=================================================================== RCS file: /cvsrepo/anoncvs/cvs/www/58.html,v retrieving revision 1.68 retrieving revision 1.69 diff -u -r1.68 -r1.69 --- www/58.html 2015/09/30 12:47:16 1.68 +++ www/58.html 2015/09/30 13:12:12 1.69 @@ -142,6 +142,8 @@
  • sudo in base has been replaced with doas(1), sudo is available as a package.
  • file(1) has been replaced with a new modern implementation, including sandbox and privilege separation.
  • pax(1) (and tar(1) and cpio(1)) now prevent archive extraction from escaping the current directory via symlinks; tar(1) without -P option now strips up through any ".." path components. +
  • Static PIE support for sparc. +
  • Alpha switched to secure PLT.
  • Improved kernel checks of ELF headers.
  • Stricter enforcement of W^X in the kernel address space on i386 when using processors with PAE support
  • Work started on a new process-containment facility called tame(2). @@ -170,8 +172,6 @@ ctags(1) provides.
  • Improvements in checking of numeric option values in many utilities.
  • Upgraded to binutils version 2.17 with additional fixes. -
  • Static PIE support for sparc. -
  • Alpha switched to secure PLT.
  • Improved correctness of poll(2) and poll(2) of O_RDONLY FIFO fds.
  • Restored reporting of closed sockets by netstat(1) and systat(1).
  • fdisk(8) now zeros correct GPT sector at end of disk.