===================================================================
RCS file: /cvsrepo/anoncvs/cvs/www/plus.html,v
retrieving revision 1.1392
retrieving revision 1.1393
diff -u -r1.1392 -r1.1393
--- www/plus.html 2016/07/23 14:22:24 1.1392
+++ www/plus.html 2016/07/28 22:47:22 1.1393
@@ -81,6 +81,74 @@
+
+- In sshd(8), revert src/usr.bin/ssh/kexgexs.c r1.28 ("Check min and max sizes sent by the client"). It caused "key_verify failed for server_host_key" in clients that send a DH-GEX min value less that DH_GRP_MIN.
+
- In doas.conf(5), revert the setenv feature.
+
- In aucat(1), add the -g and -p options to control device and file start position.
+
- Add ktrace support for pollfd[] arrays.
+
- In aucat(1), fix a bug that causes an abort in the last samples of certain files.
+
+
- In kdump(1), avoid printing the long string format for times in the 1970s.
+
- Let vfprintf(3) return EOVERFLOW rather than ENOMEM for overflow conditions to match POSIX.
+
- In mount_tmpfs(8), allow to set wxallowed on tmpfs filesystems.
+
- In ldpd(8), speed up session establishment after config reload.
+
- In video(1), to match the encoding type, compare against "pixelformat" instead of "description". This fixes the VIDIOC_ENUM_FMT ioctl for utvfu(4).
+
- Move nd6_output()s "short-circuiting" for non-lladdr interface types earlier. This fixes some IPv6 pppoe setups.
+
- In libcrypto, correct a problem that prevents the DSA signing algorithm from running in constant time even if the flag BN_FLG_CONSTTIME is set.
+
- In tmux(1):
+
+- Allow #[] in window-status-separator.
+
- Insert new panes after the pane being split in the list rather than always after the active pane.
+
- Cache selected state so that cells going from selected to unselected are not skipped.
+
+
+ - In rebound(8), revert r1.27 of src/usr.sbin/rebound/rebound.c that used nonblocking sockets and spinned on them, trying to preemptively avoid kevent.
+
- In ld.so(1), avoid a W^X violation when setting DT_DEBUG on mips64.
+
- In eigrpd(8):
+
+- Reset the interface uptime when it is restarted.
+
- Fix a potential SIGBUS on startup.
+
+ - In netstat(1), display correct the counter for the "no basic MCS set" error.
+
- In dig(1), reduce confusion about the -p option. Parse it, but only permit port 53, and make it an error otherwise instead of a warning.
+
- In smtpd(8), deal with LMTP servers returning continuation lines.
+
- Add uvm_share(9) to share a memory range between two address spaces. Its primary use is to make guest VM memory accessible to the host (e.g. vmd(8)).
+
- In ommmc(4/armv7), reset the bus width back to 1-bit when resetting the host.
+
+
- In eigrpd(8), improve security by calling exec(3) after fork(2). This way it has separate ASLR/cookies per process.
+
- In doas.conf(5), add the "setenv" directive.
+
- Abort a process if it trips the W^X violation check, unless it came from a filesystem with the wxallowed flag set.
+
- In video(1), add -q to only display the device properties and quit.
+
+
- In bgpd.conf(5), add the =, !=, - (range), >< (exclusive range) operators to the as-path filters (AS, peer-as, source-as, transit-as).
+
- In iwm(4), fix multicast Rx by updating the MAC context again after sending multicast filter and STA settings during association. This makes ARP and inet6 autoconf work again.
+
- Avoid decreasing uvm_maxkaddr which may cause the "address selector returned unavailable address" panic.
+
+
- In ssh(1), allow ExitOnForwardFailure and ClearAllForwardings to be overridden when using "ssh -W" (but still default to "yes" in that case) (bz#2577).
+
- In dhclient(8), change the reboot default value to 1 second.
+
- On armv7, rename imxenet(4/armv7) to fec(4/armv7).
+
- In kdump(1), allow printing timestamps relative to the beginning of the trace.
+
- On amd64, fix two issues in the MSI-X code: actually read the MSI-X capability register, and correctly decode the table sizefromits contents.
+
- In gcc(1), fix internal compiler error with long long arithmetic.
+
- In mmap(2), prevent vsize_t underflow when checking RLIMIT_DATA, which made the check ineffective when you already had more memory than your limit allowed.
+
- In iked(8), use the last 32-bits of the IPv6 address to dynamically assign addresses from the pool, instead of the fourth byte.
+
+
- In intel(4), fix an undefined symbol crash when opting into uxa.
+
- In aucat(1), set exit status to 1 if -n is used without -i and -o.
+
- In nc(1), support the use of service names instead of port numbers.
+
- Let rmdir(2) return EINVAL intead of EBUSY when trying to remove ".". This restores POSIX compliance for rmdir(2) and rmdirat(2).
+
- In newsyslog.conf(5), increase permitted sizes for the daemon and messages logs.
+
- In disklabel(8), unbreak automatic disk allocation based on a template.
+
- In umsm(4), add support for Netgear/Sierra Aircard 340U.
+
- In uvideo(4), correctly set the V4L2_BUF_FLAG_QUEUED and V4L2_BUF_FLAG_DONE buffer flags.
+
- In iked(8):
+
+- Fix a bug in the code that replaces unspecified (e.g. 0.0.0.0) addresses by specified (e.g. 192.0.2.1) ones in IPv6 case.
+
- Implement a second address pool specifically for IPv6, so that clients can be given an IPv4 and IPv6 address at the same time.
+
+ - Remove the net.inet6.ip6.rr_prune sysctl(8).
+
- Add utvfu(4), a USB device driver for Audio/Video capture devices based on the Fushicai USBTV007 chip.
+
- Make xhci(4) usable on machines with xHCI BIOS support like most of the recent DELL.
- Add support for using SRPs without the garbage collection machinery.
- In sshd(8):