Annotation of www/plus.html, Revision 1.1420
1.1092 jj 1: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
1.14 deraadt 2: <html>
3: <head>
1.1384 tj 4: <title>OpenBSD -current Changelog</title>
1.1045 david 5: <meta name="description" content="OpenBSD -current changes">
1.1384 tj 6: <meta name="copyright" content="This document copyright 1996-2016 by OpenBSD.">
1.1383 deraadt 7: <meta name="viewport" content="width=device-width, initial-scale=1">
8: <link rel="stylesheet" type="text/css" href="openbsd.css">
1.1400 tb 9: <link rel="canonical" href="https://www.openbsd.org/plus.html">
1.14 deraadt 10: </head>
11:
1.728 horacio 12: <body bgcolor="#ffffff" text="#000000" link="#23238e">
1.14 deraadt 13:
1.1383 deraadt 14: <h2>
15: <a href="index.html">
1.1386 tim 16: <font color="#0000ff"><i>Open</i></font><font color="#000084">BSD</font></a>
1.1384 tj 17: <font color="#e00000">-current Changelog</font>
18: </h2>
1.863 naddy 19: <hr>
1.14 deraadt 20:
21: <p>
1.1216 schwarze 22: This selection is intended to include all important
23: and all user-visible changes.
24: For a complete record of all changes, please see the "source-changes"
25: mailing list, called "OpenBSD CVS"
26: in the <a href="mail.html#Archives">archives</a>,
27: or use <a href="anoncvs.html#CVS">CVS</a>.
28:
29: <p>
1.846 deraadt 30: For changes in other releases, click below:<br>
31: <a href="plus20.html">2.0</a>,
32: <a href="plus21.html">2.1</a>,
33: <a href="plus22.html">2.2</a>,
34: <a href="plus23.html">2.3</a>,
35: <a href="plus24.html">2.4</a>,
36: <a href="plus25.html">2.5</a>,
37: <a href="plus26.html">2.6</a>,
38: <a href="plus27.html">2.7</a>,
39: <a href="plus28.html">2.8</a>,
40: <a href="plus29.html">2.9</a>,
41: <a href="plus30.html">3.0</a>,
42: <a href="plus31.html">3.1</a>,
1.868 deraadt 43: <a href="plus32.html">3.2</a>,
1.889 david 44: <a href="plus33.html">3.3</a>,
1.916 david 45: <a href="plus34.html">3.4</a>,
1.935 miod 46: <a href="plus35.html">3.5</a>,
1.941 deraadt 47: <a href="plus36.html">3.6</a>,
1.1118 deraadt 48: <br>
1.963 deraadt 49: <a href="plus37.html">3.7</a>,
1.999 deraadt 50: <a href="plus38.html">3.8</a>,
1.1028 deraadt 51: <a href="plus39.html">3.9</a>,
1.1044 deraadt 52: <a href="plus40.html">4.0</a>,
1.1069 deraadt 53: <a href="plus41.html">4.1</a>,
1.1097 deraadt 54: <a href="plus42.html">4.2</a>,
1.1118 deraadt 55: <a href="plus43.html">4.3</a>,
1.1140 deraadt 56: <a href="plus44.html">4.4</a>,
1.1152 deraadt 57: <a href="plus45.html">4.5</a>,
1.1163 deraadt 58: <a href="plus46.html">4.6</a>,
1.1177 deraadt 59: <a href="plus47.html">4.7</a>,
1.1194 deraadt 60: <a href="plus48.html">4.8</a>,
1.1198 nick 61: <a href="plus49.html">4.9</a>,
1.1212 schwarze 62: <a href="plus50.html">5.0</a>,
1.1242 lum 63: <a href="plus51.html">5.1</a>,
1.1276 deraadt 64: <a href="plus52.html">5.2</a>,
1.1300 brett 65: <a href="plus53.html">5.3</a>,
1.1330 deraadt 66: <br>
67: <a href="plus54.html">5.4</a>,
1.1352 brett 68: <a href="plus55.html">5.5</a>,
1.1365 deraadt 69: <a href="plus56.html">5.6</a>,
1.1372 deraadt 70: <a href="plus57.html">5.7</a>,
1.1382 deraadt 71: <a href="plus58.html">5.8</a>,
1.1392 deraadt 72: <a href="plus59.html">5.9</a>,
1.1401 deraadt 73: <a href="plus60.html">6.0</a>,
1.1403 deraadt 74: <a href="plus61.html">6.1</a>,
75: <a href="plus62.html">6.2</a>,
1.1406 deraadt 76: <a href="plus63.html">6.3</a>,
77: <a href="plus64.html">6.4</a>.
1.422 deraadt 78: <br>
1.186 deraadt 79:
80: <p>
1.1406 deraadt 81: <h3><font color="#0000e0">Changes made between OpenBSD 6.4 and -current</font></h3>
1.847 deraadt 82: <p>
1.1316 brett 83:
1.422 deraadt 84: <ul>
1.1419 pamela 85: <!-- 2019/03/03 -->
86: <li>Fixed a hang that could happen when more than one writer awaited a read-locked <a href="https://man.openbsd.org/rwlock">rwlock(9)</a> by waking all waiters upon unlock.
87: <li>Introduced handling of <a href="https://man.openbsd.org/malloc">malloc(3)</a> failure in <a href="https://man.openbsd.org/nm">nm(1)</a> to prevent crashing with NULL pointer access.
88: <li>Corrected an error where processing manual pages continued incrementing suffix numbering globally. The HTML formatter state is now reset after processing in <a href="https://man.openbsd.org/mandoc">mandoc(1)</a>.
89: <!-- 2019/03/02 -->
90: <li>Updated to libfontenc 1.1.4.
91: <li>Removed use of <a href="https://man.openbsd.org/unveil">unveil(2)</a> from the <a href="https://man.openbsd.org/unwind">unwind(8)</a> main process to allow configuration reloading.
92: <li>Increased the character limit for vm names to 64 for <a href="https://man.openbsd.org/vmm">vmm(4)</a>.
93: <li>Set a limit on the number of allowed stacked wsmux devices in <a href="https://man.openbsd.org/wscons">wscons(4)</a> to prevent exhaustion of the kernel stack.
94: <!-- 2019/03/01 -->
95: <li>Added a timeout to refill the rx ring when empty for <a href="https://man.openbsd.org/em">em(4)</a>.
96: <li>Fixed a crash where <a href="https://man.openbsd.org/ld">ld(1)</a> would assume input files are ELF objects and try to free uninitialized memory.
97: <li>Tied group number and name together during configuration in <a href="https://man.openbsd.org/cwm">cwm(1)</a>.
98: <li>Began UTF-8 cleanup of store_char() within <a href="https://man.openbsd.org/less">less(1)</a>.
99: <li>Increased accessibility for <a href="https://man.openbsd.org/mandoc">mandoc(1)</a> through the addition of HTML sectioning elements.
100: <li>Changed how ifiq_input measures whether the network stack should drop packets when the backlog becomes too high. Rather than enqueuing batches of a set quantity of packets while the network is under load and dropping those in between, a pressure variable is used to identify when many enqueue operations do not have corresponding dequeue operations as a cue to begin to drop packets.
101: <li>Fixed <a href="https://man.openbsd.org/bgpd">bgpd(8)</a> leak of non-dynamic objects on configuration reload when adding an already-present network to the list of announcements.
102: <li>Improved handling of HT protection for 'mode 11n' hostap and switched to use of CTS-to-self frames rather than RTS/CTS for HT protection. Corrected <a href="https://man.openbsd.org/ieee80211">ieee80211(9)</a> misclassification of certain devices as 11a/g which led to unnecessary use of HT protection.
103: <li>Corrected <a href="https://man.openbsd.org/ieee80211">ieee80211(9)</a> to pick up the AP's 11g ERP protection setting properly in 11n client mode.
104: <li>Updated <a href="https://man.openbsd.org/athn">athn(4)</a> to explicitly configure timing of control frames. The chip is updated with values for SIFS interval and ACK/RTS/CTS timeout with configuration changes, like ath9k in Linux.
105: <!-- 2019/02/28 -->
106: <li>Fixed two race conditions in <a href="https://man.openbsd.org/sshd">sshd(8)</a> relating to SIGHUP by extending messaging to communicate that it is safe for parent processes to restart.
107: <li>Ensured expected behavior when setting PKCS11Provider=none in <a href="https://man.openbsd.org/ssh">ssh(1)</a>.
108: <li>Added new <a href="https://man.openbsd.org/mmap">mmap(2)</a> flag MAP_CONCEAL. Memory under MAP_CONCEAL is not written to the disk in the event of a core dump.
109: <li>Ensured actions will not be carried out in <a href="https://man.openbsd.org/cwm">cwm(1)</a> using the last group when the requested one is not found.
110: <li>Fixed bug where IPv6 fragments with malformed extension headers could be erroneously passed by or cause a panic in <a href="https://man.openbsd.org/pf">pf(4)</a>.
111: <li>Set TLS handshakes to automatically complete as part of read/write calls to prevent attempts to read data that does not exist.
112: <!-- 2019/02/27 -->
113: <li>Added <a href="https://man.openbsd.org/mpip">mpip(4)</a>, an IP tunnel interface for "IP Layer 2" over MPLS pseudowires. This can be used to quickly set up an IP tunnel over an MPLS fabric without the need to configure <a href="https://man.openbsd.org/bgpd">bgpd(8)</a> and <a href="https://man.openbsd.org/mpe">mpe(4)</a> interfaces.
114: <li>Modified <a href="https://man.openbsd.org/iwm">iwm(4)</a> to use CTS-to-self for HT protection if requested by the AP, rather than always using RTS.
115: <li>Disabled RTS threshold by default for <a href="https://man.openbsd.org/ieee80211">ieee80211(9)</a>. This has been replaced by a heuristic in 11n and is not clearly preferable in many situations. RTS will continue to be used for certain drivers and when 11g protection is enabled by the AP when 11b clients are around.
116: <!-- 2019/02/26 -->
117: <li>Implemented support for dynamic RTS threshold in MiRA, improving throughput and latency on 11n networks.
118: <li>Fixed cases where <a href="https://man.openbsd.org/iwn">iwn(4)</a> scan misreported the channel of wifi networks.
119: <li>Moved to 6.5 Beta.
120: <li>Corrected return values for non-fatal TLS alerts to prevent attempted use of non-existent record data following user cancellation.
121: <li>Improved handling of TLS errors in <a href="https://man.openbsd.org/nc">nc(1)</a> to prevent silent failures.
122: <li>Introduced safe memory reclamation (SMR), a mechanism for reclaiming shared objects that readers can access without locking. This provides a basis for read-copy-update operations. SMR-protected objects are not destroyed while readers are using them, and a callback may be scheduled with the use of <a href="https://man.openbsd.org/smr_call">smr_call(9)</a> as an alternative to waiting.
123: <li>Increased the built-in certificate validity for simple configurations in <a href="https://man.openbsd.org/ikectl">ikectl(8)</a> from 365 to 4500 days, preventing the need to install new CA certificates on all client machines. Default validity for server certificates remains at 1 year.
124: <li>Added <a href="https://man.openbsd.org/bgpd">bgpd(8)</a> support for '*', local-as and neighbor-as for ext-community matching. If local-as/neighbor-as is used as an expansion of AS number then bgpd will default to the 4-byte AS type to encode the community.
125: <li>Re-enabled interrupts on resume with RF switch disabled on <a href="https://man.openbsd.org/iwn">iwn(4)</a> devices.
126: <!-- 2019/02/25 -->
127: <li>Prevented packet loss due to rxr overfilling the ring buffer on <a href="https://man.openbsd.org/ix">ix(4)</a> devices.
128: <li>Implemented support for pwe3 ioctls.
129: <li>Improved <a href="https://man.openbsd.org/ixl">ixl(4)</a> support to avoid a deadlock in ixl_down when calling ifq_barrier.
130: <li>Added a configtest flag (-n) to <a href="https://man.openbsd.org/cwm">cwm(1)</a>.
131: <li>Corrected <a href="https://man.openbsd.org/man3/ssl.3">ssl(3)</a> handling of oversize record layer writes.
132: <li>Introduced 'group-close-[n]' action to <a href="https://man.openbsd.org/cwm">cwm(1)</a> to close all windows within a specified group.
133: <li>Corrected <a href="https://man.openbsd.org/man3/ssl.3">ssl(3)</a> build error on luna88k with <a href="https://man.openbsd.org/gcc">gcc(1)</a>.
134: <li>Added support for yv12 encoding to <a href="https://man.openbsd.org/video">video(1)</a>.
1.1415 pamela 135: <!-- 2019/02/24 -->
136: <li>Added Dynastream ANTUSB-2 to <a href="https://man.openbsd.org/uscom">uscom(4)</a> devices.
137: <li>Removed -S from install commands across the tree.
138: <li>Updated xterm to version 344.
139: <li>Reworked <a href="https://man.openbsd.org/iwm">iwm(4)</a> Tx rate selection to increase Tx throughput, especially on clean channels.
140: <li>Removed 11n support from AMRR in <a href="https://man.openbsd.org/ieee80211">ieee80211(9)</a>.
141: <!-- 2019/02/23 -->
142: <li>Replaced several hand-rolled functions with <a href="https://man.openbsd.org/wcwidth">wcwidth(3)</a> in <a href="https://man.openbsd.org/less">less(1)</a> in an ongoing effort to improve unicode support.
143: <li>Restored <a href="https://man.openbsd.org/dhclient">dhclient(8)</a> behavior of clearing existing addresses when setting a new address.
144: <li>Fixed a regression introduced in OpenSSH 7.9 where the client reused the server's algorithm lists for KEX, ciphers and MACs. Removed the diffie-hellman-group-exchange-sha1 KEX method.
145: <!-- 2019/02/22 -->
146: <li>Added support for recognition of the following arm CPUs: Cortex A76AE, Cortex Deimos, Neoverse E1 and Neoverse N1.
147: <li>Updated the en_US.UTF-8 <a href="https://man.openbsd.org/locale">locale(1)</a> to Unicode 10.
148: <li>Improved the <a href="https://man.openbsd.org/clang">clang(1)</a> X86FixupGadgets pass to further reduce ROP gadgets produced during compilation. Added a command line switch to disable this functionality.
149: <!-- 2019/02/21 -->
1.1417 pamela 150: <li>Changed <a href="https://man.openbsd.org/ssdfb">ssdfb(4)</a> to allow usage of <a href="https://man.openbsd.org/mmap">mmap(2)</a> so the framebuffer can be used outside of the kernel. Also allowed brightness levels to be changed.
1.1415 pamela 151: <li>Fixed an issue with <a href="https://man.openbsd.org/xhci">xhci(4)</a> transfers that could cause an "invalid CSW" error.
152: <li>Changed <a href="https://man.openbsd.org/rsync">rsync(1)</a> --delete behavior to better interoperate with GPL rsync.
153: <li>Implemented --numeric-ids in <a href="https://man.openbsd.org/rsync">rsync(1)</a>.
154: <li>Updated <a href="https://man.openbsd.org/Xau">Xau(3)</a> to 1.0.9.
155: <li>Added TLSv1.3 alert handling to <a href="https://man.openbsd.org/man3/ssl.3">ssl(3)</a>.
156: <li>Fixed an endless loop in <a href="https://man.openbsd.org/sysctl">sysctl(8)</a> when <a href="https://man.openbsd.org/man2/sysctl.2">sysctl(2)</a> fails to retrieve sensor data.
157: <li>Changed <a href="https://man.openbsd.org/aucat">aucat(1)</a> to use <a href="https://man.openbsd.org/reallocarray">reallocarray(3)</a> in place of potentially problematic usage of <a href="https://man.openbsd.org/malloc">malloc(3)</a>.
158: <!-- 2019/02/20 -->
159: <li>Added Cortex A76 to the list of arm64 CPUs not affected by spectre variant 2 branch injection attacks.
160: <li>Removed atomic_* operations in the tx start and completion paths of <a href="https://man.openbsd.org/ix">ix(4)</a>.
161: <li>Addressed inconsistent behavior when <a href="https://man.openbsd.org/ksh">ksh(1)</a> evaluates arithmetical expressions.
162: <li>Fixed tcp-md5 issues in <a href="https://man.openbsd.org/bgpd">bgpd(8)</a> by making sure to set the sockaddr length field on the pfkey socket.
163: <li>Repaired a regression in <a href="https://man.openbsd.org/smtpd">stmpd(8)</a> 'hostnames' mapping to select hostname based on the IP address of a listener.
164: <li>Prevented a panic in <a href="https://man.openbsd.org/timeout_add">timeout_add(9)</a> by rejecting negative input to <a href="https://man.openbsd.org/spkr>spkr(4)</a>.
165: <!-- 2019/02/19 -->
166: <li>Adjusted <a href="https://man.openbsd.org/vmm">vmm(4)</a> to allow preservation and restoration of guest debug registers.
167: <li>Completed various adjustments to allow for future support of flow-aware transport of pseudowires (RFC 6391).
168: <li>Changed ether_output to use a routes gateway address (if available) for AF_MPLS frames.
169: <li>Simplified NFS checking in <a href="https://man.openbsd.org/rc">rc(8)</a> reorder_libs().
170: <li>Added support for setting custom FastCGI parameters in <a href="https://man.openbsd.org/httpd">httpd(8)</a>.
171: <li>Adjusted <a href="https://man.openbsd.org/ifconfig">ifconfig(8)</a> to display whether <a href="https://man.openbsd.org/bwfm">bwfm(4)</a> firmware is using 802.11AC.
172: <!-- 2019/02/18 -->
173: <li>Updated Mesa to 18.3.4. (Removed -fno-tree-pre from CFLAGS on sparc64 after the changes to <a href="https://man.openbsd.org/login.conf">login.conf</a> removed the need to limit memory usage at build time).
174: <li>Synchronized staff datasize-cur in <a href="https://man.openbsd.org/login.conf">login.conf(5)</a> for hppa and sparc64 with the defaults for other architectures.
175: <li>Implemented fixes for <a href="https://man.openbsd.org/bgpctl">bgpctl(8)</a> large community parsing.
176: <li>Changed llvm PowerPC code generation to avoid generating unaligned floating point load and store instructions.
177: <li>Fixed a race condition in <a href="https://man.openbsd.org/wscons">wscons(4)</a> involving the wsevsrc_* functions.
178: <li>Made several improvements to the portability of <a href="https://man.openbsd.org/bgpd">bgpd</a> code.
1.1414 pamela 179: <!-- 2019/02/17 -->
1.1415 pamela 180: <li>Added a <a href="https://man.openbsd.org/vnode">vnode(9)</a> error flag to prevent <a href="https://man.openbsd.org/fsync">fsync(2)</a> from reporting successful syncing when a past write failure has led to a buffer discard in <a href="https://man.openbsd.org/vfs">vfs(9)</a>.
1.1414 pamela 181: <li>Added <a href="https://man.openbsd.org/rsync">rsync(1)</a> support for --port=PORT and ":port" in the rsync:// URL. Unlike in the original rsync, service names are supported.
182: <li>Corrected <a href="https://man.openbsd.org/usb">usb(4)</a> to publish a new attached device only once it is fully initialized, preventing a race condition.
183: <li>Converted <a href="https://man.openbsd.org/openssl">openssl(1)</a> pkeyutl to the newer style of option handling.
184: <li>Adjusted <a href="https://man.openbsd.org/unwind">unwind(8)</a> to restart the DoT resolver alongside the other resolvers when log verbosity changes.
185: <!-- 2019/02/16 -->
186: <li>Improved time interpretation for <a href="https://man.openbsd.org/at">at(1)</a> by assuming that a time that is already past refers to the next day.
187: <li>Implemented the conv=fsync feature in <a href="https://man.openbsd.org/dd">dd(1)</a> (mirroring GNU dd), performing an <a href="https://man.openbsd.org/fsync">fsync(2)</a> after the final write to output.
188: <li>Added chown <a href="https://man.openbsd.org/pledge">pledge(2)</a> to <a href="https://man.openbsd.org/rsync">rsync(1)</a>, allowing root to gift files to other uids.
189: <li>Adjusted <a href="https://man.openbsd.org/rsync">rsync(1)</a> to set access time information with sub-second resolution.
190: <li>Changed <a href="https://man.openbsd.org/vmm">vmm(4)</a> to allow guests to see PA bits in CPUID, removing an unintentional guest memory size limit of 64GB.
191: <!-- 2019/02/15 -->
192: <li>Fixed a case where <a href="https://man.openbsd.org/ddb">ddb(4)</a> would modify two variables instead of one on 64-bit architectures.
193: <li>Relaxed userland stack pointer checking to allow PROT_NONE permissions on a page in addition to MAP_STACK.
194: <!-- 2019/02/14 -->
195: <li>Added support for -o, -D and -a in <a href="https://man.openbsd.org/rsync">rsync(1)</a>.
196: <li>Changed dpath <a href="https://man.openbsd.org/pledge">pledge(2)</a> to allow <a href="https://man.openbsd.org/mkfifoat.2">mkfifoat(2)</a> and <a href="https://man.openbsd.org/mknodat.2">mknodat(2)</a>.
197: <li>Allowed configuration of the rdomain for <a href="https://man.openbsd.org/mpe">mpe(4)</a> and <a href="https://man.openbsd.org/mpw">mpw(4)</a> interfaces.
198: <!-- 2019/02/13 -->
199: <li>Removed casts to (unsigned) to avoid range reduction bugs from parse.y based parsers.
200: <li>Updated <a href="https://man.openbsd.org/perl">perl(1)</a> to 5.28.1.
201: <li>Added support for server and client finished messages in <a href="https://man.openbsd.org/man3/ssl.3">ssl(3)</a> TLSv1.3 client implementation.
202: <li>Added a new <a href="https://man.openbsd.org/futex">futex(2)</a>-based <a href="https://man.openbsd.org/rwlock">rwlock(9)</a> implementation. The existing rwlock implementation will be used for architectures lacking atomic primitives.
203: <li>Changed <a href="https://man.openbsd.org/socket">socket(2)</a> options to allow calling of SO_PEERCRED on sockets created with <a href="https://man.openbsd.org/socketpair">socketpair(2)</a>.
204: <li>Adapted <a href="https://man.openbsd.org/rsync">rsync(1)</a> to use md4 from <a href="https://man.openbsd.org/crypto">crypto(3)</a>.
205: <!-- 2019/02/12 -->
206: <li> Integrated group ID send/receive and remapping into <a href="https://man.openbsd.org/rsync">rsync(1)</a>.
207: <li> Added -g option and associated getpw pledge to <a href="https://man.openbsd.org/rsync">rsync(1)</a>.
208: <li>Simplified imsg communications and improved privilege separation of <a href="https://man.openbsd.org/dhclient">dhclient(8)</a>. <a href="https://man.openbsd.org/resolv.conf.tail">resolv.conf.tail(5)</a> will now be read (allowing additional details to be supplied) with each proposal.
209: <li>Implemented support for -e and --rsh=name options in <a href="https://man.openbsd.org/rsync">rsync(1)</a>.
210: <li>Added long-opts aliases for single-letter options present in <a href="https://man.openbsd.org/rsync">rsync(1)</a>. Added missing -no-OPT long options.
211: <li>Adjusted <a href="https://man.openbsd.org/bgpctl">bgpctl(8)</a> show requests to handle the case where no neighbors are defined in <a href="https://man.openbsd.org/bgpd">bgpd(8)</a>.
212: <!-- 2019/02/11 -->
213: <li>Implemented handling of Certificate and CertificateVerify messages in TLSv1.3.
214: <li>Began explicitly supporting VPNs in <a href="https://man.openbsd.org/bgpd">bgpd(8)</a>, redefining and changing the syntax of <a href="https://man.openbsd.org/bgpd.conf">bgpd.conf(5)</a>. IMPORTANT NOTE: If MPLS VPNs are used, configuration will need to be adjusted.
215: <li>Moved the on-disk trust anchor for <a href="https://man.openbsd.org/unwind">unwind(8)</a> to /var/db/unwind.key, as it doesn't need to be in a directory writable by group _unwind. Additionally, began tracking it in <a href="https://man.openbsd.org/changelist">changelist(5)</a>.
1.1413 pamela 216: <!-- 2019/02/10 -->
1.1414 pamela 217: <li>Imported Kristaps' openrsync into the tree and began adjustment to match <a href="https://man.openbsd.org/style">style(9)</a> guidelines.
218: <li>Removed the implicit RTF_MPATH flag that rt_ifa_add() set on new routes.
219: <li>Simplified check for whether /usr/share is on an NFS filesystem in reorder_kernel.sh.
220: <li>Corrected PPC target in llvm to reflect that a long double is the same as a double on OpenBSD/powerpc.
1.1417 pamela 221: <li>Set pkcs11.so to initialize pkcs11 interaction to allow it to ask for the smartcard's PIN during <a href="https://man.openbsd.org/ssh-keygen">ssh-keygen(1)</a> with -D.
1.1413 pamela 222: <li>Adjusted <a href="https://man.openbsd.org/pfctl">pfctl(8)</a> parser to insist anchor names must not be empty.
223: <li>Further simplifed trust anchor handling in <a href="https://man.openbsd.org/unwind">unwind(8)</a>, allowing removal of wpath and cpath pledges from the parent process.
224: <li>Set logging of x509 peers' certificate subject names during tls client authentication in <a href="https://man.openbsd.org/httpd">httpd(8)</a>.
225: <li>Added Allwinner V3s support.
226: <li>Adjusted <a href="https://man.openbsd.org/scp">scp(1)</a> to accept shell-style brace alternations (e.g. "{foo,bar}") when verifying that filenames sent by the server match client requests.
227: <li>Changed <a href="https://man.openbsd.org/ssh">ssh(1)</a> to log when a connection is dropped for attempting to run a command when ForceCommand=internal-sftp is in effect.
228: <li>Updated to xf86-video-apm 1.3.0, xf86-video-s3virge 1.11.0, xf86-video-chips 1.3.0, xf86-video-i128 1.4.0, xf86-video-neomagic 1.3.0 and xf86-video-i740 1.4.0.
229: <!-- 2019/02/09 -->
230: <!-- 2019/02/08 -->
231: <li>Fixed ipv4 checksum calculation for mpls_input.c that was being performed in memory half the necessary size.
232: <li>Fixed a race condition for <a href="https://man.openbsd.org/install">install(1)</a>. This patch makes the -S option a no-op, its functionality becoming the default behavior.
233: <li>Fixed stack info leak in <a href="https://man.openbsd.org/execve">execve(2)</a>.
234: <li>Made clear in the documentation that <a href="https://man.openbsd.org/httpd">httpd(8)</a> supports fastcgi over TCP.
235: <li>Imported <a href="https://man.openbsd.org/unbound">unbound(8)</a> 1.9.0 and updated unwind's copy of libunbound.
236: <!-- 2019/02/07 -->
237: <li>Removed rpath from the pledge in <a href="https://man.openbsd.org/cut">cut(1)</a> when only stdin is used.
238: <li>Rewrote trust anchor handling in <a href="https://man.openbsd.org/unwind">unwind(8)</a> to stop using libunbound's auto trust anchor feature, allowing tightening of the resolver process pledges.
239: <li>Implemented processing of EncryptedExtensions in the <a href="https://man.openbsd.org/ssl">ssl(3)</a> TLSv1.3 client.
240: <li>Added lock stack trace saving for <a href="https://man.openbsd.org/witness">witness(4)</a>. This setting is not enabled by default.
241: <li>Adjusted <a href="https://man.openbsd.org/bwfm">bwfm(4)</a> to correct possible memory leaks by changing it to consistently use <a href="https://man.openbsd.org/m_freem">m_freem(9)</a> and adding an assert to identify overruns of the task ring queue.
242: <!-- 2019/02/06 -->
243: <li>Reworked <a href="https://man.openbsd.org/fec">fec(4)</a> handling of descriptors and buffers. Added recovery in the case of a full transmission queue.
244: <li>Improved handling of roff identifiers that end with a tab character in <a href="https://man.openbsd.org/mandoc">mandoc(1)</a>.
245: <li>Fixed a possible memory leak in tcp_usrreq().
246: <li>Replaced overlapping <a href="memcpy">memcpy(3)</a> with <a href="https://man.openbsd.org/memmove">memmove(3)</a> in getpathname() for <a href="https://man.openbsd.org/fsck_ffs">fsck_ffs(8)</a> and <a href="https://man.openbsd.org/fsck_ext2fs">fsck_ext2fs(8)</a>.
247: <li>Added display of rcpt address for RCPT errors in <a href="https://man.openbsd.org/smtpd">smtpd(8)</a>.
248: <li>Added -b to display-panes like run-shell in <a href="https://man.openbsd.org/tmux">tmux(1)</a>.
249: <!-- 2019/02/05 -->
250: <li>Fixed addend handling for relaxing R-PPC-PLTREL24 relocations in <a href="https://man.openbsd.org/ld.bfd">ld.bfd(1)</a>, making -Wl and -relax work well enough to link base clang on macppc.
251: <li>Fixed a potential out-of-bounds read when <a href="https://man.openbsd.org/regcomp">regcomp(3)</a> is passed a bad expression.
252: <li>Adjusted <a href="https://man.openbsd.org/ps">ps(1)</a> to work in single user mode where /var/run is unavailable or in cases where /dev does not exist.
253: <li>Added an example <a href="https://man.openbsd.org/unwind.conf">unwind.conf(5)</a>. (Note that <a href="https://man.openbsd.org/unwind">unwind(8)</a> works without a config file in many cases).
254: <li>Converted <a href="https://man.openbsd.org/openssl">openssl(1)</a> pkey to the newer style of option handling.
255: <li>Added handling of Cisco's Encapsulated Remote Switch Port Analyzer (ERSPAN) protocol to <a href="https://man.openbsd.org/tcpdump">tcpdump(8)</a>.
256: <!-- 2019/02/04 -->
257: <li>Fixed printing of major and minor from dev_t in various parts of the tree.
258: <li>Fixed NULL-deference crash in <a href="https://man.openbsd.org/ssh">ssh(1)</a> in the PKCS#11 code.
259: <li>Fixed a potential mbuf double free in the out-of-band soreceive() path.
260: <li>Added support for defining variables through the environment in <a href="https://man.openbsd.org/pkg-config">pkg-config(1)</a>.
261: <li>Implemented as-override in <a href="https://man.openbsd.org/bgpd">bgpd(8)</a>, a feature where the neighbor AS is replaced by the local AS in AS paths.
1.1417 pamela 262: <li>Added --validate flag to <a href="https://man.openbsd.org/pkg-config">pkg-config(1)</a> and updated version to 0.29.0.
1.1413 pamela 263: <li>Added a <a href="https://man.openbsd.org/pthread_get_name_np">pthread_get_name_np(3)</a> to match <a href="https://man.openbsd.org/pthread_set_name_np">pthread_set_name_np(3)</a> in <a href="https://man.openbsd.org/pthreads">pthreads(3)</a>.
264: <li>Fixed an undefined case when neither -msave-args or -mno-save-args are specified in LLVM.
265: <li>Imported libc++, libc++abi and libunwind version 7.0.1.
266: <li>Adjusted members of glob_t to match POSIX in <a href="https://man.openbsd.org/glob">glob(3)</a>. IMPORTANT NOTE: This required a libc major version bump.
267: <li>Implementing parsing and processing of TLSv1.3 ServerHello messages in <a href="https://man.openbsd.org/ssl">ssl(4)</a>.
268: <li>Fixed a panic caused by <a href="https://man.openbsd.org/bwfm">bwfm(4)</a> by handling control messages that exceed MLEN.
269: <li>Applied a fix to update the caller-supplied pointer in semundo_adjust() to prevent a potential use-after-free panic.
1.1412 florian 270: <!-- 2019/02/03 -->
271: <li>Allowed <a href="https://man.openbsd.org/tun">tun(4)</a> access to AF_MPLS packets from userland.
272: <li>Converted <a href="https://man.openbsd.org/openssl">openssl(1)</a> rsautl to the newer style of option handling.
1.1417 pamela 273: <li>Improved support for Marvell wi-fi microcontroller SoCs with the creation of the <a href="https://man.openbsd.org/mvgicp">mvgicp(4)</a> driver.
1.1412 florian 274: <li>Fixed exception handling issues with <a href="https://man.openbsd.org/clang%2B%2B">clang++(1)</a> on platforms not using <a href="https://man.openbsd.org/ld.lld">ld.lld(1)</a> as the default linker.
275: <li>Added captive portal detection for <a href="https://man.openbsd.org/unwind">unwind(8)</a>.
276: <!-- 2019/02/02 -->
277: <li>Enabled -msave-args when building an amd64 kernel with <a href="https://man.openbsd.org/clang">clang(1)</a>.
278: <li>Increased datasize in <a href="https://man.openbsd.org/login.conf">login.conf(5)</a> for sparc64 to accommodate Mesa.
1.1417 pamela 279: <li>Adjusted <a href="https://man.openbsd.org/pfctl">pfctl(8)</a> to show the routing address selected by "route-to" when "pfctl -s states" is used.
1.1412 florian 280: <li>Improved stack trace saving on amd64 and i386.
281: <!-- 2019/02/01 -->
282: <li>Added retries to <a href="https://man.openbsd.org/acme-client">acme-client(1)</a> when not all challenges are validated.
283: <li>Fixed <a href="https://man.openbsd.org/wscons">wscons(4)</a> to remove a potential use-after-free panic involving wskbclose().
284: <li>Fixed <a href="https://man.openbsd.org/ixl">ixl(4)</a> calculation of physical function ID, improving the function of the second port on dual port cards.
285: <li>Added libelf to allow future use by Mesa.
286: <li>Applied connection timeouts from an initial <a href="https://man.openbsd.org/ssh">ssh(1)</a> attempt to subsequent attempts.
287: <li>Fixed lost interrupts in <a href="https://man.openbsd.org/fec">fec(4)</a> which could lead to full TX queues.
288: <!-- 2019/01/31 -->
289: <li>Incremented efiboot version to 0.14. This is the first version to support <a href="https://man.openbsd.org/softraid">softraid(4)</a>.
290: <li>Added kernel locking for clocks in clock_gettime.
291: <li>Adjusted <a href="https://man.openbsd.org/pf.conf">pf.conf(5)</a> to allow non-numerical port specifications in line with other rules and added an error message regarding ranges without start values.
292: <li>Fixed compilation of amd64 kernel when optimization is disabled.
293: <li>Improved <a href="https://man.openbsd.org/mandoc">mandoc(1)</a> <a href="https://man.openbsd.org/tbl">tbl(7)</a> centering in <a href="https://man.openbsd.org/mdoc">mdoc(7)</a> documents.
294: <li>Implemented booting from <a href="https://man.openbsd.org/softraid">softraid</a> on arm64.
295: <li>Modified <a href="https://man.openbsd.org/unwind">unwind(8)</a> to grant non-privileged users access to status information. Use of reload and logging commands requires root.
296: <li>Enabled unused IQ/ADC calibration code in the <a href="https://man.openbsd.org/athn">athn(4)</a> driver. Complete and enable noisefloor calibration code.
297: <li>Adjusted tc_setclock not to rewind the system uptime during resume/unhibernate.
298: <!-- 2019/01/30 -->
299: <li>Corrected handling of TLS sigalgs extensions for TLSv1.0/TLSv1.1 for <a href="https://man.openbsd.org/man3/ssl.3">ssl(3)</a>.
300: <li>Modified <a href="https://man.openbsd.org/bwfm">bwfm(4)</a> to query firmware for RSSI levels and current transmit rate on behalf of <a href="https://man.openbsd.org/ifconfig">ifconfig(1)</a>.
301: <li>Implemented -msave-args in <a href="https://man.openbsd.org/clang">clang(1)</a>/llvm.
302: <!-- 2019/01/29 -->
303: <li>Updated compiler-rt to 7.0.1.
304: <li>Enabled CRYPTO for arm64 RAMDISK to allow use of <a href="https://man.openbsd.org/softraid">softraid(4)</a> crypto during installation.
305: <li>Fixed a bug in <a href="https://man.openbsd.org/calendar">calendar(1)</a> that led to duplicate display of events when -B was used.
306: <li>Improved imsg processing in <a href="https://man.openbsd.org/unwind">unwind(8)</a> to be more paranoid, excepting the control socket (so users can't bring down unwind).
307: <li>Adjusted <a href="https://man.openbsd.org/pckbc">pckbc(4)</a> to discard unwanted mouse events from the keyboard input channel while on the console.
308: <li>Modified <a href="https://man.openbsd.org/mail.lmtp">mail.lmtp(8)</a> to strip carriage returns from lmtp responses.
309: <li>Added a dedicated <a href="https://man.openbsd.org/man2/sysctl.2">sysctl(2)</a> node for <a href="https://man.openbsd.org/witness">witness(4)</a>.
310: <li>Imported Mesa 18.3.2.
311: <li>Modified <a href="https://man.openbsd.org/rtwn">rtwn(4)</a> to accept control frames in monitor mode.
312: <li>Made -N and -r mutually exclusive in <a href="https://man.openbsd.org/pfctl">pfctl(8)</a>, allowing either disabling DNS or enabling additional reverse lookups, not both.
313: <li>Enabled <a href="https://man.openbsd.org/ixl">ixl(4)</a> on sparc64.
1.1411 florian 314: <!-- 2019/01/28 -->
1.1412 florian 315: <li>Implemented -a ("archive" mode, synonymous with -RpP) for <a href="https://man.openbsd.org/cp">cp(1)</a>.
316: <li>Adjusted <a href="https://man.openbsd.org/fstat">fstat(1)</a> to filter multiple pids and multiple users at the same time.
317: <li>Switched i386 to use lld as the default linker.
318: <li>Stopped accounting/updating priorities for idle threads, fixing an accounting bug where <a href="https://man.openbsd.org/top">top(1)</a> would report high CPU usage for idle threads of secondary CPUs right after booting.
319: <li>Implemented the ability to break into <a href="https://man.openbsd.org/ddb">ddb(4)</a> using <a href="https://man.openbsd.org/imxuart">imxuart(4)</a>.
320: <li>Modified <a href="https://man.openbsd.org/ld.lld">ld.lld(1)</a> to produce binaries compatible with the W^X implementation on i386.
321: <li>Unveiled _PATH_DEVDB in <a href="https://man.openbsd.org/su">su(1)</a> and <a href="https://man.openbsd.org/wall">wall(1)</a> due to the use of <a href="https://man.openbsd.org/ttyname">ttyname(3)</a>.
1.1411 florian 322: <!-- 2019/01/27 -->
323: <li>Added domain-s (DNS over TLS) to <a href="https://man.openbsd.org/services">services(5)</a>.
324: <li>Imported LLVM 7.0.1 release.
325: <li>Implemented DNS over TLS (DoT) in <a href="https://man.openbsd.org/unwind">unwind(8)</a>.
326: <li>Added a kernel fix for a potential panic when a negative value is used to index an array, validating in <a href="https://man.openbsd.org/wscons">wscons(4)</a> the user-supplied device index given to WSMXUIO_ADD_DEVICE.
327: <li>Adjusted <a href="https://man.openbsd.org/mpe">mpe(4)</a> mpls rtable behaviour to match <a href="https://man.openbsd.org/mpw">mpw(4)</a>, removing a special case in mpls_input. Reworked mpe_input to patch ipv4 checksum and handle ipv6.
328: <!-- 2019/01/26 -->
1.1417 pamela 329: <li>Added 'uselease' statement to <a href="https://man.openbsd.org/dhclient">dhclient(8)</a> to replace 'append,' 'default,' 'ignore,' 'prepend' and 'supersede' actions on lease-provided values.
330: <li>Improved support for <a href="https://man.openbsd.org/nmea">nmea(4)</a> devices, providing altitude and ground speed values as sensors.
331: <li>Added an <a href="https://man.openbsd.org/scp">scp(1)</a> client check for whether filenames sent during remote -> local directory copies satisfy the user-specified wildcard, and a -T flag to disable this functionality in case of this check rejecting wanted files.
1.1411 florian 332: <li>Made <a href="https://man.openbsd.org/ssh-keyscan">ssh-keyscan(1)</a> return a non-zero exit status if it finds no keys.
333: <li>Added a delay to fix <a href="https://man.openbsd.org/pms">pms(4)</a> touchpad driver issue on ThinkPad X1 Gen6.
1.1417 pamela 334: <li>Tagged the start of <a href="https://man.openbsd.org/witness">witness(4)</a> output with prefix "witness:" to allow easier data extraction.
1.1411 florian 335: <li>Changed an <a href="https://man.openbsd.org/abort">abort(3)</a> call to an <a href="https://man.openbsd.org/_exit">_exit(2)</a> in <a href="https://man.openbsd.org/crypto">crypto(3)</a> to guarantee termination of the running program without potentially leaving key material in core files.
336: <li>Fixed a double free in <a href="https://man.openbsd.org/ldap">ldap(1)</a>.
337: <li>Eliminated a bug wherein the ttl 0 could be incorrectly decremented to ttl 255 for incoming mpls packets.
338: <!-- 2019/01/25 -->
339: <li>Fixed microsecond output of timestamp deltas (-tttt) for <a href="https://man.openbsd.org/tcpdump">tcpdump(8)</a>.
340: <li>Enabled <a href="https://man.openbsd.org/ccp">ccp(4)</a> on arm64 and armv7 ramdisks.
341: <!-- 2019/01/24 -->
342: <li>Set <a href="https://man.openbsd.org/ssh">ssh(1)</a> to accept the host key fingerprint as a synonym for "yes" when accepting an unknown host key, allowing pasting of fingerprints obtained through other means to have the client perform the comparison for you.
343: <li>Forced progressmeter to update at the beginning and end of a transfer, fixing a bug where it wouldn't display on quick <a href="https://man.openbsd.org/scp">scp(1)</a>/<a href="https://man.openbsd.org/sftp">sftp(1)</a> transfers.
344: <li>Fixed a crash on long lines when switching to another file in <a href="https://man.openbsd.org/vi">vi(1)</a>.
345: <li>Increased default datasize on arm64 to 768M to prepare for building clang 7.
346: <li>Removed SHA224 and GOST-based signature algorithms from use in TLS 1.2.
347: <!-- 2019/01/23 -->
348: <li>Set <a href="https://man.openbsd.org/route">route(8)</a> to display the same flags in RTM_IFINFO messages as <a href="https://man.openbsd.org/ifconfig">ifconfig(8)</a>.
349: <li>Reworked <a href="https://man.openbsd.org/mpw">mpw(4)</a> to be an actual ethernet interface.
350: <li>Removed support for obsolete "host/port" syntax in <a href="https://man.openbsd.org/ssh">ssh(1)</a>. This is no longer commonly used and may be confused with CIDR notation.
351: <li>Changed <a href="https://man.openbsd.org/bridge">bridge(4)</a> to only copy packets for span ports if the bridge is up.
352: <li>Imported <a href="https://man.openbsd.org/unwind">unwind(8)</a>, a hybrid validating stub and recursive resolver. It actively observes the local net to decide how best to resolve names.
353: <li>Moved 802.11n rateset definitions out of MiRA to make them available to net80211 and drivers in general. Added short guard interval support.
354: <li>Added the <a href="https://man.openbsd.org/man4/arm64/apm.4">apm(4)</a> subsystem to arm64.
355: <li>Taught <a href="https://man.openbsd.org/ldpd">ldpd(8)</a> to ask if a potential pseudowire interface is pwe3-capable.
1.1417 pamela 356: <li>Changed <a href="https://man.openbsd.org/scp">scp(1)</a>/<a href="https://man.openbsd.org/sftp">sftp(1)</a> to sanitize scp filenames via snmprintf.
1.1411 florian 357: <li>Allowed auto-incrementing of certificate serial number for certificates signed in a single command line for <a href="https://man.openbsd.org/ssh-keygen">ssh-keygen(1)</a>.
358: <!-- 2019/01/22 -->
359: <li>Reworked how <a href="https://man.openbsd.org/tcp">tcp(4)</a> md5 signatures are configured in <a href="https://man.openbsd.org/ldpd">ldpd(8)</a>. Now configuration is allowed against a prefix in addition to a neighbour.
360: <li>Added a specific panic to stop the kernel booting in case of an RPC error during NFS boot of a <a href="https://man.openbsd.org/diskless">diskless(8)</a> host.
361: <li>Pledged <a href="https://man.openbsd.org/video">video(1)</a> in response to the newly-added promise.
1.1417 pamela 362: <li>Reordered PCI device assignment in <a href="https://man.openbsd.org/vmd">vmd(8)</a> to fix Linux network interface numbering. Previously, changing assigned disks would change the interface name under some Linux distributions.
1.1411 florian 363: IMPORTANT NOTE - if you have existing Linux guest VMs, you'll need to modify your configuration files on a one-time basis.
364: <li>Increased maximum MTU of <a href="https://man.openbsd.org/bnxt">bnxt(4)</a> to match the linux driver.
365: <li>Provided SSL_get_client_ciphers() and SSL_get1_supported_ciphers() (part of the OpenSSL 1.1 API).
1.1417 pamela 366: <li>Added support to <a href="https://man.openbsd.org/crypto">crypto(3)</a> for xchacha20 and xchacha20-poly1305, extending the nonce range and allowing use of random nonces.
1.1407 florian 367: <!-- 2019/01/21 -->
1.1411 florian 368: <li>Modified <a href="https://man.openbsd.org/syspatch">syspatch</a> not to return an error if a rollback is attempted when no patches have been installed.
1.1417 pamela 369: <li><a href="https://man.openbsd.org/syspatch">Syspatch(8)</a> now warns the user to reboot after installation of a new kernel and identifies the location of errata on the local machine.
1.1411 florian 370: <li>Removed undocumented 24 hour limits for timeouts from <a href="https://man.openbsd.org/select">select(2)</a>, <a href="https://man.openbsd.org/pselect">pselect(2)</a>, <a href="https://man.openbsd.org/poll">poll(2)</a> and <a href="https://man.openbsd.org/ppoll">ppoll(2)</a>.
371: <li>Added a -J option as a shortcut for -o Proxyjump= to <a href="https://man.openbsd.org/scp">scp(1)</a> and <a href="https://man.openbsd.org/sftp">sftp(1)</a> to match <a href="https://man.openbsd.org/ssh">ssh(1)</a>'s interface.
372: <li>Switched sntrup implementation source from supercop to libpqcrypto in <a href="https://man.openbsd.org/ssh">ssh(1)</a>.
373: <li>Added the ability to parse epoch seconds to <a href="https://man.openbsd.org/strptime">strptime(3)</a>. Added a -f pformat flag to parse the given time with strptime to <a href="https://man.openbsd.org/date">date(1)</a>.
1.1417 pamela 374: <li>Fixed problem where <a href="https://man.openbsd.org/unveil">unveil(2)</a> system call can leak memory.
1.1411 florian 375: <li>Added video promise to <a href="https://man.openbsd.org/pledge">pledge(2)</a>, allowing ioctls on <a href="https://man.openbsd.org/man4/video.4">video(4)</a> devices selected from <a href="https://man.openbsd.org/video">video(1)</a> and firefox wbrtc implementation.
376: <li>Introduced a dedicated entry point data structure for file locks.
377: <li>Provided the initial TLSv1.3 client implementation in LibreSSL.
378: <li>Introduced -v flags for ssh-add and ssh-pkcs11-helper in <a href="https://man.openbsd.org/ssh">ssh(1)</a>.
1.1417 pamela 379: <li>Improved logging to record actual time values and specify whether a TLS certificate is not yet valid or expired when using <a href="https://man.openbsd.org/ntpd">ntpd(8)</a> constraints.
1.1411 florian 380: <li>Factored out several functions duplicated between client and server for <a href="https://man.openbsd.org/ssh">ssh(1)</a>.
381: <li>Removed obsolete SSH v.1 functions in <a href="https://man.openbsd.org/ssh">ssh(1)</a>.
382: <li>Enables manual validity checking for constraints in the X.509 certificate in <a href="https://man.openbsd.org/ntpd">ntpd(8)</a>. This should prevent failure of automatic validity checking based on incorrect system time, allowing use of the HTTP header's report of server time.
383: <li>AMD64 machines will now support 2TB of physical memory, extendable in the future.
384: <li>Improved handling of CPUID[1].ECX[OSXSAVE] bit.
1.1407 florian 385: <li>Adjusted <a href="https://man.openbsd.org/bgpd">bgpd(8)</a> to use Adj-RIB-Out to push UPDATE messages to peers, improving memory usage.
1.1417 pamela 386: <li>Made handling of MSR_SMBASE and MSR_SMM_MONITOR_CTL more correct in <a href="https://man.openbsd.org/vmm">vmm(4)</a>. These will now generategeneral protection fault as per spec.
1.1407 florian 387: <!-- 2019/01/20 -->
388: <li>Adjusted mac filters to allow viewing vlan traffic and arp requests on vlans in <a href="https://man.openbsd.org/ixl">ixl(4)</a>.
1.1417 pamela 389: <li>Added refresh for <a href="https://man.openbsd.org/arp">arp(8)</a> entries that are about to expire.
1.1407 florian 390: <li>Added support in <a href="https://man.openbsd.org/bgpd">bgpd(8)</a> and <a href="https://man.openbsd.org/bgpctl">bgpctl(8)</a> for group descriptions in control messages that accept a neighbor description.
391: <li>Added support for ECDSA keys in PKCS#11 tokens.
392: <li>Added a -T option to test whether <a href="https://man.openbsd.org/ssh">ssh(1)</a> keys in an agent are usable.
393: <li>Imported xorgproto 2018.4.
394: <li>Added support for a new <a href="https://man.openbsd.org/kcov">kcov(4)</a> trace mode called KCOV_MODE_TRACE_CMP to trace comparison instructions and switch statements, usable during fuzzing to generate even more coverage.
1.1410 florian 395: <li>Set the shell to strip quotation marks from daemon_flags when starting a daemon with <a href="https://man.openbsd.org/rc.d">rc.d(8)</a>, making the details in pexp match what appears in the process list.
1.1407 florian 396: <li>Restored correct display of treasure when snake runs over the money in <a href="https://man.openbsd.org/snake">snake(6)</a>. Adjusted cursor location during space warp and display of the pinball bonus.
397: <li>Changed imsg header definitions to use standard types.
398: <!-- 2019/01/19 -->
399: <li>Fixed BN_is_prime_* calls in <a href="https://man.openbsd.org/crypto">libcrypto(3)</a>, <a href="https://man.openbsd.org/openssl">openssl(1)</a>, <a href="https://man.openbsd.org/ssh">ssh(1)</a> and <a href="https://man.openbsd.org/sshd">sshd(8)</a>.
400: <li>Handled link state change interrupts in <a href="https://man.openbsd.org/ixl">ixl(4)</a>.
401: <li>Serialized tc_windup() calls and modified some timehands.
402: <li>Committed refactored <a href="https://man.openbsd.org/ssh">ssh(1)</a> packet parsing API.
403: <li>Changes to <a href="https://man.openbsd.org/dhclient">dhclient(8)</a> now handle changes to SSID or LLADDR by retrieving a new lease. This mproves performance when join connects to new networks.
404: <li>Improved join error handling in<a href="https://man.openbsd.org/ifconfig">ifconfig(8)</a>.
405: <li>Added a pwraction <a href="https://man.openbsd.org/sysctl">sysctl(8)</a> that allows conversion of a power button into a sleep button if desired.
1.1410 florian 406: <li>Set an <a href="https://man.openbsd.org/ssh">ssh(1)</a> password prompt to begin with a carriage return to obscure portions of a password entered too early.
1.1417 pamela 407: <li>Enabled <a href="https://man.openbsd.org/myx">myx(4)</a> on the large ramdisk for amd64.
1.1407 florian 408: <li>Finished randomizing remaining layers of pmap_kernel.
409: <li>Enabled <a href="https://man.openbsd.org/ixl">ixl(4)</a> on amd64.
1.1417 pamela 410: <li>Added a TLS record handling implementation.
1.1407 florian 411: <li>Moved boottime into the timehands.
412: <li>Added a partial port of EC_KEY_METHOD from OpenSSL 1.1 to libcrypto. Added various apis from OpenSSL 1.1 to LibreSSL.
413: <!-- 2019/01/18 -->
1.1417 pamela 414: <li>Set removal of a currently active network from the join list to disconnect as well.
1.1407 florian 415: <li>Added "join any" option to allow users to automatically connect via join() to any open wifi network. Known networks are preferred.
416: <li>Increased the socket buffer size for <a href="https://man.openbsd.org/sendsyslog">sendsyslog(2)</a> to 1 MB for fewer messages dropped by <a href="https://man.openbsd.org/syslogd">syslogd(8)</a>.
417: <li>Updated to libpixman 0.36.0 in xenocara.
418: <li>Added protective check for negative length integers in nfs clients and servers, as well as negative length NFS strings.
1.1417 pamela 419: <li>Reconnected <a href="https://man.openbsd.org/bfd">bfd(4)</a> to the build after updating for sounlock() api change.
1.1407 florian 420: <li>Set <a href="https://man.openbsd.org/dhclient">dhclient(8)</a> to ignore HUP signals. Starting a new dhclient will handle this use case by killing and executing a new copy.
421: <li>Began validating relative timeout before sleeping for <a href="https://man.openbsd.org/futex">futex(2)</a>.
422: <li>Began validating inputs to <a href="https://man.openbsd.org/adjtime">adjtime(2)</a>, <a href="https://man.openbsd.org/settimeofday">settimeofday(2)</a> and <a href="https://man.openbsd.org/clock_settime">clock_settime(2)</a>.
423: <li>Changed the default digest type to sha256 for <a href="https://man.openbsd.org/openssl">openssl(1)</a>. Added support for pbkdf2 with OpenSSL-compatible flags.
1.1417 pamela 424: <li>Removed <a href="https://man.openbsd.org/vmm">vmm(4)</a> and disabled <a href="https://man.openbsd.org/vmd">vmd(8)</a> and <a href="https://man.openbsd.org/vmctl">vmctl(8)</a> for i386 systems.
1.1407 florian 425: <!-- 2019/01/17 -->
426: <li>Renamed TLS extension-handling functions to better fit TLSv1.3.
427: <li>Enabled use of a 64-bit register when required for inline assembly on sparc64, correcting sparc64 kernels compiled with <a href="https://man.openbsd.org/clang">clang(1)</a>.
428: <li>Continued work to prepare the network stack for fine-grained locking.
1.1417 pamela 429: <li>Added support for the SSD1306 OLED display.
1.1410 florian 430: <li>Modified <a href="https://man.openbsd.org/signify">signify(1)</a> and <a href="https://man.openbsd.org/doas">doas(1)</a> to prevent passwords from being retained in memory when errors are encountered.
1.1407 florian 431: <li>Prevented users from specifying multiple join or nwid arguments in one <a href="https://man.openbsd.org/ifconfig">ifconfig(8)</a> call.
1.1417 pamela 432: <li>Fixed crash conditions in <a href="https://man.openbsd.org/unveil">unveil(2)</a>, along with some cases where unveil would return ENOENT instead of EACCESS.
1.1407 florian 433: <li>Enabled <a href="https://man.openbsd.org/bwfm">bwfm(4)</a> in RAMDISK_CD for amd64, allowing use during installs.
434: <li>Laid groundwork for TLSv1.3.
435: <!-- 2019/01/16 -->
1.1417 pamela 436: <li>Added a -h flag to <a href="https://man.openbsd.org/sftp">sftp(1)</a> <a href="https://man.openbsd.org/chown">chown(8)</a>, <a href="https://man.openbsd.org/chgrp">chgrp(1)</a>, and <a href="https://man.openbsd.org/chmod">chmod(1)</a> commands to request they not follow symlinks.
437: <li>Added support for a "lsetstat@openssh.com" extension. This replicates the functionality of the existing SSH2_FXP_SETSTAT operation but does not follow symlinks.
1.1407 florian 438: <li>Updated to exit <a href="https://man.openbsd.org/syspatch">syspatch(8)</a> correctly after updating itself. Improvement to readability of patches to install on first boot.
439: <!-- 2019/01/15 -->
440: <li>For external LSAs the type (1 or 2) is encoded in the metric field. Fixed a problem where <a href="https://man.openbsd.org/ospfd">ospfd(8)</a> and <a href="https://man.openbsd.org/ospf6d">ospf6d(8)</a> overwrite this information when "depend on" is used and the specified interface is down.
441: <li>Added Allwinner H3/H5 <a href="https://man.openbsd.org/ohci">ohci(4)</a> clocks.
442: <li>Repaired inter-word spacing of postscript and pdf outputting by <a href="https://man.openbsd.org/mandoc">mandoc(1)</a>.
443: <li>Corrected setting of default colours in <a href="https://man.openbsd.org/tmux">tmux(1)</a>.
444: <li>"No data" frames will no longer be processed in <a href="https://man.openbsd.org/ieee80211_input">ieee80211_input(9)</a> before decryption and incorrectly counted as decryption failures.
1.1417 pamela 445: <li>Characters that will not be copied are no longer highlightable in <a href="https://man.openbsd.org/tmux">tmux(1)</a>.
1.1407 florian 446: <!-- 2019/01/14 -->
447: <li>Allowed programs to set the Checking Disabled flag on DNS requests.
448: <li>Prevented <a href="https://man.openbsd.org/ntpd">ntpd(8)</a> from starting when an instance is already running.
449: <li>Added support for building sparc64 kernels with <a href="https://man.openbsd.org/clang">clang(1)</a>.
450: <li>Fixed <a href="https://man.openbsd.org/mailq">mailq(8)</a> output for <a href="https://man.openbsd.org/smtpctl">smtpctl(8)</a>.
451: <li>Code review and clean up of <a href="https://man.openbsd.org/locate">locate(1)</a>.
452: <li>Fixed minor issues in <a href="https://man.openbsd.org/ksh">ksh(1)</a>.
453: <li>Modified <a href="https://man.openbsd.org/ttyflags">ttyflags(8)</a> to improve memory usage.
454: <li>Cleanup and improvement of <a href="https://man.openbsd.org/dhclient">dhclient(8).</a>
455: <!-- 2019/01/13 -->
456: <li>Redundant debug message removed for <a href="https://man.openbsd.org/iwn">iwn(4)</a>.
457: <li>Added support for <a href="https://man.openbsd.org/gpio">gpio(4)</a> bus and improved card detection on Octeon systems.
458: <li>Fixed an off-by-one error in pfkeyv2_sysctl_policydumper().
459: <li>Improved support for Broadcom trackpad mouse <a href="https://man.openbsd.org/ubcmtp">ubcmtp(4)</a> by validating interfaces and claiming them during *attach().
460: <li>Validated interfaces for if_ral passed to *match().
461: <li>Improved <a href="https://man.openbsd.org/syslog">syslog(3)</a> to support program names including "." and "_".
462: <li>Updated xf86-video-ati to 18.1.0.
463: <!-- 2019/01/12 -->
464: <li>Set <a href="https://man.openbsd.org/clang">clang(1)</a> to disable the correct performance options based on architecture. Clang now checks CPU architecture and not system architecture when setting protection flags.
465: <li>Enabled <a href="https://man.openbsd.org/uhci">uhci(4)</a> USB support for ARMv7.
466: <!-- 2019/01/11 -->
1.1417 pamela 467: <li>Antiquated <a href="https://man.openbsd.org/OpenBSD-6.4/mincore.2">mincore(2)</a> will not be needed and was removed, eliminating an interface that exposed physical machine information unnecessarily.
1.1407 florian 468: <li>Bug fixes for <a href="https://man.openbsd.org/otus">otus(4)</a> devices based on the Atheros AR9001U chipset.
469: <li>Changed <a href="https://man.openbsd.org/mandoc">mandoc(1)</a> html output to display tooltips using css exclusively.
470: <li>Clarified in documentation that OpenBSD ignores the LC_NUMERIC category as a safety practice, and outlined best practices for portable programs.
471: <li>Addition of the <a href="https://man.openbsd.org/imxsrc">imxsrc(4)</a> i.MX system reset controller driver, used to assert the reset pins for the PCIe controller, etc.
472: <!-- 2019/01/10 -->
473: <li>Bug fixes in <a href="https://man.openbsd.org/pfctl">pfctl(8)</a>.
474: <li>Added <a href="https://man.openbsd.org/abcrtc">abcrtc(4)</a> Abracon AB1805 real-time clock driver.
475: <li>Eliminated <a href="https://man.openbsd.org/alloca">alloca(3)</a> call from vioqcow2.c and replaced with <a href="https://man.openbsd.org/malloc">malloc(3)</a> to prevent known-location object placement by an attacker.
476: <li>Implemented Event()/Signal()/Wait() AML operations for <a href="https://man.openbsd.org/acpi">acpi(4)</a>.
477: <li>Improved the "not my pool" searching loop in <a href="https://man.openbsd.org/malloc">malloc(3)</a> and made the number of pools variable. Optimization of multi-threaded case by adjusting default number of pools to 8.
478: <li>Hacking on <a href="https://man.openbsd.org/virtio">virtio(4)</a>, including defines, bug fixing and pci device list.
479: <li>kern_time.c will not allow cancellation of ongoing <a href="https://man.openbsd.org/adjtime">adjtime(2)</a> until after full permission checks.
480: <li>Adjusted <a href="https://man.openbsd.org/nc">nc(1)</a> to use <a href="https://man.openbsd.org/memset">memset(3)</a> instead of <a href="https://man.openbsd.org/bzero">bzero(3)</a> for portability and POSIX compliance.
481: <li><a href="https://man.openbsd.org/pledge">Pledge(2)</a> and <a href="https://man.openbsd.org/unveil">unveil(2)</a> <a href="https://man.openbsd.org/unbound-anchor">unbound-anchor(8)</a>.
482: <li>Improved portability of <a href="https://man.openbsd.org/mandoc">mandoc(1)</a> to other operating systems. Improved html and css used for html generation.
483: <li>Prevented <a href="https://man.openbsd.org/radeondrm">radeondrm(4)</a> from using aperture memory to overlap the framebuffer.
484: <!-- 2019/01/09 -->
485: <li>Improved <a href="https://man.openbsd.org/ddb">ddb(4)</a> readability by printing right-aligned hex values.
1.1408 kn 486: <li>Fix for <a href="https://man.openbsd.org/rcs">rcs(1)</a> to allow correct lock resolution before expansion of keywords, so expansion can happen with the correct values and files don't show up as modified.
1.1407 florian 487: <li>Added the ability for arm64 efiboot to boot from partitions other than "a".
1.1420 ! fcambus 488: <li>Spleen font enabled in wsfont, along with font selection logic to allow selecting larger fonts when available at runtime in <a href="https://man.openbsd.org/rasops">rasops(9)</a>.
1.1407 florian 489: <li>Implemented an if_enqueue handler for <a href="https://man.openbsd.org/vlan">vlan(4)</a>, bypassing the ifq handling for a performance improvement in particular configurations.
490: <!-- 2019/01/08 -->
491: <li>Disabled ret-protector and retpoline protections in the <a href="https://man.openbsd.org/clang">clang(1)</a> compiler to regain build performance.
1.1416 pamela 492: <li>Adjusted <a href=https://man.openbsd.org/httpd>httpd(8)</a> to start when TLS is configured but keys and certificates are not yet present.
493: <!-- 2018/10/31 -->
494: <li>Changed <a href="https://man.openbsd.org/smtpd">smtpd(8)</a> to log tls events as 'tls' and not 'starttls'.
495: <li>Increased max frame size and hard MTU to allow use of <a href="https://man.openbsd.org/vlan">vlan(4)</a> and jumbo frames on <a href="https://man.openbsd.org/ure">ure(4)</a>.
496: <li>Added <a href="https://man.openbsd.org/unveil">unveil(2)</a> support to <a href="https://man.openbsd.org/htpasswd">htpasswd(1)</a> and <a href="https://man.openbsd.org/ifstated">ifstated(8)</a>.
497: <!-- 2018/10/30 -->
498: <li>Added C11's <a href="https://man.openbsd.org/timespec_get">timespec_get(3)</a> to libc.
499: <li>Relaxed <a href="https://man.openbsd.org/unveil">unveil(2)</a> restrictions for shells needed to run shell scripts that starts with a '#!' line.
500: <!-- 2018/10/29 -->
501: <li>Added <a href="https://man.openbsd.org/unveil">unveil(2)</a> support to <a href="https://man.openbsd.org/ospfd">ospfd(8)</a> and <a href="https://man.openbsd.org/ospf6d">ospf6d(8)</a>.
502: <li>Changed mbufs and <a href="https://man.openbsd.org/mbuf">mbuf(9)</a> clusters to be backed by large pools and relaxed the oversubscribe limit of socket buffers.
503: <li>Fixed route collector mode in <a href="https://man.openbsd.org/bgpd">bgpd(8)</a>.
504: <!-- 2018/10/28 -->
505: <li>Updated <a href="https://man.openbsd.org/libtool">libtool(1)</a> to handle both DT_RUNPATH and the older DT_RPATH elements.
506: <li>Corrected handling of symlinks in <a href="https://man.openbsd.org/syspatch">syspatch(8)</a>.
507: <!-- 2018/10/27 -->
508: <li>Changed <a href="https://man.openbsd.org/ieee80211">ieee80211(9)</a> to avoid joining a network where crypto is found but cleartext was expected.
509: <!-- 2018/10/26 -->
510: <li>Added <a href="https://man.openbsd.org/acpipci">acpipci(4)</a> on amd64.
511: <li>Added tracking of memory usage for sets and tries in <a href="https://man.openbsd.org/bgpd">bgpd(8) and display of memory usage to <a href="https://man.openbsd.org/bgpctl">bgpctl(8)</a>.
512: <li>Fixed memory leak in <a href="https://man.openbsd.org/csh">csh(1)</a>.
513: <li>Changed <a href="https://man.openbsd.org/nc">nc(1)</a> to show what went wrong with a unix domain socket rather than failing silently.
514: <li>Added <a href="https://man.openbsd.org/unveil">unveil(2)</a> support to <a href="https://man.openbsd.org/rebound">rebound(8)</a>, <a href="https://man.openbsd.org/getconf">getconf(1)</a>, <a href="https://man.openbsd.org/kvm_mkdb">kvm_mkdb(8)</a> and <a href="https://man.openbsd.org/bdftopcf">bdftopcf(1)</a>.
515: <!-- 2018/10/25 -->
516: <li>Disabled setuid on <a href="https://man.openbsd.org/Xserver">Xserver(1)</a> in response to recent disclosure of vulnerabilities.
517: <li>Fixed calculation of ASPATH_HEADER_SIZE by using offsetof() instead of the sizeof calculation in <a href="https://man.openbsd.org/bgpd">bgpd(8)</a>.
518: <li>Disabled -logfile and -modulepath when running <a href="https://man.openbsd.org/Xserver">Xserver(1)</a> with elevated privileges, as these could cause arbitrary overwriting of files (CVE-2018-14665).
519: <li>Fixed a kernel resource leak in doaccept().
520: <li>Added a 'terminal' colour which can be used instead of 'default' in style options for <a href="https://man.openbsd.org/tmux">tmux(1)</a>.
521: <li>Added <a href="https://man.openbsd.org/unveil">unveil(2)</a> support to <a href="https://man.openbsd.org/Xserver">Xserver(1)</a>, <a href="https://man.openbsd.org/passwd">passwd(1)</a>, <a href="https://man.openbsd.org/spamlogd">spamlogd(8)</a> and <a href="https://man.openbsd.org/spamd">spamd(8)</a>.
522: <li>Implemented constant width font escape sequences for html output in <a href="https://man.openbsd.org/mandoc">mandoc(1)</a>.
523: <!-- 2018/10/24 -->
524: <li>Incremented major versions for <a href="https://man.openbsd.org/crypto">crypto(3)</a>, <a href="https://man.openbsd.org/man3/ssl.3">ssl(3)</a> and libtls due to libcrypto symbol removals and libssl changes to struct visibility/sizes.
525: <li>Further restricted the <a href="https://man.openbsd.org/pledge">pledge(2)</a> in <a href="https://man.openbsd.org/switchctl">switchctl(8)</a>.
526: <li>Fixed <a href="https://man.openbsd.org/bgplg">bgplg(8)</a> show ip bgp out/in, updated usage message and added missing neighbor argument. Added 'show ip bgp ovs' and 'show ip bgp ext-community' commands.
527: <li>Fixed minor issues in <a href="https://man.openbsd.org/csh">csh(1)</a> found by coverity.
528: <li>Fixed qcow2 disk images larger than 4GB in <a href="https://man.openbsd.org/vmd">vmd(8)</a>.
529: <!-- 2018/10/23 -->
530: <li>Adjusted <a href="https://man.openbsd.org/mandoc">mandoc(1)</a> handling of tags containing whitespace to better interoperate with <a href="https://man.openbsd.org/ctags">ctags(1)</a>.
531: <li>Fixed a bug in <a href="https://man.openbsd.org/mandoc">mandoc(1)</a> when handling blank lines inside preformatted html sections.
532: <li>Adjusted <a href="https://man.openbsd.org/join">join(1)</a> to allow joining on NULL columns.
533: <li>Fixed an off-by-one error in <a href="https://man.openbsd.org/ldap">ldap(1)</a> when wrapping long LDIF lines.
534: <li>Imported Mesa 17.3.9.
535: <!-- 2018/10/22 -->
536: <li>Corrected HFSC so it no longer forces packet priority to the highest setting when enabled.
537: <li>Switched amd64 to <a href="https://man.openbsd.org/ld.lld">ld.lld(1)</a> as the default linker.
538: <li>Added <a href="https://man.openbsd.org/unveil">unveil(2)</a> support to <a href="https://man.openbsd.org/sensorsd">sensorsd(8)</a>.
539: <li>Removed instances of #ifdef INET6 from <a href="https://man.openbsd.org/tcpdump">tcpdump(8)</a> code.
540: <li>Set <a href="https://man.openbsd.org/ipsec">ipsec(4)</a> to use a monotonic clock for SA creation and lookup timestamps.
541: <li>Adjusted <a href="https://man.openbsd.org/ld.lld">ld.lld(1)</a> to accept both '--foo bar' and '--foo=bar' style options in the manner of GNU linkers.
542: <li>Fixed <a href="https://man.openbsd.org/cvs">cvs(1)</a> handling of checking out commits by date when there is a vendor branch with a commit on top of it.
543: <li>Adjusted the <a href="https://man.openbsd.org/bgpd">bgpd(8)</a> RDE to act on XON/XOFF messages to properly throttle dumping of prefixes to peers.
544: <!-- 2018/10/21 -->
545: <li>Added the ability to query a <a href="https://man.openbsd.org/switch">switch(4)</a> instance via its control device to <a href="https://man.openbsd.org/switchctl">switchctl(8)</a>.
546: <li>Set <a href="https://man.openbsd.org/kdump">kdump(1)</a> to display the errno returned by <a href="https://man.openbsd.org/futex">futex(2)</a>.
547: <li>Fixed <a href="https://man.openbsd.org/mail.lmtp">mail.lmtp(8)</a> to not consider <a href="https://man.openbsd.org/connect">connect(2)</a> errors a permanent failure.
548: <li>Switched alpha to <a href="https://man.openbsd.org/futex">futex(2)</a>-based condvars, mutexes and semaphores.
549: <li>Added missing <a href="https://man.openbsd.org/unveil">unveil(2)</a> of /etc/shells to <a href="https://man.openbsd.org/su">su(1)</a> for -m option.
550: <li>Backported llvm's libunwind hardware floating point handling and added quad-precision floating-point support routines for mips64.
551: <li>Enabled the integrated llvm assembler on mips64.
552: <!-- 2018/10/20 -->
553: <li>Adjusted CPU identification in amd64 to take the 'package' into account when calculating the 'smt' ID on modern AMD CPUs to avoid knocking out too many processor threads.
554: <li>Copied the root check from <a href="https://man.openbsd.org/ping">ping(8)</a> into <a href="https://man.openbsd.org/traceroute">traceroute(8)</a>.
555: <li>Updated <a href="https://man.openbsd.org/X">X(7)</a> to libX11 1.6.7 and libSM 1.2.3.
556: <!-- 2018/10/19 -->
557: <li>Added <a href="https://man.openbsd.org/vmctl">vmctl(8)</a> support for creating and converting disk images from existing images.
558: <li>Fixed <a href="https://man.openbsd.org/slowcgi">slowcgi(8)</a> calculation of the file descriptor limit before accepting a new connection. This prevents a failure when slowcgi is close to the file descriptor limit.
559: <!-- 2018/10/18 -->
560: <li>Changed <a href="https://man.openbsd.org/ssh-keygen">ssh-keygen(1)</a> to include the signing algorithm used by the CA when printing certificate contents.
561: <li>Removed potential for a spurious end-of-RIB being sent by <a href="https://man.openbsd.org/bgpd">bgpd(8)</a>.
562: <li>Corrected wrong results produced by <a href="https://man.openbsd.org/join">join(1)</a> during full and outer join operations.
563: <li>Added support for windows larger than are visible on the attached client to <a href="https://man.openbsd.org/tmux">tmux(1)</a>.
564: <li>Improved <a href="https://man.openbsd.org/tmux">tmux(1)</a> clipboard handling.
565: <li>Added <a href="https://man.openbsd.org/tmux">tmux(1)</a> support for extended underline styles on terminals offering them.
566: <li>Fixed <a href="https://man.openbsd.org/fmt">fmt(1)</a> accounting of NUL for allocation size and moved to use of <a href="https://man.openbsd.org/reallocarray">reallocarray(3)</a>.
567: <li>Reworked processing of <a href="https://man.openbsd.org/gre">gre(4)</a> keep alive packets.
568: <!-- 2018/10/17 -->
569: <li>Adjusted time scheduler statistics so time spent spinning in interrupts is no longer accounted for within the system time of a process.
570: <!-- 2018/10/16 -->
571: <li>Fixed regression in <a href="https://man.openbsd.org/pf">pf(4)</a> that caused quick on anchor rules to be ignored.
572: <li>Adjusted bitmap tables and output routines of <a href="https://man.openbsd.org/banner">banner(6)</a>.
573: <li>Added a linker script to assist lld with building <a href="https://man.openbsd.org/biosboot">biosboot(8)</a>.
574: <li>Added traffic class of ipv6 headers to <a href="https://man.openbsd.org/gre">gre(4)</a> encapsulation.
575: <!-- 2018/10/15 -->
1.1418 pamela 576: <li>Addressed crashes when checking for duplicate <a href="https://man.openbsd.org/user">user(8)</a> entries.
1.1416 pamela 577: <li>Used the up_rib tree to withdraw all prefixes of a peer which is used to reload peers into a new RIB in <a href="https://man.openbsd.org/bgpd">bgpd(8)</a>. Removes one additional full RIB tree walker.
578: <li>Rate-limited the interval over which a VM can reboot, preventing VM reboot loops in <a href="https://man.openbsd.org/vmd">vmd(8)</a>. Three VM restarts less than six seconds apart are assumed to be unintentional, and the VM is stopped.
579: <li>Made <a href="https://man.openbsd.org/httpd">httpd(8)</a> omit HSTS headers for unencrypted connections per RFC 6797.
580: <!-- 2018/10/14 -->
581: <!-- 2018/10/13 -->
582: <li>Fixed mrt table dumps in <a href="https://man.openbsd.org/bgpd">bgpd(8)</a>.
583: <li>Linked libc++.so against libc++abi.so to allow linking of C binaries against C++ shared libraries.
584: <li>Exposed net.inet.ip.arpq.drops to <a href="https://man.openbsd.org/sysctl">sysctl(8)</a> to aid debugging of dropped packets without counter increases.
1.1164 deraadt 585: </ul>
1.422 deraadt 586: <p>
1.203 deraadt 587:
1.14 deraadt 588: </body>
1.1328 deraadt 589: </html>
![[BACK]](/icons/back.gif){kind=icon}
Return to plus.html CVS log ![[TXT]](/icons/text.gif){kind=icon}
![[DIR]](/icons/dir.gif){kind=icon}
Up to [local] / www