| version 1.1410, 2019/01/28 14:01:02 |
version 1.1411, 2019/01/28 14:01:44 |
|
|
| <p> |
<p> |
| |
|
| <ul> |
<ul> |
| |
<!-- 2019/01/28 --> |
| |
<li>Unveiled _PATH_DEVDB in <a href="https://man.openbsd.org/su">su(1)</a> due to the use of <a href="https://man.openbsd.org/ttyname">ttyname(3)</a>. |
| |
<!-- 2019/01/27 --> |
| |
<li>Added domain-s (DNS over TLS) to <a href="https://man.openbsd.org/services">services(5)</a>. |
| |
<li>Imported LLVM 7.0.1 release. |
| |
<li>Implemented DNS over TLS (DoT) in <a href="https://man.openbsd.org/unwind">unwind(8)</a>. |
| |
<li>Added a kernel fix for a potential panic when a negative value is used to index an array, validating in <a href="https://man.openbsd.org/wscons">wscons(4)</a> the user-supplied device index given to WSMXUIO_ADD_DEVICE. |
| |
<li>Adjusted <a href="https://man.openbsd.org/mpe">mpe(4)</a> mpls rtable behaviour to match <a href="https://man.openbsd.org/mpw">mpw(4)</a>, removing a special case in mpls_input. Reworked mpe_input to patch ipv4 checksum and handle ipv6. |
| |
<!-- 2019/01/26 --> |
| |
<li>Added 'uselease' statement to <a href="https://man.openbsd.org/dhclient">dhclient(8)</a> to replace 'append,' 'default,' 'ignore,' 'prepend' and 'supersede' actions on lease-provided values. |
| |
<li>Improved support for <a href="https://man.openbsd.org/nmea">nmea(4)</a> devices, providing altitude and ground speed values as sensors. |
| |
<li>Added an <a href="https://man.openbsd.org/scp">scp(1)</a> client check for whether filenames sent during remote -> local directory copies satisfy the user-specified wildcard, and a -T flag to disable this functionality in case of this check rejecting wanted files. |
| |
<li>Made <a href="https://man.openbsd.org/ssh-keyscan">ssh-keyscan(1)</a> return a non-zero exit status if it finds no keys. |
| |
<li>Added a delay to fix <a href="https://man.openbsd.org/pms">pms(4)</a> touchpad driver issue on ThinkPad X1 Gen6. |
| |
<li>Tagged the start of <a href="https://man.openbsd.org/witness">witness(4)</a> output with prefix "witness:" to allow easier data extraction. |
| |
<li>Changed an <a href="https://man.openbsd.org/abort">abort(3)</a> call to an <a href="https://man.openbsd.org/_exit">_exit(2)</a> in <a href="https://man.openbsd.org/crypto">crypto(3)</a> to guarantee termination of the running program without potentially leaving key material in core files. |
| |
<li>Fixed a double free in <a href="https://man.openbsd.org/ldap">ldap(1)</a>. |
| |
<li>Eliminated a bug wherein the ttl 0 could be incorrectly decremented to ttl 255 for incoming mpls packets. |
| |
<!-- 2019/01/25 --> |
| |
<li>Fixed microsecond output of timestamp deltas (-tttt) for <a href="https://man.openbsd.org/tcpdump">tcpdump(8)</a>. |
| |
<li>Enabled <a href="https://man.openbsd.org/ccp">ccp(4)</a> on arm64 and armv7 ramdisks. |
| |
<!-- 2019/01/24 --> |
| |
<li>Set <a href="https://man.openbsd.org/ssh">ssh(1)</a> to accept the host key fingerprint as a synonym for "yes" when accepting an unknown host key, allowing pasting of fingerprints obtained through other means to have the client perform the comparison for you. |
| |
<li>Forced progressmeter to update at the beginning and end of a transfer, fixing a bug where it wouldn't display on quick <a href="https://man.openbsd.org/scp">scp(1)</a>/<a href="https://man.openbsd.org/sftp">sftp(1)</a> transfers. |
| |
<li>Fixed a crash on long lines when switching to another file in <a href="https://man.openbsd.org/vi">vi(1)</a>. |
| |
<li>Increased default datasize on arm64 to 768M to prepare for building clang 7. |
| |
<li>Removed SHA224 and GOST-based signature algorithms from use in TLS 1.2. |
| |
<!-- 2019/01/23 --> |
| |
<li>Set <a href="https://man.openbsd.org/route">route(8)</a> to display the same flags in RTM_IFINFO messages as <a href="https://man.openbsd.org/ifconfig">ifconfig(8)</a>. |
| |
<li>Reworked <a href="https://man.openbsd.org/mpw">mpw(4)</a> to be an actual ethernet interface. |
| |
<li>Removed support for obsolete "host/port" syntax in <a href="https://man.openbsd.org/ssh">ssh(1)</a>. This is no longer commonly used and may be confused with CIDR notation. |
| |
<li>Changed <a href="https://man.openbsd.org/bridge">bridge(4)</a> to only copy packets for span ports if the bridge is up. |
| |
<li>Imported <a href="https://man.openbsd.org/unwind">unwind(8)</a>, a hybrid validating stub and recursive resolver. It actively observes the local net to decide how best to resolve names. |
| |
<li>Moved 802.11n rateset definitions out of MiRA to make them available to net80211 and drivers in general. Added short guard interval support. |
| |
<li>Added the <a href="https://man.openbsd.org/man4/arm64/apm.4">apm(4)</a> subsystem to arm64. |
| |
<li>Taught <a href="https://man.openbsd.org/ldpd">ldpd(8)</a> to ask if a potential pseudowire interface is pwe3-capable. |
| |
<li>Changed <a href="https://man.openbsd.org/scp">scp(1)</a>/<a href="https://man.openbsd.org/sftp">sftp(1)</a> to sanitize scp filenames via snmprintf. |
| |
<li>Allowed auto-incrementing of certificate serial number for certificates signed in a single command line for <a href="https://man.openbsd.org/ssh-keygen">ssh-keygen(1)</a>. |
| |
<!-- 2019/01/22 --> |
| |
<li>Reworked how <a href="https://man.openbsd.org/tcp">tcp(4)</a> md5 signatures are configured in <a href="https://man.openbsd.org/ldpd">ldpd(8)</a>. Now configuration is allowed against a prefix in addition to a neighbour. |
| |
<li>Added a specific panic to stop the kernel booting in case of an RPC error during NFS boot of a <a href="https://man.openbsd.org/diskless">diskless(8)</a> host. |
| |
<li>Pledged <a href="https://man.openbsd.org/video">video(1)</a> in response to the newly-added promise. |
| |
<li>Reordered PCI device assignment in <a href="https://man.openbsd.org/vmd">vmd(8)</a> to fix Linux network interface numbering. Previously, changing assigned disks would change the interface name under some Linux distributions. |
| |
IMPORTANT NOTE - if you have existing Linux guest VMs, you'll need to modify your configuration files on a one-time basis. |
| |
<li>Increased maximum MTU of <a href="https://man.openbsd.org/bnxt">bnxt(4)</a> to match the linux driver. |
| |
<li>Provided SSL_get_client_ciphers() and SSL_get1_supported_ciphers() (part of the OpenSSL 1.1 API). |
| |
<li>Added support to <a href="https://man.openbsd.org/crypto">crypto(3)</a> for xchacha20 and xchacha20-poly1305, extending the nonce range and allowing use of random nonces. |
| <!-- 2019/01/21 --> |
<!-- 2019/01/21 --> |
| |
<li>Modified <a href="https://man.openbsd.org/syspatch">syspatch</a> not to return an error if a rollback is attempted when no patches have been installed. |
| |
<li><a href="https://man.openbsd.org/syspatch">Syspatch(8)</a> now warns the user to reboot after installation of a new kernel and identifies the location of errata on the local machine. |
| |
<li>Removed undocumented 24 hour limits for timeouts from <a href="https://man.openbsd.org/select">select(2)</a>, <a href="https://man.openbsd.org/pselect">pselect(2)</a>, <a href="https://man.openbsd.org/poll">poll(2)</a> and <a href="https://man.openbsd.org/ppoll">ppoll(2)</a>. |
| |
<li>Added a -J option as a shortcut for -o Proxyjump= to <a href="https://man.openbsd.org/scp">scp(1)</a> and <a href="https://man.openbsd.org/sftp">sftp(1)</a> to match <a href="https://man.openbsd.org/ssh">ssh(1)</a>'s interface. |
| |
<li>Switched sntrup implementation source from supercop to libpqcrypto in <a href="https://man.openbsd.org/ssh">ssh(1)</a>. |
| |
<li>Added the ability to parse epoch seconds to <a href="https://man.openbsd.org/strptime">strptime(3)</a>. Added a -f pformat flag to parse the given time with strptime to <a href="https://man.openbsd.org/date">date(1)</a>. |
| |
<li>Fixed problem where <a href="https://man.openbsd.org/unveil">unveil(2)</a> system call can leak memory. |
| |
<li>Added video promise to <a href="https://man.openbsd.org/pledge">pledge(2)</a>, allowing ioctls on <a href="https://man.openbsd.org/man4/video.4">video(4)</a> devices selected from <a href="https://man.openbsd.org/video">video(1)</a> and firefox wbrtc implementation. |
| |
<li>Introduced a dedicated entry point data structure for file locks. |
| |
<li>Provided the initial TLSv1.3 client implementation in LibreSSL. |
| |
<li>Introduced -v flags for ssh-add and ssh-pkcs11-helper in <a href="https://man.openbsd.org/ssh">ssh(1)</a>. |
| |
<li>Improved logging to record actual time values and specify whether a TLS certificate is not yet valid or expired when using <a href="https://man.openbsd.org/ntpd">ntpd(8)</a> constraints. |
| |
<li>Factored out several functions duplicated between client and server for <a href="https://man.openbsd.org/ssh">ssh(1)</a>. |
| |
<li>Removed obsolete SSH v.1 functions in <a href="https://man.openbsd.org/ssh">ssh(1)</a>. |
| |
<li>Enables manual validity checking for constraints in the X.509 certificate in <a href="https://man.openbsd.org/ntpd">ntpd(8)</a>. This should prevent failure of automatic validity checking based on incorrect system time, allowing use of the HTTP header's report of server time. |
| |
<li>AMD64 machines will now support 2TB of physical memory, extendable in the future. |
| |
<li>Improved handling of CPUID[1].ECX[OSXSAVE] bit. |
| <li>Adjusted <a href="https://man.openbsd.org/bgpd">bgpd(8)</a> to use Adj-RIB-Out to push UPDATE messages to peers, improving memory usage. |
<li>Adjusted <a href="https://man.openbsd.org/bgpd">bgpd(8)</a> to use Adj-RIB-Out to push UPDATE messages to peers, improving memory usage. |
| <li>Improved handling of two SMM-related MSRs in <a href="https://man.openbsd.org/vmm">vmm(4)</a>. |
<li>Made handling of MSR_SMBASE and MSR_SMM_MONITOR_CTL more correct in <a href="https://man.openbsd.org/vmm">vmm(4)</a>. These will now generategeneral protection fault as per spec. |
| <!-- 2019/01/20 --> |
<!-- 2019/01/20 --> |
| <li>Adjusted mac filters to allow viewing vlan traffic and arp requests on vlans in <a href="https://man.openbsd.org/ixl">ixl(4)</a>. |
<li>Adjusted mac filters to allow viewing vlan traffic and arp requests on vlans in <a href="https://man.openbsd.org/ixl">ixl(4)</a>. |
| <li>Added refresh for <a href="https://man.openbsd.org/arp">arp(8)</a> entries that are about to expire. |
<li>Added refresh for <a href="https://man.openbsd.org/arp">arp(8)</a> entries that are about to expire. |
![[BACK]](/icons/back.gif){kind=icon}
Return to plus.html CVS log ![[TXT]](/icons/text.gif){kind=icon}
![[DIR]](/icons/dir.gif){kind=icon}
Up to [local] / www