[BACK]Return to plus.html CVS log [TXT][DIR] Up to [local] / www

Diff for /www/plus.html between version 1.1378 and 1.1379

version 1.1378, 2016/02/29 19:48:01 version 1.1379, 2016/02/29 19:50:50
Line 75 
Line 75 
 <p>  <p>
   
 <ul>  <ul>
   <!-- 2015-10-15 -->
   <li>Add the _rebound user and group in order to improve privdrop for <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/rebound.8">rebound(8)</a>.
   <li>Use <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man2/pledge.2">pledge(2)</a> in <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/ftp.1">ftp(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/identd.8">identd(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/login_token.8">login_token(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/rebound.8">rebound(8)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/sdiff.1">sdiff(1)</a>.
   <li>Import <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/rebound.8">rebound(8)</a>, a lightweight DNS proxy.
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/disklabel.8">disklabel(8)</a>, remove -B.
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/x99token.1">x99token(1)</a>, avoid a race between <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man3/fdopen.3">fopen(3)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man2/chmod.2">fchmod(2)</a>. This prevents an attacker to open an old file with wrong permissions before the secret is written into it. It also guarantees that a new file with correct permissions is created.
   <li>On vax, use MI <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/installboot.8">installboot(8)</a> instead of "<a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/disklabel.8">disklabel</a> -B" to install boot blocks.
   <li>Add proper support for vax to <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/installboot.8">installboot(8)</a>.
   <li>Use <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man2/pledge.2">pledge(2)</a> in <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/x99token.1">x99token(1)</a>.
   <li>Remove the "!" (subshell) and "v" (edit) commands from the ramdisk <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/more.1">more(1)</a> command.
   <li>On octeon, let the rx path of <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/octeon/cnmac.4">cnmac(4)</a> run without the kernel lock.
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/mailq.8">smtpctl(8)</a>, allow "all" as an argument for the "resume envelope", "pause envelope" and "remove" subcommands.
   <!-- 2015-10-14 -->
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/tcpdump.8">tcpdump(8)</a>, fix a crash that occurs when printing the filename in a malformed NFS request packet.
   <li><font color="#e00000">5.6, 5.7 and 5.8 RELIABILITY FIX: the OBJ_obj2txt function in libcrypto contains a one byte buffer overrun and memory leak.</font><br>A source code patch is available for <a href="errata56.html#033_obj2txt">5.6</a>, <a href="errata57.html#019_obj2txt">5.7</a>, <a href="errata58.html#007_obj2txt">5.8</a>.
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/tar.1">tar(1)</a>, use a strict $PATH to run the (de)compressors.
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man5/newsyslog.conf.5">newsyslog.conf(5)</a>, allow the wheel group to read /var/log/maillog.
   <li><font color="#e00000">RELEASE CD ISSUE: the "src.tar.gz" file on the source tree was created on the wrong day and does not match the 5.8 release builds.</font><br>A replacement file is available for <a href="errata58.html#006_src">5.8</a>.
   <li><font color="#e00000">5.6, 5.7 and 5.8 RELIABILITY FIX: a problem with timer kevents could result in a kernel hang (local denial of service).</font><br>A source code patch is available for <a href="errata56.html#032_kevent">5.6</a>, <a href="errata57.html#018_kevent">5.7</a> and <a href="errata58.html#005_kevent">5.8</a>.
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/ping6.8">ping6(8)</a>, use <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/ping.8">ping(8)</a>-like semantics for -I.
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/sort.1">sort(1)</a>, copy permissions and ownership when -o will override an input file.
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/fsck_ext2fs.8">fsck_ext2fs(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/fsck_ffs.8">fsck_ffs(8)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/fsck_msdos.8">fsck_msdos(8)</a>, only accept one filesystem/device as argument for checking.
   <li>Use <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man2/pledge.2">pledge(2)</a> in <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man6/banner.6">banner(6)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man6/bcd.6">bcd(6)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man6/caesar.6">caesar(6)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man6/factor.6">factor(6)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/fsck_ext2fs.1">fsck_ext2fs(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/fsck_ffs.1">fsck_ffs(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/fsck_msdos.8">fsck_msdos(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/login_passwd.8">login_passwd(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/login_reject.8">login_reject(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man6/morse.6">morse(6)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man6/number.6">number(6)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man6/pig.6">pig(6)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man6/pom.6">pom(6)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man6/ppt.6">ppt(6)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man6/rain.6">rain(6)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man6/random.6">random(6)</a>.
   <!-- 2015-10-13 -->
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/ugen.4">ugen(4)</a>, prevent a NULL-pointer dereference when closing a <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/ugen.4">ugen(4)</a> node in case the kernel failed to change the interface of a device.
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/mg.1">mg(1)</a>, check if a file name can be extracted from a line before marking for deletion.
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/sort.1">sort(1)</a>, ignore the setuid/setgid/sticky bits when copying the permissions of an input file to the new output file.
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/ping6.8">ping6(8)</a>, remove the -b flag.
   <li>Make sure RTF_LOCAL route entries are UP when added to the tree.
   <li>Use <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man2/pledge.2">pledge(2)</a> in <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/crunchgen.8">crunchgen(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/lockspool.1">lockspool(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/mklocale.1">mklocale(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/netgroup_mkdb.8">netgroup_mkdb(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/newfs_ext2fs.8">newfs_ext2fs(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/nologin.8">nologin(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/smtpd.8">smtpd(8)</a>. <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/syslogc.8">syslogc(8)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/yes.1">yes(1)</a>,
   <!-- 2015-10-12 -->
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/mg.1">mg(1)</a>, when refreshing a dired buffer, avoid losing the files marked for deletion.
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/ping6.8">ping6(8)</a>, deprecate and remove the -W flag.
   <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/ftp.1">ftp(1)</a> non-static, allowing for better ASLR.
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/ntpd.8">ntpd(8)</a>, improve the privsep design. In particular, remove the delays that have been introduced by expensive constraint forks.
   <li>Use <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man2/pledge.2">pledge(2)</a> in <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/apropos.1">apropos(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/config.8">config(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/dev_mkdb.8">dev_mkdb(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/help.1">help(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/kvm_mkdb.8">kvm_mkdb(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/mailwrapper.8">mailwrapper(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/makewhatis.8">makewhatis(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/man.1">man(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/mandoc.1">mandoc(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/mesg.1">mesg(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/mkuboot.8">mkuboot(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/sparc64/mksuncd.1">mksuncd(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/skey.1">skey(1)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/whatis.1">whatis(1)</a>.
   <!-- 2015-10-11 -->
   <li>Use <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man2/pledge.2">pledge(2)</a> in <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/ac.8">ac(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/biff.1">biff(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/clri.8">clri(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/cpio.1">clri(8)</a>/<a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/pax.1">pax(1)</a>/<a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/tar.1">tar(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/tunefs.8">tunefs(8)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/zdump.8">zdump(8)</a>.
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man5/bgpd.conf.5">bgpd.conf(5)</a>, allow the blackhole well-known community to be given by name.
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/bgpctl.8">bgpctl(8)</a>, add "best" as an alias for "selected".
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/pkg-config.1">pkg-config(1)</a>, handle comma-separated list of arguments.
   <!-- 2015-10-10 -->
   <li>Disallow "<a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/rm.1">rm</a> -rf /".
   <li>Always set the timeout at least one tick in the future for EVFILT_TIMER to avoid looping in softclock().
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/bc.1">bc(1)</a>, avoid fork/execve of <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/dc.1">dc(1)</a>. This allows a for a strong <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-5.8/man2/pledge.2">pledge(2)</a>.
   <li>Use <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-5.8/man2/pledge.2">pledge(2)</a> in <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/apply.1">apply(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/arithmetic.6">arithmetic(6)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/awk.1">awk(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/dvmrpctl.8">dvmrpctl(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/encrypt.1">encrypt(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/env.1">env(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/fsirand.8">fsirand(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/fstat.1">fstat(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/gencat.1">gencat(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/infocmp.1">infocmp(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/kill.1">kill(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/ln.1">ln(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/lndir.1">lndir(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/pflogd.8">pflogd(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/pkill.1">pkill(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/rcs.1">rcs(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/rpcgen.1">rpcgen(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/scan_ffs.8">scan_ffs(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/sdiff.1">sdiff(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/sendbug.1">sendbug(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/spell.1">spell(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/tftpd.8">tftpd(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/tic.1">tic(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/time.1">time(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/tsort.1">tsort(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/ul.1">ul(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/unexpand.1">unexpand(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/which.1">which(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/xargs.1">xargs(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/yacc.1">yacc(1)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/ypcat.1">ypcat(1)</a>.
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/asmc.4">asmc(4)</a>, add location to the fan description.
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/mg.1">mg(1)</a>, make functions that accept multiple iterations via C-u N, honour 0. Except C-k which has a defined behaviour.
   <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/tcpdump.8">tcpdump(8)</a> print more information from the HT Capabilities element.
   <!-- 2015-10-09 -->
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/syslogd.8">syslogd(8)</a>, if it is started with -S, it accepts TLS connections to receive encrypted messages and the server certificates are taken from /etc/ssl.
   <li>Use <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-5.8/man2/pledge.2">pledge(2)</a> in <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/cmp.1">cmp(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/du.1">du(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/eigrpctl.8">eigrpctl(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/eigrpd.8">eigrpd(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/getcap.1">getcap(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/getent.1">getent(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/ksh.1">ksh(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/lex.1">lex(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/ospf6ctl.8">ospf6ctl(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/relayctl.8">relayctl(8)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/relayd.8">relayd(8)</a>.
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/ksh.1">ksh(1)</a>, disable the mknod builtin.
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/comsat.8">comsat(8)</a>, remove NFS spool support.
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/syslogd.8">syslogd(8)</a>, add the -S option to accept TLS connections and receive encrypted messages.
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/smtpd.8">smtpd(8)</a>, turn the local enqueuer <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man2/setegid.2">setgid(2)</a> _smtpq and restrict access to the offline queue.
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/mg.1">mg(1)</a>, fix a line number bug when calling onlywind().
   <li>Use <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-5.8/man2/pledge.2">pledge(2)</a> in <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-5.8/man8/comsat.8">comsat(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-5.8/man8/ospfctl.8">ospfctl(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-5.8/man8/ripctl.8">ripctl(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-5.8/man8/syslogd.8">syslogd(8)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-5.8/man1/tradcpp.1">tradcpp(1)</a>.
   <!-- 2015-10-08 -->
   <li>Rename <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-5.8/man2/tame.2">tame(2)</a> to <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man2/pledge.2">pledge(2)</a>.
   <li>On amd64 and i386, increase the HEAP_LIMIT from 0x90000 to 0xA0000, to fix an out-of-heap when booting on a large block size (32K) partition.
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-5.8/man2/tame.2">tame(2)</a>, add the "mcast" request that exposes a small set of multicast (IP_MULTICAST_IF, IP_ADD_MEMBERSHIP and IP_DROP_MEMBERSHIP) join operators.
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/ksh.1">ksh(1)</a>, don't open history files that don't belong to the user.
   <li>Lock the page queues by turning uvm_lock_pageq() and uvm_unlock_pageq() into mtx_enter() and mtx_leave() operations.
   <li>Use <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-5.8/man2/tame.2">tame(2)</a> in <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/make.1">make(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/portmap.8">portmap(8)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/signify.1">signify(1)</a>.
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/trunk.4">trunk(4)</a>, if the mbuf has a valid flowid, use it instead of using siphash24 and a bunch of header fields we have to parse the mbuf for.
   <li>Unlock the softnet task.
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/httpd.8">httpd(8)</a>, fix an fd leak if a socket connection fails.
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/snmpd.8">snmpd(8)</a>:
   <ul>
   <li>Use correct return value for IP-MIB::ipForwarding.
   <li>Fix getbulk requests for multiple OIDs.
   </ul>
   <!-- 2015-10-07 -->
   <li>Add initial support for UEFI/GPT installs to the installer.
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/ssh.1">ssh(1)</a>, include PubkeyAcceptedKeyTypes in "ssh -G" config dump.
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/g++.1">g++(1)</a>, correct handling of enum attributes.
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/tmux.1">tmux(1)</a>, fix a couple of memory leaks in error paths.
   <li>Use <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-5.8/man2/tame.2">tame(2)</a> in <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/cp.1">cp(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/ctags.1">ctags(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/from.1">from(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/getopt.1">getopt(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/head.1">head(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/htpasswd.1">htpasswd(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/lastcomm.1">lastcomm(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/logname.1">logname(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/look.1">look(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/mkdir.1">mkdir(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/mktemp.1">mktemp(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/nl.1">nl(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/paste.1">paste(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/pr.1">pr(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/printenv.1">printenv(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/readlink.1">readlink(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/rev.1">rev(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/rmdir.1">rmdir(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/split.1">split(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/tee.1">tee(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/tftp.1">tftp(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/tty.1">tty(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/users.1">users(1)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/uuencode.1">uudecode(1)</a>.
   <!-- 2015-10-06 -->
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/installboot.8">installboot(8)</a>, add initial support for installing UEFI boot files to a GPT EFI System Partition.
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/ssh.1">ssh(1)</a>, make it possible to use <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/tun.4">tun(4)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/tap.4">tap(4)</a> networking as non-root user if device permissions and interface flags are pre-established.
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/em.4">em(4)</a>, fix the watchdog timeouts reported by various people.
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/skeyinit.1">skeyinit(1)</a>, remove the -C option that converts an S/Key database to the new format.
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/smtpd.8">smtpd(8)</a>, fix a memory leak in an error path.
   <li>Use <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-5.8/man2/tame.2">tame(2)</a> in <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/csplit.1">csplit(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/date.1">date(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/ed.1">ed(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/join.1">join(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/jot.1">jot(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/lam.1">lam(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/lock.1">lock(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/openssl.1">openssl(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/printf.1">printf(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/tail.1">tail(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/touch.1">touch(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/tr.1">tr(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/units.1">units(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/unvis.1">unvis(1)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/what.1">what(1)</a>.
   <!-- 2015-10-05 -->
   <li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/cu.1">cu(1)</a> to make xmodem work with -d.
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/diff.1">diff(1)</a>, remove the non-standard -l flag that pipes the output through <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/pr.1">pr(1)</a>.
   <li>On the alpha ramdisk, remove <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/cd.4">cd(4)</a>.
   <li>Use <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-5.8/man2/tame.2">tame(2)</a> in <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/bgpd.8">bgpd(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/cal.1">cal(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/col.1">col(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/colrm.1">colrm(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/column.1">column(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/comm.1">comm(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/cut.1">cut(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/deroff.1">deroff(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/diff.1">diff(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/diff3.1">diff3(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/dirname.1">dirname(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/expand.1">expand(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/fgen.1">fgen(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/find.1">find(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/fmt.1">fmt(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/fold.1">fold(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/hexdump.1">hexdump(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/id.1">id(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/indent.1">indent(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/kdump.1">kdump(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/logger.1">logger(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/nm.1">nm(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/rs.1">rs(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/stat.1">stat(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/unifdef.1">unifdef(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/vis.1">vis(1)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/write.1">write(1)</a>.
   <!-- 2015-10-04 -->
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/disklabel.8">disklabel(8)</a>, remove -B support on landisk. It has been superseded by MI <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/installboot.8">installboot(8)</a>.
   <li>On landisk, use MI <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/installboot.8">installboot(8)</a> instead of <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/disklabel.8">disklabel(8)</a> -B to put boot blocks on installation media.
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/fdisk.8">fdisk(8)</a>, enhance -g to create a default GPT label in addition to the protective MBR. If -b is specified, an EFI System partition of the requested size is created.
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/eigrpd.8">eigrpd(8)</a>:
   <ul>
   <li>Add option to configure or disable the DUAL active timeout.
   <li>Ignore IPv4 TLVs in IPv6 instances and vice-versa.
   <li>When the SIA state is declared for a given destination, reset the adjacency with the unresponsive neighbor(s).
   </ul>
   <li>Add the _eigrpd user and group for <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/eigrpd.8">eigrpd(8)</a>.
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/rcctl.8">rcctl(8)</a>, make it possible to give the same action to several daemons at once.
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/asmc.4">asmc(4)</a>, check the validity flag earlier and do not try to attach invalid (non-existing) keys.
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/ahci.4">ahci(4)</a>, fix a memory leak in an error path.
   <li>Apply the <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-5.8/man2/tame.2">tame(2)</a> facility to <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/banner.1">banner(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/dd.1">dd(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/df.1">df(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/dmesg.8">dmesg(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/expr.1">expr(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/file.1">file(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/ls.1">ls(1)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/pwd.1">pwd(1)</a>.
   <!-- 2015-10-03 -->
   <li>Enable <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/eigrpd.8">eigrpd(8)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/eigrpctl.8">eigrpctl(8)</a>.
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/dc.1">dc(1)</a>:
   <ul>
   <li>Remove the "!" command. This makes dc(1) better tameable.
   <li>Use <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-5.8/man2/tame.2">tame(2)</a>.
   </ul>
   <li>On octeon, fix a memory leak in an error code path.
   <li>Use <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-5.8/man2/tame.2">tame(2)</a> in <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/cat.1">cat(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/echo.1">echo(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/[.1">test(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/uname.1">uname(1)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/wc.1">wc(1)</a>.
   <li>Add IPv6 transport for <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/pflow.4">pflow(4)</a> data.
   <li>When multiple <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/vxlan.4">vxlan(4)</a> interfaces are configured with same VNI, select the interface whose tunnel destination corresponded to the incoming packets' source address.
   <li>In libssl, fix reference counting and memory leak in error path in an error path.
   <!-- 2015-10-02 -->
   <li>Use <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-5.8/man2/tame.2">tame(2)</a> in <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/acpidump.8">acpidump(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/arp.8">arp(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/basename.1">basename(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/chflags.1">chflags(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/finger.1">finger(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/grep.1">grep(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/gzip.1">gzip(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/kdump.1">kdump(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/leave.1">leave(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/md5.1">md5(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/ntpctl.8">ntpctl(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/ntpd.8">ntpd(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/patch.1">patch(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/ping.8">ping(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/ping6.8">ping6(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/script.1">script(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/sed.1">sed(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/sleep.1">sleep(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/sshd.8">sshd(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/tcpdump.8">tcpdump(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/traceroute.8">traceroute(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/uniq.1">uniq(1)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/whois.1">whois(1)</a>.
   <li>Revert the <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man2/mmap.2">mmap(2)</a> unlock. It causes vnode-related panics on several architectures in the codepath that implements mmap(2).
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/iked.8">iked(8)</a>:
   <ul>
   <li>Fix EAP (user-based auth) with IKEv2 in El Capitan.
   <li>Remove MD5 from the default proposals
   </ul>
   <li>Fix EAP (user-based auth) with IKEv2 in El Capitan.
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/pfctl.8">pfctl(8)</a>, make the "-s all" option show queues.
   <li>In libssl, conform with RFC 5280 for times allowed in a X509 certificate.
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/snmpd.8">snmpd(8)</a>, mitigate the risk of user-injected file descriptor leakage from the optional world-writable restricted control socket.
   <!-- 2015-10-01 -->
   <li>Add ktracing of argv and envp to <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man2/execve.2">execve(2)</a>, with envp not traced by default.
   <li>Add <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/eigrpd.8">eigrpd(8)</a> (and <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/eigrpctl.8">eigrpctl(8)</a>), an Enhanced Interior Gateway Routing Protocol daemon.
   <li><font color="#e00000">5.6, 5.7 and 5.8 SECURITY FIX: multiple reliability and security issues in <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/smtpd.8">smtpd(8)</a>.</font><br>A source code patch is available for <a href="errata56.html#031_smtpd">5.6</a>, <a href="errata57.html#017_smtpd">5.7</a> and <a href="errata58.html#004_smtpd">5.8</a>.
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/smtpd.8">smtpd(8)</a>:
   <ul>
   <li>Do not allow connection IDs to wrap and collide with another active connection ID. This allows a local user to force the daemon to exit.
   <li>Fix a stack-based buffer overflow in the token expansion code of the (unprivileged) lookup process. This allows a local user to crash the server or potentially to execute arbitrary code.
   <li>Allow reading of imsg while discarding fd's when reading from a context where we don't expect/want to receive one. This prevents a local user from exhausting resources and causing smtpd to hang by crafting valid imsg that don't expect a descriptor but passing one anyway.
   <li>Prevent users from playing hardlink/symlink/mkfifo games with their offline messages and ~/.forward files. This allows a a local user to hang smtpd or even reset chflags and read the first line of an arbitrary file.
   <li>Do not exit on unexpected causes of SIGCHLD. This allows a specially crafted mda to cause smtpd to exit.
   <li>Make uid checking on ~/.forward files more strict. This avoids users from creating hardlink to root-owned files and leaking the first line.
   <li>Fix a use-after-free and out-of-bounds memory reads in the (unprivileged) lookup process. This avoids crashes or potential arbitrary code execution.
   </ul>
   <li>Update to tzdata2015g from ftp.iana.org.
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/asmc.4">asmc(4)</a>, relax vendor comparison to match variations found in older models such as the MacMini1,1.
   <li>On alpha, make the pmap (more) MP-safe by protecting both the pmap itself and the pv lists with a mutex. This should make <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man9/pmap_enter.9">pmap_enter(9)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man9/pmap_remove.9">pmap_remove(9)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man9/pmap_page_protect.9">pmap_page_protect(9)</a> safe to use without holding the kernel lock.
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/iked.8">iked(8)</a>, fix several interoperability issues:
   <ul>
   <li>If we don't get a (valid) CERTREQ but a CERT, respond with a local CERT that was selected based on our own policy instead of leaving it out. This seems to be valid with the RFC that makes the CERTREQ optional and allows to ignore it or to apply an own policy.
   <li>Don't reject an "empty" CERTREQ (one with no CA hashes), instead treat it as if no CERTREQ were received. This may fix other interoperability issues.
   </ul>
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man7/sndio.7">sndio(7)</a>, remove support for the AUCAT_COOKIE environment variable.
   <li>Update to pixman 0.32.8.
 <!-- 2015-09-30 -->  <!-- 2015-09-30 -->
 <li>On amd64, add <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/asmc.4">asmc(4)</a>, a driver for the Apple System Management Controller (SMC).  <li>On amd64, add <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/asmc.4">asmc(4)</a>, a driver for the Apple System Management Controller (SMC).
 <li>Implement a new "prot_exec" <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-5.8/man2/tame.2">tame(2)</a> request.  <li>Implement a new "prot_exec" <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-5.8/man2/tame.2">tame(2)</a> request.
Legend:
Removed from v.1.1378  
changed lines
  Added in v.1.1379