===================================================================
RCS file: /cvsrepo/anoncvs/cvs/www/60.html,v
retrieving revision 1.62
retrieving revision 1.63
diff -c -r1.62 -r1.63
*** www/60.html	2016/08/16 10:01:37	1.62
--- www/60.html	2016/08/16 18:39:13	1.63
***************
*** 24,30 ****
  Copyright 1997-2016, Theo de Raadt.<br>
  <font color="#e00000">ISBN 978-0-9881561-8-0</font>
  <br>
! 6.0 Songs: 
  <a href="lyrics.html#60a">"Another Smash of the Stack"</a>,
  <a href="lyrics.html#60b">"Black Hat"</a>,
  <a href="lyrics.html#60c">"Money"</a><br>
--- 24,30 ----
  Copyright 1997-2016, Theo de Raadt.<br>
  <font color="#e00000">ISBN 978-0-9881561-8-0</font>
  <br>
! 6.0 Songs:
  <a href="lyrics.html#60a">"Another Smash of the Stack"</a>,
  <a href="lyrics.html#60b">"Black Hat"</a>,
  <a href="lyrics.html#60c">"Money"</a><br>
***************
*** 267,275 ****
  	can now only be used by the kernel-provided signal trampoline,
  	with a cookie to detect attempts to reuse it.
      <li>To deter code reuse exploits, <a href="http://man.openbsd.org/rc.8">rc(8)</a>
!         re-links libc.so on startup, placing the objects in a random order. 
      <li>In the <a href="http://man.openbsd.org/getpwnam.3">getpwnam(3)</a>
!         family of functions, stop opening the shadow database by default. 
      <li>Allow <a href="http://man.openbsd.org/tcpdump.8">tcpdump(8)</a>
          <tt>-r</tt> to be started without root privileges.
      <li>Remove
--- 267,275 ----
  	can now only be used by the kernel-provided signal trampoline,
  	with a cookie to detect attempts to reuse it.
      <li>To deter code reuse exploits, <a href="http://man.openbsd.org/rc.8">rc(8)</a>
!         re-links libc.so on startup, placing the objects in a random order.
      <li>In the <a href="http://man.openbsd.org/getpwnam.3">getpwnam(3)</a>
!         family of functions, stop opening the shadow database by default.
      <li>Allow <a href="http://man.openbsd.org/tcpdump.8">tcpdump(8)</a>
          <tt>-r</tt> to be started without root privileges.
      <li>Remove
***************
*** 341,349 ****
      <li>Implement the <a href="http://man.openbsd.org/rcs.1">rcs(1)</a>
          <tt>-I</tt> (interactive) flag.
      <li>In <a href="http://man.openbsd.org/rcs.1">rcs(1)</a>,
!         implement Mdocdate keyword substitution. 
      <li>In <a href="http://man.openbsd.org/top.1">top(1)</a>,
!         allow to filter process arguments if they are being displayed. 
      <li>Added UTF-8 support to
          <a href="http://man.openbsd.org/fold.1">fold(1)</a> and
          <a href="http://man.openbsd.org/rev.1">rev(1)</a>.
--- 341,349 ----
      <li>Implement the <a href="http://man.openbsd.org/rcs.1">rcs(1)</a>
          <tt>-I</tt> (interactive) flag.
      <li>In <a href="http://man.openbsd.org/rcs.1">rcs(1)</a>,
!         implement Mdocdate keyword substitution.
      <li>In <a href="http://man.openbsd.org/top.1">top(1)</a>,
!         allow to filter process arguments if they are being displayed.
      <li>Added UTF-8 support to
          <a href="http://man.openbsd.org/fold.1">fold(1)</a> and
          <a href="http://man.openbsd.org/rev.1">rev(1)</a>.
***************
*** 441,469 ****
          <li>Fix a logic issue in the SMTP state machine that can lead to
              an invalid state and result in a crash.
          <li>Plug a file-pointer leak that can lead to resource exhaustion
!             and result in a crash. 
          <li>Use automatic DH parameters instead of fixed ones.
          <li>Disable DHE by default since it is computationally expensive
!             and a potential DoS vector. 
          </ul>
        <li>The following improvements were brought in this release:
          <ul>
          <li>Add the <tt>-r</tt> option to the
              <a href="http://man.openbsd.org/smtpd">smtpd(8)</a>
              enqueuer for compatibility with mailx.
-         <li>Explicitly enclose SMTP transactions between BEGIN and
-             COMMIT/ROLLBACK filter events. 
          <li>Add missing date or message-id when listening on the submit
!             port. 
          <li>Fix "smtpctl show queue" reporting "invalid" envelope state.
          <li>Rework the format of the "Received" header so that the TLS
              part does not violate the RFC.
          <li>Increase the number of connections a local address is
              allowed to establish, and decrease the delay between
              transactions in the same session.
!         <li>Properly reset the transaction when a filter rejects a
!             message.
!         <li>Deal with LMTP servers returning continuation lines. 
          </ul>
      </ul>
  <p>
--- 441,470 ----
          <li>Fix a logic issue in the SMTP state machine that can lead to
              an invalid state and result in a crash.
          <li>Plug a file-pointer leak that can lead to resource exhaustion
!             and result in a crash.
          <li>Use automatic DH parameters instead of fixed ones.
          <li>Disable DHE by default since it is computationally expensive
!             and a potential DoS vector.
          </ul>
        <li>The following improvements were brought in this release:
          <ul>
          <li>Add the <tt>-r</tt> option to the
              <a href="http://man.openbsd.org/smtpd">smtpd(8)</a>
              enqueuer for compatibility with mailx.
          <li>Add missing date or message-id when listening on the submit
!             port.
          <li>Fix "smtpctl show queue" reporting "invalid" envelope state.
          <li>Rework the format of the "Received" header so that the TLS
              part does not violate the RFC.
          <li>Increase the number of connections a local address is
              allowed to establish, and decrease the delay between
              transactions in the same session.
!         <li>Fix LMTP delivery to servers returning continuation lines.
!         <li>Further improve the still experimental filer API and fix
!             various related issues.
!         <li>Start improving and unifying the format of log messages.
!         <li>Fix several documentation discrepancies and typos in the man
!             pages.
          </ul>
      </ul>
  <p>
***************
*** 538,544 ****
        <li>In <a href="http://man.openbsd.org/scp.1">scp(1)</a>
            and <a href="http://man.openbsd.org/sftp.1">sftp(1)</a>,
            prevent screwing up terminal settings by escaping bytes
!           not forming ASCII or UTF-8 characters. 
        <li><a href="http://man.openbsd.org/ssh.1">ssh(1)</a>,
            <a href="http://man.openbsd.org/sshd.8">sshd(8)</a>:
            Reduce the syslog level of some relatively common protocol events
--- 539,545 ----
        <li>In <a href="http://man.openbsd.org/scp.1">scp(1)</a>
            and <a href="http://man.openbsd.org/sftp.1">sftp(1)</a>,
            prevent screwing up terminal settings by escaping bytes
!           not forming ASCII or UTF-8 characters.
        <li><a href="http://man.openbsd.org/ssh.1">ssh(1)</a>,
            <a href="http://man.openbsd.org/sshd.8">sshd(8)</a>:
            Reduce the syslog level of some relatively common protocol events
***************
*** 644,650 ****
        <li>Deprecated internal use of
            <a href="http://man.openbsd.org/EVP_EncryptInit">EVP_[Cipher|Encrypt|Decrypt]_Final</a>.
        <li>Fixed a problem that prevents the DSA signing algorithm from running
!           in constant time even if the flag <tt>BN_FLG_CONSTTIME</tt> is set. 
        <li>Fixed several issues in the OCSP code that could result in the
            incorrect generation and parsing of OCSP requests. This remediates
            a lack of error checking on time parsing in these functions, and
--- 645,651 ----
        <li>Deprecated internal use of
            <a href="http://man.openbsd.org/EVP_EncryptInit">EVP_[Cipher|Encrypt|Decrypt]_Final</a>.
        <li>Fixed a problem that prevents the DSA signing algorithm from running
!           in constant time even if the flag <tt>BN_FLG_CONSTTIME</tt> is set.
        <li>Fixed several issues in the OCSP code that could result in the
            incorrect generation and parsing of OCSP requests. This remediates
            a lack of error checking on time parsing in these functions, and