Annotation of www/plus60.html, Revision 1.19
1.13 bentley 1: <!doctype html>
2: <html lang=en id=plus>
3: <meta charset=utf-8>
1.1 deraadt 4: <title>OpenBSD 6.0 Changelog</title>
5: <meta name="description" content="OpenBSD 6.0 changes">
6: <meta name="viewport" content="width=device-width, initial-scale=1">
7: <link rel="stylesheet" type="text/css" href="openbsd.css">
1.6 tj 8: <link rel="canonical" href="https://www.openbsd.org/plus60.html">
1.13 bentley 9: <style>
10: strong {
11: color: var(--red);
12: font-weight: normal;
13: }
1.1 deraadt 14:
1.13 bentley 15: h3 {
16: color: var(--blue);
17: }
18: </style>
1.1 deraadt 19:
1.13 bentley 20: <h2 id=OpenBSD>
1.1 deraadt 21: <a href="index.html">
1.13 bentley 22: <i>Open</i><b>BSD</b></a>
23: 6.0 Changelog
1.1 deraadt 24: </h2>
25: <hr>
26:
27: <p>
28: This selection is intended to include all important
29: and all user-visible changes.
30: For a complete record of all changes, please see the "source-changes"
31: mailing list, called "OpenBSD CVS"
1.19 ! tj 32: in the <a href="https://marc.info/?l=openbsd-cvs">archives</a>,
1.1 deraadt 33: or use <a href="anoncvs.html#CVS">CVS</a>.
34:
35: <p>
1.13 bentley 36: Note: <strong>Problems for which patches exist are marked in red</strong>.
1.1 deraadt 37:
38: <p>
39: For changes in other releases, click below:<br>
40: <a href="plus20.html">2.0</a>,
41: <a href="plus21.html">2.1</a>,
42: <a href="plus22.html">2.2</a>,
43: <a href="plus23.html">2.3</a>,
44: <a href="plus24.html">2.4</a>,
45: <a href="plus25.html">2.5</a>,
46: <a href="plus26.html">2.6</a>,
47: <a href="plus27.html">2.7</a>,
48: <a href="plus28.html">2.8</a>,
49: <a href="plus29.html">2.9</a>,
50: <a href="plus30.html">3.0</a>,
51: <a href="plus31.html">3.1</a>,
52: <a href="plus32.html">3.2</a>,
53: <a href="plus33.html">3.3</a>,
54: <a href="plus34.html">3.4</a>,
55: <a href="plus35.html">3.5</a>,
56: <a href="plus36.html">3.6</a>,
57: <br>
58: <a href="plus37.html">3.7</a>,
59: <a href="plus38.html">3.8</a>,
60: <a href="plus39.html">3.9</a>,
61: <a href="plus40.html">4.0</a>,
62: <a href="plus41.html">4.1</a>,
63: <a href="plus42.html">4.2</a>,
64: <a href="plus43.html">4.3</a>,
65: <a href="plus44.html">4.4</a>,
66: <a href="plus45.html">4.5</a>,
67: <a href="plus46.html">4.6</a>,
68: <a href="plus47.html">4.7</a>,
69: <a href="plus48.html">4.8</a>,
70: <a href="plus49.html">4.9</a>,
71: <a href="plus50.html">5.0</a>,
72: <a href="plus51.html">5.1</a>,
73: <a href="plus52.html">5.2</a>,
74: <a href="plus53.html">5.3</a>,
75: <br>
76: <a href="plus54.html">5.4</a>,
77: <a href="plus55.html">5.5</a>,
78: <a href="plus56.html">5.6</a>,
79: <a href="plus57.html">5.7</a>,
80: <a href="plus58.html">5.8</a>,
81: <a href="plus59.html">5.9</a>,
1.7 deraadt 82: <a href="plus61.html">6.1</a>,
1.9 deraadt 83: <a href="plus62.html">6.2</a>,
1.10 deraadt 84: <a href="plus63.html">6.3</a>,
1.11 deraadt 85: <a href="plus64.html">6.4</a>,
1.12 pamela 86: <a href="plus65.html">6.5</a>,
1.14 pamela 87: <a href="plus66.html">6.6</a>,
1.15 deraadt 88: <a href="plus67.html">6.7</a>,
1.16 deraadt 89: <a href="plus68.html">6.8</a>,
1.18 pamela 90: <a href="plus69.html">6.9</a>,
1.1 deraadt 91: <a href="plus.html">current</a>.
92: <br>
93:
94: <p>
1.13 bentley 95: <h3>Changes made between OpenBSD 5.9 and 6.0</h3>
1.1 deraadt 96: <p>
97:
98: <ul>
1.2 tim 99: <!-- 2016-07-26 -->
1.8 tb 100: <li>Unbreak <a href="https://man.openbsd.org/rsu.4">rsu(4)</a>.
101: <li>In <a href="https://man.openbsd.org/rtwn.4">rtwn(4)</a> and <a href="https://man.openbsd.org/urtwn.4">urtwn(4)</a>, fix byteswap errors. This repairs <a href="https://man.openbsd.org/urtwn.4">urtwn(4)</a> on macppc.
1.2 tim 102: <!-- 2016-07-25 -->
103: <li>In mesa, disable the code that allocates W|X memory.
104: <li>Disable tmpfs.
1.8 tb 105: <li>In <a href="https://man.openbsd.org/rarpd.8">rarpd(8)</a>, avoid a hang when the receive buffer of a route socket becomes full.
106: <li>In <a href="https://man.openbsd.org/newfs.8">newfs(8)</a>, revert the change to scale the default "density" value to create the same number of inodes.
107: <li>In <a href="https://man.openbsd.org/bgpd.8">bgpd(8)</a>, initialize the log subsytem in the SE like it is done in the RDE. This avoids all logging from going to /dev/null.
108: <li>When closing <a href="https://man.openbsd.org/bpf.4">bpf(4)</a> devices, ensure the minor number becomes free for reuse by the device cloning code. This fixes a panic.
109: <li>In <a href="https://man.openbsd.org/perl.1">perl(1)</a>, patch CVE-2016-1238.
1.2 tim 110: <!-- 2016-07-24 -->
1.8 tb 111: <li>In <a href="https://man.openbsd.org/tcpdump.8">tcpdump(8)</a>, only <a href="https://man.openbsd.org/chroot.2">chroot(2)</a> when run as root.
1.2 tim 112: <!-- 2016-07-23 -->
1.13 bentley 113: <li><strong>5.8 and 5.9 RELIABILITY FIX: When signaling an error to an HTTP relay client, the connection can be terminated prematurely, leading to a crash.</strong><br>A source code patch exists which remedies this problem for <a href="errata58.html#024_relayd">5.8</a> and <a href="errata59.html#021_relayd">5.9</a>.
1.8 tb 114: <li>In the installer, back out the automatic <a href="https://man.openbsd.org/pkg.conf.5">pkg.conf(5)</a> installpath changes.
115: <li>In <a href="https://man.openbsd.org/dhclient.8">dhclient(8)</a>, back out the change that narrowed the BPF read filter rules so only packets sent to the interface's LLADDR pass. Some DHCP servers send frames to the ethernet broadcast address.
1.2 tim 116: <li>In imxuart(4/armv7), re-create the i.MX6 console with the correct minor number on attach.
117: <li>Disable POOL_DEBUG.
1.8 tb 118: <li>In <a href="https://man.openbsd.org/newfs.8">newfs(8)</a>, scale the default "density" value so that on 4K disks the same number of inodes are creates as on DEV_BSIZE devices.
119: <li>In <a href="https://man.openbsd.org/stty.1">stty(1)</a>, error out if the display and modify mode are combined on the command line. This avoids a <a href="https://man.openbsd.org/pledge.2">pledge(2)</a> violation.
120: <li><a href="https://man.openbsd.org/amd64/vmm.4">vmm(4/amd64)</a>, fix a few CPUID emulation issues.
1.2 tim 121: <!-- 2016-07-22 -->
1.8 tb 122: <li>In <a href="https://man.openbsd.org/ssh.1">ssh(1)</a>, fix <a href="https://man.openbsd.org/pledge.2">pledge(2)</a> violation with the -f option.
123: <li>Attach <a href="https://man.openbsd.org/armv7/imx.4">imx(4/armv7)</a> on i.mx6 quad plus.
124: <li>In <a href="https://man.openbsd.org/dhclient.8">dhclient(8)</a>, actually DECLINE and delete unused offers.
125: <li>In <a href="https://man.openbsd.org/armv7/fec.4">fec(4/armv7)</a>, fallback to the known IRQ number on imx.6 if the fdt interrupts-extended property is missing or not the size that is expected.
126: <li>In <a href="https://man.openbsd.org/rtable.4">rtable(4)</a>, prevent an infinite recursion when deleting routes inside rtable_walk().
1.2 tim 127: <li>Prevent NULL-pointer call for filesystems that don't provide vfs_sysctl in their vfsops structs.
1.8 tb 128: <li>In <a href="https://man.openbsd.org/relayd.8">relayd(8)</a>, fix a crash when the connection is terminated prematurely.
129: <li>Fix a double <a href="https://man.openbsd.org/rtfree.9">rtfree(9)</a> triggered when IPSEC inserts a more specific route because of PMTU.
1.2 tim 130: <!-- 2016-07-21 -->
1.8 tb 131: <li>In <a href="https://man.openbsd.org/ssh.1">ssh(1)</a>:
1.2 tim 132: everse the order in which -J/JumpHost proxies are visited to be more intuitive.
133: <li>In switchd(8), add basic support for OpenFlow 1.3 PACKET_IN+PACKET_OUT, no FLOW_MOD yet.
1.8 tb 134: <li>In <a href="https://man.openbsd.org/bgpd.8">bgpd(8)</a>, don't quit when the local addresses of a peer can't be figured out. Instead bring the session down.
135: <li>In <a href="https://man.openbsd.org/tcpbench.1">tcpbench(1)</a>, add AF_UNIX support and also make it possible to randomize the write size in the client.
136: <li>In <a href="https://man.openbsd.org/rtwn.4">rtwn(4)</a> and <a href="https://man.openbsd.org/urtwn.4">urtwn(4)</a>, respect the RTS threshold set by net80211.
137: <li>In <a href="https://man.openbsd.org/tcpdump.8">tcpdump(8)</a>, silently ignore <a href="https://man.openbsd.org/chroot.2">chroot(2)</a> setup failure, because <a href="https://man.openbsd.org/pledge.2">pledge(2)</a> provides an even better sandbox. This regain -r support.
1.2 tim 138: <!-- 2016-07-20 -->
1.8 tb 139: <li>In <a href="https://man.openbsd.org/sshd.8">sshd(8)</a>, skip passwords longer than 1024 characters in length, so clients can't easily DoS sshd by sending very long passwords.
140: <li>Use <a href="https://man.openbsd.org/pledge.2">pledge(2)</a> in switchd(8) and switchctl(8).
141: <li>In <a href="https://man.openbsd.org/softraid.4">softraid(4)</a>, plug potential leak of device list.
1.2 tim 142: <li>In switchd(8), parse and print OpenFlow 1.3 PACKET_IN and OXM (Openflow eXtended Match).
1.8 tb 143: <li>In <a href="https://man.openbsd.org/netstat.1">netstat(1)</a>, print the relevant counters to tune the TCP SYN cache.
144: <li>In <a href="https://man.openbsd.org/iwm.4">iwm(4)</a>, disable the beacon filter. This make it possible to keep track of HT protection changes.
1.2 tim 145: <li>In net80211, enable RTS for frames above a particular size. This change allows for reasonable throughput on loaded 11g networks whereas before they were practically unusable.
146: <li>In switchd(8), update OpenFlow 1.3 stub based on the 1.0 code.
147: <li>In switchd(8), add the -n flag to check the configuration and exit.
1.8 tb 148: <li>In <a href="https://man.openbsd.org/iwm.4">iwm(4)</a>, properly keep track of HT protection changes while associated.
149: <li>Unbreak <a href="https://man.openbsd.org/ural.4">ural(4)</a>, which had been dropping frames on Tx while the IFF_RUNNING flag was set.
150: <li>In <a href="https://man.openbsd.org/ehci.4">ehci(4)</a>, use for ATI controllers the same workaround as for VIA controllers. This should hopefully help people reporting errors with SB700.
151: <li>Add the tcp.synhashsize <a href="https://man.openbsd.org/sysctl.8">sysctl(8)</a> to make the size for the syn cache hash array tunable.
1.2 tim 152: <!-- 2016-07-19 -->
1.8 tb 153: <li>In <a href="https://man.openbsd.org/dhclient.8">dhclient(8)</a>, narrow the BPF read filter rules so only packets sent to the interface's LLADDR pass. This limits the number of packets that get dropped as a result of dhclient setting BIOCSFILDROP on the bpf descriptor.
1.2 tim 154: <li>Import switch(4), switchd(8) and switchctl(8), a basic work-in-progress OpenFlow implementation (not build by default).
1.8 tb 155: <li>In <a href="https://man.openbsd.org/carp.4">carp(4)</a>, fix the check supposed to prevent "ip" and "ip-stealth" balancing modes from leaking the multicast address.
156: <li>In <a href="https://man.openbsd.org/sshd_config.5">sshd_config(5)</a>, allow wildcard for PermitOpen hosts as well as ports (bz#2582).
157: <li>In "<a href="https://man.openbsd.org/rcctl.8">rcctl</a> ls", skip all files with a "." in the name, because <a href="https://man.openbsd.org/pkg_add.1">pkg_add(1)</a> renames files in this way when the checksums don't match.
158: <li>In <a href="https://man.openbsd.org/netstart.8">netstart(8)</a>, unbreak <a href="https://man.openbsd.org/vlan.4">vlan(4)</a> on top of <a href="https://man.openbsd.org/tap.4">tap(4)</a>.
1.2 tim 159: <!-- 2016-07-18 -->
160: <li>In virtio, always allow MSI/MSI-X. This enables MSI-X with qemu's old "82441FX" pci-bridge.
1.8 tb 161: <li>In <a href="https://man.openbsd.org/armv7/sxitimer.4">sxitimer(4/armv7)</a>, explicitly stop the timers before reloading them. This fixes a hang on the Olimex A10s boards.
162: <li>In <a href="https://man.openbsd.org/doas.1">doas(1)</a>, copy the path to the shell from struct passwd to prevent it from being overridden by a <a href="https://man.openbsd.org/getpwuid.3">getpwuid(3)</a> call. This happens in a double doas call.
163: <li>In <a href="https://man.openbsd.org/iwm.4">iwm(4)</a>:
1.2 tim 164: <ul>
165: <li>Retry Tx of management frames less often.
166: <li>Fix inverted logic in iwm_tx().
167: <li>Explicitly set firmware Tx aggregation limit to one (which disables Tx aggregation).
168: </ul>
1.8 tb 169: <li>In <a href="https://man.openbsd.org/pstat.8">pstat(8)</a>, fix VFLAG formatting.
170: <li>In <a href="https://man.openbsd.org/ssh.1">ssh(1)</a>, reduce timing attack against obsolete CBC modes by always computing the MAC over a fixed size of data.
171: <li>In <a href="https://man.openbsd.org/kdump.1">kdump(1)</a>, <a href="https://man.openbsd.org/ktrace.1">ktrace(1)</a> and <a href="https://man.openbsd.org/ltrace.1">ltrace(1)</a>, add "p" trace point for KTRFAC_PLEDGE, and fix handling of -t+ in <a href="https://man.openbsd.org/ltrace.1">ltrace(1)</a>.
1.2 tim 172: <!-- 2016-07-17 -->
1.8 tb 173: <li>Attach <a href="https://man.openbsd.org/armv7/sunxi.4">sunxi(4/armv7)</a> based on the compatible property of the root node of the device tree.
1.2 tim 174: <!-- 2016-07-16 -->
1.8 tb 175: <li>In <a href="https://man.openbsd.org/ssh.1">ssh(1)</a>, support UTF-8 characters in ssh banners (bz#2058).
176: <li>In <a href="https://man.openbsd.org/jot.1">jot(1)</a>, fix a bug causing values to be printed out of bounds if the precision is 0.
177: <li>In <a href="https://man.openbsd.org/ldpd.8">ldpd(8)</a>:
1.2 tim 178: <ul>
179: <li>Fix parsing of malformed optional TLVs/Sub-TLVs.
180: <li>Remove potential overflow when validating message's length.
181: </ul>
1.8 tb 182: <li>In <a href="https://man.openbsd.org/virtio.4">virtio(4)</a>, support MSI-X. This increases performance for interrupt heavy loads.
1.2 tim 183: <!-- 2016-07-15 -->
184: <li>In libssl, limit the support of the "backward compatible" ssl2 handshake to only be used if TLS 1.0 is enabled.
1.8 tb 185: <li>In <a href="https://man.openbsd.org/ldpd.8">ldpd(8)</a>:
1.2 tim 186: <ul>
187: <li>Update per-neighbor GTSM options on config reload.
188: <li>Explicitly ignore the Hop Count and Path Vector TLVs.
189: <li>Improve logging of reserved labels.
190: </ul>
191: <li>Disable acpicbkbd(4) by default until after the release. It causes the kernel to spin forever on certain Chromebooks.
192: <!-- 2016-07-14 -->
1.8 tb 193: <li>In <a href="https://man.openbsd.org/ssh.1">ssh(1)</a>, reduce the syslog level of some relatively common protocol events from LOG_CRIT (bz#2585).
194: <li>Add a ProxyJump <a href="https://man.openbsd.org/ssh_config.5">ssh_config(5)</a> option and a corresponding -J <a href="https://man.openbsd.org/ssh.1">ssh(1)</a> command-line flag to allow simplified indirection through a SSH bastion or "jump host".
1.13 bentley 195: <li><strong>5.8 and 5.9 RELIABILITY FIX: Splicing sockets in a loop could cause a kernel spin.</strong><br>A source code patch is available for <a href="errata58.html#018_splice">5.8</a> and <a href="errata59.html#013_splice">5.9</a>.
196: <li><strong>5.8 and 5.9 RELIABILITY FIX: ufs_readdir failed to limit size of memory allocation, leading to panics. </strong><br>A source code patch is available for <a href="errata58.html#019_dirent">5.8</a> and <a href="errata59.html#015_dirent">5.9</a>.
197: <li><strong>5.8 and 5.9 SECURITY FIX: The mmap extension __MAP_NOFAULT could overcommit resources and crash the system.</strong><br>A source code patch is available for <a href="errata58.html#020_mmap">5.8</a> and <a href="errata59.html#016_mmap">5.9</a>.
198: <li><strong>5.8 and 5.9 RELIABILITY FIX: Tick counting overflows could cause a kernel crash.</strong><br>A source code patch is available for <a href="errata58.html#021_timeout">5.8</a> and <a href="errata59.html#018_timeout">5.9</a>.
199: <li><strong>5.8 and 5.9 RELIABILITY FIX: Invalid file descriptor use with kevent(2) could lead to a kernel crash.</strong><br>A source code patch is available for <a href="errata58.html#022_kevent">5.8</a> and <a href="errata59.html#019_kevent">5.9</a>.
200: <li><strong>5.8 and 5.9 RELIABILITY FIX: Unchecked parameters and integer overflows in the amap allocation routines could cause malloc(9) to either not allocate enough memory, leading to memory corruption, or to trigger a "malloc: allocation too large" panic.</strong><br>A source code patch is available for <a href="errata58.html#023_amap">5.8</a> and <a href="errata59.html#020_amap">5.9</a>.
201: <li><strong>5.9 RELIABILITY FIX: Multiple processes exiting with a fd-passing control message on a shared socket could crash the system.</strong><br>A source code patch is available for <a href="errata59.html#014_unp">5.9</a>.
202: <li><strong>5.9 RELIABILITY FIX: A race occuring in the unlocked ARP input path can lead to a kernel NULL dereference.</strong><br>A source code patch is available for <a href="errata59.html#017_arp">5.9</a>.
1.2 tim 203: <li>Ensure that amap slot calculation does not overflow. This prevents from too small amaps being allocated by forcing the allocation of a large number of slots.
1.8 tb 204: <li>Ignore the kern.usermount <a href="https://man.openbsd.org/sysctl.8">sysctl(8)</a>. It is unsafe, because it allows any non-<a href="https://man.openbsd.org/pledge.2">pledge(2)</a>'d program to call the mount/umount system calls. The sysctl will be completely removed in 6.1.
205: <li>In <a href="https://man.openbsd.org/ip6.4">ip6(4)</a>, drop received packets with an IPv4-compatible address as source or destination as per RFC4213.
206: <li>In <a href="https://man.openbsd.org/armv7/fec.4">fec(4/armv7)</a>, do board-specific delay/skew corrections for the Micrel KSZ9021 and KSZ9031 PHYs based on device tree properties instead of the board ID.
1.2 tim 207: <li>Prevent a use-after-free by not updating an ARP entry that has been removed from the table.
1.8 tb 208: <li>In <a href="https://man.openbsd.org/vioblk.4">vioblk(4)</a>, properly handle poll timeout.
1.2 tim 209: <!-- 2016-07-13 -->
210: <li>Avoid a panic caused by very big mallocs for the ufs_readdir() buffer which should have been limited to 64 kB.
211: <li>Avoid a panic caused by very big mallocs that result from uint64-to-int32 truncation when kevent does fd validation.
212: <li>On amd64, add hvn(4), a work-in-progress driver for the Hyper-V NetVSC.
1.8 tb 213: <li>In <a href="https://man.openbsd.org/calendar.1">calendar(1)</a>, when matching a day in the month, ensure the date is still in the month we are interested in. This
1.2 tim 214: fixes things like Sunday+5 for months where there is not a 5th Sunday.
1.8 tb 215: <li>In <a href="https://man.openbsd.org/bpgd.8">bpgd(8)</a>, output the no-longer-so-new AS operators when printing the configuration.
1.2 tim 216: <li>In libtls, split the existing TLS cipher suite groups into four: secure, compat, legacy and insecure.
217: <li>Check resource limits for mappings established using __MAP_NOFAULT. This prevents callers from triggering a kernel panic and a potential integer overflow in the amap code by forcing the allocation of too many slots.
218: <li>In imxehci(4), use the device tree voltage regulator information to supply power to the USB bus, because this only supports "fixed" regulators that are controlled through a gpio.
219: <!-- 2016-07-12 -->
1.8 tb 220: <li>Fix a crash when MNT_DOOMED is passed in the flags to <a href="https://man.openbsd.org/unmount.2">unmount(2)</a>.
221: <li>In <a href="https://man.openbsd.org/syslogd.8">syslogd(8)</a>, add support for TLS client certificates in syslogd. This allows the remote server to verify the authenticity of received messages.
1.2 tim 222: <!-- 2016-07-11 -->
223: <li>In tmpfs, don't allow mounting with noval owner. It causes a panic later on.
1.8 tb 224: <li>In <a href="https://man.openbsd.org/factor.6">factor(6)</a>, use an integer version of the Newton method instead of the floating point square root. This fixes a rounding issue.
225: <li>In <a href="https://man.openbsd.org/armv7/imxesdhc.4">imxesdhc(4/armv7)</a> and <a href="https://man.openbsd.org/armv7/fec.4">fec(4/armv7)</a>, use the gpio framework to implement card detect instead of hardcoding particular gpios based on board IDs.
1.2 tim 226: <li>Hook up imxgpio(4) to the FDT gpio framework.
227: <li>Fix path MTU discovery which was slightly broken: it took two ICMP packets to create and change the dynamic route.
1.8 tb 228: <li>In <a href="https://man.openbsd.org/tcp.4">tcp(4)</a>, do not increase the size of the socket buffer under memory pressure.
1.2 tim 229: <!-- 2016-07-10 -->
1.8 tb 230: <li>In <a href="https://man.openbsd.org/tpcump.8">tcpdump(8)</a>, recognize MPLS pseudowire with control words. Also print encapsulated ethernet packets.
231: <li>In <a href="https://man.openbsd.org/acpimadt.4">acpimadt(4)</a>, properly handle Processor Local X2APIC structures. This makes secondary CPUs attach on the HP DL360 gen 9.
1.2 tim 232: <li>Dynamically attach imxgpio(4) using the FDT.
1.8 tb 233: <li>In <a href="https://man.openbsd.org/mandoc.1">mandoc(1)</a>, fix a bug causing .so links to gzipped manuals to fail in the absence of a <a href="https://man.openbsd.org/mandoc.db.5">mandoc.db(5)</a> database.
1.2 tim 234: <!-- 2016-07-09 -->
1.8 tb 235: <li>In <a href="https://man.openbsd.org/armv7/omap.4">omap(4/armv7)</a>, follow imx and match based on the compatible property of the root node in the fdt instead of attaching the device based on board IDs.
236: <li>Dynamically attach i.MX6 <a href="https://man.openbsd.org/ehci.4">ehci(4)</a> using the FDT.
1.2 tim 237: <!-- 2016-07-07 -->
1.8 tb 238: <li>In <a href="https://man.openbsd.org/ssh.1">ssh(1)</a>, improve crypto ordering for Encrypt-then-MAC (EtM) mode MAC algorithms. This prevents the possibility of a side-channel oracle, though no such oracle has been identified.
239: <li>In <a href="https://man.openbsd.org/perl.1">perl(1)</a>, fix a bug where XSLoader could try to load from a subdir of the cwd when called via eval (CVE-2016-6185).
1.2 tim 240: <!-- 2016-07-06 -->
1.8 tb 241: <li>In <a href="https://man.openbsd.org/malloc.3">malloc(3)</a>, correctly implement the three-valued J/j option.
242: <li>In <a href="https://man.openbsd.org/syslogd.conf.5">syslogd.conf(5)</a>, allow space-deliminated fields in syslog.conf in addition to traditional tabs-deliminated fields.
243: <li>Various cleanups in <a href="https://man.openbsd.org/route6d.8">route6d(8)</a>.
1.2 tim 244: <li>Fix several places where calculating ticks could overflow, because on arithmetic overflows the compiler may decide to do anything.
245: <!-- 2016-07-05 -->
246: <li>In libtls, correctly handle an EOF that occurs prior to the TLS handshake completing.
247: <li>Update to tzdata2016f.
1.8 tb 248: <li>Build <a href="https://man.openbsd.org/eeprom.8">eeprom(8)</a> on octeon.
249: <li>On octeon, add <a href="https://man.openbsd.org/openprom.4">openprom(4)</a>.
1.2 tim 250: <!-- 2016-07-04 -->
251: <li>In libcrypto, add several fixes to make OCSP work with intermediate certificates provided in the response.
1.8 tb 252: <li>In <a href="https://man.openbsd.org/ld.so.1">ld.so(1)</a>, remove unfinished prebind support.
1.2 tim 253: <li>Avoid an integer overflow of the thrsleep() timeout. This prevents a panic.
1.8 tb 254: <li>On the Quad-G5, make <a href="https://man.openbsd.org/macppc/hpb.4">hpb(4)</a> attach first when iterating PCI buses to allow <a href="https://man.openbsd.org/macppc/openpic.4">openpic(4)</a> to properly map interrupt for the devices instead of possibly dereferencing garbage.
255: <li>In <a href="https://man.openbsd.org/rtable.4">rtable(4)</a>
1.2 tim 256: <!-- 2016-07-03 -->
1.8 tb 257: <li>In <a href="https://man.openbsd.org/savecore.8">savecore(8)</a>, drop support for the undocumented second argument.
258: <li>In <a href="https://man.openbsd.org/rcs.1">rcs(1)</a>, implement the -I option.
259: <li>In <a href="https://man.openbsd.org/smptd.8">smtpd(8)</a>, add the -r option to the enqueuer for compatibility with mailx.
1.2 tim 260: <!-- 2016-07-02 -->
1.8 tb 261: <li>Introduce the "chown" <a href="https://man.openbsd.org/pledge.2">pledge(2)</a>.
1.2 tim 262: <li>Update to perl 5.20.3.
1.8 tb 263: <li>In <a href="https://man.openbsd.org/rebound.8">rebound(8)</a>, avoid a crash by checking the cache tree for collisions when inserting replies.
264: <li>In <a href="https://man.openbsd.org/macppc/aoa.4">aoa(4/macppc)</a>, support the AOAShasta soundchip found on PowerMac9,1.
1.2 tim 265: <!-- 2016-07-01 -->
1.8 tb 266: <li>In <a href="https://man.openbsd.org/ldpd.8">ldpd(8)</a>:
1.2 tim 267: <ul>
268: <li>Add GTSM support (RFC 6720).
269: <li>Decrease the initialization FSM timeout. This allows quicker recovery of a session with a neighbor.
270: <li>Improve RFC 4447 compliance.
271: </ul>
1.8 tb 272: <li>In <a href="https://man.openbsd.org/cat.1">cat(1)</a>, indent the '$' on blank lines when the -ne options are used.
1.2 tim 273: <li>Make accepted sockets inherit IP_TTL from the listening socket.
274: <li>Allow resetting the IP_TTL and IP_MINTTL sockopts.
1.8 tb 275: <li>Fix an issue where <a href="https://man.openbsd.org/syslogd.8">syslogd.8</a> would print 15 NUL bytes followed by two blank spaces before the log message for warnings generated while parsing syslog.conf.
1.2 tim 276: <li>Add acpicbkbd(4), a simple keyboard backlight driver for some Chromebooks.
277: <li>On armv7, allow booting on SolidRun's HummingBoards and CuBoxes.
278: <!-- 2016-06-30 -->
1.8 tb 279: <li>In <a href="https://man.openbsd.org/sndiod.8">sndiod(8)</a>, avoid triggering watchdog time-outs which prevent sndiod from resuming.
1.2 tim 280: <li>Update perl Time::HiRes to 1.9739.
281: <li>Bump LibreSSL to 2.4.2.
1.8 tb 282: <li>In <a href="https://man.openbsd.org/rtadvd.8">rtadvd(8)</a>, prevent a NULL dereference.
283: <li>In <a href="https://man.openbsd.org/malloc.3">malloc(3)</a>, adapt the S option: add C, and remove F and P.
284: <li>In <a href="https://man.openbsd.org/inet6.4">inet6(4)</a>, restore the automagically added /64 route on p2p interfaces in order to send traffic to link-local addresses without default route.
1.2 tim 285: <!-- 2016-06-29 -->
1.8 tb 286: <li>In <a href="https://man.openbsd.org/ssh.1">ssh(1)</a>, explicitly check for 100% completion in the progress meter. This avoids a potential floating point rounding error which could cause the progress meter to report 99% on completion.
287: <li>In <a href="https://man.openbsd.org/vi.1">vi(1)</a>, if /tmp/vi.recover doesn't exist, don't create it. Warn once that it doesn't exist, afterwards fail silently.
288: <li>In <a href="https://man.openbsd.org/smtpd.8">smtpd(8)</a>, explicitly enclose SMTP transactions between BEGIN and COMMIT/ROLLBACK filter events.
289: <li>In <a href="https://man.openbsd.org/amd64/ioapic.4">ioapic(4/amd64)</a>, don't write to the read-only RIRR bit in the IOAPIC redirection register. This may subsequently block interrupt delivery.
1.2 tim 290: <!-- 2016-06-28 -->
1.8 tb 291: <li>In <a href="https://man.openbsd.org/nc.1">nc(1)</a>, add the -M and -m options to specify the outgoing and incoming minimum TTL.
292: <li>In <a href="https://man.openbsd.org/fts_open.3">fts_open(3)</a>:
1.2 tim 293: <ul>
1.8 tb 294: <li>Do not return an error if one of the paths in argv is empty. This prevents programs using <a href="https://man.openbsd.org/fts.3">fts(3)</a> from reporting an error if one of the paths is empty.
295: <li>When the list passed is empty, return EINVAL instead of pretending to succeed. This avoids a NULL pointer dereference in a later <a href="https://man.openbsd.org/fts_read.3">fts_read(3)</a> call.
1.2 tim 296: </ul>
1.8 tb 297: <li>Add the net.inet.ip.arptimeout and net.inet.ip.arpdown <a href="https://man.openbsd.org/sysctl.8">sysctl(8)</a>'s for ARP timers.
298: <li>In <a href="https://man.openbsd.org/bgpd.8">bgpd(8)</a>, use IPV6_MINHOPCOUNT to finish implementing ttl-security for IPv6.
1.2 tim 299: <li>Update to xkeyboard-config 2.18.
1.8 tb 300: <li>In <a href="https://man.openbsd.org/pkg_info.1">pkg_info(1)</a>, implement -z that uses is-branch info to produce "complete" stem--[flavor][%branch] listing.
1.2 tim 301: <li>Add UDP unicast and multicast support for IP_MINTTL and IPV6_MINHOPCOUNT.
302: <!-- 2016-06-27 -->
1.8 tb 303: <li>On <a href="https://man.openbsd.org/amd64/vmm.4">vmm(4/amd64)</a>, fix a panic when CPUs fail to spin up for other reasons during boot.
1.2 tim 304: <li>On amd64 and i386, enable the UMIP feature if present.
1.8 tb 305: <li>Enable <a href="https://man.openbsd.org/ure.4">ure(4)</a> on the architectures where <a href="https://man.openbsd.org/url.4">url(4)</a> already is.
1.13 bentley 306: <li><strong>5.9 SECURITY FIX: Correct a problem that could result in incorrect parsing/encoding of times in OCSP messages.</strong><br>A source code patch is available for <a href="errata59.html#012_crypto">5.9</a>.
1.8 tb 307: <li>Repair <a href="https://man.openbsd.org/kill.2">kill(2)</a> on zombie processes.
308: <li>In <a href="https://man.openbsd.org/ldpd.8">ldpd(8)</a>, fix a logic bug causing the advertised transport connection preference (LDPoIPv4 or LDPoIPv6) not to be respected.
309: <li>In <a href="https://man.openbsd.org/iwn.4">iwn(4)</a>, revert the implementation of iwn_update_htprot(). We are still seeing links dropping upon HT protection updates with some iwn chips.
1.2 tim 310: <li>Restore the sys_o58_kill system call. This provides a clean transition for runtimes that make direct system calls.
311: <li>Make the IPV6_UNICAST_HOPS socket option usable for incoming TCP connections.
1.8 tb 312: <li>In <a href="https://man.openbsd.org/ip6.4">ip6(4)</a>, implement IPV6_MINHOPCOUNT support.
313: <li>In <a href="https://man.openbsd.org/doas.1">doas(1)</a>, revise environment handling. Add a "setenv" keyword to <a href="https://man.openbsd.org/doas.conf.5">doas.conf(5)</a> for manipulating the environment, the "keepenv" now means only retain everything.
314: <li>Add <a href="https://man.openbsd.org/ure.4">ure(4)</a>, a driver for Realtek RTL8152 10/100 USB Ethernet adapters.
315: <li>In <a href="https://man.openbsd.org/pkg_add.1">pkg_add(1)</a>, make scp:// work with PKG_CACHE.
1.2 tim 316: <!-- 2016-06-26 -->
1.8 tb 317: <li>In <a href="https://man.openbsd.org/bcrypt.3">bcrypt(3)</a>, increase the minimum for auto rounds to 6.
318: <li>In <a href="https://man.openbsd.org/login.conf.5">login.conf(5)</a>, use auto rounds for bcrypt (on amd64, i386, macppc and sparc64).
319: <li>Dynamically attach <a href="https://man.openbsd.org/armv7/cpsw.4">cpsw(4/armv7)</a> with the FDT.
1.2 tim 320: <li>Dynamically attach tiiic(4/armv7) using the FDT. Only match on omap4 compatible controllers such as the one in the am335x on BeagleBone Black.
321: <!-- 2016-06-25 -->
1.8 tb 322: <li>Dynamically attach <a href="https://man.openbsd.org/armv7/omdog.4">omdog(4/armv7)</a> using the FDT.
323: <li>In <a href="https://man.openbsd.org/pkg_add.1">pkg_add(1)</a>, recognize @option is-branch.
324: <li>Fix a <a href="https://man.openbsd.org/pledge.2">pledge(2)</a> issue with "<a href="https://man.openbsd.org/fdisk.8">fdisk</a> /dev/tty".
1.2 tim 325: <li>In libcrypto:
326: <ul>
327: <li>Fix the ocsp code to actually check for errors when comparing time values. Ensure that it only compared GERNERALIZEDTIME values as per RFC6960.
328: <li>Ensure that OCSP uses Generalized Time on requests as per RFC6960.
329: </ul>
330: <!-- 2016-06-24 -->
1.8 tb 331: <li>In <a href="https://man.openbsd.org/pf.4">pf(4)</a>, make nat-to usable by in rules and together with divert-to. Collisions with existing states are found and produce a "NAT proxy port allocation failed" message.
1.2 tim 332: <li>Update to nsd 4.1.10.
333: <!-- 2016-06-23 -->
1.8 tb 334: <li>Log to <a href="https://man.openbsd.org/syslogd.8">syslogd(8)</a> when the <a href="https://man.openbsd.org/dmesg.8">dmesg(8)</a> buffer overflows and messages are lost.
1.2 tim 335: <li>When pf_test() returns something but PF_PASS, set error to EACCES instead of EHOSTUNREACH. On the latter, ip_forward() can generate undesired ICMP errors.
1.8 tb 336: <li>In <a href="https://man.openbsd.org/pax.1">pax(1)</a>, allow creation of devices or fifo without -p.
1.2 tim 337: <!-- 2016-06-22 -->
1.8 tb 338: <li>In <a href="https://man.openbsd.org/sshd.8">sshd(8)</a>, fix AuthenticationMethods during configuration re-parse.
339: <li>In <a href="https://man.openbsd.org/armv7/fec.4">fec(4/armv7)</a>, fetch MAC address from FDT.
340: <li>In <a href="https://man.openbsd.org/unbound.8">unbound(8)</a>:
1.2 tim 341: <ul>
342: <li>Update to unbound 1.5.9.
343: <li>Fix a segfault in the -h option.
344: <li>Fix QNAME minimisation with various broken DNS servers, often found at CDNs.
345: </ul>
346: <li>In cn30xxgmx(4/octeon), add support for the second GMX interface on the Octeon II. This enables ports eth[0-3] on 8-port EdgeRouters.
1.8 tb 347: <li>In <a href="https://man.openbsd.org/iwm.4">iwm(4)</a>:
1.2 tim 348: <ul>
349: <li>Explicitly send multicast frames at the lowest rate, instead of picking a rate from the firmware RS table.
1.8 tb 350: <li>Pass the correct Tx rate to BPF (<a href="https://man.openbsd.org/tcpdump.8">tcpdump(8)</a>) for 5GHz.
1.2 tim 351: <li>Don't loop over CCK rates when building the Link-Quality command's RS table for 5GHz.
352: <li>Let the firmware deal with DTIM and TSF information details by itself. Fixes some association issues with 8260 hardware.
353: <li>Clear the in_assoc flag when going down.
354: </ul>
355: <!-- 2016-06-21 -->
356: <li>Add hyperv(4), the main Hyper-V nexus driver (work in progress).
357: <li>On amd64, set up the Hyper-V hypercall page and an IDT vector.
1.8 tb 358: <li>In <a href="https://man.openbsd.org/bgpd.8">bgpd(8)</a>, <a href="https://man.openbsd.org/dvmrpd.8">dvmrpd(8)</a>, <a href="https://man.openbsd.org/eigrpd.8">eigrpd(8)</a>, <a href="https://man.openbsd.org/hostapd.8">hostapd(8)</a>, <a href="https://man.openbsd.org/httpd.8">httpd(8)</a>, <a href="https://man.openbsd.org/ifstated.8">ifstated(8)</a>, <a href="https://man.openbsd.org/iked.8">iked(8)</a>, <a href="https://man.openbsd.org/ipsecctl.8">ipsecctl(8)</a>, <a href="https://man.openbsd.org/iscsictl.8">iscsictl(8)</a>, <a href="https://man.openbsd.org/ldapd.8">ldapd(8)</a>, <a href="https://man.openbsd.org/ldpd.8">ldpd(8)</a>, <a href="https://man.openbsd.org/ospf6d.8">ospf6d(8)</a>, <a href="https://man.openbsd.org/ospfd.8">ospfd(8)</a>, <a href="https://man.openbsd.org/pfctl.8">pfctl(8)</a>, <a href="https://man.openbsd.org/relayd.8">relayd(8)</a>, <a href="https://man.openbsd.org/ripd.8">ripd(8)</a>, <a href="https://man.openbsd.org/smtpd.8">smtpd(8)</a>, <a href="https://man.openbsd.org/snmpd.8">snmpd(8)</a>, <a href="https://man.openbsd.org/vmd.8">vmd(8)</a>, <a href="https://man.openbsd.org/ypldap.8">ypldap(8)</a>, do not allow whitespace in macro names, i.e. "this is" = "a variable".
359: <li>In <a href="https://man.openbsd.org/ld.so.1">ld.so(1)</a>, when handling DT_TEXTREL only set the mapping to READ+WRITE, ignore possible EXEC permission for the section, because the proper permission is set late, and there are no thread concerns in this case. This avoids W^X issues.
360: <li>In <a href="https://man.openbsd.org/efifb.4">efifb(4)</a>, add support for drawing a console on a coreboot framebuffer. This is useful on chromebooks that have no legacy vga device or, for newer chipsets, a full console and X with <a href="https://man.openbsd.org/wsfb.4">wsfb(4)</a>.
361: <li>In <a href="https://man.openbsd.org/pf.conf.5">pf.conf(5)</a>, change the parser to make af-to on pass out rules an error. This fixes a bug where a nonworking configuration could be loaded.
1.2 tim 362: <li>On m88k, add sc_cookie in sigcontext, as same as other ports.
1.8 tb 363: <li>In <a href="https://man.openbsd.org/audioctl.1">audioctl(1)</a>:
1.2 tim 364: <ul>
365: <li>Reimplement it using new API in a simper way.
366: <li>Group all encoding parameters in a single string (ex. "s16le") so that we use the same naming scheme as aucat, sndiod and many ports.
367: <li>Remove "properties" as they are not used any longer.
368: <li>Remove the list of encodings as there's no benefit in having it.
1.8 tb 369: <li>Add the -q option, to look like <a href="https://man.openbsd.org/sysctl.8">sysctl(8)</a>.
1.2 tim 370: <li>Remove the unused -a option.
371: <li>Stop using symlinks in /dev.
372: </ul>
373: <!-- 2016-06-20 -->
374: <li>In libcrypto, disable DSA_FLAG_NO_EXP_CONSTTIME, always enable constant-time behavior.
1.8 tb 375: <li>In <a href="https://man.openbsd.org/openssl.1">openssl(1)</a>, fix a bug loading the default certificate path locations. The files would only be loaded if the CAfile or CApath locations were successfully loaded first.
376: <li>In <a href="https://man.openbsd.org/ld.1">ld(1)</a>, make creation of text-relocations a fatal error by default, with -znotext to permit it and -ztext to reenable the default of forbidding it.
377: <li>In <a href="https://man.openbsd.org/bgpd.8">bgpd(8)</a>, show the "nexthop 1.2.3.4 now valid: via 192.168.0.1" message only in debug mode.
1.2 tim 378: <li>Add ds1307(4), an I2C driver for the Maxim DS1307 Real Time Clock chip.
1.8 tb 379: <li>In <a href="https://man.openbsd.org/iwm.4">iwm(4)</a>, send PHY DB commands as async commands. This change makes it work better in RAMDISK kernels.
1.2 tim 380: <!-- 2016-06-19 -->
1.8 tb 381: <li>Make <a href="https://man.openbsd.org/umb.4">umb(4)</a> also work with devices that implement both NCM 1.0 and MBIM.
1.2 tim 382: <li>Dynamically attach omap uart with FDT.
1.8 tb 383: <li>Remove the <a href="https://man.openbsd.org/OpenBSD-5.9/lockmgr.9">lockmgr(9)</a> API.
384: <li>In <a href="https://man.openbsd.org/rcctl.8">rcctl(8)</a>:
1.2 tim 385: <ul>
386: <li>Cache the result of often used functions.
387: <li>Implement "rcctl get|getdef all".
388: </ul>
389: <!-- 2016-06-18 -->
1.8 tb 390: <li>In <a href="https://man.openbsd.org/ldpd.8">ldpd(8)</a>:
1.2 tim 391: <ul>
392: <li>Fix a use-after-free.
393: <li>Fix a memory leak.
394: <li>Fix removal of dual-stack neighbors.
395: </ul>
396: <li>In cn30xxgmx(4), make the 1 Gbps SGMII settings the default to define a consistent set of parameters even if a link is down.
1.8 tb 397: <li>Add the net.inet.tcp.rootonly and net.inet.udp.rootonly <a href="https://man.openbsd.org/sysctl.8">sysctl(8)</a>'s, to mark which ports cannot be bound to by non-root users.
398: <li>In <a href="https://man.openbsd.org/iwm.4">iwm(4)</a>, plug some memory leaks in error paths.
1.2 tim 399: <!-- 2016-06-17 -->
1.8 tb 400: <li>Dynamically attach <a href="https://man.openbsd.org/armv7/ommmc.4">ommmc(4/armv7)</a> with FDT.
401: <li>In <a href="https://man.openbsd.org/ldpd.8">ldpd(8)</a>:
1.2 tim 402: <ul>
403: <li>Fix a small LIB-LFIB synchronization issue.
404: <li>Do not allow configuring the same interface for both LDP and VPLS.
405: </ul>
1.8 tb 406: <li>In <a href="https://man.openbsd.org/smtpd.8">smtpd(8)</a>, also add missing date or message-id when listening on the submit port.
1.2 tim 407: <!-- 2016-06-16 -->
1.8 tb 408: <li>In <a href="https://man.openbsd.org/sshd_config.5">sshd_config(5)</a>, ban AuthenticationMethods="" and accept AuthenticationMethods=any for the default behaviour of not requiring multiple authentication (bz#2398).
409: <li>In <a href="https://man.openbsd.org/pfctl.8">pfctl(8)</a>, allow "include" in inline anchors.
410: <li>In <a href="https://man.openbsd.org/tmux.1">tmux(1)</a>, allow a command to be specified to display-panes rather than always just selecting the pane.
411: <li>In <a href="https://man.openbsd.org/acpitoshiba.4">acpitoshiba(4)</a>, enable suspend/hibernate fn keys.
1.2 tim 412: <!-- 2016-06-15 -->
1.8 tb 413: <li>In <a href="https://man.openbsd.org/smtpd.8">smtpd(8)</a>:
1.2 tim 414: <ul>
415: <li>Rework the format of the "Received" header so that the TLS part does not violate the RFC.
416: <li>Increase number of connections a local address is allowed to establish, and decrease the delay between transactions in the same session.
417: <li>Properly reset the transaction when a filter rejects a message.
418: </ul>
1.8 tb 419: <li>Add <a href="https://man.openbsd.org/umb.4">umb(4)</a>, a driver for the Mobile Broadband Interface Model (MBIM) to provide support for USB MBIM devices.
420: <li>In <a href="https://man.openbsd.org/tmux.1">tmux(1)</a>:
1.2 tim 421: <ul>
422: <li>Add -F to list-commands.
423: <li>Automatically exit all modes after 180 seconds of inactivity and if there is pending output.
424: </ul>
425: <!-- 2016-06-14 -->
1.8 tb 426: <li>In <a href="https://man.openbsd.org/ssh.1">ssh(1)</a>, remove "POSSIBLE BREAK-IN ATTEMPT!" from log message about forward and reverse DNS not matching (part of bz#2585).
1.2 tim 427: <li>Update to tzdata2016e.
1.8 tb 428: <li>In <a href="https://man.openbsd.org/pkg_add.1">pkg_add(1)</a>, restrict %m and friends to "separate words" so they won't collide with branch specifiers.
429: <li>In <a href="https://man.openbsd.org/pppoe.4">pppoe(4)</a> and <a href="https://man.openbsd.org/sppp.4">sppp(4)</a>, don't hardcode vlan/queue priority for pppoe packets, but instead inherit it from the new "llprio" setting on the pppoe(4) interface.
430: <li>In the <a href="https://man.openbsd.org/timeout_set.9">timeout_add_*(3)</a>, prevent a round to zero.
431: <li>In <a href="https://man.openbsd.org/pkg_add.1">pkg_add(1)</a>, implement "pkgname%branch" which can be used to restrict matches to a branch matching the <a href="https://man.openbsd.org/pkgpath.7">pkgpath(7)</a>.
1.2 tim 432: <!-- 2016-06-13 -->
433: <li>Dynamically attach imxdog(4) using the FDT.
434: <li>Avoid socket splicing loops: if the same mbuf is spliced 128 times, assume that there is a loop and abort the splicing.
1.8 tb 435: <li>In <a href="https://man.openbsd.org/ldpd.8">ldpd(8)</a>:
1.2 tim 436: <ul>
437: <li>Rework the handling of Hello packets in order to improve IPv6 support.
438: <li>Implement a timeout for the session initialization FSM. This prevents neighbors stuck in the initialization FSM to linger forever as long as the associated transport connection is up.
439: <li>Implement support for the Configuration Sequence Number TLV.
440: </ul>
1.8 tb 441: <li>In <a href="https://man.openbsd.org/utvfu.4">utvfu(4)</a>, start/stop the audio bulk thread as the consumer opens/closes device.
442: <li>In <a href="https://man.openbsd.org/uvm_map.9">uvm_map(9)</a>, avoid grabbing the kernel lock for interrupt-safe pools.
443: <li>In <a href="https://man.openbsd.org/uhidev.4">uhidev(4)</a>, do not execute the callback if the device is beeing detached. This should prevent a race triggering a use-after-free.
444: <li>Correct the pledge for "<a href="https://man.openbsd.org/disklabel.8">disklabel(8)</a> -R -[fF]".
1.2 tim 445: <!-- 2016-06-12 -->
1.8 tb 446: <li>Dynamically <a href="https://man.openbsd.org/armv7/fec.4">fec(4/armv7)</a> using the FDT.
447: <li>In <a href="https://man.openbsd.org/armv7/sxie.4">sxie(4/armv7)</a> and sxiuart(4/armv7), handle both the nintr 1 (allwinner a10/cortex a8) and nintr 3 (allwinner a20/cortex a7) cases.
1.2 tim 448: <!-- 2016-06-11 -->
449: <li>On armv7, ignore everything from ":" onward in stdout-path when finding the console node. Characters after this are device-specific settings.
450: <li>Dynamically attach imxuart using the FDT.
451: <li>In exuart(4/armv7), override the address found with FDT if the board ID is c210, because the qemu smdkc210 target uses serial0 for console while the exynos4210-universal_c210 dtb specifies stdout as serial2.
452: <li>Dynamically attach sxiuart using the FDT.
1.8 tb 453: <li>Dynamically attach <a href="https://man.openbsd.org/armv7/sxie.4">sxie(4/armv7)</a> using the FDT.
1.2 tim 454: <!-- 2016-06-10 -->
1.8 tb 455: <li>In <a href="https://man.openbsd.org/ldpd.8">ldpd(8)</a>:
1.2 tim 456: <ul>
457: <li>Fix parsing of multiple optional TLVs in label and notification messages. This fixes IxANVL LDP test 15.3.
458: <li>Make it possible to parse unknown TLVs in the future.
459: <li>Send an "Unknown FEC" Notification for unexpected wildcard FECs. This fixes ANVL LDP test 15.6.
1.8 tb 460: <li>Add missing <a href="https://man.openbsd.org/ntohl.3">ntohl(3)</a> when recording a label request. This fixes the following ANVL LDP tests: 1.5 and 9.4.
1.2 tim 461: <li>Parse the whole Hello packet before processing it. This fixes a bug where we could create a dynamic targeted neighbor in response to a malformed packet.
462: </ul>
1.8 tb 463: <li>In <a href="https://man.openbsd.org/ifconfig.8">ifconfig(8)</a>, add the "llprio" parameter to set the priority of packets that do not go through <a href="https://man.openbsd.org/pf.4">pf(4)</a>.
464: <li>In <a href="https://man.openbsd.org/acpi.4">acpi(4)</a>, don't attempt to attach <a href="https://man.openbsd.org/acpitimer.4">acpitimer(4)</a> if the timer isn't present. The power management timer has been made optional in ACPI 5.0A.
465: <li>In <a href="https://man.openbsd.org/tetris.6">tetris(6)</a>, when eliding a row, clear the invisible row zero, so that no columns can become unusable during game play.
1.2 tim 466: <!-- 2016-06-09 -->
1.8 tb 467: <li>In <a href="https://man.openbsd.org/ldpd.8">ldpd(8)</a>:
1.2 tim 468: <ul>
469: <li>Send a fatal notification when the last hello adjacency is deleted. This fixes the following ANVL LDP tests: 7.17 and 23.3.
470: <li>Do not shut down the session upon receiving unknown messages. This fixes IxANVL LDP test 22.13.
471: <li>Set the Message ID for Hello messages too.
472: </ul>
1.8 tb 473: <li>Dynamically attach <a href="https://man.openbsd.org/armv7/imxesdhc.4">imxesdhc(4/armv7)</a> using the FDT.
1.2 tim 474: <li>Add SGMII support and PHY addresses for 8-port EdgeRouters. This makes plain RJ45 ports eth[4-7] usable.
475: <li>Dynamically attach i.MX6 ahci(4) using the FDT.
476: <!-- 2016-06-08 -->
1.8 tb 477: <li>In <a href="https://man.openbsd.org/ldpd.8">ldpd(8)</a>:
1.2 tim 478: <ul>
479: <li>Add one more safety check for Initialization messages. This fixes the following ANVL LDP tests: 6.5, 6.6 and 6.11.
480: <li>Change what is considered a NACK for our Initialization messages. This fixes the following ANVL LDP tests: 6.19, 6.21 and 6.22.
481: <li>Discard Hello packet if advertised transport address is of different AF. This fixes IxANVL LDP test 5.13.
482: <li>Fix quick reconnect when the transport address is changed.
483: </ul>
1.8 tb 484: <li>Remove octhci(4). It has been superseded by <a href="https://man.openbsd.org/dwctwo.4">dwctwo(4)</a>.
1.2 tim 485: <li>Do the full W^X check on hppa and mips64.
1.5 nayden 486: <li>On armv7, use FDT to find the console to initialize.
1.8 tb 487: <li>Attach <a href="https://man.openbsd.org/acpitoshiba.4">acpitoshiba(4)</a> on Libretto, Dynabook and SPA40 laptops.
1.2 tim 488: <li>Enforce W^X and map W|X segments without X permission initially. The dynamic linker will make these read-only and add back X permission after relocation processing.
1.8 tb 489: <li>In <a href="https://man.openbsd.org/ld.so.1">ld.so(1)</a>, some ELF ABIs still require a PLT that is both writable and executable. To avoid W^X violations, initially map such segments as writable and non-executable, and change the mapping to non-writable and executable after initial relocation processing.
1.2 tim 490:
1.8 tb 491: <li>In <a href="https://man.openbsd.org/ld.so.1">ld.so(1)</a>, accommodate ELF ABIs that require a PLT that is both writable and executable, without causing W^X violations.
1.2 tim 492: <!-- 2016-06-07 -->
1.8 tb 493: <li>In <a href="https://man.openbsd.org/sshd.8">sshd(8)</a>, revert src/usr.bin/ssh/kexgexs.c r1.28 ("Check min and max sizes sent by the client"). It caused "key_verify failed for server_host_key" in clients that send a DH-GEX min value less that DH_GRP_MIN.
494: <li>In <a href="https://man.openbsd.org/doas.conf.5">doas.conf(5)</a>, revert the setenv feature.
495: <li>In <a href="https://man.openbsd.org/aucat.1">aucat(1)</a>, add the -g and -p options to control device and file start position.
1.2 tim 496: <li>Add ktrace support for pollfd[] arrays.
1.8 tb 497: <li>In <a href="https://man.openbsd.org/aucat.1">aucat(1)</a>, fix a bug that causes an abort in the last samples of certain files.
1.2 tim 498: <!-- 2016-06-06 -->
1.8 tb 499: <li>In <a href="https://man.openbsd.org/kdump.1">kdump(1)</a>, avoid printing the long string format for times in the 1970s.
500: <li>Let <a href="https://man.openbsd.org/vfprintf.3">vfprintf(3)</a> return EOVERFLOW rather than ENOMEM for overflow conditions to match POSIX.
501: <li>In <a href="https://man.openbsd.org/mount_tmpfs.8">mount_tmpfs(8)</a>, allow to set wxallowed on tmpfs filesystems.
502: <li>In <a href="https://man.openbsd.org/ldpd.8">ldpd(8)</a>, speed up session establishment after config reload.
503: <li>In <a href="https://man.openbsd.org/video.1">video(1)</a>, to match the encoding type, compare against "pixelformat" instead of "description". This fixes the VIDIOC_ENUM_FMT ioctl for <a href="https://man.openbsd.org/utvfu.4">utvfu(4)</a>.
1.2 tim 504: <li>Move nd6_output()s "short-circuiting" for non-lladdr interface types earlier. This fixes some IPv6 pppoe setups.
505: <li>In libcrypto, correct a problem that prevents the DSA signing algorithm from running in constant time even if the flag BN_FLG_CONSTTIME is set.
1.8 tb 506: <li>In <a href="https://man.openbsd.org/tmux.1">tmux(1)</a>:
1.2 tim 507: <ul>
508: <li>Allow #[] in window-status-separator.
509: <li>Insert new panes after the pane being split in the list rather than always after the active pane.
510: <li>Cache selected state so that cells going from selected to unselected are not skipped.
511: </ul>
512: <!-- 2016-06-05 -->
1.8 tb 513: <li>In <a href="https://man.openbsd.org/rebound.8">rebound(8)</a>, revert r1.27 of src/usr.sbin/rebound/rebound.c that used nonblocking sockets and spinned on them, trying to preemptively avoid kevent.
514: <li>In <a href="https://man.openbsd.org/ld.so.1">ld.so(1)</a>, avoid a W^X violation when setting DT_DEBUG on mips64.
515: <li>In <a href="https://man.openbsd.org/eigrpd.8">eigrpd(8)</a>:
1.2 tim 516: <ul>
517: <li>Reset the interface uptime when it is restarted.
518: <li>Fix a potential SIGBUS on startup.
519: </ul>
1.8 tb 520: <li>In <a href="https://man.openbsd.org/netstat.1">netstat(1)</a>, display correct the counter for the "no basic MCS set" error.
521: <li>In <a href="https://man.openbsd.org/dig.1">dig(1)</a>, reduce confusion about the -p option. Parse it, but only permit port 53, and make it an error otherwise instead of a warning.
522: <li>In <a href="https://man.openbsd.org/smtpd.8">smtpd(8)</a>, deal with LMTP servers returning continuation lines.
523: <li>Add uvm_share(9) to share a memory range between two address spaces. Its primary use is to make guest VM memory accessible to the host (e.g. <a href="https://man.openbsd.org/vmd.8">vmd(8)</a>).
524: <li>In <a href="https://man.openbsd.org/armv7/ommmc.4">ommmc(4/armv7)</a>, reset the bus width back to 1-bit when resetting the host.
1.2 tim 525: <!-- 2016-06-04 -->
1.8 tb 526: <li>In <a href="https://man.openbsd.org/eigrpd.8">eigrpd(8)</a>, improve security by calling <a href="https://man.openbsd.org/exec.3">exec(3)</a> after <a href="https://man.openbsd.org/fork.2">fork(2)</a>. This way it has separate ASLR/cookies per process.
527: <li>In <a href="https://man.openbsd.org/doas.conf.5">doas.conf(5)</a>, add the "setenv" directive.
1.2 tim 528: <li>Abort a process if it trips the W^X violation check, unless it came from a filesystem with the wxallowed flag set.
1.8 tb 529: <li>In <a href="https://man.openbsd.org/video.1">video(1)</a>, add -q to only display the device properties and quit.
1.2 tim 530: <!-- 2016-06-03 -->
1.8 tb 531: <li>In <a href="https://man.openbsd.org/bgpd.conf.5">bgpd.conf(5)</a>, add the =, !=, - (range), >< (exclusive range) operators to the as-path filters (AS, peer-as, source-as, transit-as).
532: <li>In <a href="https://man.openbsd.org/iwm.4">iwm(4)</a>, fix multicast Rx by updating the MAC context again after sending multicast filter and STA settings during association. This makes ARP and inet6 autoconf work again.
1.2 tim 533: <li>Avoid decreasing uvm_maxkaddr which may cause the "address selector returned unavailable address" panic.
534: <!-- 2016-06-02 -->
1.8 tb 535: <li>In <a href="https://man.openbsd.org/ssh.1">ssh(1)</a>, allow ExitOnForwardFailure and ClearAllForwardings to be overridden when using "ssh -W" (but still default to "yes" in that case) (bz#2577).
536: <li>In <a href="https://man.openbsd.org/dhclient.8">dhclient(8)</a>, change the reboot default value to 1 second.
537: <li>On armv7, rename <a href="https://man.openbsd.org/OpenBSD-5.9/armv7/imxenet.4">imxenet(4/armv7)</a> to <a href="https://man.openbsd.org/armv7/fec.4">fec(4/armv7)</a>.
538: <li>In <a href="https://man.openbsd.org/kdump.1">kdump(1)</a>, allow printing timestamps relative to the beginning of the trace.
1.2 tim 539: <li>On amd64, fix two issues in the MSI-X code: actually read the MSI-X capability register, and correctly decode the table sizefromits contents.
1.8 tb 540: <li>In <a href="https://man.openbsd.org/gcc.1">gcc(1)</a>, fix internal compiler error with long long arithmetic.
541: <li>In <a href="https://man.openbsd.org/mmap.2">mmap(2)</a>, prevent vsize_t underflow when checking RLIMIT_DATA, which made the check ineffective when you already had more memory than your limit allowed.
542: <li>In <a href="https://man.openbsd.org/iked.8">iked(8)</a>, use the last 32-bits of the IPv6 address to dynamically assign addresses from the pool, instead of the fourth byte.
1.2 tim 543: <!-- 2016-06-01 -->
1.8 tb 544: <li>In <a href="https://man.openbsd.org/intel.4">intel(4)</a>, fix an undefined symbol crash when opting into uxa.
545: <li>In <a href="https://man.openbsd.org/aucat.1">aucat(1)</a>, set exit status to 1 if -n is used without -i and -o.
546: <li>In <a href="https://man.openbsd.org/nc.1">nc(1)</a>, support the use of service names instead of port numbers.
547: <li>Let <a href="https://man.openbsd.org/rmdir.2">rmdir(2)</a> return EINVAL intead of EBUSY when trying to remove ".". This restores POSIX compliance for <a href="https://man.openbsd.org/rmdir.2">rmdir(2)</a> and <a href="https://man.openbsd.org/rmdirat.2">rmdirat(2)</a>.
548: <li>In <a href="https://man.openbsd.org/newsyslog.conf.5">newsyslog.conf(5)</a>, increase permitted sizes for the daemon and messages logs.
549: <li>In <a href="https://man.openbsd.org/disklabel.8">disklabel(8)</a>, unbreak automatic disk allocation based on a template.
550: <li>In <a href="https://man.openbsd.org/umsm.4">umsm(4)</a>, add support for Netgear/Sierra Aircard 340U.
551: <li>In <a href="https://man.openbsd.org/uvideo.4">uvideo(4)</a>, correctly set the V4L2_BUF_FLAG_QUEUED and V4L2_BUF_FLAG_DONE buffer flags.
552: <li>In <a href="https://man.openbsd.org/iked.8">iked(8)</a>:
1.2 tim 553: <ul>
554: <li>Fix a bug in the code that replaces unspecified (e.g. 0.0.0.0) addresses by specified (e.g. 192.0.2.1) ones in IPv6 case.
555: <li>Implement a second address pool specifically for IPv6, so that clients can be given an IPv4 and IPv6 address at the same time.
556: </ul>
1.8 tb 557: <li>Remove the net.inet6.ip6.rr_prune <a href="https://man.openbsd.org/sysctl.8">sysctl(8)</a>.
558: <li>Add <a href="https://man.openbsd.org/utvfu.4">utvfu(4)</a>, a USB device driver for Audio/Video capture devices based on the Fushicai USBTV007 chip.
559: <li>Make <a href="https://man.openbsd.org/xhci.4">xhci(4)</a> usable on machines with xHCI BIOS support like most of the recent DELL.
1.2 tim 560: <!-- 2016-05-31 -->
561: <li>Add support for using SRPs without the garbage collection machinery.
1.8 tb 562: <li>In <a href="https://man.openbsd.org/sshd.8">sshd(8)</a>:
1.2 tim 563: <ul>
564: <li>Ensure that the client's proposed DH-GEX max value is at least as big as the minimum the server will accept.
565: <li>Check min and max sizes sent by the client against what we support before passing them to the monitor.
566: </ul>
567: <li>Fix ptrace PT_WRITE_D that returned EFAULT (broken in src/sys/kern/sys_process.c r1.33).
568: <li>In libexpat, fix CVE-2016-0718.
1.8 tb 569: <li>In <a href="https://man.openbsd.org/installboot.8">installboot(8)</a>, add support for armv7.
1.2 tim 570: <li>In binutils, port over the binutils fix for PR ld/3111: greatly speed up linking of object files that contain lots of dwarf2 symbols by caching symbol tables.
1.8 tb 571: <li>In <a href="https://man.openbsd.org/newfs.8">newfs(8)</a>, permit wxallowed on mfs.
1.2 tim 572: <li>In libedit, fix a crash that occurred when the history contained more than twice as many entries as the new limit.
1.8 tb 573: <li>Ensure that <a href="https://man.openbsd.org/softraid.4">softraid(4)</a> crypto is not run on the crypto taskq.
574: <li>In <a href="https://man.openbsd.org/video.1">video(1)</a>, guard against using tp_start uninitialized in case no frame was grabbed in verbose mode.
1.2 tim 575: <li>Stop creating and inserting a route entry for ARP and ND automagically.
576: <li>Flush dynamic route entries attached to an interface when its link state becomes DOWN. This should fix stale RTF_DYNAMIC routes when switching WiFi network during suspend/resume.
577: <li>Plug a route entry leak triggered under memory pressure.
578: <!-- 2016-05-30 -->
1.8 tb 579: <li>In <a href="https://man.openbsd.org/video.1">video(1)</a>, add In <a href="https://man.openbsd.org/mmap.2">mmap(2)</a> support for frame grabbing and make it default over <a href="https://man.openbsd.org/read.2">read.(2)</a> unless overriden by the -g flag.
580: <li>Identify W^X labelled binaries at <a href="https://man.openbsd.org/execve.2">execve(2)</a> time based upon the WX_OPENBSD_WXNEEDED flag set by ld -zwxneeded.
581: <li>In <a href="https://man.openbsd.org/sed.1">sed(1)</a>, fix a begin-of-word mismatch.
1.2 tim 582: <li>On amd64, include rdtsc in the rdrand callback.
583: <li>Deal with interfaces removing the VLAN header before the packet has been feed to the pseudo-interfaces input handlers.
584: <li>Update to freetype-doc 2.6.3.
585: <!-- 2016-05-29 -->
586: <li>In libc on i386, do setjmp cookies for eip, esp, and ebp.
587: <li>In libc on mips64, do setjmp cookies for gp, sp, and ra.
1.13 bentley 588: <li><strong>5.8 and 5.9 RELIABILITY FIX: Bug in the libcrypto library when parsing certain ASN.1 elements.</strong><br>A source code patch is available for <a href="errata58.html#015_crypto">5.8</a> and <a href="errata59.html#009_crypto">5.9</a>.
1.2 tim 589: <li>Update to xserver 1.18.3.
590: <li>Update to freetype 2.6.3.
1.8 tb 591: <li>In <a href="https://man.openbsd.org/macppc/smu.4">smu(4/macppc)</a>, add support for new smu-firmware fan commands.
1.2 tim 592: <li>Update to mesa 11.2.2.
593: <!-- 2016-05-28 -->
1.8 tb 594: <li>Fix a <a href="https://man.openbsd.org/pledge.2">pledge(2)</a> violation with "<a href="https://man.openbsd.org/ncheck_ffs">ncheck_ffs</a> /dev/tty".
595: <li>In <a href="https://man.openbsd.org/ld.1">ld(1)</a>, implement -z wxneeded.
596: <li>Fix a <a href="https://man.openbsd.org/pledge.2">pledge(2)</a> violation with "<a href="https://man.openbsd.org/pdisk.8">pdisk</a> /dev/tty".
597: <li>Implement the fork+exec pattern in <a href="https://man.openbsd.org/smtpd.8">smtpd(8)</a>.
598: <li>Fix <a href="https://man.openbsd.org/pledge.2">pledge(2)</a> issues in <a href="https://man.openbsd.org/growfs.8">growfs(8)</a>.
599: <li>In <a href="https://man.openbsd.org/nc.1">nc(1)</a>:
1.2 tim 600: <ul>
601: <li>Fix -verbose mode when used on a Unix domain socket.
1.8 tb 602: <li>Fix a <a href="https://man.openbsd.org/pledge.2">pledge(2)</a> violation when -P is used and a passwords needs to be supplied.
1.2 tim 603: </ul>
1.8 tb 604: <li>In <a href="https://man.openbsd.org/iwm.4">iwm(4)</a>, add support for Intel Wireless 3165 devices.
605: <li>In <a href="https://man.openbsd.org/fsirand.8">fsirand(8)</a> and <a href="https://man.openbsd.org/fsck_msdos.8">fsck_msdos(8)</a>, fix a <a href="https://man.openbsd.org/pledge.2">pledge(2)</a> violation that can be triggered by using DIOCGDINFO on a file that is not a disk device.
606: <li>In <a href="https://man.openbsd.org/disklabel.8">disklabel(8)</a>, don't crash if no filename is provided.
607: <li>In <a href="https://man.openbsd.org/iwm.4">iwm(4)</a>, add support for Intel Wireless 8260 devices.
608: <li>In <a href="https://man.openbsd.org/aucat.1">aucat(1)</a>, fix file block size rounding and ensure it's large enough to store a full audio block.
1.2 tim 609: <!-- 2016-05-27 -->
1.8 tb 610: <li>In the install script, set the "wxallowed" <a href="https://man.openbsd.org/mount.8">mount(8)</a> option for the filesystem /usr/local resides on.
611: <li>No longer allow W^X violations by default. A kernel log message is generated, and <a href="https://man.openbsd.org/mprotect.2">mprotect(2)</a> and <a href="https://man.openbsd.org/mmap.2">mmap(2)</a> return ENOTSUP. If the kern.wxabort <a href="https://man.openbsd.org/sysctl.8">sysctl(8)</a> is set, a SIGABRT occurs instead. W^X-violating programs can be permitted per FFS/NFS filesystem, using the "wxallowed" <a href="https://man.openbsd.org/mount.8">mount(8)</a> option.
612: <li>In <a href="https://man.openbsd.org/aucat.1">aucat(1)</a>, when resampling, use the exact resampling factor instead of the ratio between input and output block sizes. This change makes playback/recording rate match exactly the requested sample rate.
613: <li>In <a href="https://man.openbsd.org/httpd.8">httpd(8)</a>, return 400 (Bad Request) instead of 500 (Internal Server Error) for requests not specifying the HTTP version.
1.2 tim 614: <!-- 2016-05-26 -->
615: <li>When initializing the console, add a short delay so that baud rate changes on the console have a chance of working. This prevents the serial console on the APU from hanging when garbage is echoed to the tty.
1.8 tb 616: <li>In <a href="https://man.openbsd.org/procmap.1">procmap(1)</a>, reintroduce vnode-to-filename mapping.
617: <li>In <a href="https://man.openbsd.org/rc.8">rc(8)</a>:
1.2 tim 618: <ul>
619: <li>Skip library reordering if /usr/lib is on an NFS filesystem.
620: <li>Temporarily remount read-write if /usr/lib is on a read-only FFS filesystem.
621: </ul>
1.8 tb 622: <li>Make amaps use less kernel memory. This is achieved by grouping amap slots into chunks that are allocated on-demand by <a href="https://man.openbsd.org/pool.9">pool(9)</a>.
1.2 tim 623: <!-- 2016-05-25 -->
1.8 tb 624: <li>In <a href="https://man.openbsd.org/scp.1">scp(1)</a> and <a href="https://man.openbsd.org/sftp.1">sftp(1)</a>, prevent screwing up terminal settings by escaping bytes not forming ASCII or UTF-8 characters.
625: <li>In <a href="https://man.openbsd.org/regex.3">regex(3)</a>, fix another one-byte buffer underflow (read access only).
626: <li>Avoid a use-after-free in <a href="https://man.openbsd.org/ftp.1">ftp(1)</a>.
627: <li>In <a href="https://man.openbsd.org/iwm.4">iwm(4)</a>, update to firmware API 16 and enable RTS/CTS frame protection.
1.2 tim 628: <!-- 2016-05-24 -->
629: <li>In the armv7 install script, use efiboot when setting up the installed disk.
630: <li>On octeon, prevent gather buffer starvation on currently supported systems.
631: <!-- 2016-05-23 -->
1.8 tb 632: <li>In <a href="https://man.openbsd.org/acpitz.4">acpitz(4)</a>, disable active cooling trip points when we lack the right method to operate.
1.2 tim 633: <li>Place a cpu-dependent trap/illegal instruction over the remainder of the sigtramp page, so that it will generate a kernel fault if touched.
1.8 tb 634: <li>Remove the kern.random <a href="https://man.openbsd.org/sysctl.8">sysctl(8)</a>.
635: <li>In <a href="https://man.openbsd.org/umsm.4">umsm(4)</a>, support the Airprime/Sierra AirCard 313U and the Netgear/Sierra AirCard 770S.
636: <li>Various improvements to <a href="https://man.openbsd.org/ldpd.8">ldpd(8)</a>.
1.2 tim 637: <li>In binutils on sparc64, make the PLT read-only. This allows the kernel and ld.so to load binaries without violating W^X.
1.8 tb 638: <li>Add UTF-8 support to <a href="https://man.openbsd.org/fold.1">fold(1)</a>.
1.2 tim 639: <!-- 2016-05-22 -->
640: <li>On macppc, use 64-bit integers to fix fan scaling calculations.
641: <li>Build armv7 efiboot.
642: <li>In libc on hppa, add XOR cookies for rp and sp.
643: <li>In libc on powerpc, add XOR cookies for r1 (stack) and lr.
1.8 tb 644: <li>Avoid a uvm fault when pulling an msdos-formatted <a href="https://man.openbsd.org/umass.4">umass(4)</a> stick during mount while the USB stack is busy.
645: <li>In <a href="https://man.openbsd.org/smtpd.8">smtpd(8)</a>, start work on improving the log format.
1.2 tim 646: <!-- 2016-05-21 -->
1.8 tb 647: <li>Build <a href="https://man.openbsd.org/eeprom.8">eeprom(8)</a> on armv7.
648: <li>Implement <a href="https://man.openbsd.org/openprom.4">openprom(4)</a> for armv7.
649: <li>Make <a href="https://man.openbsd.org/eeprom.8">eeprom(8)</a> -p print sensible numbers on little-endian platforms.
650: <li>Remove the -x flag from <a href="https://man.openbsd.org/mount_msdos.8">mount_msdos(8)</a> and always assume the execute bit for readable directories subject to the mask option (-m).
1.2 tim 651: <li>Stop making files executable on msdosfs.
652: <li>Fix a logic bug in DUID generation: we want to generate DUIDs until we have one that is not a duplicate and not a zero DUID.
1.8 tb 653: <li>In <a href="https://man.openbsd.org/ntpd.8">ntpd(8)</a>, harden TLS for constraints.
654: <li>On armv7, dynamically attach <a href="https://man.openbsd.org/armv7/imxiic.4">imxiic(4/armv7)</a> and use the FDT to enumerate devices on i2c busses. The CuBox-i and Hummingboard now need to be booted with an FDT to see the RTC.
655: <li>In <a href="https://man.openbsd.org/octeon/cnmac.4">cnmac(4/octeon)</a>, make the TX path MP-safe and add some ifq oactive logic.
1.2 tim 656: <!-- 2016-05-20 -->
1.8 tb 657: <li>On armv7, resolve problems with <a href="https://man.openbsd.org/armv7/ommmc.4">ommmc(4/armv7)</a> sometimes not attaching properly with recent u-boot versions.
658: <li>On macppc, hook up <a href="https://man.openbsd.org/macppc/smu.4">smu(4/macppc)</a> to the thermal management framework.
1.2 tim 659: <li>On macppc, add a thermal management framework which controls the fan speed based on the temperature sensor values.
1.8 tb 660: <li>In the install script, log questions and answers during install/upgrade and mail them to the root user in a format usable as a response file for <a href="https://man.openbsd.org/autoinstall.8">autoinstall(8)</a>.
1.2 tim 661: <li>In libcrypto, fix a short-read bug in the previous version of asn1_d2i_read_bio.
662: <!-- 2016-05-19 -->
663: <li>On i386, split the ACPI resume trampoline into code and data pages, and protect with proper permissions.
1.8 tb 664: <li>Remove the net.inet6.ip6.v6only <a href="https://man.openbsd.org/sysctl.8">sysctl(8)</a>.
1.2 tim 665: <!-- 2016-05-18 -->
1.13 bentley 666: <li><strong>5.9 RELIABILITY FIX: Possible data corruption in <a href="https://man.openbsd.org/bnx.4">bnx(4)</a>.</strong><br>A source code patch is available for <a href="errata59.html#008_bnx">5.9</a>.
1.8 tb 667: <li>In <a href="https://man.openbsd.org/ieee80211.9">ieee80211(9)</a>, in hostap mode, don't re-use association IDs (AIDs) of nodes which are still lingering in the node cache. This could cause an AID to be assigned twice.
1.2 tim 668: <!-- 2016-05-17 -->
669: <li>Split the i386 mp hatch trampoline into code and data pages, and protect each with proper W^X policy.
670: <li>On octeon, accept cnmac as a valid rootdev from uboot (e.g. rootdev=/dev/cnmac0).
1.8 tb 671: <li>Rework the fix to prevent a kernel crash when <a href="https://man.openbsd.org/sendsyslog.2">sendsyslog(2)</a> is called with LOG_CONS and the console device has not been intialized yet.
672: <li>In <a href="https://man.openbsd.org/regex.3">regex(3)</a>, fix a one-byte buffer underflow (read access only).
1.2 tim 673: <li>Change the random event buffer from a queue to an endless ring so that no events are dropped when the queue is full. They are instead mixed into previous events.
1.8 tb 674: <li>Fix "<a href="https://man.openbsd.org/skeyinit.1">skeyinit</a> username" run as root.
1.13 bentley 675: <li><strong>5.8 and 5.9 SECURITY FIX: Insufficient checks in the <a href="https://man.openbsd.org/uvideo.4">uvideo(4)</a> V4L2 <a href="https://man.openbsd.org/ioctl.2">ioctl(2)</a> handling leak kernel memory contents to a local user.</strong><br>A source code patch is available for <a href="errata58.html#014_uvideo">5.8</a> and <a href="errata59.html#007_uvideo">5.9</a>.
1.8 tb 676: <li>Completely skip link-layer address resolution and NUD on <a href="https://man.openbsd.org/gif.4">gif(4)</a>.
1.2 tim 677: <!-- 2016-05-16 -->
1.8 tb 678: <li>In <a href="https://man.openbsd.org/uvideo.4">uvideo(4)</a>, plug some holes in the V4L2 <a href="https://man.openbsd.org/ioctl.2">ioctl(2)</a> interfaces that would leak kernel memory to a local user. Also fix a potential integer overflow issue.
679: <li>In <a href="https://man.openbsd.org/httpd.8">httpd(8)</a>, fix some file-descriptor leaks.
1.2 tim 680: <li>Enable the pcf8523 RTC on Hummingboard and CuBox-i.
1.13 bentley 681: <li><strong>5.9 RELIABILITY FIX: Issues in <a href="https://man.openbsd.org/smtpd.8">smtpd(8)</a>.</strong><br>A source code patch is available for <a href="errata59.html#006_smtpd">5.9</a>.
1.8 tb 682: <li>In <a href="https://man.openbsd.org/smtpd.8">smtpd(8)</a>:
1.2 tim 683: <ul>
684: <li>Fix a logic issue in the SMTP state machine that can lead to an invalid state and result in a crash.
685: <li>Plug a file-pointer leak that can lead to resource exhaustion and result in a crash.
686: </ul>
687: <li>Have POSTREAD flush the D-cache. This eliminates random data corruption on the CuBox-i4Pro.
1.8 tb 688: <li>Add <a href="https://man.openbsd.org/pfcrtc.4">pfcrtc(4)</a>, a driver for the NXP PCF8523 Real Time Clock.
1.2 tim 689: <!-- 2016-05-15 -->
1.8 tb 690: <li>In <a href="https://man.openbsd.org/xge.4">xge(4)</a>, enable reception and transmission of Jumbo frames.
1.2 tim 691: <!-- 2016-05-14 -->
1.8 tb 692: <li>In <a href="https://man.openbsd.org/macppc/smu.4">smu(4/macppc)</a>, add support for pwm fans.
1.2 tim 693: <li>Initial stab at an EFI bootloader for armv7.
1.8 tb 694: <li>In <a href="https://man.openbsd.org/sysmerge.8">sysmerge(8)</a>, no longer handle /etc/example files.
1.2 tim 695: <!-- 2016-05-12 -->
1.8 tb 696: <li>In <a href="https://man.openbsd.org/install.1">install(1)</a>, add -F to call <a href="https://man.openbsd.org/fsync.2">fsync(2)</a> on the installed file right before closing it.
697: <li>In <a href="https://man.openbsd.org/tmux.1">tmux(1)</a>, add -q to source-file to suppress errors about nonexistent files.
1.2 tim 698: <!-- 2016-05-11 -->
1.8 tb 699: <li>In <a href="https://man.openbsd.org/eigrpd.8">eigrpd(8)</a>, disable EIGRPv6 on an interface when it loses its link-local address.
1.2 tim 700: <li>Remove the hppa64 port.
701: <li>Allow zaudio(4) to start when large blocks are requested.
702: <li>Make the mips64 pmap MP-safe.
1.8 tb 703: <li>In <a href="https://man.openbsd.org/top.1">top(1)</a>, allow to filter process arguments if they are being displayed.
1.2 tim 704: <!-- 2016-05-10 -->
1.8 tb 705: <li>Avoid a kernel crash when <a href="https://man.openbsd.org/sendsyslog.2">sendsyslog(2)</a> is called with LOG_CONS and the console device has not been intialized yet.
706: <li>Do SROP mitigation. sendsig() stores a cookie inside the sigcontext. <a href="https://man.openbsd.org/sigreturn.2">sigreturn(2)</a> checks the syscall entry was from the exact PC addr in the (per-process ASLR) sigtramp, verifies the cookie, and clears it to prevent sigcontext reuse
1.2 tim 707: <li>Try harder to avoid using random data on the disk as an inode, because FFS2 does lazy inode initialization. This avoids crashes when translating a bogus filehandle to a vnode.
708: <!-- 2016-05-09 -->
709: <li>Update to libexpat 2.1.1.
1.8 tb 710: <li>In <a href="https://man.openbsd.org/rcs.1">rcs(1)</a>, implement Mdocdate keyword substitution.
1.2 tim 711: <!-- 2016-05-08 -->
712: <li>In imxesdhc(4), add DMA support. It uses ADMA2 "Internal DMA" that is compatible with the SD Host Controller standard.
1.8 tb 713: <li>In <a href="https://man.openbsd.org/chvgpio.4">chvgpio(4)</a>, add support for level, active low gpio interrupts.
714: <li>In <a href="https://man.openbsd.org/wall.1">wall(1)</a>, enable UTF-8 detection in wall(1). This deliberately ignores UTF-8 characters and replaces them with a single question mark.
715: <li>In <a href="https://man.openbsd.org/bytgpio.4">bytgpio(4)</a> and <a href="https://man.openbsd.org/chvgpio.4">chvgpio(4)</a>, add support for writing gpio pins.
716: <li>In <a href="https://man.openbsd.org/ifconfig.8">ifconfig(8)</a>, stop printing the MPSAFE interface flag. It is a kernel-only hint and printing it only creates confusion.
1.2 tim 717: <!-- 2016-05-07 -->
1.8 tb 718: <li>Add <a href="https://man.openbsd.org/chvgpio.4">chvgpio(4)</a>, a driver for the GPIO controllers found on Intel's Cherry View SoC.
1.2 tim 719: <li>On powerpc, flush page (through the direct map) before mapping it into AGP. This fixes artifacts seen in X on some G5 machines.
1.8 tb 720: <li>In the <a href="https://man.openbsd.org/getpwnam.3">getpwnam(3)</a> family of functions, stop opening the shadow database by default.
721: <li>In <a href="https://man.openbsd.org/tcpdump.8">tcpdump(8)</a>, print RA Route Information prefix, preference and lifetime.
722: <li>Use a Thread Information Block in both single and multi-threaded programs. Make libpthread <a href="https://man.openbsd.org/dlopen.3">dlopen(3)</a>'able.
723: <li>In <a href="https://man.openbsd.org/bytgpio.4">bytgpio(4)</a>, implement ACPI 5.0 GeneralPurposeIo OpRegion support.
1.2 tim 724: <li>Import Term::ReadKey 2.33.
725: <!-- 2016-05-06 -->
726: <li>In imxesdhc(4), add support for changing the bus width and set the 4-bit mode capability.
727: <li>Make the imxesdhc(4) work on the cubox-i.
728: <li>Revert the default cachepercent to 20.
1.8 tb 729: <li>In <a href="https://man.openbsd.org/tcpdump.8">tcpdump(8)</a>, print the router preference contained in RAs in verbose mode.
1.2 tim 730: <!-- 2016-05-05 -->
731: <li>Fix efiboot not to hang with a disk whose block size is less than 512.
1.8 tb 732: <li>Fix packet corruption in <a href="https://man.openbsd.org/bnx.4">bnx(4)</a>.
1.2 tim 733: <li>Add Dual Data Rate support for eMMC at 52 MHz.
1.8 tb 734: <li>In <a href="https://man.openbsd.org/gcc.1">gcc(1)</a>, add support for named initializers for anonymous structs/unions. This is a C11 feature that is starting to get used in places such as Mesa.
735: <li>In <a href="https://man.openbsd.org/midiplay.1">midiplay(1)</a>, fix one of the reads past the end of the buffer.
1.2 tim 736: <!-- 2016-05-04 -->
1.8 tb 737: <li>In <a href="https://man.openbsd.org/acpithinkpad.4">acpithinkpad(4)</a>, avoid a division by zero in <a href="https://man.openbsd.org/wsconsctl.8">wsconsctl(8)</a>.
738: <li>In <a href="https://man.openbsd.org/dc.4">dc(4)</a>, cope with the broken DMA engine of the Davicom DM9102 found on some Sun sparc64 machines.
1.2 tim 739: <li>On sparc64, avoid having to panic on hardware with a broken DMA engine that attempts to read beyond the end of the buffer that was programmed.
740: <li>Add initial support for MSI-X, only on amd64 for now.
1.8 tb 741: <li>In <a href="https://man.openbsd.org/ssh_config.5">ssh_config(5)</a>, add IdentityAgent.
742: <li>In <a href="https://man.openbsd.org/sdmmc.4">sdmmc(4)</a>, add high-speed support for SD cards. This causes serious improvement in the read speeds.
743: <li>In <a href="https://man.openbsd.org/bytgpio.4">bytgpio(4)</a>, don't mask pins configured as direct IRQ. This nbreaks the keyboard on the Asus x205ta.
1.2 tim 744: <!-- 2016-05-03 -->
1.8 tb 745: <li>In <a href="https://man.openbsd.org/ssh.1">ssh(1)</a>, fix overriding of StreamLocalBindMask and StreamLocalBindUnlink in Match blocks.
1.2 tim 746: <li>Stop using a soft-interrupt context to process incoming network packets. Use a new task that runs holding the KERNEL_LOCK to execute MP-unsafe code.
1.13 bentley 747: <li><strong>5.8 and 5.9 SECURITY FIX: Issues in the libcrypto library (CVE-2016-2108, CVE-2016-2107, CVE-2016-2105, CVE-2016-2106 and CVE-2016-2109). Refer to the <a href="https://www.openssl.org/news/secadv/20160503.txt">advisory</a>.</strong><br>A source code patch is available for <a href="errata58.html#013_crypto">5.8</a> and <a href="errata59.html#005_crypto">5.9</a>.
1.2 tim 748: <li>In libssl, fix several issues: missing padding check in aesni functions, overflow in evp encode functions, and use of invalid negative asn.1 types.
1.8 tb 749: <li>Reduce the number of lookups to 1 for non-multicast traffic when <a href="https://man.openbsd.org/pf.4">pf(4)</a> is disabled.
1.2 tim 750: <li>In ssh, implement IUTF8 as per draft-sgtatham-secsh-iutf8-00.
751: <!-- 2016-05-02 -->
1.8 tb 752: <li>In <a href="https://man.openbsd.org/telnet.1">telnet(1)</a>, don't check if the hostname is a fully qualified domain. This prevents <a href="https://man.openbsd.org/pledge.2">pledge(2)</a> "dns" issues.
1.2 tim 753: <li>In tmpfs, fix some issues regarding timestamp updating.
754: <li>In ssh:
755: <ul>
756: <li>Support SHA256 and SHA512 RSA signatures in certificates.
757: <li>Add support for additional fixed DH groups from draft-ietf-curdle-ssh-kex-sha2-03.
758: </ul>
759: <li>On arm and armv7, rework mainbus and implement simplebus to be able to span a tree-like topology based on device tree information.
760: <!-- 2016-05-01 -->
1.8 tb 761: <li>In <a href="https://man.openbsd.org/armv7/ommmc.4">ommmc(4/armv7)</a>, add support for changing the bus width to ommmc and set the 4-bit mode capability.
762: <li>Add bus width switching support for MMC. Enable 8-bit bus support on <a href="https://man.openbsd.org/sdhc.4">sdhc(4)</a> controllers that support it. This makes the raw transfer rate of the eMMC on the Lenovo Ideacentre Stick 300 go up to 40 MB/s.
763: <li>In <a href="https://man.openbsd.org/sdhc.4">sdhc(4)</a>, fix the DMA issues on Bay Trail.
764: <li>Add support for changing the bus width to the <a href="https://man.openbsd.org/sdmmc.4">sdmmc(4)</a> subsystem and the <a href="https://man.openbsd.org/sdhc.4">sdhc(4)</a> controller. Use this to switch SD cards to a 4-bit bus if they support it.
765: <li>In <a href="https://man.openbsd.org/sppp.4">sppp(4)</a>, fix a bug causing breakage with LCP echoes.
1.13 bentley 766: <li><strong>5.9 RELIABILITY FIX: A problem in m_dup_pkt() can result in kernel crashes with <a href="https://man.openbsd.org/carp.4">carp(4)</a>.</strong><br>A source code patch is available for <a href="errata59.html#004_mbuf">5.9</a>.
1.2 tim 767: <!-- 2016-04-30 -->
1.8 tb 768: <li>Convert <a href="https://man.openbsd.org/ldapd.8">ldapd(8)</a> to use the libtls API.
769: <li>In <a href="https://man.openbsd.org/file.1">file(1)</a>, fix the default type to work properly.
770: <li>In <a href="https://man.openbsd.org/bytgpio.4">bytgpio(4)</a>, mask all gpio interrupts when attaching. This fixes an interrupt storm on the Lenovo Ideacentre Stick 300.
771: <li>In <a href="https://man.openbsd.org/sdhc.4">sdhc(4)</a> and <a href="https://man.openbsd.org/sdmmc.4">sdmmc(4)</a>:
1.2 tim 772: <ul>
773: <li>Implement DMA support (only ADMA2 is supported). There is a remaining issue with simultaneous use of eMMC and external SD card on (some) Intel Bay Trail hardware.
774: <li>Enable the ADMA error interrupt.
775: <li>Enable high speed timing for bus clock frequencies over 26MHz and advertise support for it.
776: </ul>
777: <!-- 2016-04-29 -->
1.8 tb 778: <li>In <a href="https://man.openbsd.org/tmux.1">tmux(1)</a>, add options to include status text in the pane borders.
1.2 tim 779: <li>Fix several bugs due to uninitialized struct nameidata's.
1.8 tb 780: <li>In <a href="https://man.openbsd.org/softraid.4">softraid(4)</a>, panic when attempting to execute a scsi command with no discipline defined.
781: <li>Fix a bug causing <a href="https://man.openbsd.org/gzip.1">gzip(1)</a> to think the resulting file was got larger during compression.
782: <li>In <a href="https://man.openbsd.org/daily.8">daily(8)</a>, no longer call <a href="https://man.openbsd.org/mailq.8">mailq(8)</a>.
783: <li>In <a href="https://man.openbsd.org/sysmerge.8">sysmerge(8)</a>, in interactive mode, check syntax of several important files after merging to give some protection against bad merges.
1.2 tim 784: <li>Don't allow the routing table of a bound socket to be changed. This is not intended and will behave unexpectedly if the address is already used in another domain.
1.8 tb 785: <li>In <a href="https://man.openbsd.org/tmux.1">tmux(1)</a>, fix keys parsing again to correctly accept Unicode when not prefixed with Escape.
786: <li>In <a href="https://man.openbsd.org/smtpd.8">smtpd(8)</a>, fix "smtpctl show queue" reporting "invalid" envelope state.
787: <li>In <a href="https://man.openbsd.org/ssh.1">ssh(1)</a>, close the ControlPersist background process stderr when the daemon is not in debug mode or when logging to a file or syslog (bz#1988).
1.2 tim 788: <!-- 2016-04-28 -->
1.8 tb 789: <li>In <a href="https://man.openbsd.org/MAKEDEV.8">MAKEDEV(8)</a>, replace /dev/bpf[0-9] with /dev/bpf and /dev/bpf0.
790: <li>In <a href="https://man.openbsd.org/dhclient.8">dhclient(8)</a>, if the attempt to broadcast a DHCPDISCOVER packet returns EAFNOSUPPORT, just print an error message and exit.
791: <li>In <a href="https://man.openbsd.org/i386/installboot.8">installboot(8/i386)</a>, plug a couple of leaks of input buffers.
1.2 tim 792: <li>In libssl, allow ^C to break operations such as reading passwords.
793: <li>In libssl, implement the IETF ChaCha20-Poly1305 cipher suites. The old Google implementation continues to be supported, but the ChaCha20-Poly1305 cipher suites names now refer to the ciphers from draft-ietf-tls-chacha20-poly1305-04.
1.8 tb 794: <li>In libssl, rename <a href="https://man.openbsd.org/EVP_aead_chacha20_poly1305.3">EVP_aead_chacha20_poly1305(3)</a> to EVP_aead_chacha20_poly1305_old() and replace it with <a href="https://man.openbsd.org/EVP_aead_chacha20_poly1305_ietf.3">EVP_aead_chacha20_poly1305_ietf(3)</a>. The IETF version will become the standard version.
1.2 tim 795: <li>In ieee80211, rework handling of frames which fall beyond the block ack window.
1.8 tb 796: <li>In <a href="https://man.openbsd.org/netstat.1">netstat(1)</a>, display block ack window slide counter.
797: <li>In <a href="https://man.openbsd.org/compress.1">compress(1)</a>, account for multiple streams in "gzip -l" output.
798: <li>In <a href="https://man.openbsd.org/httpd.8">httpd(8)</a>, simplify TLS configuration handling and prevent a memory leak when there are multiple certificates specified for the same server.
799: <li>In <a href="https://man.openbsd.org/ifconfig.8">ifconfig(8)</a>, show 11n HT rate in "ifconfig scan" output.
800: <li>Unbreak <a href="https://man.openbsd.org/fsck_ext2fs.8">fsck_ext2fs(8)</a>.
1.2 tim 801: <li>In libedit, initialize the search buffer to avoid a potential read buffer overrun.
802: <!-- 2016-04-27 -->
1.8 tb 803: <li>In <a href="https://man.openbsd.org/xge.4">xge(4)</a>, correctly set up byteswapping so this chip works on big-endian architectures.
804: <li>In <a href="https://man.openbsd.org/tmux.1">tmux(1)</a>, apply backspace check after working out the actual key, so that M-BSpace can work.
805: <li>In <a href="https://man.openbsd.org/xge.4">xge(4)</a>, align rx buffers so ip packets will be aligned correctly for the stack.
806: <li>In <a href="https://man.openbsd.org/ksh.1">ksh(1)</a>, do not handle echo "`echo \"hi\"`" in POSIX mode differently than in traditional mode. This aligns ksh's behavior with bash and FreeBSD sh.
807: <li>In <a href="https://man.openbsd.org/netstat.1">netstat(1)</a>, make -W show the new 802.11n counters.
1.2 tim 808: <!-- 2016-04-26 -->
1.8 tb 809: <li>In <a href="https://man.openbsd.org/netstat.1">netstat(1)</a>, print tcps_noport with "netstat -s" like it is already done for udp.
810: <li>In <a href="https://man.openbsd.org/tmux.1">tmux(1)</a>, fix problems with meta and Unicode keys.
811: <li>In <a href="https://man.openbsd.org/rcctl.8">rcctl(8)</a>, implement daemon_rtable support.
812: <li>In <a href="https://man.openbsd.org/rc.subr.8">rc.subr(8)</a>, introduce <a href="https://man.openbsd.org/rtable.4">rtable(4)</a> support to <a href="https://man.openbsd.org/rc.subr.8">rc.subr(8)</a>.
813: <li>In <a href="https://man.openbsd.org/readelf.1">readelf(1)</a>, show octeon in "readelf -h" output.
814: <li>In <a href="https://man.openbsd.org/rc.8">rc(8)</a>, re-link (only the newest) libc.so on startup, placing the objects in a random order.
815: <li>In <a href="https://man.openbsd.org/softraid.4">softraid(4)</a>, don't attempt a rebuild using a hot spare with a sector size greater than the sector size of the softraid volume.
816: <li>Use <a href="https://man.openbsd.org/pledge.2">pledge(2)</a> in <a href="https://man.openbsd.org/groupadd.8">groupadd(8)</a>, <a href="https://man.openbsd.org/groupmod.8">groupmod(8)</a>, <a href="https://man.openbsd.org/groupdel.8">groupdel(8)</a>, <a href="https://man.openbsd.org/groupinfo.8">groupinfo(8)</a>, <a href="https://man.openbsd.org/user.8">user(8)</a>, <a href="https://man.openbsd.org/useradd.8">useradd(8)</a>, <a href="https://man.openbsd.org/usermod.8">usermod(8)</a>, <a href="https://man.openbsd.org/userdel.8">userdel(8)</a> and <a href="https://man.openbsd.org/userinfo.8">userinfo(8)</a>.
817: <li>In <a href="https://man.openbsd.org/sysmerge.8">sysmerge(8)</a>, be consistent in batch and interactive mode: ensure sysmerge can be re-run if a file is left for later.
818: <li>In <a href="https://man.openbsd.org/acpitz.4">acpitz(4)</a>, if the temperature is below the active cooling level for a tz, turn the fan off regardless of what state it is currently in.
1.2 tim 819: <!-- 2016-04-25 -->
1.8 tb 820: <li>In <a href="https://man.openbsd.org/rtsx.4">rtsx(4)</a>, match on RTS522A found in 2016 ThinkPads.
1.2 tim 821: <li>Remove systrace support.
1.8 tb 822: <li>In the install script, when upgrading automatically run <a href="https://man.openbsd.org/sysmerge.8">sysmerge(8)</a> in batch mode before <a href="https://man.openbsd.org/fw_update.1">fw_update(1)</a>.
823: <li>On macppc and socppc, don't check if the CPU is inside the idle loop when entering <a href="https://man.openbsd.org/ddb.4">ddb(4)</a>. This allows putting breakpoints in interrupt context and have them work if an interrupt fires while the CPU is idle.
1.2 tim 824: <!-- 2016-04-24 -->
1.8 tb 825: <li>In <a href="https://man.openbsd.org/httpd.8">httpd(8)</a>, always pass the QUERY_STRING variable to the FastCGI handler.
826: <li>In <a href="https://man.openbsd.org/Xserver.1">Xserver(1)</a>, fall back to /dev/ttyC0 when the console device is not a <a href="https://man.openbsd.org/wsdisplay.4">wsdisplay(4)</a>.
827: <li>In <a href="https://man.openbsd.org/ichiic.4">ichiic(4)</a>, match on Intel 100 Series LP.
828: <li>In <a href="https://man.openbsd.org/puc.4">puc(4)</a>, match on Intel 100 series and 100 series LP PCH.
829: <li>In <a href="https://man.openbsd.org/azalia.4">azalia(4)</a>, enable snooping on Intel 100 Series LP HDA.
1.2 tim 830: <!-- 2016-04-23 -->
831: <li>Fix an issue where the 32-bit UEFI bootloader (BOOTIA32.EFI) would not detect a GPT leading to a failure to boot.
832: <li>On mips64, sync dcaches and invalidate icaches of all active CPUs of a pmap when making a page executable. This prevents some icache inconsistencies that caused process crashes on multiprocessor IP27/IP30 systems under load.
1.8 tb 833: <li>In <a href="https://man.openbsd.org/dwiic.4">dwiic(4)</a>, match on Cherry Trail.
1.2 tim 834: <!-- 2016-04-22 -->
1.8 tb 835: <li>In <a href="https://man.openbsd.org/synaptics.4">synaptics(4)</a>, don't stop scrolling when handling TOUCH_RESET events.
836: <li>In <a href="https://man.openbsd.org/asmc.4">asmc(4)</a>, don't try to probe light sensors for machines with none available.
1.2 tim 837: <!-- 2016-04-21 -->
1.8 tb 838: <li>In <a href="https://man.openbsd.org/mpbios.4">mpbios(4)</a>, don't attach if "default configuration" mode is detected during probe rather than panicking.
839: <li>In <a href="https://man.openbsd.org/smtpd.8">smtpd(8)</a>, use automatic DH parameters instead of fixed ones. Also disable DHE by default since it is computationally expensive and a potential DoS vector.
1.2 tim 840: <!-- 2016-04-20 -->
1.8 tb 841: <li>In <a href="https://man.openbsd.org/perl.1">perl(1)</a>, apply fix for perl bug 123562 (CVE-2015-8853).
842: <li>In <a href="https://man.openbsd.org/changelist.5">changelist(5)</a>, don't watch <a href="https://man.openbsd.org/unbound.8">unbound(8)</a>'s DNSSEC root zone key, to reduce <a href="https://man.openbsd.org/security.8">security(8)</a> spam.
843: <li>In <a href="https://man.openbsd.org/re.4">re(4)</a>, if RTL8111E on PC Engines APU is detected, configure NIC LEDs to display link (instead of the default of a normally-off light for network activity and nothing for ethernet link).
844: <li>In <a href="https://man.openbsd.org/changelist.5">changelist(5)</a>, add the <a href="https://man.openbsd.org/iked.8">iked(8)</a> default key.
1.2 tim 845: <!-- 2016-04-19 -->
1.8 tb 846: <li>Add the <a href="https://man.openbsd.org/editline.7">editline(7)</a> manual.
847: <li>Make setting a <a href="https://man.openbsd.org/vlan.4">vlan(4)</a> interface's lladdr more likely to work.
1.2 tim 848: <li>Use the correct byte-order when checking against baddynamic ports.
1.8 tb 849: <li>In <a href="https://man.openbsd.org/xen.4">xen(4)</a> and <a href="https://man.openbsd.org/xnf.4">xnf(4)</a>, allow to grant memory access to domains other than dom0. This fixes running OpenBSD under QubesOS.
850: <li>In <a href="https://man.openbsd.org/pod2man.1">pod2man(1)</a>, enable UTF-8 output by default and provide a --no-utf8 command line option to disable it.
1.2 tim 851: <!-- 2016-04-18 -->
1.8 tb 852: <li>In <a href="https://man.openbsd.org/pax.1">pax(1)</a>, skip empty lines in the input read for "tar -T", "cpio -E", and <a href="https://man.openbsd.org/cpio.1">cpio(1)</a> with stdin.
1.2 tim 853: <li>On amd64, make the aesni crypto implementation MP-safe.
854: <li>Add a mechanism for dispatching MP-safe crypto operations.
855: <li>Update to tzdata2016d from from ftp.iana.org.
856: <li>Bump the default of cachepercent to 90 to see if we can find problems before we try to remove it entirely.
1.8 tb 857: <li>In <a href="https://man.openbsd.org/pppoe.4">pppoe(4)</a>, remove a hack that prevented changing pppoe params at runtime.
1.2 tim 858: <!-- 2016-04-17 -->
1.17 sthen 859: <li>In <a href="https://man.openbsd.org/nvme.4">nvme(4)</a>, fix a bug causing memory corruption seen on amd64 (and masked on sparc64).
1.2 tim 860: <!-- 2016-04-16 -->
1.8 tb 861: <li>In <a href="https://man.openbsd.org/rbootd.8">rbootd(8)</a>, don't <a href="https://man.openbsd.org/bcopy.3">bcopy(3)</a> non-exchangeable structs. This should unbreak connection timeouts.
862: <li>Remove am_maxslot from amap and remove the corresponding output from <a href="https://man.openbsd.org/procmap.1">procmap(1)</a>.
863: <li>In <a href="https://man.openbsd.org/inteldrm.4">inteldrm(4)</a>, make the GMBUS code work on Intel ValleyView.
1.2 tim 864: <!-- 2016-04-15 -->
1.8 tb 865: <li>In <a href="https://man.openbsd.org/rm.1">rm(1)</a>, don't allow removal of "/".
866: <li>In <a href="https://man.openbsd.org/eigrpd.8">eigrpd(8)</a>:
1.2 tim 867: <ul>
868: <li>Fix a corner case in Feasible Condition check.
869: <li>Fix a segfault when reloading the config multiple times.
870: <li>Check for subnet overlap between the configured summary-addresses.
871: <li>Various other fixes and cleanups.
872: </ul>
873: <!-- 2016-04-14 -->
1.8 tb 874: <li>In <a href="https://man.openbsd.org/vlan.4">vlan(4)</a>, rework configuration and mark it as MP-safe.
875: <li>Enable <a href="https://man.openbsd.org/nvme.4">nvme(4)</a> on amd64 and sparc64.
876: <li>In <a href="https://man.openbsd.org/ssh_config.5">ssh_config(5)</a>, implement the "Include" directive.
877: <li>In <a href="https://man.openbsd.org/mandoc.1">mandoc(1)</a>, fix a process group race sometimes causing a spawned <a href="https://man.openbsd.org/less.1">less(1)</a> to complain "Stopped (tty output)".
878: <li>In <a href="https://man.openbsd.org/mg.1">mg(1)</a>, add "sentence-end-double-space".
1.2 tim 879: <li>On octeon:
880: <ul>
881: <li>Enable UART FIFOs.
882: <li>Enable write buffering with write merging. This improves overall performance notably.
883: </ul>
1.8 tb 884: <li>Enable device cloning for <a href="https://man.openbsd.org/bpf.4">bpf(4)</a>.
885: <li>Re-enable <a href="https://man.openbsd.org/pckbd.4">pckbd(4)</a> on resume. This fixes problems on (at least) various HP laptops that previously had no working keyboard after resuming from <a href="https://man.openbsd.org/zzz.8">zzz(8)</a>.
886: <li>On amd64 and i386, use a CPUID function to determine presence of general purpose architectural performance counters. This fixes a panic seen on some hypervisors when <a href="https://man.openbsd.org/pctr.1">pctr(1)</a> is used when the hypervisor masks out the counters.
1.2 tim 887: <!-- 2016-04-13 -->
1.8 tb 888: <li>Various improvements to <a href="https://man.openbsd.org/nvme.4">nvme(4)</a>.
889: <li>In libssl, use the correct IV and counter when decrypting the ciphertext for <a href="https://man.openbsd.org/EVP_aead_chacha20_poly1305_ietf.3">EVP_aead_chacha20_poly1305_ietf(3)</a>.
890: <li>In <a href="https://man.openbsd.org/man.1">man(1)</a>, give manuals in purely numerical sections priority over manuals of the same name in sections with an alphabetical suffix (e.g. 3p).
1.2 tim 891: <!-- 2016-04-12 -->
1.8 tb 892: <li>In <a href="https://man.openbsd.org/awk.1">awk(1)</a>, fix a crash with empty assignments, (e.g. "BEGIN {i=$1}").
893: <li>In <a href="https://man.openbsd.org/pstat.8">pstat(8)</a>, fix a crash when the -T flag is specified.
894: <li>In <a href="https://man.openbsd.org/nvme.4">nvme(4)</a>, read chip capabilities before operating on it. This ensures the proper timeout for chip enables/disables are obtained.
895: <li>In <a href="https://man.openbsd.org/mg.1">mg(1)</a>, stop putting a space at the end of a paragraph when using fill-paragraph.
896: <li>Prevent a kernel panic by providing a dummy function for <a href="https://man.openbsd.org/bridge.4">bridge(4)</a>'s if_output.
1.2 tim 897: <!-- 2016-04-10 -->
1.8 tb 898: <li>On sparc64, (temporarily) disable <a href="https://man.openbsd.org/ahc.4">ahc(4)</a> so that GENERIC.MP kernels don't overflow the 8M reserved for .text and .rodata sections.
899: <li>In <a href="https://man.openbsd.org/rev.1">rev(1)</a>, enable UTF-8 support.
1.2 tim 900: <!-- 2016-04-09 -->
901: <li>In libedit, reset the terminal to its initial state before exiting a program that is using libedit.
902: <!-- 2016-04-08 -->
1.8 tb 903: <li>In <a href="https://man.openbsd.org/bgpd.8">bgpd(8)</a>, don't exit when receiving an RTM_CHANGE message for an RTF_MPATH route that is actually on an interface.
1.2 tim 904: <!-- 2016-04-07 -->
1.8 tb 905: <li>In <a href="https://man.openbsd.org/pf.4">pf(4)</a>, don't panic if an <a href="https://man.openbsd.org/mbuf.9">mbuf(9)</a> already has a statekey. This should help finding the remaining corner cases of packets looped back in the stack.
906: <li>In <a href="https://man.openbsd.org/vmd.8">vmd(8)</a>, place a BOOTARG_END section at the end of the boot arguments list pushed to the VM during boot. This makes it possible to install and run an OpenBSD i386 guest VM using <a href="https://man.openbsd.org/vmm.4">vmm(4)</a>.
907: <li>In libsndio, switch to the "new" <a href="https://man.openbsd.org/audio.4">audio(4)</a> API.
1.2 tim 908: <!-- 2016-04-06 -->
1.8 tb 909: <li>In <a href="https://man.openbsd.org/ssh.1">ssh(1)</a>, don't record duplicate LocalForward and RemoteForward entries (bz#2562).
1.2 tim 910: <!-- 2016-04-05 -->
1.8 tb 911: <li>In <a href="https://man.openbsd.org/bgplg.8">bgplg(8)</a>, use SERVER_NAME for the hostname displayed on the page.
912: <li>Increase size of the clone bitmap. This is required for upcoming work on cloning <a href="https://man.openbsd.org/bpf.4">bpf(4)</a>.
913: <li>In <a href="https://man.openbsd.org/vmm.4">vmm(4)</a>, support processors without unrestricted guest capability.
1.2 tim 914: <!-- 2016-04-04 -->
1.8 tb 915: <li>Fix EXA detection in <a href="https://man.openbsd.org/r128.4">r128(4)</a>, <a href="https://man.openbsd.org/cirrus.4">cirrus(4)</a>, mach64(4) and <a href="https://man.openbsd.org/mga.4">mga(4)</a>.
916: <li>Enable creation of <a href="https://man.openbsd.org/softraid.4">softraid(4)</a> volumes using disks with non-512 byte sectors. This increments the metadata version.
917: <li>Fix a memory leak in <a href="https://man.openbsd.org/isakmpd.8">isakmpd(8)</a>.
918: <li>In <a href="https://man.openbsd.org/dhcpd.8">dhcpd(8)</a>, fix an abort due to a missing <a href="https://man.openbsd.org/pledge.2">pledge(2)</a> promise.
919: <li>Add -f to <a href="https://man.openbsd.org/ndp.8">ndp(8)</a>.
1.2 tim 920: <!-- 2016-04-03 -->
1.8 tb 921: <li>In <a href="https://man.openbsd.org/grep.1">grep(1)</a>, don't do reverse search optimization if looking for all matches in a line.
1.2 tim 922: <li>On armv7, map and use the bootconfig/FDT area passed by u-boot and try to init FDT on it. This allows for the use of device tree information.
923: <!-- 2016-04-02 -->
1.8 tb 924: <li>In <a href="https://man.openbsd.org/Xserver.1">Xserver(1)</a>, implement VT switching (based on the USL compat interface) in the wscons console backend and use it by default.
1.2 tim 925: <li>Update to xf86-video-ati 7.6.1.
926: <!-- 2016-04-01 -->
1.8 tb 927: <li>In <a href="https://man.openbsd.org/ihidev.4">ihidev(4)</a> and <a href="https://man.openbsd.org/dwiic.4">dwiic(4)</a>, add support for I2C HID devices with GPIO signalled interrupts.
928: <li>In <a href="https://man.openbsd.org/rcctl.8">rcctl(8)</a>, rename the "faulty" list action to "failed".
1.2 tim 929: <!-- 2016-03-31 -->
1.8 tb 930: <li>In <a href="https://man.openbsd.org/tftpd.8">tftpd(8)</a>, go in the background much later to reduce possible silent failures.
1.2 tim 931: <li>If one of the TCP SYN cache buckets overflow, it might be a collision attack against the hash function. Mitigate this attack by reseeding the hash function as soon as possible.
1.8 tb 932: <li>In <a href="https://man.openbsd.org/uslcom.4">uslcom(4)</a>, add support for the USB console port on Aruba 7xxx wireless controllers.
1.2 tim 933: <!-- 2016-03-30 -->
1.8 tb 934: <li>In <a href="https://man.openbsd.org/ssh.1">ssh(1)</a>, remove fallback from moduli to "primes" file that was deprecated in 2001 and fix log messages referring to primes file (bz#2559).
935: <li>In <a href="https://man.openbsd.org/wsmouse.4">wsmouse(4)</a>, add support for multitouch input.
936: <li>In <a href="https://man.openbsd.org/rdistd.1">rdistd(1)</a>, properly create directories that do not exist on the destination.
1.2 tim 937: <li>Improve support for alphas without all IEEE-mode instructions.
1.8 tb 938: <li>In <a href="https://man.openbsd.org/gcc.1">gcc(1)</a>, fix optimization for alphas without the "precise arithmetic trap" extension.
939: <li>In <a href="https://man.openbsd.org/tmux.1">tmux(1)</a>, bump the <a href="https://man.openbsd.org/listen.2">listen(2)</a> backlog up from 16 to 128.
1.2 tim 940: <li>Implement proxy ARP for ART based on mpath support.
1.8 tb 941: <li>In <a href="https://man.openbsd.org/acpi.4">acpi(4)</a>, hook up the gpio interrupt on devices that use it for card detection. This makes the SD card slot on machines based on Intel's Bay Trail SoC fully functional.
942: <li>In <a href="https://man.openbsd.org/bytgpio.4">bytgpio(4)</a>, add support for gpio-based interrupts.
943: <li>Add <a href="https://man.openbsd.org/getlogin_r.2">getlogin_r(2)</a> system call that checks and returns errors like the userspace getlogin_r() API.
944: <li>Remove MLINKS from base. They are no longer required by <a href="https://man.openbsd.org/mandoc.1">mandoc(1)</a>.
1.2 tim 945: <!-- 2016-03-29 -->
1.8 tb 946: <li>Enable <a href="https://man.openbsd.org/oce.4">oce(4)</a> on sparc64.
947: <li>In binutils, fix fallout from the switch to binutils 2.17: the binaries created by 2.17 aren't recognized by the in-tree <a href="https://man.openbsd.org/gdb.1">gdb(1)</a> because it's built with the bfd code from 2.15.
948: <li>Add the net.inet.tcp.synuselimit <a href="https://man.openbsd.org/sysctl.8">sysctl(8)</a> to adjust tcp_syn_use_limit. This is convenient to test the feature and may be useful to defend against syn flooding in a denial of service condition.
949: <li>In <a href="https://man.openbsd.org/authpf.8">authpf(8)</a>, avoid a dereference of a null object.
1.2 tim 950: <!-- 2016-03-28 -->
1.8 tb 951: <li>In <a href="https://man.openbsd.org/tcpdump.8">tcpdump(8)</a>, properly check for the end of captured packet while printing CDP packets.
952: <li>Ensure that a thread that calls <a href="https://man.openbsd.org/sched_yield.2">sched_yield(2)</a> ends up on the run queue behind all its sibling threads. This results in significant improvements for processes that suffer from lock, most notably firefox.
953: <li>Add <a href="https://man.openbsd.org/bytgpio.4">bytgpio(4)</a>, a driver for the gpio controllers found on Intel's Bay Trail SoC.
1.2 tim 954: <!-- 2016-03-27 -->
1.8 tb 955: <li>In <a href="https://man.openbsd.org/netstart.8">netstart(8)</a>, don't delete the 224/4 route unless it's being done to ensure that a -reject route can be added. This restores the ability to set an interface route before daemons are started.
1.2 tim 956: <li>Avoid an attack that could prevent reseeding of the hash function used for the hash buckets in the TCP SYN cache.
1.8 tb 957: <li>In <a href="https://man.openbsd.org/sdhc.4">sdhc(4)</a>, make it possible to override the standard card detect mechanism to appease the SD controller on Intel's Bay Trail SoC.
958: <li>Avoid a NULL pointer dereference when pulling and unmounting a <a href="https://man.openbsd.org/umass.4">umass(4)</a> USB stick.
1.2 tim 959: <!-- 2016-03-26 -->
960: <li>In libssl, fix a memory leak.
961: <li>Switch from the SolidRun i.MX6 U-Boot to mainline U-Boot on the CuBox-i.
962: <li>Always include the route priority in routing messages.
963: <li>Do not populate RTAX_NETMASK when sending a routing message for RTF_HOST entries. This preserves old behavior with ART and fixes a regression.
1.8 tb 964: <li>In <a href="https://man.openbsd.org/rc.d.8">rc.d(8)</a>, make it possible to get usage as a non-root user.
965: <li>In <a href="https://man.openbsd.org/less.1">less(1)</a> and <a href="https://man.openbsd.org/ul.1">ul(1)</a>, improve handling of ambiguous overstrike sequences.
1.2 tim 966: <!-- 2016-03-24 -->
1.8 tb 967: <li>In <a href="https://man.openbsd.org/gcc.1">gcc(1)</a> on arm, change the default arch target from strongarm (armv4) to arm9e (armv5te without xscale extensions).
1.2 tim 968: <li>Enable ART (Allotment Routing Table).
969: <li>Ensure that a found proxy ARP entry has the correct flag.
970: <!-- 2016-03-23 -->
971: <li>In kernel clock, set ticks 15 seconds before its value wraps. This helps to identify issues around ticks wrap in 15 minutes instead of 240ish days.
1.8 tb 972: <li>In <a href="https://man.openbsd.org/kdump.1">kdump(1)</a>, display NAMI records and AF_UNIX <a href="https://man.openbsd.org/socket.2">socket(2)</a> paths with <a href="https://man.openbsd.org/vis.3">vis(3)</a>.
1.2 tim 973: <li>Update to tzdata2016c from ftp.iana.org.
974: <!-- 2016-03-22 -->
1.8 tb 975: <li>In <a href="https://man.openbsd.org/pipex.4">pipex(4)</a>, don't leak an mbuf when copying a packet fails.
1.2 tim 976: <li>Remove ARM10 and ARM11 support.
1.8 tb 977: <li>Fix various issues with bad gateways being picked up by <a href="https://man.openbsd.org/bgpd.8">bgpd(8)</a>.
1.2 tim 978: <li>Remove ARM9E support.
979: <!-- 2016-03-21 -->
1.8 tb 980: <li>In <a href="https://man.openbsd.org/npppd.8">npppd(8)</a>, log the reply message from RADIUS server when the authentication fails.
981: <li>Add <a href="https://man.openbsd.org/pledge.2">pledge(2)</a> to <a href="https://man.openbsd.org/tokeninit.8">tokeninit(8)</a>.
982: <li>Rename <a href="https://man.openbsd.org/OpenBSD-5.9/sendsyslog2.2">sendsyslog2(2)</a> to <a href="https://man.openbsd.org/sendsyslog.2">sendsyslog(2)</a>.
983: <li>In <a href="https://man.openbsd.org/ral.4">ral(4)</a>, improvements for the RT2860 chip:
1.2 tim 984: <ul>
985: <li>Fix watchdog timeouts and dropped frames under load.
986: <li>Fix a bug where oactive is not set and mbufs are dropped.
987: </ul>
1.8 tb 988: <li>Add a counter in the TCP SYN cache and in <a href="https://man.openbsd.org/netstat.1">netstat(1)</a> -s to show how often the hash function is reseeded and the random bucket distribution changes.
1.2 tim 989: <li>On octeon, use the list of the usable memory regions provided by U-Boot instead of the hardcoded regions in memory setup.
1.8 tb 990: <li>In <a href="https://man.openbsd.org/ksh.1">ksh(1)</a>, make the "command" builtin POSIX-compliant and consistent with other current shells.
1.2 tim 991: <!-- 2016-03-20 -->
1.8 tb 992: <li>In <a href="https://man.openbsd.org/ld.so.1">ld.so(1)</a>, let the stack smash handler log to console directly if it is not possible to deliver to <a href="https://man.openbsd.org/syslogd.8">syslogd(8)</a>.
993: <li>In <a href="https://man.openbsd.org/vnet.4">vnet(4)</a>, plug a memory leak in <a href="https://man.openbsd.org/ioctl.2">ioctl(2)</a> code path.
1.2 tim 994: <li>Many improvements of libedit, in particular with regard to UTF-8 support.
1.8 tb 995: <li>In <a href="https://man.openbsd.org/axen.4">axen(4)</a>, initialize the hardware on reset. This allows it to attach reliably and pass traffic, and prevents a panic when unplugging it.
1.2 tim 996: <li>Import libdrm 2.4.67.
997: <!-- 2016-03-19 -->
1.8 tb 998: <li>Attach <a href="https://man.openbsd.org/dwctwo.4">dwctwo(4)</a> only on Octeon models that have a DWC2 controller.
1.2 tim 999: <li>Remove support for StrongARM (SA1), IXP12x0, IXP425 and XScale 80200.
1000: <!-- 2016-03-18 -->
1.8 tb 1001: <li>In <a href="https://man.openbsd.org/vi.1">vi(1)</a>, avoid a backwards <a href="https://man.openbsd.org/memcpy.3">memcpy(3)</a> when issuing ":e +something".
1002: <li>In <a href="https://man.openbsd.org/tmux.1">tmux(1)</a>, make scrolling behaviour more sensible and maintain cursor position, as if the same had been done line-by-line.
1003: <li>In <a href="https://man.openbsd.org/pkg_add.1">pkg_add(1)</a>, use a new _pkgfetch user for separation instead of the _pfetch user.
1.2 tim 1004: <li>Remove ARM8 and ARM9T support.
1005: <!-- 2016-03-17 -->
1.8 tb 1006: <li>Add octuctl(4), a driver for the Octeon II USB Controller Interface, and attachments for <a href="https://man.openbsd.org/ehci.4">ehci(4)</a> and <a href="https://man.openbsd.org/ohci.4">ohci(4)</a>.
1007: <li>In <a href="https://man.openbsd.org/puc.4">puc(4)</a>, add support for the TXIC TX382B (currently TX/RX FIFO is not working).
1.2 tim 1008: <!-- 2016-03-16 -->
1.8 tb 1009: <li>In <a href="https://man.openbsd.org/column.1">column(1)</a>, <a href="https://man.openbsd.org/lpq.1">lpq(1)</a>, <a href="https://man.openbsd.org/ls.1">ls(1)</a>, <a href="https://man.openbsd.org/newfs.8">newfs(8)</a>, <a href="https://man.openbsd.org/ps.1">ps(1)</a>, <a href="https://man.openbsd.org/rusers.1">rusers(1)</a>, <a href="https://man.openbsd.org/sed.1">sed(1)</a> and <a href="https://man.openbsd.org/growfs.8">growfs(8)</a>, use the COLUMNS environment variable first, and either terminal width or a hardcoded value (typically 80) as appropriate.
1010: <li>In libssl, use <a href="https://man.openbsd.org/explicit_bzero.3">explicit_bzero(3)</a> for ASN1 objects on free. Too often these contain sensitive information.
1011: <li>In <a href="https://man.openbsd.org/vi.1">vi(1)</a>, add error checking for the COLUMNS and LINES environment variables to avoid a crash.
1012: <li>In <a href="https://man.openbsd.org/sd.4">sd(4)</a>, prevent a use-after-free of the scsi link structure during detach.
1013: <li>Expose new and much simpler <a href="https://man.openbsd.org/audio.4">audio(4)</a> ioctls.
1.2 tim 1014: <!-- 2016-03-15 -->
1.8 tb 1015: <li>In <a href="https://man.openbsd.org/npppd.8">npppd(8)</a>, transition to "Req-Sent" had been missing when RTA in "Opened". This caused a timer event leak.
1.2 tim 1016: <li>Update to tzdata2016b from ftp.iana.org.
1.8 tb 1017: <li>Allocate amap slots for a virtual memory range reserved with <a href="https://man.openbsd.org/sbrk.2">sbrk(2)</a> lazily. This avoids wasting kernel memory if the user process does not make use of the allocated memory.
1018: <li>For amaps with only a few slots, allocate the slots via <a href="https://man.openbsd.org/pool.9">pool(9)</a>. This saves some memory and reduces kmem pressure.
1.13 bentley 1019: <li><strong>5.9 RELIABILITY FIX: Incorrect path processing in pledge_namei() could result in unexpected program termination of <a href="https://man.openbsd.org/pledge.2">pledge(2)</a>'d programs.</strong><br>A source code patch is available for <a href="errata59.html#003_pledge">5.9</a>.
1020: <li><strong>5.7, 5.8 and 5.9 SECURITY FIX: Insufficient checks in IPv6 socket binding and UDP IPv6 option processing allow a local user to send UDP packets with a source (IPv6 address + port) already reserved by another user.</strong><br>A source code patch is available for <a href="errata57.html#024_in6bind">5.7</a>, <a href="errata58.html#012_in6bind">5.8</a> and <a href="errata59.html#002_in6bind">5.9</a>.
1.8 tb 1021: <li>In <a href="https://man.openbsd.org/puc.4">puc(4)</a>, add support for the Exar XR17V354 device.
1.2 tim 1022: <!-- 2016-03-14 -->
1.8 tb 1023: <li>Remove the legacy <a href="https://man.openbsd.org/OpenBSD-5.9/uiomovei.9">uiomovei(3)</a> function. It has been replaced by <a href="https://man.openbsd.org/uiomove.9">uiomove(9)</a>.
1024: <li>In <a href="https://man.openbsd.org/ssh.1">ssh(1)</a>, unbreak authentication using lone certificate keys in ssh-agent (bz#2550).
1025: <li>In <a href="https://man.openbsd.org/acpicpu.4">acpicpu(4)</a>, correct the value of SRT_ENDTAG: it was documented incorrectly in early ACPI specs.
1.2 tim 1026: <!-- 2016-03-13 -->
1027: <li>In libfontconfig, enable atomics operations on mips64 and mips64el.
1.8 tb 1028: <li>In <a href="https://man.openbsd.org/vmm.4">vmm(4)</a>, introduce memory ranges to support VMs with 4G or more of RAM.
1029: <li>In <a href="https://man.openbsd.org/ichiic.4">ichiic(4)</a>, ignore the SMBALERT# interrupt. This fixes booting the GENERIC kernel on ADI RCC-VE with buggy BIOS versions, rendering the internal eMMC flash unusable.
1030: <li>In <a href="https://man.openbsd.org/kdump.1">kdump(1)</a>, recognize ipmi, vscsi, pvbus, udl, fuse, trunk, pipex and memrange <a href="https://man.openbsd.org/ioctl.2">ioctl(2)</a> requests.
1.2 tim 1031: <!-- 2016-03-11 -->
1.8 tb 1032: <li>In <a href="https://man.openbsd.org/sd.4">sd(4)</a>, avoid a kernel panic when unplugging an USB umass stick because of a use after free.
1.2 tim 1033: <li>Avoid corrupt mount points without a valid device when unmounting.
1034: <!-- 2016-03-10 -->
1.13 bentley 1035: <li><strong>5.7, 5.8 and 5.9 SECURITY FIX: Lack of credential sanitization allows injection of commands to <a href="https://man.openbsd.org/xauth.1">xauth(1)</a>.</strong><br>A source code patch is available for <a href="errata57.html#014_sshd">5.7</a>, <a href="errata58.html#011_sshd">5.8</a> and <a href="errata59.html#001_sshd">5.9</a>.
1.8 tb 1036: <li>In <a href="https://man.openbsd.org/ssh.1">ssh(1)</a>, sanitise characters destined for <a href="https://man.openbsd.org/xauth.1">xauth(1)</a>.
1037: <li>In <a href="https://man.openbsd.org/isakmpd.8">isakmpd(8)</a>, don't retransmit responses for unauthenticated messages.
1.2 tim 1038: <!-- 2016-03-09 -->
1039: <li>Remove support for vax.
1.8 tb 1040: <li>In <a href="https://man.openbsd.org/fdisk.8">fdisk(8)</a> and <a href="https://man.openbsd.org/pdisk.8">pdisk(8)</a>, accept only a character special device as disk.
1.2 tim 1041: <!-- 2016-03-08 -->
1.8 tb 1042: <li>Rework how <a href="https://man.openbsd.org/mpw.4">mpw(4)</a> interacts with <a href="https://man.openbsd.org/vlan.4">vlan(4)</a>. This will allow vlan(4) to become MP-safe.
1043: <li>In <a href="https://man.openbsd.org/xterm.1">xterm(1)</a>, use UTF-8 mode by default.
1044: <li>In <a href="https://man.openbsd.org/httpd.8">httpd(8)</a>, set the content charset for auto index generated pages.
1.2 tim 1045: <!-- 2016-03-07 -->
1046: <li>Make "cp -i" behave as "mv -i" or "rm -i", independently of whether stdin is a tty or not.
1047: <li>Do not remove RTF_STATIC L2 entries from the routing table. Static entries might not have a cloning route to re-create them and hence be gone when their timer expires.
1048: <!-- 2016-03-06 -->
1.8 tb 1049: <li>In <a href="https://man.openbsd.org/kdump.1">kdump(1)</a>, improve display of unknown and KTR_START records.
1.2 tim 1050: <li>Avoid refetching blocks already in the buffer cache. This significantly improves read operations on MSDOSFS.
1051: <li>Update to xrandr 1.5.0.
1052: <li>Update to libXrandr 1.5.0.
1.8 tb 1053: <li>In <a href="https://man.openbsd.org/ksh.1">ksh(1)</a>, make "set +o" conform with POSIX.
1.2 tim 1054: <li>Tweak uvm assertions to avoid locking in some cases.
1055: <!-- 2016-03-05 -->
1.8 tb 1056: <li>In <a href="https://man.openbsd.org/file.1">file(1)</a>, sync "archive" magic from file 5.25.
1057: <li>In <a href="https://man.openbsd.org/ntpd.8">ntpd(8)</a> constraints, avoid using %Z specification of <a href="https://man.openbsd.org/strptime.3">strptime(3)</a> which disagress with RFC7231 and can give surprising results on other operating systems.
1058: <li>In <a href="https://man.openbsd.org/tmux.1">tmux(1)</a>, improve UTF-8 locale checking.
1.2 tim 1059: <li>Update to unbound 1.5.8.
1.8 tb 1060: <li>In <a href="https://man.openbsd.org/ksh.1">ksh(1)</a>, fix POSIX-compliant behavior of "set -u" regarding "$*" and "$@" specials.
1061: <li>Almost completely rewrite <a href="https://man.openbsd.org/mknod.8">mknod(8)</a> in order to allow a speedup of <a href="https://man.openbsd.org/MAKEDEV.8">MAKEDEV(8)</a>.
1062: <li>In <a href="https://man.openbsd.org/tmux.1">tmux(1)</a>, avoid accessing a NULL pointer.
1.2 tim 1063: <!-- 2016-03-04 -->
1.8 tb 1064: <li>In <a href="https://man.openbsd.org/vmd.8">vmd(8)</a>, set root device to sd0a, instead of wd0a.
1065: <li>In <a href="https://man.openbsd.org/ksh.1">ksh(1)</a>:
1.2 tim 1066: <ul>
1067: <li>Don't parse (...|...) patterns in variable substitution inside double quotes. This fixes a POSIX compatibility issue.
1068: <li>Remove the mknod builtin.
1069: </ul>
1070: <!-- 2016-03-03 -->
1.8 tb 1071: <li>In <a href="https://man.openbsd.org/ssh.1">ssh(1)</a>, fix ClientAliveInterval when a time-based RekeyLimit is set (bz#2252).
1072: <li>In <a href="https://man.openbsd.org/tmux.1">tmux(1)</a>:
1.2 tim 1073: <ul>
1074: <li>Avoid mixing up RGB colours with aixterm colours.
1075: <li>Make the show-* and set-* commands handle a missing target.
1076: </ul>
1.8 tb 1077: <li>On amd64 and i386, unwind the trapframe correctly when a breakpoint is set on "syscall". This prevents a fault in <a href="https://man.openbsd.org/ddb.4">ddb(4)</a> on amd64.
1078: <li>Remove the machdep.userldt <a href="https://man.openbsd.org/sysctl.8">sysctl(8)</a>.
1079: <li>In <a href="https://man.openbsd.org/ieee80211.9">ieee80211(9)</a>, restore an assignment of device current mode. This fixes <a href="https://man.openbsd.org/iwi.4">iwi(4)</a> fatal firmware errors.
1.2 tim 1080: <!-- 2016-03-02 -->
1081: <li>Bump link_maxhdr (the space reserved before an ip packet payload for link headers) from 16 to 64.
1.8 tb 1082: <li>In <a href="https://man.openbsd.org/scp.1">scp(1)</a>, improve accuracy of reported transfer speeds.
1083: <li>In <a href="https://man.openbsd.org/sftp.1">sftp(1)</a> and <a href="https://man.openbsd.org/scp.1">scp(1)</a>, improve precision of the progress meter.
1084: <li>In <a href="https://man.openbsd.org/tmux.1">tmux(1)</a>, improve <a href="https://man.openbsd.org/wcwidth.1">wcwidth(1)</a> and <a href="https://man.openbsd.org/mctowc.1">mbtowc(1)</a> error handling.
1.2 tim 1085: <li>Remove Linux emulation support.
1086: <li>In libssl, add bounds checking for read_ledword().
1087: <!-- 2016-03-01 -->
1.8 tb 1088: <li>In libssl, add bounds checking for <a href="https://man.openbsd.org/BN_hex2bn.3">BN_hex2bn(3)</a> and <a href="https://man.openbsd.org/BN_dec2bn.3">BN_dec2bn(3)</a>.
1089: <li>In <a href="https://man.openbsd.org/acpi.4">acpi(4)</a>, add more Windows versions for _OSI checks.
1090: <li>In <a href="https://man.openbsd.org/cpsw.4">cpsw(4)</a>, detect and only enable the port that is actually used. This avoids device timeouts. Also enable interrupt pacing to limit interrupts at 2K/s.
1091: <li>Set the IFF_MULTICAST flag on <a href="https://man.openbsd.org/tun.4">tun(4)</a> interfaces so IPv6 addresses can be assigned.
1092: <li>In <a href="https://man.openbsd.org/diff.1">diff(1)</a>, rectify line numbers for "s/.//" commands in ed-style diffs.
1.2 tim 1093: <li>In libedit, fix a segfault and functional error in c_gets().
1094: <li>In libssl, remove support for ancient, broken DSA implementations.
1095: <!-- 2016-02-28 -->
1096: <li>Fix a bug when IPsec UDP encapsulation is used for IPv6.
1097: <!-- 2016-02-27 -->
1.8 tb 1098: <li>In <a href="https://man.openbsd.org/gcc.1">gcc(1)</a>, fix an Internal Compiler Error on alpha when using __sync builtins.
1.2 tim 1099: <!-- 2016-02-26 -->
1.8 tb 1100: <li>In <a href="https://man.openbsd.org/fnmatch.3">fnmatch(3)</a>, fix negation of POSIX character classes.
1101: <li>Prevent a memory leak in <a href="https://man.openbsd.org/vnet.4">vnet(4/sparc64)</a>.
1.2 tim 1102: <li>Valdate fs_maxsymlinklen in the superblock of ffs and ext2fs filesystems to avoid use of bogus data.
1103: <!-- 2016-02-25 -->
1104: <li>On alpha and sh, now that time_t is 64-bit, no longer ignore the hardware clock when it reports a year after 2037.
1.1 deraadt 1105: </ul>
![[BACK]](/icons/back.gif){kind=icon}
Return to plus60.html CVS log ![[TXT]](/icons/text.gif){kind=icon}
![[DIR]](/icons/dir.gif){kind=icon}
Up to [local] / www