===================================================================
RCS file: /cvsrepo/anoncvs/cvs/www/plus.html,v
retrieving revision 1.1404
retrieving revision 1.1405
diff -u -r1.1404 -r1.1405
--- www/plus.html 2018/04/06 14:46:20 1.1404
+++ www/plus.html 2018/04/16 14:29:51 1.1405
@@ -84,6 +84,71 @@
+
+- Fix "heap full" errors in the amd64 boot loader when loading microcode.
+
- Add support in com(4) for Exar XR17V354 4-port devices.
+
+
- Add TCP support to snmpd(8). Apart from processing multiple requests in parallel, this implements RFC 3430.
+
- Make relayd(8) set destination host state to HOST_DOWN in case of TCP read timeout.
+
- 6.1, 6.2 and 6.3 SECURITY FIX: Correct heap overflow bugs in perl(1).
A source code patch is available for 6.1, 6.2 and 6.3.
+
+ - Make ENGINE_finish() succeed on NULL in LibreSSL, simplifies caller code.
+
- Make ksh(1) count $SECONDS using monotonic clock.
+
- Fix for mg(1) when trying to write backups in home dir when run under a different effective user.
+
+
- Remove hfsc support from pfctl(8).
+
- Don't panic if ipmi_sendcmd() fails.
+
- Make sshd(8) more resilient against user enumeration timing attacks.
+
- Implemented MAP_STACK option for mmap(2). At pagefaults and syscalls the kernel will check that the SP points to MAP_STACK memory.
+
+
- Stop using the PID in ping(8).
+
- Make httpd(8) listen on all IPv4 and IPv6 addresses for "listen on *".
+
- More steps for i386 Meltdown fixes, will trigger some performance issues.
+
- Make re(4) handle newer devices with only 64bit BARs, and map 32bit BAR as a fallback.
+
+
- Add mixer save/restore capability to the audio(4) driver for use during suspend/resume.
+
- Add support in umsm(4) for Huawei k3772-based devices.
+
- Make sasyncd(8) schedule events against the monotonic clock so it fires punctually even if system clock is changed.
+
- Have fstat(1) print rtable for internet sockets unless it's the default.
+
- In tmux(1), add x and X to choose-tree to kill an item.
+
- Make sure the kernel doesn't call logwakeup() while holding a mutex to prevent lock ordering issues.
+
+
- Make mandoc(1) define a previously undefined integer as being zero.
+
- Make ksh(1) support 64bit integer operations on 32bit arches too.
+
- Added octcrypto(4), a driver for the octeon cryptographic unit, providing hardware-accelerated implementations for several encryption and authentication algorithms for ipsec(4). Disabled for now.
+
+
- Make smtpd(8) spfwalk check for legitimate IPv4 and IPv6 addresses before printing.
+
- Make headers, manpages and kernel prefer and recommend AF_UNIX name rather than AF_LOCAL.
+
- In kqueue, test for preexisting conditions when re-enabling events.
+
- Make pcidump(8) print BARs for bridges as well.
+
- On amd64, add support for EFI Random Number Generator and use it to XOR random data into the kernel.
+
- Add a hook to the standalone boot code to use a firmware-supplied random function in addition of the machine dependent random function to insert entropy into the booted kernel.
+
+
- IPv6 fix for gif(4).
+
- Attach the mbuf tag on output gif(4) packets to suppress loops over the interface and avoid leak of the tag on every packet.
+
- For certain arm devices, if the PHY address isn't specified, only attach a single PHY. Makes Theobrama Systems RK3399-Q7 SoM network interfaces work.
+
- Make shutdown(8) print deadline estimates in the local timezone.
+
- Simplify dd(1) SIGINFO output routines so the summary printout becomes atomic.
+
- Enable islrtc(4) on arm64 GENERIC and RAMDISK kernels.
+
- Added islrtc(4), a driver for the ISL208 real time clock.
+
- Work around libtool exec limitations.
+
- Correct libtls tls_config_clear_keys(3) behaviour, leaving other configuration data intact.
+
- In libtls, switch to OPENSSL_init_ssl(3) to prevent an openssl configuration file from being loaded behind our backs.
+
- Add support in dwmmc(4) for GPIO card detection.
+
- Increase em(4) delay after reset to 20ms and add a fix for i219 based devices.
+
+
- In UEFI, respect the parts where mappings indicate they can be made non-readable, non-executable or read-only.
+
- Fixed tmpfs(4) to not attempt calling copyin(9) itself.
+
- Patch binutils 2.17 so it passes option -Wno-null-pointer-arithmetic when compiled with LLVM 6.0.0.
+
- Updated llvm to 6.0.0.
+
- Make fstat(1) print a p flag for file descriptors opened after pledge(2).
+
- Better rounding to cylinder boundaries in disklabel(8).
+
- In ssh(1), allow "Sendenv -PATTERN" to clear environment previously labeled for sending.
+
- Fix file descriptor leak in httpd(8) after processing ranged requests.
+
- Use existing pf state to speed up UDP socket lookup.
+
- Fix memory leak in libcrypto if EVP_Digest() fails.
+
+
- In libcrypto, tighten up various checks for X509_VERIFY_PARAM functions.
- In ssh(1), relax checking of authorized_keys environment="..." options to allow underscores in variable names
- Stop using a non-portable .R man(7) macro in mandoc(1).
- Update mandoc(1) to use documented and portable character escape sequences for .Do/.Dq.