Annotation of www/plus64.html, Revision 1.13
1.6 bentley 1: <!doctype html>
2: <html lang=en id=plus>
3: <meta charset=utf-8>
1.1 deraadt 4: <title>OpenBSD 6.4 Changelog</title>
1.4 pamela 5: <meta name="description" content="OpenBSD 6.4 changes">
1.1 deraadt 6: <meta name="viewport" content="width=device-width, initial-scale=1">
7: <link rel="stylesheet" type="text/css" href="openbsd.css">
1.4 pamela 8: <link rel="canonical" href="https://www.openbsd.org/plus64.html">
1.6 bentley 9: <style>
10: strong {
11: color: var(--red);
12: font-weight: normal;
13: }
14:
15: h3 {
16: color: var(--blue);
17: }
18: </style>
1.1 deraadt 19:
1.6 bentley 20: <h2 id=OpenBSD>
1.1 deraadt 21: <a href="index.html">
1.6 bentley 22: <i>Open</i><b>BSD</b></a>
23: 6.4 Changelog
1.1 deraadt 24: </h2>
25: <hr>
26:
27: <p>
28: This selection is intended to include all important
29: and all user-visible changes.
30: For a complete record of all changes, please see the "source-changes"
31: mailing list, called "OpenBSD CVS"
1.12 tj 32: in the <a href="https://marc.info/?l=openbsd-cvs">archives</a>,
1.1 deraadt 33: or use <a href="anoncvs.html#CVS">CVS</a>.
34:
35: <p>
1.6 bentley 36: Note: <strong>Problems for which patches exist are marked in red</strong>.
1.1 deraadt 37:
38: <p>
39: For changes in other releases, click below:<br>
40: <a href="plus20.html">2.0</a>,
41: <a href="plus21.html">2.1</a>,
42: <a href="plus22.html">2.2</a>,
43: <a href="plus23.html">2.3</a>,
44: <a href="plus24.html">2.4</a>,
45: <a href="plus25.html">2.5</a>,
46: <a href="plus26.html">2.6</a>,
47: <a href="plus27.html">2.7</a>,
48: <a href="plus28.html">2.8</a>,
49: <a href="plus29.html">2.9</a>,
50: <a href="plus30.html">3.0</a>,
51: <a href="plus31.html">3.1</a>,
52: <a href="plus32.html">3.2</a>,
53: <a href="plus33.html">3.3</a>,
54: <a href="plus34.html">3.4</a>,
55: <a href="plus35.html">3.5</a>,
56: <a href="plus36.html">3.6</a>,
57: <br>
58: <a href="plus37.html">3.7</a>,
59: <a href="plus38.html">3.8</a>,
60: <a href="plus39.html">3.9</a>,
61: <a href="plus40.html">4.0</a>,
62: <a href="plus41.html">4.1</a>,
63: <a href="plus42.html">4.2</a>,
64: <a href="plus43.html">4.3</a>,
65: <a href="plus44.html">4.4</a>,
66: <a href="plus45.html">4.5</a>,
67: <a href="plus46.html">4.6</a>,
68: <a href="plus47.html">4.7</a>,
69: <a href="plus48.html">4.8</a>,
70: <a href="plus49.html">4.9</a>,
71: <a href="plus50.html">5.0</a>,
72: <a href="plus51.html">5.1</a>,
73: <a href="plus52.html">5.2</a>,
74: <a href="plus53.html">5.3</a>,
75: <br>
76: <a href="plus54.html">5.4</a>,
77: <a href="plus55.html">5.5</a>,
78: <a href="plus56.html">5.6</a>,
79: <a href="plus57.html">5.7</a>,
80: <a href="plus58.html">5.8</a>,
81: <a href="plus59.html">5.9</a>,
82: <a href="plus60.html">6.0</a>,
83: <a href="plus61.html">6.1</a>,
84: <a href="plus62.html">6.2</a>,
85: <a href="plus63.html">6.3</a>,
1.5 pamela 86: <a href="plus65.html">6.5</a>,
1.8 pamela 87: <a href="plus66.html">6.6</a>,
1.9 deraadt 88: <a href="plus67.html">6.7</a>,
1.10 deraadt 89: <a href="plus68.html">6.8</a>,
1.11 pamela 90: <a href="plus69.html">6.9</a>,
1.13 ! deraadt 91: <a href="plus70.html">7.0</a>,
1.8 pamela 92: <a href="plus.html">current</a>.
1.1 deraadt 93: <br>
94:
95: <p>
1.6 bentley 96: <h3>Changes made between OpenBSD 6.3 and 6.4</h3>
1.1 deraadt 97: <p>
98:
99: <ul>
100: <li>Many changes not listed here.
101: <!-- 2018-04-16 -->
102: <li>Fix "heap full" errors in the amd64 boot loader when loading microcode.
103: <li>Add support in <a href="https://man.openbsd.org/com.4">com(4)</a> for Exar XR17V354 4-port devices.
104: <!-- 2018-04-15 -->
105: <li>Add TCP support to <a href="https://man.openbsd.org/snmpd.8">snmpd(8)</a>. Apart from processing multiple requests in parallel, this implements RFC 3430.
106: <li>Make <a href="https://man.openbsd.org/relayd.8">relayd(8)</a> set destination host state to HOST_DOWN in case of TCP read timeout.
1.6 bentley 107: <li><strong>6.1, 6.2 and 6.3 SECURITY FIX: Correct heap overflow bugs in <a href="https://man.openbsd.org/perl.1">perl(1)</a>.</strong><br>A source code patch is available for <a href="errata61.html#p039_perl">6.1</a>, <a href="errata62.html#p011_perl">6.2</a> and <a href="errata63.html#p001_perl">6.3</a>.
1.1 deraadt 108: <!-- 2018-04-14 -->
109: <li>Make ENGINE_finish() succeed on NULL in LibreSSL, simplifies caller code.
110: <li>Make <a href="https://man.openbsd.org/ksh.1">ksh(1)</a> count $SECONDS using monotonic clock.
111: <li>Fix for <a href="https://man.openbsd.org/mg.1">mg(1)</a> when trying to write backups in home dir when run under a different effective user.
112: <!-- 2018-04-13 -->
113: <li>Remove hfsc support from <a href="https://man.openbsd.org/pfctl.8">pfctl(8)</a>.
114: <li>Don't panic if ipmi_sendcmd() fails.
115: <li>Make <a href="https://man.openbsd.org/sshd.8">sshd(8)</a> more resilient against user enumeration timing attacks.
116: <li>Implemented MAP_STACK option for <a href="https://man.openbsd.org/mmap.2">mmap(2)</a>. At pagefaults and syscalls the kernel will check that the SP points to MAP_STACK memory.
117: <!-- 2018-04-12 -->
118: <li>Stop using the PID in <a href="https://man.openbsd.org/ping.8">ping(8)</a>.
119: <li>Make <a href="https://man.openbsd.org/httpd.8">httpd(8)</a> listen on all IPv4 and IPv6 addresses for "listen on *".
120: <li>More steps for i386 Meltdown fixes, will trigger some performance issues.
121: <li>Make <a href="https://man.openbsd.org/re.4">re(4)</a> handle newer devices with only 64bit BARs, and map 32bit BAR as a fallback.
122: <!-- 2018-04-11 -->
123: <li>Add mixer save/restore capability to the <a href="https://man.openbsd.org/audio.4">audio(4)</a> driver for use during suspend/resume.
124: <li>Add support in <a href="https://man.openbsd.org/umsm.4">umsm(4)</a> for Huawei k3772-based devices.
125: <li>Make <a href="https://man.openbsd.org/sasyncd.8">sasyncd(8)</a> schedule events against the monotonic clock so it fires punctually even if system clock is changed.
126: <li>Have <a href="https://man.openbsd.org/fstat.1">fstat(1)</a> print rtable for internet sockets unless it's the default.
127: <li>In <a href="https://man.openbsd.org/tmux.1">tmux(1)</a>, add x and X to choose-tree to kill an item.
128: <li>Make sure the kernel doesn't call logwakeup() while holding a mutex to prevent lock ordering issues.
129: <!-- 2018-04-10 -->
130: <li>Make <a href="https://man.openbsd.org/mandoc.1">mandoc(1)</a> define a previously undefined integer as being zero.
131: <li>Make <a href="https://man.openbsd.org/ksh.1">ksh(1)</a> support 64bit integer operations on 32bit arches too.
132: <li>Added <a href="https://man.openbsd.org/octcrypto.4">octcrypto(4)</a>, a driver for the octeon cryptographic unit, providing hardware-accelerated implementations for several encryption and authentication algorithms for <a href="https://man.openbsd.org/ipsec.4">ipsec(4)</a>. Disabled for now.
133: <!-- 2018-04-09 -->
134: <li>Make <a href="https://man.openbsd.org/smtpd.8">smtpd(8)</a> spfwalk check for legitimate IPv4 and IPv6 addresses before printing.
135: <li>Make headers, manpages and kernel prefer and recommend AF_UNIX name rather than AF_LOCAL.
136: <li>In kqueue, test for preexisting conditions when re-enabling events.
137: <li>Make <a href="https://man.openbsd.org/pcidump.8">pcidump(8)</a> print BARs for bridges as well.
138: <li>On amd64, add support for EFI Random Number Generator and use it to XOR random data into the kernel.
139: <li>Add a hook to the standalone boot code to use a firmware-supplied random function in addition of the machine dependent random function to insert entropy into the booted kernel.
140: <!-- 2018-04-08 -->
141: <li>IPv6 fix for <a href="https://man.openbsd.org/gif.4">gif(4)</a>.
142: <li>Attach the mbuf tag on output <a href="https://man.openbsd.org/gif.4">gif(4)</a> packets to suppress loops over the interface and avoid leak of the tag on every packet.
143: <li>For certain arm devices, if the PHY address isn't specified, only attach a single PHY. Makes Theobrama Systems RK3399-Q7 SoM network interfaces work.
144: <li>Make <a href="https://man.openbsd.org/shutdown.8">shutdown(8)</a> print deadline estimates in the local timezone.
145: <li>Enable <a href="https://man.openbsd.org/islrtc.4">islrtc(4)</a> on arm64 GENERIC and RAMDISK kernels.
146: <li>Added <a href="https://man.openbsd.org/islrtc.4">islrtc(4)</a>, a driver for the ISL208 real time clock.
147: <li>Work around libtool exec limitations.
148: <li>Correct libtls <a href="https://man.openbsd.org/tls_config_clear_keys.3">tls_config_clear_keys(3)</a> behaviour, leaving other configuration data intact.
149: <li>In libtls, switch to <a href="https://man.openbsd.org/OPENSSL_init_ssl.3">OPENSSL_init_ssl(3)</a> to prevent an openssl configuration file from being loaded behind our backs.
150: <li>Add support in <a href="https://man.openbsd.org/dwmmc.4">dwmmc(4)</a> for GPIO card detection.
151: <li>Increase <a href="https://man.openbsd.org/em.4">em(4)</a> delay after reset to 20ms and add a fix for i219 based devices.
152: <!-- 2018-04-17 -->
153: <li>In UEFI, respect the parts where mappings indicate they can be made non-readable, non-executable or read-only.
154: <li>Fixed <a href="https://man.openbsd.org/tmpfs.4">tmpfs(4)</a> to not attempt calling <a href="https://man.openbsd.org/copyin.9">copyin(9)</a> itself.
155: <li>Patch binutils 2.17 so it passes option -Wno-null-pointer-arithmetic when compiled with LLVM 6.0.0.
156: <li>Updated llvm to 6.0.0.
157: <li>Make <a href="https://man.openbsd.org/fstat.1">fstat(1)</a> print a p flag for file descriptors opened after <a href="https://man.openbsd.org/pledge.2">pledge(2)</a>.
158: <li>Better rounding to cylinder boundaries in <a href="https://man.openbsd.org/disklabel.8">disklabel(8)</a>.
159: <li>In <a href="https://man.openbsd.org/ssh.1">ssh(1)</a>, allow "Sendenv -PATTERN" to clear environment previously labeled for sending.
160: <li>Fix file descriptor leak in <a href="https://man.openbsd.org/httpd.8">httpd(8)</a> after processing ranged requests.
161: <li>Use existing pf state to speed up UDP socket lookup.
162: <li>Fix memory leak in libcrypto if EVP_Digest() fails.
163: <!-- 2018-04-06 -->
164: <li>In libcrypto, tighten up various checks for X509_VERIFY_PARAM functions.
165: <li>In <a href="https://man.openbsd.org/ssh.1">ssh(1)</a>, relax checking of authorized_keys environment="..." options to allow underscores in variable names
166: <li>Stop using a non-portable .R <a href="https://man.openbsd.org/man.7">man(7)</a> macro in <a href="https://man.openbsd.org/mandoc.1">mandoc(1)</a>.
167: <li>Update <a href="https://man.openbsd.org/mandoc.1">mandoc(1)</a> to use documented and portable character escape sequences for .Do/.Dq.
168: <!-- 2018-04-05 -->
169: <li>Import pcap_set_immediate_mode() from mainline libpcap which allows a libpcap-based program to process packets as soon as they arrive.
170: <li>Remove obsolete PF_TRANS_ALTQ from <a href="https://man.openbsd.org/pf.4">pf(4)</a>. Note the required steps in the <a href="https://www.openbsd.org/faq/current.html#r20180404">update guide</a> if updating from source.
171: <li>Update default IPQoS in <a href="https://man.openbsd.org/ssh.1">ssh(1)</a> and <a href="https://man.openbsd.org/sshd.8">sshd(8)</a>.
172: <li>Libcrypto fixes in X509_NAME_add_entry().
173: <!-- 2018-04-04 -->
174: <li>Fix crash in <a href="https://man.openbsd.org/dig.1">dig(1)</a> when +trace option is enabled and a truncated reply forces fallback to TCP.
175: <!-- 2018-04-03 -->
176: <li>Deactivate WITNESS checks in <a href="https://man.openbsd.org/ddb.4">ddb(4)</a>, when db_active is set.
177: <li>On <a href="https://man.openbsd.org/vlan.4">vlan(4)</a> interfaces, use link0 to use llprio in transmitted packets.
178: <li>Imported regenerated moduli files for <a href="https://man.openbsd.org/ssh.1">ssh(1)</a>.
179: <li>Tweak vlan printing in <a href="https://man.openbsd.org/tcpdump.8">tcpdump(8)</a> to properly decode priority field.
180: <li>OpenSSH 7.7 released.
181: <li>Enabled <a href="https://man.openbsd.org/mvrng.4">mvrng(4)</a> for arm64 GENERIC and RAMDISK kernels.
182: <li>Fix in <a href="https://man.openbsd.org/bgpd.8">bgpd(8)</a> for aspath_verify() regarding 2-byte vs 4-byte AS path entries.
183: <li>Enabled <a href="https://man.openbsd.org/imxiomuxc.4">imxiomuxc(4)</a> on arm64 GENERIC and RAMDISK kernels.
184: <li>Unhook libXfont from xenocara builds, obsoleted by libXfont2.
185: <li>Enabled <a href="https://man.openbsd.org/dwpcie.4">dwpcie(4)</a>, <a href="https://man.openbsd.org/fec.4">fec(4)</a> and <a href="https://man.openbsd.org/imxccm.4">imxccm(4)</a> on arm64 GENERIC and RAMDISK kernels.
186: <li>Add minimal driver <a href="https://man.openbsd.org/dwpcie.4">dwpcie(4)</a> for the Synopsys Designware PCIe core.
187: <li>Added support for more Intel Apollo Lake devices found on some NUC and Celeron based systems.
188: <li>In <a href="https://man.openbsd.org/com.4">com(4)</a>, add support for register shift/IO-width to allow UARTs using 32-bit registers instead of 8-bit, found on some armv7, arm64 and amd64 SoCs.
189: <li>Add support for arbitrary-length integers in <a href="https://man.openbsd.org/test.1">test(1)</a>.
190: <!-- 2018-04-02 -->
191: <li>Fix binutils 2.17 to build without warnings on LLVM 6.0.0.
192: <li>Enabled <a href="https://man.openbsd.org/imxanatop.4">imxanatop(4)</a> on armv7 RAMDISK kernels.
193: <li>Fix for previously incorrect MII speed setting on armv7 <a href="https://man.openbsd.org/fec.4">fec(4)</a>.
194: <li>Fixes in <a href="https://man.openbsd.org/apply.1">apply(1)</a> for <a href="https://man.openbsd.org/realloc.3">realloc(3)</a> noticed when <a href="https://man.openbsd.org/malloc.conf.5">malloc.conf(5)</a> had the J option enabled.
195: <li>LibreSSL 2.7.2 released.
196: <li>Fixes for UFS2 with softdep enabled.
197: <!-- 2018-04-01 -->
198: <li>Implemented an EFI driver to allow PXE boot over EFIs Simple Network Protocol, allowing TFTP boot on U-Boot based armv7 and arm64 machines.
199: <li>Fix '-v' option to <a href="https://man.openbsd.org/procmap.1">procmap(1)</a> when using -a to help show holes in the process map.
200: <li>Enabled <a href="https://man.openbsd.org/mvtemp.4">mvtemp(4)</a> on arm64 GENERIC kernels.
201: <li>Added <a href="https://man.openbsd.org/mvtemp.4">mvtemp(4)</a> a driver for temperature sensors found on Marvell Armada SoCs.
202: <li>Fix mbuf reuse when sending ARP responses to prevent stale mbuf state affecting the ARP reply packet.
203: <li>Fix 64bit integer overflows in <a href="https://man.openbsd.org/expr.1">expr(1)</a>.
204: <li>Fix a hang in i386 vmware guests in /sbin/init.
205: <li>Recommit of the i386 Meltdown fix.
206: <li>Fix '-i' on <a href="https://man.openbsd.org/dhclient.8">dhclient(8)</a> to discard previously defined values.
207: <!-- 2018-03-31 -->
208: <li>Enable <a href="https://man.openbsd.org/imxiic.4">imxiic(4)</a> and <a href="https://man.openbsd.org/imxanatop.4">imxanatop(4)</a> on arm64 GENERIC and RAMDISK kernels.
209: <li>Enable <a href="https://man.openbsd.org/imxgpc.4">imxgpc(4)</a>, <a href="https://man.openbsd.org/imxgpio.4">imxgpio(4)</a> and <a href="https://man.openbsd.org/imxesdhc.4">imxesdhc(4)</a> on GENERIC and RAMDISK kernels for the arm64 platform.
210: <li>Also move <a href="https://man.openbsd.org/imxgpc.4">imxgpc(4)</a>, <a href="https://man.openbsd.org/imxgpio.4">imxgpio(4)</a> and <a href="https://man.openbsd.org/imxesdhc.4">imxesdhc(4)</a> drivers so they can be shared between arm64 and armv7.
211: <li>Fix potential overflow in <a href="https://man.openbsd.org/cut.1">cut(1)</a> for 64bit systems.
212: <!-- 2018-03-30 -->
213: <li>Updated bdftopcf to version 1.1.
214: <li>Moved driver for <a href="https://man.openbsd.org/imxuart.4">imxuart(4)</a> so it can be shared by arm64 and armv7.
215: <li>Updated <a href="https://man.openbsd.org/xterm.1">xterm(1)</a> to version 331.
216: <li>Updated <a href="https://man.openbsd.org/unbound.8">unbound(8)</a> to 1.7.0.
217: <li>Enable <a href="https://man.openbsd.org/mvclock.4">mvclock(4)</a>, <a href="https://man.openbsd.org/mvicu.4">mvicu(4)</a>, <a href="https://man.openbsd.org/mvpinctrl.4">mvpinctrl(4)</a>, <a href="https://man.openbsd.org/mvgpio.4">mvgpio(4)</a> and <a href="https://man.openbsd.org/mvrtc.4">mvrtc(4)</a> on GENERIC and RAMDISK kernels for arm64 platforms.
218: <li>Added support for <a href="https://man.openbsd.org/mvrtc.4">mvrtc(4)</a>, a real time clock integrated on various Marvell Armada SoCs.
219: <li>Fixed some <a href="https://man.openbsd.org/setlocale.3">setlocale(3)</a> bugs.
220: <li>Add support in the flattened device tree code for legacy binding of Marvell devices for "usb-nop-xceiv" PHYs.
221: <li>Fix memory leak in sparc64 ofwboot when booting <a href="https://man.openbsd.org/softraid.4">softraid(4)</a> crypto devices.
222: <li>Prevent <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> from crashing in certain cases with empty windows.
223: <!-- 2018-03-29 -->
224: <li>Fixed network locking in <a href="https://man.openbsd.org/pppx.4">pppx(4)</a>.
225: <li>Fix in libcrypto for CVS-2018-0739 regarding ASN.1 recursive definition depth.
226: <li>Remove RDTSCP from CPUID flags reported to <a href="https://man.openbsd.org/vmm.4">vmm(4)</a> guests.
227: <li>Fix remaining external file system locking so VOP_LOCKs are done in accordance with how WITNESS wants it.
228: <li>Fix memory leak in <a href="https://man.openbsd.org/pf.4">pf(4)</a> when adding same table twice.
229: <li>Check for possible NFS race after sleeping to prevent future lock ordering problem.
230: <li>Mark ext2fs inode recursive lock as RWL_IS_VNODE to help when WITNESS is enabled.
231: <li>Configure <a href="https://man.openbsd.org/dwxe.4">dwxe(4)</a> TX and RX chain delay based on device tree properties.
232: <!-- 2018-03-27 -->
233: <li>In the X.org DRM code, defer disabling the vblank IRQ until next interrupt.
234: <li>Updated time zone data to tzdata2018d.
1.7 deraadt 235: <li>Added <a href="https://man.openbsd.org/acpicmos.4">acpicmos(4)</a>, a driver that implements SystemCMOS access support.
1.1 deraadt 236: <li>SSLeay history from 0.4 to 0.8.1b added to SSL manpages.
237: <li>Make sure <a href="https://man.openbsd.org/nc.1">nc(1)</a> clears password buffers in non-terminating cases.
238: <li>Fix wrong execution and out of boundary writes in <a href="https://man.openbsd.org/apply.1">apply(1)</a>.
239: <li>Make sure programs violating a <a href="https://man.openbsd.org/pledge.2">pledge(2)</a> promise cannot block the final SIGABRT.
240: <li>Try harder to execute code protected by mutexes after entering <a href="https://man.openbsd.org/ddb.4">ddb(4)</a>.
241: <li>Exclude SIGKILL from <a href="https://man.openbsd.org/ptrace.2">ptrace(2)</a> interception to prevent deadlock when parent waits for the traced process.
242: <!-- 2018-03-26 -->
243: </ul>
![[BACK]](/icons/back.gif){kind=icon}
Return to plus64.html CVS log ![[TXT]](/icons/text.gif){kind=icon}
![[DIR]](/icons/dir.gif){kind=icon}
Up to [local] / www