=================================================================== RCS file: /cvsrepo/anoncvs/cvs/www/plus59.html,v retrieving revision 1.12 retrieving revision 1.13 diff -c -r1.12 -r1.13 *** www/plus59.html 2016/03/07 18:58:34 1.12 --- www/plus59.html 2016/03/07 21:40:47 1.13 *************** *** 76,81 **** --- 76,174 ----

In tar(1), ignore trailing slashes and skip over duplicate slashes in chk_path() to avoid infinite loop when creating intermediate directories. +
In ssh(1), add a "Close session" log entry (at loglevel=verbose) to correspond to the existing "Starting session" one. + +
In tar(1), fix archiving a 101-character absolute path in ustar format. +
In httpd(8), fix a double free in the patterns code. +
In softraid(4), avoid using uninitialized variables in two corner cases. + +
In smtpd(8), add the "listen on socket" smtpd.conf(5) rule. +
In iwm(4), initialize net80211 callback pointers at attach time. This fixes a crash. +
In makemap(8), remove support for "dbm". + +
Remove the "GenuineIntel" check from x86 mdrandom(). This enables the use of RDRAND and TSC fallback on CPUs from other vendors, notably AMD. + +
In ssh(1), avoid fatal error for PKCS11 tokens that present empty key IDs (bz#1773). +
In ieee80211(9), don't pass QoS "no data" frames to the A-MPDU reordering logic. This avoids major confusion. + +
In ipmi(4), check the sensor name length more carefully. This avoids a panic on the Dell R210 II. +
In sftp(1), fix a regression where existing destination directories would incorrectly terminate recursive uploads (bz#2528). + +
In wsconsctl(8), hidms and uts(4), permit negative x and y coordinates in mouse.scale. +
On hppa64, make __cpu_simple_lock provide serialisation of the critical section. This makes atomic sequences actually atomic. +
In 5.8, fix a bug in vlan(4) and carp(4) refcounting. This will cause a panic when root does an "ifconfig destroy" of a the parent interface. (5.7 and -current are not affected.) +
In ieee80211(9), log frames which fall outside the BlockAack window in dmesg(8) if the interface debug flag is set. +
In pkg_add(1), drop privileges prior to running ftp(1). + +
On hppa, make __cpu_simple_lock provide serialisation of the critical section. This makes atomic sequences actually atomic. +
In ssh(1), turn off more old crypto: hmac-md5, ripemd, truncated HMACs, RC4 and blowfish. +
In ssh(1), do not attempt to percent-expand an already-canonicalised addresses. This avoids unnecessary failures when attempting to connect to scoped IPv6 addresses. +
In hexdump(1), fix a bug that caused nothing to be skipped when skipping exactly the number of bytes present in a regular file was requested. +
In 5.8, fix a kernel crash when root creates, changes or destroys carp(4) interfaces multiple times with ifconfig(8). (5.7 and -current are not affected.) +
In ssh(1), make application of rekey limits more accurate (related to bz#2521). + +
In ieee80211(9): +
- Work around buggy APs which occasionally emit sequence numbers much higher than the current 11n BlockAck window. +
- Stop requiring a BlockAck session timeout. Just use it if the AP is asking for it. +
+
In iwn(4), fix off-by-one in a loop termination condition. +
In dhcpd(8), avoid a use-after-free when parsing address ranges from a config. +
In vmd(8), avoid a double free in an error path. + +
Update to xkeyboard-config 2.17. +
In pchtemp(4), add support for the Intel 9 Series. +
In radeondrm(4), enable the code that reads the BIOS from the ACPI VFCT table on platforms with ACPI. + +
Fix iwn(4) CCMP replay detection so it does not drop out-of-order A-MPDU subframes. This helps 11n mode with WPA. +
In the msdosfs code, guard against integer overflow when checking whether writing to a file stays within the maximum file size. +
Make write(1) explicitly ASCII only. This prevents sending of potentially harmful bytes to terminals that do not support UTF-8. +
In iwm(4) and iwn(4), set max A-MPDU length to 64k instead of 4k and tell the firmware about A-MPDU spacing. +
In ieee80211(9), store ADDBA request and response parameters in the block ack record. Now it is possible keep track of the ACK policy and echo it back to the AP. This fixes Apple Airport APs. +
On mips64, re-enable OpenGL. +
In ssh(1), fix a problem where the mux master would sporadically fail to notice that the client had exited. +
In tmux(1), do not wrap cursor at start or end of history. +
Use pledge(2) in talk(1) and talkd(8). + +
On amd64 and i386, add /dev/ipmi0. +
In ipmi(4), implement FreeBSD-compatible IOCTL to access BMC. +
In iwn(4): +
- Restore the CCMP key to firmware after HT protection setting updates. This unbreaks WPA in 11n mode. +
- Pass 802.11 control frames in monitor mode. +
+
In ieee80211(9), restore the BlockAck session timer. +
In smtpd(8), when deleting a message, remove associated envelopes from the cache. +
In the ext2fs and ufs code, prevent a signed overflow. +
In tcpdump(8), fix an infinite loop when printing a country element in a management frame in case we hit channel Tx power limits that cannot be pretty-printed. +
In efiboot, work around peculiarities of (buggy) UEFI implementations: always call SetMode(), but don't report an error if the current mode is the same as the desired mode. +
In radeondrm(4), prevent a panic when the ROM size is 0. + +
In sd(4), avoid a possible use-after-free. +
In pkg_add(1), update the font cache after removing packages with @fontdir markers. +
In tcpdump(8), show 802.11 control frames. +
In dhclient(8), dhcpd(8) and dhcrelay(8), be very careful accepting packets via bpf(4). +
Enable hostctl(8) on amd64 and i386. +
In tail(1), fix off-by-one in argument parsing. +
Prevent efifb(4/amd64) from attaching if we are the console. + +
In smtpd(8), fixe a mismatch between DSN's subject line and its content. +
On amd64 and i386, correct signal delivery on systems where the AVX leaf is disabled. +
On amd64 RAMDISK_CD, enable pvbus(4), xen(4), xnf(4) and xspd(4). +
In libxcb, make sure the socket send buffer is at least 64KB. This should speed up applications that send images to the X server, like Firefox. +
In xen(4) and xenstore(4), make a few reliability improvements in the power management interface. +
Stop setting the process title in bgpd(8), dvmrpd(8), eigrpd(8), hostapd(8), httpd(8), ldpd(8), npppd(8), ntpd(8), ospf6d(8), ospfd(8), relayd(8), ripd(8), snmpd(8), smtpd(8) and vmd(8). This makes it possible to manage multiple copies of a daemon using the normal infrastructure by symlinking rc.d scripts to a new name. +
Use pledge(2) in pdisk(8/macppc). +
Implement "ldapctl -r datadir". + +
On armv7, add A20 support to sxirtc. +
In sxitimer(4/armv7), remove A20 support; agtimer is now used instead. +
Move to -release mode. +
In ldapd(8), add -r to specify an alternative directory to store/read the database. +
In ieee80211(9), stop requiring a BlockAck session timeout, but still honour the timeout if the AP requests it. +
In tcpdump(8), show 802.11 QoS frames properly.
On armv7, fix the encoding of AP bits for large page second-level short-descriptors.
Revamp /etc/ssl/cert.pem certificate information formatting and sort certificates in a more useful way. *************** *** 140,146 ****
In pf(4), fix a pf_state_key leak.
In ieee80211(9), honour ERP protection on 2 GHz channels in 11n mode.
In vmm(4/amd64), zero the buffer to be copied out to userland to avoid information leak. !
In 5.8, fix a kernel crash when root creates, changes or destroys vlan(4) interfaces multiple times with ifconfig(8).
In ieee80211(9), iwm(4) and iwn(4), keep track of HT protection settings in beacons and have 11n-capable drivers update hardware configuration accordingly.
In xnf(4), revert the minimum number of rx ring slots back to 32.
In vmx(4), do not send the mbuf to bpf(4) after passing it to the hardware. This could have resulted in a page fault. --- 233,239 ----
In pf(4), fix a pf_state_key leak.
In ieee80211(9), honour ERP protection on 2 GHz channels in 11n mode.
In vmm(4/amd64), zero the buffer to be copied out to userland to avoid information leak. !
In 5.8, fix a kernel crash when root creates, changes or destroys vlan(4) interfaces multiple times with ifconfig(8). (5.7 and -current are not affected.)
In ieee80211(9), iwm(4) and iwn(4), keep track of HT protection settings in beacons and have 11n-capable drivers update hardware configuration accordingly.
In xnf(4), revert the minimum number of rx ring slots back to 32.
In vmx(4), do not send the mbuf to bpf(4) after passing it to the hardware. This could have resulted in a page fault.