version 1.32, 2021/09/19 19:22:17 |
version 1.33, 2021/10/08 16:31:36 |
|
|
<li><a href="https://man.openbsd.org/iked.8">iked(8)</a> now drops duplicate requests, to avoid corrupt child-SA tables. |
<li><a href="https://man.openbsd.org/iked.8">iked(8)</a> now drops duplicate requests, to avoid corrupt child-SA tables. |
<li>Made <a href="https://man.openbsd.org/iked.8">iked(8)</a> discard & free duplicate IKESAs; made sure new SAs are not created that cannot be inserted in the SA tree. |
<li>Made <a href="https://man.openbsd.org/iked.8">iked(8)</a> discard & free duplicate IKESAs; made sure new SAs are not created that cannot be inserted in the SA tree. |
<li>Include hexdump in <a href="https://man.openbsd.org/iked.8">iked(8)</a> debug output only for -vvv. |
<li>Include hexdump in <a href="https://man.openbsd.org/iked.8">iked(8)</a> debug output only for -vvv. |
<li>Support raw pubkey authentication w/o x509 certificates in <a href="https://man.openbsd.org/iked.8">iked(8)</a>. |
<li>Support raw pubkey authentication w/o X.509 certificates in <a href="https://man.openbsd.org/iked.8">iked(8)</a>. |
<li>When <a href="https://man.openbsd.org/wpi.4">wpi(4)</a> has a fatal firmware error, reset the chip, reload the firmware and bring the interface up again. |
<li>When <a href="https://man.openbsd.org/wpi.4">wpi(4)</a> has a fatal firmware error, reset the chip, reload the firmware and bring the interface up again. |
<li>Limit the number of envelopes to recall in the <a href="https://man.openbsd.org/smtpd.8">smtpd(8)</a> hoststat cache. |
<li>Limit the number of envelopes to recall in the <a href="https://man.openbsd.org/smtpd.8">smtpd(8)</a> hoststat cache. |
<li>Removed some double frees in <a href="https://man.openbsd.org/fuse.4">fuse(4)</a>. |
<li>Removed some double frees in <a href="https://man.openbsd.org/fuse.4">fuse(4)</a>. |
|
|
<li>Made <a href="https://man.openbsd.org/athn.4">athn(4)</a> tick calculation work as intended. Should fix excessive timeouts and "Michael mic" errors. |
<li>Made <a href="https://man.openbsd.org/athn.4">athn(4)</a> tick calculation work as intended. Should fix excessive timeouts and "Michael mic" errors. |
<li>Cope with the EAGAIN API change for <a href="https://man.openbsd.org/msgbuf_write.3">msgbuf_write(3)</a> in various daemons. |
<li>Cope with the EAGAIN API change for <a href="https://man.openbsd.org/msgbuf_write.3">msgbuf_write(3)</a> in various daemons. |
<li>Improvements for <a href="https://man.openbsd.org/sppp.4">sppp(4)</a> address assignment and related issues in IPv6CP; deal with IFID collisions instead of ignoring them; use <a href="https://man.openbsd.org/arc4random.3">arc4random(3)</a> during IFID generation; assign destination address to /128 point-to-point links. |
<li>Improvements for <a href="https://man.openbsd.org/sppp.4">sppp(4)</a> address assignment and related issues in IPv6CP; deal with IFID collisions instead of ignoring them; use <a href="https://man.openbsd.org/arc4random.3">arc4random(3)</a> during IFID generation; assign destination address to /128 point-to-point links. |
<li>Fixed <a href="https://man.openbsd.org/isakmpd.8">isakmpd(8)</a> parameter types for x509 routines. |
<li>Fixed <a href="https://man.openbsd.org/isakmpd.8">isakmpd(8)</a> parameter types for X.509 routines. |
<li>Be more specific in <a href="https://man.openbsd.org/ksh.1">ksh(1)</a> ulimit error messages. |
<li>Be more specific in <a href="https://man.openbsd.org/ksh.1">ksh(1)</a> ulimit error messages. |
<li>Fixed ^C handling in miniroot. |
<li>Fixed ^C handling in miniroot. |
<!-- 2013/11/14 --> |
<!-- 2013/11/14 --> |
|
|
<li>Enabled TX checksum offload in <a href="https://man.openbsd.org/jme.4">jme(4)</a>. |
<li>Enabled TX checksum offload in <a href="https://man.openbsd.org/jme.4">jme(4)</a>. |
<li>Removed unnecessary spinlock that slowed down <a href="https://man.openbsd.org/pthread_getspecific.3">pthread_getspecific(3)</a>. |
<li>Removed unnecessary spinlock that slowed down <a href="https://man.openbsd.org/pthread_getspecific.3">pthread_getspecific(3)</a>. |
<li>Use curve25519 for default <a href="https://man.openbsd.org/sshd.8">sshd(8)</a> key exchange (curve25519-sha256@libssh.org). |
<li>Use curve25519 for default <a href="https://man.openbsd.org/sshd.8">sshd(8)</a> key exchange (curve25519-sha256@libssh.org). |
<li>Let <a href="https://man.openbsd.org/ssh.1">ssh(1)</a> support pkcs#11 tokens that only provide x509 certificates instead of raw pubkeys (fixes bz#1908). |
<li>Let <a href="https://man.openbsd.org/ssh.1">ssh(1)</a> support pkcs#11 tokens that only provide X.509 certificates instead of raw pubkeys (fixes bz#1908). |
<li>Replaced rc4 with ChaCha20 in <a href="https://man.openbsd.org/crypto.9">crypto(9)</a>. |
<li>Replaced rc4 with ChaCha20 in <a href="https://man.openbsd.org/crypto.9">crypto(9)</a>. |
<li>Made sure <a href="https://man.openbsd.org/login_yubikey.8">login_yubikey(8)</a> does not log passwords, even if they are wrong. |
<li>Made sure <a href="https://man.openbsd.org/login_yubikey.8">login_yubikey(8)</a> does not log passwords, even if they are wrong. |
<li>Bring back spnego support into <a href="https://man.openbsd.org/kerberos.8">kerberos(8)</a> gssapi as it used to be before the update to 1.5.2. |
<li>Bring back spnego support into <a href="https://man.openbsd.org/kerberos.8">kerberos(8)</a> gssapi as it used to be before the update to 1.5.2. |