[BACK]Return to plus.html CVS log [TXT][DIR] Up to [local] / www

Diff for /www/plus.html between version 1.1380 and 1.1381

version 1.1380, 2016/02/29 20:14:58 version 1.1381, 2016/02/29 21:16:41
Line 76 
Line 76 
 <p>  <p>
   
 <ul>  <ul>
 <<<<<<< plus.html  <li>Nothing yet.
 =======  
 <!-- 2015-10-15 -->  
 <li>Add the _rebound user and group in order to improve privdrop for <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/rebound.8">rebound(8)</a>.  
 <li>Use <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man2/pledge.2">pledge(2)</a> in <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/ftp.1">ftp(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/identd.8">identd(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/login_token.8">login_token(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/rebound.8">rebound(8)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/sdiff.1">sdiff(1)</a>.  
 <li>Import <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/rebound.8">rebound(8)</a>, a lightweight DNS proxy.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/disklabel.8">disklabel(8)</a>, remove -B.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/x99token.1">x99token(1)</a>, avoid a race between <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man3/fdopen.3">fopen(3)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man2/chmod.2">fchmod(2)</a>. This prevents an attacker to open an old file with wrong permissions before the secret is written into it. It also guarantees that a new file with correct permissions is created.  
 <li>On vax, use MI <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/installboot.8">installboot(8)</a> instead of "<a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/disklabel.8">disklabel</a> -B" to install boot blocks.  
 <li>Add proper support for vax to <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/installboot.8">installboot(8)</a>.  
 <li>Use <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man2/pledge.2">pledge(2)</a> in <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/x99token.1">x99token(1)</a>.  
 <li>Remove the "!" (subshell) and "v" (edit) commands from the ramdisk <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/more.1">more(1)</a> command.  
 <li>On octeon, let the rx path of <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/octeon/cnmac.4">cnmac(4)</a> run without the kernel lock.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/mailq.8">smtpctl(8)</a>, allow "all" as an argument for the "resume envelope", "pause envelope" and "remove" subcommands.  
 <!-- 2015-10-14 -->  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/tcpdump.8">tcpdump(8)</a>, fix a crash that occurs when printing the filename in a malformed NFS request packet.  
 <li><font color="#e00000">5.6, 5.7 and 5.8 RELIABILITY FIX: the OBJ_obj2txt function in libcrypto contains a one byte buffer overrun and memory leak.</font><br>A source code patch is available for <a href="errata56.html#033_obj2txt">5.6</a>, <a href="errata57.html#019_obj2txt">5.7</a>, <a href="errata58.html#007_obj2txt">5.8</a>.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/tar.1">tar(1)</a>, use a strict $PATH to run the (de)compressors.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man5/newsyslog.conf.5">newsyslog.conf(5)</a>, allow the wheel group to read /var/log/maillog.  
 <li><font color="#e00000">RELEASE CD ISSUE: the "src.tar.gz" file on the source tree was created on the wrong day and does not match the 5.8 release builds.</font><br>A replacement file is available for <a href="errata58.html#006_src">5.8</a>.  
 <li><font color="#e00000">5.6, 5.7 and 5.8 RELIABILITY FIX: a problem with timer kevents could result in a kernel hang (local denial of service).</font><br>A source code patch is available for <a href="errata56.html#032_kevent">5.6</a>, <a href="errata57.html#018_kevent">5.7</a> and <a href="errata58.html#005_kevent">5.8</a>.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/ping6.8">ping6(8)</a>, use <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/ping.8">ping(8)</a>-like semantics for -I.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/sort.1">sort(1)</a>, copy permissions and ownership when -o will override an input file.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/fsck_ext2fs.8">fsck_ext2fs(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/fsck_ffs.8">fsck_ffs(8)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/fsck_msdos.8">fsck_msdos(8)</a>, only accept one filesystem/device as argument for checking.  
 <li>Use <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man2/pledge.2">pledge(2)</a> in <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man6/banner.6">banner(6)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man6/bcd.6">bcd(6)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man6/caesar.6">caesar(6)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man6/factor.6">factor(6)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/fsck_ext2fs.1">fsck_ext2fs(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/fsck_ffs.1">fsck_ffs(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/fsck_msdos.8">fsck_msdos(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/login_passwd.8">login_passwd(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/login_reject.8">login_reject(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man6/morse.6">morse(6)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man6/number.6">number(6)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man6/pig.6">pig(6)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man6/pom.6">pom(6)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man6/ppt.6">ppt(6)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man6/rain.6">rain(6)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man6/random.6">random(6)</a>.  
 <!-- 2015-10-13 -->  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/ugen.4">ugen(4)</a>, prevent a NULL-pointer dereference when closing a <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/ugen.4">ugen(4)</a> node in case the kernel failed to change the interface of a device.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/mg.1">mg(1)</a>, check if a file name can be extracted from a line before marking for deletion.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/sort.1">sort(1)</a>, ignore the setuid/setgid/sticky bits when copying the permissions of an input file to the new output file.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/ping6.8">ping6(8)</a>, remove the -b flag.  
 <li>Make sure RTF_LOCAL route entries are UP when added to the tree.  
 <li>Use <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man2/pledge.2">pledge(2)</a> in <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/crunchgen.8">crunchgen(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/lockspool.1">lockspool(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/mklocale.1">mklocale(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/netgroup_mkdb.8">netgroup_mkdb(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/newfs_ext2fs.8">newfs_ext2fs(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/nologin.8">nologin(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/smtpd.8">smtpd(8)</a>. <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/syslogc.8">syslogc(8)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/yes.1">yes(1)</a>,  
 <!-- 2015-10-12 -->  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/mg.1">mg(1)</a>, when refreshing a dired buffer, avoid losing the files marked for deletion.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/ping6.8">ping6(8)</a>, deprecate and remove the -W flag.  
 <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/ftp.1">ftp(1)</a> non-static, allowing for better ASLR.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/ntpd.8">ntpd(8)</a>, improve the privsep design. In particular, remove the delays that have been introduced by expensive constraint forks.  
 <li>Use <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man2/pledge.2">pledge(2)</a> in <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/apropos.1">apropos(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/config.8">config(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/dev_mkdb.8">dev_mkdb(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/help.1">help(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/kvm_mkdb.8">kvm_mkdb(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/mailwrapper.8">mailwrapper(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/makewhatis.8">makewhatis(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/man.1">man(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/mandoc.1">mandoc(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/mesg.1">mesg(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/mkuboot.8">mkuboot(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/sparc64/mksuncd.1">mksuncd(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/skey.1">skey(1)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/whatis.1">whatis(1)</a>.  
 <!-- 2015-10-11 -->  
 <li>Use <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man2/pledge.2">pledge(2)</a> in <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/ac.8">ac(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/biff.1">biff(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/clri.8">clri(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/cpio.1">clri(8)</a>/<a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/pax.1">pax(1)</a>/<a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/tar.1">tar(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/tunefs.8">tunefs(8)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/zdump.8">zdump(8)</a>.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man5/bgpd.conf.5">bgpd.conf(5)</a>, allow the blackhole well-known community to be given by name.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/bgpctl.8">bgpctl(8)</a>, add "best" as an alias for "selected".  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/pkg-config.1">pkg-config(1)</a>, handle comma-separated list of arguments.  
 <!-- 2015-10-10 -->  
 <li>Disallow "<a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/rm.1">rm</a> -rf /".  
 <li>Always set the timeout at least one tick in the future for EVFILT_TIMER to avoid looping in softclock().  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/bc.1">bc(1)</a>, avoid fork/execve of <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/dc.1">dc(1)</a>. This allows a for a strong <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-5.8/man2/pledge.2">pledge(2)</a>.  
 <li>Use <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-5.8/man2/pledge.2">pledge(2)</a> in <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/apply.1">apply(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/arithmetic.6">arithmetic(6)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/awk.1">awk(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/dvmrpctl.8">dvmrpctl(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/encrypt.1">encrypt(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/env.1">env(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/fsirand.8">fsirand(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/fstat.1">fstat(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/gencat.1">gencat(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/infocmp.1">infocmp(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/kill.1">kill(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/ln.1">ln(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/lndir.1">lndir(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/pflogd.8">pflogd(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/pkill.1">pkill(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/rcs.1">rcs(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/rpcgen.1">rpcgen(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/scan_ffs.8">scan_ffs(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/sdiff.1">sdiff(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/sendbug.1">sendbug(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/spell.1">spell(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/tftpd.8">tftpd(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/tic.1">tic(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/time.1">time(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/tsort.1">tsort(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/ul.1">ul(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/unexpand.1">unexpand(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/which.1">which(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/xargs.1">xargs(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/yacc.1">yacc(1)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/ypcat.1">ypcat(1)</a>.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/asmc.4">asmc(4)</a>, add location to the fan description.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/mg.1">mg(1)</a>, make functions that accept multiple iterations via C-u N, honour 0. Except C-k which has a defined behaviour.  
 <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/tcpdump.8">tcpdump(8)</a> print more information from the HT Capabilities element.  
 <!-- 2015-10-09 -->  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/syslogd.8">syslogd(8)</a>, if it is started with -S, it accepts TLS connections to receive encrypted messages and the server certificates are taken from /etc/ssl.  
 <li>Use <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-5.8/man2/pledge.2">pledge(2)</a> in <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/cmp.1">cmp(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/du.1">du(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/eigrpctl.8">eigrpctl(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/eigrpd.8">eigrpd(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/getcap.1">getcap(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/getent.1">getent(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/ksh.1">ksh(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/lex.1">lex(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/ospf6ctl.8">ospf6ctl(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/relayctl.8">relayctl(8)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/relayd.8">relayd(8)</a>.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/ksh.1">ksh(1)</a>, disable the mknod builtin.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/comsat.8">comsat(8)</a>, remove NFS spool support.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/syslogd.8">syslogd(8)</a>, add the -S option to accept TLS connections and receive encrypted messages.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/smtpd.8">smtpd(8)</a>, turn the local enqueuer <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man2/setegid.2">setgid(2)</a> _smtpq and restrict access to the offline queue.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/mg.1">mg(1)</a>, fix a line number bug when calling onlywind().  
 <li>Use <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-5.8/man2/pledge.2">pledge(2)</a> in <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-5.8/man8/comsat.8">comsat(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-5.8/man8/ospfctl.8">ospfctl(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-5.8/man8/ripctl.8">ripctl(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-5.8/man8/syslogd.8">syslogd(8)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-5.8/man1/tradcpp.1">tradcpp(1)</a>.  
 <!-- 2015-10-08 -->  
 <li>Rename <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-5.8/man2/tame.2">tame(2)</a> to <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man2/pledge.2">pledge(2)</a>.  
 <li>On amd64 and i386, increase the HEAP_LIMIT from 0x90000 to 0xA0000, to fix an out-of-heap when booting on a large block size (32K) partition.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-5.8/man2/tame.2">tame(2)</a>, add the "mcast" request that exposes a small set of multicast (IP_MULTICAST_IF, IP_ADD_MEMBERSHIP and IP_DROP_MEMBERSHIP) join operators.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/ksh.1">ksh(1)</a>, don't open history files that don't belong to the user.  
 <li>Lock the page queues by turning uvm_lock_pageq() and uvm_unlock_pageq() into mtx_enter() and mtx_leave() operations.  
 <li>Use <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-5.8/man2/tame.2">tame(2)</a> in <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/make.1">make(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/portmap.8">portmap(8)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/signify.1">signify(1)</a>.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/trunk.4">trunk(4)</a>, if the mbuf has a valid flowid, use it instead of using siphash24 and a bunch of header fields we have to parse the mbuf for.  
 <li>Unlock the softnet task.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/httpd.8">httpd(8)</a>, fix an fd leak if a socket connection fails.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/snmpd.8">snmpd(8)</a>:  
 <ul>  
 <li>Use correct return value for IP-MIB::ipForwarding.  
 <li>Fix getbulk requests for multiple OIDs.  
 </ul>  
 <!-- 2015-10-07 -->  
 <li>Add initial support for UEFI/GPT installs to the installer.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/ssh.1">ssh(1)</a>, include PubkeyAcceptedKeyTypes in "ssh -G" config dump.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/g++.1">g++(1)</a>, correct handling of enum attributes.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/tmux.1">tmux(1)</a>, fix a couple of memory leaks in error paths.  
 <li>Use <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-5.8/man2/tame.2">tame(2)</a> in <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/cp.1">cp(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/ctags.1">ctags(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/from.1">from(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/getopt.1">getopt(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/head.1">head(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/htpasswd.1">htpasswd(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/lastcomm.1">lastcomm(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/logname.1">logname(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/look.1">look(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/mkdir.1">mkdir(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/mktemp.1">mktemp(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/nl.1">nl(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/paste.1">paste(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/pr.1">pr(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/printenv.1">printenv(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/readlink.1">readlink(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/rev.1">rev(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/rmdir.1">rmdir(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/split.1">split(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/tee.1">tee(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/tftp.1">tftp(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/tty.1">tty(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/users.1">users(1)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/uuencode.1">uudecode(1)</a>.  
 <!-- 2015-10-06 -->  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/installboot.8">installboot(8)</a>, add initial support for installing UEFI boot files to a GPT EFI System Partition.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/ssh.1">ssh(1)</a>, make it possible to use <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/tun.4">tun(4)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/tap.4">tap(4)</a> networking as non-root user if device permissions and interface flags are pre-established.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/em.4">em(4)</a>, fix the watchdog timeouts reported by various people.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/skeyinit.1">skeyinit(1)</a>, remove the -C option that converts an S/Key database to the new format.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/smtpd.8">smtpd(8)</a>, fix a memory leak in an error path.  
 <li>Use <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-5.8/man2/tame.2">tame(2)</a> in <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/csplit.1">csplit(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/date.1">date(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/ed.1">ed(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/join.1">join(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/jot.1">jot(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/lam.1">lam(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/lock.1">lock(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/openssl.1">openssl(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/printf.1">printf(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/tail.1">tail(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/touch.1">touch(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/tr.1">tr(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/units.1">units(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/unvis.1">unvis(1)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/what.1">what(1)</a>.  
 <!-- 2015-10-05 -->  
 <li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/cu.1">cu(1)</a> to make xmodem work with -d.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/diff.1">diff(1)</a>, remove the non-standard -l flag that pipes the output through <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/pr.1">pr(1)</a>.  
 <li>On the alpha ramdisk, remove <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/cd.4">cd(4)</a>.  
 <li>Use <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-5.8/man2/tame.2">tame(2)</a> in <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/bgpd.8">bgpd(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/cal.1">cal(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/col.1">col(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/colrm.1">colrm(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/column.1">column(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/comm.1">comm(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/cut.1">cut(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/deroff.1">deroff(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/diff.1">diff(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/diff3.1">diff3(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/dirname.1">dirname(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/expand.1">expand(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/fgen.1">fgen(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/find.1">find(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/fmt.1">fmt(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/fold.1">fold(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/hexdump.1">hexdump(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/id.1">id(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/indent.1">indent(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/kdump.1">kdump(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/logger.1">logger(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/nm.1">nm(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/rs.1">rs(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/stat.1">stat(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/unifdef.1">unifdef(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/vis.1">vis(1)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/write.1">write(1)</a>.  
 <!-- 2015-10-04 -->  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/disklabel.8">disklabel(8)</a>, remove -B support on landisk. It has been superseded by MI <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/installboot.8">installboot(8)</a>.  
 <li>On landisk, use MI <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/installboot.8">installboot(8)</a> instead of <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/disklabel.8">disklabel(8)</a> -B to put boot blocks on installation media.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/fdisk.8">fdisk(8)</a>, enhance -g to create a default GPT label in addition to the protective MBR. If -b is specified, an EFI System partition of the requested size is created.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/eigrpd.8">eigrpd(8)</a>:  
 <ul>  
 <li>Add option to configure or disable the DUAL active timeout.  
 <li>Ignore IPv4 TLVs in IPv6 instances and vice-versa.  
 <li>When the SIA state is declared for a given destination, reset the adjacency with the unresponsive neighbor(s).  
 </ul>  
 <li>Add the _eigrpd user and group for <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/eigrpd.8">eigrpd(8)</a>.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/rcctl.8">rcctl(8)</a>, make it possible to give the same action to several daemons at once.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/asmc.4">asmc(4)</a>, check the validity flag earlier and do not try to attach invalid (non-existing) keys.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/ahci.4">ahci(4)</a>, fix a memory leak in an error path.  
 <li>Apply the <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-5.8/man2/tame.2">tame(2)</a> facility to <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/banner.1">banner(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/dd.1">dd(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/df.1">df(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/dmesg.8">dmesg(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/expr.1">expr(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/file.1">file(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/ls.1">ls(1)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/pwd.1">pwd(1)</a>.  
 <!-- 2015-10-03 -->  
 <li>Enable <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/eigrpd.8">eigrpd(8)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/eigrpctl.8">eigrpctl(8)</a>.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/dc.1">dc(1)</a>:  
 <ul>  
 <li>Remove the "!" command. This makes dc(1) better tameable.  
 <li>Use <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-5.8/man2/tame.2">tame(2)</a>.  
 </ul>  
 <li>On octeon, fix a memory leak in an error code path.  
 <li>Use <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-5.8/man2/tame.2">tame(2)</a> in <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/cat.1">cat(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/echo.1">echo(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/[.1">test(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/uname.1">uname(1)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/wc.1">wc(1)</a>.  
 <li>Add IPv6 transport for <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/pflow.4">pflow(4)</a> data.  
 <li>When multiple <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/vxlan.4">vxlan(4)</a> interfaces are configured with same VNI, select the interface whose tunnel destination corresponded to the incoming packets' source address.  
 <li>In libssl, fix reference counting and memory leak in error path in an error path.  
 <!-- 2015-10-02 -->  
 <li>Use <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-5.8/man2/tame.2">tame(2)</a> in <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/acpidump.8">acpidump(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/arp.8">arp(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/basename.1">basename(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/chflags.1">chflags(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/finger.1">finger(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/grep.1">grep(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/gzip.1">gzip(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/kdump.1">kdump(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/leave.1">leave(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/md5.1">md5(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/ntpctl.8">ntpctl(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/ntpd.8">ntpd(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/patch.1">patch(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/ping.8">ping(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/ping6.8">ping6(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/script.1">script(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/sed.1">sed(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/sleep.1">sleep(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/sshd.8">sshd(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/tcpdump.8">tcpdump(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/traceroute.8">traceroute(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/uniq.1">uniq(1)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/whois.1">whois(1)</a>.  
 <li>Revert the <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man2/mmap.2">mmap(2)</a> unlock. It causes vnode-related panics on several architectures in the codepath that implements mmap(2).  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/iked.8">iked(8)</a>:  
 <ul>  
 <li>Fix EAP (user-based auth) with IKEv2 in El Capitan.  
 <li>Remove MD5 from the default proposals  
 </ul>  
 <li>Fix EAP (user-based auth) with IKEv2 in El Capitan.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/pfctl.8">pfctl(8)</a>, make the "-s all" option show queues.  
 <li>In libssl, conform with RFC 5280 for times allowed in a X509 certificate.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/snmpd.8">snmpd(8)</a>, mitigate the risk of user-injected file descriptor leakage from the optional world-writable restricted control socket.  
 <!-- 2015-10-01 -->  
 <li>Add ktracing of argv and envp to <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man2/execve.2">execve(2)</a>, with envp not traced by default.  
 <li>Add <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/eigrpd.8">eigrpd(8)</a> (and <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/eigrpctl.8">eigrpctl(8)</a>), an Enhanced Interior Gateway Routing Protocol daemon.  
 <li><font color="#e00000">5.6, 5.7 and 5.8 SECURITY FIX: multiple reliability and security issues in <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/smtpd.8">smtpd(8)</a>.</font><br>A source code patch is available for <a href="errata56.html#031_smtpd">5.6</a>, <a href="errata57.html#017_smtpd">5.7</a> and <a href="errata58.html#004_smtpd">5.8</a>.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/smtpd.8">smtpd(8)</a>:  
 <ul>  
 <li>Do not allow connection IDs to wrap and collide with another active connection ID. This allows a local user to force the daemon to exit.  
 <li>Fix a stack-based buffer overflow in the token expansion code of the (unprivileged) lookup process. This allows a local user to crash the server or potentially to execute arbitrary code.  
 <li>Allow reading of imsg while discarding fd's when reading from a context where we don't expect/want to receive one. This prevents a local user from exhausting resources and causing smtpd to hang by crafting valid imsg that don't expect a descriptor but passing one anyway.  
 <li>Prevent users from playing hardlink/symlink/mkfifo games with their offline messages and ~/.forward files. This allows a a local user to hang smtpd or even reset chflags and read the first line of an arbitrary file.  
 <li>Do not exit on unexpected causes of SIGCHLD. This allows a specially crafted mda to cause smtpd to exit.  
 <li>Make uid checking on ~/.forward files more strict. This avoids users from creating hardlink to root-owned files and leaking the first line.  
 <li>Fix a use-after-free and out-of-bounds memory reads in the (unprivileged) lookup process. This avoids crashes or potential arbitrary code execution.  
 </ul>  
 <li>Update to tzdata2015g from ftp.iana.org.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/asmc.4">asmc(4)</a>, relax vendor comparison to match variations found in older models such as the MacMini1,1.  
 <li>On alpha, make the pmap (more) MP-safe by protecting both the pmap itself and the pv lists with a mutex. This should make <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man9/pmap_enter.9">pmap_enter(9)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man9/pmap_remove.9">pmap_remove(9)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man9/pmap_page_protect.9">pmap_page_protect(9)</a> safe to use without holding the kernel lock.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/iked.8">iked(8)</a>, fix several interoperability issues:  
 <ul>  
 <li>If we don't get a (valid) CERTREQ but a CERT, respond with a local CERT that was selected based on our own policy instead of leaving it out. This seems to be valid with the RFC that makes the CERTREQ optional and allows to ignore it or to apply an own policy.  
 <li>Don't reject an "empty" CERTREQ (one with no CA hashes), instead treat it as if no CERTREQ were received. This may fix other interoperability issues.  
 </ul>  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man7/sndio.7">sndio(7)</a>, remove support for the AUCAT_COOKIE environment variable.  
 <li>Update to pixman 0.32.8.  
 <!-- 2015-09-30 -->  
 <li>On amd64, add <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/asmc.4">asmc(4)</a>, a driver for the Apple System Management Controller (SMC).  
 <li>Implement a new "prot_exec" <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-5.8/man2/tame.2">tame(2)</a> request.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/em.4">em(4)</a>, run the tx completion path without the kernel lock held.  
 <li>Do not try to refetch a route at the L2 layer if the given one is down and always return EHOSTUNREACH.  
 <li>Remove Cisco HDLC support from <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/sppp.4">sppp(4)</a>. It is no longer used.  
 <li>Update to libxcb 1.11.1.  
 <li>Hopefully fix the stability problems seen on SandyBridge and up after the PPGTT code got enabled.  
 <!-- 2015-09-29 -->  
 <li>On mips64, fix the R8000 kernel to have all their m[ft]c0 instructions correctly wrapped.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/oce.4">oce(4)</a>, unlock interrupt handler rx path with <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man9/intr_barrier.9">intr_barrier(9)</a>.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/mg.1">mg(1)</a>, fix the location of the cursor when opening a directory using filevisit, findvisitalt and poptofile.  
 <li>Add support for the Huawei K4511 3G to <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/umsm.4">umsm(4)</a>.  
 <!-- 2015-09-28 -->  
 <li><font color="#e00000">5.7 and 5.8 SECURITY FIX: an incorrect operation in uvm could result in system panic.</font><br>A source code patch is available for <a href="errata57.html#016_uvm">5.7</a> and <a href="errata58.html#003_uvm">5.8</a>.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man2/mmap.2">mmap(2)</a>, remove the no longer needed kernel lock in the fixed case.  
 <li>Add the UVM_FLAG_UNMAP flag to indicate to <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man9/UVM_MAPFLAG.9">uvm_map(9)</a> that it should unmap to make space.  
 <li><font color="#e00000">5.7 RELIABILITY FIX: various problems were identified in relayd.</font><br>A source code patch is available for <a href="errata57.html#015_relayd">5.7</a>.  
 <li>Fix a panic in <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/inteldrm.4">inteldrm(4)</a>.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-5.8/man2/tame.2">tame(2)</a>, make using the "/" path work.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/mg.1">mg(1)</a>, make dired mode treat a double "/" in a path like fundamental mode.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/inteldrm.4">inteldrm(4)</a>, no longer support the "Quanta Transcode" device. This avoids incorrectly overriding the generic match for the HD Graphics P4000.  
 <!-- 2015-09-27 -->  
 <li>Enable monitor hot plugging for the framebuffer console.  
 <li>Add IP26 kernels and boot blocks to the installation media.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/iwm.4">iwm(4)</a>:  
 <ul>  
 <li>Fix problems occurring when doing bsd.rd upgrades.  
 <li>Fix the bug where the firmware stops passing traffic after the MAC address is changed.  
 </ul>  
 <li>Add the Ed25519 SSH host key to <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man5/changelist.5">changelist(5)</a>.  
 <!-- 2015-09-26 -->  
 <li>Make carp_input() MP-safe.  
 <li>Prevent X from crashing the kernel when attaching <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/inteldrm.4">inteldrm(4)</a> fails.  
 <li>Protect the list of free map entries with a mutex. This should fix crashes on i386.  
 <li>Unlock the <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man2/mmap.2">mmap(2)</a> system call.  
 <li>Add transpose-paragraphs to <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/mg.1">mg(1)</a>.  
 <li>Correct a range problem in citrus-utf8 version of <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man3/wcrtomb.3">wcrtomb(3)</a> in order to match RFC 3629.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/inteldrm.4">inteldrm(4)</a>:  
 <ul>  
 <li>Make the PPGTT code work. This seems to fix the caching issues on Broadwell.  
 <li>Don't hardcode the type of BARs to be 64-bit.  
 </ul>  
 <!-- 2015-09-25 -->  
 <li>On octeon and sgi, restore the interrupt mask even on secondary CPUs. This prevents the IPI from being left disabled accidentally on a non-primary CPU which will cause the system to hang eventually.  
 <li>On octeon, let MP-safe interrupt handlers run without the kernel lock.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/mandoc.1">mandoc(1)</a>, fix multiple aspects of SYNOPSIS .Nm formatting.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/tmux.1">tmux(1)</a>, if the terminal has colors=256, only try to use setaf/setab if they exist.  
 <li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/inteldrm.4">inteldrm(4)</a> on the GM45 chipset.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/slowcgi.8">slowcgi(8)</a>, output the contents of the environment in debug mode.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/inteldrm.4">inteldrm(4)</a>:  
 <ul>  
 <li>Disable IPS for now. It causes unsynched displays after waking it from standby or after VT switches.  
 <li>Backport some of the Broadwell fixes.  
 </ul>  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/tmux.1">tmux(1)</a>, free the history when it is cleared.  
 <li>Ensure the GPT header size is in a valid range before checksumming it. This prevents a crash.  
 <li>Ensure that RTF_LOCAL route entries always stay UP, even when a link state change occurs.  
 <!-- 2015-09-24 -->  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/inteldrm.4">inteldrm(4)</a>:  
 <ul>  
 <li>Properly implement waitqueue_active().  
 <li>Enable MSIs on hardware that supports it.  
 </ul>  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/disklabel.8">disklabel(8)</a>, expunge VAX SMD special handling.  
 <li>On sgi, properly handle IP26 streaming cache controller bus error interrupts.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/mg.1">mg(1)</a>, fix where the cursor is positioned after expunging files.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/trunk.4">trunk(4)</a>, avoid theoretical <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man9/m_pullup.9">m_pullup(9)</a> mishandling by delegating the mbuf reclaiming to the PDU and marker input routines.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/tmux.1">tmux(1)</a>, fix two fd leaks and a memory leak.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/ssh.1">ssh(1)</a>, add the CertificateFile option to explicitly list a certificate (bz#2436).  
 <!-- 2015-09-23 -->  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/mg.1">mg(1)</a>:  
 <ul>  
 <li>Fix multiple iterations of kill-paragraph.  
 <li>Add mark-paragraph.  
 </ul>  
 <li>Update inteldrm to the code from Linux 3.14.52.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/ld.so.1">ld.so(1)</a> on alpha, avoid write-protecting .data when it shares a page with the GOT and PLT.  
 <li>On mips64:  
 <ul>  
 <li>When inserting an entry for a KV1 address, avoid having to write back the ASID value.  
 <li>Use conditional instructions when picking a random TLB set number.  
 </ul>  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/iwm.4">iwm(4)</a>:  
 <ul>  
 <li>While not associated, pass the broadcast ethernet address to the firmware, rather than zeros.  
 <li>Properly reset the RX ring by clearing RX buffer status memory.  
 </ul>  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/cwm.1">cwm(1)</a>, avoid unnecessary pointer querying.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/trunk.4">trunk(4)</a>:  
 <ul>  
 <li>Remove watchdog code since it doesn't do anything useful.  
 <li>Adapt code to avoid locking protection in the future.  
 </ul>  
 <!-- 2015-09-22 -->  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/mg.1">mg(1)</a>, fix line number handling in dired delete functions.  
 <li>Prevent the efiboot and kernel memory regions from overlapping. This fixes a problem where the kernel fails to boot.  
 <li>When a connected route is deleted, pass the corresponding priority to <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man9/rtrequest1.9">rtrequest1(9)</a>. Otherwise the route will remain attached to a stale ifa.  
 <!-- 2015-09-21 -->  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/mandoc.1">mandoc(1)</a>, account for significant whitespace when determining the width of a tag.  
 <li>Remove SHA-0 and MD2 remnants from <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/openssl.1">openssl(1)</a>.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/bpgd.8">bpgd(8)</a>:  
 <ul>  
 <li>Allow for empty blocks for peers.  
 <li>Allow to log all updates sent from an individual peer, and, when applied to a group, to disable logging on a sub-member of the group.  
 </ul>  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/tmux.1">tmux(1)</a>, reset the alerts timer always on activity.  
 <li>Fix a couple of <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/libtool.1">libtool(1)</a> issues.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/mg.1">mg(1)</a>, fix behaviour when opening the same directory twice in dired mode.  
 <!-- 2015-09-20 -->  
 <li>On alpha, powerpc and mips64, fix membar positioning in <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man9/mtx_enter_try.9">mtx_enter_try(9)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man9/mtx_leave.9">mtx_leave(9)</a>.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/ssh.1">ssh(1)</a>, fix a possible hang on closed output (bz#2469).  
 <li>On sparc, increase MAXTSIZ to 64 MB. This is required for gcc/gnat.  
 <li>Fix suspend on machines with <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/em.4">em(4)</a> now that it uses <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man9/intr_barrier.9">intr_barrier(9)</a>.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/syslogd.8">syslogd(8)</a>, avoid potential event loss due to misuse of TLS read and write in libevent.  
 <li>Enable IP26 builds.  
 <li>On mips64, correctly compute the userland pte index in a pte page in the userland tlb miss handler.  
 <li>Add the -d, -r and -w flags to <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/rmt.8">rmt(8)</a> to make it run in a restricted mode.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/ld.so.1">ld.so(1)</a>, delete the bind lock, the callback, the sigprocmask stub.  
 <!-- 2015-09-19 -->  
 <li>On powerpc, make sure PROT_EXEC is set on the GOT for BSS-PLT binaries.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/em.4">em(4)</a>, avoid using a mutex in the rx completion path. Instead rely on <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man9/intr_barrier.9">intr_barrier(9)</a> to avoid having the interrupt handler touch the rx data structures while the interface is brought down.  
 <!-- 2015-09-18 -->  
 <li>On sgi, go back to the previous approach when managing individual HPC DMA descriptors: provide an optional storage for a copy of the descriptor in the "sync" (fetch) function, and use the returned address afterwards.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/sysmerge.8">sysmerge(8)</a>, in case of a hard error, avoid missing files for comparison at the next run.  
 <li>Fix an uninitialized variable in <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/sgi/iec.4">iec(4)</a>.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/tmux.1">tmux(1)</a>, let the -l option of join-pane and split-window apply to the new pane instead of the old one when -b is also specified.  
 <li>Revert r1.25 of src/lib/libssl/src/crypto/bn/bn_print.c. It introduces a NULL dereference.  
 <li>Implement <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man9/SRPL_INSERT_AFTER_LOCKED.9">SRPL_INSERT_AFTER_LOCKED(9)</a>.  
 <!-- 2015-09-17 -->  
 <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/vmx.4">vmx(4)</a> interrupts MP-safe.  
 <li>Back out r1.125 of src/sys/uvm/uvm_km.c. This avoids page queue corruptions and the resulting uvm_pmr_size_RB_REMOVE_COLOR() faults.  
 <!-- 2015-09-16 -->  
 <li>Update to xserver 1.17.2.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/cc.1">cc(1)</a>, enable -msecure-plt by default on powerpc.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/od.1">od(1)</a>, fix two bugs in the [+]offset[.][Bb] XSI offset syntax.  
 <li>Fix an uninitialized variable in <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/i386/bios.4">bios(4)</a> and in <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/arp.4">arp(4)</a>.  
 <!-- 2015-09-15 -->  
 <li>Fix an overlapping <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man3/memcpy.3">memcpy(3)</a> in <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/sparc64/vdsp.4">vdsp(4)</a>.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/ugen.4">ugen(4)</a>, fix a panic when using pcsc-lite.  
 <!-- 2015-09-14 -->  
 <li>Unbreak booting from GPT partitions.  
 <li>Add <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man3/tls_config_insecure_noverifytime.3">tls_config_insecure_noverifytime(3)</a> to libtls to disable certificate validity checking.  
 <li>In LibreSSL, add support for disabling certificate and CRL validity checking.  
 <!-- 2015-09-13 -->  
 <li>Remove SHA-0 and MD4 support from libcrypto.  
 <li>Put the 12x22 font on alpha and macppc installation kernels.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/netstart.8">netstart(8)</a>, only print the "IPv6 autoconf" line if there are interfaces to configure.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/ssh-add.1">ssh-add(1)</a>, when adding keys to the agent, don't ignore the comment of keys for which the user is prompted for a passphrase.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/tmux.1">tmux(1)</a>, add the -e flag to copy-mode to exit copy mode when scrolling off the bottom.  
 <li>In libcrypto, check ECDH output buffer length and avoid truncation.  
 <li>Introduce <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man9/intr_barrier.9">intr_barrier(9)</a>, an interface that guarantees that an interrupt handler that was running has finished.  
 <li>Introduce sched_barrier(), an interface that acts as a scheduler barrier in the sense that it guarantees that the specified CPU went through the scheduler.  
 <li>Add the Certplus CA root certificate to /etc/ssl/cert.pem.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/nc.1">nc(1)</a>, display negotiated TLS version and cipher suite in verbose mode.  
 <li>In libcrypto, add OPENSSL_cpu_caps(), to return the currently running CPU's specific hardware capabilities users of libcrypto might be interested in.  
 <li>In LibreSSL, if there is hardware acceleration for AES, prefer AES as a symmetric cipher over CHACHA20. Otherwise, prefer CHACHA20 with AES second.  
 <!-- 2015-09-12 -->  
 <li>Make if_get() and vlan_input() MP-safe using SRPs.  
 <li>On arm, use <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man2/kbind.2">kbind(2)</a> for lazy binding GOT/PLT updates.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/openssl.1">openssl(1)</a>:  
 <ul>  
 <li>Fix the "prime" command: when checking a decimal number for primality, do not unnecessarily convert the original decimal number to hex in the output. Hex numbers explicitly specified with -hex remain unchanged.  
 <li>Add support for AEAD algorithms to the "speed" command.  
 <li>Remove support for the SSLEAY_CONF environment variable.  
 </ul>  
 <li>Add an ftpproxy6 rc script. <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/ftp-proxy.8">ftp-proxy(8)</a> can only open one listening socket at a time, so a second instance of the daemon is required.  
 <li>Introduce if_input_local(), a function to feed local traffic back to the protocol queues.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/ping6.8">ping6(8)</a>, avoid out-of-boundary access on invalid or short packet reads.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/ddb.4">ddb(4)</a>, show the non-idle, on-proc threads before showing the stack trace when panicking.  
 <!-- 2015-09-11 -->  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/em.4">em(4)</a>, add support for the 88E1512/88E1514 phys.  
 <li>Update to sqlite3 3.8.11.1.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/acpicpu.4">acpicpu(4)</a>, work around broken AML by treating FFH vendor 8 the same as vendor 1 (Intel).  
 <li>Make the powerpc pmap (more) MP-safe. This should make <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man9/pmap.9">pmap_enter(9), pmap_remove(9) and pmap_page_protect(9)</a> safe to use without holding the kernel lock.  
 <li>Add TLS support to <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/nc.1">nc(1)</a>.  
 <li>Remove RTF_XRESOLVE support from <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/route.4">route(4)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/route.8">route(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/netstat.1">netstat(1)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/route6d.8">route6d(8)</a>.  
 <li>Introduce <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man9/refcnt_init.9">refcnt</a>, a wrapper around reference counts.  
 <li>Introduce <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man9/rtref.9">rtref(9)</a>, a function to increment a reference to a routing entry, and use it in rtable_lookup().  
 <li>In "<a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/ifconfig.8">ifconfig</a> media", stop advertising media with fixed data rates on wireless interfaces.  
 <li>Don't generate ICMPv6 packets with incorrect checksums for dropped IPv6 packets.  
 <li>Fix a use-after-free in <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/route.4">route(4)</a>.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/openssl.1">openssl(1)</a>, remove the engine command and parameters.  
 <li>Save/restore MSR_APICBASE during suspend/resume. This re-enables x2apic on the application processors at resume.  
 <li>Remove the unfinished che(4) driver.  
 <li>In libtls, do not match a wildcard against a name with no host part.  
 <li>Make room for media types of the future: extend the ifmedia word to 64 bits.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/netstart.8">netstart(8)</a>, set "inet6 autoconf" individually on interfaces that have rtsol set in <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man5/hosntame.if.5">hostname.if(5)</a>. Previously, netstart tried to configure them all at once.  
 <li>Take a first step towards making <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/ix.4">ix(4)</a> MP-safe.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/mkhybrid.8">mkhybrid(8)</a>, cast the <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man3/isascii.3">isascii(3)</a> argument to unsigned char, to avoid undefined behaviour.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/qle.4">qle(4)</a>, don't copy more sense data than we have space for. This avoids a crash when trying to talk to a Sun STK6140 (although it still doesn't work).  
 <li>Spoof EFI SYSTEM GPT partitions as MSDOS partitions, as is done with MBR EFI SYSTEM partitions.  
 <li>No longer grab the kernel lock in the interrupt-safe multi page backend allocator implementation. This is possible because that interrupt-safe uvm maps are now properly locked.  
 <li>Fix a NULL dereference in <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/bpf.4">bpf(4)</a>.  
 <li>Fix hangs on systems with more than 7 interfaces.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/ddb.4">ddb(4)</a>, add ps/o to display just the non-idle on-proc threads.  
 <li>Don't spoof GPT OpenBSD partitions. Simply record and use the first one found, as is done in MBR processing.  
 <li>Change device locators type from int to long, for the sake of 64-bit ports without proper device trees.  
 <!-- 2015-09-10 -->  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/ssh.1">ssh(1)</a>, expand %i in ControlPath to UID (bz#2449).  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/openssl.1">openssl(1)</a>, make the s_time command perform a proper shutdown by default. This allows s_time to benchmark a full TLS connection more accurately. The new -no_shutdown flag restores the previous behaviour.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/syslogd.8">syslogd(8)</a>, instead of having global variables containing the libevent structures, allocate them with malloc. This makes the address space layout more random.  
 <li>Add <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man2/kqueue.2">kqueue(2)</a> support for <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/wsmouse.4">wsmouse(4)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/wskbd.4">wskbd(4)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/wsmux.4">wsmux(4)</a>. This is needed for the libinput port.  
 <li>In LibreSSL:  
 <ul>  
 <li>Remove support for DTLS_BAD_VER. We do not support non-standard and incomplete implementations.  
 <li>When loading a DSA key from a raw (without DH parameters) ASN.1 serialization, perform some consistency checks on its "p" and "q" values, and return an error if the checks failed.  
 </ul>  
 <li>Enable GPT in the GENERIC kernel.  
 <li>Avoid division by zero in <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/fsck_ext2fs.8">fsck_ext2fs(8)</a>.  
 <li>Use the full IPv6 source address (rather than only half of it) as input for the syn cache hash. Using only half the address makes it trivial to create syn cache collisions.  
 <li>Move the if input handler list to an SRP list.  
 <li>In libc, add hidden _libc_FOO aliases for the system call stubs.  
 <li>Various cleanups of the <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/ksh.1">ksh(1)</a> code.  
 <li>Several libtls API changes and improvements.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/tmux.1">tmux(1)</a>, add session_last_attached time and format.  
 <li>Remove link_addr(3).  
 <!-- 2015-09-09 -->  
 <li>Add locking for interrupt-safe maps.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/mkhybrid.8">mkhybrid(8)</a>, fix various buffer overflows and make it work on unsigned char platforms.  
 <li>Add client certificate support to libtls.  
 <li>Move to the next <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-5.8/man2/tame.2">tame(2)</a> API. The flags are now passed as a very simple string.  
 <li>Introduce reference counts for interfaces. The new if_put() function releases the reference acquired by if_get().  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/ntpd.8">ntpd(8)</a>, plug a memory leak in an error path.  
 <li>Convert bpf to using an srp list for the list of descriptors.  
 <li>Implement a <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man9/srpl_rc_init.9">singly linked list built with SRPs</a>.  
 <li>On powerpc, it is no longer needed to use <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man2/mprotect.2">mprotect(2)</a> to take away PROT_WRITE. This fixes <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/ld.1">ld(1)</a> -Z and paves the way for the new Secure-PLT ABI.  
 <li>In binutils 2.17, force .ctors, .dtors and .got to be read-only for truly static binaries. This prevents W^X violations on architectures that need an executable GOT (basically BSS-PLT powerpc).  
 <!-- 2015-09-08 -->  
 <li>Prevent <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/nc.1">nc(1)</a> from hanging when writing more than the low water mark of the socket write buffer.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/disklabel.8">disklabel(8)</a>, avoid a SIGSEGV with FGJ malloc.conf flags when a template is used.  
 <li>The default backend allocator implementation no longer needs to grab the kernel lock.  
 <!-- 2015-09-07 -->  
 <li>Build xf86-video-wsfb on amd64 and i386. It can be used by efifb now.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/efifb.4">efifb(4)</a>, make scrolling a bit faster.  
 <li>Delete ktracing of context switches. It is unused and not particularly useful.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/smtpd.8">smtpd(8)</a>, insert a Message-Id header if necessary.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/httpd.8">httpd(8)</a>, prevent a potential double free introduced in r1.64 of src/usr.sbin/httpd/server.c.  
 <!-- 2015-09-06 -->  
 <li>It is no longer necessary to grab the kernel lock for allocating and freeing pages in the (default) single page pool backend allocator.  
 <li>In libc, fix aliasing of sys_errlist, sys_nerr, sys_siglist, and sys_signame to eliminate duplicate copies of the tables and get direct access internally.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/wsfontload.8">wsfontload(8)</a>, avoid a floating point exception when an invalid font width was specified.  
 <li>On the minirootXX.fs and iso images, create an EFI system partition using <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/fdisk.8">fdisk(8)</a> -b and put the UEFI boot loader on there.  
 <li>Add support for QEMU PCI serial devices to <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/puc.4">puc(4)</a>.  
 <!-- 2015-09-05 -->  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/awk.1">awk(1)</a>, revert srand() to its old behaviour with regard to what values it returns.  
 <li>On sgi, remove the need for the memory controller to switch between "fast" and "slow" mode every time a DMA descriptor is updated.  
 <li>Update to xterm 320.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/pms.4">pms(4)</a>:  
 <ul>  
 <li>Improve tap-and-drag detection for ALPS touchpads.  
 <li>Support Synaptics touchpads without W mode.  
 </ul>  
 <li>Use the new resolution framework for wrapping <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man3/catopen.3">catopen(3)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man3/catgets.3">catgets(3)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man3/catclose.3">catclose(3)</a>, and for <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man3/dbopen.3">dbopen(3)</a>.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/wscons.4">wscons(4)</a>, add support for xterm-compatible SGR escapes 39 and 49 (reset fg/bg colour to default).  
 <li>Some symbol cleanup in libc.  
 <!-- 2015-09-04 -->  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/fdisk.8">fdisk(8)</a>, add a -b option, to be used together with -i, to add a special boot partition on architectures that need it.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/audio.4">audio(4)</a>, improve the search for candidates for the wskbd "record level" control. This may fix "record level" keys on certain keyboards.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/ugen.4">ugen(4)</a>, do not use an intermediary buffer on the stack of the caller when submitting a bulk write request. This means big bulk write requests are no longer split into multiple small transfers which libusb consumers do not expect.  
 <li>Give every consumer of the radix tree a chance to explicitly initialize the shared data structures, instead of relying on another subsystem to do the initialization. ART kernels should now be fully usable because <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/pf.4">pf(4)</a> and IPSEC properly initialize the radix tree.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/ssh.1">ssh(1)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/sshd.8">sshd(8)</a>, plug minor memory leaks when options are used more than once (bz#2182).  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/netstat.1">netstat(1)</a>, fix mbuf memory accounting after the recent *8 pool size change.  
 <li>Fix a use-after-free in <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/pflow.4">pflow(4)</a>.  
 <li>Add support for the RTL8168H to <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/re.4">re(4)</a>.  
 <!-- 2015-09-03 -->  
 <li>In libkvm, fix a race when fetching files from the kernel.  
 <li>On i386, fix a race in pmap_page_remove_86() and pmap_page_remove_pae().  
 <li>On amd64, fix a race in pmap_page_remove().  
 <li>Adapt <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/ping.8">ping(8)</a> to <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-5.8/man2/tame.2">tame(2)</a>.  
 <li>In dwc2, fix timeout-related crashes.  
 <li>Again revert the two uses of <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man9/rtisvalid.9">rtisvalid(9)</a>. They break NFS.  
 <li>In dwc2, avoid a possible lock recursion panic on transfer timeout.  
 <li>Modify <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/acpidump.8">acpidump(8)</a> to work on systems booted from efi boot.  
 <li>Bring back the two uses of <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man9/rtisvalid.9">rtisvalid(9)</a>. The bug it exposed has been fixed.  
 <li>Unconditionally set the RTF_UP flags when adding a route to the table. This makes <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/dhclient.8">dhclient(8)</a>-configured default routes usable without relying on the link-state change hooks not present in RAMDISK kernels.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/ugen.4">ugen(4)</a>, do not use an intermediary buffer on the stack of the caller when submitting a read request. This means big read requests are no longer split into multiple small transfers which libusb consumers do not expect.  
 <!-- 2015-09-02 -->  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/smtpd.8">smtpd(8)</a>, remove the session kicking mechanism until it is redesigned. It has an accounting bug leading to some legitimate sessions being kicked if they generate too many consecutive errors.  
 <li>On sparc64, make <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man9/pmap_kenter_pa.9">pmap_kenter_pa(9)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man9/pmap_kremove.9">pmap_kremove(9)</a> MP-safe.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/syslogd.8">syslogd(8)</a>, log a message about failed log attempts using <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man2/sendsyslog.2">sendsyslog(2)</a>.  
 <li>Revert the two uses of <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man9/rtisvalid.9">rtisvalid(9)</a>. It breaks <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/dhclient.8">dhclient(8)</a>-configured networks on RAMDISK kernels.  
 <!-- 2015-09-01 -->  
 <li>Add the uefi boot loader.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/ping6.8">ping6(8)</a>, display the correct source address when using a non-default routing table.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/pf.4">pf(4)</a>, don't let route-to, dup-to and reply-to override the block action.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/syslogd.8">syslogd(8)</a>, bind the *:514 UDP socket with SO_REUSEADDR.  
 <li>On octeon, increase the transfer FIFOs for dwc2. This improves USB performance.  
 <li>Convert the (cached) route entry checks in ip{,6}_output() to <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man9/rtisvalid.9">rtisvalid(9)</a>.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/doas.1">doas(1)</a>, restrict the exec path only if the rule specifies a command.  
 <li>Introduce <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man9/rtisvalid.9">rtisvalid(9)</a>, a function to check if a (cached) route entry can be used or should be released by <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man9/rtfree.9">rtfree(9)</a>.  
 <li>Reject USB requests that could damage the bus integrity.  
 <li>Fix a use-after-free in tame_namei().  
 <li>On powerpc, make <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man9/bus_dmamap_load_raw.9">bus_dmamap_load_raw(9)</a> respect the segment size constraint. This makes <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/xhci.4">xhci(4)</a> work on the G5.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/efifb.4">efifb(4)</a>:  
 <ul>  
 <li>Only advertise the color depth that is actually supported. This makes the xf86-video-wsfb driver work.  
 <li>Map the framebuffer in write-combining mode. This significantly speeds up.  
 </ul>  
 <!-- 2015-08-31 -->  
 <li>In static binaries, invoke <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man2/kbind.2">kbind(2)</a> once to disable it.  
 <li>On m88k and sparc, use <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man2/kbind.2">kbind(2)</a> for lazy binding GOT/PLT updates.  
 <li>It is no longer needed to hold the kernel lock for MP-safe bpfs (again).  
 <li>Bring back the commit that makes bpf_mtap MP-safe by using <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man9/srp_enter.9">srp</a>, but now using <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man9/srp_follow.9">srp_follow(9)</a> to avoid races and corruption.  
 <li>Add <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man9/srp_follow.9">srp_follow(9)</a> which is necessary to correctly order the taking and releasing of SRP critical sections in situations such as following a chain of data structures linked with SRPs.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/dhclient.8">dhclient(8)</a>, accept multiple domain names in dhcp option 15 (Domain Name). This allows <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man5/resolv.conf.5">resolv.conf(5)</a> "search" statements to be built with multiple entries.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/syslogd.8">syslogd(8)</a>, don't truncate program names and hostnames in <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man5/syslog.conf.5">syslog.conf(5)</a>. This fixes matching with IP addresses if syslogd is started with -n.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/efifb.4">efifb(4)</a>, check the driver name so that the driver only attempts to attach when we actually want it to.  
 <li>In binutils 2.17, raise the number of spare local GOT entries from 5 to 7. This fixes building liblto_plugin.so in the gcc 4.9 port.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-5.8/man2/tame.2">tame(2)</a> mode:  
 <ul>  
 <li>Return EPERM for <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man2/chmod.2">*chmod(2)</a> if uid/gid change is not towards cr_uid/cr_gid (effective ids).  
 <li>Consider <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man2/getfsstat.2">getfsstat(2)</a> an RPATH.  
 </ul>  
 <li>Rather than killing when <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man2/chmod.2">*chmod(2)</a> is asked to do setuid/setgid, clear those bits in the request and continue.  
 <li>Do not install connected routes on loopback interfaces. This will allow systems with AUTOCONF'd addresses to see loopback connected routes in the routing table.  
 <li>Fix a use-after-free in <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/uow.4">uow(4)</a>.  
 <li>Compute the checksum before looping back the copy of an IPv6 multicast packet.  
 <!-- 2015-08-30 -->  
 <li>Add a framework for resolving libc namespace issues.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/gunzip.1">gunzip(1)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/uncompress.1">uncompress(1)</a>, ignore setuid/setgid settings from a compress/gzip file.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/mandoc.1">mandoc(1)</a>:  
 <ul>  
 <li>Don't die on an assertion if an .Fo macro lacks its mandatory argument.  
 <li>Drop leading, internal, and trailing blank characters in \o (overstrike) escape sequences.  
 </ul>  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/ping6.8">ping6(8)</a>, remove RH0 support.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/ddb.4">ddb(4)</a>:  
 <ul>  
 <li>Automatically perform traces upon panic.  
 <li>Shrink the message to save vertical space and point to <a href="http://www.openbsd.org/ddb.html">http://www.openbsd.org/ddb.html</a>.  
 </ul>  
 <li>In the kernel, use a global table for domains instead of building a list at run time.  
 <li>Prepare the kernel to boot from UEFI. Amongst other things, add <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/amd64/efifb.4">efifb(4)</a>.  
 <li>Enable <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/xhci.4">xhci(4)</a> on macppc.  
 <li>On macppc, map the whole config1 space based on the size read from the device tree. This allows supplementary PCIe cards to be properly detected and should prevent the kernel from faulting when reading unmapped PCI addresses.  
 <li>Prevent cards with no midi connectors from attaching <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/midi.4">midi(4)</a> devices.  
 <!-- 2015-08-29 -->  
 <li>For <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man2/chmod.2">*chmod(2)</a>, allow S_ISTXT in <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-5.8/man2/tame.2">tame(2)</a> mode.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/mandoc.1">mandoc(1)</a>:  
 <ul>  
 <li>Add a minimal implementation of the read-only number register \n(.$ which returns the number of arguments of the current macro.  
 <li>Implement the escape sequence \\$* which expands to all arguments of the current user-defined macro.  
 <li>Parse and ignore the escape sequences \, and \/.  
 <li>Don't escape breakable hyphens yet when we have to reparse the text line because we spring an input line trap.  
 </ul>  
 <li>Create a miniroot for alpha.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/ws.4">ws(4)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/synaptics.4">synaptics(4)</a>, read multiple events at once.  
 <!-- 2015-08-28 -->  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/tmux.1">tmux(1)</a>, check for name changes at most once every 500 milliseconds.  
 <li>On sparc64, add support for switching CPUs in <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/ddb.4">ddb(4)</a>.  
 <li>On sh, use <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man2/kbind.2">kbind(2)</a> for lazy binding GOT/PLT updates.  
 <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/gdb.1">gdb(1)</a> work again on mips64 PIE binaries by making sure a reasonable 64-bit ABI is selected for 64-bit ELF files instead of a 32-bit ABI.  
 <li><font color="#e00000">5.8 SECURITY FIX: LibreSSL 2.2.2 incorrectly handles ClientHello messages that do not include TLS extensions, resulting in such handshakes being aborted.</font><br>A source code patch is available for <a href="errata58.html#002_sslhello">5.8</a>.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/amd64/apmd.8">apmd(8)</a>, log battery changes every 10%, not every 21%.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/envy.4">envy(4)</a>, disable interrupts while the midi uart is not in use. This avoids generating unused interrupts when a chatty peripheral is connected but not used.  
 <li>In binutils 2.17, add support for Irix-style "64-bit" archives.  
 <li>Fix the build of the drm libraries on sparc64.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/envy.4">envy(4)</a>, fix support of M-Audio Delta 44 cards that use different GPIO pins.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/tmux.1">tmux(1)</a>:  
 <ul>  
 <li>Allow environment variables in #{}.  
 <li>Remove the lock-server option.  
 <li>Plug a memory leak.  
 </ul>  
 <li>In binutils 2.17, do proper GOT slot accounting for symbols that were forced to be local.  
 <!-- 2015-08-27 -->  
 <li>Rework the UNIX domain socket garbage collector.  
 <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/ld.so.1">ld.so(1)</a> work on hppa when _dl_bind_start gets hidden by the version script.  
 <li>Fix rare occurrences of wrong floating-point values with MP kernels on Octeon.  
 <li>On mips64, access the image of the floating point registers via p_md.md_regs instead of directly on the frame. This prevents updates from getting lost.  
 <li>Ensure that <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/syslogd.8">syslogd(8)</a> uses its original command-line arguments when it reloads its configuration and re-executes itself.  
 <li>Prevent a socket that <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man2/poll.2">poll(2)</a> reports is writable from becoming unwritable before <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man2/write.2">write(2)</a> is called.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/doas.1">doas(1)</a>, add a type of "auth-doas" to the perm check to allow <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man5/login.conf.5">login.conf(5)</a> fiddling.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/aucat.1">aucat(1)</a>, allow sparse blocks to be used as silence if samples are encoded as signed integers.  
 <li>Remove SSLv3 support from LibreSSL.  
 <!-- 2015-08-26 -->  
 <li>On hppa, use <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man2/kbind.2">kbind(2)</a> for lazy binding GOT/PLT updates.  
 <li>Add more overflow checks to libexpat.  
 <li><font color="#e00000">5.8 SECURITY FIX: in <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/sshd.8">sshd(8)</a>, inverted logic made PermitRootLogin "prohibit-password" unsafe.</font><br>A source code patch is available for <a href="errata58.html#001_sshd">5.8</a>.  
 <li>Let MBR have priority over GPT.  
 <li>Fix an alignment issue in <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/bridge.4">bridge(4)</a>.  
 <!-- 2015-08-25 -->  
 <li>Add TIOCGETA to the <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-5.8/man2/tame.2">TAME_IOCTL</a> list. This is used by <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man3/readpassphrase.3">readpassphrase(3)</a> and libcurses.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/radiusd.8">radiusd(8)</a>, fix a use-after-free in an error path.  
 <li>On alpha and mips64, use <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man2/kbind.2">kbind(2)</a> for lazy binding GOT/PLT updates.  
 <li>Remove exect(2). It was unused and not portable across arches.  
 <li>Hide many libc symbols that should not be used.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/cron.8">cron(8)</a>, use <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man2/ppoll.2">ppoll(2)</a> instead of <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man2/poll.2">poll(2)</a>. This avoids time conversion issues and eliminates a race condition that could delay SIGCHLD and SIGHUP actions.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/syslogd.8">syslogd(8)</a>, don't use <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man3/strlcpy.3">strlcpy(3)</a> on strings that are not NUL-terminated. This prevents a crash.  
 <li>Fix an out-of-bounds read in <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/tmux.1">tmux(1)</a>.  
 <li>On i386 and powerpc, use <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man2/kbind.2">kbind(2)</a> for lazy binding GOT/PLT updates.  
 <!-- 2015-08-24 -->  
 <li>On i386, enforce the kernel W^X policy by properly setting NX (as needed) for kernel text, PTEs, .rodata, data, bss and the symbol regions.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/restore.8">restore(8)</a>, switch from <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man2/utimes.2">utimes(2)</a> to <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man2/utimensat.2">utimensat(2)</a>.  
 <li>Re-enable GTP support on amd64 and i386.  
 <li>Remove the -h option from <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/radiusd.8">radiusd(8)</a>.  
 <li>Set the required IPL at the syn-cache pool instead of doing a splsoftnet() explicitly.  
 <li>Prevent the kernel from removing connected (/64) routes as soon as it configures an AUTOCONF'd address based on a RA.  
 <li>Fix the GPT code to work with non-DEV_BSIZE disks.  
 <li>Fix a crash in <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/tmux.1">tmux(1)</a>.  
 <li>Fix a cheating bug in <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man6/worm.6">worm(6)</a>.  
 <li>Fix a crash during "<a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/ifconfig.8">ifconfig</a> bridge0 destroy".  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/macppc/bm.4">bm(4)</a>, work around slow transfer speed.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/cwm.1">cwm(1)</a>:  
 <ul>  
 <li>Don't allow freeze operations on fullscreen.  
 <li>Implement _NET_CLIENT_LIST_STACKING.  
 </ul>  
 <li>Use IPL_SOFTNET protection for the pool. This fixes a panic.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/sysmerge.8">sysmerge(8)</a>:  
 <ul>  
 <li>Switch from /usr/share/sysmerge to /var/sysmerge.  
 <li>Use /var/sysmerge/backups for persistent backups and keep three earlier rotations.  
 </ul>  
 <li>Avoid two potential double frees in <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-5.8/man2/tame.2">tame(2)</a>.  
 <!-- 2015-08-23 -->  
 <li>Fix an fd leak in <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/mv.1">mv(1)</a>.  
 <li>Apply a symbol export list to <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/ld.so.1">ld.so(1)</a> with just the expected dl*() and the two symbols needed by gdb.  
 <li>Make the Atom S1200 UART work.  
 <li>In binutils 2.17, introduce -Bsymbolic-functions and related flags.  
 <li>On amd64 and sparc64, use <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man2/kbind.2">kbind(2)</a> for lazy binding GOT/PLT updates.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-5.8/man2/tame.2">tame(2)</a>:  
 <ul>  
 <li>Perform maximum one cwd lookup.  
 <li>Fix /tmp handling of <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man2/unlink.2">unlink(2)</a>.  
 </ul>  
 <li>Update to xf86-video-geode 2.11.17.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/cwm.1">cwm(1)</a>, make CLIENT_STICKY apply to group hide/unhide rather than client hide/unhide.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/cc.1">cc(1)</a>, make the -msecure-plt option work, which is necessary to generate Secure-PLT ABI code.  
 <li>On powerpc, add support for the Secure-PLT ABI variant. This will give us better W^X support on powerpc.  
 <li>In binutils 2.17, fully enable the Secure-PLT ABI.  
 <li>In libc, restore codeset checking instead of silently falling back to ASCII.  
 <li>Revert the bpf+srp commits. They cause problems in a bridge setup.  
 <!-- 2015-08-22 -->  
 <li>Move to the <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-5.8/man2/tame.2">tame(int flags, char *paths[])</a> API/ABI.  
 <li>Explicitly list the symbols permitted to be exported by libc. This will prevent unintentional additions in the future and sets the stage for reductions.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/doas.1">doas(1)</a>, add the cwd context to the syslog entry.  
 <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/urtwn.4">urtwn(4)</a> attach to Netgear WNA1000Mv2.  
 <li>Ensure <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man3/tls_read.3">tls_read(3) and tls_write(3)</a> always set outlen to zero on error.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/rc.8">rc(8)</a>, properly handle double quotes in <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man5/wsconsctl.conf.5">wsconsctl.conf(5)</a>.  
 <!-- 2015-08-21 -->  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/ctags.1">ctags(1)</a>, avoid calling <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man3/system.3">system(3)</a> for the -u option.  
 <li>Update to libdrm 2.4.64.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/ssh.1">ssh(1)</a>, fix printing of HostKeyAlgorithms=+... when using -G.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/sshd.8">sshd(8)</a>, fix expansion of HostkeyAlgorithms=+...  
 <li>Regenerate <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man5/moduli.5">moduli(5)</a>.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/cwm.1">cwm(1)</a>:  
 <ul>  
 <li>Preserve the command list order from .cwmrc.  
 <li>Hide the "term" and "lock" commands in the application menu.  
 <li>Don't let _NET_WM_STATE_STICKY apply to the position and size of a window.  
 <li>Add the client freeze extension to _NET_WM_STATE Atom, allowing flag to persist.  
 </ul>  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/em.4">em(4)</a>, run the part of the interrupt handler that does rx completion without holding the kernel lock.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/relayd.8">relayd(8)</a>, don't drop the reply messages when "check icmp" is used with many hosts.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/httpd.8">httpd(8)</a>, avoid an HTTP 405 error when using the WebDAV MOVE method.  
 <li>Whitelist TIOCGPGRP (for <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man3/tcgetpgrp.3">tcgetpgrp(3)</a>) in TAME_IOCTL.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/azalia.4">azalia(4)</a>, enable beep and CD controls on ALC292.  
 <!-- 2015-08-20 -->  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/sshd.8">sshd(8)</a>, fix the inverted logic that broke PermitRootLogin.  
 <li>If we're allowed to try and use large pages, we try and fit at least 8 of the items. This amortises the per page cost of an item a bit.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/apci.4">acpi(4)</a>, respect the access size when reading or writing to pci config space and ensure writes are properly aligned. This prevents panics and fixes at least battery status passthrough in vmware and the brightness keys on the X220.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man3/exp2.3">exp2(3)</a>, avoid left-shifting a negative integer.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/cwm.1">cwm(1)</a>, make the big move and resize bindings match what is in the manual page.  
 <li>On octeon, use the IPD Clock Count register as a timecounter.  
 <li>Import an alternative routing table backend based on Yoichi Hariguchi's ART implementation.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/identd.8">identd(8)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/tftpd.8">tftpd(8)</a>, use SOCK_NONBLOCK to avoid a FIONBIO <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man2/ioctl.2">ioctl(2)</a>.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/identd.8">identd(8)</a>, don't exit on unknown <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man2/write.2">write(2)</a> failures.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/azalia.4">azalia(4)</a>, enable audio on ThinkPad docks.  
 <li>Reactivate <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-5.8/man2/tame.2">tame(2)</a> after release.  
 <!-- 2015-08-19 -->  
 <li>Remove unused vesafb code.  
 <li>Update to libepoxy 1.3.1.  
 <li>In LibreSSL, properly handle missing TLS extensions in client hello as a non-failure.  
 <li>In ssh:  
 <ul>  
 <li>Don't call <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man2/unlink.2">unlink(2)</a> with an uninitialised path in <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/ssh-keygen.1">ssh-keygen(1)</a>.  
 <li>Don't free an uninitialised pointer in <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/ssh.1">ssh(1)</a>.  
 <li>Fix a double free in an error path.  
 <li>Improve compat matching for WinSCP and add compat matching for FuTTY.  
 </ul>  
 <li>Enable the build of libOSMesa.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/pf.4">pf(4)</a>, keep the IPv6 fragment size as chosen by sender also for packets that are routed on behalf of route-to.  
 <li>Prevent mips64 FPU emulation from corrupting the page queues in MP systems.  
 <li>Do not use a stale local address from the routing table. This prevents an interface address without interface pointer causing a uvm_fault.  
 <li>On octeon, allow booting the SP kernel with a set of CPUs that does not contain core 0.  
 <li>Unbreak the <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/ikectl.8">ikectl(8)</a> "ca" commands after the removal of $ENV:: overwriting in LibreSSL.  
 <!-- 2015-08-18 -->  
 <li>Remove casts from many calls to <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man3/malloc.3">malloc(3)</a>-like functions.  
 <!-- 2015-08-17 -->  
 <li>Update the en_US.UTF-8 locale to Unicode 7.0.0.  
 <li>Remove the last fragments of ST-506 support.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/whois.1">whois(1)</a>, fix whois server detection for new TLDs.  
 <li>Accept NULL pointers in <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man9/rtfree.9">rtfree(9)</a>. This will simplify upcoming conversions of rt_refcnt-- to rtfree(9).  
 <!-- 2015-08-16 -->  
 <li><font color="#e00000">5.6 and 5.7 SECURITY FIX: a change to <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/sshd.8">sshd(8)</a> resulted in incorrect permissions being applied to pseudo terminal devices, allowing local users to write to (but not read from) them.</font><br>A source code patch is available for <a href="errata57.html#014_sshd">5.7</a>.  
 <li>No longer hold the kernel lock when calling bpf.  
 <li>Make bpf_mtap MP-safe by using <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man9/srp_enter.9">srp</a>.  
 <li>Avoid a TOCTOU problem in if_input in the bpf handling.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/tmux.1">tmux(1)</a>, come out of copy mode when history is cleared.  
 <!-- 2015-08-15 -->  
 <li>Add Loongson 3A support.  
 <li>On alpha, consider ISA interrupts level-triggered if the SRM has explicitly set them up that way. This makes the kernel correctly run with serial console on the Multia.  
 <li>Enable AlphaBook 1 support in alpha bsd.rd.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/smtpd.8">smtpd(8)</a>:  
 <ul>  
 <li>Increase the size of acceptable headers lines.  
 <li>Assume messages use 8-bit bytes by default.  
 </ul>  
 <!-- 2015-08-14 -->  
 <li>Remove charsets other than UTF-8 from <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/locale.1">locale(1)</a> output.  
 <li>Load LC_MESSAGES locale only if the character encoding is UTF-8.  
 <li>Disable support for loading LC_CTYPE locales other than UTF-8.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/swapctl.8">swapctl(8)</a>, use <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man2/vfork.2">vfork(2)</a> &amp; <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man2/execl.2">execl(2)</a> instead of <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man3/system.3">system(3)</a> when invoking <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/mount_nfs.8">mount_nfs(8)</a>.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/myx.4">myx(4)</a>:  
 <ul>  
 <li>Rework the way the packets on the rx rings are tracked.  
 <li>Move to a per rx ring timeout for refilling empty rings. This gets rid of the locking around the refilling of the rx ring.  
 <li>Use a single atomic op instead of one per packet when doing global tx free accounting. This allows packets to be sent a little faster.  
 </ul>  
 <li>On macppc and powerpc, replace the assembly mutexes with a C implementation.  
 <!-- 2015-08-13 -->  
 <li>Add <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man9/ml_requeue.9">ml_requeue(9)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man9/mq_requeue.9">mq_requeue(9)</a> to prepend mbufs on lists/queues.  
 <li>Move the <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/locate.1">locate(1)</a> database build directory back to /tmp.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/ntpd.8">ntpd(8)</a>, avoid calling poll() multiple times with no timeout, racking up CPU time for no real reason.  
 <li>Add the -A, -P and -t options to <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/nm.1">nm(1)</a>.  
 <li>Remove discarded attributes from <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man5/disktab.5">disktab(5)</a>.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/rc.8">rc(8)</a>, improve the <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man5/sysctl.conf.5">sysctl.conf(5)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man5/mixerctl.conf.5">mixerctl.conf(5)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man5/wsconsctl.conf.5">wsconsctl(5)</a> parsers.  
 <li>Let <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/pkg_create.1">pkg_create(1)</a> recreate packages correctly.  
 <li>Prevent an mbuf leak when no handler consumed that mbuf.  
 <!-- 2015-08-12 -->  
 <li>Fix a case where <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man3/ceill.3">ceill(3)</a> returns 1.0L.  
 <li>Rework the /etc/rc script.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/tmux.1">tmux(1)</a>, add the "-of" suffix to the "left", "right", "up" and "down" special tokens for the pane index.  
 <li>Plug two memory leaks in <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/ti.4">ti(4)</a>.  
 <!-- 2015-08-11 -->  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/acpihpet.4">acpihpet(4)</a>, check for a proper HPET period value during attach.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/file.1">file(1)</a>, add various improvements to the <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man5/magic.5">magic(5)</a> parser.  
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/sndiod.8">sndiod(8)</a>, don't make system calls when not being used.  
 <li>Update time zone data to tzdata2015f.  
 <li>Fix recent regressions in <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/ugold.4">ugold(4)</a>.  
 <!-- 2015-08-10 -->  
 <li>Improve <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/openssl.1">openssl(1)</a> s_client -starttls xmpp support.  
 >>>>>>> 1.1379  
 </ul>  </ul>
 <p>  <p>
   
Legend:
Removed from v.1.1380  
changed lines
  Added in v.1.1381