www/48.html - diff

<li><a href="http://man.openbsd.org/?query=bgpd&sektion=8">bgpd(8)</a> control sockets are now specified in the config file. This removes the -s and -r arguments to bgpd.

<li><a href="https://man.openbsd.org/?query=bgpd&sektion=8">bgpd(8)</a> control sockets are now specified in the config file. This removes the -s and -r arguments to bgpd.

<li>Extended the BGP MPLS VPN support to allow Layer-3 MPLS VPNs to be

terminated on OpenBSD with the help of

<a href="http://man.openbsd.org/?query=mpe&sektion=4">mpe(4)</a>,

<a href="https://man.openbsd.org/?query=mpe&sektion=4">mpe(4)</a>,

<a href="http://man.openbsd.org/?query=ldpd&sektion=8">ldpd(8)</a>, and

<a href="https://man.openbsd.org/?query=ldpd&sektion=8">ldpd(8)</a>, and

<a href="http://man.openbsd.org/?query=bgpd&sektion=8">bgpd(8)</a>.

<a href="https://man.openbsd.org/?query=bgpd&sektion=8">bgpd(8)</a>.

supports multiple FIBs and it is possible to assign them to RIBs for

redistribution.

<li>bgpd now supports to use neighbor-as in AS filter statements and added

Line 138

a sequence of a single AS or the total length of an AS path.

<li>Added softreconfig support in bgpd for peers changing the RIB.

<li>Fixed multiprotocol MRT dumps and added 4-byte AS-Number support in

<a href="http://man.openbsd.org/?query=bgpd&sektion=8">bgpd(8)</a>.

<a href="https://man.openbsd.org/?query=bgpd&sektion=8">bgpd(8)</a>.

<li>Added support for ping6 and traceroute6 in

<a href="http://man.openbsd.org/?query=bgplg&sektion=8">bgplg(8)</a>

<a href="https://man.openbsd.org/?query=bgplg&sektion=8">bgplg(8)</a>

and

<a href="http://man.openbsd.org/?query=bgplgsh&sektion=8">bgplgsh(8)</a>

<a href="https://man.openbsd.org/?query=bgplgsh&sektion=8">bgplgsh(8)</a>

<li><a href="http://man.openbsd.org/?query=ospfd&sektion=8">ospfd(8)</a>

<li><a href="https://man.openbsd.org/?query=ospfd&sektion=8">ospfd(8)</a>

has better LSA pruning and config reload support.

now supports LSAs larger than the link MTU, has improved interoperability

with other OSPFv3 implementations, can redistribute the default route,

and will correctly handle IPv6 prefixes advertised by neighbours on

the same link but not configured on the router itself.

<li>Various improvements in

including correct penultimate hop popping, better session handling,

and a improved config file parser.

</ul>

Line 159

<li>Generic network stack improvements:

<ul>

<li><a href="http://man.openbsd.org/?query=ifconfig&sekti

<li><a href="https://man.openbsd.org/?query=ifconfig&sekti

on=8">ifconfig(8)</a> and

<a href="http://man.openbsd.org/?query=route&sektion=8">route(8)</a>

<a href="https://man.openbsd.org/?query=route&sektion=8">route(8)</a>

get better Multiprotocol Label Switching support.

<li><a href="http://man.openbsd.org/?query=traceroute&sektion=8">traceroute(8)</a>

<li><a href="https://man.openbsd.org/?query=traceroute&sektion=8">traceroute(8)</a>

now supports extended ICMP headers which allows printing of MPLS

labels.

<li>Support for RFC 4941 privacy extensions for stateless address

autoconfiguration has been added to <a href="http://man.openbsd.org/?query=inet6&sektion=4">inet6(4)</a> and can be enabled via

autoconfiguration has been added to <a href="https://man.openbsd.org/?query=inet6&sektion=4">inet6(4)</a> and can be enabled via

<a href="http://man.openbsd.org/?query=ifconfig&sektion=8">ifconfig(8)</a>.

<a href="https://man.openbsd.org/?query=ifconfig&sektion=8">ifconfig(8)</a>.

<li><a href="http://man.openbsd.org/?query=ifconfig&sektion=8">ifconfig(8)</a>

<li><a href="https://man.openbsd.org/?query=ifconfig&sektion=8">ifconfig(8)</a>

now supports random selection of MAC addresses.

<li><a href="http://man.openbsd.org/?query=tcpdump&sektion=8">tcpdump(8)</a>

<li><a href="https://man.openbsd.org/?query=tcpdump&sektion=8">tcpdump(8)</a>

now decodes Multicast Listener Discovery version 2 and

Internet Key Exchange version 2 traffic.

<li><a href="http://man.openbsd.org/?query=enc&sektion=4">enc(4)</a> and

<li><a href="https://man.openbsd.org/?query=enc&sektion=4">enc(4)</a> and

<a href="http://man.openbsd.org/?query=ipsec&sektion=4">ipsec(4)</a> are now

<a href="https://man.openbsd.org/?query=ipsec&sektion=4">ipsec(4)</a> are now

aware of routing domains.

<li><a href="http://man.openbsd.org/?query=dhcpd&sektion=8">dhcpd(8)</a> and

<li><a href="https://man.openbsd.org/?query=dhcpd&sektion=8">dhcpd(8)</a> and

<a href="http://man.openbsd.org/?query=dhclient&sektion=8">dhclient(8)</a> and

<a href="https://man.openbsd.org/?query=dhclient&sektion=8">dhclient(8)</a> and

are now capable of running in different routing domains.

<li>Added MPLS support and a simple keepalive mechanism to

<a href="http://man.openbsd.org/?query=gre&sektion=4">gre(4)</a>.

<a href="https://man.openbsd.org/?query=gre&sektion=4">gre(4)</a>.

<li>Added MPLS support to

<a href="http://man.openbsd.org/?query=gif&sektion=4">gif(4)</a>.

<a href="https://man.openbsd.org/?query=gif&sektion=4">gif(4)</a>.

<li>Support for 802.1ad-style QinQ nested VLANs with the addition of

<a href="http://man.openbsd.org/?query=svlan&sektion=4">svlan(4)</a> (service VLAN) interfaces.

<a href="https://man.openbsd.org/?query=svlan&sektion=4">svlan(4)</a> (service VLAN) interfaces.

<li>Added a RTM_DESYNC routing message as indicator that route messages

got dropped because of insufficent buffer space.

<a href="http://man.openbsd.org/?query=ospfd&sektion=8">ospfd(8)</a>

<a href="https://man.openbsd.org/?query=ospfd&sektion=8">ospfd(8)</a>

uses this message to keep the internal view of the routing table in sync.

</ul>

<li>SCSI improvements:

<ul>

<li>better <a href="http://man.openbsd.org/?query=cd&sektion=4">cd(4)</a> detaching.

<li>better <a href="https://man.openbsd.org/?query=cd&sektion=4">cd(4)</a> detaching.

<li>better <a href="http://man.openbsd.org/?query=st&sektion=4">st(4)</a> sense data and buf handling.

<li>better <a href="https://man.openbsd.org/?query=st&sektion=4">st(4)</a> sense data and buf handling.

<li>eliminate excessive delays when starting DVD playing.

<li>ask only for minimal (i.e. 18 bytes) sense data, fixing usb devices.

<li>migrate to using bufq.

Line 218

<li>Assorted improvements:

<ul>

<li><a href="http://man.openbsd.org/?query=mbtowc&sektion=3">mbtowc(3)</a> multi-byte/wide-character conversion functions

<li><a href="https://man.openbsd.org/?query=mbtowc&sektion=3">mbtowc(3)</a> multi-byte/wide-character conversion functions

have been added to the C library, and

<a href="http://man.openbsd.org/?query=setlocale&sektion=3">setlocale(3)</a>

<a href="https://man.openbsd.org/?query=setlocale&sektion=3">setlocale(3)</a>

now supports the en_US.UTF-8 locale.

<li><a href="http://man.openbsd.org/?query=posix_madvise&sektion=2">posix_madvise(2)</a>,

<li><a href="https://man.openbsd.org/?query=posix_madvise&sektion=2">posix_madvise(2)</a>,

<a href="http://man.openbsd.org/?query=posix_memalign&sektion=3">posix_memalign(3)</a>,

<a href="https://man.openbsd.org/?query=posix_memalign&sektion=3">posix_memalign(3)</a>,

<a href="http://man.openbsd.org/?query=strndup&sektion=3">strndup(3)</a>, and

<a href="https://man.openbsd.org/?query=strndup&sektion=3">strndup(3)</a>, and

<a href="http://man.openbsd.org/?query=strnlen&sektion=3">strnlen(3)</a>

<a href="https://man.openbsd.org/?query=strnlen&sektion=3">strnlen(3)</a>

have been added to the C library.

<li>The <a href="http://man.openbsd.org/?query=event&sektion=3">event(3)</a> library

<li>The <a href="https://man.openbsd.org/?query=event&sektion=3">event(3)</a> library

was updated to version 1.4.14b.

<li>The <a href="http://man.openbsd.org/?query=pthreads&sektion=3">pthreads(3)</a> library

<li>The <a href="https://man.openbsd.org/?query=pthreads&sektion=3">pthreads(3)</a> library

now implements the <tt>pthread_rwlock_timed{rd,wr}lock</tt> interfaces.

<li>AES-NI support has been integrated into the OpenSSL

<a href="http://man.openbsd.org/?query=crypto&sektion=3">crypto(3)</a> library.

<a href="https://man.openbsd.org/?query=crypto&sektion=3">crypto(3)</a> library.

<li>MIDI control in non-server mode was added to

<a href="http://man.openbsd.org/?query=aucat&sektion=1">aucat(1)</a>,

<a href="https://man.openbsd.org/?query=aucat&sektion=1">aucat(1)</a>,

including seeking within .wav files

<li>A new record-what-you-hear feature was added to

<a href="http://man.openbsd.org/?query=aucat&sektion=1">aucat(1)</a>.

<a href="https://man.openbsd.org/?query=aucat&sektion=1">aucat(1)</a>.

<li>The minimum extra latency of the

<a href="http://man.openbsd.org/?query=aucat&sektion=1">aucat(1)</a>

<a href="https://man.openbsd.org/?query=aucat&sektion=1">aucat(1)</a>

server was lowered to a single block, improving

usability of low-latency programs without stability compromise.

<li><a href="http://man.openbsd.org/?query=disklabel&sektion=8">disklabel(8)</a>

<li><a href="https://man.openbsd.org/?query=disklabel&sektion=8">disklabel(8)</a>

now supports unique disk identifiers.

now handles redirection to relative URLs in the Location: header

of HTTP responses.

now recognizes the C99 data types _Bool and _Complex

and some related gcc extensions.

now allows variables in SysV modifiers,

and implements the :QL (quote list) modifier.

<li><a href="http://man.openbsd.org/?query=man&sektion=1">man(1)</a> now allows to combine the -s option with -m or -M.

<li><a href="https://man.openbsd.org/?query=man&sektion=1">man(1)</a> now allows to combine the -s option with -m or -M.

<li>Improved directory editing in <a href="http://man.openbsd.org/?query=mg&sektion=1">mg(1)</a>.

<li>Improved directory editing in <a href="https://man.openbsd.org/?query=mg&sektion=1">mg(1)</a>.

<li><a href="http://man.openbsd.org/?query=newfs&sektion=8">newfs(8)</a> has been tweaked to better support large file systems.

<li><a href="https://man.openbsd.org/?query=newfs&sektion=8">newfs(8)</a> has been tweaked to better support large file systems.

now supports the POSIX -A option to select an input address base.

<li><a href="http://man.openbsd.org/?query=sendbug&sektion=1">sendbug(1)</a>

<li><a href="https://man.openbsd.org/?query=sendbug&sektion=1">sendbug(1)</a>

now includes the output of <tt>usbdevs -v</tt> into the template.

<li><a href="http://man.openbsd.org/?query=smtpd&sektion=8">smtpd(8)</a>

<li><a href="https://man.openbsd.org/?query=smtpd&sektion=8">smtpd(8)</a>

now supports the SIZE and ENHANCEDSTATUSCODES extensions

and the "plain" backend for maps, and performance was improved when handling large amounts of mail.

<li><a href="http://man.openbsd.org/?query=snmpd&sektion=8">snmpd(8)</a>

<li><a href="https://man.openbsd.org/?query=snmpd&sektion=8">snmpd(8)</a>

now supports the IP-FORWARD-MIB.

<li><a href="http://man.openbsd.org/?query=wsconsctl&sektion=8">wsconsctl(8)</a> now handles more than one keyboard, mouse and display.

<li><a href="https://man.openbsd.org/?query=wsconsctl&sektion=8">wsconsctl(8)</a> now handles more than one keyboard, mouse and display.

<li>Many memory leaks have been fixed in various userland utilities.

<li><a href="amd64.html">amd64</a>,

<a href="i386.html">i386</a>,

Line 274

<a href="socppc.html">socppc</a> and

<a href="macppc.html">macppc</a>

platforms were switched over to gcc4.

<li><a href="http://man.openbsd.org/?query=newfs&sektion=8">newfs(8)</a> now makes FFS2 the default for partitions larger than INT_MAX blocks.

<li><a href="https://man.openbsd.org/?query=newfs&sektion=8">newfs(8)</a> now makes FFS2 the default for partitions larger than INT_MAX blocks.

<li><a href="http://man.openbsd.org/?query=dhcpd&sektion=8">dhcpd(8)</a> now includes the server id in NAK messages, as required by some

<li><a href="https://man.openbsd.org/?query=dhcpd&sektion=8">dhcpd(8)</a> now includes the server id in NAK messages, as required by some

relays.

<li><a href="http://man.openbsd.org/?query=disklabel&sektion=8">disklabel(8)</a> now aligns the start and end of FFS partitions on bsize boundaries where it can, to improve performance on 4096-byte block devices.

<li><a href="https://man.openbsd.org/?query=disklabel&sektion=8">disklabel(8)</a> now aligns the start and end of FFS partitions on bsize boundaries where it can, to improve performance on 4096-byte block devices.

<li>by default, read and write caching is now turned on for non-USB scsi disks.

<li><a href="http://man.openbsd.org/?query=getdirentries&sektion=2">getdirentries(2)</a> now checks to ensure that it doesn't wrap or truncate directory information on architectures where LONG is a different size from LONG LONG.

<li><a href="https://man.openbsd.org/?query=getdirentries&sektion=2">getdirentries(2)</a> now checks to ensure that it doesn't wrap or truncate directory information on architectures where LONG is a different size from LONG LONG.

<li><a href="http://man.openbsd.org/?query=disklabel&sektion=8">disklabel(8)</a> now ensures correct physical bounds and disk size are used when building a disklabel from saved ascii disklabel.

<li><a href="https://man.openbsd.org/?query=disklabel&sektion=8">disklabel(8)</a> now ensures correct physical bounds and disk size are used when building a disklabel from saved ascii disklabel.

<li>it is again possible to build a bsd.rd that has DDB.

<li><a href="http://man.openbsd.org/?query=pms&sektion=4">pms(4)</a> now works much better with various trackpads and over suspend/resume cycles.

<li><a href="https://man.openbsd.org/?query=pms&sektion=4">pms(4)</a> now works much better with various trackpads and over suspend/resume cycles.

<li><a href="http://man.openbsd.org/?query=fdisk&sektion=8">fdisk(8)</a> now aligns the OpenBSD partition on a power of 2 block boundary to improve performance on 4096-byte block devices.

<li><a href="https://man.openbsd.org/?query=fdisk&sektion=8">fdisk(8)</a> now aligns the OpenBSD partition on a power of 2 block boundary to improve performance on 4096-byte block devices.

<li><a href="http://man.openbsd.org/?query=nfsd&sektion=8">nfsd(8)</a> now logs start up errors to the system log as well as the console.

<li><a href="https://man.openbsd.org/?query=nfsd&sektion=8">nfsd(8)</a> now logs start up errors to the system log as well as the console.

<li><a href="http://man.openbsd.org/?query=nfsd&sektion=8">nfsd(8)</a> now errors out if given an invalid number of servers to run.

<li><a href="https://man.openbsd.org/?query=nfsd&sektion=8">nfsd(8)</a> now errors out if given an invalid number of servers to run.

</ul>

Line 293

<ul>

<li>If the system time is off by more than 120 seconds, ask if the user

wants to set it accordingly.

<li><a href="http://man.openbsd.org/?query=disklabel&sektion=8">disklabel(8)</a>

<li><a href="https://man.openbsd.org/?query=disklabel&sektion=8">disklabel(8)</a>

now allows to customize auto allocated labels using the -R option.

<li>Default network install method changed from FTP to HTTP.

<li>Automatically set

`installfrom' entry to the public mirror used while installing or upgrading.

<li><a href="http://man.openbsd.org/?query=sysmerge&sektion=8">sysmerge(8)</a> now automatically installs missing users and groups.

<li><a href="https://man.openbsd.org/?query=sysmerge&sektion=8">sysmerge(8)</a> now automatically installs missing users and groups.

<li>Eliminate more excessively chatty remarks during install.

<li>Handle disk UID partitions better.

</ul>

Line 310

<li>New features:

<ul>

<li>Added a ControlPersist option to

<a href="http://man.openbsd.org/?query=ssh_config&sektion=5">ssh_config(5)</a>.

<a href="https://man.openbsd.org/?query=ssh_config&sektion=5">ssh_config(5)</a>.

<li>Hostbased authentication may now use certificate host keys.

<li><a href="http://man.openbsd.org/?query=ssh-keygen&sektion=1">ssh-keygen(1)</a>

<li><a href="https://man.openbsd.org/?query=ssh-keygen&sektion=1">ssh-keygen(1)</a>

now supports signing certificate using a CA key that has been stored

in a PKCS#11 token.

will now log the hostname and address that we connected to at

LogLevel=verbose after authentication is successful to mitigate

"phishing" attacks.

<li>Expand %h to the hostname in ssh_config Hostname options.

<li>Allow <a href="http://man.openbsd.org/?query=ssh-keygen&sektion=1">ssh-keygen(1)</a>

<li>Allow <a href="https://man.openbsd.org/?query=ssh-keygen&sektion=1">ssh-keygen(1)</a>

to import and export of PEM and PKCS#8 keys.

will now queue debug messages for bad ownership or permissions on

the user's keyfiles encountered during authentication.

connection multiplexing now supports remote forwarding with

dynamic port allocation and can report the allocated port back to

the user.

now supports indirection in matching of principal names listed in

certificates.

now has a new AuthorizedPrincipalsFile option.

<li>Additional <a href="http://man.openbsd.org/?query=sshd_config&sektion=5">sshd_config(5)</a>

<li>Additional <a href="https://man.openbsd.org/?query=sshd_config&sektion=5">sshd_config(5)</a>

options are now valid inside Match blocks:

<ul>

<li>AuthorizedKeysFile

Line 348

<li>The PKCS#11 code now retries a lookup for a private key if there is

no matching key with CKA_SIGN attribute enabled (bz#1736).

<li>Unbreak strdelim() skipping past quoted strings.

<li><a href="http://man.openbsd.org/?query=sftp&sektion=1">sftp(1)</a>:

<li><a href="https://man.openbsd.org/?query=sftp&sektion=1">sftp(1)</a>:

fix swapped args in upload_dir_internal() (bz#1797).

<li>Fix a longstanding problem where if you suspend

at the password/passphrase prompt the terminal mode is not restored.

<li>Fix a PKCS#11 crash on some smartcards by validating the length

returned for C_GetAttributValue (bz#1773).

<li><a href="http://man.openbsd.org/?query=sftp&sektion=1">sftp(1)</a>:

<li><a href="https://man.openbsd.org/?query=sftp&sektion=1">sftp(1)</a>:

fix ls in working directories that contain globbing

characters in their pathnames (bz#1655).

<li>Print warning for missing home directory when

ChrootDirectory=none. (bz#1564).

<li><a href="http://man.openbsd.org/?query=sftp&sektion=1">sftp(1)</a>:

<li><a href="https://man.openbsd.org/?query=sftp&sektion=1">sftp(1)</a>:

fix a memory leak in do_realpath() error path (bz#1771).

<li><a href="http://man.openbsd.org/?query=ssh-keygen&sektion=1">ssh-keygen(1)</a>:

<li><a href="https://man.openbsd.org/?query=ssh-keygen&sektion=1">ssh-keygen(1)</a>:

Standardise error messages when attempting to open

private key files to include "progname: filename: error reason" (bz#1783).

<li>Replace verbose and overflow-prone Linebuf code with

read_keyfile_line() (bz#1565).

<li>Include the user name on "subsystem request for ..." log messages.

and

<a href="http://man.openbsd.org/?query=sshd&sektion=8">sshd(8)</a>:

<a href="https://man.openbsd.org/?query=sshd&sektion=8">sshd(8)</a>:

remove hardcoded limit of 100 permitopen clauses and port forwards

per direction (bz#1327).

<li><a href="http://man.openbsd.org/?query=sshd&sektion=8">sshd(8)</a>:

<li><a href="https://man.openbsd.org/?query=sshd&sektion=8">sshd(8)</a>:

ignore stderr output from subsystems to avoid hangs if a subsystem

or shell initialisation writes to stderr (bz#1750).

<li>Skip the initial check for access with an empty password when

PermitEmptyPasswords=no (bz#1638).

<li><a href="http://man.openbsd.org/?query=sshd&sektion=8">sshd(8)</a>:

<li><a href="https://man.openbsd.org/?query=sshd&sektion=8">sshd(8)</a>:

fix logspam when key options (from="..." especially) deny

non-matching keys (bz#1765).

<li><a href="http://man.openbsd.org/?query=ssh-keygen&sektion=1">ssh-keygen(1)</a>:

<li><a href="https://man.openbsd.org/?query=ssh-keygen&sektion=1">ssh-keygen(1)</a>:

display a more helpful error message when $HOME is

inaccessible while trying to create .ssh directory (bz#1740).

<li><a href="http://man.openbsd.org/?query=ssh&sektion=1">ssh(1)</a>:

<li><a href="https://man.openbsd.org/?query=ssh&sektion=1">ssh(1)</a>:

fix hang when terminating a mux slave using ~ (bz#1758).

<li><a href="http://man.openbsd.org/?query=ssh-keygen&sektion=1">ssh-keygen(1)</a>:

<li><a href="https://man.openbsd.org/?query=ssh-keygen&sektion=1">ssh-keygen(1)</a>:

refuse to generate keys longer than

OPENSSL_[RD]SA_MAX_MODULUS_BITS (bz#1516).

<li>Suppress spurious tty warning when using -O and stdin is not a tty

Line 398

<li>Mandoc 1.10.5:

<ul>

<li>The <a href="http://man.openbsd.org/?query=mandoc&sektion=1">mandoc(1)</a>

<li>The <a href="https://man.openbsd.org/?query=mandoc&sektion=1">mandoc(1)</a>

utility is now used to build all manuals in the base system

and in Xenocara from

<a href="http://man.openbsd.org/?query=mdoc&sektion=7">mdoc(7)</a> and

<a href="https://man.openbsd.org/?query=mdoc&sektion=7">mdoc(7)</a> and

sources.

<li>New integrated roff preprocessor with minimal support for conditional

requests, nested roff requests, string definitions, roff registers,

also parsing and ignoring macro definitions.

<li>Improved support for manual pages generated by

<a href="http://man.openbsd.org/?query=pod2man&sektion=1">pod2man(1)</a>.

<a href="https://man.openbsd.org/?query=pod2man&sektion=1">pod2man(1)</a>.

<li>Many parser improvements, in particular

support for word keeps, synopsis mode in arbitrary sections,

graceful handling of badly nested blocks, and improved parsing

of column displays.

Line 564

To make a boot floppy under MS-DOS, use the "rawrite" utility located

at CD1:4.8/tools/rawrite.exe. To make the boot floppy under a Unix OS,

use the

utility. The following is an example usage of

<a href="http://man.openbsd.org/?query=dd&sektion=1">dd(1)</a>,

<a href="https://man.openbsd.org/?query=dd&sektion=1">dd(1)</a>,

where the device could be "floppy", "rfd0c", or

"rfd0a".

Line 849

OpenBSD ports system.

The ports/ directory represents a CVS (see the manpage for

cvs(1)</a> if

you aren't familiar with CVS) checkout of our ports. As with our complete

source tree, our ports tree is available via anoncvs. So, in