Annotation of www/plus59.html, Revision 1.21
1.1 deraadt 1: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
2: <html>
3: <head>
1.19 tj 4: <title>OpenBSD 5.9 Changelog</title>
1.1 deraadt 5: <meta name="description" content="OpenBSD 5.9 changes">
1.16 tb 6: <meta name="copyright" content="This document copyright 1996-2016 by OpenBSD.">
7: <meta name="viewport" content="width=device-width, initial-scale=1">
8: <link rel="stylesheet" type="text/css" href="openbsd.css">
1.21 ! tb 9: <link rel="canonical" href="https://www.openbsd.org/plus59.html">
1.1 deraadt 10: </head>
11:
12: <body bgcolor="#ffffff" text="#000000" link="#23238e">
13:
1.16 tb 14: <h2>
15: <a href="index.html">
16: <font color="#0000ff"><i>Open</i></font><font color="#000084">BSD</font></a>
1.19 tj 17: <font color="#e00000">5.9 Changelog</font>
18: </h2>
1.17 deraadt 19: <hr>
1.1 deraadt 20:
1.18 deraadt 21: <p>
1.1 deraadt 22: This selection is intended to include all important
23: and all user-visible changes.
24: For a complete record of all changes, please see the "source-changes"
25: mailing list, called "OpenBSD CVS"
26: in the <a href="mail.html#Archives">archives</a>,
27: or use <a href="anoncvs.html#CVS">CVS</a>.
28:
29: <p>
30: Note: <font color="#e00000">Problems for which patches exist are marked in red</font>.
31:
32: <p>
33: For changes in other releases, click below:<br>
34: <a href="plus20.html">2.0</a>,
35: <a href="plus21.html">2.1</a>,
36: <a href="plus22.html">2.2</a>,
37: <a href="plus23.html">2.3</a>,
38: <a href="plus24.html">2.4</a>,
39: <a href="plus25.html">2.5</a>,
40: <a href="plus26.html">2.6</a>,
41: <a href="plus27.html">2.7</a>,
42: <a href="plus28.html">2.8</a>,
43: <a href="plus29.html">2.9</a>,
44: <a href="plus30.html">3.0</a>,
45: <a href="plus31.html">3.1</a>,
46: <a href="plus32.html">3.2</a>,
47: <a href="plus33.html">3.3</a>,
48: <a href="plus34.html">3.4</a>,
49: <a href="plus35.html">3.5</a>,
50: <a href="plus36.html">3.6</a>,
51: <br>
52: <a href="plus37.html">3.7</a>,
53: <a href="plus38.html">3.8</a>,
54: <a href="plus39.html">3.9</a>,
55: <a href="plus40.html">4.0</a>,
56: <a href="plus41.html">4.1</a>,
57: <a href="plus42.html">4.2</a>,
58: <a href="plus43.html">4.3</a>,
59: <a href="plus44.html">4.4</a>,
60: <a href="plus45.html">4.5</a>,
61: <a href="plus46.html">4.6</a>,
62: <a href="plus47.html">4.7</a>,
63: <a href="plus48.html">4.8</a>,
64: <a href="plus49.html">4.9</a>,
65: <a href="plus50.html">5.0</a>,
66: <a href="plus51.html">5.1</a>,
67: <a href="plus52.html">5.2</a>,
68: <a href="plus53.html">5.3</a>,
69: <br>
70: <a href="plus54.html">5.4</a>,
71: <a href="plus55.html">5.5</a>,
72: <a href="plus56.html">5.6</a>,
73: <a href="plus57.html">5.7</a>,
1.2 tim 74: <a href="plus58.html">5.8</a>,
1.20 deraadt 75: <a href="plus60.html">6.0</a>,
1.1 deraadt 76: <a href="plus.html">current</a>.
77: <br>
78:
79: <p>
80: <h3><font color="#0000e0">Changes made between OpenBSD 5.8 and 5.9</font></h3>
81: <p>
82:
83: <ul>
1.14 tim 84: <!-- 2016-02-26 -->
85: <li>When doing a lookup in the routing table, account for the fact that L2 entries are always in the first table of a routing domain. This fixes a regression introduced during 5.7 and 5.8.
86: <!-- 2016-02-24 -->
87: <li>Fix ECMP routing by passing the correct destination address to the hash routine.
88: <li>On hppa, hppa64, macppc and sgi, restore validity checks for the disklabels read from disk. This fixes a problem when reading CDROM disklabels.
89: <!-- 2016-02-23 -->
1.15 beck 90: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/pkg_add.1">pkg_add(1)</a>, sanitize the environment thru a whitelist. Only pass what is relevant for <a href="http://man.openbsd.org/OpenBSD-current/man1/ftp.1">ftp(1)</a> and similar programs.
1.14 tim 91: <!-- 2016-02-22 -->
1.15 beck 92: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/macppc/pdisk.8">pdisk(8/macppc)</a>, fix display of pdisk partition sizes.
1.14 tim 93: <li>In the installer, fix macppc installs to HFS-partitioned disks.
1.15 beck 94: <li>Ensure the IP header is aligned correctly in the copies of multicast/broadcast packets received by a physical interface with <a href="http://man.openbsd.org/OpenBSD-current/man4/carp.4">carp(4)</a> interfaces on it.
95: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/ssh.1">ssh(1)</a>, fix a spurious error message when an incorrect passphrase is entered for keys.
96: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/patch.1">patch(1)</a>, properly handle ed-files which fully replace input file content.
97: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/smtpd.8">smtpd(8)</a>, avoid overriding the user-provided address family for a listener.
1.14 tim 98: <!-- 2016-02-21 -->
1.15 beck 99: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/eigrpd.8">eigrpd(8)</a>:
1.14 tim 100: <ul>
101: <li>Filter RTM_GET messages which are not from us.
102: <li>Make eigrpd(8) work against newer IOS routers.
103: <li>Add scope id only for unicast IPv6 packets.
104: <li>Skip redistributed routes when updating the FIB.
105: </ul>
1.15 beck 106: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/tcpdump.8">tcpdump(8)</a>, show details of beacon country elements in verbose mode only.
1.14 tim 107: <!-- 2016-02-20 -->
108: <li>On i386, fix a boot issue on non-ACPI i386 machines that need X permissions on the BIOS region in the ISA hole.
109: <li>On alpha, re-enable OpenGL.
110: <li>On alpha, avoid an ICE generated when building mesa with -O2.
111: <!-- 2016-02-19 -->
1.15 beck 112: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/azalia.4">azalia(4)</a>, enable snooping on Intel C610.
1.14 tim 113: <li>In random subsystem, avoid a undefined behaviour when using right shift operation.
114: <!-- 2016-02-18 -->
1.15 beck 115: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/em.4">em(4)</a>, add support for the Intel I219 network chip.
1.14 tim 116: <li>On arm, disable the stack protector when building libstdc++.
117: <!-- 2016-02-17 -->
118: <li>In ssh, unbreak SSHv1.
1.15 beck 119: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/syslogd.8">syslogd(8)</a>, prevent an integer overflow in syslogd when parsing the priority.
1.14 tim 120: <li>In /etc/ssl/cert.pem, add a few root certificates from Mozilla's cert store.
121: <!-- 2016-02-16 -->
1.15 beck 122: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/sshd.8">sshd(8)</a>, make sandboxed privilege separation the default.
1.13 tim 123: <!-- 2016-02-15 -->
1.15 beck 124: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/tar.1">tar(1)</a>, ignore trailing slashes and skip over duplicate slashes in chk_path() to avoid infinite loop when creating intermediate directories.
125: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/ssh.1">ssh(1)</a>, add a "Close session" log entry (at loglevel=verbose) to correspond to the existing "Starting session" one.
1.13 tim 126: <!-- 2016-02-14 -->
1.15 beck 127: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/tar.1">tar(1)</a>, fix archiving a 101-character absolute path in ustar format.
128: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/httpd.8">httpd(8)</a>, fix a double free in the patterns code.
129: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/softraid.4">softraid(4)</a>, avoid using uninitialized variables in two corner cases.
1.13 tim 130: <!-- 2016-02-13 -->
1.15 beck 131: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/smtpd.8">smtpd(8)</a>, add the "listen on socket" <a href="http://man.openbsd.org/OpenBSD-current/man5/smtpd.conf.5">smtpd.conf(5)</a> rule.
132: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/iwm.4">iwm(4)</a>, initialize net80211 callback pointers at attach time. This fixes a crash.
133: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/makemap.8">makemap(8)</a>, remove support for "dbm".
1.13 tim 134: <!-- 2016-02-12 -->
135: <li>Remove the "GenuineIntel" check from x86 mdrandom(). This enables the use of RDRAND and TSC fallback on CPUs from other vendors, notably AMD.
136: <!-- 2016-02-11 -->
1.15 beck 137: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/ssh.1">ssh(1)</a>, avoid fatal error for PKCS11 tokens that present empty key IDs (bz#1773).
138: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man9/ieee80211.9">ieee80211(9)</a>, don't pass QoS "no data" frames to the A-MPDU reordering logic. This avoids major confusion.
1.13 tim 139: <!-- 2016-02-10 -->
1.15 beck 140: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/ipmi.4">ipmi(4)</a>, check the sensor name length more carefully. This avoids a panic on the Dell R210 II.
141: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/sftp.1">sftp(1)</a>, fix a regression where existing destination directories would incorrectly terminate recursive uploads (bz#2528).
1.13 tim 142: <!-- 2016-02-09 -->
1.15 beck 143: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/wsconsctl.8">wsconsctl(8)</a>, hidms and <a href="http://man.openbsd.org/OpenBSD-current/man4/uts.4">uts(4)</a>, permit negative x and y coordinates in mouse.scale.
1.13 tim 144: <li>On hppa64, make __cpu_simple_lock provide serialisation of the critical section. This makes atomic sequences actually atomic.
1.15 beck 145: <li>In 5.8, fix a bug in <a href="http://man.openbsd.org/OpenBSD-current/man4/vlan.4">vlan(4)</a> and <a href="http://man.openbsd.org/OpenBSD-current/man4/carp.4">carp(4)</a> refcounting. This will cause a panic when root does an "ifconfig destroy" of a the parent interface. (5.7 and -current are not affected.)
146: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man9/ieee80211.9">ieee80211(9)</a>, log frames which fall outside the BlockAack window in <a href="http://man.openbsd.org/OpenBSD-current/man8/dmesg.8">dmesg(8)</a> if the interface debug flag is set.
147: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/pkg_add.1">pkg_add(1)</a>, drop privileges prior to running <a href="http://man.openbsd.org/OpenBSD-current/man1/ftp.1">ftp(1)</a>.
1.13 tim 148: <!-- 2016-02-08 -->
149: <li>On hppa, make __cpu_simple_lock provide serialisation of the critical section. This makes atomic sequences actually atomic.
1.15 beck 150: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/ssh.1">ssh(1)</a>, turn off more old crypto: hmac-md5, ripemd, truncated HMACs, RC4 and blowfish.
151: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/ssh.1">ssh(1)</a>, do not attempt to percent-expand an already-canonicalised addresses. This avoids unnecessary failures when attempting to connect to scoped IPv6 addresses.
152: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/hexdump.1">hexdump(1)</a>, fix a bug that caused nothing to be skipped when skipping exactly the number of bytes present in a regular file was requested.
153: <li>In 5.8, fix a kernel crash when root creates, changes or destroys <a href="http://man.openbsd.org/OpenBSD-current/man4/carp.4">carp(4)</a> interfaces multiple times with <a href="http://man.openbsd.org/OpenBSD-current/man8/ifconfig.8">ifconfig(8)</a>. (5.7 and -current are not affected.)
154: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/ssh.1">ssh(1)</a>, make application of rekey limits more accurate (related to bz#2521).
1.13 tim 155: <!-- 2016-02-07 -->
1.15 beck 156: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man9/ieee80211.9">ieee80211(9)</a>:
1.13 tim 157: <ul>
158: <li>Work around buggy APs which occasionally emit sequence numbers much higher than the current 11n BlockAck window.
159: <li>Stop requiring a BlockAck session timeout. Just use it if the AP is asking for it.
160: </ul>
1.15 beck 161: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/iwn.4">iwn(4)</a>, fix off-by-one in a loop termination condition.
162: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/dhcpd.8">dhcpd(8)</a>, avoid a use-after-free when parsing address ranges from a config.
163: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/vmd.8">vmd(8)</a>, avoid a double free in an error path.
1.13 tim 164: <!-- 2016-02-06 -->
165: <li>Update to xkeyboard-config 2.17.
1.15 beck 166: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/pchtemp.4">pchtemp(4)</a>, add support for the Intel 9 Series.
167: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/radeondrm.4">radeondrm(4)</a>, enable the code that reads the BIOS from the ACPI VFCT table on platforms with ACPI.
1.13 tim 168: <!-- 2016-02-05 -->
1.15 beck 169: <li>Fix <a href="http://man.openbsd.org/OpenBSD-current/man4/iwn.4">iwn(4)</a> CCMP replay detection so it does not drop out-of-order A-MPDU subframes. This helps 11n mode with WPA.
1.13 tim 170: <li>In the msdosfs code, guard against integer overflow when checking whether writing to a file stays within the maximum file size.
1.15 beck 171: <li>Make <a href="http://man.openbsd.org/OpenBSD-current/man1/write.1">write(1)</a> explicitly ASCII only. This prevents sending of potentially harmful bytes to terminals that do not support UTF-8.
172: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/iwm.4">iwm(4)</a> and <a href="http://man.openbsd.org/OpenBSD-current/man4/iwn.4">iwn(4)</a>, set max A-MPDU length to 64k instead of 4k and tell the firmware about A-MPDU spacing.
173: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man9/ieee80211.9">ieee80211(9)</a>, store ADDBA request and response parameters in the block ack record. Now it is possible keep track of the ACK policy and echo it back to the AP. This fixes Apple Airport APs.
1.13 tim 174: <li>On mips64, re-enable OpenGL.
1.15 beck 175: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/ssh.1">ssh(1)</a>, fix a problem where the mux master would sporadically fail to notice that the client had exited.
176: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/tmux.1">tmux(1)</a>, do not wrap cursor at start or end of history.
177: <li>Use <a href="http://man.openbsd.org/OpenBSD-current/man2/pledge.2">pledge(2)</a> in <a href="http://man.openbsd.org/OpenBSD-current/man1/talk.1">talk(1)</a> and <a href="http://man.openbsd.org/OpenBSD-current/man8/talkd.8">talkd(8)</a>.
1.13 tim 178: <!-- 2016-02-04 -->
179: <li>On amd64 and i386, add /dev/ipmi0.
1.15 beck 180: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/ipmi.4">ipmi(4)</a>, implement FreeBSD-compatible IOCTL to access BMC.
181: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/iwn.4">iwn(4)</a>:
1.13 tim 182: <ul>
183: <li>Restore the CCMP key to firmware after HT protection setting updates. This unbreaks WPA in 11n mode.
184: <li>Pass 802.11 control frames in monitor mode.
185: </ul>
1.15 beck 186: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man9/ieee80211.9">ieee80211(9)</a>, restore the BlockAck session timer.
187: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/smtpd.8">smtpd(8)</a>, when deleting a message, remove associated envelopes from the cache.
1.13 tim 188: <li>In the ext2fs and ufs code, prevent a signed overflow.
1.15 beck 189: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/tcpdump.8">tcpdump(8)</a>, fix an infinite loop when printing a country element in a management frame in case we hit channel Tx power limits that cannot be pretty-printed.
1.13 tim 190: <li>In efiboot, work around peculiarities of (buggy) UEFI implementations: always call SetMode(), but don't report an error if the current mode is the same as the desired mode.
1.15 beck 191: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/radeondrm.4">radeondrm(4)</a>, prevent a panic when the ROM size is 0.
1.13 tim 192: <!-- 2016-02-03 -->
1.15 beck 193: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/sd.4">sd(4)</a>, avoid a possible use-after-free.
194: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/pkg_add.1">pkg_add(1)</a>, update the font cache after removing packages with @fontdir markers.
195: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/tcpdump.8">tcpdump(8)</a>, show 802.11 control frames.
196: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/dhclient.8">dhclient(8)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man8/dhcpd.8">dhcpd(8)</a> and <a href="http://man.openbsd.org/OpenBSD-current/man8/dhcrelay.8">dhcrelay(8)</a>, be very careful accepting packets via <a href="http://man.openbsd.org/OpenBSD-current/man4/bpf.4">bpf(4)</a>.
197: <li>Enable <a href="http://man.openbsd.org/OpenBSD-current/man8/amd64/hostctl.8">hostctl(8)</a> on amd64 and i386.
198: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/tail.1">tail(1)</a>, fix off-by-one in argument parsing.
199: <li>Prevent <a href="http://man.openbsd.org/OpenBSD-current/man4/amd64/efifb.4">efifb(4/amd64)</a> from attaching if we are the console.
1.13 tim 200: <!-- 2016-02-02 -->
1.15 beck 201: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/smtpd.8">smtpd(8)</a>, fixe a mismatch between DSN's subject line and its content.
1.13 tim 202: <li>On amd64 and i386, correct signal delivery on systems where the AVX leaf is disabled.
1.15 beck 203: <li>On amd64 RAMDISK_CD, enable <a href="http://man.openbsd.org/OpenBSD-current/man4/pvbus.4">pvbus(4)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man4/xen.4">xen(4)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man4/xnf.4">xnf(4)</a> and <a href="http://man.openbsd.org/OpenBSD-current/man4/xspd.4">xspd(4)</a>.
1.13 tim 204: <li>In libxcb, make sure the socket send buffer is at least 64KB. This should speed up applications that send images to the X server, like Firefox.
1.15 beck 205: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/xen.4">xen(4)</a> and xenstore(4), make a few reliability improvements in the power management interface.
206: <li>Stop setting the process title in <a href="http://man.openbsd.org/OpenBSD-current/man8/bgpd.8">bgpd(8)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man8/dvmrpd.8">dvmrpd(8)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man8/eigrpd.8">eigrpd(8)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man8/hostapd.8">hostapd(8)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man8/httpd.8">httpd(8)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man8/ldpd.8">ldpd(8)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man8/npppd.8">npppd(8)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man8/ntpd.8">ntpd(8)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man8/ospf6d.8">ospf6d(8)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man8/ospfd.8">ospfd(8)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man8/relayd.8">relayd(8)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man8/ripd.8">ripd(8)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man8/snmpd.8">snmpd(8)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man8/smtpd.8">smtpd(8)</a> and <a href="http://man.openbsd.org/OpenBSD-current/man8/vmd.8">vmd(8)</a>. This makes it possible to manage multiple copies of a daemon using the normal infrastructure by symlinking rc.d scripts to a new name.
207: <li>Use <a href="http://man.openbsd.org/OpenBSD-current/man2/pledge.2">pledge(2)</a> in <a href="http://man.openbsd.org/OpenBSD-current/man8/macppc/pdisk.8">pdisk(8/macppc)</a>.
208: <li>Implement "<a href="http://man.openbsd.org/OpenBSD-current/man8/ldapctl.8">ldapctl</a> -r datadir".
1.13 tim 209: <!-- 2016-02-01 -->
210: <li>On armv7, add A20 support to sxirtc.
1.15 beck 211: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/armv7/sxitimer.4">sxitimer(4/armv7)</a>, remove A20 support; agtimer is now used instead.
1.13 tim 212: <li>Move to -release mode.
1.15 beck 213: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/ldapd.8">ldapd(8)</a>, add -r to specify an alternative directory to store/read the database.
214: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man9/ieee80211.9">ieee80211(9)</a>, stop requiring a BlockAck session timeout, but still honour the timeout if the AP requests it.
215: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/tcpdump.8">tcpdump(8)</a>, show 802.11 QoS frames properly.
1.12 tim 216: <!-- 2016-01-31 -->
217: <li>On armv7, fix the encoding of AP bits for large page second-level short-descriptors.
218: <li>Revamp /etc/ssl/cert.pem certificate information formatting and sort certificates in a more useful way.
1.15 beck 219: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/macppc/pdisk.8">pdisk(8/macppc)</a>, set lblock_start and lblocks to 0 in free space entries like Apple does.
220: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/tmux.1">tmux(1)</a>:
1.12 tim 221: <ul>
222: <li>Fix new-session with -t after command flags changes.
223: <li>Support negative trim values in formats to trim from the end.
224: <li>Add RGB escape sequences for capture-pane -e.
225: </ul>
226: <!-- 2016-01-30 -->
227: <li>On armv7:
228: <ul>
229: <li>Allow the kernel to boot from a u-boot without the OLD_SUNXI_KERNEL_COMPAT option.
1.15 beck 230: <li>Use ARM Generic Timer (agtimer) instead of <a href="http://man.openbsd.org/OpenBSD-current/man4/armv7/sxitimer.4">sxitimer(4/armv7)</a> on Allwinner sun7i/A20.
1.12 tim 231: </ul>
232: <li>Hook OPENBSD-RELAYD-MIB into OPENBSD-SNMPD-CONF.
233: <li>Sync libedit with NetBSD.
1.15 beck 234: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/pkg_add.1">pkg_add(1)</a>, extend URL abbreviation support from <a href="http://man.openbsd.org/OpenBSD-current/man5/pkg.conf.5">pkg.conf(5)</a> so that every URL can be abbreviated.
1.12 tim 235: <!-- 2016-01-29 -->
1.15 beck 236: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/ping.8">ping(8)</a> and <a href="http://man.openbsd.org/OpenBSD-current/man8/ping6.8">ping6(8)</a>, fix a regression in -E.
237: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/xen.4">xen(4)</a>, add support for the "control/shutdown" power management facility. At the moment only "poweroff" and "reboot" actions are supported.
1.12 tim 238: <li>In xenstore(4), add support for XS_WATCH, a XenStore notification facility.
1.15 beck 239: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/macppc/pdisk.8">pdisk(8/macppc)</a>:
1.12 tim 240: <ul>
241: <li>Tweak printing of partitions: always show the pblock and lblock info in the "p" and "P" commands, respectively.
242: <li>Warn of partitions extending past the end of the media.
243: <li>Support only base 10 for partition IDs.
244: </ul>
1.15 beck 245: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/aucat.1">aucat(1)</a>, fix unsupported parameters not being detected if compiled in 24-bit mode and sndiod is not running.
246: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/macppc/pdisk.8">pdisk(8/macppc)</a>, improve conformance to OS X's behaviour.
247: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/tmux.1">tmux(1)</a>, add support for RGB colour.
248: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/audioctl.1">audioctl(1)</a>, display play and record parameters that are not independent as a single variable.
1.12 tim 249: <!-- 2016-01-28 -->
1.15 beck 250: <li>Install the <a href="http://man.openbsd.org/OpenBSD-current/man8/relayd.8">relayd(8)</a> SNMP MIB.
1.12 tim 251: <li>In ssh, allow RekeyLimits in excess of 4G up to 2**63 bits (part of bz#2521).
1.15 beck 252: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/ftp.1">ftp(1)</a>, fix a crash when a server sends a non-standard newline.
253: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/daily.8">daily(8)</a>, run "rcctl ls faulty".
1.12 tim 254: <!-- 2016-01-27 -->
1.15 beck 255: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/macppc/pdisk.8">pdisk(8/macppc)</a>, make "r" (reorder, a.k.a. swap) command work with any two existing partitions. Do not allow partition 1 to be moved.
256: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man5/pkg.conf.5">pkg.conf(5)</a>, allow installpath to be set to a bare hostname which implies "http://hostname/pub/OpenBSD/[snapshots-or-version]/packages/[arch]".
257: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/macppc/pdisk.8">pdisk(8/macppc)</a>:
1.12 tim 258: <ul>
259: <li>Check block 0 signature, physical block size and physical block count when reading partition map.
260: <li>Check for unmapped physical blocks and overlapping partitions when reading partition map.
261: <li>Remove "v" command.
262: </ul>
1.15 beck 263: <li>Add <a href="http://man.openbsd.org/OpenBSD-current/man8/amd64/hostctl.8">hostctl(8)</a>, a tool to access key-value stores on the host, currently for hypervisor information stores on <a href="http://man.openbsd.org/OpenBSD-current/man4/pvbus.4">pvbus(4)</a>. It is not enabled yet.
1.12 tim 264: <li>On amd64 and i386, add /dev/pvbus0.
1.15 beck 265: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/pvbus.4">pvbus(4)</a>, add a key-value interface that allows to get or set values in the underlying information store of the host from the OpenBSD-VM's userspace.
1.12 tim 266: <li>In libpthread, replace the malloc spinlock with a mutex. This makes ports like Firefox significantly more usable.
267: <!-- 2016-01-26 -->
1.15 beck 268: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/mg.1">mg(1)</a>, ensure the backup file has the same mtime as the original file.
269: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/xnf.4">xnf(4)</a>, rewrite tx path to use flat transmit ring without fragment chains. This gives a transmit performance improvement and taxes grant table references much less than before.
270: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/xen.4">xen(4)</a>, do not take a grant table entry mutex in xen_grant_table_{enter,remove} since it is unnecessary. This provides a performance improvement as well.
271: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man3/malloc.3">malloc(3)</a>, fix a possible crash when dumping malloc stats.
272: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/xen.4">xen(4)</a>, ensure use of locked atomic operations even on the SP kernel.
273: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man3/fputwc.3">fputwc(3)</a>, when encoding fails set the error indicator as required by POSIX and as done by FreeBSD, SunOS 10/11 and glibc.
1.12 tim 274: <!-- 2016-01-25 -->
1.15 beck 275: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/vr.4">vr(4)</a>, fix an mbuf leak on encapsulation failure.
276: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/tail.1">tail(1)</a>, fix a crash.
277: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/pf.4">pf(4)</a>, fix a pf_state_key leak.
278: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man9/ieee8022.9">ieee80211(9)</a>, honour ERP protection on 2 GHz channels in 11n mode.
279: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/amd64/vmm.4">vmm(4/amd64)</a>, zero the buffer to be copied out to userland to avoid information leak.
280: <li>In 5.8, fix a kernel crash when root creates, changes or destroys <a href="http://man.openbsd.org/OpenBSD-current/man4/vlan.4">vlan(4)</a> interfaces multiple times with <a href="http://man.openbsd.org/OpenBSD-current/man8/ifconfig.8">ifconfig(8)</a>. (5.7 and -current are not affected.)
281: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man9/ieee8022.9">ieee80211(9)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man4/iwm.4">iwm(4)</a> and <a href="http://man.openbsd.org/OpenBSD-current/man4/iwn.4">iwn(4)</a>, keep track of HT protection settings in beacons and have 11n-capable drivers update hardware configuration accordingly.
282: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/xnf.4">xnf(4)</a>, revert the minimum number of rx ring slots back to 32.
283: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/vmx.4">vmx(4)</a>, do not send the mbuf to <a href="http://man.openbsd.org/OpenBSD-current/man4/bpf.4">bpf(4)</a> after passing it to the hardware. This could have resulted in a page fault.
284: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/snmpd.8">snmpd(8)</a>, avoid a potential double free.
1.12 tim 285: <!-- 2016-01-24 -->
1.15 beck 286: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/etherip.4">etherip(4)</a>, do not return an uninitialised value for the SIOCGLIFPHYRTABLE case.
287: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/ypldap.8">ypldap(8)</a>:
1.12 tim 288: <ul>
289: <li>Implement the "master" request.
290: <li>Set argument encode / result decode call backs for "maplist".
291: <li>Set argument encode / result decode callbacks for "all".
292: </ul>
293: <!-- 2016-01-23 -->
1.15 beck 294: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/ld.so.1">ld.so(1)</a>, make a nodelete object lock down the entire load group, not just the specific object.
1.12 tim 295: <li>Update to Mesa 11.0.9.
296: <li>On arm and armv7, switch to SVC mode when machines with virtualisation extensions boot into a HYP processor mode that has different memory management and register behaviour among other things. This prevents an early crash.
1.15 beck 297: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/macppc/pdisk.8">pdisk(8/macppc)</a>, avoid double prompt after creating default map on startup.
1.12 tim 298: <!-- 2016-01-22 -->
1.15 beck 299: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/dwiic.4">dwiic(4)</a>, avoid reading uninitialised memory when expected value types are not present.
300: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/xnf.4">xnf(4)</a>, set up interface features based on capabilities provided by the backend.
301: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/xnf.4">xnf(4)</a>, set minimum number of slots on the receive ring to 18 as most versions of Xen require at least this number of slots.
302: <li>Always check destination MAC address of received unicast packets, not only when in promiscuous mode. This is necessary for NICs like <a href="http://man.openbsd.org/OpenBSD-current/man4/virtio.4">virtio(4)</a>.
303: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/vxlan.4">vxlan(4)</a>, drop packets whose VNI flag is not set and VNI is not zero.
304: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/etherip.4">etherip(4)</a>, support tunnel VRF.
1.12 tim 305: <!-- 2016-01-21 -->
1.15 beck 306: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/macppc/pdisk.8">pdisk(8/macppc)</a>:
1.12 tim 307: <ul>
308: <li>Remove "expert" mode and the -d flag. Instead make all commands available all the time.
309: <li>Change the "P" command: it now shows map data structures.
310: <li>Stop accepting uppercase aliases for commands documented as lower case.
311: <li>Eliminate the 'written' field and just use the 'changed' field to mediate when it is appropriate to ask whether changes should be discarded.
312: <li>Repair creation of initial partition table on a blank disk.
313: </ul>
314: <li>In ieee80211 stack, fix the timeout value sent in ADDBA request and response frames.
1.15 beck 315: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/socppc/socpcic.4">socpcic(4/socppc)</a>, avoid use of an uninitialised variable.
316: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man9/ieee80211.9">ieee80211(9)</a>, fix the timeout value sent in ADDBA request and response frames.
1.12 tim 317: <!-- 2016-01-20 -->
1.15 beck 318: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/macppc/pdisk.8">pdisk(8/macppc)</a>, do not silently open a disk read-only when read/write access was requested.
319: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/calendar.1">calendar(1)</a>, add a calendar for New Zealand.
320: <li>On sparc64, check for disks deeper than 4 levels down in the Open Firmware device tree. This makes <a href="http://man.openbsd.org/OpenBSD-current/man4/softraid.4">softraid(4)</a> boot possible on more sparc64 machines.
321: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/xnf.4">xnf(4)</a>, do not bump output errors when when tx ring is full.
1.12 tim 322: <!-- 2016-01-19 -->
1.15 beck 323: <li>Add hidmt(4) (a HID-layer driver for multitouch touchpads that conform to the "Windows Precision Touchpad" standard) and <a href="http://man.openbsd.org/OpenBSD-current/man4/imt.4">imt(4)</a> (an i2c-HID driver that sits between <a href="http://man.openbsd.org/OpenBSD-current/man4/ihidev.4">ihidev(4)</a> and hidmt(4)).
324: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/ihidev.4">ihidev(4)</a>, add the ability to set and get reports and establish interrupt before probing for devices to handle each report ID.
325: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man6/morse.6">morse(6)</a>, use the <AC> prosign as "@". Support decoding only of other prosigns, including <SK> as we were previously using for "@".
326: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/unbound.8">unbound(8)</a>, suppress "cannot assign requested address" log messages unless verbosity is high.
327: <li>On sparc, fix a race causing <a href="http://man.openbsd.org/OpenBSD-current/man9/hardclock.9">hardclock(9)</a> to be sometimes invoked between the end of cpu_configure() and initclocks().
328: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/xnf.4">xnf(4)</a>:
1.12 tim 329: <ul>
330: <li>Fix a few issues in the transmit path.
331: <li>Mask interrupts on boot, masking/unmasking is handled by stop/init.
332: </ul>
1.15 beck 333: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/macppc/pdisk.8">pdisk(8/macppc)</a>, remove the "expert" mode "d"/"D" command.
334: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/mg.1">mg(1)</a> cscope, skip empty entries in $PATH instead of erroneously interpreting them as ".".
1.12 tim 335: <!-- 2016-01-18 -->
1.15 beck 336: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/macppc/pdisk.8">pdisk(8/macppc)</a>, remove the "debugging" mode command to examine the Apple_Patches partition contents.
337: <li>Add UTF-8 support to <a href="http://man.openbsd.org/OpenBSD-current/man1/colrm.1">colrm(1)</a>.
338: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/xen.4">xen(4)</a>, provide a Xen v3 API compatible fallback for event channel hypercalls.
339: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/ls.1">ls(1)</a>, fix a regression (and POSIX violation) introduced with UTF-8 support.
1.12 tim 340: <li>In xenstore(4), fixup a hang while performing a read operation on XenStore.
1.15 beck 341: <li>Add UTF-8 support to <a href="http://man.openbsd.org/OpenBSD-current/man1/ul.1">ul(1)</a>.
342: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/sndiod.8">sndiod(8)</a>:
1.12 tim 343: <ul>
344: <li>Load pki keys before daemonising. Passphrase-protected keys require access to stdin.
345: <li>Allow time differences between two clock_gettime() calls to be up to 60s without logging a warning.
346: </ul>
1.15 beck 347: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man6/morse.6">morse(6)</a>, use distinct codes for left and right parentheses.
1.12 tim 348: <!-- 2016-01-17 -->
1.15 beck 349: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/dwiic.4">dwiic(4)</a>, fix an off-by-one that could result in read operations not reading the last byte.
350: <li>On the amd64 RAMDISK_CD, enable <a href="http://man.openbsd.org/OpenBSD-current/man4/ikbd.4">ikbd(4)</a>.
351: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/ldapd.8">ldapd(8)</a>, properly remove unix sockets upon exit of the parent process.
1.12 tim 352: <!-- 2016-01-16 -->
1.15 beck 353: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/mandoc.1">mandoc(1)</a>, unbreak reading from stdin.
354: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/macppc/pdisk.8">pdisk(8/macppc)</a>, remove support for 1024- and 2048-byte sector devices.
1.12 tim 355: <li>On octeon, attach secondary CPUs by coremask. This fixes a crash that happened if the MP kernel was booted with coremask=1.
356: <li>On octeon, panic if booting the kernel without CPU 0.
1.11 tim 357: <!-- 2016-01-15 -->
1.15 beck 358: <li>Fix two issues in the <a href="http://man.openbsd.org/OpenBSD-current/man1/systat.1">systat(1)</a> state view:
1.11 tim 359: <ul>
360: <li>Fix peak and rate computations for states that transferred more than 4 GB.
361: <li>Prevent a possible in the rate and peak when creating new cache entries for existing states.
362: </ul>
1.15 beck 363: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/pflogd.8">pflogd(8)</a>, remove broken interface status printing support.
364: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/tmux.1">tmux(1)</a>, add hooks for alerts (bell, silence, activity).
365: <li>On the amd64 RAMDISK_CD, enable <a href="http://man.openbsd.org/OpenBSD-current/man4/sdhc.4">sdhc(4)</a> at <a href="http://man.openbsd.org/OpenBSD-current/man4/acpi.4">acpi(4)</a> so eMMC will be available at install time.
366: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/dwiic.4">dwiic(4)</a>, prevent attach the driver if the device is not present.
367: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/puc.4">puc(4)</a>, add Moxa CP-168U support.
368: <li>Implement <a href="http://man.openbsd.org/OpenBSD-current/man9/intr_barrier.9">intr_barrier(9)</a> for sh/landisk.
369: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/xspd.4">xspd(4)</a>, if the <a href="http://man.openbsd.org/OpenBSD-current/man4/xnf.4">xnf(4)</a> driver is enabled, detach emulated network devices.
370: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/eigrpctl.8">eigrpctl(8)</a>, introduce the "eigrpctl clear neighbors" command.
371: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/eigrpd.8">eigrpd(8)</a>:
1.11 tim 372: <ul>
373: <li>Do not set the EoT flag in the last startup update.
374: <li>Add support for manually clearing neighbors.
375: <li>Fix bug that happened when a passive interface was shut down and then reactivated.
376: <li>Several fixes in the Conditionally Received (CR) mode.
377: <li>Fix detection of the Stuck-in-Active (SIA) state.
378: <li>If an explicit nexthop was advertised for a route, show it in the "eigrpctl show topology".
379: <li>For each prefix, order routes by their nexthop.
380: </ul>
1.15 beck 381: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/eigrpctl.8">eigrpctl(8)</a>, in the "show" commands, order the routing instances by AF and then by AS.
382: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/ddb.4">ddb(4)</a>, add a "show socket" command.
383: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/rpcgen.1">rpcgen(1)</a>, add support for parsing "hyper" and "quad" types, as per RFC 4506.
1.11 tim 384: <!-- 2016-01-14 -->
385: <li>When enabling a non-volatile memory express controller, wait till CSTS.RDY lights up.
1.15 beck 386: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/ssh.1">ssh(1)</a>, fix some file descriptor leaks.
387: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/which.1">which(1)</a>:
1.11 tim 388: <ul>
389: <li>Use the default path if there is no PATH in the environment.
390: <li>Avoid potential read of one byte before the start of a buffer.
391: </ul>
1.15 beck 392: <li>Attach <a href="http://man.openbsd.org/OpenBSD-current/man4/dwiic.4">dwiic(4)</a> on the Intel Bay Trail i2c controllers.
393: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/dwiic.4">dwiic(4)</a>, fix several issues:
1.11 tim 394: <ul>
395: <li>Properly map bus space
1.15 beck 396: <li>Properly implement the <a href="http://man.openbsd.org/OpenBSD-current/man4/iic.4">iic(4)</a> operations.
1.11 tim 397: <li>Keep timings set up by the firmware if the SSCN and FMCN methods aren't available.
398: </ul>
1.15 beck 399: <li>Add <a href="http://man.openbsd.org/OpenBSD-current/man4/ikbd.4">ikbd(4)</a>, a driver for HID-over-i2c keyboards.
400: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/calendar.1">calendar(1)</a>, add a calendar file for the United Kingdom.
401: <li>Prevent a NULL dereference when detaching a USB device with <a href="http://man.openbsd.org/OpenBSD-current/man4/ugen.4">ugen(4)</a> disabled or if allocating memory during the attachment process failed.
1.11 tim 402: <li>On octeon, add support for a variety of USB devices.
403: <li>In ssh, remove roaming support altogether.
404: <li><font color="#e00000">5.7 and 5.8 SECURITY FIX: experimental roaming code in the ssh client could be tricked by a hostile sshd server, potentially leaking key material (CVE-2016-0777 and CVE-0216-0778).</font><br>A source code patch and workaround is available for <a href="errata57.html#022_sshd">5.7</a> and <a href="errata58.html#010_sshd">5.8</a>.
1.15 beck 405: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/ssh.1">ssh(1)</a>, disable experimental client-side roaming support.
1.11 tim 406: <li>Grab the kernel lock before delivering a message to the routing socket when an ARP resolution has been done. This should fix the "receive 1" panic.
1.15 beck 407: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/pfctl.8">pfctl(8)</a>, print an error message when detecting multiple root queues on a single interface.
1.11 tim 408: <!-- 2016-01-13 -->
1.15 beck 409: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/acpi.4">acpi(4)</a>, fix a bug in <a href="http://man.openbsd.org/OpenBSD-current/man4/dwiic.4">dwiic(4)</a> where it would try to access i2c devices on busses they're not attached to.
410: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/ssh.1">ssh(1)</a>, eliminate fallback from untrusted X11 forwarding to trusted forwarding when the X server disables the SECURITY extension.
411: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/luit.1">luit(1)</a>, properly disable LNEXT (^V) processing.
1.11 tim 412: <li>Update to xterm 322.
1.15 beck 413: <li>On amd64, enable <a href="http://man.openbsd.org/OpenBSD-current/man4/xen.4">xen(4)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man4/xnf.4">xnf(4)</a> and <a href="http://man.openbsd.org/OpenBSD-current/man4/xspd.4">xspd(4)</a> in GENERIC kernels.
414: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/ihidev.4">ihidev(4)</a>, fix hid packet length calculation.
415: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/dhcrelay.8">dhcrelay(8)</a>, check UDP length for short as well as long values.
1.11 tim 416: <li>Implement VFS read clustering for MSDOSFS.
1.15 beck 417: <li>Make "<a href="http://man.openbsd.org/OpenBSD-current/man8/ifconfig.8">ifconfig</a> $if mode" a valid subcommand that works independently of the "media" subcommand.
418: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/iwn.4">iwn(4)</a>, tell the firmware to retry failed Tx at 1Mbit/s instead of MCS 0. This seems to make tx rate scaling go up faster and helps rx performance.
1.11 tim 419: <!-- 2016-01-12 -->
1.15 beck 420: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/vlan.4">vlan(4)</a>, do not propagate any of the parent interfaces offload features on <a href="http://man.openbsd.org/OpenBSD-current/man4/svlan.4">svlan(4)</a>.
1.11 tim 421: <li>On amd64 and i386, in the TSC fallback code, perturbance is biased towards the lower bytes of a word. Compensate for this with a bit-spreading operation which applies a result byte by byte.
1.15 beck 422: <li>Let <a href="http://man.openbsd.org/OpenBSD-current/man8/smtpd.8">smtpd(8)</a> start on machines without a FQDN as hostname.
423: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/macppc/pdisk.8">pdisk(8/macppc)</a>, remove -i.
424: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/ndp.8">ndp(8)</a>, do not print an error if the list of prefixes is empty.
1.11 tim 425: <li>Remove wireless turbo mode support. It is a non-standard extension supported only by obsolete devices.
1.15 beck 426: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/carp.4">carp(4)</a>, prevent a NULL dereference if SIOCGVH is issued without carpdev argument.
427: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/acpi.4">acpi(4)</a>, improve emulation of PM registers on Hardware-reduced ACPI. This makes the transition into S5 (powerdown) work on the ASUS X205TA.
1.11 tim 428: <!-- 2016-01-11 -->
1.15 beck 429: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/macppc/pdisk.8">pdisk(8/macppc)</a>, remove -c and -d.
430: <li>Add <a href="http://man.openbsd.org/OpenBSD-current/man4/dwiic.4">dwiic(4)</a> (a driver for the Synopsys DesignWare i2c controller), <a href="http://man.openbsd.org/OpenBSD-current/man4/ihidev.4">ihidev(4)</a> (a HID-over-i2c driver) and <a href="http://man.openbsd.org/OpenBSD-current/man4/ims.4">ims(4)</a> (a HID-over-i2c mouse/trackpad driver).
1.11 tim 431: <li>In the installer validate the data for CGI_{METHOD,TIME,TZ} since it comes from an external source.
1.15 beck 432: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/em.4">em(4)</a>, avoid a use-after-free when posting the packet on 82547 chips after <a href="http://man.openbsd.org/OpenBSD-current/man4/bpf.4">bpf(4)</a>.
433: <li>Make <a href="http://man.openbsd.org/OpenBSD-current/man4/sdhc.4">sdhc(4)</a> attach to hardware IDs 80860F14 and PNP0FFF.
1.11 tim 434: <li>Make sure the keyboard mux gets picked up by the primary (console) display and that USB keyboards get paired with the console even if they are not marked as the console keyboard.
1.15 beck 435: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/relayd.8">relayd(8)</a>, add the host_error output and the http code (when available) to the host-check log.
1.11 tim 436: <li>On amd64 and i386, ensure the keyboard mux gets picked up by the primary (console) display and that USB keyboards get paired with the console even if they are not marked as the console keyboard.
1.15 beck 437: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/macppc/pdisk.8">pdisk(8/macppc)</a>, remove -v.
438: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/perl.1">perl(1)</a>, fix "XS File::Spec::canonpath loses taint" (CVE-2015-8607).
1.11 tim 439: <li>In xenstore(4):
440: <ul>
441: <li>Handle zero-length messages.
442: <li>Prevent infinite loop when receiving and empty reply or directory node.
443: </ul>
1.15 beck 444: <li>Fix a bug where <a href="http://man.openbsd.org/OpenBSD-current/man8/cron.8">cron(8)</a> could skip re-reading the spool after two consecutive changes.
445: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/ipmi.4">ipmi(4)</a>, if possible, read values from disabled sensors.
446: <li>Make <a href="http://man.openbsd.org/OpenBSD-current/man4/sdhc.4">sdhc(4)</a> attach to <a href="http://man.openbsd.org/OpenBSD-current/man4/acpi.4">acpi(4)</a>. This is neede to support the SD host controllers integrated on Intel's Bay Trail SoCs.
1.11 tim 447: <!-- 2016-01-10 -->
1.15 beck 448: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/sdmmc.4">sdmmc(4)</a>, add limited support for controllers that implement version 3.0 of the SD host controller standard.
449: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/macppc/pdisk.8">pdisk(8/macppc)</a>, use the device's default disklabel to determine a disk size.
450: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/acpithinkpad.4">acpithinkpad(4)</a>, add ThinkPad tablet dock/undock ACPI events.
451: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/ipmi.4">ipmi(4)</a>:
1.11 tim 452: <ul>
453: <li>When stopping the watchdog, clear DONTSTOP bits. Without this, BMC records a watchdog timer expiration event.
454: <li>Print a message to console when the watchdog is enabled or disabled.
455: </ul>
456: <li>Make the eMMC on the ASUS X205TA work.
1.15 beck 457: <li>Add UTF-8 support to <a href="http://man.openbsd.org/OpenBSD-current/man1/ps.1">ps(1)</a>.
1.11 tim 458: <li>On mips64, revert the MP pmap diff. It does not work on non-PMAP_DIRECT systems due to lock recursion.
459: <!-- 2016-01-09 -->
1.15 beck 460: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/jot.1">jot(1)</a>, when generating random sequences, fix the bias at both ends of the specified interval.
461: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/audio.4">audio(4)</a>, fix a bug when closing /dev/audioctl and /dev/mixer they wrongly return ENXIO.
462: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/acpi.4">acpi(4)</a>, initial support for Hardware-Reduced ACPI.
463: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/fdisk.8">fdisk(8)</a>, revamp the display of GPT information, hiding less important information under the -v flag.
1.11 tim 464: <!-- 2016-01-08 -->
1.15 beck 465: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/ipmi.4">ipmi(4)</a>, correct sensor threshold handling by properly checking the response of the Get Sensor Reading Command.
466: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/ftp.1">ftp(1)</a>, handle redirects to relative URIs containing "://".
1.11 tim 467: <li>Remove the arp and revarp input queues. Packets of these types are now processed in the softnet task without holding the kernel lock.
1.15 beck 468: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/sndiod.8">sndiod(8)</a>, unbreak support for multiple -L options.
469: <li>Improve UTF-8 support in <a href="http://man.openbsd.org/OpenBSD-current/man1/ksh.1">ksh(1)</a>:
1.11 tim 470: <ul>
471: <li>Allow non-ASCII characters to be part of words.
472: <li>Allow insertion of non-ASCII characters without screwing up the display.
473: <li>Fix forward movement.
474: </ul>
1.15 beck 475: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/sis.4">sis(4)</a>, work around buggy zero-length packets produced by the DP83816A.
476: <li>Enable <a href="http://man.openbsd.org/OpenBSD-current/man4/uonerng.4">uonerng(4)</a> in kernels where <a href="http://man.openbsd.org/OpenBSD-current/man4/ualea.4">ualea(4)</a> is already present.
477: <li>Add <a href="http://man.openbsd.org/OpenBSD-current/man4/uonerng.4">uonerng(4)</a>, a driver for the Moonbase Otago OneRNG.
1.11 tim 478: <!-- 2016-01-07 -->
479: <li>On octeon, avoid rendezvous from failing if buffering is enabled.
1.15 beck 480: <li>In Mesa, disable reading of drirc files by default. This allows for a stronger <a href="http://man.openbsd.org/OpenBSD-current/man2/pledge.2">pledge(2)</a> in chromium.
481: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man9/ieee80211.9">ieee80211(9)</a>, make the A-MPDU reordering buffer more resilient against APs which drop some subframes or let the sequence number jump up by more than 1. This should fix network stalls seen in 11n mode.
482: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/iwn.4">iwn(4)</a> and <a href="http://man.openbsd.org/OpenBSD-current/man4/iwm.4">iwm(4)</a>, fix A-MPDU parameters in link quality firmware commands.
483: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/mandoc.1">mandoc(1)</a>, detect recursive "define" in <a href="http://man.openbsd.org/OpenBSD-current/man7/eqn.7">eqn(7)</a> which avoids infinite loops.
484: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man6/hack.6">hack(6)</a>, read ^Z as a normal character. This fixes suspend/resume.
485: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/fmt.1">fmt(1)</a>, add UTF-8 support for -c.
486: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/ifconfig.8">ifconfig(8)</a>, sync displayed interface flags to reality.
487: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/acpibtn.4">acpibtn(4)</a>, fix the lid sensor for machines that do not generate an event when the lid opens.
488: <li>Add <a href="http://man.openbsd.org/OpenBSD-current/man4/xnf.4">xnf(4)</a>, a Xen virtual networking interface (Netfront) driver.
1.11 tim 489: <!-- 2016-01-06 -->
1.15 beck 490: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/armv7/cpsw.4">cpsw(4/armv7)</a>, properly handle the receive queue being full condition instead of hanging.
491: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/em.4">em(4)</a>, mark the driver MP-safe.
492: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/ipmi.4">ipmi(4)</a>, fix a panic in odd situations.
1.11 tim 493: <li>On i386, when booting from softraid, get the first, not the last, OpenBSD partition in the MBR.
1.15 beck 494: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/vi.1">vi(1)</a>, remove the message catalogs.
495: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/iwm.4">iwm(4)</a>, initialize the A-MPDU parameters field in HT capability elements.
496: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man3/malloc.3">malloc(3)</a>, remove the "a" option.
497: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/expr.1">expr(1)</a>, use 64-bit integers for arithmetic.
1.11 tim 498: <li>On amd64, when booting from softraid, get the first, not the last, OpenBSD partition in the MBR.
1.15 beck 499: <li>Prevent integer overflows in <a href="http://man.openbsd.org/OpenBSD-current/man9/sosend.9">sosend(9)</a> and <a href="http://man.openbsd.org/OpenBSD-current/man9/soreceive.9">soreceive(9)</a>.
500: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/iwn.4">iwn(4)</a>, always use a CCK rate as last fallback in the firmware's tx rate retry table. This may make 11n mode work in very noisy environments.
501: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/acpi.4">acpi(4)</a>, fix systems that don't implement legacy mode.
1.11 tim 502: <!-- 2016-01-05 -->
503: <li>Revert sys/dev/pci/if_oce.c r1.87 (which unlocked the interrupt handler rx path).
504: <!-- 2016-01-04 -->
505: <li>On mips64, make POWER Indigo2 R8000 boot multiuser again.
1.15 beck 506: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man3/fgetws.3">fgetws(3)</a>, fix a bug when errno is EILSEQ upon function entry or when the file ends without a terminating L'\n' character.
507: <li>Fix lots of bugs in the <a href="http://man.openbsd.org/OpenBSD-current/man3/fprintf.3">fprintf(3)</a> family of functions.
508: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/mandoc.1">mandoc(1)</a>, improve handling of .Va and .Vt macros.
509: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/iwn.4">iwn(4)</a>, add initial support for 11n mode to the <a href="http://man.openbsd.org/OpenBSD-current/man4/iwn.4">iwn(4)</a> driver. Only MCS 0 to 7 are supported for now.
510: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man9/ieee80211.9">ieee80211(9)</a>:
1.11 tim 511: <ul>
512: <li>Skip over 11n mode during scanning to avoid scanning channels more than once.
513: <li>Allow switching into 11a and 11b/g mode correctly when the driver supports 11n.
514: <li>Fix manual scan while associated in 11a mode.
515: <li>Fix negotiating A-MPDUs with some APs.
516: </ul>
1.15 beck 517: <li>Use <a href="http://man.openbsd.org/OpenBSD-current/man2/pledge.2">pledge(2)</a> in <a href="http://man.openbsd.org/OpenBSD-current/man8/spamd-setup.8">spamd-setup(8)</a>.
1.11 tim 518: <!-- 2016-01-03 -->
1.15 beck 519: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/re.4">re(4)</a>, mark the driver MP-safe.
520: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/nc.1">nc(1)</a>, use the correct values for TLS certificate and private key flags.
521: <li>On <a href="http://man.openbsd.org/OpenBSD-current/man4/amd64/vmm.4">vmm(4/amd64)</a>, do proper termination of VMs by doing proper VCPU run state management. This should fix some of the odd termination errors.
522: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/mg.1">mg(1)</a>, allow macro execution to continue without delay in the event of a visible bell call.
1.11 tim 523: <li>Fix problems with EFI installs involving many disks.
524: <li>Update to randrproto 1.5.0.
525: <li>Update to x11proto 7.0.28.
526: <!-- 2016-01-02 -->
1.15 beck 527: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/pchtemp.4">pchtemp(4)</a>:
1.11 tim 528: <ul>
529: <li>Add support for Intel 100 Series.
530: <li>Enable on i386.
531: </ul>
532: <li>Update to freetype-doc 2.6.2.
1.15 beck 533: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/mg.1">mg(1)</a>, add dired-find-alternate-file.
1.11 tim 534: <!-- 2016-01-01 -->
1.15 beck 535: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/sgi/iec.4">iec(4/sgi)</a>, take the PHY out of reset before attaching the interface. This allows for disabling some checks on reboot, making reboots faster especially on IP27.
536: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man2/sendsyslog.2">sendsyslog2(2)</a>, avoid a panic that could occur when writing to the console.
1.9 tim 537: <!-- 2015-12-31 -->
1.15 beck 538: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/ix.4">ix(4)</a>, do not grab the kernel lock in the rx and tx paths.
539: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/trunk4.">trunk(4)</a>, fix the "lacp_compose_key protection fault trap" when removing a port from a lacp trunk.
540: <li>Add <a href="http://man.openbsd.org/OpenBSD-current/man4/pchtemp.4">pchtemp(4)</a>, a driver for the thermal sensor on recent Intel PCHs.
541: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/drm.4">inteldrm(4)</a>, unconditionally set the "switchcookie". This fixes synchronous VT switching.
1.9 tim 542: <!-- 2015-12-30 -->
1.15 beck 543: <li>Use <a href="http://man.openbsd.org/OpenBSD-current/man2/pledge.2">pledge(2)</a> in <a href="http://man.openbsd.org/OpenBSD-current/man8/tokenadm.8">tokenadm(8)</a>.
1.9 tim 544: <!-- 2015-12-29 -->
1.15 beck 545: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man3/malloc.3">malloc(3)</a>, fix a NULL dereference in case the abort option is disabled.
546: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man3/nlist.3">nlist(3)</a>, avoid out-of-bounds access and excessive memory allocation on a malformed ELF header.
547: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/mg.1">mg(1)</a>, add transpose-words. It is limited to one iteration until "undo" is looked into.
548: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/wscons.4">wscons(4)</a>, change keyboard configuration detection to work even when a <a href="http://man.openbsd.org/OpenBSD-current/man8/kbd.8">kbd(8)</a> setting has multiple bits set (e.g. us.dvorak.swapctrlcaps).
549: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/bge.4">bge(4)</a>, mark the start routine as MP-safe.
1.9 tim 550: <li>Set the UltraDMA transfer mode for SATA drives. Some of these drives, such as the Maxtor 7Y250M0, refuse to do DMA unless the transfer mode has been set. This causes reads (and presumably writes) to time out.
551: <!-- 2015-12-28 -->
552: <li>In the installer, do not insist on EFISYS partitions on non-root disks and prevent an autoinstall loop.
553: <!-- 2015-12-27 -->
1.15 beck 554: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/re.4">re(4)</a>, mark the interrupt handler as MP-safe.
1.9 tim 555: <li>Add GENERIC-IP27.MP for MP support on the SGI Octane 350.
556: <li>Import libdrm 2.4.65.
557: <!-- 2015-12-26 -->
558: <li>On amd64 and i386, if available, prefer the rdseed instruction over rdrand when adding entropy to the kernel random number generator.
1.15 beck 559: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/puc.4">puc(4)</a>, add the Perle Speed8 LE.
560: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/cp.1">cp(1)</a>, set the times, mode and flags on symlinks when doing cp -p (or mv across filesystems).
1.9 tim 561: <!-- 2015-12-25 -->
1.15 beck 562: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/ukbd.4">ukbd(4)</a>, enable the iso keyboard munge fix for MacBookAir6,2.
563: <li>In libevent, revert the change to call <a href="http://man.openbsd.org/OpenBSD-current/man2/kevent.2">kevent(2)</a> immediately (which was done to prevent the dispatch loop from bringing down the entire process). <a href="http://man.openbsd.org/OpenBSD-current/man1/tcpbench.1">tcpbench(1)</a> relies on the old behaviour.
1.9 tim 564: <li>On sgi, add a timecounter for MP, make interrupt masking MP-aware, add launch logic for secondary CPUs and add IPI logic.
565: <!-- 2015-12-24 -->
1.15 beck 566: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/kdump.1">kdump(1)</a>, implement basic <a href="http://man.openbsd.org/OpenBSD-current/man2/kevent.2">kevent(2)</a> printing.
567: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man3/fgetwc.3">fgetwc(3)</a>, set the error indicator when an encoding error occurs, as specified by both the manual page and POSIX.
568: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/file.1">file(1)</a>, add --brief and --dereference. These are used by xdg-open and xdg-mime.
569: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/mg.1">mg(1)</a>, add -R to open the specified files read-only.
1.9 tim 570: <!-- 2015-12-23 -->
1.15 beck 571: <li>Implement privsep and use <a href="http://man.openbsd.org/OpenBSD-current/man2/pledge.2">pledge(2)</a> in <a href="http://man.openbsd.org/OpenBSD-current/man8/mountd.8">mountd(8)</a>.
572: <li>Use <a href="http://man.openbsd.org/OpenBSD-current/man2/pledge.2">pledge(2)</a> in <a href="http://man.openbsd.org/OpenBSD-current/man8/sndiod.8">sndiod(8)</a>.
1.9 tim 573: <li>Update to sqlite3 3.9.2.
1.15 beck 574: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/rdate.8">rdate(8)</a>, expand the size of messages between processes to accommodate larger messages.
1.9 tim 575: <li>Import Mesa 11.0.8. This seems to fix some of the problems with clutter/gnome reported to occur on r600 with Mesa 11.0.6.
576: <li>Ensure the installer asks for the IPv4 default route in case an interface has been configured via dhcp and then again manually.
577: <!-- 2015-12-22 -->
578: <li>Find the OpenBSD disklabel on GPT partitioned softraid volumes in order to allow booting from such volumes.
1.15 beck 579: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/asmc.4">asmc(4)</a>, make communication with the Apple SMC chip more reliable.
1.9 tim 580: <!-- 2015-12-21 -->
1.15 beck 581: <li>Add <a href="http://man.openbsd.org/OpenBSD-current/man4/viocon.4">viocon(4)</a>, the VirtIO console device.
582: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man5/smtpd.conf.5">smtpd.conf(5)</a>, switch to "file" backend for the aliases table by default.
583: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/mailq.8">smtpctl(8)</a>, support some sendmail-compatible command-line arguments.
584: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/tmux.1">tmux(1)</a>, fix a bug where the "attach-session -d" detached the wrong session.
585: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/Xserver.1">Xserver(1)</a>, default to using the <a href="http://man.openbsd.org/OpenBSD-current/man4/modesetting.4">modesetting(4)</a> driver on Broadwell. It works better than the <a href="http://man.openbsd.org/OpenBSD-current/man4/intel.4">intel(4)</a> driver.
1.9 tim 586: <!-- 2015-12-20 -->
1.15 beck 587: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/drm.4">drm(4)</a>, advertise support for DRM version 1.4. This makes the PCI-based probe method in the <a href="http://man.openbsd.org/OpenBSD-current/man4/modesetting.4">modesetting(4)</a> driver work.
1.9 tim 588: <li>In Mesa:
589: <ul>
590: <li>Set the configure option to enable floating point textures. This is required by drivers such as r600 to support OpenGL 3.x.
591: <li>Build the gallium software rasteriser (softpipe). This fixes loading the r300 driver on macppc.
592: </ul>
1.15 beck 593: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/sndiod.8">sndiod(8)</a>, implement initial privilege separation and reenable networking.
594: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/uvideo.4">uvideo(4)</a>, do not delay <a href="http://man.openbsd.org/OpenBSD-current/man4/video.4">video(4)</a> attachment if the device does not need to load firmware.
1.9 tim 595: <!-- 2015-12-19 -->
1.15 beck 596: <li>Use <a href="http://man.openbsd.org/OpenBSD-current/man2/pledge.2">pledge(2)</a> in <a href="http://man.openbsd.org/OpenBSD-current/man8/mtree.8">mtree(8)</a>.
597: <li>On alpha, disable <a href="http://man.openbsd.org/OpenBSD-current/man4/pcn.4">pcn(4)</a> on ramdisk kernels.
1.9 tim 598: <li>Move to 5.9-beta.
1.15 beck 599: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/dhclient.8">dhclient(8)</a>, do not exit if a route can not be added.
600: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/rc.d.8">rc.d(8)</a>, don't report that the daemon has succesfully started if it actually failed because of a config error.
1.9 tim 601: <li>Prevent GPU lockups with KMS and AGP-enable on Uninorth (G4) machines. KMS is now usable on Uninorth machines but X11 output is still corrupted.
1.15 beck 602: <li>Do not match Uninorth bridges until we have a working KMS with AGP support for G4 machines. This allows us to enable <a href="http://man.openbsd.org/OpenBSD-current/man4/agp.4">agp(4)</a> again for G5 machines which makes X11 usable on the Dual G5 with <a href="http://man.openbsd.org/OpenBSD-current/man4/radeondrm.4">radeondrm(4)</a>.
1.9 tim 603: <li>Make carp_output() MP-safe.
1.15 beck 604: <li>Add UTF-8 support to <a href="http://man.openbsd.org/OpenBSD-current/man1/uniq.1">uniq(1)</a>. Let -f recognize non-ASCII blank characters and let -s count characters rather than bytes.
605: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/tmux.1">tmux(1)</a>, make input off flag (selectp -d) apply to synchronize-panes too.
1.9 tim 606: <!-- 2015-12-18 -->
1.15 beck 607: <li>Fix <a href="http://man.openbsd.org/OpenBSD-current/man4/urtwn.4">urtwn(4)</a> on big-endian architectures.
608: <li>Make <a href="http://man.openbsd.org/OpenBSD-current/man4/ix.4">ix(4)</a> MP-safer.
609: <li>Use <a href="http://man.openbsd.org/OpenBSD-current/man2/pledge.2">pledge(2)</a> in <a href="http://man.openbsd.org/OpenBSD-current/man8/mknod.8">mknod(8)</a>.
610: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man3/casin.3">casin(3)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man3/casin.3">casinf(3)</a>, and <a href="http://man.openbsd.org/OpenBSD-current/man3/casin.3">casinl(3)</a>, give correct results if the imaginary part is zero.
611: <li>Fix the behaviour of <a href="http://man.openbsd.org/OpenBSD-current/man3/csqrt.3">csqrt(3)</a>: we should have csqrt(conj(z)) == conj(csqrt(z)).
1.9 tim 612: <li>Avoid modulo bias in the IPv6 stack.
613: <!-- 2015-12-17 -->
614: <li>In the scheduler, make the cost of moving a process to the primary CPU a bit higher. This is the CPU that handles most hardware interrupts, so by making it less likely that the softnet taskq runs on that CPU, most of the performance lost by "unlocking" network drivers is restored.
1.15 beck 615: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/acpithinkpad.4">acpithinkpad(4)</a>, add display brightness support, available on the last few ThinkPad generations. This fixes surprising brightness changes that would sometimes happen if you used the brightness keys or if the firmware decided to reset the brightness level for some other reason.
1.9 tim 616: <!-- 2015-12-16 -->
617: <li>Update to xf86-input-synaptics 1.8.3.
618: <li>Update to xf86-input-keyboard 1.8.1.
1.15 beck 619: <li>In libevent, prevent the dispatch loop from bringing down the entire process because of incomplete <a href="http://man.openbsd.org/OpenBSD-current/man2/kqueue.2">kqueue(2)</a> support for various types of files and filesystems.
620: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/awk.1">awk(1)</a> and <a href="http://man.openbsd.org/OpenBSD-current/man8/npppd.8">npppd(8)</a>, remove modulo bias in the random number generator.
621: <li>Add the _sndiop user and group in preparation of the <a href="http://man.openbsd.org/OpenBSD-current/man8/sndiod.8">sndiod(8)</a> privsep.
622: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man3/dn_comp.3">resolver(3)</a>, remove support for HOSTALIASES. It is incompatible with <a href="http://man.openbsd.org/OpenBSD-current/man2/pledge.2">pledge(2)</a>.
623: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/acpithinkpad.4">acpithinkpad(4)</a>, avoid panics on older ThinkPads when pressing the ThinkLight key.
624: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/nc.1">nc(1)</a>, print the certificate validity to the verbose output when using TLS.
1.9 tim 625: <li>Avoid grabbing the kernel lock in uvm_unmap() if we have an interrupt-safe map.
1.15 beck 626: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/syslogd.8">syslogd(8)</a>, unbreak adding mark messages to log files.
1.8 tim 627: <!-- 2015-12-15 -->
628: <li>Remove the Class 3 Public Primary Certification Authority root certificate from /etc/ssl/cert.pem, per recommendation of Symantec/VeriSign.
1.15 beck 629: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/asmc.4">asmc(4)</a>, add more temperature keys found in MacBook Airs (6,1 and 7,2) and MacBook Pro (10,2).
1.8 tim 630: <li>Update to unbound 1.5.7.
1.15 beck 631: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/mountd.8">mountd(8)</a>, fix issues with adding and deleting exports when (re)reading the <a href="http://man.openbsd.org/OpenBSD-current/man5/exports.5">exports(5)</a> file.
632: <li>Add UTF-8 support to <a href="http://man.openbsd.org/OpenBSD-current/man1/fmt.1">fmt(1)</a>. The -c option is not yet handled.
1.8 tim 633: <li>Do not panic when trying to delete an non-existing route with ART.
1.15 beck 634: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/relayd.8">relayd(8)</a>, handle the HTTP PATCH request correctly.
1.8 tim 635: <!-- 2015-12-14 -->
1.15 beck 636: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/tmux.1">tmux(1)</a>, allow list-keys and list-commands to be run without a running server.
637: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/acpithinkpad.4">acpithinkpad(4)</a>, handle the keyboard backlight found on newer Thinkpads.
638: <li>Add initial 802.11n support to <a href="http://man.openbsd.org/OpenBSD-current/man4/iwm.4">iwm(4)</a>.
1.8 tim 639: <!-- 2015-12-13 -->
1.15 beck 640: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/mailwrapper.8">mailwrapper(8)</a>, update the default MTA reference to <a href="http://man.openbsd.org/OpenBSD-current/man8/smtpd.8">smtpd(8)</a>.
641: <li>Use <a href="http://man.openbsd.org/OpenBSD-current/man2/pledge.2">pledge(2)</a> in <a href="http://man.openbsd.org/OpenBSD-current/man8/dhcpd.8">dhcpd(8)</a>.
642: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/acpithinkpad.4">acpithinkpad(4)</a>, support ThinkLight.
643: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/eigrpd.8">eigrpd(8)</a>, introduce a new command to show traffic statistics.
1.8 tim 644: <!-- 2015-12-12 -->
1.15 beck 645: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/tmux.1">tmux(1)</a>:
1.8 tim 646: <ul>
647: <li>Allow prefix and prefix2 to be set to None to disable.
648: <li>Add the key-table option to set the default key table for a session.
649: </ul>
1.15 beck 650: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/smtpd.8">smtpd(8)</a>:
1.8 tim 651: <ul>
652: <li>Bump Diffie-Hellman parameterss to 2048.
1.15 beck 653: <li>Allow overriding the default cipher-suite in <a href="http://man.openbsd.org/OpenBSD-current/man5/smtpd.conf.5">smtpd.conf(5)</a>.
654: <li>Remove CA from pki and no longer allow specifying a CA with "pki" keyword. Introduce "ca" keyword to <a href="http://man.openbsd.org/OpenBSD-current/man5/smtpd.conf.5">smtpd.conf(5)</a> allow specifying a custom CA.
1.8 tim 655: </ul>
656: <li>On sgi, adjust IPI numbers to get the interrupts working.
1.15 beck 657: <li>Avoid <a href="http://man.openbsd.org/OpenBSD-current/man8/dhclient.8">dhclient(8)</a> from hanging during boot when the attempt to configure the address fails without dhclient(8) realizing it.
658: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/asmc.4">asmc(4)</a>, enable keyboard backlight support.
659: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/wsconsctl.8">wsconsctl(8)</a>, add the keyboard backlight variable.
660: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/wscons.4">wscons(4)</a>, add new ioctls to control keyboard backlights.
661: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/smtpd.8">smtpd(8)</a>, implement senders map.
662: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man9/ieee80211.9">ieee80211(9)</a>:
1.8 tim 663: <ul>
664: <li>Finish support for receiving 11n A-MPDUs.
665: <li>Add 11n/HT negotiation fixes.
666: <li>Makes 11n negotiation with Linux iwlwifi AP succeed.
667: </ul>
1.15 beck 668: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/smtpd.8">smtpd(8)</a>, prepare for support of wildcard CA and DANE.
1.8 tim 669: <!-- 2015-12-11 -->
1.15 beck 670: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/fdisk.8">fdisk(8)</a>, open the disk read-only if none of -i, -e or -u are specified.
1.8 tim 671: <li>Fix a bug where exhausting a tmpfs filesystem leads to kernel panic.
1.15 beck 672: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/fdisk.8">fdisk(8)</a>, add -v to force the display of both GPTs and the MBR.
1.8 tim 673: <li>In libevent, do not print to stderr.
1.15 beck 674: <li>Use <a href="http://man.openbsd.org/OpenBSD-current/man2/pledge.2">pledge(2)</a> in <a href="http://man.openbsd.org/OpenBSD-current/man8/spamlogd.8">spamlogd(8)</a>.
675: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/dhcpd.8">dhcpd(8)</a>, fix a bug where the default-lease-time, max-lease-time, bootp-lease-length statements specified in <a href="http://man.openbsd.org/OpenBSD-current/man5/dhcpd.conf.5">dhcpd.conf(5)</a> were being ignored.
676: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/nsd.8">nsd(8)</a>, disable the database file by default.
1.10 tim 677: <li>Update to nsd 4.1.7.
1.15 beck 678: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/ehci.4">ehci(4)</a>, work around Nvidia EHCI controllers bugs.
679: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/vmctl.8">vmctl(8)</a>, allow the "id" argument to be a number or a VM name.
680: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/smtpd.8">smtpd(8)</a>, add -F to run in foreground while logging to syslog.
681: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/makemap.8">makemap(8)</a>, add -U, like the sendmail makemap.
1.8 tim 682: <!-- 2015-12-10 -->
1.15 beck 683: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/ssh.1">ssh(1)</a>, do not try to load an SSHv1 private key when compiled without SSHv1 support (bz#2505).
1.8 tim 684: <li>Remove now unused plain DES from the kernel crypto framework, including the crypto accelerator drivers.
1.15 beck 685: <li>Use <a href="http://man.openbsd.org/OpenBSD-current/man2/pledge.2">pledge(2)</a> in <a href="http://man.openbsd.org/OpenBSD-current/man8/dhclient.8">dhclient(8)</a>.
686: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/bnx.4">bnx(4)</a>, mark the start routine as MP-safe.
687: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/ksh.1">ksh(1)</a>, fix moving trough and deleting multibyte characters in emacs command-line editing mode.
1.8 tim 688: <!-- 2015-12-09 -->
689: <li>Install the OpenBSD::Pledge Perl module.
1.15 beck 690: <li>Remove plain DES encryption: remove support for DES-CBC encryption in ESP and in IKE main and quick mode from the kernel, <a href="http://man.openbsd.org/OpenBSD-current/man8/isakmpd.8">isakpmd(8)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man8/ipsecctl.8">ipsecctl(8)</a> and <a href="http://man.openbsd.org/OpenBSD-current/man8/iked.8">iked(8)</a>.
1.8 tim 691: <li>In libcrypto, change the counter argument for CRYPTO_chacha_20 to be 64-bits on all platforms. This avoids truncation of the counter on 32-bit platforms.
692: <li>Do not trigger a KASSERT() if the route we're trying to remove does not exist and we get another matching one instead.
693: <li>Do not trigger a KASSERT() when destroying/detaching an interface with RTF_CLONED routes attached.
694: <!-- 2015-12-08 -->
1.15 beck 695: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/inteldrm.4">inteldrm(4)</a>, enable support for 3840x2160 60Hz SST.
1.8 tim 696: <li>Rework the if_start MP-safe serialisation so it can serialise arbitrary work.
1.15 beck 697: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man3/calloc.3">malloc(3)</a>:
1.8 tim 698: <ul>
1.15 beck 699: <li>Add random "canaries" to the end of an allocation. This option is enabled with the <a href="http://man.openbsd.org/OpenBSD-current/man5/malloc.conf.5">malloc.conf(5)</a> "C" flag.
1.8 tim 700: <li>When writing junk to freed chunks (current default behavior), check that the junk is still intact when freeing the delayed chunk in order to catch a potential use-after-free.
701: </ul>
702: <li>Add xenstore(4), a driver for XenStore, the configuration storage.
1.15 beck 703: <li>Add <a href="http://man.openbsd.org/OpenBSD-current/man4/xspd.4">xspd(4)</a>, a driver for the XenSource Platform Device.
704: <li>Add <a href="http://man.openbsd.org/OpenBSD-current/man4/xen.4">xen(4)</a>.
705: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/iwm.4">iwm(4)</a>, avoid synchronization issues with the firmware that might cause association to be aborted or stop the interface from working until reboot.
706: <li>Rewrite <a href="http://man.openbsd.org/OpenBSD-current/man3/getusershell.3">getusershell(3)</a> to avoid the possibility of overflow.
707: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/doas.1">doas(1)</a>, add -a to specify a non-default authentication style.
708: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/vmctl.8">vmctl(8)</a>, add the "console" subcommand to connect to a specified VM console by id.
1.7 tim 709: <!-- 2015-12-07 -->
1.15 beck 710: <li>Use <a href="http://man.openbsd.org/OpenBSD-current/man2/pledge.2">pledge(2)</a> in <a href="http://man.openbsd.org/OpenBSD-current/man8/spamd.8">spamd(8)</a>.
711: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/tmux.1">tmux(1)</a>, add a hooks infrastructure, basic commands, and a couple of client hooks.
712: <li>Add UTF-8 support to <a href="http://man.openbsd.org/OpenBSD-current/man1/wc.1">wc(1)</a>: amongst other things, add -m for character counting.
1.7 tim 713: <li>Add the root certificate for COMODO RSA Certification Authority to /etc/ssl/cert.pem.
1.15 beck 714: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/calendar.1">calendar(1)</a>, add -w to display the day of week.
715: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/vmd.8">vmd(8)</a>, fix reloading after a previous load error.
716: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man5/vm.conf.5">vm.conf(5)</a>, allow unquoted slashes in strings. This also allows pathnames to be concatenated with macros.
717: <li>Merge <a href="http://man.openbsd.org/OpenBSD-current/man8/makemap.8">makemap(8)</a> into <a href="http://man.openbsd.org/OpenBSD-current/man8/mailq.8">smtpctl(8)</a>.
718: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/tmux.1">tmux(1)</a>, fix bell indicators across detach.
1.7 tim 719: <li>Update to freetype 2.6.2.
720: <!-- 2015-12-06 -->
1.15 beck 721: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/azalia.4">azalia(4)</a>, enable snooping on Intel 100 Series HDA.
722: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/ichiic.4">ichiic(4)</a>, attach on Intel 100 series.
723: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/nc.1">nc(1)</a>, make the random sequence of ports less biased.
724: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/vmm.4">vmm(4)</a>, prevent panics caused by opening /dev/vmm in the case of an unsupported configuration or in case vmm0 did not attach.
725: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/ifconfig.8">ifconfig(8)</a>, remove the "txpower" option. It is not relevant anymore.
726: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/mount_mfs.8">newfs(8)</a> and <a href="http://man.openbsd.org/OpenBSD-current/man8/newfs_ext2fs.8">newfs_ext2fs(8)</a>, avoid out-of-boundary access on illegal command line arguments.
1.7 tim 727: <li>In the libc locale code, validate input files to prevent out of boundary accesses.
728: <!-- 2015-12-05 -->
1.15 beck 729: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/vmctl.8">vmctl(8)</a>, print the TTY in the status output.
730: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/amd64/vmm.4">vmm(4)</a>, restore VMM mode after resume from suspend/hibernate.
731: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/vmd.8">vmd(8)</a>, terminate all running VMs on startup: it is not possible to pick up state of "zombie" VMs yet.
732: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/as.1">as(1)</a>, implement the .inst assembler directive for arm.
733: <il>Ensure the same CPU numbering is used for the kern.cptime2 sysctl as for kern.proc. This fixes an issue in <a href="http://man.openbsd.org/OpenBSD-current/man1/top.1">top(1)</a> where a CPU would seem to be idle even though a thread was reported to be running on it.
734: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/ssh.1">ssh(1)</a>, prefer rsa-sha2-512 over -256 for hostkeys.
1.7 tim 735: <li>Update termtypes.master to upstream terminfo-20151128.
1.15 beck 736: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/rc.conf.8">rc.conf(8)</a>, merge "multicast_router" and "multicast_host" into a single "multicast" configuration variable.
737: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/bnx.4">bnx(4)</a>, make the interrupt handler MP-safe, and perform RX and TX completion outside the kernel lock.
738: <li>Make <a href="http://man.openbsd.org/OpenBSD-current/man4/pppx.4">pppx(4)</a> packets with <a href="http://man.openbsd.org/OpenBSD-current/man8/npppd.8">npppd(8)</a> through the device. This makes <a href="http://man.openbsd.org/OpenBSD-current/man4/pppx.4">pppx(4)</a> work with pipex.enable=0. Also fix <a href="http://man.openbsd.org/OpenBSD-current/man4/tun.4">tun(4)</a> not to pass the packets to <a href="http://man.openbsd.org/OpenBSD-current/man4/pipex.4">pipex(4)</a> when pipex.enable=0.
739: <li>Do not loop on EAGAIN in <a href="http://man.openbsd.org/OpenBSD-current/man3/imsg_read.3">imsg_read(3)</a>; return the error instead. This fixes spinning <a href="http://man.openbsd.org/OpenBSD-current/man8/relayd.8">relayd(8)</a> processes seen on busy TLS relays. Adjust all imsg_read(3) consumers accordingly.
740: <li>Use <a href="http://man.openbsd.org/OpenBSD-current/man2/pledge.2">pledge(2)</a> in <a href="http://man.openbsd.org/OpenBSD-current/man8/ospfd.8">ospfd(8)</a>.
741: <li>Let <a href="http://man.openbsd.org/OpenBSD-current/man4/acpicpu.4">acpicpu(4)</a> enable the deeper C-states for AMD Family 12h and later processors.
742: <li>Add an <a href="http://man.openbsd.org/OpenBSD-current/man8/rc.8">rc(8)</a> script for <a href="http://man.openbsd.org/OpenBSD-current/man8/vmd.8">vmd(8)</a>.
1.7 tim 743: <!-- 2015-12-04 -->
1.15 beck 744: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/cap_mkdb.1">cap_mkdb(1)</a>, remove -i.
1.7 tim 745: <li>In ssh, implement SHA2-256 and SHA2-512 for RSASSA-PKCS1-v1_5 signatures for user and host auth.
1.15 beck 746: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/vmctl.8">vmctl(8)</a>, add -c to the "start" subcommand to automatically connect to the VM console after startup.
1.7 tim 747: <li>Add a few kernel lock improvements in the network stack.
748: <!-- 2015-12-03 -->
749: <li><font color="#e00000">5.7 and 5.8 RELIABILITY FIX: a NULL pointer deference could be triggered by a crafted certificate sent to services configured to verify client certificates on TLS/SSL connections.</font><br>A source code patch is available for <a href="errata57.html#021_clientcert">5.7</a> and <a href="errata58.html#009_clientcert">5.8</a>.
750: <li>Add a fix for OpenSSL CVE-2015-3195 and one for OpenSSL CVE-2015-3195.
1.15 beck 751: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/vmctl.8">vmctl(8)</a>, re-add the "load" and "reload" commands.
1.7 tim 752: <li>Re-enable acceleration on Broadwell.
753: <li>Revert xenocara/driver/xf86-video-intel/src/sna/sna_accel.c r1.6 that partly disabled acceleration on Broadwell. The "blt" codepath is not tested well and makes X crash.
1.15 beck 754: <li>Replace vmmctl(8) with <a href="http://man.openbsd.org/OpenBSD-current/man8/vmctl.8">vmctl(8)</a>.
755: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man5/smtpd.conf.5">smtpd.conf(5)</a>, introduce the "limit session" keyword instead of using fixed values in <a href="http://man.openbsd.org/OpenBSD-current/man8/smtpd.8">smtpd(8)</a>.
756: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/pppx.4">pppx(4)</a>, avoid a kernel panic when enqueueing an mbuf chain.
757: <li>Use <a href="http://man.openbsd.org/OpenBSD-current/man2/pledge.2">pledge(2)</a> in <a href="http://man.openbsd.org/OpenBSD-current/man1/ssh.1">ssh(1)</a>.
758: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/vmd.8">vmd(8)</a>, add -D and -f.
759: <li>Add support for an optional <a href="http://man.openbsd.org/OpenBSD-current/man/vm.conf.5">vm.conf(5)</a> file in <a href="http://man.openbsd.org/OpenBSD-current/man8/vmd.8">vmd(8)</a>. This file will replace vmm.conf(5) in vmmctl(8).
760: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/netstat.1">netstat(1)</a>, print the interface index; its name is no longer available.
761: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/myx.4">myx(4)</a>, use an MP-safe start routine.
762: <li>Add <a href="http://man.openbsd.org/OpenBSD-current/man4/etherip.4">etherip(4)</a>.
763: <li>Add UTF-8 support to <a href="http://man.openbsd.org/OpenBSD-current/man1/rs.1">rs(1)</a>.
1.7 tim 764: <li>Allow network interfaces to provide an MP-safe start routine.
1.15 beck 765: <li>Use the ncurses files in /usr/share/terminfo/* instead of using the custom BDB <a href="http://man.openbsd.org/OpenBSD-current/man5/terminfo.5">terminfo(5)</a> databases.
766: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/rebound.8">rebound(8)</a>, when running without net, prevent the resolver from having to wait for timeout when queries cannot be forwarded.
767: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/ex.1">vi(1)</a>, after inserting a backslash, don't treat ^H ^? or ^U as special cases.
768: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/doas.1">doas(1)</a>, provide a custom password prompt that includes username and host.
769: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/route.8">route(8)</a>, print the interface index which is part of the route msg header.
1.7 tim 770: <!-- 2015-12-02 -->
1.15 beck 771: <li>Add privsep and <a href="http://man.openbsd.org/OpenBSD-current/man2/pledge.2">pledge(2)</a> to <a href="http://man.openbsd.org/OpenBSD-current/man8/vmd.8">vmd(8)</a>.
772: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/relayd.8">relayd(8)</a>, improve the algorithm distributing client sessions over hosts.
773: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/spamd.8">spamd(8)</a>, fix STARTTLS support.
774: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/rc.8">rc(8)</a>, fix a bug where it was no longer possible to add shlib_dirs using <a href="http://man.openbsd.org/OpenBSD-current/man8/rc.conf.8">rc.conf.local(8)</a>.
1.7 tim 775: <li>In the installer, improve GPT handling.
776: <li>On octeon, enable the DR1 region even with 32-bit page table entries.
777: <!-- 2015-12-01 -->
1.15 beck 778: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/azalia.4">azalia(4)</a>, fix the speaker audio on IDT 92HD75B3/4 codecs with HP subids.
779: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/cut.1">cut(1)</a>, add UTF-8 support. Implement -c and -n options, and let -d option accept a multibyte delimiter character.
780: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/unbound.8">unbound(8)</a>, fix a file descriptor leak in the parent process.
781: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/azalia.4">azalia(4)</a>, add an unmute quirk for IDT 92HD75B3/4 codecs with HP subids. This is required to get speaker audio on the HP Elitebook 2540p.
782: <li>Use <a href="http://man.openbsd.org/OpenBSD-current/man2/pledge.2">pledge(2)</a> to <a href="http://man.openbsd.org/OpenBSD-current/man1/ssh-agent.1">ssh-agent(1)</a>.
783: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/Xserver.1">Xserver(1)</a>:
1.7 tim 784: <ul>
785: <li>Make DRI2 work on OpenBSD where we don't have support for DRI3 yet.
786: <li>Enable glamor on architectures where we have OpenGL.
787: </ul>
1.15 beck 788: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/ppb.4">ppb(4)</a>, properly condigure bridges left unconfigured by the system firmware. This makes the Apple Thunderbolt Giabit Ethernet adapter work when inserted at boot time.
1.7 tim 789: <li>Enable the GSE interrupt on Broadwell. This fixes ACPI brightness control on the MacBookPro12,1 and 3rd generation Lenovo X1 Carbon.
1.15 beck 790: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/pcidump.8">pcidump(8)</a>, print PME# state together with the PCI power state when enabled/asserted.
791: <li>Add UTF-8 support to <a href="http://man.openbsd.org/OpenBSD-current/man1/cut.1">cut(1)</a> and <a href="http://man.openbsd.org/OpenBSD-current/man1/ls.1">ls(1)</a>.
792: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/smtpd.8">smtpd(8)</a>, add received-auth parameter to listener to identify authenticated sessions in locally appended "Received" header when enabled.
793: <li>Fix an issue with <a href="http://man.openbsd.org/OpenBSD-current/man1/gcc.1">gcc(1)</a> on i386 which in turn fixes the Mesa i965 dri module on i386.
794: <li>Fix <a href="http://man.openbsd.org/OpenBSD-current/man4/bridge.4">bridge(4)</a> to forward broadcast/multicast frames from <a href="http://man.openbsd.org/OpenBSD-current/man4/gif.4">gif(4)</a>.
795: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/bgpd.8">bgpd(8)</a>, fix rdomain setups.
1.7 tim 796: <li>Remove the aviion and the solbourne platforms.
1.15 beck 797: <li>Add separate users and groups for <a href="http://man.openbsd.org/OpenBSD-current/man8/tftp-proxy.8">tftp-proxy(8)</a> and <a href="http://man.openbsd.org/OpenBSD-current/man8/ftp-proxy.8">ftp-proxy(8)</a> so that they don't share the same ones.
1.6 tim 798: <!-- 2015-11-30 -->
1.15 beck 799: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/fdisk.8">fdisk(8)</a>, make -i zap any undesirable GPT hanging around, just like the reinit command does.
800: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/rtadvd.8">rtadvd(8)</a>, fix dynamic prefix tracking.
801: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/smtpd.8">smtpd(8)</a>:
1.6 tim 802: <ul>
1.10 tim 803: <li>Support user+tag expansion in aliases.
1.15 beck 804: <li>While delivering to lmtp or mda, accept the optional "as user" parameter in <a href="http://man.openbsd.org/OpenBSD-current/man5/smtpd.conf.5">smtpd.conf(5)</a>.
805: <li>Fix IPv6 address parsing in <a href="http://man.openbsd.org/OpenBSD-current/man5/smtpd.conf.5">smtpd.conf(5)</a>.
806: <li>Allow the use of the tls+backup:// schema in <a href="http://man.openbsd.org/OpenBSD-current/man5/smtpd.conf.5">smtpd.conf(5)</a>.
1.6 tim 807: <li>Remove table-passwd, table-sqlite and table-ldap.
808: </ul>
1.15 beck 809: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/ubcmtp.4">ubcmtp(4)</a>, add support for the touchpad found on the MacBookPro12,1.
810: <li>Use <a href="http://man.openbsd.org/OpenBSD-current/man2/pledge.2">pledge(2)</a> in <a href="http://man.openbsd.org/OpenBSD-current/man6/adventure.6">adventure(6)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man6/backgammon.6">backgammon(6)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man6/boggle.6">boggle(6)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man6/bs.6">bs(6)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man6/canfield.6">canfield(6)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man6/fish.6">fish(6)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man6/gomoku.6">gomoku(6)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man6/grdc.6">grdc(6)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man6/mille.6">mille(6)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man6/prime.6">prime(6)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man8/ssh-keysign.8">ssh-keysign(8)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man6/trek.6">trek(6)</a> and <a href="http://man.openbsd.org/OpenBSD-current/man6/wump.6">wump(6)</a>.
1.6 tim 811: <!-- 2015-11-29 -->
1.15 beck 812: <li>Make it possible to detach <a href="http://man.openbsd.org/OpenBSD-current/man4/bge.4">bge(4)</a>.
813: <li>Add OpenBSD::Pledge, a Perl interface to <a href="http://man.openbsd.org/OpenBSD-current/man2/pledge.2">pledge(2)</a>.
814: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/xhci.4">xhci(4)</a>:
1.6 tim 815: <ul>
816: <li>Make the integrated SD card reader in the MacBookPro12,1 attach.
817: <li>Make hotplugging USB 3.0 devices work on the MacBookPro12,1.
818: </ul>
819: <li>Convert the simple list of multipath route entries used by ART kernels to a SRP list. This makes the rtable_* layer MP-safe.
1.15 beck 820: <li>Remove <a href="http://man.openbsd.org/OpenBSD-5.8/man8/stdethers.8">stdethers(8)</a> and <a href="http://man.openbsd.org/OpenBSD-5.8/man8/stdhosts.8">stdhosts(8)</a>.
821: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man6/atc.6">atc(6)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man6/battlestar.6">battlestar(6)</a> and <a href="http://man.openbsd.org/OpenBSD-current/man6/robots.6">robots(6)</a>, use <a href="http://man.openbsd.org/OpenBSD-current/man2/pledge.2">pledge(2)</a> and move the score file to the user's home directory.
822: <li>Use <a href="http://man.openbsd.org/OpenBSD-current/man2/pledge.2">pledge(2)</a> in <a href="http://man.openbsd.org/OpenBSD-current/man6/cribbage.6">cribbage(6)</a>.
823: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/make.1">make(1)</a>, fix duplicate targets in target list.
1.6 tim 824: <!-- 2015-11-28 -->
1.15 beck 825: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/skeyinit.1">skeyinit(1)</a>:
1.6 tim 826: <ul>
1.15 beck 827: <li>Use <a href="http://man.openbsd.org/OpenBSD-current/man2/pledge.2">pledge(2)</a>.
1.6 tim 828: <li>Allow the -n flag to work in -s mode.
829: </ul>
1.15 beck 830: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/installboot.8">installboot(8)</a>, back out <a href="http://man.openbsd.org/OpenBSD-current/man2/pledge.2">pledge(2)</a>.
831: <li>Mark the interrupt handler for pci (but not sbus) attached <a href="http://man.openbsd.org/OpenBSD-current/man4/gem.4">gem(4)</a> as MP-safe.
1.6 tim 832: <!-- 2015-11-27 -->
1.15 beck 833: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/ssh-keygen.1">ssh-keygen(1)</a>, do not leak a temporary file if there is no known_hosts file.
834: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/sshd.8">sshd(8)</a>, don't include port number in tcpip-forward replies for requests that don't allocate a port (bz#2509).
835: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/doas.1">doas(1)</a>, don't write past the end of a buffer after reading too long a line from the configuration file.
1.6 tim 836: <li>On sparc64, don't panic in pmap_enter() if we deplete the pool of pv entries and the PMAP_CANFAIL flag is set.
1.15 beck 837: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/pci.4">pci(4)</a>, do not report a bus conflict for bridges that are left (partly) unconfigured by the system firmware.
838: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/df.1">df(1)</a>, avoid reading past the end of a buffer.
839: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/ugen.4">ugen(4)</a>, attach the iPhone 6.
840: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man6/snake.6">snake(6)</a>, use <a href="http://man.openbsd.org/OpenBSD-current/man2/pledge.2">pledge(2)</a> and move the score file into the user's home directory.
841: <li>Change the command-line syntax of <a href="http://man.openbsd.org/OpenBSD-current/man8/vmctl.8">vmmctl(8)</a>.
1.6 tim 842: <!-- 2015-11-26 -->
843: <li>In efiboot, avoid setting mode to GOP if the mode is unchanged. Also don't panic if the setting mode is failed.
1.15 beck 844: <li>Remove <a href="http://man.openbsd.org/OpenBSD-5.8/man8/rpc.yppasswdd.8">rpc.yppasswdd(8)</a>.
845: <li>Use <a href="http://man.openbsd.org/OpenBSD-current/man2/pledge.2">pledge(2)</a> in <a href="http://man.openbsd.org/OpenBSD-current/man8/installboot.8">installboot(8)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man8/login_radius.8">login_radius(8)</a> and <a href="http://man.openbsd.org/OpenBSD-current/man1/scp.1">scp(1)</a>.
846: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/chpass.1">chpass(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man8/login_chpass.8">login_chpass(8)</a> and <a href="http://man.openbsd.org/OpenBSD-current/man1/passwd.1">passwd(1)</a>, delete YP password related code.
847: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/bootparamd.8">rpc.bootparamd(8)</a>, delete YP lookup code.
848: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man5/syslog.conf.5">syslog.conf(5)</a>, disable the *.emerg block by default.
849: <li>Automatically start <a href="http://man.openbsd.org/OpenBSD-current/man4/vmm.4">vmm(4)</a> when the first VM is created and after the last VM is terminated. This removes the explicit enable and disable cmmands from <a href="http://man.openbsd.org/OpenBSD-current/man8/vmctl.8">vmmctl(8)</a> and <a href="http://man.openbsd.org/OpenBSD-current/man5/vm.conf.5">vmm.conf(5)</a>.
850: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/fdisk.8">fdisk(8)</a>, when prompting for a GPT partition type, use the partition's current type as default; and when prompting for an LBA, show the minimum and maximum values in the prompt.
1.6 tim 851: <!-- 2015-11-25 -->
1.15 beck 852: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/ifconfig.8">ifconfig(8)</a>, fix breakage when re-configuring an IPv6 static address.
1.6 tim 853: <li>Stop building Mesa on alpha on mips64 because of gcc and binutils issues.
854: <!-- 2015-11-24 -->
855: <li>Replace IFF_OACTIVE manipulation with MP-safe operations.
1.15 beck 856: <li>Add <a href="http://man.openbsd.org/OpenBSD-current/man2/sendsyslog2.2">sendsyslog2(2)</a>. This makes it possible to remove the direct /dev/console opening code from libc.
857: <li>On libc, use reentrant versions of <a href="http://man.openbsd.org/OpenBSD-current/man3/getpwnam.3">getpwnam(3)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man3/getpwnam.3">getpwuid(3)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man3/getgrnam.3">getgrnam(3)</a>, and <a href="http://man.openbsd.org/OpenBSD-current/man3/getgrgid.3">getgrgid(3)</a> within libc to avoid reusing the static buffers returned by the non-reentrant versions.
858: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/tmux.1">tmux(1)</a>:
1.6 tim 859: <ul>
860: <li>Show libevent version in showmsgs -I.
861: <li>All kill-session -C to clear alerts in all windows.
862: <li>Remove the -I part of show-messages.The server start time can be accessed with a new start_time format.
863: </ul>
1.15 beck 864: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/pciide.4">pciide(4)</a>, allow to reliably found disks on Xserve G5 by increasing the delay between the PHY reset and the status check for ServerWorks SATA.
865: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/ex.1">vi(1)</a>, turn on filename tab completion by default.
1.6 tim 866: <!-- 2015-11-23 -->
1.15 beck 867: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/telnet.1">telnet(1)</a>, don't support repeated connections. This avoids problems with <a href="http://man.openbsd.org/OpenBSD-current/man2/pledge.2">pledge(2)</a>.
868: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man6/atc.6">atc(6)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man6/battlestar.6">battlestar(6)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man6/hack.6">hack(6)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man6/phantasia.6">phantasia(6)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man6/robots.6">robots(6)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man6/sail.6">sail(6)</a>, and <a href="http://man.openbsd.org/OpenBSD-current/man6/snake.6">snake(6)</a>, remove the setgid bit.
869: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man6/canfield.6">canfield(6)</a>, remove the setgid bit and move score files into the user's home directory.
870: <li>Use <a href="http://man.openbsd.org/OpenBSD-current/man2/pledge.2">pledge(2)</a> in <a href="http://man.openbsd.org/OpenBSD-current/man8/fdisk.8">fdisk(8)</a> and <a href="http://man.openbsd.org/OpenBSD-current/man8/mount.8">mount(8)</a>.
871: <li>Remove support for "lookup yp" in <a href="http://man.openbsd.org/OpenBSD-current/man5/resolv.conf.5">resolv.conf(5)</a>. It is incompatible with <a href="http://man.openbsd.org/OpenBSD-current/man2/pledge.2">pledge(2)</a>.
872: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/vmd.8">vmd(8)</a>, add the -d and -v flags.
873: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/vmd.8">vmd(8)</a>, add support for logging to stderr or syslog, and to run it in foreground with -d option.
874: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/sndiod.8">sndiod(8)</a>:
1.6 tim 875: <ul>
876: <li>Ensure the /tmp/aucat directory gets the right permissions.
877: <li>Exit cleanly in the case where the clock is ticking because of a MMC start message.
878: <li>Remove the unused -M option.
879: </ul>
1.15 beck 880: <li>Attach <a href="http://man.openbsd.org/OpenBSD-current/man4/macppc/zs.4">zs(4/macppc)</a> as "zs" rather than "zsc".
881: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/bc.1">bc(1)</a>, fix printing of non-ASCII characters in an error message and fix a number of problems caused by invalid input.
1.6 tim 882: <!-- 2015-11-22 -->
1.15 beck 883: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/vmctl.8">vmmctl(8)</a>, add support for <a href="http://man.openbsd.org/OpenBSD-current/man5/vm.conf.5">vmm.conf(5)</a>.
884: <li>Add <a href="http://man.openbsd.org/OpenBSD-current/man8/vmd.8">vmd(8)</a> and <a href="http://man.openbsd.org/OpenBSD-current/man8/vmctl.8">vmmctl(8)</a>.
885: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/tmux.1">tmux(1)</a>, if display-time is set to 0, show status messages until a key is pressed.
886: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/ospfctl.8">ospfctl(8)</a>, print what <a href="http://man.openbsd.org/OpenBSD-current/man8/ospfd.8">ospfd(8)</a> thinks is connected by adding a "C" to the nexthop output.
887: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/ospfd.8">ospfd(8)</a>, improve ABR support especially for self-originated stub networks. This solves the last issues when using ospfd(8) in multiple areas.
1.6 tim 888: <!-- 2015-11-21 -->
889: <li>Import mesa 11.0.6.
1.15 beck 890: <li>Use <a href="http://man.openbsd.org/OpenBSD-current/man2/pledge.2">pledge(2)</a> in <a href="http://man.openbsd.org/OpenBSD-current/man8/nsd.8">nsd(8)</a>.
891: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/pcidump.8">pcidump(8)</a>, print the PCI power state when -v is given.
892: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/fdisk.8">fdisk(8)</a>, bring GPT partition editing into line with MBR partition editing.
893: <li>Fix <a href="http://man.openbsd.org/OpenBSD-current/man4/drm.4">inteldrm(4)</a> on recent Apple hardware.
894: <li>Make <a href="http://man.openbsd.org/OpenBSD-current/man4/sdhc.4">sdhc(4)</a> work with 64-bit memory BARs such as those found on the new PC Engines apu.
895: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/tail.1">tail(1)</a>, improve fixes for running without -f.
896: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/amd64/vmm.4">vmm(4)</a>, do not create a VM if vmm mode hasn't been enabled.
1.6 tim 897: <!-- 2015-11-20 -->
1.15 beck 898: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/fdisk.8">fdisk(8)</a>, fix several nits in editing partitions.
899: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/mandoc.1">mandoc(1)</a>, fix multiple issues regarding process group and signal mask handling.
900: <li>Remove <a href="http://man.openbsd.org/OpenBSD-5.8/man8/login_tis.8">login_tis(8)</a>.
901: <li>In the installer, do not auto-skip X sets on systems without <a href="http://man.openbsd.org/OpenBSD-current/man4/wscons.4">wscons(4)</a>.
902: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/em.4">em(4)</a>, revert all the changes to run the tx completion path without holding the kernel lock. It causes "watchdog timeout" problems.
903: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/cvs.1">cvs(1)</a>, disable server-side pserver support.
904: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/sppp.4">sppp(4)</a>, remove support for SPPP with framing. It is no longer used.
905: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/ed.1">ed(1)</a>, restore the user-defined prompt (specified with -p) when it was turned off and then on again with "P".
906: <li>Use <a href="http://man.openbsd.org/OpenBSD-current/man2/pledge.2">pledge(2)</a> in <a href="http://man.openbsd.org/OpenBSD-current/man6/monop.6">monop(6)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/skeyinit.1">skeyinit(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man6/tetris.6">tetris(6)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man8/trpt.8">trpt(8)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man6/worm.6">worm(6)</a> and <a href="http://man.openbsd.org/OpenBSD-current/man6/worms.6">worms(6)</a>.
1.6 tim 907: <!-- 2015-11-19 -->
1.15 beck 908: <li>Repair most cases of "<a href="http://man.openbsd.org/OpenBSD-current/man1/tail.1">tail</a> +n" usage.
909: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/tmux.1">tmux(1)</a>, only assume pasting with at least two characters.
910: <li>Update to <a href="http://man.openbsd.org/OpenBSD-current/man1/flex.1">flex(1)</a> 2.5.39 and add various improvements including use of <a href="http://man.openbsd.org/OpenBSD-current/man2/pledge.2">pledge(2)</a>.
911: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/fdisk.8">fdisk(8)</a>, when an existing partition is modified in LBA mode, ensure that the partition table is marked dirty so that it gets written when "quit" is issued.
912: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/tail.1">tail(1)</a>, allow tailing multiple files.
913: <li>Use <a href="http://man.openbsd.org/OpenBSD-current/man2/pledge.2">pledge(2)</a> in OpenCVS.
1.6 tim 914: <li>In the kernel, don't try and wakeup other threads to handle pending work when it is known there's only one thread in the taskq.
1.15 beck 915: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/newsyslog.8">newsyslog(8)</a>, back out <a href="http://man.openbsd.org/OpenBSD-current/man2/pledge.2">pledge(2)</a>.
916: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/ssh.1">ssh(1)</a>, disallow ConnectionAttempts=0.
917: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/vi.1">vi(1)</a>, remove cscope support.
1.6 tim 918: <!-- 2015-11-18 -->
1.15 beck 919: <li>In the installer, set "prohibit-password" in <a href="http://man.openbsd.org/OpenBSD-current/man5/sshd_config.5">sshd_config(5)</a> instead of "without-password".
920: <li>Use <a href="http://man.openbsd.org/OpenBSD-current/man2/pledge.2">pledge(2)</a> in <a href="http://man.openbsd.org/OpenBSD-current/man1/fvwm.1">fvwm(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/FvwmPager.1">FvwmPager(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man8/hotplugd.8">hotplugd(8)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/locale.1">locale(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man8/sensorsd.8">sensorsd(8)</a>.
1.6 tim 921: <li>Add icdb, the Internal C Database: a simpler replacement for the old Berkeley DB code.
1.15 beck 922: <li>Add <a href="http://man.openbsd.org/OpenBSD-current/man3/getpwnam_shadow.3">getpwnam_shadow(3)</a> and <a href="http://man.openbsd.org/OpenBSD-current/man3/getpwuid_shadow.3">getpwuid_shadow(3)</a>. These functions will always open the secure/shadow/master password files.
923: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/octeon/cnmac.4">cnmac(4/octeon)</a>, fix the reception of short non-IP packets by accounting of padding with dynamic short packets.
924: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/tmux.1">tmux(1)</a>, add the "s/foo/bar/:" prefix for formats to substitute bar for foo.
925: <li>Fix a regression introduced by the <a href="http://man.openbsd.org/OpenBSD-current/man9/rtalloc.9">rtalloc(9)</a> rewrite where only the first route of a multipath chain had a valid next hop and could be used.
926: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/ssh-keygen.1">ssh-keygen(1)</a>, fix -l for private keys. This was broken in support for multiple plain keys on stdin.
927: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/sndiod.8">sndiod(8)</a>, disable -L (networking) until privilege separation is implemented.
1.6 tim 928: <!-- 2015-11-17 -->
1.15 beck 929: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/fdisk.8">fdisk(8)</a>, since -e edits the on-disk information, remove GPT and re-read it from disk if appropriate.
930: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/crontab.1">crontab(1)</a>, check for <a href="http://man.openbsd.org/OpenBSD-current/man2/setegid.2">setgid(2)</a> failure before executing editor and warn if the exec of shell + editor fails.
931: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/ntpd.8">ntpd(8)</a>, fix memory leak in remove a constraint code path.
932: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/trpt.8">trpt(8)</a>, remove the setgid bit.
933: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man6/tetris.6">tetris(6)</a>, remove the setgid bit and move score files into the user's home directory.
934: <li>Remove <a href="http://man.openbsd.org/OpenBSD-5.8/man1/lptest.1">lptest(1)</a>, <a href="http://man.openbsd.org/OpenBSD-5.8/man8/pac.8">pac(8)</a> and <a href="http://man.openbsd.org/OpenBSD-5.8/man8/yptest.8">yptest(8)</a>,
935: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/bge.4">bge(4)</a>, clear the interface timer when shutting down the interface so the watchdog timer doesn't fire a few seconds later.
936: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/snmpd.8">snmpd(8)</a>, exclude sensors marked as invalid from the sensors MIB.
937: <li>Use <a href="http://man.openbsd.org/OpenBSD-current/man2/pledge.2">pledge(2)</a> in <a href="http://man.openbsd.org/OpenBSD-current/man1/cvs.1">cvs(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/getconf.1">getconf(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man8/newsyslog.8">newsyslog(8)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man8/sa.8">sa(8)</a> and <a href="http://man.openbsd.org/OpenBSD-current/man8/showmount.8">showmount(8)</a>.
1.6 tim 938: <li>Unbreak next-hop caching on multipath setups: when multiple gateways are in use, the next-hop entry might not be on the same interface.
1.15 beck 939: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/bgpd.8">bgpd(8)</a>, in the session engine, handle loss of the pipe with a normal shutdown of sessions and exit.
1.6 tim 940: <!-- 2015-11-16 -->
1.15 beck 941: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/ssh-keygen.1">ssh-keygen(1)</a>, allow fingerprinting from standard input and support fingerprinting multiple plain keys in a file and authorized_keys files (bz#1319).
942: <li>Use <a href="http://man.openbsd.org/OpenBSD-current/man2/pledge.2">pledge(2)</a> in <a href="http://man.openbsd.org/OpenBSD-current/man1/calendar.1">calendar(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/gprof.1">gprof(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/Mail.1">mail(1)</a>, and <a href="http://man.openbsd.org/OpenBSD-current/man8/shutdown.8">shutdown(8)</a>.
943: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/at.1">at(1)</a>, make -l comply with POSIX.
944: <li>Fix a panic that happens when <a href="http://man.openbsd.org/OpenBSD-current/man4/radeondrm.4">radeomdrm(4)</a> detaches because the hardware couldn't be initialized properly.
945: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/pvbus.4">pvbus(4)</a>, fix a panic on i386 under VMware.
1.6 tim 946: <li>Add the QuoVadis root certificates to /etc/ssl/cert.pem.
1.4 tim 947: <!-- 2015-11-15 -->
1.15 beck 948: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/sshd.8">sshd(8)</a>, add a new authorized_keys option "restrict" that includes all current and future key restrictions. Also add permissive versions of the existing restrictions.
949: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man5/ssh_config.5">ssh_config(5)</a>, add the AddKeysToAgent option.
950: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/intel.4">intel(4)</a>, partly disable acceleration on Broadwell. This avoids use of the render ring which gets stuck after resume.
951: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man9/ieee80211.9">ieee80211(9)</a>:
1.4 tim 952: <ul>
953: <li>Add 11n HT support.
954: <li>Expose 11n mode to the ifmedia layer and introduce the concept of MCS. Make sure 11n features are enabled only if media type is autoselect or 11n.
955: <li>Add support for 11n mode to the rate adaptation (AMRR) code.
956: </ul>
1.15 beck 957: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/Xorg.1">Xorg(1)</a>, remove the -configure option. It has been broken for a long time.
958: <li>Use <a href="http://man.openbsd.org/OpenBSD-current/man2/pledge.2">pledge(2)</a> in
959: <a href="http://man.openbsd.org/OpenBSD-current/man1/locate.1">locate(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/clear.1">tput(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/reset.1">tset(1)</a>, and <a href="http://man.openbsd.org/OpenBSD-current/man8/user.8">user(8)</a>.
1.4 tim 960: <!-- 2015-11-14 -->
1.15 beck 961: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/rdistd.1">rdistd(1)</a>, support hardlinked symlinks.
1.4 tim 962: <li>In the binutils tools:
963: <ul>
964: <li>Don't try to preserve setuid bits.
965: <li>Always strip off setuid/setgid bits when creating copies of files.
966: </ul>
1.15 beck 967: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man9/ieee80211.9">ieee80211(9)</a>, fix CCMP (WPA2) in preparation for 11n.
1.4 tim 968: <li>Remove libocurses. It is no longer used.
1.15 beck 969: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/mandoc.1">mandoc(1)</a>, fix a bug where hitting Ctrl-Backslash (= SIGQUIT) in the <a href="http://man.openbsd.org/OpenBSD-current/man1/less.1">less(1)</a> process spawned by <a href="http://man.openbsd.org/OpenBSD-current/man1/man.1">man(1)</a> causes <a href="http://man.openbsd.org/OpenBSD-current/man1/man.1">man(1)</a> to die uncleanly leaving behind its temp files, and kill <a href="http://man.openbsd.org/OpenBSD-current/man1/less.1">less(1)</a> uncleanly leaving the terminal in the wrong state.
970: <li>Use <a href="http://man.openbsd.org/OpenBSD-current/man2/pledge.2">pledge(2)</a> in <a href="http://man.openbsd.org/OpenBSD-current/man1/ar.1">ar(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/info.1">info(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/infokey.1">infokey(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/install-info.1">install-info(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man8/ldconfig.8">ldconfig(8)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/ldd.1">ldd(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/makeinfo.1">makeinfo(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/objcopy.1">objcopy(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/texindex.1">texindex(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/ex.1">vi(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/xconsole.1">xconsole(1)</a> and <a href="http://man.openbsd.org/OpenBSD-current/man8/ypldap.8">ypldap(8)</a>.
971: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/rs.1">rs(1)</a>, fix a bug with -z where every column was at least as wide as the previous one.
1.4 tim 972: <li>Update to xkeyboard-config 2.16.
973: <!-- 2015-11-13 -->
1.15 beck 974: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/telnet.1">telnet(1)</a>:
1.4 tim 975: <ul>
976: <li>Remove S/Key support.
977: <li>Remove support for !shell.
978: <li>Remove the tracefile command.
979: <li>Remove the debug command.
1.15 beck 980: <li>Set <a href="http://man.openbsd.org/OpenBSD-current/man4/rdomain.4">rtable(4)</a> on the whole process, not only in the socket.
981: <li>Use <a href="http://man.openbsd.org/OpenBSD-current/man2/pledge.2">pledge(2)</a>.
1.4 tim 982: </ul>
1.15 beck 983: <li>Use <a href="http://man.openbsd.org/OpenBSD-current/man2/pledge.2">pledge(2)</a> in <a href="http://man.openbsd.org/OpenBSD-current/man1/as.1">as(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man8/fdisk.8">fdisk(8)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/c++.1">gcc(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/ld.1">ld(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/nm.1">nm(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man8/rarpd.8">rarpd(8)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/tcpbench.1">tcpbench(1)</a> and <a href="http://man.openbsd.org/OpenBSD-current/man8/tftp-proxy.8">tftp-proxy(8)</a>.
984: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man9/crypto.9">crypto(9)</a>:
1.4 tim 985: <ul>
986: <li>Remove unused non-HMAC versions of MD5 and SHA1.
987: <li>Remove unused ARC4.
988: </ul>
1.15 beck 989: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/tmux.1">tmux(1)</a> add the window_visible_layout format.
990: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/file.1">file(1)</a>, with -L, make links actually be followed.
991: <li>Add <a href="http://man.openbsd.org/OpenBSD-current/man4/amd64/vmm.4">vmm(4)</a>. It is disabled by default.
1.4 tim 992: <li>In ssh, send SSH2_MSG_UNIMPLEMENTED replies to unexpected messages during KEX (bz#2949).
993: <!-- 2015-11-12 -->
1.15 beck 994: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man5/sshd_config.5">sshd_config(5)</a>, support "none" as an argument for ForceCommand and ChrootDirectory (bz#2486).
995: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/ssh-keygen.1">ssh-keygen(1)</a>, for -L, support multiple certificates (one per line) and reading from standard input.
996: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/nc.1">nc(1)</a>, with -V, set <a href="http://man.openbsd.org/OpenBSD-current/man4/rdomain.4">rtable(4)</a> on the whole process, not only in the socket.
1.4 tim 997: <li>Revert sys/dev/pci/if_bge.c r1.372. It causes regressions on some models.
1.15 beck 998: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/dhclient.8">dhclient(8)</a>, when link loss is reported, cancel any active timeout and wait for link to return.
999: <li>Use <a href="http://man.openbsd.org/OpenBSD-current/man2/pledge.2">pledge(2)</a> in <a href="http://man.openbsd.org/OpenBSD-current/man1/cwm.1">cwm(1)</a> and <a href="http://man.openbsd.org/OpenBSD-current/man8/fingerd.8">fingerd(8)</a>.
1000: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/fdisk.8">fdisk(8)</a>:
1.4 tim 1001: <ul>
1002: <li>Avoid problems with pathological input during edit operations by never attempting to use data past the end of the input.
1003: <li>Refresh the in-kernel copy of the disklabel from the disk <em>after</em> writing the new GPT.
1004: <li>Let "reinit mbr" zero existing MBR and GPT partition information before constructing default MBR.
1005: </ul>
1.15 beck 1006: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/cron.8">cron(8)</a>, move the socket to /var/run/cron.sock.
1.4 tim 1007: <!-- 2015-11-11 -->
1.15 beck 1008: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/tmux.1">tmux(1)</a>:
1.4 tim 1009: <ul>
1010: <li>Remove the mouse-utf8 option. Instead, always turn on UTF-8 mouse if the client says it supports UTF-8.
1011: <li>Support UTF-8 key bindings.
1012: <li>Remove the mouse_utf8_flag.
1013: <li>Remove the utf8 and status-utf8 options. Make tmux only a UTF-8 terminal.
1014: </ul>
1.15 beck 1015: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/fdisk.8">fdisk(8)</a>, display the full disk size when editing GPT, not the truncated MBR size. Display the "disk too large" message only when no GPT is found.
1016: <li>Use <a href="http://man.openbsd.org/OpenBSD-current/man2/pledge.2">pledge(2)</a> in <a href="http://man.openbsd.org/OpenBSD-current/man1/mg.1">mg(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man8/spamdb.8">spamdb(8)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/xclock.1">xclock(1)</a> and <a href="http://man.openbsd.org/OpenBSD-current/man1/Xserver.1">Xserver(1)</a>.
1017: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/mg.1">mg(1)</a>, clear the mini buffer once a question has been displayed.
1.4 tim 1018: <!-- 2015-11-10 -->
1.15 beck 1019: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/ehci.4">ehci(4)</a>, mark the interrupt handler IPL_MPSAFE.
1.4 tim 1020: <li>Add /dev/vmm.
1.15 beck 1021: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/bge.4">bge(4)</a>, unbreak the BCM5704 A3 found on some Xserve G5 (RackMac3,1).
1022: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/fdisk.8">fdisk(8)</a>, make GPT on large disks work.
1023: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/rs.1">rs(1)</a>:
1.4 tim 1024: <ul>
1025: <li>With -H, do not overrun a static buffer on files longer than 4 kB.
1026: <li>With -K, do not print bogus blank lines in case of premature EOF.
1027: </ul>
1028: <li>Reduce the memory overhead of our ART routing table from 80M to 70M compared to the existing radix-tree when loading ~550K IPv4 routes.
1.15 beck 1029: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/mount_mfs.8">newfs(8)</a>, remove TMPDIR support.
1.4 tim 1030: <!-- 2015-11-09 -->
1.15 beck 1031: <li>Install ikeca.cnf by default as <a href="http://man.openbsd.org/OpenBSD-current/man8/ikectl.8">ikectl(8)</a> now requires CA-specific sections not present in the general <a href="http://man.openbsd.org/OpenBSD-current/man1/openssl.1">openssl(1)</a> cnf files.
1.4 tim 1032: <li>In libc:
1033: <ul>
1.15 beck 1034: <li>Exclude the hidden <a href="http://man.openbsd.org/OpenBSD-current/man3/atexit.3">atexit(3)</a> and <a href="http://man.openbsd.org/OpenBSD-current/man3/pthread_atfork.3">pthread_atfork(3)</a> stubs from static links that don't use them.
1035: <li>Split the intra-thread functionality from <a href="http://man.openbsd.org/OpenBSD-current/man2/kill.2">kill(2)</a> into its own system call <a href="http://man.openbsd.org/OpenBSD-current/man2/thrkill.2">thrkill(2)</a>. This eliminates the need for locking in <a href="http://man.openbsd.org/OpenBSD-current/man3/pthread_kill.3">pthread_kill(3)</a> and simplifies <a href="http://man.openbsd.org/OpenBSD-current/man3/pthread_cancel.3">pthread_cancel(3)</a>.
1.4 tim 1036: </ul>
1037: <li><font color="#e00000">5.7 and 5.8 RELIABILITY FIX: insufficient validation of RSN element group cipher values in 802.11 beacons and probe responses could result in system panics.</font><br>A source code patch is available for <a href="errata57.html#020_rsn">5.7</a> and <a href="errata58.html#008_rsn">5.8</a>.
1.15 beck 1038: <li>Use <a href="http://man.openbsd.org/OpenBSD-current/man2/pledge.2">pledge(2)</a> in <a href="http://man.openbsd.org/OpenBSD-current/man1/less.1">less(1)</a> and <a href="http://man.openbsd.org/OpenBSD-current/man1/nohup.1">nohup(1)</a>.
1039: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/less.1">less(1)</a>, do not save history in secure mode.
1040: <li>Use the correct <a href="http://man.openbsd.org/OpenBSD-current/man4/rdomain.4">rdomain(4)</a> when sending <a href="http://man.openbsd.org/OpenBSD-current/man4/gre.4">gre(4)</a> keepalive packets.
1041: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/ehci.4">ehci(4)</a>, fix a NULL dereference in case a Root Port Hub interrupt is handled before the soft-interrupt has been established.
1.4 tim 1042: <!-- 2015-11-08 -->
1043: <li>In efiboot, avoid a crash when attempting to calculate the header checksum.
1.15 beck 1044: <li>Make HFSC work on <a href="http://man.openbsd.org/OpenBSD-current/man4/age.4">age(4)</a> and <a href="http://man.openbsd.org/OpenBSD-current/man4/vr.4">vr(4)</a>.
1045: <li>Add the _vmd user and group for the forthcoming <a href="http://man.openbsd.org/OpenBSD-current/man8/vmd.8">vmd(8)</a> daemon.
1.4 tim 1046: <li>Revert gnu/usr.bin/gcc/gcc/cp/g++spec.c r1.2 and r.13 in order to go back to the default upstream behaviour when linking a shared library with c++. It is no longer necessary to behave the same as g++ 2.95.
1.15 beck 1047: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/ssh-keyscan.1">ssh-keyscan(1)</a>, add -c to allow fetching certificates instead of plain keys.
1.4 tim 1048: <li>In ncr53c9x, when issuing a non-dma command, set a length variable to 0 upfront to avoid problems on command completition interrupt.
1.15 beck 1049: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/ssh.1">ssh(1)</a>, fix an OOB read in the packet code.
1.4 tim 1050: <li>Fix possible system panics due insufficient validation of RSN element group cipher values in 802.11 stack.
1.15 beck 1051: <li>Fix a use-after-free in <a href="http://man.openbsd.org/OpenBSD-current/man1/fvwm.1">fwvm(1)</a>.
1052: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/sdmmc.4">sdmmc(4)</a>, always claim to support sector mode for eMMC. This allows BeagleBone Black boards with Micron eMMC to work.
1053: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/less.1">less(1)</a>, remove LESSGLOBALTAGS support.
1.4 tim 1054: <!-- 2015-11-07 -->
1055: <li>In efiboot, make "machine disk" show EFI info instead of BIOS info.
1.15 beck 1056: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/restore.8">restore(8)</a>, make hardlinks of symlinks work.
1.4 tim 1057: <li>In efiboot, disable red-zone since EFI is running with a different ABI. This may fix an issue when loading a compressed kernel on MacBooks.
1058: <li>Update to xserver 1.17.4.
1.15 beck 1059: <li>Use input handlers for <a href="http://man.openbsd.org/OpenBSD-current/man4/bridge.4">bridge(4)</a>. This allows more flexible configurations with <a href="http://man.openbsd.org/OpenBSD-current/man4/svlan.4">vlan(4)</a> and <a href="http://man.openbsd.org/OpenBSD-current/man4/bridge.4">bridge(4)</a> on top of the same physical interface.
1060: <li>Use <a href="http://man.openbsd.org/OpenBSD-current/man2/pledge.2">pledge(2)</a> in <a href="http://man.openbsd.org/OpenBSD-current/man1/xterm.1">xterm(1)</a>.
1.4 tim 1061: <!-- 2015-11-06 -->
1.15 beck 1062: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man3/cabs.3">hypotf(3)</a>, fix wrong magic numbers in scaling causing incorrect results for large and small values.
1063: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/getty.8">getty(8)</a>, remove ppplogin support.
1064: <li>Radically improve the performance of <a href="http://man.openbsd.org/OpenBSD-current/man8/bgpd.8">bgpd(8)</a> filters.
1065: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/less.1">less(1)</a>:
1.4 tim 1066: <ul>
1067: <li>Remove support for "!" to run a shell command.
1068: <li>Remove LESSCHARDEF support.
1069: <li>Remove unused charsets and LESSCHARSET support.
1070: </ul>
1.15 beck 1071: <li>Make HFSC work on <a href="http://man.openbsd.org/OpenBSD-current/man4/de.4">de(4)</a> and <a href="http://man.openbsd.org/OpenBSD-current/man4/sparc/ie.4">ie(4/sparc)</a>.
1.4 tim 1072: <!-- 2015-11-05 -->
1.15 beck 1073: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/ld.so.1">ld.so(1)</a>, fix unloading of load groups when the last reference was not on the load_object but rather some descendent.
1.4 tim 1074: <li>On i386, fix a regression by reading/writing to CR4 register only if the processor has this capability.
1.15 beck 1075: <li>Stop creating the directory /usr/share/nls. If the user does not specify a NLS path, fail early in <a href="http://man.openbsd.org/OpenBSD-current/man3/catopen.3">catopen(3)</a>.
1076: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man3/res_init.3">res_init(3)</a>, restrict the number, size and address family of nameservers. This fixes a crash in sendmail. Only programs that use the bind resolver internals directly are affected.
1077: <li>Replace <a href="http://man.openbsd.org/OpenBSD-current/man1/less.1">less(1)</a> with the cleaned-up fork of less 458 maintained by Garrett D'Amore.
1.4 tim 1078: <li>Update to unbound 1.5.6.
1079: <li>Update to nsd 4.1.6.
1080: <li>In the loongson installer, ensure that the partition containing the boot blocks is recognized on the eBenton EBT700.
1.15 beck 1081: <li>Use <a href="http://man.openbsd.org/OpenBSD-current/man2/pledge.2">pledge(2)</a> in <a href="http://man.openbsd.org/OpenBSD-current/man8/httpd.8">httpd(8)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man8/ikectl.8">ikectl(8)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man8/slowcgi.8">slowcgi(8)</a> and <a href="http://man.openbsd.org/OpenBSD-current/man1/wall.1">wall(1)</a>.
1.4 tim 1082: <li>For USB mice with wheels, check for the W direction at AC Pan input.
1.15 beck 1083: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/pkg_add.8">pkg_add(8)</a>, tweak dependencies handling. This might fix some infrequent bugs.
1084: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/tcpdump.8">tcpdump(8)</a>, fix a segmentation fault by capping the GRE packet len to tcpdump's snap len.
1085: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/tmux.1">tmux(1)</a>, pass through right click if mouse is on.
1086: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/smtpctl.8">smtpctl(8)</a>, implement the "uncorrupt" subcommand.
1087: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/smtpd.8">smtpd(8)</a>, correctly handle messages that consist solely of headers and do not end with an empty line.
1.4 tim 1088: <!-- 2015-11-04 -->
1.15 beck 1089: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/km.4">km(4)</a>, match the temperature sensor in GX-412TC SOC.
1090: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/ipsecctl.8">ipsecctl(8)</a>, decode Chacha20-Poly1305 when dumping SAs.
1091: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/iked.8">iked(8)</a>, support Chacha20-Poly1305 for Child SAs.
1.4 tim 1092: <!-- 2015-11-03 -->
1.15 beck 1093: <li>Fix a potential use-after-free in <a href="http://man.openbsd.org/OpenBSD-current/man4/pf.4">pf(4)</a>.
1.4 tim 1094: <li>Disable TCP/UDP TX hardware checksumming if an IPv4 packet contains IP options or if an IPv6 packet contains header extensions.
1.15 beck 1095: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/rtadvd.8">rtadvd(8)</a>, recognize <a href="http://man.openbsd.org/OpenBSD-current/man4/carp.4">carp(4)</a> interfaces in order to send the src lladdr option.
1096: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/fdisk.8">fdisk(8)</a>, don't allow the user to enter GPT partition names too large to fit in the GPT partition structure. Also avoid running off the end of the name buffer.
1.4 tim 1097: <li>Prevent a panic caused by an infinite recursion in the network stack.
1098: <li>In efiboot, use "Loaded Image Protocol" instead of "Loaded Device Path Protocol" to find the boot device since the MacBook does not support the latter protocol.
1.15 beck 1099: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/snmpd.8">snmpd(8)</a>, don't lose the ARP entries when updating an interface.
1.4 tim 1100: <!-- 2015-11-02 -->
1101: <li>Add Chacha20-Poly1305 to the OpenBSD Cryptographic Framework and enable it in the software crypto driver and the IPsec/ESP and PF_KEY frameworks.
1.15 beck 1102: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/whois.1">whois(1)</a>, add -I to use whois.iana.org (root zone database).
1103: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/tcpdump.8">tcpdump(8)</a>, print RDNSS nameserver addresses and option names for some other known options that are not otherwise decoded yet (DNSSL, route information).
1104: <li>In libssl, add <a href="http://man.openbsd.org/OpenBSD-current/man3/EVP_aead_chacha20_poly1305_ietf.3">EVP_aead_chacha20_poly1305_ietf(3)</a>, a ChaCha20 with a Poly1305 authenticator for IETF protocols.
1.4 tim 1105: <li>Remove ARP load-balacing in order to simplify making ARP MP-safe.
1.15 beck 1106: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/xhci.4">xhci(4)</a>, mark the interrupt handler as IPL_MPSAFE since it only schedules a soft-interrupt.
1107: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/ikectl.8">ikectl(8)</a>:
1.4 tim 1108: <ul>
1109: <li>Accept an "ocsp" option when creating certificates to set the extended key usage for OCSP signing.
1.15 beck 1110: <li>Let <a href="http://man.openbsd.org/OpenBSD-current/man1/openssl.1">openssl(1)</a> add valid signed certs to the index file which is required to use the builtin openssl OCSP server.
1.4 tim 1111: <li>Switch from SHA-1 to SHA-256.
1112: </ul>
1.15 beck 1113: <li>Introduce <a href="http://man.openbsd.org/OpenBSD-current/man9/MBUF_LIST_FIRST.9">ml_purge(9)</a> and <a href="http://man.openbsd.org/OpenBSD-current/man9/MBUF_QUEUE_INITIALIZER.9">mq_purge(9)</a> to free all mbufs on an mbuf list or queue.
1.4 tim 1114: <!-- 2015-11-01 -->
1.15 beck 1115: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/intel.4">intel(4)</a>, fix rendering problems on Broadwell GT3 (Iris 6100/Iris Pro 6200).
1116: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/re.4">re(4)</a>, expand the rx and tx rings so that deviced needing more packets per interrupt can use them.
1117: <li>Rework the <a href="http://man.openbsd.org/OpenBSD-current/man8/netstart.8">netstart(8)</a> script.
1118: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/inteldrm.4">inteldrm(4)</a>:
1.4 tim 1119: <ul>
1120: <li>Prevent the desktop "Iris Pro Graphics 6200" from being misidentified as ULT.
1121: <li>Make the mobile "Iris Graphics 6100" be correctly identified as being a ULT part.
1122: </ul>
1.15 beck 1123: <li>Use <a href="http://man.openbsd.org/OpenBSD-current/man2/pledge.2">pledge(2)</a> in <a href="http://man.openbsd.org/OpenBSD-current/man8/bgpctl.8">bgpctl(8)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man8/ldapctl.8">ldapctl(8)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man8/ldapd.8">ldapd(8)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/m4.1">m4(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/skeyaudit.1">skeyaudit(1)</a> and <a href="http://man.openbsd.org/OpenBSD-current/man1/skeyinfo.1">skeyinfo(1)</a>.
1.3 tim 1124: <!-- 2015-10-31 -->
1.15 beck 1125: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/ntpd.8">ntpd(8)</a>, revert some parts introduced with the original server rtable support, so servers with numeric IP addresses won't be skipped.
1126: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/mg.1">mg(1)</a>, mark *Completions* buffer as read-only.
1127: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/httpd.8">httpd(8)</a>, revert usr.sbin/httpd/httpd.c r1.42 (fix PATH_INFO for "/" requests). It breaks <a href="http://man.openbsd.org/OpenBSD-current/man8/slowcgi.8">slowcgi(8)</a> and php-fpm setups.
1.3 tim 1128: <!-- 2015-10-30 -->
1.15 beck 1129: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/mandoc.1">mandoc(1)</a> do not access a NULL pointer when a .Bd macro has no arguments at all.
1130: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/ntpd.8">ntpd(8)</a>, remove support for sending status reports to syslog on SIGINFO.
1131: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/cvs.1">cvs(1)</a>, fix a crash in pserver mode when CVSROOT/passwd contains an old DES password.
1132: <li>Fix interaction between <a href="http://man.openbsd.org/OpenBSD-current/man4/drm.4">inteldrm(4)</a> and <a href="http://man.openbsd.org/OpenBSD-current/man4/amd64/efifb.4">efifb(4)</a>.
1.3 tim 1133: <!-- 2015-10-29 -->
1.15 beck 1134: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/mg.1">mg(1)</a>, fix opening dired from the command line.
1.3 tim 1135: <li>In libcrypto, add support for the Poly1305 Message Authentication Code.
1.15 beck 1136: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/asmc.4">asmc(4)</a>, enable the keyboard backlight led earlier to avoid a race.
1137: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/ping.8">ping(8)</a>, back out chacha.
1138: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/rebound.8">rebound(8)</a>, print stats upon SIGUSR1.
1139: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/mailq.8">smtpctl(8)</a>, implement the "discover" subcommand.
1140: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/ssh.1">ssh(1)</a>, fix "PubkeyAcceptedKeyTypes +..." inside a Match block.
1141: <li>Make <a href="http://man.openbsd.org/OpenBSD-current/man4/drm.4">inteldrm(4)</a> attach to <a href="http://man.openbsd.org/OpenBSD-current/man4/pci.4">pci(4)</a> instead of <a href="http://man.openbsd.org/OpenBSD-current/man4/vga.4">vga(4)</a>. This is needed for machines where Intel graphics isn't the primary graphics device and on systems with UEFI firmware that put the device in non-VGA mode.
1.3 tim 1142: <!-- 2015-10-28 -->
1.15 beck 1143: <li>Use <a href="http://man.openbsd.org/OpenBSD-current/man2/pledge.2">pledge(2)</a> and privsep in <a href="http://man.openbsd.org/OpenBSD-current/man8/rdate.8">rdate(8)</a>.
1144: <li>Use <a href="http://man.openbsd.org/OpenBSD-current/man2/pledge.2">pledge(2)</a> in <a href="http://man.openbsd.org/OpenBSD-current/man1/at.1">at(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/cap_mkdb.1">cap_mkdb(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man8/cron.8">cron(8)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/crontab.1">crontab(1)</a> and <a href="http://man.openbsd.org/OpenBSD-current/man1/last.1">last(1)</a>.
1145: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/octeon/cnmac.4">cnmac(4/octeon)</a>, enable TCP/UDP checksum offloading on packet transmission.
1146: <li>Support backspace in <a href="http://man.openbsd.org/OpenBSD-current/man4/softraid.4">softraid(4)</a> boot passphrase prompt.
1147: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/lpd.8">lpd(8)</a>, remove pidfile support.
1148: <li>Use <a href="http://man.openbsd.org/OpenBSD-current/man2/pledge.2">pledge(2)</a> in <a href="http://man.openbsd.org/OpenBSD-current/man8/amd64/ZZZ.8">apm(8)</a>.
1149: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man5/resolv.conf.5">resolv.conf(5)</a>, remove support for "[addr]:port" syntax from the "nameserver" line.
1150: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/smtpd.8">smtpd(8)</a>, support <a href="http://man.openbsd.org/OpenBSD-current/man5/aliases.5">aliases(5)</a> entries resolving to maildir:/path.
1.3 tim 1151: <!-- 2015-10-27 -->
1.15 beck 1152: <li>Add a rcpt-to paramater to <a href="http://man.openbsd.org/OpenBSD-current/man5/smtpd.conf.5">smtpd.conf(5)</a>.
1153: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/unbound.8">unbound(8)</a>, don't use a pidfile by default.
1154: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/relayd.8">relayd(8)</a>, change cipher-server-preference to be on by default.
1.3 tim 1155: <!-- 2015-10-26 -->
1.15 beck 1156: <li>Document <a href="http://man.openbsd.org/OpenBSD-current/man5/eigrpd.conf.5">eigrpd.conf(5)</a>.
1157: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/eigrpd.8">eigrpd(8)</a>:
1.3 tim 1158: <ul>
1159: <li>Print a missing "metric" before the actual metric when printing a redistribute line.
1160: <li>Whenever a summary route is activated, install a respective blackhole route in the FIB.
1161: </ul>
1.15 beck 1162: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/pkg-config.1">pkg-config(1)</a>, do not reject properties with no whitespace after the colon.
1163: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/repquota.8">repquota(8)</a>, don't allow -a together with specifying filesystems.
1164: <li>Fix <a href="http://man.openbsd.org/OpenBSD-current/man8/makemap.8">makemap(8)</a> for values containing a "#".
1165: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/dhclient.8">dhclient(8)</a>, add the ability to use option 119 ("Domain Search") if supplied by the server.
1166: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/fdisk.8">fdisk(8)</a>, add GPT editing.
1167: <li>Remove <a href="http://man.openbsd.org/OpenBSD-5.8/man8/rip6query.8">rip6query(8)</a>.
1168: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/crontab.1">crontab(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/diff.1">diff(1)</a> and <a href="http://man.openbsd.org/OpenBSD-current/man1/sendbug.1">sendbug(1)</a>, remove TMPDIR support.
1169: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/top.1">top(1)</a>, print the uptime too.
1170: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/httpd.8">httpd(8)</a>, fix PATH_INFO for "/" requests.
1171: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/mrouted.8">mrouted(8)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man8/pppd.8">pppd(8)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man8/rarpd.8">rarpd(8)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man8/rbootd.8">rbootd(8)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man8/smtpd.8">smtpd(8)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man8/amd64/wsmoused.8">wsmoused(8)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man8/ypserv.8">ypserv(8)</a>, remove <a href="http://man.openbsd.org/OpenBSD-current/man3/pidfile.3">pidfile(3)</a> support.
1172: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/smtpd.8">smtpd(8)</a>, avoid a potential double free.
1.3 tim 1173: <!-- 2015-10-25 -->
1.15 beck 1174: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/ssh.1">ssh(1)</a>, expand tildes in filenames passed to -i before checking whether or not the identity file exists in case the shell doesn't do the expansion (bz#2481).
1175: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/route6d.8">route6d(8)</a>, fix a memory leak.
1176: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/ssh.1">ssh(1)</a>, do not prepend "exec" to the shell command run by "Match exec" in a config file (bz#2471).
1177: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/tmux.1">tmux(1)</a>, extend the modifiers allowed before formats.
1178: <li>Use <a href="http://man.openbsd.org/OpenBSD-current/man2/pledge.2">pledge(2)</a> in <a href="http://man.openbsd.org/OpenBSD-current/man8/rtadvd.8">rtadvd(8)</a>.
1179: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/cron.8">cron(8)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man8/ftpd.8">ftpd(8)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man8/route6d.8">route6d(8)</a> and <a href="http://man.openbsd.org/OpenBSD-current/man8/rtadvd.8">rtadvd(8)</a>, remove pidfile support.
1180: <li>Fix <a href="http://man.openbsd.org/OpenBSD-current/man8/installboot.8">installboot(8)</a> on i386/amd64 when softraid is on top of GPT.
1181: <li>Enable <a href="http://man.openbsd.org/OpenBSD-current/man4/asmc.4">asmc(4)</a> on i386.
1182: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/asmc.4">asmc(4)</a>, fix seldomly seen "comm collision" errors.
1183: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/disklabel.8">disklabel(8)</a>, remove support for the "b0" and "b1" <a href="http://man.openbsd.org/OpenBSD-current/man5/disktab.5">disktab(5)</a> capabilities.
1184: <li>Do not expose nd6 randomid's to userland via <a href="http://man.openbsd.org/OpenBSD-current/man2/ioctl.2">ioctl(2)</a>.
1185: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/ping6.8">ping6(8)</a>, remove -g after IPV6_NEXTHOP removal.
1186: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/ip6.4">ip6(4)</a>, remove IPV6_NEXTHOP implementation.
1187: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/telnet.1">telnet(1)</a>, remove IP Source Route support.
1188: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/ping6.8">ping6(8)</a>, implement <a href="http://man.openbsd.org/OpenBSD-current/man8/ping.8">ping(8)</a>'s -L option.
1.3 tim 1189: <li>Remove the NLS support from libc messages.
1.15 beck 1190: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/tmux.1">tmux(1)</a>, remove TMPDIR support.
1191: <li>Use <a href="http://man.openbsd.org/OpenBSD-current/man2/pledge.2">pledge(2)</a> in
1192: <a href="http://man.openbsd.org/OpenBSD-current/man1/dig.1">dig(1)</a>,
1193: <a href="http://man.openbsd.org/OpenBSD-current/man1/host.1">host(1)</a>,
1194: <a href="http://man.openbsd.org/OpenBSD-current/man1/nslookup.1">nslookup(1)</a>,
1195: <a href="http://man.openbsd.org/OpenBSD-current/man6/quiz.6">quiz(6)</a>,
1.3 tim 1196: <!-- 2015-10-24 -->
1.15 beck 1197: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/eigrpd.8">eigrpd(8)</a>, keep conversions between the real and composite bandwidth consistent with what Cisco does.
1198: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/ssh.1">ssh(1)</a>, fix keyscan output for multiple hosts/addresses on one line when host hashing or a non standard port is in use (bz#2479).
1199: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/tcpdump.8">tcpdump(8)</a>, avoid a segfault with malformed DECnet packets.
1200: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/ping6.8">ping6(8)</a>, move the output of the src address to the -v option. This syncs the output with that of <a href="http://man.openbsd.org/OpenBSD-current/man8/ping.8">ping(8)</a>.
1.3 tim 1201: <li>Ignore Router Advertisment's current hop limit.
1202: <li>Wait a short while between setting a USB device's address and reloading its descriptor. This fixes a flaky attach of USB devices on the Thinkpad Helix 2.
1.15 beck 1203: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/syslogd.8">syslogd(8)</a>, stop the chrooted child from trying to load the default CA file.
1204: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/bgpctl.8">bgpctl(8)</a>:
1.3 tim 1205: <ul>
1206: <li>Print if a route is redistributed or not at least for static and connected.
1207: <li>Allow other MRT message types to be parsed.
1208: </ul>
1.15 beck 1209: <li>Add <a href="http://man.openbsd.org/OpenBSD-current/man4/pair.4">pair(4)</a>, a vether-based virtual Ethernet driver to interconnect rdomains and bridges on the local system.
1.3 tim 1210: <!-- 2015-10-23 -->
1.15 beck 1211: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/octeon/cnmac.4">cnmac(4/octeon)</a>, make use of hardware RX checksum validation.
1212: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man3/catopen.3">catopen(3)</a>, verify that an opened message catalog is valid. This avoids integer overflows and out-of-boundary accesses.
1.3 tim 1213: <li>Fix renaming in the root directory of FAT filesystems.
1.15 beck 1214: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/syslogd.8">syslogd(8)</a>, if a write to a tty is blocked, use an event instead of forking.
1215: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/tmux.1">tmux(1)</a>, add a format for scroll position.
1216: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/ndp.8">ndp(8)</a>, don't do DNS lookups when -n is specified.
1217: <li>Split up <a href="http://man.openbsd.org/OpenBSD-current/man4/tun.4">tun(4)</a> into tun(4) and <a href="http://man.openbsd.org/OpenBSD-current/man4/tap.4">tap(4)</a>.
1218: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/ntpd.8">ntpd(8)</a>, no longer allow upstream NTP servers to be in multiple routing tables.
1.3 tim 1219: <li>Don't enable /etc/fonts/conf.d/10-autohint.conf by default. It causes problems with glyphs exceeding the cell size.
1.15 beck 1220: <li>Introduce a new <a href="http://man.openbsd.org/OpenBSD-current/man3/sysctl.3">sysctl(3)</a> NET_RT_IFNAMES that returns only ifnames to ifindex mappings.
1221: <li>Use <a href="http://man.openbsd.org/OpenBSD-current/man2/pledge.2">pledge(2)</a> in
1222: <a href="http://man.openbsd.org/OpenBSD-current/man8/ldpctl.8">ldpctl(8)</a>,
1223: <a href="http://man.openbsd.org/OpenBSD-current/man8/ldpd.8">ldpd(8)</a>,
1224: <a href="http://man.openbsd.org/OpenBSD-current/man8/route.8">route(8)</a>,
1.3 tim 1225: <li>Translate calendar files to UTF-8.
1226: <!-- 2015-10-22 -->
1.15 beck 1227: <li>On amd64 and i386, enable <a href="http://man.openbsd.org/OpenBSD-current/man4/viornd.4">viornd(4)</a> on RAMDISK_CD.
1228: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/eigrpd.8">eigrpd(8)</a>, fix some bugs in the handling of the RTM_GET and RTM_CHANGE messages.
1229: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/mandoc.1">mandoc(1)</a>, avoid a NULL pointer dereference.
1230: <li>Stop linking <a href="http://man.openbsd.org/OpenBSD-current/man8/iked.8">iked(8)</a> statically. This has benefits like having full ASLR and taking take advantage of libcrypto updates.
1231: <li>Use <a href="http://man.openbsd.org/OpenBSD-current/man2/pledge.2">pledge(2)</a> in <a href="http://man.openbsd.org/OpenBSD-current/man1/addr2line.1">addr2line(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man8/iked.8">iked(8)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man8/login_yubikey.8">login_yubikey(8)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/nc.1">nc(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/objdump.1">objdump(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/ps.1">ps(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/readelf.1">readelf(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/strings.1">strings(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/su.1">su(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/top.1">top(1)</a> and
1232: <a href="http://man.openbsd.org/OpenBSD-current/man1/w.1">w(1)</a>.
1233: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/bgpd.8">bgpd(8)</a>, revert usr.sbin/bgpd/parse.y r1.282 that allowed for empty blocks for peers. It broke the grammar by introducing shift/reduce errors.
1234: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/tmux.1">tmux(1)</a>, fix "tmux killw\; detach".
1235: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/bgpd.8">bgpd(8)</a>, log and ignore received empty route messages.
1.3 tim 1236: <!-- 2015-10-21 -->
1.15 beck 1237: <li>Use <a href="http://man.openbsd.org/OpenBSD-current/man2/pledge.2">pledge(2)</a> in <a href="http://man.openbsd.org/OpenBSD-current/man1/doas.1">doas(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man6/hangman.6">hangman(6)</a> and <a href="http://man.openbsd.org/OpenBSD-current/man8/renice.8">renice(8)</a>.
1.3 tim 1238: <li>In libssl:
1239: <ul>
1240: <li>Avoid a (harmless) read and write overrun in the RC4 code.
1241: <li>Avoid a segfault in "openssl gendh 0".
1242: </ul>
1.15 beck 1243: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/ssh.1">ssh(1)</a>, fix a memory leak in an error path.
1244: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/tmux.1">tmux(1)</a>, add a default binding for mouse wheel up to scroll into history.
1245: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/ssh.1">ssh(1)</a> and <a href="http://man.openbsd.org/OpenBSD-current/man5/moduli.5">moduli(5)</a>, remove Diffie-Hellman moduli entries below 2048 bits.
1.3 tim 1246: <!-- 2015-10-20 -->
1.15 beck 1247: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/eigrpd.8">eigrpd(8)</a>, add support for route summarization.
1248: <li>Add a new <a href="http://man.openbsd.org/OpenBSD-current/man2/getsockopt.2">getsockopt(2)</a> option IP_IPDEFTTL to retrieve the default TTL.
1249: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/write.1">write(1)</a>, fix writing to other user's tty.
1250: <li>Use <a href="http://man.openbsd.org/OpenBSD-current/man2/pledge.2">pledge(2)</a> in <a href="http://man.openbsd.org/OpenBSD-current/man8/rmt.8">rmt(8)</a>.
1251: <li>Replace dnssocket() and dnsconnect() with a SOCK_DNS flag on <a href="http://man.openbsd.org/OpenBSD-current/man2/socket.2">socket(2)</a>.
1252: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/vr.4">vr(4)</a>, fix 802.1p VLAN priority code points for VLAN_HWTAGGING.
1253: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/tcpdump.8">tcpdump(8)</a>, avoid division by zero by adding an explicit check for a malformed AS segment.
1254: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/eigrpd.8">eigrpd(8)</a>, fix a use-after-free.
1255: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/iked.8">iked(8)</a>, unbreak OCSP support.
1.3 tim 1256: <!-- 2015-10-19 -->
1.15 beck 1257: <li>Use <a href="http://man.openbsd.org/OpenBSD-current/man2/pledge.2">pledge(2)</a> in <a href="http://man.openbsd.org/OpenBSD-current/man1/nice.1">nice(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man8/radiusctl.8">radiusctl(8)</a> and <a href="http://man.openbsd.org/OpenBSD-current/man8/radiusd.8">radiusd(8)</a>.
1.3 tim 1258: <li>In libssl, stop supporing legacy time formats that OpenSSL supports.
1.15 beck 1259: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/eigrpd.8">eigrpd(8)</a>, fix memory leaks in error paths.
1260: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/iked.8">iked(8)</a>, remove IKEv1 support.
1261: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/radiusd.8">radiusd(8)</a>, avoid a NULL dereference.
1.3 tim 1262: <li>Update to freetype 2.6.1.
1263: <!-- 2015-10-18 -->
1.15 beck 1264: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/bge.4">bge(4)</a>, move rxeof and txeof outside the kernel lock.
1265: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/drm.4">drm(4)</a>, backport a fix to prevent machines from hanging or resetting.
1266: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/crunchgen.8">crunchgen(8)</a>, avoid integer overflow with very large files.
1267: <li>Use <a href="http://man.openbsd.org/OpenBSD-current/man2/pledge.2">pledge(2)</a> in <a href="http://man.openbsd.org/OpenBSD-current/man8/bgplg.8">bgplg(8)</a> and <a href="http://man.openbsd.org/OpenBSD-current/man8/inetd.8">inetd(8)</a>.
1.3 tim 1268: <!-- 2015-10-17 -->
1269: <li>Add two new system calls: dnssocket() and dnsconnect().
1.15 beck 1270: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/drm.4">drm(4)</a>, don't poke registers on the wrong PCI device. This should fix machines such as the Asus EeePC 701.
1271: <li>Use <a href="http://man.openbsd.org/OpenBSD-current/man2/pledge.2">pledge(2)</a> in <a href="http://man.openbsd.org/OpenBSD-current/man1/csh.1">csh(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/sort.1">sort(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man8/savecore.8">savecore(8)</a> and <a href="http://man.openbsd.org/OpenBSD-current/man1/tmux.1">tmux(1)</a>.
1272: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/ping6.8">ping6(8)</a>, implement -w like in <a href="http://man.openbsd.org/OpenBSD-current/man8/ping.8">ping(8)</a>.
1273: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/bgpd.8">bgpd(8)</a>, do not accept fds on the control socket.
1274: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/snmpd.8">snmpd(8)</a>, tighten up the control socket: do not allow users to terminate the daemon by sending corrupted imsgs.
1275: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/xinit.1">xinit(1)</a> and <a href="http://man.openbsd.org/OpenBSD-current/man1/xdm.1">xdm(1)</a>, don't automatically launch dbus as part of the default user sessions.
1.3 tim 1276: <!-- 2015-10-16 -->
1.15 beck 1277: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/ssh.1">ssh(1)</a>, increase the minimum modulus that will be sent or accepted in diffie-hellman-group-exchange to 2048 bits.
1278: <li>Unbreak <a href="http://man.openbsd.org/OpenBSD-current/man8/route6d.8">route6d(8)</a>: adding unneeded space to its cmsg item breaks <a href="http://man.openbsd.org/OpenBSD-current/man2/sendmsg.2">sendmsg(2)</a>.
1279: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/sysmerge.8">sysmerge(8)</a>, drop usage of TMPDIR.
1280: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/ping6.8">ping6(8)</a>:
1.3 tim 1281: <ul>
1282: <li>Move -t and -w functionality to -a.
1283: <li>Remove RFC 4620 support.
1284: </ul>
1.15 beck 1285: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/iwm.4">iwm(4)</a>, fix occasional firmware errors while bringing the interface up or scanning.
1286: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man3/nlist.3">nlist(3)</a> and other nlist implementations, validate parsed ELF values to prevent out of boundary accesses.
1287: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man6/hack.6">hack(6)</a>, disable the "!" command to escape to a shell.
1288: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/patch.1">patch(1)</a>, add native support for <a href="http://man.openbsd.org/OpenBSD-current/man1/ed.1">ed(1)</a>-style diffs. This allows for a stronger <a href="http://man.openbsd.org/OpenBSD-current/man2/pledge.2">pledge(2)</a>.
1289: <li>Use <a href="http://man.openbsd.org/OpenBSD-current/man2/pledge.2">pledge(2)</a> in <a href="http://man.openbsd.org/OpenBSD-current/man1/cu.1">cu(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man8/getty.8">getty(8)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man8/pwd_mkdb.8">pwd_mkdb(8)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man8/route6d.8">route6d(8)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man8/vipw.8">vipw(8)</a> and <a href="http://man.openbsd.org/OpenBSD-current/man8/zic.8">zic(8)</a>.
1.1 deraadt 1290: <!-- 2015-10-15 -->
1.15 beck 1291: <li>Add the _rebound user and group in order to improve privdrop for <a href="http://man.openbsd.org/OpenBSD-current/man8/rebound.8">rebound(8)</a>.
1292: <li>Use <a href="http://man.openbsd.org/OpenBSD-current/man2/pledge.2">pledge(2)</a> in <a href="http://man.openbsd.org/OpenBSD-current/man1/ftp.1">ftp(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man8/identd.8">identd(8)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man8/login_token.8">login_token(8)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man8/rebound.8">rebound(8)</a> and <a href="http://man.openbsd.org/OpenBSD-current/man1/sdiff.1">sdiff(1)</a>.
1293: <li>Import <a href="http://man.openbsd.org/OpenBSD-current/man8/rebound.8">rebound(8)</a>, a lightweight DNS proxy.
1294: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/disklabel.8">disklabel(8)</a>, remove -B.
1295: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/x99token.1">x99token(1)</a>, avoid a race between <a href="http://man.openbsd.org/OpenBSD-current/man3/fdopen.3">fopen(3)</a> and <a href="http://man.openbsd.org/OpenBSD-current/man2/chmod.2">fchmod(2)</a>. This prevents an attacker to open an old file with wrong permissions before the secret is written into it. It also guarantees that a new file with correct permissions is created.
1296: <li>On vax, use MI <a href="http://man.openbsd.org/OpenBSD-current/man8/installboot.8">installboot(8)</a> instead of "<a href="http://man.openbsd.org/OpenBSD-current/man8/disklabel.8">disklabel</a> -B" to install boot blocks.
1297: <li>Add proper support for vax to <a href="http://man.openbsd.org/OpenBSD-current/man8/installboot.8">installboot(8)</a>.
1298: <li>Use <a href="http://man.openbsd.org/OpenBSD-current/man2/pledge.2">pledge(2)</a> in <a href="http://man.openbsd.org/OpenBSD-current/man1/x99token.1">x99token(1)</a>.
1299: <li>Remove the "!" (subshell) and "v" (edit) commands from the ramdisk <a href="http://man.openbsd.org/OpenBSD-current/man1/more.1">more(1)</a> command.
1300: <li>On octeon, let the rx path of <a href="http://man.openbsd.org/OpenBSD-current/man4/octeon/cnmac.4">cnmac(4/octeon)</a> run without the kernel lock.
1301: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/mailq.8">smtpctl(8)</a>, allow "all" as an argument for the "resume envelope", "pause envelope" and "remove" subcommands.
1.1 deraadt 1302: <!-- 2015-10-14 -->
1.15 beck 1303: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/tcpdump.8">tcpdump(8)</a>, fix a crash that occurs when printing the filename in a malformed NFS request packet.
1.1 deraadt 1304: <li><font color="#e00000">5.6, 5.7 and 5.8 RELIABILITY FIX: the OBJ_obj2txt function in libcrypto contains a one byte buffer overrun and memory leak.</font><br>A source code patch is available for <a href="errata56.html#033_obj2txt">5.6</a>, <a href="errata57.html#019_obj2txt">5.7</a>, <a href="errata58.html#007_obj2txt">5.8</a>.
1.15 beck 1305: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/tar.1">tar(1)</a>, use a strict $PATH to run the (de)compressors.
1306: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man5/newsyslog.conf.5">newsyslog.conf(5)</a>, allow the wheel group to read /var/log/maillog.
1.1 deraadt 1307: <li><font color="#e00000">RELEASE CD ISSUE: the "src.tar.gz" file on the source tree was created on the wrong day and does not match the 5.8 release builds.</font><br>A replacement file is available for <a href="errata58.html#006_src">5.8</a>.
1308: <li><font color="#e00000">5.6, 5.7 and 5.8 RELIABILITY FIX: a problem with timer kevents could result in a kernel hang (local denial of service).</font><br>A source code patch is available for <a href="errata56.html#032_kevent">5.6</a>, <a href="errata57.html#018_kevent">5.7</a> and <a href="errata58.html#005_kevent">5.8</a>.
1.15 beck 1309: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/ping6.8">ping6(8)</a>, use <a href="http://man.openbsd.org/OpenBSD-current/man8/ping.8">ping(8)</a>-like semantics for -I.
1310: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/sort.1">sort(1)</a>, copy permissions and ownership when -o will override an input file.
1311: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/fsck_ext2fs.8">fsck_ext2fs(8)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man8/fsck_ffs.8">fsck_ffs(8)</a> and <a href="http://man.openbsd.org/OpenBSD-current/man8/fsck_msdos.8">fsck_msdos(8)</a>, only accept one filesystem/device as argument for checking.
1312: <li>Use <a href="http://man.openbsd.org/OpenBSD-current/man2/pledge.2">pledge(2)</a> in <a href="http://man.openbsd.org/OpenBSD-current/man6/banner.6">banner(6)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man6/bcd.6">bcd(6)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man6/caesar.6">caesar(6)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man6/factor.6">factor(6)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man8/fsck_ext2fs.1">fsck_ext2fs(8)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man8/fsck_ffs.1">fsck_ffs(8)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man8/fsck_msdos.8">fsck_msdos(8)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man8/login_passwd.8">login_passwd(8)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man8/login_reject.8">login_reject(8)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man6/morse.6">morse(6)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man6/number.6">number(6)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man6/pig.6">pig(6)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man6/pom.6">pom(6)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man6/ppt.6">ppt(6)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man6/rain.6">rain(6)</a> and <a href="http://man.openbsd.org/OpenBSD-current/man6/random.6">random(6)</a>.
1.1 deraadt 1313: <!-- 2015-10-13 -->
1.15 beck 1314: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/ugen.4">ugen(4)</a>, prevent a NULL-pointer dereference when closing a <a href="http://man.openbsd.org/OpenBSD-current/man4/ugen.4">ugen(4)</a> node in case the kernel failed to change the interface of a device.
1315: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/mg.1">mg(1)</a>, check if a file name can be extracted from a line before marking for deletion.
1316: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/sort.1">sort(1)</a>, ignore the setuid/setgid/sticky bits when copying the permissions of an input file to the new output file.
1317: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/ping6.8">ping6(8)</a>, remove the -b flag.
1.1 deraadt 1318: <li>Make sure RTF_LOCAL route entries are UP when added to the tree.
1.15 beck 1319: <li>Use <a href="http://man.openbsd.org/OpenBSD-current/man2/pledge.2">pledge(2)</a> in <a href="http://man.openbsd.org/OpenBSD-current/man8/crunchgen.8">crunchgen(8)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/lockspool.1">lockspool(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/mklocale.1">mklocale(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man8/netgroup_mkdb.8">netgroup_mkdb(8)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man8/newfs_ext2fs.8">newfs_ext2fs(8)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man8/nologin.8">nologin(8)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man8/smtpd.8">smtpd(8)</a>. <a href="http://man.openbsd.org/OpenBSD-current/man8/syslogc.8">syslogc(8)</a> and <a href="http://man.openbsd.org/OpenBSD-current/man1/yes.1">yes(1)</a>,
1.1 deraadt 1320: <!-- 2015-10-12 -->
1.15 beck 1321: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/mg.1">mg(1)</a>, when refreshing a dired buffer, avoid losing the files marked for deletion.
1322: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/ping6.8">ping6(8)</a>, deprecate and remove the -W flag.
1323: <li>Make <a href="http://man.openbsd.org/OpenBSD-current/man1/ftp.1">ftp(1)</a> non-static, allowing for better ASLR.
1324: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/ntpd.8">ntpd(8)</a>, improve the privsep design. In particular, remove the delays that have been introduced by expensive constraint forks.
1325: <li>Use <a href="http://man.openbsd.org/OpenBSD-current/man2/pledge.2">pledge(2)</a> in <a href="http://man.openbsd.org/OpenBSD-current/man1/apropos.1">apropos(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man8/config.8">config(8)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man8/dev_mkdb.8">dev_mkdb(8)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/help.1">help(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man8/kvm_mkdb.8">kvm_mkdb(8)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man8/mailwrapper.8">mailwrapper(8)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man8/makewhatis.8">makewhatis(8)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/man.1">man(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/mandoc.1">mandoc(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/mesg.1">mesg(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man8/mkuboot.8">mkuboot(8)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/sparc64/mksuncd.1">mksuncd(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/skey.1">skey(1)</a> and <a href="http://man.openbsd.org/OpenBSD-current/man1/whatis.1">whatis(1)</a>.
1.1 deraadt 1326: <!-- 2015-10-11 -->
1.15 beck 1327: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man5/bgpd.conf.5">bgpd.conf(5)</a>, allow the blackhole well-known community to be given by name.
1328: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/bgpctl.8">bgpctl(8)</a>, add "best" as an alias for "selected".
1329: <li>Use <a href="http://man.openbsd.org/OpenBSD-current/man2/pledge.2">pledge(2)</a> in <a href="http://man.openbsd.org/OpenBSD-current/man8/ac.8">ac(8)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/biff.1">biff(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man8/clri.8">clri(8)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/cpio.1">clri(8)</a>/<a href="http://man.openbsd.org/OpenBSD-current/man1/pax.1">pax(1)</a>/<a href="http://man.openbsd.org/OpenBSD-current/man1/tar.1">tar(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man8/tunefs.8">tunefs(8)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/stty.1">stty(1)</a> and <a href="http://man.openbsd.org/OpenBSD-current/man8/zdump.8">zdump(8)</a>.
1330: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/pkg-config.1">pkg-config(1)</a>, handle comma-separated list of arguments.
1.1 deraadt 1331: <!-- 2015-10-10 -->
1.15 beck 1332: <li>Disallow "<a href="http://man.openbsd.org/OpenBSD-current/man1/rm.1">rm</a> -rf /".
1.1 deraadt 1333: <li>Always set the timeout at least one tick in the future for EVFILT_TIMER to avoid looping in softclock().
1.15 beck 1334: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/bc.1">bc(1)</a>, avoid fork/execve of <a href="http://man.openbsd.org/OpenBSD-current/man1/dc.1">dc(1)</a>. This allows a for a strong <a href="http://man.openbsd.org/OpenBSD-5.8/man2/pledge.2">pledge(2)</a>.
1335: <li>Use <a href="http://man.openbsd.org/OpenBSD-5.8/man2/pledge.2">pledge(2)</a> in <a href="http://man.openbsd.org/OpenBSD-current/man1/apply.1">apply(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/arithmetic.6">arithmetic(6)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/awk.1">awk(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/dvmrpctl.8">dvmrpctl(8)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/encrypt.1">encrypt(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/env.1">env(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/fsirand.8">fsirand(8)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/fstat.1">fstat(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/gencat.1">gencat(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/infocmp.1">infocmp(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/kill.1">kill(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/ln.1">ln(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/lndir.1">lndir(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/pflogd.8">pflogd(8)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/pkill.1">pkill(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/rcs.1">rcs(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/rpcgen.1">rpcgen(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/scan_ffs.8">scan_ffs(8)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/sdiff.1">sdiff(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/sendbug.1">sendbug(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/spell.1">spell(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/tftpd.8">tftpd(8)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/tic.1">tic(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/time.1">time(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/tsort.1">tsort(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/ul.1">ul(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/unexpand.1">unexpand(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/which.1">which(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/xargs.1">xargs(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/yacc.1">yacc(1)</a> and <a href="http://man.openbsd.org/OpenBSD-current/man1/ypcat.1">ypcat(1)</a>.
1336: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/asmc.4">asmc(4)</a>, add location to the fan description.
1337: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/mg.1">mg(1)</a>, make functions that accept multiple iterations via C-u N, honour 0. Except C-k which has a defined behaviour.
1338: <li>Make <a href="http://man.openbsd.org/OpenBSD-current/man8/tcpdump.8">tcpdump(8)</a> print more information from the HT Capabilities element.
1.1 deraadt 1339: <!-- 2015-10-09 -->
1.15 beck 1340: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/syslogd.8">syslogd(8)</a>, if it is started with -S, it accepts TLS connections to receive encrypted messages and the server certificates are taken from /etc/ssl.
1341: <li>Use <a href="http://man.openbsd.org/OpenBSD-5.8/man2/pledge.2">pledge(2)</a> in <a href="http://man.openbsd.org/OpenBSD-current/man1/cmp.1">cmp(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/du.1">du(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man8/eigrpctl.8">eigrpctl(8)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man8/eigrpd.8">eigrpd(8)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/getcap.1">getcap(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/getent.1">getent(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/ksh.1">ksh(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/lex.1">lex(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man8/ospf6ctl.8">ospf6ctl(8)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man8/relayctl.8">relayctl(8)</a> and <a href="http://man.openbsd.org/OpenBSD-current/man8/relayd.8">relayd(8)</a>.
1342: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/ksh.1">ksh(1)</a>, disable the mknod builtin.
1343: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/comsat.8">comsat(8)</a>, remove NFS spool support.
1344: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/syslogd.8">syslogd(8)</a>, add the -S option to accept TLS connections and receive encrypted messages.
1345: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/smtpd.8">smtpd(8)</a>, turn the local enqueuer <a href="http://man.openbsd.org/OpenBSD-current/man2/setegid.2">setgid(2)</a> _smtpq and restrict access to the offline queue.
1346: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/mg.1">mg(1)</a>, fix a line number bug when calling onlywind().
1347: <li>Use <a href="http://man.openbsd.org/OpenBSD-5.8/man2/pledge.2">pledge(2)</a> in <a href="http://man.openbsd.org/OpenBSD-5.8/man8/comsat.8">comsat(8)</a>, <a href="http://man.openbsd.org/OpenBSD-5.8/man8/ospfctl.8">ospfctl(8)</a>, <a href="http://man.openbsd.org/OpenBSD-5.8/man8/ripctl.8">ripctl(8)</a>, <a href="http://man.openbsd.org/OpenBSD-5.8/man8/syslogd.8">syslogd(8)</a> and <a href="http://man.openbsd.org/OpenBSD-5.8/man1/tradcpp.1">tradcpp(1)</a>.
1.1 deraadt 1348: <!-- 2015-10-08 -->
1.15 beck 1349: <li>Rename <a href="http://man.openbsd.org/OpenBSD-5.8/man2/tame.2">tame(2)</a> to <a href="http://man.openbsd.org/OpenBSD-current/man2/pledge.2">pledge(2)</a>.
1.1 deraadt 1350: <li>On amd64 and i386, increase the HEAP_LIMIT from 0x90000 to 0xA0000, to fix an out-of-heap when booting on a large block size (32K) partition.
1.15 beck 1351: <li>In <a href="http://man.openbsd.org/OpenBSD-5.8/man2/tame.2">tame(2)</a>, add the "mcast" request that exposes a small set of multicast (IP_MULTICAST_IF, IP_ADD_MEMBERSHIP and IP_DROP_MEMBERSHIP) join operators.
1352: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/ksh.1">ksh(1)</a>, don't open history files that don't belong to the user.
1.1 deraadt 1353: <li>Lock the page queues by turning uvm_lock_pageq() and uvm_unlock_pageq() into mtx_enter() and mtx_leave() operations.
1.15 beck 1354: <li>Use <a href="http://man.openbsd.org/OpenBSD-5.8/man2/tame.2">tame(2)</a> in <a href="http://man.openbsd.org/OpenBSD-current/man1/make.1">make(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man8/portmap.8">portmap(8)</a> and <a href="http://man.openbsd.org/OpenBSD-current/man8/signify.1">signify(1)</a>.
1355: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/trunk.4">trunk(4)</a>, if the mbuf has a valid flowid, use it instead of using siphash24 and a bunch of header fields we have to parse the mbuf for.
1.1 deraadt 1356: <li>Unlock the softnet task.
1.15 beck 1357: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/httpd.8">httpd(8)</a>, fix an fd leak if a socket connection fails.
1358: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/snmpd.8">snmpd(8)</a>:
1.1 deraadt 1359: <ul>
1360: <li>Use correct return value for IP-MIB::ipForwarding.
1361: <li>Fix getbulk requests for multiple OIDs.
1362: </ul>
1363: <!-- 2015-10-07 -->
1364: <li>Add initial support for UEFI/GPT installs to the installer.
1.15 beck 1365: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/ssh.1">ssh(1)</a>, include PubkeyAcceptedKeyTypes in "ssh -G" config dump.
1366: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/g++.1">g++(1)</a>, correct handling of enum attributes.
1367: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/tmux.1">tmux(1)</a>, fix a couple of memory leaks in error paths.
1368: <li>Use <a href="http://man.openbsd.org/OpenBSD-5.8/man2/tame.2">tame(2)</a> in <a href="http://man.openbsd.org/OpenBSD-current/man1/cp.1">cp(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/ctags.1">ctags(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/from.1">from(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/getopt.1">getopt(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/head.1">head(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/htpasswd.1">htpasswd(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/lastcomm.1">lastcomm(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/logname.1">logname(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/look.1">look(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/mkdir.1">mkdir(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/mktemp.1">mktemp(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/nl.1">nl(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/paste.1">paste(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/pr.1">pr(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/printenv.1">printenv(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/readlink.1">readlink(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/rev.1">rev(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/rmdir.1">rmdir(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/split.1">split(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/tee.1">tee(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/tftp.1">tftp(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/tty.1">tty(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/users.1">users(1)</a> and <a href="http://man.openbsd.org/OpenBSD-current/man1/uuencode.1">uudecode(1)</a>.
1.1 deraadt 1369: <!-- 2015-10-06 -->
1.15 beck 1370: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/installboot.8">installboot(8)</a>, add initial support for installing UEFI boot files to a GPT EFI System Partition.
1371: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/ssh.1">ssh(1)</a>, make it possible to use <a href="http://man.openbsd.org/OpenBSD-current/man4/tun.4">tun(4)</a> and <a href="http://man.openbsd.org/OpenBSD-current/man4/tap.4">tap(4)</a> networking as non-root user if device permissions and interface flags are pre-established.
1372: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/em.4">em(4)</a>, fix the watchdog timeouts reported by various people.
1373: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/skeyinit.1">skeyinit(1)</a>, remove the -C option that converts an S/Key database to the new format.
1374: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/smtpd.8">smtpd(8)</a>, fix a memory leak in an error path.
1375: <li>Use <a href="http://man.openbsd.org/OpenBSD-5.8/man2/tame.2">tame(2)</a> in <a href="http://man.openbsd.org/OpenBSD-current/man1/csplit.1">csplit(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/date.1">date(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/ed.1">ed(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/join.1">join(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/jot.1">jot(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/lam.1">lam(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/lock.1">lock(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/openssl.1">openssl(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/printf.1">printf(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/tail.1">tail(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/touch.1">touch(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/tr.1">tr(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/units.1">units(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/unvis.1">unvis(1)</a> and <a href="http://man.openbsd.org/OpenBSD-current/man1/what.1">what(1)</a>.
1.1 deraadt 1376: <!-- 2015-10-05 -->
1.15 beck 1377: <li>Fix <a href="http://man.openbsd.org/OpenBSD-current/man1/cu.1">cu(1)</a> to make xmodem work with -d.
1378: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/diff.1">diff(1)</a>, remove the non-standard -l flag that pipes the output through <a href="http://man.openbsd.org/OpenBSD-current/man1/pr.1">pr(1)</a>.
1379: <li>On the alpha ramdisk, remove <a href="http://man.openbsd.org/OpenBSD-current/man4/cd.4">cd(4)</a>.
1380: <li>Use <a href="http://man.openbsd.org/OpenBSD-5.8/man2/tame.2">tame(2)</a> in <a href="http://man.openbsd.org/OpenBSD-current/man8/bgpd.8">bgpd(8)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/cal.1">cal(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/col.1">col(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/colrm.1">colrm(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/column.1">column(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/comm.1">comm(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/cut.1">cut(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/deroff.1">deroff(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/diff.1">diff(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/diff3.1">diff3(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/dirname.1">dirname(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/expand.1">expand(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/fgen.1">fgen(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/find.1">find(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/fmt.1">fmt(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/fold.1">fold(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/hexdump.1">hexdump(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/id.1">id(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/indent.1">indent(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/kdump.1">kdump(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/logger.1">logger(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/nm.1">nm(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/rs.1">rs(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/stat.1">stat(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/unifdef.1">unifdef(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/vis.1">vis(1)</a> and <a href="http://man.openbsd.org/OpenBSD-current/man1/write.1">write(1)</a>.
1.1 deraadt 1381: <!-- 2015-10-04 -->
1.15 beck 1382: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/disklabel.8">disklabel(8)</a>, remove -B support on landisk. It has been superseded by MI <a href="http://man.openbsd.org/OpenBSD-current/man8/installboot.8">installboot(8)</a>.
1383: <li>On landisk, use MI <a href="http://man.openbsd.org/OpenBSD-current/man8/installboot.8">installboot(8)</a> instead of <a href="http://man.openbsd.org/OpenBSD-current/man8/disklabel.8">disklabel(8)</a> -B to put boot blocks on installation media.
1384: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/fdisk.8">fdisk(8)</a>, enhance -g to create a default GPT label in addition to the protective MBR. If -b is specified, an EFI System partition of the requested size is created.
1385: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/eigrpd.8">eigrpd(8)</a>:
1.1 deraadt 1386: <ul>
1387: <li>Add option to configure or disable the DUAL active timeout.
1388: <li>Ignore IPv4 TLVs in IPv6 instances and vice-versa.
1389: <li>When the SIA state is declared for a given destination, reset the adjacency with the unresponsive neighbor(s).
1390: </ul>
1.15 beck 1391: <li>Add the _eigrpd user and group for <a href="http://man.openbsd.org/OpenBSD-current/man8/eigrpd.8">eigrpd(8)</a>.
1392: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/rcctl.8">rcctl(8)</a>, make it possible to give the same action to several daemons at once.
1393: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/asmc.4">asmc(4)</a>, check the validity flag earlier and do not try to attach invalid (non-existing) keys.
1394: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/ahci.4">ahci(4)</a>, fix a memory leak in an error path.
1395: <li>Use <a href="http://man.openbsd.org/OpenBSD-5.8/man2/tame.2">tame(2)</a> in <a href="http://man.openbsd.org/OpenBSD-current/man1/banner.1">banner(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/dd.1">dd(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/df.1">df(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man8/dmesg.8">dmesg(8)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/expr.1">expr(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/file.1">file(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/ls.1">ls(1)</a> and <a href="http://man.openbsd.org/OpenBSD-current/man1/pwd.1">pwd(1)</a>.
1.1 deraadt 1396: <!-- 2015-10-03 -->
1.15 beck 1397: <li>Enable <a href="http://man.openbsd.org/OpenBSD-current/man8/eigrpd.8">eigrpd(8)</a> and <a href="http://man.openbsd.org/OpenBSD-current/man8/eigrpctl.8">eigrpctl(8)</a>.
1398: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/dc.1">dc(1)</a>:
1.1 deraadt 1399: <ul>
1400: <li>Remove the "!" command. This makes dc(1) better tameable.
1.15 beck 1401: <li>Use <a href="http://man.openbsd.org/OpenBSD-5.8/man2/tame.2">tame(2)</a>.
1.1 deraadt 1402: </ul>
1403: <li>On octeon, fix a memory leak in an error code path.
1.15 beck 1404: <li>Use <a href="http://man.openbsd.org/OpenBSD-5.8/man2/tame.2">tame(2)</a> in <a href="http://man.openbsd.org/OpenBSD-current/man1/cat.1">cat(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/echo.1">echo(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/[.1">test(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/uname.1">uname(1)</a> and <a href="http://man.openbsd.org/OpenBSD-current/man1/wc.1">wc(1)</a>.
1405: <li>Add IPv6 transport for <a href="http://man.openbsd.org/OpenBSD-current/man4/pflow.4">pflow(4)</a> data.
1406: <li>When multiple <a href="http://man.openbsd.org/OpenBSD-current/man4/vxlan.4">vxlan(4)</a> interfaces are configured with same VNI, select the interface whose tunnel destination corresponded to the incoming packets' source address.
1.1 deraadt 1407: <li>In libssl, fix reference counting and memory leak in error path in an error path.
1408: <!-- 2015-10-02 -->
1.15 beck 1409: <li>Use <a href="http://man.openbsd.org/OpenBSD-5.8/man2/tame.2">tame(2)</a> in <a href="http://man.openbsd.org/OpenBSD-current/man8/acpidump.8">acpidump(8)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man8/arp.8">arp(8)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/basename.1">basename(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/chflags.1">chflags(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/finger.1">finger(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/grep.1">grep(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/gzip.1">gzip(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/kdump.1">kdump(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/leave.1">leave(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/md5.1">md5(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man8/ntpctl.8">ntpctl(8)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man8/ntpd.8">ntpd(8)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/patch.1">patch(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man8/ping.8">ping(8)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man8/ping6.8">ping6(8)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/script.1">script(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/sed.1">sed(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/sleep.1">sleep(1)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man8/sshd.8">sshd(8)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man8/tcpdump.8">tcpdump(8)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man8/traceroute.8">traceroute(8)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/uniq.1">uniq(1)</a> and <a href="http://man.openbsd.org/OpenBSD-current/man1/whois.1">whois(1)</a>.
1410: <li>Revert the <a href="http://man.openbsd.org/OpenBSD-current/man2/mmap.2">mmap(2)</a> unlock. It causes vnode-related panics on several architectures in the codepath that implements mmap(2).
1411: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/iked.8">iked(8)</a>:
1.1 deraadt 1412: <ul>
1413: <li>Fix EAP (user-based auth) with IKEv2 in El Capitan.
1414: <li>Remove MD5 from the default proposals
1415: </ul>
1416: <li>Fix EAP (user-based auth) with IKEv2 in El Capitan.
1.15 beck 1417: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/pfctl.8">pfctl(8)</a>, make the "-s all" option show queues.
1.1 deraadt 1418: <li>In libssl, conform with RFC 5280 for times allowed in a X509 certificate.
1.15 beck 1419: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/snmpd.8">snmpd(8)</a>, mitigate the risk of user-injected file descriptor leakage from the optional world-writable restricted control socket.
1.1 deraadt 1420: <!-- 2015-10-01 -->
1.15 beck 1421: <li>Add ktracing of argv and envp to <a href="http://man.openbsd.org/OpenBSD-current/man2/execve.2">execve(2)</a>, with envp not traced by default.
1422: <li>Add <a href="http://man.openbsd.org/OpenBSD-current/man8/eigrpd.8">eigrpd(8)</a> (and <a href="http://man.openbsd.org/OpenBSD-current/man8/eigrpctl.8">eigrpctl(8)</a>), an Enhanced Interior Gateway Routing Protocol daemon.
1423: <li><font color="#e00000">5.6, 5.7 and 5.8 SECURITY FIX: multiple reliability and security issues in <a href="http://man.openbsd.org/OpenBSD-current/man8/smtpd.8">smtpd(8)</a>.</font><br>A source code patch is available for <a href="errata56.html#031_smtpd">5.6</a>, <a href="errata57.html#017_smtpd">5.7</a> and <a href="errata58.html#004_smtpd">5.8</a>.
1424: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/smtpd.8">smtpd(8)</a>:
1.1 deraadt 1425: <ul>
1426: <li>Do not allow connection IDs to wrap and collide with another active connection ID. This allows a local user to force the daemon to exit.
1427: <li>Fix a stack-based buffer overflow in the token expansion code of the (unprivileged) lookup process. This allows a local user to crash the server or potentially to execute arbitrary code.
1428: <li>Allow reading of imsg while discarding fd's when reading from a context where we don't expect/want to receive one. This prevents a local user from exhausting resources and causing smtpd to hang by crafting valid imsg that don't expect a descriptor but passing one anyway.
1429: <li>Prevent users from playing hardlink/symlink/mkfifo games with their offline messages and ~/.forward files. This allows a a local user to hang smtpd or even reset chflags and read the first line of an arbitrary file.
1430: <li>Do not exit on unexpected causes of SIGCHLD. This allows a specially crafted mda to cause smtpd to exit.
1431: <li>Make uid checking on ~/.forward files more strict. This avoids users from creating hardlink to root-owned files and leaking the first line.
1432: <li>Fix a use-after-free and out-of-bounds memory reads in the (unprivileged) lookup process. This avoids crashes or potential arbitrary code execution.
1433: </ul>
1.3 tim 1434: <li>Revert src/sys/net/route.c r1.245. It breaks some NFS setups.
1.1 deraadt 1435: <li>Update to tzdata2015g from ftp.iana.org.
1.15 beck 1436: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/asmc.4">asmc(4)</a>, relax vendor comparison to match variations found in older models such as the MacMini1,1.
1437: <li>On alpha, make the pmap (more) MP-safe by protecting both the pmap itself and the pv lists with a mutex. This should make <a href="http://man.openbsd.org/OpenBSD-current/man9/pmap_enter.9">pmap_enter(9)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man9/pmap_remove.9">pmap_remove(9)</a> and <a href="http://man.openbsd.org/OpenBSD-current/man9/pmap_page_protect.9">pmap_page_protect(9)</a> safe to use without holding the kernel lock.
1438: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/iked.8">iked(8)</a>, fix several interoperability issues:
1.1 deraadt 1439: <ul>
1440: <li>If we don't get a (valid) CERTREQ but a CERT, respond with a local CERT that was selected based on our own policy instead of leaving it out. This seems to be valid with the RFC that makes the CERTREQ optional and allows to ignore it or to apply an own policy.
1441: <li>Don't reject an "empty" CERTREQ (one with no CA hashes), instead treat it as if no CERTREQ were received. This may fix other interoperability issues.
1442: </ul>
1.15 beck 1443: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man7/sndio.7">sndio(7)</a>, remove support for the AUCAT_COOKIE environment variable.
1.1 deraadt 1444: <li>Update to pixman 0.32.8.
1445: <!-- 2015-09-30 -->
1.15 beck 1446: <li>On amd64, add <a href="http://man.openbsd.org/OpenBSD-current/man4/asmc.4">asmc(4)</a>, a driver for the Apple System Management Controller (SMC).
1447: <li>Implement a new "prot_exec" <a href="http://man.openbsd.org/OpenBSD-5.8/man2/tame.2">tame(2)</a> request.
1448: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/em.4">em(4)</a>, run the tx completion path without the kernel lock held.
1.1 deraadt 1449: <li>Do not try to refetch a route at the L2 layer if the given one is down and always return EHOSTUNREACH.
1.15 beck 1450: <li>Remove Cisco HDLC support from <a href="http://man.openbsd.org/OpenBSD-current/man4/sppp.4">sppp(4)</a>. It is no longer used.
1.1 deraadt 1451: <li>Update to libxcb 1.11.1.
1452: <li>Hopefully fix the stability problems seen on SandyBridge and up after the PPGTT code got enabled.
1453: <!-- 2015-09-29 -->
1454: <li>On mips64, fix the R8000 kernel to have all their m[ft]c0 instructions correctly wrapped.
1.15 beck 1455: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/oce.4">oce(4)</a>, unlock interrupt handler rx path with <a href="http://man.openbsd.org/OpenBSD-current/man9/intr_barrier.9">intr_barrier(9)</a>.
1456: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/mg.1">mg(1)</a>, fix the location of the cursor when opening a directory using filevisit, findvisitalt and poptofile.
1457: <li>Add support for the Huawei K4511 3G to <a href="http://man.openbsd.org/OpenBSD-current/man4/umsm.4">umsm(4)</a>.
1.1 deraadt 1458: <!-- 2015-09-28 -->
1459: <li><font color="#e00000">5.7 and 5.8 SECURITY FIX: an incorrect operation in uvm could result in system panic.</font><br>A source code patch is available for <a href="errata57.html#016_uvm">5.7</a> and <a href="errata58.html#003_uvm">5.8</a>.
1.15 beck 1460: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man2/mmap.2">mmap(2)</a>, remove the no longer needed kernel lock in the fixed case.
1461: <li>Add the UVM_FLAG_UNMAP flag to indicate to <a href="http://man.openbsd.org/OpenBSD-current/man9/UVM_MAPFLAG.9">uvm_map(9)</a> that it should unmap to make space.
1.1 deraadt 1462: <li><font color="#e00000">5.7 RELIABILITY FIX: various problems were identified in relayd.</font><br>A source code patch is available for <a href="errata57.html#015_relayd">5.7</a>.
1.15 beck 1463: <li>Fix a panic in <a href="http://man.openbsd.org/OpenBSD-current/man4/inteldrm.4">inteldrm(4)</a>.
1464: <li>In <a href="http://man.openbsd.org/OpenBSD-5.8/man2/tame.2">tame(2)</a>, make using the "/" path work.
1465: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/mg.1">mg(1)</a>, make dired mode treat a double "/" in a path like fundamental mode.
1466: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/inteldrm.4">inteldrm(4)</a>, no longer support the "Quanta Transcode" device. This avoids incorrectly overriding the generic match for the HD Graphics P4000.
1.1 deraadt 1467: <!-- 2015-09-27 -->
1468: <li>Enable monitor hot plugging for the framebuffer console.
1469: <li>Add IP26 kernels and boot blocks to the installation media.
1.15 beck 1470: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/iwm.4">iwm(4)</a>:
1.1 deraadt 1471: <ul>
1472: <li>Fix problems occurring when doing bsd.rd upgrades.
1473: <li>Fix the bug where the firmware stops passing traffic after the MAC address is changed.
1474: </ul>
1.15 beck 1475: <li>Add the Ed25519 SSH host key to <a href="http://man.openbsd.org/OpenBSD-current/man5/changelist.5">changelist(5)</a>.
1.1 deraadt 1476: <!-- 2015-09-26 -->
1477: <li>Make carp_input() MP-safe.
1.15 beck 1478: <li>Prevent X from crashing the kernel when attaching <a href="http://man.openbsd.org/OpenBSD-current/man4/inteldrm.4">inteldrm(4)</a> fails.
1.1 deraadt 1479: <li>Protect the list of free map entries with a mutex. This should fix crashes on i386.
1.15 beck 1480: <li>Unlock the <a href="http://man.openbsd.org/OpenBSD-current/man2/mmap.2">mmap(2)</a> system call.
1481: <li>Add transpose-paragraphs to <a href="http://man.openbsd.org/OpenBSD-current/man1/mg.1">mg(1)</a>.
1482: <li>Correct a range problem in citrus-utf8 version of <a href="http://man.openbsd.org/OpenBSD-current/man3/wcrtomb.3">wcrtomb(3)</a> in order to match RFC 3629.
1483: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/inteldrm.4">inteldrm(4)</a>:
1.1 deraadt 1484: <ul>
1485: <li>Make the PPGTT code work. This seems to fix the caching issues on Broadwell.
1486: <li>Don't hardcode the type of BARs to be 64-bit.
1487: </ul>
1488: <!-- 2015-09-25 -->
1489: <li>On octeon and sgi, restore the interrupt mask even on secondary CPUs. This prevents the IPI from being left disabled accidentally on a non-primary CPU which will cause the system to hang eventually.
1490: <li>On octeon, let MP-safe interrupt handlers run without the kernel lock.
1.15 beck 1491: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/mandoc.1">mandoc(1)</a>, fix multiple aspects of SYNOPSIS .Nm formatting.
1492: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/tmux.1">tmux(1)</a>, if the terminal has colors=256, only try to use setaf/setab if they exist.
1493: <li>Fix <a href="http://man.openbsd.org/OpenBSD-current/man4/inteldrm.4">inteldrm(4)</a> on the GM45 chipset.
1494: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/slowcgi.8">slowcgi(8)</a>, output the contents of the environment in debug mode.
1495: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/inteldrm.4">inteldrm(4)</a>:
1.1 deraadt 1496: <ul>
1497: <li>Disable IPS for now. It causes unsynched displays after waking it from standby or after VT switches.
1498: <li>Backport some of the Broadwell fixes.
1499: </ul>
1.15 beck 1500: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/tmux.1">tmux(1)</a>, free the history when it is cleared.
1.1 deraadt 1501: <li>Ensure the GPT header size is in a valid range before checksumming it. This prevents a crash.
1502: <li>Ensure that RTF_LOCAL route entries always stay UP, even when a link state change occurs.
1503: <!-- 2015-09-24 -->
1.15 beck 1504: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/inteldrm.4">inteldrm(4)</a>:
1.1 deraadt 1505: <ul>
1506: <li>Properly implement waitqueue_active().
1507: <li>Enable MSIs on hardware that supports it.
1508: </ul>
1.15 beck 1509: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/disklabel.8">disklabel(8)</a>, expunge VAX SMD special handling.
1.1 deraadt 1510: <li>On sgi, properly handle IP26 streaming cache controller bus error interrupts.
1.15 beck 1511: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/mg.1">mg(1)</a>, fix where the cursor is positioned after expunging files.
1512: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/trunk.4">trunk(4)</a>, avoid theoretical <a href="http://man.openbsd.org/OpenBSD-current/man9/m_pullup.9">m_pullup(9)</a> mishandling by delegating the mbuf reclaiming to the PDU and marker input routines.
1513: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/tmux.1">tmux(1)</a>, fix two fd leaks and a memory leak.
1514: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/ssh.1">ssh(1)</a>, add the CertificateFile option to explicitly list a certificate (bz#2436).
1.1 deraadt 1515: <!-- 2015-09-23 -->
1.15 beck 1516: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/mg.1">mg(1)</a>:
1.1 deraadt 1517: <ul>
1518: <li>Fix multiple iterations of kill-paragraph.
1519: <li>Add mark-paragraph.
1520: </ul>
1521: <li>Update inteldrm to the code from Linux 3.14.52.
1.15 beck 1522: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/ld.so.1">ld.so(1)</a> on alpha, avoid write-protecting .data when it shares a page with the GOT and PLT.
1.1 deraadt 1523: <li>On mips64:
1524: <ul>
1525: <li>When inserting an entry for a KV1 address, avoid having to write back the ASID value.
1526: <li>Use conditional instructions when picking a random TLB set number.
1527: </ul>
1.15 beck 1528: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/iwm.4">iwm(4)</a>:
1.1 deraadt 1529: <ul>
1530: <li>While not associated, pass the broadcast ethernet address to the firmware, rather than zeros.
1531: <li>Properly reset the RX ring by clearing RX buffer status memory.
1532: </ul>
1.15 beck 1533: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/cwm.1">cwm(1)</a>, avoid unnecessary pointer querying.
1534: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/trunk.4">trunk(4)</a>:
1.1 deraadt 1535: <ul>
1536: <li>Remove watchdog code since it doesn't do anything useful.
1537: <li>Adapt code to avoid locking protection in the future.
1538: </ul>
1539: <!-- 2015-09-22 -->
1.15 beck 1540: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/mg.1">mg(1)</a>, fix line number handling in dired delete functions.
1.1 deraadt 1541: <li>Prevent the efiboot and kernel memory regions from overlapping. This fixes a problem where the kernel fails to boot.
1.15 beck 1542: <li>When a connected route is deleted, pass the corresponding priority to <a href="http://man.openbsd.org/OpenBSD-current/man9/rtrequest1.9">rtrequest1(9)</a>. Otherwise the route will remain attached to a stale ifa.
1.1 deraadt 1543: <!-- 2015-09-21 -->
1.15 beck 1544: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/mandoc.1">mandoc(1)</a>, account for significant whitespace when determining the width of a tag.
1545: <li>Remove SHA-0 and MD2 remnants from <a href="http://man.openbsd.org/OpenBSD-current/man1/openssl.1">openssl(1)</a>.
1546: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/bpgd.8">bpgd(8)</a>:
1.1 deraadt 1547: <ul>
1548: <li>Allow for empty blocks for peers.
1549: <li>Allow to log all updates sent from an individual peer, and, when applied to a group, to disable logging on a sub-member of the group.
1550: </ul>
1.15 beck 1551: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/tmux.1">tmux(1)</a>, reset the alerts timer always on activity.
1552: <li>Fix a couple of <a href="http://man.openbsd.org/OpenBSD-current/man1/libtool.1">libtool(1)</a> issues.
1553: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/mg.1">mg(1)</a>, fix behaviour when opening the same directory twice in dired mode.
1.1 deraadt 1554: <!-- 2015-09-20 -->
1.15 beck 1555: <li>On alpha, powerpc and mips64, fix membar positioning in <a href="http://man.openbsd.org/OpenBSD-current/man9/mtx_enter_try.9">mtx_enter_try(9)</a> and <a href="http://man.openbsd.org/OpenBSD-current/man9/mtx_leave.9">mtx_leave(9)</a>.
1556: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/ssh.1">ssh(1)</a>, fix a possible hang on closed output (bz#2469).
1.1 deraadt 1557: <li>On sparc, increase MAXTSIZ to 64 MB. This is required for gcc/gnat.
1.15 beck 1558: <li>Fix suspend on machines with <a href="http://man.openbsd.org/OpenBSD-current/man4/em.4">em(4)</a> now that it uses <a href="http://man.openbsd.org/OpenBSD-current/man9/intr_barrier.9">intr_barrier(9)</a>.
1559: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/syslogd.8">syslogd(8)</a>, avoid potential event loss due to misuse of TLS read and write in libevent.
1.1 deraadt 1560: <li>Enable IP26 builds.
1561: <li>On mips64, correctly compute the userland pte index in a pte page in the userland tlb miss handler.
1.15 beck 1562: <li>Add the -d, -r and -w flags to <a href="http://man.openbsd.org/OpenBSD-current/man8/rmt.8">rmt(8)</a> to make it run in a restricted mode.
1563: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/ld.so.1">ld.so(1)</a>, delete the bind lock, the callback, the sigprocmask stub.
1.1 deraadt 1564: <!-- 2015-09-19 -->
1565: <li>On powerpc, make sure PROT_EXEC is set on the GOT for BSS-PLT binaries.
1.15 beck 1566: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/em.4">em(4)</a>, avoid using a mutex in the rx completion path. Instead rely on <a href="http://man.openbsd.org/OpenBSD-current/man9/intr_barrier.9">intr_barrier(9)</a> to avoid having the interrupt handler touch the rx data structures while the interface is brought down.
1.1 deraadt 1567: <!-- 2015-09-18 -->
1568: <li>On sgi, go back to the previous approach when managing individual HPC DMA descriptors: provide an optional storage for a copy of the descriptor in the "sync" (fetch) function, and use the returned address afterwards.
1.15 beck 1569: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/sysmerge.8">sysmerge(8)</a>, in case of a hard error, avoid missing files for comparison at the next run.
1570: <li>Fix an uninitialized variable in <a href="http://man.openbsd.org/OpenBSD-current/man4/sgi/iec.4">iec(4/sgi)</a>.
1571: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/tmux.1">tmux(1)</a>, let the -l option of join-pane and split-window apply to the new pane instead of the old one when -b is also specified.
1.1 deraadt 1572: <li>Revert r1.25 of src/lib/libssl/src/crypto/bn/bn_print.c. It introduces a NULL dereference.
1.15 beck 1573: <li>Implement <a href="http://man.openbsd.org/OpenBSD-current/man9/SRPL_INSERT_AFTER_LOCKED.9">SRPL_INSERT_AFTER_LOCKED(9)</a>.
1.1 deraadt 1574: <!-- 2015-09-17 -->
1.15 beck 1575: <li>Make <a href="http://man.openbsd.org/OpenBSD-current/man4/vmx.4">vmx(4)</a> interrupts MP-safe.
1.1 deraadt 1576: <li>Back out r1.125 of src/sys/uvm/uvm_km.c. This avoids page queue corruptions and the resulting uvm_pmr_size_RB_REMOVE_COLOR() faults.
1577: <!-- 2015-09-16 -->
1578: <li>Update to xserver 1.17.2.
1.15 beck 1579: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/cc.1">cc(1)</a>, enable -msecure-plt by default on powerpc.
1580: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/od.1">od(1)</a>, fix two bugs in the [+]offset[.][Bb] XSI offset syntax.
1581: <li>Fix an uninitialized variable in <a href="http://man.openbsd.org/OpenBSD-current/man4/i386/bios.4">bios(4)</a> and in <a href="http://man.openbsd.org/OpenBSD-current/man4/arp.4">arp(4)</a>.
1.1 deraadt 1582: <!-- 2015-09-15 -->
1.15 beck 1583: <li>Fix an overlapping <a href="http://man.openbsd.org/OpenBSD-current/man3/memcpy.3">memcpy(3)</a> in <a href="http://man.openbsd.org/OpenBSD-current/man4/sparc64/vdsp.4">vdsp(4)</a>.
1584: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/ugen.4">ugen(4)</a>, fix a panic when using pcsc-lite.
1.1 deraadt 1585: <!-- 2015-09-14 -->
1586: <li>Unbreak booting from GPT partitions.
1.15 beck 1587: <li>Add <a href="http://man.openbsd.org/OpenBSD-current/man3/tls_config_insecure_noverifytime.3">tls_config_insecure_noverifytime(3)</a> to libtls to disable certificate validity checking.
1.1 deraadt 1588: <li>In LibreSSL, add support for disabling certificate and CRL validity checking.
1589: <!-- 2015-09-13 -->
1590: <li>Remove SHA-0 and MD4 support from libcrypto.
1591: <li>Put the 12x22 font on alpha and macppc installation kernels.
1.15 beck 1592: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/netstart.8">netstart(8)</a>, only print the "IPv6 autoconf" line if there are interfaces to configure.
1593: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/ssh-add.1">ssh-add(1)</a>, when adding keys to the agent, don't ignore the comment of keys for which the user is prompted for a passphrase.
1594: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/tmux.1">tmux(1)</a>, add the -e flag to copy-mode to exit copy mode when scrolling off the bottom.
1.1 deraadt 1595: <li>In libcrypto, check ECDH output buffer length and avoid truncation.
1.15 beck 1596: <li>Introduce <a href="http://man.openbsd.org/OpenBSD-current/man9/intr_barrier.9">intr_barrier(9)</a>, an interface that guarantees that an interrupt handler that was running has finished.
1.1 deraadt 1597: <li>Introduce sched_barrier(), an interface that acts as a scheduler barrier in the sense that it guarantees that the specified CPU went through the scheduler.
1598: <li>Add the Certplus CA root certificate to /etc/ssl/cert.pem.
1.15 beck 1599: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/nc.1">nc(1)</a>, display negotiated TLS version and cipher suite in verbose mode.
1.1 deraadt 1600: <li>In libcrypto, add OPENSSL_cpu_caps(), to return the currently running CPU's specific hardware capabilities users of libcrypto might be interested in.
1601: <li>In LibreSSL, if there is hardware acceleration for AES, prefer AES as a symmetric cipher over CHACHA20. Otherwise, prefer CHACHA20 with AES second.
1602: <!-- 2015-09-12 -->
1603: <li>Make if_get() and vlan_input() MP-safe using SRPs.
1.15 beck 1604: <li>On arm, use <a href="http://man.openbsd.org/OpenBSD-current/man2/kbind.2">kbind(2)</a> for lazy binding GOT/PLT updates.
1605: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/openssl.1">openssl(1)</a>:
1.1 deraadt 1606: <ul>
1607: <li>Fix the "prime" command: when checking a decimal number for primality, do not unnecessarily convert the original decimal number to hex in the output. Hex numbers explicitly specified with -hex remain unchanged.
1608: <li>Add support for AEAD algorithms to the "speed" command.
1609: <li>Remove support for the SSLEAY_CONF environment variable.
1610: </ul>
1.15 beck 1611: <li>Add an ftpproxy6 rc script. <a href="http://man.openbsd.org/OpenBSD-current/man8/ftp-proxy.8">ftp-proxy(8)</a> can only open one listening socket at a time, so a second instance of the daemon is required.
1.1 deraadt 1612: <li>Introduce if_input_local(), a function to feed local traffic back to the protocol queues.
1.15 beck 1613: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/ping6.8">ping6(8)</a>, avoid out-of-boundary access on invalid or short packet reads.
1614: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/ddb.4">ddb(4)</a>, show the non-idle, on-proc threads before showing the stack trace when panicking.
1.1 deraadt 1615: <!-- 2015-09-11 -->
1.15 beck 1616: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/em.4">em(4)</a>, add support for the 88E1512/88E1514 phys.
1.1 deraadt 1617: <li>Update to sqlite3 3.8.11.1.
1.15 beck 1618: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/acpicpu.4">acpicpu(4)</a>, work around broken AML by treating FFH vendor 8 the same as vendor 1 (Intel).
1619: <li>Make the powerpc pmap (more) MP-safe. This should make <a href="http://man.openbsd.org/OpenBSD-current/man9/pmap.9">pmap_enter(9), pmap_remove(9) and pmap_page_protect(9)</a> safe to use without holding the kernel lock.
1620: <li>Add TLS support to <a href="http://man.openbsd.org/OpenBSD-current/man1/nc.1">nc(1)</a>.
1621: <li>Remove RTF_XRESOLVE support from <a href="http://man.openbsd.org/OpenBSD-current/man4/route.4">route(4)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man8/route.8">route(8)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man1/netstat.1">netstat(1)</a> and <a href="http://man.openbsd.org/OpenBSD-current/man8/route6d.8">route6d(8)</a>.
1622: <li>Introduce <a href="http://man.openbsd.org/OpenBSD-current/man9/refcnt_init.9">refcnt</a>, a wrapper around reference counts.
1623: <li>Introduce <a href="http://man.openbsd.org/OpenBSD-current/man9/rtref.9">rtref(9)</a>, a function to increment a reference to a routing entry, and use it in rtable_lookup().
1624: <li>In "<a href="http://man.openbsd.org/OpenBSD-current/man8/ifconfig.8">ifconfig</a> media", stop advertising media with fixed data rates on wireless interfaces.
1.1 deraadt 1625: <li>Don't generate ICMPv6 packets with incorrect checksums for dropped IPv6 packets.
1.15 beck 1626: <li>Fix a use-after-free in <a href="http://man.openbsd.org/OpenBSD-current/man4/route.4">route(4)</a>.
1627: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/openssl.1">openssl(1)</a>, remove the engine command and parameters.
1.1 deraadt 1628: <li>Save/restore MSR_APICBASE during suspend/resume. This re-enables x2apic on the application processors at resume.
1629: <li>Remove the unfinished che(4) driver.
1630: <li>In libtls, do not match a wildcard against a name with no host part.
1631: <li>Make room for media types of the future: extend the ifmedia word to 64 bits.
1.15 beck 1632: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/netstart.8">netstart(8)</a>, set "inet6 autoconf" individually on interfaces that have rtsol set in <a href="http://man.openbsd.org/OpenBSD-current/man5/hosntame.if.5">hostname.if(5)</a>. Previously, netstart tried to configure them all at once.
1633: <li>Take a first step towards making <a href="http://man.openbsd.org/OpenBSD-current/man4/ix.4">ix(4)</a> MP-safe.
1634: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/mkhybrid.8">mkhybrid(8)</a>, cast the <a href="http://man.openbsd.org/OpenBSD-current/man3/isascii.3">isascii(3)</a> argument to unsigned char, to avoid undefined behaviour.
1635: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/qle.4">qle(4)</a>, don't copy more sense data than we have space for. This avoids a crash when trying to talk to a Sun STK6140 (although it still doesn't work).
1.1 deraadt 1636: <li>Spoof EFI SYSTEM GPT partitions as MSDOS partitions, as is done with MBR EFI SYSTEM partitions.
1637: <li>No longer grab the kernel lock in the interrupt-safe multi page backend allocator implementation. This is possible because that interrupt-safe uvm maps are now properly locked.
1.15 beck 1638: <li>Fix a NULL dereference in <a href="http://man.openbsd.org/OpenBSD-current/man4/bpf.4">bpf(4)</a>.
1.1 deraadt 1639: <li>Fix hangs on systems with more than 7 interfaces.
1.15 beck 1640: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/ddb.4">ddb(4)</a>, add ps/o to display just the non-idle on-proc threads.
1.1 deraadt 1641: <li>Don't spoof GPT OpenBSD partitions. Simply record and use the first one found, as is done in MBR processing.
1642: <li>Change device locators type from int to long, for the sake of 64-bit ports without proper device trees.
1643: <!-- 2015-09-10 -->
1.15 beck 1644: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/ssh.1">ssh(1)</a>, expand %i in ControlPath to UID (bz#2449).
1645: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/openssl.1">openssl(1)</a>, make the s_time command perform a proper shutdown by default. This allows s_time to benchmark a full TLS connection more accurately. The new -no_shutdown flag restores the previous behaviour.
1646: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/syslogd.8">syslogd(8)</a>, instead of having global variables containing the libevent structures, allocate them with malloc. This makes the address space layout more random.
1647: <li>Add <a href="http://man.openbsd.org/OpenBSD-current/man2/kqueue.2">kqueue(2)</a> support for <a href="http://man.openbsd.org/OpenBSD-current/man4/wsmouse.4">wsmouse(4)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man4/wskbd.4">wskbd(4)</a> and <a href="http://man.openbsd.org/OpenBSD-current/man4/wsmux.4">wsmux(4)</a>. This is needed for the libinput port.
1.1 deraadt 1648: <li>In LibreSSL:
1649: <ul>
1650: <li>Remove support for DTLS_BAD_VER. We do not support non-standard and incomplete implementations.
1651: <li>When loading a DSA key from a raw (without DH parameters) ASN.1 serialization, perform some consistency checks on its "p" and "q" values, and return an error if the checks failed.
1652: </ul>
1653: <li>Enable GPT in the GENERIC kernel.
1.15 beck 1654: <li>Avoid division by zero in <a href="http://man.openbsd.org/OpenBSD-current/man8/fsck_ext2fs.8">fsck_ext2fs(8)</a>.
1.1 deraadt 1655: <li>Use the full IPv6 source address (rather than only half of it) as input for the syn cache hash. Using only half the address makes it trivial to create syn cache collisions.
1656: <li>Move the if input handler list to an SRP list.
1657: <li>In libc, add hidden _libc_FOO aliases for the system call stubs.
1.15 beck 1658: <li>Various cleanups of the <a href="http://man.openbsd.org/OpenBSD-current/man1/ksh.1">ksh(1)</a> code.
1.1 deraadt 1659: <li>Several libtls API changes and improvements.
1.15 beck 1660: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/tmux.1">tmux(1)</a>, add session_last_attached time and format.
1.1 deraadt 1661: <li>Remove link_addr(3).
1662: <!-- 2015-09-09 -->
1663: <li>Add locking for interrupt-safe maps.
1.15 beck 1664: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/mkhybrid.8">mkhybrid(8)</a>, fix various buffer overflows and make it work on unsigned char platforms.
1.1 deraadt 1665: <li>Add client certificate support to libtls.
1.15 beck 1666: <li>Move to the next <a href="http://man.openbsd.org/OpenBSD-5.8/man2/tame.2">tame(2)</a> API. The flags are now passed as a very simple string.
1.1 deraadt 1667: <li>Introduce reference counts for interfaces. The new if_put() function releases the reference acquired by if_get().
1.15 beck 1668: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/ntpd.8">ntpd(8)</a>, plug a memory leak in an error path.
1.1 deraadt 1669: <li>Convert bpf to using an srp list for the list of descriptors.
1.15 beck 1670: <li>Implement a <a href="http://man.openbsd.org/OpenBSD-current/man9/srpl_rc_init.9">singly linked list built with SRPs</a>.
1671: <li>On powerpc, it is no longer needed to use <a href="http://man.openbsd.org/OpenBSD-current/man2/mprotect.2">mprotect(2)</a> to take away PROT_WRITE. This fixes <a href="http://man.openbsd.org/OpenBSD-current/man1/ld.1">ld(1)</a> -Z and paves the way for the new Secure-PLT ABI.
1.1 deraadt 1672: <li>In binutils 2.17, force .ctors, .dtors and .got to be read-only for truly static binaries. This prevents W^X violations on architectures that need an executable GOT (basically BSS-PLT powerpc).
1673: <!-- 2015-09-08 -->
1.15 beck 1674: <li>Prevent <a href="http://man.openbsd.org/OpenBSD-current/man1/nc.1">nc(1)</a> from hanging when writing more than the low water mark of the socket write buffer.
1675: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/disklabel.8">disklabel(8)</a>, avoid a SIGSEGV with FGJ malloc.conf flags when a template is used.
1.1 deraadt 1676: <li>The default backend allocator implementation no longer needs to grab the kernel lock.
1677: <!-- 2015-09-07 -->
1678: <li>Build xf86-video-wsfb on amd64 and i386. It can be used by efifb now.
1.15 beck 1679: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/efifb.4">efifb(4)</a>, make scrolling a bit faster.
1.1 deraadt 1680: <li>Delete ktracing of context switches. It is unused and not particularly useful.
1.15 beck 1681: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/smtpd.8">smtpd(8)</a>, insert a Message-Id header if necessary.
1682: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/httpd.8">httpd(8)</a>, prevent a potential double free introduced in r1.64 of src/usr.sbin/httpd/server.c.
1.1 deraadt 1683: <!-- 2015-09-06 -->
1684: <li>It is no longer necessary to grab the kernel lock for allocating and freeing pages in the (default) single page pool backend allocator.
1685: <li>In libc, fix aliasing of sys_errlist, sys_nerr, sys_siglist, and sys_signame to eliminate duplicate copies of the tables and get direct access internally.
1.15 beck 1686: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/wsfontload.8">wsfontload(8)</a>, avoid a floating point exception when an invalid font width was specified.
1687: <li>On the minirootXX.fs and iso images, create an EFI system partition using <a href="http://man.openbsd.org/OpenBSD-current/man8/fdisk.8">fdisk(8)</a> -b and put the UEFI boot loader on there.
1688: <li>Add support for QEMU PCI serial devices to <a href="http://man.openbsd.org/OpenBSD-current/man4/puc.4">puc(4)</a>.
1.1 deraadt 1689: <!-- 2015-09-05 -->
1.15 beck 1690: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/awk.1">awk(1)</a>, revert srand() to its old behaviour with regard to what values it returns.
1.1 deraadt 1691: <li>On sgi, remove the need for the memory controller to switch between "fast" and "slow" mode every time a DMA descriptor is updated.
1692: <li>Update to xterm 320.
1.15 beck 1693: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/pms.4">pms(4)</a>:
1.1 deraadt 1694: <ul>
1695: <li>Improve tap-and-drag detection for ALPS touchpads.
1696: <li>Support Synaptics touchpads without W mode.
1697: </ul>
1.15 beck 1698: <li>Use the new resolution framework for wrapping <a href="http://man.openbsd.org/OpenBSD-current/man3/catopen.3">catopen(3)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man3/catgets.3">catgets(3)</a> and <a href="http://man.openbsd.org/OpenBSD-current/man3/catclose.3">catclose(3)</a>, and for <a href="http://man.openbsd.org/OpenBSD-current/man3/dbopen.3">dbopen(3)</a>.
1699: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/wscons.4">wscons(4)</a>, add support for xterm-compatible SGR escapes 39 and 49 (reset fg/bg colour to default).
1.1 deraadt 1700: <li>Some symbol cleanup in libc.
1701: <!-- 2015-09-04 -->
1.15 beck 1702: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/fdisk.8">fdisk(8)</a>, add a -b option, to be used together with -i, to add a special boot partition on architectures that need it.
1703: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/audio.4">audio(4)</a>, improve the search for candidates for the wskbd "record level" control. This may fix "record level" keys on certain keyboards.
1704: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/ugen.4">ugen(4)</a>, do not use an intermediary buffer on the stack of the caller when submitting a bulk write request. This means big bulk write requests are no longer split into multiple small transfers which libusb consumers do not expect.
1705: <li>Give every consumer of the radix tree a chance to explicitly initialize the shared data structures, instead of relying on another subsystem to do the initialization. ART kernels should now be fully usable because <a href="http://man.openbsd.org/OpenBSD-current/man4/pf.4">pf(4)</a> and IPSEC properly initialize the radix tree.
1706: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/ssh.1">ssh(1)</a> and <a href="http://man.openbsd.org/OpenBSD-current/man8/sshd.8">sshd(8)</a>, plug minor memory leaks when options are used more than once (bz#2182).
1707: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/netstat.1">netstat(1)</a>, fix mbuf memory accounting after the recent *8 pool size change.
1708: <li>Fix a use-after-free in <a href="http://man.openbsd.org/OpenBSD-current/man4/pflow.4">pflow(4)</a>.
1709: <li>Add support for the RTL8168H to <a href="http://man.openbsd.org/OpenBSD-current/man4/re.4">re(4)</a>.
1.1 deraadt 1710: <!-- 2015-09-03 -->
1711: <li>In libkvm, fix a race when fetching files from the kernel.
1712: <li>On i386, fix a race in pmap_page_remove_86() and pmap_page_remove_pae().
1713: <li>On amd64, fix a race in pmap_page_remove().
1.15 beck 1714: <li>Adapt <a href="http://man.openbsd.org/OpenBSD-current/man8/ping.8">ping(8)</a> to <a href="http://man.openbsd.org/OpenBSD-5.8/man2/tame.2">tame(2)</a>.
1.1 deraadt 1715: <li>In dwc2, fix timeout-related crashes.
1.15 beck 1716: <li>Again revert the two uses of <a href="http://man.openbsd.org/OpenBSD-current/man9/rtisvalid.9">rtisvalid(9)</a>. They break NFS.
1.1 deraadt 1717: <li>In dwc2, avoid a possible lock recursion panic on transfer timeout.
1.15 beck 1718: <li>Modify <a href="http://man.openbsd.org/OpenBSD-current/man8/acpidump.8">acpidump(8)</a> to work on systems booted from efi boot.
1719: <li>Bring back the two uses of <a href="http://man.openbsd.org/OpenBSD-current/man9/rtisvalid.9">rtisvalid(9)</a>. The bug it exposed has been fixed.
1720: <li>Unconditionally set the RTF_UP flags when adding a route to the table. This makes <a href="http://man.openbsd.org/OpenBSD-current/man8/dhclient.8">dhclient(8)</a>-configured default routes usable without relying on the link-state change hooks not present in RAMDISK kernels.
1721: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/ugen.4">ugen(4)</a>, do not use an intermediary buffer on the stack of the caller when submitting a read request. This means big read requests are no longer split into multiple small transfers which libusb consumers do not expect.
1.1 deraadt 1722: <!-- 2015-09-02 -->
1.15 beck 1723: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/smtpd.8">smtpd(8)</a>, remove the session kicking mechanism until it is redesigned. It has an accounting bug leading to some legitimate sessions being kicked if they generate too many consecutive errors.
1724: <li>On sparc64, make <a href="http://man.openbsd.org/OpenBSD-current/man9/pmap_kenter_pa.9">pmap_kenter_pa(9)</a> and <a href="http://man.openbsd.org/OpenBSD-current/man9/pmap_kremove.9">pmap_kremove(9)</a> MP-safe.
1725: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/syslogd.8">syslogd(8)</a>, log a message about failed log attempts using <a href="http://man.openbsd.org/OpenBSD-current/man2/sendsyslog.2">sendsyslog(2)</a>.
1726: <li>Revert the two uses of <a href="http://man.openbsd.org/OpenBSD-current/man9/rtisvalid.9">rtisvalid(9)</a>. It breaks <a href="http://man.openbsd.org/OpenBSD-current/man8/dhclient.8">dhclient(8)</a>-configured networks on RAMDISK kernels.
1.1 deraadt 1727: <!-- 2015-09-01 -->
1728: <li>Add the uefi boot loader.
1.15 beck 1729: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/ping6.8">ping6(8)</a>, display the correct source address when using a non-default routing table.
1730: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/pf.4">pf(4)</a>, don't let route-to, dup-to and reply-to override the block action.
1731: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/syslogd.8">syslogd(8)</a>, bind the *:514 UDP socket with SO_REUSEADDR.
1.1 deraadt 1732: <li>On octeon, increase the transfer FIFOs for dwc2. This improves USB performance.
1.15 beck 1733: <li>Convert the (cached) route entry checks in ip{,6}_output() to <a href="http://man.openbsd.org/OpenBSD-current/man9/rtisvalid.9">rtisvalid(9)</a>.
1734: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/doas.1">doas(1)</a>, restrict the exec path only if the rule specifies a command.
1735: <li>Introduce <a href="http://man.openbsd.org/OpenBSD-current/man9/rtisvalid.9">rtisvalid(9)</a>, a function to check if a (cached) route entry can be used or should be released by <a href="http://man.openbsd.org/OpenBSD-current/man9/rtfree.9">rtfree(9)</a>.
1.1 deraadt 1736: <li>Reject USB requests that could damage the bus integrity.
1737: <li>Fix a use-after-free in tame_namei().
1.15 beck 1738: <li>On powerpc, make <a href="http://man.openbsd.org/OpenBSD-current/man9/bus_dmamap_load_raw.9">bus_dmamap_load_raw(9)</a> respect the segment size constraint. This makes <a href="http://man.openbsd.org/OpenBSD-current/man4/xhci.4">xhci(4)</a> work on the G5.
1739: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/efifb.4">efifb(4)</a>:
1.1 deraadt 1740: <ul>
1741: <li>Only advertise the color depth that is actually supported. This makes the xf86-video-wsfb driver work.
1742: <li>Map the framebuffer in write-combining mode. This significantly speeds up.
1743: </ul>
1744: <!-- 2015-08-31 -->
1.15 beck 1745: <li>In static binaries, invoke <a href="http://man.openbsd.org/OpenBSD-current/man2/kbind.2">kbind(2)</a> once to disable it.
1746: <li>On m88k and sparc, use <a href="http://man.openbsd.org/OpenBSD-current/man2/kbind.2">kbind(2)</a> for lazy binding GOT/PLT updates.
1.1 deraadt 1747: <li>It is no longer needed to hold the kernel lock for MP-safe bpfs (again).
1.15 beck 1748: <li>Bring back the commit that makes bpf_mtap MP-safe by using <a href="http://man.openbsd.org/OpenBSD-current/man9/srp_enter.9">srp</a>, but now using <a href="http://man.openbsd.org/OpenBSD-current/man9/srp_follow.9">srp_follow(9)</a> to avoid races and corruption.
1749: <li>Add <a href="http://man.openbsd.org/OpenBSD-current/man9/srp_follow.9">srp_follow(9)</a> which is necessary to correctly order the taking and releasing of SRP critical sections in situations such as following a chain of data structures linked with SRPs.
1750: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/dhclient.8">dhclient(8)</a>, accept multiple domain names in dhcp option 15 (Domain Name). This allows <a href="http://man.openbsd.org/OpenBSD-current/man5/resolv.conf.5">resolv.conf(5)</a> "search" statements to be built with multiple entries.
1751: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/syslogd.8">syslogd(8)</a>, don't truncate program names and hostnames in <a href="http://man.openbsd.org/OpenBSD-current/man5/syslog.conf.5">syslog.conf(5)</a>. This fixes matching with IP addresses if syslogd is started with -n.
1752: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/efifb.4">efifb(4)</a>, check the driver name so that the driver only attempts to attach when we actually want it to.
1.1 deraadt 1753: <li>In binutils 2.17, raise the number of spare local GOT entries from 5 to 7. This fixes building liblto_plugin.so in the gcc 4.9 port.
1.15 beck 1754: <li>In <a href="http://man.openbsd.org/OpenBSD-5.8/man2/tame.2">tame(2)</a> mode:
1.1 deraadt 1755: <ul>
1.15 beck 1756: <li>Return EPERM for <a href="http://man.openbsd.org/OpenBSD-current/man2/chmod.2">*chmod(2)</a> if uid/gid change is not towards cr_uid/cr_gid (effective ids).
1757: <li>Consider <a href="http://man.openbsd.org/OpenBSD-current/man2/getfsstat.2">getfsstat(2)</a> an RPATH.
1.1 deraadt 1758: </ul>
1.15 beck 1759: <li>Rather than killing when <a href="http://man.openbsd.org/OpenBSD-current/man2/chmod.2">*chmod(2)</a> is asked to do setuid/setgid, clear those bits in the request and continue.
1.1 deraadt 1760: <li>Do not install connected routes on loopback interfaces. This will allow systems with AUTOCONF'd addresses to see loopback connected routes in the routing table.
1.15 beck 1761: <li>Fix a use-after-free in <a href="http://man.openbsd.org/OpenBSD-current/man4/uow.4">uow(4)</a>.
1.1 deraadt 1762: <li>Compute the checksum before looping back the copy of an IPv6 multicast packet.
1763: <!-- 2015-08-30 -->
1764: <li>Add a framework for resolving libc namespace issues.
1.15 beck 1765: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/gunzip.1">gunzip(1)</a> and <a href="http://man.openbsd.org/OpenBSD-current/man1/uncompress.1">uncompress(1)</a>, ignore setuid/setgid settings from a compress/gzip file.
1766: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/mandoc.1">mandoc(1)</a>:
1.1 deraadt 1767: <ul>
1768: <li>Don't die on an assertion if an .Fo macro lacks its mandatory argument.
1769: <li>Drop leading, internal, and trailing blank characters in \o (overstrike) escape sequences.
1770: </ul>
1.15 beck 1771: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/ping6.8">ping6(8)</a>, remove RH0 support.
1772: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/ddb.4">ddb(4)</a>:
1.1 deraadt 1773: <ul>
1774: <li>Automatically perform traces upon panic.
1.21 ! tb 1775: <li>Shrink the message to save vertical space and point to <a href="ddb.html">http://www.openbsd.org/ddb.html</a>.
1.1 deraadt 1776: </ul>
1777: <li>In the kernel, use a global table for domains instead of building a list at run time.
1.15 beck 1778: <li>Prepare the kernel to boot from UEFI. Amongst other things, add <a href="http://man.openbsd.org/OpenBSD-current/man4/amd64/efifb.4">efifb(4)</a>.
1779: <li>Enable <a href="http://man.openbsd.org/OpenBSD-current/man4/xhci.4">xhci(4)</a> on macppc.
1.1 deraadt 1780: <li>On macppc, map the whole config1 space based on the size read from the device tree. This allows supplementary PCIe cards to be properly detected and should prevent the kernel from faulting when reading unmapped PCI addresses.
1.15 beck 1781: <li>Prevent cards with no midi connectors from attaching <a href="http://man.openbsd.org/OpenBSD-current/man4/midi.4">midi(4)</a> devices.
1.1 deraadt 1782: <!-- 2015-08-29 -->
1.15 beck 1783: <li>For <a href="http://man.openbsd.org/OpenBSD-current/man2/chmod.2">*chmod(2)</a>, allow S_ISTXT in <a href="http://man.openbsd.org/OpenBSD-5.8/man2/tame.2">tame(2)</a> mode.
1784: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/mandoc.1">mandoc(1)</a>:
1.1 deraadt 1785: <ul>
1786: <li>Add a minimal implementation of the read-only number register \n(.$ which returns the number of arguments of the current macro.
1787: <li>Implement the escape sequence \\$* which expands to all arguments of the current user-defined macro.
1788: <li>Parse and ignore the escape sequences \, and \/.
1789: <li>Don't escape breakable hyphens yet when we have to reparse the text line because we spring an input line trap.
1790: </ul>
1791: <li>Create a miniroot for alpha.
1.15 beck 1792: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/ws.4">ws(4)</a> and <a href="http://man.openbsd.org/OpenBSD-current/man4/synaptics.4">synaptics(4)</a>, read multiple events at once.
1.1 deraadt 1793: <!-- 2015-08-28 -->
1.15 beck 1794: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/tmux.1">tmux(1)</a>, check for name changes at most once every 500 milliseconds.
1795: <li>On sparc64, add support for switching CPUs in <a href="http://man.openbsd.org/OpenBSD-current/man4/ddb.4">ddb(4)</a>.
1796: <li>On sh, use <a href="http://man.openbsd.org/OpenBSD-current/man2/kbind.2">kbind(2)</a> for lazy binding GOT/PLT updates.
1797: <li>Make <a href="http://man.openbsd.org/OpenBSD-current/man1/gdb.1">gdb(1)</a> work again on mips64 PIE binaries by making sure a reasonable 64-bit ABI is selected for 64-bit ELF files instead of a 32-bit ABI.
1.1 deraadt 1798: <li><font color="#e00000">5.8 SECURITY FIX: LibreSSL 2.2.2 incorrectly handles ClientHello messages that do not include TLS extensions, resulting in such handshakes being aborted.</font><br>A source code patch is available for <a href="errata58.html#002_sslhello">5.8</a>.
1.15 beck 1799: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/amd64/apmd.8">apmd(8)</a>, log battery changes every 10%, not every 21%.
1800: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/envy.4">envy(4)</a>, disable interrupts while the midi uart is not in use. This avoids generating unused interrupts when a chatty peripheral is connected but not used.
1.1 deraadt 1801: <li>In binutils 2.17, add support for Irix-style "64-bit" archives.
1802: <li>Fix the build of the drm libraries on sparc64.
1.15 beck 1803: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/envy.4">envy(4)</a>, fix support of M-Audio Delta 44 cards that use different GPIO pins.
1804: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/tmux.1">tmux(1)</a>:
1.1 deraadt 1805: <ul>
1806: <li>Allow environment variables in #{}.
1807: <li>Remove the lock-server option.
1808: <li>Plug a memory leak.
1809: </ul>
1810: <li>In binutils 2.17, do proper GOT slot accounting for symbols that were forced to be local.
1811: <!-- 2015-08-27 -->
1812: <li>Rework the UNIX domain socket garbage collector.
1.15 beck 1813: <li>Make <a href="http://man.openbsd.org/OpenBSD-current/man1/ld.so.1">ld.so(1)</a> work on hppa when _dl_bind_start gets hidden by the version script.
1.1 deraadt 1814: <li>Fix rare occurrences of wrong floating-point values with MP kernels on Octeon.
1815: <li>On mips64, access the image of the floating point registers via p_md.md_regs instead of directly on the frame. This prevents updates from getting lost.
1.15 beck 1816: <li>Ensure that <a href="http://man.openbsd.org/OpenBSD-current/man8/syslogd.8">syslogd(8)</a> uses its original command-line arguments when it reloads its configuration and re-executes itself.
1817: <li>Prevent a socket that <a href="http://man.openbsd.org/OpenBSD-current/man2/poll.2">poll(2)</a> reports is writable from becoming unwritable before <a href="http://man.openbsd.org/OpenBSD-current/man2/write.2">write(2)</a> is called.
1818: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/doas.1">doas(1)</a>, add a type of "auth-doas" to the perm check to allow <a href="http://man.openbsd.org/OpenBSD-current/man5/login.conf.5">login.conf(5)</a> fiddling.
1819: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/aucat.1">aucat(1)</a>, allow sparse blocks to be used as silence if samples are encoded as signed integers.
1.1 deraadt 1820: <li>Remove SSLv3 support from LibreSSL.
1821: <!-- 2015-08-26 -->
1.15 beck 1822: <li>On hppa, use <a href="http://man.openbsd.org/OpenBSD-current/man2/kbind.2">kbind(2)</a> for lazy binding GOT/PLT updates.
1.1 deraadt 1823: <li>Add more overflow checks to libexpat.
1.15 beck 1824: <li><font color="#e00000">5.8 SECURITY FIX: in <a href="http://man.openbsd.org/OpenBSD-current/man8/sshd.8">sshd(8)</a>, inverted logic made PermitRootLogin "prohibit-password" unsafe.</font><br>A source code patch is available for <a href="errata58.html#001_sshd">5.8</a>.
1.1 deraadt 1825: <li>Let MBR have priority over GPT.
1.15 beck 1826: <li>Fix an alignment issue in <a href="http://man.openbsd.org/OpenBSD-current/man4/bridge.4">bridge(4)</a>.
1.1 deraadt 1827: <!-- 2015-08-25 -->
1.15 beck 1828: <li>Add TIOCGETA to the <a href="http://man.openbsd.org/OpenBSD-5.8/man2/tame.2">TAME_IOCTL</a> list. This is used by <a href="http://man.openbsd.org/OpenBSD-current/man3/readpassphrase.3">readpassphrase(3)</a> and libcurses.
1829: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/radiusd.8">radiusd(8)</a>, fix a use-after-free in an error path.
1830: <li>On alpha and mips64, use <a href="http://man.openbsd.org/OpenBSD-current/man2/kbind.2">kbind(2)</a> for lazy binding GOT/PLT updates.
1.1 deraadt 1831: <li>Remove exect(2). It was unused and not portable across arches.
1832: <li>Hide many libc symbols that should not be used.
1.15 beck 1833: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/cron.8">cron(8)</a>, use <a href="http://man.openbsd.org/OpenBSD-current/man2/ppoll.2">ppoll(2)</a> instead of <a href="http://man.openbsd.org/OpenBSD-current/man2/poll.2">poll(2)</a>. This avoids time conversion issues and eliminates a race condition that could delay SIGCHLD and SIGHUP actions.
1834: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/syslogd.8">syslogd(8)</a>, don't use <a href="http://man.openbsd.org/OpenBSD-current/man3/strlcpy.3">strlcpy(3)</a> on strings that are not NUL-terminated. This prevents a crash.
1835: <li>Fix an out-of-bounds read in <a href="http://man.openbsd.org/OpenBSD-current/man1/tmux.1">tmux(1)</a>.
1836: <li>On i386 and powerpc, use <a href="http://man.openbsd.org/OpenBSD-current/man2/kbind.2">kbind(2)</a> for lazy binding GOT/PLT updates.
1.1 deraadt 1837: <!-- 2015-08-24 -->
1838: <li>On i386, enforce the kernel W^X policy by properly setting NX (as needed) for kernel text, PTEs, .rodata, data, bss and the symbol regions.
1.15 beck 1839: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/restore.8">restore(8)</a>, switch from <a href="http://man.openbsd.org/OpenBSD-current/man2/utimes.2">utimes(2)</a> to <a href="http://man.openbsd.org/OpenBSD-current/man2/utimensat.2">utimensat(2)</a>.
1.1 deraadt 1840: <li>Re-enable GTP support on amd64 and i386.
1.15 beck 1841: <li>Remove the -h option from <a href="http://man.openbsd.org/OpenBSD-current/man8/radiusd.8">radiusd(8)</a>.
1.1 deraadt 1842: <li>Set the required IPL at the syn-cache pool instead of doing a splsoftnet() explicitly.
1843: <li>Prevent the kernel from removing connected (/64) routes as soon as it configures an AUTOCONF'd address based on a RA.
1844: <li>Fix the GPT code to work with non-DEV_BSIZE disks.
1.15 beck 1845: <li>Fix a crash in <a href="http://man.openbsd.org/OpenBSD-current/man1/tmux.1">tmux(1)</a>.
1846: <li>Fix a cheating bug in <a href="http://man.openbsd.org/OpenBSD-current/man6/worm.6">worm(6)</a>.
1847: <li>Fix a crash during "<a href="http://man.openbsd.org/OpenBSD-current/man8/ifconfig.8">ifconfig</a> bridge0 destroy".
1848: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/macppc/bm.4">bm(4/macppc)</a>, work around slow transfer speed.
1849: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/cwm.1">cwm(1)</a>:
1.1 deraadt 1850: <ul>
1851: <li>Don't allow freeze operations on fullscreen.
1852: <li>Implement _NET_CLIENT_LIST_STACKING.
1853: </ul>
1854: <li>Use IPL_SOFTNET protection for the pool. This fixes a panic.
1.15 beck 1855: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/sysmerge.8">sysmerge(8)</a>:
1.1 deraadt 1856: <ul>
1857: <li>Switch from /usr/share/sysmerge to /var/sysmerge.
1858: <li>Use /var/sysmerge/backups for persistent backups and keep three earlier rotations.
1859: </ul>
1.15 beck 1860: <li>Avoid two potential double frees in <a href="http://man.openbsd.org/OpenBSD-5.8/man2/tame.2">tame(2)</a>.
1.1 deraadt 1861: <!-- 2015-08-23 -->
1.15 beck 1862: <li>Fix an fd leak in <a href="http://man.openbsd.org/OpenBSD-current/man1/mv.1">mv(1)</a>.
1863: <li>Apply a symbol export list to <a href="http://man.openbsd.org/OpenBSD-current/man1/ld.so.1">ld.so(1)</a> with just the expected dl*() and the two symbols needed by gdb.
1.1 deraadt 1864: <li>Make the Atom S1200 UART work.
1865: <li>In binutils 2.17, introduce -Bsymbolic-functions and related flags.
1.15 beck 1866: <li>On amd64 and sparc64, use <a href="http://man.openbsd.org/OpenBSD-current/man2/kbind.2">kbind(2)</a> for lazy binding GOT/PLT updates.
1867: <li>In <a href="http://man.openbsd.org/OpenBSD-5.8/man2/tame.2">tame(2)</a>:
1.1 deraadt 1868: <ul>
1869: <li>Perform maximum one cwd lookup.
1.15 beck 1870: <li>Fix /tmp handling of <a href="http://man.openbsd.org/OpenBSD-current/man2/unlink.2">unlink(2)</a>.
1.1 deraadt 1871: </ul>
1872: <li>Update to xf86-video-geode 2.11.17.
1.15 beck 1873: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/cwm.1">cwm(1)</a>, make CLIENT_STICKY apply to group hide/unhide rather than client hide/unhide.
1874: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/cc.1">cc(1)</a>, make the -msecure-plt option work, which is necessary to generate Secure-PLT ABI code.
1.1 deraadt 1875: <li>On powerpc, add support for the Secure-PLT ABI variant. This will give us better W^X support on powerpc.
1876: <li>In binutils 2.17, fully enable the Secure-PLT ABI.
1877: <li>In libc, restore codeset checking instead of silently falling back to ASCII.
1878: <li>Revert the bpf+srp commits. They cause problems in a bridge setup.
1879: <!-- 2015-08-22 -->
1.15 beck 1880: <li>Move to the <a href="http://man.openbsd.org/OpenBSD-5.8/man2/tame.2">tame(int flags, char *paths[])</a> API/ABI.
1.1 deraadt 1881: <li>Explicitly list the symbols permitted to be exported by libc. This will prevent unintentional additions in the future and sets the stage for reductions.
1.15 beck 1882: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/doas.1">doas(1)</a>, add the cwd context to the syslog entry.
1883: <li>Make <a href="http://man.openbsd.org/OpenBSD-current/man4/urtwn.4">urtwn(4)</a> attach to Netgear WNA1000Mv2.
1884: <li>Ensure <a href="http://man.openbsd.org/OpenBSD-current/man3/tls_read.3">tls_read(3) and tls_write(3)</a> always set outlen to zero on error.
1885: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/rc.8">rc(8)</a>, properly handle double quotes in <a href="http://man.openbsd.org/OpenBSD-current/man5/wsconsctl.conf.5">wsconsctl.conf(5)</a>.
1.1 deraadt 1886: <!-- 2015-08-21 -->
1.15 beck 1887: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/ctags.1">ctags(1)</a>, avoid calling <a href="http://man.openbsd.org/OpenBSD-current/man3/system.3">system(3)</a> for the -u option.
1.1 deraadt 1888: <li>Update to libdrm 2.4.64.
1.15 beck 1889: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/ssh.1">ssh(1)</a>, fix printing of HostKeyAlgorithms=+... when using -G.
1890: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/sshd.8">sshd(8)</a>, fix expansion of HostkeyAlgorithms=+...
1891: <li>Regenerate <a href="http://man.openbsd.org/OpenBSD-current/man5/moduli.5">moduli(5)</a>.
1892: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/cwm.1">cwm(1)</a>:
1.1 deraadt 1893: <ul>
1894: <li>Preserve the command list order from .cwmrc.
1895: <li>Hide the "term" and "lock" commands in the application menu.
1896: <li>Don't let _NET_WM_STATE_STICKY apply to the position and size of a window.
1897: <li>Add the client freeze extension to _NET_WM_STATE Atom, allowing flag to persist.
1898: </ul>
1.15 beck 1899: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/em.4">em(4)</a>, run the part of the interrupt handler that does rx completion without holding the kernel lock.
1900: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/relayd.8">relayd(8)</a>, don't drop the reply messages when "check icmp" is used with many hosts.
1901: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/httpd.8">httpd(8)</a>, avoid an HTTP 405 error when using the WebDAV MOVE method.
1902: <li>Whitelist TIOCGPGRP (for <a href="http://man.openbsd.org/OpenBSD-current/man3/tcgetpgrp.3">tcgetpgrp(3)</a>) in TAME_IOCTL.
1903: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/azalia.4">azalia(4)</a>, enable beep and CD controls on ALC292.
1.1 deraadt 1904: <!-- 2015-08-20 -->
1.15 beck 1905: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/sshd.8">sshd(8)</a>, fix the inverted logic that broke PermitRootLogin.
1.1 deraadt 1906: <li>If we're allowed to try and use large pages, we try and fit at least 8 of the items. This amortises the per page cost of an item a bit.
1.15 beck 1907: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/apci.4">acpi(4)</a>, respect the access size when reading or writing to pci config space and ensure writes are properly aligned. This prevents panics and fixes at least battery status passthrough in vmware and the brightness keys on the X220.
1908: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man3/exp2.3">exp2(3)</a>, avoid left-shifting a negative integer.
1909: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/cwm.1">cwm(1)</a>, make the big move and resize bindings match what is in the manual page.
1.1 deraadt 1910: <li>On octeon, use the IPD Clock Count register as a timecounter.
1911: <li>Import an alternative routing table backend based on Yoichi Hariguchi's ART implementation.
1.15 beck 1912: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/identd.8">identd(8)</a> and <a href="http://man.openbsd.org/OpenBSD-current/man8/tftpd.8">tftpd(8)</a>, use SOCK_NONBLOCK to avoid a FIONBIO <a href="http://man.openbsd.org/OpenBSD-current/man2/ioctl.2">ioctl(2)</a>.
1913: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/identd.8">identd(8)</a>, don't exit on unknown <a href="http://man.openbsd.org/OpenBSD-current/man2/write.2">write(2)</a> failures.
1914: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/azalia.4">azalia(4)</a>, enable audio on ThinkPad docks.
1915: <li>Reactivate <a href="http://man.openbsd.org/OpenBSD-5.8/man2/tame.2">tame(2)</a> after release.
1.1 deraadt 1916: <!-- 2015-08-19 -->
1917: <li>Remove unused vesafb code.
1918: <li>Update to libepoxy 1.3.1.
1919: <li>In LibreSSL, properly handle missing TLS extensions in client hello as a non-failure.
1920: <li>In ssh:
1921: <ul>
1.15 beck 1922: <li>Don't call <a href="http://man.openbsd.org/OpenBSD-current/man2/unlink.2">unlink(2)</a> with an uninitialised path in <a href="http://man.openbsd.org/OpenBSD-current/man1/ssh-keygen.1">ssh-keygen(1)</a>.
1923: <li>Don't free an uninitialised pointer in <a href="http://man.openbsd.org/OpenBSD-current/man1/ssh.1">ssh(1)</a>.
1.1 deraadt 1924: <li>Fix a double free in an error path.
1925: <li>Improve compat matching for WinSCP and add compat matching for FuTTY.
1926: </ul>
1927: <li>Enable the build of libOSMesa.
1.15 beck 1928: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/pf.4">pf(4)</a>, keep the IPv6 fragment size as chosen by sender also for packets that are routed on behalf of route-to.
1.1 deraadt 1929: <li>Prevent mips64 FPU emulation from corrupting the page queues in MP systems.
1930: <li>Do not use a stale local address from the routing table. This prevents an interface address without interface pointer causing a uvm_fault.
1931: <li>On octeon, allow booting the SP kernel with a set of CPUs that does not contain core 0.
1.15 beck 1932: <li>Unbreak the <a href="http://man.openbsd.org/OpenBSD-current/man8/ikectl.8">ikectl(8)</a> "ca" commands after the removal of $ENV:: overwriting in LibreSSL.
1.1 deraadt 1933: <!-- 2015-08-18 -->
1.15 beck 1934: <li>Remove casts from many calls to <a href="http://man.openbsd.org/OpenBSD-current/man3/malloc.3">malloc(3)</a>-like functions.
1.1 deraadt 1935: <!-- 2015-08-17 -->
1936: <li>Update the en_US.UTF-8 locale to Unicode 7.0.0.
1937: <li>Remove the last fragments of ST-506 support.
1.15 beck 1938: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/whois.1">whois(1)</a>, fix whois server detection for new TLDs.
1939: <li>Accept NULL pointers in <a href="http://man.openbsd.org/OpenBSD-current/man9/rtfree.9">rtfree(9)</a>. This will simplify upcoming conversions of rt_refcnt-- to rtfree(9).
1.1 deraadt 1940: <!-- 2015-08-16 -->
1.15 beck 1941: <li><font color="#e00000">5.6 and 5.7 SECURITY FIX: a change to <a href="http://man.openbsd.org/OpenBSD-current/man8/sshd.8">sshd(8)</a> resulted in incorrect permissions being applied to pseudo terminal devices, allowing local users to write to (but not read from) them.</font><br>A source code patch is available for <a href="errata57.html#014_sshd">5.7</a>.
1.1 deraadt 1942: <li>No longer hold the kernel lock when calling bpf.
1.15 beck 1943: <li>Make bpf_mtap MP-safe by using <a href="http://man.openbsd.org/OpenBSD-current/man9/srp_enter.9">srp</a>.
1.1 deraadt 1944: <li>Avoid a TOCTOU problem in if_input in the bpf handling.
1.15 beck 1945: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/tmux.1">tmux(1)</a>, come out of copy mode when history is cleared.
1.1 deraadt 1946: <!-- 2015-08-15 -->
1947: <li>Add Loongson 3A support.
1948: <li>On alpha, consider ISA interrupts level-triggered if the SRM has explicitly set them up that way. This makes the kernel correctly run with serial console on the Multia.
1949: <li>Enable AlphaBook 1 support in alpha bsd.rd.
1.15 beck 1950: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/smtpd.8">smtpd(8)</a>:
1.1 deraadt 1951: <ul>
1952: <li>Increase the size of acceptable headers lines.
1953: <li>Assume messages use 8-bit bytes by default.
1954: </ul>
1955: <!-- 2015-08-14 -->
1.15 beck 1956: <li>Remove charsets other than UTF-8 from <a href="http://man.openbsd.org/OpenBSD-current/man1/locale.1">locale(1)</a> output.
1.1 deraadt 1957: <li>Load LC_MESSAGES locale only if the character encoding is UTF-8.
1958: <li>Disable support for loading LC_CTYPE locales other than UTF-8.
1.15 beck 1959: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/swapctl.8">swapctl(8)</a>, use <a href="http://man.openbsd.org/OpenBSD-current/man2/vfork.2">vfork(2)</a> & <a href="http://man.openbsd.org/OpenBSD-current/man2/execl.2">execl(2)</a> instead of <a href="http://man.openbsd.org/OpenBSD-current/man3/system.3">system(3)</a> when invoking <a href="http://man.openbsd.org/OpenBSD-current/man8/mount_nfs.8">mount_nfs(8)</a>.
1960: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/myx.4">myx(4)</a>:
1.1 deraadt 1961: <ul>
1962: <li>Rework the way the packets on the rx rings are tracked.
1963: <li>Move to a per rx ring timeout for refilling empty rings. This gets rid of the locking around the refilling of the rx ring.
1964: <li>Use a single atomic op instead of one per packet when doing global tx free accounting. This allows packets to be sent a little faster.
1965: </ul>
1966: <li>On macppc and powerpc, replace the assembly mutexes with a C implementation.
1967: <!-- 2015-08-13 -->
1.15 beck 1968: <li>Add <a href="http://man.openbsd.org/OpenBSD-current/man9/ml_requeue.9">ml_requeue(9)</a> and <a href="http://man.openbsd.org/OpenBSD-current/man9/mq_requeue.9">mq_requeue(9)</a> to prepend mbufs on lists/queues.
1969: <li>Move the <a href="http://man.openbsd.org/OpenBSD-current/man1/locate.1">locate(1)</a> database build directory back to /tmp.
1970: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/ntpd.8">ntpd(8)</a>, avoid calling poll() multiple times with no timeout, racking up CPU time for no real reason.
1971: <li>Add the -A, -P and -t options to <a href="http://man.openbsd.org/OpenBSD-current/man1/nm.1">nm(1)</a>.
1972: <li>Remove discarded attributes from <a href="http://man.openbsd.org/OpenBSD-current/man5/disktab.5">disktab(5)</a>.
1973: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/rc.8">rc(8)</a>, improve the <a href="http://man.openbsd.org/OpenBSD-current/man5/sysctl.conf.5">sysctl.conf(5)</a>, <a href="http://man.openbsd.org/OpenBSD-current/man5/mixerctl.conf.5">mixerctl.conf(5)</a> and <a href="http://man.openbsd.org/OpenBSD-current/man5/wsconsctl.conf.5">wsconsctl(5)</a> parsers.
1974: <li>Let <a href="http://man.openbsd.org/OpenBSD-current/man1/pkg_create.1">pkg_create(1)</a> recreate packages correctly.
1.1 deraadt 1975: <li>Prevent an mbuf leak when no handler consumed that mbuf.
1976: <!-- 2015-08-12 -->
1.15 beck 1977: <li>Fix a case where <a href="http://man.openbsd.org/OpenBSD-current/man3/ceill.3">ceill(3)</a> returns 1.0L.
1.1 deraadt 1978: <li>Rework the /etc/rc script.
1.15 beck 1979: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/tmux.1">tmux(1)</a>, add the "-of" suffix to the "left", "right", "up" and "down" special tokens for the pane index.
1980: <li>Plug two memory leaks in <a href="http://man.openbsd.org/OpenBSD-current/man4/ti.4">ti(4)</a>.
1.1 deraadt 1981: <!-- 2015-08-11 -->
1.15 beck 1982: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man4/acpihpet.4">acpihpet(4)</a>, check for a proper HPET period value during attach.
1983: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man1/file.1">file(1)</a>, add various improvements to the <a href="http://man.openbsd.org/OpenBSD-current/man5/magic.5">magic(5)</a> parser.
1984: <li>In <a href="http://man.openbsd.org/OpenBSD-current/man8/sndiod.8">sndiod(8)</a>, don't make system calls when not being used.
1.1 deraadt 1985: <li>Update time zone data to tzdata2015f.
1.15 beck 1986: <li>Fix recent regressions in <a href="http://man.openbsd.org/OpenBSD-current/man4/ugold.4">ugold(4)</a>.
1.1 deraadt 1987: <!-- 2015-08-10 -->
1.15 beck 1988: <li>Improve <a href="http://man.openbsd.org/OpenBSD-current/man1/openssl.1">openssl(1)</a> s_client -starttls xmpp support.
1.1 deraadt 1989: </ul>
1990: <p>
1991:
1992: </body>
1993: </html>
![[BACK]](/icons/back.gif){kind=icon}
Return to plus59.html CVS log ![[TXT]](/icons/text.gif){kind=icon}
![[DIR]](/icons/dir.gif){kind=icon}
Up to [local] / www