File: [local] / www / plus.html (download) (as text)
Revision 1.1352, Mon Sep 8 09:09:03 2014 UTC (9 years, 8 months ago) by brett
Branch: MAIN
Changes since 1.1351: +234 -1276 lines
plus.html for Aug 8-24, fixes from jj@.
|
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<title>OpenBSD -current changes</title>
<meta name="resource-type" content="document">
<meta name="description" content="OpenBSD -current changes">
<meta name="keywords" content="openbsd,changes">
<meta name="distribution" content="global">
<meta name="copyright" content="This document copyright 1996-2012 by OpenBSD.">
</head>
<body bgcolor="#ffffff" text="#000000" link="#23238e">
<a href="index.html"><img alt="[OpenBSD]" height="30" width="141" src="images/smalltitle.gif" border="0"></a>
<p>
<h2><font color="#e00000">OpenBSD -current changelog</font></h2>
<hr>
<p>
This selection is intended to include all important
and all user-visible changes.
For a complete record of all changes, please see the "source-changes"
mailing list, called "OpenBSD CVS"
in the <a href="mail.html#Archives">archives</a>,
or use <a href="anoncvs.html#CVS">CVS</a>.
<p>
Note: <font color="#e00000">Problems for which patches exist are marked in red</font>.
<p>
For changes in other releases, click below:<br>
<a href="plus20.html">2.0</a>,
<a href="plus21.html">2.1</a>,
<a href="plus22.html">2.2</a>,
<a href="plus23.html">2.3</a>,
<a href="plus24.html">2.4</a>,
<a href="plus25.html">2.5</a>,
<a href="plus26.html">2.6</a>,
<a href="plus27.html">2.7</a>,
<a href="plus28.html">2.8</a>,
<a href="plus29.html">2.9</a>,
<a href="plus30.html">3.0</a>,
<a href="plus31.html">3.1</a>,
<a href="plus32.html">3.2</a>,
<a href="plus33.html">3.3</a>,
<a href="plus34.html">3.4</a>,
<a href="plus35.html">3.5</a>,
<a href="plus36.html">3.6</a>,
<br>
<a href="plus37.html">3.7</a>,
<a href="plus38.html">3.8</a>,
<a href="plus39.html">3.9</a>,
<a href="plus40.html">4.0</a>,
<a href="plus41.html">4.1</a>,
<a href="plus42.html">4.2</a>,
<a href="plus43.html">4.3</a>,
<a href="plus44.html">4.4</a>,
<a href="plus45.html">4.5</a>,
<a href="plus46.html">4.6</a>,
<a href="plus47.html">4.7</a>,
<a href="plus48.html">4.8</a>,
<a href="plus49.html">4.9</a>,
<a href="plus50.html">5.0</a>,
<a href="plus51.html">5.1</a>,
<a href="plus52.html">5.2</a>,
<a href="plus53.html">5.3</a>,
<br>
<a href="plus54.html">5.4</a>,
<a href="plus55.html">5.5</a>,
<a href="plus56.html">5.6</a>.
<br>
<p>
<h3><font color="#0000e0">Changes made between OpenBSD 5.6 and -current</font></h3>
<p>
<ul>
<!-- 2014/08/24 -->
<li>Implementation of bold italic font support for postscript and pdf output in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mandoc&manpath=OpenBSD%20Current&sektion=1&format=html">mandoc(1)</a>.
<li>Start all <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rcctl&manpath=OpenBSD%20Current&sektion=8&format=html">rcctl(8)</a> error messages with "rcctl: " so it is clear where they come from.
<li>In debug mode, only print the flags relevant to the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rc.d&manpath=OpenBSD%20Current&sektion=8&format=html">rc.d(8)</a> we are calling instead of all flags; make it clear when we are using the default flags when none are set.
<li>Make it possible for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rcctl&manpath=OpenBSD%20Current&sektion=8&format=html">rcctl(8)</a> to pass `-d' and `-f' to the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rc.d&manpath=OpenBSD%20Current&sektion=8&format=html">rc.d(8)</a> script.
<!-- 2014/08/23 -->
<li>Removed non-standard GOST cipher suites (which are not compiled in currently) from <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&manpath=OpenBSD%20Current&sektion=8&format=html">ssl(8)</a>.
<!-- 2014/08/22 -->
<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&manpath=OpenBSD%20Current&sektion=8&format=html">pfctl(8)</a> now makes sure rules have been defined when you specify queues in a rule.
<li>Switched <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ndp&manpath=OpenBSD%20Current&sektion=8&format=html">ndp(8)</a> to display MAC addresses in 00:00:00:00:00:00 format.
<li>Get <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=arp&manpath=OpenBSD%20Current&sektion=8&format=html">arp(8)</a> to print leading zeros in MAC addresses again.
<li>Disabled use of bind in base (base uses <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=nsd&manpath=OpenBSD%20Current&sektion=8&format=html">nsd(8)</a>/<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=unbound&manpath=OpenBSD%20Current&sektion=8&format=html">unbound(8)</a> instead).
<li>Ensure <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cwm&manpath=OpenBSD%20Current&sektion=1&format=html">cwm(1)</a> client that wants to be in nogroup stays in nogroup (thus stays in view), even when (re)reading NET_WM_DESKTOP.
<li>Made <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=syslogd&manpath=OpenBSD%20Current&sektion=8&format=html">syslogd(8)</a> check host/port length when parsing <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=syslog.conf&manpath=OpenBSD%20Current&sektion=5&format=html">syslog.conf(5)</a>. Avoids nasty error message "syslogd: priv_getaddrinfo: overflow attempt in hostname".
<li>Set the default <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=nfsd&manpath=OpenBSD%20Current&sektion=8&format=html">nfsd(8)</a> flags to "-tun 4" when launched from <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rc.d&manpath=OpenBSD%20Current&sektion=8&format=html">rc.d(8)</a>.
<li>Fixed memory leak in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&manpath=OpenBSD%20Current&sektion=8&format=html">isakmpd(8)</a> ike_phase_1.c.
<!-- 2014/08/21 -->
<li>Fixed <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=acpi&manpath=OpenBSD%20Current&sektion=4&format=html">acpi(4)</a> sensor status for docking/undocking laptops, to allow <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sensorsd&manpath=OpenBSD%20Current&sektion=8&format=html">sensorsd(8)</a> to correctly detects state changes.
<li>Bugfix to make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=whatis&manpath=OpenBSD%20Current&sektion=1&format=html">whatis(1)</a> case-insensitive again.
<li>Added Last-Modified: HTTP header to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=httpd&manpath=OpenBSD%20Current&sektion=8&format=html">httpd(8)</a>.
<li>Allow <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=syslogd&manpath=OpenBSD%20Current&sektion=8&format=html">syslogd(8)</a> to send and receive <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=udp&manpath=OpenBSD%20Current&sektion=4&format=html">udp(4)</a> syslog packets on the IPv6 socket.
<li>Unbroke <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sysmerge&manpath=OpenBSD%20Current&sektion=8&format=html">sysmerge(8)</a> when "SRCDIR=."
<li>Limited the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mandoc&manpath=OpenBSD%20Current&sektion=1&format=html">mandoc(1)</a> CGI process execution time, to make REDoS attacks less effective.
<li>Stopped <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mandoc&manpath=OpenBSD%20Current&sektion=1&format=html">mandoc(1)</a> suppressing white space after .Fl if the next node is a text node on the same input line.
<li>Made <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rcctl&manpath=OpenBSD%20Current&sektion=8&format=html">rcctl(8)</a> "status" output match <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rc.conf&manpath=OpenBSD%20Current&sektion=8&format=html">rc.conf(8)</a> format.
<li>Changed the output of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=arp&manpath=OpenBSD%20Current&sektion=8&format=html">arp(8)</a> to match what <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ndp&manpath=OpenBSD%20Current&sektion=8&format=html">ndp(8)</a> does; include the expire timer.
<!-- 2014/08/20 -->
<li>After <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=nfe&manpath=OpenBSD%20Current&sektion=4&format=html">nfe(4)</a> allocates an mbuf and cluster, properly init the length fields.
<li>Implemented rxrinfo ioctl in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ix&manpath=OpenBSD%20Current&sektion=4&format=html">ix(4)</a> for cluster usage statistics.
<li>Call audio_{pint,rint}() call-backs with the mutex held.
<li>When doing "whole disk" installs on macppc, blank the first 1 meg of the disk. Allows successful creation of boot partition.
<li>Unlinked the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=crypto&manpath=OpenBSD%20Current&sektion=4&format=html">crypto(4)</a> pseudo device (disabled by default for about 4 years).
<li>Made sure <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=eap&manpath=OpenBSD%20Current&sektion=4&format=html">eap(4)</a> releases CPU mutexes upon receiving an EINVAL message.
<!-- 2014/08/19 -->
<li>On i386/amd64, backported support for the "rdtscp" instruction from binutils-2.17.
<li>Removed the custom jumbo allocator from <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=nfe&manpath=OpenBSD%20Current&sektion=4&format=html">nfe(4)</a> which was never enabled.
<li>When <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&manpath=OpenBSD%20Current&sektion=8&format=html">sshd(8)</a> is dumping the server configuration, made it print correct KEX, MAC and cipher defaults.
<li>Introduced <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rcctl&manpath=OpenBSD%20Current&sektion=8&format=html">rcctl(8)</a>, a simple utility for maintaining <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rc.conf.local&manpath=OpenBSD%20Current&sektion=8&format=html">rc.conf.local(8)</a>.
<li>When a local <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=route&manpath=OpenBSD%20Current&sektion=4&format=html">route(4)</a> entry is added for an ifa having a broadcast address, made it identifiable (by a flag) and persistent.
<li>Ensure state changes are properly serialised in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pms&manpath=OpenBSD%20Current&sektion=4&format=html">pms(4)</a>. makes enabling/disabling touchpads more reliable.
<li>Missing stack var initialisation fixed in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ld.so&manpath=OpenBSD%20Current&sektion=1&format=html">ld.so(1)</a>.
<!-- 2014/08/18 -->
<li>Added -4 and -6 flags to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcpbench&manpath=OpenBSD%20Current&sektion=1&format=html">tcpbench(1)</a>, to specify ipv4 or ipv6 respectively.
<li>Fixed _exit codes in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=syslogd&manpath=OpenBSD%20Current&sektion=8&format=html">syslogd(8)</a> privsep.c, which were the wrong way around.
<li>Fixed read access to uninitialised memory in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mandoc&manpath=OpenBSD%20Current&sektion=1&format=html">mandoc(1)</a>.
<li>Removed <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=malloc&manpath=OpenBSD%20Current&sektion=3&format=html">malloc(3)</a> lock across some <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mmap&manpath=OpenBSD%20Current&sektion=2&format=html">mmap(2)</a> <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=syscall&manpath=OpenBSD%20Current&sektion=9&format=html">syscall(9)</a>. Speeds up multithreaded programs.
<!-- 2014/08/17 -->
<li>Added fancy printing of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ktrace&manpath=OpenBSD%20Current&sektion=1&format=html">ktrace(1)</a>'s ops argument to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=kdump&manpath=OpenBSD%20Current&sektion=1&format=html">kdump(1)</a>.
<li>Made <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=kdump&manpath=OpenBSD%20Current&sektion=1&format=html">kdump(1)</a> display symbolically the mode argument of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mkdir&manpath=OpenBSD%20Current&sektion=1&format=html">mkdir(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mkfifo&manpath=OpenBSD%20Current&sektion=1&format=html">mkfifo(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mknod&manpath=OpenBSD%20Current&sektion=2&format=html">mknod(2)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=umask&manpath=OpenBSD%20Current&sektion=2&format=html">umask(2)</a>.
<li>/etc/netstart now executed using <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sh&manpath=OpenBSD%20Current&sektion=1&format=html">sh(1)</a> instead of sourcing it.
<!-- 2014/08/16 -->
<li>Repaired operation of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sysctl&manpath=OpenBSD%20Current&sektion=8&format=html">sysctl(8)</a> kern.arandom.
<!-- 2014/08/15 -->
<li>Removed support for public key operations from <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ubsec&manpath=OpenBSD%20Current&sektion=4&format=html">ubsec(4)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=safe&manpath=OpenBSD%20Current&sektion=4&format=html">safe(4)</a>.
<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=lofn&manpath=OpenBSD%20Current&sektion=4&format=html">lofn(4)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=nofn&manpath=OpenBSD%20Current&sektion=4&format=html">nofn(4)</a> removed as obsolete, due to reliance on the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=crypto&manpath=OpenBSD%20Current&sektion=4&format=html">crypto(4)</a> interface.
<!-- 2014/08/14 -->
<li>Switched to using O_CLOEXEC wherever we open a file and then call fcntl(F_SETFD, FD_CLOEXEC)
on it. Reduces system calls and improves thread-safety for libraries.
<li>More fixes in the attach failure path for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ze&manpath=OpenBSD%20Current&sektion=4&arch=vax&format=html">ze(4/vax)</a>.
<li>Added bounce matching for [] and {} to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mg&manpath=OpenBSD%20Current&sektion=1&format=html">mg(1)</a>.
<li>Synced <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=relayd&manpath=OpenBSD%20Current&sektion=8&format=html">relayd(8)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=httpd&manpath=OpenBSD%20Current&sektion=8&format=html">httpd(8)</a> with RFC 7230-7235 phrases and IANA registered status codes.
<li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=oce&manpath=OpenBSD%20Current&sektion=4&format=html">oce(4)</a>, implemented rxrinfo ioctl for cluster usage statistics.
<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=systat&manpath=OpenBSD%20Current&sektion=1&format=html">systat(1)</a> now only show active pools by default, pressing "A" shows all pools.
<!-- 2014/08/13 -->
<li>Updated <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=drm&manpath=OpenBSD%20Current&sektion=4&format=html">drm(4)</a> to libdrm 2.4.56.
<li>Began cleanup of scaling units in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=roff&manpath=OpenBSD%20Current&sektion=7&format=html">roff(7)</a>.
<li>Some <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=X&manpath=OpenBSD%20Current&sektion=7&format=html">X(7)</a> resource files moved to /usr/X11R6/share/X11/app-defaults.
<li>With a non-existent <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=httpd&manpath=OpenBSD%20Current&sektion=8&format=html">httpd(8)</a> root, removed root prefix from PATH_INFO (useful for virtual FastCGI scripts inside a <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=chroot&manpath=OpenBSD%20Current&sektion=8&format=html">chroot(8)</a>).
<li>Made sure <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tftpd&manpath=OpenBSD%20Current&sektion=8&format=html">tftpd(8)</a> always calls <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=freeaddrinfo&manpath=OpenBSD%20Current&sektion=3&format=html">freeaddrinfo(3)</a> after <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getaddrinfo&manpath=OpenBSD%20Current&sektion=3&format=html">getaddrinfo(3)</a>.
<li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=httpd&manpath=OpenBSD%20Current&sektion=8&format=html">httpd(8)</a>, provided a failsafe version of the path_info() function.
<li>Correctly set the rtable ID of the packet header when sending <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pppoe&manpath=OpenBSD%20Current&sektion=4&format=html">pppoe(4)</a> Active Discovery Terminate packets.
<li>Brought <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pflow&manpath=OpenBSD%20Current&sektion=4&format=html">pflow(4)</a> IPFIX sequence numbers in line with the RFC.
<!-- 2014/08/12 -->
<li>Sync <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf.conf&manpath=OpenBSD%20Current&sektion=5&format=html">pf.conf(5)</a> behaviour with the man page regarding parent anchors for "once" rules.
<!-- 2014/08/11 -->
<li>On mips64, stopped <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=uvm_map&manpath=OpenBSD%20Current&sektion=9&format=html">uvm_map(9)</a> from receiving addresses outside userland bounds.
<li>Fixed <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tmux&manpath=OpenBSD%20Current&sektion=1&format=html">tmux(1)</a> copy mode problems: in vi mode, include the last character if you moved the cursor up or left; in emacs mode include the last character if you moved the cursor left.
<li>Added <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tmux&manpath=OpenBSD%20Current&sektion=1&format=html">tmux(1)</a> flags to selectp, to enable and disable input to a pane.
<li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ksh&manpath=OpenBSD%20Current&sektion=1&format=html">ksh(1)</a>, separately set FD_CLOEXEC if the new fd was >= FDBASE. Affects scripts that directly use 9 of the first 10 file descriptors.
<li>When <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhclient&manpath=OpenBSD%20Current&sektion=8&format=html">dhclient(8)</a> is parsing 32 bit values, verify that we received 4 bytes.
<li>Validate len field in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhcpd&manpath=OpenBSD%20Current&sektion=8&format=html">dhcpd(8)</a> for proper length, not just "not zero."
<li>Brought back r1.131 of sys/kern/subr_pool.c: take the pools mutex when copying stats out of it in the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sysctl&manpath=OpenBSD%20Current&sektion=8&format=html">sysctl(8)</a> path.
<li>Put back the checks about RTF_LOCAL routes now that userland tools are aware of them.
<li>Stopped <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=arp&manpath=OpenBSD%20Current&sektion=4&format=html">arp(4)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ndp&manpath=OpenBSD%20Current&sektion=8&format=html">ndp(8)</a> from trying to delete RTF_LOCAL entries.
<!-- 2014/08/10 -->
<li>Fixed unchecked memory allocation (and potential leak upon error) in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&manpath=OpenBSD%20Current&sektion=8&format=html">ssl(8)</a> ssl3_get_cert_verify().
<li>Provided ssl3_get_cipher_by_id() function that allows <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&manpath=OpenBSD%20Current&sektion=8&format=html">ssl(8)</a> ciphers to be looked up by their ID.
<li>Always write core file of a non-suid process into <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pwd&manpath=OpenBSD%20Current&sektion=1&format=html">pwd(1)</a>, even if <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sysctl&manpath=OpenBSD%20Current&sektion=8&format=html">sysctl(8)</a> kern.nosuidcoredump is 2 or 3.
<li>Fixed race in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=relayd&manpath=OpenBSD%20Current&sektion=8&format=html">relayd(8)</a> that caused non-persistent PUT connections with a short body to hang.
<li>Removed disabled (weakened export and non-ephemeral DH) cipher suites from the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&manpath=OpenBSD%20Current&sektion=8&format=html">ssl(8)</a> cipher list.
<li>If <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pkg_create&manpath=OpenBSD%20Current&sektion=1&format=html">pkg_create(1)</a> is run as non-root, restore correct group/owner to root/bin, and remove write permissions without explicit modes.
<li>Fixed kqueue read/write filters for msdosfs and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fuse&manpath=OpenBSD%20Current&sektion=4&format=html">fuse(4)</a> filesystems.
<!-- 2014/08/09 -->
<li>Fixed the length check for reinjected <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=icmp&manpath=OpenBSD%20Current&sektion=4&format=html">icmp(4)</a> packets. Stops <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=divert&manpath=OpenBSD%20Current&sektion=4&format=html">divert(4)</a> discarding valid packets shorter than 20 bytes.
<li>Fixed <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=readelf&manpath=OpenBSD%20Current&sektion=1&format=html">readelf(1)</a> "--debug-dump=frames-interp" output.
<li><font color="#e00000">5.4 and 5.5 SECURITY FIXES: Backported security fixes from openssl 1.0.1i</font><br>A source code patch is available for <a href="errata54.html#014_openssl">5.4</a> and <a href="errata55.html#010_openssl">5.5</a>.
<li>Initial <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sysmerge&manpath=OpenBSD%20Current&sektion=8&format=html">sysmerge(8)</a> support for handling configuration files from packages.
<li>Now that <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=uhub&manpath=OpenBSD%20Current&sektion=4&format=html">uhub(4)</a> can deal with them, added support for non-root hubs.
<li>Made <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=uhub&manpath=OpenBSD%20Current&sektion=4&format=html">uhub(4)</a> correctly recognise Super Speed devices.
<li>Allow <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=httpd.conf&manpath=OpenBSD%20Current&sektion=5&format=html">httpd.conf(5)</a> to include the "types" section anywhere in the configuration file.
<li>Removed <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tmux&manpath=OpenBSD%20Current&sektion=1&format=html">tmux(1)</a> support for the continuously reporting "any" mouse mode (never worked properly, rarely used).
<!-- 2014/08/08 -->
<li>Backport from binutils-2.17 the correct i386/amd64 register->int assignments for CFI.
<li>Allow <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=httpd&manpath=OpenBSD%20Current&sektion=8&format=html">httpd(8)</a> to use a fastcgi target as the default index (eg index.php).
<li>Fixed <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=relayd&manpath=OpenBSD%20Current&sektion=8&format=html">relayd(8)</a> when using DNS over <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=udp&manpath=OpenBSD%20Current&sektion=4&format=html">udp(4)</a> so it continues to work after the first request.
<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=radeon&manpath=OpenBSD%20Current&sektion=4&format=html">radeon(4)</a> fixes: only apply hdmi "bpc pll" flags when encoder mode is hdmi; fixed dithering on some panels; fixed lane/clock setup for dp 1.2 capable devices.
<li>Brought <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mandoc&manpath=OpenBSD%20Current&sektion=1&format=html">mandoc(1)</a> handling of defective prologues closer to groff.
<li>Simplified <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=man&manpath=OpenBSD%20Current&sektion=7&format=html">man(7)</a> validation in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mandoc&manpath=OpenBSD%20Current&sektion=1&format=html">mandoc(1)</a>.
<li>Fixed <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mandoc&manpath=OpenBSD%20Current&sektion=1&format=html">mandoc(1)</a> floating point handling. Fixes the indentation of the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=readline&manpath=OpenBSD%20Current&sektion=3&format=html">readline(3)</a> manual.
<li>Allow <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=httpd&manpath=OpenBSD%20Current&sektion=8&format=html">httpd(8)</a> to serve emtpy (0 bytes) files.
<li>Improved <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mandoc&manpath=OpenBSD%20Current&sektion=1&format=html">mandoc(1)</a> handling of next-line scope when it is broken by end of file.
<li>Partial <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mandoc&manpath=OpenBSD%20Current&sektion=1&format=html">mandoc(1)</a> implementation of .Bd -centred; various improvements related to .Ex and .Rv.
<li>Made sure asynchronous commands do not race with synchronous ones in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xhci&manpath=OpenBSD%20Current&sektion=4&format=html">xhci(4)</a>.
<li>Improved <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xhci&manpath=OpenBSD%20Current&sektion=4&format=html">xhci(4)</a> logic to determine the maximum endpoint service interface time payload.
<li>Made <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xhci&manpath=OpenBSD%20Current&sektion=4&format=html">xhci(4)</a> always report stalls, as <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=umass&manpath=OpenBSD%20Current&sektion=4&format=html">umass(4)</a> relies on this information.
<li>Added support for using "-" as shorthand for stdin/stdout in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tradcpp&manpath=OpenBSD%20Current&sektion=1&format=html">tradcpp(1)</a>.
<!-- 2014/08/24 -->
<li>Implementation of bold italic font support for postscript and pdf output in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mandoc&manpath=OpenBSD%20Current&sektion=1&format=html">mandoc(1)</a>.
<li>Start all <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rcctl&manpath=OpenBSD%20Current&sektion=8&format=html">rcctl(8)</a> error messages with "rcctl: " such that it is clear where they come from.
<li>In debug mode, only print the flags relevant to the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rc.d&manpath=OpenBSD%20Current&sektion=8&format=html">rc.d(8)</a> we are calling instead of all flags; make it clear when we are using the default flags when none are set.
<li>Make it possible for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rcctl&manpath=OpenBSD%20Current&sektion=8&format=html">rcctl(8)</a> to pass `-d' and `-f' to the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rc.d&manpath=OpenBSD%20Current&sektion=8&format=html">rc.d(8)</a> script.
<!-- 2014/08/23 -->
<li>Removed non-standard GOST cipher suites (which are not compiled in currently) from <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&manpath=OpenBSD%20Current&sektion=8&format=html">ssl(8)</a>.
<!-- 2014/08/22 -->
<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&manpath=OpenBSD%20Current&sektion=8&format=html">pfctl(8)</a> now makes sure rules have been defined when you specify queues in a rule.
<li>Switched <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ndp&manpath=OpenBSD%20Current&sektion=8&format=html">ndp(8)</a> to display MAC addresses in 00:00:00:00:00:00 format.
<li>Get <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=arp&manpath=OpenBSD%20Current&sektion=8&format=html">arp(8)</a> to print leading zeros in MAC addresses again.
<li>Disabled use of bind in base (base uses <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=nsd&manpath=OpenBSD%20Current&sektion=8&format=html">nsd(8)</a>/<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=unbound&manpath=OpenBSD%20Current&sektion=8&format=html">unbound(8)</a> instead).
<li>Ensure <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cwm&manpath=OpenBSD%20Current&sektion=1&format=html">cwm(1)</a> client that wants to be in nogroup stays in nogroup (thus stays in view), even when (re)reading NET_WM_DESKTOP.
<li>Made <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=syslogd&manpath=OpenBSD%20Current&sektion=8&format=html">syslogd(8)</a> check host/port length when parsing <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=syslog.conf&manpath=OpenBSD%20Current&sektion=5&format=html">syslog.conf(5)</a>. Avoids nasty error message "syslogd: priv_getaddrinfo: overflow attempt in hostname".
<li>Set the default <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=nfsd&manpath=OpenBSD%20Current&sektion=8&format=html">nfsd(8)</a> flags to "-tun 4" when launched from <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rc.d&manpath=OpenBSD%20Current&sektion=8&format=html">rc.d(8)</a>.
<li>Fixed memory leak in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&manpath=OpenBSD%20Current&sektion=8&format=html">isakmpd(8)</a> ike_phase_1.c.
<!-- 2014/08/21 -->
<li>Fixed <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=acpi&manpath=OpenBSD%20Current&sektion=4&format=html">acpi(4)</a> sensor status for docking/undocking laptops, to allow <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sensorsd&manpath=OpenBSD%20Current&sektion=8&format=html">sensorsd(8)</a> to correctly detects state changes.
<li>Bugfix to make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=whatis&manpath=OpenBSD%20Current&sektion=1&format=html">whatis(1)</a> case-insensitive again.
<li>Added Last-Modified: HTTP header to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=httpd&manpath=OpenBSD%20Current&sektion=8&format=html">httpd(8)</a>.
<li>Allow <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=syslogd&manpath=OpenBSD%20Current&sektion=8&format=html">syslogd(8)</a> to send and receive <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=udp&manpath=OpenBSD%20Current&sektion=4&format=html">udp(4)</a> syslog packets on the IPv6 socket.
<li>Unbroke <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sysmerge&manpath=OpenBSD%20Current&sektion=8&format=html">sysmerge(8)</a> when "SRCDIR=."
<li>Limited the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mandoc&manpath=OpenBSD%20Current&sektion=1&format=html">mandoc(1)</a> CGI process execution time, to make REDoS attacks less effective.
<li>Stopped <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mandoc&manpath=OpenBSD%20Current&sektion=1&format=html">mandoc(1)</a> suppressing white space after .Fl if the next node is a text node on the same input line.
<li>Made <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rcctl&manpath=OpenBSD%20Current&sektion=8&format=html">rcctl(8)</a> "status" output match <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rc.conf&manpath=OpenBSD%20Current&sektion=8&format=html">rc.conf(8)</a> format.
<li>Changed the output of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=arp&manpath=OpenBSD%20Current&sektion=8&format=html">arp(8)</a> to match what <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ndp&manpath=OpenBSD%20Current&sektion=8&format=html">ndp(8)</a> does; include the expire timer.
<!-- 2014/08/20 -->
<li>After <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=nfe&manpath=OpenBSD%20Current&sektion=4&format=html">nfe(4)</a> allocates an mbuf and cluster, properly init the length fields.
<li>Implemented rxrinfo ioctl in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ix&manpath=OpenBSD%20Current&sektion=4&format=html">ix(4)</a> for cluster usage statistics.
<li>Call audio_{pint,rint}() call-backs with the mutex held.
<li>When doing "whole disk" installs on macppc, blank the first 1 meg of the disk. Allows successful creation of boot partition.
<li>Unlinked the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=crypto&manpath=OpenBSD%20Current&sektion=4&format=html">crypto(4)</a> pseudo device (disabled by default for about 4 years).
<li>Made sure CPU mutexes are released on EINVAL.
<!-- 2014/08/19 -->
<li>On i386/amd64, backported support for the "rdtscp" instruction from binutils-2.17.
<li>Removed the custom jumbo allocator from <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=nfe&manpath=OpenBSD%20Current&sektion=4&format=html">nfe(4)</a> which was never enabled.
<li>When <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&manpath=OpenBSD%20Current&sektion=8&format=html">sshd(8)</a> is dumping the server configuration, made it print correct KEX, MAC and cipher defaults.
<li>Introduced <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rcctl&manpath=OpenBSD%20Current&sektion=8&format=html">rcctl(8)</a>, a simple utility for maintaining <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rc.conf.local&manpath=OpenBSD%20Current&sektion=8&format=html">rc.conf.local(8)</a>.
<li>When a local <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=route&manpath=OpenBSD%20Current&sektion=4&format=html">route(4)</a> entry is added for an ifa having a broadcast address, made it identifiable (by a flag) and persistent.
<li>Ensure state changes are properly serialised in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pms&manpath=OpenBSD%20Current&sektion=4&format=html">pms(4)</a>. makes enabling/disabling touchpads more reliable.
<li>Missing stack var initialisation fixed in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ld.so&manpath=OpenBSD%20Current&sektion=1&format=html">ld.so(1)</a>.
<!-- 2014/08/18 -->
<li>Added -4 and -6 flags to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcpbench&manpath=OpenBSD%20Current&sektion=1&format=html">tcpbench(1)</a>, to specify ipv4 or ipv6 respectively.
<li>Fixed _exit codes in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=syslogd&manpath=OpenBSD%20Current&sektion=8&format=html">syslogd(8)</a> privsep.c, which were the wrong way around.
<li>Fixed read access to uninitialised memory in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mandoc&manpath=OpenBSD%20Current&sektion=1&format=html">mandoc(1)</a>.
<li>Removed <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=malloc&manpath=OpenBSD%20Current&sektion=3&format=html">malloc(3)</a> lock across some <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mmap&manpath=OpenBSD%20Current&sektion=2&format=html">mmap(2)</a> <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=syscall&manpath=OpenBSD%20Current&sektion=9&format=html">syscall(9)</a>. Speeds up multithreaded programs.
<!-- 2014/08/17 -->
<li>Added fancy printing of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ktrace&manpath=OpenBSD%20Current&sektion=1&format=html">ktrace(1)</a>'s ops argument to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=kdump&manpath=OpenBSD%20Current&sektion=1&format=html">kdump(1)</a>.
<li>Made <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=kdump&manpath=OpenBSD%20Current&sektion=1&format=html">kdump(1)</a> display symbolicly the mode argument of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mkdir&manpath=OpenBSD%20Current&sektion=1&format=html">mkdir(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mkfifo&manpath=OpenBSD%20Current&sektion=1&format=html">mkfifo(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mknod&manpath=OpenBSD%20Current&sektion=2&format=html">mknod(2)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=umask&manpath=OpenBSD%20Current&sektion=2&format=html">umask(2)</a>.
<li>/etc/netstart now executed using <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sh&manpath=OpenBSD%20Current&sektion=1&format=html">sh(1)</a> instead of sourcing it.
<!-- 2014/08/16 -->
<li>Repaired operation of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sysctl&manpath=OpenBSD%20Current&sektion=8&format=html">sysctl(8)</a> kern.arandom.
<!-- 2014/08/15 -->
<li>Removed support for public key operations from <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ubsec&manpath=OpenBSD%20Current&sektion=4&format=html">ubsec(4)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=safe&manpath=OpenBSD%20Current&sektion=4&format=html">safe(4)</a>.
<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=lofn&manpath=OpenBSD%20Current&sektion=4&format=html">lofn(4)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=nofn&manpath=OpenBSD%20Current&sektion=4&format=html">nofn(4)</a> removed as obsolete, due to reliance on the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=crypto&manpath=OpenBSD%20Current&sektion=4&format=html">crypto(4)</a> interface.
<!-- 2014/08/14 -->
<li>Switched to using O_CLOEXEC where files are opened. Reduces system calls and improves thread-safety for libraries.
<li>More fixes in the attach failure path for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ze&manpath=OpenBSD%20Current&sektion=4&arch=vax&format=html">ze(4/vax)</a>.
<li>Added bounce matching for [] and {} to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mg&manpath=OpenBSD%20Current&sektion=1&format=html">mg(1)</a>.
<li>Synced <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=relayd&manpath=OpenBSD%20Current&sektion=8&format=html">relayd(8)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=httpd&manpath=OpenBSD%20Current&sektion=8&format=html">httpd(8)</a> with RFC 7230-7235 phrases and IANA registered status codes.
<li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=oce&manpath=OpenBSD%20Current&sektion=4&format=html">oce(4)</a>, implemented rxrinfo ioctl for cluster usage statistics.
<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=systat&manpath=OpenBSD%20Current&sektion=1&format=html">systat(1)</a> now only show active pools by default, pressing "A" shows all pools.
<!-- 2014/08/13 -->
<li>Updated <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=drm&manpath=OpenBSD%20Current&sektion=4&format=html">drm(4)</a> to libdrm 2.4.56.
<li>Began cleanup of scaling units in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=roff&manpath=OpenBSD%20Current&sektion=7&format=html">roff(7)</a>.
<li>Some <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=X&manpath=OpenBSD%20Current&sektion=7&format=html">X(7)</a> resource files moved to /usr/X11R6/share/X11/app-defaults.
<li>With a non-existent <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=httpd&manpath=OpenBSD%20Current&sektion=8&format=html">httpd(8)</a> root, removed root prefix from PATH_INFO (useful for virtual FastCGI scripts inside a <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=chroot&manpath=OpenBSD%20Current&sektion=8&format=html">chroot(8)</a>).
<li>Made sure <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tftpd&manpath=OpenBSD%20Current&sektion=8&format=html">tftpd(8)</a> always calls <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=freeaddrinfo&manpath=OpenBSD%20Current&sektion=3&format=html">freeaddrinfo(3)</a> after <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getaddrinfo&manpath=OpenBSD%20Current&sektion=3&format=html">getaddrinfo(3)</a>.
<li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=httpd&manpath=OpenBSD%20Current&sektion=8&format=html">httpd(8)</a>, provided a failsafe version of the path_info() function.
<li>Correctly set the rtable ID of the packet header when sending <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pppoe&manpath=OpenBSD%20Current&sektion=4&format=html">pppoe(4)</a> Active Discovery Terminate packets.
<li>Brought <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pflow&manpath=OpenBSD%20Current&sektion=4&format=html">pflow(4)</a> IPFIX sequence numbers in line with the RFC.
<!-- 2014/08/12 -->
<li>Sync <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf.conf&manpath=OpenBSD%20Current&sektion=5&format=html">pf.conf(5)</a> behaviour with the man page regarding parent anchors for "once" rules.
<!-- 2014/08/11 -->
<li>On mips64, stopped <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=uvm_map&manpath=OpenBSD%20Current&sektion=9&format=html">uvm_map(9)</a> from receiving addresses outside userland bounds.
<li>Fixed <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tmux&manpath=OpenBSD%20Current&sektion=1&format=html">tmux(1)</a> copy mode problems: in vi mode, include the last character if you moved the cursor up or left; in emacs mode include the last character if you moved the cursor left.
<li>Added <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tmux&manpath=OpenBSD%20Current&sektion=1&format=html">tmux(1)</a> flags to selectp, to enable and disable input to a pane.
<li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ksh&manpath=OpenBSD%20Current&sektion=1&format=html">ksh(1)</a>, separately set FD_CLOEXEC if the new fd was >= FDBASE. Affects scripts that directly use 9 of the first 10 file descriptors.
<li>When <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhclient&manpath=OpenBSD%20Current&sektion=8&format=html">dhclient(8)</a> is parsing 32 bit values, verify that we received 4 bytes.
<li>Validate len field in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhcpd&manpath=OpenBSD%20Current&sektion=8&format=html">dhcpd(8)</a> for proper length, not just "not zero."
<li>Brought back r1.131 of sys/kern/subr_pool.c: take the pools mutex when copying stats out of it in the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sysctl&manpath=OpenBSD%20Current&sektion=8&format=html">sysctl(8)</a> path.
<li>Put back the checks about RTF_LOCAL routes now that userland tools are aware of them.
<li>Stopped <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=arp&manpath=OpenBSD%20Current&sektion=4&format=html">arp(4)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ndp&manpath=OpenBSD%20Current&sektion=8&format=html">ndp(8)</a> from trying to delete RTF_LOCAL entries.
<!-- 2014/08/10 -->
<li>Fixed unchecked memory allocation (and potential leak upon error) in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&manpath=OpenBSD%20Current&sektion=8&format=html">ssl(8)</a> ssl3_get_cert_verify().
<li>Provided ssl3_get_cipher_by_id() function that allows <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&manpath=OpenBSD%20Current&sektion=8&format=html">ssl(8)</a> ciphers to be looked up by their ID.
<li>Always write core file of a non-suid process into <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pwd&manpath=OpenBSD%20Current&sektion=1&format=html">pwd(1)</a>, even if <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sysctl&manpath=OpenBSD%20Current&sektion=8&format=html">sysctl(8)</a> kern.nosuidcoredump is 2 or 3.
<li>Fixed race in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=relayd&manpath=OpenBSD%20Current&sektion=8&format=html">relayd(8)</a> that caused non-persistent PUT connections with a short body to hang.
<li>Removed disabled (weakened export and non-ephemeral DH) cipher suites from the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&manpath=OpenBSD%20Current&sektion=8&format=html">ssl(8)</a> cipher list.
<li>If <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pkg_create&manpath=OpenBSD%20Current&sektion=1&format=html">pkg_create(1)</a> is run as non-root, restore correct group/owner to root/bin, and remove write permissions without explicit modes.
<li>Fixed <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=kqueue&manpath=OpenBSD%20Current&sektion=2&format=html">kqueue(2)</a> read/write filters for msdosfs and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fuse&manpath=OpenBSD%20Current&sektion=4&format=html">fuse(4)</a> filesystems.
<!-- 2014/08/09 -->
<li>Fixed the length check for reinjected ICMP packets. Stops <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=divert&manpath=OpenBSD%20Current&sektion=4&format=html">divert(4)</a> discarding valid <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=icmp&manpath=OpenBSD%20Current&sektion=4&format=html">icmp(4)</a> packets shorter than 20 bytes.
<li>Fixed <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=readelf&manpath=OpenBSD%20Current&sektion=1&format=html">readelf(1)</a> "--debug-dump=frames-interp" output.
<li><font color="#e00000">5.4 and 5.5 SECURITY FIXES: Backported security fixes from openssl 1.0.1i</font><br>A source code patch is available for <a href="errata54.html#014_openssl">5.4</a> and <a href="errata55.html#010_openssl">5.5</a>.
<li>Initial <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sysmerge&manpath=OpenBSD%20Current&sektion=8&format=html">sysmerge(8)</a> support for handling configuration files from packages.
<li>Now that <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=uhub&manpath=OpenBSD%20Current&sektion=4&format=html">uhub(4)</a> can deal with them, added support for non-root hubs.
<li>Made <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=uhub&manpath=OpenBSD%20Current&sektion=4&format=html">uhub(4)</a> correctly recognise Super Speed devices.
<li>Allow <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=httpd.conf&manpath=OpenBSD%20Current&sektion=5&format=html">httpd.conf(5)</a> to include the "types" section anywhere in the configuration file.
<li>Removed <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tmux&manpath=OpenBSD%20Current&sektion=1&format=html">tmux(1)</a> support for the continuously reporting "any" mouse mode (never worked properly, rarely used).
<!-- 2014/08/08 -->
<li>Backport from binutils-2.17 the correct i386/amd64 register->int assignments for CFI.
<li>Allow <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=httpd&manpath=OpenBSD%20Current&sektion=8&format=html">httpd(8)</a> to use a fastcgi target as the default index (eg index.php).
<li>Fixed <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=relayd&manpath=OpenBSD%20Current&sektion=8&format=html">relayd(8)</a> when using DNS over UDP so it continues to work after the first request.
<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=radeon&manpath=OpenBSD%20Current&sektion=4&format=html">radeon(4)</a> fixes: only apply hdmi "bpc pll" flags when encoder mode is hdmi; fixed dithering on some panels; fixed lane/clock setup for dp 1.2 capable devices.
<li>Brought <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mandoc&manpath=OpenBSD%20Current&sektion=1&format=html">mandoc(1)</a> handling of defective prologues closer to groff.
<li>Simplified <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=man&manpath=OpenBSD%20Current&sektion=7&format=html">man(7)</a> validation in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mandoc&manpath=OpenBSD%20Current&sektion=1&format=html">mandoc(1)</a>.
<li>Fixed <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mandoc&manpath=OpenBSD%20Current&sektion=1&format=html">mandoc(1)</a> floating point handling. Fixes the indentation of the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=readline&manpath=OpenBSD%20Current&sektion=3&format=html">readline(3)</a> manual.
<li>Allow <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=httpd&manpath=OpenBSD%20Current&sektion=8&format=html">httpd(8)</a> to serve empty (0 bytes) files.
<li>Improved <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mandoc&manpath=OpenBSD%20Current&sektion=1&format=html">mandoc(1)</a> handling of next-line scope when it is broken by end of file.
<li>Partial <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mandoc&manpath=OpenBSD%20Current&sektion=1&format=html">mandoc(1)</a> implementation of .Bd -centred; various improvements related to .Ex and .Rv.
<li>Made sure asynchronous commands do not race with synchronous ones in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xhci&manpath=OpenBSD%20Current&sektion=4&format=html">xhci(4)</a>.
<li>Improved <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xhci&manpath=OpenBSD%20Current&sektion=4&format=html">xhci(4)</a> logic to determine the maximum endpoint service interface time payload.
<li>Made <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xhci&manpath=OpenBSD%20Current&sektion=4&format=html">xhci(4)</a> always report stalls, as <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=umass&manpath=OpenBSD%20Current&sektion=4&format=html">umass(4)</a> relies on this information.
<li>Added support for using "-" as shorthand for stdin/stdout in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tradcpp&manpath=OpenBSD%20Current&sektion=1&format=html">tradcpp(1)</a>.
</ul>
<p>
</body>
</html>
![[BACK]](/icons/back.gif){kind=icon}
Return to plus.html CVS log ![[TXT]](/icons/text.gif){kind=icon}
![[DIR]](/icons/dir.gif){kind=icon}
Up to [local] / www