===================================================================
RCS file: /cvsrepo/anoncvs/cvs/www/51.html,v
retrieving revision 1.53
retrieving revision 1.54
diff -c -r1.53 -r1.54
*** www/51.html	2016/08/15 02:22:05	1.53
--- www/51.html	2017/06/26 17:18:57	1.54
***************
*** 58,115 ****
  <ul>
  <li>Improved hardware support, including:
      <ul>
!     <li><a href="http://man.openbsd.org/?query=umsm&amp;sektion=4">umsm(4)</a> supports additional mobile broadband devices.
!     <li>Non-GigE <a href="http://man.openbsd.org/?query=ale&amp;sektion=4">ale(4)</a> devices can now establish link to a GigE link partner.
!     <li>Support for Intel 82580 has been added to <a href="http://man.openbsd.org/?query=em&amp;sektion=4">em(4)</a>.
!     <li>Support for MegaRAID 9240 has been added to <a href="http://man.openbsd.org/?query=mfi&amp;sektion=4">mfi(4)</a>.
!     <li>Support for Nuvoton NCT6776F has been added to <a href="http://man.openbsd.org/?query=lm&amp;sektion=4">lm(4)</a>.
!     <li>Support for Centrino Advanced-N 6205 has been added to <a href="http://man.openbsd.org/?query=iwn&amp;sektion=4">iwn(4)</a>.
!     <li>Support for SiS 1182/1183 SATA has been added to <a href="http://man.openbsd.org/?query=pciide&amp;sektion=4">pciide(4)</a>.
!     <li>Support for Synaptics touch pads through the <a href="http://man.openbsd.org/?query=synaptics&amp;sektion=4">synaptics(4)</a> X.Org input driver is now enabled by default.
!     <li>Support for Intel Sandy Bridge integrated graphics cards has been added to the <a href="http://man.openbsd.org/?query=intel&amp;sektion=4">intel(4)</a> X.Org driver.
      <li>Assembler implementation of the AES-GCM mode for new Intel and future AMD CPUs has been added.
!     <li><a href="http://man.openbsd.org/?query=usb&manpath=OpenBSD%20Current&sektion=4&format=html">usb(4)</a> probes bus after resume, improves functionality for some laptops.
      </ul>
  <p>
  
  <li>Generic network stack improvements:
      <ul>
!     <li>RFC4638 MTU negotiation for <a href="http://man.openbsd.org/?query=pppoe&amp;sektion=4">pppoe(4)</a>.
!     <li><a href="http://man.openbsd.org/?query=npppdctl&manpath=OpenBSD%20Current&sektion=8&format=html">npppdctl(8)</a> replaced with <a href="http://man.openbsd.org/?query=npppctl&manpath=OpenBSD%20Current&sektion=8&format=html">npppctl(8)</a>, written from scratch. Includes support for IPv6 as tunnel source address.
!     <li>Improve performance (throughput and loss rate) for PPTP, <a href="http://man.openbsd.org/?query=pppd&manpath=OpenBSD%20Current&sektion=8&format=html">pppd(8)</a> or L2TP(/IPsec) on unstable latency networks (eg mobile).
      <li>Improved IPv6 fragment handling.
      <li>Many robustness improvements for IEEE 802.11 (particularly hostap).
      <li>Improved vlan priority support, including mapping to interface queues.
      <li>Initial rdomains support for IPv6.
!     <li>Robustness improvements for <a href="http://man.openbsd.org/?query=carp&amp;sektion=4">carp(4)</a>.
!     <li>Various IPv6 and rdomain related improvements for <a href="http://man.openbsd.org/?query=carp&amp;sektion=4">carp(4)</a>.
      </ul>
  <p>
  
  <li>Routing daemons and other userland network improvements:
      <ul>
!     <li><a href="http://man.openbsd.org/?query=fstat&amp;sektion=8">fstat(8)</a> now displays routing table ID and socket-splicing information and ps can display routing table ID.
!     <li><a href="http://man.openbsd.org/?query=traceroute&amp;sektion=8">traceroute(8)</a> and <a href="http://man.openbsd.org/?query=traceroute6&amp;sektion=8">traceroute6(8)</a> can look up ASNs for each hop.
!     <li><a href="http://man.openbsd.org/?query=snmpd&amp;sektion=8">snmpd(8)</a> adds a MIB to show statistics for <a href="http://man.openbsd.org/?query=carp&amp;sektion=4">carp(4)</a> interfaces.
!     <li><a href="http://man.openbsd.org/?query=bgpctl&amp;sektion=8">bgpctl(8)</a> parses and display MRT routing table dumps.
!     <li><a href="http://man.openbsd.org/?query=ntpd&amp;sektion=8">ntpd(8)</a> supports multiple rdomains.
!     <li>When <a href="http://man.openbsd.org/?query=ospfd&amp;sektion=8">ospfd(8)</a> detects route socket overflow, it now delays before it reloads the fib.
      <li>Improved and more consistent ToS support in various network tools
!         (<a href="http://man.openbsd.org/?query=tcpbench&amp;sektion=8">tcpbench(8)</a>, <a href="http://man.openbsd.org/?query=nc&amp;sektion=8">nc(8)</a>, <a href="http://man.openbsd.org/?query=pingt&amp;sektion=8">ping(8)</a>, <a href="http://man.openbsd.org/?query=traceroute&amp;sektion=8">traceroute(8)</a>).
!     <li>Initial import of <a href="http://man.openbsd.org/?query=login_yubikey&manpath=OpenBSD%20Current&sektion=8&format=html">login_yubikey(8)</a> for logging in using yubikeys.
      </ul>
  <p>
  
! <li><a href="http://man.openbsd.org/?query=pf&amp;sektion=4">pf(4)</a> improvements:
      <ul>
!     <li>One-shot rule support for <a href="http://man.openbsd.org/?query=pf&amp;sektion=4">pf(4)</a>, for use with proxies via anchors.
      <li>NAT64 support in PF using the <b>af-to</b> keyword.
      <li>Much improved IPv6 fragment handling.
      <li>Various enhancements with ICMP and especially ICMPv6 states
      <li>Improved IPv6 Neighbor Discovery and Multicast Listener Discovery handling.
!     <li><a href="http://man.openbsd.org/?query=pfctl&amp;sektion=8">pfctl(8)</a> now prints port numbers instead of service names by default.
!     <li>Netflow v9 and ipfix support for <a href="http://man.openbsd.org/?query=pflow&amp;sektion=4">pflow(4)</a>.
!     <li>Many <a href="http://man.openbsd.org/?query=pfsync&amp;sektion=4">pfsync(4)</a> fixes and improvements including jumbo frames and automatically requesting a bulk update after a physical interface comes online.
      </ul>
  <p>
  
--- 58,115 ----
  <ul>
  <li>Improved hardware support, including:
      <ul>
!     <li><a href="https://man.openbsd.org/?query=umsm&amp;sektion=4">umsm(4)</a> supports additional mobile broadband devices.
!     <li>Non-GigE <a href="https://man.openbsd.org/?query=ale&amp;sektion=4">ale(4)</a> devices can now establish link to a GigE link partner.
!     <li>Support for Intel 82580 has been added to <a href="https://man.openbsd.org/?query=em&amp;sektion=4">em(4)</a>.
!     <li>Support for MegaRAID 9240 has been added to <a href="https://man.openbsd.org/?query=mfi&amp;sektion=4">mfi(4)</a>.
!     <li>Support for Nuvoton NCT6776F has been added to <a href="https://man.openbsd.org/?query=lm&amp;sektion=4">lm(4)</a>.
!     <li>Support for Centrino Advanced-N 6205 has been added to <a href="https://man.openbsd.org/?query=iwn&amp;sektion=4">iwn(4)</a>.
!     <li>Support for SiS 1182/1183 SATA has been added to <a href="https://man.openbsd.org/?query=pciide&amp;sektion=4">pciide(4)</a>.
!     <li>Support for Synaptics touch pads through the <a href="https://man.openbsd.org/?query=synaptics&amp;sektion=4">synaptics(4)</a> X.Org input driver is now enabled by default.
!     <li>Support for Intel Sandy Bridge integrated graphics cards has been added to the <a href="https://man.openbsd.org/?query=intel&amp;sektion=4">intel(4)</a> X.Org driver.
      <li>Assembler implementation of the AES-GCM mode for new Intel and future AMD CPUs has been added.
!     <li><a href="https://man.openbsd.org/?query=usb&manpath=OpenBSD%20Current&sektion=4&format=html">usb(4)</a> probes bus after resume, improves functionality for some laptops.
      </ul>
  <p>
  
  <li>Generic network stack improvements:
      <ul>
!     <li>RFC4638 MTU negotiation for <a href="https://man.openbsd.org/?query=pppoe&amp;sektion=4">pppoe(4)</a>.
!     <li><a href="https://man.openbsd.org/?query=npppdctl&manpath=OpenBSD%20Current&sektion=8&format=html">npppdctl(8)</a> replaced with <a href="https://man.openbsd.org/?query=npppctl&manpath=OpenBSD%20Current&sektion=8&format=html">npppctl(8)</a>, written from scratch. Includes support for IPv6 as tunnel source address.
!     <li>Improve performance (throughput and loss rate) for PPTP, <a href="https://man.openbsd.org/?query=pppd&manpath=OpenBSD%20Current&sektion=8&format=html">pppd(8)</a> or L2TP(/IPsec) on unstable latency networks (eg mobile).
      <li>Improved IPv6 fragment handling.
      <li>Many robustness improvements for IEEE 802.11 (particularly hostap).
      <li>Improved vlan priority support, including mapping to interface queues.
      <li>Initial rdomains support for IPv6.
!     <li>Robustness improvements for <a href="https://man.openbsd.org/?query=carp&amp;sektion=4">carp(4)</a>.
!     <li>Various IPv6 and rdomain related improvements for <a href="https://man.openbsd.org/?query=carp&amp;sektion=4">carp(4)</a>.
      </ul>
  <p>
  
  <li>Routing daemons and other userland network improvements:
      <ul>
!     <li><a href="https://man.openbsd.org/?query=fstat&amp;sektion=8">fstat(8)</a> now displays routing table ID and socket-splicing information and ps can display routing table ID.
!     <li><a href="https://man.openbsd.org/?query=traceroute&amp;sektion=8">traceroute(8)</a> and <a href="https://man.openbsd.org/?query=traceroute6&amp;sektion=8">traceroute6(8)</a> can look up ASNs for each hop.
!     <li><a href="https://man.openbsd.org/?query=snmpd&amp;sektion=8">snmpd(8)</a> adds a MIB to show statistics for <a href="https://man.openbsd.org/?query=carp&amp;sektion=4">carp(4)</a> interfaces.
!     <li><a href="https://man.openbsd.org/?query=bgpctl&amp;sektion=8">bgpctl(8)</a> parses and display MRT routing table dumps.
!     <li><a href="https://man.openbsd.org/?query=ntpd&amp;sektion=8">ntpd(8)</a> supports multiple rdomains.
!     <li>When <a href="https://man.openbsd.org/?query=ospfd&amp;sektion=8">ospfd(8)</a> detects route socket overflow, it now delays before it reloads the fib.
      <li>Improved and more consistent ToS support in various network tools
!         (<a href="https://man.openbsd.org/?query=tcpbench&amp;sektion=8">tcpbench(8)</a>, <a href="https://man.openbsd.org/?query=nc&amp;sektion=8">nc(8)</a>, <a href="https://man.openbsd.org/?query=pingt&amp;sektion=8">ping(8)</a>, <a href="https://man.openbsd.org/?query=traceroute&amp;sektion=8">traceroute(8)</a>).
!     <li>Initial import of <a href="https://man.openbsd.org/?query=login_yubikey&manpath=OpenBSD%20Current&sektion=8&format=html">login_yubikey(8)</a> for logging in using yubikeys.
      </ul>
  <p>
  
! <li><a href="https://man.openbsd.org/?query=pf&amp;sektion=4">pf(4)</a> improvements:
      <ul>
!     <li>One-shot rule support for <a href="https://man.openbsd.org/?query=pf&amp;sektion=4">pf(4)</a>, for use with proxies via anchors.
      <li>NAT64 support in PF using the <b>af-to</b> keyword.
      <li>Much improved IPv6 fragment handling.
      <li>Various enhancements with ICMP and especially ICMPv6 states
      <li>Improved IPv6 Neighbor Discovery and Multicast Listener Discovery handling.
!     <li><a href="https://man.openbsd.org/?query=pfctl&amp;sektion=8">pfctl(8)</a> now prints port numbers instead of service names by default.
!     <li>Netflow v9 and ipfix support for <a href="https://man.openbsd.org/?query=pflow&amp;sektion=4">pflow(4)</a>.
!     <li>Many <a href="https://man.openbsd.org/?query=pfsync&amp;sektion=4">pfsync(4)</a> fixes and improvements including jumbo frames and automatically requesting a bulk update after a physical interface comes online.
      </ul>
  <p>
  
***************
*** 117,128 ****
      <ul>
      <li>Improved locale support.
      <li>Support for MSG_NOSIGNAL.
!     <li>KERN_PROC_CWD <a href="http://man.openbsd.org/?query=sysctl&amp;sektion=3">sysctl(3)</a> for fetching the path to a process's working directory.
!     <li>Improved <a href="http://man.openbsd.org/?query=fnmatch&amp;sektion=3">fnmatch(3)</a>, <a href="http://man.openbsd.org/?query=glob&amp;sektion=3">glob(3)</a>, and <a href="http://man.openbsd.org/?query=regcomp&amp;sektion=3">regcomp(3)</a> implementations to resist
          DoS attacks.
      <li>Lots of HISTORY and AUTHORS information added to manpages.
      <li>Improved checking of file-offset wraparound.
!     <li><a href="http://man.openbsd.org/?query=pwrite&amp;sektion=2">pwrite(2)</a>/<a href="http://man.openbsd.org/?query=pwritev&amp;sektion=2">pwritev(2)</a> now correctly by ignored O_APPEND.
      <li>Improved conformance of header files with standards.
      <li>Improved cancelation support in both user-threads (libpthread) and rthreads.
      <li>Improved correctness of execing, coredumping, signal delivery,
--- 117,128 ----
      <ul>
      <li>Improved locale support.
      <li>Support for MSG_NOSIGNAL.
!     <li>KERN_PROC_CWD <a href="https://man.openbsd.org/?query=sysctl&amp;sektion=3">sysctl(3)</a> for fetching the path to a process's working directory.
!     <li>Improved <a href="https://man.openbsd.org/?query=fnmatch&amp;sektion=3">fnmatch(3)</a>, <a href="https://man.openbsd.org/?query=glob&amp;sektion=3">glob(3)</a>, and <a href="https://man.openbsd.org/?query=regcomp&amp;sektion=3">regcomp(3)</a> implementations to resist
          DoS attacks.
      <li>Lots of HISTORY and AUTHORS information added to manpages.
      <li>Improved checking of file-offset wraparound.
!     <li><a href="https://man.openbsd.org/?query=pwrite&amp;sektion=2">pwrite(2)</a>/<a href="https://man.openbsd.org/?query=pwritev&amp;sektion=2">pwritev(2)</a> now correctly by ignored O_APPEND.
      <li>Improved conformance of header files with standards.
      <li>Improved cancelation support in both user-threads (libpthread) and rthreads.
      <li>Improved correctness of execing, coredumping, signal delivery,
***************
*** 132,147 ****
      <li>Architecture-independent kernel support for thread-control-block
          handling for rthreads.
      <li>Small improvements to Linux compat (only available on i386).
!     <li>Multiple bugs have been fixed in the Intel 10Gb driver <a href="http://man.openbsd.org/?query=ix&amp;sektion=4">ix(4)</a>.
!     <li><a href="http://man.openbsd.org/?query=softraid&amp;sektion=4">softraid(4)</a> now supports a concatenating discipline.
!     <li>On amd64, i386, and sparc64, the root filesystem can reside in a <a href="http://man.openbsd.org/?query=softraid&amp;sektion=4">softraid(4)</a> volume. The kernel needs to be booted from a non-softraid partition.
!     <li>On amd64, the system can be booted from a <a href="http://man.openbsd.org/?query=softraid&amp;sektion=4">softraid(4)</a> RAID1 volume.
!     <li><a href="http://man.openbsd.org/?query=aucat&manpath=OpenBSD%20Current&sektion=1&format=html">aucat(1)</a> adds a "device number" component in <a href="http://man.openbsd.org/?query=sndio&manpath=OpenBSD%20Current&sektion=7&format=html">sndio(7)</a> device names, allowing a single aucat instance to handle all audio and MIDI services.
!     <li>Built-in <a href="http://man.openbsd.org/?query=sndiod&amp;sektion=8">sndiod(8)</a> sound daemon now uses default rate 48kHz and the default block size 10ms. These settings ensure video players and programs using MTC are smooth by default.
!     <li>Many updates to <a href="http://man.openbsd.org/?query=smtpd&manpath=OpenBSD%20Current&sektion=8&format=html">smtpd(8)</a>: a new scheduler_backend API introduced, more MIME 1.0 support added, new filter callbacks for network events, improved DNS error reporting and envelope handling, and the purge/ directory is now cleared via a privilege-separated child.
!     <li><a href="http://man.openbsd.org/?query=tmux&manpath=OpenBSD%20Current&sektion=1&format=html">tmux(1)</a> is extended to support a larger history, minimizes redundant log messages and does some code reordering for more local and less global variables. Support is added for the ESC[s and ESC[u save/restore cursor-position key sequences. $HOME (or ~) may now be used as default-path in tmux.conf.
!     <li>Enhanced <a href="http://man.openbsd.org/?query=cwm&manpath=OpenBSD%20Current&sektion=1&format=html">cwm(1)</a> event support, added {r,}cycleingroup to cycle through clients belonging to the same group as the active client, simplified color initialization.
!     <li>The <a href="http://man.openbsd.org/?query=mg&manpath=OpenBSD%20Current&sektion=1&format=html">mg(1)</a> emacs-like editor: now uses absolute filenames while pushing and popping off the stack. In dired mode: corrected cursor movements and added missing keybindings.
      </ul>
  <p>
  
--- 132,147 ----
      <li>Architecture-independent kernel support for thread-control-block
          handling for rthreads.
      <li>Small improvements to Linux compat (only available on i386).
!     <li>Multiple bugs have been fixed in the Intel 10Gb driver <a href="https://man.openbsd.org/?query=ix&amp;sektion=4">ix(4)</a>.
!     <li><a href="https://man.openbsd.org/?query=softraid&amp;sektion=4">softraid(4)</a> now supports a concatenating discipline.
!     <li>On amd64, i386, and sparc64, the root filesystem can reside in a <a href="https://man.openbsd.org/?query=softraid&amp;sektion=4">softraid(4)</a> volume. The kernel needs to be booted from a non-softraid partition.
!     <li>On amd64, the system can be booted from a <a href="https://man.openbsd.org/?query=softraid&amp;sektion=4">softraid(4)</a> RAID1 volume.
!     <li><a href="https://man.openbsd.org/?query=aucat&manpath=OpenBSD%20Current&sektion=1&format=html">aucat(1)</a> adds a "device number" component in <a href="https://man.openbsd.org/?query=sndio&manpath=OpenBSD%20Current&sektion=7&format=html">sndio(7)</a> device names, allowing a single aucat instance to handle all audio and MIDI services.
!     <li>Built-in <a href="https://man.openbsd.org/?query=sndiod&amp;sektion=8">sndiod(8)</a> sound daemon now uses default rate 48kHz and the default block size 10ms. These settings ensure video players and programs using MTC are smooth by default.
!     <li>Many updates to <a href="https://man.openbsd.org/?query=smtpd&manpath=OpenBSD%20Current&sektion=8&format=html">smtpd(8)</a>: a new scheduler_backend API introduced, more MIME 1.0 support added, new filter callbacks for network events, improved DNS error reporting and envelope handling, and the purge/ directory is now cleared via a privilege-separated child.
!     <li><a href="https://man.openbsd.org/?query=tmux&manpath=OpenBSD%20Current&sektion=1&format=html">tmux(1)</a> is extended to support a larger history, minimizes redundant log messages and does some code reordering for more local and less global variables. Support is added for the ESC[s and ESC[u save/restore cursor-position key sequences. $HOME (or ~) may now be used as default-path in tmux.conf.
!     <li>Enhanced <a href="https://man.openbsd.org/?query=cwm&manpath=OpenBSD%20Current&sektion=1&format=html">cwm(1)</a> event support, added {r,}cycleingroup to cycle through clients belonging to the same group as the active client, simplified color initialization.
!     <li>The <a href="https://man.openbsd.org/?query=mg&manpath=OpenBSD%20Current&sektion=1&format=html">mg(1)</a> emacs-like editor: now uses absolute filenames while pushing and popping off the stack. In dired mode: corrected cursor movements and added missing keybindings.
      </ul>
  <p>
  
***************
*** 149,162 ****
      <ul>
      <li>New features:
        <ul>
!       <li><a href="http://man.openbsd.org/?query=ssh-keygen&amp;sektion=1">ssh-keygen(1)</a>:
          add optional checkpoints for moduli screening.
!       <li><a href="http://man.openbsd.org/?query=ssh-add&amp;sektion=1">ssh-add(1)</a>:
          new -k option to load plain keys (skipping certificates).
!       <li><a href="http://man.openbsd.org/?query=sshd&amp;sektion=8">sshd(8)</a>:
          add wildcard support to PermitOpen, allowing things like
          "PermitOpen localhost:*". (bz#1857)
!       <li><a href="http://man.openbsd.org/?query=ssh&amp;sektion=1">ssh(1)</a>:
          support for cancelling local and remote port forwards via the multiplex
          socket. Use "ssh -O cancel -L xx:xx:xx -R yy:yy:yy user@host" to request
          the cancellation of the specified forwardings.
--- 149,162 ----
      <ul>
      <li>New features:
        <ul>
!       <li><a href="https://man.openbsd.org/?query=ssh-keygen&amp;sektion=1">ssh-keygen(1)</a>:
          add optional checkpoints for moduli screening.
!       <li><a href="https://man.openbsd.org/?query=ssh-add&amp;sektion=1">ssh-add(1)</a>:
          new -k option to load plain keys (skipping certificates).
!       <li><a href="https://man.openbsd.org/?query=sshd&amp;sektion=8">sshd(8)</a>:
          add wildcard support to PermitOpen, allowing things like
          "PermitOpen localhost:*". (bz#1857)
!       <li><a href="https://man.openbsd.org/?query=ssh&amp;sektion=1">ssh(1)</a>:
          support for cancelling local and remote port forwards via the multiplex
          socket. Use "ssh -O cancel -L xx:xx:xx -R yy:yy:yy user@host" to request
          the cancellation of the specified forwardings.
***************
*** 164,196 ****
        </ul>
      <li>The following significant bugs have been fixed in this release:
        <ul>
!       <li><a href="http://man.openbsd.org/?query=ssh&amp;sektion=1">ssh(1)</a>:
          ensure that $DISPLAY contains only valid characters before using it to
          extract xauth data so that it can't be used to play local shell
          metacharacter games.
!       <li><a href="http://man.openbsd.org/?query=ssh&amp;sektion=1">ssh(1)</a>:
          unbreak remote port forwarding with dynamic allocated listen ports.
!       <li><a href="http://man.openbsd.org/?query=scp&amp;sektion=1">scp(1)</a>:
          suppress adding '--' to remote commandlines when the first argument does
          not start with '-'. Saves breakage on some difficult-to-upgrade
          embedded/router platforms.
!       <li><a href="http://man.openbsd.org/?query=ssh&amp;sektion=1">ssh(1)</a>
          and
!         <a href="http://man.openbsd.org/?query=sshd&amp;sektion=8">sshd(8)</a>:
          fix typo in IPQoS parsing: there is no "AF14" class, but there is an
          "AF21" class.
!       <li><a href="http://man.openbsd.org/?query=ssh&amp;sektion=1">ssh(1)</a>
          and
!         <a href="http://man.openbsd.org/?query=sshd&amp;sektion=8">sshd(8)</a>:
          do not permit SSH2_MSG_SERVICE_REQUEST/ACCEPT during rekeying.
!       <li><a href="http://man.openbsd.org/?query=ssh&amp;sektion=1">ssh(1)</a>:
          skip attempting to create ~/.ssh when -F is passed.
!       <li><a href="http://man.openbsd.org/?query=sshd&amp;sektion=8">sshd(8)</a>:
          unbreak stdio forwarding when ControlPersist is in use. (bz#1943)
!       <li><a href="http://man.openbsd.org/?query=sshd&amp;sektion=8">sshd(8)</a>:
          send tty break to pty master instead of (probably already closed) slave
          side. (bz#1859)
!       <li><a href="http://man.openbsd.org/?query=sftp&amp;sektion=1">sftp(1)</a>:
          silence error spam for "ls */foo" in directory with files.
     (bz#1683)
        <li>Fixed a number of memory and file descriptor leaks.
--- 164,196 ----
        </ul>
      <li>The following significant bugs have been fixed in this release:
        <ul>
!       <li><a href="https://man.openbsd.org/?query=ssh&amp;sektion=1">ssh(1)</a>:
          ensure that $DISPLAY contains only valid characters before using it to
          extract xauth data so that it can't be used to play local shell
          metacharacter games.
!       <li><a href="https://man.openbsd.org/?query=ssh&amp;sektion=1">ssh(1)</a>:
          unbreak remote port forwarding with dynamic allocated listen ports.
!       <li><a href="https://man.openbsd.org/?query=scp&amp;sektion=1">scp(1)</a>:
          suppress adding '--' to remote commandlines when the first argument does
          not start with '-'. Saves breakage on some difficult-to-upgrade
          embedded/router platforms.
!       <li><a href="https://man.openbsd.org/?query=ssh&amp;sektion=1">ssh(1)</a>
          and
!         <a href="https://man.openbsd.org/?query=sshd&amp;sektion=8">sshd(8)</a>:
          fix typo in IPQoS parsing: there is no "AF14" class, but there is an
          "AF21" class.
!       <li><a href="https://man.openbsd.org/?query=ssh&amp;sektion=1">ssh(1)</a>
          and
!         <a href="https://man.openbsd.org/?query=sshd&amp;sektion=8">sshd(8)</a>:
          do not permit SSH2_MSG_SERVICE_REQUEST/ACCEPT during rekeying.
!       <li><a href="https://man.openbsd.org/?query=ssh&amp;sektion=1">ssh(1)</a>:
          skip attempting to create ~/.ssh when -F is passed.
!       <li><a href="https://man.openbsd.org/?query=sshd&amp;sektion=8">sshd(8)</a>:
          unbreak stdio forwarding when ControlPersist is in use. (bz#1943)
!       <li><a href="https://man.openbsd.org/?query=sshd&amp;sektion=8">sshd(8)</a>:
          send tty break to pty master instead of (probably already closed) slave
          side. (bz#1859)
!       <li><a href="https://man.openbsd.org/?query=sftp&amp;sektion=1">sftp(1)</a>:
          silence error spam for "ls */foo" in directory with files.
     (bz#1683)
        <li>Fixed a number of memory and file descriptor leaks.
***************
*** 263,271 ****
  
  <li>As usual, steady improvements in manual pages and other documentation.
      <li>Base system and Xenocara manuals are now installed as source code,
!       making <a href="http://man.openbsd.org/?query=grep&amp;sektion=1">grep(1)</a> more useful in /usr/share/man/ and /usr/X11R6/man/.
      <li>If both formatted and source versions of manuals are installed,
!       <a href="http://man.openbsd.org/?query=man&amp;sektion=1">man(1)</a> automatically displays the newer version of each page.
  <p>
  
  <li> The system includes the following major components from outside suppliers:
--- 263,271 ----
  
  <li>As usual, steady improvements in manual pages and other documentation.
      <li>Base system and Xenocara manuals are now installed as source code,
!       making <a href="https://man.openbsd.org/?query=grep&amp;sektion=1">grep(1)</a> more useful in /usr/share/man/ and /usr/X11R6/man/.
      <li>If both formatted and source versions of manuals are installed,
!       <a href="https://man.openbsd.org/?query=man&amp;sektion=1">man(1)</a> automatically displays the newer version of each page.
  <p>
  
  <li> The system includes the following major components from outside suppliers:
***************
*** 365,373 ****
  To make a boot floppy under MS-DOS, use the &quot;rawrite&quot; utility located
  at <i>CD1:5.1/tools/rawrite.exe</i>. To make the boot floppy under a Unix OS,
  use the
! <a href="http://man.openbsd.org/?query=dd&amp;sektion=1">dd(1)</a>
  utility. The following is an example usage of
! <a href="http://man.openbsd.org/?query=dd&amp;sektion=1">dd(1)</a>,
  where the device could be &quot;floppy&quot;, &quot;rfd0c&quot;, or
  &quot;rfd0a&quot;.
  
--- 365,373 ----
  To make a boot floppy under MS-DOS, use the &quot;rawrite&quot; utility located
  at <i>CD1:5.1/tools/rawrite.exe</i>. To make the boot floppy under a Unix OS,
  use the
! <a href="https://man.openbsd.org/?query=dd&amp;sektion=1">dd(1)</a>
  utility. The following is an example usage of
! <a href="https://man.openbsd.org/?query=dd&amp;sektion=1">dd(1)</a>,
  where the device could be &quot;floppy&quot;, &quot;rfd0c&quot;, or
  &quot;rfd0a&quot;.
  
***************
*** 659,665 ****
  OpenBSD ports system.
  <p>
  The <i>ports/</i> directory represents a CVS (see the manpage for
! <a href="http://man.openbsd.org/?query=cvs&amp;apropos=0&amp;sektion=1&amp;manpath=OpenBSD+Current&amp;arch=i386">
  cvs(1)</a> if
  you aren't familiar with CVS) checkout of our ports.  As with our complete
  source tree, our ports tree is available via anoncvs.  So, in
--- 659,665 ----
  OpenBSD ports system.
  <p>
  The <i>ports/</i> directory represents a CVS (see the manpage for
! <a href="https://man.openbsd.org/?query=cvs&amp;apropos=0&amp;sektion=1&amp;manpath=OpenBSD+Current&amp;arch=i386">
  cvs(1)</a> if
  you aren't familiar with CVS) checkout of our ports.  As with our complete
  source tree, our ports tree is available via anoncvs.  So, in