-
Notifications
You must be signed in to change notification settings - Fork 43
/
Copy pathplus30.html
641 lines (631 loc) · 54.4 KB
/
plus30.html
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
<!doctype html>
<html lang=en id=plus>
<meta charset=utf-8>
<title>OpenBSD 3.0 Changelog</title>
<meta name="description" content="OpenBSD 3.0 changes">
<meta name="viewport" content="width=device-width, initial-scale=1">
<link rel="stylesheet" type="text/css" href="openbsd.css">
<link rel="canonical" href="https://www.openbsd.org/plus30.html">
<style>
a[href="stable.html"] {
color: var(--green);
}
strong {
color: var(--red);
}
h3 {
color: var(--blue);
}
p strong {
font-weight: normal;
}
code {
font-family: serif;
font-weight: bolder;
}
</style>
<h2 id=OpenBSD>
<a href="index.html">
<i>Open</i><b>BSD</b></a>
3.0 Changelog
</h2>
<hr>
<p>
This is a partial list of the major machine independent changes
(i.e., these are the changes people ask about most often). Machine
specific changes have also been made, and are sometimes mentioned
in the pages for the specific <a href="plat.html">platforms</a>.
<p>
Note: <strong>Problems for which patches exist are marked in red</strong>.
<p>
For changes in other releases, click below:<br>
<a href="plus20.html">2.0</a>,
<a href="plus21.html">2.1</a>,
<a href="plus22.html">2.2</a>,
<a href="plus23.html">2.3</a>,
<a href="plus24.html">2.4</a>,
<a href="plus25.html">2.5</a>,
<a href="plus26.html">2.6</a>,
<a href="plus27.html">2.7</a>,
<a href="plus28.html">2.8</a>,
<a href="plus29.html">2.9</a>,
<a href="plus31.html">3.1</a>,
<a href="plus32.html">3.2</a>,
<a href="plus33.html">3.3</a>,
<a href="plus34.html">3.4</a>,
<a href="plus35.html">3.5</a>,
<a href="plus36.html">3.6</a>,
<a href="plus37.html">3.7</a>,
<br>
<a href="plus38.html">3.8</a>,
<a href="plus39.html">3.9</a>,
<a href="plus40.html">4.0</a>,
<a href="plus41.html">4.1</a>,
<a href="plus42.html">4.2</a>,
<a href="plus43.html">4.3</a>,
<a href="plus44.html">4.4</a>,
<a href="plus45.html">4.5</a>,
<a href="plus46.html">4.6</a>,
<a href="plus47.html">4.7</a>,
<a href="plus48.html">4.8</a>,
<a href="plus49.html">4.9</a>,
<a href="plus50.html">5.0</a>,
<a href="plus51.html">5.1</a>,
<a href="plus52.html">5.2</a>,
<a href="plus53.html">5.3</a>,
<a href="plus54.html">5.4</a>,
<br>
<a href="plus55.html">5.5</a>,
<a href="plus56.html">5.6</a>,
<a href="plus57.html">5.7</a>,
<a href="plus58.html">5.8</a>,
<a href="plus59.html">5.9</a>,
<a href="plus60.html">6.0</a>,
<a href="plus61.html">6.1</a>,
<a href="plus62.html">6.2</a>,
<a href="plus63.html">6.3</a>,
<a href="plus64.html">6.4</a>,
<a href="plus65.html">6.5</a>,
<a href="plus66.html">6.6</a>,
<a href="plus67.html">6.7</a>,
<a href="plus68.html">6.8</a>,
<a href="plus69.html">6.9</a>,
<a href="plus70.html">7.0</a>,
<a href="plus71.html">7.1</a>,
<br>
<a href="plus72.html">7.2</a>,
<a href="plus73.html">7.3</a>,
<a href="plus74.html">7.4</a>,
<a href="plus75.html">7.5</a>,
<a href="plus76.html">7.6</a>,
<a href="plus77.html">7.7</a>,
<a href="plus.html">current</a>.
<br>
<p>
<h3>Changes made between OpenBSD 2.9 and 3.0</h3>
<p>
<ul>
<li>In <a href="https://man.openbsd.org/pf.4">pf(4)</a>, block packets that have IP options set by default.
<li>Disable <a href="https://man.openbsd.org/fd.4">fd(4)</a> sharing.
<li>Repair a <a href="https://man.openbsd.org/umask.2">umask(2)</a> in <a href="https://man.openbsd.org/pflogd.8">pflogd(8)</a>.
<li>Fiddle with channel handling in <a href="https://man.openbsd.org/ssh.8">ssh(8)</a> and <a href="https://man.openbsd.org/ssh.1">ssh(1)</a>.
<li>Add interface name to address translation to <a href="https://man.openbsd.org/pfctl.8">pfctl(8)</a>.
<li>Avoid /tmp races in <a href="https://man.openbsd.org/cvs.1">cvs(1)</a> by utilizing <a href="https://man.openbsd.org/mktemp.1">mktemp(1)</a>.
<li>Handle illegal <a href="https://man.openbsd.org/whois.1">whois(1)</a> server output that lacks a trailing newline.
<li>Bring in FM <a href="https://man.openbsd.org/radio.9">radio(9)</a> driver support; configuration through <a href="https://man.openbsd.org/radioctl.1">radioctl(1)</a>.
<li>Work around buggy HTTP servers that need the Host: field to only contain the port number.
<li>Use bpf_timeval instead of timeval in <a href="https://man.openbsd.org/pcap.3">pcap(3)</a>, <a href="https://man.openbsd.org/isakmpd.8">isakmpd(8)</a>, <a href="https://man.openbsd.org/bpf.4">bpf(4)</a>, and <a href="https://man.openbsd.org/tcpdump.8">tcpdump(8)</a>, improving portability.
<li>Fix a network/host order bug in <a href="https://man.openbsd.org/pf.4">pf(4)</a> that broke state searching on <a href="https://man.openbsd.org/icmp.4">icmp(4)</a> packets with the DF flag set.
<li>New <a href="https://man.openbsd.org/ssh.1">ssh(1)</a> configuration option NoHostAuthenticationForLocalhost.
<li>Import a new <a href="https://man.openbsd.org/rmd160.1">rmd160(1)</a> implementation.
<li>Upgrade to <a href="https://man.openbsd.org/sendmail.8">sendmail(8)</a> 8.12.1, fixing a potential local security hole.
<li>New -t and -d flags for <a href="https://man.openbsd.org/mktemp.1">mktemp(1)</a> to account for the TMPDIR environment variable.
<li>Add a -l flag to <a href="https://man.openbsd.org/mtree.8">mtree(8)</a> to do loose permissions checks.
<li>Report error when the -N and -R flags of <a href="https://man.openbsd.org/pfctl.8">pfctl(8)</a> can't open the specified file.
<li>Have <a href="https://man.openbsd.org/rcp.1">rcp(1)</a> and <a href="https://man.openbsd.org/scp.1">scp(1)</a> skip filenames containing newlines.
<li>Big install documentation overhaul.
<li>Support selectable preset FSM optimizations in <a href="https://man.openbsd.org/pf.4">pf(4)</a>.
<li>Lots of RAIDFrame work.
<li>Filter forwarded <a href="https://man.openbsd.org/ip6.4">ip6(4)</a> packets with <a href="https://man.openbsd.org/pf.4">pf(4)</a>.
<li>Upgrade <a href="https://man.openbsd.org/cvs.1">cvs(1)</a>.
<li>New <a href="https://man.openbsd.org/pidfile.3">pidfile(3)</a> call to write a daemon PID file.
<li>Read user configuration first in <a href="https://man.openbsd.org/ssh.1">ssh(1)</a>.
<li>Allow macro names to contain underscores in <a href="https://man.openbsd.org/pf.conf.5">pf.conf(5)</a>.
<li>Overhaul /tmp handling in <a href="https://man.openbsd.org/gzip.1">gzip(1)</a>.
<li>Improve string handling in <a href="https://man.openbsd.org/rwho.1">rwho(1)</a>.
<li>Fix handling of <a href="https://man.openbsd.org/icmp.4">icmp(4)</a> packets in <a href="https://man.openbsd.org/pf.4">pf(4)</a>.
<li>Plug memory leak in <a href="https://man.openbsd.org/ssh.1">ssh(1)</a>'s compression.
<li>Connect <a href="https://man.openbsd.org/usb.4">usb(4)</a> keyboards to the display after attach.
<li>Correctly free mbuf when dropping a packet in the <a href="https://man.openbsd.org/ip6.4">ip6(4)</a> subsystem.
<li>Default to 9600 baud in <a href="https://man.openbsd.org/cu.1">cu(1)</a>.
<li>Many repairs to <a href="https://man.openbsd.org/getcap.3">getcap(3)</a>, including an off-by-one <a href="https://man.openbsd.org/malloc.3">malloc(3)</a> error and a buffer overflow.
<li>Import a new <a href="https://man.openbsd.org/grep.1">grep(1)</a>.
<li>Update <a href="https://man.openbsd.org/popa3d.8">popa3d(8)</a> to 0.4.9.4, adding support for selectable stand-alone or inetd use and <a href="https://man.openbsd.org/tcpd.8">tcpd(8)</a>.
<li>Start <a href="https://man.openbsd.org/pflogd.8">pflogd(8)</a> differently so it doesn't block NFS in diskless situations.
<li>Avoid a memory leak in <a href="https://man.openbsd.org/uvm.9">uvm(9)</a>.
<li>Remove signal race from <a href="https://man.openbsd.org/rpc.rstatd.8">rpc.rstatd(8)</a>.
<li>Re-order shlib_dirs in <a href="https://man.openbsd.org/rc.8">rc(8)</a>, prioritizing X11R6/lib over local/lib.
<li>Speedup <a href="https://man.openbsd.org/m4.1">m4(1)</a> by using inlines for common operations.
<li>Cleanup the set of <a href="https://man.openbsd.org/user.8">user(8)</a> tools.
<li>Implement a buffer flushing daemon, solving problems related to the syncer and improving performance with large numbers of buffers.
<li>Remove buggy STATIC memory optimization from <a href="https://man.openbsd.org/m4.1">m4(1)</a>.
<li>Have <a href="https://man.openbsd.org/vi.1">vi(1)</a> abort if it can't create a temporary file.
<li>Improve cross building support.
<li>Repair some buffer handling in <a href="https://man.openbsd.org/mail.1">mail(1)</a>.
<li>Add many more length checks when passing data from userland to kernel.
<li>In <a href="https://man.openbsd.org/pf.4">pf(4)</a>, don't ignore the inner protocol of <a href="https://man.openbsd.org/ip.4">ip(4)</a> <a href="https://man.openbsd.org/icmp.4">icmp(4)</a> packets, thus unbreaking <a href="https://man.openbsd.org/traceroute.8">traceroute(8)</a>, etc.
<li>Support insecure1 and insecure2 options in <a href="https://man.openbsd.org/resolv.conf.5">resolv.conf(5)</a>.
<li><strong>SECURITY FIX: be careful with long commandline options in <a href="https://man.openbsd.org/uuxqt.8">uuxqt</a> and run <a href="https://man.openbsd.org/uucp.1">uucp</a> as non-root in daily.</strong><br>
<a href="errata29.html#uucp">A source code patch is available</a>.<br>
<a href="stable.html">[Applied to stable]</a>
<li>Replace ru_SU with ru_RU in <a href="https://man.openbsd.org/vi.1">vi(1)</a>.
<li>Import <a href="https://man.openbsd.org/sendmail.8">sendmail(8)</a> 8.12.0, requiring a new smmsp user and group.
<li>Mark buffers with dependencies as B_DEFERRED and skip them one time when doing <a href="https://man.openbsd.org/sync.2">sync(2)</a>.
<li>Banish uucp to the ports tree.
<li>Upgrade <a href="https://man.openbsd.org/awk.1">awk(1)</a>.
<li>Cleanup <a href="https://man.openbsd.org/adduser.8">adduser(8)</a>; clean up variables, clear hashes correctly, unlock ptmp before closing, etc.
<li>Support 1:1 bi-directional Network Address Translation in <a href="https://man.openbsd.org/pf.4">pf(4)</a>.
<li>proxy user required for <a href="https://man.openbsd.org/ftp-proxy.8">ftp-proxy(8)</a>.
<li>Add a stereo jitter suppressor to the <a href="https://man.openbsd.org/maestro.4">maestro(4)</a> audio driver.
<li>Fix erroneous <a href="https://man.openbsd.org/select.2">select(2)</a> FD_SETSIZE uses.
<li>Repair <a href="https://man.openbsd.org/wall.1">wall(1)</a>'s -g flag.
<li><a href="https://man.openbsd.org/pckbd.4">pckbd(4)</a> supports Ukranian keyboard layouts.
<li>Better Russian <a href="https://man.openbsd.org/calendar.1">calendar(1)</a> support.
<li>Implement skip steps and parameter lists for interfaces in <a href="https://man.openbsd.org/pf.4">pf(4)</a>.
<li>Update username length limit in <a href="https://man.openbsd.org/rmuser.8">rmuser(8)</a>.
<li>New src compilation target: cross-env; prints all environment variables that need to be set for cross-building.
<li>Import <a href="https://man.openbsd.org/usbhidctl.1">usbhidctl(1)</a>, a userland program to manipulate USB HID devices.
<li>Import <a href="https://man.openbsd.org/usb.3">usb(3)</a> library libusb for USB HID processing.
<li>Rename powerpc port to macppc, allowing for code sharing between different powerpc-based platforms.
<li>Inherit <a href="https://man.openbsd.org/vlan.4">vlan(4)</a> baudrate from parent.
<li>Various <a href="https://man.openbsd.org/lpd.8">lpd(8)</a> improvements and fixes.
<li><strong>SECURITY FIX: fix buffer overflow reading queue file in <a href="https://man.openbsd.org/lpd.8">lpd</a>.</strong><br>
<a href="errata29.html#lpd">A source code patch is available</a>.<br>
<a href="stable.html">[Applied to stable]</a>
<li>Plug memory leak in <a href="https://man.openbsd.org/scp.1">scp(1)</a> and <a href="https://man.openbsd.org/rcp.1">rcp(1)</a>.
<li>Avoid segfault in <a href="https://man.openbsd.org/dhclient.8">dhclient(8)</a> when the server specifies its name.
<li>Support the ! operator in host parameter lists in <a href="https://man.openbsd.org/pfctl.8">pfctl(8)</a>.
<li>Send a reset request for every packet received by <a href="https://man.openbsd.org/ppp.8">ppp(8)</a> when the encryption dictionaries are out of sync.
<li>Make <a href="https://man.openbsd.org/pf.4">pf(4)</a> support ISN randomization (aka. phase modulation).
<li>Store argc as a long on the stack as opposed to an int.
<li>Switch rijndael code to the optimized AES reference release.
<li>Have <a href="https://man.openbsd.org/isakmpd.8">isakmpd(8)</a> send DELETE notifications for all active SAs when shutting down.
<li>In <a href="https://man.openbsd.org/sudo.8">sudo(8)</a>, apply default login class if unable to look one up.
<li>Support macro expansion in <a href="https://man.openbsd.org/pf.conf.5">pf.conf(5)</a>.
<li>Work some magic on the installation scripts for floppies, shrinking them.
<li>Correct the setup of the initial <a href="https://man.openbsd.org/tcp.4">tcp(4)</a> state window in <a href="https://man.openbsd.org/pf.4">pf(4)</a>.
<li>Import <a href="https://man.openbsd.org/pflogd.8">pflogd(8)</a>, logging daemon that writes <a href="https://man.openbsd.org/pf.4">pf(4)</a> logs in <a href="https://man.openbsd.org/tcpdump.8">tcpdump(8)</a> binary format.
<li><strong>SECURITY FIX: fix out of bounds handling in <a href="https://man.openbsd.org/sendmail.8">sendmail</a> debug handling</strong><br>
<a href="errata29.html#sendmail2">A source code patch is available</a>.<br>
<a href="stable.html">[Applied to stable]</a>
<li>Repair <a href="https://man.openbsd.org/ppp.8">ppp(8)</a>'s iface-alias option.
<li>Fix rule flushing code in <a href="https://man.openbsd.org/bridge.4">bridge(4)</a> devices.
<li>Support <a href="https://man.openbsd.org/ip6.4">ip6(4)</a> in <a href="https://man.openbsd.org/ppp.8">ppp(8)</a>; crude IPV6CP support; many other smaller changes.
<li>Enhance file-change detection in <a href="https://man.openbsd.org/vipw.8">vipw(8)</a> and <a href="https://man.openbsd.org/crontab.1">crontab(1)</a>.
<li>Add per-rule statistics and byte counter to <a href="https://man.openbsd.org/pf.4">pf(4)</a>.
<li>Don't reset <a href="https://man.openbsd.org/xl.1">xl(1)</a>'s Rx/Tx without first turning them back on after a suspend.
<li>Support parameter lists in <a href="https://man.openbsd.org/pfctl.8">pfctl(8)</a>.
<li>Be sure to pass the interface to ipip_input() in the net subsystem so it can be used in <a href="https://man.openbsd.org/bpf.4">bpf(4)</a>.
<li>Import <a href="https://man.openbsd.org/ftp-proxy.8">ftp-proxy(8)</a>, a transparent ftp proxy.
<li>Loosen <a href="https://man.openbsd.org/tcp.4">tcp(4)</a> state code in <a href="https://man.openbsd.org/pf.4">pf(4)</a>, allowing "stupid stacks to shotgun their SYNs and provide better handling for pre-existing connections".
<li>Initial import of sparc64 port; much subsequent development, too much to list.
<li>Add the possibility to add a random offset to the stack on <a href="https://man.openbsd.org/exec.3">exec(3)</a>.
<li>Make the <a href="https://man.openbsd.org/siop.4">siop(4)</a> driver pay attention to quirks table, eliminating INQUIRY snooping and ifdef toggling.
<li>New -s switch for <a href="https://man.openbsd.org/pwd_mkdb.8">pwd_mkdb(8)</a> to only update the secure .db file.
<li>-e switch for <a href="https://man.openbsd.org/nm.1">nm(1)</a> to show extra symbol information.
<li>Delay locking the passwd file until we have gotten a new password from the user. Also play with the file locking routine.
<li>Attempt to recover from PCI aborts in the <a href="https://man.openbsd.org/hifn.4">hifn(4)</a> driver.
<li>Import keyconv, a small utility to convert between <a href="https://man.openbsd.org/openssl.1">openssl(1)</a> and DNSSEC key formats.
<li>Support trusted public RSA keys as files in <a href="https://man.openbsd.org/isakmpd.8">isakmpd(8)</a>.
<li>Fix lengths for PFKEYv2 and KAME messages in IPv4-in-IPv6 and IPv6-in-IPv4 flows.
<li>Import <a href="https://man.openbsd.org/popa3d.8">popa3d(8)</a>, Solar Designer's POP3 daemon.
<li>The valiant vm_extern.h, vm_inherit.h, vm_map.h, and vm_pager.h files ride off into the sunset.
<li><a href="https://man.openbsd.org/pf.4">pf(4)</a> support for <a href="https://man.openbsd.org/icmp.4">icmp(4)</a> errors referring to <a href="https://man.openbsd.org/icmp.4">icmp(4)</a> queries/replies.
<li>Allow file flags in <a href="https://man.openbsd.org/mtree.8">mtree(8)</a>.
<li>Don't compare the source address on packets to the one in SA when doing <a href="https://man.openbsd.org/ipsec.4">ipsec(4)</a> processing.
<li>Repair rijndael block alignment.
<li>Unshare <a href="https://man.openbsd.org/sigaction.2">sigaction(2)</a> signal handlers on <a href="https://man.openbsd.org/exec.3">exec(3)</a>.
<li>Merge <a href="https://man.openbsd.org/altq.9">altq(9)</a> options into just "altq" for base + red + cbq, and enable it by default.
<li>Support the -h flag for <a href="https://man.openbsd.org/ln.1">ln(1)</a> that prevents following a symlink to a directory.
<li>Many new timeouts for a wide variety of devices.
<li>Remove the IPCOMP option as it's now part of the IPSEC option.
<li>Rewrite <a href="https://man.openbsd.org/signal.3">signal(3)</a> handlers in <a href="https://man.openbsd.org/altqd.8">altqd(8)</a> to be race-safe.
<li>Add support for RC4 operations in the <a href="https://man.openbsd.org/hifn.4">hifn(4)</a> driver.
<li>Don't <a href="https://man.openbsd.org/free.3">free(3)</a> unallocated memory in <a href="https://man.openbsd.org/mailwrapper.8">mailwrapper(8)</a>.
<li>Change <a href="https://man.openbsd.org/tsleep.9">tsleep(9)</a> into an ltsleep wrapper. ltsleep takes one more argument than <a href="https://man.openbsd.org/tsleep.9">tsleep(9)</a>, a simplelock that it unlocks when safe.
<li>Let kerberosV compile entirely on platforms without shared libraries.
<li>Avoid /tmp race in rcs2log by using <a href="https://man.openbsd.org/mktemp.1">mktemp(1)</a>.
<li>Tweak timekeeping code in <a href="https://man.openbsd.org/dd.1">dd(1)</a> to produce a sane bandwidth measure for a short runs.
<li>Enable the ESP and AH <a href="https://man.openbsd.org/ipsec.4">ipsec(4)</a> protocols by default.
<li>Make kernel <a href="https://man.openbsd.org/crash.8">crash(8)</a> dumps work under mvme68k.
<li>No longer drop packets when using an ACQUIRE policy and an error occurs when notifying key management.
<li>New <a href="https://man.openbsd.org/getrrsetbyname.3">getrrsetbyname(3)</a> function to retrieve arbitrary DNS records.
<li>Support protocol version 2 in <a href="https://man.openbsd.org/ssh-keyscan.1">ssh-keyscan(1)</a>.
<li>Move <a href="https://man.openbsd.org/xdm.1">xdm(1)</a>'s PID file from xdm-pid to xdm.pid in /var/run, maintaining consistancy.
<li>Delay decision to make a new <a href="https://man.openbsd.org/hash.3">hash(3)</a> table or not until after calling <a href="https://man.openbsd.org/open.2">open(2)</a>, clearing up problems with file locking.
<li><a href="https://man.openbsd.org/vlan.4">vlan(4)</a> changes: utilize IFCAP_VLAN_MTU and IFCAP_VLAN_HWTAGGING capabilities; LINK0 and MTU ambiguity are no more; MTU's can only be changed within the scope of the parent's MTU.
<li>Repair non-blocking mode issues in <a href="https://man.openbsd.org/syslogd.8">syslogd(8)</a>, avoiding grief with locked terminals.
<li>Make all cases of .Sh AUTHOR and .Sh EXAMPLE plural in manual pages.
<li>New <a href="https://man.openbsd.org/sysctl.3">sysctl(3)</a> nkmempages that reports how many pages are in kmem_map.
<li>Support stateless <a href="https://man.openbsd.org/tcp.4">tcp(4)</a> normalization in <a href="https://man.openbsd.org/pf.4">pf(4)</a>.
<li>Import <a href="https://man.openbsd.org/x99token.1">x99token(1)</a>, a software x99 token calculator.
<li>Add support for EDNS0 extended flag DNSSEC OK to the <a href="https://man.openbsd.org/resolver.3">resolver(3)</a> routines.
<li>Don't send a NUL on the end of CHAP SUCCESS packets in <a href="https://man.openbsd.org/ppp.8">ppp(8)</a> so that WindowsME and Windows98 won't mysteriously fail when encryption is enabled.
<li>Allocate <a href="https://man.openbsd.org/uvm.9">uvm(9)</a> page buckets from kernel_map, saving kmem_map space on machines with lots of physical memory.
<li>In <a href="https://man.openbsd.org/ppp.8">ppp(8)</a>, compensate for a Windows 98 bug when sending a CHAP81 challenge response.
<li>Support the SmartcardDevice option in <a href="https://man.openbsd.org/ssh.1">ssh(1)</a> to specify which smartcard device to use.
<li>Step down only one Ultra DMA mode at a time when downgrading.
<li>On DMA timeouts, stop busmaster PCIIDE and reset channel.
<li>Don't <a href="https://man.openbsd.org/malloc.3">malloc(3)</a> too much and choke in ELF execution.
<li>Support rule skipping in <a href="https://man.openbsd.org/pf.4">pf(4)</a>.
<li>Allow negative lock length with <a href="https://man.openbsd.org/lockf.3">lockf(3)</a>, making it compliant to specification.
<li>In <a href="https://man.openbsd.org/top.1">top(1)</a>, abort if <a href="https://man.openbsd.org/stdout.4">stdout(4)</a> ever produces EOF; prevents spinning output if controlling tty disappears.
<li>Implement startup and shutdown hooks via <a href="https://man.openbsd.org/dohooks.9">dohooks(9)</a> and family.
<li><strong>SECURITY FIX: check filehandle size copied from userland</strong><br>
<a href="errata29.html#nfs">A source code patch is available</a>.<br>
<a href="stable.html">[Applied to stable]</a>
<li>Nuke edlabel.
<li>Add support for disabling swap devices via <a href="https://man.openbsd.org/swapctl.8">swapctl(8)</a>'s -d option.
<li>Support <a href="https://man.openbsd.org/sshd.8">sshd(8)</a> configuration file and key testing via the -t option.
<li>Change vop_symlink and vop_mknod so that they return the created node in a way that the caller can actually utilize it.
<li>Use <a href="https://man.openbsd.org/vfork.2">vfork(2)</a> safely in <a href="https://man.openbsd.org/sup.1">sup(1)</a>.
<li>New flag PMAP_CANFAIL that tells pmap_enter that it can fail if there aren't enough resources instead of panicing.
<li>Make non-stateful and stateful <a href="https://man.openbsd.org/pf.4">pf(4)</a> filtering work on <a href="https://man.openbsd.org/bridge.4">bridge(4)</a> devices.
<li>Initialize arpcom later; it could be incorrectly initialized if done before bridge_input().
<li>Enable challenge-response authentication by default in <a href="https://man.openbsd.org/ssh.1">ssh(1)</a>.
<li>Fix/complete <a href="https://man.openbsd.org/pf.4">pf(4)</a> binary operators.
<li>Repair signal race in <a href="https://man.openbsd.org/m4.1">m4(1)</a>.
<li>Ensure <a href="https://man.openbsd.org/make.1">make(1)</a> doesn't dump core when reporting open conditionals.
<li>Promote PMAP_NEW option to mandatory status.
<li>In the netinet subsystem, zero the TCP checksum field before calculating the new value; fixes problem with bad checksums on keepalives.
<li>Use 64-bit integers for some ipcomp byte counts, fixing strange results with <a href="https://man.openbsd.org/netstat.1">netstat(1)</a>.
<li>Support Addonics FlexPort 8S via <a href="https://man.openbsd.org/addcom.4">addcom(4)</a>.
<li>Ignore O_TRUNC on <a href="https://man.openbsd.org/open.2">open(2)</a> when not opening a regular file.
<li>On ext2fs, ffs, and ufs partitions, don't truncate anything except for symlinks, directories, and regular files.
<li>Repair kern_msgbuf under sparc.
<li>Support DEC EtherWorks cards via <a href="https://man.openbsd.org/lc.4">lc(4)</a>.
<li>Bring na.phone up to date.
<li>The <a href="https://man.openbsd.org/iha.4">iha(4)</a> driver wasn't able to update the EEPROM, so don't even bother.
<li>Rework ata and <a href="https://man.openbsd.org/wdc.4">wdc(4)</a> probing code; deal better with floating buses and supress spurious interrupts.
<li>Plug memory leak in pw_copy() found in libutil.
<li>Put Kerberos 5 things in libkrb5, out of libkafs.
<li>Allow <a href="https://man.openbsd.org/sshd.8">sshd(8)</a> to be compatible in all 4 combinations of Kerberos 4 and Kerberos 5 settings.
<li>When <a href="https://man.openbsd.org/ssh.1">ssh(1)</a> is reading a password, don't panic if <a href="https://man.openbsd.org/fork.2">fork(2)</a> or <a href="https://man.openbsd.org/pipe.2">pipe(2)</a> fail; just return an empty password.
<li>Sync <a href="https://man.openbsd.org/rtsold.8">rtsold(8)</a> to latest KAME, fixing a memory leak and a timer value.
<li>Change quad types on alpha to "long long" as opposed to "long", allowing <a href="https://man.openbsd.org/printf.3">printf(3)</a>'s "%lld" format to be used without a bogus cast.
<li>In the <a href="https://man.openbsd.org/iha.4">iha(4)</a> driver, allow sync to be negotiated even if wide is not.
<li>Modify <a href="https://man.openbsd.org/nv.4">nv(4)</a> <a href="https://man.openbsd.org/XFree86.1">XFree86(1)</a> driver as to avoid the dimming text mode problem.
<li>Add a BSD authentication module for radius authentication.
<li>Make sure that <a href="https://man.openbsd.org/ld.1">ld(1)</a> references all aliases to avoid them being only partially resolved.
<li>Ensure <a href="https://man.openbsd.org/ppp.8">ppp(8)</a> calculates the number of key changes correctly.
<li>Repair the NFS server's request tracking during write-gathering, thus avoiding client hangs.
<li>Use <a href="https://man.openbsd.org/login.conf.5">login.conf(5)</a> for <a href="https://man.openbsd.org/passwd.1">passwd(1)</a> variables as opposed to <a href="https://man.openbsd.org/passwd.conf.5">passwd.conf(5)</a>.
<li>Yank PF_ENCAP support out of <a href="https://man.openbsd.org/isakmpd.8">isakmpd(8)</a>.
<li>Fix-up multicast settings in <a href="https://man.openbsd.org/netstart.8">netstart(8)</a>.
<li>Bump MSIZE up to 256.
<li>IP/TCP/UDP hardware checksumming for <a href="https://man.openbsd.org/nge.4">nge(4)</a>; limited by MTU.
<li>Avoid segmentation fault when <a href="https://man.openbsd.org/mg.1">mg(1)</a> can't read an init file.
<li>Support for <a href="https://man.openbsd.org/ipcomp.4">ipcomp(4)</a>; disabled by default.
<li>Show kern_fthread to the door.
<li>Userland <a href="https://man.openbsd.org/iopctl.8">iopctl(8)</a> control utility for <a href="https://man.openbsd.org/iop.4">iop(4)</a>.
<li>In <a href="https://man.openbsd.org/passwd.1">passwd(1)</a>, lock the <a href="https://man.openbsd.org/passwd.5">passwd(5)</a> file after having gotten a new password from the user; also change the actual locking procedure.
<li>Support for /etc/wsconsctl.conf.
<li>Handle descriptors 0, 1, or 2 being closed when <a href="https://man.openbsd.org/ppp.8">ppp(8)</a> is invoked.
<li>Reduce MTU by 2 after MPPE has been negotiated in <a href="https://man.openbsd.org/ppp.8">ppp(8)</a>.
<li>Merge pdksh patch into <a href="https://man.openbsd.org/ksh.1">ksh(1)</a>, fixing some problems with propagated return values in multi-command lines.
<li>Utilize the welcome variable from <a href="https://man.openbsd.org/login.conf.5">login.conf(5)</a>, in <a href="https://man.openbsd.org/ftpd.8">ftpd(8)</a>, instead of hard-coding /etc/motd.
<li>Discipline the <a href="https://man.openbsd.org/audio.4">audio(4)</a> device so it gets along with <a href="https://man.openbsd.org/revoke.2">revoke(2)</a>.
<li>Repair NFS-related problem with diskless clients by getting the root filehandle via nfs_root.
<li>Add support for screen switching to <a href="https://man.openbsd.org/wsconsctl.8">wsconsctl(8)</a>.
<li>Change <a href="https://man.openbsd.org/wsconsctl.8">wsconsctl(8)</a>'s interface to be more <a href="https://man.openbsd.org/sysctl.8">sysctl(8)</a>-like.
<li>Shuffle around maxlen setting inside the net subsystem to avoid potential problems.
<li>Make <a href="https://man.openbsd.org/icmp.4">icmp(4)</a> error checking saner.
<li>Initial <a href="https://man.openbsd.org/ip6.9">ip6(9)</a> support for <a href="https://man.openbsd.org/isakmpd.8">isakmpd(8)</a>.
<li>Packet normalization support for <a href="https://man.openbsd.org/pf.4">pf(4)</a>.
<li>Userland <a href="https://man.openbsd.org/sectok.1">sectok(1)</a> control program.
<li>Repair kern_fork brain-damage.
<li><a href="https://man.openbsd.org/uvm.9">uvm(9)</a> and MNN are no longer optional.
<li>Import <a href="https://man.openbsd.org/altq.9">altq(9)</a>: alternate queuing support.
<li>Poof! The old vm disappears.
<li>No more M_COPY_* macros; use M_MOVE_* or M_DUP_*.
<li>Add <a href="https://man.openbsd.org/dmesg.8">dmesg(8)</a>, <a href="https://man.openbsd.org/wicontrol.8">wicontrol(8)</a>, and <a href="https://man.openbsd.org/ancontrol.8">ancontrol(8)</a> to powerpc's ramdisk.
<li>New mvmeppc port.
<li>Many mvme68k improvements including: switching to <a href="https://man.openbsd.org/uvm.9">uvm(9)</a>, repairing system trace, cleanup of locore.s, KNF, etc.
<li><a href="https://man.openbsd.org/pciide.4">pciide(4)</a> support for powerpc.
<li>Change <a href="https://man.openbsd.org/icmp6.4">icmp6(4)</a> packet header length computation so it works with both 4.4BSD's M_COPY_PKTHDR and OpenBSD 2.9+'s M_COPY_PKTHDR.
<li>Implement <a href="https://man.openbsd.org/getpeereid.2">getpeereid(2)</a>, allowing local-domain servers to determine client credentials.
<li>Support generic BSD authentication in <a href="https://man.openbsd.org/xdm.1">xdm(1)</a>.
<li>Disable <a href="https://man.openbsd.org/usb.4">usb(4)</a> on alpha by default.
<li>Kerberos v5 support for SSH1.
<li>Hardware RNG support in <a href="https://man.openbsd.org/lofn.4">lofn(4)</a>.
<li>Smartcard support in <a href="https://man.openbsd.org/ssh-agent.1">ssh-agent(1)</a> and <a href="https://man.openbsd.org/ssh.1">ssh(1)</a>.
<li>Large -Wall/-Werror/-W... ongoing cleanup throughout tree.
<li>Nuke mips port.
<li>Initial import of <a href="https://man.openbsd.org/iop.4">iop(4)</a> (I2O) framework.
<li>Rewrite <a href="https://man.openbsd.org/nc.1">nc(1)</a>, adding <a href="https://man.openbsd.org/ip6.4">ip6(4)</a> support.
<li>In <a href="https://man.openbsd.org/su.1">su(1)</a>, offload root instances for Kerberos to the auth program.
<li>Disable SMB decoding in <a href="https://man.openbsd.org/tcpdump.8">tcpdump(8)</a>.
<li>Enable audio on alpha by default.
<li>Endian fixes in the <a href="https://man.openbsd.org/wi.4">wi(4)</a> driver.
<li>Adios NQNFS.
<li>Nuke the pmax port.
<li>Don't perform TCP/UDP hardware checksumming when doing IP fragmentation.
<li>Delayed checksum support in the netinet subsystem.
<li>Support setting the Ethernet address through <a href="https://man.openbsd.org/ifconfig.8">ifconfig(8)</a> for <a href="https://man.openbsd.org/vr.4">vr(4)</a> cards.
<li>Bypass <a href="https://man.openbsd.org/ipsec.4">ipsec(4)</a> for all <a href="https://man.openbsd.org/dhcp.8">dhcp(8)</a> traffic, avoiding potential problems with newly booted clients.
<li>Modify timeouts for IP spd expirations.
<li>Internal fiddling of <a href="https://man.openbsd.org/nfsd.8">nfsd(8)</a>'s handling of its root vnode.
<li>Import <a href="https://man.openbsd.org/pf.4">pf(4)</a>, an ipf-compatible packet filter.
<li>Avoid panics under i386 if bus/dev/func numbers for PCI are not valid.
<li>New <a href="https://man.openbsd.org/sysctl.3">sysctl(3)</a> KERN_POOLS to retrieve pool information from the kernel.
<li>Cleanup and update <a href="https://man.openbsd.org/dhcp.8">dhcp(8)</a> to 2.0pl5.
<li>Utilize <a href="https://man.openbsd.org/readpassphrase.3">readpassphrase(3)</a> in <a href="https://man.openbsd.org/ssh.1">ssh(1)</a>.
<li>Allow access to /dev/pci.
<li>Repair multiple key handling in <a href="https://man.openbsd.org/wicontrol.8">wicontrol(8)</a>.
<li>New ether_input_mbuf to ease transition from ether_header in ether_input; drivers will migrate to this.
<li>Wave goodbye to kernfs.
<li>Replace existing <a href="https://man.openbsd.org/telnetd.8">telnetd(8)</a> with the one from heimdal-0.3f.
<li>Assorted modifications to <a href="https://man.openbsd.org/uvm.9">uvm(9)</a>.
<li><strong>RELIABILITY FIX: link XF86Setup
against the right version of libXxf86vm.a.</strong><br> Fix the
problem of corrupted XF86Config file produced by XF86Setup.<br>
<a href="errata29.html#XF86Setup">A source code patch is available</a>.<br>
<a href="stable.html">[Applied to stable]</a>
<li>Avoid a pidfile/sigterm race in <a href="https://man.openbsd.org/sshd.8">sshd(8)</a>.
<li>Merge the system's crypto.h into crptodev.h, avoiding name conflicts with OpenSSL.
<li>Various <a href="https://man.openbsd.org/pool.9">pool(9)</a> improvements including a new pool_cache() function and cleaner locking.
<li>Spelling audit throughout the manual pages.
<li>Try to have <a href="https://man.openbsd.org/ssh-keygen.1">ssh-keygen(1)</a> decode ssh-3.0.0 private RSA keys.
<li>New <a href="https://man.openbsd.org/mg.1">mg(1)</a> feature: M-x theo.
<li>Support PCI bus configuration from userland.
<li>Add TCP, UDP, and IPv4 hardware checksum processing, excluding outbound TCP/UDP.
<li>Internal shuffling of <a href="https://man.openbsd.org/vnode.9">vnode(9)</a> operations in some filesystems.
<li>Disable interrupts in the <a href="https://man.openbsd.org/wi.4">wi(4)</a> driver before mapping and establishing the interrupt, thereby avoiding a race condition.
<li>MI loadfile support; currently only used on powerpc.
<li>Obsolete *known_hosts2 in <a href="https://man.openbsd.org/ssh.1">ssh(1)</a>.
<li>Some <a href="https://man.openbsd.org/hifn.4">hifn(4)</a> fixes, largely related to descriptor lengths.
<li>Don't let <a href="https://man.openbsd.org/ssh.1">ssh(1)</a> overwrite argv.
<li>Shrink <a href="https://man.openbsd.org/dmesg.8">dmesg(8)</a>.
<li>Merge authorized_keys2 into authorized_keys in <a href="https://man.openbsd.org/ssh.1">ssh(1)</a>.
<li>Provide a <a href="https://man.openbsd.org/sysctl.3">sysctl(3)</a> interface to msgbuf; handy for <a href="https://man.openbsd.org/dmesg.8">dmesg(8)</a>, allowing it to run without setgid.
<li>Upgrade to heimdal-0.3f.
<li>Use <a href="https://man.openbsd.org/moduli.5">moduli(5)</a> instead of the deprecated primes.
<li>Add RNG support in <a href="https://man.openbsd.org/hifn.4">hifn(4)</a> for the 7951.
<li>In <a href="https://man.openbsd.org/isakmpd.8">isakmpd(8)</a>, fallback to <a href="https://man.openbsd.org/stat.2">stat(2)</a> when <a href="https://man.openbsd.org/readdir.3">readdir(3)</a> doesn't return d_type.
<li>Apply KNF to many kernel sources.
<li>Don't forward <a href="https://man.openbsd.org/ip6.4">ip6(4)</a> packets back into point-to-point link if the packet's destination address matches said p2p link's interface.
<li>Lots of manual page cleanups.
<li>Upgrade to openssl-engine-0.9.6a.
<li>Many fixes in the kernel's <a href="https://man.openbsd.org/lockf.3">lockf(3)</a> code including avoiding livelocks on ptrace-related scenarios.
<li>Modify file locking routine in the <a href="https://man.openbsd.org/skey.3">skey(3)</a> library, preventing a race condition, plus other modifications; integrate.
<li>Document <a href="https://man.openbsd.org/physio.9">physio(9)</a>.
<li>More variables in <a href="https://man.openbsd.org/login.conf.5">login.conf(5)</a>: login-timeout, login-tries, and login-backoff.
<li>Improve <a href="https://man.openbsd.org/ppp.8">ppp(8)</a>: handle hardware-imposed MTU/MRU limitations; support stateful MPPE (Microsoft encryption).
<li>Repair <a href="https://man.openbsd.org/vi.1">vi(1)</a> to avoid spinouts when creating temporary files.
<li>Make <a href="https://man.openbsd.org/ftp.1">ftp(1)</a> use binary for transfers as opposed to ascii.
<li>Merge <a href="https://man.openbsd.org/passwd.conf.5">passwd.conf(5)</a> into <a href="https://man.openbsd.org/login.conf.5">login.conf(5)</a> and add passwordtime and minpasswordlen variables.
<li>Move microcode includes around to avoid erroneously installing them, among other reasons.
<li>Overhaul some kern_exec internals, cleaning up the setuid/setgid-checking code.
<li>Adapt <a href="https://man.openbsd.org/skeyinfo.1">skeyinfo(1)</a> to use BSD authentication and removal of the suid root bit.
<li>Improve powerpc's awacs driver; many interrupt fixes.
<li>Allow the use of ^T in passphrases read by <a href="https://man.openbsd.org/readpassphrase.3">readpassphrase(3)</a>.
<li><strong>SECURITY FIX: avoid race in <a href="https://man.openbsd.org/execve.2">execve(2)</a> when checking flags for <a href="https://man.openbsd.org/ptrace.2">ptrace(2)</a>.</strong><br>
<a href="errata29.html#kernexec">A source code patch is available</a>.<br>
<a href="stable.html">[Applied to stable]</a>
<li>Update if_lastchange when IFF_UP is changed instead of on every packet transmission and receipt.
<li>VM renovations on mvme88k.
<li>Use <a href="https://man.openbsd.org/va_start.3">va_start(3)</a> and <a href="https://man.openbsd.org/va_end.3">va_end(3)</a> for every call to <a href="https://man.openbsd.org/vfprintf.3">vfprintf(3)</a> and associates.
<li>Replace commonly used static lists with persistent growable arrays in <a href="https://man.openbsd.org/make.1">make(1)</a>.
<li>Have <a href="https://man.openbsd.org/slstats.8">slstats(8)</a> use an <a href="https://man.openbsd.org/ioctl.2">ioctl(2)</a> so it doesn't need to be setgid.
<li>Ensure *chi doesn't receive interrupts before being initialized.
<li>Let pci_mapreg_map() take an extra argument to limit the size of the PCI region to map so we can still work with things publishing too much PCI memory.
<li>Use lpd_flags in <a href="https://man.openbsd.org/rc.8">rc(8)</a>, allowing flags to be passed to <a href="https://man.openbsd.org/lpd.8">lpd(8)</a>.
<li>Support EDNS0 (RFC2671) buffer size notification for DNS queries.
<li>Upgrade to binutils 2.10.1.
<li>Protect include files in /usr/include/net against multiple inclusion.
<li>Fix unmapped interrupt problems on some VIA-based boards.
<li>New options, improvements, and fixes for <a href="https://man.openbsd.org/wicontrol.8">wicontrol(8)</a>.
<li>Palm support in libsectok.
<li>Rewrite <a href="https://man.openbsd.org/ldd.1">ldd(1)</a>.
<li><strong>RELIABILITY FIX: use correct <a href="https://man.openbsd.org/db.3">db(3)</a> pointers in <a href="https://man.openbsd.org/pwd_mkdb.8">pwd_mkdb(8)</a>, and don't star out empty passwords</strong><br>
<a href="errata29.html#pwd_mkdb">A source code patch is available</a>.<br>
<a href="stable.html">[Applied to stable]</a>
<li>Assorted <a href="https://man.openbsd.org/ppp.8">ppp(8)</a> alterations.
<li>Correct initialization of the policy_id field for SA structures in <a href="https://man.openbsd.org/isakmpd.8">isakmpd(8)</a>.
<li>PCI shim for <a href="https://man.openbsd.org/wi.4">wi(4)</a>.
<li>Repair preservation option in <a href="https://man.openbsd.org/cp.1">cp(1)</a>.
<li>Allow the number of <a href="https://man.openbsd.org/gre.4">gre(4)</a> devices to be changed in <a href="https://man.openbsd.org/boot_config.8">boot_config(8)</a>.
<li><a href="https://man.openbsd.org/rc.8">rc(8)</a> no longer starts netatalk -- if installed -- by default.
<li><strong>RELIABILITY FIX: compute length correctly on certificates in <a href="https://man.openbsd.org/isakmpd.8">isakmpd(8)</a>.</strong><br>
<a href="errata29.html#isakmpd">A source code patch is available</a>.<br>
<a href="stable.html">[Applied to stable]</a>
<li>Ensure <a href="https://man.openbsd.org/kqueue.2">kqueue(2)</a> works on <a href="https://man.openbsd.org/mount_ext2fs.8">ext2fs(8)</a>.
<li>More pipe fiddling.
<li>Enforce Remote-ID specified in Phase 1 peer section in <a href="https://man.openbsd.org/isakmpd.8">isakmpd(8)</a>.
<li>Ongoing license audit and copyright notice cleanup.
<li>Extend pfkeyv2's RFC2367 compliance and fix backward compatibility problems.
<li>Adjust routing socket message to the right size.
<li>Switch UID when <a href="https://man.openbsd.org/sshd.8">sshd(8)</a> cleans up temporary files and sockets.
<li>Speed up <a href="https://man.openbsd.org/arc4random.3">arc4random(3)</a> in some net subsystems.
<li>Upgrade to XFree86 4.1.0.
<li>Use default hoplimit when icmp6_error doesn't know about the incoming interface.
<li>Create <a href="https://man.openbsd.org/sysctl.3">sysctl(3)</a> parameters for ccpu, diskstats, fscale, nprocs, and physmem.
<li>New <a href="https://man.openbsd.org/md5.1">md5(1)</a> implementation with a BSD copyright and other improvements; includes regression test.
<li>Improve <a href="https://man.openbsd.org/swapctl.8">swapctl(8)</a>.
<li>Don't allow packets that need <a href="https://man.openbsd.org/ipsec.4">IPsec(4)</a> processing to be bridge-broadcast.
<li>Expand handling of X.509 and KeyNote certificates in <a href="https://man.openbsd.org/isakmpd.8">isakmpd(8)</a>.
<li>Fix some <a href="https://man.openbsd.org/tcp.4">tcp(4)</a> behaviour with connections in the CLOSING state.
<li>Some <a href="https://man.openbsd.org/ld.so.1">ld.so(1)</a> renovations.
<li>Repair <a href="https://man.openbsd.org/kqueue.2">kqueue(2)</a> related panic.
<li><strong>SECURITY FIX: verify location when using <a href="https://man.openbsd.org/fts.3">fts(3)</a> to pop up directories.</strong><br>
<a href="errata29.html#fts">A source code patch is available</a>.<br>
<a href="stable.html">[Applied to stable]</a>
<li>Update root device selection routines for sun3.
<li>Miscellaneous <a href="https://man.openbsd.org/fxp.4">fxp(4)</a> improvements.
<li>Remove <a href="https://man.openbsd.org/ipf.4">ipf(4)</a> from the tree.
<li>Remove <a href="https://man.openbsd.org/i386/pcvt.4">pcvt(4)</a> from the tree.
<li>Add BSD authentication support to userland programs; authorization defaults in <a href="https://man.openbsd.org/login.conf.5">login.conf(5)</a>.
<li><strong>SECURITY FIX: Update to <a href="https://man.openbsd.org/sendmail.8">sendmail(8)</a> 8.11.4 which addresses signal race conditions.</strong><br>
<a href="errata29.html#sendmail">A source code patch is available</a>.<br>
<a href="stable.html">[Applied to stable]</a>
<li>Hardware clock support on powerpc.
<li>Fix directory state tracking in <a href="https://man.openbsd.org/fsck.8">fsck(8)</a>.
<li>New BIOCGHDRCMPLT and BIOCSHDRCMPLT ioctls for <a href="https://man.openbsd.org/bpf.4">bpf(4)</a> to disable overwriting of the link-level source address.
<li>Support interface capabilities.
<li>Repair cluster_rbuild() in vfs_cluster.
<li>Twiddle with the <a href="https://man.openbsd.org/atapiscsi.4">atapiscsi(4)</a> driver.
<li><a href="https://man.openbsd.org/fxp.4">fxp(4)</a> bug fixes.
<li>Bring back the old (no ECONNABORTED) <a href="https://man.openbsd.org/accept.2">accept(2)</a> behaviour for Unix domain sockets.
<li>Support Heimdal's <a href="https://man.openbsd.org/kerberos.1">Kerberos 5</a>.
<li>Upgrade to <a href="https://man.openbsd.org/perl.1">Perl 5.6.1</a>.
<li>Allow arbitrary atime/mtime setting on <a href="https://man.openbsd.org/mount_ext2fs.8">ext2fs(8)</a> volumes.
<li>Fix lookup code in <a href="https://man.openbsd.org/mount_procfs.8">procfs(8)</a>.
<li>Many assorted <a href="https://man.openbsd.org/mg.1">mg(1)</a> fixes and improvements.
<li>Clean up and shrink <a href="https://man.openbsd.org/make.1">make(1)</a>.
<li>Various improvements to the <a href="https://man.openbsd.org/ubsec.4">ubsec(4)</a> driver.
<li>Fix panics in the <a href="https://man.openbsd.org/ep.4">ep(4)</a> driver by initializing packet tags.
<li>New PCMCIA products from NetBSD.
<li>Utilize packet tags in the net subsystems.
<li>Diversify time parameter parsing in <a href="https://man.openbsd.org/sshd.8">sshd(8)</a>.
<li>Better keyboard-interactive support for <a href="https://man.openbsd.org/ssh.1">ssh(1)</a>.
<li>Convert <a href="https://man.openbsd.org/lseek.2">lseek(2)</a> <a href="https://man.openbsd.org/read.2">read(2)</a>/<a href="https://man.openbsd.org/write.2">write(2)</a> to <a href="https://man.openbsd.org/pread.2">pread(2)</a>/<a href="https://man.openbsd.org/pwrite.2">pwrite(2)</a> in <a href="https://man.openbsd.org/kvm.3">kvm(3)</a>.
<li>Import libsectok, used for ISO 7816 smart cards and iButtons.
<li>Tweak delays in the i82365 PCMCIA controller driver to avoid momentary freezes.
<li>Improve rate support in <a href="https://man.openbsd.org/auich.4">auich(4)</a>.
<li>Make vax use <a href="https://man.openbsd.org/wscons.4">wscons(4)</a> and enable the smg framebuffer.
<li>More <a href="https://man.openbsd.org/select.2">select(2)</a> fixes in <a href="https://man.openbsd.org/ssh.1">ssh(1)</a>.
<li>Fix X11 client bug in <a href="https://man.openbsd.org/ssh.1">ssh(1)</a>.
<li>PMAP_NEW support on the vax and hp300.
<li>Create COMPAT_23 and COMPAT_25 options.
<li>In <a href="https://man.openbsd.org/vr.4">vr(4)</a>, handle suspend mode better on the VT6102.
<li>Do not check return values for <a href="https://man.openbsd.org/malloc.9">malloc(9)</a> calls with M_WAIT or M_WAITOK.
<li>New option: SMALL_KERNEL, subtly changes some kernel semantics to change the kernel size significantly. Use *only* for boot floppies.
<li>Change ip_sum semantics in ip_output().
<li>Compress <a href="https://man.openbsd.org/ac97.4">ac97(4)</a> vendor tables.
<li><a href="https://man.openbsd.org/ac97.4">ac97(4)</a> now knows about rev 2.2.
<li>Squish compatopts to a more sensible set, killing COMPAT_09, COMPAT_10, COMPAT_11.
<li>Shrink the alpha boot blocks a bit.
<li>We no longer support ECOFF kernel loading in the alpha boot block.
<li>Teach <a href="https://man.openbsd.org/ac97.4">ac97(4)</a> about more CODEC models.
<li>At boot time, <a href="https://man.openbsd.org/swapon.8">swapon(8)</a> before <a href="https://man.openbsd.org/fsck.8">fsck(8)</a> is run.
<li>Fix <a href="https://man.openbsd.org/fts.3">fts(3)</a> to handle very long paths.
<li>Repair various signal handler bugs in <a href="https://man.openbsd.org/pppd.8">pppd(8)</a>.
<li>Handle memory allocation failures in <a href="https://man.openbsd.org/fsck_ffs.8">fsck_ffs(8)</a> and <a href="https://man.openbsd.org/fsck_ext2fs.8">fsck_ext2fs(8)</a> better.
<li>Fix a recently introduced bug in <a href="https://man.openbsd.org/supfilsrv.8">supfilsrv(8)</a>.
<li>Correct acceptance of ARP packets coming in on non-IP <a href="https://man.openbsd.org/bridge.4">bridge(4)</a> interfaces.<br>
<a href="stable.html">[Applied to stable]</a>
<li><a href="https://man.openbsd.org/txp.4">txp(4)</a> now works on the alpha.
<li>More fixes to <a href="https://man.openbsd.org/make.1">make(1)</a>.
<li>Check a <a href="https://man.openbsd.org/calloc.3">calloc(3)</a> in <a href="https://man.openbsd.org/fsck_ffs.8">fsck_ffs(8)</a>.
<li>Add a temporary DTYPE_CRYPTO until device cloning support shows up.
<li>Fixes to fdescfs.
<li>busdma changes to <a href="https://man.openbsd.org/txp.4">txp(4)</a>, preparing for the alpha.
<li>Split <a href="https://man.openbsd.org/wi.4">wi(4)</a> into bus dependent and independent parts.
<li>On hp300, splhigh() in cpu_exit().
<li>Misc cleanup of the shared m68k codebase.
<li>More <a href="https://man.openbsd.org/bus_dmamap_sync.9">bus_dmamap_sync(9)</a> in <a href="https://man.openbsd.org/hifn.4">hifn(4)</a>.
<li>Initial non-working alpha <a href="https://man.openbsd.org/ld.so.1">ld.so(1)</a> support.
<li>Support newer versions of the <a href="https://man.openbsd.org/lmc.4">lmc(4)</a> cards.
<li>Kill a debug message in <a href="https://man.openbsd.org/ubsec.4">ubsec(4)</a>.
<li>Add swiss german keyboard layout to <a href="https://man.openbsd.org/wscons.4">wscons(4)</a>.
<li>Smoke out the OLD_PIPE code.
<li>krb4-1.0.8
<li>Bug fix to <a href="https://man.openbsd.org/make.1">make(1)</a>.
<li>Speed up top-level tree Makefiles by doing exec for subshells in new directories.
<li>Artful fiddling of the kernel pipe stat code.
<li>No need for setgid kmem on <a href="https://man.openbsd.org/iostat.8">iostat(8)</a> anymore.
<li>Add more <a href="https://man.openbsd.org/sysctl.3">sysctl(3)</a> support in the kernel.
<li>Make the alpha floppies fit again...
<li>Make <a href="https://man.openbsd.org/hifn.4">hifn(4)</a> use <a href="https://man.openbsd.org/bus_dma.9">bus_dma(9)</a>. Now works on the alpha.
<li>Initial cut at userland hardware <a href="https://man.openbsd.org/crypto.4">crypto(4)</a> support.
<li>In <a href="https://man.openbsd.org/ubsec.4">ubsec(4)</a>, initial support for the Broadcom 5820.
<li>Honour ddb.console on sun3.
<li>On the pmax, fix a curproc misuse.
<li>In <a href="https://man.openbsd.org/pcibios.4">pcibios(4)</a>, deal with buggy BIOSs which incorrectly leave the router as 000:00:0.
<li>hp300 cleanup in progress...
<li>Solve a problem of Lilliputan proportions in powerpc <a href="https://man.openbsd.org/isinf.3">isinf(3)</a>.
<li>Mickey goes mad and does a <a href="https://man.openbsd.org/strlcpy.3">strlcpy(3)</a> whack on src/bin.
<li>Unify rdsetroot and <a href="https://man.openbsd.org/rd.4">rd(4)</a> support between almost all architectures.
<li>Man page cleanups galore.
<li>In <a href="https://man.openbsd.org/hifn.4">hifn(4)</a> attempt to support the Hifn 7951.
<li>Do stdout/stderr flushing in <a href="https://man.openbsd.org/sshd.8">sshd(8)</a> using non-blocking mode.
<li>Fix kerberosIV versioning link problem.
<li>Cleanup MAP_COPY flags in the tree.
<li>Use genassym.cf on alpha.
<li>Unify the <a href="https://man.openbsd.org/rd.4">rd(4)</a> support.
<li>Update <a href="https://man.openbsd.org/sysctl.8">sysctl(8)</a> and <a href="https://man.openbsd.org/vmstat.8">vmstat(8)</a> to use the new interfaces.
<li>Make more data available via the <a href="https://man.openbsd.org/sysctl.3">sysctl(3)</a> interface.
<li>Handle fastroute in the <a href="https://man.openbsd.org/bridge.4">bridge(4)</a>.
<li>hp300 man page cleanup.
<li>Fix a resource leak in <a href="https://man.openbsd.org/twe.4">twe(4)</a>.<br>
<a href="stable.html">[Applied to stable]</a>
<li>Use <a href="https://man.openbsd.org/madvise.2">madvise(2)</a> option with MADV_FREE for <a href="https://man.openbsd.org/malloc.3">malloc(3)</a> 'h' flag.
<li>Support MADV_DONTNEED and MADV_FREE in <a href="https://man.openbsd.org/madvise.2">madvise(2)</a>.
<li>Switch sparc to UVM and PMAP_NEW.
<li>Support HP425e.
<li>Refill <a href="https://man.openbsd.org/txp.4">txp(4)</a> receive ring only when empty -- performance enhancement.
<li>Fix SSH2 <code>-R</code> support in <a href="https://man.openbsd.org/ssh.1">ssh(1)</a>.
<li>More pmap/uvm interface changes.
<li>Correct signal handling in <a href="https://man.openbsd.org/ping6.8">ping6(8)</a>.
<li>Implement screen blanker in <a href="https://man.openbsd.org/wscons.4">wscons(4)</a>.
<li>Attempt to support hifn7951 in <a href="https://man.openbsd.org/hifn.4">hifn(4)</a>.
<li><a href="https://man.openbsd.org/realloc.3">realloc(3)</a> fixes to <a href="https://man.openbsd.org/ipf.8">ipf(8)</a>.
<li>ipf 3.4.17
<li>Fix kernel extent code to be more careful about ranges.
<li>UVM support for mac68k.
<li>Change i386 in_cksum failure to a <a href="https://man.openbsd.org/printf.9">printf(9)</a>, instead of a <a href="https://man.openbsd.org/panic.9">panic(9)</a>.<br>
<a href="stable.html">[Applied to stable]</a>
<li>In <a href="https://man.openbsd.org/txp.4">txp(4)</a>, add support for hardware <a href="https://man.openbsd.org/vlan.4">vlan(4)</a>.
<li>Fix a bug in <a href="https://man.openbsd.org/make.1">make(1)</a> exposed by the recent jumbo patch.
<li>Fix <a href="https://man.openbsd.org/ti.4">ti(4)</a> to handle <a href="https://man.openbsd.org/vlan.4">vlan(4)</a> properly.
<li>vsunlock fixes to UVM.
<li>Signal ignore bug fix to <a href="https://man.openbsd.org/ssh.1">ssh(1)</a>.
<li>Kill i386 VM & pmap_old support.
<li>Fix process priority bug in <a href="https://man.openbsd.org/atrun.8">atrun(8)</a>.
<li>Enable <a href="https://man.openbsd.org/vlan.4">vlan(4)</a> by default in GENERIC kernels.
<li>Fix <a href="https://man.openbsd.org/pread.3">pread(3)</a>, <a href="https://man.openbsd.org/preadv.3">preadv(3)</a>, <a href="https://man.openbsd.org/pwrite.3">pwrite(3)</a>, and <a href="https://man.openbsd.org/pwritev.3">pwritev(3)</a> on big endian architectures.
<li>In <a href="https://man.openbsd.org/sendmail.8">sendmail(8)</a>, use FAST_PID_RECYCLE.
<li>Remove excess (vaddr_t) casts.
<li>Get rid of CLSIZE and friends.
<li>Increase <a href="https://man.openbsd.org/strlcpy.3">strlcpy(3)</a> in parts of the tree.
<li>Some minor changes to <a href="https://man.openbsd.org/isakmpd.8">isakmpd(8)</a>.
<li>Cleanup M_* malloc types in the kernel.
<li>UVM for the hp300.
<li>Numerous cleanups to <a href="https://man.openbsd.org/sup.1">sup(1)</a>.
<li>In <a href="https://man.openbsd.org/systat.8">systat(8)</a>, handle <a href="https://man.openbsd.org/kvm_nlist.3">kvm_nlist(3)</a> failing.
<li>Fix a channel race in <a href="https://man.openbsd.org/sshd.8">sshd(8)</a>.
<li>Document that <a href="https://man.openbsd.org/nc.1">nc(1)</a> no longer has a -e option.
<li>Fix localhost handling bug in <a href="https://man.openbsd.org/httpd.8">httpd(8)</a>.
<li>Jumbo patch to <a href="https://man.openbsd.org/make.1">make(1)</a> that has been brewing for a while.
<li>Various improvements to <a href="https://man.openbsd.org/mg.1">mg(1)</a>.
<li>Big USB code update.
<li>Fix a signed vs unsigned error in the <a href="https://man.openbsd.org/gm.4">gm(4)</a> Ethernet driver.
<li>In <a href="https://man.openbsd.org/wump.6">wump(6)</a>, improve our cave topology algorithm. Don't ask.
<li>Force -h to override the BLOCKSIZE environment in <a href="https://man.openbsd.org/du.1">du(1)</a>.
<li>Substantial updates to <a href="https://man.openbsd.org/sup.1">sup(1)</a>.
<li>Fix a register save/restore bug in <a href="https://man.openbsd.org/clcs.4">clcs(4)</a> so that suspend/resume works better.
<li>Allow the right CTRL+ALT keys to work as the left ones do in <a href="https://man.openbsd.org/wskbd.4">wskbd(4)</a>.
<li>Continue to hack our new <a href="https://man.openbsd.org/txp.4">txp(4)</a> driver into shape.
<li>In <a href="https://man.openbsd.org/ifconfig.8">ifconfig(8)</a>, implement support for removing tunnel outer IP address pair.
<li>Revert a buggy optimization in <a href="https://man.openbsd.org/tsort.1">tsort(1)</a>.
<li>Use <a href="https://man.openbsd.org/pread.2">pread(2)</a> in <a href="https://man.openbsd.org/nlist.3">nlist(3)</a> instead of abusing <a href="https://man.openbsd.org/lseek.2">lseek(2)</a> with <a href="https://man.openbsd.org/read.2">read(2)</a>.
<li>Remove cruft leftover from the old PCVT console driver.
<li>Fix filename tab-completion in <a href="https://man.openbsd.org/mg.1">mg(1)</a>.
<li>Convert some more drivers to the new <a href="https://man.openbsd.org/timeout.9">timeout(9)</a> interface.
<li>Whack dtom() in the kernel. Fo'get about it.
<li>Avoid a NULL pointer dereference in <a href="https://man.openbsd.org/faithd.8">faithd(8)</a>.
<li>Various reset and delay fixes in <a href="https://man.openbsd.org/wdc.4">wdc(4)</a> to help certain ATAPI devices.
<li>Deal with suspend/resume more cleanly in <a href="https://man.openbsd.org/pccbb.4">pccbb(4)</a>.
<li>Better hints handling and memory allocation in <a href="https://man.openbsd.org/tsort.1">tsort(1)</a>.
<li>Correct an error condition in /etc/ksh.kshrc.
<li>Add a koi8-r keyboard layout for <a href="https://man.openbsd.org/wskbd.4">wskbd(4)</a>.
<li>Allow interoperability between OpenSSH and older ssh-2.0.x variants with weaker key generation.
<li>Instrument improved locking and rework SCSI a bit in <a href="https://man.openbsd.org/ami.4">ami(4)</a>.
<li>Cleanups to <a href="https://man.openbsd.org/ancontrol.8">ancontrol(8)</a>.
<li>Add a -b option to <a href="https://man.openbsd.org/ssh.1">ssh(1)</a>, similar to <a href="https://man.openbsd.org/telnet.1">telnet(1)</a>'s equivalent.
<li>Fix a memory handling bug in <a href="https://man.openbsd.org/telnet.1">telnet(1)</a>.
<li>Use <a href="https://man.openbsd.org/pool.9">pool(9)</a> interface for the VFS cache.
<li>Improve OpenSSH interoperability with ssh.com-2.0.x clients.
<li>In the mvme88k port, replace resource maps with extents.
<li>Numerous fixes and updates to <a href="https://man.openbsd.org/sup.1">sup(1)</a>.
</ul>