From a6ae64c4808f2aedf4d617fa7105069a0d46a94e Mon Sep 17 00:00:00 2001 From: "Bruce A. Mah" Date: Sun, 30 Jun 2002 18:48:24 +0000 Subject: [PATCH] New release notes: ipfw(4) rewrite. Modified release notes: ACPI 20020404, OpenSSH 3.4p1 (rewrote 3.3p1 update and reformatted). --- .../doc/en_US.ISO8859-1/relnotes/article.sgml | 29 +++++++++++++++---- .../en_US.ISO8859-1/relnotes/common/new.sgml | 29 +++++++++++++++---- 2 files changed, 48 insertions(+), 10 deletions(-) diff --git a/release/doc/en_US.ISO8859-1/relnotes/article.sgml b/release/doc/en_US.ISO8859-1/relnotes/article.sgml index 9ff22f6dfdd3..50b18f22aa79 100644 --- a/release/doc/en_US.ISO8859-1/relnotes/article.sgml +++ b/release/doc/en_US.ISO8859-1/relnotes/article.sgml @@ -913,6 +913,13 @@ options HZ=1000 # not compulsory but strongly recommended &man.ipfw.4; now filters correctly in the presence of ECN bits in TCP segments. &merged; + &man.ipfw.4 has been re-implemented. It now uses + variable-sized representation of rules in the kernel, similar + to &man.bpf.4; instructions. Most of the externally-visible + behavior (i.e. through &man.ipfw.8;) should be unchanged., + although &man.ipfw.8; now supports or + connectives between match fields. + A new ng_eiface netgraph module has been added, which appears as an Ethernet interface but delivers its Ethernet frames to a Netgraph hook. &merged; @@ -1453,7 +1460,7 @@ options HZ=1000 # not compulsory but strongly recommended (ACPI), a multi-vendor standard for configuration and power management, has been added. This functionality has been provided by the Intel ACPI Component - Architecture project, as of the ACPI CA 20020308 + Architecture project, as of the ACPI CA 20020404 snapshot. Some backward compatability for applications using the older APM standard has been provided. @@ -3550,10 +3557,22 @@ options HZ=1000 # not compulsory but strongly recommended OpenSSH has been updated to - 3.3p1. This version adds a privilege - separation feature, which uses unprivileged - processes to contain and restrict the effects of future - compromises or programming errors. + 3.4p1. The main changes are: + + + A privilege separation feature, + which uses unprivileged processes to contain and + restrict the effects of future compromises or + programming errors. + + + + Several bugfixes, including closure of a + security hole that could lead to an integer overflow + and undesired privilege escalation. + + + OpenSSH can now authenticate using OPIE passwords. diff --git a/release/doc/en_US.ISO8859-1/relnotes/common/new.sgml b/release/doc/en_US.ISO8859-1/relnotes/common/new.sgml index 9ff22f6dfdd3..50b18f22aa79 100644 --- a/release/doc/en_US.ISO8859-1/relnotes/common/new.sgml +++ b/release/doc/en_US.ISO8859-1/relnotes/common/new.sgml @@ -913,6 +913,13 @@ options HZ=1000 # not compulsory but strongly recommended &man.ipfw.4; now filters correctly in the presence of ECN bits in TCP segments. &merged; + &man.ipfw.4 has been re-implemented. It now uses + variable-sized representation of rules in the kernel, similar + to &man.bpf.4; instructions. Most of the externally-visible + behavior (i.e. through &man.ipfw.8;) should be unchanged., + although &man.ipfw.8; now supports or + connectives between match fields. + A new ng_eiface netgraph module has been added, which appears as an Ethernet interface but delivers its Ethernet frames to a Netgraph hook. &merged; @@ -1453,7 +1460,7 @@ options HZ=1000 # not compulsory but strongly recommended (ACPI), a multi-vendor standard for configuration and power management, has been added. This functionality has been provided by the Intel ACPI Component - Architecture project, as of the ACPI CA 20020308 + Architecture project, as of the ACPI CA 20020404 snapshot. Some backward compatability for applications using the older APM standard has been provided. @@ -3550,10 +3557,22 @@ options HZ=1000 # not compulsory but strongly recommended OpenSSH has been updated to - 3.3p1. This version adds a privilege - separation feature, which uses unprivileged - processes to contain and restrict the effects of future - compromises or programming errors. + 3.4p1. The main changes are: + + + A privilege separation feature, + which uses unprivileged processes to contain and + restrict the effects of future compromises or + programming errors. + + + + Several bugfixes, including closure of a + security hole that could lead to an integer overflow + and undesired privilege escalation. + + + OpenSSH can now authenticate using OPIE passwords.