version 1.1336, 2014/04/30 02:07:27 |
version 1.1337, 2014/05/05 00:27:09 |
|
|
<p> |
<p> |
|
|
<ul> |
<ul> |
|
<!-- 2014/04/27 --> |
|
<li>Improved error handling when using <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dbopen&manpath=OpenBSD%20Current&sektion=3&format=html">dbopen(3)</a> in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mandoc&manpath=OpenBSD%20Current&sektion=1&format=html">mandoc(1)</a>. |
|
<li>Fixed library search order in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=libtool&manpath=OpenBSD%20Current&sektion=1&format=html">libtool(1)</a>. |
|
<li>Updated to xproto 7.0.26. |
|
<li>On i386, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=installboot&manpath=OpenBSD%20Current&sektion=8&format=html">installboot(8)</a> no longer overwrites disklabel and nearby blocks on 4k-sector disk drives. |
|
<li>Stopped <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bluetooth&manpath=OpenBSD%20Current&sektion=4&format=html">bluetooth(4)</a> HID device grabbing the console. |
|
<li>Re-added "_ppp" user and "_ppp" group, to be solely used by <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=npppd&manpath=OpenBSD%20Current&sektion=8&format=html">npppd(8)</a> going forward. |
|
<!-- 2014/04/26 --> |
|
<li>Stopped <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&manpath=OpenBSD%20Current&sektion=8&format=html">ssl(8)</a> using random stack memory as addresses of strings. |
|
<li>Removed support for building <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=openssl&manpath=OpenBSD%20Current&sektion=1&format=html">openssl(1)</a> on 16-bit Windows. |
|
<!-- 2014/04/25 --> |
|
<li>Filter excess data from autoinstall output, to avoid filling the ramdisk. |
|
<li>Made <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=more&manpath=OpenBSD%20Current&sektion=1&format=html">more(1)</a> POSIX compliant with respect to the -e option. |
|
<li>Merged <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=less&manpath=OpenBSD%20Current&sektion=1&format=html">less(1)</a> version 458, including local changes. |
|
<li>Reduced the verbosity of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=makewhatis&manpath=OpenBSD%20Current&sektion=8&format=html">makewhatis(8)</a> -t. |
|
<li>Do not re-probe <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pms&manpath=OpenBSD%20Current&sektion=4&format=html">pms(4)</a> unnecessarily. Fixes 12 seconds <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=Xorg&manpath=OpenBSD%20Current&sektion=1&format=html">Xorg(1)</a> delay on some laptops. |
|
<li>Stopped <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=iked&manpath=OpenBSD%20Current&sektion=8&format=html">iked(8)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mpii&manpath=OpenBSD%20Current&sektion=4&format=html">mpii(4)</a> accessing pointers prior to a null check. |
|
<li>Allow <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=snmpd.conf&manpath=OpenBSD%20Current&sektion=5&format=html">snmpd.conf(5)</a> to set user-defined actions on receipt of snmp traps. |
|
<!-- 2014/04/24 --> |
|
<li>Removed <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=kinit&manpath=OpenBSD%20Current&sektion=1&format=html">kinit(1)</a>. |
|
<li>Fixed <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sudo&manpath=OpenBSD%20Current&sektion=8&format=html">sudo(8)</a> when checking command line environment variables against the blacklist (CVE 2014-0106). |
|
<li>Fixed copied text in the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=snmpd&manpath=OpenBSD%20Current&sektion=8&format=html">snmpd(8)</a> error string. |
|
<!-- 2014/04/23 --> |
|
<li>Stopped <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&manpath=OpenBSD%20Current&sektion=8&format=html">ssl(8)</a> do_ssl3_write() being called recursively; don't release buffer meant for use. |
|
<li>Audited <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=malloc&manpath=OpenBSD%20Current&sektion=3&format=html">malloc(3)</a>/<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=calloc&manpath=OpenBSD%20Current&sektion=3&format=html">calloc(3)</a>/<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=realloc&manpath=OpenBSD%20Current&sektion=3&format=html">realloc(3)</a> usage in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mandoc&manpath=OpenBSD%20Current&sektion=1&format=html">mandoc(1)</a> to be safe from overflows. |
|
<li>Fixes in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&manpath=OpenBSD%20Current&sektion=8&format=html">ssl(8)</a> kssl.c to prevent double frees and removed a use-after-free. |
|
<li>Fixed leak in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&manpath=OpenBSD%20Current&sektion=8&format=html">ssl(8)</a> BIO_accept which could have caused the caller to crash. |
|
<li>Audited <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=strlcpy&manpath=OpenBSD%20Current&sektion=3&format=html">strlcpy(3)</a>/<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=strlcat&manpath=OpenBSD%20Current&sektion=3&format=html">strlcat(3)</a> usage in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mandoc&manpath=OpenBSD%20Current&sektion=1&format=html">mandoc(1)</a>. |
|
<li>Removed "Z" option from <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=malloc.conf&manpath=OpenBSD%20Current&sektion=5&format=html">malloc.conf(5)</a>; by default always junk small chunks now. |
|
<li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=unbound&manpath=OpenBSD%20Current&sektion=8&format=html">unbound(8)</a>, use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=arc4random&manpath=OpenBSD%20Current&sektion=9&format=html">arc4random(9)</a> as PRNG backend, instead of the libcrypto RAND. |
|
<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=disklabel&manpath=OpenBSD%20Current&sektion=8&format=html">disklabel(8)</a> now fills all required fields after clearing. Avoids consistency check failures. |
|
<!-- 2014/04/22 --> |
|
<li>Improved <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=malloc&manpath=OpenBSD%20Current&sektion=3&format=html">malloc(3)</a> hash functions that compute the same on big-endian and little-endian archs. |
|
<li>Removed OPENSSL_indirect_call() from <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&manpath=OpenBSD%20Current&sektion=8&format=html">ssl(8)</a> for reduced attack surface. |
|
<li>Fixed a missing <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=splbio&manpath=OpenBSD%20Current&sektion=9&format=html">splbio(9)</a> in sys/ufs/ffs/ffs_softdep.c which caused crashes. |
|
<li>Remove useless RX checksum offloading support from <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=gem&manpath=OpenBSD%20Current&sektion=4&format=html">gem(4)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=hme&manpath=OpenBSD%20Current&sektion=4&format=html">hme(4)</a>. |
|
<li>Removed Apache from base (replaced by <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=nginx&manpath=OpenBSD%20Current&sektion=8&format=html">nginx(8)</a>). |
|
<li>On <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bge&manpath=OpenBSD%20Current&sektion=4&format=html">bge(4)</a> when VLAN_HWTAGGING is disabled, stopped tagging the packet twice. |
|
<li>Prepend ether_vlan_header rather than regular ethernet header for more efficient vlan tagging. |
|
<li>Kerberos disabled and removed from base, possibly to be moved to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ports&manpath=OpenBSD%20Current&sektion=7&format=html">ports(7)</a> later. |
|
<li>Support the CA key for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&manpath=OpenBSD%20Current&sektion=8&format=html">ssl(8)</a> inspection in the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=relayd&manpath=OpenBSD%20Current&sektion=8&format=html">relayd(8)</a> CA process. |
|
<!-- 2014/04/21 --> |
|
<li>Avoid a loop during autoinstall when the path in the responsefile does not exist. |
|
<li>Made <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=iscsictl&manpath=OpenBSD%20Current&sektion=8&format=html">iscsictl(8)</a> print bytes read and written in human-readable form. |
|
<li>Allow the installer to configure dhcp for an interface without an active network connection. |
|
<li>Bind <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=iscsid&manpath=OpenBSD%20Current&sektion=8&format=html">iscsid(8)</a> to localAddr if it is specified. |
|
<li>Print the target and initiator name in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=iscsictl&manpath=OpenBSD%20Current&sektion=8&format=html">iscsictl(8)</a> show command. |
|
<li>Verify permissions are correct on the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&manpath=OpenBSD%20Current&sektion=1&format=html">ssh(1)</a> id_ed25519 file. |
|
<li>Fixed msdosfs to cope with 64-bit time_t. Set unrepresentable dates to 1/1/1980. |
|
<li>Made <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhclient&manpath=OpenBSD%20Current&sektion=8&format=html">dhclient(8)</a> delete discarded offered leases from the correct TAILQ. Avoids infinite loop. |
|
<li>Implemented <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sftp&manpath=OpenBSD%20Current&sektion=1&format=html">sftp(1)</a> upload resume support. |
|
<li>Reverted r1.101 of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=traceroute&manpath=OpenBSD%20Current&sektion=8&format=html">traceroute(8)</a>, which broke source port selection. |
|
<li>Added <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mallocarray&manpath=OpenBSD%20Current&sektion=3&format=html">mallocarray(3)</a> function (like <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=calloc&manpath=OpenBSD%20Current&sektion=3&format=html">calloc(3)</a> but without the cleared-memory guarantee). |
|
<li>Backed out parts of sys/nfs/nfs_serv.c r1.47, which computed wrong block sizes. |
|
<li>Added <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pkg_add&manpath=OpenBSD%20Current&sektion=1&format=html">pkg_add(1)</a> support for reading/writing long paths and linkpaths as extended headers. |
|
<li>Allow <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=iscsid&manpath=OpenBSD%20Current&sektion=8&format=html">iscsid(8)</a> to send data immediately for write commands, for 20% performance boost. |
|
<li>Stopped <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=disklabel&manpath=OpenBSD%20Current&sektion=8&format=html">disklabel(8)</a> leaking mountpoint info. Fixes mysterious crashes. |
<!-- 2014/04/20 --> |
<!-- 2014/04/20 --> |
<li><font color="#e00000">5.5 RELIABILITY FIX: Disable the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&manpath=OpenBSD%20Current&sektion=1&format=html">ssh(1)</a> curve25519-sha256@libssh.org KEX method when the other party's connection will fail.</font> |
<li><font color="#e00000">5.5 RELIABILITY FIX: Disable the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&manpath=OpenBSD%20Current&sektion=1&format=html">ssh(1)</a> curve25519-sha256@libssh.org KEX method when the other party's connection will fail.</font> |
<li>Prevent <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=lpd&manpath=OpenBSD%20Current&sektion=8&format=html">lpd(8)</a> from looking into <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=hosts.equiv&manpath=OpenBSD%20Current&sektion=5&format=html">hosts.equiv(5)</a>. Access control is now done only using hosts.lpd. |
<li>Prevent <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=lpd&manpath=OpenBSD%20Current&sektion=8&format=html">lpd(8)</a> from looking into <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=hosts.equiv&manpath=OpenBSD%20Current&sektion=5&format=html">hosts.equiv(5)</a>. Access control is now done only using hosts.lpd. |
|
|
<li>Allow <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=slowcgi&manpath=OpenBSD%20Current&sektion=8&format=html">slowcgi(8)</a> QUERY_STRING to be longer than 127 bytes. |
<li>Allow <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=slowcgi&manpath=OpenBSD%20Current&sektion=8&format=html">slowcgi(8)</a> QUERY_STRING to be longer than 127 bytes. |
<li>Update libxcb to version 1.10. |
<li>Update libxcb to version 1.10. |
<li>Made OPENSSL_NO_HEARTBLEED the default and only option in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&manpath=OpenBSD%20Current&sektion=8&format=html">ssl(8)</a> code. |
<li>Made OPENSSL_NO_HEARTBLEED the default and only option in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&manpath=OpenBSD%20Current&sektion=8&format=html">ssl(8)</a> code. |
<li>Adapted <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=snmpctl&manpath=OpenBSD%20Current&sektion=8&format=html">snmpctl(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=relayd&manpath=OpenBSD%20Current&sektion=8&format=html">relayd(8)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=snmpd&manpath=OpenBSD%20Current&sektion=8&format=html">snmpd(8)</a> to use AgentX protocol to send traps. |
<li>Adapted <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=snmpctl&manpath=OpenBSD%20Current&sektion=8&format=html">snmpctl(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=relayd&manpath=OpenBSD%20Current&sektion=8&format=html">relayd(8)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=snmpd&manpath=OpenBSD%20Current&ssektion=8&format=html">snmpd(8)</a> to use AgentX protocol to send traps. |
<!-- 2014/04/13 --> |
<!-- 2014/04/13 --> |
<li>Confirm passwords when <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=signify&manpath=OpenBSD%20Current&sektion=1&format=html">signify(1)</a> is generating keys. |
<li>Confirm passwords when <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=signify&manpath=OpenBSD%20Current&sektion=1&format=html">signify(1)</a> is generating keys. |
<li>Fixed SQL_STEP failures for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=man&manpath=OpenBSD%20Current&sektion=7&format=html">man(7)</a> pages lacking descriptions. |
<li>Fixed SQL_STEP failures for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=man&manpath=OpenBSD%20Current&sektion=7&format=html">man(7)</a> pages lacking descriptions. |
|
|
|
|
</body> |
</body> |
</html> |
</html> |
|
|
|
|