=================================================================== RCS file: /cvsrepo/anoncvs/cvs/www/plus.html,v retrieving revision 1.1370 retrieving revision 1.1371 diff -c -r1.1370 -r1.1371 *** www/plus.html 2015/07/02 05:49:03 1.1370 --- www/plus.html 2015/07/02 21:42:57 1.1371 *************** *** 74,84 ****

In sshd(8), prevent authorized_keys options picked up on public key tests without a corresponding private key authentication being applied to other authentication methods.
Pass fflag to VOP_POLL so vfs fifo functions can get at the file flags to check FREAD/FWRITE if needed.
Avoid a NULL dereference in fd_getfile_mode(). !
5.6 and 5.7 SECURITY FIX: a remote user can crash httpd.8.
A source code patch exists for 5.6 and 5.7.
5.6 and 5.7 SECURITY FIX: malformed binaries could trigger kernel panics or view kernel memory
A source code patch exists for 5.6 and 5.7.
5.6 and 5.7 SECURITY FIX: multiple issues in cpio(1)/pax(1)/tar(1).
A source code patch exists for 5.6 and 5.7.
Don't add a separate .got.plt section as it would result in a partially writable GOT. ld.so(1) will properly write-protect the single .got. --- 74,321 ----
- In mandoc(1), implement the roff(7) "r" conditional. + +
- Plug a memory leak in relayd(8). +
- Introduce native atomic operations for i386. +
- Acquire/release the i2c bus before/after reading the temperature register. This prevents concurrent access to the smu(4) microcontroller on Apple G5 machines, which would result in errors reading the RTC. +
- On armv7, set the usb otg port on the cubox to host mode and attach ehci to it. +
- In file(1), support - to read from stdin. + +
- Set the sdmmc(4) emmc highspeed flag if the capability register claims it is supported. +
- In tmux(1): +
  - Expand formats again inside #(). +
  - Don't use special strings if #() commands fail, just remove the format (as if the command produced nothing). +
  +
- Switch vax to binutils 2.17. +
- Make ld.so(1) on alpha cope with binaries built with secureplt. +
- In file(1), if reading into a buffer, correct the stored file size at EOF. +
- In the asr, fix a possible off-by-one when reading /etc/hosts if it doesn't end with a newline. +
- In file(1), silently fall back to /etc/magic if ~/.magic can't be opened. + +
- Initial addition of "Patrol Read" support in bio(4), bioctl(8) and mfi(4). +
- In ntpd(8), detect crashes from constraint sub-processes, instead of ignoring them. +
- When the machdep.allowaperture sysctl is set to 3, allow concurrent access. +
- Save the cpuid(6) eax bits in the cpu_info and report the SENSOR and ARAT bits from it. +
- Switch alpha, arm, sh and sparc to binutils 2.17. +
- In httpd(8), relayd(8), smtpd(8) and snmpd(8), do not try to unlink the control socket in an unprivileged child process on shutdown. + +
- In ssh(1), increase the allowed length of the known host file name in the log message to be consistent with other cases (bz#1993). +
- Make ssh-keygen(1) default to ed25519 keys when compiled without OpenSSL (bz#2388). +
- Remove 1k bit groups from ssh and moduli(5). +
- In ssh(1), reorder client proposal to prefer diffie-hellman-group-exchange-sha1 over diffie-hellman-group14-sha1. + +
- In ssh: +
  - Cap DH-GEX group size at 4kbits for Cisco implementations (bz#2209). +
  - Support PKCS#11 devices with external PIN entry devices (bz#2240). +
  - Add a stronger (4k bit) fallback group that sshd can use when the moduli file is missing or broken, sourced from RFC3526 (bz#2302). +
  +
- In audioctl(1), expose the number of bytes processed by the sound card instead of the number of bytes processed minus the xruns. +
- Don't create ICMP states on reply packets unless sloppy state tracking is used. +
- Allow for multiple RTF_CLONING routes with the same priority. +
- Normalize route destination before checking for MPATH conflicts. +
- Do not create ARP entries for RTF_BROADCAST routes. +
- Include the firmware for usb devices on the armv7 ramdisk. + +
- Make vlans inherit their parents hardmtu as well as mtu. +
- Build all the firmware for usb devices on armv7. +
- Build wsconsctl(8) and wsconscfg(8) on armv7. +
- Really fix the panic in the PF_KEYv2 code by reverting src/sys/net/pfkeyv2_convert.c to r1.52. +
- In ipsecctl(8), bump up the default Diffie-Hellman group to modp3072. +
- Fix a panic in the PF_KEYv2 code. +
- In pms(4), match newer Elantech v4 touchpads. +
- Port the ELF m88k work to binutils 2.17. It is good enough to build a booting kernel, and hopefully userland as well. +
- In ugen(4), prevent a use after free in by closing all open endpoints upon detach. This fixes a panic. + +
- In sshd(8), add the missing -c option to getopt(). +
- Always establish all the necessary interrupts at pckbc attach time, and get rid of the "intr_establish" pckbc callback. +
- Update to xf86-video-ast 1.0.1, xf86-video-savage 2.3.8, xf86-video-siliconmotion 1.7.8, xf86-video-tdfx 1.4.6, xf86-video-trident 1.3.7 and dejavu-ttf 2.35. +
- Build wsudl(4) on armv7. +
- Add udl(4) and uvideo(4) to armv7 GENERIC. + +
- Update to xf86-video-cirrus 1.5.3, xf86-video-i740 1.3.5, xf86-video-mach64 6.9.5, xf86-video-mga 1.6.4, xf86-video-neomagic 1.2.9 and randrproto 1.4.1. +
- In sftp(1), fix a memory leak in an error path. +
- In ldcomctl(8), fix a memory leak in an error path. +
- Introduce ipsec-id bundles and use them for ipsecflowinfo. This fixes rekeying for l2tp/ipsec against multiple windows clients and saves memory. + +
- In dump(8), canonicalize all devices to DUIDs in order to make -w and -W output consistent. +
- Don't use an uninitialised softc pointer in midi(4). +
- In iwm(4), reserve two DMA segments for sending commands to the firmware. This hopefully fixes a hardware error. + +
- In ssh(1), reorder EscapeChar option parsing to avoid a single-byte out-of-bounds read (bz#2396). +
- Add a knob to sshd_config(5) to relax GSSAPI host credential check for multihomed hosts (bz#928). +
- Update Diffie-Hellman groups in ssh and moduli(5). +
- Establish interrupts for both keyboard and mouse slots at isa pckbc attach time, rather than lazily from pckbc when slots are discovered. +
- Switch amd64, hppa, mips64, mips64le and powerpc to binutils 2.17. +
- In ssh-keygen(1), support -lF hostname to find search known_hosts and print key hashes. +
- Correctly state the link state to INVALID when creating a carp interface. +
- Fix an unintialized variable in ix(4). +
- In sshd_config(5): +
  - Support arguments to AuthorizedKeysCommand. +
  - Add AuthorizedPrincipalsCommand that allows getting authorized_principals from a subprocess rather than a file. +
  + +
- Remove hotplug(4) support from ntpd(8). +
- In httpd(8), correctly print the filesize in the Content-Length header for files larger than 2 GB on 32-bit architectures. + +
- FIx installing sets from CD-ROM if more than one CD-ROM drive is present. +
- In chroot(8), when a user is specified via the -u flag, use setusercontext() to setup (most of) the execution environment. +
- Add the -c flag to id(1) to display the user's login class. +
- In icmp(4), do not leak a rtentry if it is unusable. +
- In bge(4), increase a maximum firmware handshake timeout to 10 seconds. +
- In tmux(1), prevent missing cursors with emacs-in-tmux-in-tmux. + +
- Use the same va entry point on all armv7 socs. +
- Make armv7 startup PIC. +
- Make TAPE=- mean stdout in tar(1). +
- On amd64, do lazy update/reset of the FS.base and %[def]s segment registers. +
- Avoid a kernel crash in the NFS code while running netstat or pstat -f. +
- Make the compiler emit visibility information for (undefined) references with non-default visibility. +
- In dhclient(8) and dhcpd(8), accept hostnames starting with 0-9. +
- Fix two use-after-free cases in relayd(8). +
- Change spamd(8) to use divert-to instead of rdr-to. +
- In dhclient(8), stop rejecting leases with a subnet that overlaps a subnet already present. +
- In ntpd(8), scale the error margin with the number of resolved NTP peers. This way, a very small number of outliers in a NTP pool cannot immediately trigger new connections to the contraint servers. +
- Enable ntpd(8) by default at install time. +
- Export the rdomain to userland through struct if_data. +
- In cu(1), add the -d flag and the dc capability to open devices non-blocking. This is useful for the few drivers that do not support cua* so tty* must be used. + +
- Reenable the page zeroing thread on MP m88k kernels. +
- On aviion and luna88k, make sure the lock is not taken for clock interrupts. +
- Add the -D option to nm(1) to display the dynamic symbol table. +
- In ntpd(8), if the constraint resolves to multiple IP addresses, try each of them one by one. + +
- In axe(4), read ethernet address from EEPROM on AX88772B. +
- Add a F_ISATTY option to fcntl(), so that isatty() can use this rather than than the bloated ioctl() interface. +
- In aucat(1), prevent periodic glitches occurring under certain circumstances. +
- In audioctl(1), display simply "play" when play mode is set. + +
- Make it possible to use the same network on multiple interfaces at the same time. +
- Give carp(4) interfaces their own low priority. +
- Introduce if_output(), a function do to the last steps before enqueuing a packet on the sending queue of an interface. +
- Remove the "Use DUIDs rather than device names in fstab?" question from the installer and use DUIDs unconditionally. +
- In smtpd(8), don't log credentials upon AUTH LOGIN authentication failures. + +
- In ssh-agent(1): +
  - Use a salted hash of the lock passphrase instead of plain text and do constant-time comparisons of it. +
  - Add a 0.1s incrementing delay for each failed unlock attempt up to 10s. +
  +
- In upd(4), make the "Battery Present" sensor a depency of all the battery-related sensors only if it is present. +
- Update to font-util 1.3.1. +
- Extend autoinstall(8) to allow for hostname-mode.conf response files and to put response files in a subdir of the webserver's document root. + +
- On armv7, rework the imxenet hardware address setup. +
- In smtpd(8), avoid multiple "From " and "Return-Path" headers. + +
- Translate the fec parameters from the novena dtb to set a different clock skew to the same micrel phy used on sabre lite. This change resolves the stability problems with imxenet on novena. +
- In tmux(1), to replace c0-*, add a high watermark to the pty event, and also backoff when the any of the ttys the pane is going to write to has buffered enough data. +
- Revert r1.3 of src/gnu/usr.bin/binutils-2.17/bfd/elflink.c. It introduces bogus failures when inter-library dependencies are present. +
- In em(4), make sure the rx ring lwm is set to at least 4. As far as we know, all hardware variants need at least 4 descriptors on the rx ring to be able to receive packets. +
- In tmux(1): +
  - Add bell-action "other". +
  - Add a session_alerts format and use this in the default set-titles-string. +
  +
- In hifn(4), fix a potential use-after-free and a memory leak. +
- In urtwn(4): +
  - Match additional devices (RTL8188CU_3, DWA123D1, DWA125D1). +
  - Fix efuse reading (which fixes a potential error in MAC address read from efuse). +
  + +
- Fix an uninitialized variable access in npppd(8). +
- imxiic is known to be broken, so don't try attaching it on utilite. +
- On armv7, raise VM_PHYSSEG_MAX to two and load an additional physical memory segment if u-boot reports it. This is needed for the utilite where u-boot reports two 1GB segments of physical memory. +
- In em(4), support reading from an OTP iNVM. +
- Fix a potential use-after-free in pf(4). +
- In bioctl(8), use explicit_bzero(3) on private data. +
- In tmux(1), remove the c0-* options which never really worked satisfactorily. +
- In upd(4), refresh sensor values asynchronously. +
- Remove all audio format conversion code from the kernel as we already do better conversions in user mode. + +
- In nvram(4/amd64) and lpt(4), convert from uiomovei() to uiomove() to prevent short tranfers. +
- When checking flags that will be passed to open(), test the O_ACCMODE portion separately to avoid false negatives. +
- Set POLLHUP even if no valid events were specified as per POSIX. +
- In urtwn(4): +
  - Repair firmware reset on RTL8188CUS devices (and perhaps others). +
  - Fix 11b performance for RTL8188EU devices. +
  +
- Update to kbproto 1.0.7, libFS 1.0.7, libXaw 1.0.13, libXrender 0.9.9, libXt 1.1.5, libfontenc 1.1.3, libpciaccess 0.13.4, libxkbfile 1.0.9, setxkbmap 1.3.1, smproxy 1.0.6, twm 1.0.9, x11perf 1.6.0, xcmsdb 1.0.5, xcompmgr 1.1.7, xdpyinfo 1.3.2, xdriinfo 1.0.5, xedit 1.2.2, xev 1.2.2, xgamma 1.0.6, xgc 1.0.5, xhost 1.0.7, xkbevd 1.1.4, xkbprint 1.0.4, xlsatoms 1.1.2, xlsfonts 1.0.5, xmag 1.0.6, xman 1.1.4, xmodmap 1.0.9, xvinfo 1.1.3 and xorg-docs 1.7.1. + +
- Adjust the physical memory limit on armv7 in order to prevent a panic on the Novena. +
- In col(1), recognize SUSv2-style escape-digit sequences in the input stream. +
- Various improvements to the GPT code. + +
- In wsdisplay(4), when changing screen saver parameters, check the flags of the currently displayed screen in order to decide whether the screen saver needs to be retriggered, rather than the flags of the device we are issuing the ioctl on. Also, ensure the screen burner gets reenabled when switching from X11 to a virtual text console, and disabled when switching back to X. +
- In wsconsctl(8), add a flag for variables to prevent reading their value after modifying them and use this flag for display.focus. Also disallow -= and += syntax for display.focus. +
- In col(1), fix various integer overflows and underflows, and logic errors. +
- Switch i386 and sparc64 to binutils 2.17. + +
- Avoid NULL function pointer dereference during boot on sabresd. +
- Add initial board-specific parts of Novena support to armv7. +
- In ssh: +
  - Don't choke on new-format private keys encrypted with an AEAD cipher (bz#2366). +
  - Fix a post-auth crash with permitopen=none (bz#2355). +
  +
- In tmux(1), update the environment when switching sessions as well as attaching. +
- In man(1), let the -m option add to the default manpath rather than override it. +
- Include the timestamp TCP option in keep alive packets. + +
- In tmux(1), add the window_linked format. +
- In top(1), display thread IDs instead of the name of the process's owner when -H is used. +
- In tmux(1), turn cursor off during redraw. + +
- In sshd(8), blacklist DH-GEX for specific PuTTY versions rather than all PuTTY versions. +
- Bring back the MI atomic API for powerpc. +
- Fix a memory leak in ld.so(1). +
- In asr, skip loopback addresses, not loopback interfaces, per RFC 3493. +
- In httpd(8), implement If-Modified-Since. +
- In sshd(8), don't offer DH-GEX to WinSCP. +
- Flag user-specified routes with an AF_LINK gateway as RTF_LLINFO. + +
- Add the disklabel(8) template file based autopartitioning feature to the installer. +
- Add SwissSign CA root certificates to /etc/ssl/cert.pem. +
- In aucat(1), fix a clipping bug in float-to-fixed-point conversion. +
- Add support for RTL8188EU chips to urtwn(4). +
- Fix a crash on HP bc2500 blades with MP kernels when writing to the DSDT. +
- Use ether_input() as default input packet handler and do the necessary m_adj(9) to keep bridge(4) working while other pseudo-drivers are converted to if_input(). + +
- In compress(1), cp(1) and mv(1): +
  - Preserve times to nanosecond precision instead of just microsecond. +
  - Prefer to set attributes by fd for regular files, and don't follow symlinks for others. +
  +
- Add byte-range support to httpd(8). + +
- Make sure no kernel data is leaked in malloced memory in the padding of struct dirent when reading a directory over NFS. +
- In dump(8), eliminate the -U flag and make usage of DUID in /etc/dumpdates the default. +
- In ping(8), allow a TTL of 0. +
- Fix some problems with relayd(8) configuration reload. +
- In dhclient(8) and dhcpd(8), correct switch between current and previous line buffers when encountering a carriage return in the input. +
- Rework hppa mutexes: always record which cpu owns the lock and improve the mutex diagnostics/assertions. +
- Drop pf_rules and ipsec_rules from rc.conf(5). + +
- In ping6(8), change the lower bound of -h from -1 to 0. +
- In mandoc(1): +
  - Fix misformatting of man(7) manuals and potentially of mdoc(7) manuals. +
  - Fix an assertion failure. +
  +
- Reenable page zeroing thread on SMP mips kernels. +
- Do not grab the kernel lock for clock interrupts on mips64, octeon and sgi. +
- In ssh(1), improve error messages on TCP connection resets (bz#2257).
- In sshd(8), prevent authorized_keys options picked up on public key tests without a corresponding private key authentication being applied to other authentication methods.
- Pass fflag to VOP_POLL so vfs fifo functions can get at the file flags to check FREAD/FWRITE if needed.
- Avoid a NULL dereference in fd_getfile_mode(). !
- 5.6 and 5.7 SECURITY FIX: a remote user can crash httpd(8).
  A source code patch exists for 5.6 and 5.7.
- 5.6 and 5.7 SECURITY FIX: malformed binaries could trigger kernel panics or view kernel memory
  A source code patch exists for 5.6 and 5.7.
- 5.6 and 5.7 SECURITY FIX: multiple issues in cpio(1)/pax(1)/tar(1).
  A source code patch exists for 5.6 and 5.7.
- Don't add a separate .got.plt section as it would result in a partially writable GOT. ld.so(1) will properly write-protect the single .got. *************** *** 466,472 ****
- Fix a memory leak in an error path in LibreSSL (from OpenSSL commit 5e5d53d341fd9a9b9cc0a58eb3690832ca7a511f).
- Fix a small memory leak in sort(1). !
- 5.6 and 5.7 SECURITY FIX: several crash causing defects in OpenSSL (CVE-2015-0209, CVE-2015-0286, CVE-2015-0287, CVE-2015-0288 and CVE-2015-0289.
  A source code patch is available for 5.6 and 5.7.
- 5.5 SECURITY FIX: two possible crash causing defects in OpenSSL (CVE-2015-0286 and CVE-2015-0292).
  A source code patch is available for 5.5.
- Fix CVE-2015-0209, CVE-2015-0286, CVE-2015-0287 and CVE-2015-0289 in LibreSSL.
- Deal with half-configured control pipes in dwc2, using the same workaround as in ehci(4) and ohci(4). --- 703,709 ----
- Fix a memory leak in an error path in LibreSSL (from OpenSSL commit 5e5d53d341fd9a9b9cc0a58eb3690832ca7a511f).
- Fix a small memory leak in sort(1). !
- 5.6 and 5.7 SECURITY FIX: several crash causing defects in OpenSSL (CVE-2015-0209, CVE-2015-0286, CVE-2015-0287, CVE-2015-0288 and CVE-2015-0289).
  A source code patch is available for 5.6 and 5.7.
- 5.5 SECURITY FIX: two possible crash causing defects in OpenSSL (CVE-2015-0286 and CVE-2015-0292).
  A source code patch is available for 5.5.
- Fix CVE-2015-0209, CVE-2015-0286, CVE-2015-0287 and CVE-2015-0289 in LibreSSL.
- Deal with half-configured control pipes in dwc2, using the same workaround as in ehci(4) and ohci(4).