-
Notifications
You must be signed in to change notification settings - Fork 43
/
Copy pathplus29.html
858 lines (848 loc) · 71.9 KB
/
plus29.html
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
<!doctype html>
<html lang=en id=plus>
<meta charset=utf-8>
<title>OpenBSD 2.9 Changelog</title>
<meta name="description" content="OpenBSD 2.9 changes">
<meta name="viewport" content="width=device-width, initial-scale=1">
<link rel="stylesheet" type="text/css" href="openbsd.css">
<link rel="canonical" href="https://www.openbsd.org/plus29.html">
<style>
a[href="stable.html"] {
color: var(--green);
}
strong {
color: var(--red);
}
h3 {
color: var(--blue);
}
p strong {
font-weight: normal;
}
</style>
<h2 id=OpenBSD>
<a href="index.html">
<i>Open</i><b>BSD</b></a>
2.9 Changelog
</h2>
<hr>
<p>
This is a partial list of the major machine independent changes
(i.e., these are the changes people ask about most often). Machine
specific changes have also been made, and are sometimes mentioned
in the pages for the specific <a href="plat.html">platforms</a>.
<p>
Note: <strong>Problems for which patches exist are marked in red</strong>.
<p>
For changes in other releases, click below:<br>
<a href="plus20.html">2.0</a>,
<a href="plus21.html">2.1</a>,
<a href="plus22.html">2.2</a>,
<a href="plus23.html">2.3</a>,
<a href="plus24.html">2.4</a>,
<a href="plus25.html">2.5</a>,
<a href="plus26.html">2.6</a>,
<a href="plus27.html">2.7</a>,
<a href="plus28.html">2.8</a>,
<a href="plus30.html">3.0</a>,
<a href="plus31.html">3.1</a>,
<a href="plus32.html">3.2</a>,
<a href="plus33.html">3.3</a>,
<a href="plus34.html">3.4</a>,
<a href="plus35.html">3.5</a>,
<a href="plus36.html">3.6</a>,
<a href="plus37.html">3.7</a>,
<br>
<a href="plus38.html">3.8</a>,
<a href="plus39.html">3.9</a>,
<a href="plus40.html">4.0</a>,
<a href="plus41.html">4.1</a>,
<a href="plus42.html">4.2</a>,
<a href="plus43.html">4.3</a>,
<a href="plus44.html">4.4</a>,
<a href="plus45.html">4.5</a>,
<a href="plus46.html">4.6</a>,
<a href="plus47.html">4.7</a>,
<a href="plus48.html">4.8</a>,
<a href="plus49.html">4.9</a>,
<a href="plus50.html">5.0</a>,
<a href="plus51.html">5.1</a>,
<a href="plus52.html">5.2</a>,
<a href="plus53.html">5.3</a>,
<a href="plus54.html">5.4</a>,
<br>
<a href="plus55.html">5.5</a>,
<a href="plus56.html">5.6</a>,
<a href="plus57.html">5.7</a>,
<a href="plus58.html">5.8</a>,
<a href="plus59.html">5.9</a>,
<a href="plus60.html">6.0</a>,
<a href="plus61.html">6.1</a>,
<a href="plus62.html">6.2</a>,
<a href="plus63.html">6.3</a>,
<a href="plus64.html">6.4</a>,
<a href="plus65.html">6.5</a>,
<a href="plus66.html">6.6</a>,
<a href="plus67.html">6.7</a>,
<a href="plus68.html">6.8</a>,
<a href="plus69.html">6.9</a>,
<a href="plus70.html">7.0</a>,
<a href="plus71.html">7.1</a>,
<br>
<a href="plus72.html">7.2</a>,
<a href="plus73.html">7.3</a>,
<a href="plus74.html">7.4</a>,
<a href="plus75.html">7.5</a>,
<a href="plus76.html">7.6</a>,
<a href="plus77.html">7.7</a>,
<a href="plus.html">current</a>.
<br>
<p>
<h3>Changes made between OpenBSD 2.8 and 2.9</h3>
<p>
<ul>
<li><strong>SECURITY FIX: Avoid DoS attack in <a href="https://man.openbsd.org/ftpd.8">ftpd</a> using <a href="https://man.openbsd.org/glob.3">glob</a> patch.</strong><br>
<a href="errata28.html#glob_limit">A patch is available</a>.<br>
<a href="stable.html">[Applied to stable]</a>
<li>...
<li><strong>SECURITY FIX: Fix <a href="https://man.openbsd.org/ipf.8">ipf(8)</a> fragment caching bug.</strong><br>
<a href="errata28.html#ipf_frag">A patch is available</a>.<br>
<a href="stable.html">[Applied to stable]</a>
<li>...
<li><strong>SECURITY FIX: Fix buffer overflows contained in <a href="https://man.openbsd.org/glob.3">glob(3)</a> function.</strong><br>
<a href="errata28.html#glob">A patch is available</a>.<br>
<a href="stable.html">[Applied to stable]</a>
<li>...
<li>Check for short packets and bad types sent to <a href="https://man.openbsd.org/timed.8">timed(8)</a>.<br>
<a href="stable.html">[Applied to stable]</a>
<li>...
<li><a href="https://www.openssh.com/">OpenSSH</a> 2.5.2 released.<br>
<a href="stable.html">[Applied to stable]</a>
<li>...
<li><strong>SECURITY FIX: Be careful with file permissions in readline library</strong><br>
<a href="errata28.html#readline">A patch is available</a>.<br>
<a href="stable.html">[Applied to stable]</a>
<li>...
<li>Make buffer size 8k on NE1000, and 16k otherwise for
<a href="https://man.openbsd.org/ne.4">ne</a>.<br>
<a href="stable.html">[Applied to stable]</a>
<li>...
<li>Move bogus packet length test in udp packets to avoid being stuck at <a href="https://man.openbsd.org/splsoftnet.9">splsoftnet</a>.<br>
<a href="stable.html">[Applied to stable]</a>
<li>...
<li><strong>SECURITY FIX: on i386, check arguments to USER_LDT (not enabled by default) mappings.</strong><br>
<a href="errata28.html#userldt">A patch is available</a>.<br>
<a href="stable.html">[Applied to stable]</a>
<li>...
<li><strong>IMPLEMENTATION FIX: fix port number computation in libwrap client side ident implementation.</strong><br>
<a href="errata28.html#libwrap">A patch is available</a>.<br>
<a href="stable.html">[Applied to stable]</a>
<li>...
<li>Fix several copyin/copyout bugs in sys/compat.
<li>Provide a random start for tcp timestamps.
<li>Support sharing disks between MacOS and the PowerPC port.
<li>Add support for the SaramNcom NS-1100M in the <a href="https://man.openbsd.org/wi.4">wi(4)</a> driver.
<li>Fix support for the D-Link DE660 pcmcia card in <a href="https://man.openbsd.org/ne.4">ne(4)</a>
<li>In <a href="https://man.openbsd.org/sis.4">sis(4)</a> add support for reading the MAC address from the APC CMOS RAM in SiS630E-based chipsets.
<li>In <a href="https://man.openbsd.org/ne.4">ne(4)</a>, changes in media type initializion on DP8390-compatibles.
<li>Implement read/write access to an IEEE 802.3u <a href="https://man.openbsd.org/mii.4">mii(4)</a> bus using the bit-bang method.
<li>Add support for DOZE mode on powerpc processors that support it.
<li>Add support for the Symbios 53c1010 in the <a href="https://man.openbsd.org/siop.4">siop(4)</a> driver.
<li>Implement <a href="https://man.openbsd.org/mincore.2">mincore(2)</a>, <a href="https://man.openbsd.org/mlockall.2">mlockall(2)</a> and <a href="https://man.openbsd.org/munlockall.2">munlockall(2)</a>.
<li>Added support for <a href="https://man.openbsd.org/ami.4">ami(4)</a> MegaRAID Controllers.
<li>Fixed several occurrences of exit(-#); <a href="https://man.openbsd.org/exit.3">exit(3)</a> only passes the lower 8 bits of status on to the parent.
<li>Fixed several occurrences of PATH_MAX+1 that should be PATH_MAX.
<li>Fix interrupt handler registration on the mvme88k port, remove 68k-isms and add UKC support.
<li>Add some non-US encodings to the USB keyboard driver.
<li>Disable bogus file check in <a href="https://man.openbsd.org/cvs.1">cvs(1)</a>.<br>
<a href="stable.html">[Applied to stable]</a>
<li>Enable tag queuing and fix some wide/sync negotiation problems in the <a href="https://man.openbsd.org/siop.4">siop(4)</a> driver.
<li>Add support for <a href="https://man.openbsd.org/isapnp.4">isapnp(4)</a> i82365-based <a href="https://man.openbsd.org/pcmcia.4">pcmcia(4)</a> controllers.
<li>Many man page fixes.
<li>Fix checksum calculations in <a href="https://man.openbsd.org/bridge.4">bridge(4)</a> setups.
<li>Avoid reading some AC97 registers in <a href="https://man.openbsd.org/neo.4">neo(4)</a> driver as needed by some devices.
<li>Avoid a deadlock condition in the syncer.
<li><a href="https://man.openbsd.org/wscons.4">wscons(4)</a> support for powerpc adb keyboard.
<li>Plug many memory leaks in the libc <a href="https://man.openbsd.org/rpc.3">rpc(3)</a> code.
<li>Drop packets with 127.0.0.0/8 in header field, if the packet is from outside. RFC1122 dictates that 127.0.0.8 must not appear on the wire.
<li>In <a href="https://man.openbsd.org/sudo.8">sudo(8)</a>, fix negation of path-type Defaults entries in a boolean context in <a href="https://man.openbsd.org/sudoers.5">sudoers(5)</a>.
<li>Add open hashing functions to libc.
<li><a href="https://man.openbsd.org/fsck.8">fsck(8)</a> changes for soft updates support.
<li>Extend <a href="https://man.openbsd.org/kqueue.2">kqueue(2)</a> down to the device layer for better device support.
<li>ncurses-5.2-20010224
<li>In the i386 <a href="https://man.openbsd.org/i386/bios.4">bios(4)</a> driver, add a check for ROMs mapped into memory and setup an extent for each one found. This fixes a problem with ISA cards using iomem space already claimed by a ROM.
<li>Update to <a href="https://man.openbsd.org/sendmail.8">sendmail(8)</a> 8.11.3 which fixes potential data loss if a machine crashes.
<li>A number of filesystem races and locking problems have been fixed.
<li>In <a href="https://man.openbsd.org/ne.4">ne(4)</a>, add support for a D-Link DFE-650 model with a different vendor ID.
<li>Improved stability with soft updates.
<li>WEP support for the <a href="https://man.openbsd.org/an.4">an(4)</a> Aironet driver.
<li>Default SSID in the <a href="https://man.openbsd.org/an.4">an(4)</a> Aironet driver; now it will connect to any SSID.
<li>Better detection of the VAX VS4000/VLC and MV3100/{3,4}0.
<li>Improved S3 Savage X11 driver for XFree86 3.3.6.
<li>Add <a href="https://man.openbsd.org/mii.4">mii(4)</a> support to the <a href="https://man.openbsd.org/vr.4">vr(4)</a> Via Rhine network driver.
<li>Add support for the Dlink 530TX+ to the <a href="https://man.openbsd.org/rl.4">rl(4)</a> RealTek 8129/8139 network driver.
<li><strong>SECURITY FIX: for <a href="https://man.openbsd.org/ipsec.4">ipsec(4)</a>, handle AH packets with IP options more strictly.</strong><br>
<a href="errata28.html#ipsec_ah">A patch is available</a>.<br>
<a href="stable.html">[Applied to stable]</a>
<li>In the powerpc port, add edge/level sense detection capability to the interrupt controller.
<li>Add <a href="https://man.openbsd.org/uftdi.4">uftdi(4)</a> driver for the FTDI USB->Serial converter device.
<li>Tone down the verbosity levels in many SCSI drivers.
<li><a href="https://www.openssh.com/">OpenSSH</a> 2.5.1 released.<br>
<a href="stable.html">[Applied to stable]</a>
<li>Fix DMA memory allocations in <a href="https://man.openbsd.org/twe.4">twe(4)</a>.
<li><strong>SECURITY FIX: update to <a href="https://man.openbsd.org/sudo.8">sudo</a>-1.6.3p6 which fixes a non-exploitable buffer overflow on very long argv components.</strong><br>
<a href="errata28.html#sudo">A patch is available</a>.<br>
<a href="stable.html">[Applied to stable]</a>
<li>Correctly detect Daylight Saving Time changes in <a href="https://man.openbsd.org/cron.8">cron(8)</a>.
<li>Add bash-like double-tab completion support to <a href="https://man.openbsd.org/ksh.1">ksh(1)</a>.
<li>Avoid losing RTC after suspend/resume on some laptops.
<li>Repair an integer conversion bug in <a href="https://man.openbsd.org/pms.4">pms(4)</a> which fixes the mouse resolution setting in X.
<li>Fix non-TCP protocol mappings in <a href="https://man.openbsd.org/ipnat.4">ipnat(4)</a>.
<li>In <a href="https://man.openbsd.org/isakmpd.8">isakmpd(8)</a>, encode X.509 expirations into KeyNote credientials/policies.
<li>In <a href="https://man.openbsd.org/pppoe.8">pppoe(8)</a>, try every BPF device, not just even-numbered ones.
<li>Support -C flag in <a href="https://man.openbsd.org/nm.1">nm(1)</a>.
<li>Update ISC <a href="https://man.openbsd.org/cron.8">cron(8)</a> to 4.0b1, maintaining our local changes, including signal handling fixes.
<li>Rename old mvme68k and mvme88k <a href="https://man.openbsd.org/siop.4">siop(4)</a> driver to ssh(4) to avoid naming conflicts.
<li>Fix an uninitialized variable in <a href="https://man.openbsd.org/wsmouse.4">wsmouse(4)</a>.
<li>Some games fixes.
<li>Nuke <a href="https://man.openbsd.org/nlist.3">nlist(3)</a> and kvm(3) usage in <a href="https://man.openbsd.org/top.1">top(1)</a>.
<li>More careful buffer handling in <a href="https://man.openbsd.org/rusers.1">rusers(1)</a>.
<li>Add MII support to the <a href="https://man.openbsd.org/vr.4">vr(4)</a> driver.
<li>Several <a href="https://man.openbsd.org/ip6.4">IPv6(4)</a> improvements from KAME.
<li><a href="https://www.openssh.com/">OpenSSH</a> 2.5.0 released.<br>
<a href="stable.html">[Applied to stable]</a>
<li>Sync many parts of the alpha port with NetBSD.
<li>Fix 64-bit issues with the <a href="https://man.openbsd.org/ip6.4">IPv6(4)</a> multicast API.
<li>Rewrite libwrap RFC931 support to avoid stdio issues with sockets.
<li>Many man page fixes.
<li>Pull in latest <a href="https://man.openbsd.org/faithd.8">faithd(8)</a> daemon from KAME.
<li>In <a href="https://man.openbsd.org/tcpdump.8">tcpdump(8)</a>, deobfuscate some IP protocols and improve <a href="https://man.openbsd.org/ipsec.4">IPsec(4)</a> tunnelmode printing.
<li>Set the offset for SCSI chain B properly in the VAX <a href="https://man.openbsd.org/ncr.4">ncr(4)</a> driver.
<li>Import XFree86 4.0.3.
<li>Long username fixes to <a href="https://man.openbsd.org/lpd.8">lpd(8)</a> and <a href="https://man.openbsd.org/lprm.1">lprm(1)</a>.
<li>Convert the powerpc port to <a href="https://man.openbsd.org/uvm.9">UVM(9)</a>.
<li>Import <a href="https://man.openbsd.org/siop.4">siop(4)</a>, a replacement for the <a href="https://man.openbsd.org/ncr.4">ncr(4)</a> SCSI driver.
<li>Support more NE2000 PCMCIA devices.
<li>Avoid passing shared mbufs around the kernel to prevent accidental overwrites.
<li>Add <a href="https://man.openbsd.org/pcscp.4">pcscp(4)</a>, a driver which supports AMD Am53c974 SCSI controllers.
<li>Modify <a href="https://man.openbsd.org/sliplogin.8">sliplogin(8)</a> to handle long usernames.
<li>Allow X to work without <a href="https://man.openbsd.org/i386/pcvt.4">pcvt(4)</a>.
<li>Fix an authorizer removal problem in <a href="https://man.openbsd.org/keynote.3">keynote(3)</a>.
<li>Deactivate function pointers upon interface detach to avoid crashes.
<li>Deal with the real time clock losing interrupts on i386.
<li>Bump maxusers to 32 in the alpha port.
<li>Avoid a theoretical buffer overflow in <a href="https://man.openbsd.org/getpwent.3">getpwent(3)</a>.
<li>Fix an uninitialized variable in <a href="https://man.openbsd.org/bsd.port.mk.5">bsd.port.mk(5)</a>.
<li>Disregard ospeed in <a href="https://man.openbsd.org/tetris.6">tetris(6)</a>.
<li>Modify <a href="https://man.openbsd.org/wall.1">wall(1)</a> to handle long usernames.
<li>Many <a href="https://man.openbsd.org/isp.4">isp(4)</a> SCSI driver improvements and updates.
<li>Fix goto-line 0 case in <a href="https://man.openbsd.org/mg.1">mg(1)</a>.
<li>Fix PermitRootLogin option in <a href="https://man.openbsd.org/ssh.1">ssh(1)</a>.
<li>In <a href="https://man.openbsd.org/brconfig.8">brconfig(8)</a>, skip empty lines in the rulefile.
<li>Fix HTTP installs, which were broken for quite awhile.
<li>Repair statclock on mvme88k.
<li>Ensure softupdates is enabled before performing softupdates-specific operations.
<li>Define a <a href="https://man.openbsd.org/sendmail.8">sendmail(8)</a> variable to workaround broken name servers.
<li>Allow up to 12 virtual terminals in <a href="https://man.openbsd.org/wscons.4">wscons(4)</a>.
<li>Correct VAX signal handling.
<li>Cleanup MAC support in SSH2.
<li>Support attachment of Cheetah devices to vsbus as well as ibus in the VAX port.
<li>Disable a bogus file check in <a href="https://man.openbsd.org/cvs.1">cvs(1)</a> to ease the pain of having replicated repositories.
<li>Ensure $RSH is set in the <a href="https://man.openbsd.org/rcmd.3">rcmd(3)</a> functions.
<li>String table fixes to <a href="https://man.openbsd.org/ddb.4">ddb(4)</a> and <a href="https://man.openbsd.org/modload.8">modload(8)</a>.
<li>Update <a href="https://man.openbsd.org/wscons.4">wscons(4)</a> code.
<li>Pull in fixes for potential buffer overflows in <a href="https://man.openbsd.org/xdm.1">xdm(1)</a>.
<li>Compatibility fixes to <a href="https://man.openbsd.org/tar.1">tar(1)</a>.
<li>Many <a href="https://www.openssh.com/">OpenSSH</a> cleanups and improvements.
<li>New ELF symbol handling in <a href="https://man.openbsd.org/ddb.4">ddb(4)</a>.
<li>Enable <a href="https://man.openbsd.org/wscons.4">wscons</a> support in XFree86.
<li>Modify PCI power state for <a href="https://man.openbsd.org/clct.4">clct(4)</a> devices so they work after warm reboots.
<li>Repair BPF support in <a href="https://man.openbsd.org/gre.4">gre(4)</a>.
<li>Fix an uninitialized variable in <a href="https://man.openbsd.org/wsdisplay.4">wsdisplay(4)</a>.
<li>Fix file attribute passing in <a href="https://man.openbsd.org/sftp-server.8">sftp-server(8)</a>.
<li>Correct a memory usage error in <a href="https://man.openbsd.org/ssh-keyscan.1">ssh-keyscan(1)</a>.
<li>Add support to the powerpc for loading the bootloader and kernel from an HFS filesystem.
<li>Better failure handling in <a href="https://man.openbsd.org/vr.4">vr(4)</a>.
<li>Add support to <a href="https://man.openbsd.org/dc.4">dc(4)</a> for parsing media blocks from Intel 21143 SROMs.
<li>Strengthen SSH1 to make traffic analysis more difficult.
<li>Updates to <a href="https://man.openbsd.org/services.5">/etc/services</a> from IANA.
<li>In <a href="https://man.openbsd.org/ssh.1">ssh(1)</a>, enforce non-batch_mode if StrictHostKeyChecking is set to "ask".
<li>Backport a buffer overflow fix from XFree86 4.0.2 to in-tree XFree 3.3.6.
<li>Stricter prototypes, type fixes, and other cleanups in <a href="https://www.openssh.com/">OpenSSH</a>.
<li>Switch <a href="https://man.openbsd.org/ip6.4">IPv6</a> raw socket code from NRL to KAME.
<li>Stricter checking in SSH2.
<li><a href="https://www.openssh.com/">OpenSSH</a> 2.3.2 released.<br>
<a href="stable.html">[Applied to stable]</a>
<li>Implement an upper limit for <a href="https://man.openbsd.org/icmp6.4">icmp6(4)</a> redirects.
<li>Fix <a href="https://man.openbsd.org/rwhod.8">rwhod(8)</a> to work, and make debug code a flag option.
<li>Mark our tree such that we use <a href="https://man.openbsd.org/wscons.4">wscons(4)</a> as if it is vt220, instead of vt100.
<li>In <a href="https://man.openbsd.org/wscons.4">wscons(4)</a>, when scrolled back, if a new key is pressed, reset us to our previous location, as <a href="https://man.openbsd.org/i386/pcvt.4">pcvt(4)</a> used to do.
<li>Permit <a href="https://man.openbsd.org/sftp.1">sftp(1)</a> over SSH1 protocol.
<li>In <a href="https://man.openbsd.org/sftp.1">sftp(1)</a>, do not forward agent or X11 traffic.
<li>In <a href="https://man.openbsd.org/tar.1">tar(1)</a>, fix -T option and add support for -C option
<li>Honor TMPDIR variable in <a href="https://man.openbsd.org/tar.1">tar(1)</a>, <a href="https://man.openbsd.org/cpio.1">cpio(1)</a>, and <a href="https://man.openbsd.org/pax.1">pax(1)</a>.
<li><a href="https://man.openbsd.org/perl.1">perl(1)</a> patch CHANGE6214.
<li>New <a href="https://man.openbsd.org/route6d.8">route6d(8)</a>.
<li>Numerous more changes to <a href="https://man.openbsd.org/sftp-server.8">sftp-server(8)</a> and <a href="https://man.openbsd.org/sftp.1">sftp(1)</a>.
<li>Changes to <a href="https://man.openbsd.org/accept.2">accept(2)</a> to permit return of ECONNABORTED.
<li>Quieten <a href="https://man.openbsd.org/ip6.4">IPv6</a> DN message reporting by default.
<li>Improve xmalloc() and friends in <a href="https://man.openbsd.org/ssh.1">ssh(1)</a> code..
<li>Remove dead architecture support from the tree.
<li>Remove support for #! from <a href="https://man.openbsd.org/syslogd.8">syslogd(8)</a>.
<li><a href="https://man.openbsd.org/cac.4">cac(4)</a> driver to support Compaq Smart ARRAY RAID controllers.
<li>Ignore blank lines in <a href="https://man.openbsd.org/hostname.if.5">hostname.if(5)</a> files.
<li>In <a href="https://man.openbsd.org/ssh.1">ssh(1)</a>, add -1 option to force protocol 1.
<li>Enable <a href="https://man.openbsd.org/sftp-server.8">sftp-server(8)</a> by default.
<li>Numerous bug fixes to <a href="https://man.openbsd.org/sftp-server.8">sftp-server(8)</a> and <a href="https://man.openbsd.org/sftp.1">sftp(1)</a>.
<li>Make scsi work on the vaxstation 4000/90.
<li>Same for <a href="https://man.openbsd.org/tun.4">tun(4)</a>, <a href="https://man.openbsd.org/gif.4">gif(4)</a>, and others..
<li>Change <a href="https://man.openbsd.org/lo.4">lo(4)</a> initialization code so that boot -c pseudo-device editing code can affect it in the expected fashion.
<li>If kernel has <a href="https://man.openbsd.org/ddb.4">ddb(4)</a> support, add a ddb sub-command inside boot -c.
<li>Teach the bridge to deal with ARP alignment in the presence of numerous previous layers...
<li>EtherIP support in <a href="https://man.openbsd.org/tcpdump.8">tcpdump(8)</a>.
<li>Fix a bug introduced a few weeks ago in <a href="https://man.openbsd.org/yppush.8">yppush(8)</a>.
<li>A bit of a trawl through the source tree to please the alpha, since various problems occur in the absence of perfect weak symbols.
<li>libc_r works on the alpha now.
<li>Many new fixes to <a href="https://man.openbsd.org/sort.1">sort(1)</a>.
<li>Teach config -e and boot -c about pseudo-devices.
<li>Fix <a href="https://man.openbsd.org/perl.1">perl(1)</a> h2ph scripts.
<li>More <a href="https://man.openbsd.org/bridge.4">bridge(4)</a> fixes for unicast learning.
<li>Add <a href="https://man.openbsd.org/sftp.1">sftp(1)</a> client.
<li>Fix an off-by-{1,2,4} error in i386_space_copy(). <a href="https://man.openbsd.org/wscons.4">wscons(4)</a> now works perfectly.
<li>More fixes to <a href="https://man.openbsd.org/rtadvd.8">rtadvd(8)</a>.
<li>Fix bugs in <a href="https://man.openbsd.org/atc.6">atc(6)</a>, <a href="https://man.openbsd.org/snake.6">snake(6)</a>, <a href="https://man.openbsd.org/battlestar.6">battlestar(6)</a>, <a href="https://man.openbsd.org/phantasia.6">phantasia(6)</a>, and <a href="https://man.openbsd.org/adventure.6">adventure(6)</a>.
<li>Enable scrollback from USB keyboards.
<li>Numerous improvements in <a href="https://man.openbsd.org/ppp.8">ppp(8)</a>.
<li>At ELF <a href="https://man.openbsd.org/execve.2">execve(2)</a> time, check for the OpenBSD note first, so that native binaries run best.
<li>Attempt to share crtbegin/crtend in ELF csu, including an OS note.
<li>Change powerpc <a href="https://man.openbsd.org/ld.so.1">ld.so(1)</a> so all architectures use DT_INIT for ctors/init.
<li>Fix overlapping bus space copy operations on i386.
<li>Move EtherIP to version 3 (2 byte padded header).
<li>Art does battle with <a href="https://man.openbsd.org/ksyms.4">ksyms(4)</a>, gets wounded, but eventually wins.
<li>In <a href="https://man.openbsd.org/sshd.8">sshd(8)</a>, <a href="https://man.openbsd.org/otp-rmd160.1">S/Key</a> is now called ChallengeResponse.
<li>Make ReverseMappingCheck optional in sshd_config.
<li>Mickey the madman goes on a new timeout crawl through pci and isa drivers.
<li>Fix <a href="https://man.openbsd.org/nlist.3">nlist(3)</a> emulation for cases where the ELF header does not exist; permits <a href="https://man.openbsd.org/ksyms.4">/dev/ksyms</a> to work on ELF machines.
<li>Emulate some new freebsd <a href="https://man.openbsd.org/signal.2">signal(2)</a> related things in <a href="https://man.openbsd.org/compat_freebsd.8">compat_freebsd(8)</a>.
<li>In <a href="https://man.openbsd.org/ip6.4">IPv6</a>, avoid panic when packet to nonexistent link-local address is issued.
<li><a href="https://man.openbsd.org/xl.4">xl(4)</a> no longer needs to whine about tx underruns.
<li>Fix ELF support for <a href="https://man.openbsd.org/compat_freebsd.8">compat_freebsd(8)</a>.
<li>Catch the alpha up to <a href="https://man.openbsd.org/wscons.4">wscons(4)</a> changes.
<li>Fix <a href="https://man.openbsd.org/wscons.4">wscons(4)</a> <a href="https://man.openbsd.org/wsmux.4">wsmux(4)</a> attachment.
<li>Support mvme188 card in mvme88k port.
<li>If a <a href="https://man.openbsd.org/pccbb.4">pccbb(4)</a> bridge does not have the right voltages, assume it is dead. Permits single connector adapters to work.
<li>Fix some bugs in the <a href="https://man.openbsd.org/bridge.4">bridge(4)</a>, especially regarding <a href="https://man.openbsd.org/gif.4">gif(4)</a>.
<li><strong>IMPLEMENTATION FIX: fix memory allocation in the PCI LANCE ethernet driver, <a href="https://man.openbsd.org/i386/le.4">le(4)</a>.</strong><br>
<a href="errata28.html#lepci">A patch is available</a>.<br>
<a href="stable.html">[Applied to stable]</a>
<li>In <a href="https://man.openbsd.org/config.8">config(8)</a> -e and -u, do not write out a new kernel if nothing changed.
<li>Numerous fat <a href="https://man.openbsd.org/utmp.5">utmp(5)</a> changes to utilities.
<li>Move <a href="https://man.openbsd.org/utmp.5">utmp(5)</a> to large format.
<li>Fix some incorrect return values for <a href="https://man.openbsd.org/mmap.2">mmap(2)</a> functions.<br>
<a href="stable.html">[Applied to stable]</a>
<li>Make <a href="https://man.openbsd.org/top.1">top(1)</a> not setgid.
<li>Update X11 to support the new i386 changes.
<li>Configure <a href="https://man.openbsd.org/wscons.4">wscons(4)</a> defaults to be what our users expect.
<li><a href="https://man.openbsd.org/i386/moused.8">moused(8)</a> is dead for now.
<li>Enable <a href="https://man.openbsd.org/uhci.4">uhci(4)</a> and <a href="https://man.openbsd.org/ohci.4">ohci(4)</a> devices by default in GENERIC.
<li>Range-check invalid .max fields in <a href="https://man.openbsd.org/inetd.8">inetd(8)</a>.
<li>Various post-merge <a href="https://man.openbsd.org/ipf.8">ipf(8)</a> fixes. Some previous fixes got removed and had to be put back in.
<li>In ATAPI code, ignore PIOMODE errors.
<li>On many architectures, change console name to ttyC? instead of ttyE?.
<li>Add -U option to ELF <a href="https://man.openbsd.org/ldconfig.8">ldconfig(8)</a>.
<li>Move i386 to <a href="https://man.openbsd.org/wscons.4">wscons(4)</a>.
<li>Re-org the alpha boot floppies.
<li>More improvements against the Bleichenbacher pkcs#1 attack.
<li>Fix more select overflow issues in <a href="https://man.openbsd.org/ssh.1">ssh(1)</a>.
<li>gcc 2.95.3, test 2.
<li><a href="https://man.openbsd.org/ises.4">ises(4)</a>, start of a driver for the Pijnenburg PCC-ISES crypto chip. Does random entropy insertion.
<li>Permit many compat system calls to match to the same native call (was not permitted before).
<li>A bunch of people are doing a kernel trawl to update drivers to new timeouts.
<li>Support boot -c on the sparc.
<li>Fix an early timeout bug in wdc/ata support, which caused problems with atapi tape drives.
<li>Niklas runs through the tree doing commits in an attempt to keep up with Todd's much higher commit count.
<li>Receive random numbers from <a href="https://man.openbsd.org/ubsec.4">ubsec(4)</a> cards.
<li>Make wdc mode printing more portable, so that the powerpc can use it too.
<li><a href="https://man.openbsd.org/adb.4">adb(4)</a> drivers in powerpc port.
<li>New <a href="https://man.openbsd.org/upl.4">upl(4)</a> driver for Prolific PL2301/PL2302 USB host-to-host driver. This acts like a network device.
<li>Remove -Q flag from <a href="https://man.openbsd.org/sshd.8">sshd(8)</a>.
<li>Change audio-driver interface so drivers can supply a minimum delta for mixer value changes.
<li><a
href="https://man.openbsd.org/usb.4">USB</a> sync.
<li><strong>SECURITY FIX: fix some buffer overflows in <a href="https://man.openbsd.org/named.8">named(8)</a>.</strong><br>
<a href="errata28.html#named">A patch is available</a>.<br>
<a href="stable.html">[Applied to stable]</a>
<li>Support Cheetah vaxes.
<li>Improve <a href="https://man.openbsd.org/MAKEDEV.8">MAKEDEV(8)</a> manual pages on many architectures.
<li>Cause <a href="https://man.openbsd.org/pcibios.4">pcibios(4)</a> to route interrupts via the pci router at the time interrupts are established for each driver, not before.
<li>Optimize pcidevs, <a href="https://man.openbsd.org/usbdevs.8">usbdevs(8)</a>, and other tables in the kernel.
<li>Both <a href="https://man.openbsd.org/wi.4">wi(4)</a> and <a href="https://man.openbsd.org/awi.4">awi(4)</a> now support more models of cards.
<li><a href="https://man.openbsd.org/skey.1">skey(1)</a> SHA1 is supposed to be little endian.
<li>Improve <a href="https://man.openbsd.org/ping6.8">ping6(8)</a> signal handling further.
<li>Merge <a href="https://man.openbsd.org/isakmpd.8">isakmpd(8)</a> in. It is no longer separate.
<li>Many <a href="https://man.openbsd.org/ppp.8">ppp(8)</a> improvements.
<li>Handle binary data in install floppy dmesg.
<li>Improve ELF handling of <a href="https://man.openbsd.org/nlist.3">nlist(3)</a>.
<li>Print CPU speed in GHz if it is that fast.
<li>Detect Transmeta CPUs.
<li>On powerpc, ensure that signal delivery fills in rval[1]; at least pthread was affected.
<li>Move powerpc to MACHINE_NEW_NONCONTIG.
<li>In <a href="https://man.openbsd.org/mg.1">mg(1)</a>, do not use <a href="https://man.openbsd.org/rename.2">rename(2)</a> on the ~ file; make a new copy so that <a href="https://man.openbsd.org/vipw.8">vipw(8)</a> and <a href="https://man.openbsd.org/crontab.1">crontab(1)</a> do the right thing.
<li>Tweak alpha so it sends SIGBUS for unaligned access, and does NOT do a fixup. This encourages people to fix their code.
<li>KGDB support for the i386.
<li>Pack alpha definition of infinity properly, other architectures too.
<li>Recognize Intel P4 CPU.
<li>Various space optimizations for alpha boot floppies.
<li>Fix CF wdc, which was broken for a while.
<li>Add "enable" keyword in <a href="https://man.openbsd.org/config.8">config(8)</a> files.
<li>Merge and simplify emulation directory handling code.
<li>Support Initio INI-91xx cards via new <a href="https://man.openbsd.org/iha.4">iha(4)</a> driver.
<li>In <a href="https://man.openbsd.org/accept.2">accept(2)</a>, when peer disconnects before accept is issued, do not return junk in mbuf by setting length to 0.
<li>Support Hardware RNG on i850 and i860 hubs.
<li>Fix <a href="https://man.openbsd.org/sysctl.3">sysctl(3)</a> so that you can clear a string with it.
<li>In <a href="https://man.openbsd.org/sshd.8">sshd(8)</a>, rename "skey" to "challenge response", since this mechanism is now more flexible.
<li>Reduce how long we wait for scsi devices to come ready; 50 seconds is enough.
<li><a href="https://man.openbsd.org/i386/pcvt.4">pcvt(4)</a> keyboard LED update lockup patch.
<li>ncurses-5.2-20010114
<li>Fix many more <a href="https://man.openbsd.org/sshd.8">sshd(8)</a> memory leaks.
<li>Fix memory leak in <a href="https://man.openbsd.org/isakmpd.8">isakmpd(8)</a>.
<li>In <a href="https://man.openbsd.org/timed.8">timed(8)</a>, do not accept packets with an unterminated hostname.<br>
<a href="stable.html">[Applied to stable]</a>
<li>Alias map bios rom at both real address and it's own zero-relative address, because bios roms contain bugs.
<li>In <a href="https://man.openbsd.org/rtadvd.8">rtadvd(8)</a>, sync router renumbering flag bit to conform to 2292bis-02 and RR RFC.
<li>Get rid of -R flag in <a href="https://man.openbsd.org/ssh-keygen.1">ssh-keygen(1)</a>.
<li>Avoid memory leak in <a href="https://man.openbsd.org/ndp.8">ndp(8)</a>.
<li>Establish <a href="https://man.openbsd.org/pccbb.4">pccbb(4)</a>, <a href="https://man.openbsd.org/ohci.4">ohci(4)</a>, and <a href="https://man.openbsd.org/uhci.4">uhci(4)</a> interrupt handler much earlier, because of coming <a href="https://man.openbsd.org/pcibios.4">pcibios(4)</a> changes.
<li>Numerous small fixes to <a href="https://man.openbsd.org/sshd.8">sshd(8)</a> and friends.
<li>In <a href="https://man.openbsd.org/ssh.1">ssh(1)</a>, fix SIGSEGV for -o "".
<li>On i386, validate gate targets.
<li>The easy delete key always returns ^?, while the more difficult one returns ^H.
<li>Incorporate a set of post-4.4BSD changes to the kernel routing code.
<li>Support more than 256MB of ram on powerpc.
<li>Be more careful with assuming with VIA chips can handle U66.
<li>Document better how code using <a href="https://man.openbsd.org/sigblock.3">sigblock(3)</a> and <a href="https://man.openbsd.org/sigsetmask.3">sigsetmask(3)</a> would be converted to use <a href="https://man.openbsd.org/sigprocmask.2">sigprocmask(2)</a>.
<li>Get <a href="https://man.openbsd.org/sshd.8">sshd(8)</a> ready for auth-login.
<li>In <a href="https://man.openbsd.org/ifconfig.8">ifconfig(8)</a>, permit prefixlen to work against ipv4 addresses.
<li>Change <a href="https://man.openbsd.org/savecore.8">savecore(8)</a> to deal with machines dumping 1GB or more..
<li>Attempt to deal with inverted signal races in terminal handlers better, throughout the source tree -- ie. main code is deep inside stdio, signal handler calls exit().
<li>Document rules that apply to signal handlers in <a href="https://man.openbsd.org/signal.3">signal(3)</a> and <a href="https://man.openbsd.org/sigaction.2">sigaction(2)</a>.
<li>ipf 3.4.15
<li>Fix a <a href="https://man.openbsd.org/vi.1">vi(1)</a> crash.
<li><strong>SECURITY FIX: The <a href="https://man.openbsd.org/random.4">rnd(4)</a> device does not use all of its input when data is written to it.</strong><br>
<a href="errata28.html#rnd">A patch is available</a>.<br>
<a href="stable.html">[Applied to stable]</a>
<li>Fix C sequence point issues in <a href="https://man.openbsd.org/dd.1">dd(1)</a>, <a href="https://man.openbsd.org/monop.6">monop(6)</a>, <a href="https://man.openbsd.org/tail.1">tail(1)</a>, and <a href="https://man.openbsd.org/rbootd.8">rbootd(8)</a>.
<li>Fix previous <a href="https://man.openbsd.org/inetd.8">inetd(8)</a> fix.
<li>Fix signal handler race in <a href="https://man.openbsd.org/apmd.8">apmd(8)</a>, <a href="https://man.openbsd.org/bootpd.8">bootpd(8)</a>, <a href="https://man.openbsd.org/syslogd.8">syslogd(8)</a>.
<li>Constrain <a href="https://man.openbsd.org/isp.4">isp(4)</a> openings to 128, since the vendor code lies, cheats, steals, and makes us cry.
<li>Fully support SSH2 RSA keys in <a href="https://man.openbsd.org/sshd.8">sshd(8)</a>.
<li>Change alpha bootblocks to ELF.
<li>Fix fd_set overflows and signal races in <a href="https://man.openbsd.org/pppoe.1">pppoe(1)</a>.
<li>Important pthread fix.
<li>Large block of documentation and functionality changes to <a href="https://man.openbsd.org/mail.1">mail(1)</a>.
<li>fd_set overflow fix to <a href="https://man.openbsd.org/routed.8">routed(8)</a>.
<li>Signal handler fix to <a href="https://man.openbsd.org/newfs.1">newfs(1)</a>.
<li>Cleanup various signal races and buffer overflows in <a href="https://man.openbsd.org/ed.1">ed(1)</a>.
<li>Fix signal race in <a href="https://man.openbsd.org/mountd.8">mountd(8)</a> by writing our own svc_run() routine.
<li>Fix uninitialized variable bug in <a href="https://man.openbsd.org/config.8">config(8)</a> UKC code that ignored first command sometimes.
<li>Various changes ensure that all known <a href="https://man.openbsd.org/le.4">le(4)</a> cards now work on sun4, sun4c, and sun4m machines.
<li>Tweak subr_extent code with respect to boundary cases.
<li><a href="https://man.openbsd.org/sftp-server.8">sftp-server(8)</a> draft came out; convert our <a href="https://man.openbsd.org/sftp-server.8">sftp-server(8)</a> to be compliant.
<li>sendmail 8.11.2
<li>Signal race fixes to <a href="https://man.openbsd.org/fsck_ffs.8">fsck_ffs(8)</a>, <a href="https://man.openbsd.org/rcp.1">rcp(1)</a>, <a href="https://man.openbsd.org/slattach.8">slattach(8)</a>, <a href="https://man.openbsd.org/shutdown.8">shutdown(8)</a>.
<li>Change asm and volatile to __asm__ and __volatile__ in any file which might be compiled using -ansi -pedantic or similar.
<li>Some signal handler cleanup in <a href="https://man.openbsd.org/rcp.1">rcp(1)</a>.
<li>Cleanup timeout code in <a href="https://man.openbsd.org/adw.4">adw(4)</a>.
<li>Numerous alpha catchups.
<li>New <a href="https://man.openbsd.org/rtadvd.8">rtadvd(8)</a> code.
<li>Compute UDP checksum in <a href="https://man.openbsd.org/dhcpd.8">dhcpd(8)</a>.
<li>Move mvme88k to <a href="https://man.openbsd.org/uvm.9">UVM(9)</a>.
<li><a href="https://man.openbsd.org/clct.4">clct(4)</a> driver for Cirrus Logic CS4281 sound chips.
<li>Support {Allow,Deny}Groups in <a href="https://man.openbsd.org/sshd.8">sshd(8)</a>.
<li><a href="https://man.openbsd.org/sshd.8">sshd(8)</a> SSH2 protocol support for keepalives, IPTOS_LOWDELAY, TCP_NODELAY, and IPTOS_THROUGHPUT.
<li>Add <a href="https://man.openbsd.org/kerberos.1">kerberos(1)</a> password handling in <a href="https://man.openbsd.org/sshd.8">sshd(8)</a> for kerberosIV.
<li>More memory leak fixes to <a href="https://man.openbsd.org/sshd.8">sshd(8)</a> and <a href="https://man.openbsd.org/ssh.1">ssh(1)</a>.
<li>Tweak <a href="https://man.openbsd.org/strlcat.3">strlcat(3)</a> to not crash for a certain "illegal pointers, length 0" situation.
<li>Clarify <a href="https://man.openbsd.org/setjmp.3">setjmp(3)</a> variants in the manual pages.
<li>Correct fd_set and signals in <a href="https://man.openbsd.org/ping6.8">ping6(8)</a>.
<li>Un-race three signal handlers, and fix select overflows in <a href="https://man.openbsd.org/inetd.8">inetd(8)</a>.
<li>Fix signal race in <a href="https://man.openbsd.org/route6d.8">route6d(8)</a>.
<li>Move mvme88k to MACHINE_NEW_NONCONTIG.
<li>Fix signal races in <a href="https://man.openbsd.org/rwhod.8">rwhod(8)</a>.
<li>Fix fd_set overflow in <a href="https://man.openbsd.org/yppush.8">yppush(8)</a>.
<li>Fix closedown stub generated and hand-whacked by <a href="https://man.openbsd.org/rpcgen.1">rpcgen(1)</a> in <a href="https://man.openbsd.org/ypserv.8">ypserv(8)</a>.
<li>Audio driver for most ESS <a href="https://man.openbsd.org/maestro.8">maestro(8)</a> models.
<li>Signal race repairs in <a href="https://man.openbsd.org/talkd.8">talkd(8)</a> and <a href="https://man.openbsd.org/comsat.8">comsat(8)</a>.
<li>Fix select overflow in <a href="https://man.openbsd.org/ssh-agent.1">ssh-agent(1)</a>.
<li>Fix <a href="https://man.openbsd.org/rpcgen.1">rpcgen(1)</a> to deal with large fd_set.
<li>Document various signal races in the source tree which are very difficult to fix, or which turn out to be safe even if they look flawed.
<li>Rename <a href="https://man.openbsd.org/ich.4">ich(4)</a> to <a href="https://man.openbsd.org/auich.4">auich(4)</a>.
<li>Cleanup the <a href="https://man.openbsd.org/sftp-server.8">sftp-server(8)</a> implementation.
<li>Support !command feature in <a href="https://man.openbsd.org/bridgename.if.5">bridgename.if(5)</a> files as well.
<li>Numerous other small changes to <a href="https://man.openbsd.org/isakmpd.8">isakmpd(8)</a>.
<li>Handle memory failures in <a href="https://man.openbsd.org/passwd.1">passwd(1)</a>.
<li>In <a href="https://man.openbsd.org/finger.1">finger(1)</a>, fail nicely if memory allocation fails.
<li>Handle DELETE payloads in <a href="https://man.openbsd.org/isakmpd.8">isakmpd(8)</a>.
<li>Remove signal races from <a href="https://man.openbsd.org/sshd.8">sshd(8)</a>.
<li>Ease support for road-warrior scenarios in <a href="https://man.openbsd.org/isakmpd.8">isakmpd(8)</a>, by intuiting the Local-ID when possible.
<li>Change 802.11 DS drivers to operate in BSS mode by default.
<li>Create links for <a href="https://man.openbsd.org/FD_SET.3">FD_SET(3)</a> and such to point to the <a href="https://man.openbsd.org/select.2">select(2)</a> page.
<li>Support TCP_NDELAY on <a href="https://man.openbsd.org/ip6.4">ipv6(4)</a> in <a href="https://man.openbsd.org/ssh.1">ssh(1)</a>.
<li>Numerous spelling error corrections in the system.
<li>Various other calendar updates.
<li>Ensure replydirname in <a href="https://man.openbsd.org/ftpd.8">ftpd(8)</a> does not ever truncate names.
<li>Ensure <a href="https://man.openbsd.org/ftpd.8">ftpd(8)</a> does not sometimes return a stray " at the end of a string.
<li>Various large updates to <a href="https://man.openbsd.org/isp.4">isp(4)</a>.
<li>In <a href="https://man.openbsd.org/restore.8">restore(8)</a>, do not skip TS_BITS or TS_CLRI are set.
<li>Change our own custom EtherIP protocol to the standard one (which is very badly designed, but we are trying to get them to fix that).
<li>Fix KerberosIV code to build better if src and obj are in strange places.
<li>Support Banner option in <a href="https://man.openbsd.org/sshd.8">sshd(8)</a>.
<li>Make the openssh-p effort a bit easier by merging some simpler portability hacks.
<li>Various missing <a href="https://man.openbsd.org/free.3">free(3)</a> calls repaired in <a href="https://man.openbsd.org/ssh.1">ssh(1)</a>.
<li>Attempt to support cardbus 3CXFEM656C 56k Global modem.
<li>In <a href="https://man.openbsd.org/pciide.4">pciide(4)</a>, support U100 on ICH2, U66 on Via Apollo, and other repairs to Promise.
<li>Spelling changes to calendar files.
<li>Be more careful with <a href="https://man.openbsd.org/stat.2">stat(2)</a> handling in <a href="https://man.openbsd.org/mv.1">mv(1)</a>.
<li>Fix %p handling in <a href="https://man.openbsd.org/strptime.3">strptime(3)</a>.
<li>Fix various buffer overflows and other fixes in <a href="https://man.openbsd.org/indent.1">indent(1)</a>.
<li>Do not spit out <a href="https://man.openbsd.org/icmp6.4">icmp6</a> checksum messages if not a debug kernel.
<li>Permit stripped VAX kernels to load despite unexpected values from libsa.
<li>Simplify locking and a few more fixes to <a href="https://man.openbsd.org/twe.4">twe(4)</a>.
<li>Plug some memory leaks in OpenSSH.
<li>Fix -P in <a href="https://man.openbsd.org/ftpd.8">ftpd(8)</a>.
<li>Emulation fixes to the VAX code.
<li>Protect bits of <a href="https://man.openbsd.org/dhclient.8">dhclient(8)</a> with a locking mechanism to prevent multiple instances from using the leases file simultaneously.
<li>Fix 3 cases in <a href="https://man.openbsd.org/mv.1">mv(1)</a> relating to the moving of symlinks across filesystems.
<li>In <a href="https://man.openbsd.org/ftpd.8">ftpd(8)</a>, expand the tilde character in ftp-dir login.conf variable.
<li>Prohibit binding to an anycast, notready, or detached <a href="https://man.openbsd.org/ip6.4">IPv6</a> address.
<li>Rename <a href="https://man.openbsd.org/fsinfo.8">fsinfo(8)</a> to xfsinfo in X11 to avoid naming conflict.
<li>Set the correct pfkeyv2 direction for KAME SPD entries in <a href="https://man.openbsd.org/isakmpd.8">isakmpd(8)</a>.
<li>Save and restore errno properly in <a href="https://man.openbsd.org/flex.1">flex(1)</a> since it may be whacked by <a href="https://man.openbsd.org/isatty.3">isatty(3)</a>.
<li>Fix sending/receiving passwords in <a href="https://man.openbsd.org/routed.8">routed(8)</a>.
<li>Add an i386-specific <a href="https://man.openbsd.org/sysctl.3">sysctl(3)</a> that modifies halt -p processing in APM to deal with some quirky machines.
<li>More sun3 fixes, mostly to conform better to other m68k architecture code.
<li>Handle login banners better in SSH2 instances of <a href="https://man.openbsd.org/ssh.1">ssh(1)</a>.
<li>Various spelling and grammar fixes across the tree.
<li>Use new <a href="https://man.openbsd.org/sysctl.3">sysctl(3)</a> interface for kernel memory bucket statistics and clock information.
<li>Correctly check for empty <a href="https://man.openbsd.org/mailq.1">mailq(1)</a> in /etc/daily.
<li>Y2K fix in the mvme68k NVRAM code.
<li>Extend <a href="https://man.openbsd.org/sysctl.3">sysctl(3)</a> to support quad values.
<li>Improve SMB packet printing in <a href="https://man.openbsd.org/tcpdump.8">tcpdump(8)</a>.
<li>Add common pidfile-writing code to DHCP so each program doesn't need to roll its own.
<li>To please <a href="https://man.openbsd.org/cap_mkdb.1">cap_mkdb(1)</a>, make it an error to open a zero-length file for read-only access in <a href="https://man.openbsd.org/hash.3">hash(3)</a>.
<li>Some sun3 architecture fixes.
<li>Ignore environment variables in <a href="https://man.openbsd.org/ssl.8">libssl</a> if we're running <a href="https://man.openbsd.org/issetugid.2">setugid</a>.
<li>In <a href="https://man.openbsd.org/ssh.1">ssh(1)</a>, log the remote IP address on disconnect.
<li>Check for memory allocation failure in <a href="https://man.openbsd.org/vmstat.8">vmstat(8)</a>.
<li>Fix a buffer overflow in <a href="https://man.openbsd.org/fsinfo.8">fsinfo(8)</a>.
<li>Handle another special case in <a href="https://man.openbsd.org/i386/apm.4">apm(4)</a>.
<li>Fix a panic in the <a href="https://man.openbsd.org/raid.4">RAIDframe</a> locking management code.
<li>Add setpid command to <a href="https://man.openbsd.org/i386/fdisk.8">fdisk(8)</a> for setting the partition ID.
<li>Change <a href="https://man.openbsd.org/bridge.4">bridge(4)</a> to use gif* instead of enc*.
<li>Set SO_REUSEPORT socket option in <a href="https://man.openbsd.org/dhcp.8">DHCP</a> code, so multiple dhclients work.
<li>Allow printing of 8-bit ASCII characters in <a href="https://man.openbsd.org/talk.1">talk(1)</a> through an option.
<li>Do not perform getnetbyname() in <a href="https://man.openbsd.org/mountd.8">mountd(8)</a> if the address is already in dot-notation.
<li>In <a href="https://man.openbsd.org/ftpd.8">ftpd(8)</a>, log the actual number of bytes transferred instead of the original file size.
<li>Fix ^C in termtype prompt.
<li>Prevent <a href="https://man.openbsd.org/fsck_ffs.8">fsck_ffs(8)</a> from marking a filesystem clean if <a href="https://man.openbsd.org/fsck.8">fsck(8)</a> needs to be rerun.
<li>Resolve scheduling conflict in <a href="https://man.openbsd.org/newsyslog.8">newsyslog(8)</a>.
<li>In <a href="https://man.openbsd.org/dhclient.8">dhclient(8)</a>, set a reasonable default lease time if the server does not provide one.
<li>Suppress uninteresting PCI bus error messages in <a href="https://man.openbsd.org/ahc.4">ahc(4)</a>.
<li>Add m88k support to <a href="https://man.openbsd.org/gprof.1">gprof(1)</a>.
<li>Add HostKeyAlias option to <a href="https://man.openbsd.org/ssh.1">ssh(1)</a>.
<li>Behave nicely with fixed-rate codecs in <a href="https://man.openbsd.org/auvia.4">auvia(4)</a>.
<li>Fix a minor off-by-one error in <a href="https://man.openbsd.org/gprof.1">gprof(1)</a>.
<li>In the ports infrastructure, take the old non-fake code out-of-line.
<li>Repair a disgusting <a href="https://man.openbsd.org/rwhod.8">rwhod(8)</a> crash.
<li>Fix buffer overflow in <a href="https://man.openbsd.org/csh.1">csh(1)</a> builtin <a href="https://man.openbsd.org/printf.1">printf(1)</a> implementation.
<li>Convert <a href="https://man.openbsd.org/atoi.3">atoi(3)</a> to <a href="https://man.openbsd.org/strtoul.3">strtoul(3)</a> in <a href="https://man.openbsd.org/top.1">top(1)</a>.
<li>Emulate Linux truncate64, stat64, lstat64, and fstat64 syscalls.
<li>Revoke root privileges earlier in <a href="https://man.openbsd.org/ping6.8">ping6(8)</a> and <a href="https://man.openbsd.org/traceroute6.8">traceroute6(8)</a>.<br>
<a href="stable.html">[Applied to stable]</a>
<li>Many man page fixes.
<li>Use <a href="https://man.openbsd.org/arc4random.3">arc4random(3)</a> in <a href="https://man.openbsd.org/jot.1">jot(1)</a>.
<li>Handle quotas over 4GB in <a href="https://man.openbsd.org/edquota.8">edquota(8)</a> and <a href="https://man.openbsd.org/repquota.8">repquota(8)</a>.
<li>Fix <a href="https://man.openbsd.org/ip6.4">IPv6</a> Path MTU Discovery.
<li>Give up euid more carefully in <a href="https://man.openbsd.org/mrinfo.8">mrinfo(8)</a> and <a href="https://man.openbsd.org/mtrace.8">mtrace(8)</a>.
<li>Various OpenSSH fixes.
<li>Add support for ActivCard, CRYPTOCard, and SNK-004 authentication for the BSD authentication framework.
<li>In <a href="https://man.openbsd.org/ksh.1">ksh(1)</a>, remain in non-blocking mode if the shell is not interactive.
<li><strong>SECURITY FIX: xlock now authenticates via a pipe.</strong><br>
<a href="errata28.html#xlock">A patch is available</a>.<br>
<a href="stable.html">[Applied to stable]</a>
<li><strong>IMPLEMENTATION FIX: PS/2 mouse driver, <a href="https://man.openbsd.org/i386/pms.4">pms</a>, lockup fix.</strong><br>
<a href="errata28.html#pms">A patch is available</a>.<br>
<a href="stable.html">[Applied to stable]</a>
<li>Implement a workaround in <a href="https://man.openbsd.org/atapiscsi.4">atapiscsi(4)</a> for buggy Toshiba drivers.
<li><strong>SECURITY FIX: Fix holes in <a href="https://man.openbsd.org/mount_procfs.8">procfs(8)</a>.</strong><br>
<a href="errata28.html#procfs">A patch is available</a>.<br>
<a href="stable.html">[Applied to stable]</a>
<li>Put <a href="https://man.openbsd.org/strlcat.3">strlcat(3)</a> and <a href="https://man.openbsd.org/strlcpy.3">strlcpy(3)</a> into libkern for kernel use.
<li>Fix setting of nwid for <a href="https://man.openbsd.org/wi.4">wi(4)</a>.<br>
<a href="stable.html">[Applied to stable]</a>
<li>Change /etc/security to spit out unified diffs.
<li>Add driver for Compaq SMART Array RAID controllers, <a href="https://man.openbsd.org/cac.4">cac(4)</a>.
<li>Extend the i386 allowaperture <a href="https://man.openbsd.org/sysctl.3">sysctl(3)</a> to allow access to the whole 1st MB of memory.
<li>Add some more sanity checking to the PCMCIA code to fix some obscure panics.
<li>Import Apache 1.3.14 + mod_ssl 2.7.1.
<li>Support multiple pfkeyv2 keying daemons.
<li>Compute <a href="https://man.openbsd.org/dh.3">diffie-hellman</a> in parallel between server and client in <a href="https://www.openssh.com/">OpenSSH</a>.
<li>Support Amigas with more than 64MB of RAM.
<li>Ensure /etc/sudoers is created with a proper secure mode.
<li>Import <a href="https://man.openbsd.org/openssl.1">OpenSSL</a> 0.9.6.
<li>More <a href="https://man.openbsd.org/photurisd.8">photurisd(8)</a> improvements.
<li>Update kernel pfkeyv2 code for better conformance to the RFC.
<li>Enable loading of ELF kernels for alpha.
<li>Add extraction support for shell archives to the <a href="https://man.openbsd.org/bsd.port.mk.5">bsd.port.mk</a> infrastructure.
<li>In <a href="https://man.openbsd.org/ipsec.4">ipsec(4)</a>, look for TDB if gateway is unspecified.<br>
<a href="stable.html">[Applied to stable]</a>
<li>Fixes to <a href="https://man.openbsd.org/patch.1">patch(1)</a> -f and -b.
<li>Convert some more drivers to the new <a href="https://man.openbsd.org/timeout.9">timeout(9)</a> interface.
<li>Add bytecounter statistics reporting to <a href="https://man.openbsd.org/netstat.1">netstat(1)</a>.
<li>Instrument more random TCP sequence numbers.
<li><strong>IMPLEMENTATION FIX: Compute <a href="https://man.openbsd.org/crypto.9">crypto(9)</a> session IDs correctly for kernel.</strong><br>
<a href="errata28.html#hwcrypto">A patch is available</a>.<br>
<a href="stable.html">[Applied to stable]</a>
<li>In <a href="https://man.openbsd.org/sshd.8">sshd(8)</a>, permit logins with read-only root filesystems if the tty already has sane modes set.
<li>Source port < 1024 is no longer required for rhosts-rsa in <a href="https://man.openbsd.org/sshd.8">sshd(8)</a>.
<li>Remove dead code in <a href="https://man.openbsd.org/hifn.4">hifn(4)</a> driver.
<li>Proper <a href="https://man.openbsd.org/getopt.3">getopt(3)</a> usage in <a href="https://man.openbsd.org/compress.1">compress(1)</a>.
<li>Fix a time specification in <a href="https://man.openbsd.org/last.1">last(1)</a>.
<li>Do not disable PMTU for established TCP connections unless there is data to send.
<li>Add support for the 802.1D spanning tree protocol to <a href="https://man.openbsd.org/bridge.4">bridge(4)</a>.
<li>New BSD authentication login scripts.
<li>Listen to pfkeyv2 acquire messages in <a href="https://man.openbsd.org/photurisd.8">photurisd(8)</a>, and setup SAs accordingly.
<li><a href="https://man.openbsd.org/isakmpd.8">isakmpd(8)</a> update.
<li><a href="https://man.openbsd.org/i386/apm.4">apm(4)</a> bug fix that helps a few laptops.
<li>Remove unnecessary code from <a href="https://man.openbsd.org/photurisd.8">photurisd(8)</a> in preparation of new SPD framework.
<li>Repair a memory leak in <a href="https://man.openbsd.org/icmp6.4">ICMPv6</a> code.
<li>Turn off PMTU when <a href="https://man.openbsd.org/icmp.4">ICMP</a> needfrag messages get blocked.
<li>Finnish updates for inter.phone.
<li>Display number of successful <a href="https://man.openbsd.org/ip6.4">IPv6</a> PMTU changes in <a href="https://man.openbsd.org/netstat.1">netstat(1)</a> -s output.
<li>Do not re-print ETA on completion in <a href="https://man.openbsd.org/scp.1">scp(1)</a> when copying 0-sized files.
<li>Validate <a href="https://man.openbsd.org/icmp6.4">ICMPv6</a> "too big" messages based on PCB.
<li>Do not use already-freed memory in <a href="https://man.openbsd.org/route.8">route(8)</a>.
<li>Avoid repeated host controller halted messages in <a href="https://man.openbsd.org/uhci.4">uhci(4)</a>.
<li>Remove unused libgmp.
<li>Import <a href="https://man.openbsd.org/kerberos.1">KerberosIV</a> v1.0.4.
<li>Always request a new challenge for skey/tis-auth in <a href="https://man.openbsd.org/ssh.1">ssh(1)</a>.
<li>Support newer <a href="https://man.openbsd.org/cy.4">cy(4)</a> communication cards.
<li>Provide new international keymaps for <a href="https://man.openbsd.org/i386/pcvt.4">pcvt(4)</a>.
<li>Ignore filesystems marked "xx" in the install scripts.
<li>Document that <a href="https://man.openbsd.org/pipe.2">pipe(2)</a> is bidirectional, although this behavior is unportable.
<li>Move the default <a href="https://man.openbsd.org/cvs.1">cvs(1)</a> connection protocol from <a href="https://man.openbsd.org/rsh.1">rsh(1)</a> to <a href="https://man.openbsd.org/ssh.1">ssh(1)</a>.
<li>Remove a bogus memory free in <a href="https://man.openbsd.org/getnetgrent.3">getnetgrent(3)</a>.
<li>Fix a buffer overflow in <a href="https://man.openbsd.org/i386/bad144.8">bad144(8)</a>.
<li>Revert back to the old rijndael implementation and solve byte ordering bugs there instead.
<li>Drop unneeded support for RTF_TUNNEL in <a href="https://man.openbsd.org/route.8">route(8)</a>.
<li>Maintain count of routing table timer entries in <a href="https://man.openbsd.org/route.8">route(8)</a>.
<li>In <a href="https://man.openbsd.org/makewhatis.8">makewhatis(8)</a>, strip weird characters first, then sequences of spaces.
<li>Big improvements to <a href="https://man.openbsd.org/adw.4">adw(4)</a>.
<li>Teach <a href="https://man.openbsd.org/tcpdump.8">tcpdump(8)</a> about VRRP, SMB, and timed.
<li>Force <a href="https://man.openbsd.org/calendar.1">calendar(1)</a> to only accept real calendar files as input.
<li>Fix various <a href="https://man.openbsd.org/perror.3">perror(3)</a> overflows in <a href="https://man.openbsd.org/i386/pcvt.4">pcvt(4)</a>.
<li>Repair a <a href="https://man.openbsd.org/tftp.1">tftp(1)</a> argv parsing overflow.
<li>Conditionalize some <a href="https://man.openbsd.org/bpf.4">BPF</a> code in <a href="https://man.openbsd.org/wx.4">wx(4)</a>.
<li>Finally remove remaining references to extra <a href="https://man.openbsd.org/rsa.3">RSA</a> libs, since the patent has expired.
<li>New rijndael implementation which solves endian issues.
<li>Support Intel 82801BA <a href="https://man.openbsd.org/pciide.4">pciide(4)</a> controllers.
<li>Exercise more paranoia with passed KRB environment settings in <a href="https://man.openbsd.org/telnetd.8">telnetd(8)</a>.
<li>Convert some more drivers to the new <a href="https://man.openbsd.org/timeout.9">timeout(9)</a> interface.
<li>Many improvements and modernizations to <a href="https://man.openbsd.org/isp.4">isp(4)</a>.
<li>Update <a href="https://man.openbsd.org/wx.4">wx(4)</a> with LIVENGOOD support.
<li>Recognize and support the IODATA USB-ET/T Ethernet adapter in <a href="https://man.openbsd.org/kue.4">kue(4)</a>.
<li>Implement asynchronous connections for <a href="https://man.openbsd.org/ssh.1">ssh(1)</a> -R and -L.
<li>Simplify <a href="https://man.openbsd.org/atrun.8">atrun(8)</a> tasks by using <a href="https://man.openbsd.org/asprintf.3">asprintf(3)</a>.
<li>Kill unused libtermlib.
<li>Import new <a href="https://man.openbsd.org/pool.9">pool(9)</a> code.
<li>Fix RIPv0 packet printing and <a href="https://man.openbsd.org/nfsd.8">NFS</a> port number parsing in <a href="https://man.openbsd.org/tcpdump.8">tcpdump(8)</a>.
<li>Make <a href="https://man.openbsd.org/pcap.3">pcap(3)</a>-generated <a href="https://man.openbsd.org/bpf.4">BPF</a> filters work on the <a href="https://man.openbsd.org/tun.4">tun(4)</a> interface.
<li>Import David Maziere's <a href="https://man.openbsd.org/ssh-keyscan.1">ssh-keyscan(1)</a>.
<li><strong>SECURITY FIX: Fix buffer overflow in <a href="https://man.openbsd.org/ftpd.8">ftpd(8)</a>.</strong><br>
<a href="errata28.html#ftpd">A patch is available</a>.<br>
<a href="stable.html">[Applied to stable]</a>
<li><strong>IMPLEMENTATION FIX: Fix fastroute related panic.</strong><br>
<a href="errata28.html#fastroute">A patch is available</a>.<br>
<a href="stable.html">[Applied to stable]</a>
<li>Teach <a href="https://www.openssh.com/">OpenSSH</a> about more version strings to improve interoperability.
<li><strong>SECURITY FIX: Fix another security problem in the <a href="https://man.openbsd.org/kerberos.1">KerberosIV</a> code.</strong><br>
<a href="errata28.html#kerberos2">A patch is available</a>.<br>
<a href="stable.html">[Applied to stable]</a>
<li><strong>SECURITY FIX: Fix two security problems in the <a href="https://man.openbsd.org/kerberos.1">KerberosIV</a> code.</strong><br>
<a href="errata28.html#kerberos">A patch is available</a>.<br>
<a href="stable.html">[Applied to stable]</a>
<li>Permit <a href="https://man.openbsd.org/ftpd.8">ftpd(8)</a> umask setting via both the command line and through a login class in <a href="https://man.openbsd.org/login.conf.5">login.conf(5)</a>.
<li>Prevent <a href="https://man.openbsd.org/vlan.4">vlan(4)</a> devices from emitting packets if the parent interface is not up and running.
<li>Better error checking in <a href="https://man.openbsd.org/ping6.8">ping6(8)</a>.<br>
<a href="stable.html">[Applied to stable]</a>
<li>Some stability fixes to <a href="https://man.openbsd.org/isakmpd.8">isakmpd(8)</a>.
<li>In <a href="https://man.openbsd.org/ssh.1">ssh(1)</a>, disable agent/X11 port forwarding if the hostkey has changed.
<li>Fix a coredump in <a href="https://man.openbsd.org/ssh-agent.1">ssh-agent(1)</a>.
<li>Reset 16-bit PCMCIA during chip initialization in <a href="https://man.openbsd.org/pccbb.4">pccbb(4)</a>.
<li>Correct PCI interrupt setup for TI PCI113X <a href="https://man.openbsd.org/cbb.4">CardBus</a> bridges.
<li>Properly powerdown PC cards in <a href="https://man.openbsd.org/pccbb.4">pccbb(4)</a> at shutdown time.
<li>Add -D option to <a href="https://man.openbsd.org/sshd.8">sshd(8)</a> to cause startup without a daemon.
<li>Show both the IP address and hostname when a new key is encountered in <a href="https://man.openbsd.org/ssh.1">ssh(1)</a>.
<li>Fix a bug in MSChapv2 challenge hashing in <a href="https://man.openbsd.org/ppp.8">ppp(8)</a>.
<li>More <a href="https://man.openbsd.org/make.1">make(1)</a> tweaks.
<li>Use -n to test for non-zero variables in /etc/netstart.
<li>Be more careful with ARP packets.
<li>Fix deletion of flows in pf_key_v2 handling of <a href="https://man.openbsd.org/isakmpd.8">isakmpd(8)</a><br>
<a href="stable.html">[Applied to stable]</a>
<li>Prevent <a href="https://man.openbsd.org/setusercontext.3">setusercontext(3)</a> in <a href="https://man.openbsd.org/ftpd.8">ftpd(8)</a> from setting the umask as this conflicts with any command-line umask specification.
<li><a href="https://man.openbsd.org/clock.3">clock(3)</a> fixes for the alpha architecture.
<li>Print select collisions in <a href="https://man.openbsd.org/vmstat.8">vmstat(8)</a> -s output.
<li>Implement <a href="https://man.openbsd.org/login_check_expire.3">login_check_expire(3)</a> for libutil.
<li>Add -u username support to <a href="https://man.openbsd.org/pwd_mkdb.8">pwd_mkdb(8)</a>.
<li>Properly implement errno handling for the threaded libc (libc_r) on powerpc.
<li>In <a href="https://man.openbsd.org/adduser.8">adduser(8)</a>, get rid of a race condition and use /etc/ptmp as a lock file.
<li>Set reasonable defaults for <a href="https://man.openbsd.org/rsa.3">RSA1</a>, <a href="https://man.openbsd.org/rsa.3">RSA</a>, and <a href="https://man.openbsd.org/dsa.3">DSA</a> keys in <a href="https://man.openbsd.org/ssh-keygen.1">ssh-keygen(1)</a>.
<li>Reorder check for illegal ciphers in <a href="https://man.openbsd.org/ssh.1">ssh(1)</a> protocol 1 connection code.
<li>Fix <a href="https://man.openbsd.org/pciide.4">pciide(4)</a> support on Alpha 164SX models.
<li>Support 16 slices per device on VAX machines.
<li>Considerable cleanups to <a href="https://man.openbsd.org/make.1">make(1)</a>.
<li>Improve key repeat logic in <a href="https://man.openbsd.org/wskbd.4">wskbd(4)</a>.
<li>Changes from KAME to make ifm_data available in <a href="https://man.openbsd.org/getifaddrs.3">getifaddrs(3)</a>.
<li>Fix absolute path handling in <a href="https://man.openbsd.org/crunchgen.1">crunchgen(1)</a>.
<li>Shorten /dev/ttyC* device names.
<li>Complain about invalid ciphers in <a href="https://man.openbsd.org/ssh.1">ssh(1)</a>, falling back to reasonable defaults when necessary.
<li>Avoid tty races in <a href="https://man.openbsd.org/wsdisplay.4">wsdisplay(4)</a> when switching virtual terminals.
<li>Update <a href="https://man.openbsd.org/isakmpd.8">isakmpd(8)</a>.
<li>Repair lun support in <a href="https://man.openbsd.org/umass.4">umass(4)</a>.
<li>Zero pw_passwd before freeing its memory in the libc BSD authentication routines.
<li>Train <a href="https://man.openbsd.org/makewhatis.8">makewhatis(8)</a> to handle more special cases.
<li>Avoid double <a href="https://man.openbsd.org/fclose.3">fclose(3)</a> in <a href="https://man.openbsd.org/getcap.3">getcap(3)</a>.
<li>Increase delay in RAM probe for <a href="https://man.openbsd.org/hifn.4">hifn(4)</a>.
<li>Suffix list fix in <a href="https://man.openbsd.org/make.1">make(1)</a>.
<li>Various bug fixes in <a href="https://man.openbsd.org/ksh.1">ksh(1)</a>.
<li>When using the <a href="https://man.openbsd.org/tail.1">tail(1)</a> -f flag on stdin, don't reopen a local file named stdin.
<li>Extend <a href="https://man.openbsd.org/kqueue.2">kqueue(2)</a> to support kernel events on <a href="https://man.openbsd.org/vnode.9">vnodes</a>.
<li>Bring in BSD authentication support for <a href="https://man.openbsd.org/sudo.8">sudo(8)</a>.
<li>Zap MULOG in <a href="https://man.openbsd.org/inetd.8">inetd(8)</a> to improve code readability.
<li>Avoid whacking errno in <a href="https://man.openbsd.org/top.1">top(1)</a> signal handlers.
<li>Do not include MFS partitions in <a href="https://man.openbsd.org/quot.8">quot(8)</a> statistics output.
<li>Add support for the Acenic Copper and Netgear GA620T Gigabit Ethernet cards.
<li>Prevent a type overflow in <a href="https://man.openbsd.org/recno.3">recno(3)</a>.
<li><strong>IMPLEMENTATION FIX: Imac DV reports the VGA device improperly.</strong><br>
<a href="errata28.html#imacdv">A patch is available</a>.<br>
<a href="stable.html">[Applied to stable]</a>
<li>Import BSD authentication mechanisms from BSDI BSD/OS.
<li>Implement <a href="https://man.openbsd.org/pw_dup.3">pw_dup(3)</a>, a function which copies struct passwd.
<li>Replace <a href="https://man.openbsd.org/getpass.3">getpass(3)</a> with a more flexible <a href="https://man.openbsd.org/readpassphrase.3">readpassphrase(3)</a> interface.
<li>Add <a href="https://man.openbsd.org/strnvis.3">strnvis(3)</a>, a length-bounded version of the <a href="https://man.openbsd.org/strvis.3">strvis(3)</a> libc function.
<li>Better prompting logic in libskey.
<li>Resurrect binutils on alpha.
<li>Recognize newer Intel audio devices in <a href="https://man.openbsd.org/auich.4">auich(4)</a>.
<li>Stop <a href="https://man.openbsd.org/amphy.4">amphy(4)</a> from attaching to network devices it doesn't belong to.
<li>Enable support for <a href="https://man.openbsd.org/pciide.4">pciide(4)</a> found in newer Intel chipsets.
<li>Correct URL handling in the install scripts.
<li>Limit the number of SCSI luns in <a href="https://man.openbsd.org/umass.4">umass(4)</a>.
<li>Page size fixes to the alpha port.
<li>Import ssh-ask-pass support for X11.
<li>Fix a signal race in <a href="https://man.openbsd.org/ypserv.8">ypserv(8)</a> SIGHUP handling.
<li>Enable <a href="https://man.openbsd.org/uaudio.4">uaudio(4)</a> by default in GENERIC/i386.
<li>Reserve all-1s addresses in the <a href="https://man.openbsd.org/ipsec.4">IPsec</a> code for future policy discovery features.
<li>Resolve HMAC nomenclature issues.
<li>Be sure to clear passwords out of memory after use in <a href="https://man.openbsd.org/ppp.8">ppp(8)</a>.
<li>Support kernel event queues.
<li>Add support for USB scanners through the <a href="https://man.openbsd.org/uscanner.4">uscanner(4)</a> driver.
<li>More fixes to <a href="https://man.openbsd.org/sparc/qec.4">qec(4)</a>.
<li>Recognize newer AMD CPUs.
<li>Repair incorrect buffer size logic in <a href="https://man.openbsd.org/telnetd.8">telnetd(8)</a>.
<li>Add a slew of devices to <a href="https://man.openbsd.org/usbdevs.8">usbdevs(8)</a>.
<li>Do not use <a href="https://man.openbsd.org/perror.3">perror(3)</a> in <a href="https://man.openbsd.org/sshd.8">sshd(8)</a> after forking a child.
<li><strong>RELIABILITY FIX: The <a href="https://man.openbsd.org/sparc/qec.4">qec</a>+<a href="https://man.openbsd.org/sparc/qe.4">qe</a> ethernet cards should not generate NMIs.</strong><br>
<a href="errata28.html#qe">A patch is available</a>.<br>
<a href="stable.html">[Applied to stable]</a>
<li>Add <a href="https://man.openbsd.org/ifmedia.4">ifmedia(4)</a> support to <a href="https://man.openbsd.org/sparc/qec.4">qec(4)</a>, among other improvements.
<li>Extra sanity checking in <a href="https://man.openbsd.org/skeyinit.1">skeyinit(1)</a>.
<li>Repair timeout computations in <a href="https://man.openbsd.org/atapiscsi.4">atapiscsi(4)</a>.
<li>Add initial support for DEC Alpha 21264 systems.
<li>Bring the alpha port a bit closer to a fully operational console.
<li>Support Accton EN2242 MiniPCI Ethernet adapters.
<li>Permit O_RDWR on FIFOs to handle legacy applications that depend on it.
<li>Add scrollback support to <a href="https://man.openbsd.org/wscons.4">wscons(4)</a> through the <a href="https://man.openbsd.org/vga.4">vga(4)</a> driver.
<li>Color change in <a href="https://man.openbsd.org/wscons.4">wscons(4)</a> vt100 emulation to more closely imitate PCVT.
<li>Repair overriding of pseudo devices in <a href="https://man.openbsd.org/config.8">config(8)</a><br>
<a href="stable.html">[Applied to stable]</a>
<li>Accept -inet and -inet6 as options for the show command in <a href="https://man.openbsd.org/route.8">route(8)</a>.
<li>Don't reorder keys in <a href="https://man.openbsd.org/ssh-agent.1">ssh-agent(1)</a> upon key removal.
<li>Avoid parsing options in <a href="https://man.openbsd.org/ssh.1">ssh(1)</a> if there is an <a href="https://man.openbsd.org/rsa.3">RSA</a> key mismatch.
<li>Various cleanups to <a href="https://man.openbsd.org/ftpd.8">ftpd(8)</a>.
<li>In many programs, sync usage() output with their respective man page SYNOPSIS.
<li><strong>RELIABILITY FIX: The ThunderLAN driver, <a href="https://man.openbsd.org/tl.4">tl(4)</a>, should not claim all interrupts.</strong><br>
<a href="errata28.html#tl">A patch is available</a>.<br>
<a href="stable.html">[Applied to stable]</a>
<li>In <a href="https://man.openbsd.org/pciide.4">pciide(4)</a>, do not map unsafe registers from controllers that require 16-bit I/O space.
<li>Import new <a href="https://man.openbsd.org/pckbc.4">pckbc(4)</a>, <a href="https://man.openbsd.org/pckbd.4">pckbd(4)</a>, <a href="https://man.openbsd.org/vga.4">vga(4)</a>, <a href="https://man.openbsd.org/pcdisplay.4">pcdisplay(4)</a>, and ega(4) drivers for <a href="https://man.openbsd.org/wscons.4">wscons(4)</a>.
<li>In <a href="https://man.openbsd.org/ftpd.8">ftpd(8)</a>, assert check_login upon receipt of EPSV/LPSV.
<li>Make the <a href="https://man.openbsd.org/aha.4">aha(4)</a> driver compile without UVM.
<li>Enforce non-cacheable device space on real 80386 machines.
<li>Add <a href="https://man.openbsd.org/rsa.3">RSA</a> authentication support for SSH2 to <a href="https://www.openssh.com/">OpenSSH</a>.
<li>Allow serial mice to work with <a href="https://man.openbsd.org/moused.8">moused(8)</a> and XFree86 simultaneously.
<li>Repair an off-by-one error in <a href="https://man.openbsd.org/ssh-agent.1">ssh-agent(1)</a>.
<li>Convert some old drivers to the new <a href="https://man.openbsd.org/timeout.9">timeout(9)</a> interface.
<li><strong>RELIABILITY FIX: repair AES (rijndael) kernel support.</strong><br>
<a href="errata28.html#rijndael">A patch is available</a>.<br>
<a href="stable.html">[Applied to stable]</a>
<li>Import PCI support for Alpha EB164 machines.
<li>Add bus_space_barrier macros for the powerpc.
<li>Endian fixes to the USB code.
<li>Better command line parsing in <a href="https://man.openbsd.org/encrypt.1">encrypt(1)</a>.
<li>Numbering fixups in pfkeyv2 to match IANA assignments.
<li>Crank maximum mbuf size in <a href="https://man.openbsd.org/ppp.8">ppp(8)</a> in order to handle full-sized HDLC frames.
<li>Improve handling of <a href="https://man.openbsd.org/ip6.4">IPv6</a> Node Information Query packets for better specification conformance.
<li>Fix a panic induced by assigning lo0 an <a href="https://man.openbsd.org/ip6.4">IPv6</a> alias.
<li><strong>IMPLEMENTATION FIX: In <a href="https://man.openbsd.org/sshd.8">sshd(8)</a>, fix skey support in SSH1 protocol.</strong><br>
<a href="errata28.html#sshskey">A patch is available</a>.<br>
<a href="stable.html">[Applied to stable]</a>
<li>Deprecate pltime=0 in <a href="https://man.openbsd.org/ifconfig.8">ifconfig(8)</a>.
<li>Modifications to the <a href="https://man.openbsd.org/ktrace.2">ktrace(2)</a> interface to reduce redundancy.
<li>Do not advertise dynamic/cloned routes in <a href="https://man.openbsd.org/route6d.8">route6d(8)</a>.
<li>Allow <a href="https://man.openbsd.org/ping6.8">ping6(8)</a> to send <a href="https://man.openbsd.org/icmp6.4">ICMP6</a> packets smaller than 8 bytes.<br>
<a href="stable.html">[Applied to stable]</a>
<li>Correct free-before-reference bugs in <a href="https://man.openbsd.org/rshd.8">rshd(8)</a> and <a href="https://man.openbsd.org/rlogind.8">rlogind(8)</a>.
<li>Improve queue handling in <a href="https://man.openbsd.org/gdt.4">gdt(4)</a>.
<li>New Adaptec FSA RAID driver called <a href="https://man.openbsd.org/aac.4">aac(4)</a>.
<li>Fix DMA error problems in <a href="https://man.openbsd.org/adw.4">adw(4)</a>.<br>
<a href="stable.html">[Applied to stable]</a>
<li>If MANPS environment variable is set, the system will also build and install postscript manual pages into /usr/share/man/ps[1-9]/.
<li>In <a href="https://man.openbsd.org/date.1">date(1)</a>, fix an off-by-one error which would happen when changing time over DST.
<li>Permit -Tps in <a href="https://man.openbsd.org/nroff.1">nroff(1)</a>.
<li>Make some pfkeyv2 interfaces conform to RFC 2367 numbering.
<li>New timeouts in a couple of network drivers.
<li>Prevent <a href="https://man.openbsd.org/nfsd.8">nfsd(8)</a> from swapping out.
<li>Use PHOLD/PRELE in various kernel components.
<li>Buffer overflow fix to <a href="https://man.openbsd.org/telnet.1">telnet(1)</a>.
<li>Many man page improvements.
<li>Permit handling more than 6 arguments in a <a href="https://man.openbsd.org/hostname.if.5">hostname.if(5)</a> file.
<li>kcore handling in <a href="https://man.openbsd.org/kvm.3">kvm(3)</a> for alpha.
<li>Update <a href="https://man.openbsd.org/usb.4">usb(4)</a> code.
<li>Update alpha architecture support. A snapshot will come out soon.
<li>In <a href="https://man.openbsd.org/pchb.4">pchb(4)</a>, for Intel random devices, do not busy wait for data.
<li>Switch amiga to <a href="https://man.openbsd.org/uvm.9">uvm(9)</a>.
<li>Fix amiga pmap module submap allocations.
<li>Centralized netisr dispatching.
<li><a href="https://man.openbsd.org/ppp.8">ppp(8)</a> updated.
<li>In <a href="https://man.openbsd.org/aue.4">aue(4)</a>, fix multicast filter programming.
<li>Repair an uninitialized variable bug in <a href="https://man.openbsd.org/ipsec.4">ipsec(4)</a> output.<br>
<a href="stable.html">[Applied to stable]</a>
<li>Add <a href="https://man.openbsd.org/i386/pcibios.4">pcibios(4)</a> interrupt setup support for AMD750 chipset.
<li><strong>RELIABILITY FIX: In sparc <a href="https://man.openbsd.org/sparc/zs.4">zs(4)</a>, when using serial console, the interrupt routine was unable to distinguish it's own interrupts.</strong><br>
<a href="errata28.html#zsconsole">A patch is available</a>.<br>
<a href="stable.html">[Applied to stable]</a>
<li>Generate new hashkey every time a <a href="https://man.openbsd.org/bridge.4">bridge(4)</a> is brought up.
<li>Change <a href="https://man.openbsd.org/bridge.4">bridge(4)</a> code to use lower spl.
<li>Passive FTP support in <a href="https://man.openbsd.org/lynx.1">lynx(1)</a>.
<li>In <a href="https://man.openbsd.org/ssh.1">ssh(1)</a>, downgrade to SSH1.3 if server is SSH1.4.
<li>In <a href="https://man.openbsd.org/sshd.8">sshd(8)</a>, do not disable rhosts(rsa) if server port greater 1024.
<li>In <a href="https://man.openbsd.org/sshd.8">sshd(8)</a> Agent forwarding and -R support for SSH2 protocol.
<li><a href="https://man.openbsd.org/ipsecadm.8">ipsecadm(8)</a> man page repairs.<br>
<a href="stable.html">[Applied to stable]</a>
<li>In pfkeyv2, send the message to registered promiscuous listeners.<br>
<a href="stable.html">[Applied to stable]</a>
<li>Some minor <a href="https://man.openbsd.org/bridge.4">bridge(4)</a> fixes.
<li><a href="https://man.openbsd.org/ld.so.1">ld.so(1)</a> support for the pmax.
<li>On powerpc, print out the size of the L2 cache size on G3 and G4 machines.
<li>2.8 release builds are running, but some of us are already working on post-release hacking.
</ul>