=================================================================== RCS file: /cvsrepo/anoncvs/cvs/www/plus.html,v retrieving revision 1.1426 retrieving revision 1.1427 diff -u -r1.1426 -r1.1427 --- www/plus.html 2019/03/28 06:02:29 1.1426 +++ www/plus.html 2019/03/30 04:13:05 1.1427 @@ -607,6 +607,44 @@
  • Disabled ret-protector and retpoline protections in the clang(1) compiler to regain build performance.
  • Adjusted httpd(8) to start when TLS is configured but keys and certificates are not yet present. + +
  • Plugged a memory leak in host()'s error code path in bgpd(8). +
  • Used the txprio setting to populate the tos in keepalive packets. + +
  • Modified snmpd(8) to use unveil(2) despite inability to use pledge(2), closing an attack vector. +
  • Added txprio support to gre(4), mgre(4), egre(4), nvgre(4) and eoip(4). + +
  • Added support for txprio settings on interfaces with ifconfig(8). This adds a txprio argument with a setting which can be changed to 'payload,' 'packet' or a number between 0 and 7. +
  • Modified dhclient(8) to restart when an SSID change is noted in RTM_80211INFO, ensuring that the correct lease is discovered or renewed and the lease file is properly updated. +
  • Added the new routing socket message RTM_80211INFO to provide details of 802.11 interface state changes and added support to route(8). +
  • Added a mechanism for managing asyncronous IO signal registrations. +
  • Set the hardmtu on ethernet encapsulated interfaces so the MTU can be raised above 1500. +
  • Limited the number of interface units to the number of device minors, preventing the creation of tap(4) and tun(4) devices which can't be opened from userland because of the limit on the number of dev_t minor numbers. + +
  • Built clang(1) on mips64. +
  • Changed the proc message formatting API in smtpd(8) to accept NULL as a valid string. +
  • Adjusted ripd(8) to accept 'interface ifX' without parameters. +
  • Added implementation of the SM3 hashing function within crypto(3). The SM2/SM3/SM4 algorithms are mandatory for legal use of cryptography within China. +
  • Added automatic threading initialization for crypto(3). +
  • Fixed ssl(8) to free the server TLS transcript in case session reuse has failed. + +
  • Enabled the -D option for ping6(8). +
  • Fixed the vnetid range in ifconfig(8). 0 and 4095 are reserved IDs per 802.1Q and vlan(4). +
  • Added support to ping(8) and traceroute(8) for setting the traffic class on IPv6 packets. + +
  • Reduced needed pledge(2) use further in tcpdump(8). +
  • Removed ethers(5) YP support from libc, allowing more effective use of pledge(2) in some programs. +
  • Modified nc(1) to report to stderr in verbose mode when the listen system call has finished, allowing writing of race-free scripts as server status can be checked. + +
  • Cleaned up and simplified the ssl(8) handshake transcript code, providing a more readable API with code that uses a BUF_MEM instead of a BIO. +
  • Fixed a case where if a server asked the client for a certificate that doesn't exist, a handshake transcript would be left behind in ssl(8). +
  • Changed the default listen port for switchd(8) from 6633 to 6653, the IANA standardized OpenFlow port. When a listen port is not specified in switchd.conf(5), it will be randomized. +
  • Used the original client border width to adjust initial placement of clients containing {P,US}Position requests where they are explicitly set to 'ignore' in cwmrc. This prevents unintentional client offset in cwm(1). +
  • Improved use of unveil(2) within passwd(1). +
  • Introduced the 'smtp-in' keyword to smtpd(8) to allow less ambiguous reporting of smtp-in and smtp-out events. +
  • Expanded reporting of tx events in smtpd(8). +
  • Fixed a problem associated with keeping default ribs alive and Adj-RIB-In/Out in bgpd(8). The RIB will only be recreated if the FIB distribution flags changed or the rtableid changed and there is a FIB. +
  • Applied unveil(2) to tcpdrop(8).
  • Fixed clipping during float to integer conversions in aucat(1).
  • Fixed an error in tmux(1) by ensuring that a non-repeating key used when repeating be treated as an entirely new key press.