===================================================================
RCS file: /cvsrepo/anoncvs/cvs/www/plus.html,v
retrieving revision 1.1463
retrieving revision 1.1464
diff -u -r1.1463 -r1.1464
--- www/plus.html	2019/12/07 04:41:22	1.1463
+++ www/plus.html	2019/12/12 19:30:16	1.1464
@@ -90,7 +90,34 @@
 <p>
 
 <ul>
+<!-- 2019/12/10 -->
+<li>Provided proper concurrency control when pausing a vm in <a href="https://man.openbsd.org/vmd">vmd(8)</a>.
+<li>Fixed <a href="https://man.openbsd.org/isakmpd">isakmpd(8)</a> IKE pcap file creation.
+<!-- 2019/12/09 -->
+<li>Fixed empty response packages sent out by <a href="https://man.openbsd.org/ripd">ripd(8)</a> when entries are skipped due to split-horizon simple.
+<li>Swapped <a href="https://man.openbsd.org/smtpd">smtpd(8)</a> filter response protocol fields to match query protocol. Filters used will need updating.
+<li>Re-enabled "syscall call-from" checking.
+<li>Modified -z mode verification in <a href="https://man.openbsd.org/signify">signify(1)</a> to save the header and output it, so signify -zV >saved.tgz will keep the signature for later checks.
+<!-- 2019/12/08 -->
+<li>Reduced the maximum number of frame buffers for <a href="https://man.openbsd.org/uvideo">uvideo(4)</a> to allow running higher resolutions without running out of kernel memory.
+<li>Removed kernel VM86 support.
+<li>Added a check when IP forwarding is disabled to ensure packet destination address matches interface address.
+<!-- 2019/12/07 -->
+<li>Reset the login class each time through the loop when using -L (loop) mode with <a href="https://man.openbsd.org/su">su(1)</a>. Fixes CVE-2019-19519.
+<!-- 2019/12/06 -->
+<li>Retired piixpcib(4).
+<li>Stopped hardcoding the cache directory for <a href="https://man.openbsd.org/rpki-client">rpki-client(8)</a>. Cache and output directory will use defaults for root users and must be specified by non-root users.
+<!-- 2019/12/05 -->
+<li>Enabled full use of jumbo frames on <a href="https://man.openbsd.org/bnx">bnx(4)</a> devices.
+<!-- 2019/12/04 -->
+<li>Added DEBUG_PKG_CACHE functionality to <a href="https://man.openbsd.org/pkg_add">pkg_add(1)</a>, fetching debug patches when packages are installed.
+<li>Fixed <a href="https://man.openbsd.org/xenodm">xenodm(1)</a> to use the libc authentication layer correctly.
+<li>Fixed insufficient username validation performed by libc's authentication privilege separation layer and added additional validation points, further validating in <a href="https://man.openbsd.org/login">login(1)</a> and <a href="https://man.openbsd.org/su">su(1)</a>.
+<li>Fixed a panic when tearing down vms with <a href="https://man.openbsd.org/vmm">vmm(4)</a>.
 <!-- 2019/12/03 -->
+<li>Prevented a <a href="https://man.openbsd.org/radiusd">radiusd(8)</a> crash when user does not exist.
+<li>Prevented escalation to the auth group in <a href="https://man.openbsd.org/xlock">xlock(1)</a> through path-related environment variables and disabled mesa and opengl functionality.  
+<li>Added display of mode sense data to <a href="https://man.openbsd.org/scsi">scsi(8)</a> debug.
 <li>Added <a href="https://man.openbsd.org/pwmfan">pwmfan(4)</a>, a driver for PWM-regulated fans.
 <li>Added <a href="https://man.openbsd.org/rkpwm">rkpwm(4)</a>, a driver for the RK3399's PWM controller.
 <li>Added support for the RK3399's PWM clock to <a href="https://man.openbsd.org/rkclock">rkclock(4)</a>.