Return to 64.html CVS log | Up to [local] / www |
version 1.59, 2018/10/15 00:41:55 | version 1.60, 2018/10/15 03:11:04 | ||
---|---|---|---|
|
|
||
now supports more modern firmwares found on SPARC T2+ and T3 machines in | now supports more modern firmwares found on SPARC T2+ and T3 machines in | ||
particular such as T1000, T5120 and T5240. | particular such as T1000, T5120 and T5240. | ||
NVRAM variables can now be set per logical domain. | NVRAM variables can now be set per logical domain. | ||
<li><a href="https://man.openbsd.org/com.4">com(4)</a> | |||
better supports Synopsys Designware UARTs. | |||
<li>New <a href="https://man.openbsd.org/islrtc.4">islrtc</a> | |||
driver for Intersil ISL1208 Real Time Clock. | |||
<li>Support for the Huawei k3772 in | |||
<a href="https://man.openbsd.org/umsm.4">umsm</a>. | |||
</ul> | </ul> | ||
<p> | <p> | ||
|
|
||
<li>The Retpoline mitigation against Spectre Variant 2 has been | <li>The Retpoline mitigation against Spectre Variant 2 has been | ||
enabled in <a href="https://man.openbsd.org/clang.1">clang(1)</a> | enabled in <a href="https://man.openbsd.org/clang.1">clang(1)</a> | ||
and in assembly files on amd64. | and in assembly files on amd64. | ||
<li>Meltdown mitigation was added to i386. | |||
<li>Simultaneous multithreading (SMT) is now disabled by default | <li>Simultaneous multithreading (SMT) is now disabled by default | ||
and can be enabled with the new <code>hw.smt</code> | and can be enabled with the new <code>hw.smt</code> | ||
<a href="https://man.openbsd.org/sysctl.2">sysctl(2)</a> variable. | <a href="https://man.openbsd.org/sysctl.2">sysctl(2)</a> variable. | ||
<li>Audio recording is now disabled by default and can be enabled | <li>Audio recording is now disabled by default and can be enabled | ||
with the new <code>kern.audio.record</code> | with the new <code>kern.audio.record</code> | ||
<a href="https://man.openbsd.org/sysctl.2">sysctl(2)</a> variable. | <a href="https://man.openbsd.org/sysctl.2">sysctl(2)</a> variable. | ||
<li><a href="https://man.openbsd.org/sshd.8">sshd</a> includes | |||
improved defence against user enumeration attacks. | |||
</ul> | </ul> | ||
<p> | <p> | ||
|
|
||
denial of service attacks. | denial of service attacks. | ||
<li>New <a href="https://man.openbsd.org/ldap.1">ldap(1)</a> | <li>New <a href="https://man.openbsd.org/ldap.1">ldap(1)</a> | ||
tool implementing a simple ldap search client. | tool implementing a simple ldap search client. | ||
<li>A bug in <a href="https://man.openbsd.org/init.8">init(8)</a> | |||
that caused hangs on i386 under VMware has been fixed. | |||
<li>TFTP boot support was added for U-Boot based arm64 and armv7 platforms | |||
via EFI Simple Network protocol. | |||
<li>Support was added for the EFI Random Number Generator Protocol | |||
to insert additional entropy into the kernel at boot. | |||
<li>Support for RFC 3430 (TCP connections) was added to | |||
<a href="https://man.openbsd.org/snmpd.8">snmpd</a>. | |||
</ul> | </ul> | ||
<p> | <p> | ||
|
|
||
<p> | <p> | ||
<li>LibreSSL 2.x.x | <li>LibreSSL 2.8.2 | ||
<ul> | <ul> | ||
<li> | <li>X509 verification was made more strict so | ||
<a href="https://man.openbsd.org/X509_VERIFY_PARAM_set_flags.3">X509_VERIFY_PARAM</a> | |||
host, ip or email failure will cause future | |||
<a href="https://man.openbsd.org/X509_verify_cert.3">X509_verify_cert</a> | |||
calls to fail. | |||
</ul> | </ul> | ||
<p> | <p> | ||