Annotation of www/plus57.html, Revision 1.34
1.21 bentley 1: <!doctype html>
2: <html lang=en id=plus>
3: <meta charset=utf-8>
1.12 tj 4: <title>OpenBSD 5.7 Changelog</title>
1.1 deraadt 5: <meta name="description" content="OpenBSD 5.7 changes">
1.11 deraadt 6: <meta name="viewport" content="width=device-width, initial-scale=1">
7: <link rel="stylesheet" type="text/css" href="openbsd.css">
1.14 tb 8: <link rel="canonical" href="https://www.openbsd.org/plus57.html">
1.21 bentley 9: <style>
10: strong {
11: color: var(--red);
12: font-weight: normal;
13: }
1.1 deraadt 14:
1.21 bentley 15: h3 {
16: color: var(--blue);
17: }
18: </style>
1.1 deraadt 19:
1.21 bentley 20: <h2 id=OpenBSD>
1.11 deraadt 21: <a href="index.html">
1.21 bentley 22: <i>Open</i><b>BSD</b></a>
23: 5.7 Changelog
1.12 tj 24: </h2>
1.1 deraadt 25: <hr>
26:
27: <p>
28: This selection is intended to include all important
29: and all user-visible changes.
30: For a complete record of all changes, please see the "source-changes"
31: mailing list, called "OpenBSD CVS"
1.26 tj 32: in the <a href="https://marc.info/?l=openbsd-cvs">archives</a>,
1.1 deraadt 33: or use <a href="anoncvs.html#CVS">CVS</a>.
34:
35: <p>
1.21 bentley 36: Note: <strong>Problems for which patches exist are marked in red</strong>.
1.1 deraadt 37:
38: <p>
39: For changes in other releases, click below:<br>
40: <a href="plus20.html">2.0</a>,
41: <a href="plus21.html">2.1</a>,
42: <a href="plus22.html">2.2</a>,
43: <a href="plus23.html">2.3</a>,
44: <a href="plus24.html">2.4</a>,
45: <a href="plus25.html">2.5</a>,
46: <a href="plus26.html">2.6</a>,
47: <a href="plus27.html">2.7</a>,
48: <a href="plus28.html">2.8</a>,
49: <a href="plus29.html">2.9</a>,
50: <a href="plus30.html">3.0</a>,
51: <a href="plus31.html">3.1</a>,
52: <a href="plus32.html">3.2</a>,
53: <a href="plus33.html">3.3</a>,
54: <a href="plus34.html">3.4</a>,
55: <a href="plus35.html">3.5</a>,
56: <a href="plus36.html">3.6</a>,
57: <br>
58: <a href="plus37.html">3.7</a>,
59: <a href="plus38.html">3.8</a>,
60: <a href="plus39.html">3.9</a>,
61: <a href="plus40.html">4.0</a>,
62: <a href="plus41.html">4.1</a>,
63: <a href="plus42.html">4.2</a>,
64: <a href="plus43.html">4.3</a>,
65: <a href="plus44.html">4.4</a>,
66: <a href="plus45.html">4.5</a>,
67: <a href="plus46.html">4.6</a>,
68: <a href="plus47.html">4.7</a>,
69: <a href="plus48.html">4.8</a>,
70: <a href="plus49.html">4.9</a>,
71: <a href="plus50.html">5.0</a>,
72: <a href="plus51.html">5.1</a>,
73: <a href="plus52.html">5.2</a>,
74: <a href="plus53.html">5.3</a>,
75: <br>
76: <a href="plus54.html">5.4</a>,
77: <a href="plus55.html">5.5</a>,
78: <a href="plus56.html">5.6</a>,
1.6 deraadt 79: <a href="plus58.html">5.8</a>,
1.8 deraadt 80: <a href="plus59.html">5.9</a>,
1.13 deraadt 81: <a href="plus60.html">6.0</a>,
1.15 deraadt 82: <a href="plus61.html">6.1</a>,
1.17 deraadt 83: <a href="plus62.html">6.2</a>,
1.18 deraadt 84: <a href="plus63.html">6.3</a>,
1.19 deraadt 85: <a href="plus64.html">6.4</a>,
1.20 pamela 86: <a href="plus65.html">6.5</a>,
1.22 pamela 87: <a href="plus66.html">6.6</a>,
1.23 deraadt 88: <a href="plus67.html">6.7</a>,
1.25 pamela 89: <a href="plus68.html">6.8</a>,
90: <a href="plus69.html">6.9</a>,
1.27 deraadt 91: <a href="plus70.html">7.0</a>,
1.28 deraadt 92: <a href="plus71.html">7.1</a>,
1.30 deraadt 93: <br>
1.29 deraadt 94: <a href="plus72.html">7.2</a>,
1.31 tj 95: <a href="plus73.html">7.3</a>,
1.32 tj 96: <a href="plus74.html">7.4</a>,
1.33 tj 97: <a href="plus75.html">7.5</a>,
1.1 deraadt 98: <a href="plus.html">current</a>.
99: <br>
100:
101: <p>
1.21 bentley 102: <h3>Changes made between OpenBSD 5.6 and 5.7</h3>
1.1 deraadt 103: <p>
104:
105: <ul>
106: <!-- 2014/11/18 -->
1.21 bentley 107: <li>Update <a href="https://man.openbsd.org/unbound.8">unbound(8)</a> to 1.5.0.
108: <li>In <a href="https://man.openbsd.org/mandoc.1">mandoc(1)</a>, make .Ao and .Aq renders as "<>" after .An, and as "\(la\(ra" elsewhere, just like groff.
109: <li>Fixed for <a href="https://man.openbsd.org/mandoc.1">mandoc(1)</a> db for NAME_FIRST before its first use, NAME_FILE duplication and correct NAME_FILE mask for .so links.
110: <li>Delete KERN_VNODE <a href="https://man.openbsd.org/sysctl.3">sysctl(3)</a>.
1.1 deraadt 111: <!-- 2014/11/18 -->
1.21 bentley 112: <li>Add support for exporting <a href="https://man.openbsd.org/relayd.8">relayd(8)</a> statistics via AgentX/<a href="https://man.openbsd.org/snmpd.8">snmpd(8)</a>.
113: <li>Add support for AgentX subagents in <a href="https://man.openbsd.org/snmpd.8">snmpd(8)</a>.
1.1 deraadt 114: <li>Fix ssl memory leak with pkey in client key exchange.
1.21 bentley 115: <li>Bugfix for <a href="https://man.openbsd.org/grdc.6">grdc(6)</a> to run for the specified amount of seconds, not for a fixed amount of iterations. Makes a difference on slow terminals.
116: <li>Make <a href="https://man.openbsd.org/mandoc.1">mandoc(1)</a> let escape sequences terminate high-level macro names, and when doing so, they are ignored.
1.1 deraadt 117: <li>Make binutils recognize sahf/lahf for amd64 code, backported from 2.17.
1.21 bentley 118: <li>For newer <a href="https://man.openbsd.org/re.4">re(4)</a> chipsets, add support for stopping the operation within re_stop().
119: <li>Let <a href="https://man.openbsd.org/mandoc.1">mandoc(1)</a> support the ".if v" conditional operater for groff compatibility.
120: <li>Sync <a href="https://man.openbsd.org/ssh.1">ssh(1)</a> AES code to the one shipped with OpenSSL/LibreSSL.
1.1 deraadt 121: <li>Make binutils recognize dcbzl for PPC code, backported from 2.17.
122: <li>Disable the page zeroing thread on MP mips64 kernels.
1.21 bentley 123: <li>Added support for sigwinch resizing in <a href="https://man.openbsd.org/grdc.6">grdc(6)</a>.
124: <li>Make <a href="https://man.openbsd.org/mandoc.1">mandoc(1)</a> ignore invalid directories in man.conf and MANPATH, but complain about invalid directories given on the command line.
125: <li>Avoid iteration over end of string in <a href="https://man.openbsd.org/patch.1">patch(1)</a>.
1.1 deraadt 126: <li>On ppc platforms, make pmap_zero_page MP-safe by using the directmap.
127: <!-- 2014/11/19 -->
128: <li>Enable GOST cipher in libcrypto.
1.21 bentley 129: <li>For <a href="https://man.openbsd.org/cas.4">cas(4)</a>, use pa_device to ensure each MAC address of a multi port board is unique.
130: <li>When running <a href="https://man.openbsd.org/mandoc.1">mandoc(1)</a> in <a href="https://man.openbsd.org/man.1">man(1)</a> mode, set match order to file name over .Dt name over first .Nm entries over other NAME .Nm enties over SYNOPSIS .Nm entries. Re-run "makewhatis" to effectuate this change.
131: <li>Fix NULL pointer dereference in <a href="https://man.openbsd.org/ssh.1">ssh(1)</a> key loading.
132: <li>Activate support in <a href="https://man.openbsd.org/pkg-config.1">pkg-config(1)</a> for "package != version" requests.
1.1 deraadt 133: <li>Imported perl 5.20.1.
134: <li>Add Cammelia cipher to libcrypto.
135: <li>Make /var/tmp a symbolic link to /tmp. Move /tmp to the same 7-day expiration that /var/tmp had.
1.21 bentley 136: <li>Added new function to libc, <a href="https://man.openbsd.org/crypt_newhash.3">crypt_newhash(3)</a>.
1.1 deraadt 137: <li>Add quirks for "Realtek ALC885" found on MacMini3.1, unmutes the internal speaker, line input and hp output.
138: <!-- 2014/11/17 -->
1.21 bentley 139: <li>Reduce <a href="https://man.openbsd.org/dhclient.8">dhclient(8)</a> risk by putting config file reading after forking the privilege separated child process but before getting hardware link.
1.1 deraadt 140: <li>Sync kernel AES code to the one shipped with OpenSSL/LibreSSL.
1.21 bentley 141: <li>Make <a href="https://man.openbsd.org/usbdevs.8">usbdevs(8)</a> show super speed status in verbose output mode.
142: <li>In <a href="https://man.openbsd.org/ssh.1">ssh(1)</a>, fix KRL generation when multiple CAs are in use.
143: <li>Make <a href="https://man.openbsd.org/mandoc.1">mandoc(1)</a> correctly handle whitespace-only lines in regard to vbl and vis variables.
144: <li>Two fixes to make Qemu and VMWare <a href="https://man.openbsd.org/xhci.4">xhci(4)</a> implementations work, always unmask the slow context for the Set Address command and use the right spl when wubmitting a transfer.
1.1 deraadt 145: <!-- 2014/11/16 -->
1.21 bentley 146: <li>Allow <a href="https://man.openbsd.org/cas.4">cas(4)</a> to retrieve the MAC address from the rom for NS Saturn based boards.
1.1 deraadt 147: <li>Reworked the sigwait() handling to fix ptrace() in some circumstances.
1.21 bentley 148: <li>Add <a href="https://man.openbsd.org/cas.4">cas(4)</a> devices to i386 and amd64 GENERIC kernels.
1.1 deraadt 149: <li>Change librthread to not restart syscalls on SIGTHR.
150: <li>Fix in librthread to allow check for cancellation when a handled (but not waited for) signal occurs.
151: <li>Use newly imported siphash algorithm for in_pcb hashing.
152: <!-- 2014/11/15 -->
1.21 bentley 153: <li>In <a href="https://man.openbsd.org/dhclient.8">dhclient(8)</a>, make -q and -d mutually exclusive.
154: <li>Removed 'tcl' command from <a href="https://man.openbsd.org/vi.1">vi(1)</a>.
155: <li>On <a href="https://man.openbsd.org/ifconfig.8">ifconfig(8)</a>, move <a href="https://man.openbsd.org/trunk.4">trunk(4)</a> code outside #ifdef SMALL to allow trunk operation on RAMDISK kernels.
1.1 deraadt 156: <!-- 2014/11/14 -->
157: <li>Implement atomic_* ops for the arm platform.
1.21 bentley 158: <li>In <a href="https://man.openbsd.org/mandoc.1">mandoc(1)</a>, remove harmful byte swapping on big endian architectures.
1.1 deraadt 159: <!-- 2014/11/13 -->
1.21 bentley 160: <li>Fix reversed logic when selecting log level in <a href="https://man.openbsd.org/npppd.8">npppd(8)</a>.
161: <li>Fixed use after free in <a href="https://man.openbsd.org/npppd.8">npppd(8)</a> when pool addresses change.
162: <li>Add -b to splitw in <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> like in joinw.
1.1 deraadt 163: <li>In the performance adjustment code, take a few more ticks before throttling down to handle situation where it is cpu intense but intermittenly idle.
1.21 bentley 164: <li>In <a href="https://man.openbsd.org/tmux.1">tmux(1)</a>, don't let force-width or force-height be less tha PANE_MINIMUM.
1.1 deraadt 165: <!-- 2014/11/12 -->
166: <li>Store autoinstaller logfile in /mnt/var/log to be available after reboot.
167: <li>Updated time zone data to tzdata2014j.
168: <li>Do not hold the kernel lock when calling hardclock() and statclock().
169: <li>When exploring the usb buses, do not probe the ports which status hasn't changed. Saves a lot of I/O when attaching/detaching devices.
170: <li>Tweaked DHCPACK to DHCPINFORM log entries to more informative.
1.21 bentley 171: <li>Speedup in <a href="https://man.openbsd.org/mandoc.1">mandoc(1)</a> in <a href="https://man.openbsd.org/man.1">man(1)</a> mode without -a, stop searching after the first manual tree that contained at least one match.
172: <li>Stop <a href="https://man.openbsd.org/athn.4">athn(4)</a> from attaching to AR9300 devices due to unresolveed bugs.
173: <li>For <a href="https://man.openbsd.org/httpd.8">httpd(8)</a>, allow the log directory be configurable in the config file, rather than having it fixed as /logs in the chroot.
174: <li>In <a href="https://man.openbsd.org/xhci.4">xhci(4)</a>, do not reset the base address of the control endpoints ring when the second Set Address command is issued.
175: <li>Make <a href="https://man.openbsd.org/pf.4">pf(4)</a> ask for ICMPv6 checksum recalculation in pf_route6 since the addresses may have been tweaked.
176: <li><a href="https://man.openbsd.org/bgpd.8">bgpd(8)</a> now outputs 32bit AS numbers in ASPLAIN format by default instead of AS_DOT+.
1.1 deraadt 177: <!-- 2014/11/11 -->
1.21 bentley 178: <li>Socket closing fixes in the client <a href="https://man.openbsd.org/rpc.3">rpc(3)</a> code.
179: <li>Implemented -h in <a href="https://man.openbsd.org/mandoc.1">mandoc(1)</a> for preformatted (cat) pages.
180: <li>Fix for <a href="https://man.openbsd.org/ix.4">ix(4)</a> SFP+ module detection when booting without the modules plugged in.
181: <li>Added support for USB 1.x devices below external hubs on <a href="https://man.openbsd.org/xhci.4">xhci(4)</a>.
182: <li>Make sure <a href="https://man.openbsd.org/httpd.8">httpd(8)</a> does't try to open log files when using syslog.
183: <li>Changed the <a href="https://man.openbsd.org/xhci.4">xhci(4)</a> attach logic to set the address of a device. Fixes issues seen on root hubs with some Low/Full speed devices.
1.1 deraadt 184: <li>Plug an rtentry leak in route code.
185: <!-- 2014/11/10 -->
1.21 bentley 186: <li>Fix <a href="https://man.openbsd.org/pf.4">pf(4)</a> state linking used to implement transparent relays for connectionless protocols.
1.1 deraadt 187: <li>Added GOST crypto algorithms to libcrypto. Not enabled yet.
1.21 bentley 188: <li>Make <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> expand formats in copy-pipe command.
1.1 deraadt 189: <!-- 2014/11/09 -->
1.21 bentley 190: <li>When a <a href="https://man.openbsd.org/usb.4">usb(4)</a> pipe is closed, only clear the memory of the corresponding endpoint context. Fixes a panic.
1.1 deraadt 191: <!-- 2014/11/08 -->
1.21 bentley 192: <li>Stopped <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> extending the line to full width on insert/delete character (leaves extra spaces when reflowing); only mark a line wrapped when the cursor actually goes off the end (not on newlines).
1.1 deraadt 193: <li>If resuming from sleep (zzz/ZZZ) and the lid is still closed, go back to sleep. Prevents accidental lid flex from waking the machine up.
194: <!-- 2014/11/07 -->
195: <li>Libtool moved to the comp set.
1.21 bentley 196: <li>Enabled <a href="https://man.openbsd.org/xhci.4">xhci(4)</a> on i386 and amd64, for USB 3.0 support.
197: <li>Fixed problems with <a href="https://man.openbsd.org/iked.8">iked(8)</a> EAP state transition. Allows Win7 to establish the a tunnel again.
198: <li>Fixed a race (and panic) in <a href="https://man.openbsd.org/xhci.4">xhci(4)</a> when submitting a command by using the appropriate <a href="https://man.openbsd.org/spl.9">spl(9)</a> protection.
199: <li>Removed the SSLv2 option from <a href="https://man.openbsd.org/relayd.8">relayd(8)</a>; made "no sslv3" work as intended.
1.1 deraadt 200: <!-- 2014/11/06 -->
1.21 bentley 201: <li>Added <a href="https://man.openbsd.org/bcd.6">bcd(6)</a> -l option to create "modern" 80 column cards.
202: <li>Made <a href="https://man.openbsd.org/malloc.9">malloc(9)</a> calculate correct size before doing the free checks, to fix recent panics.
203: <li>Enabled TLS extensions in <a href="https://man.openbsd.org/ssl.8">ssl(8)</a>.
204: <li>Fixed mac address selection with unnumbered carpdevs when using <a href="https://man.openbsd.org/carp.4">carp(4)</a>.
205: <li>When <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> copy mode is used for output, wrap the text.
206: <li>Removed old curses support from <a href="https://man.openbsd.org/vi.1">vi(1)</a>.
207: <li>Added V for <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> "select line" with <a href="https://man.openbsd.org/vi.1">vi(1)</a> keys.
1.1 deraadt 208: <!-- 2014/11/05 -->
1.21 bentley 209: <li>In <a href="https://man.openbsd.org/smtpd.8">smtpd(8)</a>, stopped prepending the user ID in the local enqueuing "Received" line.
210: <li>Implemented workaround for <a href="https://man.openbsd.org/em.4">em(4)</a> i218 watchdog timeouts that are triggered by heavy traffic.
1.1 deraadt 211: <!-- 2014/11/04 -->
1.21 bentley 212: <li>Fixed <a href="https://man.openbsd.org/sd.4">sd(4)</a> cards with rev C BeagleBone Blacks.
213: <li>Added <a href="https://man.openbsd.org/rgephy.4">rgephy(4)</a> for the RTL8211E phy in the LeMaker Banana Pi and Banana Pro.
214: <li>Added <a href="https://man.openbsd.org/atphy.4">atphy(4)</a> to armv7, for the Atheros AR8031 phys in the AM335x starter kit.
1.1 deraadt 215: <!-- 2014/11/03 -->
216: <li>Introduced SipHash (https://131002.net/siphash/), useful when adding protection against hash bucket flooding attacks.
1.34 ! bentley 217: <li>Allow the five <a href="https://man.openbsd.org/man.7">man(7)</a> font macros to concatenate their line arguments. Removes bogus <br/> when font macros are used in -Thtml "no-fill" mode.
1.21 bentley 218: <li>Stopped <a href="https://man.openbsd.org/dhclient.8">dhclient(8)</a> leaking static leases when the "lease {}" parsing fails or when a static lease supersedes an earlier one.
219: <li>Fixed kernel stack overflow in <a href="https://man.openbsd.org/carp.4">carp(4)</a> by preventing carp_send_ad_all() from re-entrant calls.
220: <li>Stopped changing the gateway of local <a href="https://man.openbsd.org/route.4">route(4)</a> for p2p interfaces. Prevents a panic.
1.1 deraadt 221: <!-- 2014/11/02 -->
1.21 bentley 222: <li>Updated to <a href="https://man.openbsd.org/xterm.1">xterm(1)</a> version 312.
1.1 deraadt 223: <!-- 2014/11/01 -->
1.21 bentley 224: <li>Use the correct default MaxPacketSize for Full Speed <a href="https://man.openbsd.org/usb.4">usb(4)</a> devices and make them work with <a href="https://man.openbsd.org/xhci.4">xhci(4)</a>.
225: <li>In <a href="https://man.openbsd.org/passwd.1">passwd(1)</a>, removed support for all password cyphers except <a href="https://man.openbsd.org/blowfish.3">blowfish(3)</a>.
1.1 deraadt 226: <!-- 2014/10/31 -->
1.21 bentley 227: <li>Removed ephemeral RSA key handling from <a href="https://man.openbsd.org/ssl.8">ssl(8)</a>.
228: <li>Add support for automatic DH ephemeral keys in <a href="https://man.openbsd.org/ssl.8">ssl(8)</a>, so DH keys can be generated based on the server key length; use automatic DH ephemeral parameters instead of fixed 512 bit.
229: <li>Removed <a href="https://man.openbsd.org/ssl.8">ssl(8)</a> support for ephemeral/temporary RSA private keys.
1.1 deraadt 230: <li>Renamed libressl to libtls, to avoid confusion.
231: <!-- 2014/10/30 -->
1.21 bentley 232: <li>Major bugsquashing with respect to -offset and -width in <a href="https://man.openbsd.org/mdoc.7">mdoc(7)</a>.
233: <li>Do not enable interrupts before attaching <a href="https://man.openbsd.org/usb.4">usb(4)</a>. Fixes panic when an Express Card has <a href="https://man.openbsd.org/usb.4">usb(4)</a> devices.
1.1 deraadt 234: <!-- 2014/10/29 -->
1.21 bentley 235: <li>Support utf-8 and iso-8859-1 input by integrating <a href="https://man.openbsd.org/preconv.1">preconv(1)</a> utility into <a href="https://man.openbsd.org/mandoc.1">mandoc(1)</a>.
1.1 deraadt 236: <!-- 2014/10/28 -->
1.21 bentley 237: <li>In <a href="https://man.openbsd.org/mandoc.1">mandoc(1)</a> -Tascii mode, only print "<?>" for unicode escapes of unknown representation (not for character escapes with unknown names).
238: <li>Tightened <a href="https://man.openbsd.org/mandoc.1">mandoc(1)</a> unicode escape name parsing.
239: <li>Fixed <a href="https://man.openbsd.org/pipex.4">pipex(4)</a> to return multicast packets to the caller so that <a href="https://man.openbsd.org/npppd.8">npppd(8)</a> can handle them.
240: <li>Fixed <a href="https://man.openbsd.org/pipex.4">pipex(4)</a> to initialise DF bit in IP header for L2TP message, so packets larger than minimum MTU aren't dropped.
1.1 deraadt 241: <!-- 2014/10/27 -->
1.21 bentley 242: <li><strong>5.4, 5.5, 5.6 and -current SECURITY FIX: Fixed incorrect expansion of netmask for dynamic interfaces by <a href="https://man.openbsd.org/pfctl.8">pfctl(8)</a>. Stops potential elevation of access permissions for IPv6 traffic.</strong>.
243: <li>Removed execute permission from most pages in the kernel <a href="https://man.openbsd.org/pmap.9">pmap(9)</a> on powerpc.
244: <li>Stopped supporting <a href="https://man.openbsd.org/wsmoused.8">wsmoused(8)</a> and <a href="https://man.openbsd.org/X.7">X(7)</a> in parallel. Code is racy and known to break mice upon resume.
245: <li>Fixed regression in term.c r1.89: repaired handling of zero-width spaces (\&) in <a href="https://man.openbsd.org/mandoc.1">mandoc(1)</a> utf-8 output.
1.1 deraadt 246: <!-- 2014/10/26 -->
1.21 bentley 247: <li>Allow the current lease to expire without causing <a href="https://man.openbsd.org/dhclient.8">dhclient(8)</a> to seg fault when it tries to get a new one.
248: <li>Fixed possible infinite recursion in <a href="https://man.openbsd.org/perl.1">perl(1)</a> Data::Dumper (CVE-2014-4330).
249: <li>Improved <a href="https://man.openbsd.org/mandoc.1">mandoc(1)</a> -Tascii output for unicode escape sequences: for the first 512 code points, provide ASCII approximations; provide approximations for some sequences above codepoint 512 via <a href="https://man.openbsd.org/mandoc_char.7">mandoc_char(7)</a> character table.
250: <li>When using the local enqueuer and the internal SMTP session fails, made <a href="https://man.openbsd.org/smtpd.8">smtpd(8)</a> copy the original message to ~/dead.letter so it's not lost.
251: <li>On hppa, fixed "read section header string table <a href="https://man.openbsd.org/failed.0">failed(0)</a>" errors when attempting to boot lif.fs.
1.1 deraadt 252: <!-- 2014/10/25 -->
1.21 bentley 253: <li>Fixed <a href="https://man.openbsd.org/smtpd.8">smtpd(8)</a> so newaliases and makemap can parse multi-line aliases entries.
254: <li>Stopped <a href="https://man.openbsd.org/mandoc.1">mandoc(1)</a> attempting to parse empty equations. Fixes a null pointer dereference.
255: <li>In <a href="https://man.openbsd.org/mandoc.1">mandoc(1)</a>, report arguments to .EQ if they have caused an error.
256: <li>Don't attempt to suspend/resume a partially attached <a href="https://man.openbsd.org/drm.4">drm(4)</a> driver. Fixes crash upon resume with ATI FireMV 2400 card.
1.1 deraadt 257: <li>Stopped the page zeroing thread launching on m88k multiprocessor systems. Avoids a deadlock between reaper and zerothread.
1.21 bentley 258: <li>Added pane_input_off format to <a href="https://man.openbsd.org/tmux.1">tmux(1)</a>.
1.1 deraadt 259: <!-- 2014/10/24 -->
1.21 bentley 260: <li>Retired <a href="https://man.openbsd.org/networks.5">networks(5)</a> support from <a href="https://man.openbsd.org/amd.8">amd(8)</a> and <a href="https://man.openbsd.org/getent.1">getent(1)</a>.
1.1 deraadt 261: <!-- 2014/10/23 -->
1.21 bentley 262: <li>Extended features in <a href="https://man.openbsd.org/autoinstall.8">autoinstall(8)</a>.
1.1 deraadt 263: <li>No longer limit physmem to 2GB on hppa.
1.21 bentley 264: <li>Removed <a href="https://man.openbsd.org/networks.5">networks(5)</a> support from <a href="https://man.openbsd.org/netstat.1">netstat(1)</a>.
1.1 deraadt 265: <!-- 2014/10/22 -->
1.21 bentley 266: <li>Avoid an <a href="https://man.openbsd.org/ssl.8">ssl(8)</a> null pointer dereference that could be triggered by SSL3_RT_HANDSHAKE replays.
267: <li>Allow reliable IPv6 communication between <a href="https://man.openbsd.org/carp.4">carp(4)</a> master and backup across a shared IPv6 subnet.
268: <li>URL-decode the <a href="https://man.openbsd.org/httpd.8">httpd(8)</a> request path.
1.1 deraadt 269: <!-- 2014/10/21 -->
1.21 bentley 270: <li>Only redraw the <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> pane when it has actually changed.
271: <li>Reworked <a href="https://man.openbsd.org/httpd.8">httpd(8)</a> error messages: do not send details of 40x errors, to avoid possibility of javascript injection attacks.
272: <li>Made <a href="https://man.openbsd.org/tftp.1">tftp(1)</a> cope with sending or receiving files beyond 65536 blocks in length.
1.1 deraadt 273: <!-- 2014/10/20 -->
1.21 bentley 274: <li>Fixed <a href="https://man.openbsd.org/du.1">du(1)</a> regression, always report the size of files listed.
275: <li><strong>5.6 SECURITY FIX: disabled SSLv3 by default.</strong><br>A source code patch is available for <a href="errata56.html#005_nosslv3">5.6</a>.
276: <li>In <a href="https://man.openbsd.org/getent.1">getent(1)</a>, error out when hosts enumeration is requested.
277: <li>Made <a href="https://man.openbsd.org/mandoc.1">mandoc(1)</a> correctly parse spacing around in-line equations.
278: <li>Removed the "interface" option from <a href="https://man.openbsd.org/relayd.8">relayd(8)</a> "transparent forward" directive.
279: <li>Fixed memory leak in <a href="https://man.openbsd.org/ssl.8">ssl(8)</a> d2i_SSL_SESSION.
1.1 deraadt 280: <li>Backported fix for binutils bug 11867: ".quad" directive not assembled correctly.
281: <!-- 2014/10/19 -->
1.21 bentley 282: <li>Use sha512 instead of md5 for <a href="https://man.openbsd.org/tcp.4">tcp(4)</a> initial sequence number.
283: <li>In <a href="https://man.openbsd.org/ssl.8">ssl(8)</a> s_client, no longer call shutdown on a non-existent socket descriptor.
1.1 deraadt 284: <li>In the random number generator, use sha512 to hash the entropy (instead of md5).
1.21 bentley 285: <li><strong>5.4, 5.5 and 5.6 RELIABILITY FIX: Stopped assuming <a href="https://man.openbsd.org/elf.5">elf(5)</a> ep_taddr and ep_daddr are page-aligned, to fix a panic.</strong><br>A source code patch is available for <a href="errata54.html#017_kernexec">5.4</a>, <a href="errata55.html#013_kernexec">5.5</a> and <a href="errata56.html#004_kernexec">5.6</a>.
1.1 deraadt 286: <li>Update to xf86-video-mga 1.6.3
287: <li>Update to xf86-video-savage 2.3.7.
1.21 bentley 288: <li>More gracefully handle firmware loading errors in <a href="https://man.openbsd.org/ulpt.4">ulpt(4)</a>. Avoids potential kernel crash.
289: <li><strong>5.4 and 5.5 RELIABILITY FIX: Fixed two remotely triggerable memory leaks in <a href="https://man.openbsd.org/ssl.8">ssl(8)</a>.</strong><br>A source code patch is available for <a href="errata54.html#016_openssl">5.4</a> and <a href="errata55.html#012_openssl">5.5</a>.
1.1 deraadt 290: <!-- 2014/10/18 -->
1.21 bentley 291: <li>Better POSIX compliance for <a href="https://man.openbsd.org/realpath.3">realpath(3)</a>.
292: <li>Made sure the <a href="https://man.openbsd.org/pmap.9">pmap(9)</a> direct map isn't executable on amd64. Mitigates some ret2dir attacks.
1.1 deraadt 293: <!-- 2014/10/17 -->
1.21 bentley 294: <li>Correctly encode half line feed in the output stream for <a href="https://man.openbsd.org/col.1">col(1)</a> -f.
295: <li>Added the -d flag (limit display depth) to <a href="https://man.openbsd.org/du.1">du(1)</a>.
296: <li>Made the <a href="https://man.openbsd.org/mg.1">mg(1)</a> kill-paragraph and forward-paragraph commands stop once they can go no further.
1.1 deraadt 297: <!-- 2014/10/16 -->
298: <li>Fixed resume from hibernate on AMD processors.
1.21 bentley 299: <li>Fixed <a href="https://man.openbsd.org/col.1">col(1)</a> segfault triggered by an input line containing two consecutive backspace characters beyond column MAX_SHRT.
1.1 deraadt 300: <!-- 2014/10/15 -->
1.21 bentley 301: <li>Implemented in-line equations in <a href="https://man.openbsd.org/mandoc.1">mandoc(1)</a>, needed by Xenocara manuals.
302: <li>Allow empty headers in <a href="https://man.openbsd.org/smtpd.8">smtpd(8)</a>.
303: <li>Disabled SSLv3 by default in <a href="https://man.openbsd.org/ssl.8">ssl(8)</a>, <a href="https://man.openbsd.org/relayd.8">relayd(8)</a> and <a href="https://man.openbsd.org/smtpd.8">smtpd(8)</a>.
304: <li>Stopped <a href="https://man.openbsd.org/smtpd.8">smtpd(8)</a> relaying a header that will be rewritten by the destination MX.
305: <li>Prevented sessions from sending a huge number of continuations to a single header and starving <a href="https://man.openbsd.org/smtpd.8">smtpd(8)</a>.
306: <li>Made <a href="https://man.openbsd.org/rcctl.8">rcctl(8)</a> properly access all <a href="https://man.openbsd.org/rc.d.8">rc.d(8)</a> scripts and ignore anything irrelevant in /etc/rc.d.
307: <li>Fixed memory leak in <a href="https://man.openbsd.org/smtpd.8">smtpd(8)</a> error path.
1.1 deraadt 308: <!-- 2014/10/14 -->
1.21 bentley 309: <li>Even if a table has zero columns, do not segfault in the <a href="https://man.openbsd.org/mandoc.1">mandoc(1)</a> formatter.
1.1 deraadt 310: <!-- 2014/10/13 -->
1.21 bentley 311: <li>Stricter syntax checking of unicode character names by <a href="https://man.openbsd.org/mandoc.1">mandoc(1)</a>; properly scale string length measurements for postscript and pdf output.
1.1 deraadt 312: <!-- 2014/10/12 -->
1.21 bentley 313: <li>Improved error handling in the <a href="https://man.openbsd.org/eqn.7">eqn(7)</a> parser; do not parse quoted strings for tokens. Fixes <a href="https://man.openbsd.org/glFrustum.3">glFrustum(3)</a>.
314: <li>Fixed bug in <a href="https://man.openbsd.org/mg.1">mg(1)</a> backward-paragraph when pressing "M-{".
315: <li>Stopped <a href="https://man.openbsd.org/iked.8">iked(8)</a> segfaulting when connecting from Strongswan on Android
316: <li>Major upgrade to <a href="https://man.openbsd.org/eqn.7">eqn(7)</a> terminal output.
317: <li>Removed possibility of multiplicative integer overflow in <a href="https://man.openbsd.org/relayd.8">relayd(8)</a> and <a href="https://man.openbsd.org/snmpd.8">snmpd(8)</a>.
1.1 deraadt 318: <!-- 2014/10/11 -->
1.21 bentley 319: <li>Moved CPU throttling into the kernel, enabled with <a href="https://man.openbsd.org/sysctl.8">sysctl(8)</a> hw.setperf=-1.
320: <li>Added <a href="https://man.openbsd.org/rcctl.8">rcctl(8)</a> "default" command.
321: <li>Allow <a href="https://man.openbsd.org/pkg_sign.1">pkg_sign(1)</a> signing to proceed when interrupted.
1.1 deraadt 322: <!-- 2014/10/10 -->
1.21 bentley 323: <li>In <a href="https://man.openbsd.org/rcctl.8">rcctl(8)</a>, prevented "-e" in daemon_flags being fed as an argument to the built-in echo.
324: <li>Partial <a href="https://man.openbsd.org/eqn.7">eqn(7)</a> rewrite, to fix operator precedence.
325: <li>Let <a href="https://man.openbsd.org/rcs.1">rcs(1)</a> handle -l and -u combinations.
1.1 deraadt 326: <!-- 2014/10/09 -->
1.21 bentley 327: <li>Parse and render "from" and "to" clauses in <a href="https://man.openbsd.org/eqn.7">eqn(7)</a>, and render matrices.
328: <li>More readable <a href="https://man.openbsd.org/eqn.7">eqn(7)</a> -Ttree output; initial bits of MathML rendering for <a href="https://man.openbsd.org/eqn.7">eqn(7)</a> -Thtml.
1.1 deraadt 329: <li>Properly initialise secondary CPUs on 64 bit macppc machines.
1.21 bentley 330: <li>Allow kernel to be built without <a href="https://man.openbsd.org/ddb.4">ddb(4)</a>.
331: <li>Added <a href="https://man.openbsd.org/ddb.4">ddb(4)</a> support for DWARF line number decoding, so "trace" includes file and line numbers.
1.1 deraadt 332: <!-- 2014/10/08 -->
1.21 bentley 333: <li>No more <a href="https://man.openbsd.org/modstat.8">modstat(8)</a>, <a href="https://man.openbsd.org/modload.8">modload(8)</a> or <a href="https://man.openbsd.org/lkm.4">lkm(4)</a>.
334: <li>Tweaked <a href="https://man.openbsd.org/ssh_config.5">ssh_config(5)</a> reparsing with host canonicalisation; added -G option to <a href="https://man.openbsd.org/ssh.1">ssh(1)</a>; don't ignore <a href="https://man.openbsd.org/ssh_config.5">ssh_config(5)</a> "Port" options (bz#2267 and bz#2286).
335: <li>Made <a href="https://man.openbsd.org/sndiod.8">sndiod(8)</a> check parameters returned by audio drivers, and report driver bugs rather than crashing.
1.1 deraadt 336: <li>Made workq/taskq runner threads yield when they've hogged the CPU.
1.21 bentley 337: <li>Now that the cleaner yields the CPU, stopped <a href="https://man.openbsd.org/vfs.9">vfs(9)</a> checking to see if we are hogging the CPU.
338: <li>Restricted <a href="https://man.openbsd.org/smtpd.8">smtpd(8)</a> address lookups to configured address families.
1.1 deraadt 339: <!-- 2014/10/07 -->
1.21 bentley 340: <li>Fixed hardware lockup on <a href="https://man.openbsd.org/intel.4">intel(4)</a> with i845g.
341: <li>In <a href="https://man.openbsd.org/vi.1">vi(1)</a>, bumped max columns to 768 to accommodate bigger screens.
1.1 deraadt 342: <li>Removed support for AOE (ata over ethernet).
1.21 bentley 343: <li>Fixed DDOS in <a href="https://man.openbsd.org/head.1">head(1)</a> by using the correct exit code on failure.
344: <li>Removed <a href="https://man.openbsd.org/gzsig.1">gzsig(1)</a>.
345: <li>Switched <a href="https://man.openbsd.org/mandoc.1">mandoc(1)</a> HTML output to polyglot HTML5; have only one single -Thtml mode.
346: <li>If a <a href="https://man.openbsd.org/tbl.7">tbl(7)</a> layout contains unknown font modifiers, don't fail table, fallback to default font.
1.1 deraadt 347: <!-- 2014/10/06 -->
1.21 bentley 348: <li>Removed <a href="https://man.openbsd.org/sdio.8">sdio(8)</a>.
349: <li>Made amd64 <a href="https://man.openbsd.org/pmap.9">pmap(9)</a> more efficient on multi-processor machines.
350: <li>When <a href="https://man.openbsd.org/chmod.1">chmod(1)</a> is called, do not silently ignore syntax errors in options, instead error out properly.
351: <li>When <a href="https://man.openbsd.org/ssl.8">ssl(8)</a> is verifying an IP address is in a certificate common Name, do not perform wildcard matching.
352: <li>If <a href="https://man.openbsd.org/ssl.8">ssl(8)</a> has to match against a wildcard in a cert, verify that it contains at least a domain label.
353: <li>Amended previous commit in <a href="https://man.openbsd.org/ftp.1">ftp(1)</a> fetch.c to un break ELS cert validation when using a proxy.
1.1 deraadt 354: <!-- 2014/10/05 -->
1.21 bentley 355: <li>Check object allocation for success before using it in <a href="https://man.openbsd.org/ssl.8">ssl(8)</a> v3_cpols.c.
356: <li>In <a href="https://man.openbsd.org/ssl.8">ssl(8)</a>, fixed memory leaks in the error path of v2i_AUTHORITY_KEYID() and set_dist_point_name().
357: <li>Switched <a href="https://man.openbsd.org/syslogd.8">syslogd(8)</a> from using <a href="https://man.openbsd.org/poll.2">poll(2)</a> to libevent.
358: <li>Updated <a href="https://man.openbsd.org/xterm.1">xterm(1)</a> to version 311.
359: <li>Stopped <a href="https://man.openbsd.org/xhci.4">xhci(4)</a> Intel Series 7 controllers reporting illegal context state transition when detaching devices.
1.1 deraadt 360: <!-- 2014/10/04 -->
1.21 bentley 361: <li>In <a href="https://man.openbsd.org/ftp.1">ftp(1)</a>, only pass the remote host name (not any ":portnumber" suffix) to ressl_connect_socket().
362: <li>Forced <a href="https://man.openbsd.org/smtpd.8">smtpd(8)</a> to strip any empty BCC header in the DATA part of the SMTP transaction.
1.1 deraadt 363: <!-- 2014/10/03 -->
1.21 bentley 364: <li>Cleaned up the reporting socket code in <a href="https://man.openbsd.org/syslogd.8">syslogd(8)</a>.
365: <li>Introduced a thread for zeroing <a href="https://man.openbsd.org/uvm.9">uvm(9)</a> pages without holding the kernel lock, to reduce latency.
366: <li>In <a href="https://man.openbsd.org/syslog_r.3">syslog_r(3)</a>, strip trailing newlines from syslog messages, to avoid empty lines when printing.
367: <li>Allow <a href="https://man.openbsd.org/ssl.8">ssl(8)</a> to disable hostname and certificate verification separately.
368: <li>Enabled automatic handling of ephemeral EC keys by <a href="https://man.openbsd.org/ssl.8">ssl(8)</a>.
369: <li>Allowed many code paths in <a href="https://man.openbsd.org/myx.4">myx(4)</a> to run without the kernel lock.
1.1 deraadt 370: <!-- 2014/10/02 -->
1.21 bentley 371: <li>Now that <a href="https://man.openbsd.org/pool.9">pool(9)</a> are mpsafe, made the <a href="https://man.openbsd.org/mbuf.9">mbuf(9)</a> allocators on top of pools mpsafe too.
372: <li>Fixed a crash when there is text after a failed %Z conversion in <a href="https://man.openbsd.org/strptime.3">strptime(3)</a>.
373: <li>When no domain is specified in MAIL FROM or RCPT TO, <a href="https://man.openbsd.org/smtpd.8">smtpd(8)</a> now assumes local user.
374: <li>Fixed <a href="https://man.openbsd.org/httpd.8">httpd(8)</a> endless event loop that could eat all CPU time.
375: <li>Added local subnet route (RFC 3442) support to <a href="https://man.openbsd.org/dhclient.8">dhclient(8)</a>.
376: <li>Enlarged columns for 4-byte ASN display with <a href="https://man.openbsd.org/bgpctl.8">bgpctl(8)</a> "show summary" output.
377: <li>Fixed <a href="https://man.openbsd.org/route.4">route(4)</a> so <a href="https://man.openbsd.org/arp.8">arp(8)</a> will no longer report an incomplete entry for lo0.
378: <li>Made <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> take account of window-status-separator when checking window position.
379: <li>Update status when a <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> pane is selected with a mouse.
1.1 deraadt 380: <!-- 2014/10/01 -->
1.21 bentley 381: <li>Always call <a href="https://man.openbsd.org/waitpid.2">waitpid(2)</a> on SIGCHLD when client_attached is set in <a href="https://man.openbsd.org/tmux.1">tmux(1)</a>. Avoids potential zombie.
382: <li>Fixed some incorrect format specifiers in a debug <a href="https://man.openbsd.org/printf.9">printf(9)</a> in <a href="https://man.openbsd.org/apm.8">apm(8)</a>.
383: <li>Fixed loopback related breakage introduced by the conversion of in_ouraddr() to use the <a href="https://man.openbsd.org/route.4">route(4)</a> table.
384: <li>Map out-of-range facility values to LOG_USER to avoid array over-read in <a href="https://man.openbsd.org/syslogd.8">syslogd(8)</a>.
1.1 deraadt 385: <li>No longer define default_bits in openssl.cnf. Allows the compiled-in default to take priority.
1.21 bentley 386: <li>Switched <a href="https://man.openbsd.org/openssl.1">openssl(1)</a> "req" command to using SHA256 (hashes) and AES256 (on-disk keys) by default.
387: <li><strong>5.6 RELIABILITY FIX: Fixed some <a href="https://man.openbsd.org/run.4">run(4)</a> devices working in 5.5 but not in 5.6-release.</strong>
388: <li>More optimisations of luna frame buffer. Makes 4bpp <a href="https://man.openbsd.org/wscons.4">wscons(4)</a> putchar ~8% faster on luna88k.
389: <li>Unhooked <a href="https://man.openbsd.org/sliplogin.8">sliplogin(8)</a>, <a href="https://man.openbsd.org/sl.4">sl(4)</a>, <a href="https://man.openbsd.org/slstats.8">slstats(8)</a> and <a href="https://man.openbsd.org/slattach.8">slattach(8)</a>.
1.1 deraadt 390: <li>Check speed of a new device does not exceed parent's speed prior to calling usbd_new_device().
391: <!-- 2014/09/30 -->
1.21 bentley 392: <li><strong>5.4, 5.5 and 5.6 SECURITY FIX: Stopped nginx (in base) reusing cached <a href="https://man.openbsd.org/ssl.8">ssl(8)</a> sessions in unrelated contexts (CVE-2014-3616).</strong><br>A source code patch is available for <a href="errata54.html#055_nginx">5.4</a>, <a href="errata55.html#011_nginx">5.5</a> and <a href="errata56.html#003_nginx">5.6</a>.
393: <li>Added support for "physical devices" to <a href="https://man.openbsd.org/mfii.4">mfii(4)</a>.
394: <li>In <a href="https://man.openbsd.org/ssl.8">ssl(8)</a>, cleaned up EC cipher handling in ssl3_choose_cipher().
395: <li>Prevented <a href="https://man.openbsd.org/dmesg.8">dmesg(8)</a> spam from some windows-only keys (found on very new thinkpads).
396: <li>Do not use the global list of IPv4 addresses in icmp_reflect(), use the <a href="https://man.openbsd.org/route.4">route(4)</a> table.
1.1 deraadt 397: <!-- 2014/09/29 -->
398: <li>Increased text segment size on arm to 32MB.
1.21 bentley 399: <li>When setting <a href="https://man.openbsd.org/env.1">env(1)</a> in an <a href="https://man.openbsd.org/at.1">at(1)</a> atrun script, use the "export foo=bar" form. Allows shell to catch variable names that are not valid shell identifiers.
400: <li>Fixed r1.12 of <a href="https://man.openbsd.org/ssl.8">ssl(8)</a> x509_att.c which had a NULL pointer dereference in the error path.
401: <li>Added option that allows any enabled <a href="https://man.openbsd.org/ssl.8">ssl(8)</a> protocols to be explicitly configured.
402: <li>Use raster operation (ROP) function on luna frame buffer. 4bpp <a href="https://man.openbsd.org/wscons.4">wscons(4)</a> putchar now ~20% faster.
403: <li><a href="https://man.openbsd.org/sparc64/vds.4">vds(4/sparc64)</a> now supports block devices.
404: <li>Reversion fixed in <a href="https://man.openbsd.org/smtpd.8">smtpd(8)</a>, which had broken table_passwd.
1.1 deraadt 405: <!-- 2014/09/28 -->
1.21 bentley 406: <li>In <a href="https://man.openbsd.org/ssl.8">ssl(8)</a> check_cert(), reset ctx->current_crl to NULL before freeing it.
407: <li>In <a href="https://man.openbsd.org/ssl.8">ssl(8)</a> X509_NAME_get_text_by_OBJ(), made sure we do not pass a negative size to <a href="https://man.openbsd.org/memcpy.3">memcpy(3)</a>.
408: <li>In <a href="https://man.openbsd.org/wdc.4">wdc(4)</a> when doing <a href="https://man.openbsd.org/ioctl.2">ioctl(2)</a>, fixed leak by ensuring <a href="https://man.openbsd.org/scsi.4">scsi(4)</a> xfer free is done before ata xfer free.
409: <li>Properly serialise closing vnode on sparc64. Fixes occasional panic during reboot or when restarting <a href="https://man.openbsd.org/ldomd.8">ldomd(8)</a>.
1.1 deraadt 410: <li>Updated to: xtrans 1.3.5; libXext 1.3.3, libXi 1.7.4, inputproto 2.3.1 and xrandr 1.4.3.
411: <li>Provided a ressl config function that explicitly clears keys.
412: <li>New API function SSL_CTX_use_certificate_chain(). Allows reading PEM-encoded certificate chain from memory instead of a file.
1.21 bentley 413: <li>Remove a limitation that ignored IPv6 link-local addresses (eg fe80::2%carp0) on <a href="https://man.openbsd.org/carp.4">carp(4)</a>.
1.1 deraadt 414: <li>Reverted r1.142 of netstart.
1.21 bentley 415: <li>In <a href="https://man.openbsd.org/ssl.8">ssl(8)</a> X509v3_add_ext() error path, do not free memory that was not allocated.
416: <li>In <a href="https://man.openbsd.org/ssl.8">ssl(8)</a> X509_TRUST_add(), check X509_TRUST_get0() return value before dereferencing it; fixed memory leak.
417: <li>In <a href="https://man.openbsd.org/pool_destroy.9">pool_destroy(9)</a>, enter and leave <a href="https://man.openbsd.org/mutex.9">mutex(9)</a> as necessary to satisfy assertions.
1.1 deraadt 418: <!-- 2014/09/27 -->
419: <li>Updated to: xf86-video-vmware 13.0.2, fontsproto 2.1.3, libXfont 1.5.0 and xserver 1.16.1.
1.21 bentley 420: <li>Disabled WRITE events when closing file descriptor of the I/O bufferevent. Fixes potential event flood in <a href="https://man.openbsd.org/httpd.8">httpd(8)</a>.
421: <li>In <a href="https://man.openbsd.org/ssl.8">ssl(8)</a>, check that the specified curve is one of the client preferences.
1.1 deraadt 422: <!-- 2014/09/26 -->
1.21 bentley 423: <li>In <a href="https://man.openbsd.org/ssl.8">ssl(8)</a> X509_STORE_get1_certs() and X509_STORE_get1_crls(), check the result of allocations.
424: <li>Fixed memory leaks in <a href="https://man.openbsd.org/ssl.8">ssl(8)</a> X509_issuer_and_serial_hash() and X509_STORE_new().
1.1 deraadt 425: <li>Use correct format specifiers in various loongson machine dependent code.
1.21 bentley 426: <li>Push <a href="https://man.openbsd.org/sdhc.4">sdhc(4)</a> ricoh controllers into "old slow mode" at resume time.
427: <li>Reverted part of r1.98 if_run.c which caused a regression on older <a href="https://man.openbsd.org/run.4">run(4)</a> devices.
1.1 deraadt 428: <li>Reworked piglet and pig memory allocation for more robust hibernation.
1.21 bentley 429: <li>Now that <a href="https://man.openbsd.org/sysctl.8">sysctl(8)</a> mp setperf is fixed, activated aggressive <a href="https://man.openbsd.org/apmd.8">apmd(8)</a> throttling again.
1.1 deraadt 430: <!-- 2014/09/25 -->
1.21 bentley 431: <li>Fixed the calculation of the number of items to prime the <a href="https://man.openbsd.org/pool.9">pool(9)</a> with in <a href="https://man.openbsd.org/pool_setlowat.9">pool_setlowat(9)</a>.
432: <li>Restored r1.249 of sys/dev/acpi/acpi.c. Upon resume, CPU now runs at speed requested by <a href="https://man.openbsd.org/apm.8">apm(8)</a>.
433: <li>Support using pane id as part of session or window specifier and window id as part of session in <a href="https://man.openbsd.org/tmux.1">tmux(1)</a>.
434: <li>Support ! for last pane in <a href="https://man.openbsd.org/tmux.1">tmux(1)</a>.
1.1 deraadt 435: <!-- 2014/09/24 -->
436: <li>Fixed the build when DRMDEBUG is defined.
437: <!-- 2014/09/22 -->
1.21 bentley 438: <li>Enabled MSI support in <a href="https://man.openbsd.org/msk.4">msk(4)</a>.
439: <li>Release the <a href="https://man.openbsd.org/acpi.4">acpi(4)</a> lock when calling wsdisplay_suspend() and wsdisplay_resume(). For better resume.
440: <li>Fixed high capacity (> 2GB) eMMC support in <a href="https://man.openbsd.org/sdmmc.4">sdmmc(4)</a>.
441: <li>Hide unused, duplicate and/or misleading fields from <a href="https://man.openbsd.org/audioctl.1">audioctl(1)</a>.
1.1 deraadt 442: <!-- 2014/09/22 -->
1.21 bentley 443: <li>In <a href="https://man.openbsd.org/ssl.8">ssl(8)</a>, check the result from final_finish_mac() against finish_mac_length in ssl3_send_finished().
444: <li>In <a href="https://man.openbsd.org/ssl.8">ssl(8)</a>, don't record a match with the "finish MAC" if "SSL finished" has a zero-byte payload.
1.1 deraadt 445: <li>Implemented atomic_{cas,swap}_{uint,ulong,ptr} and atomic_{add,sub}_{int,long}_nv on hppa.
446: <li>On macppc, enabled power saving modes for IBM PowerPC 970 CPUs.
447: <!-- 2014/09/21 -->
1.21 bentley 448: <li>Reworked <a href="https://man.openbsd.org/pool.9">pool(9)</a> code to make it mpsafe (can be called without the kernel biglock being held).
449: <li>Made <a href="https://man.openbsd.org/packages.7">packages(7)</a> rsync-friendly. Reduces bandwidth usage by mirrors.
1.1 deraadt 450: <!-- 2014/09/20 -->
1.21 bentley 451: <li>Fixed an invalid escape sequence in <a href="https://man.openbsd.org/cu.1">cu(1)</a>.
452: <li>Allow <a href="https://man.openbsd.org/agp.4">agp(4)</a> to map a single page without sleeping. Fixes <a href="https://man.openbsd.org/intel.4">intel(4)</a> <a href="https://man.openbsd.org/drm.4">drm(4)</a> panic on i386.
1.1 deraadt 453: <!-- 2014/09/19 -->
1.21 bentley 454: <li>Added CHACHA20 to <a href="https://man.openbsd.org/ssl.8">ssl(8)</a> as a cipher symmetric encryption alias.
455: <li>Moved <a href="https://man.openbsd.org/rc.conf.8">rc.conf(8)</a> from the etc to the base set (any local changes will be overwritten at next upgrade).
456: <li><strong>5.5 and 5.6 SECURITY FIX: <a href="https://man.openbsd.org/ssl.8">ssl(8)</a> session reuse vulnerability (CVE-2014-3616).</strong>
1.1 deraadt 457: <!-- 2014/09/18 -->
1.21 bentley 458: <li>Introduce <a href="https://man.openbsd.org/config_suspend_all.9">config_suspend_all(9)</a>, to invoke <a href="https://man.openbsd.org/config_suspend.9">config_suspend(9)</a> in appropriate order. Fixes problems with unflushed disk caches on machines where <a href="https://man.openbsd.org/mpath.4">mpath(4)</a> takes control of some of your disks.
459: <li>Stopped <a href="https://man.openbsd.org/sd.4">sd(4)</a> spinning back up while attempting to spin down some drives.
1.1 deraadt 460: <!-- 2014/09/17 -->
1.21 bentley 461: <li>Increased number of <a href="https://man.openbsd.org/blowfish.3">blowfish(3)</a> rounds to 8 by default (when not specified in <a href="https://man.openbsd.org/login.conf.5">login.conf(5)</a>).
462: <li>Updated to <a href="https://man.openbsd.org/xkeyboard-config.7">xkeyboard-config(7)</a> version 2.12.
463: <li>Changed screen <a href="https://man.openbsd.org/terminfo.5">terminfo(5)</a> entry to have kbs=\177. Fixes problems with "le" editor.
1.1 deraadt 464: <!-- 2014/09/16 -->
1.21 bentley 465: <li>If there are more than 8 CPUs, <a href="https://man.openbsd.org/top.1">top(1)</a> now defaults to combined CPU stats.
466: <li>Disabled taking the <a href="https://man.openbsd.org/mutex.9">mutex(9)</a> to read <a href="https://man.openbsd.org/pool.9">pool(9)</a> stats. Eliminates code paths that try to <a href="https://man.openbsd.org/mtx_enter.9">mtx_enter(9)</a> twice.
1.1 deraadt 467: <!-- 2014/09/15 -->
468: <li>Unlinked sendmail from the build.
1.21 bentley 469: <li>Support <a href="https://man.openbsd.org/ppb.4">ppb(4)</a> bridges subtractive decoding. Fixes issues with <a href="https://man.openbsd.org/pcmcia.4">pcmcia(4)</a> behind a ATI SB400 PCI bridge.
470: <li>Marked the <a href="https://man.openbsd.org/mpi.4">mpi(4)</a> and <a href="https://man.openbsd.org/mpii.4">mpii(4)</a> interrupt handlers mpsafe.
471: <li>In <a href="https://man.openbsd.org/httpd.8">httpd(8)</a> and <a href="https://man.openbsd.org/relayd.8">relayd(8)</a>, made the HTTP version mandatory and abort if it is missing in the request.
1.1 deraadt 472: <!-- 2014/09/14 -->
1.21 bentley 473: <li>Made <a href="https://man.openbsd.org/dd.1">dd(1)</a> error out when negative values are given for sizes on the command line.
474: <li>In <a href="https://man.openbsd.org/man.cgi.8">man.cgi(8)</a>, support backslash-escaping of white space in the query expression, similar to <a href="https://man.openbsd.org/apropos.1">apropos(1)</a>.
475: <li>Made the new <a href="https://man.openbsd.org/isp.4">isp(4)</a> drivers match at a higher priority than old drivers.
1.1 deraadt 476: <!-- 2014/09/13 -->
1.21 bentley 477: <li>In <a href="https://man.openbsd.org/sysmerge.8">sysmerge(8)</a> PKG mode, cope with non-default PREFIX (e.g. /var/www/...).
1.1 deraadt 478: <!-- 2014/09/12 -->
1.21 bentley 479: <li>Provided a sparc64 version of <a href="https://man.openbsd.org/sqrtl.3">sqrtl(3)</a> for quad-precision floating point.
480: <li>Remove cached 802.11 nodes in IEEE80211_STA_CACHE state. Stops them showing with <a href="https://man.openbsd.org/ifconfig.8">ifconfig(8)</a> scan.
481: <li>On i386/amd64, stopped attempts to synchronise P-state transitions between CPUs. Fixes hangs and suspend/resume when running <a href="https://man.openbsd.org/amd64/apmd.8">apmd(8/amd64)</a>.
1.1 deraadt 482: <!-- 2014/09/11 -->
1.21 bentley 483: <li>Inspired by <a href="https://man.openbsd.org/mdoclint.1">mdoclint(1)</a>, made <a href="https://man.openbsd.org/mandoc.1">mandoc(1)</a> warn about botched .Xr ordering and punctuation below SEE ALSO; warn about commas in function arguments.
484: <li>Implemented <a href="https://man.openbsd.org/membar.9">membar(9)</a> API for i386.
1.1 deraadt 485: <li>Install files that moved from etc to base during "make build" to unbreak updating from src.
486: <!-- 2014/09/10 -->
1.21 bentley 487: <li>Let <a href="https://man.openbsd.org/httpd.8">httpd(8)</a> handle variations of the "Host" header (eg www.example.com:80, [2001:db8::1], [2001:db8::1]:80).
1.1 deraadt 488: <!-- 2014/09/09 -->
1.21 bentley 489: <li>If a manpath directory does not exist, <a href="https://man.openbsd.org/mandoc.1">mandoc(1)</a> will now silently skip it.
490: <li>Fixed scans with various <a href="https://man.openbsd.org/iwn.4">iwn(4)</a> devices.
491: <li>If <a href="https://man.openbsd.org/pkg_add.1">pkg_add(1)</a> not running as root, dismiss user id and groups, replace with root/bin. For FAKE_AS_ROOT=No.
1.1 deraadt 492: <li>Made the cleaner, syncer, pagedaemon and aiodone daemons all yield() if CPU is marked SHOULDYIELD.
493: <!-- 2014/09/08 -->
1.21 bentley 494: <li>Marked the <a href="https://man.openbsd.org/mfi.4">mfi(4)</a> interrupt handler mpsafe; give up biglock in the <a href="https://man.openbsd.org/scsi.4">scsi(4)</a> cmd submission paths.
495: <li>Fixed interrupt storm on 2009 Mac minis with WOL enabled on <a href="https://man.openbsd.org/nfe.4">nfe(4)</a> interfaces.
496: <li>Stopped <a href="https://man.openbsd.org/uvm.9">uvm(9)</a> sleeping on allocation of hash table entries. Fixes crashes with tmpfs.
497: <li>Stopped <a href="https://man.openbsd.org/pflog.4">pflog(4)</a> counting bad packets multiple times.
498: <li>Added window_last_flag and window_zoomed_flag to <a href="https://man.openbsd.org/tmux.1">tmux(1)</a>.
499: <li><strong>5.6 and -current RELIABILITY FIX: Prevent addition of redundant IPv6 autoconf (SLAAC) addresses.</strong>
1.1 deraadt 500: <!-- 2014/09/07 -->
1.21 bentley 501: <li>Fix a <a href="https://man.openbsd.org/syslogd.8">syslogd(8)</a> regression when specifying all 20 additional log paths.
1.1 deraadt 502: <li>Implemented membar API for amd64.
503: <li>Deleted procfs (always suffered from race conditions and is now unused).
1.21 bentley 504: <li><strong>5.4 RELIABILITY FIX: Added a one second receive timeout. Avoids stall of receive queue in <a href="https://man.openbsd.org/vio.4">vio(4)</a>.</strong>
505: <li><strong>5.4 and 5.5 RELIABILITY FIX: Removed race condition. Stops occasional network hangs in in <a href="https://man.openbsd.org/vio.4">vio(4)</a>.</strong>
1.1 deraadt 506: <li>Updated to mesa version 10.2.7.
1.21 bentley 507: <li>Removed SSL_kDHr, SSL_kDHd and SSL_aDH from <a href="https://man.openbsd.org/ssl.8">ssl(8)</a>. No supported ciphersuites use them.
508: <li>Use shell substitution instead of dirname in <a href="https://man.openbsd.org/sysmerge.8">sysmerge(8)</a>; fixed installing pkg @sample when target directory is missing; fixed output when a file fails to install.
1.1 deraadt 509: <!-- 2014/09/06 -->
1.21 bentley 510: <li><strong>5.6 RELIABILITY FIX: Stopped incorrect RX ring computation, which led to panics under load with <a href="https://man.openbsd.org/bge.4">bge(4)</a>, <a href="https://man.openbsd.org/em.4">em(4)</a> and <a href="https://man.openbsd.org/ix.4">ix(4)</a>.</strong><br>A source code patch is available for <a href="errata56.html#001_rxr">5.6</a>.
511: <li>Let <a href="https://man.openbsd.org/roff.7">roff(7)</a> accept .ll in the prologue; parse and ignore the .pl (page length) request.
1.1 deraadt 512: <!-- 2014/09/05 -->
1.21 bentley 513: <li>Upgraded inodesc.id_entryno in <a href="https://man.openbsd.org/fsck_ffs.8">fsck_ffs(8)</a> to u_int64_t, to handle larger file sizes with FFS2; fixed check for allocated fragments marked free in the bitmap.
514: <li>Fixed FastCGI-based WebDAV and CalDAV (calendar) servers with <a href="https://man.openbsd.org/httpd.8">httpd(8)</a>.
515: <li><a href="https://man.openbsd.org/httpd.8">httpd(8)</a> server name specification changed to name+address+port. Allows using same server name for multiple servers with different addresses.
1.1 deraadt 516: <li>Removed /etc/{hosts,myname} from etc.tgz; made the installer create the /etc/hosts template.
1.21 bentley 517: <li>In <a href="https://man.openbsd.org/perl.1">perl(1)</a>, updated libnet to version 1.27.
1.1 deraadt 518: <!-- 2014/09/03 -->
1.21 bentley 519: <li>Reworked how <a href="https://man.openbsd.org/pool.9">pool(9)</a> with large pages (>PAGE_SIZE) are implemented.
520: <li>Added *.gz support to <a href="https://man.openbsd.org/apropos.1">apropos(1)</a> -a, <a href="https://man.openbsd.org/man.1">man(1)</a>, and <a href="https://man.openbsd.org/mandoc.1">mandoc(1)</a>.
521: <li>In <a href="https://man.openbsd.org/ssh.1">ssh(1)</a>, tightened permissions on <a href="https://man.openbsd.org/pty.4">pty(4)</a> when the "tty" group does not exist.
522: <li>Be coherent in the way <a href="https://man.openbsd.org/arp.8">arp(8)</a> and <a href="https://man.openbsd.org/ndp.8">ndp(8)</a> display local entries, use "l" flag to distinguish them; skip broadcast entries (are not real <a href="https://man.openbsd.org/arp.4">arp(4)</a> entries).
523: <li>Make sure broadcast entries won't be freed by the <a href="https://man.openbsd.org/arp.4">arp(4)</a> timer so we can use them for address lookups.
524: <li>Treat broadcast entries like local ones and give them the highest <a href="https://man.openbsd.org/route.4">route(4)</a> priority.
1.1 deraadt 525: <li>Sync amd64 and i386 GENERIC.MP with other arches by enabling MP_LOCKDEBUG option.
1.21 bentley 526: <li>If <a href="https://man.openbsd.org/crypt.3">crypt(3)</a> fails, <a href="https://man.openbsd.org/smtpd.8">smtpd(8)</a> will now return an authentication error.
1.1 deraadt 527: <!-- 2014/09/02 -->
1.21 bentley 528: <li>Implemented traditional -h option for <a href="https://man.openbsd.org/man.1">man(1)</a>: show the SYNOPSIS only.
529: <li>Initial <a href="https://man.openbsd.org/httpd.8">httpd(8)</a> support for persistent FastCGI connections via chunked Transfer-Encoding.
530: <li>Added Jumbo support for BCM5714/5780/5717/5719/5720/57765/57766 <a href="https://man.openbsd.org/bge.4">bge(4)</a> chipsets.
1.1 deraadt 531: <!-- 2014/09/01 -->
1.21 bentley 532: <li>Fixed <a href="https://man.openbsd.org/makewhatis.8">makewhatis(8)</a> bug so <a href="https://man.openbsd.org/apropos.1">apropos(1)</a> and <a href="https://man.openbsd.org/man.1">man(1)</a> can find Xenocara manuals via .so links.
533: <li>In <a href="https://man.openbsd.org/man.1">man(1)</a> mode, change to the right directory before starting the parser. Finds more Xenocara manuals.
534: <li>Wake up any waiting clients with the <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> "wait-for" command when the server exits.
535: <li><a href="https://man.openbsd.org/smtpd.8">smtpd(8)</a> queue_api.c code will now close the file descriptor if <a href="https://man.openbsd.org/fdopen.3">fdopen(3)</a> fails.
536: <li>Prevented a null dereference of the <a href="https://man.openbsd.org/urtw.4">urtw(4)</a> configuration descriptor.
537: <li>Improved option usage output for <a href="https://man.openbsd.org/ssl.8">ssl(8)</a>; converted <a href="https://man.openbsd.org/ssl.8">ssl(8)</a> ecparam to new option/usage handling.
538: <li>Applied fix from upstream <a href="https://man.openbsd.org/perl.1">perl(1)</a> to harden the close() function (RT 37700).
1.1 deraadt 539: <!-- 2014/08/31 -->
1.21 bentley 540: <li>Replaced the "least recently used" bufcache in <a href="https://man.openbsd.org/vfs_cache.9">vfs_cache(9)</a> with one based on 2Q, for scan resistance.
541: <li>On amd64, added implementations of atomic_{inc,dec,add,sub}_{int,long}(9) and atomic_{add,sub}_{int,long}<a href="https://man.openbsd.org/_nv.9">_nv(9)</a>.
542: <li>Correctly made <a href="https://man.openbsd.org/accept4.2">accept4(2)</a> a cancellation point as per <a href="https://man.openbsd.org/pthread_testcancel.3">pthread_testcancel(3)</a>.
1.1 deraadt 543: <li>Backported @file support from binutils-2.17.
1.21 bentley 544: <li>Added <a href="https://man.openbsd.org/uuid.3">uuid(3)</a> support routines to libc.
545: <li>Made <a href="https://man.openbsd.org/sysmerge.8">sysmerge(8)</a> completely silent by default when no file is modified.
546: <li>In <a href="https://man.openbsd.org/sysmerge.8">sysmerge(8)</a> pkg mode, warn if the directory we want to copy an @sample into doesn't exist or is not an @sample.
1.1 deraadt 547: <!-- 2014/08/30 -->
1.21 bentley 548: <li>In sparc64 <a href="https://man.openbsd.org/ld.so.1">ld.so(1)</a>, made the handling of PLT entries above the 32k mark thread-safe.
549: <li>When a service is not available, made <a href="https://man.openbsd.org/rcctl.8">rcctl(8)</a> return ENOENT.
550: <li>Introduced a <a href="https://man.openbsd.org/man.1">man(1)</a> -l option as an alias for <a href="https://man.openbsd.org/mandoc.1">mandoc(1)</a> -a.
551: <li>Converted the <a href="https://man.openbsd.org/openssl.1">openssl(1)</a> "version" command to new option/usage handling.
552: <li>On <a href="https://man.openbsd.org/lii.4">lii(4)</a>, set the MRU to a full size frame instead of basing it on the MTU.
553: <li>Let the MRU always be what the <a href="https://man.openbsd.org/oce.4">oce(4)</a> chip can do, not what the MTU implies.
1.1 deraadt 554: <li>Fixed 2 macppc panics.
1.21 bentley 555: <li>Allow new devices to get an address for <a href="https://man.openbsd.org/xhci.4">xhci(4)</a> when XHCI_DEBUG is defined.
1.1 deraadt 556: <!-- 2014/08/29 -->
1.21 bentley 557: <li>Fixed checking sync for old synaptics touchpad (ver 5.9) in <a href="https://man.openbsd.org/pckbc.4">pckbc(4)</a>.
558: <li>Allow multiple <a href="https://man.openbsd.org/relayd.8">relayd(8)</a> instances to be configured to forward traffic to the same host.
1.1 deraadt 559: <!-- 2014/08/28 -->
1.21 bentley 560: <li>Major <a href="https://man.openbsd.org/sysmerge.8">sysmerge(8)</a> cleanup now that both etc and xetc sets are part of base (-S -s and -x options gone).
1.1 deraadt 561: <li>Moved the xetc set into xbase (like etc was moved into base).
1.21 bentley 562: <li>Added <a href="https://man.openbsd.org/openssl.8">openssl(8)</a> option handling for input/output formats, ordered flags, and for argument processing.
1.1 deraadt 563: <!-- 2014/08/27 -->
1.21 bentley 564: <li>Added <a href="https://man.openbsd.org/mdoc.7">mdoc(7)</a> support for .St -susv1 and .St -susv4.
565: <li>Made <a href="https://man.openbsd.org/diff.1">diff(1)</a> -uw produce valid output even when one file doesn't end with a newline.
566: <li>Implemented table-driven <a href="https://man.openbsd.org/ssl.8">ssl(8)</a> option parsing. Allows an application to specify valid options and where to store them.
567: <li>Ported <a href="https://man.openbsd.org/openssl.1">openssl(1)</a> rand application to the new option parsing and usage.
568: <li>Nuked <a href="https://man.openbsd.org/sysctl.8">sysctl(8)</a> net.inet6.icmp6.rediraccept and allow redirects on interfaces with autoconf enabled.
569: <li>In <a href="https://man.openbsd.org/newsyslog.conf.5">newsyslog.conf(5)</a>, added <a href="https://man.openbsd.org/httpd.8">httpd(8)</a> default log files to the rotation.
570: <li>Added <a href="https://man.openbsd.org/ssl.8">ssl(8)</a> API function ressl_config_set_ecdhcurve to set or disable a non-standard ECDH curve.
571: <li>Added support for Curve25519 to <a href="https://man.openbsd.org/iked.8">iked(8)</a>.
572: <li>Write all data before closing the <a href="https://man.openbsd.org/httpd.8">httpd(8)</a> server socket if the output buffer is not empty.
573: <li>Added missing capability to handle new $2b version of <a href="https://man.openbsd.org/blowfish.3">blowfish(3)</a> password encryption for <a href="https://man.openbsd.org/usermod.8">usermod(8)</a> and friends.
1.1 deraadt 574: <!-- 2014/08/26 -->
1.21 bentley 575: <li>Added an implementation of <a href="https://man.openbsd.org/man.1">man(1)</a> into the /usr/bin/mandoc binary; unify command line options for <a href="https://man.openbsd.org/mandoc.1">mandoc(1)</a>, <a href="https://man.openbsd.org/man.1">man(1)</a>, <a href="https://man.openbsd.org/apropos.1">apropos(1)</a>, and <a href="https://man.openbsd.org/whatis.1">whatis(1)</a>.
1.1 deraadt 576: <li>Create etc set during "make build", now embedded it in base set.
1.21 bentley 577: <li>Removed nginx from the base system in favour of OpenBSD's homegrown <a href="https://man.openbsd.org/httpd.8">httpd(8)</a>.
578: <li>Moved <a href="https://man.openbsd.org/openssl.1">openssl(1)</a> from /usr/sbin/openssl to /usr/bin/openssl.
1.1 deraadt 579: <!-- 2014/08/25 -->
1.21 bentley 580: <li>Unlinked <a href="https://man.openbsd.org/xfs.1">xfs(1)</a> from the build.
581: <li>Added the ability to restrict <a href="https://man.openbsd.org/syslogd.8">syslogd(8)</a> to an <a href="https://man.openbsd.org/ip.4">ip(4)</a> or <a href="https://man.openbsd.org/ip6.4">ip6(4)</a> protocol family.
582: <li>Added <a href="https://man.openbsd.org/iked.8">iked(8)</a> support for DH groups 27-30 using the Brainpool curves as in <a href="https://man.openbsd.org/ssl.8">ssl(8)</a>.
583: <li><a href="https://man.openbsd.org/httpd.8">httpd(8)</a> now supports both mime.types flavours (nginx- or apache-style).
584: <li>Added generic system-wide /usr/share/misc/mime.types file, usable by <a href="https://man.openbsd.org/httpd.conf.5">httpd.conf(5)</a>.
585: <li>Moved sending of router solicitations to the kernel. Makes <a href="https://man.openbsd.org/rtsol.8">rtsol(8)</a> and <a href="https://man.openbsd.org/rtsold.8">rtsold(8)</a> unnecessary.
586: <li>Don't allow pasting into input-disabled <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> panes.
587: <li>Implemented _NET_WM_STATE_STICKY in <a href="https://man.openbsd.org/cwm.1">cwm(1)</a>. Allows client to "stick" to all desktops or groups.
588: <li>When using a proxy, made <a href="https://man.openbsd.org/ftp.1">ftp(1)</a> validate the cert hostname against the target hostname, not the proxy hostname.
589: <li>Delete secret or secret-derived data in many base utilities with <a href="https://man.openbsd.org/explicit_bzero.3">explicit_bzero(3)</a>.
1.1 deraadt 590: <!-- 2014/08/24 -->
1.21 bentley 591: <li>Implementation of bold italic font support for postscript and pdf output in <a href="https://man.openbsd.org/mandoc.1">mandoc(1)</a>.
592: <li>Start all <a href="https://man.openbsd.org/rcctl.8">rcctl(8)</a> error messages with "rcctl: " so it is clear where they come from.
593: <li>In debug mode, only print the flags relevant to the <a href="https://man.openbsd.org/rc.d.8">rc.d(8)</a> we are calling instead of all flags; make it clear when we are using the default flags when none are set.
594: <li>Make it possible for <a href="https://man.openbsd.org/rcctl.8">rcctl(8)</a> to pass '-d' and '-f' to the <a href="https://man.openbsd.org/rc.d.8">rc.d(8)</a> script.
1.1 deraadt 595: <!-- 2014/08/23 -->
1.21 bentley 596: <li>Removed non-standard GOST cipher suites (which are not compiled in currently) from <a href="https://man.openbsd.org/ssl.8">ssl(8)</a>.
1.1 deraadt 597: <!-- 2014/08/22 -->
1.21 bentley 598: <li><a href="https://man.openbsd.org/pfctl.8">pfctl(8)</a> now makes sure rules have been defined when you specify queues in a rule.
599: <li>Switched <a href="https://man.openbsd.org/ndp.8">ndp(8)</a> to display MAC addresses in 00:00:00:00:00:00 format.
600: <li>Get <a href="https://man.openbsd.org/arp.8">arp(8)</a> to print leading zeros in MAC addresses again.
601: <li>Disabled use of bind in base (base uses <a href="https://man.openbsd.org/nsd.8">nsd(8)</a>/<a href="https://man.openbsd.org/unbound.8">unbound(8)</a> instead).
602: <li>Ensure <a href="https://man.openbsd.org/cwm.1">cwm(1)</a> client that wants to be in nogroup stays in nogroup (thus stays in view), even when (re)reading NET_WM_DESKTOP.
603: <li>Made <a href="https://man.openbsd.org/syslogd.8">syslogd(8)</a> check host/port length when parsing <a href="https://man.openbsd.org/syslog.conf.5">syslog.conf(5)</a>. Avoids nasty error message "syslogd: priv_getaddrinfo: overflow attempt in hostname".
604: <li>Set the default <a href="https://man.openbsd.org/nfsd.8">nfsd(8)</a> flags to "-tun 4" when launched from <a href="https://man.openbsd.org/rc.d.8">rc.d(8)</a>.
605: <li>Fixed memory leak in <a href="https://man.openbsd.org/isakmpd.8">isakmpd(8)</a> ike_phase_1.c.
1.1 deraadt 606: <!-- 2014/08/21 -->
1.21 bentley 607: <li>Fixed <a href="https://man.openbsd.org/acpi.4">acpi(4)</a> sensor status for docking/undocking laptops, to allow <a href="https://man.openbsd.org/sensorsd.8">sensorsd(8)</a> to correctly detects state changes.
608: <li>Bugfix to make <a href="https://man.openbsd.org/whatis.1">whatis(1)</a> case-insensitive again.
609: <li>Added Last-Modified: HTTP header to <a href="https://man.openbsd.org/httpd.8">httpd(8)</a>.
610: <li>Allow <a href="https://man.openbsd.org/syslogd.8">syslogd(8)</a> to send and receive <a href="https://man.openbsd.org/udp.4">udp(4)</a> syslog packets on the IPv6 socket.
611: <li>Unbroke <a href="https://man.openbsd.org/sysmerge.8">sysmerge(8)</a> when "SRCDIR=."
612: <li>Limited the <a href="https://man.openbsd.org/mandoc.1">mandoc(1)</a> CGI process execution time, to make REDoS attacks less effective.
613: <li>Stopped <a href="https://man.openbsd.org/mandoc.1">mandoc(1)</a> suppressing white space after .Fl if the next node is a text node on the same input line.
614: <li>Made <a href="https://man.openbsd.org/rcctl.8">rcctl(8)</a> "status" output match <a href="https://man.openbsd.org/rc.conf.8">rc.conf(8)</a> format.
615: <li>Changed the output of <a href="https://man.openbsd.org/arp.8">arp(8)</a> to match what <a href="https://man.openbsd.org/ndp.8">ndp(8)</a> does; include the expire timer.
1.1 deraadt 616: <!-- 2014/08/20 -->
1.21 bentley 617: <li>After <a href="https://man.openbsd.org/nfe.4">nfe(4)</a> allocates an mbuf and cluster, properly init the length fields.
618: <li>Implemented rxrinfo ioctl in <a href="https://man.openbsd.org/ix.4">ix(4)</a> for cluster usage statistics.
1.1 deraadt 619: <li>Call audio_{pint,rint}() call-backs with the mutex held.
620: <li>When doing "whole disk" installs on macppc, blank the first 1 meg of the disk. Allows successful creation of boot partition.
1.21 bentley 621: <li>Unlinked the <a href="https://man.openbsd.org/crypto.4">crypto(4)</a> pseudo device (disabled by default for about 4 years).
622: <li>Made sure <a href="https://man.openbsd.org/eap.4">eap(4)</a> releases CPU mutexes upon receiving an EINVAL message.
1.1 deraadt 623: <!-- 2014/08/19 -->
624: <li>On i386/amd64, backported support for the "rdtscp" instruction from binutils-2.17.
1.21 bentley 625: <li>Removed the custom jumbo allocator from <a href="https://man.openbsd.org/nfe.4">nfe(4)</a> which was never enabled.
626: <li>When <a href="https://man.openbsd.org/sshd.8">sshd(8)</a> is dumping the server configuration, made it print correct KEX, MAC and cipher defaults.
627: <li>Introduced <a href="https://man.openbsd.org/rcctl.8">rcctl(8)</a>, a simple utility for maintaining <a href="https://man.openbsd.org/rc.conf.local.8">rc.conf.local(8)</a>.
628: <li>When a local <a href="https://man.openbsd.org/route.4">route(4)</a> entry is added for an ifa having a broadcast address, made it identifiable (by a flag) and persistent.
629: <li>Ensure state changes are properly serialised in <a href="https://man.openbsd.org/pms.4">pms(4)</a>. makes enabling/disabling touchpads more reliable.
630: <li>Missing stack var initialisation fixed in <a href="https://man.openbsd.org/ld.so.1">ld.so(1)</a>.
1.1 deraadt 631: <!-- 2014/08/18 -->
1.21 bentley 632: <li>Added -4 and -6 flags to <a href="https://man.openbsd.org/tcpbench.1">tcpbench(1)</a>, to specify ipv4 or ipv6 respectively.
633: <li>Fixed _exit codes in <a href="https://man.openbsd.org/syslogd.8">syslogd(8)</a> privsep.c, which were the wrong way around.
634: <li>Fixed read access to uninitialised memory in <a href="https://man.openbsd.org/mandoc.1">mandoc(1)</a>.
635: <li>Removed <a href="https://man.openbsd.org/malloc.3">malloc(3)</a> lock across some <a href="https://man.openbsd.org/mmap.2">mmap(2)</a> <a href="https://man.openbsd.org/syscall.9">syscall(9)</a>. Speeds up multithreaded programs.
1.1 deraadt 636: <!-- 2014/08/17 -->
1.21 bentley 637: <li>Added fancy printing of <a href="https://man.openbsd.org/ktrace.1">ktrace(1)</a>'s ops argument to <a href="https://man.openbsd.org/kdump.1">kdump(1)</a>.
638: <li>Made <a href="https://man.openbsd.org/kdump.1">kdump(1)</a> display symbolically the mode argument of <a href="https://man.openbsd.org/mkdir.1">mkdir(1)</a>, <a href="https://man.openbsd.org/mkfifo.1">mkfifo(1)</a>, <a href="https://man.openbsd.org/mknod.2">mknod(2)</a> and <a href="https://man.openbsd.org/umask.2">umask(2)</a>.
639: <li>/etc/netstart now executed using <a href="https://man.openbsd.org/sh.1">sh(1)</a> instead of sourcing it.
1.1 deraadt 640: <!-- 2014/08/16 -->
1.21 bentley 641: <li>Repaired operation of <a href="https://man.openbsd.org/sysctl.8">sysctl(8)</a> kern.arandom.
1.1 deraadt 642: <!-- 2014/08/15 -->
1.21 bentley 643: <li>Removed support for public key operations from <a href="https://man.openbsd.org/ubsec.4">ubsec(4)</a> and <a href="https://man.openbsd.org/safe.4">safe(4)</a>.
644: <li><a href="https://man.openbsd.org/lofn.4">lofn(4)</a> and <a href="https://man.openbsd.org/nofn.4">nofn(4)</a> removed as obsolete, due to reliance on the <a href="https://man.openbsd.org/crypto.4">crypto(4)</a> interface.
1.1 deraadt 645: <!-- 2014/08/14 -->
646: <li>Switched to using O_CLOEXEC wherever we open a file and then call fcntl(F_SETFD, FD_CLOEXEC)
647: on it. Reduces system calls and improves thread-safety for libraries.
1.21 bentley 648: <li>More fixes in the attach failure path for <a href="https://man.openbsd.org/vax/ze.4">ze(4/vax)</a>.
649: <li>Added bounce matching for [] and {} to <a href="https://man.openbsd.org/mg.1">mg(1)</a>.
650: <li>Synced <a href="https://man.openbsd.org/relayd.8">relayd(8)</a> and <a href="https://man.openbsd.org/httpd.8">httpd(8)</a> with RFC 7230-7235 phrases and IANA registered status codes.
651: <li>In <a href="https://man.openbsd.org/oce.4">oce(4)</a>, implemented rxrinfo ioctl for cluster usage statistics.
652: <li><a href="https://man.openbsd.org/systat.1">systat(1)</a> now only show active pools by default, pressing "A" shows all pools.
1.1 deraadt 653: <!-- 2014/08/13 -->
1.21 bentley 654: <li>Updated <a href="https://man.openbsd.org/drm.4">drm(4)</a> to libdrm 2.4.56.
655: <li>Began cleanup of scaling units in <a href="https://man.openbsd.org/roff.7">roff(7)</a>.
656: <li>Some <a href="https://man.openbsd.org/X.7">X(7)</a> resource files moved to /usr/X11R6/share/X11/app-defaults.
657: <li>With a non-existent <a href="https://man.openbsd.org/httpd.8">httpd(8)</a> root, removed root prefix from PATH_INFO (useful for virtual FastCGI scripts inside a <a href="https://man.openbsd.org/chroot.8">chroot(8)</a>).
658: <li>Made sure <a href="https://man.openbsd.org/tftpd.8">tftpd(8)</a> always calls <a href="https://man.openbsd.org/freeaddrinfo.3">freeaddrinfo(3)</a> after <a href="https://man.openbsd.org/getaddrinfo.3">getaddrinfo(3)</a>.
659: <li>In <a href="https://man.openbsd.org/httpd.8">httpd(8)</a>, provided a failsafe version of the path_info() function.
660: <li>Correctly set the rtable ID of the packet header when sending <a href="https://man.openbsd.org/pppoe.4">pppoe(4)</a> Active Discovery Terminate packets.
661: <li>Brought <a href="https://man.openbsd.org/pflow.4">pflow(4)</a> IPFIX sequence numbers in line with the RFC.
1.1 deraadt 662: <!-- 2014/08/12 -->
1.21 bentley 663: <li>Sync <a href="https://man.openbsd.org/pf.conf.5">pf.conf(5)</a> behaviour with the man page regarding parent anchors for "once" rules.
1.1 deraadt 664: <!-- 2014/08/11 -->
1.21 bentley 665: <li>On mips64, stopped <a href="https://man.openbsd.org/uvm_map.9">uvm_map(9)</a> from receiving addresses outside userland bounds.
666: <li>Fixed <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> copy mode problems: in vi mode, include the last character if you moved the cursor up or left; in emacs mode include the last character if you moved the cursor left.
667: <li>Added <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> flags to selectp, to enable and disable input to a pane.
668: <li>In <a href="https://man.openbsd.org/ksh.1">ksh(1)</a>, separately set FD_CLOEXEC if the new fd was >= FDBASE. Affects scripts that directly use 9 of the first 10 file descriptors.
669: <li>When <a href="https://man.openbsd.org/dhclient.8">dhclient(8)</a> is parsing 32 bit values, verify that we received 4 bytes.
670: <li>Validate len field in <a href="https://man.openbsd.org/dhcpd.8">dhcpd(8)</a> for proper length, not just "not zero."
671: <li>Brought back r1.131 of sys/kern/subr_pool.c: take the pools mutex when copying stats out of it in the <a href="https://man.openbsd.org/sysctl.8">sysctl(8)</a> path.
1.1 deraadt 672: <li>Put back the checks about RTF_LOCAL routes now that userland tools are aware of them.
1.21 bentley 673: <li>Stopped <a href="https://man.openbsd.org/arp.4">arp(4)</a> and <a href="https://man.openbsd.org/ndp.8">ndp(8)</a> from trying to delete RTF_LOCAL entries.
1.1 deraadt 674: <!-- 2014/08/10 -->
1.21 bentley 675: <li>Fixed unchecked memory allocation (and potential leak upon error) in <a href="https://man.openbsd.org/ssl.8">ssl(8)</a> ssl3_get_cert_verify().
676: <li>Provided ssl3_get_cipher_by_id() function that allows <a href="https://man.openbsd.org/ssl.8">ssl(8)</a> ciphers to be looked up by their ID.
677: <li>Always write core file of a non-suid process into <a href="https://man.openbsd.org/pwd.1">pwd(1)</a>, even if <a href="https://man.openbsd.org/sysctl.8">sysctl(8)</a> kern.nosuidcoredump is 2 or 3.
678: <li>Fixed race in <a href="https://man.openbsd.org/relayd.8">relayd(8)</a> that caused non-persistent PUT connections with a short body to hang.
679: <li>Removed disabled (weakened export and non-ephemeral DH) cipher suites from the <a href="https://man.openbsd.org/ssl.8">ssl(8)</a> cipher list.
680: <li>If <a href="https://man.openbsd.org/pkg_create.1">pkg_create(1)</a> is run as non-root, restore correct group/owner to root/bin, and remove write permissions without explicit modes.
681: <li>Fixed kqueue read/write filters for msdosfs and <a href="https://man.openbsd.org/fuse.4">fuse(4)</a> filesystems.
1.1 deraadt 682: <!-- 2014/08/09 -->
1.21 bentley 683: <li>Fixed the length check for reinjected <a href="https://man.openbsd.org/icmp.4">icmp(4)</a> packets. Stops <a href="https://man.openbsd.org/divert.4">divert(4)</a> discarding valid packets shorter than 20 bytes.
684: <li>Fixed <a href="https://man.openbsd.org/readelf.1">readelf(1)</a> "--debug-dump=frames-interp" output.
685: <li><strong>5.4 and 5.5 SECURITY FIXES: Backported security fixes from openssl 1.0.1i</strong><br>A source code patch is available for <a href="errata54.html#014_openssl">5.4</a> and <a href="errata55.html#010_openssl">5.5</a>.
686: <li>Initial <a href="https://man.openbsd.org/sysmerge.8">sysmerge(8)</a> support for handling configuration files from packages.
687: <li>Now that <a href="https://man.openbsd.org/uhub.4">uhub(4)</a> can deal with them, added support for non-root hubs.
688: <li>Made <a href="https://man.openbsd.org/uhub.4">uhub(4)</a> correctly recognise Super Speed devices.
689: <li>Allow <a href="https://man.openbsd.org/httpd.conf.5">httpd.conf(5)</a> to include the "types" section anywhere in the configuration file.
690: <li>Removed <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> support for the continuously reporting "any" mouse mode (never worked properly, rarely used).
1.1 deraadt 691: <!-- 2014/08/08 -->
692: <li>Backport from binutils-2.17 the correct i386/amd64 register->int assignments for CFI.
1.21 bentley 693: <li>Allow <a href="https://man.openbsd.org/httpd.8">httpd(8)</a> to use a fastcgi target as the default index (eg index.php).
694: <li>Fixed <a href="https://man.openbsd.org/relayd.8">relayd(8)</a> when using DNS over <a href="https://man.openbsd.org/udp.4">udp(4)</a> so it continues to work after the first request.
695: <li><a href="https://man.openbsd.org/radeon.4">radeon(4)</a> fixes: only apply hdmi "bpc pll" flags when encoder mode is hdmi; fixed dithering on some panels; fixed lane/clock setup for dp 1.2 capable devices.
696: <li>Brought <a href="https://man.openbsd.org/mandoc.1">mandoc(1)</a> handling of defective prologues closer to groff.
697: <li>Simplified <a href="https://man.openbsd.org/man.7">man(7)</a> validation in <a href="https://man.openbsd.org/mandoc.1">mandoc(1)</a>.
698: <li>Fixed <a href="https://man.openbsd.org/mandoc.1">mandoc(1)</a> floating point handling. Fixes the indentation of the <a href="https://man.openbsd.org/readline.3">readline(3)</a> manual.
699: <li>Allow <a href="https://man.openbsd.org/httpd.8">httpd(8)</a> to serve emtpy (0 bytes) files.
700: <li>Improved <a href="https://man.openbsd.org/mandoc.1">mandoc(1)</a> handling of next-line scope when it is broken by end of file.
701: <li>Partial <a href="https://man.openbsd.org/mandoc.1">mandoc(1)</a> implementation of .Bd -centred; various improvements related to .Ex and .Rv.
702: <li>Made sure asynchronous commands do not race with synchronous ones in <a href="https://man.openbsd.org/xhci.4">xhci(4)</a>.
703: <li>Improved <a href="https://man.openbsd.org/xhci.4">xhci(4)</a> logic to determine the maximum endpoint service interface time payload.
704: <li>Made <a href="https://man.openbsd.org/xhci.4">xhci(4)</a> always report stalls, as <a href="https://man.openbsd.org/umass.4">umass(4)</a> relies on this information.
705: <li>Added support for using "-" as shorthand for stdin/stdout in <a href="https://man.openbsd.org/tradcpp.1">tradcpp(1)</a>.
1.1 deraadt 706: </ul>
![[BACK]](/icons/back.gif){kind=icon}
Return to plus57.html CVS log ![[TXT]](/icons/text.gif){kind=icon}
![[DIR]](/icons/dir.gif){kind=icon}
Up to [local] / www