notice cleanup.
|
|
<li>Extend pfkeyv2's RFC2367 compliance and fix backward compatibility problems.
|
|
<li>Adjust routing socket message to the right size.
|
|
<li>Switch UID when <a href="https://man.openbsd.org/sshd.8">sshd(8)</a> cleans up temporary files and sockets.
|
|
<li>Speed up <a href="https://man.openbsd.org/arc4random.3">arc4random(3)</a> in some net subsystems.
|
|
<li>Upgrade to XFree86 4.1.0.
|
|
<li>Use default hoplimit when icmp6_error doesn't know about the incoming interface.
|
|
<li>Create <a href="https://man.openbsd.org/sysctl.3">sysctl(3)</a> parameters for ccpu, diskstats, fscale, nprocs, and physmem.
|
|
<li>New <a href="https://man.openbsd.org/md5.1">md5(1)</a> implementation with a BSD copyright and other improvements; includes regression test.
|
|
<li>Improve <a href="https://man.openbsd.org/swapctl.8">swapctl(8)</a>.
|
|
<li>Don't allow packets that need <a href="https://man.openbsd.org/ipsec.4">IPsec(4)</a> processing to be bridge-broadcast.
|
|
<li>Expand handling of X.509 and KeyNote certificates in <a href="https://man.openbsd.org/isakmpd.8">isakmpd(8)</a>.
|
|
<li>Fix some <a href="https://man.openbsd.org/tcp.4">tcp(4)</a> behaviour with connections in the CLOSING state.
|
|
<li>Some <a href="https://man.openbsd.org/ld.so.1">ld.so(1)</a> renovations.
|
|
<li>Repair <a href="https://man.openbsd.org/kqueue.2">kqueue(2)</a> related panic.
|
|
<li><strong>SECURITY FIX: verify location when using <a href="https://man.openbsd.org/fts.3">fts(3)</a> to pop up directories.</strong><br>
|
|
<a href="errata29.html#fts">A source code patch is available</a>.<br>
|
|
<a href="stable.html">[Applied to stable]</a>
|
|
<li>Update root device selection routines for sun3.
|
|
<li>Miscellaneous <a href="https://man.openbsd.org/fxp.4">fxp(4)</a> improvements.
|
|
<li>Remove <a href="https://man.openbsd.org/ipf.4">ipf(4)</a> from the tree.
|
|
<li>Remove <a href="https://man.openbsd.org/i386/pcvt.4">pcvt(4)</a> from the tree.
|
|
<li>Add BSD authentication support to userland programs; authorization defaults in <a href="https://man.openbsd.org/login.conf.5">login.conf(5)</a>.
|
|
<li><strong>SECURITY FIX: Update to <a href="https://man.openbsd.org/sendmail.8">sendmail(8)</a> 8.11.4 which addresses signal race conditions.</strong><br>
|
|
<a href="errata29.html#sendmail">A source code patch is available</a>.<br>
|
|
<a href="stable.html">[Applied to stable]</a>
|
|
<li>Hardware clock support on powerpc.
|
|
<li>Fix directory state tracking in <a href="https://man.openbsd.org/fsck.8">fsck(8)</a>.
|
|
<li>New BIOCGHDRCMPLT and BIOCSHDRCMPLT ioctls for <a href="https://man.openbsd.org/bpf.4">bpf(4)</a> to disable overwriting of the link-level source address.
|
|
<li>Support interface capabilities.
|
|
<li>Repair cluster_rbuild() in vfs_cluster.
|
|
<li>Twiddle with the <a href="https://man.openbsd.org/atapiscsi.4">atapiscsi(4)</a> driver.
|
|
<li><a href="https://man.openbsd.org/fxp.4">fxp(4)</a> bug fixes.
|
|
<li>Bring back the old (no ECONNABORTED) <a href="https://man.openbsd.org/accept.2">accept(2)</a> behaviour for Unix domain sockets.
|
|
<li>Support Heimdal's <a href="https://man.openbsd.org/kerberos.1">Kerberos 5</a>.
|
|
<li>Upgrade to <a href="https://man.openbsd.org/perl.1">Perl 5.6.1</a>.
|
|
<li>Allow arbitrary atime/mtime setting on <a href="https://man.openbsd.org/mount_ext2fs.8">ext2fs(8)</a> volumes.
|
|
<li>Fix lookup code in <a href="https://man.openbsd.org/mount_procfs.8">procfs(8)</a>.
|
|
<li>Many assorted <a href="https://man.openbsd.org/mg.1">mg(1)</a> fixes and improvements.
|
|
<li>Clean up and shrink <a href="https://man.openbsd.org/make.1">make(1)</a>.
|
|
<li>Various improvements to the <a href="https://man.openbsd.org/ubsec.4">ubsec(4)</a> driver.
|
|
<li>Fix panics in the <a href="https://man.openbsd.org/ep.4">ep(4)</a> driver by initializing packet tags.
|
|
<li>New PCMCIA products from NetBSD.
|
|
<li>Utilize packet tags in the net subsystems.
|
|
<li>Diversify time parameter parsing in <a href="https://man.openbsd.org/sshd.8">sshd(8)</a>.
|
|
<li>Better keyboard-interactive support for <a href="https://man.openbsd.org/ssh.1">ssh(1)</a>.
|
|
<li>Convert <a href="https://man.openbsd.org/lseek.2">lseek(2)</a> <a href="https://man.openbsd.org/read.2">read(2)</a>/<a href="https://man.openbsd.org/write.2">write(2)</a> to <a href="https://man.openbsd.org/pread.2">pread(2)</a>/<a href="https://man.openbsd.org/pwrite.2">pwrite(2)</a> in <a href="https://man.openbsd.org/kvm.3">kvm(3)</a>.
|
|
<li>Import libsectok, used for ISO 7816 smart cards and iButtons.
|
|
<li>Tweak delays in the i82365 PCMCIA controller driver to avoid momentary freezes.
|
|
<li>Improve rate support in <a href="https://man.openbsd.org/auich.4">auich(4)</a>.
|
|
<li>Make vax use <a href="https://man.openbsd.org/wscons.4">wscons(4)</a> and enable the smg framebuffer.
|
|
<li>More <a href="https://man.openbsd.org/select.2">select(2)</a> fixes in <a href="https://man.openbsd.org/ssh.1">ssh(1)</a>.
|
|
<li>Fix X11 client bug in <a href="https://man.openbsd.org/ssh.1">ssh(1)</a>.
|
|
<li>PMAP_NEW support on the vax and hp300.
|
|
<li>Create COMPAT_23 and COMPAT_25 options.
|
|
<li>In <a href="https://man.openbsd.org/vr.4">vr(4)</a>, handle suspend mode better on the VT6102.
|
|
<li>Do not check return values for <a href="https://man.openbsd.org/malloc.9">malloc(9)</a> calls with M_WAIT or M_WAITOK.
|
|
<li>New option: SMALL_KERNEL, subtly changes some kernel semantics to change the kernel size significantly. Use *only* for boot floppies.
|
|
<li>Change ip_sum semantics in ip_output().
|
|
<li>Compress <a href="https://man.openbsd.org/ac97.4">ac97(4)</a> vendor tables.
|
|
<li><a href="https://man.openbsd.org/ac97.4">ac97(4)</a> now knows about rev 2.2.
|
|
<li>Squish compatopts to a more sensible set, killing COMPAT_09, COMPAT_10, COMPAT_11.
|
|
<li>Shrink the alpha boot blocks a bit.
|
|
<li>We no longer support ECOFF kernel loading in the alpha boot block.
|
|
<li>Teach <a href="https://man.openbsd.org/ac97.4">ac97(4)</a> about more CODEC models.
|
|
<li>At boot time, <a href="https://man.openbsd.org/swapon.8">swapon(8)</a> before <a href="https://man.openbsd.org/fsck.8">fsck(8)</a> is run.
|
|
<li>Fix <a href="https://man.openbsd.org/fts.3">fts(3)</a> to handle very long paths.
|
|
<li>Repair various signal handler bugs in <a href="https://man.openbsd.org/pppd.8">pppd(8)</a>.
|
|
<li>Handle memory allocation failures in <a href="https://man.openbsd.org/fsck_ffs.8">fsck_ffs(8)</a> and <a href="https://man.openbsd.org/fsck_ext2fs.8">fsck_ext2fs(8)</a> better.
|
|
<li>Fix a recently introduced bug in <a href="https://man.openbsd.org/supfilsrv.8">supfilsrv(8)</a>.
|
|
<li>Correct acceptance of ARP packets coming in on non-IP <a href="https://man.openbsd.org/bridge.4">bridge(4)</a> interfaces.<br>
|
|
<a href="stable.html">[Applied to stable]</a>
|
|
<li><a href="https://man.openbsd.org/txp.4">txp(4)</a> now works on the alpha.
|
|
<li>More fixes to <a href="https://man.openbsd.org/make.1">make(1)</a>.
|
|
<li>Check a <a href="https://man.openbsd.org/calloc.3">calloc(3)</a> in <a href="https://man.openbsd.org/fsck_ffs.8">fsck_ffs(8)</a>.
|
|
<li>Add a temporary DTYPE_CRYPTO until device cloning support shows up.
|
|
<li>Fixes to fdescfs.
|
|
<li>busdma changes to <a href="https://man.openbsd.org/txp.4">txp(4)</a>, preparing for the alpha.
|
|
<li>Split <a href="https://man.openbsd.org/wi.4">wi(4)</a> into bus dependent and independent parts.
|
|
<li>On hp300, splhigh() in cpu_exit().
|
|
<li>Misc cleanup of the shared m68k codebase.
|
|
<li>More <a href="https://man.openbsd.org/bus_dmamap_sync.9">bus_dmamap_sync(9)</a> in <a href="https://man.openbsd.org/hifn.4">hifn(4)</a>.
|
|
<li>Initial non-working alpha <a href="https://man.openbsd.org/ld.so.1">ld.so(1)</a> support.
|
|
<li>Support newer versions of the <a href="https://man.openbsd.org/lmc.4">lmc(4)</a> cards.
|
|
<li>Kill a debug message in <a href="https://man.openbsd.org/ubsec.4">ubsec(4)</a>.
|
|
<li>Add swiss german keyboard layout to <a href="https://man.openbsd.org/wscons.4">wscons(4)</a>.
|
|
<li>Smoke out the OLD_PIPE code.
|
|
<li>krb4-1.0.8
|
|
<li>Bug fix to <a href="https://man.openbsd.org/make.1">make(1)</a>.
|
|
<li>Speed up top-level tree Makefiles by doing exec for subshells in new directories.
|
|
<li>Artful fiddling of the kernel pipe stat code.
|
|
<li>No need for setgid kmem on <a href="https://man.openbsd.org/iostat.8">iostat(8)</a> anymore.
|
|
<li>Add more <a href="https://man.openbsd.org/sysctl.3">sysctl(3)</a> support in the kernel.
|
|
<li>Make the alpha floppies fit again...
|
|
<li>Make <a href="https://man.openbsd.org/hifn.4">hifn(4)</a> use <a href="https://man.openbsd.org/bus_dma.9">bus_dma(9)</a>. Now works on the alpha.
|
|
<li>Initial cut at userland hardware <a href="https://man.openbsd.org/crypto.4">crypto(4)</a> support.
|
|
<li>In <a href="https://man.openbsd.org/ubsec.4">ubsec(4)</a>, initial support for the Broadcom 5820.
|
|
<li>Honour ddb.console on sun3.
|
|
<li>On the pmax, fix a curproc misuse.
|
|
<li>In <a href="https://man.openbsd.org/pcibios.4">pcibios(4)</a>, deal with buggy BIOSs which incorrectly leave the router as 000:00:0.
|
|
<li>hp300 cleanup in progress...
|
|
<li>Solve a problem of Lilliputan proportions in powerpc <a href="https://man.openbsd.org/isinf.3">isinf(3)</a>.
|
|
<li>Mickey goes mad and does a <a href="https://man.openbsd.org/strlcpy.3">strlcpy(3)</a> whack on src/bin.
|
|
<li>Unify rdsetroot and <a href="https://man.openbsd.org/rd.4">rd(4)</a> support between almost all architectures.
|
|
<li>Man page cleanups galore.
|
|
<li>In <a href="https://man.openbsd.org/hifn.4">hifn(4)</a> attempt to support the Hifn 7951.
|
|
<li>Do stdout/stderr flushing in <a href="https://man.openbsd.org/sshd.8">sshd(8)</a> using non-blocking mode.
|
|
<li>Fix kerberosIV versioning link problem.
|
|
<li>Cleanup MAP_COPY flags in the tree.
|
|
<li>Use genassym.cf on alpha.
|
|
<li>Unify the <a href="https://man.openbsd.org/rd.4">rd(4)</a> support.
|
|
<li>Update <a href="https://man.openbsd.org/sysctl.8">sysctl(8)</a> and <a href="https://man.openbsd.org/vmstat.8">vmstat(8)</a> to use the new interfaces.
|
|
<li>Make more data available via the <a href="https://man.openbsd.org/sysctl.3">sysctl(3)</a> interface.
|
|
<li>Handle fastroute in the <a href="https://man.openbsd.org/bridge.4">bridge(4)</a>.
|
|
<li>hp300 man page cleanup.
|
|
<li>Fix a resource leak in <a href="https://man.openbsd.org/twe.4">twe(4)</a>.<br>
|
|
<a href="stable.html">[Applied to stable]</a>
|
|
<li>Use <a href="https://man.openbsd.org/madvise.2">madvise(2)</a> option with MADV_FREE for <a href="https://man.openbsd.org/malloc.3">malloc(3)</a> 'h' flag.
|
|
<li>Support MADV_DONTNEED and MADV_FREE in <a href="https://man.openbsd.org/madvise.2">madvise(2)</a>.
|
|
<li>Switch sparc to UVM and PMAP_NEW.
|
|
<li>Support HP425e.
|
|
<li>Refill <a href="https://man.openbsd.org/txp.4">txp(4)</a> receive ring only when empty -- performance enhancement.
|
|
<li>Fix SSH2 <code>-R</code> support in <a href="https://man.openbsd.org/ssh.1">ssh(1)</a>.
|
|
<li>More pmap/uvm interface changes.
|
|
<li>Correct signal handling in <a href="https://man.openbsd.org/ping6.8">ping6(8)</a>.
|
|
<li>Implement screen blanker in <a href="https://man.openbsd.org/wscons.4">wscons(4)</a>.
|
|
<li>Attempt to support hifn7951 in <a href="https://man.openbsd.org/hifn.4">hifn(4)</a>.
|
|
<li><a href="https://man.openbsd.org/realloc.3">realloc(3)</a> fixes to <a href="https://man.openbsd.org/ipf.8">ipf(8)</a>.
|
|
<li>ipf 3.4.17
|
|
<li>Fix kernel extent code to be more careful about ranges.
|
|
<li>UVM support for mac68k.
|
|
<li>Change i386 in_cksum failure to a <a href="https://man.openbsd.org/printf.9">printf(9)</a>, instead of a <a href="https://man.openbsd.org/panic.9">panic(9)</a>.<br>
|
|
<a href="stable.html">[Applied to stable]</a>
|
|
<li>In <a href="https://man.openbsd.org/txp.4">txp(4)</a>, add support for hardware <a href="https://man.openbsd.org/vlan.4">vlan(4)</a>.
|
|
<li>Fix a bug in <a href="https://man.openbsd.org/make.1">make(1)</a> exposed by the recent jumbo patch.
|
|
<li>Fix <a href="https://man.openbsd.org/ti.4">ti(4)</a> to handle <a href="https://man.openbsd.org/vlan.4">vlan(4)</a> properly.
|
|
<li>vsunlock fixes to UVM.
|
|
<li>Signal ignore bug fix to <a href="https://man.openbsd.org/ssh.1">ssh(1)</a>.
|
|
<li>Kill i386 VM & pmap_old support.
|
|
<li>Fix process priority bug in <a href="https://man.openbsd.org/atrun.8">atrun(8)</a>.
|
|
<li>Enable <a href="https://man.openbsd.org/vlan.4">vlan(4)</a> by default in GENERIC kernels.
|
|
<li>Fix <a href="https://man.openbsd.org/pread.3">pread(3)</a>, <a href="https://man.openbsd.org/preadv.3">preadv(3)</a>, <a href="https://man.openbsd.org/pwrite.3">pwrite(3)</a>, and <a href="https://man.openbsd.org/pwritev.3">pwritev(3)</a> on big endian architectures.
|
|
<li>In <a href="https://man.openbsd.org/sendmail.8">sendmail(8)</a>, use FAST_PID_RECYCLE.
|
|
<li>Remove excess (vaddr_t) casts.
|
|
<li>Get rid of CLSIZE and friends.
|
|
<li>Increase <a href="https://man.openbsd.org/strlcpy.3">strlcpy(3)</a> in parts of the tree.
|
|
<li>Some minor changes to <a href="https://man.openbsd.org/isakmpd.8">isakmpd(8)</a>.
|
|
<li>Cleanup M_* malloc types in the kernel.
|
|
<li>UVM for the hp300.
|
|
<li>Numerous cleanups to <a href="https://man.openbsd.org/sup.1">sup(1)</a>.
|
|
<li>In <a href="https://man.openbsd.org/systat.8">systat(8)</a>, handle <a href="https://man.openbsd.org/kvm_nlist.3">kvm_nlist(3)</a> failing.
|
|
<li>Fix a channel race in <a href="https://man.openbsd.org/sshd.8">sshd(8)</a>.
|
|
<li>Document that <a href="https://man.openbsd.org/nc.1">nc(1)</a> no longer has a -e option.
|
|
<li>Fix localhost handling bug in <a href="https://man.openbsd.org/httpd.8">httpd(8)</a>.
|
|
<li>Jumbo patch to <a href="https://man.openbsd.org/make.1">make(1)</a> that has been brewing for a while.
|
|
<li>Various improvements to <a href="https://man.openbsd.org/mg.1">mg(1)</a>.
|
|
<li>Big USB code update.
|
|
<li>Fix a signed vs unsigned error in the <a href="https://man.openbsd.org/gm.4">gm(4)</a> Ethernet driver.
|
|
<li>In <a href="https://man.openbsd.org/wump.6">wump(6)</a>, improve our cave topology algorithm. Don't ask.
|
|
<li>Force -h to override the BLOCKSIZE environment in <a href="https://man.openbsd.org/du.1">du(1)</a>.
|
|
<li>Substantial updates to <a href="https://man.openbsd.org/sup.1">sup(1)</a>.
|
|
<li>Fix a register save/restore bug in <a href="https://man.openbsd.org/clcs.4">clcs(4)</a> so that suspend/resume works better.
|
|
<li>Allow the right CTRL+ALT keys to work as the left ones do in <a href="https://man.openbsd.org/wskbd.4">wskbd(4)</a>.
|
|
<li>Continue to hack our new <a href="https://man.openbsd.org/txp.4">txp(4)</a> driver into shape.
|
|
<li>In <a href="https://man.openbsd.org/ifconfig.8">ifconfig(8)</a>, implement support for removing tunnel outer IP address pair.
|
|
<li>Revert a buggy optimization in <a href="https://man.openbsd.org/tsort.1">tsort(1)</a>.
|
|
<li>Use <a href="https://man.openbsd.org/pread.2">pread(2)</a> in <a href="https://man.openbsd.org/nlist.3">nlist(3)</a> instead of abusing <a href="https://man.openbsd.org/lseek.2">lseek(2)</a> with <a href="https://man.openbsd.org/read.2">read(2)</a>.
|
|
<li>Remove cruft leftover from the old PCVT console driver.
|
|
<li>Fix filename tab-completion in <a href="https://man.openbsd.org/mg.1">mg(1)</a>.
|
|
<li>Convert some more drivers to the new <a href="https://man.openbsd.org/timeout.9">timeout(9)</a> interface.
|
|
<li>Whack dtom() in the kernel. Fo'get about it.
|
|
<li>Avoid a NULL pointer dereference in <a href="https://man.openbsd.org/faithd.8">faithd(8)</a>.
|
|
<li>Various reset and delay fixes in <a href="https://man.openbsd.org/wdc.4">wdc(4)</a> to help certain ATAPI devices.
|
|
<li>Deal with suspend/resume more cleanly in <a href="https://man.openbsd.org/pccbb.4">pccbb(4)</a>.
|
|
<li>Better hints handling and memory allocation in <a href="https://man.openbsd.org/tsort.1">tsort(1)</a>.
|
|
<li>Correct an error condition in /etc/ksh.kshrc.
|
|
<li>Add a koi8-r keyboard layout for <a href="https://man.openbsd.org/wskbd.4">wskbd(4)</a>.
|
|
<li>Allow interoperability between OpenSSH and older ssh-2.0.x variants with weaker key generation.
|
|
<li>Instrument improved locking and rework SCSI a bit in <a href="https://man.openbsd.org/ami.4">ami(4)</a>.
|
|
<li>Cleanups to <a href="https://man.openbsd.org/ancontrol.8">ancontrol(8)</a>.
|
|
<li>Add a -b option to <a href="https://man.openbsd.org/ssh.1">ssh(1)</a>, similar to <a href="https://man.openbsd.org/telnet.1">telnet(1)</a>'s equivalent.
|
|
<li>Fix a memory handling bug in <a href="https://man.openbsd.org/telnet.1">telnet(1)</a>.
|
|
<li>Use <a href="https://man.openbsd.org/pool.9">pool(9)</a> interface for the VFS cache.
|
|
<li>Improve OpenSSH interoperability with ssh.com-2.0.x clients.
|
|
<li>In the mvme88k port, replace resource maps with extents.
|
|
<li>Numerous fixes and updates to <a href="https://man.openbsd.org/sup.1">sup(1)</a>.
|
|
</ul>
|