version 1.1428, 2019/04/01 03:16:40 |
version 1.1429, 2019/04/01 04:50:24 |
|
|
<p> |
<p> |
|
|
<ul> |
<ul> |
|
<!-- 2019/03/31 --> |
|
<li> |
|
<li>Changed the way <a href="https://man.openbsd.org/bgpd">bgpd(8)</a> peers are reloaded by moving the struct peer into bgpd_config. Now parent and session engines are merging the lists. |
|
<li>Modified the autopartitioner in <a href="https://man.openbsd.org/disklabel">disklabel(8) to grow minimum size for /usr to 1300M, allowing space for the current amd64 minimum sets size of 920M used, additional space for upgrades and relinking of libraries and kernels. |
|
<li>Fixed output accounting when <a href="https://man.openbsd.org/bridge">bridge(4)</a> is down. |
|
<li>Restored -t behavior to <a href="https://man.openbsd.org/route">route(8)</a>. |
|
<li>Corrected LED GPIO pin for AR9287-based usb devices. |
|
<li>Added the ability to <a href="https://man.openbsd.org/openrsync">openrsync(1)</a> to combine rsync:// and -e by splitting rsync_socket() into rsync_connect to establish a TCP connection to the remote daemon, and rsync_socket() to run the actual protocol. |
|
<li>Fixed a memory leak in <a href="https://man.openbsd.org/radiusd">radiusd(8)</a>. |
|
<!-- 2019/03/30 --> |
|
<li>Modified several daemons to avoid calling dup2(oldd, newd) when oldd == newd, preventing the descriptor from keeping CLOEXEC flag and being closed unexpectedly by exec(). |
|
<li>Set -E <a href="https://man.openbsd.org/disklabel">disklabel(8)</a> editing prompt to always display the disk device whose label is being edited and change '>' to '#' when in expert mode. |
|
<li>Adjusted <a href="https://man.openbsd.org/unwind">unwind(8)</a> to use <a href="https://man.openbsd.org/getaddrinfo_async">getaddrinfo_async(3)</a> when resolving captive portal hosts, rather than resolving internally. |
|
<li>Added retguard macros to set/jmp/longjmp on amd64. |
|
<li>Restricted the number of allowed <a href="https://man.openbsd.org/wsmux">wsmux(4)</a> devices to prevent malloc from panicking when the device minor is sufficiently large. |
|
<!-- 2019/03/29 --> |
|
<li>Modified <a href="https://man.openbsd.org/pfctl">pfctl(8)</a> to fail on invalid netmasks when filling tables, preventing CIDR networks with more than one "/" from being loaded into tables. |
|
<li>Updated <a href="https://man.openbsd.org/nsd">nsd(8)</a> to 4.1.27. |
|
<li>Began to use stricter validation checks for A-MPDUs in the net80211 input path, requiring RUN state to accept A-MPDUs and refusing them from unassociating cients in hostap mode. |
|
<li>Corrected AR9287 USB device EEPROM read offset. |
|
<!-- 2019/03/28 --> |
|
<li>Adjusted <a href="https://man.openbsd.org/midi">midi(4)</a>-related flow control messages to be sent only once half the client buffer space has been consumed, avoiding sending unneeded messages on the network. |
|
<li>Set <a href="https://man.openbsd.org/aucat">aucat(1)</a> to wait until server disconnect to close the socket, preventing loss of the last bytes. |
|
<!-- 2019/03/27 --> |
|
<li>Added support for Exar XR21V1410 USB serial adapters and added the <a href="https://man.openbsd.org/uxrcom">uxrcom(4)</a> driver to allow disabling of hardware flow control. |
|
<li>Added <a href="https://man.openbsd.org/wsconsctl">wsconsctl(8)</a> support for display of fontwidth and fontheight values. |
|
<li>Fixed stop-selection in <a href="https://man.openbsd.org/tmux">tmux(1)</a>. |
|
<li>Merged <a href="https://man.openbsd.org/unbound">unbound(8)</a> 1.9.1. |
|
<li>Fixed interaction between ClientAliveInterval and RekeyLimit that could cause an <a href="https://man.openbsd.org/ssh">ssh(1)</a> connection to close incorrectly. |
|
<!-- 2019/03/26 --> |
|
<li>Added <a href="https://man.openbsd.org/pci">pci(4)</a> power-down support for AR8152 ethernet controllers. |
|
<li>In <a href="https://man.openbsd.org/vmm">vmm(4)</a>, use sgdt/sidt to reset the GDT/IDT limits after exiting the guest VM on VMX, preventing a default limit set too high on exit. |
|
<li>Modified <a href="https://man.openbsd.org/adjtime">adjtime(2)</a> to se EINVAL if delta overflows 64 bits of microseconds to be consistent with practices elsewhere. |
|
<!-- 2019/03/25 --> |
|
<li>Introduced a new rwlock, tc_lock, which allows <a href="https://man.openbsd.org/adjfreq">adjfreq(2)</a> and the kern.timecounter.hardware <a href="https://man.openbsd.org/sysctl">sysctl(2)</a> to read/write the active timecounter pointer and the .tc_adj_freq member of the active timecounter safely. This prevents torn read/writes when dropping KERNEL_LOCK and ensures the active timecounter doesn't change during an <a href="https://man.openbsd.org/adjfreq">adjfreq(2)</a> call. |
|
<li>Fixed <a href="https://man.openbsd.org/ssh">ssh(1)</a> authentication failures when 'AuthenticationMethods any' in a Match block overrides a more restrictive global default. |
|
<li>Created a warning-no-op for <a href="https://man.openbsd.org/openrsync">openrsync(1)</a> indicating that -z support is not yet written. |
|
<li><a href="https://man.openbsd.org/ospfd">ospfd(8)</a> now aborts reloading if the router-id changes. |
|
<li>Fixed issues with <a href="https://man.openbsd.org/pctr">pctr(4)</a> and suspend. <a href="https://man.openbsd.org/cpu">cpu(4)</a> callback will now restore the <a href="https://man.openbsd.org/pctr">pctr(4)</a> settings after suspend/hibernate. |
|
<li>Modified <a href="https://man.openbsd.org/ssl">ssl(8)</a> to defer signal algorithm selection until the certificate is known and it is time for signature generation. |
|
<li>Added a chain member to CERT_PKEY and provided functions for manipulating it. |
|
<li>Increased the default RSA key size to 3072 bits in <a href="https://man.openbsd.org/ssh">ssh(1)</a>. This provides security equivalent to 128 bits, which is the smallest symmetric cipher enabled by default. |
|
<li>Added the <a href="https://man.openbsd.org/syspatch">syspatch(8)</a> signify key for OpenBSD 6.6. |
<!-- 2019/03/24 --> |
<!-- 2019/03/24 --> |
<li>Switched to precision scrolling in wstpad in <a href="https://man.openbsd.org/wscons">wscons(4)</a>. |
<li>Switched to precision scrolling in wstpad in <a href="https://man.openbsd.org/wscons">wscons(4)</a>. |
<li>Adjusted <a href="https://man.openbsd.org/unwind">unwind(8)</a> to check resolvers based on change of state rather than at regular intervals. Resolvers are now rechecked when no longer behind a captive portal. |
<li>Adjusted <a href="https://man.openbsd.org/unwind">unwind(8)</a> to check resolvers based on change of state rather than at regular intervals. Resolvers are now rechecked when no longer behind a captive portal. |
|
|
<li>Added support for configuring BIOCSFILDROP with <a href="https://man.openbsd.org/tcpdump">tcpdump(8)</a>. This allows tcpdump to be used as a makeshift firewall. |
<li>Added support for configuring BIOCSFILDROP with <a href="https://man.openbsd.org/tcpdump">tcpdump(8)</a>. This allows tcpdump to be used as a makeshift firewall. |
<li>Added the SM4 block cipher from the Chinese standard GB/T 32907-2016 to LibreSSL. |
<li>Added the SM4 block cipher from the Chinese standard GB/T 32907-2016 to LibreSSL. |
<!-- 2019/03/16 --> |
<!-- 2019/03/16 --> |
<li>Raised the maximum columns and rows to 160 for <a href="https://man.openbsd.org/efifb">efifb(4)</a> now that it supports remapping the framebuffer in write combining mode. |
|
<li>Fixed multiple buffer over-reads in <a href="https://man.openbsd.org/ctfdump">ctfdump(1)</a>. |
<li>Fixed multiple buffer over-reads in <a href="https://man.openbsd.org/ctfdump">ctfdump(1)</a>. |
<!-- 2019/03/15 --> |
<!-- 2019/03/15 --> |
<li>Changed <a href="https://man.openbsd.org/dwiic">dwiic(4)</a> to fetch timing parameters from ACPI and have it attach on Intel 300 series devices. |
<li>Changed <a href="https://man.openbsd.org/dwiic">dwiic(4)</a> to fetch timing parameters from ACPI and have it attach on Intel 300 series devices. |