===================================================================
RCS file: /cvsrepo/anoncvs/cvs/www/plus.html,v
retrieving revision 1.1372
retrieving revision 1.1373
diff -u -r1.1372 -r1.1373
--- www/plus.html 2015/08/05 05:32:54 1.1372
+++ www/plus.html 2015/09/07 19:13:47 1.1373
@@ -75,7 +75,251 @@
-- none yet...
+
+
- In static binaries, invoke kbind(2) once to disable it.
+
- On m88k and sparc, use kbind(2) for lazy binding GOT/PLT updates.
+
- It is no longer needed to hold the kernel lock for MP-safe bpfs (again).
+
- Bring back the commit that makes bpf_mtap MP-safe by using srp, but now using srp_follow(9) to avoid races and corruption.
+
- Add srp_follow(9) which is necessary to correctly order the taking and releasing of SRP critical sections in situations such as following a chain of data structures linked with SRPs.
+
- In dhclient(8), accept multiple domain names in dhcp option 15 (Domain Name). This allows resolv.conf(5) "search" statements to be built with multiple entries.
+
- In syslogd(8), don't truncate program names and hostnames in syslog.conf(5). This fixes matching with IP addresses if syslogd is started with -n.
+
- In efifb(4), check the driver name so that the driver only attempts to attach when we actually want it to.
+
- In binutils 2.17, raise the number of spare local GOT entries from 5 to 7. This fixes building liblto_plugin.so in the gcc 4.9 port.
+
- In tame(2) mode:
+
+- Return EPERM for *chmod(2) if uid/gid change is not towards cr_uid/cr_gid (effective ids).
+
- Consider getfsstat(2) an RPATH.
+
+ - Rather than killing when *chmod(2) is asked to do setuid/setgid, clear those bits in the request and continue.
+
- Do not install connected routes on loopback interfaces. This will allow systems with AUTOCONF'd addresses to see loopback connected routes in the routing table.
+
- Fix a use-after-free in uow(4).
+
- Compute the checksum before looping back the copy of an IPv6 multicast packet.
+
+
- Add a framework for resolving libc namespace issues.
+
- In gunzip(1) and uncompress(1), ignore setuid/setgid settings from a compress/gzip file.
+
- In mandoc(1):
+
+- Don't die on an assertion if an .Fo macro lacks its mandatory argument.
+
- Drop leading, internal, and trailing blank characters in \o (overstrike) escape sequences.
+
+ - In ping6(8), remove RH0 support.
+
- In ddb(4):
+
+
- In the kernel, use a global table for domains instead of building a list at run time.
+
- Prepare the kernel to boot from UEFI. Amongst other things, add efifb(4).
+
- Enable xhci(4) on macppc.
+
- On macppc, map the whole config1 space based on the size read from the device tree. This allows supplementary PCIe cards to be properly detected and should prevent the kernel from faulting when reading unmapped PCI addresses.
+
- Prevent cards with no midi connectors from attaching midi(4) devices.
+
+
- For *chmod(2), allow S_ISTXT in tame(2) mode.
+
- In mandoc(1):
+
+- Add a minimal implementation of the read-only number register \n(.$ which returns the number of arguments of the current macro.
+
- Implement the escape sequence \\$* which expands to all arguments of the current user-defined macro.
+
- Parse and ignore the escape sequences \, and \/.
+
- Don't escape breakable hyphens yet when we have to reparse the text line because we spring an input line trap.
+
+ - Create a miniroot for alpha.
+
- In ws(4) and synaptics(4), read multiple events at once.
+
+
- In tmux(1), check for name changes at most once every 500 milliseconds.
+
- On sparc64, add support for switching CPUs in ddb(4).
+
- On sh, use kbind(2) for lazy binding GOT/PLT updates.
+
- Make gdb(1) work again on mips64 PIE binaries by making sure a reasonable 64-bit ABI is selected for 64-bit ELF files instead of a 32-bit ABI.
+
- 5.8 SECURITY FIX: LibreSSL 2.2.2 incorrectly handles ClientHello messages that do not include TLS extensions, resulting in such handshakes being aborted.
A source code patch is available for 5.8.
+ - In apmd(8), log battery changes every 10%, not every 21%.
+
- In envy(4), disable interrupts while the midi uart is not in use. This avoids generating unused interrupts when a chatty peripheral is connected but not used.
+
- In binutils 2.17, add support for Irix-style "64-bit" archives.
+
- Fix the build of the drm libraries on sparc64.
+
- In envy(4), fix support of M-Audio Delta 44 cards that use different GPIO pins.
+
- In tmux(1):
+
+- Allow environment variables in #{}.
+
- Remove the lock-server option.
+
- Plug a memory leak.
+
+ - In binutils 2.17, do proper GOT slot accounting for symbols that were forced to be local.
+
+
- Rework the UNIX domain socket garbage collector.
+
- Make ld.so(1) work on hppa when _dl_bind_start gets hidden by the version script.
+
- Fix rare occurrences of wrong floating-point values with MP kernels on Octeon.
+
- On mips64, access the image of the floating point registers via p_md.md_regs instead of directly on the frame. This prevents updates from getting lost.
+
- Ensure that syslogd(8) uses its original command-line arguments when it reloads its configuration and re-executes itself.
+
- Prevent a socket that poll(2) reports is writable from becoming unwritable before write(2) is called.
+
- In doas(1), add a type of "auth-doas" to the perm check to allow login.conf(5) fiddling.
+
- In aucat(1), allow sparse blocks to be used as silence if samples are encoded as signed integers.
+
- Remove SSLv3 support from LibreSSL.
+
+
- On hppa, use kbind(2) for lazy binding GOT/PLT updates.
+
- Add more overflow checks to libexpat.
+
- 5.8 SECURITY FIX: in sshd(8), inverted logic made PermitRootLogin "prohibit-password" unsafe.
A source code patch is available for 5.8.
+ - Let MBR have priority over GPT.
+
- Fix an alignment issue in bridge(4).
+
+
- Add TIOCGETA to the TAME_IOCTL list. This is used by readpassphrase(3) and libcurses.
+
- In radiusd(8), fix a use-after-free in an error path.
+
- On alpha and mips64, use kbind(2) for lazy binding GOT/PLT updates.
+
- Remove exect(2). It was unused and not portable across arches.
+
- Hide many libc symbols that should not be used.
+
- In cron(8), use ppoll(2) instead of poll(2). This avoids time conversion issues and eliminates a race condition that could delay SIGCHLD and SIGHUP actions.
+
- In syslogd(8), don't use strlcpy(3) on strings that are not NUL-terminated. This prevents a crash.
+
- Fix an out-of-bounds read in tmux(1).
+
- On i386 and powerpc, use kbind(2) for lazy binding GOT/PLT updates.
+
+
- On i386, enforce the kernel W^X policy by properly setting NX (as needed) for kernel text, PTEs, .rodata, data, bss and the symbol regions.
+
- In restore(8), switch from utimes(2) to utimensat(2).
+
- Re-enable GTP support on amd64 and i386.
+
- Remove the -h option from radiusd(8).
+
- Set the required IPL at the syn-cache pool instead of doing a splsoftnet() explicitly.
+
- Prevent the kernel from removing connected (/64) routes as soon as it configures an AUTOCONF'd address based on a RA.
+
- Fix the GPT code to work with non-DEV_BSIZE disks.
+
- Fix a crash in tmux(1).
+
- Fix a cheating bug in worm(6).
+
- Fix a crash during "ifconfig bridge0 destroy".
+
- In bm(4), work around slow transfer speed.
+
- In cwm(1):
+
+- Don't allow freeze operations on fullscreen.
+
- Implement _NET_CLIENT_LIST_STACKING.
+
+ - Use IPL_SOFTNET protection for the pool. This fixes a panic.
+
- In sysmerge(8):
+
+- Switch from /usr/share/sysmerge to /var/sysmerge.
+
- Use /var/sysmerge/backups for persistent backups and keep three earlier rotations.
+
+ - Avoid two potential double frees in tame(2).
+
+
- Fix an fd leak in mv(1).
+
- Apply a symbol export list to ld.so(1) with just the expected dl*() and the two symbols needed by gdb.
+
- Make the Atom S1200 UART work.
+
- In binutils 2.17, introduce -Bsymbolic-functions and related flags.
+
- On amd64 and sparc64, use kbind(2) for lazy binding GOT/PLT updates.
+
- In tame(2):
+
+- Perform maximum one cwd lookup.
+
- Fix /tmp handling of unlink(2).
+
+ - Update to xf86-video-geode 2.11.17.
+
- In cwm(1), make CLIENT_STICKY apply to group hide/unhide rather than client hide/unhide.
+
- In cc(1), make the -msecure-plt option work, which is necessary to generate Secure-PLT ABI code.
+
- On powerpc, add support for the Secure-PLT ABI variant. This will give us better W^X support on powerpc.
+
- In binutils 2.17, fully enable the Secure-PLT ABI.
+
- In libc, restore codeset checking instead of silently falling back to ASCII.
+
- Revert the bpf+srp commits. They cause problems in a bridge setup.
+
+
- Move to the tame(int flags, char *paths[]) API/ABI.
+
- Explicitly list the symbols permitted to be exported by libc. This will prevent unintentional additions in the future and sets the stage for reductions.
+
- In doas(1), add the cwd context to the syslog entry.
+
- Make urtwn(4) attach to Netgear WNA1000Mv2.
+
- Ensure tls_read(3) and tls_write(3) always set outlen to zero on error.
+
- In rc(8), properly handle double quotes in wsconsctl.conf(5).
+
+
- In ctags(1), avoid calling system(3) for the -u option.
+
- Update to libdrm 2.4.64.
+
- In ssh(1), fix printing of HostKeyAlgorithms=+... when using -G.
+
- In sshd(8), fix expansion of HostkeyAlgorithms=+...
+
- Regenerate moduli(5).
+
- In cwm(1):
+
+- Preserve the command list order from .cwmrc.
+
- Hide the "term" and "lock" commands in the application menu.
+
- Don't let _NET_WM_STATE_STICKY apply to the position and size of a window.
+
- Add the client freeze extension to _NET_WM_STATE Atom, allowing flag to persist.
+
+ - In em(4), run the part of the interrupt handler that does rx completion without holding the kernel lock.
+
- In relayd(8), don't drop the reply messages when "check icmp" is used with many hosts.
+
- In httpd(8), avoid an HTTP 405 error when using the WebDAV MOVE method.
+
- Whitelist TIOCGPGRP (for tcgetpgrp(3)) in TAME_IOCTL.
+
- In azalia(4), enable beep and CD controls on ALC292.
+
+
- In sshd(8), fix the inverted logic that broke PermitRootLogin.
+
- If we're allowed to try and use large pages, we try and fit at least 8 of the items. This amortises the per page cost of an item a bit.
+
- In acpi(4), respect the access size when reading or writing to pci config space and ensure writes are properly aligned. This prevents panics and fixes at least battery status passthrough in vmware and the brightness keys on the X220.
+
- In exp2(3), avoid left-shifting a negative integer.
+
- In cwm(1), make the big move and resize bindings match what is in the manual page.
+
- On octeon, use the IPD Clock Count register as a timecounter.
+
- Import an alternative routing table backend based on Yoichi Hariguchi's ART implementation.
+
- In identd(8) and tftpd(8), use SOCK_NONBLOCK to avoid a FIONBIO ioctl(2).
+
- In identd(8), don't exit on unknown write(2) failures.
+
- In azalia(4), enable audio on ThinkPad docks.
+
- Reactivate tame(2) after release.
+
+
- Remove unused vesafb code.
+
- Update to libepoxy 1.3.1.
+
- In LibreSSL, properly handle missing TLS extensions in client hello as a non-failure.
+
- In ssh:
+
+- Don't call unlink(2) with an uninitialised path in ssh-keygen(1).
+
- Don't free an uninitialised pointer in ssh(1).
+
- Fix a double free in an error path.
+
- Improve compat matching for WinSCP and add compat matching for FuTTY.
+
+ - Enable the build of libOSMesa.
+
- In pf(4), keep the IPv6 fragment size as chosen by sender also for packets that are routed on behalf of route-to.
+
- Prevent mips64 FPU emulation from corrupting the page queues in MP systems.
+
- Do not use a stale local address from the routing table. This prevents an interface address without interface pointer causing a uvm_fault.
+
- On octeon, allow booting the SP kernel with a set of CPUs that does not contain core 0.
+
- Unbreak the ikectl(8) "ca" commands after the removal of $ENV:: overwriting in LibreSSL.
+
+
- Remove casts from many calls to malloc(3)-like functions
+
+
- Update the en_US.UTF-8 locale to Unicode 7.0.0.
+
- Remove the last fragments of ST-506 support.
+
- In whois(1), fix whois server detection for new TLDs.
+
- Accept NULL pointers in rtfree(9). This will simplify upcoming conversions of rt_refcnt-- to rtfree(9).
+
+
- 5.6 and 5.7 SECURITY FIX: a change to sshd(8) resulted in incorrect permissions being applied to pseudo terminal devices, allowing local users to write to (but not read from) them.
A source code patch is available for 5.7.
+ - No longer hold the kernel lock when calling bpf.
+
- Make bpf_mtap MP-safe by using srp.
+
- Avoid a TOCTOU problem in if_input in the bpf handling.
+
- In tmux(1), come out of copy mode when history is cleared.
+
+
- Add Loongson 3A support.
+
- On alpha, consider ISA interrupts level-triggered if the SRM has explicitly set them up that way. This makes the kernel correctly run with serial console on the Multia.
+
- Enable AlphaBook 1 support in alpha bsd.rd.
+
- In smtpd(8):
+
+- Increase the size of acceptable headers lines.
+
- Assume messages use 8-bit bytes by default.
+
+
+ - Remove charsets other than UTF-8 from locale(1) output.
+
- Load LC_MESSAGES locale only if the character encoding is UTF-8.
+
- Disable support for loading LC_CTYPE locales other than UTF-8.
+
- In swapctl(8), use vfork(2) & execl(2) instead of system(3) when invoking mount_nfs(8).
+
- In myx(4):
+
+- Rework the way the packets on the rx rings are tracked.
+
- Move to a per rx ring timeout for refilling empty rings. This gets rid of the locking around the refilling of the rx ring.
+
- Use a single atomic op instead of one per packet when doing global tx free accounting. This allows packets to be sent a little faster.
+
+ - On macppc and powerpc, replace the assembly mutexes with a C implementation.
+
+
- Add ml_requeue(9) and mq_requeue(9) to prepend mbufs on lists/queues.
+
- Move the locate(1) database build directory back to /tmp.
+
- In ntpd(8), avoid calling poll() multiple times with no timeout, racking up CPU time for no real reason.
+
- Add the -A, -P and -t options to nm(1).
+
- Remove discarded attributes from disktab(5).
+
- In rc(8), improve the sysctl.conf(5), mixerctl.conf(5) and wsconsctl(5) parsers.
+
- Let pkg_create(1) recreate packages correctly.
+
- Prevent an mbuf leak when no handler consumed that mbuf.
+
+
- Fix a case where ceill(3) returns 1.0L.
+
- Rework the /etc/rc script.
+
- In tmux(1), add the "-of" suffix to the "left", "right", "up" and "down" special tokens for the pane index.
+
- Plug two memory leaks in ti(4).
+
+
- In acpihpet(4), check for a proper HPET period value during attach.
+
- In file(1), add various improvements to the magic(5) parser.
+
- In sndiod(8), don't make system calls when not being used.
+
- Update time zone data to tzdata2015f.
+
- Fix recent regressions in ugold(4).
+
+
- Improve openssl(1) s_client -starttls xmpp support.