=================================================================== RCS file: /cvsrepo/anoncvs/cvs/www/plus.html,v retrieving revision 1.1191 retrieving revision 1.1192 diff -c -r1.1191 -r1.1192 *** www/plus.html 2011/02/13 15:05:34 1.1191 --- www/plus.html 2011/03/11 20:49:30 1.1192 *************** *** 67,72 **** --- 67,170 ----

Introduced a dummy function in ifconfig(8) if SMALL is defined to digest arguments like "rdomain", "description", etc. so that the ifconfig(8) on RAMDISK is able to parse hostname.if(5) files on updates. +
Make Xorg properly restore xf86-video-r128 video mode upon exit on macppc. +
Prevent a possible 5 seconds delay in socket splicing. +
Fixed a buffer overflow in the pppoe receive packet handling. +
Make dumpfs(8) disklabel(8) UID aware. +
If relayd(8) "check script" doesn't exit(), treat the service as "down" rather than "unknown". Fixes a problem where the script is killed due to expiry of the interval timer. + +
Force the disklabel(8) UID cache used to generate hw.disknames to be updated after every disklabel read or write. Prevent the DUID cache from de-syncing. + +
Make mpii(4) look up the device attached to a raid volume by its address on the bus, not which bioctl volume id it is. +
Removed daemon_shell and force the use of /bin/sh for the su(1) call in rc.d(8). +
Prevent PIPEX from using address and control field on PPPoE, they must not be used as the protocol. +
In IPv6, prevent the nd6_addr_add() work queue task from adding multiple addresses for the same prefix. + +
Fixed pf(4) source address rewriting for the icmp errors with rdr-to setup (PR6564). + +
Fixed PR6557 with RT2560 and RT2661. +
Mark descriptors as invalid before unmapping the associated mbuf. Might prevent the unrecoverable DMA error mentioned in PR 6557. +
Disabled PCIe Active State Power Management (ASPM) to avoid bge(4) randomly detaching from the bus on some machines. +
Improved drm(4). +
Improved ami(4). + +
Make makewhatis(8) more silent unless launched with -v option. +
Fixed USB drives that spin themselves down due to inactivity in sd(4). +
Make nsd(8) call setusercontext(3) before chroot(2). +
Fixed stats about node allocation failures in ieee80211_proto(9). +
Improved ieee80211_input(9). +
Make mos(4) set IFF_BROADCAST in if_flags. +
Make Xorg properly restore xf86-video-ati video mode upon exit on macppc and sparc64. +
Fixed infinite loop in fdisk(8). +
Prevent fdisk(8) from parsing blocks it did not successfully read. +
Implemented the DIOCGCACHE and DIOCSCACHE ioctls in mpii(4) for raid volumes. Allows sd(4) to enable the write cache on such a volume on attach, like it is done in mpi(4). +
Make radeonfb(4/SPARC64) re-initialize acceleration engine after leaving X. + +
Make pgs(4/MACPPC) only attach if the "device_type" properly is "programmer-button". +
Improved disklabel(8) cleaning of badly formed partition. +
Disable Xorg on alpha because Xrender is broken. + +
Improved alc(4). +
Prevent carp(4) from stopping on a vlan(4) after it has been manually changed. + +
Disabled sbt(4) and ubt(4) on all kernel. +
Fixed speaker auto-mute in azalia(4) for some IDT codecs. +
Make umodem(4) allow interfaces other than slaves of the union interface to be the data interface. +
Make azalia(4) check its widgets connection list. + +
Fixed off by one bug in lynx(1) page display. +
Disable sysctl(8) kern.usercrypto (userland access to crypto(4)) by default. +
Allow users to enable access to crypto(4) with sysctl(8) , but keep it turned off by default. +
Make ssh(1) host based auth with ECDSA keys work correctly. Fixes bz#1858. + +
Fixed crash in viaenv(4). +
Fixed suspend issues in vnd(4). +
Added workaround for BCM5906 A0/1/2 controller silicon bug in bge(4). +
Reduced i386 RAMDISK size by not compiling statistics counters code in em(4) if SMALL_KERNEL is defined. +
RELIABILITY FIX: the sis(4) driver may hand over stale ring descriptors to the hardware if the compiler decides to re-order stores or if the hardware does store-reordering. +
+ A source code patch is available.
+ [Applied to stable] +
Make bgpd(8) print nicely 4-byte AS. + +
Make routing socket free mbuf in failure case. Fixes PR6562. +
SECURITY FIX: PF rules specifying address ranges (e.g. "10.1.1.1 - 10.1.1.5") were not correctly handled on little-endian systems (alpha, amd64, arm, i386, mips64el, vax). Other address types (bare addresses "10.1.1.1" and prefixes "10.1.1.1/30") are not affected.
+ A source code patch is available.
+ [Applied to stable] + +
Fixed a bug with the pointer location in cwm(1). +
Reduce RAMDISKA size by not compiling statistics counter code in em(4) when SMALL_KERNEL is defined. +
Fixed a crash in cwm(1). +
Allow relayd(8) debug logging before daemonization to help identification of configuration issues. Fixes PR6314. + +
Clear bpf(4) filter memory before using it. Prevents from leaking previous kernel stack contents through a malicious bpf(4) filter. +
Fixed nc(1) PR6207. +
Added the rc_scripts variable for rc.d(8). + +
Added linux_mprotect() syscall to compat_linux(8). +
Avoid dereferencing a NULL pointer during VT switches when composite is active in xf86-video-intel. Fixes a crash. +
Fixes the heavy rendering errors and crashes that could make inteldrm(4) unusable on a 865G since 4.8. Fixes PR6517. + +
Make crontab -l not crash on crontab(5) files that don't have the expected three lines of comments. +
SECURITY FIX: An incorrectly formatted ClientHello handshake message could cause OpenSSL to parse past the end of the message. An attacker could use this flaw to trigger an invalid memory access, causing a crash of an application linked to OpenSSL. As well, certain applications may expose the contents of parsed OCSP extensions, specifically the OCSP nonce extension.
+ Applications are only affected if they act as a server and call SSL_CTX_set_tlsext_status_cb on the server's SSL_CTX. It is believed that nothing in the base OS uses this. Apache httpd started using this in v2.3.3; this is newer than the version in ports.
+ A source code patch is available.
+ [Applied to stable] +
Put a limit on fnmatch(3) recursion during matching, and reject input of size greater or equal PATH_MAX. +
Fixed tmux(1) split-window argument usage. +
Added time related syscalls clock_gettime() and clock_getres() to compat_linux(8). + +
Set SO_KEEPALIVE on ftpd(8) sockets. + +
Fixed a crash with xf86-video-ati in zaphod mode if one screen is not present. +
Make relayd(8) log the time taken for all types of check, not just tcp checks. + +
Make Xenocara build use mandoc(1). +
Make the installation script use an absolute path to the temporary hosts file. Fixes hosts(5) creation upon install. +
Updated zoneinfo database to tzdata2011b from elsie.nci.nih.gov. +
Removed .NS from mandoc(1).
Put the max size of em(4) EEPROM to 16k. Fixed use of at least Intel PRO/1000 (82576) rev 0x01.
In pf(4), make sure that IPv4-ICMP6 and IPv6-ICMP packets are not rewritten in case they are dropped and logged. *************** *** 1392,1398 ****
www@openbsd.org !
$OpenBSD: plus.html,v 1.1191 2011/02/13 15:05:34 jj Exp $ --- 1490,1496 ----
www@openbsd.org !
$OpenBSD: plus.html,v 1.1192 2011/03/11 20:49:30 jj Exp $