===================================================================
RCS file: /cvsrepo/anoncvs/cvs/www/plus.html,v
retrieving revision 1.1373
retrieving revision 1.1374
diff -u -r1.1373 -r1.1374
--- www/plus.html 2015/09/07 19:13:47 1.1373
+++ www/plus.html 2015/09/17 16:50:57 1.1374
@@ -75,6 +75,161 @@
+
+- Remove SHA-0 and MD4 support from libcrypto.
+
- Put the 12x22 font on alpha and macppc installation kernels.
+
- In netstart(8), only print the "IPv6 autoconf" line if there are interfaces to configure.
+
- In ssh-add(1), when adding keys to the agent, don't ignore the comment of keys for which the user is prompted for a passphrase.
+
- In tmux(1), add the -e flag to copy-mode to exit copy mode when scrolling off the bottom.
+
- In libcrypto, check ECDH output buffer length and avoid truncation.
+
- Introduce intr_barrier(9), an interface that guarantees that an interrupt handler that was running has finished.
+
- Introduce sched_barrier(), an interface that acts as a scheduler barrier in the sense that it guarantees that the specified CPU went through the scheduler.
+
- Add the Certplus CA root certificate to /etc/ssl/cert.pem.
+
- In nc(1), display negotiated TLS version and cipher suite in verbose mode.
+
- In libcrypto, add OPENSSL_cpu_caps(), to return the currently running CPU's specific hardware capabilities users of libcrypto might be interested in.
+
- In LibreSSL, if there is hardware acceleration for AES, prefer AES as a symmetric cipher over CHACHA20. Otherwise, prefer CHACHA20 with AES second.
+
+
- Make if_get() and vlan_input() MP-safe using SRPs.
+
- On arm, use kbind(2) for lazy binding GOT/PLT updates.
+
- In openssl(1):
+
+- Fix the "prime" command: when checking a decimal number for primality, do not unnecessarily convert the original decimal number to hex in the output. Hex numbers explicitly specified with -hex remain unchanged.
+
- Add support for AEAD algorithms to the "speed" command.
+
- Remove support for the SSLEAY_CONF environment variable.
+
+ - Add an ftpproxy6 rc script. ftp-proxy(8) can only open one listening socket at a time, so a second instance of the daemon is required.
+
- Introduce if_input_local(), a function to feed local traffic back to the protocol queues.
+
- In ping6(8), avoid out-of-boundary access on invalid or short packet reads.
+
- In ddb(4), show the non-idle, on-proc threads before showing the stack trace when panicking.
+
+
- In em(4), add support for the 88E1512/88E1514 phys.
+
- Update to sqlite3 3.8.11.1.
+
- In acpicpu(4), work around broken AML by treating FFH vendor 8 the same as vendor 1 (Intel).
+
- Make the powerpc pmap (more) MP-safe. This should make pmap_enter(9), pmap_remove(9) and pmap_page_protect(9) safe to use without holding the kernel lock.
+
- Add TLS support to nc(1).
+
- Remove RTF_XRESOLVE support from route(4), route(8), netstat(1) and route6d(8).
+
- Introduce refcnt, a wrapper around reference counts.
+
- Introduce rtref(9), a function to increment a reference to a routing entry, and use it in rtable_lookup().
+
- In "ifconfig media", stop advertising media with fixed data rates on wireless interfaces.
+
- Don't generate ICMPv6 packets with incorrect checksums for dropped IPv6 packets.
+
- Fix a use-after-free in route(4).
+
- In openssl(1), remove the engine command and parameters.
+
- Save/restore MSR_APICBASE during suspend/resume. This re-enables x2apic on the application processors at resume.
+
- Remove the unfinished che(4) driver.
+
- In libtls, do not match a wildcard against a name with no host part.
+
- Make room for media types of the future: extend the ifmedia word to 64 bits.
+
- In netstart(8), set "inet6 autoconf" individually on interfaces that have rtsol set in hostname.if(5). Previously, netstart tried to configure them all at once.
+
- Take a first step towards making ix(4) MP-safe.
+
- In mkhybrid(8), cast the isascii(3) argument to unsigned char, to avoid undefined behaviour.
+
- In qle(4), don't copy more sense data than we have space for. This avoids a crash when trying to talk to a Sun STK6140 (although it still doesn't work).
+
- Spoof EFI SYSTEM GPT partitions as MSDOS partitions, as is done with MBR EFI SYSTEM partitions.
+
- No longer grab the kernel lock in the interrupt-safe multi page backend allocator implementation. This is possible because that interrupt-safe uvm maps are now properly locked.
+
- Fix a NULL dereference in bpf(4).
+
- Fix hangs on systems with more than 7 interfaces.
+
- In ddb(4), add ps/o to display just the non-idle on-proc threads.
+
- Don't spoof GPT OpenBSD partitions. Simply record and use the first one found, as is done in MBR processing.
+
- Change device locators type from int to long, for the sake of 64-bit ports without proper device trees.
+
+
- In ssh(1), expand %i in ControlPath to UID (bz#2449).
+
- In openssl(1), make the s_time command perform a proper shutdown by default. This allows s_time to benchmark a full TLS connection more accurately. The new -no_shutdown flag restores the previous behaviour.
+
- In syslogd(8), instead of having global variables containing the libevent structures, allocate them with malloc. This makes the address space layout more random.
+
- Add kqueue(2) support for wsmouse(4), wskbd(4) and wsmux(4). This is needed for the libinput port.
+
- In LibreSSL:
+
+- Remove support for DTLS_BAD_VER. We do not support non-standard and incomplete implementations.
+
- When loading a DSA key from a raw (without DH parameters) ASN.1 serialization, perform some consistency checks on its "p" and "q" values, and return an error if the checks failed.
+
+ - Enable GPT in the GENERIC kernel.
+
- Avoid division by zero in fsck_ext2fs(8).
+
- Use the full IPv6 source address (rather than only half of it) as input for the syn cache hash. Using only half the address makes it trivial to create syn cache collisions.
+
- Move the if input handler list to an SRP list.
+
- In libc, add hidden _libc_FOO aliases for the system call stubs.
+
- Various cleanups of the ksh(1) code.
+
- Several libtls API changes and improvements.
+
- In tmux(1), add session_last_attached time and format.
+
- Remove link_addr(3).
+
+
- Add locking for interrupt-safe maps.
+
- In mkhybrid(8), fix various buffer overflows and make it work on unsigned char platforms.
+
- Add client certificate support to libtls.
+
- Move to the next tame(2) API. The flags are now passed as a very simple string.
+
- Introduce reference counts for interfaces. The new if_put() function releases the reference acquired by if_get().
+
- In ntpd(8), plug a memory leak in an error path.
+
- Convert bpf to using an srp list for the list of descriptors.
+
- Implement a singly linked list built with SRPs.
+
- On powerpc, it is no longer needed to use mprotect(2) to take away PROT_WRITE. This fixes ld(1) -Z and paves the way for the new Secure-PLT ABI.
+
- In binutils 2.17, force .ctors, .dtors and .got to be read-only for truly static binaries. This prevents W^X violations on architectures that need an executable GOT (basically BSS-PLT powerpc).
+
+
- Prevent nc(1) from hanging when writing more than the low water mark of the socket write buffer.
+
- In disklabel(8), avoid a SIGSEGV with FGJ malloc.conf flags when a template is used.
+
- The default backend allocator implementation no longer needs to grab the kernel lock.
+
+
- Build xf86-video-wsfb on amd64 and i386. It can be used by efifb now.
+
- In efifb(4), make scrolling a bit faster.
+
- Delete ktracing of context switches. It is unused and not particularly useful.
+
- In smtpd(8), insert a Message-Id header if necessary.
+
- In httpd(8), prevent a potential double free introduced in r1.64 of src/usr.sbin/httpd/server.c
+
+
- It is no longer necessary to grab the kernel lock for allocating and freeing pages in the (default) single page pool backend allocator.
+
- In libc, fix aliasing of sys_errlist, sys_nerr, sys_siglist, and sys_signame to eliminate duplicate copies of the tables and get direct access internally.
+
- In wsfontload(8), avoid a floating point exception when an invalid font width was specified.
+
- On the minirootXX.fs and iso images, create an EFI system partition using fdisk(8) -b and put the UEFI boot loader on there.
+
- Add support for QEMU PCI serial devices to puc(4).
+
+
- In awk(1), revert srand() to its old behaviour with regard to what values it returns.
+
- On sgi, remove the need for the memory controller to switch between "fast" and "slow" mode every time a DMA descriptor is updated.
+
- Update to xterm 320.
+
- In pms(4):
+
+- Improve tap-and-drag detection for ALPS touchpads.
+
- Support Synaptics touchpads without W mode.
+
+ - Use the new resolution framework for wrapping catopen(3), catgets(3) and catclose(3), and for dbopen(3).
+
- In wscons(4), add support for xterm-compatible SGR escapes 39 and 49 (reset fg/bg colour to default).
+
- Some symbol cleanup in libc.
+
+
- In fdisk(8), add a -b option, to be used together with -i, to add a special boot partition on architectures that need it.
+
- In audio(4), improve the search for candidates for the wskbd "record level" control. This may fix "record level" keys on certain keyboards.
+
- In ugen(4), do not use an intermediary buffer on the stack of the caller when submitting a bulk write request. This means big bulk write requests are no longer split into multiple small transfers which libusb consumers do not expect.
+
- Give every consumer of the radix tree a chance to explicitly initialize the shared data structures, instead of relying on another subsystem to do the initialization. ART kernels should now be fully usable because pf(4) and IPSEC properly initialize the radix tree.
+
- In ssh(1) and sshd(8), plug minor memory leaks when options are used more than once (bz#2182).
+
- In netstat(1), fix mbuf memory accounting after the recent *8 pool size change.
+
- Fix a use-after-free in pflow(4).
+
- Add support for the RTL8168H to re(4).
+
+
- In libkvm, fix a race when fetching files from the kernel.
+
- On i386, fix a race in pmap_page_remove_86() and pmap_page_remove_pae().
+
- On amd64, fix a race in pmap_page_remove().
+
- Adapt ping(8) to tame(2).
+
- In dwc2, fix timeout-related crashes.
+
- Again revert the two uses of rtisvalid(9). They break NFS.
+
- In dwc2, avoid a possible lock recursion panic on transfer timeout.
+
- Modify acpidump(8) to work on systems booted from efi boot.
+
- Bring back the two uses of rtisvalid(9). The bug it exposed has been fixed.
+
- Unconditionally set the RTF_UP flags when adding a route to the table. This makes dhclient(8)-configured default routes usable without relying on the link-state change hooks not present in RAMDISK kernels.
+
- In ugen(4), do not use an intermediary buffer on the stack of the caller when submitting a read request. This means big read requests are no longer split into multiple small transfers which libusb consumers do not expect.
+
+
- In smtpd(8), remove the session kicking mechanism until it is redesigned. It has an accounting bug leading to some legitimate sessions being kicked if they generate too many consecutive errors.
+
- On sparc64, make pmap_kenter_pa(9) and pmap_kremove(9) MP-safe.
+
- In syslogd(8), log a message about failed log attempts using sendsyslog(2).
+
- Revert the two uses of rtisvalid(9). It breaks dhclient(8)-configured networks on RAMDISK kernels.
+
+
- Add the uefi boot loader.
+
- In ping6(8), display the correct source address when using a non-default routing table.
+
- In pf(4), don't let route-to, dup-to and reply-to override the block action.
+
- In syslogd(8), bind the *:514 UDP socket with SO_REUSEADDR.
+
- On octeon, increase the transfer FIFOs for dwc2. This improves USB performance.
+
- Convert the (cached) route entry checks in ip{,6}_output() to rtisvalid(9).
+
- In doas(1), restrict the exec path only if the rule specifies a command.
+
- Introduce rtisvalid(9), a function to check if a (cached) route entry can be used or should be released by rtfree(9).
+
- Reject USB requests that could damage the bus integrity.
+
- Fix a use-after-free in tame_namei().
+
- On powerpc, make bus_dmamap_load_raw(9) respect the segment size constraint. This makes xhci(4) work on the G5.
+
- In efifb(4):
+
+- Only advertise the color depth that is actually supported. This makes the xf86-video-wsfb driver work.
+
- Map the framebuffer in write-combining mode. This significantly speeds up.
+
- In static binaries, invoke kbind(2) once to disable it.
- On m88k and sparc, use kbind(2) for lazy binding GOT/PLT updates.