=================================================================== RCS file: /cvsrepo/anoncvs/cvs/www/63.html,v retrieving revision 1.49 retrieving revision 1.50 diff -c -r1.49 -r1.50 *** www/63.html 2018/03/27 05:29:15 1.49 --- www/63.html 2018/03/27 05:37:50 1.50 *************** *** 197,206 ****
  • Enforce in pf(4) that all neighbor discovery packets have 255 in their IPv6 header hop limit field. !
  • Support for GRE over IPv6
  • New egre(4) driver for Ethernet over GRE tunnels. !
  • Support for the optional GRE Key header and GRE Key Entropy in gre(4) and egre(4).
  • New nvgre(4) --- 197,206 ----
  • Enforce in pf(4) that all neighbor discovery packets have 255 in their IPv6 header hop limit field. !
  • Support for GRE over IPv6.
  • New egre(4) driver for Ethernet over GRE tunnels. !
  • Support for the optional GRE key header and GRE key entropy in gre(4) and egre(4).
  • New nvgre(4) *************** *** 257,264 ****
  • Mitigation for Meltdown vulnerability for Intel brand amd64 CPUs.
  • OpenBSD/arm64 now uses kernel page table isolation to mitigate Spectre variant 3 (Meltdown) attacks. !
  • OpenBSD/armv7 and OpenBSD/arm64 now flush the Branch Target ! Cache (BTB) on processors that do speculative execution to mitigate Spectre variant 2 attacks.
  • pool_get(9) perturbs the order of items on newly allocated pages, making the kernel heap --- 257,264 ----
  • Mitigation for Meltdown vulnerability for Intel brand amd64 CPUs.
  • OpenBSD/arm64 now uses kernel page table isolation to mitigate Spectre variant 3 (Meltdown) attacks. !
  • OpenBSD/armv7 and OpenBSD/arm64 now flush the Branch Target Buffer ! (BTB) on processors that do speculative execution to mitigate Spectre variant 2 attacks.
  • pool_get(9) perturbs the order of items on newly allocated pages, making the kernel heap *************** *** 428,434 ****
  • OpenSMTPD 6.0.4

    --- 428,434 ----

  • OpenSMTPD 6.0.4

    *************** *** 455,461 **** allow for expiring keys.

  • ssh(1): Add a BindInterface option to allow binding the outgoing connection to an interface's address (basically a more usable ! BindAddress)
  • ssh(1): Expose device allocated for tun/tap forwarding via a new %T expansion for LocalCommand. This allows LocalCommand to be used to prepare the interface. --- 455,461 ---- allow for expiring keys.
  • ssh(1): Add a BindInterface option to allow binding the outgoing connection to an interface's address (basically a more usable ! BindAddress).
  • ssh(1): Expose device allocated for tun/tap forwarding via a new %T expansion for LocalCommand. This allows LocalCommand to be used to prepare the interface.