[BACK]Return to plus.html CVS log [TXT][DIR] Up to [local] / www

File: [local] / www / plus.html (download) (as text)

Revision 1.1387, Mon Jun 6 18:00:17 2016 UTC (7 years, 11 months ago) by tim
Branch: MAIN
Changes since 1.1386: +85 -0 lines

March 16-31. Based on a diff from Rafael Neves.

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<title>OpenBSD -current Changelog</title>
<meta name="description" content="OpenBSD -current changes">
<meta name="copyright" content="This document copyright 1996-2016 by OpenBSD.">
<meta name="viewport" content="width=device-width, initial-scale=1">
<link rel="stylesheet" type="text/css" href="openbsd.css">
<link rel="canonical" href="http://www.openbsd.org/plus.html">
</head>

<body bgcolor="#ffffff" text="#000000" link="#23238e">

<h2>
<a href="index.html">
<font color="#0000ff"><i>Open</i></font><font color="#000084">BSD</font></a>
<font color="#e00000">-current Changelog</font>
</h2>
<hr>

<p>
This selection is intended to include all important
and all user-visible changes.
For a complete record of all changes, please see the "source-changes"
mailing list, called "OpenBSD CVS"
in the <a href="mail.html#Archives">archives</a>,
or use <a href="anoncvs.html#CVS">CVS</a>.

<p>
Note: <font color="#e00000">Problems for which patches exist are marked in red</font>.

<p>
For changes in other releases, click below:<br>
<a href="plus20.html">2.0</a>,
<a href="plus21.html">2.1</a>,
<a href="plus22.html">2.2</a>,
<a href="plus23.html">2.3</a>,
<a href="plus24.html">2.4</a>,
<a href="plus25.html">2.5</a>,
<a href="plus26.html">2.6</a>,
<a href="plus27.html">2.7</a>,
<a href="plus28.html">2.8</a>,
<a href="plus29.html">2.9</a>,
<a href="plus30.html">3.0</a>,
<a href="plus31.html">3.1</a>,
<a href="plus32.html">3.2</a>,
<a href="plus33.html">3.3</a>,
<a href="plus34.html">3.4</a>,
<a href="plus35.html">3.5</a>,
<a href="plus36.html">3.6</a>,
<br>
<a href="plus37.html">3.7</a>,
<a href="plus38.html">3.8</a>,
<a href="plus39.html">3.9</a>,
<a href="plus40.html">4.0</a>,
<a href="plus41.html">4.1</a>,
<a href="plus42.html">4.2</a>,
<a href="plus43.html">4.3</a>,
<a href="plus44.html">4.4</a>,
<a href="plus45.html">4.5</a>,
<a href="plus46.html">4.6</a>,
<a href="plus47.html">4.7</a>,
<a href="plus48.html">4.8</a>,
<a href="plus49.html">4.9</a>,
<a href="plus50.html">5.0</a>,
<a href="plus51.html">5.1</a>,
<a href="plus52.html">5.2</a>,
<a href="plus53.html">5.3</a>,
<br>
<a href="plus54.html">5.4</a>,
<a href="plus55.html">5.5</a>,
<a href="plus56.html">5.6</a>,
<a href="plus57.html">5.7</a>,
<a href="plus58.html">5.8</a>,
<a href="plus59.html">5.9</a>.
<br>

<p>
<h3><font color="#0000e0">Changes made between OpenBSD 5.9 and -current</font></h3>
<p>

<ul>
<!-- 2016-03-31 -->
<li>In <a href="http://man.openbsd.org/tftpd.8">tftpd(8)</a>, go in the background much later to reduce possible silent failures.
<li>If one of the TCP SYN cache buckets overflow, it might be a collision attack against the hash function. Mitigate this attack by reseeding the hash function as soon as possible.
<li>In <a href="http://man.openbsd.org/uslcom.4">uslcom(4)</a>, add support for the USB console port on Aruba 7xxx wireless controllers.
<!-- 2016-03-30 -->
<li>In <a href="http://man.openbsd.org/ssh.1">ssh(1)</a>, remove fallback from moduli to "primes" file that was deprecated in 2001 and fix log messages referring to primes file (bz#2559).
<li>In <a href="http://man.openbsd.org/wsmouse.4">wsmouse(4)</a>, add support for multitouch input.
<li>In <a href="http://man.openbsd.org/rdistd.1">rdistd(1)</a>, properly create directories that do not exist on the destination.
<li>Improve support for alphas without all IEEE-mode instructions.
<li>In <a href="http://man.openbsd.org/gcc.1">gcc(1)</a>, fix optimization for alphas without the "precise arithmetic trap" extension.
<li>In <a href="http://man.openbsd.org/tmux.1">tmux(1)</a>, bump the <a href="http://man.openbsd.org/listen.2">listen(2)</a> backlog up from 16 to 128.
<li>Implement proxy ARP for ART based on mpath support.
<li>In <a href="http://man.openbsd.org/acpi.4">acpi(4)</a>, hook up the gpio interrupt on devices that use it for card detection. This makes the SD card slot on machines based on Intel's Bay Trail SoC fully functional.
<li>In <a href="http://man.openbsd.org/bytgpio.4">bytgpio(4)</a>, add support for gpio-based interrupts.
<li>Add <a href="http://man.openbsd.org/getlogin_r.2">getlogin_r(2)</a> system call that checks and returns errors like the userspace getlogin_r() API.
<li>Remove MLINKS from base. They are no longer required by <a href="http://man.openbsd.org/mandoc.1">mandoc(1)</a>.
<!-- 2016-03-29 -->
<li>Enable <a href="http://man.openbsd.org/oce.4">oce(4)</a> on sparc64.
<li>In binutils, fix fallout from the switch to binutils 2.17: the binaries created by 2.17 aren't recognized by the in-tree <a href="http://man.openbsd.org/gdb.1">gdb(1)</a> because it's built with the bfd code from 2.15.
<li>Add the net.inet.tcp.synuselimit <a href="http://man.openbsd.org/sysctl.8">sysctl(8)</a> to adjust tcp_syn_use_limit. This is convenient to test the feature and may be useful to defend against syn flooding in a denial of service condition.
<li>In <a href="http://man.openbsd.org/authpf.8">authpf(8)</a>, avoid a dereference of a null object.
<!-- 2016-03-28 -->
<li>In <a href="http://man.openbsd.org/tcpdump.8">tcpdump(8)</a>, properly check for the end of captured packet while printing CDP packets.
<li>Ensure that a thread that calls <a href="http://man.openbsd.org/sched_yield.2">sched_yield(2)</a> ends up on the run queue behind all its sibling threads. This results in significant improvements for processes that suffer from lock, most notably firefox.
<li>Add <a href="http://man.openbsd.org/bytgpio.4">bytgpio(4)</a>, a driver for the gpio controllers found on Intel's Bay Trail SoC.
<!-- 2016-03-27 -->
<li>In <a href="http://man.openbsd.org/netstart.8">netstart(8)</a>, don't delete the 224/4 route unless it's being done to ensure that a -reject route can be added. This restores the ability to set an interface route before daemons are started.
<li>Avoid an attack that could prevent reseeding of the hash function used for the hash buckets in the TCP SYN cache.
<li>In <a href="http://man.openbsd.org/sdhc.4">sdhc(4)</a>, make it possible to override the standard card detect mechanism to appease the SD controller on Intel's Bay Trail SoC.
<li>Avoid a NULL pointer dereference when pulling and unmounting a <a href="http://man.openbsd.org/umass.4">umass(4)</a> USB stick.
<!-- 2016-03-26 -->
<li>In libssl, fix a memory leak.
<li>Switch from the SolidRun i.MX6 U-Boot to mainline U-Boot on the CuBox-i.
<li>Always include the route priority in routing messages.
<li>Do not populate RTAX_NETMASK when sending a routing message for RTF_HOST entries. This preserves old behavior with ART and fixes a regression.
<li>In <a href="http://man.openbsd.org/rc.d.8">rc.d(8)</a>, make it possible to get usage as a non-root user.
<li>In <a href="http://man.openbsd.org/less.1">less(1)</a> and <a href="http://man.openbsd.org/ul.1">ul(1)</a>, improve handling of ambiguous overstrike sequences.
<!-- 2016-03-24 -->
<li>In <a href="http://man.openbsd.org/gcc.1">gcc(1)</a> on arm, change the default arch target from strongarm (armv4) to arm9e (armv5te without xscale extensions).
<li>Enable ART (Allotment Routing Table).
<li>Ensure that a found proxy ARP entry has the correct flag.
<!-- 2016-03-23 -->
<li>In kernel clock, set ticks 15 seconds before its value wraps. This helps to identify issues around ticks wrap in 15 minutes instead of 240ish days.
<li>In <a href="http://man.openbsd.org/kdump.1">kdump(1)</a>, display NAMI records and AF_UNIX <a href="http://man.openbsd.org/socket.2">socket(2)</a> paths with <a href="http://man.openbsd.org/vis.3">vis(3)</a>.
<li>Update to tzdata2016c from ftp.iana.org.
<!-- 2016-03-22 -->
<li>In <a href="http://man.openbsd.org/pipex.4">pipex(4)</a>, don't leak an mbuf when copying a packet fails.
<li>Remove ARM10 and ARM11 support.
<li>Fix various issues with bad gateways being picked up by <a href="http://man.openbsd.org/bgpd.8">bgpd(8)</a>.
<li>Remove ARM9E support.
<!-- 2016-03-21 -->
<li>In <a href="http://man.openbsd.org/npppd.8">npppd(8)</a>, log the reply message from RADIUS server when the authentication fails.
<li>Add <a href="http://man.openbsd.org/pledge.2">pledge(2)</a> to <a href="http://man.openbsd.org/tokeninit.8">tokeninit(8)</a>.
<li>Rename <a href="http://man.openbsd.org/OpenBSD-5.9/sendsyslog2.2">sendsyslog2(2)</a> to <a href="http://man.openbsd.org/sendsyslog.2">sendsyslog(2)</a>.
<li>In <a href="http://man.openbsd.org/ral.4">ral(4)</a>, improvements for the RT2860 chip:
<ul>
<li>Fix watchdog timeouts and dropped frames under load.
<li>Fix a bug where oactive is not set and mbufs are dropped.
</ul>
<li>Add a counter in the TCP SYN cache and in <a href="http://man.openbsd.org/netstat.1">netstat(1)</a> -s to show how often the hash function is reseeded and the random bucket distribution changes.
<li>On octeon, use the list of the usable memory regions provided by U-Boot instead of the hardcoded regions in memory setup.
<li>In <a href="http://man.openbsd.org/ksh.1">ksh(1)</a>, make the "command" builtin POSIX-compliant and consistent with other current shells.
<!-- 2016-03-20 -->
<li>In <a href="http://man.openbsd.org/ld.so.1">ld.so(1)</a>, let the stack smash handler log to console directly if it is not possible to deliver to <a href="http://man.openbsd.org/syslogd.8">syslogd(8)</a>.
<li>In <a href="http://man.openbsd.org/vnet.4">vnet(4)</a>, plug a memory leak in <a href="http://man.openbsd.org/ioctl.2">ioctl(2)</a> code path.
<li>Many improvements of libedit, in particular with regard to UTF-8 support.
<li>In <a href="http://man.openbsd.org/axen.4">axen(4)</a>, initialize the hardware on reset. This allows it to attach reliably and pass traffic, and prevents a panic when unplugging it.
<li>Import libdrm 2.4.67.
<!-- 2016-03-19 -->
<li>Attach <a href="http://man.openbsd.org/dwctwo.4">dwctwo(4)</a> only on Octeon models that have a DWC2 controller.
<li>Remove support for StrongARM (SA1), IXP12x0, IXP425 and XScale 80200.
<!-- 2016-03-18 -->
<li>In <a href="http://man.openbsd.org/vi.1">vi(1)</a>, avoid a backwards <a href="http://man.openbsd.org/memcpy.3">memcpy(3)</a> when issuing ":e +something".
<li>In <a href="http://man.openbsd.org/tmux.1">tmux(1)</a>, make scrolling behaviour more sensible and maintain cursor position, as if the same had been done line-by-line.
<li>In <a href="http://man.openbsd.org/pkg_add.1">pkg_add(1)</a>, use a new _pkgfetch user for separation instead of the _pfetch user.
<li>Remove ARM8 and ARM9T support.
<!-- 2016-03-17 -->
<li>Add octuctl(4), a driver for the Octeon II USB Controller Interface, and attachments for <a href="http://man.openbsd.org/ehci.4">ehci(4)</a> and <a href="http://man.openbsd.org/ohci.4">ohci(4)</a>.
<li>In <a href="http://man.openbsd.org/puc.4">puc(4)</a>, add support for the TXIC TX382B (currently TX/RX FIFO is not working).
<!-- 2016-03-16 -->
<li>In <a href="http://man.openbsd.org/column.1">column(1)</a>, <a href="http://man.openbsd.org/lpq.1">lpq(1)</a>, <a href="http://man.openbsd.org/ls.1">ls(1)</a>, <a href="http://man.openbsd.org/newfs.8">newfs(8)</a>, <a href="http://man.openbsd.org/ps.1">ps(1)</a>, <a href="http://man.openbsd.org/rusers.1">rusers(1)</a>, <a href="http://man.openbsd.org/sed.1">sed(1)</a> and <a href="http://man.openbsd.org/growfs.8">growfs(8)</a>, use the COLUMNS environment variable first, and either terminal width or a hardcoded value (typically 80) as appropriate.
<li>In libssl, use <a href="http://man.openbsd.org/explicit_bzero.3">explicit_bzero(3)</a> for ASN1 objects on free. Too often these contain sensitive information.
<li>In <a href="http://man.openbsd.org/vi.1">vi(1)</a>, add error checking for the COLUMNS and LINES environment variables to avoid a crash.
<li>In <a href="http://man.openbsd.org/sd.4">sd(4)</a>, prevent a use-after-free of the scsi link structure during detach.
<li>Expose new and much simpler <a href="http://man.openbsd.org/audio.4">audio(4)</a> ioctls.
<!-- 2016-03-15 -->
<li>In <a href="http://man.openbsd.org/npppd.8">npppd(8)</a>, transition to "Req-Sent" had been missing when RTA in "Opened". This caused a timer event leak.
<li>Update to tzdata2016b from ftp.iana.org.
<li>Allocate amap slots for a virtual memory range reserved with <a href="http://man.openbsd.org/sbrk.2">sbrk(2)</a> lazily. This avoids wasting kernel memory if the user process does not make use of the allocated memory.
<li>For amaps with only a few slots, allocate the slots via <a href="http://man.openbsd.org/pool.9">pool(9)</a>. This saves some memory and reduces kmem pressure.
<li><font color="#e00000">5.9 RELIABILITY FIX: Incorrect path processing in pledge_namei() could result in unexpectedprogram termination of <a href="http://man.openbsd.org/pledge.2">pledge(2)</a>'d programs.</font><br>A source code patch is available for <a href="errata59.html#003_pledge">5.9</a>.
<li><font color="#e00000">5.7, 5.8 and 5.9 SECURITY FIX: Insufficient checks in IPv6 socket binding and UDP IPv6 option processing allow a local user to send UDP packets with a source (IPv6 address + port) already reserved by another user.</font><br>A source code patch is available for <a href="errata57.html#024_in6bind">5.7</a>, <a href="errata58.html#012_in6bind">5.8</a> and <a href="errata59.html#002_in6bind">5.9</a>.
<li>In <a href="http://man.openbsd.org/puc.4">puc(4)</a>, add support for the Exar XR17V354 device.
<!-- 2016-03-14 -->
<li>Remove the legacy <a href="http://man.openbsd.org/OpenBSD-5.9/uiomovei.9">uiomovei(3)</a> function. It has been replaced by <a href="http://man.openbsd.org/uiomove.9">uiomove(9)</a>.
<li>In <a href="http://man.openbsd.org/ssh.1">ssh(1)</a>, unbreak authentication using lone certificate keys in ssh-agent (bz#2550).
<li>In <a href="http://man.openbsd.org/acpicpu.4">acpicpu(4)</a>, correct the value of SRT_ENDTAG: it was documented incorrectly in early ACPI specs.
<!-- 2016-03-13 -->
<li>In libfontconfig, enable atomics operations on mips64 and mips64el.
<li>In <a href="http://man.openbsd.org/vmm.4">vmm(4)</a>, introduce memory ranges to support VMs with 4G or more of RAM.
<li>In <a href="http://man.openbsd.org/ichiic.4">ichiic(4)</a>, ignore the SMBALERT# interrupt. This fixes booting the GENERIC kernel on ADI RCC-VE with buggy BIOS versions, rendering the internal eMMC flash unusable.
<li>In <a href="http://man.openbsd.org/kdump.1">kdump(1)</a>, recognize ipmi, vscsi, pvbus, udl, fuse, trunk, pipex and memrange <a href="http://man.openbsd.org/ioctl.2">ioctl(2)</a> requests.
<!-- 2016-03-11 -->
<li>In <a href="http://man.openbsd.org/sd.4">sd(4)</a>, avoid a kernel panic when unplugging an USB umass stick because of a use after free.
<li>Avoid corrupt mount points without a valid device when unmounting.
<!-- 2016-03-10 -->
<li><font color="#e00000">5.7, 5.8 and 5.9 SECURITY FIX: Lack of credential sanitization allows injection of commands to <a href="http://man.openbsd.org/xauth.1">xauth(1)</a>.</font><br>A source code patch is available for <a href="errata57.html#014_sshd">5.7</a>, <a href="errata58.html#011_sshd">5.8</a> and <a href="errata59.html#001_sshd">5.9</a>.
<li>In <a href="http://man.openbsd.org/ssh.1">ssh(1)</a>, sanitise characters destined for <a href="http://man.openbsd.org/xauth.1">xauth(1)</a>.
<li>In <a href="http://man.openbsd.org/isakmpd.8">isakmpd(8)</a>, don't retransmit responses for unauthenticated messages.
<!-- 2016-03-09 -->
<li>Remove support for vax.
<li>In <a href="http://man.openbsd.org/fdisk.8">fdisk(8)</a> and <a href="http://man.openbsd.org/pdisk.8">pdisk(8)</a>, accept only a character special device as disk.
<!-- 2016-03-08 -->
<li>Rework how <a href="http://man.openbsd.org/mpw.4">mpw(4)</a> interacts with <a href="http://man.openbsd.org/vlan.4">vlan(4)</a>. This will allow vlan(4) to become MP-safe.
<li>In <a href="http://man.openbsd.org/xterm.1">xterm(1)</a>, use UTF-8 mode by default.
<li>In <a href="http://man.openbsd.org/httpd.8">httpd(8)</a>, set the content charset for auto index generated pages.
<!-- 2016-03-07 -->
<li>Make "cp -i" behave as "mv -i" or "rm -i", independently of whether stdin is a tty or not.
<li>Do not remove RTF_STATIC L2 entries from the routing table. Static entries might not have a cloning route to re-create them and hence be gone when their timer expires.
<!-- 2016-03-06 -->
<li>In <a href="http://man.openbsd.org/kdump.1">kdump(1)</a>, improve display of unknown and KTR_START records.
<li>Avoid refetching blocks already in the buffer cache. This significantly improves read operations on MSDOSFS.
<li>Update to xrandr 1.5.0.
<li>Update to libXrandr 1.5.0.
<li>In <a href="http://man.openbsd.org/ksh.1">ksh(1)</a>, make "set +o" conform with POSIX.
<li>Tweak uvm assertions to avoid locking in some cases.
<!-- 2016-03-05 -->
<li>In <a href="http://man.openbsd.org/file.1">file(1)</a>, sync "archive" magic from file 5.25.
<li>In <a href="http://man.openbsd.org/ntpd.8">ntpd(8)</a> constraints, avoid using %Z specification of <a href="http://man.openbsd.org/strptime.3">strptime(3)</a> which disagress with RFC7231 and can give surprising results on other operating systems.
<li>In <a href="http://man.openbsd.org/tmux.1">tmux(1)</a>, improve UTF-8 locale checking.
<li>Update to unbound 1.5.8.
<li>In <a href="http://man.openbsd.org/ksh.1">ksh(1)</a>, fix POSIX-compliant behavior of "set -u" regarding "$*" and "$@" specials.
<li>Almost completely rewrite <a href="http://man.openbsd.org/mknod.8">mknod(8)</a> in order to allow a speedup of <a href="http://man.openbsd.org/MAKEDEV.8">MAKEDEV(8)</a>.
<li>In <a href="http://man.openbsd.org/tmux.1">tmux(1)</a>, avoid accessing a NULL pointer.
<!-- 2016-03-04 -->
<li>In <a href="http://man.openbsd.org/vmd.8">vmd(8)</a>, set root device to sd0a, instead of wd0a.
<li>In <a href="http://man.openbsd.org/ksh.1">ksh(1)</a>:
<ul>
<li>Don't parse (...|...) patterns in variable substitution inside double quotes. This fixes a POSIX compatibility issue.
<li>Remove the mknod builtin.
</ul>
<!-- 2016-03-03 -->
<li>In <a href="http://man.openbsd.org/ssh.1">ssh(1)</a>, fix ClientAliveInterval when a time-based RekeyLimit is set (bz#2252).
<li>In <a href="http://man.openbsd.org/tmux.1">tmux(1)</a>:
<ul>
<li>Avoid mixing up RGB colours with aixterm colours.
<li>Make the show-* and set-* commands handle a missing target.
</ul>
<li>On amd64 and i386, unwind the trapframe correctly when a breakpoint is set on "syscall". This prevents a fault in <a href="http://man.openbsd.org/ddb.4">ddb(4)</a> on amd64.
<li>Remove the machdep.userldt <a href="http://man.openbsd.org/sysctl.8">sysctl(8)</a>.
<li>In <a href="http://man.openbsd.org/ieee80211.9">ieee80211(9)</a>, restore an assignment of device current mode. This fixes <a href="http://man.openbsd.org/iwi.4">iwi(4)</a> fatal firmware errors.
<!-- 2016-03-02 -->
<li>Bump link_maxhdr (the space reserved before an ip packet payload for link headers) from 16 to 64.
<li>In <a href="http://man.openbsd.org/scp.1">scp(1)</a>, improve accuracy of reported transfer speeds.
<li>In <a href="http://man.openbsd.org/sftp.1">sftp(1)</a> and <a href="http://man.openbsd.org/scp.1">scp(1)</a>, improve precision of the progress meter.
<li>In <a href="http://man.openbsd.org/tmux.1">tmux(1)</a>, improve <a href="http://man.openbsd.org/wcwidth.1">wcwidth(1)</a> and <a href="http://man.openbsd.org/mctowc.1">mbtowc(1)</a> error handling.
<li>Remove Linux emulation support.
<li>In libssl, add bounds checking for read_ledword().
<!-- 2016-03-01 -->
<li>In libssl, add bounds checking for <a href="http://man.openbsd.org/BN_hex2bn.3">BN_hex2bn(3)</a> and <a href="http://man.openbsd.org/BN_dec2bn.3">BN_dec2bn(3)</a>.
<li>In <a href="http://man.openbsd.org/acpi.4">acpi(4)</a>, add more Windows versions for _OSI checks.
<li>In <a href="http://man.openbsd.org/cpsw.4">cpsw(4)</a>, detect and only enable the port that is actually used. This avoids device timeouts. Also enable interrupt pacing to limit interrupts at 2K/s.
<li>Set the IFF_MULTICAST flag on <a href="http://man.openbsd.org/tun.4">tun(4)</a> interfaces so IPv6 addresses can be assigned.
<li>In <a href="http://man.openbsd.org/diff.1">diff(1)</a>, rectify line numbers for "s/.//" commands in ed-style diffs.
<li>In libedit, fix a segfault and functional error in c_gets().
<li>In libssl, remove support for ancient, broken DSA implementations.
<!-- 2016-02-28 -->
<li>Fix a bug when IPsec UDP encapsulation is used for IPv6.
<!-- 2016-02-27 -->
<li>In <a href="http://man.openbsd.org/gcc.1">gcc(1)</a>, fix an Internal Compiler Error on alpha when using __sync builtins.
<!-- 2016-02-26 -->
<li>In <a href="http://man.openbsd.org/fnmatch.3">fnmatch(3)</a>, fix negation of POSIX character classes.
<li>Prevent a memory leak in <a href="http://man.openbsd.org/vnet.4">vnet(4/sparc64)</a>.
<li>Valdate fs_maxsymlinklen in the superblock of ffs and ext2fs filesystems to avoid use of bogus data.
<!-- 2016-02-25 -->
<li>On alpha and sh, now that time_t is 64-bit, no longer ignore the hardware clock when it reports a year after 2037.
</ul>
<p>

</body>
</html>