www/plus.html - diff

Return to plus.html CVS log

Up to [local] / www

Diff for /www/plus.html between version 1.1350 and 1.1351

version 1.1350, 2014/08/13 11:13:53

version 1.1351, 2014/08/20 08:48:56

Line 74

<p>

<ul>

<li>Fixed <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&manpath=OpenBSD%20Current&sektion=8&format=html">ssl(8)</a> to avoid allocating and then leaking a fresh fragment structure when a zero-length fragment is received (CVE-2014-3507).

<li>Fixed <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&manpath=OpenBSD%20Current&sektion=8&format=html">ssl(8)</a>: made sure the output buffer is always NUL terminated if buf_len was initially greater than zero; reject OIDs that are too long, too short, or not in proper base-127 (CVE-2014-3508).

<li>Corrected <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&manpath=OpenBSD%20Current&sektion=8&format=html">ssl(8)</a> test (reversed during merge of fix for CVE-2014-3509).

<li>Fixed <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&manpath=OpenBSD%20Current&sektion=8&format=html">ssl(8)</a> DTLS handshake message size checks (CVE-2014-3506).

<li>Stopped <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=httpd&manpath=OpenBSD%20Current&sektion=8&format=html">httpd(8)</a> trying to output FCGI_STDERR into error.log if there is no data.

<li>Try to parse "Status: $code" in the first response from the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=httpd&manpath=OpenBSD%20Current&sektion=8&format=html">httpd(8)</a> fcgi daemon, use that code as HTTP response code (fallback to 200). Possible fix for redirects in cvsweb.

<li>Fixed <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&manpath=OpenBSD%20Current&sektion=8&format=html">ssl(8)</a> TLS downgrade (CVE-2014-3511).

<li>Fixed DTLS anonymous EC(DH) denial of service in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&manpath=OpenBSD%20Current&sektion=8&format=html">ssl(8)</a> (CVE-2014-3510).

<li>Made <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=httpd&manpath=OpenBSD%20Current&sektion=8&format=html">httpd(8)</a> correctly report "internal server error" if the very first fcgi STDOUT record has length 0.

<li>Changed <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=httpd.conf&manpath=OpenBSD%20Current&sektion=5&format=html">httpd.conf(5)</a> grammar to remove a shift/reduce conflict. "listen on $ip port 443 ssl" turns into "listen on $ip ssl port 443".

<li>Added support for NOTE_EOF (for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=kqueue&manpath=OpenBSD%20Current&sektion=2&format=html">kqueue(2)</a> EVFILT_READ filters) on NFS files.

<li>Limit the body size in client requests (eg. POST data) to 1M by default in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=httpd.conf&manpath=OpenBSD%20Current&sektion=5&format=html">httpd.conf(5)</a>; added a configuration option to change the limit.

<li>Prevented <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=X&manpath=OpenBSD%20Current&sektion=7&format=html">X(7)</a> server crash on zaurus (and possibly other architectures) where there is no <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pci&manpath=OpenBSD%20Current&sektion=4&format=html">pci(4)</a>.

<li>Provided <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=httpd.conf&manpath=OpenBSD%20Current&sektion=5&format=html">httpd.conf(5)</a> configuration options that allow the SSL certificate, key and ciphers to be specified for each server.

<li>Clear the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=httpd&manpath=OpenBSD%20Current&sektion=8&format=html">httpd(8)</a> public key when it is no longer needed.

<li>Configured the default <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&manpath=OpenBSD%20Current&sektion=8&format=html">ssl(8)</a> ciphers as HIGH:!aNULL in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=httpd&manpath=OpenBSD%20Current&sektion=8&format=html">httpd(8)</a>.

<li>Restored previous <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&manpath=OpenBSD%20Current&sektion=8&format=html">ssl(8)</a> behaviour that allows a PEM block to be fed through the base64 decoder.

<li>Corrected some dma cleanup error paths in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=qe&manpath=OpenBSD%20Current&sektion=4&arch=vax&format=html">qe(4/vax)</a>.

<li>POST support added to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=httpd&manpath=OpenBSD%20Current&sektion=8&format=html">httpd(8)</a>.

<li>Added CONTENT_TYPE environment variables (without the HTTP_prefix) to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=httpd&manpath=OpenBSD%20Current&sektion=8&format=html">httpd(8)</a>, for use with cgi scripts .

<li>Fixed bug in server_write that broke <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=httpd&manpath=OpenBSD%20Current&sektion=8&format=html">httpd(8)</a> keep-alive support.

<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=httpd&manpath=OpenBSD%20Current&sektion=8&format=html">httpd(8)</a> now adjusts read/write watermarks according to the TCP send buffer. Fixes sending of large files.

<li>Load the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=httpd&manpath=OpenBSD%20Current&sektion=8&format=html">httpd(8)</a> <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&manpath=OpenBSD%20Current&sektion=8&format=html">ssl(8)</a> public/private keys in the parent process, then provide them to the privsep process via imsg. Allows keys to be moved out of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=chroot&manpath=OpenBSD%20Current&sektion=8&format=html">chroot(8)</a>.

<li>Added <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&manpath=OpenBSD%20Current&sektion=8&format=html">ssl(8)</a> support for loading the public/private key from memory, rather than directly from file.

<li>If a driver (eg <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=umct&manpath=OpenBSD%20Current&sektion=4&format=html">umct(4)</a>) opens an interrupt pipe without callback function, made sure the correct transfer is aborted.

<li>Added <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=httpd.conf&manpath=OpenBSD%20Current&sektion=5&format=html">httpd.conf(5)</a> options for max requests per connection and timeout limit.

<li>Brought back <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=httpd.conf&manpath=OpenBSD%20Current&sektion=5&format=html">httpd.conf(5)</a> TCP/IP configuration options.

<li>Limited the number of Keep-Alive requests per <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=httpd&manpath=OpenBSD%20Current&sektion=8&format=html">httpd(8)</a> connection to 100.

<li>Improved <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=httpd&manpath=OpenBSD%20Current&sektion=8&format=html">httpd(8)</a> logging to allow per-server/location log files; log files can now be owned by root.

<li>Added <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=httpd.conf&manpath=OpenBSD%20Current&sektion=5&format=html">httpd.conf(5)</a> option to specify the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=chroot&manpath=OpenBSD%20Current&sektion=8&format=html">chroot(8)</a> directory.

<li>Enabled <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=httpd&manpath=OpenBSD%20Current&sektion=8&format=html">httpd(8)</a> in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rc.d&manpath=OpenBSD%20Current&sektion=8&format=html">rc.d(8)</a> for wider testing.

<li>Temporarily moved default location of the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=httpd&manpath=OpenBSD%20Current&sektion=8&format=html">httpd(8)</a> SSL/TLS server key and certificate from /var/www/ to /var/www/conf/.

<li>Added "HTTPS = on" CGI variable to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=httpd&manpath=OpenBSD%20Current&sektion=8&format=html">httpd(8)</a>.

<li>Redirect <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=httpd&manpath=OpenBSD%20Current&sektion=8&format=html">httpd(8)</a> to https:// if SSL/TLS is enabled.

<li>Added TLS/SSL support to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=httpd&manpath=OpenBSD%20Current&sektion=8&format=html">httpd(8)</a>, based on the recent <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&manpath=OpenBSD%20Current&sektion=8&format=html">ssl(8)</a> commits.

<li>Changed <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=httpd.conf&manpath=OpenBSD%20Current&sektion=5&format=html">httpd.conf(5)</a> grammar from "log [style]" to "log style [style]".

<li>Provided an <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&manpath=OpenBSD%20Current&sektion=8&format=html">ssl(8)</a> function that returns a server connection context.

<li>Provided an <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&manpath=OpenBSD%20Current&sektion=8&format=html">ssl(8)</a> utility function for loading a private/public keypair.

<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=httpd&manpath=OpenBSD%20Current&sektion=8&format=html">httpd(8)</a> will now print error message if the log files cannot be opened.

<li>Improved ressl_{read,write} handling of non-blocking reads/writes in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&manpath=OpenBSD%20Current&sektion=8&format=html">ssl(8)</a>

<li>Added initial <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=httpd&manpath=OpenBSD%20Current&sektion=8&format=html">httpd(8)</a> support for log files in /var/www/logs/.

<li>Implemented <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=httpd&manpath=OpenBSD%20Current&sektion=8&format=html">httpd(8)</a> PATH_INFO and added DOCUMENT_ROOT.

<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=httpd&manpath=OpenBSD%20Current&sektion=8&format=html">httpd(8)</a> now also writes log messages (eg 404 Not Found) on error.

<li>Extended <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=httpd&manpath=OpenBSD%20Current&sektion=8&format=html">httpd(8)</a> to dynamically pass HTTP request headers as protocol-specific HTTP_* CGI meta-variables.

Line 126

Line 172

<li>Fixed <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&manpath=OpenBSD%20Current&sektion=8&format=html">ssl(8)</a> so RSA, DH, and ECDH temporary key callbacks are correctly passed the number of keybits for the key.

<li>Made <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pkg_add&manpath=OpenBSD%20Current&sektion=1&format=html">pkg_add(1)</a> log libraries in a proper way.

<li>Stopped <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mandoc&manpath=OpenBSD%20Current&sektion=1&format=html">mandoc(1)</a> assuming that a non-breaking space character has width 0.

<li>Stopped <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mandoc&manpath=OpenBSD%20Current&sektion=1&format=html">mandoc(1)</a> assuming in -Tutf8 output mode that a non-breaking space character has width 0.

<li>Fixed hangs during suspend when stopping secondary cpu.

<li>Reverted "adjust -C algorithm" from <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=apmd&manpath=OpenBSD%20Current&sektion=8&arch=amd64&format=html">apmd(8/amd64)</a>, which broke suspend/resume on some machines.

Line 143

Line 189

<li>Added "root" configuration option to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=httpd.conf&manpath=OpenBSD%20Current&sektion=5&format=html">httpd.conf(5)</a>.

<li>Sped up boot sequence by deferring scan of xt keyboard code set by <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pckbd&manpath=OpenBSD%20Current&sektion=4&format=html">pckbd(4)</a>.

<li>Made <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=man.cgi&manpath=OpenBSD%20Current&sektion=8&format=html">man.cgi(8)</a> sort result pages first by section number, then by name.

<li>Made <a href="http://www.openbsd.org/cgi-bin/man.cgi/mandoc/man8/man.cgi.8">man.cgi(8)</a> sort result pages first by section number, then by name.

<li>Provide <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=eeprom&manpath=OpenBSD%20Current&sektion=8&format=html">eeprom(8)</a> on the sparc installation media.

<li>Build machinery added to build <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=eeprom&manpath=OpenBSD%20Current&sektion=8&format=html">eeprom(8)</a> for the installation media on relevant arches.

<li>Unbreak <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=route&manpath=OpenBSD%20Current&sektion=4&format=html">route(4)</a> flush: skip local (RTF_LOCAL) routes when flushing.

<li>Reverted ssp-strong from <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=gcc&manpath=OpenBSD%20Current&sektion=1&format=html">gcc(1)</a> on arm, which exposed too many bugs in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ports&manpath=OpenBSD%20Current&sektion=7&format=html">ports(7)</a>.

<li>Plugged <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=httpd&manpath=OpenBSD%20Current&sektion=8&format=html">httpd(8)</a> memleak, to free the HTTP descriptor containing all the headers etc. of a connection.

<li>Provided a dropdown entry "All Architectures" to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=man.cgi&manpath=OpenBSD%20Current&sektion=8&format=html">man.cgi(8)</a> and made it the default.

<li>Provided a dropdown entry "All Architectures" to <a href="http://www.openbsd.org/cgi-bin/man.cgi/mandoc/man8/man.cgi.8">man.cgi(8)</a> and made it the default.

<li>When <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=httpd&manpath=OpenBSD%20Current&sektion=8&format=html">httpd(8)</a> is canonicalising the path, fail on truncation.

<li>Made <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=httpd&manpath=OpenBSD%20Current&sektion=8&format=html">httpd(8)</a> redirect with 301 if a directory name was requested without the trailing slash.

Line 164

Line 210

<li>Adjusted <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=apmd&manpath=OpenBSD%20Current&sektion=8&format=html">apmd(8)</a> -C algorithm to be more aggressive in scaling up cpu speed.

<li>Reverted recent "memory poison" commit until after release (triggering too many use-after-free bugs).

<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=man.cgi&manpath=OpenBSD%20Current&sektion=8&format=html">man.cgi(8)</a> security fixes, to prevent XSS attacks.

<li><a href="http://www.openbsd.org/cgi-bin/man.cgi/mandoc/man8/man.cgi.8">man.cgi(8)</a> security fixes, to prevent XSS attacks.

<li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&manpath=OpenBSD%20Current&sektion=8&format=html">ssl(8)</a> DES_random_key(), force the generated key to the correct parity; use it to generate DES keys in the EVP_CTRL_RAND_KEY method handlers.

<li>Enable <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=httpd&manpath=OpenBSD%20Current&sektion=8&format=html">httpd(8)</a> in the builds for more testing (not finished but can serve static files).

<li>Added initial <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=httpd.conf&manpath=OpenBSD%20Current&sektion=5&format=html">httpd.conf(5)</a> example for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=httpd&manpath=OpenBSD%20Current&sektion=8&format=html">httpd(8)</a>.

Line 175

Line 221

<li>Made <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mandoc&manpath=OpenBSD%20Current&sektion=1&format=html">mandoc(1)</a> preserve manpath and arch in .Xr links.

<li>Reverted <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tmux&manpath=OpenBSD%20Current&sektion=1&format=html">tmux(1)</a> up/down wheel emulation.

<li>Stopped the installer setting (obsolete) <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sysctl&manpath=OpenBSD%20Current&sektion=8&format=html">sysctl(8)</a> net.inet6.ip6.accept_rtadv and net.inet6.icmp6.rediraccept.

<li>Made <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=man.cgi&manpath=OpenBSD%20Current&sektion=8&format=html">man.cgi(8)</a> match RFC 2616, so the "Location: response-header" field is an absolute URI.

<li>Made <a href="http://www.openbsd.org/cgi-bin/man.cgi/mandoc/man8/man.cgi.8">man.cgi(8)</a> match RFC 2616, so the "Location: response-header" field is an absolute URI.

<li>Dropped explicit <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tmux&manpath=OpenBSD%20Current&sektion=1&format=html">tmux(1)</a> support for F13-F20; match the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xterm&manpath=OpenBSD%20Current&sektion=1&format=html">xterm(1)</a> <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=terminfo&manpath=OpenBSD%20Current&sektion=5&format=html">terminfo(5)</a> entry.

<li>Stopped kprintf in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=gcc&manpath=OpenBSD%20Current&sektion=1&format=html">gcc(1)</a> accepting the <number>$ flags (as <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=printf&manpath=OpenBSD%20Current&sektion=9&format=html">printf(9)</a> doesn't support them).

Line 198

Line 244

<li>Fixed <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=strtonum&manpath=OpenBSD%20Current&sektion=3&format=html">strtonum(3)</a> range, to unbreak "-pass fd:0" in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&manpath=OpenBSD%20Current&sektion=8&format=html">ssl(8)</a>.

<li>Cleaned up portable <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=arc4random&manpath=OpenBSD%20Current&sektion=3&format=html">arc4random(3)</a> fork detection code; let it take advantage of systems with healthy <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getentropy&manpath=OpenBSD%20Current&sektion=2&format=html">getentropy(2)</a>.

<li>Stopped <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=man.cgi&manpath=OpenBSD%20Current&sektion=8&format=html">man.cgi(8)</a> using the HTTP_HOST CGI variable (made HTTP redirect Location: relative). Reduces attack surface.

<li>Stopped <a href="http://www.openbsd.org/cgi-bin/man.cgi/mandoc/man8/man.cgi.8">man.cgi(8)</a> using the HTTP_HOST CGI variable (made HTTP redirect Location: relative). Reduces attack surface.

<li>Removed dev/log AF_UNIX sockets from various <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=chroot&manpath=OpenBSD%20Current&sektion=2&format=html">chroot(2)</a> spaces, since <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=syslog&manpath=OpenBSD%20Current&sektion=3&format=html">syslog(3)</a> messages are now sent via <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sendsyslog&manpath=OpenBSD%20Current&sektion=2&format=html">sendsyslog(2)</a>.

<li>Fixed <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pkg_add&manpath=OpenBSD%20Current&sektion=1&format=html">pkg_add(1)</a> sorted output.

<li>When <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mandoc&manpath=OpenBSD%20Current&sektion=1&format=html">mandoc(1)</a> MAN_DIR or manpath.conf do not exist or are empty, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=exit&manpath=OpenBSD%20Current&sektion=3&format=html">exit(3)</a> in a controlled way.

Line 261

Line 307

<li>Fixed <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=netstart&manpath=OpenBSD%20Current&sektion=8&format=html">netstart(8)</a> after autoconf6 change so "rtsol" lines in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=hostname.if&manpath=OpenBSD%20Current&sektion=5&format=html">hostname.if(5)</a> work again.

<li>Always create a local <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=route&manpath=OpenBSD%20Current&sektion=4&format=html">route(4)</a> for every configured IPv4 address on the machine; made sure the local <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=route&manpath=OpenBSD%20Current&sektion=4&format=html">route(4)</a> is removed during an address change (stops <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pppoe&manpath=OpenBSD%20Current&sektion=4&format=html">pppoe(4)</a> corrupting the routing tree); do not add a local route if the specified address is 0.0.0.0 (prevents tree corruption).

<li>Use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=imsg&manpath=OpenBSD%20Current&sektion=3&format=html">imsg(3)</a> between the privileged and the non-privileged <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=npppd&manpath=OpenBSD%20Current&sektion=8&format=html">npppd(8)</a> processes.

<li>Fixed <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=whatis&manpath=OpenBSD%20Current&sektion=1&format=html">whatis(1)</a>, to correctly match words instead of any substrings; provide an internal mode for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=man.cgi&manpath=OpenBSD%20Current&sektion=8&format=html">man.cgi(8)</a>.

<li>Removed <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=qli&manpath=OpenBSD%20Current&sektion=4&format=html">qli(4)</a> (never enabled and was unfinished).

<li>Made <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rc.conf&manpath=OpenBSD%20Current&sektion=8&format=html">rc.conf(8)</a> a parsed configuration file; stop sourcing it as a shell script.

<li>Updated to libICE 1.0.9 and libXft 2.3.2.

Line 481

Line 527

<li>Fixed incorrect bounds check in amd64 assembly version of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&manpath=OpenBSD%20Current&sektion=8&format=html">ssl(8)</a> bn_mul_mont().

<li>Made <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcpdump&manpath=OpenBSD%20Current&sektion=8&format=html">tcpdump(8)</a> -v display any bad checksums contained in the header and what the checksum should be.

<li>More tweaking of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mandoc&manpath=OpenBSD%20Current&sektion=1&format=html">mandoc(1)</a> set_basedir(): do not error out when <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getcwd&manpath=OpenBSD%20Current&sektion=3&format=html">getcwd(3)</a> fails; fixed the man-root-dir indicator in say().

<li>More tweaking of <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/makewhatis.8?query=makewhatis">makaewhatis(8)</a> set_basedir(): do not error out when <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getcwd&manpath=OpenBSD%20Current&sektion=3&format=html">getcwd(3)</a> fails; fixed the man-root-dir indicator in say().

<li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=arc4random&manpath=OpenBSD%20Current&sektion=3&format=html">arc4random(3)</a>, hard fail with SIGKILL if <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getentropy&manpath=OpenBSD%20Current&sektion=2&format=html">getentropy(2)</a> returns -1.

<li>Converted CRYPTO_memcmp to timingsafe_memcmp in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&manpath=OpenBSD%20Current&sektion=8&format=html">ssl(8)</a>.

<li>Improved error checking in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&manpath=OpenBSD%20Current&sektion=3&format=html">ssl(3)</a> by_dir.c: set error code on error; check <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=malloc&manpath=OpenBSD%20Current&sektion=3&format=html">malloc(3)</a> return; added missing unlock.

Line 493

Line 539

<li>Fixed black screen on lenovo ideapad yoga 2 pro using when using <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=intel&manpath=OpenBSD%20Current&sektion=4&format=html">intel(4)</a>.

<li>Restored previous <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=arc4random&manpath=OpenBSD%20Current&sektion=3&format=html">arc4random(3)</a> behaviour, where <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fork&manpath=OpenBSD%20Current&sektion=2&format=html">fork(2)</a> children would mix in some randomness from the parent process.

<li>Stopped <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mandoc&manpath=OpenBSD%20Current&sektion=1&format=html">mandoc(1)</a> displaying "unable to open mandoc.db" error messages when updating/deleting individual files.

<li>Stopped <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/makewhatis.8?query=makewhatis">makewhatis(8)</a> displaying "unable to open mandoc.db" error messages when updating/deleting individual files.

<li>Ensured <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fsck_msdos&manpath=OpenBSD%20Current&sektion=8&format=html">fsck_msdos(8)</a> will always keep length of cluster chain up to date. Avoids out of boundary accesses.

<li>Fixed off by one in msdosfs pm_inusemap().

<li>Fixed the use of 16384-bit RSA keys by <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&manpath=OpenBSD%20Current&sektion=1&format=html">ssh(1)</a>.

Line 952

Line 998

<li>If user+tag@ exceeds SMTPD_MAXPATHLEN <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=smtpd&manpath=OpenBSD%20Current&sektion=8&format=html">smtpd(8)</a> now fails instead of creating a ".truncated" tag dir.

<li>Removed obsolete altq bandwidth shaping from <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&manpath=OpenBSD%20Current&sektion=4&format=html">pf(4)</a>.

<li>Allow <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mandoc&manpath=OpenBSD%20Current&sektion=1&format=html">mandoc(1)</a> to properly handle symlinks .

<li>Allow <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/makewhatis.8?query=makewhatis">makewhatis(8)</a> to properly handle symlinks .

<li>Disable the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&manpath=OpenBSD%20Current&sektion=1&format=html">ssh(1)</a> curve25519-sha256@libssh.org KEX method when the other party's connection will fail.

<li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mandoc&manpath=OpenBSD%20Current&sektion=1&format=html">mandoc(1)</a> update mode, when opening the database fails, just rebuild it from scratch.

<li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/makewhatis.8?query=makewhatis">makewhatis(8)</a> update mode, when opening the database fails, just rebuild it from scratch.

<li>Removed <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=RAND_seed&manpath=OpenBSD%20Current&sektion=3&format=html">RAND_seed(3)</a> calls in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=iked&manpath=OpenBSD%20Current&sektion=8&format=html">iked(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ikectl&manpath=OpenBSD%20Current&sektion=8&format=html">ikectl(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=relayd&manpath=OpenBSD%20Current&sektion=8&format=html">relayd(8)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=snmpd&manpath=OpenBSD%20Current&sektion=8&format=html">snmpd(8)</a>.

<li>For <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wscons&manpath=OpenBSD%20Current&sektion=4&format=html">wscons(4)</a> WSDISPLAY_COMPAT_USL protocol, send the synchronizing signals to the process, not just the thread.

<li>Updated <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=unifdef&manpath=OpenBSD%20Current&sektion=1&format=html">unifdef(1)</a> to version 2.10.

Line 1031

Line 1077

<li>Confirm passwords when <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=signify&manpath=OpenBSD%20Current&sektion=1&format=html">signify(1)</a> is generating keys.

<li>Fixed SQL_STEP failures for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=man&manpath=OpenBSD%20Current&sektion=7&format=html">man(7)</a> pages lacking descriptions.

<li>Better <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mandoc&manpath=OpenBSD%20Current&sektion=1&format=html">mandoc(1)</a> error reporting in case of SQL errors: mention dir and file.

<li>Better <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/makewhatis.8?query=makewhatis">makewhatis(8)</a> error reporting in case of SQL errors: mention dir and file.

<li>Major <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&manpath=OpenBSD%20Current&sektion=8&format=html">ssl(8)</a> cleanup to remove: MacOS, Netware, OS/2, VMS and Windows build machinery and shared libraries; <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=openssl&manpath=OpenBSD%20Current&ssektion=1&format=html">openssl(1)</a> engines and code that were not properly licensed; vms support; various horrible socket syscall wrappers; insecure use of time as a random seed in the TLS engine.

<li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=qla&manpath=OpenBSD%20Current&sektion=4&format=html">qla(4)</a> debug output, print loop ids as decimals and port ids as 24bit hex.

Line 1057

Line 1103

<li>Revived fix for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=perl&manpath=OpenBSD%20Current&sektion=1&format=html">perl(1)</a> RT bug 116441 (null dereference affecting mod_perl).

<li>Split manual names out of the common "keys" table into their own "names" table. Reduces standard <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=apropos&manpath=OpenBSD%20Current&sektion=1&format=html">apropos(1)</a> search times 70% for the full /usr/share/man database.

<li>Moved descriptions from <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mandoc&manpath=OpenBSD%20Current&sektion=1&format=html">mandoc(1)</a> keys table to mpages table: reduces typical <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=apropos&manpath=OpenBSD%20Current&sektion=1&format=html">apropos(1)</a> search times by about 40%; reduces database size.

<li>Moved descriptions from <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man5/mandoc.db.5?query=mandoc%2edb">mandoc.db(5)</a> keys table to mpages table: reduces typical <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=apropos&manpath=OpenBSD%20Current&sektion=1&format=html">apropos(1)</a> search times by about 40%; reduces database size.

<li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=less&manpath=OpenBSD%20Current&sektion=1&format=html">less(1)</a> "more" mode, made command specified by -p option apply to every edited file, as per POSIX.

<li>Reverted r1.93 of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mg&manpath=OpenBSD%20Current&sektion=1&format=html">mg(1)</a> file.c, which broke permission checks.

<li><font color="#e00000">5.5 SECURITY FIX: Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ftp&manpath=OpenBSD%20Current&sektion=1&format=html">ftp(1)</a> client check the server hostname, to avoid false validation when connecting to an https website.</font><br>A source code patch is available for <a href="errata55.html#003_ftp">5.5</a>.

Line 1105

Line 1151

<li>Added the -t <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ktrace&manpath=OpenBSD%20Current&sektion=1&format=html">ktrace(1)</a> option to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ltrace&manpath=OpenBSD%20Current&sektion=1&format=html">ltrace(1)</a>. Allows triggering library function call trace and other kernel events trace simultaneously.

<li>Fixed <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=smtpd&manpath=OpenBSD%20Current&sektion=8&format=html">smtpd(8)</a> header parsing issue in enqueuer, which was stripping the "From:" header in some cases.

<li>Made <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mandoc&manpath=OpenBSD%20Current&sektion=1&format=html">mandoc(1)</a> warn about missing mlinks when the -p (picky) option is given, and not overridden by: -Q, -d, -u, or -t.

<li>Made <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/makewhatis.8?query=makewhatis">makewhatis(8)</a> warn about missing mlinks when the -p (picky) option is given, and not overridden by: -Q, -d, -u, or -t.

<li>Merged the mda, mta and smtp <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=smtpd&manpath=OpenBSD%20Current&sektion=8&format=html">smtpd(8)</a> processes into a single unprivileged process.

<li>Start the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=smtpd&manpath=OpenBSD%20Current&sektion=8&format=html">smtpd(8)</a> purge task after events are set, so we don't miss a SIGCHLD.

<li>Reworked <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=qla&manpath=OpenBSD%20Current&sektion=4&format=html">qla(4)</a> command polling loop so it can handle multiple responses in a single interrupt. Allows talking to Hitachi disk arrays.

<li>Fixed pppx kernel panic when using <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=npppd&manpath=OpenBSD%20Current&sektion=8&format=html">npppd(8)</a> with multiple pppx devices.

<li>When the -n or -t flag is given to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=makewhatis&manpath=OpenBSD%20Current&sektion=8&format=html">makewhatis(8)</a>, write names and descriptions to stdout (format similar to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=apropos&manpath=OpenBSD%20Current&sektion=1&format=html">apropos(1)</a>).

<li>Instead of silently doing nothing, made <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mandoc&manpath=OpenBSD%20Current&sektion=1&format=html">mandoc(1)</a> warn and return non-zero when the manpath is empty.

<li>Instead of silently doing nothing, made <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/makewhatis.8?query=makewhatis">makewhatis(8)</a> warn and return non-zero when the manpath is empty.

<li>Added a uvm_yield function to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=uvm&manpath=OpenBSD%20Current&sektion=9&format=html">uvm(9)</a> and use it to prevent the reaper from hogging the cpu.

<li>Reworked wait/kernel lock heuristics to give interrupts on other CPUs to a chance to run, for reduced latency.

<li>When <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mg&manpath=OpenBSD%20Current&sektion=1&format=html">mg(1)</a> discovers a directory is non-existent, offer a "y" option to make the directory.

Line 1160

Line 1206

<li>Speed-up overlapping copy operations in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=gio&manpath=OpenBSD%20Current&sektion=4&arch=sgi&format=html">gio(4/sgi)</a> by attempting to perform them in larger chunks whenever possible.

<li>Removed pflowproto 9 (unfixable post-2038). Better option is pflowproto 10.

<li>Allow leading and trailing vertical lines in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mandoc&manpath=OpenBSD%20Current&sektion=1&format=html">mandoc(1)</a>, format them in the same way as groff; do not require whitespace before vertical lines in layout specifications.

<li>Allow leading and trailing vertical lines in <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man7/tbl.7?query=tbl">tbl(7)</a>, format them in the same way as groff; do not require whitespace before vertical lines in layout specifications.

<li>Properly initialise <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=malloc&manpath=OpenBSD%20Current&sektion=3&format=html">malloc(3)</a>ed memory in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mandoc&manpath=OpenBSD%20Current&sektion=1&format=html">mandoc(1)</a>, to fix crashes when using <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=apropos&manpath=OpenBSD%20Current&sektion=1&format=html">apropos(1)</a>.

<li>Made sure the command TRB is reset if a command is submitted when the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=usb&manpath=OpenBSD%20Current&sektion=4&format=html">usb(4)</a> hardware is already gone.

<li>Reverted "retire kernel support for SO_DONTROUTE" diff, which caused problems in localhost connections.

Line 1223

Line 1269

<li>On sgi machines, fixed clipping bounds in "fill" and "blt" graphics operations; added colormap support.

<li>Removed timeout logic from the polling loop in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=qlw&manpath=OpenBSD%20Current&sektion=4&format=html">qlw(4)</a>. Stops devices timing out before attaching.

<li>Retired the rarely used hp300, mvme68k and mvme88k ports.

<li>Allow checking <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mandoc&manpath=OpenBSD%20Current&sektion=1&format=html">mandoc(1)</a> databases are up to date even when you don't have write permissions.

<li>Allow <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/makewhatis.8?query=makewhatis">makewhatis(8)</a> to check <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mandoc.db&manpath=OpenBSD%20Current&sektion=5&format=html">mandoc.db(5)</a> databases are up to date even when you don't have write permissions.

<li>Notify userland (via the routing socket) when ARP resolution completes.

<li>Put the AF_ROUTE socket that <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=arp&manpath=OpenBSD%20Current&sektion=8&format=html">arp(8)</a> operates on into the appropriate rdomain. Stops "arp -V 1 -d 10.0.0.1" hanging forever.

<li>Made <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpctl&manpath=OpenBSD%20Current&sektion=8&format=html">bgpctl(8)</a> correctly parse attribute length form imsg.

Line 1307

Line 1353

</body>

</html>