version 1.83, 2018/10/16 23:57:01 |
version 1.84, 2018/10/17 02:59:53 |
|
|
<li>The Retpoline mitigation against Spectre Variant 2 has been |
<li>The Retpoline mitigation against Spectre Variant 2 has been |
enabled in <a href="https://man.openbsd.org/clang.1">clang(1)</a> |
enabled in <a href="https://man.openbsd.org/clang.1">clang(1)</a> |
and in assembly files on amd64 and i386. |
and in assembly files on amd64 and i386. |
|
<li>Added SpectreRSB mitigation on amd64. |
|
<li>Added Intel L1 Terminal Fault mitigation on amd64. |
|
<li>When available, PCIDs are used on amd64 to separate user |
|
and kernel thread TLB entries. |
<li>Meltdown mitigation was added to i386. |
<li>Meltdown mitigation was added to i386. |
<li>amd64 now uses eager-FPU switching to prevent FPU state |
<li>amd64 now uses eager-FPU switching to prevent FPU state |
information speculatively leaking across protection boundaries. |
information speculatively leaking across protection boundaries. |
|
|
<a href="https://man.openbsd.org/X509_verify_cert.3">X509_verify_cert</a> |
<a href="https://man.openbsd.org/X509_verify_cert.3">X509_verify_cert</a> |
calls to fail. |
calls to fail. |
<li>Support for single DES cipher suites has been removed. |
<li>Support for single DES cipher suites has been removed. |
|
<li>Support for RSASSA-PKCS1-v1_5 (RFC 8017) was added to |
|
<a href="https://man.openbsd.org/man3/RSA_sign.3">RSA_sign(3)</a> |
</ul> |
</ul> |
<p> |
<p> |
|
|