===================================================================
RCS file: /cvsrepo/anoncvs/cvs/www/74.html,v
retrieving revision 1.10
retrieving revision 1.11
diff -c -r1.10 -r1.11
*** www/74.html 2023/10/07 12:55:08 1.10
--- www/74.html 2023/10/10 21:33:54 1.11
***************
*** 78,89 ****
New/extended platforms:
Various kernel improvements:
SMP Improvements
--- 78,94 ----
New/extended platforms:
! - On arm64, implement branch target protection using the branch
! target identification feature introduced in Armv8.5. This provides
! "head-CFI" to complement the "tail-CFI" provided by retguard, and is
! supported on Apple M2.
Various kernel improvements:
! - On amd64, identify IBT capability in cpu(4) dmesg lines.
!
- On arm64, show BT and SBSS features in dmesg(8).
!
- Map device tree read/write to unbreak root on softraid(4).
SMP Improvements
***************
*** 98,129 ****
VMM/VMD improvements
Various new userland features:
Various bugfixes and tweaks in userland:
Improved hardware support and driver bugfixes, including:
New or improved network hardware support:
Added or improved wireless network drivers:
IEEE 802.11 wireless stack improvements and bugfixes:
--- 103,169 ----
VMM/VMD improvements
! - Avoid use of uninitialised memory in vmd(8).
Various new userland features:
! - Update zoneinfo to tzdata2023c.
Various bugfixes and tweaks in userland:
! - Refactoring and documenting of fdisk(8) code, to make the code
! easier to maintain.
!
- In clang, allow out-of-class defaulting of comparison operators,
! by ways of backporting an upstream commit.
!
- Improve the code of aucat(1) and fix spelling mistakes.
!
- Improve the code quality of find(1).
!
- Many changes in mg(1):
!
! - Improve the readability of the code of mg(1).
!
- In mg(1), fall back to /bin/sh if $SHELL is undefined.
!
- Fix parsing of tag files with duplicate entries in mg (1).
! Instead of erroring out ignore duplicates. Fixes using
! /var/db/libc.tags again.
!
- In mg(1), change tagvisit (aka visit-tag-table) to immediately
! load the tag file, and drop the lazy mechanics.
!
- Remove useless global variable in mg(1).
!
- Plug memory leak in mg(1).
!
- Replace strncpy() with strlcpy() in mg(1).
!
- Skip checking permissions of conffile with access(2).
!
! - On aarch64 architectures improve how BTI control flow integretry
! enforcement is implemented in the executable entry point and enable
! support for BTI control flow integrety checks in libc assembly
! functions.
!
Improved hardware support and driver bugfixes, including:
! - Add support for the RK3568 32k RTC clock in rkclock(4)
!
- In dwpcie(4) attach Baikal-M PCIe.
!
- In openfirmware, implement regulator notifiers which get called
! when the voltage/current for a regulator is changed or when the
! regulator gets initialized when it attaches for the first time. The
! latter makes it possible to register a notifier for a regulator that
! hasn't attached yet.
!
- Add rkiovd(4), a driver for the IO voltage domains on Rockchip SoCs.
!
New or improved network hardware support:
! - Fix dwqe(4) on several boards that use rgephy(4) by configuring
! the RGMII interface before taking the PHY out of reset.
!
- Document that Intel i226 adapters are supported by igc(4).
!
- Add ngbe(4), a driver for WangXun WX1860 PCI Express 10/100/1Gb Ethernet devices.
Added or improved wireless network drivers:
! - Improve how Quectel LTE&5G devices attach to umb(4).
IEEE 802.11 wireless stack improvements and bugfixes:
***************
*** 133,144 ****
Installer, upgrade and bootloader improvements:
Security improvements:
Changes in the network stack:
--- 173,195 ----
Installer, upgrade and bootloader improvements:
! - In the arm64 ramdisk, simplify apple firmware copying to make it
! easier to add new firmware.
!
- On armv7 and arm64, silence informational messages from dd(1)
! when zeroing a disk's first 1MB. Use character not block devices with
! dd(1) like on other architectures.
!
- Refactor the code of md_installboot() on armv7 and arm64 to be
! more in line with other architectures.
!
- Improve the dialogue of the installer without affecting
! autoinstall(8) files.
!
- Enable ufshci(4) on arm64 RAMDISKs.
!
Security improvements:
! - Change malloc(3) chunk sizes to be fine grained. [needs better explaination]
!
- In malloc(3), check all chunks in the delayed free list for write-after-free.
Changes in the network stack:
***************
*** 150,156 ****
- IPsec support was improved:
- In bgpd(8),
--- 201,213 ----
- IPsec support was improved:
! - In isakmpd(8), avoid a double free in ec_init() when using the OpenSSL API.
!
- In iked(8), do not treat the return value of i2d_ECDSA_SIG() as
! lenght as it can be negative.
!
- Prepare isakmpd(8) for a libcrypto library that is lacking binary field
! support.
!
- In isakmpd(8), avoid a potential crash by addind a missing NULL check.
!
- In bgpd(8),
***************
*** 166,177 ****
- ...
! - ...
- tmux(1) improvements and bug fixes:
- LibreSSL version 3.8.2
--- 223,236 ----
- ...
! - Make dig(1) use less deprecated LibreSSL API.
!
- In ypldap(8), reduce memory usage when updating larger directories.
tmux(1) improvements and bug fixes:
! - For passthrough, don't write to clients attached to different sessions.
!
- Add a format to show if there are unseen changes while in a mode.
LibreSSL version 3.8.2