OpenBSD 5.4 Changelog

This selection is intended to include all important and all user-visible changes. For a complete record of all changes, please see the "source-changes" mailing list, called "OpenBSD CVS" in the archives, or use CVS.

Note: Problems for which patches exist are marked in red.

For changes in other releases, click below:
2.0, 2.1, 2.2, 2.3, 2.4, 2.5, 2.6, 2.7, 2.8, 2.9, 3.0, 3.1, 3.2, 3.3, 3.4, 3.5, 3.6,
3.7, 3.8, 3.9, 4.0, 4.1, 4.2, 4.3, 4.4, 4.5, 4.6, 4.7, 4.8, 4.9, 5.0, 5.1, 5.2, 5.3,
5.5, 5.6, 5.7, 5.8, 5.9, 6.0, 6.1, 6.2, 6.3, 6.4, 6.5, 6.6, 6.7, 6.8, 6.9, 7.0, 7.1,
7.2, 7.3, 7.4, 7.5, 7.6, 7.7, 7.8, current.

Changes made between OpenBSD 5.3 and 5.4

• Let the X(7) server build on hp300 again.
• Stopped awk(1) sporadically exiting early (blaming a spurious "}" in the first few lines of input) on m88k 88100-based systems.
• Let mkuboot(8) recognise native ELF binaries, only output the program headers area when found. Saves the need for "objcopy -O binary"; makes beagle install/upgrade processes easier until it gets a native bootloader.
• Revert wrong chunk introduced in zs.c r1.50, causing zs(4/sparc) console keyboards not to attach as console. Fixes non-wsmux kernels such as bsd.rd.
• Make sure ftpd(8) tmpline[] is always NULL terminated, to avoid possible read-beyond-end in get_line().
• Backout gem(4) flow control support (r1.97 of gem.c) and RX TCP/UDP checksum offload support (r1.98) to stop hangs on Sun ERI.
• sftp(1) extended to allow support for resuming partial downloads.
• Daemonise backgrounded ssh(1) (ControlPersist'ed) multiplexing master, so it is fully detached from its controlling terminal.
• Do not reset the pf(4) fragment timeout each time a fragment arrives; drop all fragments if the packet cannot be reassembled within 60 seconds.
• We now have IDEA and MDC2 in crypto(3), so no longer disable them in openssl(1).
• Fixed sockaddr overflow with IPv6 in smtpd(8).
• When installing a new system, stop adding static entries to /etc/hosts for dynamic ip addresses.
• Fixed umount(8) -a in cases where there are multiple file systems specified for the same mount point.
• Updated to: xconsole 1.0.6, xrandr 1.4.1, xhost 1.0.6, mkfontscale 1.1.1, xfd 1.1.2 and xfontsel 1.0.5.
• Added cu(1) support for XMODEM-CRC, and fix transfer initiation.
• Sum consecutive dx and dy motion events in xf86-input-ws before sending them up to X(7). Reduces staircase effects on diagonal freehand drawings.
• Updated smtpd(8) ldap and sqlite table backends and provide them as external backends.
• Call ssh-agent(1) cleanup_handler on SIGINT when in debug mode, so sockets are cleaned up on manual exit (bz#2120).
• More useful ssh-keygen(1) and ssh(1) error message on missing current user in /etc/passwd.
• When smtpd(8) is accepting a message, log one line per recipient with the number of generated envelopes for each.
• smtpd(8) MTA improvements: better transient error handling logic (failing destinations automatically disabled for a while); more informative error report when all routes fail for a message; implemented smtpctl(8) "show hoststats" command to get the latest stat message per MX domain; implemented smtpctl(8) "show routes" command to show the state the currently known routes to remote MXs; implemented smtpctl(8) "resume route" command to re-enable a route that has been disabled; do not hardcode limits.
• smtpd(8) queue improvements: cleanup the internal queue backend API; implement a queue_proc backend; enabled support for queue encryption; added an envelope cache; better logging and error reporting.
• Allow smtpd.conf(5) to specify an address family on a listener.
• smtpd(8) scheduler improvements: implemented suspend/resume scheduling for individual envelopes or message, with the associated smtpctl(8) commands; allow the mta to request immediate scheduling of an envelope; on temporary failures a penalty can be given to further delay the next try.
• New implementation for smtpctl(8) and its command line parser.
• Implemented tls "perfect forward secrecy" with ECDHE in smtpd(8).
• Allow "!" in the smtpd(8) email addresses supported charset.
• Introduced expand-string modifiers to smtpd.conf(5).
• Extended ssh-agent(1) support to allows encrypted hostkeys, or hostkeys on smartcards on sshd(8) (bz #1974).
• Reverted r1.191 and r1.193 of sysctl.c, and properly fixed sysctl(8)'s access to ext2 filesystems.
• Corrected sysctl(8) being off-by-one in naming of nodes below vfs.mounts.
• In ssh(1) man page, be more exact with respect to permissions for ~/.ssh/config (bz#2078).
• Implemented identd(8) -H, which hides existing and non-existent users (as well as implying -h).
• Fixed bgpd(8) counting the number of prefixes wrongly (tripling max-prefix).
• Disabled httpd(8) SSL compression, in order to mitigate CRIME attacks.
• Enabled ECDHE support in httpd(8) via a SSLECDHCurve option.
• Define httpd(8) HonorCipherOrder as a FLAG so that it works correctly as a boolean on/off flag.
• Make sure the ioctl(2) has been processed by sppp(4) before printing any ifconfig(8) phase error. Prevents ifconfig(8) from printing "sppp: phase..." messages for long-name vlan(4) interfaces.
• Correctly initialise pms(4) width value to 0 instead of passing garbage to wsmouse_input() when no finger is reported.
• Restore ifb(4/sparc64) textmode acceleration on Expert3D{,-Lite} and XVR-1200. Broken since r1.17 of ifb.c.
• When ucom(4) is detached, free its pipes, close attached tty before freeing its descriptor. Fixes panic introduced in r1.59 of ucom.c.
• Added monochrome Xserver(1) support for luna88k.
• Added some missing asm functions to vax.
• To prevent lock ordering problems with the sparc64 kernel lock, block all interrupts that can grab the kernel lock.
• Fixed possible memory/file descriptor leak in ldd(1) error path.
• When using man.conf(5) _default search path with _subdir, first sort by manual section (1, 8, 6...), then by manual tree (share, X11R6, local), only for ties prefer cat over man.
• Make tmux(1) next-word-end work properly with vi(1) keys.
• Set TCP nodelay for ssh(1) connections started with -N (bz#2124).
• ssh-keygen(1) do_print_resource_record() can't be called with NULL filename, don't attempt asking for one if it has not been specified (bz#2127).
• Avoid confusing ssh(1) error message in some broken resolver cases (bz#2122).
• Introduced httpd(8) HonorCipherOrder to use the server's order of preference of ciphers.
• sk(4) now works on macppc, should work on sparc64 too.
• bgpd(8) SE now always messages the RDE when a peer comes up or when a reload happens, so the RDE should end up with correct values.
• Backed out the virtual file system cache flipper temporarily.
• Added basic support for digitisers with pens in uhts(4).
• Added support for mouse based group {,r}cycle to cwmrc(5).
• Replaced a few (x)malloc with (x)calloc to prevent potential integer overflows in cwm(1).
• Updated drm(4)'s libdrm to 2.4.46.
• Old make(1) option "-P" removed, it has not been doing anything for years.
• Use the write-only rasops(9) code to speed up the console framebuffer on macppc.
• Create more com(4) entries by default since puc(4)s are now guaranteed to show up at com4 or higher on x86.
• Advertise utpms(4) as being a WSMOUSE_TYPE_USB so ws(4) can use the touchpad directly. Makes some touchpads usable if the bluetooth HID mouse is not detected or ums(4) is disabled.
• Vax elf(5) toolchain added, using "%" as the register prefix.
• Taught mopd(8) and mopa.out about ELF files. Allows forthcoming vax elf(5) boot blocks to be converted to working mop binaries.
• Avoid truncation when calculating clock gain/loss on sparc and sparc64.
• When the tmux(1) session option renumber-window is used, make sure the winlink lists stay in sync with one another.
• Act like vi(1) when tmux(1) is moving words; clarify error messages when setting options.
• Implemented tmux(1) s, S, C mode switch commands for when in vi(1) mode.
• Made pfctl(8) collect and display "match" counters for pf(4) tables; fixed pf(4) table displays to fit within 80 chars.
• Added support for fuse_teardown(3). This function is needed by zipfs.
• Correctly abort and free the pipe when detaching the umodem(4) device.
• Brought the cpsw(4/beagle) driver to a working state.
• Added support for the gcc(1) binary integer constants extension.
• Pass ioctl(2) calls to parent uhidev(4) device first, to be able to get the HID descriptor with usbhidctl(1) -r, among others.
• Disabled intel(4) i915 fast scrolling code, use write-only rasops(9) code instead on older chips. Avoids random page table errors.
• Make ksh(1) $(< /nonexistent) have the same behaviour as $(cat /nonexistent) with respect to errors.
• Tweaked regexp so that RUSAGE_CHILDREN will be matched and displayed by kdump(1).
• Stop man(1) adding an "-s" switch if user had specified more(1) as (MAN)PAGER.
• Reverted previous xf86-video-ati commit, loading the dri driver caused Xorg(1) to crash with r700 (PCI HD4350).
• When an I/O error occurs on a softraid(4) chunk, only take it offline if the discipline supports redundancy.
• Switched bgplgsh(8) to use use the libedit readline compatibility headers.
• Linked sqlite3(1) against libedit; added an empty history.h header for compatibility with GNU readline.
• Added a luna88k-specific function to initialise the instruction cmmu SAPR register.
• Build xf86-video-ati with support for kernel mode setting. UMS will still be used if KMS is not available.
• Added basic EXA acceleration for the xf86-video-cirrus alpine chipset.
• Fixed NULL pixmaps with xf86-video-sis server.
• Added support for write-only framebuffers to rasops(9). Can be a considerable performance win.
• Enabled msi and tagged status for bge(4) 5717+. Fixes poor transmit performance in the beginning of a TCP connection.
• Rewritten sis(4) media / link state handling.
• Adjust interrupts on amd64 after recent audio interrupt changes. Should improve latency of audio interrupts a tiny bit.
• ukbd(4) will now flash LED only if safe. Stops some logitech mice disconnecting right after being attached.
• Use vt05 as default for xdm(1) on macppc now that virtual consoles are supported.
• Removed the setgid(2) on kmem(4/i386) for the time being, so procmap(1) works again for regular users.
• Repaired bge(4) flow control (broken in r1.329), make sure that ifconfig(8) won't alter our negotiated flow control settings.
• Bring ohci(4) and uhci(4) in sync with ehci(4) by ensuring that a transfer is submitted when a zero-length bulk or interrupt transfer is requested.
• When we remove work from the nfsd(8) queue, wake up anything waiting for room to queue IO right away.
• Restart the vinvalbuf(9) if we have to wait for a busy buffer to complete.
• Reverted r1.20 of sys/net/if_pppx.c, to make sure the newly created address is added to the global list, until the issue with carp(4) is addressed.
• Added a tmux(1) server option to control focus events. Defaults to off.
• Made tmux(1) always push a focus event when the application turns it on.
• Mark tmux(1) control commands specially so the client can identify them.
• Reverted sys/netinet/in.c r1.78 for now, it breaks ipv4 on carp.
• Updated to libXv 1.0.9.
• Enable native encoding on on mavb(4/sgi) (24-bit lsb-aligned). Allows encoding conversions to be handled in userland.
• Default to stdin/stdout if no input files are given to indent(1).
• For ssh(1) hostbased authentication, print the client host and user on the auth success/failure line (bz#2064).
• Improved mandoc(1) handling of the roff(7) "\t" escape sequence.
• Updated to libdrm 2.4.45.
• Added ut/nut flags to indent(1) to enable/disable tabs.
• When cwm(1) selfont is configured, make sure we continue and configure the rest of the screen.
• Disabled nginx(8) SPDY until we have a better understanding about code and protocol within OpenBSD.
• Initialise disklabel(8) duid memory before shifting stuff into elements of it.
• Make sure the target directory gets created by lex(1) in the includes target; add a trailing / as well to avoid problems.
• Stopped dhclient(8) from printing some stings twice (eg "1.2.3.4, not 1.2.3.4, deleted from ...").
• Before pulling TCP options from the mbuf onto the stack, do an additional length check in pf(4) so overflow cannot happen.
• Updated kerberos(8) to heimdal 1.5.2.
• Handle time_t values as long long's when scp(1) and rcp(1) are formatting them, or parsing them from remote servers.
• Allow mouse button4 and button5 in cwmrc(5).
• Improved locale(1) output formatting.
• Move mg(1) cursor upwards past multiple lines with no characters, instead of stopping when first line with no characters is found.
• Run any pending traps before calling the EXIT or ERR traps when ksh(1) -e is set. Fixes bug where signal trap would not be run if (eg) ^C was pressed and -e was set.
• Hooked up locale(1) to the build.
• Updated the beagle ramdisk to support usb.
• Reworked beagle's ehci(4) driver, enabling the clocks. Only pandaboard supported for now.
• Updated to: libXrender 0.9.8 and libXvMC 1.0.8
• Disabled broken EXA operations in xf86-video-mga; default to EXA acceleration.
• Added support for fuse_version(3) and fuse_get_context(3). Needed by ntfs-3g port.
• Updated nginx(8) internal pcre library to 8.33.
• Corrected interrupt moderation setting for ix(4) 82598.
• Fixed loading the driver without XAA and initialisation of shadowfb with modern X servers in xf86-video-trident, xf86-video-i740 and xf86-video-neomagic.
• Added support for protected-subnet config types to iked(8).
• 5.3 RELIABILITY FIX: Two flaws in vio(4) may cause a kernel panic, and may cause IPv6 neighbour discovery to fail.
  A source code patch is available for 5.3.
• Updated to sendmail-8.14.7.
• 5.3 RELIABILITY FIX: inability to oack would cause tftpd(8) to segfault
  A source code patch is available for 5.3.
• Stopped tmux(1) emitting annoying beeps if a machine was shutdown while tmux is running and you then focus in/out of an xterm.
• High memory page flipping for the buffer cache. Allows use of large buffer caches on amd64 with > 4 GB of memory.
• Activated the sitaracm driver (beaglebone only).
• Optimised memcpy(9) on amd64, alpha, i386, vax, sh, sparc, hppa and hppa64 by always doing forward copy; made memcpy(9) use the forward copy branch of memmove(9); implemented bcopy(9) by swapping its arguments and dropping into memmove(9).
• POSIX specifies that for an AND/OR list, only the last command's exit status matters for "set -e". Revert ksh(1) to follow this.
• On mach64, only disable xf86-video-mach64 RenderAccel, not the full EXA acceleration. This is enough to fix screen corruption.
• Made cwm(1) check for, and honour, CWStackMode and CWSibling change requests during a ConfigureRequest event.
• Unbreak the xf86-video-sunffb driver.
• Fixes for integer overflows in XF86DRIOpenConnection() and XF86DRIGetClientDriverName() (CVE-2013-1993).
• Reverted ssh(1) revision 1.203 of readconf.c while crashes are investigated.
• Fixed dhclient(8) populating egress group.
• Updated to sqlite3(1) and its shell to version 3.7.17.
• Some archs are missing memmove(3), added it to i386, sparc and sparc64.
• Backout dhclient(8) static/classless route handling and default route refactoring, which broke "egress" group populating.
• Fix libc parsing of ambiguous options so the whole loop is processed.
• Add new sysctl(8) for pipex packet input/output queue length and counters.
• Added proper mmap(2) support for drm(4)/inteldrm(4). Eventual speedups (through not accessing all graphics memory via the GTT).
• Disabled EXA acceleration in the xf86-video-mach64 driver, which is currently broken.
• Updated to: pixman 0.30.0; freetype 2.4.12; Xserver 1.14.1.
• Add ssh(1) "ABANDONED" channel state; use for mux sessions that are disconnected via the ~. escape sequence (bz#1917).
• Disable a broken optimisation in try_combine(); gcc(1) PR #34628. Fixes bogus code generation on macppc.
• Added the remaining support code for 4th gen intel(4) Core/Haswell graphics.
• Prevent idle thread from being stolen on startup.
• Fixed re_format(7) so [[:>:]] anchors the character preceding it to end of word, not the character following it.
• Initial port of the cpsw(4/beagle) driver, to support ethernet on the beaglebone.
• Fixed ssh(1) memory leaks (bz#1967 and bz#1967).
• Fixed a crypto(9) bug that caused time-based rekeys to happen too frequently.
• When running sshd(8) -D, close stderr unless we have explicitly requesting logging to stderr (bz#1976).
• The kernel will now keep a record of recently exit(3)'ed pids, so they don't get recycled too quickly.
• Support added for the presto(4/sparc) SS10/SS20 NVSIMM as block devices.
• Added dhclient(8) support for static routes option (33) and classless static routes option (121).
• Prevent failures when sftp(1) is linked against a libedit built with wide character support (bz#1990).
• Disable parity on the alpha pci(4) bus to avoid data parity errors. To help Alphabooks, as well as early Multia.
• Use MAXPATHLEN for ssh(1) buffer size, instead of fixed value.
• Implemented pf(4) divert-to and divert-reply for IPv6 raw sockets.
• Prevent panic on alpha if "ifconfig(8) up" is run on an unplugged de(4) interface.
• Added login_yubikey(8) handling for keyboard layouts which break modhex (eg dvorak); added keymap table.
• Do not feed UTF-8 input into mandoc(1) or nroff(1), because that results in corrupt output.
• Fix dhclient(8) "\" escape handling in read_string().
• Updated to libX11 1.6.0.
• Introduced the ldpctl(8) "show discovery" command.
• Sped up the ldpd(8) session establishment process.
• Do not allow ldpd(8) TCP connection to associate with any neighbour/adjacency before an "Initialization" message is received.
• Added support for macppc virtual consoles, based on previous work done for inteldrm(4).
• Implemented ldpd(8) support for adjacencies and targeted "hellos"; allow more complex topologies with targeted sessions.
• Properly implement the exponential backoff timer on ldpd(8) session initialisation, to match section 2.5.3 of RFC 5036.
• Notify the lde process when an ldpd(8) neighbour is deleted (discovery timeout).
• 5.2 and 5.3 RELIABILITY FIX: With HTTP keepalive, relayd(8) only filtered the first request and switched to pass-through mode for subsequent requests from the client. Make sure to stay in HTTP header mode.
• Stopped npppd(8) doing pipex(4) ioctl if no tunnel interface is configured.
• Don't add newly created thread to the process's thread list until it's fully built, so that it can't get a signal from realitexpire().
• Only produce UTF-8 output when using perl(1) if the user's locale asks for it.
• Fixed potential vmx(4) panic if an mbuf was replaced but new one not returned by vmxnet3_load_mbuf().
• Add bcrypt_pbkdf(3), a password based key derivation function (using a bcrypt(3) variant better suited for use as a pluggable hash).
• Reworked logic for matching macppc boot device, to allow for root on any drive attached to the first controller.
• Fixed ksh(1): "for var in; do ..." shouldn't be interpreted as "for var; do ...". Brings ksh(1) more in line with POSIX.
• Backported unique commitid support to cvs(1) (with a new random id generator).
• Fixed bug in ldpd(8) so the fib-update directive accepts "no" as an option.
• pf(4) divert-reply states where the initial SYN does not get an answer, can now be handled more correctly.
• Advertise the ldpd(8) implicit-null label for routes attached to loopback interfaces to guarantee PHP.
• Implement ldpd(8) support for multiple addresses per interface.
• Fixed a pf(4) regression introduced with pf.c 1.827, allowing us to create icmp(4) states again.
• Stop a ucom(4) panic when trying to open a non-connected serial; more checks to avoid races when the driver is being detached.
• Added userland fuse(3) library.
• Fixes possible timeout on ssl(8) sessions if there is data pending in the smtpd(8) ssl buffer.
• Added ":" to the ksh(1) list of special characters.
• Added locale(1) utility, to check the current locale configuration and provides a list of locales supported by the system.
• Perform more aggressive compile-time optimisations in ethernet code path. Significant performance improvements on busy firewalls.
• Added dired-revert, to refresh the mg(1) dired buffer.
• -I option added to confirm pkill(1) process-by-process.
• Fixed "anchor quick" with pf(4) nested anchors (previously quick flag was lost as soon as we stepped into a child anchor).
• Force ssh(1) MAC output to be 64-bit aligned, so umac won't see unaligned accesses on strict-alignment architectures (bz#2101).
• Updated to xterm 293.
• Updated to xf86-input-synaptics 1.7.1.
• Let mandoc(1) .Do .Dq .Ql .So .Sq generate the correct roff(7) character escape sequences such that output modes like -Tutf8 have a chance to select nice glyphs.
• Fixed a bug where the calibration loop could show wrong CPU frequencies on i386/amd64.
• Fixed relayd(8) so it filters all HTTP keepalives, not just the first.
• Fixed wcstof(3), wcstod(3), wcstold(3) C99 compliance to: handle "inf", "infinity", "nan", and "nan(whatever)"; reject bare minus and plus signs; handle multi-byte characters; and set *endptr = nptr for all failure cases.
• Exclude mac address for the HMAC calculation if lladdr is the real one, so that we can use the real MAC address for carp(4).
• Make tmux(1) escape "Ss", because groff(1) thinks it has found a macro.
• Moved bgplg(8) and slowcgi(8) sockets to /var/www/run.
• Made ssh(1) parent_alive_interval time_t (to avoid signed/unsigned comparison).
• Fixed kadmin(8) race.
• Added the "quit-window" dired command to mg(1).
• Rename the mg(1) dired-* commands to be like the emacs equivalents.
• Correct wrongly exchanged labels in trek(6) "computer warpcost" output.
• While lock is held, block all interrupts that can grab the kernel lock on amd64. Prevents lock ordering problems.
• Fixed an xinstall race condition, where multiple install -d's trying to create overlapping paths in parallel could error out.
• Fixed acpi(4) panic on Lanner FW-8758.
• Partially back out new librthread ticket locks code, until heavier CPU usage issues are resolved.
• Stop printing acpi(4) wakeup devices in dmesg(8) after the 16th wakeup device, to workaround vmware reporting hundreds of wakeup devices.
• Update sftp(1) progress meter when data is acked, not when it's sent (bz#2108).
• Fix catopen(3) for UTF-8 locales and update the implementation to POSIX-2008. catopen(3) now chooses a catalog which matches the locale's encoding, if available.
• Librthread now features a new spinlock (that is really a ticket lock).
• Stopped mtree(8) generating arbitrary directories in /usr/share/locale.
• Changed the naming scheme used for directories in /usr/share/locale to eliminate redundant copies of LC_CTYPE files.
• Restart the ldpd(8) keepalive timer whenever a LDP PDU is sent.
• Updated to xf86-video-sunffb 1.2.2.
• Don't try to send a Shutdown message if ldpd(8) connection is already closed or a read error occurred; as per RFC 5036, send a "Shutdown" message if an unexpected message is received during the initialisation process; check if the whole LSR ID of received messages is correct; ignore messages from the process whose associated neighbour is not in the operational state.
• Dropped support for per-interface ldpd(8) labelspaces.
• Don't allow enabling ldpd(8) on loopback and carp(4) interfaces. LDP should be allowed only on physical or tunnel interfaces.
• Removed mg(1) "lint" mode.
• Correctly initialise the number of cores/cpus on an octeon board, so bsd.mp boots up on the ERL.
• Pass the routing domain to IPv6 pr_ctlinput() like in IPv4 for icmp6(4).
• Updated to nginx(8) version 1.4.1; enable the SPDY module by default.
• Fixed race between exit(3) and fork1(9) with threaded processes.
• Make hostaliases work for gethostbyname(3) and getaddrinfo(3) when looking into /etc/hosts.
• Made mg(1) "kill-paragraph" behave like emacs.
• Use a standard locale name in mandoc(1), "UTF-8" is an ugly non-standard alias that doesn't work on OpenBSD.
• Updated to libXrandr 1.4.1 and libXv 1.0.8.
• Hooked up slowcgi(8) to the tree.
• Use clock_gettime(2) CLOCK_MONOTONIC for ssh(1) timers so keepalives/rekeying will work properly over clock steps.
• Introduced ltrace(1). Works with ld.so to inject utrace(2) record for each plt call. Minimal filtering capabilities are provided.
• Added utrace(2), a system call allowing for userland to send its own ktrace(2) records.
• Adjusted mg(1) M-} (forward-paragraph) to behave like emacs.
• Return ROFF_TBL as soon as we open a mandoc(1) data cell, as it may never get properly closed but instead be interrupted by .TE.
• Don't set the Message ID for ldpd(8) "hello" messages, to match Cisco IOS.
• Always advertise the Router-ID as the transport address in ldpd(8) "hello" messages, as per RFC 5036, section 2.5.2.
• Added support for advertising route information (RFC 4191) to rtadvd(8) and icmp6(4).
• Fixed regression with BGP MPLS VPNs that got broken by recent reload related bgpd(8) commits.
• Fixed the build for a kernel without wd(4) and pciide(4) in its config(8).
• Updated to: libX11 1.5.99.902 (aka 1.6rc2); xfs 1.1.3; xinit 1.3.2 and libXext 1.3.2.
• Added getprogname(3) and setprogname(3), useful for some ports(7).
• Added the vmx(4) driver for vmware's VMXNET3 ethernet controller.
• Correct the range checks in ifconfig(8) properly for vhid, advbase and advskew.
• Stopped ping6(8) truncating trailing zeros from the round-trip times.
• Added tmux(1) host_short format.
• Updated to: appres 1.0.4; xrefresh 1.0.5; xwininfo 1.1.3; xdpyinfo 1.3.1 and bitmap 1.0.7.
• nginx(8) now also listens on IPv6 by default.
• Rename tpms(4), the driver for Apple USB touchpads, to utpms(4) because it is also used on some intel-based mac laptops.
• Added elantech v4 (clickpad) support to pms(4).
• Inform the mg(1) user about beginning / end of buffer in "previous-line" and "next-line".
• Make the system bell toggle-able via mg(1) "audible-bell", and if switched off, make available an alternative "visible-bell".
• Enabled Realtek 8211C(L) GbE phy with axe(4).
• Updated to: libFS 1.0.5; libxcb 1.9.1; libXau 1.0.8; libXcursor 1.1.14; libXfixes 5.0.1; libXi 1.6.3rc1; libXinerama 1.1.3; libXres 1.0.7; libXt 1.1.4; libXtst 1.2.2; libXxf86dga 1.1.4; libXxf86vm 1.1.3; libdmx 1.1.3 and libfontenc 1.1.2.
• Accommodate bge(4) E5/C600 and 5719/5720 PCI-E maximum payload size handling. Fixes RX path on 5719.
• Switched ldpd(8) to use a non-blocking connection so other LDP sessions and ldpctl(8) remain responsive.
• Stopped tmux(1) mangling top-bit-set characters when they passed to window_pane_key.
• Fixed use after free in case the vio(4) mbuf needs defragmentation, to fix a panic.
• When removing "dump (all|updates)" from bgpd.conf(5) and reloading, tell the session engine to actually stop logging.
• Export the original (aka untranslated) address in pflow(4), and also in the "af-to" case.
• Support relayd(8) SSL inspection, the ability to transparently filter in SSL/TLS connections (eg. HTTPS) by using a local CA that is accepted by the clients.
• Fixed bug in amd64 hibernate code (introduced when we moved the kernel to load at 16MB physical address).
• Change HTTP/1.x in the generated relayd(8) error messages, to HTTP/1.0. Required by Safari; makes it RFC-compliant.
• setsockopt(2) to see ifstated(8) messages for interfaces in all routing domains again, instead of just the primary one.
• Tied mkuboot utility into the build.
• Fixed ls(1) column padding of inode numbers and block counts >2^32, as well as display of directory block totals >2^32.
• Fixed bug when starting ldpd(8) with a configured interface in the down state so it is not promoted to ACTIVE.
• Fixed pci_min_powerstate() to return the current power state (not D3) if ACPI is not compiled in.
• Stop ldpd(8) trying to send hello messages if the interface is down.
• Simplified ldpd(8) hello holdtime calculation and stop the timeout timer if the holdtime is "infinite".
• Improve ldpd(8) sanity checks on received UDP messages: "PDU Length" now checked against what RFC 5036, section 3.1 specifies.
• ldpd(8) no longer uses a carp address as ldp router id because it is not unique.
• Do not allow SIOCSIFADDR on AF_INET6 sockets. Avoids possible local denial of service.
• 5.2 and 5.3 RELIABILITY FIX: Do not allow SIOCSIFADDR on AF_INET6 sockets. Avoids possible local denial of service.
  A source code patch is available for 5.2 and 5.3.
• Build fixed for sis (SiS and XGI video) driver under xserver 1.14.
• Make mkuboot install into the path so we can use it during builds.
• Updated inputproto to 2.3.
• Send correct ttl on outgoing bgpd(8) packets, so peer sessions can come up correctly if both sides use ttl-security.
• Removed make(1) cmtime again, but with a proper test for nodes without children.
• mandoc(1) now rejects non-printable characters found in the input stream, even when preceded by a backslash.
• pkg-config(1) error message for empty files now display the full path, in case the file exists in multiple locations.
• Make the mg(1) dired commands dired-flag-file-deleted, dired-backup-unflag and dired-unflag behave more like emacs when the cursor stays on the first character of the file name.
• Disabled bge(4) PHY auto-polling mode on anything newer than BCM5705. Fixes uplink negotiation on BCM5719.
• In mandoc(1) SYNOPSIS mode, fixed .Ek (it doesn't end a keep).
• Allow pkg_add(1) installpath to use +=.
• mg(1) dired mode commands "dired-copy-file", "dired-rename-file", "dired-create-directory" will now refresh the dired buffer.
• Reset be(4/sparc), brgphy(4), dcphy(4), mlphy(4), rgephy(4) and urlphy(4) autonegotiation timer when PHY gets the link, so that if we restart the timer the mii_ticks value will be sane.
• Correctly display rightmost tile when current resolution is not a multiple of the tile size in gbe(4/sgi) emulation (text) mode.
• Added dired commands and dired-create-directory to function maps in mg(1).
• Autodetect ipv6 addresses for route(8).
• Added ":B" to the list of options actually handled in PkgCheck.pm by pkg_add(1).
• Minimal support for MVME224 and MVME236 memory boards on mvme88k architecture; fixed MVME181 memory detection code.
• When recreating a tun(4) interface, set the IFF_RUNNING flag after the IFF_LINK0 flag has been added.
• Sync smtpd(8) with OpenSMTPD 5.3.2.
• Since audio code is mp safe, establish isa(4) and pci(4) audio interrupts with the IPL_MPSAFE flag, so interrupt handlers don't need to wait for global kernel_lock.
• Merge upstream fixes for several X(7) library vulnerabilities (integer overflows/buffer overflows/memory corruption).
• Change ttys(5) console speed to 115200 on octeon.
• Revert pms(4) Active PS/2 support for now, until solution found for pckbc(4) and gsckbc(4/hppa) chipsets that stopped working.
• Simplified cwm(1) grabbing keys per screen (during init) and during a MappingNotify.
• Put slowcgi(8) (a FastCGI to CGI wrapper) in, to work on it in-tree. Not hooked up to the build yet.
• Properly implement acpi(4) access to IndexField() field units.
• Allow auto-scaling encrypt(1) bcrypt rounds based on CPU power.
• Set correct route priority in bgpd(8) send_rt6msg. Fixes v6 routes being added to the kernel as RTP_DEFAULT.
• Shuffle mg(1) shell-command-on-region around to give shell-command.
• Check validity of cwmrc(5) mousebind buttons during the parse phase, not when client needs to grab (when it's too late); load the default config if this is invalid.
• Don't use BUS_DMA_WAITOK in the bge(4) bge_init path, since it might be called from a timeout(9).
• make(1) changes: use arc4random_uniform(3) to randomise queue; display debug timestamp with -ns; use clock_gettime(2) directly.
• Modified luna88k comkbd(4/sparc64) RAWKEY_XXX values, to input the right characters on Japanese keyboards.
• Synced libedit with upstream to fix: buffer growing, memory allocation for wide chars, and to handle return of mbstowcs(3).
• Fixed pty(4) descriptor leak occurring if fork(2) fails.
• Added driver for the am335x timers, to be used by the beaglebone.
• Fixed missing softraid(4) work unit state initialisations.
• Eliminate the need to change the cwm(1) menu window on every Xft(3) font draw; added support for _NET_WM_STATE_MAXIMIZED_{HORZ,VERT}, _NET_ACTIVE_WINDOW ClientMessage and _NET_WM_STATE ClientMessage.
• Make sure bgpd(8) addr.aid is actually available when first accessed.
• Remove "abort_task" from usb(4) task queue before recycling the containing structure, to avoid ehci(4), ohci(4) or uhci(4) panic.
• Switched cwm(1) border colours to Xft(3). If colour name allocation fails, revert back to default.
• Support .Bl -offset in mandoc(1) -mdoc -Tman.
• If pid<0, kill(2) no longer fails with EPERM unless none of the target processes could be signalled.
• Switched mvme68k to the machine independent wdsc(4/sgi) driver.
• Added more messages for when apmd(8) is entering suspend.
• Make mg(1) cursor position when moving backwards by paragraph behave the same as emacs (move it to line above paragraph).
• Fixed duplicate TouchBegin selection with virtual devices. Fixes gtk+3 applications crashing with "BadImplementation" error.
• Don't try to start an ssh-agent(1) via xinit(1) or xsession if $SSH_AGENT_PID is already set.
• Standardise logging of supplemental information during ssh(1) userauth, pushing all logging onto a single line.
• Fixed failure to recognise ssh(1) cert-authority keys if a key of a different type appeared in authorized_keys before it.
• /dev/ttyc is no longer special on sparc/sparc64 now that sun serial mice are handled by wsmouse(4); update ttys(5) and fbtab(5) accordingly.
• Build and install libgcov on gcc(1) version 4 platforms. Makes gcc -fprofile-arcs work again.
• On arm, make sure we executed an instruction before continuing to the next. Replaced calls to drain the write buffer with the correct ones for armv7.
• Fixed the "right-of-cursor background color is inverted when we do delete-after-cursor" bug on luna88k wscons(4) console.
• Preliminary support added for mvme88k MVME180 and MVME181 boards.
• nginx(8) security fix for CVE-2013-2028 (see http://mailman.nginx.org/pipermail/nginx-announce/2013/000112.html).
• Stopped binutils rejecting "++" and "--" in expressions, as some versions of gcc(1) emit these.
• Don't leak usb(4) information to userland in the case where the actual transfer length is smaller than the requested one and the USBD_SHORT_XFER_OK flag is set.
• 5.3 RELIABILITY FIX: Do not attempt to delete the undeletable RNF_ROOT route(4). This fix stops a kernel panic.
  A source code patch is available for 5.3. Matches the fix in -current.
• wsmoused(8) support added to drm(4) Intel i915 driver.
• nginx(8) security fix for CVE-2013-2070 (see http://thread.gmane.org/gmane.comp.security.oss.general/10173).
• Implemented wsmoused(8) support based on the new multiple screen support in rasops(9).
• If a directory exists when trying to create a new one, mg(1) will now warn the user.
• Update "cur_time" after poll(2) returns on dhcpd(8), as poll(2) might have slept for an arbitrary amount of time.
• Implemented mechanism to establish interrupt handlers that don't grab the kernel lock upon entry on i386/amd64.
• Run audio interrupts without grabbing the kernel lock on sparc64.
• Added the ability to ignore specific unrecognised ssh_config(5) options; bz#866.
• Add an optional second argument to ssh(1) RekeyLimit and sshd_config(5) to allow rekeying based on elapsed time in addition to amount of traffic.
• If an /etc/apm/* program fails, apmd(8) will now log the failure and error message.
• Allow m88k and mvme88k to correctly printf(3) or panic(9) early on unrecognised systems.
• Updated nginx(8) to 1.2.9; several bugfixes, security fix for CVE-2013-2070.
• Don't let tmux(1) cursor position overflow when reflowing.
• Introduced a global interrupt-aware mutex protecting data structures (including sound-card registers) from concurrent access by syscall(9) and interrupt code-paths.
• Added support for intel(4) E7221 integrated graphics.
• Pass the correct pointer to pool_put(9) if pf_state_key_attach fails.
• Removed "swapin" and "swapout" from uvm(9) statistics (as we haven't swapped out of uvm(9) for a few years); don't display swapin/swapout uvmexp fields in systat(1), vmstat(8) or rpc.rstatd(8).
• make(1) now keeps track of age of the youngest child process. Helps with out-of-date messages in -dm mode.
• Stopped the line buffer being potentially accessed out of bounds when ^W (WERASE) is used in vi(1) insert mode.
• pkg_add(1) PackingElement.pm samples should never alias specialfiles, so error out right away.
• Added sparc64 support for running interrupt handlers without taking the kernel lock (via bus_intr_establish(9) interface). Used only by schizo(4/sparc64) for now.
• Added an implementation of memmem(3).
• Make sure the global IPv4 address list and the per-interface list remain in sync even when SIOCAIFADDR or SIOCSIFADDR ioctl(2) have not been issued.
• Where we have a KMS driver (currently inteldrm(4) only) wsdisplay(4) now switches from X back to console screen upon entering ddb(4) .
• In wsdisplay(4), make sure it really is the console before attempting to switch screens.
• Handle big (a.k.a. >2TB) disks by adding logic to handle the 12 and 16 byte scsi read/write commands on sparc64.
• Removed use after free the in case where the vio(4) mbuf needs defragmentation. Fixes a panic.
• Make easier to stop taking the kernel lock when running "mp safe" interrupt handlers on i386/amd64/sparc64.
• S-Records boot loader added to mvme88k. Allows kernel to be loaded from network, using either the on-board interface (on MVME187 and MVME197) or any MVME376; added MVME376 support to netboot.
• Fixed sndiod(8) check for whether a midi port is referenced (which sometimes caused the port to be closed prematurely); use order specified by -q to order the exposed midi ports.
• Swapped cwm(1) x/y calculations in kbd move/resize, to match those in the respective mouse functions.
• Set trunk(4)'s MTU to that of the first trunkport. Allows trunk to work with jumbo/baby-jumbo frames.
• Fixed dhclient(8) subnet check: check our rdomain against the rdomains of the other interfaces, not against our own.
• Bail if device_lookup doesn't find anything, to bring vscsi(4) in line with other drivers.
• Sync state key pointers with pf_state_key_attach values. Stops pfsync(4) inserting garbage addresses into packets when there is a state key collision.
• Added support for future time_t and ino_t size enlargements to compat_linux(8).
• Fixed memleak in ssh(1) cert_free(), which wasn't actually freeing the struct; bz#2096
• Fixed ssh(1) bzero(ptr_to_struct, sizeof(ptr_to_struct)); bz#2100.
• Do not panic when running the MP kernel on a single-processor mips64 systems.
• Allow gdb(1) on m88k to fetch symbols from shared libraries when debugging dynamically linked binaries.
• Added driver for the OMAP identification registers/fuses, so we can adjust the timer frequency per PandaBoard version.
• Ported arm dma sync code (from NetBSD). Makes it easier to flush the secondary cache, as we always have the physical address.
• Backported fix for gcc(1) PR target/31152 on arm: match the correct operand for optimised LT0 test; removed optimisation for GT.
• Reset uthum(4) device on detach (required for planed usb device claiming).
• Correctly compute packet size when including DNS search lists in rtadvd(8); fixed a comparison when building a packet with DNS search lists.
• Fixed an uninitialised variable access in intel_ddi_prepare_link_retrain() in intel(4) i915 code (patched from upstream).
• Fixed some leaks in mfi(4) error paths.
• Re-commit uthum_activate() removal in uthum(4), now that uhidev(4) can handle it.
• When a fork(2)'d child process (whose parent set SA_NOCLDWAIT or ignored SIGCHLD) is exiting, unconditionally wake parent instead of doing this only for the last child.
• Prevent a chunked HTTP connection stalling relayd(8); use a 64 bit variable to allow (theoretical) large chunks.
• Don't limit tmux(1) width and height to 222 in standard mouse mode.
• When deactivating usb(4) child devices do not panic if their driver does not implement an *activate() function.
• Fixed a double free in an ami(4) error path.
• Warn and load defaults when negative values are specified for borderwidth, moveamount, snapdist or gap in cwm(1).
• Show list of mismatched "for" loops when a fatal error occurs in make(1).
• Workaround faulty cycles-per-second readings on i386 and amd64; fallback to rdtsc if cpuspeed reported as 0.
• Fixed sndiod(8) channel mappings being wrong when the client has not specified the channels.
• Record the time a lease is bound to an interface so the correct dhclient(8) process survives a netstart(8).
• Initialise client rate to fix sndiod(8) crashes when the client doesn't set the rate.
• Provide smtpd(8) with a way to encrypt envelopes and messages using aes-256-gcm before they hit the queue. Not activated yet.
• Make sure we allocate outside the Legacy Address Range on intel(4) i915. Gets rid of the "no ifp" warning on the x41.
• Fixed use after free in the error paths of kerberos(8), ldconfig(8) and ldpd(8).
• Use a blacklist detecting non-regex patterns so more are covered by the fast grep(1) code.
• Use open(2)/fstat(2) instead of stat(2)/open(2) for checking proper permissions of "local" .exrc or .nexrc files in vi(1).
• Switched the malloc(3) and pool freelists to using xor simpleq. Adds a tiny bit more protection from list manipulation.
• Export ingress/egress interface index in pflow(4). Needed for some netflow collector and tests.
• Fixed mem leak in swapmount.
• Fixed resetting MB_CUR_MAX when switching locales away from a UTF-8 locale.
• Updated xf86-input-keyboard to 1.7.0 and xf86-input-mouse to 1.9.0.
• Start dbus-launch in a consistent way in xinitrc and Xsession.
• Only redraw the name/size box when the client resizes, not every time there's movement; improves cwm(1) resize syncs.
• Always attach the mfi(4) battery sensor if the adapter lets us query it, so newly replaced batteries show up immediately.
• Added secure monitor call function for arm/beagle, so a secondary cache controller driver can talk to its controller properly.
• Disabled PandaBoard's L2 Cache early on bootup (it re-enables later once it is ready).
• Fixed a case on arm where we might be cache flushing unmapped pages.
• 5.3 RELIABILITY FIX: for flaw in vr(4) driver where it did not recover from some error conditions. A source code patch is available.
• Provide a sensor for the battery backup unit (bbu) on the mfi(4) boards that support it.
• Added a cortex bus which represents the ARM MPCore Complex (attaches to ARM Cortex A9 and A15 SoCs).
• On intel(4) i915, clear the correct pixels when scrolling backwards.
• Use ARMv7 access permission bits on the beagle architecture.
• Handle newer fibre adapters the same way as em(4) 82575/82576. Required to make 82580 (i340) and i350 based adapters work.
• Made ypldap(8) ignore SIGPIPE so it doesn't fail if an ldap connection breaks.
• Removed most of the pre-rc.d(8) backward compatibility (see /faq/current.html#20130429).
• Updated ulpt(4), as it now depends on firmload (since its rev 1.41 that adds support for uploading HP LaserJet firmwares).
• Implemented identd(8) -h, used to hide usernames/uids (as in libexec/identd).
• Preliminary modifications for Xorg 1bpp server for luna88k, including enabling wsmux(4) on GENERIC kernel.
• Reverted fix for binutils linker errors (breaks the xenocara build on macppc; fixed in binutils 2.17 anyway).
• Updated libX11 to 1.6RC.
• Updated xproto to 7.0.24
• Improved dealing of ARMv7 faults. Added ARMv7 fault descriptions.
• Use strptime(3) for parse_date() and date writing logic for dhclient(8) (to match dhcpd(8)).
• time_t 64bit fixes for relayd(8) and relayctl(8).
• Convert softraid(4) RAID 4/5/6 to new work unit completion routines.
• Fixed binutils linker errors when using llvm/clang (see http://lists.gnu.org/archive/html/bug-binutils/2004-07/msg00000.html).
• Added the ability to change ARM frequency and added match functions on beagle.
• Added GPIO support for the pandaboard.
• Added a terminator to the device list, to avoid unexpected behaviour when a device isn't found by beagle.
• Correctly enable ARM's Generic Interrupt Controller on beagle.
• Fixed range for assigned ports managed by the IANA (see RFC 1700) in pf.conf(5).
• Added tstohz(9) as the timespec analog to tvtohz(9).
• When a ucom(4) is removed, walk the knotes in ttyfree(). Fixes crash when unplugging a ucom(4) which cu(1) is running.
• When attaching disks, feed the disklabel(8) checksum to the random(4) pool as unique-esque-but-not-secret data.
• Use the manufacturer-supplied bios serial/uuid as a source of uniqueness to seed the random(4) pool on i386/amd64.
• Disabled sendmail(1) ident queries since ident(1) does not run by default anymore.
• Increase ip_ttl on packets from 16 to 128, so people living many hops from their dhcp(8) server can still get leases.
• Support src/libexec/identd's -e option in src/usr.sbin/identd(8).
• Speed up ffs disk access a little and fsck_ffs(8) substantially (see: www.mckusick.com/publications/faster_fsck.pdf)
• Reworked tee(1) to simplify, check errors against -1, remove casts, etc.
• Removed TIMESTAMP abstraction layer in make(1); adapt to time_t being 32 bits OR 64 bits.
• Convert softraid(4) RAID 4/5/6 to new ccb handling.
• Removed rarely-used identd(8) option for specifying which port you want to run on.
• Added identd(8) support for returning uids instead of usernames via -n, like libexec identd.
• Added identd(8) -N to let users put .noident in their homedir, to return HIDDEN-USER instead of their username.
• When using choose-tree -u, start with the current tmux(1) window highlighted.
• Get tmux(1) session of -t window rather than client's window.
• When dhcpd(8) is sync'ing, look for lease by hwaddr and then ipaddr. Fixes loops while sync'ing.
• Call recalculate_sizes() after killing a tmux(1) window, in case it is in a grouped session.
• Do not die when identd(8) parent process has a backlog of requests for the child process.
• Handle large time_t correctly in ray(4) debug code.
• Check for underflow before using ffs2 blockcount, as it is unsigned.
• Corrected tv_sec handling in scsi(4) mass storage debug code.
• Avoid truncating a pfctl(8) time_t division into days.
• Use arc4random_uniform(3) in mrouted(8).
• Don't let tmux(1) server_client_check_focus use a dead bufferevent.
• Let rtsold(8) handle exceedingly long uptimes; reset IPv6 timers upon reaching 2038.
• gio(4/sgi) now allows smaller-than-32-bit accesses to the ID register (on boards with 32-bit ID register) for better device detection.
• Unify the zs(4/macppc) tty driver across macppc, sgi, solbourne, sparc and sparc64 architectures.
• Convert softraid(4) RAID1 to the new work unit completion functions and generic interrupt handler.
• Unbreak edquota(8) by fixing the temporary file name template.
• Made umount(8) via DUID possible.
• When mount(8) is run in verbose mode, display f_mntfromspec if it differs from f_mntfromname.
• Disabled inetd(8) by default.
• On getty(8), use poll/nanosleep instead of select with a fixed size fd_set.
• Reverted rev 1.45 of usr.sbin/procmap/procmap.c.
• Stopped using unsafe random(3) in npppd(8), use arc4random(9) instead.
• Made i2c bit-banging code work with slow slave device (eg SDVO chips and DDC eeproms) found on some inteldrm(4) hardware.
• Cranked C_MAXFILE static limit of files to serve in rbootd(8). Existing limit of 10 is too small for some networks.
• Disabled time service (RFC 868) by default in inetd(8).
• Enabled active PS/2 multiplexing if available. Supported for i386 and amd64 except SMALL_KERNEL.
• Fixed npppd(8)'s PPPoE server, which was broken since last configuration rework.
• Added -o option to getopt string and usage in rdate(8).
• Use time_t instead of long for binutils archive timestamps, and print them as a long long.
• Disabled cpu migration code when on single processor systems.
• Log (at LOG_INFO) which interfaces dhcpd(8) listens to, and their addresses.
• Made rdate(8) -n the default; added -o flag for the old RFC 868 time protocol (which uses a 32-bit value for its wire protocol).
• For datagrams, inetd(8) now assumes other protocols should fail.
• ksh(1) now handles long long time_t.
• Added ksh(1) support for printing long long (%lld).
• find(1) now handles large numbers. Fixes time_t beyond 2038, constrains the range of i_num correctly, and now handles files > 4GB in size on 32-bit machines.
• Matched vacation(1) behaviour to current sendmail-based vacation.
• Make sure the fs blocksize doesn't get too big when using disklabel(8).
• Made rtsold(8), rpc.lockd(8) and rtadvd(8) print tv_sec properly.
• Added the ability to query supported ciphers, MACs, key type and KEX algorithms to ssh(1).
• Fatal() ssh(1) when ChrootDirectory specified without root privileges (reintroduced without previous connection-killing bug).
• Fixed some ssh(1) memory leaks; bz#2088.
• Improved netstat(1) time_t handling and printing.
• Made ssh(1) "sftp -q" behave as documented and hush everything but errors.
• Accelerated scrolling backwards for intel(4) i915.
• Made ar(1) and ranlib(1) handle greater time_t, so that .a files will work after 2038.
• Added intel(4) i915 support for 16bpp mode to code that interfaces with the rasops(9) code.
• Print "UTC" at the end of dates in the dhcpd(8) leases file.
• Replaced hand-rolled date printing/parsing code in dhcpd(8) with strftime(3)/strptime(3).
• Resolver now checks return value of strdup(3) and take into account that asr_use_resolver() can return NULL; fixed mem leak in error path.
• Don't set the frequency of the statclock if we don't have one on amd64 and i386. Prevents strange hangs during reboot.
• Don't permanently avoid BRKSIZ gap for mmap(2). Allows some platforms, notably i386, to fully utilise their address space.
• Check memory pool we are about to init isn't already on the list, in order to detect double init and double destroy mistakes.
• Unbreak and cleanup nfsd(8) diskless swap automount.
• Adapted cron(8) and at(1) for future large time_t and tv_sec types.
• Variety of fixes to correct large time_t code in file(1).
• Long long and %lld for time_t output added to tmux(1).
• Add new ioctl command USB_DEVICE_GET_DDESC to usb(4) to retrieve the device descriptor.
• Reverted usr.bin/ssh/session.c rev 1.262 (it fails because the uid is already set there).
• Handle large time_t for kdump(1), sysctl(8), rtsold(8), csh(1), time(1) and mtree(8).
• Added secondary cache flushes to armv7's pmap(9).
• Correctly allocate a buffer for a uhci(4) transfer; do not pre-allocate TDs to put them in the free list.
• Pass state correctly so pkg_add(1) can do error messages.
• Fixed some AVPs of SCCRP to comply RFC 2661 in npppd(8): firmware revision and vendor name AVP are not mandatory; hostname AVP must have 1 octet at least.
• Fixed panic when pipex(4) session is terminated by idle timer.
• Stopped existing authentication being removed when the npppd.conf(5) configuration is reloaded.
• Fixed npppd(8) configuration options "max-session", "user-max-session", "strip-nt-domain" and "strip-atmark-realm".
• Fixed npppd(8)'s pppoed, broken since the last configuration parser change.
• Use the dd(1) and ed(1) that are on the install media, instead of the one post-install.
• Removed CTL_USER hierarchy from sysctl(3) and sysctl(8) (use sysconf(3) or confstr(3) instead).
• Implemented fdatasync(2) as a wrapper around fsync(2).
• Added SHA-224 to cksum(1). SHA-224 is to SHA-256 as SHA-384 is to SHA-512, and was in a later revision of FIPS-180.
• Backed out rev 1.17 of lib/libc/rpc/svc_tcp.c and its conversion to poll (to avoid endless loop).
• Reverted pckbc(4) sys/dev/pckbc/pms.c r1.37, now that we stop after the first matching protocol.
• Moved pckbc(4) IntelliMouse protocol definition after Elantech ones (some touchpads support both, we want to pick the latter).
• Stopped pckbc(4) probing for all supported protocols. It confused some touchpads and made it harder to pick the right protocol if a device answers to more than one magic sequence.
• Added escape codes for F21 to F24 to wscons(4).
• Support added for F13-F24 keys found on IBM 122-key pckbc(4) keyboards.
• Unbreak tape boot blocks on mvme68k (broken since the switch to the MI libsa loadfile code).
• To speed scrolling, framebuffer acceleration now uses the registers to determine first visible pixel; works even while X is running, and safely scroll when printing panic messages or if we've entered ddb(4).
• Added new option to xenocara to automatically build the Gallium3D software rasteriser as part of the libGL.
• Make sure drm(4) turns hsync/vsync back on at crt enable (v2) for intel i915 chipsets.
• Perform a warm reset instead of putting hardware into full sleep mode to avoid system hangs upon "ifconfig down up" with some AR5212 hardware.
• Fix cnmac(4/octeon) log messages displayed to the user.
• Remove some Korean characters from the tmux(1) utf8 zero-width list that shouldn't be there.
• Copy the tmux(1) client into the new cmdq in source-file so commands that work on it (such as new-session) can work.
• Enable the fallback method of getting the crt EDID on drm(4) if normal gmbus access fails for the intel i915 chipsets.
• Unbreak dhcpd(8) lease synchronisation by making the sync header contain the correct packet length even when padding is present.
• Call setlocale(LC_TIME) at tmux(1) startup.
• In the resolver, avoid a mem leak and reinit of context for each resolver call for single threaded programs.
• Send an SGR0 after turning on modifyOtherKeys, to fix tmux(1) Terminal.app which treats \033[>4;1m and \033[4;1m (bold+underline).
• Copy out a blank string if no wmesg, so userland can rely on reading sysctl(3) p_wmesg[0] and not find junk leftover from before.
• Quieten disconnect notifications on the ssh(1) server from error() back to logit() if it is a normal client closure; bz#2057.
• Fixed bug introduced in last commit, which led to pax(1) checking the typeflag after already overwriting it.
• Correctly handle data memory protection ID traps on hppa.
• compat_linux(8) fixes: assert that refcount is larger than 0 when doing futex_put; prevent multiple futex pool initialisations.
• Set EV_WRITE for jobs so tmux(1) run/if-shell jobs don't hang.
• Fixed tmux(1) bug where end guard in control mode was not printed after session destroyed.
• Get the standard path for which(1) and whereis(1) from _PATH_STDPATH instead of sysctl({CTL_USER,USER_CS_PATH}).
• Added a magic number to the head of the signature block to prevent accidental unhibernates and endless unhibernate/reboot cycles.
• newvers.sh uses "basename" for directory name to stamp the kernel version ID with. Permit paths with spaces in the name.
• Added extended header support for ustar in pax(1). Currently only path and linkpath are handled.
• Retry ftp(1) when SSL_read fails with SSL_ERROR_WANT_READ. Fixes the case where a https server attempts renegotiation.
• Show what was parsed in resolver debug output.
• Resolver will not fail anymore if the user buffer is too short to hold the packet: fill it to the given size, return the packet length.
• Plugged cmw(1) memleak: always need to menuq_clear even when a selection is made.
• Recalculate IP/protocol checksums of packets (re)injected via divert(4) sockets.
• Add new ioctl's USB_DEVICE_GET_CDESC and USB_DEVICE_GET_FDESC to usb(4).
• Allow octeon to find it's root device, based on the flags passed by U-Boot. Temporary fix until there are proper bootblocks.
• Made the resolver comply with RFC2553. Fixes hostname resolution for OpenVPN 2.3.1.
• Make the netinet6 SO_BINDANY socket option also work for raw IPv6 sockets.
• Check BGE_SGDIG_STS when the bge(4) chip is NOT a 5717 A0.
• Added an -E option to ssh(1) and sshd(8) to append debugging logs to a specified file instead of stderr or syslog.
• Turn a npppd(8) error into a warning to be able to start l2tp tunnels even if gre(4) is not allowed.
• Removed the rthreads sysctl(8), as they are always enabled.
• The new resolver will now not fail on EINTR.
• Extend com(4) to enable com3 on both i386 and amd64 (com4 config is added, but disabled).
• Cleanup ssh(1) mux-created channels that are in SSH_CHANNEL_OPENING state too (in addition to ones already in OPEN); bz#2079.
• Use the existing _PATH_SSH_USER_RC define to construct the other ssh(1) pathnames; bz#2077.
• Added gcc(1) support for "d" floating-point suffix, as defined by draft N1312 of TR 24732.
• Do not allow the listen(2) syscall for an already connected socket, as this would create a weird set of states in TCP.
• Fixed ufs bug where clear_remove() and clear_inodedeps() would not iterate over the entire pagedep and inodedep hash tables.
• Snapshots for the octeon platform are available now.
• Show only available actions in rc.d(8) script usage messages. Also, clean up the display of actions list.
• Make the resolver properly follow the CNAME chain in reverse lookups.
• Use MSG_NOSIGNAL when writing DNS queries over TCP sockets to ensure resolver doesn't trigger SIGPIPE.
• Honour PATH search order for cwm(1)'s exec.
• Other window managers grab the Xserver(1) during the whole client setup process, so make cwm(1) match. Avoids race conditions.
• Make it possible for ldomctl(8/sparc64) to explicitly specify the number of vcpus and the amount of memory for the primary domain. Also prevents people mistakenly creating two domains named "primary".
• Fixed drm(4) EDID detailed timing vsync parsing and frame rate.
• Backout drm(4) commit, which introduced a bogus check that could lead to an infinite loop in some eDP setups.
• Reverted rev 1.21, to fix a race condition where multiple mkdir(1) -p's trying to create overlapping paths in parallel could error out.
• Re-implemented tcp_read() in the resolver, so it can get the packet length in multiple reads.
• Have tht(4) set IFF_ALLMULTI when in promisc mode.
• Set the nxe(4) IFF_ALLMULTI flag as appropriate.
• Removed Evergreen IDs incorrectly added to radeon(4) radeondrm in the past.
• Changed smtpd(8) log format to fix a warning.
• A large number of subsystems and utilities adjusted to use large time_t.
• acpithinkpad(4) now ignores power change event from the newer thinkpads groups.
• Allow raw IPv6 sockets for ipsec(4) protocols, to match IPv4.
• If more than one lookup line is found in resolv.conf(5), the latest one takes precedence.
• The resolver will now properly check for domain name truncation at various places and fail if that happens.
• Build mips kernels with -G 0 so it will link.
• Updated ldomctl(8/sparc64) for some UltraSPARC T2 firmware which need "rngs" and "rng" nodes in the Hypervisor machine description.
• Avoid sdiff(1) memory leak while parsing diff's output.
• Enable the use of getaddrinfo() in libxcb, to allow X11 clients to talk to a remote server over IPv6 again.
• Added octeon as a supported hardware platform.
• Fix so the hp300 boot blocks compile again.
• Validate the softraid(4) crypto I/O request when it is first received, rather than waiting until disk I/O is performed.
• Make setrlimit(2) return EINVAL if rlim_cur > rlim_max, per POSIX.
• Added a default .cvsrc for cvs(1) to /etc/skel.
• Implement nameserver retry/backoff as in the old resolver(3).
• getaddrinfo(3) is now thread-safe.
• Use i2c bit-banging on the SDVO port for intel(4) i915, rather than using buggy GMBUS. Makes more digital video ports (DVI, HDMI) work.
• Unbreak the build on amd64 by making sure that inteldrm pulls in the generic i2c bit-banging code.
• Put back a space that got lost in fstat(1) state output.
• Do not transfer diverted packets into ipsec(4) processing, let them reach the socket the user has specified in pf.conf(5).
• Revert alpha and ppc to the binutils 2.15 state, to let a binutils 2.17 toolchain produce working binaries.
• Allow "0" as service name for raw sockets in getaddrinfo(3).
• Stopped async_resolver(3) assuming a local nameserver if resolv.conf(5) doesn't exist, and just use /etc/hosts.
• Unbreak drm(4) EDID fetching over displayport.
• Two fixes to drm(4) intel_sdvo_write_cmd(): allocate a large enough buffer to store messages; make sure we return true if we successfully transferred the command. Makes it possible to talk to the SDVO chip on the other end.
• In getent(1), use getaddrinfo() to display multiple addresses including IPv6.
• Prevent some undesirable interactions between using the brightness keys and wsconsctl(8) on the Dell XPS M1330.
• Restrict protocol numbers for raw sockets to the range from 0 to 255.
• Have smtpd(8) temporarily refuse new messages if file system holding the queue has less than 10% of disk space or inodes left.
• Fixed a ftp(1) memory leak during HTTP header parsing.
• Revert to the old method of intel(4) execbuffer pinning for i915.
• Provide a default softraid(4) discipline interrupt handling function and migrate all of the disciplines that now have the same interrupt code.
• Added function to read the MPCore base address on arm. Allows dynamically determining where e.g. the interrupt controller is.
• Correctly show the scope for IPv6 addresses in getnameinfo(3).
• Stopped the resolver failing in gethostbyname_async() when there are multiple addresses in a DNS packet.
• Prevent race conditions in smtpd(8) db file handling.
• Allow snmpd(8) to be put into read-only mode so that all "set" requests will be rejected.
• Fixed some missing sd_sync check/wakeup after scsi_io_put() calls in softraid(4).
• Fixed building urtwn(4) on the RAMDISK media.
• Prevent panic during rtsx(4) attachment if a card is inserted while booting and the interrupt handler triggered before sdmmc(4) is attached.
• Let mii_attach() know where the bnx(4) PHY is located (instead of scanning for it) since we know where it will be anyway.
• Switch to the new resolver implementation.
• Enable fmemopen(3), open_memstream(3) and open_wmemstream(3).
• If tmux(1) -s to swap-pane is not given, use the current pane.
• Make tmux(1) copy-mode -u still scroll up if already in copy mode, handy for people who bind it with -n.
• Let the new resolver accept and use any protocol specified by the caller.
• expr(1), csh(1) and ksh(1) will no longer die with SIGFPE on INT_MIN / -1 or % -1. Instead, INT_MIN / -1 == INT_MIN and % -1 == 0.
• Enable pax(1) support for write_opt=nodir for ustar archives. For tar archive readers that rely on appended "/".
• Added an open_wmemstream(3) implementation and fixed various issues for fmemopen(3) and open_memstream(3).
• Rewritten work unit handling code in the softraid(4) RAID 1/4/5/6 interrupt handlers. Ensures that work units are always removed from the pending queue and that colliders are started, even in the event of an I/O failure.
• Move the tmux(1) cursor back into the last column on CUU/CUD, to match xterm(1) behaviour.
• Make sure the new resolver only uses the search domains for DNS lookups, as the previous resolver did.
• Short-circuit screen switching on intel(4) i915 if we're switching to the screen that's currently active.
• Stop pci(4) rePOSTing devices supported by inteldrm(4), as the driver now properly restores the graphics mode.
• Added AES-XTS support to aesni crypto(4) driver on amd64. Allows softraid(4) to benefit from the AES-NI instructions on newer Intel CPUs.
• Only accept partial keys if the timer has not expired. Fixes infinite tmux(1) loop when escape is pressed the wrong number of times.
• During upgrade network setup, print friendlier error message if dhclient(8) is required but missing.
• Avoid null dereference affecting mod_perl, perl(1) RT bug 116441.
• Imported perl(1) 5.16.3 from CPAN.
• Added basic support for multiple screens to rasops(9), use this to provide proper virtual terminals to intel(4) i915.
• Fixed libkvm build on m68k.
• tmux(1) will try to establish client for run-shell and if-shell if no -t.
• Reverted the tmux(1) command-prefix change, which broke sequences of commands.
• Reseed the random(4) pool with the dmesg(8) when more devices are attached.
• Sync ospf6d(8) with ospfd(8): allow two minutes until neighbour adjacencies are formed; for point-to-point interfaces, send lsupdates to the interface address (since there is no DR and multicast messages to the DR will be ignored); improve snapshot handling.
• Create a new context when copying instead of using the (possibly nonexistent) input context. Fixes tmux(1) crash.
• Display the window's column number in the mg(1) mode line, not the column number of the active window.
• Write escaped tmux(1) output in control mode rather than hex.
• Allow tmux(1) to handle empty pending output (and not fail), and add \n.
• When only two panes are in a tmux(1) window, only draw half the separating line as active.
• Don't let tmux(1) display-message crash if no client.
• tmux(1) will now only send end guard if begin was sent.
• Process "^[" as meta when a partial key is found by tmux(1).
• Record when the buffer was saved in the mg(1) undo history.
• Handle "no client" better in tmux(1) display-message.
• Don't zoom windows with one tmux(1) pane.
• Correct line numbers for mg(1) undo-list.
• Added home and end (as modified by xterm) in tmux(1) keypad mode.
• Don't add prefix to tmux(1) %output pane id.
• Fixed tmux(1) if-shell and run-shell if there are no sessions.
• Added time and a command count to tmux(1) control mode guards.
• Fixed handling of short (< 4 character) checksums and a bug with parsing old-style custom tmux(1) layouts.
• Do not redraw tmux(1) panes if invisible.
• Add tmux(1) wait-for -L and -U for lock and unlock.
• Added tmux(1) wait-for command which blocks a client on a named channel until it is woken up again (with wait-for -S).
• Allow lastgc to be NULL in grid_string_cells so tmux(1) find-window doesn't crash.
• Preserve trailing spaces with tmux(1) capture-pane -J.
• Add tmux(1) -q flag to silence errors to capture-pane and show-options.
• Add -a to tmux(1) capture-pane, to capture alternate screen.
• Updated drm(4) libdrm to 2.4.42.
• Do not let pstat(8) or fstat(1) leak kernel pointers, unless operating as root.
• Added tmux(1) -A flag to new-session, to make it behave like attach-session if the session exists.
• Added resize-pane -Z to temporarily zoom/unzoom the active tmux(1) pane.
• Added a -o option to set-option, to prevent tmux(1) setting an option already set.
• Add a tmux(1) command queue to standardise and simplify commands that call other commands.
• Allow tmux(1) to handle focus events from the terminal.
• Expand format variables in the tmux(1) run-shell and if-shell shell commands.
• Added option command-prefix which is automatically prepended to any tmux(1) command (apart from a naked default-shell).
• Added support for focus notifications when tmux(1) pane changes.
• Reverted revision 1.138 of bsd.own.mk and switch amd64, i386, arm, sh and sparc64 back to binutils 2.15.
• Fixed bug in ld(1) --gc-sections to stop it stripping out .note sections. Unbreaks building chromium with binutils-2.17.
• dhclient(8) will now ignore client-identifier option sent by the server and instead record the local client-identifier used to obtain the lease, or construct one. Stops confusing servers when renewing a previous lease from a different MAC.
• Stop dhcpd(8) including the client-identifier option in OFFER or ACK messages, as per RFC 2131 4.3.1.
• Add tmux(1) -C and -J to capture pane to escape control sequences and to join wrapped line.
• Clear last attributes after reset in tmux(1) string_cells.
• Fixed tmux(1) so capture-pane/save-buffer can work in control clients.
• Add tmux(1) copy-pipe mode command to copy selection and also pipe to a command.
• Add -e flag to tmux(1) capture-pane to include embedded ANSI SGR escape sequences.
• Allow ospf6ctl(8) and ospf6d(8) use of an alternative control socket, ported from ospfd(8).
• Added resize-pane -x and -y to specify an absolute tmux(1) pane size.
• tmux(1) can now correctly handle UTF8 mouse option being toggled.
• In terminals with XT, tmux(1) activates/handles modifyOtherKeys=1 with the escape sequence, pass them through if xterm-keys is on.
• Reinstate ospfd(8) code to announce routes to backup carp interfaces, so that a specific route is maintained during failover.
• Stopped sysmerge(8) outputting a warning when the target of the link does not yet exist on the system.
• Backported fix to permit "xrandr(1) --output LVDS1 --mode 1280x800 --panning 1380x1024 --scale 1.8x1.8" to behave properly.
• Fixed tmux(1) non-prefixed bindings.
• Include the \033 in the tmux(1) key tree and adjust key matching for this change.
• Support tmux(1) capture-pane -p, to send to stdout.
• Detect on-die temp sensor for Atom E6xx on amd64.
• Add tmux(1) -c to refresh-client, to set client size in control mode.
• tmux(1) will no longer crash when calling choose-tree with a command that changes the mode.
• Add tmux(1) user options, prefixed with @. May be set to any arbitrary string.
• Add tmux(1) -v to set; and "setw" to show only option value.
• Allow formats in tmux(1) status options.
• Show alias in tmux(1) lscm output.
• Allow choose commands to be used outside tmux(1), so long as at least one client is attached.
• Fixed detection of the MAC address on cnmac(4/octeon) by reading it from the correct address.
• Use boot_info->config_flags to determine if the host has PCI capabilities. Fixes a hang on the EdgeRouter Lite.
• Enable drm(4) opregion code. Makes the brightness keys on x230 work.
• Correctly issue WSKBDIO_GETDEFAULTKEYREPEAT ioctl when wsconsctl(8) is getting the default repeat settings.
• 5.2 RELIABILITY FIX: Allow tftpd(8) to OACK and stop a segfault occurring.
  A source code patch is available.
• Switched amd64, arm, i386, sh and sparc64 to binutils 2.17.
• Previous commit to i386/amd64 acpi_machdep.c broke suspend, now fixed by using the IPI that halts the CPU to save state.
• As non-root, whenever netstat(1) is about to print out a kernel pointer, print 0x0 instead.
• Only root can look at the kernel address space with procmap(1) now.
• Don't shutdown nc(1)'s network socket when stdin closes. Matches both GNU and Hobbit's netcats; -N reverts to old behaviour.
• Do not allow netstat(1) to expose a kernel address.
• Fixed return value of i2c_algo_dp_aux_exec, so getting the Extended Display Identification Data on displayport now works.
• When non-root asks sysctl(3) for kinfo proc or file requests, do not fill in any kernel addresses information.
• Do not touch the jumbo replenish threshold register on bge(4) chips that do not have jumbo support.
• Added a ruby20 FLAVOR to ruby-module(5).
• Don't advertise brightness control if it isn't supported by intel(4) i915 hardware.
• Added an OpenBSD-specific implementation of xf86-video-intel backlight control that uses the appropriate wscons(4) ioctls.
• Fixed race condition in socket splicing timeout which caused a uvm fault in sounsplice().
• Fix sudo(8) use_loginclass, backport from upstream.
• Updated to xf86-video-intel 2.20.19.
• Stop probing once touchpad detected. Stops pms(4) driver "not in sync yet" messages after attaching to elantech v2 hardware.
• Update intel(4) and the device-independent drm(4) code. Includes support for kernel modesetting and enables use of the rings on gen6+ Intel hardware.
• Updated sqlite(1) to 3.7.15.2.
• Provide a way for *drm(4) to prevent VGA text console wsdisplay(4) instance from attaching after it has control of the VGA hardware.
• Backout radeon(4) xf86-video-ati workaround for broken accelerated solid pictures with XAA on big endian architectures, and apply the correct fix (working at depth 16 and 24).
• Limit the identd(8) client to 256 bytes of input. If they send too much, just close the connection.
• Timeout based on the whole identd(8) session, not after every read/write. Stops clients from consuming fds on the server.
• Handle EMFILE/ENFILE from accept by disabling handling of events on the identd(8) listeners for a second.
• New identd(8) daemon, to replace the libexec one often run from inetd(8). An event driven non-blocking implemention.
• Added an interface to rebind agp(4) DMA mappings. For KMS to reload bindings after suspend/resume.
• Set glxpcib(4/loongson) "Power Immediate" bit upon attaching, so Fuloong can auto restart upon power failure.
• Updated nginx(8) to 1.2.7.
• Correct the clock speeds used to calculate int moderation values provided by the SK_IM_USECS() macro on msk(4) and sk(4).
• Added workaround for HW bug in bge(4) BCM5717/BCM5718/BCM5719-A0/BCM5720-A0 chipsets: don't include interface input drop counter in input errors.
• Apply the "AcceptPerfectMatch" workaround for sis(4) DP83815 chipsets to the 15D revision as well.
• Fixed size of unicast rx filter table on vio(4), to stop unicast address overwriting part of the multicast rx filter table.
• Updated fonts-conf(5).
• 5.2 and 5.3 RELIABILITY FIX: Stop bgpd(8) replacing an active during session startup.
  A source code patch is available for 5.2 and 5.3.
• Allow tftpd(8) option ACK to negotiate 2 byte transfers with extra options.
• Fixed double free which occurred if a tftpd(8) option ACK failed.
• Don't unconditionally try to attach octcf(4) to a CF bus on octeon. Stops endless faults on the EdgeRouter Lite.
• Removed the unused sequencer(4) driver.
• Re-enabled build of Xserver(1) on hp300.
• Enable vge(4) flow control support.
• Fixed mii(4) flow control support; workaround for the IP1001 PHY where downshift support was not functioning properly.
• Install npppd.conf(5) with permissions of 0640, as there could be the radius config in this file.
• Disabled pie for lkm(4).
• Removed faithd(8) and faith(4).
• Make sure dhclient(8) doesn't delete IPv6 routes.
• Allow octeon to reboot by poking the right address for a soft cpu reset.
• In aucat(1) debug mode, log successful connections.
• Stopped sndiod(8) and aucat(1) displaying warnings if accept() returns ECONNABORTED or EWOULDBLOCK, as we do in other daemons.
• Fake "SMBIOS detection" for quirky Soekris boxes, to make it easier to attach device drivers.
• Require that the mktemp(1) template include at least 6 trailing Xs to match POSIX mkstemp/mkdtemp. Improved error messages.
• Fixed kernel profiling on MP systems by using per-CPU buffers and teaching kgmon(8) to deal with them.
• Allow snmpd(8) report new PF "translation" counter.
• Add pf(4) "translation" counter, use this (not "memory") when address translation fails due to no free ports in the configured range.
• Turn identd(8) off by default.
• Allow systrace(1), identd(8), uucpd(8), iked(8), nfsd(8), talk(1), tcpbench(1), bgpd(8), dvmrpd(8), ftp-proxy(8), inetd(8), iscsid(8), ldpd(8), ospf6d(8), ospfd(8), ppp(8), relayd(8), ripd(8), sasyncd(8), smtpd(8), snmpd(8) and syslogd(8) to handle ECONNABORTED errors from accept(2).
• When binding a lease, check for and clear out any "zombie" routes left behind by a dead dhclient(8).
• As per RFC 2131, stop dhcpd(8) ACK'ing any REQUEST containing a server-identifier option that specifies a different dhcp server.
• Removed the -I option from ndp(8).
• Do not start npppd(8) if a pptp tunnel is configured but the gre(4) protocol is not enabled.
• Flush writes to BGE_MI_COMM to avoid "APE lock request failed!" errors with HP 331T (5719) and 332T (5720) bge(4) cards.
• Changed relayd(8) to use the monotonic clock instead of gettimeofday() and call fatal() on error-that-should-not-happen.
• Removed obsolete sudo(8) code that used to change the mode of sudoers from the old (pre-1.6) default.
• Reserve a file descriptor on accept() for subsequent connect() call by ftp-proxy(8), as done in relayd(8).
• Put tip(1) back, but without the hardlink to cu(1) for now.
• Make it possible to override already attached wsdisplay(4) console later in the boot process. Needed for upcoming KMS changes.
• Workaround for some PowerBooks without an adb(4/macppc) bus, to prevent their PMU from shutting down the machine.
• Prevent gzsig(1) going into an endless loop on input error.
• Prevent gzsig(1) race condition by using already opened file descriptors. Properly presume owner/mode of gzip(1) file.
• Add new cu(1), a libevent-based implementation of the old tip(1)/cu(1) with a few new things (eg basic xmodem support). Disable tip(1).
• Always use the internal PHY on Apple variants. This unbreaks gem(4) on some PowerMac G5.
• Disabled re(4) IP checksum offloading for Realtek 8168 (broken if the packet has IP options).
• Updated to: xterm(1) 291, bdftopcf(1) 1.0.4, beforelight(1) 1.0.5, ico(1) 1.0.4, xcalc(1) 1.0.5, xfsinfo(1) 1.0.4, xkbutils 1.0.4, xsetroot(1) 1.1.1, xstdcmap(1) 1.0.3, xvidtune(1) 1.0.3, xvinfo(1) 1.1.2, xsm(1) 1.0.3, libXrandr 1.4.0, and xrandr(1) 1.4.0.
• Enable TCP socket splicing for HTTP persistent connection and chunked transfer encoding. Speeds up relayd(8).
• Updated to fontconfig 2.10.91 + a few local fixes: replaced ugly bitmapped Lucida fonts with Luxi or DejaVu TrueType fonts; moved the target of fontconfig recipes to the "pattern" from the "font" to add the default values properly.
• Rewrite the ste(4) receive filter handling code and cleanup the ioctl bits.
• First steps towards alphabook1 support.
• Allow ssh(1) "-f none ..."
• Implement a bgpctl(8) nei foo destroy that will remove the specified cloned neighbour.
• Better bgpd(8) templates support: on config reload adjust the cloned neighbours so that they get the config changes as well; clean up sessions that are 1h idle but in state active (instead of down); allow bgpctl(8) to destroy cloned neighbours.
• Added submethod support to sshd_config(5) AuthenticationMethods.
• Fixed return value of wcrtomb(3) in single-byte locales if the "s" argument is NULL.
• Allow a "+" in the cron(8) MAILTO email address.
• Per POSIX, if getconf(1) confstr() returns zero without setting errno ("no defined value") then print "undefined\n".
• Correct the delay when programming the sis(4) short cable fix to 100us, not 100ms.
• Fixed and simplified determining whether we're using an rl(4) 8129 or 8139 chipset. Allows D-Link DFE-520TX to work.
• Fixed ssh(1) public key and hostbased authentication when the client has specified a style (e.g. "root:skey").
• Fatal() ssh(1) session when ChrootDirectory is specified while running without root privileges.
• Account for the size of the allocation when defending the uvm(9) pagedaemon reserve.
• Sync yyerror() in ospfd(8), ospf6d(8), snmpd(8), dvmrpd(8), ifstated(8), ldpd(8), ripd(8), smtpd(8) and ypldap(8) with version in bgpd(8), so that it logs to syslog when daemonised.
• Patch for CVE-2013-1667 in perl(1): DoS in rehashing code (see http://code.activestate.com/lists/perl5-porters/191311/).
• When dumping ospfd(8) config, just print "passive" for passive interfaces rather than showing the "hello" timers and keys.
• Fixed a bad comparison when calculating the size of the hibernate code's signature block.
• Updated: rgb to 1.0.5, xev(1) to 1.2.1, and sessreg(1) to 1.0.8.
• Reset ssh(1) pubkey order on partial success.
• Let whois(1) -P do a query against https://www.peeringdb.com/.
• softraid(4) disciplines are now shutdown in reverse attach order, making manually stacked volumes more practical.
• Reorder pci(4) code such that wsdisplay(4) attaches after drm(4). Preparation for framebuffer console support on amd64/i386.
• When deleting an IPv6 interface address, also remove the prefix and the cloning route.
• Added HG20F9 usb ethernet to axe(4).
• Check ldomctl(8/sparc64) parser's return value and exit if parsing failed. Report syntax error with duplicated domain name.
• Use vlog() to log relayd(8) parser errors so they will show up in logs if they occur when reloading.
• When user(8) is locking/unlocking an account, never touch passwords that are "*" or 13*. Also make sure to never end up with an empty password.
• Fixed format string issue when printing an error out on bge(4) with APE and more than 4 pci(4) functions.
• Fixed ksh(1) quoting in word part of ${var+word} (and similar) when entire thing is quoted or in a here-doc.
• Disabled duplicate address detection on carp(4) interfaces, as the peer may have the same addresses.
• Make sure that IPv6 source address selection only chooses a carp(4) address if the interface is in master state.
• Fixed the combination of "j" format flag and the XPG "<num>$" modifier in vfprintf(3).
• Unbreak softraid(4) compilation with debug enabled.
• Fixed pf(4) so when a pf.conf(5) containing "set tos" is followed by a scrub option, the tos will not be changed to 0x00.
• Properly conditionalise adding wscons(4) to the list of consoles on amd64 NWSDISPLAY.
• Always compare aliases(5) at the end of the sysmerge(8). Prevents newaliases(8) from failing due to smtpd.conf(5) syntax change.
• When passwd(1) is using an external password quality check program, don't run (potentially contradictory) internal pattern checks.
• Bring getconf(1) substantially up to spec with POSIX 1003.1-2008: 155 new names; support for the -v option. Added support for non-standard -L and -l options for listing the known names.