===================================================================
RCS file: /cvsrepo/anoncvs/cvs/www/plus58.html,v
retrieving revision 1.2
retrieving revision 1.3
diff -u -r1.2 -r1.3
--- www/plus58.html 2015/08/06 09:10:49 1.2
+++ www/plus58.html 2015/08/09 00:39:22 1.3
@@ -1,4 +1,3 @@
-
@@ -76,6 +75,226 @@
+
+- In ssh, better refuse ForwardX11Trusted=no connections attempted after ForwardX11Timeout expires.
+
- In syslogd(8), add a -U option to specify an explicit address to receive UDP packets.
+
- Fix alignment issues in bridge(4).
+
+
- In ssh:
+
+- Fix math error in remote window calculations that causes eventual stalls for datagram channels.
+
- Call fatal() when a remote window update causes the window value to overflow.
+
+ - In sshd(8), add getpid to sandbox (bz#2419).
+
- Get jumbo frames working in oce(4).
+
- Allow to re-plug USB3 devices on the root hub withtout going through a suspend/resume cycle (or rebooting) with Intel ICH7 xHCI.
+
- In ps(1), remove the calculation that includes the process lifetime and just use the p_pctcpu value as %cpu time.
+
- In cwm(1), show an empty "ssh to" menu if the known_hosts file is missing.
+
- In syslogd(8), add the possiblity to store all syslog messages received from a specific host into a single log file.
+
- Never cache a RTF_GATEWAY route as next hop for a gateway route. This prevents rtentry loops when rt→rt_gwroute points to rt leading to an infamous "rtentry leak" panic.
+
+
- Enable vexpress(4) on armv7.
+
- Implement membar_* for armv7 with the dmb instruction.
+
- On amd64, fix trap setup for double faults.
+
- On amd64, force the return to userspace from execve to go through iretq to get all registers.
+
- In drm(4), read the lower 16-bits of the GCFGC "double word". This potentially fixes issues with some modes on machines with the 915GM chipset.
+
- Enable octdwctwo and add umass on octeon.
+
- Update to FreeType 2.6.
+
+
- On amd64 and i386, split AST handling from trap() into ast().
+
- Build Xserver(1) with large got on mips.
+
- Fix a memory leak in qe(4).
+
- In dhcpd(8), do not send routers (option 3) or static routes (option 33) when classless static routes (option 121, 249) are sent, per RFC 3442.
+
- In mandoc(1), ignore blank characters at the beginning of a conditional block, that is, after "\{".
+
+
- In acpimadt(4), completely skip entries for disabled LAPICs so they don't overwrite legitimate enabled ones.
+
- In drm(4), introduce the Linux completion API and use it.
+
- In cwm(1), replace screen region info gathering with XRandR equivalent of Xinerama queries.
+
+
- In ssh, fix "\"-escaping bug that caused forward path parsing to skip two characters and skip past the end of the string.
+
- In binutils 2.17, avoid an assertion failure in elf32_arm_size_dynamic_sections().
+
- Implement the missing gus_{malloc,free,mappage,...} to support cards that have no ad1848 chip and don't attach the ad1848 driver.
+
- In de(4), ensure the setup block is DMA reachable.
+
- In pkg_add(1), use machine_architecture (arch -s) when assembling PKG_PATHs using %m or %a. This is relevant on archs like powerpc.
+
- On octeon, reenable memory above 256mb now that uvm_pmr_get1page() has been fixed.
+
- In bridge(4), properly deliver broadcast-like packets to the network stack.
+
- Fix some weird bridge(4) configurations involving pseudo-drivers stacked on top of interfaces in a bridge.
+
- On macppc, use a single event counter for IPIs like other archs do.
+
- Reimplement the audio driver in a simpler way, removing unused/unusable functionality.
+
+
- In npppd(8):
+
+- Reset the LCP option state for dialin-proxy only if re-negotiation is enabled.
+
- Fix a use-after-free.
+
+ - In chmod(1), compress(1), du(1), grep(1) and ls(1), put fts_close() where missing.
+
- Allow uvideo_mmap_queue() to fail gracefully when the mmap queue is full.
+
- In libpciaccess, attempt to establish a write combining mapping instead of relying on mttrs. Setting the mttrs fails on the ThinkPad X1 rev. 3, making the xorg-video-vesa driver painfully slow.
+
- On macppc, do not quiesce the firmware on Quad G5 to let it manage the fans. This also unbreak "bsd -cd" on such machines.
+
- Stop garbage collecting mbufs from the ARP, IPv4 and IPv6 queues when an interface is destroyed or removed.
+
- In drm(4), introduce Linux work queue APIs and use them.
+
+
- In npppd(8), terminate all PPP sessions properly.
+
- Reenable the pool gc task. The problems it tickled by working outside the biglock on archs with mutex and clock interaction have been fixed.
+
- Apply normal handling to atfd+path args to chflagsat(2).
+
- Revert r1.38 of src/usr.bin/ssh/uidswap.c (don't call setgroups if we have zero groups).
+
- In sed(1), treat multiple "!" characters preceding a function as a single negation, per POSIX.
+
- On alpha, properly remember curproc in copy(9). This fixes a bug where it sleeps and resumes on a different processor.
+
- In httpd(8), add support for Lua patterns(7).
+
- In nm(1):
+
+- Correct a read after bound.
+
- Ensure that e_shentsize (sections header's size in bytes) is large enough to fill at least one Elf_Shdr.
+
- Ensure that freed variables in elf_symloadx() are reinitialised when an error is detected.
+
+ - On amd64, make sure that the page tables are created after esym and after end. This avoids a crash with small non-generic kernels that write to the page tables.
+
- In nm(1), before accessing data, check if the section header table is present and check the consistency of the section header table size.
+
- In npppd(8), properly handle zero-length 1701/udp and GRE packets.
+
+
- In ssh, don't count successful partial authentication as failures in monitor. This may have caused the monitor to refuse multiple authentications that would otherwise have successfully completed.
+
- On amd64 and i386, make it possible to create write combing mappings through /dev/mem.
+
- In pf(4), increment rule counters only after successful state insertion.
+
- In ssh, don't call setgroups if we have zero groups; there's no guarantee that it won't try to deref the pointer.
+
- In httpd(8), URL-encode $SERVER_NAME and $REMOTE_USER before using them in the Location header.
+
- Make xhci(4)'s root hub report the same status bits as physical USB3 hubs.
+
- Apparently some BIOSes not supporting xHCI natively switch USB ports back to EHCI at suspend, so route the ports back to xHCI at resume.
+
+
- In an(4), don't use uninitialized data as a return value.
+
- Don't leak memory if wsfont_rotate() fails.
+
- In httpd(8), allow to specify characters like "?" in the Location URI.
+
- In bgpd(8), fix a race between sending notifications to the SE and getting a new peer_up event in the RDE.
+
+
- In ipmi(4), fix a memory leak on failure.
+
- Fix a bug that causes uvm_pmr_get1page() to fail for allocations that specify an address constraint even when free pages that meet the constraint are still available.
+
- In libssl, provide EC_curve_nid2nist() and EC_curve_nist2nid().
+
- In Xserver(1), don't listen to "tcp" by default and add the -listen option.
+
- In xinput(1), fix a crash when enabling/disabling without a device argument.
+
+
- Remove obsolete MDC-2DES from libcrypto.
+
- In bgpd(8), when we terminate the session, show the number of (currently) known prefixes and the max-prefix limit and show ">" as soon as we go above the limit since there may be more that we haven't/won't process.
+
- Remove isp(4) now that the ql* family have replaced it.
+
+
- In LibreSSL:
+
+- Change DTLS client cert request code to match TLS. DTLS currently doesn't check whether a client cert is expected.
+
- Disable ENGINE_load_dynamic (dynamic engine support).
+
+ - In cmpci(4), set the closest available format for unsupported sample formats instead of returning EINVAL.
+
+
- Fix tap-to-click with ubcmtp(4).
+
- In tmux(1), change break-pane to take target and source panes (-t and -s) in line with other commands.
+
- On vax, make kernel text read-only and unreadable from userland.
+
- Add four new sensors to upd(4).
+
+
- On mips64, let alloc_contiguous_pages() round the allocation size to a page boundary, not to an u area boundary.
+
- On sgi, clear the PIC `write request' memory at initialization time. There is apparently a risk of spurious parity errors if we don't.
+
- Store a unique ID, an interface index, rather than a pointer to the receiving interface in the packet header of every mbuf. This will simplify garbage collection of mbufs and limit problems with dangling ifp pointers.
+
+
- In syslogd(8), implement -F to stay in the foreground.
+
- Bring back r1.78 and r1.79 of src/sys/dev/usb/uhub.c. They were thought to introduce a regression, but it turned out to be a hardware failure.
+
- Pass the "-nolisten tcp" option to Xserver(1) so that it doesn't listen on port 6000 by default.
+
- In trunk(4), fix a double free in the destroy path.
+
- In tmux(1), add the window_activity format.
+
- Make the wifi LED work with iwm(4).
+
- In LibreSSL, make CBS_get_any_asn1_element() more compliant with DER encoding.
+
+
- In ssh, return failure on RSA signature error.
+
- On sparc, build __moddi3, __muldi3 and __qdivrem from libkern, and built no-pie, instead of getting them from libgcc.a, built pie. This repairs boot blocks operation.
+
- In tmux(1), add a format for client PID (client_pid) and server PID (pid).
+
- Implement IQ calibration support for rtwn(4).
+
+
- Add plrtc(4), a driver for the ARM PrimeCell PL031 RTC.
+
- Parse _CST objects and use the C-states they describe when they're sane.
+
- In rtwn(4), busy-wait a short while after sending a command to rtwn(4) firmware. This fixes selection of initial TX rate.
+
- In glob(3), initialize the glob_t before the first failure check.
+
- In binutils 2.17, add more encodings of options for the armv7 barrier instructions and allow non "sy"/0xf options for dmb. This omits the *ld options available in armv8 running in a32 mode.
+
- In LibreSSL, reject long-form tags in CBS_peek_asn1_tag. Currently, CBS only handles short-form tags.
+
+
- In pfctl(8):
+
+- Allow rule ID filter to be specified for "-s states" output.
+
- Respect the rule ID parameter (-R) specified along with "-s states" to filter out states that are not associated with a given rule from the output.
+
+ - In pppd(8), use memmove() for potentially overlapping regions.
+
- Fix rtwn(4) wifi LED support.
+
+
- 5.6 and 5.7 SECURITY FIX: several defects from OpenSSL (CVE-2015-1788, CVE-2015-1789, CVE-2015-1792). For more information, see the OpenSSL advisory.
A source code patch exists for 5.6 and 5.7.
+ - 5.6 and 5.7 SECURITY FIX: multiple reliability issues in smtpd.
A source code patch exists for 5.6 and 5.7.
+ - In libiberty, prevent an integer overflow leading to a heap-buffer overflow (CVE-2012-3509).
+
- In LibreSSL:
+
+- Avoid an infinite loop that can be triggered by parsing an ASN.1 ECParameters structure that has a specially malformed binary polynomial field (CVE-2015-1788).
+
- Avoid a potential out-of-bounds read in X509_cmp_time(), due to missing length checks (CVE-2015-1789).
+
- Avoid an infinite loop that can occur when verifying a message with an unknown hash function OID (CVE-2015-1792). (However, this code is not enabled/built in LibreSSL.)
+
+ - In the NFS code, avoid double-free in error path by cribbing the HASBUF flag logic from the rest of the kernel that deals with filename lookups.
+
+
- In autri(4):
+
+- Use the first 4 channels of the board. The previous channel setting caused DMA on the wrong memory location during recording.
+
- Don't claim big-endian, signed 8-bit or unsigned 16-bit samples are supported. This fixes sound on big endian machines.
+
+ - In snmpd(8), export the new pf "no-route" error counter.
+
+
- Plug an fd leak in httpd(8).
+
+
- In relayd(8), introduce a state on the ctl_relay_event struct. This makes it possible to better track the connection state of a session and stops doing double opens in certain situations using http relays.
+
- In pms(4), don't match Elantech v4 devices with firmware versions 0xX7XXXX or with firmware versions higher than 0xX8XXXX.
+
- Add initial support for the ARM Versatile Express boards as emulated by qemu with virtio memory ranges.
+
+
- Ensure polled bulk, control and interrupt transfers actually poll. This fixes panics on shutdown with various usb sticks.
+
- In tmux(1), add the -E flag to bypass update-environment when attaching or switching clients.
+
- Remove HBG support from the DCF77 drivers.
+
- On armv7, add initial exynos4 bits.
+
- Introduce unhandled_af() for cases where code conditionally does something based on an address family and later assumes one of the paths was taken. This reduces the amount of noise with static analysers and acts as a sanity check.
+
- Introduce unhandled_af() for cases where code conditionally does something based on an address family and later assumes one of the paths was taken. This reduces the amount of noise with static analysers and acts as a sanity check.
+
- Allow ehci to be built on platforms that lack a pci bus.
+
- On amd64 and i386, enable use of mwait in non-MP boxes and report # of C-substates up to C7, truncating trailing zeros.
+
+
- Make the qemu cortex a15 useable without trustzone.
+
- Allow the rtsol keyword in hostname.if(5) with net.inet6.ip6.forwarding=1.
+
- Enable rtwn(4) on RAMDISK_CD kernels for upgrades.
+
- Put the link-layer address back into the gateway field of RTF_LOCAL routes. This fixes the "arpresolve: unresolved and rt_expire == 0" issue.
+
+
- In tmux(1), handle the RGB colour escape sequence like xterm(1) does.
+
- On alpha, do not unconditionally clear pcb_onfault after a uvm_fault. This should fix getentropy issues on MP systems.
+
- In tmux(1), fix an uninitialized variable.
+
- In iked(8), fix coupling and decoupling operations.
+
- In pf(4), improve error handling and recovery during state insertion. This also fixes a few bugs.
+
- Fix races on powerpwc:
+
+- Replace the per-entry locks by a global HASH lock. This guarantees the atomicity of pte_inser{32,64}() when a pted has to be removed first.
+
- Protect VP lookups to guarantee that a pted won't be freed or reused by a CPU while another CPU is manipulating it.
+
+ - In tmux(1), if a window or session target is prefixed with an =, then only an exact name or index match is accepted.
+
+
- In tmux(1), make "new -d" work without unsetting $TMUX.
+
- Add the new rtwn(4) for RTL8188CE wifi cards.
+
- Check for a resolv.conf update the first time the resolver is used after pid has changed.
+
- Add support for em(4) on the Teak 3020, a system based on the Intel Tolopai (EP80579).
+
- Prevent a kernel panic on macppc caused by the kernel perfpolicy code.
+
- In tmux(1):
+
+- Add support for a single "marked pane".
+
- Make unsetting a global option restore it to the default.
+
+
+ - In from(1), treat a missing mail spool the same as a zero-length mail spool unless the -f option was specified.
+
- In pf(4), avoid division by 0 and using a 0 upper bound for arc4random_uniform(3).
+
- Fix audio interrupts on U4 systems.
+
- In arp(8) and ndp(8), dont 'assume that the sockaddr_dl will be in the gateway sa. This fixes a regression introduced with the support of multiple connected routes.
+
+
- Rework the ppp handling in the tty layer so it has its own private pool to allocate packet memory out of. This fixes a long standing issue in ppp on a tty/serial line where it allocates mbufs at IPL_SOFTTTY, which is above the IPL_NET the mbuf layer protects itself at.
+
- Fix a memory leak in sensorsd(8).
+
- Add a new HT-PCI bridge driver and the necessary glue to openpic(4) to get interrupts working on U4 machines. With this OpenBSD can run on PowerMac11,2 (Quad G5).
+
+
- Make sparc go PIE (not "static PIE" yet).
+
- On sparc, override PIE range constants with a variable which is decided at runtime, in order to only enable PIE on sun4m which has a large enough address space.
+
- In the lazy binding routine, make sure we actually allocate the stack we need, instead of corrupting the caller's stack by mistake. This fixes segfaults in __powerpc_read_tcb() reported on earlier G3 systems.
+
- Enable secureplt by default on alpha.
+
- Allow gcc(1) to produce more precise relocation information on alpha. This will be necessary to enable secureplt by default.
+
- Switch m88k ports to binutils 2.17.
+
- In relayd8, fix a memory leak in an error path.
- In mandoc(1), implement the roff(7) "r" conditional.
@@ -794,6 +1013,7 @@
- For directories whose times or mode will be fixed up in the clean-up pass, record their dev+ino and then use open(O_DIRECTORY)+fstat() to verify that we're updating the correct directory before using futimens() and fchmod().
- Correct buffer overflow in handling of pax extension headers, caught by the memcpy() overlap check.
- [more...]
+