version 1.1500, 2021/11/11 04:41:59 |
version 1.1501, 2021/12/09 20:33:22 |
|
|
<p> |
<p> |
|
|
<ul> |
<ul> |
|
<!-- 2021/10/27 --> |
|
<li>When downloading resident keys from a FIDO token, made <a href="https://man.openbsd.org/ssh.1">ssh(1)</a> pass back the user ID that was used when the key was created and append it to the filename the key was written to (if not the default). |
|
<!-- 2021/10/26 --> |
|
<li>Unlocked the <a href="https://man.openbsd.org/kevent.2">kevent(2)</a> system call. |
|
<li>Updated to libfido2 1.8.0. |
|
<li>Made <a href="https://man.openbsd.org/iked.conf.5">iked.conf(5)</a> proto config option accept a list to allow specifying multiple protocols for a single policy. |
|
<li>Improved unhibernate performance by skipping attach of irrelevant devices. |
|
<li>Enabled <a href="https://man.openbsd.org/vmx.4">vmx(4)</a> on arm64. |
|
<li>Cleaned up irrelevant uses of 3rd mode_t parameter for <a href="https://man.openbsd.org/open.2">open(2)</a>/<a href="https://man.openbsd.org/openat.2">openat(2)</a>, unused when not creating files. |
|
<li>Ensured armv7 and arm64 efiboot allocate fresh memory for the device tree with at least one page of free space to extend into. This fixes booting on VMWare Fusion. |
|
<li>Added rejection of malformed Subject Alternative Names at certificate creation time to LibreSSL. |
|
<!-- 2021/10/25 --> |
|
<li>Added a way to force a color to RGB in <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> and a format to display it. |
|
<li>Fixed <a href="https://man.openbsd.org/pfctl.8">pfctl(8)</a> $nr incorrect macro expansion. |
|
<li>Fixed <a href="https://man.openbsd.org/vi.1">vi(1)</a> use after free with unsaved buffer. |
|
<li>Added -s and -S to <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> display-popup to set popup and border style. |
|
<li>Fixed application-set fg and bg in <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> panes. |
|
<!-- 2021/10/24 --> |
|
<li>Added <a href="https://man.openbsd.org/httpd.8">httpd(8)</a> custom error page facility. |
|
<li>Added mount -ur/uw support to tmpfs. |
|
<li>Unlocked top part of UVM fault hander on mips64. |
|
<li>Used <a href="https://man.openbsd.org/unveil.2">unveil(2)</a> for the possible <a href="https://man.openbsd.org/btrace.8">btrace(8)</a> script file, <a href="https://man.openbsd.org/dt.4">dt(4)</a> and <a href="https://man.openbsd.org/ksyms.4">ksyms(4)</a> nodes. |
|
<li>Used <a href="https://man.openbsd.org/ifconfig.8">ifconfig(8)</a> "join" command by default in <a href="https://man.openbsd.org/hostname.if.5">hostname.if(5)</a> files, replacing the old "nwid". |
|
<li>Switched <a href="https://man.openbsd.org/nsd.8">nsd(8)</a> to enable default DNS cookies on, matching behavior as released in OpenBSD 7.0. |
|
<li>Updated to <a href="https://man.openbsd.org/nsd.8">nsd(8)</a> 4.3.8. |
|
<li>Implemented <a href="https://man.openbsd.org/poll.2">poll(2)</a>, <a href="https://man.openbsd.org/select.2">select(2)</a>, <a href="https://man.openbsd.org/ppoll.2">ppoll(2)</a> and <a href="https://man.openbsd.org/pselect.2">pselect(2)</a> on top of kqueue. |
|
<li>Stopped prompting whether to fall back to HTTP in the installer, making the fallback automatic. |
|
<li>Fixed a panic by prohibiting renames of tmpfs mount-points. |
|
<li>Set klist lock for sockets to make socket event filters MP-safe. |
|
<li>Made pipe event filters MP-safe. |
|
<!-- 2021/10/23 --> |
|
<li>In <a href="https://man.openbsd.org/httpd.8">httpd(8)</a>, stopped sending content alongside responses to HEAD requests. |
|
<li>Stopped duplicating "Connection: close" headers in <a href="https://man.openbsd.org/relayd.8">relayd(8)</a>, only adding it if it's not a websocket response. |
|
<li>Provided common <a href="https://man.openbsd.org/btrace.8">btrace(8)</a> scripts kprofile.bt (to save kernel stackframes and produce flamegraphs) and runqlat.bt (to measure the latency of the scheduler runqueues). |
|
<li>Added call to <a href="https://man.openbsd.org/unveil.2">unveil(2)</a> to restrict <a href="https://man.openbsd.org/stty.1">stty(1)</a> -f filesystem access. |
|
<li>Added support for tpm2 CRB interface to <a href="https://man.openbsd.org/tpm.4">tpm(4)</a>, fixing recent S4 regressions on the Surface Go 2 caused by a firmware change. |
|
<li>Retired asynchronous crypto API. |
|
<li>Added new OpenSSL api SSL_write_ex, SSL_read_ex and SSL_peek_ex. |
|
<li>Annotated an <a href="https://man.openbsd.org/httpd.8">httpd(8)</a> 413 error with "request body too large" in the error log. |
|
<li>Fixed double free after allocation failure in <a href="https://man.openbsd.org/bpf.4">bpf(4)</a>. |
|
<li>Provided a way to determine our maximum legacy version for TLS in libssl, unbreaking RSA KEX for the TLS client when the non-version specific method is used with TLSv1.0 or TLSv1.1. |
|
<li>Called <a href="https://man.openbsd.org/pledge.2">pledge(2)</a> later to prevent it from killing various games using ncurses when both stdout and stderr are redirected to a non-tty. |
|
<li>Removed unusable <a href="https://man.openbsd.org/route.8">route(8)</a> -T and exec support from ramdisk. |
|
<li>Reinstated the fips mode test functions to libcrypto. |
|
<li>Added <a href="https://man.openbsd.org/rcctl.8">rcctl(8)</a> "ls rogue" to show daemons which are running but not set as "enabled" in <a href="https://man.openbsd.org/rc.conf.local.8">rc.conf.local(8)</a>. |
|
<li>Fixed a potential buffer overflow in <a href="https://man.openbsd.org/openssl.1">openssl(1)</a> certhash. |
|
<!-- 2021/10/22 --> |
|
<li>Renamed Pacific/Enderbury timezone to Pacific/Kanton. |
|
<li>Fixed an interrupt storm on <a href="https://man.openbsd.org/dwge.4">dwge(4)</a> variants which support Energy Efficient Ethernet when connected to a switch which does so as well. |
|
<li>Ensured enabled resolvers are honored by <a href="https://man.openbsd.org/unwind.8">unwind(8)</a> to keep unused forwarders disabled properly. |
|
<li>Implemented <a href="https://man.openbsd.org/rsync.1">rsync(1)</a> --compare-dest, allowing specification of additional directories to check for files to be available. |
|
<li>Prevented <a href="https://man.openbsd.org/ssh.1">ssh(1)</a> memory leak if getaddrinfo returns no addresses. |
|
<li>Added protocol version checking to <a href="https://man.openbsd.org/httpd.8">httpd(8)</a>. |
|
<!-- 2021/10/21 --> |
|
<li>Ensured use of the correct encoding in xenocara when /etc/kbdtype is present with an attached <a href="https://man.openbsd.org/ucc.4">ucc(4)</a> keyboard. |
|
<li>Removed hifn(4), safe(4) and ubsec(4) crypto drivers. |
|
<li>Removed <a href="https://man.openbsd.org/fdisk.8">fdisk(8)</a> "disk" editing command. |
|
<li>Fixed <a href="https://man.openbsd.org/httpd.8">httpd(8)</a> to respond with 400 Bad Request when a client sends header lines without a colon. |
|
<li>Bumped to LibreSSL 3.5.0. |
|
<li>Added -T to set a popup title in <a href="https://man.openbsd.org/tmux.1">tmux(1)</a>. |
|
<!-- 2021/10/20 --> |
|
<li>Stopped ignoring <a href="https://man.openbsd.org/carp.4">carp(4)</a> interfaces in <a href="https://man.openbsd.org/dhcpleased.8">dhcpleased(8)</a>. |
|
<!-- 2021/10/19 --> |
|
<!-- 2021/10/18 --> |
|
<li>Removed an unused decoding of c/h/s from the MBR read from disk by <a href="https://man.openbsd.org/fdisk.8">fdisk(8)</a>. |
|
<!-- 2021/10/17 --> |
|
<li>Updated to <a href="https://man.openbsd.org/xterm.1">xterm(1)</a> 369. |
|
<!-- 2021/10/16 --> |
|
<li>Corrected installer to use "inet autoconf" properly for <a href="https://man.openbsd.org/hostname.if.5">hostname.if(5)</a> files. |
|
<!-- 2021/10/15 --> |
|
<li>Returned to use of the SFTP protocol for <a href="https://man.openbsd.org/scp.1">scp(1)</a>. |
|
<li>Added initial 40MHz support to the <a href="https://man.openbsd.org/iwx.4">iwx(4)</a> driver. |
|
<li>Fixed a problem with repeat in <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> copy mode. |
|
<!-- 2021/10/14 --> |
|
<li>Released <a href="https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.4.1-relnotes.txt">LibreSSL 3.4.1</a>. |
|
<li>Replaced <a href="https://man.openbsd.org/lrint.3">lrint(3)</a>, <a href="https://man.openbsd.org/lrintf.3">lrintf(3)</a>, <a href="https://man.openbsd.org/llrint.3">llrint(3)</a> and <a href="https://man.openbsd.org/llrintf.3">llrintf(3)</a> implementations from NetBSD with the existing FreeBSD implementations we were already using for <a href="https://man.openbsd.org/lrintl.3">lrintl(3)</a> and <a href="https://man.openbsd.org/llrintl.3">llrintl(3)</a>. |
|
<li>Fixed a <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> redraw problem on automargin terminals. |
|
<!-- 2021/10/13 --> |
|
<li>Modified <a href="https://man.openbsd.org/syslog.conf.5">syslog.conf(5)</a> examples to use TLS rather than the plaintext protocols. |
|
<li>Fixed file descriptor leak of /dev/tty on <a href="https://man.openbsd.org/doas.1">doas(1)</a> auth failure. |
|
<li>Added <a href="https://man.openbsd.org/realpath.1">realpath(1)</a>, a wrapper for <a href="https://man.openbsd.org/realpath.3">realpath(3)</a> for use in ports. |
<!-- 2021/10/12 --> |
<!-- 2021/10/12 --> |
|
<li>Enabled enforcing of RLIMIT_MEMLOCK on powerpc64. |
<li>Reverted to use <a href="https://man.openbsd.org/iwm.4">iwm(4)</a> firmware v17 on Intel AC 7265, fixing instability issues on X1 Carbon gen3. |
<li>Reverted to use <a href="https://man.openbsd.org/iwm.4">iwm(4)</a> firmware v17 on Intel AC 7265, fixing instability issues on X1 Carbon gen3. |
<li>Cached the old BSSID when roaming with <a href="https://man.openbsd.org/iwx.4">iwx(4)</a>. |
<li>Cached the old BSSID when roaming with <a href="https://man.openbsd.org/iwx.4">iwx(4)</a>. |
<li>Explicitly stopped <a href="https://man.openbsd.org/iwx.4">iwx(4)</a> Rx block ack when roaming between access points. |
<li>Explicitly stopped <a href="https://man.openbsd.org/iwx.4">iwx(4)</a> Rx block ack when roaming between access points. |