Annotation of www/plus.html, Revision 1.1416
1.1092 jj 1: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
1.14 deraadt 2: <html>
3: <head>
1.1384 tj 4: <title>OpenBSD -current Changelog</title>
1.1045 david 5: <meta name="description" content="OpenBSD -current changes">
1.1384 tj 6: <meta name="copyright" content="This document copyright 1996-2016 by OpenBSD.">
1.1383 deraadt 7: <meta name="viewport" content="width=device-width, initial-scale=1">
8: <link rel="stylesheet" type="text/css" href="openbsd.css">
1.1400 tb 9: <link rel="canonical" href="https://www.openbsd.org/plus.html">
1.14 deraadt 10: </head>
11:
1.728 horacio 12: <body bgcolor="#ffffff" text="#000000" link="#23238e">
1.14 deraadt 13:
1.1383 deraadt 14: <h2>
15: <a href="index.html">
1.1386 tim 16: <font color="#0000ff"><i>Open</i></font><font color="#000084">BSD</font></a>
1.1384 tj 17: <font color="#e00000">-current Changelog</font>
18: </h2>
1.863 naddy 19: <hr>
1.14 deraadt 20:
21: <p>
1.1216 schwarze 22: This selection is intended to include all important
23: and all user-visible changes.
24: For a complete record of all changes, please see the "source-changes"
25: mailing list, called "OpenBSD CVS"
26: in the <a href="mail.html#Archives">archives</a>,
27: or use <a href="anoncvs.html#CVS">CVS</a>.
28:
29: <p>
1.846 deraadt 30: For changes in other releases, click below:<br>
31: <a href="plus20.html">2.0</a>,
32: <a href="plus21.html">2.1</a>,
33: <a href="plus22.html">2.2</a>,
34: <a href="plus23.html">2.3</a>,
35: <a href="plus24.html">2.4</a>,
36: <a href="plus25.html">2.5</a>,
37: <a href="plus26.html">2.6</a>,
38: <a href="plus27.html">2.7</a>,
39: <a href="plus28.html">2.8</a>,
40: <a href="plus29.html">2.9</a>,
41: <a href="plus30.html">3.0</a>,
42: <a href="plus31.html">3.1</a>,
1.868 deraadt 43: <a href="plus32.html">3.2</a>,
1.889 david 44: <a href="plus33.html">3.3</a>,
1.916 david 45: <a href="plus34.html">3.4</a>,
1.935 miod 46: <a href="plus35.html">3.5</a>,
1.941 deraadt 47: <a href="plus36.html">3.6</a>,
1.1118 deraadt 48: <br>
1.963 deraadt 49: <a href="plus37.html">3.7</a>,
1.999 deraadt 50: <a href="plus38.html">3.8</a>,
1.1028 deraadt 51: <a href="plus39.html">3.9</a>,
1.1044 deraadt 52: <a href="plus40.html">4.0</a>,
1.1069 deraadt 53: <a href="plus41.html">4.1</a>,
1.1097 deraadt 54: <a href="plus42.html">4.2</a>,
1.1118 deraadt 55: <a href="plus43.html">4.3</a>,
1.1140 deraadt 56: <a href="plus44.html">4.4</a>,
1.1152 deraadt 57: <a href="plus45.html">4.5</a>,
1.1163 deraadt 58: <a href="plus46.html">4.6</a>,
1.1177 deraadt 59: <a href="plus47.html">4.7</a>,
1.1194 deraadt 60: <a href="plus48.html">4.8</a>,
1.1198 nick 61: <a href="plus49.html">4.9</a>,
1.1212 schwarze 62: <a href="plus50.html">5.0</a>,
1.1242 lum 63: <a href="plus51.html">5.1</a>,
1.1276 deraadt 64: <a href="plus52.html">5.2</a>,
1.1300 brett 65: <a href="plus53.html">5.3</a>,
1.1330 deraadt 66: <br>
67: <a href="plus54.html">5.4</a>,
1.1352 brett 68: <a href="plus55.html">5.5</a>,
1.1365 deraadt 69: <a href="plus56.html">5.6</a>,
1.1372 deraadt 70: <a href="plus57.html">5.7</a>,
1.1382 deraadt 71: <a href="plus58.html">5.8</a>,
1.1392 deraadt 72: <a href="plus59.html">5.9</a>,
1.1401 deraadt 73: <a href="plus60.html">6.0</a>,
1.1403 deraadt 74: <a href="plus61.html">6.1</a>,
75: <a href="plus62.html">6.2</a>,
1.1406 deraadt 76: <a href="plus63.html">6.3</a>,
77: <a href="plus64.html">6.4</a>.
1.422 deraadt 78: <br>
1.186 deraadt 79:
80: <p>
1.1406 deraadt 81: <h3><font color="#0000e0">Changes made between OpenBSD 6.4 and -current</font></h3>
1.847 deraadt 82: <p>
1.1316 brett 83:
1.422 deraadt 84: <ul>
1.1415 pamela 85: <!-- 2019/02/24 -->
86: <li>Added Dynastream ANTUSB-2 to <a href="https://man.openbsd.org/uscom">uscom(4)</a> devices.
87: <li>Removed -S from install commands across the tree.
88: <li>Updated xterm to version 344.
89: <li>Reworked <a href="https://man.openbsd.org/iwm">iwm(4)</a> Tx rate selection to increase Tx throughput, especially on clean channels.
90: <li>Removed 11n support from AMRR in <a href="https://man.openbsd.org/ieee80211">ieee80211(9)</a>.
91: <!-- 2019/02/23 -->
92: <li>Replaced several hand-rolled functions with <a href="https://man.openbsd.org/wcwidth">wcwidth(3)</a> in <a href="https://man.openbsd.org/less">less(1)</a> in an ongoing effort to improve unicode support.
93: <li>Restored <a href="https://man.openbsd.org/dhclient">dhclient(8)</a> behavior of clearing existing addresses when setting a new address.
94: <li>Fixed a regression introduced in OpenSSH 7.9 where the client reused the server's algorithm lists for KEX, ciphers and MACs. Removed the diffie-hellman-group-exchange-sha1 KEX method.
95: <!-- 2019/02/22 -->
96: <li>Added support for recognition of the following arm CPUs: Cortex A76AE, Cortex Deimos, Neoverse E1 and Neoverse N1.
97: <li>Updated the en_US.UTF-8 <a href="https://man.openbsd.org/locale">locale(1)</a> to Unicode 10.
98: <li>Improved the <a href="https://man.openbsd.org/clang">clang(1)</a> X86FixupGadgets pass to further reduce ROP gadgets produced during compilation. Added a command line switch to disable this functionality.
99: <!-- 2019/02/21 -->
100: <li>Changed ssdfb(4) to allow usage of <a href="https://man.openbsd.org/mmap">mmap(2)</a> so the framebuffer can be used outside of the kernel. Also allowed brightness levels to be changed.
101: <li>Fixed an issue with <a href="https://man.openbsd.org/xhci">xhci(4)</a> transfers that could cause an "invalid CSW" error.
102: <li>Changed <a href="https://man.openbsd.org/rsync">rsync(1)</a> --delete behavior to better interoperate with GPL rsync.
103: <li>Implemented --numeric-ids in <a href="https://man.openbsd.org/rsync">rsync(1)</a>.
104: <li>Updated <a href="https://man.openbsd.org/Xau">Xau(3)</a> to 1.0.9.
105: <li>Added TLSv1.3 alert handling to <a href="https://man.openbsd.org/man3/ssl.3">ssl(3)</a>.
106: <li>Fixed an endless loop in <a href="https://man.openbsd.org/sysctl">sysctl(8)</a> when <a href="https://man.openbsd.org/man2/sysctl.2">sysctl(2)</a> fails to retrieve sensor data.
107: <li>Changed <a href="https://man.openbsd.org/aucat">aucat(1)</a> to use <a href="https://man.openbsd.org/reallocarray">reallocarray(3)</a> in place of potentially problematic usage of <a href="https://man.openbsd.org/malloc">malloc(3)</a>.
108: <!-- 2019/02/20 -->
109: <li>Added Cortex A76 to the list of arm64 CPUs not affected by spectre variant 2 branch injection attacks.
110: <li>Removed atomic_* operations in the tx start and completion paths of <a href="https://man.openbsd.org/ix">ix(4)</a>.
111: <li>Addressed inconsistent behavior when <a href="https://man.openbsd.org/ksh">ksh(1)</a> evaluates arithmetical expressions.
112: <li>Fixed tcp-md5 issues in <a href="https://man.openbsd.org/bgpd">bgpd(8)</a> by making sure to set the sockaddr length field on the pfkey socket.
113: <li>Repaired a regression in <a href="https://man.openbsd.org/smtpd">stmpd(8)</a> 'hostnames' mapping to select hostname based on the IP address of a listener.
114: <li>Prevented a panic in <a href="https://man.openbsd.org/timeout_add">timeout_add(9)</a> by rejecting negative input to <a href="https://man.openbsd.org/spkr>spkr(4)</a>.
115: <!-- 2019/02/19 -->
116: <li>Adjusted <a href="https://man.openbsd.org/vmm">vmm(4)</a> to allow preservation and restoration of guest debug registers.
117: <li>Completed various adjustments to allow for future support of flow-aware transport of pseudowires (RFC 6391).
118: <li>Changed ether_output to use a routes gateway address (if available) for AF_MPLS frames.
119: <li>Simplified NFS checking in <a href="https://man.openbsd.org/rc">rc(8)</a> reorder_libs().
120: <li>Added support for setting custom FastCGI parameters in <a href="https://man.openbsd.org/httpd">httpd(8)</a>.
121: <li>Adjusted <a href="https://man.openbsd.org/ifconfig">ifconfig(8)</a> to display whether <a href="https://man.openbsd.org/bwfm">bwfm(4)</a> firmware is using 802.11AC.
122: <!-- 2019/02/18 -->
123: <li>Updated Mesa to 18.3.4. (Removed -fno-tree-pre from CFLAGS on sparc64 after the changes to <a href="https://man.openbsd.org/login.conf">login.conf</a> removed the need to limit memory usage at build time).
124: <li>Synchronized staff datasize-cur in <a href="https://man.openbsd.org/login.conf">login.conf(5)</a> for hppa and sparc64 with the defaults for other architectures.
125: <li>Implemented fixes for <a href="https://man.openbsd.org/bgpctl">bgpctl(8)</a> large community parsing.
126: <li>Changed llvm PowerPC code generation to avoid generating unaligned floating point load and store instructions.
127: <li>Fixed a race condition in <a href="https://man.openbsd.org/wscons">wscons(4)</a> involving the wsevsrc_* functions.
128: <li>Made several improvements to the portability of <a href="https://man.openbsd.org/bgpd">bgpd</a> code.
1.1414 pamela 129: <!-- 2019/02/17 -->
1.1415 pamela 130: <li>Added a <a href="https://man.openbsd.org/vnode">vnode(9)</a> error flag to prevent <a href="https://man.openbsd.org/fsync">fsync(2)</a> from reporting successful syncing when a past write failure has led to a buffer discard in <a href="https://man.openbsd.org/vfs">vfs(9)</a>.
1.1414 pamela 131: <li>Added <a href="https://man.openbsd.org/rsync">rsync(1)</a> support for --port=PORT and ":port" in the rsync:// URL. Unlike in the original rsync, service names are supported.
132: <li>Corrected <a href="https://man.openbsd.org/usb">usb(4)</a> to publish a new attached device only once it is fully initialized, preventing a race condition.
133: <li>Converted <a href="https://man.openbsd.org/openssl">openssl(1)</a> pkeyutl to the newer style of option handling.
134: <li>Adjusted <a href="https://man.openbsd.org/unwind">unwind(8)</a> to restart the DoT resolver alongside the other resolvers when log verbosity changes.
135: <!-- 2019/02/16 -->
136: <li>Improved time interpretation for <a href="https://man.openbsd.org/at">at(1)</a> by assuming that a time that is already past refers to the next day.
137: <li>Implemented the conv=fsync feature in <a href="https://man.openbsd.org/dd">dd(1)</a> (mirroring GNU dd), performing an <a href="https://man.openbsd.org/fsync">fsync(2)</a> after the final write to output.
138: <li>Added chown <a href="https://man.openbsd.org/pledge">pledge(2)</a> to <a href="https://man.openbsd.org/rsync">rsync(1)</a>, allowing root to gift files to other uids.
139: <li>Adjusted <a href="https://man.openbsd.org/rsync">rsync(1)</a> to set access time information with sub-second resolution.
140: <li>Changed <a href="https://man.openbsd.org/vmm">vmm(4)</a> to allow guests to see PA bits in CPUID, removing an unintentional guest memory size limit of 64GB.
141: <!-- 2019/02/15 -->
142: <li>Fixed a case where <a href="https://man.openbsd.org/ddb">ddb(4)</a> would modify two variables instead of one on 64-bit architectures.
143: <li>Relaxed userland stack pointer checking to allow PROT_NONE permissions on a page in addition to MAP_STACK.
144: <!-- 2019/02/14 -->
145: <li>Added support for -o, -D and -a in <a href="https://man.openbsd.org/rsync">rsync(1)</a>.
146: <li>Changed dpath <a href="https://man.openbsd.org/pledge">pledge(2)</a> to allow <a href="https://man.openbsd.org/mkfifoat.2">mkfifoat(2)</a> and <a href="https://man.openbsd.org/mknodat.2">mknodat(2)</a>.
147: <li>Allowed configuration of the rdomain for <a href="https://man.openbsd.org/mpe">mpe(4)</a> and <a href="https://man.openbsd.org/mpw">mpw(4)</a> interfaces.
148: <!-- 2019/02/13 -->
149: <li>Removed casts to (unsigned) to avoid range reduction bugs from parse.y based parsers.
150: <li>Updated <a href="https://man.openbsd.org/perl">perl(1)</a> to 5.28.1.
151: <li>Added support for server and client finished messages in <a href="https://man.openbsd.org/man3/ssl.3">ssl(3)</a> TLSv1.3 client implementation.
152: <li>Added a new <a href="https://man.openbsd.org/futex">futex(2)</a>-based <a href="https://man.openbsd.org/rwlock">rwlock(9)</a> implementation. The existing rwlock implementation will be used for architectures lacking atomic primitives.
153: <li>Changed <a href="https://man.openbsd.org/socket">socket(2)</a> options to allow calling of SO_PEERCRED on sockets created with <a href="https://man.openbsd.org/socketpair">socketpair(2)</a>.
154: <li>Adapted <a href="https://man.openbsd.org/rsync">rsync(1)</a> to use md4 from <a href="https://man.openbsd.org/crypto">crypto(3)</a>.
155: <!-- 2019/02/12 -->
156: <li> Integrated group ID send/receive and remapping into <a href="https://man.openbsd.org/rsync">rsync(1)</a>.
157: <li> Added -g option and associated getpw pledge to <a href="https://man.openbsd.org/rsync">rsync(1)</a>.
158: <li>Simplified imsg communications and improved privilege separation of <a href="https://man.openbsd.org/dhclient">dhclient(8)</a>. <a href="https://man.openbsd.org/resolv.conf.tail">resolv.conf.tail(5)</a> will now be read (allowing additional details to be supplied) with each proposal.
159: <li>Implemented support for -e and --rsh=name options in <a href="https://man.openbsd.org/rsync">rsync(1)</a>.
160: <li>Added long-opts aliases for single-letter options present in <a href="https://man.openbsd.org/rsync">rsync(1)</a>. Added missing -no-OPT long options.
161: <li>Adjusted <a href="https://man.openbsd.org/bgpctl">bgpctl(8)</a> show requests to handle the case where no neighbors are defined in <a href="https://man.openbsd.org/bgpd">bgpd(8)</a>.
162: <!-- 2019/02/11 -->
163: <li>Implemented handling of Certificate and CertificateVerify messages in TLSv1.3.
164: <li>Began explicitly supporting VPNs in <a href="https://man.openbsd.org/bgpd">bgpd(8)</a>, redefining and changing the syntax of <a href="https://man.openbsd.org/bgpd.conf">bgpd.conf(5)</a>. IMPORTANT NOTE: If MPLS VPNs are used, configuration will need to be adjusted.
165: <li>Moved the on-disk trust anchor for <a href="https://man.openbsd.org/unwind">unwind(8)</a> to /var/db/unwind.key, as it doesn't need to be in a directory writable by group _unwind. Additionally, began tracking it in <a href="https://man.openbsd.org/changelist">changelist(5)</a>.
1.1413 pamela 166: <!-- 2019/02/10 -->
1.1414 pamela 167: <li>Imported Kristaps' openrsync into the tree and began adjustment to match <a href="https://man.openbsd.org/style">style(9)</a> guidelines.
168: <li>Removed the implicit RTF_MPATH flag that rt_ifa_add() set on new routes.
169: <li>Simplified check for whether /usr/share is on an NFS filesystem in reorder_kernel.sh.
170: <li>Corrected PPC target in llvm to reflect that a long double is the same as a double on OpenBSD/powerpc.
1.1413 pamela 171: <li>Set pkcs11.so to initialize pkcs11 interaction to allow it to ask for the smartcard's PIN during <a href="https://man.openbsd.org/ssh-keygen">ssh-keygen(1)</a> with -D.
172: <li>Adjusted <a href="https://man.openbsd.org/pfctl">pfctl(8)</a> parser to insist anchor names must not be empty.
173: <li>Further simplifed trust anchor handling in <a href="https://man.openbsd.org/unwind">unwind(8)</a>, allowing removal of wpath and cpath pledges from the parent process.
174: <li>Set logging of x509 peers' certificate subject names during tls client authentication in <a href="https://man.openbsd.org/httpd">httpd(8)</a>.
175: <li>Added Allwinner V3s support.
176: <li>Adjusted <a href="https://man.openbsd.org/scp">scp(1)</a> to accept shell-style brace alternations (e.g. "{foo,bar}") when verifying that filenames sent by the server match client requests.
177: <li>Changed <a href="https://man.openbsd.org/ssh">ssh(1)</a> to log when a connection is dropped for attempting to run a command when ForceCommand=internal-sftp is in effect.
178: <li>Updated to xf86-video-apm 1.3.0, xf86-video-s3virge 1.11.0, xf86-video-chips 1.3.0, xf86-video-i128 1.4.0, xf86-video-neomagic 1.3.0 and xf86-video-i740 1.4.0.
179: <!-- 2019/02/09 -->
180: <!-- 2019/02/08 -->
181: <li>Fixed ipv4 checksum calculation for mpls_input.c that was being performed in memory half the necessary size.
182: <li>Fixed a race condition for <a href="https://man.openbsd.org/install">install(1)</a>. This patch makes the -S option a no-op, its functionality becoming the default behavior.
183: <li>Fixed stack info leak in <a href="https://man.openbsd.org/execve">execve(2)</a>.
184: <li>Made clear in the documentation that <a href="https://man.openbsd.org/httpd">httpd(8)</a> supports fastcgi over TCP.
185: <li>Imported <a href="https://man.openbsd.org/unbound">unbound(8)</a> 1.9.0 and updated unwind's copy of libunbound.
186: <!-- 2019/02/07 -->
187: <li>Removed rpath from the pledge in <a href="https://man.openbsd.org/cut">cut(1)</a> when only stdin is used.
188: <li>Rewrote trust anchor handling in <a href="https://man.openbsd.org/unwind">unwind(8)</a> to stop using libunbound's auto trust anchor feature, allowing tightening of the resolver process pledges.
189: <li>Implemented processing of EncryptedExtensions in the <a href="https://man.openbsd.org/ssl">ssl(3)</a> TLSv1.3 client.
190: <li>Added lock stack trace saving for <a href="https://man.openbsd.org/witness">witness(4)</a>. This setting is not enabled by default.
191: <li>Adjusted <a href="https://man.openbsd.org/bwfm">bwfm(4)</a> to correct possible memory leaks by changing it to consistently use <a href="https://man.openbsd.org/m_freem">m_freem(9)</a> and adding an assert to identify overruns of the task ring queue.
192: <!-- 2019/02/06 -->
193: <li>Reworked <a href="https://man.openbsd.org/fec">fec(4)</a> handling of descriptors and buffers. Added recovery in the case of a full transmission queue.
194: <li>Improved handling of roff identifiers that end with a tab character in <a href="https://man.openbsd.org/mandoc">mandoc(1)</a>.
195: <li>Fixed a possible memory leak in tcp_usrreq().
196: <li>Replaced overlapping <a href="memcpy">memcpy(3)</a> with <a href="https://man.openbsd.org/memmove">memmove(3)</a> in getpathname() for <a href="https://man.openbsd.org/fsck_ffs">fsck_ffs(8)</a> and <a href="https://man.openbsd.org/fsck_ext2fs">fsck_ext2fs(8)</a>.
197: <li>Added display of rcpt address for RCPT errors in <a href="https://man.openbsd.org/smtpd">smtpd(8)</a>.
198: <li>Added -b to display-panes like run-shell in <a href="https://man.openbsd.org/tmux">tmux(1)</a>.
199: <!-- 2019/02/05 -->
200: <li>Fixed addend handling for relaxing R-PPC-PLTREL24 relocations in <a href="https://man.openbsd.org/ld.bfd">ld.bfd(1)</a>, making -Wl and -relax work well enough to link base clang on macppc.
201: <li>Fixed a potential out-of-bounds read when <a href="https://man.openbsd.org/regcomp">regcomp(3)</a> is passed a bad expression.
202: <li>Adjusted <a href="https://man.openbsd.org/ps">ps(1)</a> to work in single user mode where /var/run is unavailable or in cases where /dev does not exist.
203: <li>Added an example <a href="https://man.openbsd.org/unwind.conf">unwind.conf(5)</a>. (Note that <a href="https://man.openbsd.org/unwind">unwind(8)</a> works without a config file in many cases).
204: <li>Converted <a href="https://man.openbsd.org/openssl">openssl(1)</a> pkey to the newer style of option handling.
205: <li>Added handling of Cisco's Encapsulated Remote Switch Port Analyzer (ERSPAN) protocol to <a href="https://man.openbsd.org/tcpdump">tcpdump(8)</a>.
206: <!-- 2019/02/04 -->
207: <li>Fixed printing of major and minor from dev_t in various parts of the tree.
208: <li>Fixed NULL-deference crash in <a href="https://man.openbsd.org/ssh">ssh(1)</a> in the PKCS#11 code.
209: <li>Fixed a potential mbuf double free in the out-of-band soreceive() path.
210: <li>Added support for defining variables through the environment in <a href="https://man.openbsd.org/pkg-config">pkg-config(1)</a>.
211: <li>Implemented as-override in <a href="https://man.openbsd.org/bgpd">bgpd(8)</a>, a feature where the neighbor AS is replaced by the local AS in AS paths.
212: <li>Added --validate flag to <a href="https://man.openbsd.org/pkg-config">pkg-config(1)</a> and updated version to 0.29.0.
213: <li>Added a <a href="https://man.openbsd.org/pthread_get_name_np">pthread_get_name_np(3)</a> to match <a href="https://man.openbsd.org/pthread_set_name_np">pthread_set_name_np(3)</a> in <a href="https://man.openbsd.org/pthreads">pthreads(3)</a>.
214: <li>Fixed an undefined case when neither -msave-args or -mno-save-args are specified in LLVM.
215: <li>Imported libc++, libc++abi and libunwind version 7.0.1.
216: <li>Adjusted members of glob_t to match POSIX in <a href="https://man.openbsd.org/glob">glob(3)</a>. IMPORTANT NOTE: This required a libc major version bump.
217: <li>Implementing parsing and processing of TLSv1.3 ServerHello messages in <a href="https://man.openbsd.org/ssl">ssl(4)</a>.
218: <li>Fixed a panic caused by <a href="https://man.openbsd.org/bwfm">bwfm(4)</a> by handling control messages that exceed MLEN.
219: <li>Applied a fix to update the caller-supplied pointer in semundo_adjust() to prevent a potential use-after-free panic.
1.1412 florian 220: <!-- 2019/02/03 -->
221: <li>Allowed <a href="https://man.openbsd.org/tun">tun(4)</a> access to AF_MPLS packets from userland.
222: <li>Converted <a href="https://man.openbsd.org/openssl">openssl(1)</a> rsautl to the newer style of option handling.
223: <li>Improved support for Marvell wi-fi microcontroller SoCs with the creation of the mvgicp(4) driver.
224: <li>Fixed exception handling issues with <a href="https://man.openbsd.org/clang%2B%2B">clang++(1)</a> on platforms not using <a href="https://man.openbsd.org/ld.lld">ld.lld(1)</a> as the default linker.
225: <li>Added captive portal detection for <a href="https://man.openbsd.org/unwind">unwind(8)</a>.
226: <!-- 2019/02/02 -->
227: <li>Enabled -msave-args when building an amd64 kernel with <a href="https://man.openbsd.org/clang">clang(1)</a>.
228: <li>Increased datasize in <a href="https://man.openbsd.org/login.conf">login.conf(5)</a> for sparc64 to accommodate Mesa.
229: <li>Adjusted <a href="https://man.openbsd.org/pfctl">pfctl(8)</a> to show the routing address selected by "route-to" when "pfctl -s states" is used.
230: <li>Improved stack trace saving on amd64 and i386.
231: <!-- 2019/02/01 -->
232: <li>Added retries to <a href="https://man.openbsd.org/acme-client">acme-client(1)</a> when not all challenges are validated.
233: <li>Fixed <a href="https://man.openbsd.org/wscons">wscons(4)</a> to remove a potential use-after-free panic involving wskbclose().
234: <li>Fixed <a href="https://man.openbsd.org/ixl">ixl(4)</a> calculation of physical function ID, improving the function of the second port on dual port cards.
235: <li>Added libelf to allow future use by Mesa.
236: <li>Applied connection timeouts from an initial <a href="https://man.openbsd.org/ssh">ssh(1)</a> attempt to subsequent attempts.
237: <li>Fixed lost interrupts in <a href="https://man.openbsd.org/fec">fec(4)</a> which could lead to full TX queues.
238: <!-- 2019/01/31 -->
239: <li>Incremented efiboot version to 0.14. This is the first version to support <a href="https://man.openbsd.org/softraid">softraid(4)</a>.
240: <li>Added kernel locking for clocks in clock_gettime.
241: <li>Adjusted <a href="https://man.openbsd.org/pf.conf">pf.conf(5)</a> to allow non-numerical port specifications in line with other rules and added an error message regarding ranges without start values.
242: <li>Fixed compilation of amd64 kernel when optimization is disabled.
243: <li>Improved <a href="https://man.openbsd.org/mandoc">mandoc(1)</a> <a href="https://man.openbsd.org/tbl">tbl(7)</a> centering in <a href="https://man.openbsd.org/mdoc">mdoc(7)</a> documents.
244: <li>Implemented booting from <a href="https://man.openbsd.org/softraid">softraid</a> on arm64.
245: <li>Modified <a href="https://man.openbsd.org/unwind">unwind(8)</a> to grant non-privileged users access to status information. Use of reload and logging commands requires root.
246: <li>Enabled unused IQ/ADC calibration code in the <a href="https://man.openbsd.org/athn">athn(4)</a> driver. Complete and enable noisefloor calibration code.
247: <li>Adjusted tc_setclock not to rewind the system uptime during resume/unhibernate.
248: <!-- 2019/01/30 -->
249: <li>Corrected handling of TLS sigalgs extensions for TLSv1.0/TLSv1.1 for <a href="https://man.openbsd.org/man3/ssl.3">ssl(3)</a>.
250: <li>Modified <a href="https://man.openbsd.org/bwfm">bwfm(4)</a> to query firmware for RSSI levels and current transmit rate on behalf of <a href="https://man.openbsd.org/ifconfig">ifconfig(1)</a>.
251: <li>Implemented -msave-args in <a href="https://man.openbsd.org/clang">clang(1)</a>/llvm.
252: <!-- 2019/01/29 -->
253: <li>Updated compiler-rt to 7.0.1.
254: <li>Enabled CRYPTO for arm64 RAMDISK to allow use of <a href="https://man.openbsd.org/softraid">softraid(4)</a> crypto during installation.
255: <li>Fixed a bug in <a href="https://man.openbsd.org/calendar">calendar(1)</a> that led to duplicate display of events when -B was used.
256: <li>Improved imsg processing in <a href="https://man.openbsd.org/unwind">unwind(8)</a> to be more paranoid, excepting the control socket (so users can't bring down unwind).
257: <li>Adjusted <a href="https://man.openbsd.org/pckbc">pckbc(4)</a> to discard unwanted mouse events from the keyboard input channel while on the console.
258: <li>Modified <a href="https://man.openbsd.org/mail.lmtp">mail.lmtp(8)</a> to strip carriage returns from lmtp responses.
259: <li>Added a dedicated <a href="https://man.openbsd.org/man2/sysctl.2">sysctl(2)</a> node for <a href="https://man.openbsd.org/witness">witness(4)</a>.
260: <li>Imported Mesa 18.3.2.
261: <li>Modified <a href="https://man.openbsd.org/rtwn">rtwn(4)</a> to accept control frames in monitor mode.
262: <li>Made -N and -r mutually exclusive in <a href="https://man.openbsd.org/pfctl">pfctl(8)</a>, allowing either disabling DNS or enabling additional reverse lookups, not both.
263: <li>Enabled <a href="https://man.openbsd.org/ixl">ixl(4)</a> on sparc64.
1.1411 florian 264: <!-- 2019/01/28 -->
1.1412 florian 265: <li>Implemented -a ("archive" mode, synonymous with -RpP) for <a href="https://man.openbsd.org/cp">cp(1)</a>.
266: <li>Adjusted <a href="https://man.openbsd.org/fstat">fstat(1)</a> to filter multiple pids and multiple users at the same time.
267: <li>Switched i386 to use lld as the default linker.
268: <li>Stopped accounting/updating priorities for idle threads, fixing an accounting bug where <a href="https://man.openbsd.org/top">top(1)</a> would report high CPU usage for idle threads of secondary CPUs right after booting.
269: <li>Implemented the ability to break into <a href="https://man.openbsd.org/ddb">ddb(4)</a> using <a href="https://man.openbsd.org/imxuart">imxuart(4)</a>.
270: <li>Modified <a href="https://man.openbsd.org/ld.lld">ld.lld(1)</a> to produce binaries compatible with the W^X implementation on i386.
271: <li>Unveiled _PATH_DEVDB in <a href="https://man.openbsd.org/su">su(1)</a> and <a href="https://man.openbsd.org/wall">wall(1)</a> due to the use of <a href="https://man.openbsd.org/ttyname">ttyname(3)</a>.
1.1411 florian 272: <!-- 2019/01/27 -->
273: <li>Added domain-s (DNS over TLS) to <a href="https://man.openbsd.org/services">services(5)</a>.
274: <li>Imported LLVM 7.0.1 release.
275: <li>Implemented DNS over TLS (DoT) in <a href="https://man.openbsd.org/unwind">unwind(8)</a>.
276: <li>Added a kernel fix for a potential panic when a negative value is used to index an array, validating in <a href="https://man.openbsd.org/wscons">wscons(4)</a> the user-supplied device index given to WSMXUIO_ADD_DEVICE.
277: <li>Adjusted <a href="https://man.openbsd.org/mpe">mpe(4)</a> mpls rtable behaviour to match <a href="https://man.openbsd.org/mpw">mpw(4)</a>, removing a special case in mpls_input. Reworked mpe_input to patch ipv4 checksum and handle ipv6.
278: <!-- 2019/01/26 -->
279: <li>Added 'uselease' statement to <a href="https://man.openbsd.org/dhclient">dhclient(8)</a> to replace 'append,' 'default,' 'ignore,' 'prepend' and 'supersede' actions on lease-provided values.
280: <li>Improved support for <a href="https://man.openbsd.org/nmea">nmea(4)</a> devices, providing altitude and ground speed values as sensors.
281: <li>Added an <a href="https://man.openbsd.org/scp">scp(1)</a> client check for whether filenames sent during remote -> local directory copies satisfy the user-specified wildcard, and a -T flag to disable this functionality in case of this check rejecting wanted files.
282: <li>Made <a href="https://man.openbsd.org/ssh-keyscan">ssh-keyscan(1)</a> return a non-zero exit status if it finds no keys.
283: <li>Added a delay to fix <a href="https://man.openbsd.org/pms">pms(4)</a> touchpad driver issue on ThinkPad X1 Gen6.
284: <li>Tagged the start of <a href="https://man.openbsd.org/witness">witness(4)</a> output with prefix "witness:" to allow easier data extraction.
285: <li>Changed an <a href="https://man.openbsd.org/abort">abort(3)</a> call to an <a href="https://man.openbsd.org/_exit">_exit(2)</a> in <a href="https://man.openbsd.org/crypto">crypto(3)</a> to guarantee termination of the running program without potentially leaving key material in core files.
286: <li>Fixed a double free in <a href="https://man.openbsd.org/ldap">ldap(1)</a>.
287: <li>Eliminated a bug wherein the ttl 0 could be incorrectly decremented to ttl 255 for incoming mpls packets.
288: <!-- 2019/01/25 -->
289: <li>Fixed microsecond output of timestamp deltas (-tttt) for <a href="https://man.openbsd.org/tcpdump">tcpdump(8)</a>.
290: <li>Enabled <a href="https://man.openbsd.org/ccp">ccp(4)</a> on arm64 and armv7 ramdisks.
291: <!-- 2019/01/24 -->
292: <li>Set <a href="https://man.openbsd.org/ssh">ssh(1)</a> to accept the host key fingerprint as a synonym for "yes" when accepting an unknown host key, allowing pasting of fingerprints obtained through other means to have the client perform the comparison for you.
293: <li>Forced progressmeter to update at the beginning and end of a transfer, fixing a bug where it wouldn't display on quick <a href="https://man.openbsd.org/scp">scp(1)</a>/<a href="https://man.openbsd.org/sftp">sftp(1)</a> transfers.
294: <li>Fixed a crash on long lines when switching to another file in <a href="https://man.openbsd.org/vi">vi(1)</a>.
295: <li>Increased default datasize on arm64 to 768M to prepare for building clang 7.
296: <li>Removed SHA224 and GOST-based signature algorithms from use in TLS 1.2.
297: <!-- 2019/01/23 -->
298: <li>Set <a href="https://man.openbsd.org/route">route(8)</a> to display the same flags in RTM_IFINFO messages as <a href="https://man.openbsd.org/ifconfig">ifconfig(8)</a>.
299: <li>Reworked <a href="https://man.openbsd.org/mpw">mpw(4)</a> to be an actual ethernet interface.
300: <li>Removed support for obsolete "host/port" syntax in <a href="https://man.openbsd.org/ssh">ssh(1)</a>. This is no longer commonly used and may be confused with CIDR notation.
301: <li>Changed <a href="https://man.openbsd.org/bridge">bridge(4)</a> to only copy packets for span ports if the bridge is up.
302: <li>Imported <a href="https://man.openbsd.org/unwind">unwind(8)</a>, a hybrid validating stub and recursive resolver. It actively observes the local net to decide how best to resolve names.
303: <li>Moved 802.11n rateset definitions out of MiRA to make them available to net80211 and drivers in general. Added short guard interval support.
304: <li>Added the <a href="https://man.openbsd.org/man4/arm64/apm.4">apm(4)</a> subsystem to arm64.
305: <li>Taught <a href="https://man.openbsd.org/ldpd">ldpd(8)</a> to ask if a potential pseudowire interface is pwe3-capable.
306: <li>Changed <a href="https://man.openbsd.org/scp">scp(1)</a>/<a href="https://man.openbsd.org/sftp">sftp(1)</a> to sanitize scp filenames via snmprintf.
307: <li>Allowed auto-incrementing of certificate serial number for certificates signed in a single command line for <a href="https://man.openbsd.org/ssh-keygen">ssh-keygen(1)</a>.
308: <!-- 2019/01/22 -->
309: <li>Reworked how <a href="https://man.openbsd.org/tcp">tcp(4)</a> md5 signatures are configured in <a href="https://man.openbsd.org/ldpd">ldpd(8)</a>. Now configuration is allowed against a prefix in addition to a neighbour.
310: <li>Added a specific panic to stop the kernel booting in case of an RPC error during NFS boot of a <a href="https://man.openbsd.org/diskless">diskless(8)</a> host.
311: <li>Pledged <a href="https://man.openbsd.org/video">video(1)</a> in response to the newly-added promise.
312: <li>Reordered PCI device assignment in <a href="https://man.openbsd.org/vmd">vmd(8)</a> to fix Linux network interface numbering. Previously, changing assigned disks would change the interface name under some Linux distributions.
313: IMPORTANT NOTE - if you have existing Linux guest VMs, you'll need to modify your configuration files on a one-time basis.
314: <li>Increased maximum MTU of <a href="https://man.openbsd.org/bnxt">bnxt(4)</a> to match the linux driver.
315: <li>Provided SSL_get_client_ciphers() and SSL_get1_supported_ciphers() (part of the OpenSSL 1.1 API).
316: <li>Added support to <a href="https://man.openbsd.org/crypto">crypto(3)</a> for xchacha20 and xchacha20-poly1305, extending the nonce range and allowing use of random nonces.
1.1407 florian 317: <!-- 2019/01/21 -->
1.1411 florian 318: <li>Modified <a href="https://man.openbsd.org/syspatch">syspatch</a> not to return an error if a rollback is attempted when no patches have been installed.
319: <li><a href="https://man.openbsd.org/syspatch">Syspatch(8)</a> now warns the user to reboot after installation of a new kernel and identifies the location of errata on the local machine.
320: <li>Removed undocumented 24 hour limits for timeouts from <a href="https://man.openbsd.org/select">select(2)</a>, <a href="https://man.openbsd.org/pselect">pselect(2)</a>, <a href="https://man.openbsd.org/poll">poll(2)</a> and <a href="https://man.openbsd.org/ppoll">ppoll(2)</a>.
321: <li>Added a -J option as a shortcut for -o Proxyjump= to <a href="https://man.openbsd.org/scp">scp(1)</a> and <a href="https://man.openbsd.org/sftp">sftp(1)</a> to match <a href="https://man.openbsd.org/ssh">ssh(1)</a>'s interface.
322: <li>Switched sntrup implementation source from supercop to libpqcrypto in <a href="https://man.openbsd.org/ssh">ssh(1)</a>.
323: <li>Added the ability to parse epoch seconds to <a href="https://man.openbsd.org/strptime">strptime(3)</a>. Added a -f pformat flag to parse the given time with strptime to <a href="https://man.openbsd.org/date">date(1)</a>.
324: <li>Fixed problem where <a href="https://man.openbsd.org/unveil">unveil(2)</a> system call can leak memory.
325: <li>Added video promise to <a href="https://man.openbsd.org/pledge">pledge(2)</a>, allowing ioctls on <a href="https://man.openbsd.org/man4/video.4">video(4)</a> devices selected from <a href="https://man.openbsd.org/video">video(1)</a> and firefox wbrtc implementation.
326: <li>Introduced a dedicated entry point data structure for file locks.
327: <li>Provided the initial TLSv1.3 client implementation in LibreSSL.
328: <li>Introduced -v flags for ssh-add and ssh-pkcs11-helper in <a href="https://man.openbsd.org/ssh">ssh(1)</a>.
329: <li>Improved logging to record actual time values and specify whether a TLS certificate is not yet valid or expired when using <a href="https://man.openbsd.org/ntpd">ntpd(8)</a> constraints.
330: <li>Factored out several functions duplicated between client and server for <a href="https://man.openbsd.org/ssh">ssh(1)</a>.
331: <li>Removed obsolete SSH v.1 functions in <a href="https://man.openbsd.org/ssh">ssh(1)</a>.
332: <li>Enables manual validity checking for constraints in the X.509 certificate in <a href="https://man.openbsd.org/ntpd">ntpd(8)</a>. This should prevent failure of automatic validity checking based on incorrect system time, allowing use of the HTTP header's report of server time.
333: <li>AMD64 machines will now support 2TB of physical memory, extendable in the future.
334: <li>Improved handling of CPUID[1].ECX[OSXSAVE] bit.
1.1407 florian 335: <li>Adjusted <a href="https://man.openbsd.org/bgpd">bgpd(8)</a> to use Adj-RIB-Out to push UPDATE messages to peers, improving memory usage.
1.1411 florian 336: <li>Made handling of MSR_SMBASE and MSR_SMM_MONITOR_CTL more correct in <a href="https://man.openbsd.org/vmm">vmm(4)</a>. These will now generategeneral protection fault as per spec.
1.1407 florian 337: <!-- 2019/01/20 -->
338: <li>Adjusted mac filters to allow viewing vlan traffic and arp requests on vlans in <a href="https://man.openbsd.org/ixl">ixl(4)</a>.
339: <li>Added refresh for <a href="https://man.openbsd.org/arp">arp(8)</a> entries that are about to expire.
340: <li>Added support in <a href="https://man.openbsd.org/bgpd">bgpd(8)</a> and <a href="https://man.openbsd.org/bgpctl">bgpctl(8)</a> for group descriptions in control messages that accept a neighbor description.
341: <li>Added support for ECDSA keys in PKCS#11 tokens.
342: <li>Added a -T option to test whether <a href="https://man.openbsd.org/ssh">ssh(1)</a> keys in an agent are usable.
343: <li>Imported xorgproto 2018.4.
344: <li>Added support for a new <a href="https://man.openbsd.org/kcov">kcov(4)</a> trace mode called KCOV_MODE_TRACE_CMP to trace comparison instructions and switch statements, usable during fuzzing to generate even more coverage.
1.1410 florian 345: <li>Set the shell to strip quotation marks from daemon_flags when starting a daemon with <a href="https://man.openbsd.org/rc.d">rc.d(8)</a>, making the details in pexp match what appears in the process list.
1.1407 florian 346: <li>Restored correct display of treasure when snake runs over the money in <a href="https://man.openbsd.org/snake">snake(6)</a>. Adjusted cursor location during space warp and display of the pinball bonus.
347: <li>Changed imsg header definitions to use standard types.
348: <!-- 2019/01/19 -->
349: <li>Fixed BN_is_prime_* calls in <a href="https://man.openbsd.org/crypto">libcrypto(3)</a>, <a href="https://man.openbsd.org/openssl">openssl(1)</a>, <a href="https://man.openbsd.org/ssh">ssh(1)</a> and <a href="https://man.openbsd.org/sshd">sshd(8)</a>.
350: <li>Handled link state change interrupts in <a href="https://man.openbsd.org/ixl">ixl(4)</a>.
351: <li>Serialized tc_windup() calls and modified some timehands.
352: <li>Committed refactored <a href="https://man.openbsd.org/ssh">ssh(1)</a> packet parsing API.
353: <li>Changes to <a href="https://man.openbsd.org/dhclient">dhclient(8)</a> now handle changes to SSID or LLADDR by retrieving a new lease. This mproves performance when join connects to new networks.
354: <li>Improved join error handling in<a href="https://man.openbsd.org/ifconfig">ifconfig(8)</a>.
355: <li>Added a pwraction <a href="https://man.openbsd.org/sysctl">sysctl(8)</a> that allows conversion of a power button into a sleep button if desired.
1.1410 florian 356: <li>Set an <a href="https://man.openbsd.org/ssh">ssh(1)</a> password prompt to begin with a carriage return to obscure portions of a password entered too early.
1.1407 florian 357: <li>Enabled <a href="https://man.openbsd.org/myx">myx(4)</a> on the large ramdisk for amd64.
358: <li>Finished randomizing remaining layers of pmap_kernel.
359: <li>Enabled <a href="https://man.openbsd.org/ixl">ixl(4)</a> on amd64.
360: <li>Added a TLS record handling implementation.
361: <li>Moved boottime into the timehands.
362: <li>Added a partial port of EC_KEY_METHOD from OpenSSL 1.1 to libcrypto. Added various apis from OpenSSL 1.1 to LibreSSL.
363: <!-- 2019/01/18 -->
364: <li>Set removal of a currently active network from the join list to disconnect as well.
365: <li>Added "join any" option to allow users to automatically connect via join() to any open wifi network. Known networks are preferred.
366: <li>Increased the socket buffer size for <a href="https://man.openbsd.org/sendsyslog">sendsyslog(2)</a> to 1 MB for fewer messages dropped by <a href="https://man.openbsd.org/syslogd">syslogd(8)</a>.
367: <li>Updated to libpixman 0.36.0 in xenocara.
368: <li>Added protective check for negative length integers in nfs clients and servers, as well as negative length NFS strings.
369: <li>Reconnected bfd(4) to the build after updating for sounlock() api change.
370: <li>Set <a href="https://man.openbsd.org/dhclient">dhclient(8)</a> to ignore HUP signals. Starting a new dhclient will handle this use case by killing and executing a new copy.
371: <li>Began validating relative timeout before sleeping for <a href="https://man.openbsd.org/futex">futex(2)</a>.
372: <li>Began validating inputs to <a href="https://man.openbsd.org/adjtime">adjtime(2)</a>, <a href="https://man.openbsd.org/settimeofday">settimeofday(2)</a> and <a href="https://man.openbsd.org/clock_settime">clock_settime(2)</a>.
373: <li>Changed the default digest type to sha256 for <a href="https://man.openbsd.org/openssl">openssl(1)</a>. Added support for pbkdf2 with OpenSSL-compatible flags.
374: <li>Removed <a href="https://man.openbsd.org/vmm">vmm(4)</a> and disabled <a href="https://man.openbsd.org/vmd">vmd(8)</a> and <a href="https://man.openbsd.org/vmctl">vmctl(8)</a> for i386 systems.
375: <!-- 2019/01/17 -->
376: <li>Renamed TLS extension-handling functions to better fit TLSv1.3.
377: <li>Enabled use of a 64-bit register when required for inline assembly on sparc64, correcting sparc64 kernels compiled with <a href="https://man.openbsd.org/clang">clang(1)</a>.
378: <li>Continued work to prepare the network stack for fine-grained locking.
379: <li>Added support for the SSD1306 OLED display.
1.1410 florian 380: <li>Modified <a href="https://man.openbsd.org/signify">signify(1)</a> and <a href="https://man.openbsd.org/doas">doas(1)</a> to prevent passwords from being retained in memory when errors are encountered.
1.1407 florian 381: <li>Prevented users from specifying multiple join or nwid arguments in one <a href="https://man.openbsd.org/ifconfig">ifconfig(8)</a> call.
382: <li>Fixed crash conditions in <a href="https://man.openbsd.org/unveil">unveil(2)</a>, along with some cases where unveil would return ENOENT instead of EACCESS.
383: <li>Enabled <a href="https://man.openbsd.org/bwfm">bwfm(4)</a> in RAMDISK_CD for amd64, allowing use during installs.
384: <li>Laid groundwork for TLSv1.3.
385: <!-- 2019/01/16 -->
386: <li>Added a -h flag to <a href="https://man.openbsd.org/sftp">sftp(1)</a> <a href="https://man.openbsd.org/chown">chown(8)</a>, <a href="https://man.openbsd.org/chgrp" >chgrp(1)</a>, and <a href="https://man.openbsd.org/chmod">chmod(1)</a> commands to request they not follow symlinks.
387: <li>Added support for a "lsetstat@openssh.com" extension. This replicates the
388: functionality of the existing SSH2_FXP_SETSTAT operation but does not
389: follow symlinks.
390: <li>Updated to exit <a href="https://man.openbsd.org/syspatch">syspatch(8)</a> correctly after updating itself. Improvement to readability of patches to install on first boot.
391: <!-- 2019/01/15 -->
392: <li>For external LSAs the type (1 or 2) is encoded in the metric field. Fixed a problem where <a href="https://man.openbsd.org/ospfd">ospfd(8)</a> and <a href="https://man.openbsd.org/ospf6d">ospf6d(8)</a> overwrite this information when "depend on" is used and the specified interface is down.
393: <li>Added Allwinner H3/H5 <a href="https://man.openbsd.org/ohci">ohci(4)</a> clocks.
394: <li>Repaired inter-word spacing of postscript and pdf outputting by <a href="https://man.openbsd.org/mandoc">mandoc(1)</a>.
395: <li>Corrected setting of default colours in <a href="https://man.openbsd.org/tmux">tmux(1)</a>.
396: <li>"No data" frames will no longer be processed in <a href="https://man.openbsd.org/ieee80211_input">ieee80211_input(9)</a> before decryption and incorrectly counted as decryption failures.
397: <li>Characters that will not be copied are no longer highlightable in <a href="https://man.openbsd.org/tmux">tmux(1).</a>
398: <!-- 2019/01/14 -->
399: <li>Allowed programs to set the Checking Disabled flag on DNS requests.
400: <li>Prevented <a href="https://man.openbsd.org/ntpd">ntpd(8)</a> from starting when an instance is already running.
401: <li>Added support for building sparc64 kernels with <a href="https://man.openbsd.org/clang">clang(1)</a>.
402: <li>Fixed <a href="https://man.openbsd.org/mailq">mailq(8)</a> output for <a href="https://man.openbsd.org/smtpctl">smtpctl(8)</a>.
403: <li>Code review and clean up of <a href="https://man.openbsd.org/locate">locate(1)</a>.
404: <li>Fixed minor issues in <a href="https://man.openbsd.org/ksh">ksh(1)</a>.
405: <li>Modified <a href="https://man.openbsd.org/ttyflags">ttyflags(8)</a> to improve memory usage.
406: <li>Cleanup and improvement of <a href="https://man.openbsd.org/dhclient">dhclient(8).</a>
407: <!-- 2019/01/13 -->
408: <li>Redundant debug message removed for <a href="https://man.openbsd.org/iwn">iwn(4)</a>.
409: <li>Added support for <a href="https://man.openbsd.org/gpio">gpio(4)</a> bus and improved card detection on Octeon systems.
410: <li>Fixed an off-by-one error in pfkeyv2_sysctl_policydumper().
411: <li>Improved support for Broadcom trackpad mouse <a href="https://man.openbsd.org/ubcmtp">ubcmtp(4)</a> by validating interfaces and claiming them during *attach().
412: <li>Validated interfaces for if_ral passed to *match().
413: <li>Improved <a href="https://man.openbsd.org/syslog">syslog(3)</a> to support program names including "." and "_".
414: <li>Updated xf86-video-ati to 18.1.0.
415: <!-- 2019/01/12 -->
416: <li>Set <a href="https://man.openbsd.org/clang">clang(1)</a> to disable the correct performance options based on architecture. Clang now checks CPU architecture and not system architecture when setting protection flags.
417: <li>Enabled <a href="https://man.openbsd.org/uhci">uhci(4)</a> USB support for ARMv7.
418: <!-- 2019/01/11 -->
419: <li>Antiquated mincore(2) will not be needed and was removed, eliminating an interface that exposed physical machine information unnecessarily.
420: <li>Bug fixes for <a href="https://man.openbsd.org/otus">otus(4)</a> devices based on the Atheros AR9001U chipset.
421: <li>Changed <a href="https://man.openbsd.org/mandoc">mandoc(1)</a> html output to display tooltips using css exclusively.
422: <li>Clarified in documentation that OpenBSD ignores the LC_NUMERIC category as a safety practice, and outlined best practices for portable programs.
423: <li>Addition of the <a href="https://man.openbsd.org/imxsrc">imxsrc(4)</a> i.MX system reset controller driver, used to assert the reset pins for the PCIe controller, etc.
424: <!-- 2019/01/10 -->
425: <li>Bug fixes in <a href="https://man.openbsd.org/pfctl">pfctl(8)</a>.
426: <li>Added <a href="https://man.openbsd.org/abcrtc">abcrtc(4)</a> Abracon AB1805 real-time clock driver.
427: <li>Eliminated <a href="https://man.openbsd.org/alloca">alloca(3)</a> call from vioqcow2.c and replaced with <a href="https://man.openbsd.org/malloc">malloc(3)</a> to prevent known-location object placement by an attacker.
428: <li>Implemented Event()/Signal()/Wait() AML operations for <a href="https://man.openbsd.org/acpi">acpi(4)</a>.
429: <li>Improved the "not my pool" searching loop in <a href="https://man.openbsd.org/malloc">malloc(3)</a> and made the number of pools variable. Optimization of multi-threaded case by adjusting default number of pools to 8.
430: <li>Hacking on <a href="https://man.openbsd.org/virtio">virtio(4)</a>, including defines, bug fixing and pci device list.
431: <li>kern_time.c will not allow cancellation of ongoing <a href="https://man.openbsd.org/adjtime">adjtime(2)</a> until after full permission checks.
432: <li>Adjusted <a href="https://man.openbsd.org/nc">nc(1)</a> to use <a href="https://man.openbsd.org/memset">memset(3)</a> instead of <a href="https://man.openbsd.org/bzero">bzero(3)</a> for portability and POSIX compliance.
433: <li><a href="https://man.openbsd.org/pledge">Pledge(2)</a> and <a href="https://man.openbsd.org/unveil">unveil(2)</a> <a href="https://man.openbsd.org/unbound-anchor">unbound-anchor(8)</a>.
434: <li>Improved portability of <a href="https://man.openbsd.org/mandoc">mandoc(1)</a> to other operating systems. Improved html and css used for html generation.
435: <li>Prevented <a href="https://man.openbsd.org/radeondrm">radeondrm(4)</a> from using aperture memory to overlap the framebuffer.
436: <!-- 2019/01/09 -->
437: <li>Improved <a href="https://man.openbsd.org/ddb">ddb(4)</a> readability by printing right-aligned hex values.
1.1408 kn 438: <li>Fix for <a href="https://man.openbsd.org/rcs">rcs(1)</a> to allow correct lock resolution before expansion of keywords, so expansion can happen with the correct values and files don't show up as modified.
1.1407 florian 439: <li>Added the ability for arm64 efiboot to boot from partitions other than "a".
440: <li>Spleen font enabled in <a href="https://man.openbsd.org/man8/wsfontload.8">wsfontload(8)</a>, along with font selection logic to allow selecting larger fonts when available at runtime in <a href="https://man.openbsd.org/rasops">rasops(9)</a>.
441: <li>Implemented an if_enqueue handler for <a href="https://man.openbsd.org/vlan">vlan(4)</a>, bypassing the ifq handling for a performance improvement in particular configurations.
442: <!-- 2019/01/08 -->
443: <li>Disabled ret-protector and retpoline protections in the <a href="https://man.openbsd.org/clang">clang(1)</a> compiler to regain build performance.
1.1416 ! pamela 444: <li>Adjusted <a href=https://man.openbsd.org/httpd>httpd(8)</a> to start when TLS is configured but keys and certificates are not yet present.
! 445: <!-- 2018/10/31 -->
! 446: <li>Changed <a href="https://man.openbsd.org/smtpd">smtpd(8)</a> to log tls events as 'tls' and not 'starttls'.
! 447: <li>Increased max frame size and hard MTU to allow use of <a href="https://man.openbsd.org/vlan">vlan(4)</a> and jumbo frames on <a href="https://man.openbsd.org/ure">ure(4)</a>.
! 448: <li>Added <a href="https://man.openbsd.org/unveil">unveil(2)</a> support to <a href="https://man.openbsd.org/htpasswd">htpasswd(1)</a> and <a href="https://man.openbsd.org/ifstated">ifstated(8)</a>.
! 449: <!-- 2018/10/30 -->
! 450: <li>Added C11's <a href="https://man.openbsd.org/timespec_get">timespec_get(3)</a> to libc.
! 451: <li>Relaxed <a href="https://man.openbsd.org/unveil">unveil(2)</a> restrictions for shells needed to run shell scripts that starts with a '#!' line.
! 452: <!-- 2018/10/29 -->
! 453: <li>Added <a href="https://man.openbsd.org/unveil">unveil(2)</a> support to <a href="https://man.openbsd.org/ospfd">ospfd(8)</a> and <a href="https://man.openbsd.org/ospf6d">ospf6d(8)</a>.
! 454: <li>Changed mbufs and <a href="https://man.openbsd.org/mbuf">mbuf(9)</a> clusters to be backed by large pools and relaxed the oversubscribe limit of socket buffers.
! 455: <li>Fixed route collector mode in <a href="https://man.openbsd.org/bgpd">bgpd(8)</a>.
! 456: <!-- 2018/10/28 -->
! 457: <li>Updated <a href="https://man.openbsd.org/libtool">libtool(1)</a> to handle both DT_RUNPATH and the older DT_RPATH elements.
! 458: <li>Corrected handling of symlinks in <a href="https://man.openbsd.org/syspatch">syspatch(8)</a>.
! 459: <!-- 2018/10/27 -->
! 460: <li>Changed <a href="https://man.openbsd.org/ieee80211">ieee80211(9)</a> to avoid joining a network where crypto is found but cleartext was expected.
! 461: <!-- 2018/10/26 -->
! 462: <li>Added <a href="https://man.openbsd.org/acpipci">acpipci(4)</a> on amd64.
! 463: <li>Added tracking of memory usage for sets and tries in <a href="https://man.openbsd.org/bgpd">bgpd(8) and display of memory usage to <a href="https://man.openbsd.org/bgpctl">bgpctl(8)</a>.
! 464: <li>Fixed memory leak in <a href="https://man.openbsd.org/csh">csh(1)</a>.
! 465: <li>Changed <a href="https://man.openbsd.org/nc">nc(1)</a> to show what went wrong with a unix domain socket rather than failing silently.
! 466: <li>Added <a href="https://man.openbsd.org/unveil">unveil(2)</a> support to <a href="https://man.openbsd.org/rebound">rebound(8)</a>, <a href="https://man.openbsd.org/getconf">getconf(1)</a>, <a href="https://man.openbsd.org/kvm_mkdb">kvm_mkdb(8)</a> and <a href="https://man.openbsd.org/bdftopcf">bdftopcf(1)</a>.
! 467: <!-- 2018/10/25 -->
! 468: <li>Disabled setuid on <a href="https://man.openbsd.org/Xserver">Xserver(1)</a> in response to recent disclosure of vulnerabilities.
! 469: <li>Fixed calculation of ASPATH_HEADER_SIZE by using offsetof() instead of the sizeof calculation in <a href="https://man.openbsd.org/bgpd">bgpd(8)</a>.
! 470: <li>Disabled -logfile and -modulepath when running <a href="https://man.openbsd.org/Xserver">Xserver(1)</a> with elevated privileges, as these could cause arbitrary overwriting of files (CVE-2018-14665).
! 471: <li>Fixed a kernel resource leak in doaccept().
! 472: <li>Added a 'terminal' colour which can be used instead of 'default' in style options for <a href="https://man.openbsd.org/tmux">tmux(1)</a>.
! 473: <li>Added <a href="https://man.openbsd.org/unveil">unveil(2)</a> support to <a href="https://man.openbsd.org/Xserver">Xserver(1)</a>, <a href="https://man.openbsd.org/passwd">passwd(1)</a>, <a href="https://man.openbsd.org/spamlogd">spamlogd(8)</a> and <a href="https://man.openbsd.org/spamd">spamd(8)</a>.
! 474: <li>Implemented constant width font escape sequences for html output in <a href="https://man.openbsd.org/mandoc">mandoc(1)</a>.
! 475: <!-- 2018/10/24 -->
! 476: <li>Incremented major versions for <a href="https://man.openbsd.org/crypto">crypto(3)</a>, <a href="https://man.openbsd.org/man3/ssl.3">ssl(3)</a> and libtls due to libcrypto symbol removals and libssl changes to struct visibility/sizes.
! 477: <li>Further restricted the <a href="https://man.openbsd.org/pledge">pledge(2)</a> in <a href="https://man.openbsd.org/switchctl">switchctl(8)</a>.
! 478: <li>Fixed <a href="https://man.openbsd.org/bgplg">bgplg(8)</a> show ip bgp out/in, updated usage message and added missing neighbor argument. Added 'show ip bgp ovs' and 'show ip bgp ext-community' commands.
! 479: <li>Fixed minor issues in <a href="https://man.openbsd.org/csh">csh(1)</a> found by coverity.
! 480: <li>Fixed qcow2 disk images larger than 4GB in <a href="https://man.openbsd.org/vmd">vmd(8)</a>.
! 481: <!-- 2018/10/23 -->
! 482: <li>Adjusted <a href="https://man.openbsd.org/mandoc">mandoc(1)</a> handling of tags containing whitespace to better interoperate with <a href="https://man.openbsd.org/ctags">ctags(1)</a>.
! 483: <li>Fixed a bug in <a href="https://man.openbsd.org/mandoc">mandoc(1)</a> when handling blank lines inside preformatted html sections.
! 484: <li>Adjusted <a href="https://man.openbsd.org/join">join(1)</a> to allow joining on NULL columns.
! 485: <li>Fixed an off-by-one error in <a href="https://man.openbsd.org/ldap">ldap(1)</a> when wrapping long LDIF lines.
! 486: <li>Imported Mesa 17.3.9.
! 487: <!-- 2018/10/22 -->
! 488: <li>Corrected HFSC so it no longer forces packet priority to the highest setting when enabled.
! 489: <li>Switched amd64 to <a href="https://man.openbsd.org/ld.lld">ld.lld(1)</a> as the default linker.
! 490: <li>Added <a href="https://man.openbsd.org/unveil">unveil(2)</a> support to <a href="https://man.openbsd.org/sensorsd">sensorsd(8)</a>.
! 491: <li>Removed instances of #ifdef INET6 from <a href="https://man.openbsd.org/tcpdump">tcpdump(8)</a> code.
! 492: <li>Set <a href="https://man.openbsd.org/ipsec">ipsec(4)</a> to use a monotonic clock for SA creation and lookup timestamps.
! 493: <li>Adjusted <a href="https://man.openbsd.org/ld.lld">ld.lld(1)</a> to accept both '--foo bar' and '--foo=bar' style options in the manner of GNU linkers.
! 494: <li>Fixed <a href="https://man.openbsd.org/cvs">cvs(1)</a> handling of checking out commits by date when there is a vendor branch with a commit on top of it.
! 495: <li>Adjusted the <a href="https://man.openbsd.org/bgpd">bgpd(8)</a> RDE to act on XON/XOFF messages to properly throttle dumping of prefixes to peers.
! 496: <!-- 2018/10/21 -->
! 497: <li>Added the ability to query a <a href="https://man.openbsd.org/switch">switch(4)</a> instance via its control device to <a href="https://man.openbsd.org/switchctl">switchctl(8)</a>.
! 498: <li>Set <a href="https://man.openbsd.org/kdump">kdump(1)</a> to display the errno returned by <a href="https://man.openbsd.org/futex">futex(2)</a>.
! 499: <li>Fixed <a href="https://man.openbsd.org/mail.lmtp">mail.lmtp(8)</a> to not consider <a href="https://man.openbsd.org/connect">connect(2)</a> errors a permanent failure.
! 500: <li>Switched alpha to <a href="https://man.openbsd.org/futex">futex(2)</a>-based condvars, mutexes and semaphores.
! 501: <li>Added missing <a href="https://man.openbsd.org/unveil">unveil(2)</a> of /etc/shells to <a href="https://man.openbsd.org/su">su(1)</a> for -m option.
! 502: <li>Backported llvm's libunwind hardware floating point handling and added quad-precision floating-point support routines for mips64.
! 503: <li>Enabled the integrated llvm assembler on mips64.
! 504: <!-- 2018/10/20 -->
! 505: <li>Adjusted CPU identification in amd64 to take the 'package' into account when calculating the 'smt' ID on modern AMD CPUs to avoid knocking out too many processor threads.
! 506: <li>Copied the root check from <a href="https://man.openbsd.org/ping">ping(8)</a> into <a href="https://man.openbsd.org/traceroute">traceroute(8)</a>.
! 507: <li>Updated <a href="https://man.openbsd.org/X">X(7)</a> to libX11 1.6.7 and libSM 1.2.3.
! 508: <!-- 2018/10/19 -->
! 509: <li>Added <a href="https://man.openbsd.org/vmctl">vmctl(8)</a> support for creating and converting disk images from existing images.
! 510: <li>Fixed <a href="https://man.openbsd.org/slowcgi">slowcgi(8)</a> calculation of the file descriptor limit before accepting a new connection. This prevents a failure when slowcgi is close to the file descriptor limit.
! 511: <!-- 2018/10/18 -->
! 512: <li>Changed <a href="https://man.openbsd.org/ssh-keygen">ssh-keygen(1)</a> to include the signing algorithm used by the CA when printing certificate contents.
! 513: <li>Removed potential for a spurious end-of-RIB being sent by <a href="https://man.openbsd.org/bgpd">bgpd(8)</a>.
! 514: <li>Corrected wrong results produced by <a href="https://man.openbsd.org/join">join(1)</a> during full and outer join operations.
! 515: <li>Added support for windows larger than are visible on the attached client to <a href="https://man.openbsd.org/tmux">tmux(1)</a>.
! 516: <li>Improved <a href="https://man.openbsd.org/tmux">tmux(1)</a> clipboard handling.
! 517: <li>Added <a href="https://man.openbsd.org/tmux">tmux(1)</a> support for extended underline styles on terminals offering them.
! 518: <li>Fixed <a href="https://man.openbsd.org/fmt">fmt(1)</a> accounting of NUL for allocation size and moved to use of <a href="https://man.openbsd.org/reallocarray">reallocarray(3)</a>.
! 519: <li>Reworked processing of <a href="https://man.openbsd.org/gre">gre(4)</a> keep alive packets.
! 520: <!-- 2018/10/17 -->
! 521: <li>Adjusted time scheduler statistics so time spent spinning in interrupts is no longer accounted for within the system time of a process.
! 522: <!-- 2018/10/16 -->
! 523: <li>Fixed regression in <a href="https://man.openbsd.org/pf">pf(4)</a> that caused quick on anchor rules to be ignored.
! 524: <li>Adjusted bitmap tables and output routines of <a href="https://man.openbsd.org/banner">banner(6)</a>.
! 525: <li>Added a linker script to assist lld with building <a href="https://man.openbsd.org/biosboot">biosboot(8)</a>.
! 526: <li>Added traffic class of ipv6 headers to <a href="https://man.openbsd.org/gre">gre(4)</a> encapsulation.
! 527: <!-- 2018/10/15 -->
! 528: <li>Addressed crashes when checking for duplicate <a href="https://man.openbsd.org/user>user(8)</a> entries.
! 529: <li>Used the up_rib tree to withdraw all prefixes of a peer which is used to reload peers into a new RIB in <a href="https://man.openbsd.org/bgpd">bgpd(8)</a>. Removes one additional full RIB tree walker.
! 530: <li>Rate-limited the interval over which a VM can reboot, preventing VM reboot loops in <a href="https://man.openbsd.org/vmd">vmd(8)</a>. Three VM restarts less than six seconds apart are assumed to be unintentional, and the VM is stopped.
! 531: <li>Made <a href="https://man.openbsd.org/httpd">httpd(8)</a> omit HSTS headers for unencrypted connections per RFC 6797.
! 532: <!-- 2018/10/14 -->
! 533: <!-- 2018/10/13 -->
! 534: <li>Fixed mrt table dumps in <a href="https://man.openbsd.org/bgpd">bgpd(8)</a>.
! 535: <li>Linked libc++.so against libc++abi.so to allow linking of C binaries against C++ shared libraries.
! 536: <li>Exposed net.inet.ip.arpq.drops to <a href="https://man.openbsd.org/sysctl">sysctl(8)</a> to aid debugging of dropped packets without counter increases.
1.1164 deraadt 537: </ul>
1.422 deraadt 538: <p>
1.203 deraadt 539:
1.14 deraadt 540: </body>
1.1328 deraadt 541: </html>
![[BACK]](/icons/back.gif){kind=icon}
Return to plus.html CVS log ![[TXT]](/icons/text.gif){kind=icon}
![[DIR]](/icons/dir.gif){kind=icon}
Up to [local] / www