1 cce97a6e 2019-05-27 bentley <!doctype html>
2 cce97a6e 2019-05-27 bentley <html lang=en id=plus>
3 cce97a6e 2019-05-27 bentley <meta charset=utf-8>
4 a207d829 2016-04-24 tj <title>OpenBSD 5.6 Changelog</title>
5 854ac698 2014-09-30 deraadt <meta name="description" content="OpenBSD 5.6 changes">
6 b5320c23 2016-03-29 deraadt <meta name="viewport" content="width=device-width, initial-scale=1">
7 b5320c23 2016-03-29 deraadt <link rel="stylesheet" type="text/css" href="openbsd.css">
8 6e244147 2016-08-15 tb <link rel="canonical" href="https://www.openbsd.org/plus56.html">
11 cce97a6e 2019-05-27 bentley color: var(--red);
12 cce97a6e 2019-05-27 bentley font-weight: normal;
16 cce97a6e 2019-05-27 bentley color: var(--blue);
20 cce97a6e 2019-05-27 bentley <h2 id=OpenBSD>
21 b5320c23 2016-03-29 deraadt <a href="index.html">
22 cce97a6e 2019-05-27 bentley <i>Open</i><b>BSD</b></a>
23 cce97a6e 2019-05-27 bentley 5.6 Changelog
28 a8c642e8 2014-09-08 brett This selection is intended to include all important
29 a8c642e8 2014-09-08 brett and all user-visible changes.
30 a8c642e8 2014-09-08 brett For a complete record of all changes, please see the "source-changes"
31 a8c642e8 2014-09-08 brett mailing list, called "OpenBSD CVS"
32 511c55e8 2021-05-05 tj in the <a href="https://marc.info/?l=openbsd-cvs">archives</a>,
33 a8c642e8 2014-09-08 brett or use <a href="anoncvs.html#CVS">CVS</a>.
36 cce97a6e 2019-05-27 bentley Note: <strong>Problems for which patches exist are marked in red</strong>.
39 a8c642e8 2014-09-08 brett For changes in other releases, click below:<br>
40 a8c642e8 2014-09-08 brett <a href="plus20.html">2.0</a>,
41 a8c642e8 2014-09-08 brett <a href="plus21.html">2.1</a>,
42 a8c642e8 2014-09-08 brett <a href="plus22.html">2.2</a>,
43 a8c642e8 2014-09-08 brett <a href="plus23.html">2.3</a>,
44 a8c642e8 2014-09-08 brett <a href="plus24.html">2.4</a>,
45 a8c642e8 2014-09-08 brett <a href="plus25.html">2.5</a>,
46 a8c642e8 2014-09-08 brett <a href="plus26.html">2.6</a>,
47 a8c642e8 2014-09-08 brett <a href="plus27.html">2.7</a>,
48 a8c642e8 2014-09-08 brett <a href="plus28.html">2.8</a>,
49 a8c642e8 2014-09-08 brett <a href="plus29.html">2.9</a>,
50 a8c642e8 2014-09-08 brett <a href="plus30.html">3.0</a>,
51 a8c642e8 2014-09-08 brett <a href="plus31.html">3.1</a>,
52 a8c642e8 2014-09-08 brett <a href="plus32.html">3.2</a>,
53 a8c642e8 2014-09-08 brett <a href="plus33.html">3.3</a>,
54 a8c642e8 2014-09-08 brett <a href="plus34.html">3.4</a>,
55 a8c642e8 2014-09-08 brett <a href="plus35.html">3.5</a>,
56 a8c642e8 2014-09-08 brett <a href="plus36.html">3.6</a>,
58 a8c642e8 2014-09-08 brett <a href="plus37.html">3.7</a>,
59 a8c642e8 2014-09-08 brett <a href="plus38.html">3.8</a>,
60 a8c642e8 2014-09-08 brett <a href="plus39.html">3.9</a>,
61 a8c642e8 2014-09-08 brett <a href="plus40.html">4.0</a>,
62 a8c642e8 2014-09-08 brett <a href="plus41.html">4.1</a>,
63 a8c642e8 2014-09-08 brett <a href="plus42.html">4.2</a>,
64 a8c642e8 2014-09-08 brett <a href="plus43.html">4.3</a>,
65 a8c642e8 2014-09-08 brett <a href="plus44.html">4.4</a>,
66 a8c642e8 2014-09-08 brett <a href="plus45.html">4.5</a>,
67 a8c642e8 2014-09-08 brett <a href="plus46.html">4.6</a>,
68 a8c642e8 2014-09-08 brett <a href="plus47.html">4.7</a>,
69 a8c642e8 2014-09-08 brett <a href="plus48.html">4.8</a>,
70 a8c642e8 2014-09-08 brett <a href="plus49.html">4.9</a>,
71 a8c642e8 2014-09-08 brett <a href="plus50.html">5.0</a>,
72 a8c642e8 2014-09-08 brett <a href="plus51.html">5.1</a>,
73 a8c642e8 2014-09-08 brett <a href="plus52.html">5.2</a>,
74 a8c642e8 2014-09-08 brett <a href="plus53.html">5.3</a>,
76 a8c642e8 2014-09-08 brett <a href="plus54.html">5.4</a>,
77 d928ec35 2014-09-09 brett <a href="plus55.html">5.5</a>,
78 bd2f4e6d 2015-03-11 deraadt <a href="plus57.html">5.7</a>,
79 976e1afb 2015-08-05 deraadt <a href="plus58.html">5.8</a>,
80 7469a5f3 2016-02-29 deraadt <a href="plus59.html">5.9</a>,
81 4eabd8bf 2016-07-23 deraadt <a href="plus60.html">6.0</a>,
82 1dfcb2f7 2017-04-07 deraadt <a href="plus61.html">6.1</a>,
83 b7bbbd93 2017-10-01 deraadt <a href="plus62.html">6.2</a>,
84 51085ea4 2018-03-25 deraadt <a href="plus63.html">6.3</a>,
85 094e8ffc 2018-10-09 deraadt <a href="plus64.html">6.4</a>,
86 59b5636e 2019-04-08 pamela <a href="plus65.html">6.5</a>,
87 8f772396 2019-10-05 pamela <a href="plus66.html">6.6</a>,
88 854f9a5d 2020-04-25 deraadt <a href="plus67.html">6.7</a>,
89 2e047577 2020-09-23 deraadt <a href="plus68.html">6.8</a>,
90 fe6b84d4 2021-04-17 pamela <a href="plus69.html">6.9</a>,
91 87207b83 2021-09-19 deraadt <a href="plus70.html">7.0</a>,
92 51b06bb0 2022-03-26 deraadt <a href="plus71.html">7.1</a>,
94 59f57020 2022-09-24 deraadt <a href="plus72.html">7.2</a>,
95 c69b933b 2023-03-19 tj <a href="plus73.html">7.3</a>,
96 d4b998ff 2023-09-27 tj <a href="plus74.html">7.4</a>,
97 59e2fd39 2024-03-10 tj <a href="plus75.html">7.5</a>,
98 d928ec35 2014-09-09 brett <a href="plus.html">current</a>.
102 cce97a6e 2019-05-27 bentley <h3>Changes made between OpenBSD 5.5 and 5.6</h3>
106 a8c642e8 2014-09-08 brett <!-- 2014/08/07 -->
107 cce97a6e 2019-05-27 bentley <li>Fixed <a href="https://man.openbsd.org/ssl.8">ssl(8)</a> to avoid allocating and then leaking a fresh fragment structure when a zero-length fragment is received (CVE-2014-3507).
108 cce97a6e 2019-05-27 bentley <li>Fixed <a href="https://man.openbsd.org/ssl.8">ssl(8)</a>: made sure the output buffer is always NUL terminated if buf_len was initially greater than zero; reject OIDs that are too long, too short, or not in proper base-127 (CVE-2014-3508).
109 cce97a6e 2019-05-27 bentley <li>Corrected <a href="https://man.openbsd.org/ssl.8">ssl(8)</a> test (reversed during merge of fix for CVE-2014-3509).
110 cce97a6e 2019-05-27 bentley <li>Fixed <a href="https://man.openbsd.org/ssl.8">ssl(8)</a> DTLS handshake message size checks (CVE-2014-3506).
111 cce97a6e 2019-05-27 bentley <li>Stopped <a href="https://man.openbsd.org/httpd.8">httpd(8)</a> trying to output FCGI_STDERR into error.log if there is no data.
112 cce97a6e 2019-05-27 bentley <li>Try to parse "Status: $code" in the first response from the <a href="https://man.openbsd.org/httpd.8">httpd(8)</a> fcgi daemon, use that code as HTTP response code (fallback to 200). Possible fix for redirects in cvsweb.
113 a8c642e8 2014-09-08 brett <!-- 2014/08/06 -->
114 cce97a6e 2019-05-27 bentley <li>Fixed <a href="https://man.openbsd.org/ssl.8">ssl(8)</a> TLS downgrade (CVE-2014-3511).
115 cce97a6e 2019-05-27 bentley <li>Fixed DTLS anonymous EC(DH) denial of service in <a href="https://man.openbsd.org/ssl.8">ssl(8)</a> (CVE-2014-3510).
116 cce97a6e 2019-05-27 bentley <li>Made <a href="https://man.openbsd.org/httpd.8">httpd(8)</a> correctly report "internal server error" if the very first fcgi STDOUT record has length 0.
117 cce97a6e 2019-05-27 bentley <li>Changed <a href="https://man.openbsd.org/httpd.conf.5">httpd.conf(5)</a> grammar to remove a shift/reduce conflict. "listen on $ip port 443 ssl" turns into "listen on $ip ssl port 443".
118 cce97a6e 2019-05-27 bentley <li>Added support for NOTE_EOF (for <a href="https://man.openbsd.org/kqueue.2">kqueue(2)</a> EVFILT_READ filters) on NFS files.
119 cce97a6e 2019-05-27 bentley <li>Limit the body size in client requests (eg. POST data) to 1M by default in <a href="https://man.openbsd.org/httpd.conf.5">httpd.conf(5)</a>; added a configuration option to change the limit.
120 cce97a6e 2019-05-27 bentley <li>Prevented <a href="https://man.openbsd.org/X.7">X(7)</a> server crash on zaurus (and possibly other architectures) where there is no <a href="https://man.openbsd.org/pci.4">pci(4)</a>.
121 cce97a6e 2019-05-27 bentley <li>Provided <a href="https://man.openbsd.org/httpd.conf.5">httpd.conf(5)</a> configuration options that allow the SSL certificate, key and ciphers to be specified for each server.
122 cce97a6e 2019-05-27 bentley <li>Clear the <a href="https://man.openbsd.org/httpd.8">httpd(8)</a> public key when it is no longer needed.
123 cce97a6e 2019-05-27 bentley <li>Configured the default <a href="https://man.openbsd.org/ssl.8">ssl(8)</a> ciphers as HIGH:!aNULL in <a href="https://man.openbsd.org/httpd.8">httpd(8)</a>.
124 cce97a6e 2019-05-27 bentley <li>Restored previous <a href="https://man.openbsd.org/ssl.8">ssl(8)</a> behaviour that allows a PEM block to be fed through the base64 decoder.
125 cce97a6e 2019-05-27 bentley <li>Corrected some dma cleanup error paths in <a href="https://man.openbsd.org/vax/qe.4">qe(4/vax)</a>.
126 cce97a6e 2019-05-27 bentley <li>POST support added to <a href="https://man.openbsd.org/httpd.8">httpd(8)</a>.
127 cce97a6e 2019-05-27 bentley <li>Added CONTENT_TYPE environment variables (without the HTTP_prefix) to <a href="https://man.openbsd.org/httpd.8">httpd(8)</a>, for use with cgi scripts .
128 cce97a6e 2019-05-27 bentley <li>Fixed bug in server_write that broke <a href="https://man.openbsd.org/httpd.8">httpd(8)</a> keep-alive support.
129 cce97a6e 2019-05-27 bentley <li><a href="https://man.openbsd.org/httpd.8">httpd(8)</a> now adjusts read/write watermarks according to the TCP send buffer. Fixes sending of large files.
130 a8c642e8 2014-09-08 brett <!-- 2014/08/05 -->
131 cce97a6e 2019-05-27 bentley <li>Load the <a href="https://man.openbsd.org/httpd.8">httpd(8)</a> <a href="https://man.openbsd.org/ssl.8">ssl(8)</a> public/private keys in the parent process, then provide them to the privsep process via imsg. Allows keys to be moved out of <a href="https://man.openbsd.org/chroot.8">chroot(8)</a>.
132 cce97a6e 2019-05-27 bentley <li>Added <a href="https://man.openbsd.org/ssl.8">ssl(8)</a> support for loading the public/private key from memory, rather than directly from file.
133 cce97a6e 2019-05-27 bentley <li>If a driver (eg <a href="https://man.openbsd.org/umct.4">umct(4)</a>) opens an interrupt pipe without callback function, made sure the correct transfer is aborted.
134 cce97a6e 2019-05-27 bentley <li>Added <a href="https://man.openbsd.org/httpd.conf.5">httpd.conf(5)</a> options for max requests per connection and timeout limit.
135 cce97a6e 2019-05-27 bentley <li>Brought back <a href="https://man.openbsd.org/httpd.conf.5">httpd.conf(5)</a> TCP/IP configuration options.
136 cce97a6e 2019-05-27 bentley <li>Limited the number of Keep-Alive requests per <a href="https://man.openbsd.org/httpd.8">httpd(8)</a> connection to 100.
137 cce97a6e 2019-05-27 bentley <li>Improved <a href="https://man.openbsd.org/httpd.8">httpd(8)</a> logging to allow per-server/location log files; log files can now be owned by root.
138 cce97a6e 2019-05-27 bentley <li>Added <a href="https://man.openbsd.org/httpd.conf.5">httpd.conf(5)</a> option to specify the <a href="https://man.openbsd.org/chroot.8">chroot(8)</a> directory.
139 a8c642e8 2014-09-08 brett <!-- 2014/08/04 -->
140 cce97a6e 2019-05-27 bentley <li>Enabled <a href="https://man.openbsd.org/httpd.8">httpd(8)</a> in <a href="https://man.openbsd.org/rc.d.8">rc.d(8)</a> for wider testing.
141 cce97a6e 2019-05-27 bentley <li>Temporarily moved default location of the <a href="https://man.openbsd.org/httpd.8">httpd(8)</a> SSL/TLS server key and certificate from /var/www/ to /var/www/conf/.
142 cce97a6e 2019-05-27 bentley <li>Added "HTTPS = on" CGI variable to <a href="https://man.openbsd.org/httpd.8">httpd(8)</a>.
143 cce97a6e 2019-05-27 bentley <li>Redirect <a href="https://man.openbsd.org/httpd.8">httpd(8)</a> to https:// if SSL/TLS is enabled.
144 cce97a6e 2019-05-27 bentley <li>Added TLS/SSL support to <a href="https://man.openbsd.org/httpd.8">httpd(8)</a>, based on the recent <a href="https://man.openbsd.org/ssl.8">ssl(8)</a> commits.
145 cce97a6e 2019-05-27 bentley <li>Changed <a href="https://man.openbsd.org/httpd.conf.5">httpd.conf(5)</a> grammar from "log [style]" to "log style [style]".
146 cce97a6e 2019-05-27 bentley <li>Provided an <a href="https://man.openbsd.org/ssl.8">ssl(8)</a> function that returns a server connection context.
147 cce97a6e 2019-05-27 bentley <li>Provided an <a href="https://man.openbsd.org/ssl.8">ssl(8)</a> utility function for loading a private/public keypair.
148 cce97a6e 2019-05-27 bentley <li><a href="https://man.openbsd.org/httpd.8">httpd(8)</a> will now print error message if the log files cannot be opened.
149 cce97a6e 2019-05-27 bentley <li>Improved ressl_{read,write} handling of non-blocking reads/writes in <a href="https://man.openbsd.org/ssl.8">ssl(8)</a>
150 cce97a6e 2019-05-27 bentley <li>Added initial <a href="https://man.openbsd.org/httpd.8">httpd(8)</a> support for log files in /var/www/logs/.
151 cce97a6e 2019-05-27 bentley <li>Implemented <a href="https://man.openbsd.org/httpd.8">httpd(8)</a> PATH_INFO and added DOCUMENT_ROOT.
152 a8c642e8 2014-09-08 brett <!-- 2014/08/03 -->
153 cce97a6e 2019-05-27 bentley <li><a href="https://man.openbsd.org/httpd.8">httpd(8)</a> now also writes log messages (eg 404 Not Found) on error.
154 cce97a6e 2019-05-27 bentley <li>Extended <a href="https://man.openbsd.org/httpd.8">httpd(8)</a> to dynamically pass HTTP request headers as protocol-specific HTTP_* CGI meta-variables.
155 cce97a6e 2019-05-27 bentley <li>Add <a href="https://man.openbsd.org/ral.4">ral(4)</a> to GENERIC and RAMDISK on macppc.
156 a8c642e8 2014-09-08 brett <li>Fixed sys/dev/usb/ehci.c r1.162 to stop returning initialised memory on error in ehci_alloc_sqtd().
157 a8c642e8 2014-09-08 brett <li>Fixed sys/dev/ic/bwi.c r1.106. Prevents packet loss.
158 cce97a6e 2019-05-27 bentley <li>Split <a href="https://man.openbsd.org/httpd.8">httpd(8)</a> fastcgi socket path and document root options; added the SCRIPT_FILENAME CGI param with a prepended root. Fixes php-fpm that expects SCRIPT_FILENAME.
159 cce97a6e 2019-05-27 bentley <li>Added missing <a href="https://man.openbsd.org/httpd.8">httpd(8)</a> log call for fastcgi requests.
160 cce97a6e 2019-05-27 bentley <li>Added another <a href="https://man.openbsd.org/httpd.conf.5">httpd.conf(5)</a> log mode "connection" for a <a href="https://man.openbsd.org/relayd.8">relayd(8)</a>-style log entry after each connection.
161 cce97a6e 2019-05-27 bentley <li><a href="https://man.openbsd.org/httpd.8">httpd(8)</a> now prefers getnameinfo() with NI_NUMERICHOST over inet_ntop (to include IPv6 scope ID).
162 a8c642e8 2014-09-08 brett <!-- 2014/08/02 -->
163 cce97a6e 2019-05-27 bentley <li><a href="https://man.openbsd.org/httpd.conf.5">httpd.conf(5)</a> locations now inherit access log settings from the server.
164 cce97a6e 2019-05-27 bentley <li>Made sure <a href="https://man.openbsd.org/httpd.8">httpd(8)</a> reads fcgi padding data if any is received.
165 cce97a6e 2019-05-27 bentley <li>Made <a href="https://man.openbsd.org/httpd.8">httpd(8)</a> properly read from the fcgi bufferevent until it is empty.
166 cce97a6e 2019-05-27 bentley <li>Allow <a href="https://man.openbsd.org/httpd.8">httpd(8)</a> to specify a fastcgi TCP socket on localhost.
167 cce97a6e 2019-05-27 bentley <li>Fixed <a href="https://man.openbsd.org/scandir.3">scandir(3)</a>-based directory auto index on NFS in <a href="https://man.openbsd.org/httpd.8">httpd(8)</a>.
168 a8c642e8 2014-09-08 brett <!-- 2014/08/01 -->
169 cce97a6e 2019-05-27 bentley <li>Use the log buffer to defer <a href="https://man.openbsd.org/httpd.8">httpd(8)</a> logging until the connection is closed or the request completed.
170 cce97a6e 2019-05-27 bentley <li>Added common and combined access logging to <a href="https://man.openbsd.org/httpd.8">httpd(8)</a>.
171 cce97a6e 2019-05-27 bentley <li>Rewrote <a href="https://man.openbsd.org/httpd.8">httpd(8)</a> fcgi_add_param and hand over a lot more http headers etc. to the cgi script.
172 cce97a6e 2019-05-27 bentley <li>Correctly parse fastcgi records if <a href="https://man.openbsd.org/httpd.8">httpd(8)</a> doesn't get the whole record in one bufferevent_read().
173 a8c642e8 2014-09-08 brett <!-- 2014/07/31 -->
174 cce97a6e 2019-05-27 bentley <li>Allow <a href="https://man.openbsd.org/softraid.4">softraid(4)</a> rebuilds to work correctly when the volume metadata has a different data offset to that currently in use.
175 cce97a6e 2019-05-27 bentley <li>Unbroke <a href="https://man.openbsd.org/aac.4">aac(4)</a>, by re-adding uvm_extern.h for ptoa().
176 cce97a6e 2019-05-27 bentley <li><a href="https://man.openbsd.org/httpd.8">httpd(8)</a> now only writes the HTTP header for the first fastcgi chunk.
177 cce97a6e 2019-05-27 bentley <li><a href="https://man.openbsd.org/httpd.8">httpd(8)</a> fastcgi improvements: submit QUERY_STRING, if it exists; use a proper function to create an HTTP header; use server_file_error() to detect EOF and fastcgi stream errors; disable keep-alive/persist until there is a reliable way to get the content length.
178 a8c642e8 2014-09-08 brett <li>Use exact on-disk inode size with ext2 filesystems.
179 cce97a6e 2019-05-27 bentley <li>Properly evaluate <a href="https://man.openbsd.org/rc.d.8">rc.d(8)</a> values only after running _rc_quirks(), because these can modify flags.
180 cce97a6e 2019-05-27 bentley <li>In <a href="https://man.openbsd.org/rc.d.8">rc.d(8)</a> debug mode, properly sort and drop duplicate entries to make output less confusing.
181 cce97a6e 2019-05-27 bentley <li>Allow <a href="https://man.openbsd.org/httpd.conf.5">httpd.conf(5)</a> to specify a non-default fastcgi socket.
182 cce97a6e 2019-05-27 bentley <li>Renamed <a href="https://man.openbsd.org/httpd.8">httpd(8)</a> "docroot" variable to "path" (as it will be used for either files or the fastcgi socket).
183 cce97a6e 2019-05-27 bentley <li>Added <a href="https://man.openbsd.org/httpd.conf.5">httpd.conf(5)</a> configuration variable "fastcgi" to enable it per server or location.
184 cce97a6e 2019-05-27 bentley <li>Initial fastcgi implementation for <a href="https://man.openbsd.org/httpd.8">httpd(8)</a>.
185 cce97a6e 2019-05-27 bentley <!-- 2014/07/30 -->
186 cce97a6e 2019-05-27 bentley <li>Made <a href="https://man.openbsd.org/sysmerge.8">sysmerge(8)</a> properly warn when an example changes and the corresponding file is found under /etc.
187 cce97a6e 2019-05-27 bentley <li>Add <a href="https://man.openbsd.org/tradcpp.1">tradcpp(1)</a> version 0.4, a standalone traditional whitespace-preserving <a href="https://man.openbsd.org/cpp.1">cpp(1)</a>.
188 cce97a6e 2019-05-27 bentley <li>Added <a href="https://man.openbsd.org/httpd.conf.5">httpd.conf(5)</a> "location" keyword, to specify path-specific configuration in servers; made it work with name-based virtual servers.
189 cce97a6e 2019-05-27 bentley <li>Reserve an extra file descriptor per <a href="https://man.openbsd.org/httpd.8">httpd(8)</a> connection, instead of per request. Fixes fd accounting with persistent connections.
190 a8c642e8 2014-09-08 brett <!-- 2014/07/29 -->
191 cce97a6e 2019-05-27 bentley <li>Added extended directory index options "[no] index" and "[no] auto index" to <a href="https://man.openbsd.org/httpd.conf.5">httpd.conf(5)</a>.
192 cce97a6e 2019-05-27 bentley <li>Reverted checks about RTF_LOCAL <a href="https://man.openbsd.org/route.4">route(4)</a> (userland tools are not yet ready for this).
193 a8c642e8 2014-09-08 brett <!-- 2014/07/28 -->
194 cce97a6e 2019-05-27 bentley <li>Last (known) <a href="https://man.openbsd.org/msgbuf_write.3">msgbuf_write(3)</a> vs EOF fix incorporated into <a href="https://man.openbsd.org/smtpd.8">smtpd(8)</a>.
195 cce97a6e 2019-05-27 bentley <li>Fixed I/O <a href="https://man.openbsd.org/ktrace.1">ktrace(1)</a> of <a href="https://man.openbsd.org/sendsyslog.2">sendsyslog(2)</a>.
196 cce97a6e 2019-05-27 bentley <li>Pass a default media to the <a href="https://man.openbsd.org/sparc/le.4">le(4/sparc)</a> child. Allows SPARCbook system default to AUI without requiring a manual media change.
197 cce97a6e 2019-05-27 bentley <li>Removed buggy <a href="https://man.openbsd.org/ssl.8">ssl(8)</a> SRP code (never enabled in OpenBSD).
198 cce97a6e 2019-05-27 bentley <li><strong>5.4, 5.5 and -current RELIABILITY FIX: Fixed possible memory exhaustion in <a href="https://man.openbsd.org/dhclient.8">dhclient(8)</a> and <a href="https://man.openbsd.org/dhcpd.8">dhcpd(8)</a>, occurring on DHCP options with 0 length.</strong><br>A source code patch is available for <a href="errata54.html#013_dhcp">5.4</a> and <a href="errata55.html#009_dhcp">5.5</a>.
199 cce97a6e 2019-05-27 bentley <li>Merged <a href="https://man.openbsd.org/dhcpd.8">dhcpd(8)</a> packet.c r1.7 into <a href="https://man.openbsd.org/dhclient.8">dhclient(8)</a> and <a href="https://man.openbsd.org/dhcrelay.8">dhcrelay(8)</a>, to remove DoS attack vector.
200 cce97a6e 2019-05-27 bentley <li>Match any relevant driver (not just whitelist) for <a href="https://man.openbsd.org/X.7">X(7)</a> "aperture needed" detection.
201 a8c642e8 2014-09-08 brett <!-- 2014/07/27 -->
202 cce97a6e 2019-05-27 bentley <li>Fixed <a href="https://man.openbsd.org/ssl.8">ssl(8)</a> so RSA, DH, and ECDH temporary key callbacks are correctly passed the number of keybits for the key.
203 cce97a6e 2019-05-27 bentley <li>Made <a href="https://man.openbsd.org/pkg_add.1">pkg_add(1)</a> log libraries in a proper way.
204 cce97a6e 2019-05-27 bentley <li>Stopped <a href="https://man.openbsd.org/mandoc.1">mandoc(1)</a> assuming in -Tutf8 output mode that a non-breaking space character has width 0.
205 a8c642e8 2014-09-08 brett <!-- 2014/07/26 -->
206 a8c642e8 2014-09-08 brett <li>Fixed hangs during suspend when stopping secondary cpu.
207 cce97a6e 2019-05-27 bentley <li>Reverted "adjust -C algorithm" from <a href="https://man.openbsd.org/amd64/apmd.8">apmd(8/amd64)</a>, which broke suspend/resume on some machines.
208 cce97a6e 2019-05-27 bentley <li>Fixed (very hard to reach) DoS attack vector against <a href="https://man.openbsd.org/dhcpd.8">dhcpd(8)</a>.
209 a8c642e8 2014-09-08 brett <!-- 2014/07/25 -->
210 cce97a6e 2019-05-27 bentley <li>Differentiate <a href="https://man.openbsd.org/httpd.8">httpd(8)</a> servers by address and port, not just by address.
211 cce97a6e 2019-05-27 bentley <li>Use a URL in the Location header of <a href="https://man.openbsd.org/httpd.8">httpd(8)</a> 3xx responses.
212 cce97a6e 2019-05-27 bentley <li>Append mandatory Date header to each <a href="https://man.openbsd.org/httpd.8">httpd(8)</a> response.
213 cce97a6e 2019-05-27 bentley <li>In <a href="https://man.openbsd.org/httpd.8">httpd(8)</a>, canonicalise the request path once without the docroot; prepend the docroot only only when it's needed.
214 cce97a6e 2019-05-27 bentley <li>Prevent <a href="https://man.openbsd.org/ssh-agent.1">ssh-agent(1)</a> keys remaining in memory after they have been expired or deleted.
215 cce97a6e 2019-05-27 bentley <li>Stopped <a href="https://man.openbsd.org/httpd.8">httpd(8)</a> leaking the docroot in the error message if the default index file is missing.
216 cce97a6e 2019-05-27 bentley <li>Fixed <a href="https://man.openbsd.org/httpd.8">httpd(8)</a> address matching of multiple server blocks with non-virtual hosts.
217 cce97a6e 2019-05-27 bentley <li>Added support to <a href="https://man.openbsd.org/httpd.8">httpd(8)</a> for "virtual hosts" (aka. server blocks).
218 cce97a6e 2019-05-27 bentley <li>Added "root" configuration option to <a href="https://man.openbsd.org/httpd.conf.5">httpd.conf(5)</a>.
219 a8c642e8 2014-09-08 brett <!-- 2014/07/24 -->
220 cce97a6e 2019-05-27 bentley <li>Sped up boot sequence by deferring scan of xt keyboard code set by <a href="https://man.openbsd.org/pckbd.4">pckbd(4)</a>.
221 101b0ca3 2017-06-26 tb <li>Made <a href="https://man.openbsd.org/mandoc/man8/man.cgi.8">man.cgi(8)</a> sort result pages first by section number, then by name.
222 cce97a6e 2019-05-27 bentley <li>Provide <a href="https://man.openbsd.org/eeprom.8">eeprom(8)</a> on the sparc installation media.
223 cce97a6e 2019-05-27 bentley <li>Build machinery added to build <a href="https://man.openbsd.org/eeprom.8">eeprom(8)</a> for the installation media on relevant arches.
224 cce97a6e 2019-05-27 bentley <li>Unbreak <a href="https://man.openbsd.org/route.4">route(4)</a> flush: skip local (RTF_LOCAL) routes when flushing.
225 cce97a6e 2019-05-27 bentley <li>Reverted ssp-strong from <a href="https://man.openbsd.org/gcc.1">gcc(1)</a> on arm, which exposed too many bugs in <a href="https://man.openbsd.org/ports.7">ports(7)</a>.
226 cce97a6e 2019-05-27 bentley <li>Plugged <a href="https://man.openbsd.org/httpd.8">httpd(8)</a> memleak, to free the HTTP descriptor containing all the headers etc. of a connection.
227 101b0ca3 2017-06-26 tb <li>Provided a dropdown entry "All Architectures" to <a href="https://man.openbsd.org/mandoc/man8/man.cgi.8">man.cgi(8)</a> and made it the default.
228 a8c642e8 2014-09-08 brett <!-- 2014/07/23 -->
229 cce97a6e 2019-05-27 bentley <li>When <a href="https://man.openbsd.org/httpd.8">httpd(8)</a> is canonicalising the path, fail on truncation.
230 cce97a6e 2019-05-27 bentley <li>Made <a href="https://man.openbsd.org/httpd.8">httpd(8)</a> redirect with 301 if a directory name was requested without the trailing slash.
231 cce97a6e 2019-05-27 bentley <li>First attempt at having <a href="https://man.openbsd.org/httpd.8">httpd(8)</a> verify request path and access permissions.
232 cce97a6e 2019-05-27 bentley <li>In <a href="https://man.openbsd.org/getaddrinfo_async.3">getaddrinfo_async(3)</a> and similar, made queries fail when the hostname param is an empty string.
233 cce97a6e 2019-05-27 bentley <li>In <a href="https://man.openbsd.org/ssl.8">ssl(8)</a> level_add_node(), do not free objects on cleanup which are still being referenced by other objects.
234 cce97a6e 2019-05-27 bentley <li>Made sure <a href="https://man.openbsd.org/ssl.3">ssl(3)</a> PEM_def_callback() correctly handles negative buffer sizes.
235 cce97a6e 2019-05-27 bentley <li>Removed lynx from the base system (available in <a href="https://man.openbsd.org/packages.7">packages(7)</a> instead).
236 cce97a6e 2019-05-27 bentley <li><a href="https://man.openbsd.org/Mandoc.1">Mandoc(1)</a> security fix: after decoding numeric or one-character escape sequences, HTML-encode resulting character.
237 cce97a6e 2019-05-27 bentley <li>Correctly shutdown the servers when the <a href="https://man.openbsd.org/httpd.8">httpd(8)</a> process is terminating. Prevents a crash on exit.
238 a8c642e8 2014-09-08 brett <li>On octeon, correctly drain and destroy the bufq upon detach.
239 a8c642e8 2014-09-08 brett <!-- 2014/07/22 -->
240 cce97a6e 2019-05-27 bentley <li>Adjusted <a href="https://man.openbsd.org/apmd.8">apmd(8)</a> -C algorithm to be more aggressive in scaling up cpu speed.
241 a8c642e8 2014-09-08 brett <li>Reverted recent "memory poison" commit until after release (triggering too many use-after-free bugs).
242 101b0ca3 2017-06-26 tb <li><a href="https://man.openbsd.org/mandoc/man8/man.cgi.8">man.cgi(8)</a> security fixes, to prevent XSS attacks.
243 cce97a6e 2019-05-27 bentley <li>In <a href="https://man.openbsd.org/ssl.8">ssl(8)</a> DES_random_key(), force the generated key to the correct parity; use it to generate DES keys in the EVP_CTRL_RAND_KEY method handlers.
244 cce97a6e 2019-05-27 bentley <li>Enable <a href="https://man.openbsd.org/httpd.8">httpd(8)</a> in the builds for more testing (not finished but can serve static files).
245 cce97a6e 2019-05-27 bentley <li>Added initial <a href="https://man.openbsd.org/httpd.conf.5">httpd.conf(5)</a> example for <a href="https://man.openbsd.org/httpd.8">httpd(8)</a>.
246 a8c642e8 2014-09-08 brett <!-- 2014/07/21 -->
247 cce97a6e 2019-05-27 bentley <li>Added the <a href="https://man.openbsd.org/X.7">X(7)</a> "aperture needed" test to <a href="https://man.openbsd.org/vgafb.4">vgafb(4)</a>, to match vga@pci.
248 cce97a6e 2019-05-27 bentley <li>Corrected the initialiser for tunnconf_default_pptp in <a href="https://man.openbsd.org/npppd.8">npppd(8)</a>.
249 cce97a6e 2019-05-27 bentley <li>Reduced amount of messages from key_load_private_pem during <a href="https://man.openbsd.org/ssh.1">ssh(1)</a> hostbased auth.
250 cce97a6e 2019-05-27 bentley <li>Made <a href="https://man.openbsd.org/mandoc.1">mandoc(1)</a> preserve manpath and arch in .Xr links.
251 cce97a6e 2019-05-27 bentley <li>Reverted <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> up/down wheel emulation.
252 cce97a6e 2019-05-27 bentley <li>Stopped the installer setting (obsolete) <a href="https://man.openbsd.org/sysctl.8">sysctl(8)</a> net.inet6.ip6.accept_rtadv and net.inet6.icmp6.rediraccept.
253 101b0ca3 2017-06-26 tb <li>Made <a href="https://man.openbsd.org/mandoc/man8/man.cgi.8">man.cgi(8)</a> match RFC 2616, so the "Location: response-header" field is an absolute URI.
254 cce97a6e 2019-05-27 bentley <li>Dropped explicit <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> support for F13-F20; match the <a href="https://man.openbsd.org/xterm.1">xterm(1)</a> <a href="https://man.openbsd.org/terminfo.5">terminfo(5)</a> entry.
255 a8c642e8 2014-09-08 brett <!-- 2014/07/20 -->
256 cce97a6e 2019-05-27 bentley <li>Stopped kprintf in <a href="https://man.openbsd.org/gcc.1">gcc(1)</a> accepting the <number>$ flags (as <a href="https://man.openbsd.org/printf.9">printf(9)</a> doesn't support them).
257 cce97a6e 2019-05-27 bentley <li>When amd64/i386/loongson hibernate, look up correct device when using <a href="https://man.openbsd.org/softraid.4">softraid(4)</a>.
258 a8c642e8 2014-09-08 brett <li>Updated to pixman 0.32.6
259 cce97a6e 2019-05-27 bentley <li>Support hibernating to <a href="https://man.openbsd.org/softraid.4">softraid(4)</a> crypto volumes on amd64/i386/loongson.
260 cce97a6e 2019-05-27 bentley <li>Fix <a href="https://man.openbsd.org/tcpdump.8">tcpdump(8)</a> display of logical link control data in IEEE802 frames.
261 cce97a6e 2019-05-27 bentley <li><a href="https://man.openbsd.org/acpi.4">acpi(4)</a> now ignores region marked as "Preserve" if all bits will be modified. Fixes hang on some Sony and Asus laptops.
262 cce97a6e 2019-05-27 bentley <li>Always allocate <a href="https://man.openbsd.org/bwi.4">bwi(4)</a> ring descriptors below the 1GB boundary. Fixes "intr fatal TX/RX" errors.
263 cce97a6e 2019-05-27 bentley <li>On <a href="https://man.openbsd.org/bwi.4">bwi(4)</a>, make bwi_dma_mbuf_create() use the correct loop counter in error case.
264 cce97a6e 2019-05-27 bentley <li>Load <a href="https://man.openbsd.org/bwi.4">bwi(4)</a> firmware once, not every time the interface is brought up. Fixes a panic.
265 cce97a6e 2019-05-27 bentley <li>Fixed array overflow in <a href="https://man.openbsd.org/telnet.1">telnet(1)</a> command line handling
266 cce97a6e 2019-05-27 bentley <li>When <a href="https://man.openbsd.org/spamd.8">spamd(8)</a> is started by <a href="https://man.openbsd.org/rc.d.8">rc.d(8)</a>: no longer start in background mode; return from rc_start() if <a href="https://man.openbsd.org/spamd.8">spamd(8)</a> failed to start; execute <a href="https://man.openbsd.org/spamd-setup.8">spamd-setup(8)</a> without explicitly waiting for <a href="https://man.openbsd.org/spamd.8">spamd(8)</a>.
267 cce97a6e 2019-05-27 bentley <li>Fixed auto-upgradable file detection by <a href="https://man.openbsd.org/sysmerge.8">sysmerge(8)</a>.
268 a8c642e8 2014-09-08 brett <!-- 2014/07/19 -->
269 cce97a6e 2019-05-27 bentley <li>Aligned <a href="https://man.openbsd.org/telnet.1">telnet(1)</a> with the manpage by making the "-a" use <a href="https://man.openbsd.org/getlogin.2">getlogin(2)</a>; ignore value if it returns a nonexistent user.
270 cce97a6e 2019-05-27 bentley <li>Flensed the <a href="https://man.openbsd.org/telnet.1">telnet(1)</a> code base of support for ancient protocols and systems.
271 cce97a6e 2019-05-27 bentley <li>On loongson, fixed Lemote reboot issue and <a href="https://man.openbsd.org/usb.4">usb(4)</a> problems on Gdium models.
272 cce97a6e 2019-05-27 bentley <li><a href="https://man.openbsd.org/mandoc.1">mandoc(1)</a> security fixes: validate name of file before opening; only allow relative filenames starting with "man" or "cat" and not containing "/.." or "../"; validate the manpath up front, report a Bad Request if it is not listed in manpath.conf; in case of configuration errors, only report "Internal Server Error".
273 a8c642e8 2014-09-08 brett <!-- 2014/07/18 -->
274 cce97a6e 2019-05-27 bentley <li>Fixed <a href="https://man.openbsd.org/strtonum.3">strtonum(3)</a> range, to unbreak "-pass fd:0" in <a href="https://man.openbsd.org/ssl.8">ssl(8)</a>.
275 cce97a6e 2019-05-27 bentley <li>Cleaned up portable <a href="https://man.openbsd.org/arc4random.3">arc4random(3)</a> fork detection code; let it take advantage of systems with healthy <a href="https://man.openbsd.org/getentropy.2">getentropy(2)</a>.
276 101b0ca3 2017-06-26 tb <li>Stopped <a href="https://man.openbsd.org/mandoc/man8/man.cgi.8">man.cgi(8)</a> using the HTTP_HOST CGI variable (made HTTP redirect Location: relative). Reduces attack surface.
277 cce97a6e 2019-05-27 bentley <li>Removed dev/log AF_UNIX sockets from various <a href="https://man.openbsd.org/chroot.2">chroot(2)</a> spaces, since <a href="https://man.openbsd.org/syslog.3">syslog(3)</a> messages are now sent via <a href="https://man.openbsd.org/sendsyslog.2">sendsyslog(2)</a>.
278 cce97a6e 2019-05-27 bentley <li>Fixed <a href="https://man.openbsd.org/pkg_add.1">pkg_add(1)</a> sorted output.
279 cce97a6e 2019-05-27 bentley <li>When <a href="https://man.openbsd.org/mandoc.1">mandoc(1)</a> MAN_DIR or manpath.conf do not exist or are empty, <a href="https://man.openbsd.org/exit.3">exit(3)</a> in a controlled way.
280 cce97a6e 2019-05-27 bentley <li>Fixed privilege separation in <a href="https://man.openbsd.org/npppd.8">npppd(8)</a>.
281 cce97a6e 2019-05-27 bentley <li>In <a href="https://man.openbsd.org/bnx.4">bnx(4)</a>, implemented EFBIG handling for heavily fragmented packets on the tx path.
282 a8c642e8 2014-09-08 brett <!-- 2014/07/17 -->
283 cce97a6e 2019-05-27 bentley <li>In <a href="https://man.openbsd.org/dump.8">dump(8)</a>, allow files-to-dump to be a duid.
284 a8c642e8 2014-09-08 brett <li>On sgi, optimised use of external L2 cache handling on the few Indy/Indigo2 systems which have it.
285 cce97a6e 2019-05-27 bentley <li>Unbroke <a href="https://man.openbsd.org/rc.d.8">rc.d(8)</a> script for <a href="https://man.openbsd.org/smapd.8">smapd(8)</a> after the rc_do->_rc_do and rc_wait->_rc_wait renaming.
286 cce97a6e 2019-05-27 bentley <li>Zero out the random buffer for <a href="https://man.openbsd.org/sysctl.3">sysctl(3)</a> and the entropy buffer.
287 101b0ca3 2017-06-26 tb <li>Made sure the biglock is held on i386 when running interrupt handlers (which rely on it).
288 cce97a6e 2019-05-27 bentley <li>Reflect stdio-forward ("ssh -W host:port ...") failures in <a href="https://man.openbsd.org/ssh.1">ssh(1)</a> exit status (bz#2255).
289 cce97a6e 2019-05-27 bentley <li>In x509_vfy.c, free sktmp when it's no longer needed. Fixes many memory leaks in <a href="https://man.openbsd.org/ssl.3">ssl(3)</a>.
290 a8c642e8 2014-09-08 brett <!-- 2014/07/16 -->
291 cce97a6e 2019-05-27 bentley <li>Added <a href="https://man.openbsd.org/mpbios.4">mpbios(4)</a> to RAMDISK_CD on i386/amd64, so bsd.mp is selected when installing to Soekris net6501.
292 cce97a6e 2019-05-27 bentley <li>Implemented file descriptor accounting in <a href="https://man.openbsd.org/httpd.8">httpd(8)</a> for single-pass HTTP connections, persistent connections with multiple requests, and body-less HEAD requests.
293 a8c642e8 2014-09-08 brett <!-- 2014/07/15 -->
294 cce97a6e 2019-05-27 bentley <li>Added <a href="https://man.openbsd.org/sshd.8">sshd(8)</a> support for unix domain socket forwarding.
295 a8c642e8 2014-09-08 brett <!-- 2014/07/14 -->
296 a8c642e8 2014-09-08 brett <li>Updated to xf86-video-neomagic 1.2.8.
297 a8c642e8 2014-09-08 brett <li>Enable ext2fs support on RAMDISK_CD.
298 cce97a6e 2019-05-27 bentley <li>Converted <a href="https://man.openbsd.org/ftp.1">ftp(1)</a> to libressl.
299 cce97a6e 2019-05-27 bentley <li>Removed <a href="https://man.openbsd.org/securelevel.7">securelevel(7)</a> variable from <a href="https://man.openbsd.org/rc.8">rc(8)</a>.
300 cce97a6e 2019-05-27 bentley <li>powerdown=YES removed from <a href="https://man.openbsd.org/reboot.8">reboot(8)</a>.
301 cce97a6e 2019-05-27 bentley <li>Updated to <a href="https://man.openbsd.org/xterm.1">xterm(1)</a> version 309.
302 a8c642e8 2014-09-08 brett <!-- 2014/07/13 -->
303 cce97a6e 2019-05-27 bentley <li>Fixed timeouts in <a href="https://man.openbsd.org/relayd.8">relayd(8)</a> when one connection is spliced and one non-spliced.
304 a8c642e8 2014-09-08 brett <li>Added configuration handling for certificate and key files to libressl.
305 cce97a6e 2019-05-27 bentley <li><a href="https://man.openbsd.org/KASSERTMSG.9">KASSERTMSG(9)</a>: new function for a kernel assertion with message.
306 a8c642e8 2014-09-08 brett <li>Fixed sched_stop_secondary_cpus() to properly drain run queues from CPUs.
307 cce97a6e 2019-05-27 bentley <li>Display zero page hit and miss counters in <a href="https://man.openbsd.org/vmstat.8">vmstat(8)</a> -s.
308 cce97a6e 2019-05-27 bentley <li>Show an error if cmd_find_session can't find the current <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> session.
309 cce97a6e 2019-05-27 bentley <li>Made <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> close a connection when it receives an EOF.
310 cce97a6e 2019-05-27 bentley <li>If a client is killed while suspended with ^Z, <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> will no longer try to resume it.
311 cce97a6e 2019-05-27 bentley <li>Removed all crypt choices other than bcrypt from <a href="https://man.openbsd.org/adduser.8">adduser(8)</a>.
312 a8c642e8 2014-09-08 brett <li>When using NAT or redirects, recalculate the checksum of reassembled IPv6 fragments before the packet is refragmented.
313 cce97a6e 2019-05-27 bentley <li>Fixed path MTU discovery with <a href="https://man.openbsd.org/ping6.8">ping6(8)</a> through <a href="https://man.openbsd.org/pf.4">pf(4)</a> using nat or rdr.
314 cce97a6e 2019-05-27 bentley <li>Introduced the PS_NOBROADCASTKILL flag that excludes processes from receiving <a href="https://man.openbsd.org/kill.1">kill(1)</a> -1 broadcast signals.
315 cce97a6e 2019-05-27 bentley <li><a href="https://man.openbsd.org/KERNEL_ASSERT_LOCKED.9">KERNEL_ASSERT_LOCKED(9)</a> function added, working towards removal of the kernel lock.
316 a8c642e8 2014-09-08 brett <li>Initial support to read GPT partition tables in the kernel on i386/amd64 (requires option GPT).
317 cce97a6e 2019-05-27 bentley <li>Ensured <a href="https://man.openbsd.org/httpd.8">httpd(8)</a> finishes writing the output before closing the connection.
318 cce97a6e 2019-05-27 bentley <li>Fixed tight renew loop regression in <a href="https://man.openbsd.org/dhclient.8">dhclient(8)</a>.
319 cce97a6e 2019-05-27 bentley <li><a href="https://man.openbsd.org/httpd.8">httpd(8)</a> will now close the connection after the response is completed (no Keepalive yet).
320 cce97a6e 2019-05-27 bentley <li>Added <a href="https://man.openbsd.org/httpd.8">httpd(8)</a> support for media types (compatible with <a href="https://man.openbsd.org/nginx.8">nginx(8)</a> mime.types file).
321 a8c642e8 2014-09-08 brett <li>Added ext4 read support.
322 cce97a6e 2019-05-27 bentley <li>Brought man.cgi default mode closer to what <a href="https://man.openbsd.org/man.1">man(1)</a> does.
323 cce97a6e 2019-05-27 bentley <li>Close connection/remove event handler when <a href="https://man.openbsd.org/ypldap.8">ypldap(8)</a> msgbuf_write() hits an EOF.
324 cce97a6e 2019-05-27 bentley <li>Introduced <a href="https://man.openbsd.org/mount.8">mount(8)</a> -N option and a "net" mount option, and matching <a href="https://man.openbsd.org/fsck.8">fsck(8)</a> -N flag.
325 cce97a6e 2019-05-27 bentley <li>Updated <a href="https://man.openbsd.org/glxinfo.1">glxinfo(1)</a> and <a href="https://man.openbsd.org/glxgears.1">glxgears(1)</a> to version in mesa demos 8.2.0.
326 cce97a6e 2019-05-27 bentley <li>Better <a href="https://man.openbsd.org/httpd.8">httpd(8)</a> error messages.
327 a8c642e8 2014-09-08 brett <!-- 2014/07/12 -->
328 cce97a6e 2019-05-27 bentley <li>Added <a href="https://man.openbsd.org/httpd.8">httpd(8)</a>, a simple web server (preliminary version).
329 cce97a6e 2019-05-27 bentley <li><a href="https://man.openbsd.org/dmesg.8">dmesg(8)</a> now indicates if aperture driver is required by <a href="https://man.openbsd.org/X.7">X(7)</a>. Used by installer for <a href="https://man.openbsd.org/sysctl.8">sysctl(8)</a> machdep.allowaperture setting.
330 cce97a6e 2019-05-27 bentley <li>Fixed <a href="https://man.openbsd.org/usb.4">usb(4)</a> connect freeze on octeon, by clearing the host port interrupt.
331 a459bb9c 2014-10-06 yasuoka <li>Resize inpcb hashtable automatically.
332 cce97a6e 2019-05-27 bentley <li>Removed <a href="https://man.openbsd.org/udfu.4">udfu(4)</a>.
333 a8c642e8 2014-09-08 brett <li>Updated to xf86-video-modesetting 0.9.0.
334 cce97a6e 2019-05-27 bentley <li>On octeon, fixed root hub descriptors by matching <a href="https://man.openbsd.org/ehci.4">ehci(4)</a>'s descriptors.
335 cce97a6e 2019-05-27 bentley <li>In <a href="https://man.openbsd.org/sysmerge.8">sysmerge(8)</a>, use <a href="https://man.openbsd.org/sha256.1">sha256(1)</a> for compared files.
336 cce97a6e 2019-05-27 bentley <li>Rework <a href="https://man.openbsd.org/zyd.4">zyd(4)</a>'s register read/write methods to eliminate race conditions.
337 cce97a6e 2019-05-27 bentley <li>Fixed <a href="https://man.openbsd.org/netstart.8">netstart(8)</a> after autoconf6 change so "rtsol" lines in <a href="https://man.openbsd.org/hostname.if.5">hostname.if(5)</a> work again.
338 cce97a6e 2019-05-27 bentley <li>Always create a local <a href="https://man.openbsd.org/route.4">route(4)</a> for every configured IPv4 address on the machine; made sure the local <a href="https://man.openbsd.org/route.4">route(4)</a> is removed during an address change (stops <a href="https://man.openbsd.org/pppoe.4">pppoe(4)</a> corrupting the routing tree); do not add a local route if the specified address is 0.0.0.0 (prevents tree corruption).
339 cce97a6e 2019-05-27 bentley <li>Use <a href="https://man.openbsd.org/imsg.3">imsg(3)</a> between the privileged and the non-privileged <a href="https://man.openbsd.org/npppd.8">npppd(8)</a> processes.
340 cce97a6e 2019-05-27 bentley <li>Fixed <a href="https://man.openbsd.org/whatis.1">whatis(1)</a>, to correctly match words instead of any substrings; provide an internal mode for <a href="https://man.openbsd.org/mandoc/man8/man.cgi.8">man.cgi(8)</a>.
341 cce97a6e 2019-05-27 bentley <li>Removed <a href="https://man.openbsd.org/qli.4">qli(4)</a> (never enabled and was unfinished).
342 cce97a6e 2019-05-27 bentley <li>Made <a href="https://man.openbsd.org/rc.conf.8">rc.conf(8)</a> a parsed configuration file; stop sourcing it as a shell script.
343 a8c642e8 2014-09-08 brett <li>Updated to libICE 1.0.9 and libXft 2.3.2.
344 cce97a6e 2019-05-27 bentley <li>Add a function to drop all clean pages on the <a href="https://man.openbsd.org/uvm.9">uvm(9)</a> page daemon queues; call it when we hibernate.
345 cce97a6e 2019-05-27 bentley <li>Moved macppc <a href="https://man.openbsd.org/abtn.4">abtn(4)</a> driver from workq to taskq.
346 cce97a6e 2019-05-27 bentley <li>Only detach the <a href="https://man.openbsd.org/usb.4">usb(4)</a> device that has been disconnected, to fix a regression.
347 a8c642e8 2014-09-08 brett <!-- 2014/07/11 -->
348 cce97a6e 2019-05-27 bentley <li>Implemented checksum offload for <a href="https://man.openbsd.org/divert.4">divert(4)</a>.
349 cce97a6e 2019-05-27 bentley <li>Allowed <a href="https://man.openbsd.org/acpitz.4">acpitz(4)</a> to accept a temperature reading of 0 degC (fixes some machines with "failed to read _TMP" errors).
350 cce97a6e 2019-05-27 bentley <li>Stopped <a href="https://man.openbsd.org/acpitz.4">acpitz(4)</a> reporting bogus temperature values (temperatures > 4,000 degC) and therefore shutting down the machine.
351 a8c642e8 2014-09-08 brett <li>Initial version of libressl; provide LIBRESSL_VERSION_NUMBER to detect versions distinct from OPENSSL_XXX.
352 cce97a6e 2019-05-27 bentley <li>Limit <a href="https://man.openbsd.org/relayd.8">relayd(8)</a> HTTP header length to 8K (based on the default of 4-8K common in web servers).
353 cce97a6e 2019-05-27 bentley <li>In <a href="https://man.openbsd.org/boot.9">boot(9)</a>, purged curproc-overriding hacks.
354 cce97a6e 2019-05-27 bentley <li><a href="https://man.openbsd.org/bluetooth.4">bluetooth(4)</a> support removed (code did not work properly anyway).
355 cce97a6e 2019-05-27 bentley <li>Better <a href="https://man.openbsd.org/m4.1">m4(1)</a> error handling in mkstemp/unlink/fdopen logic.
356 cce97a6e 2019-05-27 bentley <li>Started reducing the attack surface of <a href="https://man.openbsd.org/lynx.1">lynx(1)</a> (gopher, news, and dired left enabled for now).
357 a8c642e8 2014-09-08 brett <li>Enabled interrupt routines on octeon.
358 cce97a6e 2019-05-27 bentley <li>Added <a href="https://man.openbsd.org/relayd.conf.5">relayd.conf(5)</a> options for disallowing client-initiated renegotiations and to prefer the server's cipher list.
359 cce97a6e 2019-05-27 bentley <li>Added <a href="https://man.openbsd.org/relayd.8">relayd(8)</a> support for EDH to provide perfect forward secrecy for older <a href="https://man.openbsd.org/ssl.8">ssl(8)</a> clients.
360 cce97a6e 2019-05-27 bentley <li>Stopped DHCPINFORM in <a href="https://man.openbsd.org/dhcpd.8">dhcpd(8)</a> looking up the lease database, filling the yiaddr field, or including lease time parameters.
361 cce97a6e 2019-05-27 bentley <li>Introduced IFXF_AUTOCONF6 interface and removed net.inet6.ip6.accept_rtadv from <a href="https://man.openbsd.org/sysctl.8">sysctl(8)</a>.
362 cce97a6e 2019-05-27 bentley <li>Allow IFXF_AUTOCONF6 to be set and cleared via <a href="https://man.openbsd.org/ifconfig.8">ifconfig(8)</a>.
363 cce97a6e 2019-05-27 bentley <li>On <a href="https://man.openbsd.org/rtsold.8">rtsold(8)</a>, turned AFXF_AUTOCONF6 on.
364 a8c642e8 2014-09-08 brett <li>Placed the first examples into the new /etc/examples directory.
365 cce97a6e 2019-05-27 bentley <li>Documentation update for libcrypto and <a href="https://man.openbsd.org/ssl.8">ssl(8)</a>.
366 cce97a6e 2019-05-27 bentley <li>Prevent infinite loop during <a href="https://man.openbsd.org/ssl.8">ssl(8)</a> configuration file parsing (PR #2985).
367 cce97a6e 2019-05-27 bentley <li>In ssl3_get_cert_verify(), accommodate <a href="https://man.openbsd.org/ssl.8">ssl(8)</a> RSA keys larger than 4096-bit (PR #319).
368 cce97a6e 2019-05-27 bentley <li>Fixed copy for CCM, GCM and XTS (<a href="https://man.openbsd.org/ssl.8">ssl(8)</a> PR #3272).
369 cce97a6e 2019-05-27 bentley <li>Added machine independent <a href="https://man.openbsd.org/reboot.9">reboot(9)</a> function.
370 cce97a6e 2019-05-27 bentley <li>Removed redundant check and wrong fix from <a href="https://man.openbsd.org/fsck_msdos.8">fsck_msdos(8)</a>: fat.c checks already take care of cluster chains.
371 cce97a6e 2019-05-27 bentley <li>In <a href="https://man.openbsd.org/ssl.8">ssl(8)</a> asn1_get_length(), tolerate leading zeroes in BER encoding (PR #2746).
372 cce97a6e 2019-05-27 bentley <li>In <a href="https://man.openbsd.org/ssl.8">ssl(8)</a> EVP_PBE_alg_add don't use the underlying NID for the cipher, as it may have a non-standard key size (PR #3206).
373 cce97a6e 2019-05-27 bentley <li>By popular demand, added back hamc-sha1 to <a href="https://man.openbsd.org/sshd.8">sshd(8)</a> protocols (still used by many clients).
374 cce97a6e 2019-05-27 bentley <li>Fixed <a href="https://man.openbsd.org/ssl.8">ssl(8)</a> OID encoding for single components (PR #2556).
375 cce97a6e 2019-05-27 bentley <li>More <a href="https://man.openbsd.org/ssl.8">ssl(8)</a> memory leaks and unchecked allocations fixed (PR #3403).
376 cce97a6e 2019-05-27 bentley <li>Made sure BN_sqr never returns negative numbers (<a href="https://man.openbsd.org/ssl.8">ssl(8)</a> PR #3400).
377 cce97a6e 2019-05-27 bentley <li>Let <a href="https://man.openbsd.org/ssl.8">ssl(8)</a> accept CCS again after "finished" has been sent by the client. Avoids failed renegotiations (PR #3400).
378 cce97a6e 2019-05-27 bentley <li>In <a href="https://man.openbsd.org/ssl.8">ssl(8)</a> dtls1_clear_queues(), free buffered_add_data.q correctly (PR #3286).
379 cce97a6e 2019-05-27 bentley <li>Fixed version number processing in <a href="https://man.openbsd.org/ssl.8">ssl(8)</a> cms_sd_set_version() (PR #3249).
380 cce97a6e 2019-05-27 bentley <li>Removed <a href="https://man.openbsd.org/rdist.1">rdist(1)</a>.
381 a8c642e8 2014-09-08 brett <li>Avoid panic on alpha when using network card with a small number of tx descriptors per packet, a lot of memory, and a heavily fragmented packets.
382 d4242974 2021-10-08 tj <li>When looking for the issuer of a <a href="https://man.openbsd.org/ssl.8">ssl(8)</a> X.509 certificate, only return an expired certificate if no valid certificates have been found (PR #3359).
383 cce97a6e 2019-05-27 bentley <li>In <a href="https://man.openbsd.org/ssl.8">ssl(8)</a> ssl3_get_client_key_exchange() parsing a GOST session key, invoke the regular ASN.1 parser (PR #3335).
384 a8c642e8 2014-09-08 brett <li>Removed RFC4620 Node Information Query support from the kernel.
385 cce97a6e 2019-05-27 bentley <li>Made <a href="https://man.openbsd.org/ssl.8">ssl(8)</a> CMS_decrypt_set1_pkey() return an error if no recipient type matches, instead of returning a random key (PR #3348).
386 cce97a6e 2019-05-27 bentley <li>Fixed missing initialisation in <a href="https://man.openbsd.org/ssl.8">ssl(8)</a> (PR#3289 and #3345).
387 cce97a6e 2019-05-27 bentley <li>Simplified <a href="https://man.openbsd.org/relayd.8">relayd(8)</a> code that handles the HTTP headers. Fixes some issues (e.g. handling of multiple "Set-Cookie" headers).
388 a8c642e8 2014-09-08 brett <li>Don't hold the kernel lock while halting a processor.
389 a8c642e8 2014-09-08 brett <li>New CPU_BUSY_CYCLE() function, so the CPU can reduce power consumption in busy loops.
390 cce97a6e 2019-05-27 bentley <li>Synchronised zaurus's <a href="https://man.openbsd.org/boot.9">boot(9)</a> with all others by having it call if_downall().
391 cce97a6e 2019-05-27 bentley <li>Added -u option to <a href="https://man.openbsd.org/dhcpd.8">dhcpd(8)</a>. Binds UDP port to answer DHCPINFORM from clients on non-ethernet interfaces (eg. <a href="https://man.openbsd.org/tun.4">tun(4)</a> or <a href="https://man.openbsd.org/pppx.4">pppx(4)</a>).
392 cce97a6e 2019-05-27 bentley <li>Converted <a href="https://man.openbsd.org/bus_dmamem_map.9">bus_dmamem_map(9)</a> to <a href="https://man.openbsd.org/km_alloc.9">km_alloc(9)</a>, to fail (not sleep) if the allocator cannot obtain a lock when BUS_DMA_NOWAIT is specified.
393 cce97a6e 2019-05-27 bentley <li>Updated to <a href="https://man.openbsd.org/Xserver.1">Xserver(1)</a> version 1.15.2.
394 cce97a6e 2019-05-27 bentley <li>Corrected readlink termination in <a href="https://man.openbsd.org/csh.1">csh(1)</a>.
395 a8c642e8 2014-09-08 brett <!-- 2014/07/10 -->
396 cce97a6e 2019-05-27 bentley <li>Using -U command-line option, allow <a href="https://man.openbsd.org/ftp.1">ftp(1)</a> to change its user agent for HTTP(S) URL requests.
397 a8c642e8 2014-09-08 brett <li>Flush the buffercache to 16MB on hibernate and restore its previous max size (kern.bufcachepercent) on resume. Better hibernate performance.
398 cce97a6e 2019-05-27 bentley <li>Set cold to 1 before executing the DVACT_POWERDOWN handlers when halting or rebooting a machine. Avoids panic on macppc with <a href="https://man.openbsd.org/uhci.4">uhci(4)</a> cardbus.
399 cce97a6e 2019-05-27 bentley <li>Fixed panic seen when unplugging a cardbus <a href="https://man.openbsd.org/ehci.4">ehci(4)</a>, <a href="https://man.openbsd.org/ohci.4">ohci(4)</a> or <a href="https://man.openbsd.org/uhci.4">uhci(4)</a>.
400 cce97a6e 2019-05-27 bentley <li>Taught <a href="https://man.openbsd.org/fsck_msdos.8">fsck_msdos(8)</a> that uninitialised values (-1) in FSInfo are valid.
401 cce97a6e 2019-05-27 bentley <li><a href="https://man.openbsd.org/newfs_msdos.8">newfs_msdos(8)</a> fixes: always put boot signature at end of 512 byte sector, even on disks with larger sector sizes; do not point at a cluster that is in use; avoid out of boundary access when checking invalid long filenames; validate number of FATs; validate critical file system info.
402 cce97a6e 2019-05-27 bentley <li>Improved <a href="https://man.openbsd.org/smtpd.8">smtpd(8)</a> scheduler: can now return envelopes of different types in a single run (interlaced to avoid batch effects); send envelopes at a rate that the queue can sustain; limit the number of envelopes in a holdq (excess returned to pending queue).
403 cce97a6e 2019-05-27 bentley <li>Return RSN (WPA) information to userland during <a href="https://man.openbsd.org/ifconfig.8">ifconfig(8)</a> wireless scan; show whether a wireless network uses WEP or WPA.
404 cce97a6e 2019-05-27 bentley <li><a href="https://man.openbsd.org/m4.1">m4(1)</a> will now annotate regexp error messages with the source string.
405 cce97a6e 2019-05-27 bentley <li>Stop using a shutdown hook for <a href="https://man.openbsd.org/softraid.4">softraid(4)</a> and explicitly shutdown the disciplines right after vfs_shutdown().
406 a8c642e8 2014-09-08 brett <li>Added bus and root hub routines to octeon, to prevent panic at attach.
407 cce97a6e 2019-05-27 bentley <li>Made <a href="https://man.openbsd.org/usbdevs.8">usbdevs(8)</a> correctly report devices connected to <a href="https://man.openbsd.org/xhci.4">xhci(4)</a>.
408 cce97a6e 2019-05-27 bentley <li>Fixed missing allocation checks and potential NULL pointer dereference in the error path in <a href="https://man.openbsd.org/ssl.8">ssl(8)</a> PEM_X509_INFO_read_bio().
409 cce97a6e 2019-05-27 bentley <li><a href="https://man.openbsd.org/vic.4">vic(4)</a> now records the size of the rx rings so we can wrap around them correctly. Fixed a panic.
410 cce97a6e 2019-05-27 bentley <li>Added internal buffering for <a href="https://man.openbsd.org/dump.8">dump(8)</a>. Ensures all requested data is actually read from the device when they have non-512 byte sectors.
411 cce97a6e 2019-05-27 bentley <li>Removed bogus preprocessor statements (trying to pick the largest integer type for BF_LONG, MD[45]_LONG and SHA_LONG) from <a href="https://man.openbsd.org/ssl.8">ssl(8)</a>.
412 cce97a6e 2019-05-27 bentley <li>Removed compression from <a href="https://man.openbsd.org/ssl.8">ssl(8)</a>.
413 a8c642e8 2014-09-08 brett <!-- 2014/07/09 -->
414 cce97a6e 2019-05-27 bentley <li>Simplified the way <a href="https://man.openbsd.org/divert.4">divert(4)</a> sends packets to userspace.
415 cce97a6e 2019-05-27 bentley <li>When <a href="https://man.openbsd.org/relayd.8">relayd(8)</a> is copying structures via imsg, ensured contents do not contain bogus pointer values.
416 a8c642e8 2014-09-08 brett <li>Merged in mesa 10.2.3.
417 cce97a6e 2019-05-27 bentley <li>In <a href="https://man.openbsd.org/ssl.8">ssl(8)</a> ocsp_lib.c, reset host, port and path to null after freeing so the caller doesn't accidentally free them again.
418 cce97a6e 2019-05-27 bentley <li>Removed <a href="https://man.openbsd.org/mkstr.1">mkstr(1)</a> and <a href="https://man.openbsd.org/xstr.1">xstr(1)</a>.
419 cce97a6e 2019-05-27 bentley <li>Replace <a href="https://man.openbsd.org/relayd.8">relayd(8)</a> protocol directives for HTTP with a new generic filtering language (grammar inspired by <a href="https://man.openbsd.org/pf.4">pf(4)</a>).
420 a8c642e8 2014-09-08 brett <li>Fixed resume time page table issue on amd64 if the piglet was located above 1GB physical (caused by using an incorrect page size mask).
421 cce97a6e 2019-05-27 bentley <li>Cleaned up and simplified <a href="https://man.openbsd.org/ssl.8">ssl(8)</a> SSL_CIPHER_description by always using <a href="https://man.openbsd.org/asprintf.3">asprintf(3)</a>.
422 cce97a6e 2019-05-27 bentley <li>Added daemon_timeout variable to <a href="https://man.openbsd.org/rc.d.8">rc.d(8)</a> and <a href="https://man.openbsd.org/rc.subr.8">rc.subr(8)</a> (sets maximum time to wait for actions to return).
423 cce97a6e 2019-05-27 bentley <li>Fixed crash in <a href="https://man.openbsd.org/ssh-add.1">ssh-add(1)</a> while loading more than one key.
424 cce97a6e 2019-05-27 bentley <li>Fixed classless-{ms-,}static-routes in <a href="https://man.openbsd.org/dhcpd.8">dhcpd(8)</a> to comply RFC 3442.
425 cce97a6e 2019-05-27 bentley <li>Added "no-dsn" listener option <a href="https://man.openbsd.org/smtpd.conf.5">smtpd.conf(5)</a>, which disables DSN extension.
426 a8c642e8 2014-09-08 brett <li>Suspend kernel's stack smash guard to avoid panicking during unpack.
427 a8c642e8 2014-09-08 brett <li>Fixed i386/amd64 hibernate issue where kernel lock acquisition was started but not completed.
428 cce97a6e 2019-05-27 bentley <li>Removed <a href="https://man.openbsd.org/ssl.8">ssl(8)</a> "export" cipher handling.
429 cce97a6e 2019-05-27 bentley <li><a href="https://man.openbsd.org/ncheck_ffs.8">ncheck_ffs(8)</a> now accepts duid for the filesystem argument.
430 cce97a6e 2019-05-27 bentley <li><a href="https://man.openbsd.org/smtpd.8">smtpd(8)</a> config parser improvements: fail if the same option is specified multiple times on a listener; prompt for queue encryption key after (not during) <a href="https://man.openbsd.org/smtpd.conf.5">smtpd.conf(5)</a> parsing; added ip addresses to localnames table.
431 cce97a6e 2019-05-27 bentley <li><a href="https://man.openbsd.org/bpf.4">bpf(4)</a> code simplification.
432 cce97a6e 2019-05-27 bentley <li>Set <a href="https://man.openbsd.org/sysctl.8">sysctl(8)</a> default of net.inet6.icmp6.nodeinfo to 0, disabling responses to RFC4620 IPv6 Node Information Queries.
433 cce97a6e 2019-05-27 bentley <li>Fixed <a href="https://man.openbsd.org/boot.8">boot(8)</a> -d on amd64 and i386.
434 cce97a6e 2019-05-27 bentley <!-- 2014/07/08 -->
435 cce97a6e 2019-05-27 bentley <li>Updated to <a href="https://man.openbsd.org/lynx.1">lynx(1)</a> version 2.8.8rel2, keeping local changes.
436 cce97a6e 2019-05-27 bentley <li>Downgraded more <a href="https://man.openbsd.org/ssh.1">ssh(1)</a> error() to debug(). Suppresses spurious errors with hostbased authentication enabled.
437 cce97a6e 2019-05-27 bentley <li>More useful <a href="https://man.openbsd.org/sftp.1">sftp(1)</a> error message when GLOB_NOSPACE occurs (bz#2254).
438 cce97a6e 2019-05-27 bentley <li>While filling the rx ring, stopped <a href="https://man.openbsd.org/bnx.4">bnx(4)</a> and <a href="https://man.openbsd.org/msk.4">msk(4)</a> being too smart in avoiding overuse of file descriptors.
439 cce97a6e 2019-05-27 bentley <li>Marked the weakened <a href="https://man.openbsd.org/ssl.8">ssl(8)</a> 40-bit export ciphers as invalid.
440 cce97a6e 2019-05-27 bentley <li><a href="https://man.openbsd.org/smtpd.8">smtpd(8)</a> now sends correct imsg when enabling profiling at runtime.
441 cce97a6e 2019-05-27 bentley <li>Removed <a href="https://man.openbsd.org/asa.1">asa(1)</a>.
442 cce97a6e 2019-05-27 bentley <li>Fixed a double free bug in parsing <a href="https://man.openbsd.org/npppd.conf.5">npppd.conf(5)</a>.
443 cce97a6e 2019-05-27 bentley <li>Stopped <a href="https://man.openbsd.org/npppd.8">npppd(8)</a> accessing freed memory when it is exiting.
444 cce97a6e 2019-05-27 bentley <li>Define SMALL_REGISTER_BANK in <a href="https://man.openbsd.org/ssl.8">ssl(8)</a> on arm and vax. Generates faster code (vax 30% faster).
445 cce97a6e 2019-05-27 bentley <li>Various <a href="https://man.openbsd.org/smtpd.8">smtpd(8)</a> queue improvements.
446 cce97a6e 2019-05-27 bentley <li>Made sure to clear the WAIT flag when cancelling the <a href="https://man.openbsd.org/smtpd.8">smtpd(8)</a> MTA connector timeout.
447 cce97a6e 2019-05-27 bentley <li>Pulled the rx ring accounting out of the <a href="https://man.openbsd.org/mbuf.9">mbuf(9)</a> layer. Simplifies the allocation paths.
448 101b0ca3 2017-06-26 tb <!-- 2014/07/07 -->
449 cce97a6e 2019-05-27 bentley <li>On <a href="https://man.openbsd.org/em.4">em(4)</a>, bus_dmamap_sync the rx ring once per em_rxeof call, rather than for every rx descriptor.
450 cce97a6e 2019-05-27 bentley <li>Stopped <a href="https://man.openbsd.org/em.4">em(4)</a> stalling the entire tx path when it encounters a heavily fragmented packet.
451 cce97a6e 2019-05-27 bentley <li>Cleaned up <a href="https://man.openbsd.org/mandoc.1">mandoc(1)</a> ERROR messages related to document structure and macros.
452 cce97a6e 2019-05-27 bentley <li>Run <a href="https://man.openbsd.org/getuid.2">getuid(2)</a>, <a href="https://man.openbsd.org/getgid.2">getgid(2)</a>, <a href="https://man.openbsd.org/getresuid.2">getresuid(2)</a>, <a href="https://man.openbsd.org/setreuid.2">setreuid(2)</a> and <a href="https://man.openbsd.org/setuid.2">setuid(2)</a> without the kernel lock.
453 cce97a6e 2019-05-27 bentley <li>Stopped <a href="https://man.openbsd.org/pckbc.1">pckbc(1)</a> printing warnings for mouse interrupts when running bsd.rd.
454 cce97a6e 2019-05-27 bentley <li>In <a href="https://man.openbsd.org/pkg_add.1">pkg_add(1)</a>, restored the progress meter for large files.
455 cce97a6e 2019-05-27 bentley <li>Stopped <a href="https://man.openbsd.org/mandoc.1">mandoc(1)</a> unnecessarily deleting any content from .Rs blocks.
456 cce97a6e 2019-05-27 bentley <li>Implemented .dei and .ami in <a href="https://man.openbsd.org/roff.7">roff(7)</a>.
457 cce97a6e 2019-05-27 bentley <li><a href="https://man.openbsd.org/smtpd.8">smtpd(8)</a> now allows enabling profiling at runtime.
458 a8c642e8 2014-09-08 brett <!-- 2014/07/06 -->
459 cce97a6e 2019-05-27 bentley <li>If <a href="https://man.openbsd.org/acpi.4">acpi(4)</a> finds a bogus interrupt, don't panic but print a message, to workaround dodgy BIOS.
460 cce97a6e 2019-05-27 bentley <li>Marked <a href="https://man.openbsd.org/getentropy.2">getentropy(2)</a> with NOLOCK (it doesn't need the kernel lock).
461 cce97a6e 2019-05-27 bentley <li>After <a href="https://man.openbsd.org/mandoc.1">mandoc(1)</a> skips an escape sequence with incomplete arguments, stop it discarding the rest of the string.
462 cce97a6e 2019-05-27 bentley <li>Fixed expansion of escape sequences with incomplete arguments by <a href="https://man.openbsd.org/roff.7">roff(7)</a>.
463 cce97a6e 2019-05-27 bentley <li>Fixed handling of escape sequences taking numeric arguments by <a href="https://man.openbsd.org/mandoc.1">mandoc(1)</a>.
464 cce97a6e 2019-05-27 bentley <li>Avoid <a href="https://man.openbsd.org/radeon.4">radeon(4)</a> segfault on device open when accel is not working.
465 a8c642e8 2014-09-08 brett <!-- 2014/07/05 -->
466 cce97a6e 2019-05-27 bentley <li>Fixed <a href="https://man.openbsd.org/ssh.1">ssh(1)</a> remote-forward cancel regression.
467 cce97a6e 2019-05-27 bentley <li><a href="https://man.openbsd.org/ftp.1">ftp(1)</a> fixes: URL-decode user and password info before base64 encoding it for the Authorization header; eliminated COOKIE_MAX_LEN constant; renamed the "user:pass" variable from "cookie" to "credentials"; empty password is no longer an error; fixed leak of username/password memory.
468 a8c642e8 2014-09-08 brett <!-- 2014/07/04 -->
469 cce97a6e 2019-05-27 bentley <li>Cleaned up -offset and -width in <a href="https://man.openbsd.org/mandoc.1">mandoc(1)</a>: bugfix so last one wins; do not ignore ".Bl -width" without argument.
470 cce97a6e 2019-05-27 bentley <li><a href="https://man.openbsd.org/smtpd.8">smtpd(8)</a> will now always attempt to use tls for relaying to the primary server when acting as a backup mx.
471 cce97a6e 2019-05-27 bentley <li><a href="https://man.openbsd.org/tcpdump.8">tcpdump(8)</a> now always prints the OSPF router id.
472 a8c642e8 2014-09-08 brett <!-- 2014/07/03 -->
473 cce97a6e 2019-05-27 bentley <li>Changed <a href="https://man.openbsd.org/kvm_getprocs.3">kvm_getprocs(3)</a> (<a href="https://man.openbsd.org/sysctl.3">sysctl(3)</a> and <a href="https://man.openbsd.org/kvm.3">kvm(3)</a> backends) to report thread's "most active" scheduler state.
474 cce97a6e 2019-05-27 bentley <li>Fixed <a href="https://man.openbsd.org/mandoc.1">mandoc(1)</a> formatting of empty .Bl -inset item heads; show the list type in the error message.
475 cce97a6e 2019-05-27 bentley <li>Added a <a href="https://man.openbsd.org/sshd_config.5">sshd_config(5)</a> PermitUserRC option to control whether ~/.ssh/rc is executed (bz#2160).
476 a8c642e8 2014-09-08 brett <li>Allow explicit ::1 and 127.0.0.1 forwarding bind addresses when GatewayPorts=no. Allows client to choose address family (bz#2222).
477 cce97a6e 2019-05-27 bentley <li>When <a href="https://man.openbsd.org/ssh.1">ssh(1)</a> is rekeying, skip file/DNS lookups if it is the same as the key sent during initial key exchange (bz#2154).
478 cce97a6e 2019-05-27 bentley <li><a href="https://man.openbsd.org/radeon.4">radeon(4)</a> now gets clocks from Open Firmware on macppc and sparc64.
479 cce97a6e 2019-05-27 bentley <li><a href="https://man.openbsd.org/bge.4">bge(4)</a> can now cope with heavily fragmented packets when the DMA map lacks space.
480 cce97a6e 2019-05-27 bentley <li>Stopped <a href="https://man.openbsd.org/uvm.9">uvm(9)</a> releasing the kernel lock between issuing a wakeup and clearing the PG_BUSY and PG_WANTED flags.
481 cce97a6e 2019-05-27 bentley <li>Made <a href="https://man.openbsd.org/ssh.1">ssh(1)</a> "too many authentication failures" message format similar to other authentication messages (bz#2199).
482 a8c642e8 2014-09-08 brett <li>Reverted to r1.129 of sys/kern/subr_pool.c, as pool_init() is called before rwlocks can be used on some archs.
483 cce97a6e 2019-05-27 bentley <li><a href="https://man.openbsd.org/ssh_config.5">ssh_config(5)</a> LocalCommand and ControlPath variables now expand to unique identifers (bz#2220).
484 a8c642e8 2014-09-08 brett <!-- 2014/07/02 -->
485 cce97a6e 2019-05-27 bentley <li>When hashing or removing hosts using <a href="https://man.openbsd.org/ssh-keygen.1">ssh-keygen(1)</a>, no longer choke on @revoked markers or remove @cert-authority markers (bz#2241).
486 cce97a6e 2019-05-27 bentley <li>Standardised <a href="https://man.openbsd.org/ssh.1">ssh(1)</a> on NI_MAXHOST for <a href="https://man.openbsd.org/gethostname.3">gethostname(3)</a> string lengths. Fixes bz#2239.
487 cce97a6e 2019-05-27 bentley <li>Use EVP_Digest() for one-shot hash instead of creating, updating, finalising and destroying a context in <a href="https://man.openbsd.org/ssh.1">ssh(1)</a> (bz#2231).
488 cce97a6e 2019-05-27 bentley <li>Made stdout line-buffered; saves partial output getting lost when <a href="https://man.openbsd.org/ssh-add.1">ssh-add(1)</a> fatal()s part-way through (bz#2234).
489 cce97a6e 2019-05-27 bentley <li>Only cleanup agent socket in the main <a href="https://man.openbsd.org/ssh-agent.1">ssh-agent(1)</a> process, not in any subprocesses (bz#2236).
490 cce97a6e 2019-05-27 bentley <li>Made ed25519 key titles fit properly in the <a href="https://man.openbsd.org/ssh.1">ssh(1)</a> randomart border (bz#2247).
491 a8c642e8 2014-09-08 brett <li>Be more careful when recreating single-precision (float) argument to service precise exceptions on m88k.
492 cce97a6e 2019-05-27 bentley <li>Improved <a href="https://man.openbsd.org/mandoc.1">mandoc(1)</a> messages about empty macros (reporting the macro names involved).
493 cce97a6e 2019-05-27 bentley <li>Fixed fpu_compare() on m88k, so <a href="https://man.openbsd.org/gcc.1">gcc(1)</a> correctly compare numbers to infinity.
494 cce97a6e 2019-05-27 bentley <li>Hold kernel lock when invoking process_domem() on alpha and m88k. Fixes <a href="https://man.openbsd.org/ptrace.2">ptrace(2)</a> operation on MP kernels.
495 cce97a6e 2019-05-27 bentley <li>Added support for adjusting the receive filter to allow for promiscuous mode/multicast traffic by <a href="https://man.openbsd.org/armv7/imx.4">imx(4/armv7)</a>.
496 cce97a6e 2019-05-27 bentley <li>Revised change made in pk7_doit.c r1.20 in <a href="https://man.openbsd.org/ssl.8">ssl(8)</a>. Fixes detached signature processing.
497 cce97a6e 2019-05-27 bentley <li>Made sure <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> session sockets are not cleared in the <a href="https://man.openbsd.org/daily.8">daily(8)</a> tmp cleanup.
498 cce97a6e 2019-05-27 bentley <li>Fixed the column numbers associated with in_line_argn() macros in <a href="https://man.openbsd.org/mandoc.1">mandoc(1)</a>.
499 cce97a6e 2019-05-27 bentley <li><a href="https://man.openbsd.org/kdump.1">kdump(1)</a> now properly processes <a href="https://man.openbsd.org/minherit.2">minherit(2)</a> flags.
500 a8c642e8 2014-09-08 brett <!-- 2014/07/01 -->
501 cce97a6e 2019-05-27 bentley <li>Improved "skipping paragraph macro" messages in <a href="https://man.openbsd.org/mandoc.1">mandoc(1)</a>.
502 cce97a6e 2019-05-27 bentley <li>Fixed regression in <a href="https://man.openbsd.org/ssh.1">ssh(1)</a> protocol 1 to avoid fatal(); more useful status codes.
503 cce97a6e 2019-05-27 bentley <li>Implemented obsolete <a href="https://man.openbsd.org/mdoc.7">mdoc(7)</a> macros .En .Es .Fr and .Ot for backward compatibility.
504 cce97a6e 2019-05-27 bentley <li>Clean up the warnings related to <a href="https://man.openbsd.org/mandoc.1">mandoc(1)</a> document structure.
505 cce97a6e 2019-05-27 bentley <li>Allow link-local address to be configured by "ifconfig up" if the <a href="https://man.openbsd.org/inet6.4">inet6(4)</a> address was configured beforehand.
506 cce97a6e 2019-05-27 bentley <li>Fixed panic seen when trying to remove a <a href="https://man.openbsd.org/route.4">route(4)</a> with a 0.0.0.0 destination.
507 cce97a6e 2019-05-27 bentley <li>Turned <a href="https://man.openbsd.org/pkg_add.1">pkg_add(1)</a> out-of-order extraction back on; activated out-of-order archives based on history.
508 a8c642e8 2014-09-08 brett <!-- 2014/06/30 -->
509 cce97a6e 2019-05-27 bentley <li><a href="https://man.openbsd.org/scsi.8">scsi(8)</a> io can now run through the midlayer without the kernel biglock.
510 cce97a6e 2019-05-27 bentley <li>Fixed <a href="https://man.openbsd.org/roff.7">roff(7)</a> control flow keywords \{ and \} when they immediately follow a request or macro name.
511 cce97a6e 2019-05-27 bentley <li><a href="https://man.openbsd.org/pfctl.8">pfctl(8)</a> af-to rules no longer need to specify the address family after "pass".
512 cce97a6e 2019-05-27 bentley <li>Suppressed spurious <a href="https://man.openbsd.org/ssh.1">ssh(1)</a> error message when loading key with a passphrase.
513 a8c642e8 2014-09-08 brett <li>Attach HFSC only after it's been initialised. Fixes the "integer divide fault trap" bug.
514 a8c642e8 2014-09-08 brett <!-- 2014/06/29 -->
515 cce97a6e 2019-05-27 bentley <li>Major cleanup in <a href="https://man.openbsd.org/roff.7">roff(7)</a> .de parsing routine, to correctly handle names terminated by escape sequences.
516 a8c642e8 2014-09-08 brett <!-- 2014/06/27 -->
517 cce97a6e 2019-05-27 bentley <li>Fixed loading of private keys by <a href="https://man.openbsd.org/ssh.1">ssh(1)</a>.
518 cce97a6e 2019-05-27 bentley <li>Move to a smaller rbytes buffer and skip a random part in <a href="https://man.openbsd.org/malloc.3">malloc(3)</a>, to introduce noise in the <a href="https://man.openbsd.org/arc4random.3">arc4random(3)</a> calling pattern.
519 cce97a6e 2019-05-27 bentley <li>Fixed remote forwarding in <a href="https://man.openbsd.org/sshd.8">sshd(8)</a> with same listen port but different listen address.
520 a8c642e8 2014-09-08 brett <li>Avoid buffer overflow when there are too many boot arguments, and on reaching maximum line length.
521 a8c642e8 2014-09-08 brett <!-- 2014/06/26 -->
522 cce97a6e 2019-05-27 bentley <li>Do not redirect STDERR of <a href="https://man.openbsd.org/security.8">security(8)</a> to /dev/null, so errors in the <a href="https://man.openbsd.org/security.8">security(8)</a> script are seen.
523 cce97a6e 2019-05-27 bentley <li>Fully remove relevant <a href="https://man.openbsd.org/carp.4">carp(4)</a> addresses when IFXF_NOINET6 is set or when the rdomain is changed.
524 a8c642e8 2014-09-08 brett <!-- 2014/06/25 -->
525 cce97a6e 2019-05-27 bentley <li>Workaround compatibility problems between Intel <a href="https://man.openbsd.org/ahci.4">ahci(4)</a> and Intel SSDs, by retrying device detection.
526 cce97a6e 2019-05-27 bentley <li><a href="https://man.openbsd.org/pfctl.8">pfctl(8)</a> now disallows translation rules containing addresses of { <a href="https://man.openbsd.org/inet.4">inet(4)</a> <a href="https://man.openbsd.org/inet6.4">inet6(4)</a> } when the rule doesn't specify one.
527 cce97a6e 2019-05-27 bentley <li>When the <a href="https://man.openbsd.org/nsd.8">nsd(8)</a> daemon is launched via <a href="https://man.openbsd.org/rc.d.8">rc.d(8)</a>, use a correct exit code (per <a href="https://man.openbsd.org/rc.subr.8">rc.subr(8)</a>).
528 a8c642e8 2014-09-08 brett <!-- 2014/06/24 -->
529 cce97a6e 2019-05-27 bentley <li>Improved messages with <a href="https://man.openbsd.org/roff.7">roff(7)</a> ".so": show the filename argument that was passed; on failure, report the file/line number.
530 cce97a6e 2019-05-27 bentley <li>If an <a href="https://man.openbsd.org/ssl.8">ssl(8)</a> chacha operation does not consume all of the generated key stream, save it for subsequent writes.
531 cce97a6e 2019-05-27 bentley <li>Made TCP_NODELAY work in <a href="https://man.openbsd.org/ssl.8">ssl(8)</a>.
532 a8c642e8 2014-09-08 brett <!-- 2014/06/23 -->
533 cce97a6e 2019-05-27 bentley <li>Removed the noaccesstime synonym for noatime in <a href="https://man.openbsd.org/mount.8">mount(8)</a>.
534 cce97a6e 2019-05-27 bentley <li>When <a href="https://man.openbsd.org/scp.1">scp(1)</a> is copying local to remote and it fails during read, don't send uninitialised heap to the remote end.
535 cce97a6e 2019-05-27 bentley <li>Don't fatal() <a href="https://man.openbsd.org/ssh.1">ssh(1)</a> when hostname canonicalisation fails with a ProxyCommand in use.
536 cce97a6e 2019-05-27 bentley <li>New <a href="https://man.openbsd.org/ssh.1">ssh(1)</a> key API: refactored key-related functions to be more library-like (existing API now a set of wrappers).
537 cce97a6e 2019-05-27 bentley <li>Fixed bug in <a href="https://man.openbsd.org/ssh.1">ssh(1)</a> KRL generation: multiple consecutive revoked certificate serial number ranges could be serialised to an invalid format.
538 cce97a6e 2019-05-27 bentley <li>Made <a href="https://man.openbsd.org/gcc.1">gcc(1)</a> version 4 emit warning when it is ignoring alignment constraints.
539 a8c642e8 2014-09-08 brett <li>Fixed possible crash on encountering invalid msdosfs filesystems.
540 a8c642e8 2014-09-08 brett <li>Disabled IPv6 on interfaces by default (a link-local address is no longer assigned by default).
541 cce97a6e 2019-05-27 bentley <li>Use <a href="https://man.openbsd.org/bus_space.9">bus_space(9)</a> on <a href="https://man.openbsd.org/acpi.4">acpi(4)</a> SystemMemory, to correctly access memory mapped registers.
542 cce97a6e 2019-05-27 bentley <li>Made "<a href="https://man.openbsd.org/ifconfig.8">ifconfig(8)</a> <if> inet6 eui64" reset the NOINET6 flag (unconditionally), to ensure link-local address is assigned.
543 cce97a6e 2019-05-27 bentley <li>Allow <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> keys and send-keys to send to invisible panes.
544 cce97a6e 2019-05-27 bentley <li>Fixed <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> so it counts mouse clicks correctly.
545 a8c642e8 2014-09-08 brett <!-- 2014/06/22 -->
546 a8c642e8 2014-09-08 brett <li>Stopped building procfs on i386.
547 cce97a6e 2019-05-27 bentley <li>In <a href="https://man.openbsd.org/ssl.8">ssl(8)</a> BIO_get_port(), only accept valid port numbers.
548 a8c642e8 2014-09-08 brett <!-- 2014/06/21 -->
549 cce97a6e 2019-05-27 bentley <li>Made sure <a href="https://man.openbsd.org/uvm.9">uvm(9)</a> kmthread never loops without making progress.
550 cce97a6e 2019-05-27 bentley <li><a href="https://man.openbsd.org/kill.2">kill(2)</a> an untraced process (instead of looping) if the kernel generates a deadly trap signal and it is ignored.
551 cce97a6e 2019-05-27 bentley <li>Specify the correct strength bits for 3DES cipher suites in <a href="https://man.openbsd.org/ssl.8">ssl(8)</a>.
552 a8c642e8 2014-09-08 brett <!-- 2014/06/20 -->
553 cce97a6e 2019-05-27 bentley <li>Protect <a href="https://man.openbsd.org/explicit_bzero.3">explicit_bzero(3)</a> from a link-time optimisation.
554 cce97a6e 2019-05-27 bentley <li>In <a href="https://man.openbsd.org/ssl.3">ssl(3)</a>, wrap <a href="https://man.openbsd.org/getenv.3">getenv(3)</a> OPENSSL_ALLOW_PROXY_CERTS in an <a href="https://man.openbsd.org/issetugid.2">issetugid(2)</a> check. Stops <a href="https://man.openbsd.org/setuid.2">setuid(2)</a> applications from being fooled.
555 cce97a6e 2019-05-27 bentley <li>Prefix error messages from <a href="https://man.openbsd.org/mandoc.1">mandoc(1)</a> with "mandoc: ", so users know where messages came from.
556 cce97a6e 2019-05-27 bentley <li>Made "S" and "E" mean the start and end to capture-pane in <a href="https://man.openbsd.org/tmux.1">tmux(1)</a>.
557 cce97a6e 2019-05-27 bentley <li>Fixed incorrect bounds check in amd64 assembly version of <a href="https://man.openbsd.org/ssl.8">ssl(8)</a> bn_mul_mont().
558 a8c642e8 2014-09-08 brett <!-- 2014/06/19 -->
559 cce97a6e 2019-05-27 bentley <li>Made <a href="https://man.openbsd.org/tcpdump.8">tcpdump(8)</a> -v display any bad checksums contained in the header and what the checksum should be.
560 cce97a6e 2019-05-27 bentley <li>More tweaking of <a href="https://man.openbsd.org/makewhatis.8">makewhatis(8)</a> set_basedir(): do not error out when <a href="https://man.openbsd.org/getcwd.3">getcwd(3)</a> fails; fixed the man-root-dir indicator in say().
561 cce97a6e 2019-05-27 bentley <li>In <a href="https://man.openbsd.org/arc4random.3">arc4random(3)</a>, hard fail with SIGKILL if <a href="https://man.openbsd.org/getentropy.2">getentropy(2)</a> returns -1.
562 cce97a6e 2019-05-27 bentley <li>Converted CRYPTO_memcmp to timingsafe_memcmp in <a href="https://man.openbsd.org/ssl.8">ssl(8)</a>.
563 cce97a6e 2019-05-27 bentley <li>Improved error checking in <a href="https://man.openbsd.org/ssl.3">ssl(3)</a> by_dir.c: set error code on error; check <a href="https://man.openbsd.org/malloc.3">malloc(3)</a> return; added missing unlock.
564 cce97a6e 2019-05-27 bentley <li>Fixed memory leak in <a href="https://man.openbsd.org/md5.1">md5(1)</a> digest_file() on <a href="https://man.openbsd.org/ferror.3">ferror(3)</a>.
565 cce97a6e 2019-05-27 bentley <li>Implemented the <a href="https://man.openbsd.org/membar.9">membar(9)</a> API for powerpc.
566 cce97a6e 2019-05-27 bentley <li>Copy newline when at EOL when <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> is in <a href="https://man.openbsd.org/vi.1">vi(1)</a> mode.
567 cce97a6e 2019-05-27 bentley <li>Made <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> reset the mouse buttons when the mouse wheel is used.
568 cce97a6e 2019-05-27 bentley <li>Some terminals send spurious releases for mouse wheel in SGR mouse mode, <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> now suppresses these.
569 cce97a6e 2019-05-27 bentley <li>Fixed black screen on lenovo ideapad yoga 2 pro using when using <a href="https://man.openbsd.org/intel.4">intel(4)</a>.
570 a8c642e8 2014-09-08 brett <!-- 2014/06/18 -->
571 cce97a6e 2019-05-27 bentley <li>Restored previous <a href="https://man.openbsd.org/arc4random.3">arc4random(3)</a> behaviour, where <a href="https://man.openbsd.org/fork.2">fork(2)</a> children would mix in some randomness from the parent process.
572 cce97a6e 2019-05-27 bentley <li>Stopped <a href="https://man.openbsd.org/OpenBSD-current/man8/makewhatis.8">makewhatis(8)</a> displaying "unable to open mandoc.db" error messages when updating/deleting individual files.
573 cce97a6e 2019-05-27 bentley <li>Ensured <a href="https://man.openbsd.org/fsck_msdos.8">fsck_msdos(8)</a> will always keep length of cluster chain up to date. Avoids out of boundary accesses.
574 a8c642e8 2014-09-08 brett <li>Fixed off by one in msdosfs pm_inusemap().
575 cce97a6e 2019-05-27 bentley <li>Fixed the use of 16384-bit RSA keys by <a href="https://man.openbsd.org/ssh.1">ssh(1)</a>.
576 a8c642e8 2014-09-08 brett <!-- 2014/06/17 -->
577 cce97a6e 2019-05-27 bentley <li>Changed SSL_COMP_add_compression_method() in <a href="https://man.openbsd.org/ssl.8">ssl(8)</a>, so error cases actually return "error" rather than "success".
578 cce97a6e 2019-05-27 bentley <li>Disallow __sysctl() in the <a href="https://man.openbsd.org/sshd.8">sshd(8)</a> <a href="https://man.openbsd.org/systrace.1">systrace(1)</a> sandbox (as there is now a dedicated <a href="https://man.openbsd.org/getentropy.2">getentropy(2)</a> system call for <a href="https://man.openbsd.org/arc4random.3">arc4random(3)</a>).
579 cce97a6e 2019-05-27 bentley <li>Implemented the <a href="https://man.openbsd.org/membar.9">membar(9)</a> API for hppa.
580 cce97a6e 2019-05-27 bentley <li>Added configuration bit in <a href="https://man.openbsd.org/vio.4">vio(4)</a> flags, to workaround qemu < 2.0 bug that prevented VLANs from working.
581 a8c642e8 2014-09-08 brett <li>Be more aggressive flushing L2 cache entries on mips64 RM7000 systems.
582 a8c642e8 2014-09-08 brett <!-- 2014/06/16 -->
583 a8c642e8 2014-09-08 brett <li>Set uart based on the io clock rate on octeon II (CN6xxx), as the rate differs from the cpu clock.
584 cce97a6e 2019-05-27 bentley <li>Use MAP_INHERIT_ZERO in <a href="https://man.openbsd.org/arc4random.3">arc4random(3)</a>, to zero out the RNG state if the process forks.
585 cce97a6e 2019-05-27 bentley <li>Enabled <a href="https://man.openbsd.org/pci.4">pci(4)</a> power management on lemote.
586 a8c642e8 2014-09-08 brett <li>Reverted "Always create a local route for every configured IPv4 address" (caused regressions).
587 a8c642e8 2014-09-08 brett <li>Allow the autoinstaller to fetch sets from multiple locations.
588 a8c642e8 2014-09-08 brett <!-- 2014/06/15 -->
589 cce97a6e 2019-05-27 bentley <li>Fixed vnode leak in <a href="https://man.openbsd.org/systrace.4">systrace(4)</a>.
590 cce97a6e 2019-05-27 bentley <li>In <a href="https://man.openbsd.org/ssl.8">ssl(8)</a> aes_gcm_cleanup(), clean the entire context (no longer leaving AES key untouched).
591 cce97a6e 2019-05-27 bentley <li>Fixed hang with virtio event_idx feature, to cure occasional network freeze in <a href="https://man.openbsd.org/vio.4">vio(4)</a>.
592 a8c642e8 2014-09-08 brett <li>Updated to xcb-util-renderutil 0.3.9.
593 a8c642e8 2014-09-08 brett <!-- 2014/06/14 -->
594 cce97a6e 2019-05-27 bentley <li>Avoid infinite loop in <a href="https://man.openbsd.org/fsck_msdos.8">fsck_msdos(8)</a> if cluster chain is a cyclic list.
595 cce97a6e 2019-05-27 bentley <li>Fixed memory leaks in <a href="https://man.openbsd.org/fsck_msdos.8">fsck_msdos(8)</a> bootblock handling.
596 cce97a6e 2019-05-27 bentley <li>Fixed <a href="https://man.openbsd.org/fsck_msdos.8">fsck_msdos(8)</a> regression in r1.16 of boot.c: write fsinfo, not block into FSInfo region.
597 cce97a6e 2019-05-27 bentley <li>Fixed <a href="https://man.openbsd.org/fsck_msdos.8">fsck_msdos(8)</a> regression in r1.20 of fat.c by properly incrementing a pointer.
598 cce97a6e 2019-05-27 bentley <li>Added more bounded attributes to the buffer and md5/sha headers in <a href="https://man.openbsd.org/ssl.8">ssl(8)</a>.
599 a8c642e8 2014-09-08 brett <!-- 2014/06/13 -->
600 cce97a6e 2019-05-27 bentley <li>Removed <a href="https://man.openbsd.org/wait.2">wait(2)</a> support for "union wait" (deprecated since 4.3BSD) and WSTOPPED (means something else now in POSIX).
601 cce97a6e 2019-05-27 bentley <li>Stopped <a href="https://man.openbsd.org/vax/ze.4">ze(4/vax)</a> rx ring pointer stalling when running "all multicast" or <a href="https://man.openbsd.org/bpf.4">bpf(4)</a> in promiscuous mode.
602 cce97a6e 2019-05-27 bentley <li>Switched <a href="https://man.openbsd.org/dump.8">dump(8)</a> "blockswritten" to int64_t, so it won't wrap at 2TB.
603 cce97a6e 2019-05-27 bentley <li>Correctly calculate the key block length in t1_enc.c and s3_enc.c when using <a href="https://man.openbsd.org/ssl.8">ssl(8)</a> "export" ciphers.
604 cce97a6e 2019-05-27 bentley <li>Added ChaCha20-Poly1305 based ciphersuites to <a href="https://man.openbsd.org/ssl.8">ssl(8)</a>.
605 cce97a6e 2019-05-27 bentley <li><a href="https://man.openbsd.org/ssl.8">ssl(8)</a> can now change cipher state with an EVP_AEAD, encrypt/decrypt TLS using the EVP_AEAD.
606 cce97a6e 2019-05-27 bentley <li>Added <a href="https://man.openbsd.org/getentropy.2">getentropy(2)</a> system call.
607 cce97a6e 2019-05-27 bentley <li>Indicate in the <a href="https://man.openbsd.org/sysctl.1">sysctl(1)</a> LIVELOCKS column if there is a pending (deferred) <a href="https://man.openbsd.org/mbuf.9">mbuf(9)</a> update.
608 cce97a6e 2019-05-27 bentley <li>Fixed tcp-mss-adjust in <a href="https://man.openbsd.org/pipex.4">pipex(4)</a> and <a href="https://man.openbsd.org/npppd.8">npppd(8)</a>.
609 a8c642e8 2014-09-08 brett <!-- 2014/06/12 -->
610 cce97a6e 2019-05-27 bentley <li>Removed support for the "opaque PRF input" extension from <a href="https://man.openbsd.org/ssl.8">ssl(8)</a> (draft expired 7 years ago and never became an RFC).
611 cce97a6e 2019-05-27 bentley <li>Added timingsafe_memcmp() to <a href="https://man.openbsd.org/memcmp.3">memcmp(3)</a>.
612 cce97a6e 2019-05-27 bentley <li>Added MAP_INHERIT_ZERO support to <a href="https://man.openbsd.org/minherit.2">minherit(2)</a>. Provides child process with fresh, zero-initialised anonymous memory.
613 cce97a6e 2019-05-27 bentley <li>Fixed <a href="https://man.openbsd.org/ptrace.2">ptrace(2)</a> hanging hppa and mips64 MP systems, by grab the kernel lock before cleaning up single-step breakpoints.
614 cce97a6e 2019-05-27 bentley <li>Updated to <a href="https://man.openbsd.org/nginx.8">nginx(8)</a> version 1.6.0 (including syslog support backported from the 1.7 branch).
615 cce97a6e 2019-05-27 bentley <li>Disable the "switch to insertion sort" optimisation in <a href="https://man.openbsd.org/qsort.3">qsort(3)</a>. Avoids quadratic behaviour for certain inputs.
616 cce97a6e 2019-05-27 bentley <li>Changed <a href="https://man.openbsd.org/pkg_add.1">pkg_add(1)</a> to display the full url (if possible) for unsigned packages.
617 a8c642e8 2014-09-08 brett <!-- 2014/06/11 -->
618 cce97a6e 2019-05-27 bentley <li>Fixed memory leak in <a href="https://man.openbsd.org/ssl.8">ssl(8)</a> d1_lib.c.
619 cce97a6e 2019-05-27 bentley <li>Restored the original behaviour of RTM_ADD and RTM_DELETE by always generating one message per locally configured <a href="https://man.openbsd.org/ip.4">ip(4)</a> address.
620 cce97a6e 2019-05-27 bentley <li>Always create a local <a href="https://man.openbsd.org/route.4">route(4)</a> for every configured IPv4 address on the machine.
621 cce97a6e 2019-05-27 bentley <li>Flag any local <a href="https://man.openbsd.org/route.4">route(4)</a> as such and make them use the highest possible priority.
622 cce97a6e 2019-05-27 bentley <li>Created (currently unused) system taskq ("systqmp") which runs without the kernel lock (see <a href="https://man.openbsd.org/task_add.9">task_add(9)</a>).
623 f22223cb 2016-03-22 sthen <!-- 2014/06/10 -->
624 cce97a6e 2019-05-27 bentley <li>Raised the low water mark in <a href="https://man.openbsd.org/em.4">em(4)</a> so the internal buffers can hold at least two jumbo frames.
625 cce97a6e 2019-05-27 bentley <li>On i386/amd64 hibernate, don't map phys pages < 64KB in the resume page table. Matches recent kernel change.
626 cce97a6e 2019-05-27 bentley <li>Fixed off by one in <a href="https://man.openbsd.org/fsck_msdos.8">fsck_msdos(8)</a> when writing the FAT for FAT12 filesystems.
627 cce97a6e 2019-05-27 bentley <li>In <a href="https://man.openbsd.org/ssl.8">ssl(8)</a>, check return value of EVP_MD_CTX_copy_ex(). Avoids potential null pointer dereference.
628 cce97a6e 2019-05-27 bentley <li>In <a href="https://man.openbsd.org/mtree.8">mtree(8)</a>, added ed25519 ssh host keys to /etc/mtree/special.
629 cce97a6e 2019-05-27 bentley <li>Lowered <a href="https://man.openbsd.org/nc.1">nc(1)</a> buffers back to 16k for now, to avoid bufferbloat.
630 cce97a6e 2019-05-27 bentley <li>Increased <a href="https://man.openbsd.org/nc.1">nc(1)</a> buffer size to 64k, and actually use the buffer.
631 cce97a6e 2019-05-27 bentley <li>Abandoned the <a href="https://man.openbsd.org/ssl.8">ssl(8)</a> "auto-ENGINE" /dev/crypto interface.
632 cce97a6e 2019-05-27 bentley <li>In <a href="https://man.openbsd.org/ssl.3">ssl(3)</a> tls1_cert_verify_mac(), avoid a possible NULL function call on ctx.final().
633 cce97a6e 2019-05-27 bentley <li>Implemented <a href="https://man.openbsd.org/slowcgi.8">slowcgi(8)</a> -u (user to drop privs to) and -p (path to <a href="https://man.openbsd.org/chroot.8">chroot(8)</a> to). Allows <a href="https://man.openbsd.org/slowcgi.8">slowcgi(8)</a> to run non-chrooted.
634 cce97a6e 2019-05-27 bentley <li>Cleaned up <a href="https://man.openbsd.org/slowcgi.8">slowcgi(8)</a> socket creation.
635 cce97a6e 2019-05-27 bentley <li>Multiple fixes for <a href="https://man.openbsd.org/ssl.8">ssl(8)</a> ssl3_digest_cached_records().
636 cce97a6e 2019-05-27 bentley <li>Ensured <a href="https://man.openbsd.org/ssl.8">ssl(8)</a> ssl3_final_finish_mac() returns failure if either the MD5 or SHA1 handshake MAC calculation fails.
637 a8c642e8 2014-09-08 brett <!-- 2014/06/09 -->
638 cce97a6e 2019-05-27 bentley <li>Changed <a href="https://man.openbsd.org/installboot.8">installboot(8)</a> file copying process, to make it less likely that the PBR will change upon update.
639 cce97a6e 2019-05-27 bentley <li>Fixed possible out of boundary access by <a href="https://man.openbsd.org/fsck_msdos.8">fsck_msdos(8)</a> if the filesystem is full or corrupt.
640 a8c642e8 2014-09-08 brett <!-- 2014/06/08 -->
641 a8c642e8 2014-09-08 brett <li>Updated to xf86-video-modesetting 0.8.1 and xf86-video-geode 2.11.15.
642 a8c642e8 2014-09-08 brett <!-- 2014/06/07 -->
643 cce97a6e 2019-05-27 bentley <li>Further cleanup of context handling in <a href="https://man.openbsd.org/ssl.3">ssl(3)</a> tls1_change_cipher_state().
644 cce97a6e 2019-05-27 bentley <li>In <a href="https://man.openbsd.org/run.4">run(4)</a>, fixed TXWI and RXWI offset calculations so RT5592 devices function.
645 a8c642e8 2014-09-08 brett <!-- 2014/06/06 -->
646 cce97a6e 2019-05-27 bentley <li>When relying on the local enqueuer, let <a href="https://man.openbsd.org/smtpd.8">smtpd(8)</a> cope with long To/Cc lines. Avoids broken headers and confusing some MUAs.
647 a8c642e8 2014-09-08 brett <!-- 2014/06/05 -->
648 cce97a6e 2019-05-27 bentley <li>Fixed inverted test in <a href="https://man.openbsd.org/ssh.1">ssh(1)</a> so PKCS#11 keys that are explicitly listed are preferred.
649 cce97a6e 2019-05-27 bentley <li>Reset properly when <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> c0-change-trigger is increased from zero, so panes don't get stuck.
650 cce97a6e 2019-05-27 bentley <li><strong>5.4 and 5.5 and -current SECURITY FIXES in <a href="https://man.openbsd.org/ssl.8">ssl(8)</a> for: buffer overflow with crafted DTLS fragments (CVE-2014-0195); DTLS infinite recursion flaw with "Hello Request" (CVE-2014-0221); SSL/TLS MITM vulnerability (CVE-2014-0224); anonymous ECDH denial of service (CVE-2014-3470).</strong><br>A source code patch is available for <a href="errata54.html#012_openssl">5.4</a> and <a href="errata55.html#008_openssl">5.5</a>.
651 cce97a6e 2019-05-27 bentley <li>Reduced amount of <a href="https://man.openbsd.org/traceroute.8">traceroute(8)</a> code running as root; only error out if the creation of a needed socket failed.
652 cce97a6e 2019-05-27 bentley <li>Moved <a href="https://man.openbsd.org/ld.so.1">ld.so(1)</a> to a (slightly stripped) version of libc <a href="https://man.openbsd.org/malloc.3">malloc(3)</a>.
653 cce97a6e 2019-05-27 bentley <li><strong>5.4 and 5.5 and -current SECURITY FIX: improper close-on-exec flag handling by <a href="https://man.openbsd.org/sendmail.8">sendmail(8)</a> (CVE-2014-3956).</strong><br>A source code patch is available for <a href="errata54.html#011_sendmail">5.4</a> and <a href="errata55.html#007_sendmail">5.5</a>.
654 cce97a6e 2019-05-27 bentley <li>Added support for COLUMNS env variable to <a href="https://man.openbsd.org/ps.1">ps(1)</a>.
655 cce97a6e 2019-05-27 bentley <li>Included work-around in <a href="https://man.openbsd.org/mandoc.1">mandoc(1)</a>, as <a href="https://man.openbsd.org/makewhatis.8">makewhatis(8)</a> expects its current dir to not be /.
656 a8c642e8 2014-09-08 brett <!-- 2014/06/04 -->
657 cce97a6e 2019-05-27 bentley <li><a href="https://man.openbsd.org/vflush.9">vflush(9)</a> now works for <a href="https://man.openbsd.org/fuse.4">fuse(4)</a>.
658 cce97a6e 2019-05-27 bentley <li>Do not skip or add a byte for the report ID when <a href="https://man.openbsd.org/usbhid.3">usbhid(3)</a> is manipulating data.
659 cce97a6e 2019-05-27 bentley <li>Made <a href="https://man.openbsd.org/uaudio.4">uaudio(4)</a> properly compare endpoint addresses by ignoring the direction bit.
660 a8c642e8 2014-09-08 brett <!-- 2014/06/03 -->
661 cce97a6e 2019-05-27 bentley <li>Accept -C as an alias for -c in <a href="https://man.openbsd.org/tr.1">tr(1)</a>.
662 cce97a6e 2019-05-27 bentley <li>Made <a href="https://man.openbsd.org/zyd.4">zyd(4)</a> compile with ZYD_DEBUG.
663 cce97a6e 2019-05-27 bentley <li>Fix <a href="https://man.openbsd.org/zyd.4">zyd(4)</a> frame length adjustment in the RX path.
664 a8c642e8 2014-09-08 brett <!-- 2014/06/02 -->
665 a8c642e8 2014-09-08 brett <li>In libm math code, made sure STRICT_ASSIGN handles double as well.
666 cce97a6e 2019-05-27 bentley <li>Stripped <a href="https://man.openbsd.org/openssl.1">openssl(1)</a> functions called when "-rand" is specified (underlying code long gone).
667 cce97a6e 2019-05-27 bentley <li>Removed easy access to the unsafe intel RDRAND instruction from <a href="https://man.openbsd.org/ssl.8">ssl(8)</a>.
668 a8c642e8 2014-09-08 brett <li>When checking for unicast and broadcast addresses, do one lookup instead of two.
669 cce97a6e 2019-05-27 bentley <li>Fixed uninitialised variable, which caused <a href="https://man.openbsd.org/sndiod.8">sndiod(8)</a> crashes when handling errors.
670 a8c642e8 2014-09-08 brett <!-- 2014/06/01 -->
671 cce97a6e 2019-05-27 bentley <li>In <a href="https://man.openbsd.org/ssl.3">ssl(3)</a> tls1_setup_key_block(), use the correct IV length for GCM mode. Fixes key block length calculation.
672 a8c642e8 2014-09-08 brett <!-- 2014/05/31 -->
673 cce97a6e 2019-05-27 bentley <li>Removed real mode <a href="https://man.openbsd.org/vga.4">vga(4)</a> repost option.
674 cce97a6e 2019-05-27 bentley <li>Change the actual default for returned asn1 strings to utf8 in the <a href="https://man.openbsd.org/ssl.3">ssl(3)</a> code.
675 cce97a6e 2019-05-27 bentley <li>Reverted previous diff setting cold to 1 on shutdown (broken with <a href="https://man.openbsd.org/softraid.4">softraid(4)</a> disks).
676 a8c642e8 2014-09-08 brett <!-- 2014/05/30 -->
677 cce97a6e 2019-05-27 bentley <li>Added <a href="https://man.openbsd.org/dump.8">dump(8)</a> -S option, to only estimate backup size and number of tapes required.
678 cce97a6e 2019-05-27 bentley <li>Avoid panics on macppc with an <a href="https://man.openbsd.org/uhci.4">uhci(4)</a> cardbus when halting/rebooting.
679 cce97a6e 2019-05-27 bentley <li>Fixed segfault seen on <a href="https://man.openbsd.org/Xorg.1">Xorg(1)</a> startup when using the <a href="https://man.openbsd.org/nv.4">nv(4)</a> or <a href="https://man.openbsd.org/savage.4">savage(4)</a> drivers.
680 a8c642e8 2014-09-08 brett <!-- 2014/05/29 -->
681 cce97a6e 2019-05-27 bentley <li>Converted many <a href="https://man.openbsd.org/malloc.3">malloc(3)</a> to <a href="https://man.openbsd.org/reallocarray.3">reallocarray(3)</a>. Avoids 53 potential integer overflows in <a href="https://man.openbsd.org/ssl.8">ssl(8)</a>.
682 cce97a6e 2019-05-27 bentley <li>In <a href="https://man.openbsd.org/envy.4">envy(4)</a>, use the same convention for mixer control names as in <a href="https://man.openbsd.org/azalia.4">azalia(4)</a>.
683 cce97a6e 2019-05-27 bentley <li>Added an enc_flags field to ssl3_enc_method. Helps identify <a href="https://man.openbsd.org/ssl.3">ssl(3)</a> protocol version requirements.
684 cce97a6e 2019-05-27 bentley <li>Made <a href="https://man.openbsd.org/fsck.8">fsck(8)</a> use the same values in checking as <a href="https://man.openbsd.org/newfs.8">newfs(8)</a> does in creating a <a href="https://man.openbsd.org/fs.5">fs(5)</a>.
685 cce97a6e 2019-05-27 bentley <li>Fixed two more cases where ssl_replace_hash() return value was not checked by <a href="https://man.openbsd.org/ssl.8">ssl(8)</a>.
686 a8c642e8 2014-09-08 brett <!-- 2014/05/28 -->
687 cce97a6e 2019-05-27 bentley <li>To give <a href="https://man.openbsd.org/perl.1">perl(1)</a> a random seed, call <a href="https://man.openbsd.org/arc4random.3">arc4random(3)</a> rather than read /dev/arandom. Makes it work in <a href="https://man.openbsd.org/chroot.8">chroot(8)</a> environments.
688 cce97a6e 2019-05-27 bentley <li>Enabled writing per-commit commitid tokens to <a href="https://man.openbsd.org/rcs.1">rcs(1)</a> ",v" files.
689 cce97a6e 2019-05-27 bentley <li>When <a href="https://man.openbsd.org/less.1">less(1)</a> is invoked as <a href="https://man.openbsd.org/more.1">more(1)</a>, made behaviour for "-i" match "less -I" (per POSIX).
690 cce97a6e 2019-05-27 bentley <li>When suspending/resuming, avoid hangs by detaching/attaching <a href="https://man.openbsd.org/usb.4">usb(4)</a> devices (avoids <a href="https://man.openbsd.org/uhub.4">uhub(4)</a> interrupt races).
691 cce97a6e 2019-05-27 bentley <li>On <a href="https://man.openbsd.org/mg.1">mg(1)</a> delete-window, display the correct line number when revisiting the buffer.
692 cce97a6e 2019-05-27 bentley <li>Added -L option to <a href="https://man.openbsd.org/pwd.1">pwd(1)</a> (required by POSIX).
693 a8c642e8 2014-09-08 brett <!-- 2014/05/27 -->
694 cce97a6e 2019-05-27 bentley <li>Fixed <a href="https://man.openbsd.org/mount.8">mount(8)</a> -ur for msdosfs: allow sync after more than one rw -> ro cycle; sync data (not only metadata).
695 cce97a6e 2019-05-27 bentley <li>Fixed instance of the Y2038 problem in <a href="https://man.openbsd.org/ssl.8">ssl(8)</a>.
696 a8c642e8 2014-09-08 brett <li>Refactored radix code. Solves issues with failed deletes of down routes.
697 cce97a6e 2019-05-27 bentley <li>Enable strong stack protector by default for architectures running <a href="https://man.openbsd.org/gcc.1">gcc(1)</a> version 3.
698 cce97a6e 2019-05-27 bentley <li>Allow <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> to handle the top bit of <a href="https://man.openbsd.org/xterm.1">xterm(1)</a>-style modifier keys.
699 cce97a6e 2019-05-27 bentley <li>Added some formats for <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> pane bounds.
700 cce97a6e 2019-05-27 bentley <li>Prevented userland from altering the local and broadcast flags in <a href="https://man.openbsd.org/route.4">route(4)</a>.
701 cce97a6e 2019-05-27 bentley <li>Reserved the highest <a href="https://man.openbsd.org/route.4">route(4)</a> priority for kernel-managed routes.
702 a8c642e8 2014-09-08 brett <!-- 2014/05/26 -->
703 cce97a6e 2019-05-27 bentley <li>Fixed memory leak and un-cleaned EVP_CIPHER_CTX upon error in <a href="https://man.openbsd.org/ssl.3">ssl(3)</a> tls_decrypt_ticket().
704 cce97a6e 2019-05-27 bentley <li>Removed /usr/src from <a href="https://man.openbsd.org/mtree.8">mtree(8)</a> to avoid useless warning from daily <a href="https://man.openbsd.org/security.8">security(8)</a> mail.
705 cce97a6e 2019-05-27 bentley <li>Implemented improved <a href="https://man.openbsd.org/ssl.8">ssl(8)</a> EVP AEAD API.
706 cce97a6e 2019-05-27 bentley <li>Made sure <a href="https://man.openbsd.org/utpms.4">utpms(4)</a> only matches mouse interface, so <a href="https://man.openbsd.org/ukbd.4">ukbd(4)</a> works on more Powerbooks.
707 a8c642e8 2014-09-08 brett <!-- 2014/05/25 -->
708 cce97a6e 2019-05-27 bentley <li>Fixed <a href="https://man.openbsd.org/ssl.8">ssl(8)</a> resource descriptor leaks (CID: 966576 & 966577).
709 cce97a6e 2019-05-27 bentley <li>Allow <a href="https://man.openbsd.org/tty.4">tty(4)</a> to handle threaded processes correctly with kerninfo status requests (a.k.a. ^T).
710 cce97a6e 2019-05-27 bentley <li>Fixed <a href="https://man.openbsd.org/azalia.4">azalia(4)</a> format mistakes when AZALIA_DEBUG is defined.
711 cce97a6e 2019-05-27 bentley <li>Pass DVACT_QUIESCE to <a href="https://man.openbsd.org/usb.4">usb(4)</a> to stop "new" <a href="https://man.openbsd.org/uhub.4">uhub(4)</a> device reattaching at every resume.
712 a8c642e8 2014-09-08 brett <!-- 2014/05/24 -->
713 cce97a6e 2019-05-27 bentley <li>Fixed off-by-one in index validation before accessing arrays in <a href="https://man.openbsd.org/ssl.8">ssl(8)</a> ssl_cipher_get_evp().
714 cce97a6e 2019-05-27 bentley <li>In <a href="https://man.openbsd.org/ssl.3">ssl(3)</a>, enabled three brainpool elliptic curves for TLS (per RFC 7027).
715 cce97a6e 2019-05-27 bentley <li>Made <a href="https://man.openbsd.org/fsck_ext2fs.8">fsck_ext2fs(8)</a> and <a href="https://man.openbsd.org/fsck_ffs.8">fsck_ffs(8)</a> output verbiage more consistent.
716 cce97a6e 2019-05-27 bentley <li>Added support for newer <a href="https://man.openbsd.org/run.4">run(4)</a> hardware.
717 a8c642e8 2014-09-08 brett <!-- 2014/05/23 -->
718 cce97a6e 2019-05-27 bentley <li>Made <a href="https://man.openbsd.org/fsck_ext2fs.8">fsck_ext2fs(8)</a> initialise newent.e2d_type to EXT2_FT_UNKNOWN (a.k.a. 0).
719 cce97a6e 2019-05-27 bentley <li>Reverted <a href="https://man.openbsd.org/pax.1">pax(1)</a> ar_io.c r1.45 to stop showing archives written with a non-standard blocksize as truncated reads.
720 cce97a6e 2019-05-27 bentley <li>Stopped <a href="https://man.openbsd.org/tcpdump.8">tcpdump(8)</a> "weird flag" warning for DNS NOTIFY messages which should have "AA" set.
721 cce97a6e 2019-05-27 bentley <li>Permit <a href="https://man.openbsd.org/less.1">less(1)</a> searches to work past/across NUL bytes.
722 cce97a6e 2019-05-27 bentley <li>Made the <a href="https://man.openbsd.org/pax.1">pax(1)</a> signal handler safe.
723 cce97a6e 2019-05-27 bentley <li>Expose bif_capacity in <a href="https://man.openbsd.org/acpibat.4">acpibat(4)</a>, to report the design capacity of the battery.
724 cce97a6e 2019-05-27 bentley <li>Clean up after the <a href="https://man.openbsd.org/snmpd.8">snmpd(8)</a> traphandler children, to avoid leaving zombie processes.
725 a8c642e8 2014-09-08 brett <!-- 2014/05/22 -->
726 cce97a6e 2019-05-27 bentley <li>Marked <a href="https://man.openbsd.org/ssl.8">ssl(8)</a> <a href="https://man.openbsd.org/malloc.3">malloc(3)</a> wrapper functions as deprecated.
727 cce97a6e 2019-05-27 bentley <li>Fixed <a href="https://man.openbsd.org/smtpd.8">smtpd(8)</a> crash when running the pki lookup code.
728 a8c642e8 2014-09-08 brett <li>On sgi, converted the PS/2 keyboard layouts to sgi serial keyboard layouts.
729 cce97a6e 2019-05-27 bentley <li>Let sgi <a href="https://man.openbsd.org/keyboard.7">keyboard(7)</a> work in polling mode; fixed "international" ("GERlessthan") key.
730 a8c642e8 2014-09-08 brett <!-- 2014/05/21 -->
731 cce97a6e 2019-05-27 bentley <li>Made <a href="https://man.openbsd.org/qle.4">qle(4)</a> less likely to get stuck looping when the firmware behaves inconsistently.
732 cce97a6e 2019-05-27 bentley <li>Fixed file size reported by <a href="https://man.openbsd.org/lpq.1">lpq(1)</a> -l by giving <a href="https://man.openbsd.org/stat.2">stat(2)</a> privileges on the spool file.
733 cce97a6e 2019-05-27 bentley <li>Fixed <a href="https://man.openbsd.org/fdisk.8">fdisk(8)</a> -u on sparc64.
734 cce97a6e 2019-05-27 bentley <li>Fixed <a href="https://man.openbsd.org/ipsec.4">ipsec(4)</a> route addition, broken since the removal of the link-layer addresses from the per-ifp list.
735 cce97a6e 2019-05-27 bentley <li>Made <a href="https://man.openbsd.org/xhci.4">xhci(4)</a> handle the stall condition like the bable condition.
736 a8c642e8 2014-09-08 brett <!-- 2014/05/20 -->
737 cce97a6e 2019-05-27 bentley <li><a href="https://man.openbsd.org/pax.1">pax(1)</a> now exits with non-zero status if a read is truncated.
738 cce97a6e 2019-05-27 bentley <li>Added support for -o XXX or -oXXX options, and -o max_read=XXX to <a href="https://man.openbsd.org/fuse.4">fuse(4)</a>.
739 cce97a6e 2019-05-27 bentley <li>When sending <a href="https://man.openbsd.org/icmp.4">icmp(4)</a> messages, assign the queue ID to the correct packet header.
740 cce97a6e 2019-05-27 bentley <li>Fixed eui64 address generation, broken upon removal of the link-layer address from the per-ifp list.
741 cce97a6e 2019-05-27 bentley <!-- 2014/05/19 -->
742 cce97a6e 2019-05-27 bentley <li>No more (obsolete) 5- and 6-byte or surrogate pair code point encodings in <a href="https://man.openbsd.org/ssl.8">ssl(8)</a> UTF8_{getc,putc}.
743 cce97a6e 2019-05-27 bentley <li>Upon HTTPS <a href="https://man.openbsd.org/ftp.1">ftp(1)</a> redirects, don't reinitialise <a href="https://man.openbsd.org/ssl.8">ssl(8)</a>, and reuse SSL_CTX.
744 cce97a6e 2019-05-27 bentley <li>Plugged memory leak in <a href="https://man.openbsd.org/rcs.1">rcs(1)</a>.
745 cce97a6e 2019-05-27 bentley <li>More consistency in <a href="https://man.openbsd.org/fuse.4">fuse(4)</a> error handling.
746 cce97a6e 2019-05-27 bentley <li>Made <a href="https://man.openbsd.org/fuse.4">fuse(4)</a> use realpath for more reliable <a href="https://man.openbsd.org/mount.8">mount(8)</a> operations.
747 cce97a6e 2019-05-27 bentley <li>On armv7, loongson and socppc use <a href="https://man.openbsd.org/autoconf.9">autoconf(9)</a> to track <a href="https://man.openbsd.org/usb.4">usb(4)</a> host controller's children.
748 cce97a6e 2019-05-27 bentley <li>Stopped <a href="https://man.openbsd.org/dhclient.8">dhclient(8)</a> trying to update file when none has been specified by -L flag.
749 cce97a6e 2019-05-27 bentley <li>Added H_SAVE_FP operation to <a href="https://man.openbsd.org/editline.3">editline(3)</a>, to save history to an open file pointer.
750 cce97a6e 2019-05-27 bentley <li>Fixed <a href="https://man.openbsd.org/uhci.4">uhci(4)</a>. Unbreaks the build when DIAGNOSTIC is not defined.
751 a8c642e8 2014-09-08 brett <!-- 2014/05/18 -->
752 cce97a6e 2019-05-27 bentley <li>Updated <a href="https://man.openbsd.org/run.4">run(4)</a> firmware to version 0.33.
753 cce97a6e 2019-05-27 bentley <li>Made <a href="https://man.openbsd.org/mkuboot.8">mkuboot(8)</a> correctly handle files smaller than an <a href="https://man.openbsd.org/elf.5">elf(5)</a> header.
754 cce97a6e 2019-05-27 bentley <li>In <a href="https://man.openbsd.org/ssl.3">ssl(3)</a> ssl3_send_certificate_request(), properly adjust for payload size.
755 cce97a6e 2019-05-27 bentley <li>Upon error, made sure <a href="https://man.openbsd.org/ssl.3">ssl(3)</a> ssl3_setup_buffers() frees pqueue before returning.
756 cce97a6e 2019-05-27 bentley <li>Fixed tail packet check in <a href="https://man.openbsd.org/pms.4">pms(4)</a> elantech v3 touchpad code.
757 cce97a6e 2019-05-27 bentley <li>Stopped <a href="https://man.openbsd.org/dhclient.8">dhclient(8)</a> adding a lease to the leases TAILQ more than once. Avoids infinite loop.
758 a8c642e8 2014-09-08 brett <li>Updated to libXfont 1.4.8.
759 cce97a6e 2019-05-27 bentley <li>Check <a href="https://man.openbsd.org/ssl.3">ssl(3)</a> bio_err initialisation succeeds before using it.
760 a8c642e8 2014-09-08 brett <li>Updated to fontconfig 2.11.1.
761 a8c642e8 2014-09-08 brett <!-- 2014/05/17 -->
762 a8c642e8 2014-09-08 brett <li>Updated to xf86-input-synaptics 1.8.0.
763 cce97a6e 2019-05-27 bentley <li>Fixed kernel build when <a href="https://man.openbsd.org/ehci.4">ehci(4)</a> uses EHCI_DEBUG.
764 cce97a6e 2019-05-27 bentley <li>Switched <a href="https://man.openbsd.org/ssl.8">ssl(8)</a> RSA key generation default to 2048 bits (matching <a href="https://man.openbsd.org/ssh.1">ssh(1)</a>).
765 cce97a6e 2019-05-27 bentley <li>Made <a href="https://man.openbsd.org/qla.4">qla(4)</a> less likely to get stuck looping when the firmware behaves inconsistently.
766 cce97a6e 2019-05-27 bentley <li>Change interrupt handler's return value to 0 when nothing is processed on <a href="https://man.openbsd.org/luna88k/pcexmem.4">pcexmem(4/luna88k)</a>.
767 cce97a6e 2019-05-27 bentley <li>When <a href="https://man.openbsd.org/pfctl.8">pfctl(8)</a> is parsing a numerical value for the TOS bits, ensure it is in a valid range.
768 a8c642e8 2014-09-08 brett <!-- 2014/05/16 -->
769 cce97a6e 2019-05-27 bentley <li>Fixed <a href="https://man.openbsd.org/mountd.8">mountd(8)</a>: when a host in a netgroup is unresolvable, don't ignore entire netgroup.
770 cce97a6e 2019-05-27 bentley <li>Sped up <a href="https://man.openbsd.org/signify.1">signify(1)</a> -C.
771 cce97a6e 2019-05-27 bentley <li>Made <a href="https://man.openbsd.org/df.1">df(1)</a> do calculations of available space the same way as ffs_statfs() does.
772 cce97a6e 2019-05-27 bentley <li>Improved logging messages and style for <a href="https://man.openbsd.org/snmpd.8">snmpd(8)</a>.
773 a8c642e8 2014-09-08 brett <li>Don't put a link-layer address on the per-ifp lists or RB-Tree. Improves address lookups.
774 a8c642e8 2014-09-08 brett <!-- 2014/05/15 -->
775 cce97a6e 2019-05-27 bentley <li>Fixed memory leaks in <a href="https://man.openbsd.org/ssl.3">ssl(3)</a> asn1 upon failure.
776 cce97a6e 2019-05-27 bentley <li>Replaced <a href="https://man.openbsd.org/ssl.3">ssl(3)</a> ASN1_GENERALIZEDTIME_adj(), ASN1_UTCTIME_adj() and ASN1_TIME_to_generalizedtime() with wrappers.
777 cce97a6e 2019-05-27 bentley <li>Added a ChaCha20-Poly1305 AEAD EVP implementation to <a href="https://man.openbsd.org/ssl.3">ssl(3)</a> libcrypto.
778 cce97a6e 2019-05-27 bentley <li>Added an AEAD EVP interface to <a href="https://man.openbsd.org/ssl.3">ssl(3)</a> libcrypto, along with AES-GCM AEAD implementations.
779 cce97a6e 2019-05-27 bentley <li>Made <a href="https://man.openbsd.org/signify.1">signify(1)</a> -C mode work again.
780 a8c642e8 2014-09-08 brett <!-- 2014/05/14 -->
781 cce97a6e 2019-05-27 bentley <li><a href="https://man.openbsd.org/rtadvd.8">rtadvd(8)</a> now ignores route info messages on the listening side.
782 cce97a6e 2019-05-27 bentley <li>Stopped flushing streams on <a href="https://man.openbsd.org/abort.3">abort(3)</a>, which was unsafe.
783 cce97a6e 2019-05-27 bentley <li>Removed arch-specific <a href="https://man.openbsd.org/lo.4">lo(4)</a> MTU and set to 32768 everywhere.
784 cce97a6e 2019-05-27 bentley <li>Made <a href="https://man.openbsd.org/signify.1">signify(1)</a> recode base64 hashes if necessary; spell out base64 in error messages.
785 cce97a6e 2019-05-27 bentley <li>Better use of <a href="https://man.openbsd.org/realloc.3">realloc(3)</a>, to speed up <a href="https://man.openbsd.org/signify.1">signify(1)</a> checksum verification.
786 cce97a6e 2019-05-27 bentley <li>Added poly1305 to <a href="https://man.openbsd.org/ssl.3">ssl(3)</a>, utilising Andrew Moon's public domain implementation.
787 a8c642e8 2014-09-08 brett <!-- 2014/05/13 -->
788 cce97a6e 2019-05-27 bentley <li><a href="https://man.openbsd.org/tmux.1">tmux(1)</a> no longer allows multiple buffers with the same name.
789 cce97a6e 2019-05-27 bentley <li><strong>5.4, 5.5 and -current SECURITY FIX: integer, memory and buffer overflows in libXfont (CVE-2014-0209; CVE-2014-0210 and CVE-2014-0211)</strong>.
790 a8c642e8 2014-09-08 brett <li>Fixed regression in r1.285 of sys/net/if.c (TAILQ corruption where rdomain was not switched).
791 cce97a6e 2019-05-27 bentley <li>In <a href="https://man.openbsd.org/iked.8">iked(8)</a>, pass SA initiator (not the exchange initiator) to sa_address().
792 a8c642e8 2014-09-08 brett <li>The resolver now skips incomplete entries in /etc/hosts and /etc/networks (rather than crash).
793 cce97a6e 2019-05-27 bentley <li>Pass multi-argument <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> commands directly to <a href="https://man.openbsd.org/execvp.3">execvp(3)</a>. Helps avoid quoting problems.
794 cce97a6e 2019-05-27 bentley <li>Added a copy mode key binding to copy to a named <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> buffer.
795 cce97a6e 2019-05-27 bentley <li>Added <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> support for named buffers.
796 a8c642e8 2014-09-08 brett <!-- 2014/05/12 -->
797 cce97a6e 2019-05-27 bentley <li>Fixed multiple bugs in <a href="https://man.openbsd.org/ncheck_ffs.8">ncheck_ffs(8)</a> handling of indirect blocks.
798 cce97a6e 2019-05-27 bentley <li>Updated <a href="https://man.openbsd.org/drm.4">drm(4)</a> to libdrm 2.4.54.
799 cce97a6e 2019-05-27 bentley <li>Fixed <a href="https://man.openbsd.org/ntpd.8">ntpd(8)</a> format strings involving time_t arguments. Fixes <a href="https://man.openbsd.org/ntpd.8">ntpd(8)</a> -d on sparc.
800 cce97a6e 2019-05-27 bentley <li>Moved GTT management for Sandy Bridge into <a href="https://man.openbsd.org/inteldrm.4">inteldrm(4)</a>.
801 cce97a6e 2019-05-27 bentley <li>Removed AES_bi_ige_encrypt() from <a href="https://man.openbsd.org/ssl.3">ssl(3)</a>.
802 cce97a6e 2019-05-27 bentley <li>Removed md5crypt from <a href="https://man.openbsd.org/crypt.3">crypt(3)</a>.
803 a8c642e8 2014-09-08 brett <li>Moved the ohash functions into libutil.
804 cce97a6e 2019-05-27 bentley <li>Stopped <a href="https://man.openbsd.org/dhclient.8">dhclient(8)</a> exiting when sent RTM_NEWADDR or RTM_DELADDR routing messages lacking appropriate address info.
805 cce97a6e 2019-05-27 bentley <li>Altered <a href="https://man.openbsd.org/usbhidctl.1">usbhidctl(1)</a> and <a href="https://man.openbsd.org/usbhidaction.1">usbhidaction(1)</a> parsers to keep in sync with the kernel HID parser.
806 cce97a6e 2019-05-27 bentley <li>Fixed possible <a href="https://man.openbsd.org/smtpd.8">smtpd(8)</a> double free when tls is required but not advertised by the server.
807 a8c642e8 2014-09-08 brett <li>Updated the HID parser to properly parse modern input device descriptors.
808 a8c642e8 2014-09-08 brett <li>Added router alert option (RAO) in IGMP packets (per RFC2236), needed by some L3 switches.
809 cce97a6e 2019-05-27 bentley <li>More intelligent parsing of WEP keys by <a href="https://man.openbsd.org/ifconfig.8">ifconfig(8)</a>.
810 a8c642e8 2014-09-08 brett <!-- 2014/05/11 -->
811 cce97a6e 2019-05-27 bentley <li>Make sure <a href="https://man.openbsd.org/uhub.4">uhub(4)</a> root hub is re-attached before interrupts get enabled. Unbreaks resume.
812 cce97a6e 2019-05-27 bentley <li>Stop ignoring "lease" statements in <a href="https://man.openbsd.org/dhclient.conf.5">dhclient.conf(5)</a>.
813 cce97a6e 2019-05-27 bentley <li>Reworked/restored <a href="https://man.openbsd.org/dhclient.8">dhclient(8)</a> recorded lease handling.
814 a8c642e8 2014-09-08 brett <li>Fixed the installer's configuration of a static IPv6 default gateway.
815 a8c642e8 2014-09-08 brett <!-- 2014/05/10 -->
816 a8c642e8 2014-09-08 brett <li>Various format string fixes on mips64 and octeon.
817 cce97a6e 2019-05-27 bentley <li>Fixed recently-occurring <a href="https://man.openbsd.org/ssl.8">ssl(8)</a> breakage in <a href="https://man.openbsd.org/smtpd.8">smtpd(8)</a>.
818 a8c642e8 2014-09-08 brett <li>On i386/amd64, disable speedstep instead of panicking if high and low speeds are the same.
819 cce97a6e 2019-05-27 bentley <li>Allow <a href="https://man.openbsd.org/nginx.8">nginx(8)</a> to <a href="https://man.openbsd.org/chroot.8">chroot(8)</a> to a directory other than /var/www.
820 a8c642e8 2014-09-08 brett <li>Many string format fixes on sparc64.
821 cce97a6e 2019-05-27 bentley <li>Losing TCP connection no longer results in an unrecoverable stop in <a href="https://man.openbsd.org/iscsid.8">iscsid(8)</a>.
822 a8c642e8 2014-09-08 brett <!-- 2014/05/09 -->
823 cce97a6e 2019-05-27 bentley <li>Stopped <a href="https://man.openbsd.org/cribbage.6">cribbage(6)</a> ignoring words which followed two or more blank characters.
824 cce97a6e 2019-05-27 bentley <li>Print interface name with queues in <a href="https://man.openbsd.org/systat.1">systat(1)</a> q.
825 cce97a6e 2019-05-27 bentley <li>Updated to: <a href="https://man.openbsd.org/xterm.1">xterm(1)</a> version 304; libXi 1.7.2 and xf86-input-synaptics 1.7.5.
826 cce97a6e 2019-05-27 bentley <li>Fixed <a href="https://man.openbsd.org/fsck_ffs.8">fsck_ffs(8)</a> -b to work with the superblock locations on 4096-byte sector disks.
827 cce97a6e 2019-05-27 bentley <li>Use the highest possible priority for any <a href="https://man.openbsd.org/route.4">route(4)</a> to local addresses.
828 a8c642e8 2014-09-08 brett <!-- 2014/05/08 -->
829 cce97a6e 2019-05-27 bentley <li>Stopped <a href="https://man.openbsd.org/cribbage.6">cribbage(6)</a> choking on one-letter card names which followed three-letter card names.
830 cce97a6e 2019-05-27 bentley <li>Fixed potential <a href="https://man.openbsd.org/uvm.9">uvm(9)</a> integer overflows.
831 cce97a6e 2019-05-27 bentley <li>Made <a href="https://man.openbsd.org/relayd.8">relayd(8)</a> fail when encountering unsupported combinations.
832 cce97a6e 2019-05-27 bentley <li>Only attach <a href="https://man.openbsd.org/luna88k/pcexmem.4">pcexmem(4/luna88k)</a> and <a href="https://man.openbsd.org/luna88k/pcexio.4">pcexio(4/luna88k)</a> on luna88k2 (not luna88k).
833 cce97a6e 2019-05-27 bentley <li>Brought back restricted sockets to <a href="https://man.openbsd.org/snmpd.8">snmpd(8)</a>, inadvertently removed in recent update.
834 a8c642e8 2014-09-08 brett <!-- 2014/05/07 -->
835 cce97a6e 2019-05-27 bentley <li>Made <a href="https://man.openbsd.org/zmore.1">zmore(1)</a> call <a href="https://man.openbsd.org/more.1">more(1)</a> and <a href="https://man.openbsd.org/zless.1">zless(1)</a> call <a href="https://man.openbsd.org/less.1">less(1)</a>.
836 cce97a6e 2019-05-27 bentley <li>Repaired the termination condition of a <a href="https://man.openbsd.org/write.2">write(2)</a> loop in <a href="https://man.openbsd.org/vipw.8">vipw(8)</a>.
837 cce97a6e 2019-05-27 bentley <li>In <a href="https://man.openbsd.org/ssl.8">ssl(8)</a> ec_asn1.c, don't free memory unless we allocated it (RT#3338).
838 cce97a6e 2019-05-27 bentley <li>Improved code to clear all bignums from bn_lib.c in <a href="https://man.openbsd.org/ssl.8">ssl(8)</a>.
839 cce97a6e 2019-05-27 bentley <li>In <a href="https://man.openbsd.org/ssl.8">ssl(8)</a> BN_clear_free(), don't cleanse the data if the static data flag is set.
840 cce97a6e 2019-05-27 bentley <li>Render <a href="https://man.openbsd.org/roff.7">roff(7)</a> escape sequences in man page descriptions prior to insertion into <a href="https://man.openbsd.org/mandoc.db.5">mandoc.db(5)</a>.
841 cce97a6e 2019-05-27 bentley <li>Fixed two memory leaks in <a href="https://man.openbsd.org/makewhatis.8">makewhatis(8)</a> -n.
842 cce97a6e 2019-05-27 bentley <li>Fixed segfault in <a href="https://man.openbsd.org/makewhatis.8">makewhatis(8)</a> -Q if the next .SH after .SH NAME does not have any arguments.
843 cce97a6e 2019-05-27 bentley <li>Backed out the previous ICMP simplifying diff from <a href="https://man.openbsd.org/dhcpd.8">dhcpd(8)</a>, which caused livelocks.
844 cce97a6e 2019-05-27 bentley <li>Try postponed requests first, so <a href="https://man.openbsd.org/iked.8">iked(8)</a> does in-order processing.
845 d4242974 2021-10-08 tj <li>Made <a href="https://man.openbsd.org/iked.8">iked(8)</a> authentication work with X.509 certificates not containing a subject-altname.
846 cce97a6e 2019-05-27 bentley <li>Removed the undocumented and ineffective <a href="https://man.openbsd.org/ln.1">ln(1)</a> -F option.
847 cce97a6e 2019-05-27 bentley <li>Removed <a href="https://man.openbsd.org/sysctl.8">sysctl(8)</a> {nd6_,}useloopback options.
848 a8c642e8 2014-09-08 brett <!-- 2014/05/06 -->
849 a8c642e8 2014-09-08 brett <li>Fixed recently broken ext2fs atime and mtime.
850 cce97a6e 2019-05-27 bentley <li>Introduced <a href="https://man.openbsd.org/gcc.1">gcc(1)</a> -fstack-shuffle, which randomises local stack variables.
851 cce97a6e 2019-05-27 bentley <li>Make sure <a href="https://man.openbsd.org/ssl.8">ssl(8)</a> PKCS7_get_octet_string() return values are checked for NULL (PR#3339).
852 cce97a6e 2019-05-27 bentley <li>Enabled <a href="https://man.openbsd.org/octeon/brswphy.4">brswphy(4/octeon)</a>.
853 cce97a6e 2019-05-27 bentley <li>Allow <a href="https://man.openbsd.org/iked.8">iked(8)</a> to initiate a create-child-SA and process requests for the peer simultaneously.
854 cce97a6e 2019-05-27 bentley <li>Explicitly zero ibufs before releasing memory. Ensures <a href="https://man.openbsd.org/iked.8">iked(8)</a> crypto parameters are cleaned.
855 cce97a6e 2019-05-27 bentley <li>Fixed memory leaks in the <a href="https://man.openbsd.org/relayd.8">relayd(8)</a> and <a href="https://man.openbsd.org/smtpd.8">smtpd(8)</a> <a href="https://man.openbsd.org/ssl.8">ssl(8)</a> code.
856 cce97a6e 2019-05-27 bentley <li>Re-queue pfkey events while <a href="https://man.openbsd.org/iked.8">iked(8)</a> is busy initiating child-SAs.
857 cce97a6e 2019-05-27 bentley <li>In <a href="https://man.openbsd.org/iked.8">iked(8)</a>, initiate ike SA rekeying ("ikesalifetime" keyword).
858 cce97a6e 2019-05-27 bentley <li>Fixed <a href="https://man.openbsd.org/iked.8">iked(8)</a> memleak when SA lookup fails while forwarding encrypted <a href="https://man.openbsd.org/ip6.4">ip6(4)</a> packets.
859 cce97a6e 2019-05-27 bentley <li>Plugged two <a href="https://man.openbsd.org/ucom.4">ucom(4)</a> xfer leaks and a buffer leak.
860 cce97a6e 2019-05-27 bentley <li>Encrypt some <a href="https://man.openbsd.org/iked.8">iked(8)</a> notify payloads.
861 cce97a6e 2019-05-27 bentley <li>Initial <a href="https://man.openbsd.org/iked.8">iked(8)</a> support for PFS.
862 a8c642e8 2014-09-08 brett <!-- 2014/05/05 -->
863 cce97a6e 2019-05-27 bentley <li>Cleanse old <a href="https://man.openbsd.org/ssl.8">ssl(8)</a> memory when expanding a bignum; clear all bignums when freed.
864 a8c642e8 2014-09-08 brett <li>Updated xkeyboard-config to version 2.11.
865 cce97a6e 2019-05-27 bentley <li>Workaround overoptimistic <a href="https://man.openbsd.org/fdisk.8">fdisk(8)</a> alignment expectation on dos_partition fields.
866 cce97a6e 2019-05-27 bentley <li>Enhanced reading of saved ascii labels when using <a href="https://man.openbsd.org/disklabel.8">disklabel(8)</a> -R.
867 cce97a6e 2019-05-27 bentley <li>Stopped <a href="https://man.openbsd.org/iked.8">iked(8)</a> leaking on pid mismatch.
868 cce97a6e 2019-05-27 bentley <li>Validate the attribute length in <a href="https://man.openbsd.org/iked.8">iked(8)</a>.
869 cce97a6e 2019-05-27 bentley <li>Removed SRP and Kerberos support from <a href="https://man.openbsd.org/ssl.8">ssl(8)</a>.
870 a8c642e8 2014-09-08 brett <!-- 2014/05/04 -->
871 cce97a6e 2019-05-27 bentley <li>On sparc, enabled <a href="https://man.openbsd.org/ssl.8">ssl(8)</a> assembler code for DES.
872 cce97a6e 2019-05-27 bentley <li>On vax, enabled the <a href="https://man.openbsd.org/ssl.8">ssl(8)</a> assembler code for BN.
873 cce97a6e 2019-05-27 bentley <li>In <a href="https://man.openbsd.org/relayd.8">relayd(8)</a> and <a href="https://man.openbsd.org/smtpd.8">smtpd(8)</a>, fixed SSL/TLS and a possible fatalx() on machines without a default RSA engine.
874 a8c642e8 2014-09-08 brett <!-- 2014/05/03 -->
875 cce97a6e 2019-05-27 bentley <li>Added <a href="https://man.openbsd.org/sysctl.8">sysctl(8)</a> kern.nosuidcoredump=3, to dump <a href="https://man.openbsd.org/core.5">core(5)</a> into the /var/crash/progname/ directory.
876 cce97a6e 2019-05-27 bentley <li>Enabled <a href="https://man.openbsd.org/ssl.8">ssl(8)</a> assembler code for AES, DES, GCM, SHA1, SHA256 and SHA512 on sparc64.
877 cce97a6e 2019-05-27 bentley <li>Enabled <a href="https://man.openbsd.org/ssl.8">ssl(8)</a> assembler code for AES, BN, GCM128, SHA1, SHA256 and SHA512 on arm.
878 cce97a6e 2019-05-27 bentley <li>Updated to: <a href="https://man.openbsd.org/xauth.1">xauth(1)</a> version 1.0.9; <a href="https://man.openbsd.org/xbacklight.1">xbacklight(1)</a> version 1.2.1; <a href="https://man.openbsd.org/xrandr.1">xrandr(1)</a> version 1.4.2 and <a href="https://man.openbsd.org/xinput.1">xinput(1)</a> version 1.6.1.
879 a8c642e8 2014-09-08 brett <li>Updated to libFS 1.0.6.
880 cce97a6e 2019-05-27 bentley <li>Unbroke <a href="https://man.openbsd.org/ssh.1">ssh(1)</a> compression.
881 cce97a6e 2019-05-27 bentley <li>Switched to generating <a href="https://man.openbsd.org/bcrypt.3">bcrypt(3)</a> 2b hashes by default.
882 cce97a6e 2019-05-27 bentley <li>Added checks for invalid base64 encoded data in <a href="https://man.openbsd.org/ssl.8">ssl(8)</a> padding. Fixes a crash (RT#2608).
883 a8c642e8 2014-09-08 brett <li>Provide extended-precision math constants (required by POSIX).
884 a8c642e8 2014-09-08 brett <li>Stopped citrus UTF-8 parser rejecting 0xFFFE and 0xFFFF (they do not render strings invalid).
885 a8c642e8 2014-09-08 brett <!-- 2014/05/02 -->
886 cce97a6e 2019-05-27 bentley <li><a href="https://man.openbsd.org/drm.4">drm(4)</a> i915 fixes: workaround inverted brightness for Acer Aspire 5336; fixed gen4 composite s-video tv-out.
887 cce97a6e 2019-05-27 bentley <li>Updated <a href="https://man.openbsd.org/Xserver.1">Xserver(1)</a> to version 1.15.1.
888 cce97a6e 2019-05-27 bentley <li>On hppa, fixed <a href="https://man.openbsd.org/ssl.8">ssl(8)</a> assembler version of SHA512 to output correct results.
889 cce97a6e 2019-05-27 bentley <li>Make <a href="https://man.openbsd.org/acpiprt.4">acpiprt(4)</a> correctly handle interrupts with non-standard polarity.
890 cce97a6e 2019-05-27 bentley <li>In <a href="https://man.openbsd.org/acpi.4">acpi(4)</a>, made acpi_mutex_acquire/release actually grab the global lock when called.
891 cce97a6e 2019-05-27 bentley <li>Fixed occasional <a href="https://man.openbsd.org/disklabel.8">disklabel(8)</a> crashes when altering mount points.
892 a8c642e8 2014-09-08 brett <!-- 2014/05/01 -->
893 cce97a6e 2019-05-27 bentley <li>Reverted __bounded code in <a href="https://man.openbsd.org/ssh.1">ssh(1)</a>.
894 cce97a6e 2019-05-27 bentley <li>Oh hppa, use assembly code for AES, BN (Montgomery), SHA1, SHA256 and SHA512 in <a href="https://man.openbsd.org/ssl.8">ssl(8)</a>.
895 cce97a6e 2019-05-27 bentley <li>Stopped <a href="https://man.openbsd.org/ssl.8">ssl(8)</a> <a href="https://man.openbsd.org/perl.1">perl(1)</a> scripts outputting SOM-specific directives.
896 cce97a6e 2019-05-27 bentley <li>Removed unreferenced OPENSSL_instrument_bus and OPENSSL_instrument_bus2 routines from <a href="https://man.openbsd.org/ssl.8">ssl(8)</a>.
897 cce97a6e 2019-05-27 bentley <li>Extended <a href="https://man.openbsd.org/fread.3">fread(3)</a> and <a href="https://man.openbsd.org/fwrite.3">fwrite(3)</a> to check for integer overflows.
898 cce97a6e 2019-05-27 bentley <li>Moved <a href="https://man.openbsd.org/smtpd.8">smtpd(8)</a> RSA key handling from "lka" to a new dedicated "ca" process.
899 cce97a6e 2019-05-27 bentley <li><strong>5.4 and 5.5 RELIABILITY FIX: Stop attacker's ability to trigger an <a href="https://man.openbsd.org/ssl.8">ssl(8)</a> alert, which could cause a null pointer dereference.</strong><br>A source code patch is available for <a href="errata54.html#009_openssl">5.4</a> and <a href="errata55.html#005_openssl">5.5</a>.
900 cce97a6e 2019-05-27 bentley <li>Fixed <a href="https://man.openbsd.org/gcc.1">gcc(1)</a> on i386, to detect overflows and properly align arrays > 16 bytes.
901 cce97a6e 2019-05-27 bentley <li>Added ChaCha cypher to <a href="https://man.openbsd.org/ssl.8">ssl(8)</a>, and provided it with an EVP implementation.
902 cce97a6e 2019-05-27 bentley <li>Added Brainpool and ANSSI FRP256v1 elliptic curves to <a href="https://man.openbsd.org/ssl.8">ssl(8)</a> (RT#2239).
903 cce97a6e 2019-05-27 bentley <li>Corrected <a href="https://man.openbsd.org/isakmpd.8">isakmpd(8)</a> test when passing data to a keynote.
904 a8c642e8 2014-09-08 brett <!-- 2014/04/30 -->
905 cce97a6e 2019-05-27 bentley <li>Improved <a href="https://man.openbsd.org/malloc.3">malloc(3)</a>'s ability to pick a free chunk at random.
906 cce97a6e 2019-05-27 bentley <li><a href="https://man.openbsd.org/uvm.9">uvm(9)</a> now correctly flush discarded pages even if the number of hash buckets doesn't change.
907 cce97a6e 2019-05-27 bentley <li>When <a href="https://man.openbsd.org/openssl.1">openssl(1)</a> isn't available, <a href="https://man.openbsd.org/ssh.1">ssh(1)</a> now uses local fallback implementation of AES for UMAC.
908 cce97a6e 2019-05-27 bentley <li>Preserve the intended chronological order of leases in <a href="https://man.openbsd.org/dhclient.leases.5">dhclient.leases(5)</a> files.
909 cce97a6e 2019-05-27 bentley <li>Fixed <a href="https://man.openbsd.org/growfs.8">growfs(8)</a> on 4K-sector disks.
910 cce97a6e 2019-05-27 bentley <li>First pass at removing win64 support from the assembly-generating <a href="https://man.openbsd.org/perl.1">perl(1)</a> scripts in <a href="https://man.openbsd.org/ssl.8">ssl(8)</a>.
911 cce97a6e 2019-05-27 bentley <li>Stopped <a href="https://man.openbsd.org/smtpd.8">smtpd(8)</a> trying to create folders that already exist when using maildir.
912 cce97a6e 2019-05-27 bentley <li>Improved imsg handling with many concurrent connections in <a href="https://man.openbsd.org/smtpd.8">smtpd(8)</a>.
913 a8c642e8 2014-09-08 brett <!-- 2014/04/29 -->
914 cce97a6e 2019-05-27 bentley <li>New buffer API, to eventually make <a href="https://man.openbsd.org/ssh.1">ssh(1)</a> usable as a standalone library.
915 a8c642e8 2014-09-08 brett <li>Improved enforcing of proper alignment of stack variables on sparc.
916 cce97a6e 2019-05-27 bentley <li><a href="https://man.openbsd.org/smtpd.8">smtpd(8)</a> RSA private key privsep will now only load keys after forking the separated process.
917 cce97a6e 2019-05-27 bentley <li>Stopped <a href="https://man.openbsd.org/sftp.1">sftp(1)</a> attempting to append a nul quote character to filenames (bz#2238).
918 cce97a6e 2019-05-27 bentley <li>Implemented RSA privilege separation for <a href="https://man.openbsd.org/smtpd.8">smtpd(8)</a>. Prevents possible private key leakage.
919 cce97a6e 2019-05-27 bentley <li>Made compiling <a href="https://man.openbsd.org/ssh.8">ssh(8)</a> and <a href="https://man.openbsd.org/sshd.8">sshd(8)</a> against <a href="https://man.openbsd.org/ssl.8">ssl(8)</a> optional.
920 cce97a6e 2019-05-27 bentley <li>When <a href="https://man.openbsd.org/smtpd.8">smtpd(8)</a> fails to relay via TLS (and <a href="https://man.openbsd.org/smtpd.conf.5">smtpd.conf(5)</a> doesn't require security), try plain; also downgrade if a TLS error happens during the session.
921 cce97a6e 2019-05-27 bentley <li>Constrain bytes read/written to positive values in <a href="https://man.openbsd.org/ssl.8">ssl(8)</a> s3_pkt.c code.
922 cce97a6e 2019-05-27 bentley <li>Re-added local aesctr implementation to <a href="https://man.openbsd.org/ssh.1">ssh(1)</a>.
923 cce97a6e 2019-05-27 bentley <li>Moved <a href="https://man.openbsd.org/traceroute6.8">traceroute6(8)</a> to the attic, fully merged into <a href="https://man.openbsd.org/traceroute.8">traceroute(8)</a>.
924 cce97a6e 2019-05-27 bentley <li>Removed large memory leak from <a href="https://man.openbsd.org/usb.4">usb(4)</a>.
925 cce97a6e 2019-05-27 bentley <li>Deleted SSL_OP_DONT_INSERT_EMPTY_FRAGMENTS from <a href="https://man.openbsd.org/nginx.8">nginx(8)</a> to keep attack mitigations enabled.
926 cce97a6e 2019-05-27 bentley <li>Stopped <a href="https://man.openbsd.org/ssh.1">ssh(1)</a> sending success/failure replies when channels have sent a close already (bz#1818).
927 cce97a6e 2019-05-27 bentley <li>Removed <a href="https://man.openbsd.org/less.1">less(1)</a> support for the obsolete (non-POSIX) "more -d" prompt.
928 cce97a6e 2019-05-27 bentley <li>Made sure the <a href="https://man.openbsd.org/iked.8">iked(8)</a> state machine only advances if the AUTH payload has been verified.
929 cce97a6e 2019-05-27 bentley <li>Use <a href="https://man.openbsd.org/explicit_bzero.3">explicit_bzero(3)</a> instead of <a href="https://man.openbsd.org/memset.3">memset(3)</a> to clear out sensitive <a href="https://man.openbsd.org/smtpd.8">smtpd(8)</a> data.
930 101b0ca3 2017-06-26 tb <!-- 2014/04/28 -->
931 cce97a6e 2019-05-27 bentley <li>Implemented AI_ADDRCONFIG in <a href="https://man.openbsd.org/getaddrinfo.3">getaddrinfo(3)</a>, as per RFC 3493.
932 cce97a6e 2019-05-27 bentley <li>Removed more WIN32, WIN64 and MINGW32 tentacles from <a href="https://man.openbsd.org/ssl.8">ssl(8)</a>.
933 cce97a6e 2019-05-27 bentley <li>Use the correct algorithm mask in <a href="https://man.openbsd.org/ssl.8">ssl(8)</a> t1_enc.c.
934 cce97a6e 2019-05-27 bentley <li>In <a href="https://man.openbsd.org/ssl.8">ssl(8)</a>, stopped SSL_OP_ALL disabling attack mitigations against CBC modes.
935 cce97a6e 2019-05-27 bentley <li>Let <a href="https://man.openbsd.org/nm.1">nm(1)</a> -w correctly return 0 for valid archives.
936 cce97a6e 2019-05-27 bentley <li>Stopped <a href="https://man.openbsd.org/ping.8">ping(8)</a> and <a href="https://man.openbsd.org/ping6.8">ping6(8)</a> sleeping after <a href="https://man.openbsd.org/poll.2">poll(2)</a> returns an error.
937 cce97a6e 2019-05-27 bentley <li>Added <a href="https://man.openbsd.org/fuse.4">fuse(4)</a> support for 255 character file names.
938 cce97a6e 2019-05-27 bentley <li><a href="https://man.openbsd.org/m4.1">m4(1)</a> now checks for integer overflows in custom allocs.
939 cce97a6e 2019-05-27 bentley <li>Added support to <a href="https://man.openbsd.org/snmpd.8">snmpd(8)</a> for exporting ARP table via "ipNetToMediaTable" OID.
940 cce97a6e 2019-05-27 bentley <li>Fixed a loop so that waiting for <a href="https://man.openbsd.org/i386/wds.4">wds(4/i386)</a> hardware actually happens.
941 101b0ca3 2017-06-26 tb <!-- 2014/04/27 -->
942 cce97a6e 2019-05-27 bentley <li>Improved error handling when using <a href="https://man.openbsd.org/dbopen.3">dbopen(3)</a> in <a href="https://man.openbsd.org/mandoc.1">mandoc(1)</a>.
943 cce97a6e 2019-05-27 bentley <li>Fixed library search order in <a href="https://man.openbsd.org/libtool.1">libtool(1)</a>.
944 f22223cb 2016-03-22 sthen <li>Updated to xproto 7.0.26.
945 cce97a6e 2019-05-27 bentley <li>On i386, <a href="https://man.openbsd.org/installboot.8">installboot(8)</a> no longer overwrites disklabel and nearby blocks on 4k-sector disk drives.
946 cce97a6e 2019-05-27 bentley <li>Stopped <a href="https://man.openbsd.org/bluetooth.4">bluetooth(4)</a> HID device grabbing the console.
947 cce97a6e 2019-05-27 bentley <li>Re-added "_ppp" user and "_ppp" group, to be solely used by <a href="https://man.openbsd.org/npppd.8">npppd(8)</a> going forward.
948 a8c642e8 2014-09-08 brett <!-- 2014/04/26 -->
949 cce97a6e 2019-05-27 bentley <li>Stopped <a href="https://man.openbsd.org/ssl.8">ssl(8)</a> using random stack memory as addresses of strings.
950 cce97a6e 2019-05-27 bentley <li>Removed support for building <a href="https://man.openbsd.org/openssl.1">openssl(1)</a> on 16-bit Windows.
951 a8c642e8 2014-09-08 brett <!-- 2014/04/25 -->
952 a8c642e8 2014-09-08 brett <li>Filter excess data from autoinstall output, to avoid filling the ramdisk.
953 cce97a6e 2019-05-27 bentley <li>Made <a href="https://man.openbsd.org/more.1">more(1)</a> POSIX compliant with respect to the -e option.
954 cce97a6e 2019-05-27 bentley <li>Merged <a href="https://man.openbsd.org/less.1">less(1)</a> version 458, including local changes.
955 cce97a6e 2019-05-27 bentley <li>Reduced the verbosity of <a href="https://man.openbsd.org/makewhatis.8">makewhatis(8)</a> -t.
956 cce97a6e 2019-05-27 bentley <li>Do not re-probe <a href="https://man.openbsd.org/pms.4">pms(4)</a> unnecessarily. Fixes 12 seconds <a href="https://man.openbsd.org/Xorg.1">Xorg(1)</a> delay on some laptops.
957 cce97a6e 2019-05-27 bentley <li>Stopped <a href="https://man.openbsd.org/iked.8">iked(8)</a> and <a href="https://man.openbsd.org/mpii.4">mpii(4)</a> accessing pointers prior to a null check.
958 cce97a6e 2019-05-27 bentley <li>Allow <a href="https://man.openbsd.org/snmpd.conf.5">snmpd.conf(5)</a> to set user-defined actions on receipt of snmp traps.
959 a8c642e8 2014-09-08 brett <!-- 2014/04/24 -->
960 cce97a6e 2019-05-27 bentley <li>Removed <a href="https://man.openbsd.org/kinit.1">kinit(1)</a>.
961 cce97a6e 2019-05-27 bentley <li>Fixed <a href="https://man.openbsd.org/sudo.8">sudo(8)</a> when checking command line environment variables against the blacklist (CVE 2014-0106).
962 cce97a6e 2019-05-27 bentley <li>Fixed copied text in the <a href="https://man.openbsd.org/snmpd.8">snmpd(8)</a> error string.
963 a8c642e8 2014-09-08 brett <!-- 2014/04/23 -->
964 cce97a6e 2019-05-27 bentley <li>Stopped <a href="https://man.openbsd.org/ssl.8">ssl(8)</a> do_ssl3_write() being called recursively; don't release buffer meant for use.
965 cce97a6e 2019-05-27 bentley <li>Audited <a href="https://man.openbsd.org/malloc.3">malloc(3)</a>/<a href="https://man.openbsd.org/calloc.3">calloc(3)</a>/<a href="https://man.openbsd.org/realloc.3">realloc(3)</a> usage in <a href="https://man.openbsd.org/mandoc.1">mandoc(1)</a> to be safe from overflows.
966 cce97a6e 2019-05-27 bentley <li>Fixes in <a href="https://man.openbsd.org/ssl.8">ssl(8)</a> kssl.c to prevent double frees and removed a use-after-free.
967 cce97a6e 2019-05-27 bentley <li>Fixed leak in <a href="https://man.openbsd.org/ssl.8">ssl(8)</a> BIO_accept which could have caused the caller to crash.
968 cce97a6e 2019-05-27 bentley <li>Audited <a href="https://man.openbsd.org/strlcpy.3">strlcpy(3)</a>/<a href="https://man.openbsd.org/strlcat.3">strlcat(3)</a> usage in <a href="https://man.openbsd.org/mandoc.1">mandoc(1)</a>.
969 cce97a6e 2019-05-27 bentley <li>Removed "Z" option from <a href="https://man.openbsd.org/malloc.conf.5">malloc.conf(5)</a>; by default always junk small chunks now.
970 cce97a6e 2019-05-27 bentley <li>In <a href="https://man.openbsd.org/unbound.8">unbound(8)</a>, use <a href="https://man.openbsd.org/arc4random.9">arc4random(9)</a> as PRNG backend, instead of the libcrypto RAND.
971 cce97a6e 2019-05-27 bentley <li><a href="https://man.openbsd.org/disklabel.8">disklabel(8)</a> now fills all required fields after clearing. Avoids consistency check failures.
972 a8c642e8 2014-09-08 brett <!-- 2014/04/22 -->
973 cce97a6e 2019-05-27 bentley <li>Improved <a href="https://man.openbsd.org/malloc.3">malloc(3)</a> hash functions that compute the same on big-endian and little-endian archs.
974 cce97a6e 2019-05-27 bentley <li>Removed OPENSSL_indirect_call() from <a href="https://man.openbsd.org/ssl.8">ssl(8)</a> for reduced attack surface.
975 cce97a6e 2019-05-27 bentley <li>Fixed a missing <a href="https://man.openbsd.org/splbio.9">splbio(9)</a> in sys/ufs/ffs/ffs_softdep.c which caused crashes.
976 cce97a6e 2019-05-27 bentley <li>Remove useless RX checksum offloading support from <a href="https://man.openbsd.org/gem.4">gem(4)</a> and <a href="https://man.openbsd.org/hme.4">hme(4)</a>.
977 cce97a6e 2019-05-27 bentley <li>Removed Apache from base (replaced by <a href="https://man.openbsd.org/nginx.8">nginx(8)</a>).
978 cce97a6e 2019-05-27 bentley <li>On <a href="https://man.openbsd.org/bge.4">bge(4)</a> when VLAN_HWTAGGING is disabled, stopped tagging the packet twice.
979 a8c642e8 2014-09-08 brett <li>Prepend ether_vlan_header rather than regular ethernet header for more efficient vlan tagging.
980 cce97a6e 2019-05-27 bentley <li>Kerberos disabled and removed from base, possibly to be moved to <a href="https://man.openbsd.org/ports.7">ports(7)</a> later.
981 cce97a6e 2019-05-27 bentley <li>Support the CA key for <a href="https://man.openbsd.org/ssl.8">ssl(8)</a> inspection in the <a href="https://man.openbsd.org/relayd.8">relayd(8)</a> CA process.
982 a8c642e8 2014-09-08 brett <!-- 2014/04/21 -->
983 a8c642e8 2014-09-08 brett <li>Avoid a loop during autoinstall when the path in the responsefile does not exist.
984 cce97a6e 2019-05-27 bentley <li>Made <a href="https://man.openbsd.org/iscsictl.8">iscsictl(8)</a> print bytes read and written in human-readable form.
985 a8c642e8 2014-09-08 brett <li>Allow the installer to configure dhcp for an interface without an active network connection.
986 cce97a6e 2019-05-27 bentley <li>Bind <a href="https://man.openbsd.org/iscsid.8">iscsid(8)</a> to localAddr if it is specified.
987 cce97a6e 2019-05-27 bentley <li>Print the target and initiator name in <a href="https://man.openbsd.org/iscsictl.8">iscsictl(8)</a> show command.
988 cce97a6e 2019-05-27 bentley <li>Verify permissions are correct on the <a href="https://man.openbsd.org/ssh.1">ssh(1)</a> id_ed25519 file.
989 a8c642e8 2014-09-08 brett <li>Fixed msdosfs to cope with 64-bit time_t. Set unrepresentable dates to 1/1/1980.
990 cce97a6e 2019-05-27 bentley <li>Made <a href="https://man.openbsd.org/dhclient.8">dhclient(8)</a> delete discarded offered leases from the correct TAILQ. Avoids infinite loop.
991 cce97a6e 2019-05-27 bentley <li>Implemented <a href="https://man.openbsd.org/sftp.1">sftp(1)</a> upload resume support.
992 cce97a6e 2019-05-27 bentley <li>Reverted r1.101 of <a href="https://man.openbsd.org/traceroute.8">traceroute(8)</a>, which broke source port selection.
993 cce97a6e 2019-05-27 bentley <li>Added <a href="https://man.openbsd.org/mallocarray.3">mallocarray(3)</a> function (like <a href="https://man.openbsd.org/calloc.3">calloc(3)</a> but without the cleared-memory guarantee).
994 a8c642e8 2014-09-08 brett <li>Backed out parts of sys/nfs/nfs_serv.c r1.47, which computed wrong block sizes.
995 cce97a6e 2019-05-27 bentley <li>Added <a href="https://man.openbsd.org/pkg_add.1">pkg_add(1)</a> support for reading/writing long paths and linkpaths as extended headers.
996 cce97a6e 2019-05-27 bentley <li>Allow <a href="https://man.openbsd.org/iscsid.8">iscsid(8)</a> to send data immediately for write commands, for 20% performance boost.
997 cce97a6e 2019-05-27 bentley <li>Stopped <a href="https://man.openbsd.org/disklabel.8">disklabel(8)</a> leaking mountpoint info. Fixes mysterious crashes.
998 a8c642e8 2014-09-08 brett <!-- 2014/04/20 -->
999 cce97a6e 2019-05-27 bentley <li><strong>5.5 RELIABILITY FIX: Disable the <a href="https://man.openbsd.org/ssh.1">ssh(1)</a> curve25519-sha256@libssh.org KEX method when the other party's connection will fail.</strong>
1000 cce97a6e 2019-05-27 bentley <li>Prevent <a href="https://man.openbsd.org/lpd.8">lpd(8)</a> from looking into <a href="https://man.openbsd.org/hosts.equiv.5">hosts.equiv(5)</a>. Access control is now done only using hosts.lpd.
1001 cce97a6e 2019-05-27 bentley <li>Introduced basic stats for the <a href="https://man.openbsd.org/iscsid.8">iscsid(8)</a> <a href="https://man.openbsd.org/vscsi.4">vscsi(4)</a> layer; added <a href="https://man.openbsd.org/iscsictl.8">iscsictl(8)</a> controls.
1002 cce97a6e 2019-05-27 bentley <li>In <a href="https://man.openbsd.org/mandoc.1">mandoc(1)</a> debug messages, truncate strings of excessive lengths.
1003 cce97a6e 2019-05-27 bentley <li><a href="https://man.openbsd.org/dhclient.8">dhclient(8)</a> -L now preserves the fd being monitored after new leases, lease renewals and cable unplugs.
1004 cce97a6e 2019-05-27 bentley <li>Fixed unchecked <a href="https://man.openbsd.org/snprintf.3">snprintf(3)</a> in <a href="https://man.openbsd.org/mandoc.1">mandoc(1)</a> page header printing.
1005 cce97a6e 2019-05-27 bentley <li>In <a href="https://man.openbsd.org/mandoc.1">mandoc(1)</a>, made sure static buffers for <a href="https://man.openbsd.org/snprintf.3">snprintf(3)</a> are large enough.
1006 cce97a6e 2019-05-27 bentley <li>Removed more unused <a href="https://man.openbsd.org/ssl.8">ssl(8)</a> tools and docs.
1007 cce97a6e 2019-05-27 bentley <li>Moved <a href="https://man.openbsd.org/iscsid.8">iscsid(8)</a> session params initialisation to session start, so config parameters stick.
1008 cce97a6e 2019-05-27 bentley <li><a href="https://man.openbsd.org/iscsid.8">iscsid(8)</a> now does proper LoginOperational negotiation.
1009 cce97a6e 2019-05-27 bentley <li>Added <a href="https://man.openbsd.org/relayd.8">relayd(8)</a> check for <a href="https://man.openbsd.org/strlcpy.3">strlcpy(3)</a> overflow when expanding HTTP input value.
1010 cce97a6e 2019-05-27 bentley <li><a href="https://man.openbsd.org/snmpd.8">snmpd(8)</a> and <a href="https://man.openbsd.org/relayd.8">relayd(8)</a> will now fail if <a href="https://man.openbsd.org/strlcpy.3">strlcpy(3)</a> overflows the socket path.
1011 cce97a6e 2019-05-27 bentley <li>When installing OpenBSD, ensure that the hostname information is in the <a href="https://man.openbsd.org/dhclient.8">dhclient(8)</a> lease db.
1012 cce97a6e 2019-05-27 bentley <li>Reimplemented arrays in <a href="https://man.openbsd.org/relayd.8">relayd(8)</a> used to set up process-to-process imsg communication.
1013 cce97a6e 2019-05-27 bentley <li>Use <a href="https://man.openbsd.org/calloc.3">calloc(3)</a> instead of <a href="https://man.openbsd.org/malloc.3">malloc(3)</a> + <a href="https://man.openbsd.org/memset.3">memset(3)</a> across <a href="https://man.openbsd.org/ssl.8">ssl(8)</a>, to avoid integer overflows.
1014 cce97a6e 2019-05-27 bentley <li>Rearranged <a href="https://man.openbsd.org/qle.4">qle(4)</a> update processing loop to attach and detach targets last; handle fabric port login errors better.
1015 cce97a6e 2019-05-27 bentley <li>Fixed leak in the <a href="https://man.openbsd.org/snmpd.8">snmpd(8)</a> and <a href="https://man.openbsd.org/relayd.8">relayd(8)</a> agentx error paths.
1016 cce97a6e 2019-05-27 bentley <li>Added support for SSHFP DNS records for ED25519 key types to <a href="https://man.openbsd.org/ssh.1">ssh(1)</a>.
1017 a8c642e8 2014-09-08 brett <!-- 2014/04/19 -->
1018 cce97a6e 2019-05-27 bentley <li>In <a href="https://man.openbsd.org/ssl.8">ssl(8)</a> ts_rsp_verify.c, reset imprint to NULL to avoid double free.
1019 cce97a6e 2019-05-27 bentley <li>Added a canonical 6.6+ curve25519 fake version to <a href="https://man.openbsd.org/ssh.1">ssh(1)</a>, to be recommended with openssh-6.7.
1020 cce97a6e 2019-05-27 bentley <li>Use get/put_u32 to load values and unbreak <a href="https://man.openbsd.org/ssh.1">ssh(1)</a> on strict-alignment architectures.
1021 cce97a6e 2019-05-27 bentley <li>Removed checksum offloading from <a href="https://man.openbsd.org/sk.4">sk(4)</a>, faulty on this hardware.
1022 cce97a6e 2019-05-27 bentley <li>Added <a href="https://man.openbsd.org/strlcpy.3">strlcpy(3)</a> check. Stops <a href="https://man.openbsd.org/smtpd.8">smtpd(8)</a> fatal at startup if truncation occurred with filters enabled.
1023 cce97a6e 2019-05-27 bentley <li>Added missing <a href="https://man.openbsd.org/strlcpy.3">strlcpy(3)</a> check when parsing the "backup hostname" section in <a href="https://man.openbsd.org/smtpd.conf.5">smtpd.conf(5)</a>.
1024 cce97a6e 2019-05-27 bentley <li>Removed "disable pmtud" and "increased window size" options from <a href="https://man.openbsd.org/sysctl.conf.5">sysctl.conf(5)</a> to discourage their use.
1025 cce97a6e 2019-05-27 bentley <li>Removed <a href="https://man.openbsd.org/rsh.1">rsh(1)</a>. Deprecated in favor of <a href="https://man.openbsd.org/ssh.1">ssh(1)</a>.
1026 cce97a6e 2019-05-27 bentley <li>Fixed display of destination IP when host is an IP address in <a href="https://man.openbsd.org/traceroute.8">traceroute(8)</a>.
1027 cce97a6e 2019-05-27 bentley <li>Added checks to <a href="https://man.openbsd.org/strlcpy.3">strlcpy(3)</a> when <a href="https://man.openbsd.org/smtpd.8">smtpd(8)</a> is copying envelope "destination" buffer to the mda delivery buffer.
1028 cce97a6e 2019-05-27 bentley <li>If user+tag@ exceeds SMTPD_MAXPATHLEN <a href="https://man.openbsd.org/smtpd.8">smtpd(8)</a> now fails instead of creating a ".truncated" tag dir.
1029 cce97a6e 2019-05-27 bentley <li>Removed obsolete altq bandwidth shaping from <a href="https://man.openbsd.org/pf.4">pf(4)</a>.
1030 a8c642e8 2014-09-08 brett <!-- 2014/04/18 -->
1031 cce97a6e 2019-05-27 bentley <li>Allow <a href="https://man.openbsd.org/OpenBSD-current/man8/makewhatis.8">makewhatis(8)</a> to properly handle symlinks .
1032 cce97a6e 2019-05-27 bentley <li>Disable the <a href="https://man.openbsd.org/ssh.1">ssh(1)</a> curve25519-sha256@libssh.org KEX method when the other party's connection will fail.
1033 cce97a6e 2019-05-27 bentley <li>In <a href="https://man.openbsd.org/OpenBSD-current/man8/makewhatis.8">makewhatis(8)</a> update mode, when opening the database fails, just rebuild it from scratch.
1034 cce97a6e 2019-05-27 bentley <li>Removed <a href="https://man.openbsd.org/RAND_seed.3">RAND_seed(3)</a> calls in <a href="https://man.openbsd.org/iked.8">iked(8)</a>, <a href="https://man.openbsd.org/ikectl.8">ikectl(8)</a>, <a href="https://man.openbsd.org/relayd.8">relayd(8)</a> and <a href="https://man.openbsd.org/snmpd.8">snmpd(8)</a>.
1035 cce97a6e 2019-05-27 bentley <li>For <a href="https://man.openbsd.org/wscons.4">wscons(4)</a> WSDISPLAY_COMPAT_USL protocol, send the synchronizing signals to the process, not just the thread.
1036 cce97a6e 2019-05-27 bentley <li>Updated <a href="https://man.openbsd.org/unifdef.1">unifdef(1)</a> to version 2.10.
1037 cce97a6e 2019-05-27 bentley <li>Raised <a href="https://man.openbsd.org/nginx.8">nginx(8)</a> file limits, but lower number of connections (leaving files to spare for other programs).
1038 cce97a6e 2019-05-27 bentley <li>Removed <a href="https://man.openbsd.org/bdes.1">bdes(1)</a>, so as to not encourage its use.
1039 a8c642e8 2014-09-08 brett <li>Removed dead KAME code that dealt with IPv4-mapped IPv6 addresses; added check for IPv4-mapped IPv6 destination addresses for non-connected sockets.
1040 cce97a6e 2019-05-27 bentley <li>Use <a href="https://man.openbsd.org/arc4random_buf.3">arc4random_buf(3)</a> instead of harmful RAND_xxx in <a href="https://man.openbsd.org/kerberos.8">kerberos(8)</a>.
1041 cce97a6e 2019-05-27 bentley <li>Sync <a href="https://man.openbsd.org/traceroute6.8">traceroute6(8)</a> to <a href="https://man.openbsd.org/traceroute.8">traceroute(8)</a>: don't print source IP if "-s" is not given.
1042 cce97a6e 2019-05-27 bentley <li>In <a href="https://man.openbsd.org/relayd.8">relayd(8)</a>, fixed <a href="https://man.openbsd.org/ssl.8">ssl(8)</a> client-only mode when no RSA private key is needed.
1043 cce97a6e 2019-05-27 bentley <li>Neuter the -legacy_renegotiation option to the <a href="https://man.openbsd.org/openssl.1">openssl(1)</a> "openssl s_{client,server}"; added support for "-starttls lmtp" to openssl s_client.
1044 cce97a6e 2019-05-27 bentley <li>When parsing a new cert into memory occupied by a previously verified cert, <a href="https://man.openbsd.org/ssl.8">ssl(8)</a> will no longer bypass verification checks.
1045 cce97a6e 2019-05-27 bentley <li>Introduced privsep for <a href="https://man.openbsd.org/relayd.8">relayd(8)</a> private keys.
1046 cce97a6e 2019-05-27 bentley <li>Use <a href="https://man.openbsd.org/asprintf.3">asprintf(3)</a> for generating path. Eliminates many unsafe uses of <a href="https://man.openbsd.org/strlcpy.3">strlcpy(3)</a> and <a href="https://man.openbsd.org/strlcat.3">strlcat(3)</a> in <a href="https://man.openbsd.org/ssl.8">ssl(8)</a>.
1047 a8c642e8 2014-09-08 brett <li>If nfs rpc requests on a stream socket are already being processed, don't panic, just return.
1048 cce97a6e 2019-05-27 bentley <li>Cleanup of <a href="https://man.openbsd.org/relayd.8">relayd(8)</a> code tracking of socketpair between different privsep processes.
1049 a8c642e8 2014-09-08 brett <li>Have each thread keeps its own reference to the process's ucreds. Avoids possible use-after-free.
1050 cce97a6e 2019-05-27 bentley <li>Allow <a href="https://man.openbsd.org/printf.1">printf(1)</a> to handle passing zero as a fieldwidth or precision variable.
1051 cce97a6e 2019-05-27 bentley <li>Switched to the new <a href="https://man.openbsd.org/makewhatis.8">makewhatis(8)</a>/<a href="https://man.openbsd.org/apropos.1">apropos(1)</a>/<a href="https://man.openbsd.org/whatis.1">whatis(1)</a> (described in <a href="https://man.openbsd.org/apropos.1">apropos(1)</a>).
1052 cce97a6e 2019-05-27 bentley <li>Added support for <a href="https://man.openbsd.org/smtpd.8">smtpd(8)</a> mailaddr lookup in the table_db.
1053 a8c642e8 2014-09-08 brett <!-- 2014/04/17 -->
1054 cce97a6e 2019-05-27 bentley <li>Reworked <a href="https://man.openbsd.org/qle.4">qle(4)</a> command polling loop to handle multiple responses in one interrupt, like <a href="https://man.openbsd.org/qla.4">qla(4)</a>.
1055 cce97a6e 2019-05-27 bentley <li>Fully kill <a href="https://man.openbsd.org/ssl.8">ssl(8)</a> FIPS API.
1056 cce97a6e 2019-05-27 bentley <li>Added some UTF-8 utility functions to <a href="https://man.openbsd.org/tmux.1">tmux(1)</a>, to stop splitting UTF-8 characters improperly.
1057 a8c642e8 2014-09-08 brett <li>Ensure parent thread is blocked until any others are detached before letting it exit. Avoids panic.
1058 cce97a6e 2019-05-27 bentley <li>Only scroll by one line at a time in <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> choose mode (as lists are generally short).
1059 cce97a6e 2019-05-27 bentley <li>Fixed <a href="https://man.openbsd.org/dhclient.8">dhclient(8)</a> DHCPDISCOVERY and DHCPDECLINE (as INADDR_ANY != INADDR_BROADCAST).
1060 cce97a6e 2019-05-27 bentley <li>Changed <a href="https://man.openbsd.org/ssl.8">ssl(8)</a> library to use intrinsic memory allocation functions instead of OPENSSL_foo wrappers.
1061 cce97a6e 2019-05-27 bentley <li>Set <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> PATH explicitly, either from the client or session environment.
1062 cce97a6e 2019-05-27 bentley <li>Don't limit the <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> DCS buffer to 256 bytes, expand it as needed.
1063 cce97a6e 2019-05-27 bentley <li>No longer allow <a href="https://man.openbsd.org/ssl.8">ssl(8)</a> to feed RSA private key information to the random subsystem as entropy.
1064 cce97a6e 2019-05-27 bentley <li><a href="https://man.openbsd.org/openssl.1">openssl(1)</a> PR#3309: when looking for an extension, properly search all extensions.
1065 cce97a6e 2019-05-27 bentley <li>Removed the monitor-content option from <a href="https://man.openbsd.org/tmux.1">tmux(1)</a>.
1066 cce97a6e 2019-05-27 bentley <li>Fixed <a href="https://man.openbsd.org/ssl.8">ssl(8)</a> to call the correct decrypt function in aes_cbc_cipher().
1067 cce97a6e 2019-05-27 bentley <li>Execute the active path checks when <a href="https://man.openbsd.org/mpath.4">mpath(4)</a> asks for it (rather than on attach).
1068 cce97a6e 2019-05-27 bentley <!-- 2014/04/16 -->
1069 cce97a6e 2019-05-27 bentley <li>Skip leading zero bytes in <a href="https://man.openbsd.org/ssh.1">ssh(1)</a> buffer_put_bignum2_from_string() function.
1070 a8c642e8 2014-09-08 brett <li>Add ufs2 support in libsa/ufs2.c. One step closer being able to boot from ffs2 filesystems.
1071 cce97a6e 2019-05-27 bentley <li>Cleaned up dangerous <a href="https://man.openbsd.org/strncpy.3">strncpy(3)</a> use in <a href="https://man.openbsd.org/ssl.8">ssl(8)</a>.
1072 cce97a6e 2019-05-27 bentley <li>Added missing parens so that <a href="https://man.openbsd.org/rshd.8">rshd(8)</a> errorhost gets properly initialised.
1073 cce97a6e 2019-05-27 bentley <li>Gave mlinks and keys tables a <a href="https://man.openbsd.org/sqlite3.1">sqlite3(1)</a> pageid index. Speeds basic <a href="https://man.openbsd.org/apropos.1">apropos(1)</a> searches by 30%.
1074 cce97a6e 2019-05-27 bentley <li>Make <a href="https://man.openbsd.org/dhclient.8">dhclient(8)</a> -q even quieter.
1075 cce97a6e 2019-05-27 bentley <li>Removed programs from <a href="https://man.openbsd.org/ssl.8">ssl(8)</a> code which don't work with current <a href="https://man.openbsd.org/openssl.1">openssl(1)</a> releases.
1076 cce97a6e 2019-05-27 bentley <li>Fixed <a href="https://man.openbsd.org/ssl.8">ssl(8)</a> bugs listed at http://www.viva64.com/en/b/0250/.
1077 cce97a6e 2019-05-27 bentley <li><a href="https://man.openbsd.org/ssl.8">ssl(8)</a> now ignores setting which allowed the connection to negotiate insecurely.
1078 cce97a6e 2019-05-27 bentley <li>Zero-pad <a href="https://man.openbsd.org/ssl.8">ssl(8)</a> "usec" format to handle values less than 100,000 correctly.
1079 cce97a6e 2019-05-27 bentley <li>Killed bogus "send an SSLv3/TLS hello in SSLv2 format" code from the <a href="https://man.openbsd.org/ssl.8">ssl(8)</a> client.
1080 cce97a6e 2019-05-27 bentley <li>Stubbed some functions in <a href="https://man.openbsd.org/ssl.8">ssl(8)</a> mem_dbg.c, to avoid all possibility of using them.
1081 cce97a6e 2019-05-27 bentley <li>Always return 1 in the <a href="https://man.openbsd.org/ssl.8">ssl(8)</a> <a href="https://man.openbsd.org/arc4random.9">arc4random(9)</a> backend. Unbreaks <a href="https://man.openbsd.org/lynx.1">lynx(1)</a> and git.
1082 a8c642e8 2014-09-08 brett <li>Added generic driver for "NEC PC-9801 extension board slot" on luna88k.
1083 a8c642e8 2014-09-08 brett <li>Made directory ordering in our libtool stable.
1084 cce97a6e 2019-05-27 bentley <li>Closed memory leaks in <a href="https://man.openbsd.org/snmpctl.8">snmpctl(8)</a> client code.
1085 a8c642e8 2014-09-08 brett <!-- 2014/04/15 -->
1086 cce97a6e 2019-05-27 bentley <li>Removed md2, seed and jpake cyphers from <a href="https://man.openbsd.org/ssl.8">ssl(8)</a>.
1087 cce97a6e 2019-05-27 bentley <li>Removed approx 30 unused makefiles and more vestiges of ssl2 support from <a href="https://man.openbsd.org/ssl.8">ssl(8)</a>.
1088 cce97a6e 2019-05-27 bentley <li>In <a href="https://man.openbsd.org/ssh.8">ssh(8)</a> EC_POINT_invert(), check the correct function pointer before attempting to invoke it (<a href="https://man.openbsd.org/openssl.1">openssl(1)</a> RT #2569).
1089 cce97a6e 2019-05-27 bentley <li>RotIBM stream cipher (ebcdic), FIPS mode support and GOST engine removed from <a href="https://man.openbsd.org/ssl.8">ssl(8)</a>.
1090 cce97a6e 2019-05-27 bentley <li>Replaced <a href="https://man.openbsd.org/ssl.8">ssl(8)</a> PRNG with arc4random_buf(), keeping existing RAND interfaces unchanged.
1091 cce97a6e 2019-05-27 bentley <li>Added -s (two-byte signed decimal display) to <a href="https://man.openbsd.org/od.1">od(1)</a>, as mandated by POSIX.
1092 cce97a6e 2019-05-27 bentley <li><a href="https://man.openbsd.org/ssl.8">ssl(8)</a> fixes: corrected cases where code occurred directly after goto/break/return; removed pentium specific benchmark code; removed more vms and windows specific code.
1093 a8c642e8 2014-09-08 brett <li>Unbroke xcb-util-cursor.
1094 cce97a6e 2019-05-27 bentley <li>Made <a href="https://man.openbsd.org/smtpd.8">smtpd(8)</a> reply with correct imsg when using non-system authentication.
1095 a8c642e8 2014-09-08 brett <!-- 2014/04/14 -->
1096 cce97a6e 2019-05-27 bentley <li>Stopped <a href="https://man.openbsd.org/mandoc.1">mandoc(1)</a> crashing when processing macros in .Sh header lines, or having .Sm off or .Bk -words open.
1097 cce97a6e 2019-05-27 bentley <li>Stopped leaking socketpair file descriptors if <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> <a href="https://man.openbsd.org/fork.2">fork(2)</a> fails.
1098 a8c642e8 2014-09-08 brett <li>Fixed potential race in UFS where an allocated inode could fail to get added.
1099 cce97a6e 2019-05-27 bentley <li>Removed o_dir.c from <a href="https://man.openbsd.org/openssl.1">openssl(1)</a> now that OPENSSL_DIR_XXX has been removed from the build.
1100 cce97a6e 2019-05-27 bentley <li>Removed nonstandard and unsafe DES support from <a href="https://man.openbsd.org/ed.1">ed(1)</a>.
1101 cce97a6e 2019-05-27 bentley <li>Switched <a href="https://man.openbsd.org/pkg_mklocatedb.1">pkg_mklocatedb(1)</a> to using common SetList code, renaming -x into -X.
1102 a8c642e8 2014-09-08 brett <li>Updated xcb-utils to 0.3.9.
1103 cce97a6e 2019-05-27 bentley <li>Allow <a href="https://man.openbsd.org/slowcgi.8">slowcgi(8)</a> QUERY_STRING to be longer than 127 bytes.
1104 a8c642e8 2014-09-08 brett <li>Update libxcb to version 1.10.
1105 cce97a6e 2019-05-27 bentley <li>Made OPENSSL_NO_HEARTBLEED the default and only option in <a href="https://man.openbsd.org/ssl.8">ssl(8)</a> code.
1106 cce97a6e 2019-05-27 bentley <li>Adapted <a href="https://man.openbsd.org/snmpctl.8">snmpctl(8)</a>, <a href="https://man.openbsd.org/relayd.8">relayd(8)</a> and <a href="https://man.openbsd.org/snmpd.8">snmpd(8)</a> to use AgentX protocol to send traps.
1107 a8c642e8 2014-09-08 brett <!-- 2014/04/13 -->
1108 cce97a6e 2019-05-27 bentley <li>Confirm passwords when <a href="https://man.openbsd.org/signify.1">signify(1)</a> is generating keys.
1109 cce97a6e 2019-05-27 bentley <li>Fixed SQL_STEP failures for <a href="https://man.openbsd.org/man.7">man(7)</a> pages lacking descriptions.
1110 cce97a6e 2019-05-27 bentley <li>Better <a href="https://man.openbsd.org/OpenBSD-current/man8/makewhatis.8">makewhatis(8)</a> error reporting in case of SQL errors: mention dir and file.
1111 cce97a6e 2019-05-27 bentley <li>Major <a href="https://man.openbsd.org/ssl.8">ssl(8)</a> cleanup to remove: MacOS, Netware, OS/2, VMS and Windows build machinery and shared libraries; <a href="https://man.openbsd.org/openssl.1">openssl(1)</a> engines and code that were not properly licensed; vms support; various horrible socket syscall wrappers; insecure use of time as a random seed in the TLS engine.
1112 cce97a6e 2019-05-27 bentley <li>In <a href="https://man.openbsd.org/qla.4">qla(4)</a> debug output, print loop ids as decimals and port ids as 24bit hex.
1113 a8c642e8 2014-09-08 brett <!-- 2014/04/12 -->
1114 a8c642e8 2014-09-08 brett <li>Update to xtrans 1.3.4.
1115 a8c642e8 2014-09-08 brett <li>Updated to xextproto 7.3.0.
1116 a8c642e8 2014-09-08 brett <li>Added presentproto 1.0.
1117 cce97a6e 2019-05-27 bentley <li>Bring back r1.16 of protector.c in <a href="https://man.openbsd.org/gcc.1">gcc(1)</a> version 2.95. Fixes code generation of usr.sbin/dhcpd/memory.c!new_address_range() on vax.
1118 cce97a6e 2019-05-27 bentley <li><strong>5.3, 5.4, 5.5 and -current SECURITY FIX: Fixed <a href="https://man.openbsd.org/openssl.1">openssl(1)</a> read buffer to stop an attacker injecting data from one connection into another.</strong><br>A source code patch is available for <a href="errata53.html#015_openssl">5.3</a>, <a href="errata54.html#008_openssl">5.4</a> and <a href="errata55.html#004_openssl">5.5</a>.
1119 cce97a6e 2019-05-27 bentley <li>Made sure <a href="https://man.openbsd.org/cu.1">cu(1)</a> -l overrides HOST.
1120 a8c642e8 2014-09-08 brett <!-- 2014/04/11 -->
1121 cce97a6e 2019-05-27 bentley <li>Avoid <a href="https://man.openbsd.org/sshd.8">sshd(8)</a> crash at exit, by checking that pmonitor!=NULL before dereferencing (bz#2225).
1122 cce97a6e 2019-05-27 bentley <li>Fixed <a href="https://man.openbsd.org/more.1">more(1)</a> to use basic regular expressions (unlike <a href="https://man.openbsd.org/less.1">less(1)</a>).
1123 cce97a6e 2019-05-27 bentley <li>Clamp offsets to the available memory space. Fixes <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> crash.
1124 cce97a6e 2019-05-27 bentley <li>Further <a href="https://man.openbsd.org/apropos.1">apropos(1)</a> speed optimisation, with <a href="https://man.openbsd.org/mmap.3">mmap(3)</a> MAP_ANON SQLITE_CONFIG_PAGECACHE.
1125 a8c642e8 2014-09-08 brett <li>Updated to libdrm 2.4.53
1126 a8c642e8 2014-09-08 brett <!-- 2014/04/10 -->
1127 cce97a6e 2019-05-27 bentley <li>Disabled Segglemann's RFC520 heartbeat from <a href="https://man.openbsd.org/ssl.8">ssl(8)</a>.
1128 cce97a6e 2019-05-27 bentley <li>Don't release the <a href="https://man.openbsd.org/ssl.8">ssl(8)</a> read buffer if we're not done reading from it; disabled buf freelists.
1129 cce97a6e 2019-05-27 bentley <li>Added validation routines to <a href="https://man.openbsd.org/iked.8">iked(8)</a>: overall header structure is checked for sanity before copying the header; avoid overflow by passing down the number of remaining bytes.
1130 cce97a6e 2019-05-27 bentley <li>Notify userland when an <a href="https://man.openbsd.org/arp.4">arp(4)</a> entry is removed.
1131 cce97a6e 2019-05-27 bentley <li>Fixed fd leaks in <a href="https://man.openbsd.org/mg.1">mg(1)</a> error paths.
1132 cce97a6e 2019-05-27 bentley <li>Retired rtinit() and switched to using <a href="https://man.openbsd.org/rt_ifa_add.9">rt_ifa_add(9)</a> and <a href="https://man.openbsd.org/rt_ifa_del.9">rt_ifa_del(9)</a> to manage connected routes to prefixes/hosts.
1133 cce97a6e 2019-05-27 bentley <li>Revived fix for <a href="https://man.openbsd.org/perl.1">perl(1)</a> RT bug 116441 (null dereference affecting mod_perl).
1134 a8c642e8 2014-09-08 brett <!-- 2014/04/09 -->
1135 cce97a6e 2019-05-27 bentley <li>Split manual names out of the common "keys" table into their own "names" table. Reduces standard <a href="https://man.openbsd.org/apropos.1">apropos(1)</a> search times 70% for the full /usr/share/man database.
1136 cce97a6e 2019-05-27 bentley <li>Moved descriptions from <a href="https://man.openbsd.org/OpenBSD-current/man5/mandoc.db.5mandoc%2edb">mandoc.db(5)</a> keys table to mpages table: reduces typical <a href="https://man.openbsd.org/apropos.1">apropos(1)</a> search times by about 40%; reduces database size.
1137 cce97a6e 2019-05-27 bentley <li>In <a href="https://man.openbsd.org/less.1">less(1)</a> "more" mode, made command specified by -p option apply to every edited file, as per POSIX.
1138 cce97a6e 2019-05-27 bentley <li>Reverted r1.93 of <a href="https://man.openbsd.org/mg.1">mg(1)</a> file.c, which broke permission checks.
1139 cce97a6e 2019-05-27 bentley <li><strong>5.5 SECURITY FIX: Make <a href="https://man.openbsd.org/ftp.1">ftp(1)</a> client check the server hostname, to avoid false validation when connecting to an https website.</strong><br>A source code patch is available for <a href="errata55.html#003_ftp">5.5</a>.
1140 a8c642e8 2014-09-08 brett <li>Updated to xf86-video-ati 7.3.0.
1141 cce97a6e 2019-05-27 bentley <li>Made <a href="https://man.openbsd.org/smtpd.8">smtpd(8)</a> display correct imsg when profiling is on and if the type was changed.
1142 cce97a6e 2019-05-27 bentley <li>Zapped the <a href="https://man.openbsd.org/smtpd.8">smtpd(8)</a> mfa process. Content filtering will be done at session level.
1143 cce97a6e 2019-05-27 bentley <li>Removed CA certificates from <a href="https://man.openbsd.org/ssl.8">ssl(8)</a> which are not listed in Mozilla's certdata.txt.
1144 cce97a6e 2019-05-27 bentley <li>Use root CAs in <a href="https://man.openbsd.org/ssl.8">ssl(8)</a> used by TeleSec (Deutsche Telekom AG): Baltimore CyberTrust Root, Deutsche Telekom Root CA, T-TeleSec GlobalRoot Class 2 and T-TeleSec GlobalRoot Class 3.
1145 cce97a6e 2019-05-27 bentley <li>If TLS validation is on, make <a href="https://man.openbsd.org/ftp.1">ftp(1)</a> fetch TLS certificate and check the server hostname against the subjectAltName and/or CommonName.
1146 a8c642e8 2014-09-08 brett <!-- 2014/04/08 -->
1147 a8c642e8 2014-09-08 brett <li>Build libgcc without SSP. Unbreaks landisk bootblocks.
1148 a8c642e8 2014-09-08 brett <li>Updated to xorg-macros 1.19.0.
1149 a8c642e8 2014-09-08 brett <li>Ensure that we free buffers written out by the page daemon rather than caching them.
1150 cce97a6e 2019-05-27 bentley <li>Fixed error in <a href="https://man.openbsd.org/bcrypt_pbkdf.3">bcrypt_pbkdf(3)</a> stride calculations.
1151 cce97a6e 2019-05-27 bentley <li>Added error detection mechanism to detect when <a href="https://man.openbsd.org/sudo.8">sudo(8)</a> configuration is incorrect for building ports.
1152 cce97a6e 2019-05-27 bentley <li>Zero-fill <a href="https://man.openbsd.org/smtpd.8">smtpd(8)</a> mta static buffer before use in DSN code.
1153 a8c642e8 2014-09-08 brett <li>Added term_flushln() flag to control indentation of continuation lines in TERMP_NOBREAK mode. Reduces groff-mandoc differences in base by more than 15%.
1154 a8c642e8 2014-09-08 brett <!-- 2014/04/07 -->
1155 cce97a6e 2019-05-27 bentley <li>Added <a href="https://man.openbsd.org/rgephy.4">rgephy(4)</a> for <a href="https://man.openbsd.org/axe.4">axe(4)</a> and <a href="https://man.openbsd.org/axen.4">axen(4)</a> on hppa and zaurus.
1156 cce97a6e 2019-05-27 bentley <li>Fully implemented <a href="https://man.openbsd.org/roff.7">roff(7)</a> \B (validate numerical expression) and partially implemented \w (measure text width) escape sequence.
1157 cce97a6e 2019-05-27 bentley <li><strong>5.3, 5.4, 5.5 and -current SECURITY FIX: Fixed <a href="https://man.openbsd.org/openssl.1">openssl(1)</a> CVE-2014-0160 "heartbleed" vulnerability.</strong><br>A source code patch is available for <a href="errata53.html#014_openssl">5.3</a>, <a href="errata54.html#007_openssl">5.4</a> and <a href="errata55.html#002_openssl">5.5</a>.
1158 cce97a6e 2019-05-27 bentley <li>Added MSI support for <a href="https://man.openbsd.org/xhci.4">xhci(4)</a>.
1159 cce97a6e 2019-05-27 bentley <li>Enable <a href="https://man.openbsd.org/upd.4">upd(4)</a> on archs where <a href="https://man.openbsd.org/uhidev.4">uhidev(4)</a> is present.
1160 cce97a6e 2019-05-27 bentley <li>Do not attach when no <a href="https://man.openbsd.org/upd.4">upd(4)</a> sensors can be allocated; made device querying smarter.
1161 cce97a6e 2019-05-27 bentley <li>Added <a href="https://man.openbsd.org/roff.7">roff(7)</a> support for indirect references to user-defined strings.
1162 cce97a6e 2019-05-27 bentley <li>Made <a href="https://man.openbsd.org/iscsid.8">iscsid(8)</a> listen to the control socket, so the connect() call from <a href="https://man.openbsd.org/iscsictl.8">iscsictl(8)</a> will not fail.
1163 a8c642e8 2014-09-08 brett <li>In udp_output(), use the correct source address in case of an unbound socket.
1164 cce97a6e 2019-05-27 bentley <li>Accept arbitrary argument delimiters for various <a href="https://man.openbsd.org/roff.7">roff(7)</a> escape sequences.
1165 a8c642e8 2014-09-08 brett <li>Increased MSGBUFSIZE on macppc.
1166 cce97a6e 2019-05-27 bentley <li>Exit on error or HUP when poll()ing the keyboard. Otherwise, <a href="https://man.openbsd.org/top.1">top(1)</a> may spin when its tty goes away.
1167 cce97a6e 2019-05-27 bentley <li>Added implementation of <a href="https://man.openbsd.org/roff.7">roff(7)</a> numerical expressions.
1168 a8c642e8 2014-09-08 brett <li>Retired kernel support for SO_DONTROUTE, this time without breaking localhost connections.
1169 a8c642e8 2014-09-08 brett <li>Updated termtypes.master to upstream terminfo-20140329.src.
1170 cce97a6e 2019-05-27 bentley <li>When <a href="https://man.openbsd.org/qla.4">qla(4)</a> is iterating through fabric ports, start at our own port ID, to simplify tracking.
1171 a8c642e8 2014-09-08 brett <!-- 2014/04/06 -->
1172 cce97a6e 2019-05-27 bentley <li>Added <a href="https://man.openbsd.org/axen.4">axen(4)</a> wherever <a href="https://man.openbsd.org/axe.4">axe(4)</a> is found.
1173 cce97a6e 2019-05-27 bentley <li><a href="https://man.openbsd.org/qla.4">qla(4)</a> ISP2322 chips need a different firmware image to other 2300s, don't load firmware for them.
1174 a8c642e8 2014-09-08 brett <li>Removed (expensive) temporary connect in udp_output(). Also fixes possible memory leak.
1175 a8c642e8 2014-09-08 brett <li>Added missing addressing modes for the fucomip instruction on i386. Unbreaks webkit port.
1176 a8c642e8 2014-09-08 brett <!-- 2014/04/05 -->
1177 cce97a6e 2019-05-27 bentley <li>Fixed <a href="https://man.openbsd.org/smtpd.8">smtpd(8)</a> when writing multi-line "To" and "Cc" headers.
1178 cce97a6e 2019-05-27 bentley <li>Implemented the <a href="https://man.openbsd.org/roff.7">roff(7)</a> .rr (remove register) request.
1179 cce97a6e 2019-05-27 bentley <li>Fixed <a href="https://man.openbsd.org/uvm.9">uvm(9)</a> logic error (and prevented theoretical infinite loop) in uvm_pmr_rootupdate().
1180 cce97a6e 2019-05-27 bentley <li><a href="https://man.openbsd.org/mandoc.1">mandoc(1)</a> bugfix: make sure all variables are properly initialised when rendering .ll (line length) requests.
1181 a8c642e8 2014-09-08 brett <!-- 2014/04/04 -->
1182 cce97a6e 2019-05-27 bentley <li>Added the -t <a href="https://man.openbsd.org/ktrace.1">ktrace(1)</a> option to <a href="https://man.openbsd.org/ltrace.1">ltrace(1)</a>. Allows triggering library function call trace and other kernel events trace simultaneously.
1183 cce97a6e 2019-05-27 bentley <li>Fixed <a href="https://man.openbsd.org/smtpd.8">smtpd(8)</a> header parsing issue in enqueuer, which was stripping the "From:" header in some cases.
1184 cce97a6e 2019-05-27 bentley <li>Made <a href="https://man.openbsd.org/OpenBSD-current/man8/makewhatis.8">makewhatis(8)</a> warn about missing mlinks when the -p (picky) option is given, and not overridden by: -Q, -d, -u, or -t.
1185 cce97a6e 2019-05-27 bentley <li>Merged the mda, mta and smtp <a href="https://man.openbsd.org/smtpd.8">smtpd(8)</a> processes into a single unprivileged process.
1186 cce97a6e 2019-05-27 bentley <li>Start the <a href="https://man.openbsd.org/smtpd.8">smtpd(8)</a> purge task after events are set, so we don't miss a SIGCHLD.
1187 cce97a6e 2019-05-27 bentley <li>Reworked <a href="https://man.openbsd.org/qla.4">qla(4)</a> command polling loop so it can handle multiple responses in a single interrupt. Allows talking to Hitachi disk arrays.
1188 a8c642e8 2014-09-08 brett <!-- 2014/04/03 -->
1189 cce97a6e 2019-05-27 bentley <li>Fixed pppx kernel panic when using <a href="https://man.openbsd.org/npppd.8">npppd(8)</a> with multiple pppx devices.
1190 cce97a6e 2019-05-27 bentley <li>When the -n or -t flag is given to <a href="https://man.openbsd.org/makewhatis.8">makewhatis(8)</a>, write names and descriptions to stdout (format similar to <a href="https://man.openbsd.org/apropos.1">apropos(1)</a>).
1191 cce97a6e 2019-05-27 bentley <li>Instead of silently doing nothing, made <a href="https://man.openbsd.org/OpenBSD-current/man8/makewhatis.8">makewhatis(8)</a> warn and return non-zero when the manpath is empty.
1192 cce97a6e 2019-05-27 bentley <li>Added a uvm_yield function to <a href="https://man.openbsd.org/uvm.9">uvm(9)</a> and use it to prevent the reaper from hogging the cpu.
1193 a8c642e8 2014-09-08 brett <li>Reworked wait/kernel lock heuristics to give interrupts on other CPUs to a chance to run, for reduced latency.
1194 cce97a6e 2019-05-27 bentley <li>When <a href="https://man.openbsd.org/mg.1">mg(1)</a> discovers a directory is non-existent, offer a "y" option to make the directory.
1195 cce97a6e 2019-05-27 bentley <li>Renamed the <a href="https://man.openbsd.org/makewhatis.8">makewhatis(8)</a> -W option to -p. Matches flag introduced in OpenBSD 2.7.
1196 cce97a6e 2019-05-27 bentley <li>Proper validation and computation of bsize now occurs in the <a href="https://man.openbsd.org/disklabel.8">disklabel(8)</a> expert mode.
1197 cce97a6e 2019-05-27 bentley <li>Renamed -v option of <a href="https://man.openbsd.org/mandocdb.8">mandocdb(8)</a> to -D, to avoid a clash with the -v option of <a href="https://man.openbsd.org/makewhatis.8">makewhatis(8)</a>.
1198 cce97a6e 2019-05-27 bentley <li>Reduced the <a href="https://man.openbsd.org/tmux.4">tmux(4)</a> mouse wheel scroll size to 3; allow shift to reduce it to 1; allow meta and ctrl to multiply by 3; support wheel in "choose" mode.
1199 cce97a6e 2019-05-27 bentley <li>Fixed <a href="https://man.openbsd.org/npppctl.8">npppctl(8)</a> calculation of response message size.
1200 a8c642e8 2014-09-08 brett <!-- 2014/04/02 -->
1201 cce97a6e 2019-05-27 bentley <li>Added the "#" character as a comment character in the <a href="https://man.openbsd.org/mg.1">mg(1)</a> startup file.
1202 cce97a6e 2019-05-27 bentley <li>Support UTF-8 with <a href="https://man.openbsd.org/tmux.4">tmux(4)</a> choose-buffer; made buffer_sample bigger to let it trim at window right edge.
1203 cce97a6e 2019-05-27 bentley <li>Enabled <a href="https://man.openbsd.org/hds.4">hds(4)</a> on hppa.
1204 cce97a6e 2019-05-27 bentley <li>Enabled <a href="https://man.openbsd.org/mpath.4">mpath(4)</a> on macppc.
1205 a8c642e8 2014-09-08 brett <!-- 2014/04/01 -->
1206 a8c642e8 2014-09-08 brett <!-- 2014/03/31 -->
1207 a8c642e8 2014-09-08 brett <li>When using VerifyHostKeyDNS with a DNSSEC resolver, down-convert any certificate keys to plain keys and attempt SSHFP resolution. Prevents server from forcing a new-hostkey dialog.
1208 cce97a6e 2019-05-27 bentley <li>Include fingerprint of key not found by <a href="https://man.openbsd.org/ssh-keysign.8">ssh-keysign(8)</a>; use arc4random_buf() instead of loop+arc4random().
1209 cce97a6e 2019-05-27 bentley <li>In four byte UTF-8 sequences, make sure <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> only uses three bits of the first byte.
1210 cce97a6e 2019-05-27 bentley <li>Stopped <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> crashing when a zero-length argument is passed to setb.
1211 cce97a6e 2019-05-27 bentley <li>Made <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> message-limit a server option.
1212 cce97a6e 2019-05-27 bentley <li>Stopped <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> segfaulting when the parent of the layout cell is NULL.
1213 cce97a6e 2019-05-27 bentley <li>Added setb -a to <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> append; added a copy mode append command.
1214 cce97a6e 2019-05-27 bentley <li>Made session_attached a count; added session_many_attached flag to <a href="https://man.openbsd.org/tmux.1">tmux(1)</a>.
1215 cce97a6e 2019-05-27 bentley <li>Added start-of-list, end-of-list, top-line and bottom-line in <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> choice mode.
1216 cce97a6e 2019-05-27 bentley <li>Stopped <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> writing into the buffer if there are no arguments.
1217 cce97a6e 2019-05-27 bentley <li>Changed secondary device attributes response to "\033[>84;0;0c" which is unique for <a href="https://man.openbsd.org/tmux.1">tmux(1)</a>.
1218 cce97a6e 2019-05-27 bentley <li>Made <a href="https://man.openbsd.org/bus_dmamap_load.9">bus_dmamap_load(9)</a> and <a href="https://man.openbsd.org/bus_dmamap_unload.9">bus_dmamap_unload(9)</a> mpsafe on alpha.
1219 cce97a6e 2019-05-27 bentley <li>Restored behaviour of <a href="https://man.openbsd.org/ls.1">ls(1)</a> -f implying -a (lost in commit made in 1989). Conforms to IEEE 1003.1-2008 ("POSIX.1").
1220 a8c642e8 2014-09-08 brett <li>On loongson, mips and octeon, stopped whole L1 cache being flushed unnecessarily.
1221 cce97a6e 2019-05-27 bentley <li>Again allow more than one level of directories to be created via <a href="https://man.openbsd.org/mg.1">mg(1)</a> make-directory.
1222 cce97a6e 2019-05-27 bentley <li>Force detach of all <a href="https://man.openbsd.org/usb.4">usb(4)</a> devices by disconnecting root hubs before suspending machine. Avoids races.
1223 cce97a6e 2019-05-27 bentley <li><a href="https://man.openbsd.org/libtool.1">libtool(1)</a> now properly add -rpath to the linker when linking libraries. Matches GNU libtool.
1224 a8c642e8 2014-09-08 brett <li>Increased Xtranssock.c send buffer for UNIX sockets. Makes Firefox usable again when viewing large images.
1225 cce97a6e 2019-05-27 bentley <li>If HOST or the host argument starts with a "/", <a href="https://man.openbsd.org/cu.1">cu(1)</a> will now treat it as a device name.
1226 cce97a6e 2019-05-27 bentley <li>Fixed REMOTE on <a href="https://man.openbsd.org/cu.1">cu(1)</a> to work like <a href="https://man.openbsd.org/tip.1">tip(1)</a>; added support for HOST.
1227 a8c642e8 2014-09-08 brett <!-- 2014/03/30 -->
1228 cce97a6e 2019-05-27 bentley <li>Added SNI support to <a href="https://man.openbsd.org/ftp.1">ftp(1)</a>.
1229 cce97a6e 2019-05-27 bentley <li>Allow <a href="https://man.openbsd.org/roff.7">roff(7)</a> to support relative arguments to .ll (increase or decrease line length).
1230 a8c642e8 2014-09-08 brett <li>Repaired boot.net operation on (at least) sparc SS5 PROM v2.21
1231 cce97a6e 2019-05-27 bentley <li>Implement the <a href="https://man.openbsd.org/roff.7">roff(7)</a> .ll (line length) request.
1232 cce97a6e 2019-05-27 bentley <li><strong>5.5 RELIABILITY FIX: Memory corruption occurring during <a href="https://man.openbsd.org/icmp.4">icmp(4)</a> reflection handling (ICMP reflection is disabled by default).</strong><br>A source code patch is available for <a href="errata55.html#001_icmp">5.5</a>.
1233 a8c642e8 2014-09-08 brett <!-- 2014/03/29 -->
1234 a8c642e8 2014-09-08 brett <li>Recognise so-called "EFI-like" interface provided by newer PMON firmware on Loongson 2Gq and Loongson 3A.
1235 cce97a6e 2019-05-27 bentley <li>Bugfix and security update to <a href="https://man.openbsd.org/nginx.8">nginx(8)</a> version 1.4.7 (note: CVE-2014-0133 does not affect OpenBSD).
1236 cce97a6e 2019-05-27 bentley <li>Speed-up overlapping copy operations in <a href="https://man.openbsd.org/sgi/gio.4">gio(4/sgi)</a> by attempting to perform them in larger chunks whenever possible.
1237 a8c642e8 2014-09-08 brett <li>Removed pflowproto 9 (unfixable post-2038). Better option is pflowproto 10.
1238 a8c642e8 2014-09-08 brett <!-- 2014/03/28 -->
1239 cce97a6e 2019-05-27 bentley <li>Allow leading and trailing vertical lines in <a href="https://man.openbsd.org/OpenBSD-current/man7/tbl.7">tbl(7)</a>, format them in the same way as groff; do not require whitespace before vertical lines in layout specifications.
1240 cce97a6e 2019-05-27 bentley <li>Properly initialise <a href="https://man.openbsd.org/malloc.3">malloc(3)</a>ed memory in <a href="https://man.openbsd.org/mandoc.1">mandoc(1)</a>, to fix crashes when using <a href="https://man.openbsd.org/apropos.1">apropos(1)</a>.
1241 cce97a6e 2019-05-27 bentley <li>Made sure the command TRB is reset if a command is submitted when the <a href="https://man.openbsd.org/usb.4">usb(4)</a> hardware is already gone.
1242 a8c642e8 2014-09-08 brett <li>Reverted "retire kernel support for SO_DONTROUTE" diff, which caused problems in localhost connections.
1243 a8c642e8 2014-09-08 brett <!-- 2014/03/27 -->
1244 a8c642e8 2014-09-08 brett <li>On loongson, made sure the HIBERNATE pages get reserved regardless of the memory layout.
1245 cce97a6e 2019-05-27 bentley <li>Program the colormap correctly on <a href="https://man.openbsd.org/sgi/grtwo.4">grtwo(4/sgi)</a>; added a simple screen burner accessop.
1246 cce97a6e 2019-05-27 bentley <li>When enforcing TOS (Traffic Class), made <a href="https://man.openbsd.org/pf.4">pf(4)</a> preserve the ECN bits (as with IPv4 packets).
1247 cce97a6e 2019-05-27 bentley <li>Adjusted (commented-out) <a href="https://man.openbsd.org/nginx.conf.5">nginx.conf(5)</a> sample blocks for PHP and SSL configurations.
1248 a8c642e8 2014-09-08 brett <!-- 2014/03/26 -->
1249 cce97a6e 2019-05-27 bentley <li>Made <a href="https://man.openbsd.org/mg.1">mg(1)</a> C-t (transpose two chars) behave like emacs.
1250 cce97a6e 2019-05-27 bentley <li>Ended experimental machine-independent <a href="https://man.openbsd.org/login.conf.5">login.conf(5)</a> template support.
1251 cce97a6e 2019-05-27 bentley <li>Made <a href="https://man.openbsd.org/cu.1">cu(1)</a> handle REMOTE in the environment as either a separate <a href="https://man.openbsd.org/remote.5">remote(5)</a> file or a host.
1252 cce97a6e 2019-05-27 bentley <li>Added <a href="https://man.openbsd.org/cu.1">cu(1)</a> support for retrieving the line and speed from the /etc/remote "dv" and "br" capabilities like <a href="https://man.openbsd.org/tip.1">tip(1)</a>.
1253 a8c642e8 2014-09-08 brett <!-- 2014/03/25 -->
1254 cce97a6e 2019-05-27 bentley <li>Fixed handling of the <a href="https://man.openbsd.org/kill.1">kill(1)</a> "-1" option from a thread other than the original thread.
1255 cce97a6e 2019-05-27 bentley <li>Permit generating of NAMI and CSW records inside <a href="https://man.openbsd.org/ktrace.2">ktrace(2)</a>.
1256 cce97a6e 2019-05-27 bentley <li>Ignore the -b option if <a href="https://man.openbsd.org/cksum.1">cksum(1)</a> is called as-is (e.g. "cksum -b /bsd"), to match man page.
1257 cce97a6e 2019-05-27 bentley <li>Removed <a href="https://man.openbsd.org/file2c.1">file2c(1)</a>. <a href="https://man.openbsd.org/hexdump.1">hexdump(1)</a> works as well for most use cases.
1258 cce97a6e 2019-05-27 bentley <li><a href="https://man.openbsd.org/usb.4">usb(4)</a> root hubs can now happily be detached and reattached.
1259 cce97a6e 2019-05-27 bentley <li>When <a href="https://man.openbsd.org/smtpd.8">smtpd(8)</a> is locally enqueuing messages without specifying a domain, update headers to show the local domain.
1260 cce97a6e 2019-05-27 bentley <li>Strengthened <a href="https://man.openbsd.org/ssh.1">ssh(1)</a>: removed weaker pre-SHA2 hashes, broken cipher (arcfour), and the broken mode (CBC) from the default configuration.
1261 a8c642e8 2014-09-08 brett <!-- 2014/03/24 -->
1262 cce97a6e 2019-05-27 bentley <li><a href="https://man.openbsd.org/skey.1">skey(1)</a> bugfixes: default algorithm switched back to md5; do not let skey_set_algorithm() cause a segfault if an unsupported algorithm is specified.
1263 cce97a6e 2019-05-27 bentley <li>Added <a href="https://man.openbsd.org/acpithinkpad.4">acpithinkpad(4)</a> support for aux button strip on newer thinkpads missing regular F1-F12 keys.
1264 cce97a6e 2019-05-27 bentley <li><a href="https://man.openbsd.org/dd.1">dd(1)</a> now supports g for gigabytes.
1265 cce97a6e 2019-05-27 bentley <li>Reworked the way <a href="https://man.openbsd.org/sysmerge.8">sysmerge(8)</a> fetches and verifies sets, to simplify the process.
1266 cce97a6e 2019-05-27 bentley <li>Merged <a href="https://man.openbsd.org/perl.1">perl(1)</a> version 5.18.2 (including local patches).
1267 cce97a6e 2019-05-27 bentley <li>Stopped calling <a href="https://man.openbsd.org/smtpd.8">smtpd(8)</a> purge_task every 10 secs (only needed once at startup).
1268 cce97a6e 2019-05-27 bentley <li>Removed "-r" option from <a href="https://man.openbsd.org/ping.8">ping(8)</a>, <a href="https://man.openbsd.org/traceroute6.8">traceroute6(8)</a> and <a href="https://man.openbsd.org/traceroute.8">traceroute(8)</a>.
1269 a8c642e8 2014-09-08 brett <!-- 2014/03/23 -->
1270 cce97a6e 2019-05-27 bentley <li>Enabled SQLITE_ENABLE_FTS3_PARENTHESIS in <a href="https://man.openbsd.org/sqlite3.1">sqlite3(1)</a>.
1271 a8c642e8 2014-09-08 brett <li>Removed the MD4 functions (highly susceptible to collision attacks).
1272 cce97a6e 2019-05-27 bentley <li>Skip leading escape sequences in <a href="https://man.openbsd.org/mandoc.1">mandoc(1)</a> man_deroff(), for better indexing.
1273 a8c642e8 2014-09-08 brett <li>Gave powerpc PIE.
1274 a8c642e8 2014-09-08 brett <li>Initialise additional BATs (IBAT4-IBAT7 and DBAT4-IBAT7) on socppc. Stops memory corruption on devices with rb600.
1275 a8c642e8 2014-09-08 brett <li>Fix uhidev_detach() when detaching a device which did not claim all reported IDs.
1276 a8c642e8 2014-09-08 brett <li>Reverted audio key handling.
1277 a8c642e8 2014-09-08 brett <!-- 2014/03/22 -->
1278 cce97a6e 2019-05-27 bentley <li>Make sure <a href="https://man.openbsd.org/sysmerge.8">sysmerge(8)</a> adds missing users/groups before running the target; otherwise <a href="https://man.openbsd.org/mtree.8">mtree(8)</a> can fail.
1279 cce97a6e 2019-05-27 bentley <li>Let <a href="https://man.openbsd.org/mg.1">mg(1)</a> users input a tag to find, even if no default tag is defined.
1280 cce97a6e 2019-05-27 bentley <li>Disabled <a href="https://man.openbsd.org/smtpd.8">smtpd(8)</a> imsg buffers profiling code, to stop processes waking up each second.
1281 a8c642e8 2014-09-08 brett <!-- 2014/03/21 -->
1282 cce97a6e 2019-05-27 bentley <li><a href="https://man.openbsd.org/npppd.8">npppd(8)</a> tunnels can now have multiple listen addresses.
1283 cce97a6e 2019-05-27 bentley <li>Reimplemented control part of <a href="https://man.openbsd.org/npppd.8">npppd(8)</a> with imsg; added "monitor" command for <a href="https://man.openbsd.org/npppctl.8">npppctl(8)</a> to monitor PPP session start/stop events.
1284 cce97a6e 2019-05-27 bentley <li>Fixed <a href="https://man.openbsd.org/npppd.8">npppd(8)</a> bug which caused segfaults when <a href="https://man.openbsd.org/npppd.conf.5">npppd.conf(5)</a> had "username-suffix" and "strip-atmark-realm" as yes.
1285 cce97a6e 2019-05-27 bentley <li>Made <a href="https://man.openbsd.org/npppd.8">npppd(8)</a> keep listening on 1723/tcp when accept() is failed.
1286 a8c642e8 2014-09-08 brett <li>Removed tape as a method for fetching install sets.
1287 a8c642e8 2014-09-08 brett <li>Attempt to workaround the R4000 end-of-page errata on sgi and mips64, triggered by TLB misses when the code flow crosses a page boundary.
1288 cce97a6e 2019-05-27 bentley <li>Disabled MS-CHAPv1 (RFC 2433) support in <a href="https://man.openbsd.org/pppd.8">pppd(8)</a>.
1289 cce97a6e 2019-05-27 bentley <li>Fixed <a href="https://man.openbsd.org/sysmerge.8">sysmerge(8)</a> regression when not using a full path to sets; make it use <a href="https://man.openbsd.org/ftp.1">ftp(1)</a> -D.
1290 a8c642e8 2014-09-08 brett <!-- 2014/03/20 -->
1291 cce97a6e 2019-05-27 bentley <li>Installed /var/unbound/db directory for DNSSEC root key; added (commented-out) options for DNSSEC to <a href="https://man.openbsd.org/unbound.conf.5">unbound.conf(5)</a>.
1292 cce97a6e 2019-05-27 bentley <li>Removed insecure MD4 checksum algorithm from <a href="https://man.openbsd.org/cksum.1">cksum(1)</a>.
1293 a8c642e8 2014-09-08 brett <li>Removed ftp method for obtaining installation sets when running the installer.
1294 a8c642e8 2014-09-08 brett <!-- 2014/03/19 -->
1295 cce97a6e 2019-05-27 bentley <li>Enabled <a href="https://man.openbsd.org/upd.4">upd(4)</a> on amd64, sparc64 and macppc archs for testing.
1296 a8c642e8 2014-09-08 brett <!-- 2014/03/18 -->
1297 a8c642e8 2014-09-08 brett <li>Sync timestamp changes for inodes of special files to disk as late as possible to avoid useless disk i/o.
1298 cce97a6e 2019-05-27 bentley <li>Include support in <a href="https://man.openbsd.org/pstat.8">pstat(8)</a> -v to display the IN_LAZYMOD flag.
1299 a8c642e8 2014-09-08 brett <li>On sgi machines, fixed clipping bounds in "fill" and "blt" graphics operations; added colormap support.
1300 cce97a6e 2019-05-27 bentley <li>Removed timeout logic from the polling loop in <a href="https://man.openbsd.org/qlw.4">qlw(4)</a>. Stops devices timing out before attaching.
1301 a8c642e8 2014-09-08 brett <li>Retired the rarely used hp300, mvme68k and mvme88k ports.
1302 cce97a6e 2019-05-27 bentley <li>Allow <a href="https://man.openbsd.org/OpenBSD-current/man8/makewhatis.8makewhatis">makewhatis(8)</a> to check <a href="https://man.openbsd.org/mandoc.db.5">mandoc.db(5)</a> databases are up to date even when you don't have write permissions.
1303 a8c642e8 2014-09-08 brett <li>Notify userland (via the routing socket) when ARP resolution completes.
1304 cce97a6e 2019-05-27 bentley <li>Put the AF_ROUTE socket that <a href="https://man.openbsd.org/arp.8">arp(8)</a> operates on into the appropriate rdomain. Stops "arp -V 1 -d 10.0.0.1" hanging forever.
1305 cce97a6e 2019-05-27 bentley <li>Made <a href="https://man.openbsd.org/bgpctl.8">bgpctl(8)</a> correctly parse attribute length form imsg.
1306 cce97a6e 2019-05-27 bentley <li>Exit from <a href="https://man.openbsd.org/traceroute6.8">traceroute6(8)</a> if there is at least one unreachable and sum of unreachables and timeouts are >= number of probes.
1307 a8c642e8 2014-09-08 brett <!-- 2014/03/17 -->
1308 cce97a6e 2019-05-27 bentley <li>Unbroke <a href="https://man.openbsd.org/sndiod.8">sndiod(8)</a> monitoring mode, which was shifted in time by 1 block.
1309 cce97a6e 2019-05-27 bentley <li>Userland <a href="https://man.openbsd.org/ppp.9">ppp(9)</a> removed.
1310 cce97a6e 2019-05-27 bentley <li>In <a href="https://man.openbsd.org/apropos.1">apropos(1)</a> output, sort names and avoid multiple section numbers.
1311 cce97a6e 2019-05-27 bentley <li>In <a href="https://man.openbsd.org/slowcgi.8">slowcgi(8)</a>, use SCRIPT_FILENAME (can be an absolute filesystem path). Fallback to SCRIPT_NAME if this is not present.
1312 cce97a6e 2019-05-27 bentley <li>Reimplemented <a href="https://man.openbsd.org/htpasswd.1">htpasswd(1)</a> from scratch.
1313 a8c642e8 2014-09-08 brett <!-- 2014/03/16 -->
1314 cce97a6e 2019-05-27 bentley <li>Don't use volume keys when in raw-mode. Stops simultaneous volume changes by <a href="https://man.openbsd.org/X.7">X(7)</a> and <a href="https://man.openbsd.org/ukbd.4">ukbd(4)</a>.
1315 a8c642e8 2014-09-08 brett <!-- 2014/03/15 -->
1316 cce97a6e 2019-05-27 bentley <li>Enable <a href="https://man.openbsd.org/qlw.4">qlw(4)</a> at <a href="https://man.openbsd.org/sbus.4">sbus(4)</a> on sparc64.
1317 cce97a6e 2019-05-27 bentley <li>Enabled <a href="https://man.openbsd.org/unbound.8">unbound(8)</a> in base.
1318 a8c642e8 2014-09-08 brett <!-- 2014/03/14 -->
1319 a8c642e8 2014-09-08 brett <li>Updated to xcb-proto version 1.10.
1320 a8c642e8 2014-09-08 brett <li>Updated to libdrm 2.4.52.
1321 cce97a6e 2019-05-27 bentley <li>Removed the unused userland <a href="https://man.openbsd.org/agp.4">agp(4)</a> interface.
1322 a8c642e8 2014-09-08 brett <li>Reverted to the freetype2.pc we had before to bring back local changes.
1323 cce97a6e 2019-05-27 bentley <li>More informative <a href="https://man.openbsd.org/smtpd.8">smtpd(8)</a> log message on unknown SNI.
1324 a8c642e8 2014-09-08 brett <li>Provide an MI api for byteswapping loads and stores, especially beneficial for sparc64 and powerpc.
1325 a8c642e8 2014-09-08 brett <li>Updated to freetype-2.5.3. Fixes vulnerability in the CFF driver (CVE-2014-2240).
1326 a8c642e8 2014-09-08 brett <!-- 2014/03/13 -->
1327 cce97a6e 2019-05-27 bentley <li>Enabled <a href="https://man.openbsd.org/qla.4">qla(4)</a> and <a href="https://man.openbsd.org/qle.4">qle(4)</a> in ramdisks (except on sgi).
1328 cce97a6e 2019-05-27 bentley <li><a href="https://man.openbsd.org/smtpd.8">smtpd(8)</a> now prints the correct user name if SMTPD_QUEUE_USER is missing.
1329 a8c642e8 2014-09-08 brett <li>Use ticket locks (not spinlocks) on i386/amd64/sparc64. Provides fairer access to the kernel lock.
1330 cce97a6e 2019-05-27 bentley <li>Added a few more instruction patterns to binutils that are needed by <a href="https://man.openbsd.org/gcc.1">gcc(1)</a> version 4.8.
1331 cce97a6e 2019-05-27 bentley <li>In <a href="https://man.openbsd.org/mandoc.1">mandoc(1)</a> -Tutf8 mode, count hyphens against the output line length even when they are breakable.
1332 cce97a6e 2019-05-27 bentley <li>Stopped the <a href="https://man.openbsd.org/smtpd.8">smtpd(8)</a> enqueue utility adding a User-Agent header to emails.
1333 cce97a6e 2019-05-27 bentley <li>Block userland from entering <a href="https://man.openbsd.org/drm.4">drm(4)</a> code during suspend/resume. Fixes <a href="https://man.openbsd.org/inteldrm.4">inteldrm(4)</a> bugs.
1334 cce97a6e 2019-05-27 bentley <li>Unhooked <a href="https://man.openbsd.org/httpd.8">httpd(8)</a> from build: use of <a href="https://man.openbsd.org/nginx.8">nginx(8)</a> is encouraged now.
1335 cce97a6e 2019-05-27 bentley <li>No more <a href="https://man.openbsd.org/spray.8">spray(8)</a> in base.
1336 a8c642e8 2014-09-08 brett <!-- 2014/03/12 -->
1337 cce97a6e 2019-05-27 bentley <li>Fixed buffer overflows in <a href="https://man.openbsd.org/icmp.4">icmp(4)</a> redirect handling (introduced in rev 1.106).
1338 cce97a6e 2019-05-27 bentley <li>Switched over from <a href="https://man.openbsd.org/sendmail.8">sendmail(8)</a> to <a href="https://man.openbsd.org/smtpd.8">smtpd(8)</a> by default.
1339 cce97a6e 2019-05-27 bentley <li>Fixed <a href="https://man.openbsd.org/iked.8">iked(8)</a> config-address w/o pool.
1340 cce97a6e 2019-05-27 bentley <li>Unbroke <a href="https://man.openbsd.org/nc.1">nc(1)</a> "-6 -l" and apply correct fix for previous commit.
1341 a8c642e8 2014-09-08 brett <!-- 2014/03/11 -->
1342 cce97a6e 2019-05-27 bentley <li>Removed <a href="https://man.openbsd.org/rmail.8">rmail(8)</a>.
1343 cce97a6e 2019-05-27 bentley <li>Made <a href="https://man.openbsd.org/ssh.1">ssh(1)</a> scan for ed25519 keys by default.
1344 cce97a6e 2019-05-27 bentley <li>For <a href="https://man.openbsd.org/isakmpd.8">isakmpd(8)</a> CA generation, set the correct certificate extensions so more SSL implementations will trust this as a CA cert. Matches <a href="https://man.openbsd.org/ssl.8">ssl(8)</a>.
1345 cce97a6e 2019-05-27 bentley <li>Bugfix update to <a href="https://man.openbsd.org/nginx.8">nginx(8)</a> version 1.4.6.
1346 a8c642e8 2014-09-08 brett <!-- 2014/03/10 -->
1347 cce97a6e 2019-05-27 bentley <li>When <a href="https://man.openbsd.org/pf.4">pf(4)</a> is translating packets from one address family to another, pass the TOS/Traffic Class field of the original packet.
1348 cce97a6e 2019-05-27 bentley <li>When <a href="https://man.openbsd.org/pf.4">pf(4)</a> is setting packet description, also retrieve the Traffic Class field of IPv6 packets.
1349 cce97a6e 2019-05-27 bentley <li>Fixed the <a href="https://man.openbsd.org/octeon/cnmac.4">cnmac(4/octeon)</a> mediastatus when the interface is not configured.
1350 cce97a6e 2019-05-27 bentley <li>Optimisation of <a href="https://man.openbsd.org/opendir.3">opendir(3)</a>, <a href="https://man.openbsd.org/rewinddir.3">rewinddir(3)</a> and related functions. 2000x speedup of <a href="https://man.openbsd.org/seekdir.3">seekdir(3)</a> in some tests.
1351 a8c642e8 2014-09-08 brett <!-- 2014/03/09 -->
1352 cce97a6e 2019-05-27 bentley <li>Fixed <a href="https://man.openbsd.org/acpi.4">acpi(4)</a> on amd64, to avoid reboot and stack corruption problems when resuming.
1353 a8c642e8 2014-09-08 brett <li>Reworked per-cpu cache information, to avoid using hardcoding data based on processor type on mips, octeon, and sgi.
1354 a8c642e8 2014-09-08 brett <!-- 2014/03/08 -->
1355 cce97a6e 2019-05-27 bentley <li>In <a href="https://man.openbsd.org/re.4">re(4)</a>, fixed operation and made reception of packets work on the 8168G controllers.
1356 cce97a6e 2019-05-27 bentley <li>Made <a href="https://man.openbsd.org/mandoc.1">mandoc(1)</a> user-defined macros wrapping ".TP" work correctly; preserve line breaks contained in user-defined macros called in ".nf" mode.
1357 cce97a6e 2019-05-27 bentley <li>Enable DMA bursting and tagged queueing in <a href="https://man.openbsd.org/qlw.4">qlw(4)</a>; enable <a href="https://man.openbsd.org/qlw.4">qlw(4)</a> on alpha/amd64/i386/macppc/sgi/sparc64; only attempt to load firmware if we actually have some.
1358 cce97a6e 2019-05-27 bentley <li>Initial <a href="https://man.openbsd.org/xhci.4">xhci(4)</a> implementation: USB 3.0 <a href="https://man.openbsd.org/umass.4">umass(4)</a> devices get reasonable read/write speed.
1359 a8c642e8 2014-09-08 brett <!-- 2014/03/07 -->
1360 cce97a6e 2019-05-27 bentley <li>Improved <a href="https://man.openbsd.org/roff.7">roff(7)</a>'s .if/.ie condition handling.
1361 cce97a6e 2019-05-27 bentley <li>Fixed <a href="https://man.openbsd.org/env.1">env(1)</a> diagnostic messages to stderr, so failure of <a href="https://man.openbsd.org/env.1">env(1)</a> and failure of the specified utility can be distinguished.
1362 cce97a6e 2019-05-27 bentley <li>Allow <a href="https://man.openbsd.org/signify.1">signify(1)</a> to read input messages on a pipe.
1363 cce97a6e 2019-05-27 bentley <li>Added usbd_get_hub_descriptor(), to clean up <a href="https://man.openbsd.org/uhub.4">uhub(4)</a> and deal with hub device descriptors in high speed devices.
1364 a8c642e8 2014-09-08 brett <!-- 2014/03/06 -->
1365 cce97a6e 2019-05-27 bentley <li>With <a href="https://man.openbsd.org/md5.1">md5(1)</a> -C, exit with exit status of 1 if any of the files specified do not exist.
1366 cce97a6e 2019-05-27 bentley <li><a href="https://man.openbsd.org/mandoc.1">mandoc(1)</a> bugfixes related to the closing of conditional blocks: handle more than one '\}' on macro lines; do not treat '\}' as a macro invocation after a dot at the beginning of a line; do not complain about characters following '\}'.
1367 cce97a6e 2019-05-27 bentley <li>Makes the "cleartoggle" function in HC drivers optional (upcoming <a href="https://man.openbsd.org/xhci.4">xhci(4)</a> driver doesn't use it).
1368 cce97a6e 2019-05-27 bentley <li>Allow <a href="https://man.openbsd.org/signify.1">signify(1)</a> to accept a password on stdin, as long as it is not a <a href="https://man.openbsd.org/tty.4">tty(4)</a>.
1369 cce97a6e 2019-05-27 bentley <li>On <a href="https://man.openbsd.org/qlw.4">qlw(4)</a>, set the correct clock rate for ISP1020/1020A.
1370 cce97a6e 2019-05-27 bentley <li>When running <a href="https://man.openbsd.org/sysmerge.8">sysmerge(8)</a>, always print the key <a href="https://man.openbsd.org/signify.1">signify(1)</a> is using.
1371 a8c642e8 2014-09-08 brett <!-- 2014/03/05 -->
1372 cce97a6e 2019-05-27 bentley <li>Fix the return values of <a href="https://man.openbsd.org/getpwnam_r.3">getpwnam_r(3)</a>, <a href="https://man.openbsd.org/getpwuid_r.3">getpwuid_r(3)</a>, <a href="https://man.openbsd.org/getgrnam_r.3">getgrnam_r(3)</a>, and <a href="https://man.openbsd.org/getgrgid_r.3">getgrgid_r(3)</a> to agree with POSIX.
1373 cce97a6e 2019-05-27 bentley <li>Altered <a href="https://man.openbsd.org/qlw.4">qlw(4)</a> so it can compile on sparc64 too.
1374 cce97a6e 2019-05-27 bentley <li>In -Tutf8 mode, make <a href="https://man.openbsd.org/mandoc_char.7">mandoc_char(7)</a> named accent character escape sequences render as non-combining accents (lets mandoc behave like groff); made \' and \` equivalent to \(aa and \(ga, respectively.
1375 cce97a6e 2019-05-27 bentley <li>Introduced <a href="https://man.openbsd.org/qlw.4">qlw(4)</a>, a new driver for QLogic ISP SCSI HBAs (currently only supports the <a href="https://man.openbsd.org/pci.4">pci(4)</a> variants).
1376 cce97a6e 2019-05-27 bentley <li>Raised the delay before initialising <a href="https://man.openbsd.org/sdmmc.4">sdmmc(4)</a>. Lets the reader on X220 work reliably.
1377 cce97a6e 2019-05-27 bentley <li>Fixed: <a href="https://man.openbsd.org/sndiod.8">sndiod(8)</a> read/write position tracking; incorrect delta propagated after xruns in play-only and rec-only modes; crashes seen after a few days of continuous playback.
1378 cce97a6e 2019-05-27 bentley <li>Fixed incorrect position reporting with <a href="https://man.openbsd.org/sndiod.8">sndiod(8)</a> when using tiny block sizes on busy machines.
1379 cce97a6e 2019-05-27 bentley <li>Made <a href="https://man.openbsd.org/sndiod.8">sndiod(8)</a> check that the socket is writable before attempting to write data packets.
1380 a8c642e8 2014-09-08 brett <li>On armv7, removed TIMEZONE and DST options from GENERIC-* kernels; added option USBVERBOSE to all kernels.