[BACK]Return to plus59.html CVS log [TXT][DIR] Up to [local] / www

Diff for /www/plus59.html between version 1.2 and 1.3

version 1.2, 2016/02/29 21:29:06 version 1.3, 2016/03/01 15:04:53
Line 76 
Line 76 
 <p>  <p>
   
 <ul>  <ul>
   <!-- 2015-10-31 -->
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/ntpd.8">ntpd(8)</a>, revert some parts introduced with the original server rtable support, so servers with numeric IP addresses won't be skipped.
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/mg.1">mg(1)</a>, mark *Completions* buffer as read-only.
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/httpd.8">httpd(8)</a>, revert usr.sbin/httpd/httpd.c r1.42 (fix PATH_INFO for "/" requests). It breaks <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/slowcgi.8">slowcgi(8)</a> and php-fpm setups.
   <!-- 2015-10-30 -->
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/mandoc.1">mandoc(1)</a> do not access a NULL pointer when a .Bd macro has no arguments at all.
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/ntpd.8">ntpd(8)</a>, remove support for sending status reports to syslog on SIGINFO.
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/cvs.1">cvs(1)</a>, fix a crash in pserver mode when CVSROOT/passwd contains an old DES password.
   <li>Fix interaction between <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/drm.4">inteldrm(4)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/amd64/efifb.4">efifb(4)</a>.
   <!-- 2015-10-29 -->
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/mg.1">mg(1)</a>, fix opening dired from the command line.
   <li>In libcrypto, add support for the Poly1305 Message Authentication Code.
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/asmc.4">asmc(4)</a>, enable the keyboard backlight led earlier to avoid a race.
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/ping.8">ping(8)</a>, back out chacha.
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/rebound.8">rebound(8)</a>, print stats upon SIGUSR1.
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/mailq.8">smtpctl(8)</a>, implement the "discover" subcommand.
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/ssh.1">ssh(1)</a>, fix "PubkeyAcceptedKeyTypes +..." inside a Match block.
   <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/drm.4">inteldrm(4)</a> attach to <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/pci.4">pci(4)</a> instead of <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/vga.4">vga(4)</a>. This is needed for machines where Intel graphics isn't the primary graphics device and on systems with UEFI firmware that put the device in non-VGA mode.
   <!-- 2015-10-28 -->
   <li>Use <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man2/pledge.2">pledge(2)</a> and privsep in <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/rdate.8">rdate(8)</a>.
   <li>Use <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man2/pledge.2">pledge(2)</a> in <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/at.1">at(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/cap_mkdb.1">cap_mkdb(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/cron.8">cron(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/crontab.1">crontab(1)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/last.1">last(1)</a>.
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/octeon/cnmac.4">cnmac(4)</a>, enable TCP/UDP checksum offloading on packet transmission.
   <li>Support backspace in <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/softraid.4">softraid(4)</a> boot passphrase prompt.
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/lpd.8">lpd(8)</a>, remove pidfile support.
   <li>Use <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man2/pledge.2">pledge(2)</a> in <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/amd64/ZZZ.8">apm(8)</a>.
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man5/resolv.conf.5">resolv.conf(5)</a>, remove support for "[addr]:port" syntax from the "nameserver" line.
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/smtpd.8">smtpd(8)</a>, support <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man5/aliases.5">aliases(5)</a> entries resolving to maildir:/path.
   <!-- 2015-10-27 -->
   <li>Add a rcpt-to paramater to <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man5/smtpd.conf.5">smtpd.conf(5)</a>.
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/unbound.8">unbound(8)</a>, don't use a pidfile by default.
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/relayd.8">relayd(8)</a>, change cipher-server-preference to be on by default.
   <!-- 2015-10-26 -->
   <li>Document <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man5/eigrpd.conf.5">eigrpd.conf(5)</a>.
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/eigrpd.8">eigrpd(8)</a>:
   <ul>
   <li>Print a missing "metric" before the actual metric when printing a redistribute line.
   <li>Whenever a summary route is activated, install a respective blackhole route in the FIB.
   </ul>
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/pkg-config.1">pkg-config(1)</a>, do not reject properties with no whitespace after the colon.
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/repquota.8">repquota(8)</a>, don't allow -a together with specifying filesystems.
   <li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/makemap.8">makemap(8)</a> for values containing a "#".
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/dhclient.8">dhclient(8)</a>, add the ability to use option 119 ("Domain Search") if supplied by the server.
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/fdisk.8">fdisk(8)</a>, add GPT editing.
   <li>Remove <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-5.8/man8/rip6query.8">rip6query(8)</a>.
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/crontab.1">crontab(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/diff.1">diff(1)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/sendbug.1">sendbug(1)</a>, remove TMPDIR support.
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/top.1">top(1)</a>, print the uptime too.
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/httpd.8">httpd(8)</a>, fix PATH_INFO for "/" requests.
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/mrouted.8">mrouted(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/pppd.8">pppd(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/rarpd.8">rarpd(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/rbootd.8">rbootd(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/smtpd.8">smtpd(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/amd64/wsmoused.8">wsmoused(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/ypserv.8">ypserv(8)</a>, remove <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man3/pidfile.3">pidfile(3)</a> support.
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/smtpd.8">smtpd(8)</a>, avoid a potential double free.
   <!-- 2015-10-25 -->
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/ssh.1">ssh(1)</a>, expand tildes in filenames passed to -i before checking whether or not the identity file exists in case the shell doesn't do the expansion (bz#2481).
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/route6d.8">route6d(8)</a>, fix a memory leak.
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/ssh.1">ssh(1)</a>, do not prepend "exec" to the shell command run by "Match exec" in a config file (bz#2471).
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/tmux.1">tmux(1)</a>, extend the modifiers allowed before formats.
   <li>Use <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man2/pledge.2">pledge(2)</a> in <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/rtadvd.8">rtadvd(8)</a>.
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/cron.8">cron(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/ftpd.8">ftpd(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/route6d.8">route6d(8)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/rtadvd.8">rtadvd(8)</a>, remove pidfile support.
   <li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/installboot.8">installboot(8)</a> on i386/amd64 when softraid is on top of GPT.
   <li>Enable <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/asmc.4">asmc(4)</a> on i386.
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/asmc.4">asmc(4)</a>, fix seldomly seen "comm collision" errors.
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/disklabel.8">disklabel(8)</a>, remove support for the "b0" and "b1" <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man5/disktab.5">disktab(5)</a> capabilities.
   <li>Do not expose nd6 randomid's to userland via <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man2/ioctl.2">ioctl(2)</a>.
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/ping6.8">ping6(8)</a>, remove -g after IPV6_NEXTHOP removal.
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/ip6.4">ip6(4)</a>, remove IPV6_NEXTHOP implementation.
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/telnet.1">telnet(1)</a>, remove IP Source Route support.
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/ping6.8">ping6(8)</a>, implement <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/ping.8">ping(8)</a>'s -L option.
   <li>Remove the NLS support from libc messages.
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/tmux.1">tmux(1)</a>, remove TMPDIR support.
   <li>Use <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man2/pledge.2">pledge(2)</a> in
   <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/dig.1">dig(1)</a>,
   <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/host.1">host(1)</a>,
   <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/nslookup.1">nslookup(1)</a>,
   <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man6/quiz.6">nslookup(1)</a>,
   <!-- 2015-10-24 -->
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/eigrpd.8">eigrpd(8)</a>, keep conversions between the real and composite bandwidth consistent with what Cisco does.
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/ssh.1">ssh(1)</a>, fix keyscan output for multiple hosts/addresses on one line when host hashing or a non standard port is in use (bz#2479).
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/tcpdump.8">tcpdump(8)</a>, avoid a segfault with malformed DECnet packets.
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/ping6.8">ping6(8)</a>, move the output of the src address to the -v option. This syncs the output with that of <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/ping.8">ping(8)</a>.
   <li>Ignore Router Advertisment's current hop limit.
   <li>Wait a short while between setting a USB device's address and reloading its descriptor. This fixes a flaky attach of USB devices on the Thinkpad Helix 2.
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/syslogd.8">syslogd(8)</a>, stop the chrooted child from trying to load the default CA file.
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/bgpctl.8">bgpctl(8)</a>:
   <ul>
   <li>Print if a route is redistributed or not at least for static and connected.
   <li>Allow other MRT message types to be parsed.
   </ul>
   <li>Add <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/pair.4">pair(4)</a>, a vether-based virtual Ethernet driver to interconnect rdomains and bridges on the local system.
   <!-- 2015-10-23 -->
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/octeon/cnmac.4">cnmac(4)</a>, make use of hardware RX checksum validation.
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man3/catopen.3">catopen(3)</a>, verify that an opened message catalog is valid. This avoids integer overflows and out-of-boundary accesses.
   <li>Fix renaming in the root directory of FAT filesystems.
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/syslogd.8">syslogd(8)</a>, if a write to a tty is blocked, use an event instead of forking.
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/tmux.1">tmux(1)</a>, add a format for scroll position.
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/ndp.8">ndp(8)</a>, don't do DNS lookups when -n is specified.
   <li>Split up <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/tun.4">tun(4)</a> into tun(4) and <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/tap.4">tap(4)</a>.
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/ntpd.8">ntpd(8)</a>, no longer allow upstream NTP servers to be in multiple routing tables.
   <li>Don't enable /etc/fonts/conf.d/10-autohint.conf by default. It causes problems with glyphs exceeding the cell size.
   <li>Introduce a new <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man3/sysctl.3">sysctl(3)</a> NET_RT_IFNAMES that returns only ifnames to ifindex mappings.
   <li>Use <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man2/pledge.2">pledge(2)</a> in
   <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/ldpctl.8">ldpctl(8)</a>,
   <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/ldpd.8">ldpd(8)</a>,
   <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/route.8">route(8)</a>,
   <li>Translate calendar files to UTF-8.
   <!-- 2015-10-22 -->
   <li>On amd64 and i386, enable <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/viornd.4">viornd(4)</a> on RAMDISK_CD.
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/eigrpd.8">eigrpd(8)</a>, fix some bugs in the handling of the RTM_GET and RTM_CHANGE messages.
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/mandoc.1">mandoc(1)</a>, avoid a NULL pointer dereference.
   <li>Stop linking <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/iked.8">iked(8)</a> statically. This has benefits like having full ASLR and taking take advantage of libcrypto updates.
   <li>Use <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man2/pledge.2">pledge(2)</a> in <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/addr2line.1">addr2line(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/iked.8">iked(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/login_yubikey.8">login_yubikey(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/nc.1">nc(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/objdump.1">objdump(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/ps.1">ps(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/readelf.1">readelf(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/strings.1">strings(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/su.1">su(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/top.1">top(1)</a> and
   <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/w.1">w(1)</a>.
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/bgpd.8">bgpd(8)</a>, revert usr.sbin/bgpd/parse.y r1.282 that allowed for empty blocks for peers. It broke the grammar by introducing shift/reduce errors.
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/tmux.1">tmux(1)</a>, fix "tmux killw\; detach".
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/bgpd.8">bgpd(8)</a>, log and ignore received empty route messages.
   <!-- 2015-10-21 -->
   <li>Use <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man2/pledge.2">pledge(2)</a> in <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/doas.1">doas(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man6/hangman.6">hangman(6)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/renice.8">renice(8)</a>.
   <li>In libssl:
   <ul>
   <li>Avoid a (harmless) read and write overrun in the RC4 code.
   <li>Avoid a segfault in "openssl gendh 0".
   </ul>
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/ssh.1">ssh(1)</a>, fix a memory leak in an error path.
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/tmux.1">tmux(1)</a>, add a default binding for mouse wheel up to scroll into history.
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/ssh.1">ssh(1)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man5/moduli.5">moduli(5)</a>, remove Diffie-Hellman moduli entries below 2048 bits.
   <!-- 2015-10-20 -->
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/eigrpd.8">eigrpd(8)</a>, add support for route summarization.
   <li>Add a new <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man2/getsockopt.2">getsockopt(2)</a> option IP_IPDEFTTL to retrieve the default TTL.
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/write.1">write(1)</a>, fix writing to other user's tty.
   <li>Use <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man2/pledge.2">pledge(2)</a> in <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/rmt.8">rmt(8)</a>.
   <li>Replace dnssocket() and dnsconnect() with a SOCK_DNS flag on <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man2/socket.2">socket(2)</a>.
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/vr.4">vr(4)</a>, fix 802.1p VLAN priority code points for VLAN_HWTAGGING.
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/tcpdump.8">tcpdump(8)</a>, avoid division by zero by adding an explicit check for a malformed AS segment.
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/eigrpd.8">eigrpd(8)</a>, fix a use-after-free.
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/iked.8">iked(8)</a>, unbreak OCSP support.
   <!-- 2015-10-19 -->
   <li>Use <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man2/pledge.2">pledge(2)</a> in <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/nice.1">nice(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/radiusctl.8">radiusctl(8)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/radiusd.8">radiusd(8)</a>.
   <li>In libssl, stop supporing legacy time formats that OpenSSL supports.
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/eigrpd.8">eigrpd(8)</a>, fix memory leaks in error paths.
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/iked.8">iked(8)</a>, remove IKEv1 support.
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/radiusd.8">radiusd(8)</a>, avoid a NULL dereference.
   <li>Update to freetype 2.6.1.
   <!-- 2015-10-18 -->
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/bge.4">bge(4)</a>, move rxeof and txeof outside the kernel lock.
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/drm.4">drm(4)</a>, backport a fix to prevent machines from hanging or resetting.
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/crunchgen.8">crunchgen(8)</a>, avoid integer overflow with very large files.
   <li>Use <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man2/pledge.2">pledge(2)</a> in <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/bgplg.8">bgplg(8)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/inetd.8">inetd(8)</a>.
   <!-- 2015-10-17 -->
   <li>Add two new system calls: dnssocket() and dnsconnect().
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/drm.4">drm(4)</a>, don't poke registers on the wrong PCI device. This should fix machines such as the Asus EeePC 701.
   <li>Use <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man2/pledge.2">pledge(2)</a> in <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/csh.1">csh(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/sort.1">sort(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/savecore.8">savecore(8)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/tmux.1">tmux(1)</a>.
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/ping6.8">ping6(8)</a>, implement -w like in <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/ping.8">ping(8)</a>.
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/bgpd.8">bgpd(8)</a>, do not accept fds on the control socket.
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/snmpd.8">snmpd(8)</a>, tighten up the control socket: do not allow users to terminate the daemon by sending corrupted imsgs.
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/xinit.1">xinit(1)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/xdm.1">xdm(1)</a>, don't automatically launch dbus as part of the default user sessions.
   <!-- 2015-10-16 -->
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/ssh.1">ssh(1)</a>, increase the minimum modulus that will be sent or accepted in diffie-hellman-group-exchange to 2048 bits.
   <li>Unbreak <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/route6d.8">route6d(8)</a>: adding unneeded space to its cmsg item breaks <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man2/sendmsg.2">sendmsg(2)</a>.
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/sysmerge.8">sysmerge(8)</a>, drop usage of TMPDIR.
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/ping6.8">ping6(8)</a>:
   <ul>
   <li>Move -t and -w functionality to -a.
   <li>Remove RFC 4620 support.
   </ul>
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/iwm.4">iwm(4)</a>, fix occasional firmware errors while bringing the interface up or scanning.
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man3/nlist.3">nlist(3)</a> and other nlist implementations, validate parsed ELF values to prevent out of boundary accesses.
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man6/hack.6">hack(6)</a>, disable the "!" command to escape to a shell.
   <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/patch.1">patch(1)</a>, add native support for <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/ed.1">ed(1)</a>-style diffs. This allows for a stronger <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man2/pledge.2">pledge(2)</a>.
   <li>Use <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man2/pledge.2">pledge(2)</a> in <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/cu.1">cu(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/getty.8">getty(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/pwd_mkdb.8">pwd_mkdb(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/route6d.8">route6d(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/vipw.8">vipw(8)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/zic.8">zic(8)</a>.
 <!-- 2015-10-15 -->  <!-- 2015-10-15 -->
 <li>Add the _rebound user and group in order to improve privdrop for <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/rebound.8">rebound(8)</a>.  <li>Add the _rebound user and group in order to improve privdrop for <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/rebound.8">rebound(8)</a>.
 <li>Use <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man2/pledge.2">pledge(2)</a> in <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/ftp.1">ftp(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/identd.8">identd(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/login_token.8">login_token(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/rebound.8">rebound(8)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/sdiff.1">sdiff(1)</a>.  <li>Use <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man2/pledge.2">pledge(2)</a> in <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/ftp.1">ftp(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/identd.8">identd(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/login_token.8">login_token(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/rebound.8">rebound(8)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/sdiff.1">sdiff(1)</a>.
Line 220 
Line 386 
 <li>Make uid checking on ~/.forward files more strict. This avoids users from creating hardlink to root-owned files and leaking the first line.  <li>Make uid checking on ~/.forward files more strict. This avoids users from creating hardlink to root-owned files and leaking the first line.
 <li>Fix a use-after-free and out-of-bounds memory reads in the (unprivileged) lookup process. This avoids crashes or potential arbitrary code execution.  <li>Fix a use-after-free and out-of-bounds memory reads in the (unprivileged) lookup process. This avoids crashes or potential arbitrary code execution.
 </ul>  </ul>
   <li>Revert src/sys/net/route.c r1.245. It breaks some NFS setups.
 <li>Update to tzdata2015g from ftp.iana.org.  <li>Update to tzdata2015g from ftp.iana.org.
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/asmc.4">asmc(4)</a>, relax vendor comparison to match variations found in older models such as the MacMini1,1.  <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/asmc.4">asmc(4)</a>, relax vendor comparison to match variations found in older models such as the MacMini1,1.
 <li>On alpha, make the pmap (more) MP-safe by protecting both the pmap itself and the pv lists with a mutex. This should make <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man9/pmap_enter.9">pmap_enter(9)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man9/pmap_remove.9">pmap_remove(9)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man9/pmap_page_protect.9">pmap_page_protect(9)</a> safe to use without holding the kernel lock.  <li>On alpha, make the pmap (more) MP-safe by protecting both the pmap itself and the pv lists with a mutex. This should make <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man9/pmap_enter.9">pmap_enter(9)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man9/pmap_remove.9">pmap_remove(9)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man9/pmap_page_protect.9">pmap_page_protect(9)</a> safe to use without holding the kernel lock.
Legend:
Removed from v.1.2  
changed lines
  Added in v.1.3