===================================================================
RCS file: /cvsrepo/anoncvs/cvs/www/plus.html,v
retrieving revision 1.1313
retrieving revision 1.1314
diff -u -r1.1313 -r1.1314
--- www/plus.html 2013/11/22 22:06:55 1.1313
+++ www/plus.html 2013/11/30 00:22:38 1.1314
@@ -75,6 +75,55 @@
+
+- Disable %n in printf(9), to avoid making any format-string vulnerabilities exploitable.
+
- Reworked pmap(9) on vax to allow the kernel to use much less memory for page tables.
+
- Increase NMBCLUSTERS in vax (using kernel memory saved by recent pmap(9) changes).
+
- In uvm(9), replaced the swapdev CIRCLEQ with a TAILQ; replaced list traversals with LIST_FOREACH.
+
- I2C driver for am335x added to armv7 (not enabled yet).
+
- Prevent some race conditions in make(1) by just chdir()'ing into the right objdir.
+
+
- Merged mesa 9.2.3.
+
- In install.sub, use a flag file to recognise a successful autoinstaller run; provide the autoinstaller logfile as mail to root.
+
- With tmux(1) -k, only kill the window after using it to work out -c path.
+
+
- Made tmux(1) handle empty current directory more gracefully.
+
- kdump(1) now understands USB, VIDIOC and generic DRM ioctl(2).
+
+
- Taught fsck_ext2fs(8) about MAXPARTITIONS, to let it operate on partitions "i" through "p".
+
- Guard against a compiler optimising away a comparison against NULL-1 in fsck_ext2fs(8) and fsck_ffs(8).
+
- Made isakmpd(8) keep the flow until last ipsec(4) SA is deleted, if the flow is shared by multiple SAs via NAT-T.
+
- Fixed memory leaks in fuse(4).
+
- Initial support in em(4) for integrated Lynx Point ethernet with external i217 and i218 PHYs.
+
- Bring back check of driver freeing uninitialised structures to urndis(4).
+
- Security update to nginx(8) version 1.4.4, which fixes CVE-2013-4547 (see http://mailman.nginx.org/pipermail/nginx-announce/2013/000125.html).
+
- 5.3 and 5.4 SECURITY FIX FOR nginx(8) CVE-2013-4547. A source code patch is available for 5.3 and 5.4.
+
- Updated to libdrm 2.4.47 for drm(4).
+
- Changed /dev/drm* permissions to 0600.
+
- Correctly set verify flag on the smtpd(8) listener.
+
- Fail if smtpd(8)'s lka can't load the certificate file.
+
+
- Added newer ssh(1) protocol 2 transport cipher "chacha20-poly1305@openssh.com",
+
- Removed disksort from the kernel, now that all the direct users have been removed.
+
- rthread shared semaphore fixes: sem_init(3) shared semaphores now work; in sem_open(3), initialise the spinlock if we created the semaphore.
+
- Added gpio(4/armv7) support for omap3/4 and am335x; added omgpio(4) manpage.
+
- Reworked smtpd(8) mda and scheduler to limit the number of pending deliveries to the same user.
+
+
- Delay closure of sshd(8) in/out fds until after "Bad protocol version identification..." message, as get_remote_ipaddr/get_remote_port require them open.
+
- Added the autoinstall configuration to the list of files stirring the random(4) pool at install.
+
- Moved the GTT management into the intel(4) drm driver.
+
- Backed out intel(4) DRM_IOCTL_I915_GEM_WAIT commit (which left X(7) unusable on resume on some machines).
+
- In install.sub, try to fetch a host-specific responsefile, fallback to a generic one otherwise.
+
- Allow "*" in the user part of mail addresses in smtpd.conf(5).
+
- Impose a limit on the number of inflight envelopes on smtpd(8).
+
+
- Enabled MSI on the remaining re(4) chipsets.
+
- While autoinstalling, decide whether to install or upgrade from DHCP attribute "filename".
+
- Give /dev/drm0 to the user logged on the console and/or xdm(1), to allow running of OpenGL applications.
+
- Bugfix for pf(4) so a "prio" value of a match rule is not overridden by a later pass rule.
+
- Fixed xf86-video-nv shadow framebuffer implementation for nv(4).
+
- When smtpd(8) is looking up an MX, parse the address if the domain is a "[ipaddr]" string.
+
- Converted trunk(4) to use a detachhook.
- Added ugl(4), a driver for Genesys Logic GL620USB-A USB host-to-host link cable. Derived from upl(4).
- Unhooked radeonold from the build.
@@ -766,12 +815,7 @@
www@openbsd.org
-
$OpenBSD: plus.html,v 1.1313 2013/11/22 22:06:55 brett Exp $
+
$OpenBSD: plus.html,v 1.1314 2013/11/30 00:22:38 brett Exp $
-
-
-
-
-