Annotation of www/plus.html, Revision 1.1341
1.1092 jj 1: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
1.14 deraadt 2: <html>
3: <head>
1.1045 david 4: <title>OpenBSD -current changes</title>
1.14 deraadt 5: <meta name="resource-type" content="document">
1.1045 david 6: <meta name="description" content="OpenBSD -current changes">
1.1044 deraadt 7: <meta name="keywords" content="openbsd,changes">
1.14 deraadt 8: <meta name="distribution" content="global">
1.1212 schwarze 9: <meta name="copyright" content="This document copyright 1996-2012 by OpenBSD.">
1.14 deraadt 10: </head>
11:
1.728 horacio 12: <body bgcolor="#ffffff" text="#000000" link="#23238e">
1.14 deraadt 13:
1.828 jsyn 14: <a href="index.html"><img alt="[OpenBSD]" height="30" width="141" src="images/smalltitle.gif" border="0"></a>
1.64 downsj 15: <p>
1.1044 deraadt 16: <h2><font color="#e00000">OpenBSD -current changelog</font></h2>
1.863 naddy 17: <hr>
1.14 deraadt 18:
19: <p>
1.1216 schwarze 20: This selection is intended to include all important
21: and all user-visible changes.
22: For a complete record of all changes, please see the "source-changes"
23: mailing list, called "OpenBSD CVS"
24: in the <a href="mail.html#Archives">archives</a>,
25: or use <a href="anoncvs.html#CVS">CVS</a>.
26:
27: <p>
1.863 naddy 28: Note: <font color="#e00000">Problems for which patches exist are marked in red</font>.
1.185 deraadt 29:
30: <p>
1.846 deraadt 31: For changes in other releases, click below:<br>
32: <a href="plus20.html">2.0</a>,
33: <a href="plus21.html">2.1</a>,
34: <a href="plus22.html">2.2</a>,
35: <a href="plus23.html">2.3</a>,
36: <a href="plus24.html">2.4</a>,
37: <a href="plus25.html">2.5</a>,
38: <a href="plus26.html">2.6</a>,
39: <a href="plus27.html">2.7</a>,
40: <a href="plus28.html">2.8</a>,
41: <a href="plus29.html">2.9</a>,
42: <a href="plus30.html">3.0</a>,
43: <a href="plus31.html">3.1</a>,
1.868 deraadt 44: <a href="plus32.html">3.2</a>,
1.889 david 45: <a href="plus33.html">3.3</a>,
1.916 david 46: <a href="plus34.html">3.4</a>,
1.935 miod 47: <a href="plus35.html">3.5</a>,
1.941 deraadt 48: <a href="plus36.html">3.6</a>,
1.1118 deraadt 49: <br>
1.963 deraadt 50: <a href="plus37.html">3.7</a>,
1.999 deraadt 51: <a href="plus38.html">3.8</a>,
1.1028 deraadt 52: <a href="plus39.html">3.9</a>,
1.1044 deraadt 53: <a href="plus40.html">4.0</a>,
1.1069 deraadt 54: <a href="plus41.html">4.1</a>,
1.1097 deraadt 55: <a href="plus42.html">4.2</a>,
1.1118 deraadt 56: <a href="plus43.html">4.3</a>,
1.1140 deraadt 57: <a href="plus44.html">4.4</a>,
1.1152 deraadt 58: <a href="plus45.html">4.5</a>,
1.1163 deraadt 59: <a href="plus46.html">4.6</a>,
1.1177 deraadt 60: <a href="plus47.html">4.7</a>,
1.1194 deraadt 61: <a href="plus48.html">4.8</a>,
1.1198 nick 62: <a href="plus49.html">4.9</a>,
1.1212 schwarze 63: <a href="plus50.html">5.0</a>,
1.1242 lum 64: <a href="plus51.html">5.1</a>,
1.1276 deraadt 65: <a href="plus52.html">5.2</a>,
1.1300 brett 66: <a href="plus53.html">5.3</a>,
1.1330 deraadt 67: <br>
68: <a href="plus54.html">5.4</a>,
69: <a href="plus55.html">5.5</a>.
1.422 deraadt 70: <br>
1.186 deraadt 71:
72: <p>
1.1331 deraadt 73: <h3><font color="#0000e0">Changes made between OpenBSD 5.5 and -current</font></h3>
1.847 deraadt 74: <p>
1.1316 brett 75:
1.422 deraadt 76: <ul>
1.1341 ! brett 77: <!-- 2014/05/25 -->
! 78: <li>Fixed <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&manpath=OpenBSD%20Current&sektion=8&format=html">ssl(8)</a> resource descriptor leaks (CID: 966576 & 966577).
! 79: <li>Allow <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tty&manpath=OpenBSD%20Current&sektion=4&format=html">tty(4)</a> to handle threaded processes correctly with kerninfo status requests (a.k.a. ^T).
! 80: <li>Fixed <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=azalia&manpath=OpenBSD%20Current&sektion=4&format=html">azalia(4)</a> format mistakes when AZALIA_DEBUG is defined.
! 81: <li>Pass DVACT_QUIESCE to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=usb&manpath=OpenBSD%20Current&sektion=4&format=html">usb(4)</a> to stop "new" <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=uhub&manpath=OpenBSD%20Current&sektion=4&format=html">uhub(4)</a> device reattaching at every resume.
! 82: <!-- 2014/05/24 -->
! 83: <li>Fixed off-by-one in index validation before accessing arrays in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&manpath=OpenBSD%20Current&sektion=8&format=html">ssl(8)</a> ssl_cipher_get_evp().
! 84: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&manpath=OpenBSD%20Current&sektion=3&format=html">ssl(3)</a>, enabled three brainpool elliptic curves for TLS (per RFC 7027).
! 85: <li>Made <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fsck_ext2fs&manpath=OpenBSD%20Current&sektion=8&format=html">fsck_ext2fs(8)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fsck_ffs&manpath=OpenBSD%20Current&sektion=8&format=html">fsck_ffs(8)</a> output verbiage more consistent.
! 86: <li>Added support for newer <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=run&manpath=OpenBSD%20Current&sektion=4&format=html">run(4)</a> hardware.
! 87: <!-- 2014/05/23 -->
! 88: <li>Made <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fsck_ext2fs&manpath=OpenBSD%20Current&sektion=8&format=html">fsck_ext2fs(8)</a> initialise newent.e2d_type to EXT2_FT_UNKNOWN (a.k.a. 0).
! 89: <li>Reverted <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pax&manpath=OpenBSD%20Current&sektion=1&format=html">pax(1)</a> ar_io.c r1.45 to stop showing archives written with a non-standard blocksize as truncated reads.
! 90: <li>Stopped <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcpdump&manpath=OpenBSD%20Current&sektion=8&format=html">tcpdump(8)</a> "weird flag" warning for DNS NOTIFY messages which should have "AA" set.
! 91: <li>Permit <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=less&manpath=OpenBSD%20Current&sektion=1&format=html">less(1)</a> searches to work past/across NUL bytes.
! 92: <li>Made the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pax&manpath=OpenBSD%20Current&sektion=1&format=html">pax(1)</a> signal handler safe.
! 93: <li>Expose bif_capacity in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=acpibat&manpath=OpenBSD%20Current&sektion=4&format=html">acpibat(4)</a>, to report the design capacity of the battery.
! 94: <li>Clean up after the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=snmpd&manpath=OpenBSD%20Current&sektion=8&format=html">snmpd(8)</a> traphandler children, to avoid leaving zombie processes.
! 95: <!-- 2014/05/22 -->
! 96: <li>Marked <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&manpath=OpenBSD%20Current&sektion=8&format=html">ssl(8)</a> <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=malloc&manpath=OpenBSD%20Current&sektion=3&format=html">malloc(3)</a> wrapper functions as deprecated.
! 97: <li>Fixed <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=smtpd&manpath=OpenBSD%20Current&sektion=8&format=html">smtpd(8)</a> crash when running the pki lookup code.
! 98: <li>On sgi, converted the PS/2 keyboard layouts to sgi serial keyboard layouts.
! 99: <li>Let sgi <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=keyboard&manpath=OpenBSD%20Current&sektion=7&format=html">keyboard(7)</a> work in polling mode; fixed "international" ("GERlessthan") key.
! 100: <!-- 2014/05/21 -->
! 101: <li>Made <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=qle&manpath=OpenBSD%20Current&sektion=4&format=html">qle(4)</a> less likely to get stuck looping when the firmware behaves inconsistently.
! 102: <li>Fixed file size reported by <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=lpq&manpath=OpenBSD%20Current&sektion=1&format=html">lpq(1)</a> -l by giving <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=stat&manpath=OpenBSD%20Current&sektion=2&format=html">stat(2)</a> privileges on the spool file.
! 103: <li>Fixed <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fdisk&manpath=OpenBSD%20Current&sektion=8&format=html">fdisk(8)</a> -u on sparc64.
! 104: <li>Fixed <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ipsec&manpath=OpenBSD%20Current&sektion=4&format=html">ipsec(4)</a> route addition, broken since the removal of the link-layer addresses from the per-ifp list.
! 105: <li>Made <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xhci&manpath=OpenBSD%20Current&sektion=4&format=html">xhci(4)</a> handle the stall condition like the bable condition.
! 106: <!-- 2014/05/20 -->
! 107: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pax&manpath=OpenBSD%20Current&sektion=1&format=html">pax(1)</a> now exits with non-zero status if a read is truncated.
! 108: <li>Added support for -o XXX or -oXXX options, and -o max_read=XXX to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fuse&manpath=OpenBSD%20Current&sektion=4&format=html">fuse(4)</a>.
! 109: <li>When sending <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=icmp&manpath=OpenBSD%20Current&sektion=4&format=html">icmp(4)</a> messages, assign the queue ID to the correct packet header.
! 110: <li>Fixed eui64 address generation, broken upon removal of the link-layer address from the per-ifp list.
! 111: <!-- 2014/05/19 -->
! 112: <li>No more (obsolete) 5- and 6-byte or surrogate pair code point encodings in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&manpath=OpenBSD%20Current&sektion=8&format=html">ssl(8)</a> UTF8_{getc,putc}.
! 113: <li>Upon HTTPS <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ftp&manpath=OpenBSD%20Current&sektion=1&format=html">ftp(1)</a> redirects, don't reinitialise <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&manpath=OpenBSD%20Current&sektion=8&format=html">ssl(8)</a>, and reuse SSL_CTX.
! 114: <li>Plugged memory leak in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rcs&manpath=OpenBSD%20Current&sektion=1&format=html">rcs(1)</a>.
! 115: <li>More consistency in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fuse&manpath=OpenBSD%20Current&sektion=4&format=html">fuse(4)</a> error handling.
! 116: <li>Made <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fuse&manpath=OpenBSD%20Current&sektion=4&format=html">fuse(4)</a> use realpath for more reliable <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mount&manpath=OpenBSD%20Current&sektion=8&format=html">mount(8)</a> operations.
! 117: <li>On armv7, loongson and socppc use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=autoconf&manpath=OpenBSD%20Current&sektion=9&format=html">autoconf(9)</a> to track <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=usb&manpath=OpenBSD%20Current&sektion=4&format=html">usb(4)</a> host controller's children.
! 118: <li>Stopped <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhclient&manpath=OpenBSD%20Current&sektion=8&format=html">dhclient(8)</a> trying to update file when none has been specified by -L flag.
! 119: <li>Added H_SAVE_FP operation to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=editline&manpath=OpenBSD%20Current&sektion=3&format=html">editline(3)</a>, to save history to an open file pointer.
! 120: <li>Fixed <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=uhci&manpath=OpenBSD%20Current&sektion=4&format=html">uhci(4)</a>. Unbreaks the build when DIAGNOSTIC is not defined.
1.1340 brett 121: <!-- 2014/05/18 -->
122: <li>Updated <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=run&manpath=OpenBSD%20Current&sektion=4&format=html">run(4)</a> firmware to version 0.33.
123: <li>Made <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mkuboot&manpath=OpenBSD%20Current&sektion=8&format=html">mkuboot(8)</a> correctly handle files smaller than an <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=elf&manpath=OpenBSD%20Current&sektion=5&format=html">elf(5)</a> header.
124: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&manpath=OpenBSD%20Current&sektion=3&format=html">ssl(3)</a> ssl3_send_certificate_request(), properly adjust for payload size.
125: <li>Upon error, made sure <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&manpath=OpenBSD%20Current&sektion=3&format=html">ssl(3)</a> ssl3_setup_buffers() frees pqueue before returning.
126: <li>Fixed tail packet check in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pms&manpath=OpenBSD%20Current&sektion=4&format=html">pms(4)</a> elantech v3 touchpad code.
127: <li>Stopped <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhclient&manpath=OpenBSD%20Current&sektion=8&format=html">dhclient(8)</a> adding a lease to the leases TAILQ more than once. Avoids infinite loop.
128: <li>Updated to libXfont 1.4.8.
129: <li>Check <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&manpath=OpenBSD%20Current&sektion=3&format=html">ssl(3)</a> bio_err initialisation succeeds before using it.
130: <li>Updated to fontconfig 2.11.1.
131: <!-- 2014/05/17 -->
132: <li>Updated to xf86-input-synaptics 1.8.0.
133: <li>Fixed kernel build when <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ehci&manpath=OpenBSD%20Current&sektion=4&format=html">ehci(4)</a> uses EHCI_DEBUG.
134: <li>Switched <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&manpath=OpenBSD%20Current&sektion=8&format=html">ssl(8)</a> RSA key generation default to 2048 bits (matching <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&manpath=OpenBSD%20Current&sektion=1&format=html">ssh(1)</a>).
135: <li>Made <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=qla&manpath=OpenBSD%20Current&sektion=4&format=html">qla(4)</a> less likely to get stuck looping when the firmware behaves inconsistently.
136: <li>Change interrupt handler's return value to 0 when nothing is processed on <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pcexmem&manpath=OpenBSD%20Current&sektion=4&arch=luna88k&format=html">pcexmem(4/luna88k)</a>.
137: <li>When <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&manpath=OpenBSD%20Current&sektion=8&format=html">pfctl(8)</a> is parsing a numerical value for the TOS bits, ensure it is in a valid range.
138: <!-- 2014/05/16 -->
139: <li>Fixed <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mountd&manpath=OpenBSD%20Current&sektion=8&format=html">mountd(8)</a>: when a host in a netgroup is unresolvable, don't ignore entire netgroup.
140: <li>Sped up <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=signify&manpath=OpenBSD%20Current&sektion=1&format=html">signify(1)</a> -C.
141: <li>Made <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=df&manpath=OpenBSD%20Current&sektion=1&format=html">df(1)</a> do calculations of available space the same way as ffs_statfs() does.
142: <li>Improved logging messages and style for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=snmpd&manpath=OpenBSD%20Current&sektion=8&format=html">snmpd(8)</a>.
143: <li>Don't put a link-layer address on the per-ifp lists or RB-Tree. Improves address lookups.
144: <!-- 2014/05/15 -->
145: <li>Fixed memory leaks in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&manpath=OpenBSD%20Current&sektion=3&format=html">ssl(3)</a> asn1 upon failure.
146: <li>Replaced <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&manpath=OpenBSD%20Current&sektion=3&format=html">ssl(3)</a> ASN1_GENERALIZEDTIME_adj(), ASN1_UTCTIME_adj() and ASN1_TIME_to_generalizedtime() with wrappers.
147: <li>Added a ChaCha20-Poly1305 AEAD EVP implementation to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&manpath=OpenBSD%20Current&sektion=3&format=html">ssl(3)</a> libcrypto.
148: <li>Added an AEAD EVP interface to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&manpath=OpenBSD%20Current&sektion=3&format=html">ssl(3)</a> libcrypto, along with AES-GCM AEAD implementations.
149: <li>Made <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=signify&manpath=OpenBSD%20Current&sektion=1&format=html">signify(1)</a> -C mode work again.
150: <!-- 2014/05/14 -->
151: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rtadvd&manpath=OpenBSD%20Current&sektion=8&format=html">rtadvd(8)</a> now ignores route info messages on the listening side.
152: <li>Stopped flushing streams on <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=abort&manpath=OpenBSD%20Current&sektion=3&format=html">abort(3)</a>, which was unsafe.
153: <li>Removed arch-specific <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=lo&manpath=OpenBSD%20Current&sektion=4&format=html">lo(4)</a> MTU and set to 32768 everywhere.
154: <li>Made <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=signify&manpath=OpenBSD%20Current&sektion=1&format=html">signify(1)</a> recode base64 hashes if necessary; spell out base64 in error messages.
155: <li>Better use of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=realloc&manpath=OpenBSD%20Current&sektion=3&format=html">realloc(3)</a>, to speed up <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=signify&manpath=OpenBSD%20Current&sektion=1&format=html">signify(1)</a> checksum verification.
156: <li>Added poly1305 to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&manpath=OpenBSD%20Current&sektion=3&format=html">ssl(3)</a>, utilising Andrew Moon's public domain implementation.
157: <!-- 2014/05/13 -->
158: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tmux&manpath=OpenBSD%20Current&sektion=1&format=html">tmux(1)</a> no longer allows multiple buffers with the same name.
159: <li><font color="#e00000">5.4, 5.5 and -current SECURITY FIX: integer, memory and buffer overflows in libXfont (CVE-2014-0209; CVE-2014-0210 and CVE-2014-0211)</font>.
160: <li>Fixed regression in r1.285 of sys/net/if.c (TAILQ corruption where rdomain was not switched).
161: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=iked&manpath=OpenBSD%20Current&sektion=8&format=html">iked(8)</a>, pass SA initiator (not the exchange initiator) to sa_address().
162: <li>The resolver now skips incomplete entries in /etc/hosts and /etc/networks (rather than crash).
163: <li>Pass multi-argument <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tmux&manpath=OpenBSD%20Current&sektion=1&format=html">tmux(1)</a> commands directly to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=execvp&manpath=OpenBSD%20Current&sektion=3&format=html">execvp(3)</a>. Helps avoid quoting problems.
164: <li>Added a copy mode key binding to copy to a named <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tmux&manpath=OpenBSD%20Current&sektion=1&format=html">tmux(1)</a> buffer.
165: <li>Added <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tmux&manpath=OpenBSD%20Current&sektion=1&format=html">tmux(1)</a> support for named buffers.
166: <!-- 2014/05/12 -->
167: <li>Fixed multiple bugs in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ncheck_ffs&manpath=OpenBSD%20Current&sektion=8&format=html">ncheck_ffs(8)</a> handling of indirect blocks.
168: <li>Updated <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=drm&manpath=OpenBSD%20Current&sektion=4&format=html">drm(4)</a> to libdrm 2.4.54.
169: <li>Fixed <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ntpd&manpath=OpenBSD%20Current&sektion=8&format=html">ntpd(8)</a> format strings involving time_t arguments. Fixes <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ntpd&manpath=OpenBSD%20Current&sektion=8&format=html">ntpd(8)</a> -d on sparc.
170: <li>Moved GTT management for Sandy Bridge into <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=inteldrm&manpath=OpenBSD%20Current&sektion=4&format=html">inteldrm(4)</a>.
171: <li>Removed AES_bi_ige_encrypt() from <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&manpath=OpenBSD%20Current&sektion=3&format=html">ssl(3)</a>.
172: <li>Removed md5crypt from <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=crypt&manpath=OpenBSD%20Current&sektion=3&format=html">crypt(3)</a>.
173: <li>Moved the ohash functions into libutil.
174: <li>Stopped <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhclient&manpath=OpenBSD%20Current&sektion=8&format=html">dhclient(8)</a> exiting when sent RTM_NEWADDR or RTM_DELADDR routing messages lacking appropriate address info.
175: <li>Altered <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=usbhidctl&manpath=OpenBSD%20Current&sektion=1&format=html">usbhidctl(1)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=usbhidaction&manpath=OpenBSD%20Current&sektion=1&format=html">usbhidaction(1)</a> parsers to keep in sync with the kernel HID parser.
176: <li>Fixed possible <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=smtpd&manpath=OpenBSD%20Current&sektion=8&format=html">smtpd(8)</a> double free when tls is required but not advertised by the server.
177: <li>Updated the HID parser to properly parse modern input device descriptors.
178: <li>Added router alert option (RAO) in IGMP packets (per RFC2236), needed by some L3 switches.
179: <li>More intelligent parsing of WEP keys by <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ifconfig&manpath=OpenBSD%20Current&sektion=8&format=html">ifconfig(8)</a>.
1.1339 brett 180: <!-- 2014/05/11 -->
181: <li>Make sure <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=uhub&manpath=OpenBSD%20Current&sektion=4&format=html">uhub(4)</a> root hub is re-attached before interrupts get enabled. Unbreaks resume.
182: <li>Stop ignoring "lease" statements in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhclient.conf&manpath=OpenBSD%20Current&sektion=5&format=html">dhclient.conf(5)</a>.
183: <li>Reworked/restored <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhclient&manpath=OpenBSD%20Current&sektion=8&format=html">dhclient(8)</a> recorded lease handling.
184: <li>Fixed the installer's configuration of a static IPv6 default gateway.
185: <!-- 2014/05/10 -->
186: <li>Various format string fixes on mips64 and octeon.
187: <li>Fixed recently-occurring <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&manpath=OpenBSD%20Current&sektion=8&format=html">ssl(8)</a> breakage in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=smtpd&manpath=OpenBSD%20Current&sektion=8&format=html">smtpd(8)</a>.
188: <li>On i386/amd64, disable speedstep instead of panicking if high and low speeds are the same.
189: <li>Allow <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=nginx&manpath=OpenBSD%20Current&sektion=8&format=html">nginx(8)</a> to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=chroot&manpath=OpenBSD%20Current&sektion=8&format=html">chroot(8)</a> to a directory other than /var/www.
190: <li>Many string format fixes on sparc64.
191: <li>Losing TCP connection no longer results in an unrecoverable stop in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=iscsid&manpath=OpenBSD%20Current&sektion=8&format=html">iscsid(8)</a>.
192: <!-- 2014/05/09 -->
193: <li>Stopped <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cribbage&manpath=OpenBSD%20Current&sektion=6&format=html">cribbage(6)</a> ignoring words which followed two or more blank characters.
194: <li>Print interface name with queues in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=systat&manpath=OpenBSD%20Current&sektion=1&format=html">systat(1)</a> q.
195: <li>Updated to: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xterm&manpath=OpenBSD%20Current&sektion=1&format=html">xterm(1)</a> version 304; libXi 1.7.2 and xf86-input-synaptics 1.7.5.
196: <li>Fixed <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fsck_ffs&manpath=OpenBSD%20Current&sektion=8&format=html">fsck_ffs(8)</a> -b to work with the superblock locations on 4096-byte sector disks.
197: <li>Use the highest possible priority for any <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=route&manpath=OpenBSD%20Current&sektion=4&format=html">route(4)</a> to local addresses.
198: <!-- 2014/05/08 -->
199: <li>Stopped <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cribbage&manpath=OpenBSD%20Current&sektion=6&format=html">cribbage(6)</a> choking on one-letter card names which followed three-letter card names.
200: <li>Fixed potential <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=uvm&manpath=OpenBSD%20Current&sektion=9&format=html">uvm(9)</a> integer overflows.
201: <li>Made <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=relayd&manpath=OpenBSD%20Current&sektion=8&format=html">relayd(8)</a> fail when encountering unsupported combinations.
202: <li>Only attach <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pcexmem&manpath=OpenBSD%20Current&sektion=4&arch=luna88k&format=html">pcexmem(4/luna88k)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pcexio&manpath=OpenBSD%20Current&sektion=4&arch=luna88k&format=html">pcexio(4/luna88k)</a> on luna88k2 (not luna88k).
203: <li>Brought back restricted sockets to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=snmpd&manpath=OpenBSD%20Current&sektion=8&format=html">snmpd(8)</a>, inadvertently removed in recent update.
204: <!-- 2014/05/07 -->
205: <li>Made <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=zmore&manpath=OpenBSD%20Current&sektion=1&format=html">zmore(1)</a> call <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=more&manpath=OpenBSD%20Current&sektion=1&format=html">more(1)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=zless&manpath=OpenBSD%20Current&sektion=1&format=html">zless(1)</a> call <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=less&manpath=OpenBSD%20Current&sektion=1&format=html">less(1)</a>.
206: <li>Repaired the termination condition of a <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=write&manpath=OpenBSD%20Current&sektion=2&format=html">write(2)</a> loop in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=vipw&manpath=OpenBSD%20Current&sektion=8&format=html">vipw(8)</a>.
207: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&manpath=OpenBSD%20Current&sektion=8&format=html">ssl(8)</a> ec_asn1.c, don't free memory unless we allocated it (RT#3338).
208: <li>Improved code to clear all bignums from bn_lib.c in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&manpath=OpenBSD%20Current&sektion=8&format=html">ssl(8)</a>.
209: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&manpath=OpenBSD%20Current&sektion=8&format=html">ssl(8)</a> BN_clear_free(), don't cleanse the data if the static data flag is set.
210: <li>Render <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=roff&manpath=OpenBSD%20Current&sektion=7&format=html">roff(7)</a> escape sequences in man page descriptions prior to insertion into <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mandoc.db&manpath=OpenBSD%20Current&sektion=5&format=html">mandoc.db(5)</a>.
211: <li>Fixed two memory leaks in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=makewhatis&manpath=OpenBSD%20Current&sektion=8&format=html">makewhatis(8)</a> -n.
212: <li>Fixed segfault in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=makewhatis&manpath=OpenBSD%20Current&sektion=8&format=html">makewhatis(8)</a> -Q if the next .SH after .SH NAME does not have any arguments.
213: <li>Backed out the previous ICMP simplifying diff from <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhcpd&manpath=OpenBSD%20Current&sektion=8&format=html">dhcpd(8)</a>, which caused livelocks.
214: <li>Try postponed requests first, so <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=iked&manpath=OpenBSD%20Current&sektion=8&format=html">iked(8)</a> does in-order processing.
215: <li>Made <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=iked&manpath=OpenBSD%20Current&sektion=8&format=html">iked(8)</a> authentication work with X509 certificates not containing a subject-altname.
216: <li>Removed the undocumented and ineffective <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ln&manpath=OpenBSD%20Current&sektion=1&format=html">ln(1)</a> -F option.
217: <li>Removed <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sysctl&manpath=OpenBSD%20Current&sektion=8&format=html">sysctl(8)</a> {nd6_,}useloopback options.
218: <!-- 2014/05/06 -->
219: <li>Fixed recently broken ext2fs atime and mtime.
220: <li>Introduced <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=gcc&manpath=OpenBSD%20Current&sektion=1&format=html">gcc(1)</a> -fstack-shuffle, which randomises local stack variables.
221: <li>Make sure <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&manpath=OpenBSD%20Current&sektion=8&format=html">ssl(8)</a> PKCS7_get_octet_string() return values are checked for NULL (PR#3339).
222: <li>Enabled <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=brswphy&manpath=OpenBSD%20Current&sektion=4&arch=octeon&format=html">brswphy(4/octeon)</a>.
223: <li>Allow <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=iked&manpath=OpenBSD%20Current&sektion=8&format=html">iked(8)</a> to initiate a create-child-SA and process requests for the peer simultaneously.
224: <li>Explicitly zero ibufs before releasing memory. Ensures <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=iked&manpath=OpenBSD%20Current&sektion=8&format=html">iked(8)</a> crypto parameters are cleaned.
225: <li>Fixed memory leaks in the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=relayd&manpath=OpenBSD%20Current&sektion=8&format=html">relayd(8)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=smtpd&manpath=OpenBSD%20Current&sektion=8&format=html">smtpd(8)</a> <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&manpath=OpenBSD%20Current&sektion=8&format=html">ssl(8)</a> code.
226: <li>Re-queue pfkey events while <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=iked&manpath=OpenBSD%20Current&sektion=8&format=html">iked(8)</a> is busy initiating child-SAs.
227: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=iked&manpath=OpenBSD%20Current&sektion=8&format=html">iked(8)</a>, initiate ike SA rekeying ("ikesalifetime" keyword).
228: <li>Fixed <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=iked&manpath=OpenBSD%20Current&sektion=8&format=html">iked(8)</a> memleak when SA lookup fails while forwarding encrypted <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ip6&manpath=OpenBSD%20Current&sektion=4&format=html">ip6(4)</a> packets.
229: <li>Plugged two <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ucom&manpath=OpenBSD%20Current&sektion=4&format=html">ucom(4)</a> xfer leaks and a buffer leak.
230: <li>Encrypt some <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=iked&manpath=OpenBSD%20Current&sektion=8&format=html">iked(8)</a> notify payloads.
231: <li>Initial <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=iked&manpath=OpenBSD%20Current&sektion=8&format=html">iked(8)</a> support for PFS.
232: <!-- 2014/05/05 -->
233: <li>Cleanse old <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&manpath=OpenBSD%20Current&sektion=8&format=html">ssl(8)</a> memory when expanding a bignum; clear all bignums when freed.
234: <li>Updated xkeyboard-config to version 2.11.
235: <li>Workaround overoptimistic <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fdisk&manpath=OpenBSD%20Current&sektion=8&format=html">fdisk(8)</a> alignment expectation on dos_partition fields.
236: <li>Enhanced reading of saved ascii labels when using <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=disklabel&manpath=OpenBSD%20Current&sektion=8&format=html">disklabel(8)</a> -R.
237: <li>Stopped <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=iked&manpath=OpenBSD%20Current&sektion=8&format=html">iked(8)</a> leaking on pid mismatch.
238: <li>Validate the attribute length in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=iked&manpath=OpenBSD%20Current&sektion=8&format=html">iked(8)</a>.
239: <li>Removed SRP and Kerberos support from <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&manpath=OpenBSD%20Current&sektion=8&format=html">ssl(8)</a>.
1.1338 brett 240: <!-- 2014/05/04 -->
241: <li>On sparc, enabled <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&manpath=OpenBSD%20Current&sektion=8&format=html">ssl(8)</a> assembler code for DES.
242: <li>On vax, enabled the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&manpath=OpenBSD%20Current&sektion=8&format=html">ssl(8)</a> assembler code for BN.
243: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=relayd&manpath=OpenBSD%20Current&sektion=8&format=html">relayd(8)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=smtpd&manpath=OpenBSD%20Current&sektion=8&format=html">smtpd(8)</a>, fixed SSL/TLS and a possible fatalx() on machines without a default RSA engine.
244: <!-- 2014/05/03 -->
245: <li>Added <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sysctl&manpath=OpenBSD%20Current&sektion=8&format=html">sysctl(8)</a> kern.nosuidcoredump=3, to dump <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=core&manpath=OpenBSD%20Current&sektion=5&format=html">core(5)</a> into the /var/crash/progname/ directory.
246: <li>Enabled <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&manpath=OpenBSD%20Current&sektion=8&format=html">ssl(8)</a> assembler code for AES, DES, GCM, SHA1, SHA256 and SHA512 on sparc64.
247: <li>Enabled <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&manpath=OpenBSD%20Current&sektion=8&format=html">ssl(8)</a> assembler code for AES, BN, GCM128, SHA1, SHA256 and SHA512 on arm.
248: <li>Updated to: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xauth&manpath=OpenBSD%20Current&sektion=1&format=html">xauth(1)</a> version 1.0.9; <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xbacklight&manpath=OpenBSD%20Current&sektion=1&format=html">xbacklight(1)</a> version 1.2.1; <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xrandr&manpath=OpenBSD%20Current&sektion=1&format=html">xrandr(1)</a> version 1.4.2 and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xinput&manpath=OpenBSD%20Current&sektion=1&format=html">xinput(1)</a> version 1.6.1.
249: <li>Updated to libFS 1.0.6.
250: <li>Unbroke <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&manpath=OpenBSD%20Current&sektion=1&format=html">ssh(1)</a> compression.
251: <li>Switched to generating <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bcrypt&manpath=OpenBSD%20Current&sektion=3&format=html">bcrypt(3)</a> 2b hashes by default.
252: <li>Added checks for invalid base64 encoded data in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&manpath=OpenBSD%20Current&sektion=8&format=html">ssl(8)</a> padding. Fixes a crash (RT#2608).
253: <li>Provide extended-precision math constants (required by POSIX).
254: <li>Stopped citrus UTF-8 parser rejecting 0xFFFE and 0xFFFF (they do not render strings invalid).
255: <!-- 2014/05/02 -->
256: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=drm&manpath=OpenBSD%20Current&sektion=4&format=html">drm(4)</a> i915 fixes: workaround inverted brightness for Acer Aspire 5336; fixed gen4 composite s-video tv-out.
257: <li>Updated <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=Xserver&manpath=OpenBSD%20Current&sektion=1&format=html">Xserver(1)</a> to version 1.15.1.
258: <li>On hppa, fixed <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&manpath=OpenBSD%20Current&sektion=8&format=html">ssl(8)</a> assembler version of SHA512 to output correct results.
259: <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=acpiprt&manpath=OpenBSD%20Current&sektion=4&format=html">acpiprt(4)</a> correctly handle interrupts with non-standard polarity.
260: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=acpi&manpath=OpenBSD%20Current&sektion=4&format=html">acpi(4)</a>, made acpi_mutex_acquire/release actually grab the global lock when called.
261: <li>Fixed occasional <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=disklabel&manpath=OpenBSD%20Current&sektion=8&format=html">disklabel(8)</a> crashes when altering mount points.
262: <!-- 2014/05/01 -->
263: <li>Reverted __bounded code in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&manpath=OpenBSD%20Current&sektion=1&format=html">ssh(1)</a>.
264: <li>Oh hppa, use assembly code for AES, BN (Montgomery), SHA1, SHA256 and SHA512 in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&manpath=OpenBSD%20Current&sektion=8&format=html">ssl(8)</a>.
265: <li>Stopped <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&manpath=OpenBSD%20Current&sektion=8&format=html">ssl(8)</a> <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=perl&manpath=OpenBSD%20Current&sektion=1&format=html">perl(1)</a> scripts outputting SOM-specific directives.
266: <li>Removed unreferenced OPENSSL_instrument_bus and OPENSSL_instrument_bus2 routines from <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&manpath=OpenBSD%20Current&sektion=8&format=html">ssl(8)</a>.
267: <li>Extended <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fread&manpath=OpenBSD%20Current&sektion=3&format=html">fread(3)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fwrite&manpath=OpenBSD%20Current&sektion=3&format=html">fwrite(3)</a> to check for integer overflows.
268: <li>Moved <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=smtpd&manpath=OpenBSD%20Current&sektion=8&format=html">smtpd(8)</a> RSA key handling from "lka" to a new dedicated "ca" process.
269: <li><font color="#e00000">5.4 and 5.5 RELIABILITY FIX: Stop attacker's ability to trigger an <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&manpath=OpenBSD%20Current&sektion=8&format=html">ssl(8)</a> alert, which could cause a null pointer dereference.</font><br>A source code patch is available for <a href="errata54.html#009_openssl">5.4</a> and <a href="errata55.html#005_openssl">5.5</a>.
270: <li>Fixed <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=gcc&manpath=OpenBSD%20Current&sektion=1&format=html">gcc(1)</a> on i386, to detect overflows and properly align arrays > 16 bytes.
271: <li>Added ChaCha cypher to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&manpath=OpenBSD%20Current&sektion=8&format=html">ssl(8)</a>, and provided it with an EVP implementation.
272: <li>Added Brainpool and ANSSI FRP256v1 elliptic curves to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&manpath=OpenBSD%20Current&sektion=8&format=html">ssl(8)</a> (RT#2239).
273: <li>Corrected <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&manpath=OpenBSD%20Current&sektion=8&format=html">isakmpd(8)</a> test when passing data to a keynote.
274: <!-- 2014/04/30 -->
275: <li>Improved <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=malloc&manpath=OpenBSD%20Current&sektion=3&format=html">malloc(3)</a>'s ability to pick a free chunk at random.
276: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=uvm&manpath=OpenBSD%20Current&sektion=9&format=html">uvm(9)</a> now correctly flush discarded pages even if the number of hash buckets doesn't change.
277: <li>When <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=openssl&manpath=OpenBSD%20Current&sektion=1&format=html">openssl(1)</a> isn't available, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&manpath=OpenBSD%20Current&sektion=1&format=html">ssh(1)</a> now uses local fallback implementation of AES for UMAC.
278: <li>Preserve the intended chronological order of leases in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhclient.leases&manpath=OpenBSD%20Current&sektion=5&format=html">dhclient.leases(5)</a> files.
279: <li>Fixed <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=growfs&manpath=OpenBSD%20Current&sektion=8&format=html">growfs(8)</a> on 4K-sector disks.
280: <li>First pass at removing win64 support from the assembly-generating <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=perl&manpath=OpenBSD%20Current&sektion=1&format=html">perl(1)</a> scripts in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&manpath=OpenBSD%20Current&sektion=8&format=html">ssl(8)</a>.
281: <li>Stopped <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=smtpd&manpath=OpenBSD%20Current&sektion=8&format=html">smtpd(8)</a> trying to create folders that already exist when using maildir.
282: <li>Improved imsg handling with many concurrent connections in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=smtpd&manpath=OpenBSD%20Current&sektion=8&format=html">smtpd(8)</a>.
283: <!-- 2014/04/29 -->
284: <li>New buffer API, to eventually make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&manpath=OpenBSD%20Current&sektion=1&format=html">ssh(1)</a> usable as a standalone library.
285: <li>Improved enforcing of proper alignment of stack variables on sparc.
286: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=smtpd&manpath=OpenBSD%20Current&sektion=8&format=html">smtpd(8)</a> RSA private key privsep will now only load keys after forking the separated process.
287: <li>Stopped <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sftp&manpath=OpenBSD%20Current&sektion=1&format=html">sftp(1)</a> attempting to append a nul quote character to filenames (bz#2238).
288: <li>Implemented RSA privilege separation for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=smtpd&manpath=OpenBSD%20Current&sektion=8&format=html">smtpd(8)</a>. Prevents possible private key leakage.
289: <li>Made compiling <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&manpath=OpenBSD%20Current&sektion=8&format=html">ssh(8)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&manpath=OpenBSD%20Current&sektion=8&format=html">sshd(8)</a> against <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&manpath=OpenBSD%20Current&sektion=8&format=html">ssl(8)</a> optional.
290: <li>When <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=smtpd&manpath=OpenBSD%20Current&sektion=8&format=html">smtpd(8)</a> fails to relay via TLS (and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=smtpd.conf&manpath=OpenBSD%20Current&sektion=5&format=html">smtpd.conf(5)</a> doesn't require security), try plain; also downgrade if a TLS error happens during the session.
291: <li>Constrain bytes read/written to positive values in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&manpath=OpenBSD%20Current&sektion=8&format=html">ssl(8)</a> s3_pkt.c code.
292: <li>Re-added local aesctr implementation to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&manpath=OpenBSD%20Current&sektion=1&format=html">ssh(1)</a>.
293: <li>Moved <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=traceroute6&manpath=OpenBSD%20Current&sektion=8&format=html">traceroute6(8)</a> to the attic, fully merged into <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=traceroute&manpath=OpenBSD%20Current&sektion=8&format=html">traceroute(8)</a>.
294: <li>Removed large memory leak from <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=usb&manpath=OpenBSD%20Current&sektion=4&format=html">usb(4)</a>.
295: <li>Deleted SSL_OP_DONT_INSERT_EMPTY_FRAGMENTS from <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=nginx&manpath=OpenBSD%20Current&sektion=8&format=html">nginx(8)</a> to keep attack mitigations enabled.
296: <li>Stopped <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&manpath=OpenBSD%20Current&sektion=1&format=html">ssh(1)</a> sending success/failure replies when channels have sent a close already (bz#1818).
297: <li>Removed <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=less&manpath=OpenBSD%20Current&sektion=1&format=html">less(1)</a> support for the obsolete (non-POSIX) "more -d" prompt.
298: <li>Made sure the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=iked&manpath=OpenBSD%20Current&sektion=8&format=html">iked(8)</a> state machine only advances if the AUTH payload has been verified.
299: <li>Use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=explicit_bzero&manpath=OpenBSD%20Current&sektion=3&format=html">explicit_bzero(3)</a> instead of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=memset&manpath=OpenBSD%20Current&sektion=3&format=html">memset(3)</a> to clear out sensitive <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=smtpd&manpath=OpenBSD%20Current&sektion=8&format=html">smtpd(8)</a> data.
300: <!-- 2014/04/28 -->
301: <li>Implemented AI_ADDRCONFIG in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getaddrinfo&manpath=OpenBSD%20Current&sektion=3&format=html">getaddrinfo(3)</a>, as per RFC 3493.
302: <li>Removed more WIN32, WIN64 and MINGW32 tentacles from <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&manpath=OpenBSD%20Current&sektion=8&format=html">ssl(8)</a>.
303: <li>Use the correct algorithm mask in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&manpath=OpenBSD%20Current&sektion=8&format=html">ssl(8)</a> t1_enc.c.
304: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&manpath=OpenBSD%20Current&sektion=8&format=html">ssl(8)</a>, stopped SSL_OP_ALL disabling attack mitigations against CBC modes.
305: <li>Let <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=nm&manpath=OpenBSD%20Current&sektion=1&format=html">nm(1)</a> -w correctly return 0 for valid archives.
306: <li>Stopped <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ping&manpath=OpenBSD%20Current&sektion=8&format=html">ping(8)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ping6&manpath=OpenBSD%20Current&sektion=8&format=html">ping6(8)</a> sleeping after <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=poll&manpath=OpenBSD%20Current&sektion=2&format=html">poll(2)</a> returns an error.
307: <li>Added <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fuse&manpath=OpenBSD%20Current&sektion=4&format=html">fuse(4)</a> support for 255 character file names.
308: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=m4&manpath=OpenBSD%20Current&sektion=1&format=html">m4(1)</a> now checks for integer overflows in custom allocs.
309: <li>Added support to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=snmpd&manpath=OpenBSD%20Current&sektion=8&format=html">snmpd(8)</a> for exporting ARP table via "ipNetToMediaTable" OID.
310: <li>Fixed a loop so that waiting for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wds&manpath=OpenBSD%20Current&sektion=4&arch=i386&format=html">wds(4/i386)</a> hardware actually happens.
1.1337 brett 311: <!-- 2014/04/27 -->
312: <li>Improved error handling when using <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dbopen&manpath=OpenBSD%20Current&sektion=3&format=html">dbopen(3)</a> in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mandoc&manpath=OpenBSD%20Current&sektion=1&format=html">mandoc(1)</a>.
313: <li>Fixed library search order in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=libtool&manpath=OpenBSD%20Current&sektion=1&format=html">libtool(1)</a>.
314: <li>Updated to xproto 7.0.26.
315: <li>On i386, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=installboot&manpath=OpenBSD%20Current&sektion=8&format=html">installboot(8)</a> no longer overwrites disklabel and nearby blocks on 4k-sector disk drives.
316: <li>Stopped <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bluetooth&manpath=OpenBSD%20Current&sektion=4&format=html">bluetooth(4)</a> HID device grabbing the console.
317: <li>Re-added "_ppp" user and "_ppp" group, to be solely used by <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=npppd&manpath=OpenBSD%20Current&sektion=8&format=html">npppd(8)</a> going forward.
318: <!-- 2014/04/26 -->
319: <li>Stopped <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&manpath=OpenBSD%20Current&sektion=8&format=html">ssl(8)</a> using random stack memory as addresses of strings.
320: <li>Removed support for building <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=openssl&manpath=OpenBSD%20Current&sektion=1&format=html">openssl(1)</a> on 16-bit Windows.
321: <!-- 2014/04/25 -->
322: <li>Filter excess data from autoinstall output, to avoid filling the ramdisk.
323: <li>Made <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=more&manpath=OpenBSD%20Current&sektion=1&format=html">more(1)</a> POSIX compliant with respect to the -e option.
324: <li>Merged <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=less&manpath=OpenBSD%20Current&sektion=1&format=html">less(1)</a> version 458, including local changes.
325: <li>Reduced the verbosity of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=makewhatis&manpath=OpenBSD%20Current&sektion=8&format=html">makewhatis(8)</a> -t.
326: <li>Do not re-probe <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pms&manpath=OpenBSD%20Current&sektion=4&format=html">pms(4)</a> unnecessarily. Fixes 12 seconds <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=Xorg&manpath=OpenBSD%20Current&sektion=1&format=html">Xorg(1)</a> delay on some laptops.
327: <li>Stopped <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=iked&manpath=OpenBSD%20Current&sektion=8&format=html">iked(8)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mpii&manpath=OpenBSD%20Current&sektion=4&format=html">mpii(4)</a> accessing pointers prior to a null check.
328: <li>Allow <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=snmpd.conf&manpath=OpenBSD%20Current&sektion=5&format=html">snmpd.conf(5)</a> to set user-defined actions on receipt of snmp traps.
329: <!-- 2014/04/24 -->
330: <li>Removed <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=kinit&manpath=OpenBSD%20Current&sektion=1&format=html">kinit(1)</a>.
331: <li>Fixed <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sudo&manpath=OpenBSD%20Current&sektion=8&format=html">sudo(8)</a> when checking command line environment variables against the blacklist (CVE 2014-0106).
332: <li>Fixed copied text in the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=snmpd&manpath=OpenBSD%20Current&sektion=8&format=html">snmpd(8)</a> error string.
333: <!-- 2014/04/23 -->
334: <li>Stopped <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&manpath=OpenBSD%20Current&sektion=8&format=html">ssl(8)</a> do_ssl3_write() being called recursively; don't release buffer meant for use.
335: <li>Audited <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=malloc&manpath=OpenBSD%20Current&sektion=3&format=html">malloc(3)</a>/<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=calloc&manpath=OpenBSD%20Current&sektion=3&format=html">calloc(3)</a>/<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=realloc&manpath=OpenBSD%20Current&sektion=3&format=html">realloc(3)</a> usage in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mandoc&manpath=OpenBSD%20Current&sektion=1&format=html">mandoc(1)</a> to be safe from overflows.
336: <li>Fixes in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&manpath=OpenBSD%20Current&sektion=8&format=html">ssl(8)</a> kssl.c to prevent double frees and removed a use-after-free.
337: <li>Fixed leak in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&manpath=OpenBSD%20Current&sektion=8&format=html">ssl(8)</a> BIO_accept which could have caused the caller to crash.
338: <li>Audited <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=strlcpy&manpath=OpenBSD%20Current&sektion=3&format=html">strlcpy(3)</a>/<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=strlcat&manpath=OpenBSD%20Current&sektion=3&format=html">strlcat(3)</a> usage in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mandoc&manpath=OpenBSD%20Current&sektion=1&format=html">mandoc(1)</a>.
339: <li>Removed "Z" option from <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=malloc.conf&manpath=OpenBSD%20Current&sektion=5&format=html">malloc.conf(5)</a>; by default always junk small chunks now.
340: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=unbound&manpath=OpenBSD%20Current&sektion=8&format=html">unbound(8)</a>, use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=arc4random&manpath=OpenBSD%20Current&sektion=9&format=html">arc4random(9)</a> as PRNG backend, instead of the libcrypto RAND.
341: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=disklabel&manpath=OpenBSD%20Current&sektion=8&format=html">disklabel(8)</a> now fills all required fields after clearing. Avoids consistency check failures.
342: <!-- 2014/04/22 -->
343: <li>Improved <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=malloc&manpath=OpenBSD%20Current&sektion=3&format=html">malloc(3)</a> hash functions that compute the same on big-endian and little-endian archs.
344: <li>Removed OPENSSL_indirect_call() from <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&manpath=OpenBSD%20Current&sektion=8&format=html">ssl(8)</a> for reduced attack surface.
345: <li>Fixed a missing <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=splbio&manpath=OpenBSD%20Current&sektion=9&format=html">splbio(9)</a> in sys/ufs/ffs/ffs_softdep.c which caused crashes.
346: <li>Remove useless RX checksum offloading support from <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=gem&manpath=OpenBSD%20Current&sektion=4&format=html">gem(4)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=hme&manpath=OpenBSD%20Current&sektion=4&format=html">hme(4)</a>.
347: <li>Removed Apache from base (replaced by <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=nginx&manpath=OpenBSD%20Current&sektion=8&format=html">nginx(8)</a>).
348: <li>On <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bge&manpath=OpenBSD%20Current&sektion=4&format=html">bge(4)</a> when VLAN_HWTAGGING is disabled, stopped tagging the packet twice.
349: <li>Prepend ether_vlan_header rather than regular ethernet header for more efficient vlan tagging.
350: <li>Kerberos disabled and removed from base, possibly to be moved to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ports&manpath=OpenBSD%20Current&sektion=7&format=html">ports(7)</a> later.
351: <li>Support the CA key for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&manpath=OpenBSD%20Current&sektion=8&format=html">ssl(8)</a> inspection in the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=relayd&manpath=OpenBSD%20Current&sektion=8&format=html">relayd(8)</a> CA process.
352: <!-- 2014/04/21 -->
353: <li>Avoid a loop during autoinstall when the path in the responsefile does not exist.
354: <li>Made <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=iscsictl&manpath=OpenBSD%20Current&sektion=8&format=html">iscsictl(8)</a> print bytes read and written in human-readable form.
355: <li>Allow the installer to configure dhcp for an interface without an active network connection.
356: <li>Bind <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=iscsid&manpath=OpenBSD%20Current&sektion=8&format=html">iscsid(8)</a> to localAddr if it is specified.
357: <li>Print the target and initiator name in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=iscsictl&manpath=OpenBSD%20Current&sektion=8&format=html">iscsictl(8)</a> show command.
358: <li>Verify permissions are correct on the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&manpath=OpenBSD%20Current&sektion=1&format=html">ssh(1)</a> id_ed25519 file.
359: <li>Fixed msdosfs to cope with 64-bit time_t. Set unrepresentable dates to 1/1/1980.
360: <li>Made <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhclient&manpath=OpenBSD%20Current&sektion=8&format=html">dhclient(8)</a> delete discarded offered leases from the correct TAILQ. Avoids infinite loop.
361: <li>Implemented <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sftp&manpath=OpenBSD%20Current&sektion=1&format=html">sftp(1)</a> upload resume support.
362: <li>Reverted r1.101 of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=traceroute&manpath=OpenBSD%20Current&sektion=8&format=html">traceroute(8)</a>, which broke source port selection.
363: <li>Added <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mallocarray&manpath=OpenBSD%20Current&sektion=3&format=html">mallocarray(3)</a> function (like <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=calloc&manpath=OpenBSD%20Current&sektion=3&format=html">calloc(3)</a> but without the cleared-memory guarantee).
364: <li>Backed out parts of sys/nfs/nfs_serv.c r1.47, which computed wrong block sizes.
365: <li>Added <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pkg_add&manpath=OpenBSD%20Current&sektion=1&format=html">pkg_add(1)</a> support for reading/writing long paths and linkpaths as extended headers.
366: <li>Allow <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=iscsid&manpath=OpenBSD%20Current&sektion=8&format=html">iscsid(8)</a> to send data immediately for write commands, for 20% performance boost.
367: <li>Stopped <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=disklabel&manpath=OpenBSD%20Current&sektion=8&format=html">disklabel(8)</a> leaking mountpoint info. Fixes mysterious crashes.
1.1336 brett 368: <!-- 2014/04/20 -->
369: <li><font color="#e00000">5.5 RELIABILITY FIX: Disable the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&manpath=OpenBSD%20Current&sektion=1&format=html">ssh(1)</a> curve25519-sha256@libssh.org KEX method when the other party's connection will fail.</font>
370: <li>Prevent <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=lpd&manpath=OpenBSD%20Current&sektion=8&format=html">lpd(8)</a> from looking into <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=hosts.equiv&manpath=OpenBSD%20Current&sektion=5&format=html">hosts.equiv(5)</a>. Access control is now done only using hosts.lpd.
371: <li>Introduced basic stats for the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=iscsid&manpath=OpenBSD%20Current&sektion=8&format=html">iscsid(8)</a> <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=vscsi&manpath=OpenBSD%20Current&sektion=4&format=html">vscsi(4)</a> layer; added <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=iscsictl&manpath=OpenBSD%20Current&sektion=8&format=html">iscsictl(8)</a> controls.
372: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mandoc&manpath=OpenBSD%20Current&sektion=1&format=html">mandoc(1)</a> debug messages, truncate strings of excessive lengths.
373: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhclient&manpath=OpenBSD%20Current&sektion=8&format=html">dhclient(8)</a> -L now preserves the fd being monitored after new leases, lease renewals and cable unplugs.
374: <li>Fixed unchecked <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=snprintf&manpath=OpenBSD%20Current&sektion=3&format=html">snprintf(3)</a> in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mandoc&manpath=OpenBSD%20Current&sektion=1&format=html">mandoc(1)</a> page header printing.
375: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mandoc&manpath=OpenBSD%20Current&sektion=1&format=html">mandoc(1)</a>, made sure static buffers for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=snprintf&manpath=OpenBSD%20Current&sektion=3&format=html">snprintf(3)</a> are large enough.
376: <li>Removed more unused <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&manpath=OpenBSD%20Current&sektion=8&format=html">ssl(8)</a> tools and docs.
377: <li>Moved <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=iscsid&manpath=OpenBSD%20Current&sektion=8&format=html">iscsid(8)</a> session params initialisation to session start, so config parameters stick.
378: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=iscsid&manpath=OpenBSD%20Current&sektion=8&format=html">iscsid(8)</a> now does proper LoginOperational negotiation.
379: <li>Added <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=relayd&manpath=OpenBSD%20Current&sektion=8&format=html">relayd(8)</a> check for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=strlcpy&manpath=OpenBSD%20Current&sektion=3&format=html">strlcpy(3)</a> overflow when expanding HTTP input value.
380: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=snmpd&manpath=OpenBSD%20Current&sektion=8&format=html">snmpd(8)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=relayd&manpath=OpenBSD%20Current&sektion=8&format=html">relayd(8)</a> will now fail if <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=strlcpy&manpath=OpenBSD%20Current&sektion=3&format=html">strlcpy(3)</a> overflows the socket path.
381: <li>When installing OpenBSD, ensure that the hostname information is in the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhclient&manpath=OpenBSD%20Current&sektion=8&format=html">dhclient(8)</a> lease db.
382: <li>Reimplemented arrays in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=relayd&manpath=OpenBSD%20Current&sektion=8&format=html">relayd(8)</a> used to set up process-to-process imsg communication.
383: <li>Use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=calloc&manpath=OpenBSD%20Current&sektion=3&format=html">calloc(3)</a> instead of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=malloc&manpath=OpenBSD%20Current&sektion=3&format=html">malloc(3)</a> + <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=memset&manpath=OpenBSD%20Current&sektion=3&format=html">memset(3)</a> across <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&manpath=OpenBSD%20Current&sektion=8&format=html">ssl(8)</a>, to avoid integer overflows.
384: <li>Rearranged <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=qle&manpath=OpenBSD%20Current&sektion=4&format=html">qle(4)</a> update processing loop to attach and detach targets last; handle fabric port login errors better.
385: <li>Fixed leak in the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=snmpd&manpath=OpenBSD%20Current&sektion=8&format=html">snmpd(8)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=relayd&manpath=OpenBSD%20Current&sektion=8&format=html">relayd(8)</a> agentx error paths.
386: <li>Added support for SSHFP DNS records for ED25519 key types to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&manpath=OpenBSD%20Current&sektion=1&format=html">ssh(1)</a>.
387: <!-- 2014/04/19 -->
388: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&manpath=OpenBSD%20Current&sektion=8&format=html">ssl(8)</a> ts_rsp_verify.c, reset imprint to NULL to avoid double free.
389: <li>Added a canonical 6.6+ curve25519 fake version to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&manpath=OpenBSD%20Current&sektion=1&format=html">ssh(1)</a>, to be recommended with openssh-6.7.
390: <li>Use get/put_u32 to load values and unbreak <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&manpath=OpenBSD%20Current&sektion=1&format=html">ssh(1)</a> on strict-alignment architectures.
391: <li>Removed checksum offloading from <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sk&manpath=OpenBSD%20Current&sektion=4&format=html">sk(4)</a>, faulty on this hardware.
392: <li>Added <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=strlcpy&manpath=OpenBSD%20Current&sektion=3&format=html">strlcpy(3)</a> check. Stops <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=smtpd&manpath=OpenBSD%20Current&sektion=8&format=html">smtpd(8)</a> fatal at startup if truncation occurred with filters enabled.
393: <li>Added missing <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=strlcpy&manpath=OpenBSD%20Current&sektion=3&format=html">strlcpy(3)</a> check when parsing the "backup hostname" section in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=smtpd.conf&manpath=OpenBSD%20Current&sektion=5&format=html">smtpd.conf(5)</a>.
394: <li>Removed "disable pmtud" and "increased window size" options from <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sysctl.conf&manpath=OpenBSD%20Current&sektion=5&format=html">sysctl.conf(5)</a> to discourage their use.
395: <li>Removed <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rsh&manpath=OpenBSD%20Current&sektion=1&format=html">rsh(1)</a>. Deprecated in favor of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&manpath=OpenBSD%20Current&sektion=1&format=html">ssh(1)</a>.
396: <li>Fixed display of destination IP when host is an IP address in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=traceroute&manpath=OpenBSD%20Current&sektion=8&format=html">traceroute(8)</a>.
397: <li>Added checks to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=strlcpy&manpath=OpenBSD%20Current&sektion=3&format=html">strlcpy(3)</a> when <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=smtpd&manpath=OpenBSD%20Current&sektion=8&format=html">smtpd(8)</a> is copying envelope "destination" buffer to the mda delivery buffer.
398: <li>If user+tag@ exceeds SMTPD_MAXPATHLEN <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=smtpd&manpath=OpenBSD%20Current&sektion=8&format=html">smtpd(8)</a> now fails instead of creating a ".truncated" tag dir.
399: <li>Removed obsolete altq bandwidth shaping from <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&manpath=OpenBSD%20Current&sektion=4&format=html">pf(4)</a>.
400: <!-- 2014/04/18 -->
401: <li>Allow <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mandoc&manpath=OpenBSD%20Current&sektion=1&format=html">mandoc(1)</a> to properly handle symlinks .
402: <li>Disable the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&manpath=OpenBSD%20Current&sektion=1&format=html">ssh(1)</a> curve25519-sha256@libssh.org KEX method when the other party's connection will fail.
403: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mandoc&manpath=OpenBSD%20Current&sektion=1&format=html">mandoc(1)</a> update mode, when opening the database fails, just rebuild it from scratch.
404: <li>Removed <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=RAND_seed&manpath=OpenBSD%20Current&sektion=3&format=html">RAND_seed(3)</a> calls in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=iked&manpath=OpenBSD%20Current&sektion=8&format=html">iked(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ikectl&manpath=OpenBSD%20Current&sektion=8&format=html">ikectl(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=relayd&manpath=OpenBSD%20Current&sektion=8&format=html">relayd(8)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=snmpd&manpath=OpenBSD%20Current&sektion=8&format=html">snmpd(8)</a>.
405: <li>For <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wscons&manpath=OpenBSD%20Current&sektion=4&format=html">wscons(4)</a> WSDISPLAY_COMPAT_USL protocol, send the synchronizing signals to the process, not just the thread.
406: <li>Updated <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=unifdef&manpath=OpenBSD%20Current&sektion=1&format=html">unifdef(1)</a> to version 2.10.
407: <li>Raised <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=nginx&manpath=OpenBSD%20Current&sektion=8&format=html">nginx(8)</a> file limits, but lower number of connections (leaving files to spare for other programs).
408: <li>Removed <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bdes&manpath=OpenBSD%20Current&sektion=1&format=html">bdes(1)</a>, so as to not encourage its use.
409: <li>Removed dead KAME code that dealt with IPv4-mapped IPv6 addresses; added check for IPv4-mapped IPv6 destination addresses for non-connected sockets.
410: <li>Use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=arc4random_buf&manpath=OpenBSD%20Current&sektion=3&format=html">arc4random_buf(3)</a> instead of harmful RAND_xxx in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=kerberos&manpath=OpenBSD%20Current&sektion=8&format=html">kerberos(8)</a>.
411: <li>Sync <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=traceroute6&manpath=OpenBSD%20Current&sektion=8&format=html">traceroute6(8)</a> to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tracroute&manpath=OpenBSD%20Current&sektion=8&format=html">tracroute(8)</a>: don't print source IP if "-s" is not given.
412: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=relayd&manpath=OpenBSD%20Current&sektion=8&format=html">relayd(8)</a>, fixed <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&manpath=OpenBSD%20Current&sektion=8&format=html">ssl(8)</a> client-only mode when no RSA private key is needed.
413: <li>Neuter the -legacy_renegotiation option to the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=openssl&manpath=OpenBSD%20Current&sektion=1&format=html">openssl(1)</a> "openssl s_{client,server}"; added support for "-starttls lmtp" to openssl s_client.
414: <li>When parsing a new cert into memory occupied by a previously verified cert, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&manpath=OpenBSD%20Current&sektion=8&format=html">ssl(8)</a> will no longer bypass verification checks.
415: <li>Introduced privsep for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=relayd&manpath=OpenBSD%20Current&sektion=8&format=html">relayd(8)</a> private keys.
416: <li>Use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=asprintf&manpath=OpenBSD%20Current&sektion=3&format=html">asprintf(3)</a> for generating path. Eliminates many unsafe uses of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=strlcpy&manpath=OpenBSD%20Current&sektion=3&format=html">strlcpy(3)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=strlcat&manpath=OpenBSD%20Current&sektion=3&format=html">strlcat(3)</a> in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&manpath=OpenBSD%20Current&sektion=8&format=html">ssl(8)</a>.
417: <li>If nfs rpc requests on a stream socket are already being processed, don't panic, just return.
418: <li>Cleanup of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=relayd&manpath=OpenBSD%20Current&sektion=8&format=html">relayd(8)</a> code tracking of socketpair between different privsep processes.
419: <li>Have each thread keeps its own reference to the process's ucreds. Avoids possible use-after-free.
420: <li>Allow <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=printf&manpath=OpenBSD%20Current&sektion=1&format=html">printf(1)</a> to handle passing zero as a fieldwidth or precision variable.
421: <li>Switched to the new <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=makewhatis&manpath=OpenBSD%20Current&sektion=8&format=html">makewhatis(8)</a>/<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=apropos&manpath=OpenBSD%20Current&sektion=1&format=html">apropos(1)</a>/<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=whatis&manpath=OpenBSD%20Current&sektion=1&format=html">whatis(1)</a> (described in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=apropos&manpath=OpenBSD%20Current&sektion=1&format=html">apropos(1)</a>).
422: <li>Added support for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=smtpd&manpath=OpenBSD%20Current&sektion=8&format=html">smtpd(8)</a> mailaddr lookup in the table_db.
423: <!-- 2014/04/17 -->
424: <li>Reworked <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=qle&manpath=OpenBSD%20Current&sektion=4&format=html">qle(4)</a> command polling loop to handle multiple responses in one interrupt, like <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=qla&manpath=OpenBSD%20Current&sektion=4&format=html">qla(4)</a>.
425: <li>Fully kill <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&manpath=OpenBSD%20Current&sektion=8&format=html">ssl(8)</a> FIPS API.
426: <li>Added some UTF-8 utility functions to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tmux&manpath=OpenBSD%20Current&sektion=1&format=html">tmux(1)</a>, to stop splitting UTF-8 characters improperly.
427: <li>Ensure parent thread is blocked until any others are detached before letting it exit. Avoids panic.
428: <li>Only scroll by one line at a time in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tmux&manpath=OpenBSD%20Current&sektion=1&format=html">tmux(1)</a> choose mode (as lists are generally short).
429: <li>Fixed <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhclient&manpath=OpenBSD%20Current&sektion=8&format=html">dhclient(8)</a> DHCPDISCOVERY and DHCPDECLINE (as INADDR_ANY != INADDR_BROADCAST).
430: <li>Changed <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&manpath=OpenBSD%20Current&sektion=8&format=html">ssl(8)</a> library to use intrinsic memory allocation functions instead of OPENSSL_foo wrappers.
431: <li>Set <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tmux&manpath=OpenBSD%20Current&sektion=1&format=html">tmux(1)</a> PATH explicitly, either from the client or session environment.
432: <li>Don't limit the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tmux&manpath=OpenBSD%20Current&sektion=1&format=html">tmux(1)</a> DCS buffer to 256 bytes, expand it as needed.
433: <li>No longer allow <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&manpath=OpenBSD%20Current&sektion=8&format=html">ssl(8)</a> to feed RSA private key information to the random subsystem as entropy.
434: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=openssl&manpath=OpenBSD%20Current&sektion=1&format=html">openssl(1)</a> PR#3309: when looking for an extension, properly search all extensions.
435: <li>Removed the monitor-content option from <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tmux&manpath=OpenBSD%20Current&sektion=1&format=html">tmux(1)</a>.
436: <li>Fixed <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&manpath=OpenBSD%20Current&sektion=8&format=html">ssl(8)</a> to call the correct decrypt function in aes_cbc_cipher().
437: <li>Execute the active path checks when <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mpath&manpath=OpenBSD%20Current&sektion=4&format=html">mpath(4)</a> asks for it (rather than on attach).
438: <!-- 2014/04/16 -->
439: <li>Skip leading zero bytes in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&manpath=OpenBSD%20Current&sektion=1&format=html">ssh(1)</a> buffer_put_bignum2_from_string() function.
440: <li>Add ufs2 support in libsa/ufs2.c. One step closer being able to boot from ffs2 filesystems.
441: <li>Cleaned up dangerous <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=strncpy&manpath=OpenBSD%20Current&sektion=3&format=html">strncpy(3)</a> use in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&manpath=OpenBSD%20Current&sektion=8&format=html">ssl(8)</a>.
442: <li>Added missing parens so that <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rshd&manpath=OpenBSD%20Current&sektion=8&format=html">rshd(8)</a> errorhost gets properly initialised.
443: <li>Gave mlinks and keys tables a <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sqlite3&manpath=OpenBSD%20Current&sektion=1&format=html">sqlite3(1)</a> pageid index. Speeds basic <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=apropos&manpath=OpenBSD%20Current&sektion=1&format=html">apropos(1)</a> searches by 30%.
444: <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhclient&manpath=OpenBSD%20Current&sektion=8&format=html">dhclient(8)</a> -q even quieter.
445: <li>Removed programs from <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&manpath=OpenBSD%20Current&sektion=8&format=html">ssl(8)</a> code which don't work with current <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=openssl&manpath=OpenBSD%20Current&sektion=1&format=html">openssl(1)</a> releases.
446: <li>Fixed <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&manpath=OpenBSD%20Current&sektion=8&format=html">ssl(8)</a> bugs listed at http://www.viva64.com/en/b/0250/.
447: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&manpath=OpenBSD%20Current&sektion=8&format=html">ssl(8)</a> now ignores setting which allowed the connection to negotiate insecurely.
448: <li>Zero-pad <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&manpath=OpenBSD%20Current&sektion=8&format=html">ssl(8)</a> "usec" format to handle values less than 100,000 correctly.
449: <li>Killed bogus "send an SSLv3/TLS hello in SSLv2 format" code from the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&manpath=OpenBSD%20Current&sektion=8&format=html">ssl(8)</a> client.
450: <li>Stubbed some functions in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&manpath=OpenBSD%20Current&sektion=8&format=html">ssl(8)</a> mem_dbg.c, to avoid all possibility of using them.
451: <li>Always return 1 in the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&manpath=OpenBSD%20Current&sektion=8&format=html">ssl(8)</a> <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=arc4random&manpath=OpenBSD%20Current&sektion=9&format=html">arc4random(9)</a> backend. Unbreaks <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=lynx&manpath=OpenBSD%20Current&sektion=1&format=html">lynx(1)</a> and git.
452: <li>Added generic driver for "NEC PC-9801 extension board slot" on luna88k.
453: <li>Made directory ordering in our libtool stable.
454: <li>Closed memory leaks in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=snmpctl&manpath=OpenBSD%20Current&sektion=8&format=html">snmpctl(8)</a> client code.
455: <!-- 2014/04/15 -->
456: <li>Removed md2, seed and jpake cyphers from <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&manpath=OpenBSD%20Current&sektion=8&format=html">ssl(8)</a>.
457: <li>Removed approx 30 unused makefiles and more vestiges of ssl2 support from <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&manpath=OpenBSD%20Current&sektion=8&format=html">ssl(8)</a>.
458: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&manpath=OpenBSD%20Current&sektion=8&format=html">ssh(8)</a> EC_POINT_invert(), check the correct function pointer before attempting to invoke it (<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=openssl&manpath=OpenBSD%20Current&sektion=1&format=html">openssl(1)</a> RT #2569).
459: <li>RotIBM stream cipher (ebcdic), FIPS mode support and GOST engine removed from <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&manpath=OpenBSD%20Current&sektion=8&format=html">ssl(8)</a>.
460: <li>Replaced <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&manpath=OpenBSD%20Current&sektion=8&format=html">ssl(8)</a> PRNG with arc4random_buf(), keeping existing RAND interfaces unchanged.
461: <li>Added -s (two-byte signed decimal display) to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=od&manpath=OpenBSD%20Current&sektion=1&format=html">od(1)</a>, as mandated by POSIX.
462: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&manpath=OpenBSD%20Current&sektion=8&format=html">ssl(8)</a> fixes: corrected cases where code occurred directly after goto/break/return; removed pentium specific benchmark code; removed more vms and windows specific code.
463: <li>Unbroke xcb-util-cursor.
464: <li>Made <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=smtpd&manpath=OpenBSD%20Current&sektion=8&format=html">smtpd(8)</a> reply with correct imsg when using non-system authentication.
1.1335 brett 465: <!-- 2014/04/14 -->
466: <li>Stopped <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mandoc&manpath=OpenBSD%20Current&sektion=1&format=html">mandoc(1)</a> crashing when processing macros in .Sh header lines, or having .Sm off or .Bk -words open.
467: <li>Stopped leaking socketpair file descriptors if <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tmux&manpath=OpenBSD%20Current&sektion=1&format=html">tmux(1)</a> <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fork&manpath=OpenBSD%20Current&sektion=2&format=html">fork(2)</a> fails.
468: <li>Fixed potential race in UFS where an allocated inode could fail to get added.
469: <li>Removed o_dir.c from <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=openssl&manpath=OpenBSD%20Current&sektion=1&format=html">openssl(1)</a> now that OPENSSL_DIR_XXX has been removed from the build.
470: <li>Removed nonstandard and unsafe DES support from <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ed&manpath=OpenBSD%20Current&sektion=1&format=html">ed(1)</a>.
471: <li>Switched <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pkg_mklocatedb&manpath=OpenBSD%20Current&sektion=1&format=html">pkg_mklocatedb(1)</a> to using common SetList code, renaming -x into -X.
472: <li>Updated xcb-utils to 0.3.9.
473: <li>Allow <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=slowcgi&manpath=OpenBSD%20Current&sektion=8&format=html">slowcgi(8)</a> QUERY_STRING to be longer than 127 bytes.
474: <li>Update libxcb to version 1.10.
475: <li>Made OPENSSL_NO_HEARTBLEED the default and only option in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&manpath=OpenBSD%20Current&sektion=8&format=html">ssl(8)</a> code.
1.1337 brett 476: <li>Adapted <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=snmpctl&manpath=OpenBSD%20Current&sektion=8&format=html">snmpctl(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=relayd&manpath=OpenBSD%20Current&sektion=8&format=html">relayd(8)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=snmpd&manpath=OpenBSD%20Current&ssektion=8&format=html">snmpd(8)</a> to use AgentX protocol to send traps.
1.1335 brett 477: <!-- 2014/04/13 -->
478: <li>Confirm passwords when <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=signify&manpath=OpenBSD%20Current&sektion=1&format=html">signify(1)</a> is generating keys.
479: <li>Fixed SQL_STEP failures for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=man&manpath=OpenBSD%20Current&sektion=7&format=html">man(7)</a> pages lacking descriptions.
480: <li>Better <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mandoc&manpath=OpenBSD%20Current&sektion=1&format=html">mandoc(1)</a> error reporting in case of SQL errors: mention dir and file.
1.1338 brett 481: <li>Major <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&manpath=OpenBSD%20Current&sektion=8&format=html">ssl(8)</a> cleanup to remove: MacOS, Netware, OS/2, VMS and Windows build machinery and shared libraries; <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=openssl&manpath=OpenBSD%20Current&ssektion=1&format=html">openssl(1)</a> engines and code that were not properly licensed; vms support; various horrible socket syscall wrappers; insecure use of time as a random seed in the TLS engine.
1.1335 brett 482: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=qla&manpath=OpenBSD%20Current&sektion=4&format=html">qla(4)</a> debug output, print loop ids as decimals and port ids as 24bit hex.
483: <!-- 2014/04/12 -->
484: <li>Update to xtrans 1.3.4.
485: <li>Updated to xextproto 7.3.0.
486: <li>Added presentproto 1.0.
487: <li>Bring back r1.16 of protector.c in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=gcc&manpath=OpenBSD%20Current&sektion=1&format=html">gcc(1)</a> version 2.95. Fixes code generation of usr.sbin/dhcpd/memory.c!new_address_range() on vax.
488: <li><font color="#e00000">5.3, 5.4, 5.5 and -current SECURITY FIX: Fixed <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=openssl&manpath=OpenBSD%20Current&sektion=1&format=html">openssl(1)</a> read buffer to stop an attacker injecting data from one connection into another.</font><br>A source code patch is available for <a href="errata53.html#015_openssl">5.3</a>, <a href="errata54.html#008_openssl">5.4</a> and <a href="errata55.html#004_openssl">5.5</a>.
489: <li>Made sure <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cu&manpath=OpenBSD%20Current&sektion=1&format=html">cu(1)</a> -l overrides HOST.
490: <!-- 2014/04/11 -->
491: <li>Avoid <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&manpath=OpenBSD%20Current&sektion=8&format=html">sshd(8)</a> crash at exit, by checking that pmonitor!=NULL before dereferencing (bz#2225).
492: <li>Fixed <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=more&manpath=OpenBSD%20Current&sektion=1&format=html">more(1)</a> to use basic regular expressions (unlike <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=less&manpath=OpenBSD%20Current&sektion=1&format=html">less(1)</a>).
493: <li>Clamp offsets to the available memory space. Fixes <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tmux&manpath=OpenBSD%20Current&sektion=1&format=html">tmux(1)</a> crash.
494: <li>Further <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=apropos&manpath=OpenBSD%20Current&sektion=1&format=html">apropos(1)</a> speed optimisation, with <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mmap&manpath=OpenBSD%20Current&sektion=3&format=html">mmap(3)</a> MAP_ANON SQLITE_CONFIG_PAGECACHE.
495: <li>Updated to libdrm 2.4.53
496: <!-- 2014/04/10 -->
497: <li>Disabled Segglemann's RFC520 heartbeat from <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&manpath=OpenBSD%20Current&sektion=8&format=html">ssl(8)</a>.
498: <li>Don't release the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&manpath=OpenBSD%20Current&sektion=8&format=html">ssl(8)</a> read buffer if we're not done reading from it; disabled buf freelists.
499: <li>Added validation routines to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=iked&manpath=OpenBSD%20Current&sektion=8&format=html">iked(8)</a>: overall header structure is checked for sanity before copying the header; avoid overflow by passing down the number of remaining bytes.
500: <li>Notify userland when an <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=arp&manpath=OpenBSD%20Current&sektion=4&format=html">arp(4)</a> entry is removed.
501: <li>Fixed fd leaks in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mg&manpath=OpenBSD%20Current&sektion=1&format=html">mg(1)</a> error paths.
502: <li>Retired rtinit() and switched to using <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rt_ifa_add&manpath=OpenBSD%20Current&sektion=9&format=html">rt_ifa_add(9)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rt_ifa_del&manpath=OpenBSD%20Current&sektion=9&format=html">rt_ifa_del(9)</a> to manage connected routes to prefixes/hosts.
503: <li>Revived fix for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=perl&manpath=OpenBSD%20Current&sektion=1&format=html">perl(1)</a> RT bug 116441 (null dereference affecting mod_perl).
504: <!-- 2014/04/09 -->
505: <li>Split manual names out of the common "keys" table into their own "names" table. Reduces standard <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=apropos&manpath=OpenBSD%20Current&sektion=1&format=html">apropos(1)</a> search times 70% for the full /usr/share/man database.
506: <li>Moved descriptions from <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mandoc&manpath=OpenBSD%20Current&sektion=1&format=html">mandoc(1)</a> keys table to mpages table: reduces typical <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=apropos&manpath=OpenBSD%20Current&sektion=1&format=html">apropos(1)</a> search times by about 40%; reduces database size.
507: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=less&manpath=OpenBSD%20Current&sektion=1&format=html">less(1)</a> "more" mode, made command specified by -p option apply to every edited file, as per POSIX.
508: <li>Reverted r1.93 of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mg&manpath=OpenBSD%20Current&sektion=1&format=html">mg(1)</a> file.c, which broke permission checks.
509: <li><font color="#e00000">5.5 SECURITY FIX: Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ftp&manpath=OpenBSD%20Current&sektion=1&format=html">ftp(1)</a> client check the server hostname, to avoid false validation when connecting to an https website.</font><br>A source code patch is available for <a href="errata55.html#003_ftp">5.5</a>.
510: <li>Updated to xf86-video-ati 7.3.0.
511: <li>Made <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=smtpd&manpath=OpenBSD%20Current&sektion=8&format=html">smtpd(8)</a> display correct imsg when profiling is on and if the type was changed.
512: <li>Zapped the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=smtpd&manpath=OpenBSD%20Current&sektion=8&format=html">smtpd(8)</a> mfa process. Content filtering will be done at session level.
513: <li>Removed CA certificates from <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&manpath=OpenBSD%20Current&sektion=8&format=html">ssl(8)</a> which are not listed in Mozilla's certdata.txt.
514: <li>Use root CAs in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&manpath=OpenBSD%20Current&sektion=8&format=html">ssl(8)</a> used by TeleSec (Deutsche Telekom AG): Baltimore CyberTrust Root, Deutsche Telekom Root CA, T-TeleSec GlobalRoot Class 2 and T-TeleSec GlobalRoot Class 3.
515: <li>If TLS validation is on, make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ftp&manpath=OpenBSD%20Current&sektion=1&format=html">ftp(1)</a> fetch TLS certificate and check the server hostname against the subjectAltName and/or CommonName.
516: <!-- 2014/04/08 -->
517: <li>Build libgcc without SSP. Unbreaks landisk bootblocks.
518: <li>Updated to xorg-macros 1.19.0.
519: <li>Ensure that we free buffers written out by the page daemon rather than caching them.
520: <li>Fixed error in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bcrypt_pbkdf&manpath=OpenBSD%20Current&sektion=3&format=html">bcrypt_pbkdf(3)</a> stride calculations.
521: <li>Added error detection mechanism to detect when <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sudo&manpath=OpenBSD%20Current&sektion=8&format=html">sudo(8)</a> configuration is incorrect for building ports.
522: <li>Zero-fill <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=smtpd&manpath=OpenBSD%20Current&sektion=8&format=html">smtpd(8)</a> mta static buffer before use in DSN code.
523: <li>Added term_flushln() flag to control indentation of continuation lines in TERMP_NOBREAK mode. Reduces groff-mandoc differences in base by more than 15%.
524: <!-- 2014/04/07 -->
525: <li>Added <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rgephy&manpath=OpenBSD%20Current&sektion=4&format=html">rgephy(4)</a> for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=axe&manpath=OpenBSD%20Current&sektion=4&format=html">axe(4)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=axen&manpath=OpenBSD%20Current&sektion=4&format=html">axen(4)</a> on hppa and zaurus.
526: <li>Fully implemented <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=roff&manpath=OpenBSD%20Current&sektion=7&format=html">roff(7)</a> \B (validate numerical expression) and partially implemented \w (measure text width) escape sequence.
527: <li><font color="#e00000">5.3, 5.4, 5.5 and -current SECURITY FIX: Fixed <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=openssl&manpath=OpenBSD%20Current&sektion=1&format=html">openssl(1)</a> CVE-2014-0160 "heartbleed" vulnerability.</font><br>A source code patch is available for <a href="errata53.html#014_openssl">5.3</a>, <a href="errata54.html#007_openssl">5.4</a> and <a href="errata55.html#002_openssl">5.5</a>.
528: <li>Added MSI support for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xhci&manpath=OpenBSD%20Current&sektion=4&format=html">xhci(4)</a>.
529: <li>Enable <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=upd&manpath=OpenBSD%20Current&sektion=4&format=html">upd(4)</a> on archs where <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=uhidev&manpath=OpenBSD%20Current&sektion=4&format=html">uhidev(4)</a> is present.
530: <li>Do not attach when no <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=upd&manpath=OpenBSD%20Current&sektion=4&format=html">upd(4)</a> sensors can be allocated; made device querying smarter.
531: <li>Added <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=roff&manpath=OpenBSD%20Current&sektion=7&format=html">roff(7)</a> support for indirect references to user-defined strings.
532: <li>Made <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=iscsid&manpath=OpenBSD%20Current&sektion=8&format=html">iscsid(8)</a> listen to the control socket, so the connect() call from <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=iscsictl&manpath=OpenBSD%20Current&sektion=8&format=html">iscsictl(8)</a> will not fail.
533: <li>In udp_output(), use the correct source address in case of an unbound socket.
534: <li>Accept arbitrary argument delimiters for various <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=roff&manpath=OpenBSD%20Current&sektion=7&format=html">roff(7)</a> escape sequences.
535: <li>Increased MSGBUFSIZE on macppc.
536: <li>Exit on error or HUP when poll()ing the keyboard. Otherwise, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=top&manpath=OpenBSD%20Current&sektion=1&format=html">top(1)</a> may spin when its tty goes away.
537: <li>Added implementation of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=roff&manpath=OpenBSD%20Current&sektion=7&format=html">roff(7)</a> numerical expressions.
538: <li>Retired kernel support for SO_DONTROUTE, this time without breaking localhost connections.
539: <li>Updated termtypes.master to upstream terminfo-20140329.src.
540: <li>When <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=qla&manpath=OpenBSD%20Current&sektion=4&format=html">qla(4)</a> is iterating through fabric ports, start at our own port ID, to simplify tracking.
541: <!-- 2014/04/06 -->
542: <li>Added <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=axen&manpath=OpenBSD%20Current&sektion=4&format=html">axen(4)</a> wherever <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=axe&manpath=OpenBSD%20Current&sektion=4&format=html">axe(4)</a> is found.
543: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=qla&manpath=OpenBSD%20Current&sektion=4&format=html">qla(4)</a> ISP2322 chips need a different firmware image to other 2300s, don't load firmware for them.
544: <li>Removed (expensive) temporary connect in udp_output(). Also fixes possible memory leak.
545: <li>Added missing addressing modes for the fucomip instruction on i386. Unbreaks webkit port.
546: <!-- 2014/04/05 -->
547: <li>Fixed <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=smtpd&manpath=OpenBSD%20Current&sektion=8&format=html">smtpd(8)</a> when writing multi-line "To" and "Cc" headers.
548: <li>Implemented the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=roff&manpath=OpenBSD%20Current&sektion=7&format=html">roff(7)</a> .rr (remove register) request.
549: <li>Fixed <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=uvm&manpath=OpenBSD%20Current&sektion=9&format=html">uvm(9)</a> logic error (and prevented theoretical infinite loop) in uvm_pmr_rootupdate().
550: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mandoc&manpath=OpenBSD%20Current&sektion=1&format=html">mandoc(1)</a> bugfix: make sure all variables are properly initialised when rendering .ll (line length) requests.
551: <!-- 2014/04/04 -->
552: <li>Added the -t <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ktrace&manpath=OpenBSD%20Current&sektion=1&format=html">ktrace(1)</a> option to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ltrace&manpath=OpenBSD%20Current&sektion=1&format=html">ltrace(1)</a>. Allows triggering library function call trace and other kernel events trace simultaneously.
553: <li>Fixed <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=smtpd&manpath=OpenBSD%20Current&sektion=8&format=html">smtpd(8)</a> header parsing issue in enqueuer, which was stripping the "From:" header in some cases.
554: <li>Made <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mandoc&manpath=OpenBSD%20Current&sektion=1&format=html">mandoc(1)</a> warn about missing mlinks when the -p (picky) option is given, and not overridden by: -Q, -d, -u, or -t.
555: <li>Merged the mda, mta and smtp <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=smtpd&manpath=OpenBSD%20Current&sektion=8&format=html">smtpd(8)</a> processes into a single unprivileged process.
556: <li>Start the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=smtpd&manpath=OpenBSD%20Current&sektion=8&format=html">smtpd(8)</a> purge task after events are set, so we don't miss a SIGCHLD.
557: <li>Reworked <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=qla&manpath=OpenBSD%20Current&sektion=4&format=html">qla(4)</a> command polling loop so it can handle multiple responses in a single interrupt. Allows talking to Hitachi disk arrays.
558: <!-- 2014/04/03 -->
559: <li>Fixed pppx kernel panic when using <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=npppd&manpath=OpenBSD%20Current&sektion=8&format=html">npppd(8)</a> with multiple pppx devices.
560: <li>When the -n or -t flag is given to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=makewhatis&manpath=OpenBSD%20Current&sektion=8&format=html">makewhatis(8)</a>, write names and descriptions to stdout (format similar to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=apropos&manpath=OpenBSD%20Current&sektion=1&format=html">apropos(1)</a>).
561: <li>Instead of silently doing nothing, made <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mandoc&manpath=OpenBSD%20Current&sektion=1&format=html">mandoc(1)</a> warn and return non-zero when the manpath is empty.
562: <li>Added a uvm_yield function to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=uvm&manpath=OpenBSD%20Current&sektion=9&format=html">uvm(9)</a> and use it to prevent the reaper from hogging the cpu.
563: <li>Reworked wait/kernel lock heuristics to give interrupts on other CPUs to a chance to run, for reduced latency.
564: <li>When <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mg&manpath=OpenBSD%20Current&sektion=1&format=html">mg(1)</a> discovers a directory is non-existent, offer a "y" option to make the directory.
565: <li>Renamed the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=makewhatis&manpath=OpenBSD%20Current&sektion=8&format=html">makewhatis(8)</a> -W option to -p. Matches flag introduced in OpenBSD 2.7.
566: <li>Proper validation and computation of bsize now occurs in the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=disklabel&manpath=OpenBSD%20Current&sektion=8&format=html">disklabel(8)</a> expert mode.
567: <li>Renamed -v option of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mandocdb&manpath=OpenBSD%20Current&sektion=8&format=html">mandocdb(8)</a> to -D, to avoid a clash with the -v option of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=makewhatis&manpath=OpenBSD%20Current&sektion=8&format=html">makewhatis(8)</a>.
568: <li>Reduced the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tmux&manpath=OpenBSD%20Current&sektion=4&format=html">tmux(4)</a> mouse wheel scroll size to 3; allow shift to reduce it to 1; allow meta and ctrl to multiply by 3; support wheel in "choose" mode.
569: <li>Fixed <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=npppctl&manpath=OpenBSD%20Current&sektion=8&format=html">npppctl(8)</a> calculation of response message size.
570: <!-- 2014/04/02 -->
571: <li>Added the "#" character as a comment character in the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mg&manpath=OpenBSD%20Current&sektion=1&format=html">mg(1)</a> startup file.
572: <li>Support UTF-8 with <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tmux&manpath=OpenBSD%20Current&sektion=4&format=html">tmux(4)</a> choose-buffer; made buffer_sample bigger to let it trim at window right edge.
573: <li>Enabled <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=hds&manpath=OpenBSD%20Current&sektion=4&format=html">hds(4)</a> on hppa.
574: <li>Enabled <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mpath&manpath=OpenBSD%20Current&sektion=4&format=html">mpath(4)</a> on macppc.
575: <!-- 2014/04/01 -->
576: <!-- 2014/03/31 -->
577: <li>When using VerifyHostKeyDNS with a DNSSEC resolver, down-convert any certificate keys to plain keys and attempt SSHFP resolution. Prevents server from forcing a new-hostkey dialog.
578: <li>Include fingerprint of key not found by <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh-keysign&manpath=OpenBSD%20Current&sektion=8&format=html">ssh-keysign(8)</a>; use arc4random_buf() instead of loop+arc4random().
579: <li>In four byte UTF-8 sequences, make sure <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tmux&manpath=OpenBSD%20Current&sektion=1&format=html">tmux(1)</a> only uses three bits of the first byte.
580: <li>Stopped <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tmux&manpath=OpenBSD%20Current&sektion=1&format=html">tmux(1)</a> crashing when a zero-length argument is passed to setb.
581: <li>Made <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tmux&manpath=OpenBSD%20Current&sektion=1&format=html">tmux(1)</a> message-limit a server option.
582: <li>Stopped <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tmux&manpath=OpenBSD%20Current&sektion=1&format=html">tmux(1)</a> segfaulting when the parent of the layout cell is NULL.
583: <li>Added setb -a to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tmux&manpath=OpenBSD%20Current&sektion=1&format=html">tmux(1)</a> append; added a copy mode append command.
584: <li>Made session_attached a count; added session_many_attached flag to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tmux&manpath=OpenBSD%20Current&sektion=1&format=html">tmux(1)</a>.
585: <li>Added start-of-list, end-of-list, top-line and bottom-line in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tmux&manpath=OpenBSD%20Current&sektion=1&format=html">tmux(1)</a> choice mode.
586: <li>Stopped <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tmux&manpath=OpenBSD%20Current&sektion=1&format=html">tmux(1)</a> writing into the buffer if there are no arguments.
587: <li>Changed secondary device attributes response to "\033[>84;0;0c" which is unique for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tmux&manpath=OpenBSD%20Current&sektion=1&format=html">tmux(1)</a>.
588: <li>Made <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bus_dmamap_load&manpath=OpenBSD%20Current&sektion=9&format=html">bus_dmamap_load(9)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bus_dmamap_unload&manpath=OpenBSD%20Current&sektion=9&format=html">bus_dmamap_unload(9)</a> mpsafe on alpha.
589: <li>Restored behaviour of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ls&manpath=OpenBSD%20Current&sektion=1&format=html">ls(1)</a> -f implying -a (lost in commit made in 1989). Conforms to IEEE 1003.1-2008 ("POSIX.1").
590: <li>On loongson, mips and octeon, stopped whole L1 cache being flushed unnecessarily.
591: <li>Again allow more than one level of directories to be created via <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mg&manpath=OpenBSD%20Current&sektion=1&format=html">mg(1)</a> make-directory.
592: <li>Force detach of all <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=usb&manpath=OpenBSD%20Current&sektion=4&format=html">usb(4)</a> devices by disconnecting root hubs before suspending machine. Avoids races.
593: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=libtool&manpath=OpenBSD%20Current&sektion=1&format=html">libtool(1)</a> now properly add -rpath to the linker when linking libraries. Matches GNU libtool.
594: <li>Increased Xtranssock.c send buffer for UNIX sockets. Makes Firefox usable again when viewing large images.
595: <li>If HOST or the host argument starts with a "/", <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cu&manpath=OpenBSD%20Current&sektion=1&format=html">cu(1)</a> will now treat it as a device name.
596: <li>Fixed REMOTE on <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cu&manpath=OpenBSD%20Current&sektion=1&format=html">cu(1)</a> to work like <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tip&manpath=OpenBSD%20Current&sektion=1&format=html">tip(1)</a>; added support for HOST.
1.1334 brett 597: <!-- 2014/03/30 -->
598: <li>Added SNI support to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ftp&manpath=OpenBSD%20Current&sektion=1&format=html">ftp(1)</a>.
599: <li>Allow <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=roff&manpath=OpenBSD%20Current&sektion=7&format=html">roff(7)</a> to support relative arguments to .ll (increase or decrease line length).
600: <li>Repaired boot.net operation on (at least) sparc SS5 PROM v2.21
601: <li>Implement the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=roff&manpath=OpenBSD%20Current&sektion=7&format=html">roff(7)</a> .ll (line length) request.
602: <li><font color="#e00000">5.5 RELIABILITY FIX: Memory corruption occurring during <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=icmp&manpath=OpenBSD%20Current&sektion=4&format=html">icmp(4)</a> reflection handling (ICMP reflection is disabled by default).</font><br>A source code patch is available for <a href="errata55.html#001_icmp">5.5</a></a>.
603: <!-- 2014/03/29 -->
604: <li>Recognise so-called "EFI-like" interface provided by newer PMON firmware on Loongson 2Gq and Loongson 3A.
605: <li>Bugfix and security update to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=nginx&manpath=OpenBSD%20Current&sektion=8&format=html">nginx(8)</a> version 1.4.7 (note: CVE-2014-0133 does not affect OpenBSD).
606: <li>Speed-up overlapping copy operations in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=gio&manpath=OpenBSD%20Current&sektion=4&arch=sgi&format=html">gio(4/sgi)</a> by attempting to perform them in larger chunks whenever possible.
607: <li>Removed pflowproto 9 (unfixable post-2038). Better option is pflowproto 10.
608: <!-- 2014/03/28 -->
609: <li>Allow leading and trailing vertical lines in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mandoc&manpath=OpenBSD%20Current&sektion=1&format=html">mandoc(1)</a>, format them in the same way as groff; do not require whitespace before vertical lines in layout specifications.
610: <li>Properly initialise <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=malloc&manpath=OpenBSD%20Current&sektion=3&format=html">malloc(3)</a>ed memory in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mandoc&manpath=OpenBSD%20Current&sektion=1&format=html">mandoc(1)</a>, to fix crashes when using <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=apropos&manpath=OpenBSD%20Current&sektion=1&format=html">apropos(1)</a>.
611: <li>Made sure the command TRB is reset if a command is submitted when the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=usb&manpath=OpenBSD%20Current&sektion=4&format=html">usb(4)</a> hardware is already gone.
612: <li>Reverted "retire kernel support for SO_DONTROUTE" diff, which caused problems in localhost connections.
613: <!-- 2014/03/27 -->
614: <li>On loongson, made sure the HIBERNATE pages get reserved regardless of the memory layout.
615: <li>Program the colormap correctly on <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=grtwo&manpath=OpenBSD%20Current&sektion=4&arch=sgi&format=html">grtwo(4/sgi)</a>; added a simple screen burner accessop.
616: <li>When enforcing TOS (Traffic Class), made <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&manpath=OpenBSD%20Current&sektion=4&format=html">pf(4)</a> preserve the ECN bits (as with IPv4 packets).
617: <li>Adjusted (commented-out) <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=nginx.conf&manpath=OpenBSD%20Current&sektion=5&format=html">nginx.conf(5)</a> sample blocks for PHP and SSL configurations.
618: <!-- 2014/03/26 -->
619: <li>Made <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mg&manpath=OpenBSD%20Current&sektion=1&format=html">mg(1)</a> C-t (transpose two chars) behave like emacs.
620: <li>Ended experimental machine-independent <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=login.conf&manpath=OpenBSD%20Current&sektion=5&format=html">login.conf(5)</a> template support.
621: <li>Made <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cu&manpath=OpenBSD%20Current&sektion=1&format=html">cu(1)</a> handle REMOTE in the environment as either a separate <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=remote&manpath=OpenBSD%20Current&sektion=5&format=html">remote(5)</a> file or a host.
622: <li>Added <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cu&manpath=OpenBSD%20Current&sektion=1&format=html">cu(1)</a> support for retrieving the line and speed from the /etc/remote "dv" and "br" capabilities like <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tip&manpath=OpenBSD%20Current&sektion=1&format=html">tip(1)</a>.
623: <!-- 2014/03/25 -->
624: <li>Fixed handling of the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=kill&manpath=OpenBSD%20Current&sektion=1&format=html">kill(1)</a> "-1" option from a thread other than the original thread.
625: <li>Permit generating of NAMI and CSW records inside <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ktrace&manpath=OpenBSD%20Current&sektion=2&format=html">ktrace(2)</a>.
626: <li>Ignore the -b option if <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cksum&manpath=OpenBSD%20Current&sektion=1&format=html">cksum(1)</a> is called as-is (e.g. "cksum -b /bsd"), to match man page.
627: <li>Removed <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=file2c&manpath=OpenBSD%20Current&sektion=1&format=html">file2c(1)</a>. <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=hexdump&manpath=OpenBSD%20Current&sektion=1&format=html">hexdump(1)</a> works as well for most use cases.
628: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=usb&manpath=OpenBSD%20Current&sektion=4&format=html">usb(4)</a> root hubs can now happily be detached and reattached.
629: <li>When <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=smtpd&manpath=OpenBSD%20Current&sektion=8&format=html">smtpd(8)</a> is locally enqueuing messages without specifying a domain, update headers to show the local domain.
630: <li>Strengthened <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&manpath=OpenBSD%20Current&sektion=1&format=html">ssh(1)</a>: removed weaker pre-SHA2 hashes, broken cipher (arcfour), and the broken mode (CBC) from the default configuration.
631: <!-- 2014/03/24 -->
632: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=skey&manpath=OpenBSD%20Current&sektion=1&format=html">skey(1)</a> bugfixes: default algorithm switched back to md5; do not let skey_set_algorithm() cause a segfault if an unsupported algorithm is specified.
633: <li>Added <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=acpithinkpad&manpath=OpenBSD%20Current&sektion=4&format=html">acpithinkpad(4)</a> support for aux button strip on newer thinkpads missing regular F1-F12 keys.
634: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dd&manpath=OpenBSD%20Current&sektion=1&format=html">dd(1)</a> now supports g for gigabytes.
635: <li>Reworked the way <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sysmerge&manpath=OpenBSD%20Current&sektion=8&format=html">sysmerge(8)</a> fetches and verifies sets, to simplify the process.
636: <li>Merged <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=perl&manpath=OpenBSD%20Current&sektion=1&format=html">perl(1)</a> version 5.18.2 (including local patches).
637: <li>Stopped calling <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=smtpd&manpath=OpenBSD%20Current&sektion=8&format=html">smtpd(8)</a> purge_task every 10 secs (only needed once at startup).
638: <li>Removed "-r" option from <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ping&manpath=OpenBSD%20Current&sektion=8&format=html">ping(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=traceroute6&manpath=OpenBSD%20Current&sektion=8&format=html">traceroute6(8)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=traceroute&manpath=OpenBSD%20Current&sektion=8&format=html">traceroute(8)</a>.
639: <!-- 2014/03/23 -->
640: <li>Enabled SQLITE_ENABLE_FTS3_PARENTHESIS in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sqlite3&manpath=OpenBSD%20Current&sektion=1&format=html">sqlite3(1)</a>.
641: <li>Removed the MD4 functions (highly susceptible to collision attacks).
642: <li>Skip leading escape sequences in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mandoc&manpath=OpenBSD%20Current&sektion=1&format=html">mandoc(1)</a> man_deroff(), for better indexing.
643: <li>Gave powerpc PIE.
644: <li>Initialise additional BATs (IBAT4-IBAT7 and DBAT4-IBAT7) on socppc. Stops memory corruption on devices with rb600.
645: <li>Fix uhidev_detach() when detaching a device which did not claim all reported IDs.
646: <li>Reverted audio key handling.
647: <!-- 2014/03/22 -->
648: <li>Make sure <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sysmerge&manpath=OpenBSD%20Current&sektion=8&format=html">sysmerge(8)</a> adds missing users/groups before running the target; otherwise <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mtree&manpath=OpenBSD%20Current&sektion=8&format=html">mtree(8)</a> can fail.
649: <li>Let <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mg&manpath=OpenBSD%20Current&sektion=1&format=html">mg(1)</a> users input a tag to find, even if no default tag is defined.
650: <li>Disabled <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=smtpd&manpath=OpenBSD%20Current&sektion=8&format=html">smtpd(8)</a> imsg buffers profiling code, to stop processes waking up each second.
1.1332 brett 651: <!-- 2014/03/21 -->
652: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=npppd&manpath=OpenBSD%20Current&sektion=8&format=html">npppd(8)</a> tunnels can now have multiple listen addresses.
653: <li>Reimplemented control part of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=npppd&manpath=OpenBSD%20Current&sektion=8&format=html">npppd(8)</a> with imsg; added "monitor" command for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=npppctl&manpath=OpenBSD%20Current&sektion=8&format=html">npppctl(8)</a> to monitor PPP session start/stop events.
654: <li>Fixed <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=npppd&manpath=OpenBSD%20Current&sektion=8&format=html">npppd(8)</a> bug which caused segfaults when <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=npppd.conf&manpath=OpenBSD%20Current&sektion=5&format=html">npppd.conf(5)</a> had "username-suffix" and "strip-atmark-realm" as yes.
655: <li>Made <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=npppd&manpath=OpenBSD%20Current&sektion=8&format=html">npppd(8)</a> keep listening on 1723/tcp when accept() is failed.
656: <li>Removed tape as a method for fetching install sets.
657: <li>Attempt to workaround the R4000 end-of-page errata on sgi and mips64, triggered by TLB misses when the code flow crosses a page boundary.
658: <li>Disabled MS-CHAPv1 (RFC 2433) support in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pppd&manpath=OpenBSD%20Current&sektion=8&format=html">pppd(8)</a>.
659: <li>Fixed <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sysmerge&manpath=OpenBSD%20Current&sektion=8&format=html">sysmerge(8)</a> regression when not using a full path to sets; make it use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ftp&manpath=OpenBSD%20Current&sektion=1&format=html">ftp(1)</a> -D.
660: <!-- 2014/03/20 -->
661: <li>Installed /var/unbound/db directory for DNSSEC root key; added (commented-out) options for DNSSEC to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=unbound.conf&manpath=OpenBSD%20Current&sektion=5&format=html">unbound.conf(5)</a>.
662: <li>Removed insecure MD4 checksum algorithm from <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cksum&manpath=OpenBSD%20Current&sektion=1&format=html">cksum(1)</a>.
663: <li>Removed ftp method for obtaining installation sets when running the installer.
664: <!-- 2014/03/19 -->
665: <li>Enabled <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=upd&manpath=OpenBSD%20Current&sektion=4&format=html">upd(4)</a> on amd64, sparc64 and macppc archs for testing.
666: <!-- 2014/03/18 -->
667: <li>Sync timestamp changes for inodes of special files to disk as late as possible to avoid useless disk i/o.
668: <li>Include support in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pstat&manpath=OpenBSD%20Current&sektion=8&format=html">pstat(8)</a> -v to display the IN_LAZYMOD flag.
669: <li>On sgi machines, fixed clipping bounds in "fill" and "blt" graphics operations; added colormap support.
670: <li>Removed timeout logic from the polling loop in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=qlw&manpath=OpenBSD%20Current&sektion=4&format=html">qlw(4)</a>. Stops devices timing out before attaching.
671: <li>Retired the rarely used hp300, mvme68k and mvme88k ports.
672: <li>Allow checking <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mandoc&manpath=OpenBSD%20Current&sektion=1&format=html">mandoc(1)</a> databases are up to date even when you don't have write permissions.
673: <li>Notify userland (via the routing socket) when ARP resolution completes.
674: <li>Put the AF_ROUTE socket that <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=arp&manpath=OpenBSD%20Current&sektion=8&format=html">arp(8)</a> operates on into the appropriate rdomain. Stops "arp -V 1 -d 10.0.0.1" hanging forever.
675: <li>Made <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpctl&manpath=OpenBSD%20Current&sektion=8&format=html">bgpctl(8)</a> correctly parse attribute length form imsg.
676: <li>Exit from <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=traceroute6&manpath=OpenBSD%20Current&sektion=8&format=html">traceroute6(8)</a> if there is at least one unreachable and sum of unreachables and timeouts are >= number of probes.
677: <!-- 2014/03/17 -->
678: <li>Unbroke <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sndiod&manpath=OpenBSD%20Current&sektion=1&format=html">sndiod(1)</a> monitoring mode, which was shifted in time by 1 block.
679: <li>Userland <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ppp&manpath=OpenBSD%20Current&sektion=9&format=html">ppp(9)</a> removed.
680: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=apropos&manpath=OpenBSD%20Current&sektion=1&format=html">apropos(1)</a> output, sort names and avoid multiple section numbers.
681: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=slowcgi&manpath=OpenBSD%20Current&sektion=8&format=html">slowcgi(8)</a>, use SCRIPT_FILENAME (can be an absolute filesystem path). Fallback to SCRIPT_NAME if this is not present.
682: <li>Reimplemented <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=htpasswd&manpath=OpenBSD%20Current&sektion=1&format=html">htpasswd(1)</a> from scratch.
683: <!-- 2014/03/16 -->
684: <li>Don't use volume keys when in raw-mode. Stops simultaneous volume changes by <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=X&manpath=OpenBSD%20Current&sektion=7&format=html">X(7)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ukbd&manpath=OpenBSD%20Current&sektion=4&format=html">ukbd(4)</a>.
685: <!-- 2014/03/15 -->
686: <li>Enable <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=qlw&manpath=OpenBSD%20Current&sektion=4&format=html">qlw(4)</a> at <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sbus&manpath=OpenBSD%20Current&sektion=4&format=html">sbus(4)</a> on sparc64.
687: <li>Enabled <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=unbound&manpath=OpenBSD%20Current&sektion=8&format=html">unbound(8)</a> in base.
688: <!-- 2014/03/14 -->
689: <li>Updated to xcb-proto version 1.10.
690: <li>Updated to libdrm 2.4.52.
691: <li>Removed the unused userland <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=agp&manpath=OpenBSD%20Current&sektion=4&format=html">agp(4)</a> interface.
692: <li>Reverted to the freetype2.pc we had before to bring back local changes.
693: <li>More informative <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=smtpd&manpath=OpenBSD%20Current&sektion=8&format=html">smtpd(8)</a> log message on unknown SNI.
694: <li>Provide an MI api for byteswapping loads and stores, especially beneficial for sparc64 and powerpc.
695: <li>Updated to freetype-2.5.3. Fixes vulnerability in the CFF driver (CVE-2014-2240).
696: <!-- 2014/03/13 -->
697: <li>Enabled <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=qla&manpath=OpenBSD%20Current&sektion=4&format=html">qla(4)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=qle&manpath=OpenBSD%20Current&sektion=4&format=html">qle(4)</a> in ramdisks (except on sgi).
698: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=smtpd&manpath=OpenBSD%20Current&sektion=8&format=html">smtpd(8)</a> now prints the correct user name if SMTPD_QUEUE_USER is missing.
699: <li>Use ticket locks (not spinlocks) on i386/amd64/sparc64. Provides fairer access to the kernel lock.
700: <li>Added a few more instruction patterns to binutils that are needed by <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=gcc&manpath=OpenBSD%20Current&sektion=1&format=html">gcc(1)</a> version 4.8.
701: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mandoc&manpath=OpenBSD%20Current&sektion=1&format=html">mandoc(1)</a> -Tutf8 mode, count hyphens against the output line length even when they are breakable.
702: <li>Stopped the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=smtpd&manpath=OpenBSD%20Current&sektion=8&format=html">smtpd(8)</a> enqueue utility adding a User-Agent header to emails.
703: <li>Block userland from entering <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=drm&manpath=OpenBSD%20Current&sektion=4&format=html">drm(4)</a> code during suspend/resume. Fixes <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=inteldrm&manpath=OpenBSD%20Current&sektion=4&format=html">inteldrm(4)</a> bugs.
704: <li>Unhooked <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=httpd&manpath=OpenBSD%20Current&sektion=8&format=html">httpd(8)</a> from build: use of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=nginx&manpath=OpenBSD%20Current&sektion=8&format=html">nginx(8)</a> is encouraged now.
705: <li>No more <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=spray&manpath=OpenBSD%20Current&sektion=8&format=html">spray(8)</a> in base.
706: <!-- 2014/03/12 -->
707: <li>Fixed buffer overflows in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=icmp&manpath=OpenBSD%20Current&sektion=4&format=html">icmp(4)</a> redirect handling (introduced in rev 1.106).
708: <li>Switched over from <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sendmail&manpath=OpenBSD%20Current&sektion=8&format=html">sendmail(8)</a> to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=smtpd&manpath=OpenBSD%20Current&sektion=8&format=html">smtpd(8)</a> by default.
709: <li>Fixed <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=iked&manpath=OpenBSD%20Current&sektion=8&format=html">iked(8)</a> config-address w/o pool.
710: <li>Unbroke <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=nc&manpath=OpenBSD%20Current&sektion=1&format=html">nc(1)</a> "-6 -l" and apply correct fix for previous commit.
711: <!-- 2014/03/11 -->
712: <li>Removed <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rmail&manpath=OpenBSD%20Current&sektion=8&format=html">rmail(8)</a>.
713: <li>Made <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&manpath=OpenBSD%20Current&sektion=1&format=html">ssh(1)</a> scan for ed25519 keys by default.
714: <li>For <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&manpath=OpenBSD%20Current&sektion=8&format=html">isakmpd(8)</a> CA generation, set the correct certificate extensions so more SSL implementations will trust this as a CA cert. Matches <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&manpath=OpenBSD%20Current&sektion=8&format=html">ssl(8)</a>.
715: <li>Bugfix update to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=nginx&manpath=OpenBSD%20Current&sektion=8&format=html">nginx(8)</a> version 1.4.6.
716: <!-- 2014/03/10 -->
717: <li>When <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&manpath=OpenBSD%20Current&sektion=4&format=html">pf(4)</a> is translating packets from one address family to another, pass the TOS/Traffic Class field of the original packet.
718: <li>When <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&manpath=OpenBSD%20Current&sektion=4&format=html">pf(4)</a> is setting packet description, also retrieve the Traffic Class field of IPv6 packets.
719: <li>Fixed the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cnmac&manpath=OpenBSD%20Current&sektion=4&arch=octeon&format=html">cnmac(4/octeon)</a> mediastatus when the interface is not configured.
720: <li>Optimisation of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=opendir&manpath=OpenBSD%20Current&sektion=3&format=html">opendir(3)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rewinddir&manpath=OpenBSD%20Current&sektion=3&format=html">rewinddir(3)</a> and related functions. 2000x speedup of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=seekdir&manpath=OpenBSD%20Current&sektion=3&format=html">seekdir(3)</a> in some tests.
721: <!-- 2014/03/09 -->
722: <li>Fixed <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=acpi&manpath=OpenBSD%20Current&sektion=4&format=html">acpi(4)</a> on amd64, to avoid reboot and stack corruption problems when resuming.
723: <li>Reworked per-cpu cache information, to avoid using hardcoding data based on processor type on mips, octeon, and sgi.
724: <!-- 2014/03/08 -->
725: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=re&manpath=OpenBSD%20Current&sektion=4&format=html">re(4)</a>, fixed operation and made reception of packets work on the 8168G controllers.
726: <li>Made <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mandoc&manpath=OpenBSD%20Current&sektion=1&format=html">mandoc(1)</a> user-defined macros wrapping ".TP" work correctly; preserve line breaks contained in user-defined macros called in ".nf" mode.
727: <li>Enable DMA bursting and tagged queueing in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=qlw&manpath=OpenBSD%20Current&sektion=4&format=html">qlw(4)</a>; enable <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=qlw&manpath=OpenBSD%20Current&sektion=4&format=html">qlw(4)</a> on alpha/amd64/i386/macppc/sgi/sparc64; only attempt to load firmware if we actually have some.
728: <li>Initial <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xhci&manpath=OpenBSD%20Current&sektion=4&format=html">xhci(4)</a> implementation: USB 3.0 <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=umass&manpath=OpenBSD%20Current&sektion=4&format=html">umass(4)</a> devices get reasonable read/write speed.
729: <!-- 2014/03/07 -->
730: <li>Improved <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=roff&manpath=OpenBSD%20Current&sektion=7&format=html">roff(7)</a>'s .if/.ie condition handling.
731: <li>Fixed <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=env&manpath=OpenBSD%20Current&sektion=1&format=html">env(1)</a> diagnostic messages to stderr, so failure of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=env&manpath=OpenBSD%20Current&sektion=1&format=html">env(1)</a> and failure of the specified utility can be distinguished.
732: <li>Allow <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=signify&manpath=OpenBSD%20Current&sektion=1&format=html">signify(1)</a> to read input messages on a pipe.
733: <li>Added usbd_get_hub_descriptor(), to clean up <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=uhub&manpath=OpenBSD%20Current&sektion=4&format=html">uhub(4)</a> and deal with hub device descriptors in high speed devices.
734: <!-- 2014/03/06 -->
735: <li>With <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=md5&manpath=OpenBSD%20Current&sektion=1&format=html">md5(1)</a> -C, exit with exit status of 1 if any of the files specified do not exist.
736: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mandoc&manpath=OpenBSD%20Current&sektion=1&format=html">mandoc(1)</a> bugfixes related to the closing of conditional blocks: handle more than one `\}' on macro lines; do not treat `\}' as a macro invocation after a dot at the beginning of a line; do not complain about characters following `\}'.
737: <li>Makes the "cleartoggle" function in HC drivers optional (upcoming <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xhci&manpath=OpenBSD%20Current&sektion=4&format=html">xhci(4)</a> driver doesn't use it).
738: <li>Allow <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=signify&manpath=OpenBSD%20Current&sektion=1&format=html">signify(1)</a> to accept a password on stdin, as long as it is not a <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tty&manpath=OpenBSD%20Current&sektion=4&format=html">tty(4)</a>.
739: <li>On <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=qlw&manpath=OpenBSD%20Current&sektion=4&format=html">qlw(4)</a>, set the correct clock rate for ISP1020/1020A.
740: <li>When running <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sysmerge&manpath=OpenBSD%20Current&sektion=8&format=html">sysmerge(8)</a>, always print the key <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=signify&manpath=OpenBSD%20Current&sektion=1&format=html">signify(1)</a> is using.
741: <!-- 2014/03/05 -->
742: <li>Fix the return values of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getpwnam_r&manpath=OpenBSD%20Current&sektion=3&format=html">getpwnam_r(3)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getpwuid_r&manpath=OpenBSD%20Current&sektion=3&format=html">getpwuid_r(3)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getgrnam_r&manpath=OpenBSD%20Current&sektion=3&format=html">getgrnam_r(3)</a>, and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getgrgid_r&manpath=OpenBSD%20Current&sektion=3&format=html">getgrgid_r(3)</a> to agree with POSIX.
743: <li>Altered <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=qlw&manpath=OpenBSD%20Current&sektion=4&format=html">qlw(4)</a> so it can compile on sparc64 too.
744: <li>In -Tutf8 mode, make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mandoc_char&manpath=OpenBSD%20Current&sektion=7&format=html">mandoc_char(7)</a> named accent character escape sequences render as non-combining accents (lets mandoc behave like groff); made \' and \` equivalent to \(aa and \(ga, respectively.
745: <li>Introduced <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=qlw&manpath=OpenBSD%20Current&sektion=4&format=html">qlw(4)</a>, a new driver for QLogic ISP SCSI HBAs (currently only supports the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pci&manpath=OpenBSD%20Current&sektion=4&format=html">pci(4)</a> variants).
746: <li>Raised the delay before initialising <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sdmmc&manpath=OpenBSD%20Current&sektion=4&format=html">sdmmc(4)</a>. Lets the reader on X220 work reliably.
747: <li>Fixed: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sndiod&manpath=OpenBSD%20Current&sektion=1&format=html">sndiod(1)</a> read/write position tracking; incorrect delta propagated after xruns in play-only and rec-only modes; crashes seen after a few days of continuous playback.
748: <li>Fixed incorrect position reporting with <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sndiod&manpath=OpenBSD%20Current&sektion=1&format=html">sndiod(1)</a> when using tiny block sizes on busy machines.
749: <li>Made <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sndiod&manpath=OpenBSD%20Current&sektion=1&format=html">sndiod(1)</a> check that the socket is writable before attempting to write data packets.
750: <li>On armv7, removed TIMEZONE and DST options from GENERIC-* kernels; added option USBVERBOSE to all kernels.
1.1164 deraadt 751: </ul>
1.422 deraadt 752: <p>
1.203 deraadt 753:
1.14 deraadt 754: </body>
1.1328 deraadt 755: </html>
1.1334 brett 756: