===================================================================
RCS file: /cvsrepo/anoncvs/cvs/www/plus.html,v
retrieving revision 1.1378
retrieving revision 1.1379
diff -u -r1.1378 -r1.1379
--- www/plus.html 2016/02/29 19:48:01 1.1378
+++ www/plus.html 2016/02/29 19:50:50 1.1379
@@ -75,6 +75,160 @@
+
+- Add the _rebound user and group in order to improve privdrop for rebound(8).
+
- Use pledge(2) in ftp(1), identd(8), login_token(8), rebound(8) and sdiff(1).
+
- Import rebound(8), a lightweight DNS proxy.
+
- In disklabel(8), remove -B.
+
- In x99token(1), avoid a race between fopen(3) and fchmod(2). This prevents an attacker to open an old file with wrong permissions before the secret is written into it. It also guarantees that a new file with correct permissions is created.
+
- On vax, use MI installboot(8) instead of "disklabel -B" to install boot blocks.
+
- Add proper support for vax to installboot(8).
+
- Use pledge(2) in x99token(1).
+
- Remove the "!" (subshell) and "v" (edit) commands from the ramdisk more(1) command.
+
- On octeon, let the rx path of cnmac(4) run without the kernel lock.
+
- In smtpctl(8), allow "all" as an argument for the "resume envelope", "pause envelope" and "remove" subcommands.
+
+
- In tcpdump(8), fix a crash that occurs when printing the filename in a malformed NFS request packet.
+
- 5.6, 5.7 and 5.8 RELIABILITY FIX: the OBJ_obj2txt function in libcrypto contains a one byte buffer overrun and memory leak.
A source code patch is available for 5.6, 5.7, 5.8.
+ - In tar(1), use a strict $PATH to run the (de)compressors.
+
- In newsyslog.conf(5), allow the wheel group to read /var/log/maillog.
+
- RELEASE CD ISSUE: the "src.tar.gz" file on the source tree was created on the wrong day and does not match the 5.8 release builds.
A replacement file is available for 5.8.
+ - 5.6, 5.7 and 5.8 RELIABILITY FIX: a problem with timer kevents could result in a kernel hang (local denial of service).
A source code patch is available for 5.6, 5.7 and 5.8.
+ - In ping6(8), use ping(8)-like semantics for -I.
+
- In sort(1), copy permissions and ownership when -o will override an input file.
+
- In fsck_ext2fs(8), fsck_ffs(8) and fsck_msdos(8), only accept one filesystem/device as argument for checking.
+
- Use pledge(2) in banner(6), bcd(6), caesar(6), factor(6), fsck_ext2fs(8), fsck_ffs(8), fsck_msdos(8), login_passwd(8), login_reject(8), morse(6), number(6), pig(6), pom(6), ppt(6), rain(6) and random(6).
+
+
- In ugen(4), prevent a NULL-pointer dereference when closing a ugen(4) node in case the kernel failed to change the interface of a device.
+
- In mg(1), check if a file name can be extracted from a line before marking for deletion.
+
- In sort(1), ignore the setuid/setgid/sticky bits when copying the permissions of an input file to the new output file.
+
- In ping6(8), remove the -b flag.
+
- Make sure RTF_LOCAL route entries are UP when added to the tree.
+
- Use pledge(2) in crunchgen(8), lockspool(1), mklocale(1), netgroup_mkdb(8), newfs_ext2fs(8), nologin(8), smtpd(8). syslogc(8) and yes(1),
+
+
- In mg(1), when refreshing a dired buffer, avoid losing the files marked for deletion.
+
- In ping6(8), deprecate and remove the -W flag.
+
- Make ftp(1) non-static, allowing for better ASLR.
+
- In ntpd(8), improve the privsep design. In particular, remove the delays that have been introduced by expensive constraint forks.
+
- Use pledge(2) in apropos(1), config(8), dev_mkdb(8), help(1), kvm_mkdb(8), mailwrapper(8), makewhatis(8), man(1), mandoc(1), mesg(1), mkuboot(8), mksuncd(1), skey(1) and whatis(1).
+
+
- Use pledge(2) in ac(8), biff(1), clri(8), clri(8)/pax(1)/tar(1), tunefs(8) and zdump(8).
+
- In bgpd.conf(5), allow the blackhole well-known community to be given by name.
+
- In bgpctl(8), add "best" as an alias for "selected".
+
- In pkg-config(1), handle comma-separated list of arguments.
+
+
- Disallow "rm -rf /".
+
- Always set the timeout at least one tick in the future for EVFILT_TIMER to avoid looping in softclock().
+
- In bc(1), avoid fork/execve of dc(1). This allows a for a strong pledge(2).
+
- Use pledge(2) in apply(1), arithmetic(6), awk(1), dvmrpctl(8), encrypt(1), env(1), fsirand(8), fstat(1), gencat(1), infocmp(1), kill(1), ln(1), lndir(1), pflogd(8), pkill(1), rcs(1), rpcgen(1), scan_ffs(8), sdiff(1), sendbug(1), spell(1), tftpd(8), tic(1), time(1), tsort(1), ul(1), unexpand(1), which(1), xargs(1), yacc(1) and ypcat(1).
+
- In asmc(4), add location to the fan description.
+
- In mg(1), make functions that accept multiple iterations via C-u N, honour 0. Except C-k which has a defined behaviour.
+
- Make tcpdump(8) print more information from the HT Capabilities element.
+
+
- In syslogd(8), if it is started with -S, it accepts TLS connections to receive encrypted messages and the server certificates are taken from /etc/ssl.
+
- Use pledge(2) in cmp(1), du(1), eigrpctl(8), eigrpd(8), getcap(1), getent(1), ksh(1), lex(1), ospf6ctl(8), relayctl(8) and relayd(8).
+
- In ksh(1), disable the mknod builtin.
+
- In comsat(8), remove NFS spool support.
+
- In syslogd(8), add the -S option to accept TLS connections and receive encrypted messages.
+
- In smtpd(8), turn the local enqueuer setgid(2) _smtpq and restrict access to the offline queue.
+
- In mg(1), fix a line number bug when calling onlywind().
+
- Use pledge(2) in comsat(8), ospfctl(8), ripctl(8), syslogd(8) and tradcpp(1).
+
+
- Rename tame(2) to pledge(2).
+
- On amd64 and i386, increase the HEAP_LIMIT from 0x90000 to 0xA0000, to fix an out-of-heap when booting on a large block size (32K) partition.
+
- In tame(2), add the "mcast" request that exposes a small set of multicast (IP_MULTICAST_IF, IP_ADD_MEMBERSHIP and IP_DROP_MEMBERSHIP) join operators.
+
- In ksh(1), don't open history files that don't belong to the user.
+
- Lock the page queues by turning uvm_lock_pageq() and uvm_unlock_pageq() into mtx_enter() and mtx_leave() operations.
+
- Use tame(2) in make(1), portmap(8) and signify(1).
+
- In trunk(4), if the mbuf has a valid flowid, use it instead of using siphash24 and a bunch of header fields we have to parse the mbuf for.
+
- Unlock the softnet task.
+
- In httpd(8), fix an fd leak if a socket connection fails.
+
- In snmpd(8):
+
+- Use correct return value for IP-MIB::ipForwarding.
+
- Fix getbulk requests for multiple OIDs.
+
+
+ - Add initial support for UEFI/GPT installs to the installer.
+
- In ssh(1), include PubkeyAcceptedKeyTypes in "ssh -G" config dump.
+
- In g++(1), correct handling of enum attributes.
+
- In tmux(1), fix a couple of memory leaks in error paths.
+
- Use tame(2) in cp(1), ctags(1), from(1), getopt(1), head(1), htpasswd(1), lastcomm(1), logname(1), look(1), mkdir(1), mktemp(1), nl(1), paste(1), pr(1), printenv(1), readlink(1), rev(1), rmdir(1), split(1), tee(1), tftp(1), tty(1), users(1) and uudecode(1).
+
+
- In installboot(8), add initial support for installing UEFI boot files to a GPT EFI System Partition.
+
- In ssh(1), make it possible to use tun(4) and tap(4) networking as non-root user if device permissions and interface flags are pre-established.
+
- In em(4), fix the watchdog timeouts reported by various people.
+
- In skeyinit(1), remove the -C option that converts an S/Key database to the new format.
+
- In smtpd(8), fix a memory leak in an error path.
+
- Use tame(2) in csplit(1), date(1), ed(1), join(1), jot(1), lam(1), lock(1), openssl(1), printf(1), tail(1), touch(1), tr(1), units(1), unvis(1) and what(1).
+
+
- Fix cu(1) to make xmodem work with -d.
+
- In diff(1), remove the non-standard -l flag that pipes the output through pr(1).
+
- On the alpha ramdisk, remove cd(4).
+
- Use tame(2) in bgpd(8), cal(1), col(1), colrm(1), column(1), comm(1), cut(1), deroff(1), diff(1), diff3(1), dirname(1), expand(1), fgen(1), find(1), fmt(1), fold(1), hexdump(1), id(1), indent(1), kdump(1), logger(1), nm(1), rs(1), stat(1), unifdef(1), vis(1) and write(1).
+
+
- In disklabel(8), remove -B support on landisk. It has been superseded by MI installboot(8).
+
- On landisk, use MI installboot(8) instead of disklabel(8) -B to put boot blocks on installation media.
+
- In fdisk(8), enhance -g to create a default GPT label in addition to the protective MBR. If -b is specified, an EFI System partition of the requested size is created.
+
- In eigrpd(8):
+
+- Add option to configure or disable the DUAL active timeout.
+
- Ignore IPv4 TLVs in IPv6 instances and vice-versa.
+
- When the SIA state is declared for a given destination, reset the adjacency with the unresponsive neighbor(s).
+
+ - Add the _eigrpd user and group for eigrpd(8).
+
- In rcctl(8), make it possible to give the same action to several daemons at once.
+
- In asmc(4), check the validity flag earlier and do not try to attach invalid (non-existing) keys.
+
- In ahci(4), fix a memory leak in an error path.
+
- Apply the tame(2) facility to banner(1), dd(1), df(1), dmesg(8), expr(1), file(1), ls(1) and pwd(1).
+
+
- Enable eigrpd(8) and eigrpctl(8).
+
- In dc(1):
+
+- Remove the "!" command. This makes dc(1) better tameable.
+
- Use tame(2).
+
+ - On octeon, fix a memory leak in an error code path.
+
- Use tame(2) in cat(1), echo(1), test(1), uname(1) and wc(1).
+
- Add IPv6 transport for pflow(4) data.
+
- When multiple vxlan(4) interfaces are configured with same VNI, select the interface whose tunnel destination corresponded to the incoming packets' source address.
+
- In libssl, fix reference counting and memory leak in error path in an error path.
+
+
- Use tame(2) in acpidump(8), arp(8), basename(1), chflags(1), finger(1), grep(1), gzip(1), kdump(1), leave(1), md5(1), ntpctl(8), ntpd(8), patch(1), ping(8), ping6(8), script(1), sed(1), sleep(1), sshd(8), tcpdump(8), traceroute(8), uniq(1) and whois(1).
+
- Revert the mmap(2) unlock. It causes vnode-related panics on several architectures in the codepath that implements mmap(2).
+
- In iked(8):
+
+- Fix EAP (user-based auth) with IKEv2 in El Capitan.
+
- Remove MD5 from the default proposals
+
+ - Fix EAP (user-based auth) with IKEv2 in El Capitan.
+
- In pfctl(8), make the "-s all" option show queues.
+
- In libssl, conform with RFC 5280 for times allowed in a X509 certificate.
+
- In snmpd(8), mitigate the risk of user-injected file descriptor leakage from the optional world-writable restricted control socket.
+
+
- Add ktracing of argv and envp to execve(2), with envp not traced by default.
+
- Add eigrpd(8) (and eigrpctl(8)), an Enhanced Interior Gateway Routing Protocol daemon.
+
- 5.6, 5.7 and 5.8 SECURITY FIX: multiple reliability and security issues in smtpd(8).
A source code patch is available for 5.6, 5.7 and 5.8.
+ - In smtpd(8):
+
+- Do not allow connection IDs to wrap and collide with another active connection ID. This allows a local user to force the daemon to exit.
+
- Fix a stack-based buffer overflow in the token expansion code of the (unprivileged) lookup process. This allows a local user to crash the server or potentially to execute arbitrary code.
+
- Allow reading of imsg while discarding fd's when reading from a context where we don't expect/want to receive one. This prevents a local user from exhausting resources and causing smtpd to hang by crafting valid imsg that don't expect a descriptor but passing one anyway.
+
- Prevent users from playing hardlink/symlink/mkfifo games with their offline messages and ~/.forward files. This allows a a local user to hang smtpd or even reset chflags and read the first line of an arbitrary file.
+
- Do not exit on unexpected causes of SIGCHLD. This allows a specially crafted mda to cause smtpd to exit.
+
- Make uid checking on ~/.forward files more strict. This avoids users from creating hardlink to root-owned files and leaking the first line.
+
- Fix a use-after-free and out-of-bounds memory reads in the (unprivileged) lookup process. This avoids crashes or potential arbitrary code execution.
+
+ - Update to tzdata2015g from ftp.iana.org.
+
- In asmc(4), relax vendor comparison to match variations found in older models such as the MacMini1,1.
+
- On alpha, make the pmap (more) MP-safe by protecting both the pmap itself and the pv lists with a mutex. This should make pmap_enter(9), pmap_remove(9) and pmap_page_protect(9) safe to use without holding the kernel lock.
+
- In iked(8), fix several interoperability issues:
+
+- If we don't get a (valid) CERTREQ but a CERT, respond with a local CERT that was selected based on our own policy instead of leaving it out. This seems to be valid with the RFC that makes the CERTREQ optional and allows to ignore it or to apply an own policy.
+
- Don't reject an "empty" CERTREQ (one with no CA hashes), instead treat it as if no CERTREQ were received. This may fix other interoperability issues.
+
+ - In sndio(7), remove support for the AUCAT_COOKIE environment variable.
+
- Update to pixman 0.32.8.
- On amd64, add asmc(4), a driver for the Apple System Management Controller (SMC).
- Implement a new "prot_exec" tame(2) request.