===================================================================
RCS file: /cvsrepo/anoncvs/cvs/www/62.html,v
retrieving revision 1.52
retrieving revision 1.53
diff -u -r1.52 -r1.53
--- www/62.html	2017/10/05 00:26:55	1.52
+++ www/62.html	2017/10/05 03:55:02	1.53
@@ -18,8 +18,8 @@
 <font color="#e00000">6.2</font>
 </h2>
 
-<a href="images/XXX.gif">
-<img align="left" width="227" height="343" hspace="24" src="images/XXX.gif"></a>
+<a href="images/MoBSD.gif">
+<img align="left" width="227" height="343" hspace="24" src="images/MoBSD.gif"></a>
 Released October 15, 2017<br>
 Copyright 1997-2017, Theo de Raadt.<br>
 <br>
@@ -61,16 +61,6 @@
 to 6.2.
 
 <ul>
-<li>New/extended platforms:
-    <ul>
-    <li>The <a href="https://www.openbsd.org/i386.html">i386</a> and
-        <a href="https://www.openbsd.org/amd64.html">amd64</a>
-        platforms have switched to using
-        <a href="https://man.openbsd.org/clang-local.1">clang(1)</a>
-        as the base system compiler.
-    <li>...
-    </ul>
-<p>
 
 <li>Improved hardware support, including:
     <ul>
@@ -109,7 +99,7 @@
     <li>The <a href="https://man.openbsd.org/puc.4">puc(4)</a> driver now supports ASIX AX99100 devices.
     <li>Xen platform support and the <a href="https://man.openbsd.org/xbf.4">xbf(4)</a> driver in particular have been substantially improved.
     <li><a href="https://man.openbsd.org/nvme.4">nvme(4)</a> driver now reports correct last sector address to scsi, allowing valid GPT to be created.
-    <li>...
+    <li>Repair ioapic(8) misconfigurations.
     </ul>
 
 <p>
@@ -234,11 +224,13 @@
 	<a href="https://man.openbsd.org/mail.1">mail(1)</a>
 	were rewritten to cope with the removal.
     <li>Trapsleds, a new mitigation that significantly reduces the amount of
-        nops in the instruction stream, converting them to traps, making it
-        harder to target potential gadgets.
+        nops in the instruction stream, replacing them with trap instructions
+        or jump-over-trap sequences, thereby requiring greater accuracy for
+        targetting potential gadgets.
     <li>Kernel Address Randomized Link (KARL), a new "link-kit" allows the .o
         files of the kernel to be relinked in a random order, creating a unique
-        kernel for each boot.
+        kernel for each boot.  /bsd is now non-readable to users, to try to
+        keep the secret.
     <li>Like with libc previously,
         <a href="https://man.openbsd.org/rc.8">rc(8)</a> re-links libcrypto on
         startup, placing the objects in a random order.
@@ -263,6 +255,17 @@
     <li>Tighter pledge for <a href="https://man.openbsd.org/at.1">at(1)</a>.
     <li>Fixed and simplified pledge logic for
       <a href="https://man.openbsd.org/nc.1">nc(1)</a>.
+    <li>More application of recallocarray(3) in userland, and tracked sizes
+        to free(9) in the kernel.
+    <li>Achieve higher levels of paranoia regarding structure packing, and
+        clear many kernel objects before passing to userland.
+    <li>Disable some optimizations in clang(1) due to incompatibility
+        with security.
+    <li>For instance, cope with clang(1)'s assumption that static or const
+        objects placed in unknown sections (such as .openbsd.randomdata)
+        are surely always 0, and therefore such memory accesses can be
+        optimized away..
+    <li>In kernel, randomly bias down the top-of-stack per kthread.
     </ul>
 <p>
 
@@ -345,6 +348,11 @@
 
 <li>Assorted improvements:
     <ul>
+    <li>The <a href="https://www.openbsd.org/i386.html">i386</a> and
+        <a href="https://www.openbsd.org/amd64.html">amd64</a>
+        platforms have switched to using
+        <a href="https://man.openbsd.org/clang-local.1">clang(1)</a>
+        as the base system compiler.
     <li>Improved UTF-8 line editing support for
 	<a href="https://man.openbsd.org/ksh.1">ksh(1)</a>
 	Emacs and Vi input mode.
@@ -419,6 +427,13 @@
         for debugging lock order issues in the kernel.
         The tool is not built in by default, and only amd64, hppa and i386
         are supported.
+    <li>Modernize some bizzare tty behaviours of getty(8).
+    <li>Some subtle changes to pledge(2) to satisfy requirements observed
+        in real life. 
+    <li>Prefer use of waitpid(2) rather than wait(3) where possible, to
+        avoid problems with pre-existing children.
+    <li>Rewrite swaths of machine-dependent system call stub code in ld.so(1)
+        in a more portable fashion.
     <li><a href="https://man.openbsd.org/pool_cache_init.9">Per-CPU
         caches</a> implemented in pools
     </ul>
@@ -512,11 +527,11 @@
     <td valign="top" width="25%">
     <ul>
       <li>alpha:      XXXX
-      <li>amd64:      XXXX
+      <li>amd64:      9728
       <li>arm:        XXXX
     </ul></td><td valign=top width="25%"><ul>
       <li>hppa:       XXXX
-      <li>i386:       XXXX
+      <li>i386:       9285
       <li>mips64:     XXXX
     </ul></td><td valign=top width="25%"><ul>
       <li>mips64el:   XXXX