www/60.html - diff

Return to 60.html CVS log

Up to [local] / www

Diff for /www/60.html between version 1.62 and 1.63

version 1.62, 2016/08/16 10:01:37

version 1.63, 2016/08/16 18:39:13

Line 24

ISBN 978-0-9881561-8-0

6.0 Songs:

<a href="lyrics.html#60a">"Another Smash of the Stack"</a>,

<a href="lyrics.html#60b">"Black Hat"</a>,

<a href="lyrics.html#60c">"Money"</a>

Line 267

can now only be used by the kernel-provided signal trampoline,

with a cookie to detect attempts to reuse it.

<li>To deter code reuse exploits, <a href="http://man.openbsd.org/rc.8">rc(8)</a>

re-links libc.so on startup, placing the objects in a random order.

<li>In the <a href="http://man.openbsd.org/getpwnam.3">getpwnam(3)</a>

family of functions, stop opening the shadow database by default.

<li>Allow <a href="http://man.openbsd.org/tcpdump.8">tcpdump(8)</a>

<tt>-r</tt> to be started without root privileges.

<li>Remove

Line 341

<li>Implement the <a href="http://man.openbsd.org/rcs.1">rcs(1)</a>

<tt>-I</tt> (interactive) flag.

<li>In <a href="http://man.openbsd.org/rcs.1">rcs(1)</a>,

implement Mdocdate keyword substitution.

<li>In <a href="http://man.openbsd.org/top.1">top(1)</a>,

allow to filter process arguments if they are being displayed.

<li>Added UTF-8 support to

<a href="http://man.openbsd.org/fold.1">fold(1)</a> and

<a href="http://man.openbsd.org/rev.1">rev(1)</a>.

Line 441

<li>Fix a logic issue in the SMTP state machine that can lead to

an invalid state and result in a crash.

<li>Plug a file-pointer leak that can lead to resource exhaustion

and result in a crash.

<li>Use automatic DH parameters instead of fixed ones.

<li>Disable DHE by default since it is computationally expensive

and a potential DoS vector.

</ul>

<li>The following improvements were brought in this release:

<ul>

<li>Add the <tt>-r</tt> option to the

<a href="http://man.openbsd.org/smtpd">smtpd(8)</a>

enqueuer for compatibility with mailx.

<li>Explicitly enclose SMTP transactions between BEGIN and

COMMIT/ROLLBACK filter events.

<li>Add missing date or message-id when listening on the submit

port.

<li>Fix "smtpctl show queue" reporting "invalid" envelope state.

<li>Rework the format of the "Received" header so that the TLS

part does not violate the RFC.

<li>Increase the number of connections a local address is

allowed to establish, and decrease the delay between

transactions in the same session.

<li>Properly reset the transaction when a filter rejects a

<li>Fix LMTP delivery to servers returning continuation lines.

message.

<li>Further improve the still experimental filer API and fix

<li>Deal with LMTP servers returning continuation lines.

various related issues.

<li>Start improving and unifying the format of log messages.

<li>Fix several documentation discrepancies and typos in the man

pages.

</ul>

Line 538

Line 539

and <a href="http://man.openbsd.org/sftp.1">sftp(1)</a>,

prevent screwing up terminal settings by escaping bytes

not forming ASCII or UTF-8 characters.

<li><a href="http://man.openbsd.org/ssh.1">ssh(1)</a>,

<a href="http://man.openbsd.org/sshd.8">sshd(8)</a>:

Reduce the syslog level of some relatively common protocol events

Line 644

Line 645

<li>Deprecated internal use of

<a href="http://man.openbsd.org/EVP_EncryptInit">EVP_[Cipher|Encrypt|Decrypt]_Final</a>.

<li>Fixed a problem that prevents the DSA signing algorithm from running

in constant time even if the flag <tt>BN_FLG_CONSTTIME</tt> is set.

<li>Fixed several issues in the OCSP code that could result in the

incorrect generation and parsing of OCSP requests. This remediates

a lack of error checking on time parsing in these functions, and