===================================================================
RCS file: /cvsrepo/anoncvs/cvs/www/plus.html,v
retrieving revision 1.1237
retrieving revision 1.1238
diff -u -r1.1237 -r1.1238
--- www/plus.html 2012/07/12 13:29:35 1.1237
+++ www/plus.html 2012/07/23 02:32:12 1.1238
@@ -76,7 +76,57 @@
+
+- Fix for VU#624931 CVE-2012-2978: nsd(8) denial of service vulnerability from non-standard DNS packet from any host on the internet.
+
+
- Make the smtpd(8) scheduler less verbose by default.
+
- Further simplify cwm(1) Xinerama init, and re-init on XRR events.
+
- On gio, correctly recognise boards with a 8-bit only ID register, which are not frame buffers.
+
- The 8254 timer does not interrupt on Indy; no longer try it. R4000 and R4400 based Indy may experience the lost clock interrupt processor errata again, until better fix is found.
+
- Drop .sp and .br right after .SH and .SS.; and drop empty .IP so they do not cause additional vertical spacing with mandoc(1).
+
- Let a trailing .Ns macro take effect, even on an input line containing a partial implicit macro. Fixes some mandoc(1) horizontal spacing.
+
- Print messages about ifconfig(8) ieee80211 nodes purged from the node cache if hostap/ibss modes are compiled in and the interface is in debug mode.
+
- Fix handling of mandoc(1) paragraph macros inside lists: when they are trailing the last item, move them outside the list; when they are trailing any other none-compact item, drop them.
+
- mandoc(1) will now never use "\*(Ba" and just use "|". Stops breaking of enclosing font changes.
+
+
- Put p_prof_ticks and p_prof_addr back in a "copy-on-fork" area, to correct process accounting.
+
- Add recognition of the Huawei Mobile E303 to umsm(4).
+
- Use ipsec(4) flowinfo on pipex to select the ipsec(4) tunnel for sending L2TP packets.
+
+
- In flush-left mode mandoc(1), when an output line is broken at the position of a literal tab, the tab now indents the following line.
+
- Added IP_IPSECFLOWINFO option to sendmsg(2) and recvmsg(2), so npppd(4) can use this to select the ipsec(4) tunnel for L2TP packets. Fixes Windows (always binding to 1701) and Android clients (negotiating wildcard flows).
+
- Fixed two possible node leaks in ieee80211_input().
+
- Make sure we have a swap partition before trying to read or write hibernate info to it.
+
- mandoc(1) -Tman .sp fixes: keep height argument on the same line (it got printed to the output); for .El .sp, avoid the .sp -1v .PP .sp output sequence.
+
- mandoc(1) -mdoc parser improvements related to vertical spacing: remove .br before paragraph type blocks; treat .Lp as a paragraph like .Pp (so remove .Pp, .Lp, .br before it); do not treat .sp as a paragraph (don't remove anything before it); after .Sh, .Ss, .Pp, and .Lp, remove .Pp, .Lp, .sp, .br, and blank lines; after .sp and .br, remove .br.
+
+
- Unify cwm(1) max routines, to match client placement and some menu ones when calculating screen dimensions.
+
- Don't panic in hibernate resume if no swap partition exists on the root disk.
+
- Add cu(1) command ~D to drop the DTR line for a second (similar to using ~# for a BREAK). This makes some microcontroller boards reset.
+
+
- Fixed mandoc(1) vertical spacing for blank lines after .PP, and for .sp after .PP; adjust -Tman SYNOPSIS .Nm indentation using .HP; do not pass font escapes and such through print_word(), to correctly count characters.
+
- In mandoc(1) -Tman .Bl -compact, skip blank line only before first item of first list in a section, not before every item of the first list.
+
- Label node allocation failures as such in netstat(1) -W output.
+
- Changed ipsec.conf(5) configuration format fed to the isakmpd FIFO to be able to specify extended options (eg SA Lifetime).
+
- Added sysctl.conf(5) file for beagleboard architecture (required by the cross compiler).
+
- Refined bgpd(8) knexthop calculations. Fixes massive memory consumption crashes when used with ospfd(8).
+
- Support additional MODP DH groups in the isakmpd.policy(5) Phase 1 and Phase 2, to match ipsecctl(8).
+
- Stopped npppd(4) using wrong Attribute Value Pairs as a "calling number".
+
- tcpdump(8) now recognises additional Internet Key Exchange DH groups.
+
- mandoc(1) changes: in -man -Tascii, support .sp with negative argument; in -mdoc -Tman, improve the framework to control vertical spacing. Use both to support .Bl -compact.
+
- Add a notify queue to tmux(1) and a way to turn them on and off, to prevent notify while running some commands.
+
- Import swrastg, the Gallium3D software rasterizer. Uses the softpipe driver by default, can also use the llvmpipe driver that use LLVM for code generation if available. Not yet linked to the build.
+
- Avoid using the same wscons(4) wchan name twice.
+
- Disable acpivideo(4) on ASUS laptops, as some models panic whenever an event is received.
+
- Fix wireless scanning on slow systems with high RX rate and interface in debug mode. Allows association points to recover from ifconfig(8) "ral0 debug down up" in noisy RF environments. Also fixed some association failures.
+
- Allow route(8) destination/prefixlen syntax for ipv6 routes.
+
- After connect() returns EINPROGRESS the connection can still fail, relayd(8) will now check with getsockopt if the socket is still open.
+
- Use S_ISFIFO and S_ISSOCK instead of lseek() to determine whether a fd is a socket, pipe or named pipe.
+
- Fix .Nm validation crash in mandoc(1).
+
- Be more careful when accessing a possibly cached route, since it may already be gone. Fixes panic seen when unplugging a USB interface in use.
+
- Added -B option to ktrace(1) to reduce ld.so(1) chatter.
+
- Better handling of long comments in ssh_config(5).
- Fix installer script issue where ksh would not properly separate arguments correctly in "$@" if IFS is an empty string.
- Enabled hibernate on i386. Currently only working on pciide(4) and wd(4) disks.
- Improved i386 gdb to display stack traces of kernel core dumps correctly.
@@ -1127,8 +1177,9 @@
www@openbsd.org
-
$OpenBSD: plus.html,v 1.1237 2012/07/12 13:29:35 jj Exp $
+
$OpenBSD: plus.html,v 1.1238 2012/07/23 02:32:12 brett Exp $