version 1.4, 2016/08/15 02:22:11 |
version 1.5, 2016/09/03 11:22:01 |
|
|
<!-- 2016-07-23 --> |
<!-- 2016-07-23 --> |
<li><font color="#e00000">5.8 and 5.9 RELIABILITY FIX: When signaling an error to an HTTP relay client, the connection can be terminated prematurely, leading to a crash.</font><br>A source code patch exists which remedies this problem for <a href="errata58.html#024_relayd">5.8</a> and <a href="errata59.html#021_relayd">5.9</a>. |
<li><font color="#e00000">5.8 and 5.9 RELIABILITY FIX: When signaling an error to an HTTP relay client, the connection can be terminated prematurely, leading to a crash.</font><br>A source code patch exists which remedies this problem for <a href="errata58.html#024_relayd">5.8</a> and <a href="errata59.html#021_relayd">5.9</a>. |
<li>In the installer, back out the automatic <a href="http://man.openbsd.org/pkg.conf.5">pkg.conf(5)</a> installpath changes. |
<li>In the installer, back out the automatic <a href="http://man.openbsd.org/pkg.conf.5">pkg.conf(5)</a> installpath changes. |
<li>In <a href="http://man.openbsd.org/dhclient.8">dhclient(8)</a>, back out the change that narrowed the BPF read filter rules so only packets sent to the interface's LLADDR pass. Some DHCP servers sned frames to the ethernet broadcast address. |
<li>In <a href="http://man.openbsd.org/dhclient.8">dhclient(8)</a>, back out the change that narrowed the BPF read filter rules so only packets sent to the interface's LLADDR pass. Some DHCP servers send frames to the ethernet broadcast address. |
<li>In imxuart(4/armv7), re-create the i.MX6 console with the correct minor number on attach. |
<li>In imxuart(4/armv7), re-create the i.MX6 console with the correct minor number on attach. |
<li>Disable POOL_DEBUG. |
<li>Disable POOL_DEBUG. |
<li>In <a href="http://man.openbsd.org/newfs.8">newfs(8)</a>, scale the default "density" value so that on 4K disks the same number of inodes are creates as on DEV_BSIZE devices. |
<li>In <a href="http://man.openbsd.org/newfs.8">newfs(8)</a>, scale the default "density" value so that on 4K disks the same number of inodes are creates as on DEV_BSIZE devices. |
|
|
<!-- 2016-06-29 --> |
<!-- 2016-06-29 --> |
<li>In <a href="http://man.openbsd.org/ssh.1">ssh(1)</a>, explicitly check for 100% completion in the progress meter. This avoids a potential floating point rounding error which could cause the progress meter to report 99% on completion. |
<li>In <a href="http://man.openbsd.org/ssh.1">ssh(1)</a>, explicitly check for 100% completion in the progress meter. This avoids a potential floating point rounding error which could cause the progress meter to report 99% on completion. |
<li>In <a href="http://man.openbsd.org/vi.1">vi(1)</a>, if /tmp/vi.recover doesn't exist, don't create it. Warn once that it doesn't exist, afterwards fail silently. |
<li>In <a href="http://man.openbsd.org/vi.1">vi(1)</a>, if /tmp/vi.recover doesn't exist, don't create it. Warn once that it doesn't exist, afterwards fail silently. |
<li>In <a href="http://man.openbsd.org/smtpd.8">smtpd(8)</a>, explicitely enclose SMTP transactions between BEGIN and COMMIT/ROLLBACK filter events. |
<li>In <a href="http://man.openbsd.org/smtpd.8">smtpd(8)</a>, explicitly enclose SMTP transactions between BEGIN and COMMIT/ROLLBACK filter events. |
<li>In <a href="http://man.openbsd.org/amd64/ioapic.4">ioapic(4/amd64)</a>, don't write to the read-only RIRR bit in the IOAPIC redirection register. This may subsequently block interrupt delivery. |
<li>In <a href="http://man.openbsd.org/amd64/ioapic.4">ioapic(4/amd64)</a>, don't write to the read-only RIRR bit in the IOAPIC redirection register. This may subsequently block interrupt delivery. |
<!-- 2016-06-28 --> |
<!-- 2016-06-28 --> |
<li>In <a href="http://man.openbsd.org/nc.1">nc(1)</a>, add the -M and -m options to specify the outgoing and incoming minimum TTL. |
<li>In <a href="http://man.openbsd.org/nc.1">nc(1)</a>, add the -M and -m options to specify the outgoing and incoming minimum TTL. |
|
|
</ul> |
</ul> |
<!-- 2016-06-20 --> |
<!-- 2016-06-20 --> |
<li>In libcrypto, disable DSA_FLAG_NO_EXP_CONSTTIME, always enable constant-time behavior. |
<li>In libcrypto, disable DSA_FLAG_NO_EXP_CONSTTIME, always enable constant-time behavior. |
<li>In <a href="http://man.openbsd.org/openssl.1">openssl(1)</a>, fix a bug loading the default certificate path locations. The files would only be loaded if the CAfile or CApath locations were succesfully loaded first. |
<li>In <a href="http://man.openbsd.org/openssl.1">openssl(1)</a>, fix a bug loading the default certificate path locations. The files would only be loaded if the CAfile or CApath locations were successfully loaded first. |
<li>In <a href="http://man.openbsd.org/ld.1">ld(1)</a>, make creation of text-relocations a fatal error by default, with -znotext to permit it and -ztext to reenable the default of forbidding it. |
<li>In <a href="http://man.openbsd.org/ld.1">ld(1)</a>, make creation of text-relocations a fatal error by default, with -znotext to permit it and -ztext to reenable the default of forbidding it. |
<li>In <a href="http://man.openbsd.org/bgpd.8">bgpd(8)</a>, show the "nexthop 1.2.3.4 now valid: via 192.168.0.1" message only in debug mode. |
<li>In <a href="http://man.openbsd.org/bgpd.8">bgpd(8)</a>, show the "nexthop 1.2.3.4 now valid: via 192.168.0.1" message only in debug mode. |
<li>Add ds1307(4), an I2C driver for the Maxim DS1307 Real Time Clock chip. |
<li>Add ds1307(4), an I2C driver for the Maxim DS1307 Real Time Clock chip. |
|
|
</ul> |
</ul> |
<li>Remove octhci(4). It has been superseded by <a href="http://man.openbsd.org/dwctwo.4">dwctwo(4)</a>. |
<li>Remove octhci(4). It has been superseded by <a href="http://man.openbsd.org/dwctwo.4">dwctwo(4)</a>. |
<li>Do the full W^X check on hppa and mips64. |
<li>Do the full W^X check on hppa and mips64. |
<li>On armv7, use FDT to find the console to initialise. |
<li>On armv7, use FDT to find the console to initialize. |
<li>Attach <a href="http://man.openbsd.org/acpitoshiba.4">acpitoshiba(4)</a> on Libretto, Dynabook and SPA40 laptops. |
<li>Attach <a href="http://man.openbsd.org/acpitoshiba.4">acpitoshiba(4)</a> on Libretto, Dynabook and SPA40 laptops. |
<li>Enforce W^X and map W|X segments without X permission initially. The dynamic linker will make these read-only and add back X permission after relocation processing. |
<li>Enforce W^X and map W|X segments without X permission initially. The dynamic linker will make these read-only and add back X permission after relocation processing. |
<li>In <a href="http://man.openbsd.org/ld.so.1">ld.so(1)</a>, some ELF ABIs still require a PLT that is both writable and executable. To avoid W^X violations, initially map such segments as writable and non-executable, and change the mapping to non-writable and executable after initial relocation processing. |
<li>In <a href="http://man.openbsd.org/ld.so.1">ld.so(1)</a>, some ELF ABIs still require a PLT that is both writable and executable. To avoid W^X violations, initially map such segments as writable and non-executable, and change the mapping to non-writable and executable after initial relocation processing. |
|
|
<li>Fix several bugs due to uninitialized struct nameidata's. |
<li>Fix several bugs due to uninitialized struct nameidata's. |
<li>In <a href="http://man.openbsd.org/softraid.4">softraid(4)</a>, panic when attempting to execute a scsi command with no discipline defined. |
<li>In <a href="http://man.openbsd.org/softraid.4">softraid(4)</a>, panic when attempting to execute a scsi command with no discipline defined. |
<li>Fix a bug causing <a href="http://man.openbsd.org/gzip.1">gzip(1)</a> to think the resulting file was got larger during compression. |
<li>Fix a bug causing <a href="http://man.openbsd.org/gzip.1">gzip(1)</a> to think the resulting file was got larger during compression. |
<li>In <a href="http://man.openbsd.org/daily.8">daily(8)</a>, no langer call <a href="http://man.openbsd.org/mailq.8">mailq(8)</a>. |
<li>In <a href="http://man.openbsd.org/daily.8">daily(8)</a>, no longer call <a href="http://man.openbsd.org/mailq.8">mailq(8)</a>. |
<li>In <a href="http://man.openbsd.org/sysmerge.8">sysmerge(8)</a>, in interactive mode, check syntax of several important files after merging to give some protection against bad merges. |
<li>In <a href="http://man.openbsd.org/sysmerge.8">sysmerge(8)</a>, in interactive mode, check syntax of several important files after merging to give some protection against bad merges. |
<li>Don't allow the routing table of a bound socket to be changed. This is not intended and will behave unexpectedly if the address is already used in another domain. |
<li>Don't allow the routing table of a bound socket to be changed. This is not intended and will behave unexpectedly if the address is already used in another domain. |
<li>In <a href="http://man.openbsd.org/tmux.1">tmux(1)</a>, fix keys parsing again to correctly accept Unicode when not prefixed with Escape. |
<li>In <a href="http://man.openbsd.org/tmux.1">tmux(1)</a>, fix keys parsing again to correctly accept Unicode when not prefixed with Escape. |