version 1.20, 2018/10/01 20:27:57 |
version 1.21, 2018/10/01 21:25:03 |
|
|
driver for hardware-accelerated cryptography on octeon. |
driver for hardware-accelerated cryptography on octeon. |
<li>Support for some HID-over-I<sup>2</sup>C touchscreen devices in |
<li>Support for some HID-over-I<sup>2</sup>C touchscreen devices in |
<a href="https://man.openbsd.org/imt.4">imt(4)</a>. |
<a href="https://man.openbsd.org/imt.4">imt(4)</a>. |
|
<li>PIE support for the m88k platform. |
</ul> |
</ul> |
|
|
<p> |
<p> |
|
|
<li>New "retguard" security mechanism on amd64 and arm64: |
<li>New "retguard" security mechanism on amd64 and arm64: |
use per-function random cookies to protect access to function |
use per-function random cookies to protect access to function |
return instructions, making them harder to use in ROP gadgets. |
return instructions, making them harder to use in ROP gadgets. |
|
<li>Simultaneous multithreading (SMT) is now disabled by default |
|
and can be enabled with the new <code>hw.smt</code> |
|
<a href="https://man.openbsd.org/sysctl.2">sysctl(2)</a> variable. |
|
<li>Audio recording is now disabled by default and can be enabled |
|
with the new <code>kern.audio.record</code> |
|
<a href="https://man.openbsd.org/sysctl.2">sysctl(2)</a> variable. |
</ul> |
</ul> |
<p> |
<p> |
|
|
|
|
<ul> |
<ul> |
<li>Fast prefix-sets |
<li>Fast prefix-sets |
<li>Support for BGP Origin Validation <a href="https://tools.ietf.org/html/rfc6811"> |
<li>Support for BGP Origin Validation <a href="https://tools.ietf.org/html/rfc6811"> |
RFC 6811</a> through the <pre>roa-set</pre> directive. |
RFC 6811</a> through the <code>roa-set</code> directive. |
<li>Some syntax cleanups; newlines are optional inside expansion |
<li>Some syntax cleanups; newlines are optional inside expansion |
lists (previously newlines needed to be escaped), but in neighbor, |
lists (previously newlines needed to be escaped), but in neighbor, |
group and rdomain blocks multiple statements have to be on new lines. |
group and rdomain blocks multiple statements have to be on new lines. |
|
|
<a href="https://man.openbsd.org/gid_from_group.3">gid_from_group(3)</a> |
<a href="https://man.openbsd.org/gid_from_group.3">gid_from_group(3)</a> |
were added to the C library and are now used in several programs, |
were added to the C library and are now used in several programs, |
to speed up repeated lookups. |
to speed up repeated lookups. |
|
<li>New semaphore implementation making |
|
<a href="https://man.openbsd.org/sem_post.3">sem_post(3)</a> |
|
async-safe. |
|
<li><a href="https://man.openbsd.org/pcap_set_immediate_mode.3" |
|
>pcap_set_immediate_mode(3)</a> was imported from mainline libpcap, |
|
allowing programs to process packets as soon as they arrive. |
<li><a href="https://man.openbsd.org/ksh.1">ksh(1)</a> now supports |
<li><a href="https://man.openbsd.org/ksh.1">ksh(1)</a> now supports |
64 bit integers on all architectures. |
64 bit integers on all architectures. |
<li>A bug in |
<li>A bug in |