===================================================================
RCS file: /cvsrepo/anoncvs/cvs/www/60.html,v
retrieving revision 1.18
retrieving revision 1.19
diff -c -r1.18 -r1.19
*** www/60.html	2016/07/22 20:24:02	1.18
--- www/60.html	2016/07/22 20:30:32	1.19
***************
*** 68,75 ****
--- 68,77 ----
      <li>...
      </ul>
  <p>
+ 
  <li>Improved hardware support, including:
      <ul>
+     <li>The iwm driver supports more models, notably the 3165 and 8260.
      <li>...
      </ul>
  <p>
***************
*** 126,132 ****
      <li><a href="http://man.openbsd.org/sigreturn.2">sigreturn(2)</a>
  	can now only be used by the kernel-provided signal trampoline,
  	with a cookie to detect attempts to reuse it.
!     <li>In <a href="http://man.openbsd.org/rc.8">rc(8)</a>,
          re-link libc.so on startup, placing the objects in a random order. 
      <li>In the <a href="http://man.openbsd.org/getpwnam.3">getpwnam(3)</a>
          family of functions, stop opening the shadow database by default. 
--- 128,134 ----
      <li><a href="http://man.openbsd.org/sigreturn.2">sigreturn(2)</a>
  	can now only be used by the kernel-provided signal trampoline,
  	with a cookie to detect attempts to reuse it.
!     <li>To deter ROP exploits, in <a href="http://man.openbsd.org/rc.8">rc(8)</a>,
          re-link libc.so on startup, placing the objects in a random order. 
      <li>In the <a href="http://man.openbsd.org/getpwnam.3">getpwnam(3)</a>
          family of functions, stop opening the shadow database by default. 
***************
*** 136,144 ****
          <a href="http://man.openbsd.org/OpenBSD-5.9/systrace">systrace</a>.
      <li>Remove Linux emulation support.
      <li>Remove support for the usermount option.
!     <li>The TCP SYN cache does reseed its random hash function from
          time to time.
!         This prevents that an attacker can figure out the distribution
          of the hash function with a timing attack.
      <li>To work against SYN flooding attacks the administrator can
          change the size of the hash array now.
--- 138,146 ----
          <a href="http://man.openbsd.org/OpenBSD-5.9/systrace">systrace</a>.
      <li>Remove Linux emulation support.
      <li>Remove support for the usermount option.
!     <li>The TCP SYN cache reseeds its random hash function from
          time to time.
!         This prevents an attacker from calculating the distribution
          of the hash function with a timing attack.
      <li>To work against SYN flooding attacks the administrator can
          change the size of the hash array now.