[BACK]Return to 57.html CVS log [TXT][DIR] Up to [local] / www

Diff for /www/57.html between version 1.108 and 1.109

version 1.108, 2019/04/24 15:54:54 version 1.109, 2019/05/27 22:55:18
Line 1 
Line 1 
 <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">  <!doctype html>
 <html>  <html lang=en id=release>
 <head>  <meta charset=utf-8>
   
 <title>OpenBSD 5.7</title>  <title>OpenBSD 5.7</title>
 <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">  
 <meta name="description" content="OpenBSD 5.7">  <meta name="description" content="OpenBSD 5.7">
 <meta name="copyright" content="This document copyright 2015 by OpenBSD.">  
 <meta name="viewport" content="width=device-width, initial-scale=1">  <meta name="viewport" content="width=device-width, initial-scale=1">
 <link rel="stylesheet" type="text/css" href="openbsd.css">  <link rel="stylesheet" type="text/css" href="openbsd.css">
 <link rel="canonical" href="https://www.openbsd.org/57.html">  <link rel="canonical" href="https://www.openbsd.org/57.html">
 </head>  
   
 <body bgcolor="#ffffff" text="#000000" link="#24248E">  
   
 <h2>  <h2 id=OpenBSD>
 <a href="index.html">  <a href="index.html">
 <i><font color="#0000ff">Open</font></i><font color="#000084">BSD</font></a>  <i>Open</i><b>BSD</b></a>
 <font color="#e00000">5.7</font>  5.7
 </h2>  </h2>
   
   <table>
   <tr>
   <td>
 <a href="images/bluefish.jpg">  <a href="images/bluefish.jpg">
 <img align="left" width="227" height="343" hspace="24" vspace="10" src="images/bluefish.jpg"></a>  <img width="227" height="343" src="images/bluefish.jpg" alt="Bluefish"></a>
   <td>
 Released May 1, 2015<br>  Released May 1, 2015<br>
 Copyright 1997-2015, Theo de Raadt.<br>  Copyright 1997-2015, Theo de Raadt.<br>
 <font color="#e00000">ISBN 978-0-9881561-5-9</font>  <cite class=isbn>ISBN 978-0-9881561-5-9</cite>
 <br>  <br>
 5.7 Song: <a href="lyrics.html#57">"Source Fish"</a>  5.7 Song: <a href="lyrics.html#57">"Source Fish"</a>
 <br>  <br>
Line 30 
Line 31 
 <ul>  <ul>
 <li>See the information on <a href="ftp.html">the FTP page</a> for  <li>See the information on <a href="ftp.html">the FTP page</a> for
     a list of mirror machines.      a list of mirror machines.
 <li>Go to the <font color="#e00000">pub/OpenBSD/5.7/</font> directory on  <li>Go to the <code class=reldir>pub/OpenBSD/5.7/</code> directory on
     one of the mirror sites.      one of the mirror sites.
 <li>Have a look at <a href="errata57.html">the 5.7 errata page</a> for a list  <li>Have a look at <a href="errata57.html">the 5.7 errata page</a> for a list
     of bugs and workarounds.      of bugs and workarounds.
 <li>See a <a href="plus57.html">detailed log of changes</a> between the  <li>See a <a href="plus57.html">detailed log of changes</a> between the
     5.6 and 5.7 releases.      5.6 and 5.7 releases.
 <p>  <p>
 <li><a href="https://man.openbsd.org/?query=signify&amp;sektion=1">signify(1)</a> pubkeys for this release:<p>  <li><a href="https://man.openbsd.org/signify.1">signify(1)</a> pubkeys for this release:<p>
   
 <table cellspacing=0 style='font-family:monospace'><tr>  <table class=signify>
 <td>  <tr><td>
 openbsd-57-base.pub:  openbsd-57-base.pub:
 </td><td>  <td>
 RWSvUZXnw9gUb70PdeSNnpSmodCyIPJEGN1wWr+6Time1eP7KiWJ5eAM  RWSvUZXnw9gUb70PdeSNnpSmodCyIPJEGN1wWr+6Time1eP7KiWJ5eAM
 </td></tr><tr><td>  <tr><td>
 openbsd-57-fw.pub:  openbsd-57-fw.pub:
 </td><td>  <td>
 RWSuRBL44FVkb2QuvtlwOJmzS9UJtbKZd7GEYcol8HPXu4On/Ct1LoZr  RWSuRBL44FVkb2QuvtlwOJmzS9UJtbKZd7GEYcol8HPXu4On/Ct1LoZr
 </td></tr><tr><td>  <tr><td>
 openbsd-57-pkg.pub:  openbsd-57-pkg.pub:
 </td><td>  <td>
 RWTJ1iHLn/zcvJJSbxJIEU9ChlfAlU16XoLLxmxciliOFWfTLyOv0vQs  RWTJ1iHLn/zcvJJSbxJIEU9ChlfAlU16XoLLxmxciliOFWfTLyOv0vQs
 </td></tr>  </td></tr>
 </table>  </table>
Line 60 
Line 61 
 sys.tar.gz, xenocara.tar.gz, ports.tar.gz files, or in the  sys.tar.gz, xenocara.tar.gz, ports.tar.gz files, or in the
 files fetched via ports.tar.gz.  files fetched via ports.tar.gz.
 </ul>  </ul>
 <br clear=all>  </table>
   
 <hr>  <hr>
   
 <a name="new"></a>  <section id=new>
 <h3><font color="#0000e0">What's New</font></h3>  <h3>What's New</h3>
   
 <p>  <p>
 This is a partial list of new features and systems included in OpenBSD 5.7.  This is a partial list of new features and systems included in OpenBSD 5.7.
 For a comprehensive list, see the <a href="plus57.html">changelog</a> leading  For a comprehensive list, see the <a href="plus57.html">changelog</a> leading
 to 5.7.  to 5.7.
 <p>  
   
 <ul>  <ul>
 <li>Improved hardware support, including:  <li>Improved hardware support, including:
     <ul>      <ul>
     <li>New <a href="https://man.openbsd.org/OpenBSD-current/man4/xhci.4?query=xhci&sec=4">xhci(4)</a> driver for USB 3.0 host controllers.      <li>New <a href="https://man.openbsd.org/OpenBSD-current/man4/xhci.4">xhci(4)</a> driver for USB 3.0 host controllers.
     <li>New <a href="https://man.openbsd.org/OpenBSD-current/man4/umcs.4?query=umcs&sec=4">umcs(4)</a> driver for MosChip Semiconductor 78x0 USB multiport serial adapters.      <li>New <a href="https://man.openbsd.org/OpenBSD-current/man4/umcs.4">umcs(4)</a> driver for MosChip Semiconductor 78x0 USB multiport serial adapters.
     <li>New <a href="https://man.openbsd.org/OpenBSD-current/man4/i386/skgpio.4?query=skgpio&sec=4">skgpio(4)</a> driver for Soekris net6501 GPIO and LEDs.      <li>New <a href="https://man.openbsd.org/OpenBSD-current/man4/i386/skgpio.4">skgpio(4)</a> driver for Soekris net6501 GPIO and LEDs.
     <li>New <a href="https://man.openbsd.org/OpenBSD-current/man4/uslhcom.4?query=uslhcom&sec=4">uslhcom(4)</a> driver for Silicon Labs CP2110 USB HID based UART.      <li>New <a href="https://man.openbsd.org/OpenBSD-current/man4/uslhcom.4">uslhcom(4)</a> driver for Silicon Labs CP2110 USB HID based UART.
     <li>New <a href="https://man.openbsd.org/OpenBSD-current/man4/nep.4?query=nep&sec=4">nep(4)</a> driver for Sun Neptune 10Gb Ethernet devices.      <li>New <a href="https://man.openbsd.org/OpenBSD-current/man4/nep.4">nep(4)</a> driver for Sun Neptune 10Gb Ethernet devices.
     <li>New <a href="https://man.openbsd.org/OpenBSD-current/man4/iwm.4?query=iwm&sec=4">iwm(4)</a> driver for Intel 7260, 7265, and 3160 wifi cards.      <li>New <a href="https://man.openbsd.org/OpenBSD-current/man4/iwm.4">iwm(4)</a> driver for Intel 7260, 7265, and 3160 wifi cards.
     <li>The <a href="https://man.openbsd.org/OpenBSD-current/man4/rtsx.4?query=rtsx&sec=4">rtsx(4)</a> driver now supports RTS5227 and RTL8411B card readers.      <li>The <a href="https://man.openbsd.org/OpenBSD-current/man4/rtsx.4">rtsx(4)</a> driver now supports RTS5227 and RTL8411B card readers.
     <li>The <a href="https://man.openbsd.org/OpenBSD-current/man4/bge.4?query=bge&sec=4">bge(4)</a> driver now supports jumbo frames on various additional BCM57xx chipsets.      <li>The <a href="https://man.openbsd.org/OpenBSD-current/man4/bge.4">bge(4)</a> driver now supports jumbo frames on various additional BCM57xx chipsets.
     <li>The <a href="https://man.openbsd.org/OpenBSD-current/man4/ciss.4?query=ciss&sec=4">ciss(4)</a> driver now supports HP Gen9 Smart Array/Smart HBA devices.      <li>The <a href="https://man.openbsd.org/OpenBSD-current/man4/ciss.4">ciss(4)</a> driver now supports HP Gen9 Smart Array/Smart HBA devices.
     <li>The <a href="https://man.openbsd.org/OpenBSD-current/man4/mpi.4?query=mpi&sec=4">mpi(4)</a> and <a href="https://man.openbsd.org/OpenBSD-current/man4/mfi.4">mfi(4)</a> drivers now have mpsafe interrupt handlers running without the big lock.      <li>The <a href="https://man.openbsd.org/OpenBSD-current/man4/mpi.4">mpi(4)</a> and <a href="https://man.openbsd.org/OpenBSD-current/man4/mfi.4">mfi(4)</a> drivers now have mpsafe interrupt handlers running without the big lock.
     <li>The <a href="https://man.openbsd.org/OpenBSD-current/man4/ppb.4?query=ppb&sec=4">ppb(4)</a> driver now supports PCI bridges that support subtractive decoding (fixes PCMCIA behind the ATI SB400 PCI bridge), and devices with 64-bit BARs behind PCI-PCI bridges as seen on SPARC T5-2 systems.      <li>The <a href="https://man.openbsd.org/OpenBSD-current/man4/ppb.4">ppb(4)</a> driver now supports PCI bridges that support subtractive decoding (fixes PCMCIA behind the ATI SB400 PCI bridge), and devices with 64-bit BARs behind PCI-PCI bridges as seen on SPARC T5-2 systems.
     <li>The <a href="https://man.openbsd.org/OpenBSD-current/man4/puc.4?query=puc&sec=4">puc(4)</a> driver now supports Winchiphead CH382 devices.      <li>The <a href="https://man.openbsd.org/OpenBSD-current/man4/puc.4">puc(4)</a> driver now supports Winchiphead CH382 devices.
     <li>The <a href="https://man.openbsd.org/OpenBSD-current/man4/sdmmc.4?query=sdmmc&sec=4">sdmmc(4)</a> driver now supports eMMC storage devices larger than 2GB.      <li>The <a href="https://man.openbsd.org/OpenBSD-current/man4/sdmmc.4">sdmmc(4)</a> driver now supports eMMC storage devices larger than 2GB.
     <li>The <a href="https://man.openbsd.org/OpenBSD-current/man4/sdhc.4?query=sdhc&sec=4">sdhc(4)</a> driver can properly resume on Ricoh controllers.      <li>The <a href="https://man.openbsd.org/OpenBSD-current/man4/sdhc.4">sdhc(4)</a> driver can properly resume on Ricoh controllers.
     <li>The <a href="https://man.openbsd.org/OpenBSD-current/man4/sdhc.4?query=sdhc&sec=4">sdhc(4)</a> driver now supports Ricoh R5U822 and R5U823 card readers.      <li>The <a href="https://man.openbsd.org/OpenBSD-current/man4/sdhc.4">sdhc(4)</a> driver now supports Ricoh R5U822 and R5U823 card readers.
     <li>The <a href="https://man.openbsd.org/OpenBSD-current/man4/mfii.4?query=mfii&sec=4">mfii(4)</a> driver now supports the Megaraid 3008 (Fury) and 3108 (Invader) cards.      <li>The <a href="https://man.openbsd.org/OpenBSD-current/man4/mfii.4">mfii(4)</a> driver now supports the Megaraid 3008 (Fury) and 3108 (Invader) cards.
     <li>The <a href="https://man.openbsd.org/OpenBSD-current/man4/myx.4?query=myx&sec=4">myx(4)</a> driver runs less code under the big lock.      <li>The <a href="https://man.openbsd.org/OpenBSD-current/man4/myx.4">myx(4)</a> driver runs less code under the big lock.
     <li>The <a href="https://man.openbsd.org/OpenBSD-current/man4/msk.4?query=msk&sec=4">msk(4)</a> driver now supports Yukon Prime, Yukon Optima 2, Yukon 88E8079, and various EC U and Supreme chipsets.      <li>The <a href="https://man.openbsd.org/OpenBSD-current/man4/msk.4">msk(4)</a> driver now supports Yukon Prime, Yukon Optima 2, Yukon 88E8079, and various EC U and Supreme chipsets.
     <li>The <a href="https://man.openbsd.org/OpenBSD-current/man4/umass.4?query=umass&sec=4">umass(4)</a> driver now supports Archos 24y Vision devices.      <li>The <a href="https://man.openbsd.org/OpenBSD-current/man4/umass.4">umass(4)</a> driver now supports Archos 24y Vision devices.
     <li>The <a href="https://man.openbsd.org/OpenBSD-current/man4/athn.4?query=athn&sec=4">athn(4)</a> driver now supports Atheros UB94 devices.      <li>The <a href="https://man.openbsd.org/OpenBSD-current/man4/athn.4">athn(4)</a> driver now supports Atheros UB94 devices.
     <li>The <a href="https://man.openbsd.org/OpenBSD-current/man4/azalia.4?query=azalia&sec=4">azalia(4)</a> driver now supports Realtek ALC885 codecs and Bay Trail HD Audio devices.      <li>The <a href="https://man.openbsd.org/OpenBSD-current/man4/azalia.4">azalia(4)</a> driver now supports Realtek ALC885 codecs and Bay Trail HD Audio devices.
     <li>The <a href="https://man.openbsd.org/OpenBSD-current/man4/ix.4?query=ix&sec=4">ix(4)</a> driver now supports onboard Ethernet devices in SPARC T5 machines.      <li>The <a href="https://man.openbsd.org/OpenBSD-current/man4/ix.4">ix(4)</a> driver now supports onboard Ethernet devices in SPARC T5 machines.
     <li>The <a href="https://man.openbsd.org/OpenBSD-current/man4/upd.4?query=upd&sec=4">upd(4)</a> driver now handles UPSes with broken report descriptors.      <li>The <a href="https://man.openbsd.org/OpenBSD-current/man4/upd.4">upd(4)</a> driver now handles UPSes with broken report descriptors.
     <li>The <a href="https://man.openbsd.org/OpenBSD-current/man4/ums.4?query=ums&sec=4">ums(4)</a> driver now supports the USB Tablet device emulated by Qemu.      <li>The <a href="https://man.openbsd.org/OpenBSD-current/man4/ums.4">ums(4)</a> driver now supports the USB Tablet device emulated by Qemu.
     <li>The <a href="https://man.openbsd.org/OpenBSD-current/man4/umsm.4?query=umsm&sec=4">umsm(4)</a> driver now supports MEDION S4222 devices.      <li>The <a href="https://man.openbsd.org/OpenBSD-current/man4/umsm.4">umsm(4)</a> driver now supports MEDION S4222 devices.
     <li>The <a href="https://man.openbsd.org/OpenBSD-current/man4/pciide.4?query=pciide&sec=4">pciide(4)</a> driver now supports Intel C610 chipsets.      <li>The <a href="https://man.openbsd.org/OpenBSD-current/man4/pciide.4">pciide(4)</a> driver now supports Intel C610 chipsets.
     <li>The <a href="https://man.openbsd.org/OpenBSD-current/man4/ukbd.4?query=ukbd&sec=4">ukbd(4)</a> driver now supports &quot;wellspring&quot; Apple keyboards.      <li>The <a href="https://man.openbsd.org/OpenBSD-current/man4/ukbd.4">ukbd(4)</a> driver now supports &quot;wellspring&quot; Apple keyboards.
     <li>The <a href="https://man.openbsd.org/OpenBSD-current/man4/pms.4?query=pms&sec=4">pms(4)</a> driver now supports click-and-drag with Elantech v4 touchpads.      <li>The <a href="https://man.openbsd.org/OpenBSD-current/man4/pms.4">pms(4)</a> driver now supports click-and-drag with Elantech v4 touchpads.
     <li>The <a href="https://man.openbsd.org/OpenBSD-current/man4/umodem.4?query=umodem&sec=4">umodem(4)</a> driver now supports Arduino Leonardo devices.      <li>The <a href="https://man.openbsd.org/OpenBSD-current/man4/umodem.4">umodem(4)</a> driver now supports Arduino Leonardo devices.
     <li>The <a href="https://man.openbsd.org/OpenBSD-current/man4/sk.4?query=sk&sec=4">sk(4)</a> driver now supports receive ring scaling.      <li>The <a href="https://man.openbsd.org/OpenBSD-current/man4/sk.4">sk(4)</a> driver now supports receive ring scaling.
     <li>Replaced custom jumbo allocators in      <li>Replaced custom jumbo allocators in
     <a href="https://man.openbsd.org/OpenBSD-current/man4/sk.4?query=sk&sec=4">sk(4)</a>,      <a href="https://man.openbsd.org/OpenBSD-current/man4/sk.4">sk(4)</a>,
     <a href="https://man.openbsd.org/OpenBSD-current/man4/nge.4?query=nge&sec=4">nge(4)</a>,      <a href="https://man.openbsd.org/OpenBSD-current/man4/nge.4">nge(4)</a>,
     <a href="https://man.openbsd.org/OpenBSD-current/man4/lge.4?query=lge&sec=4">lge(4)</a>, and      <a href="https://man.openbsd.org/OpenBSD-current/man4/lge.4">lge(4)</a>, and
     <a href="https://man.openbsd.org/OpenBSD-current/man4/ti.4?query=ti&sec=4">ti(4)</a> with      <a href="https://man.openbsd.org/OpenBSD-current/man4/ti.4">ti(4)</a> with
     <a href="https://man.openbsd.org/OpenBSD-current/man9/MCLGETI.9?query=MCLGETI&sec=9">MCLGETI(9)</a>.      <a href="https://man.openbsd.org/OpenBSD-current/man9/MCLGETI.9">MCLGETI(9)</a>.
     <li>Wireless network scanning problems with the <a href="https://man.openbsd.org/OpenBSD-current/man4/iwn.4?query=iwn&sec=4">iwn(4)</a> driver have been fixed.      <li>Wireless network scanning problems with the <a href="https://man.openbsd.org/OpenBSD-current/man4/iwn.4">iwn(4)</a> driver have been fixed.
     <li>Support for RS* IGP Radeon devices in the <a href="https://man.openbsd.org/OpenBSD-current/man4/radeondrm.4?query=radeondrm&sec=4">radeondrm(4)</a> driver has been fixed.      <li>Support for RS* IGP Radeon devices in the <a href="https://man.openbsd.org/OpenBSD-current/man4/radeondrm.4">radeondrm(4)</a> driver has been fixed.
     <li>PowerMac7,2 and PowerMac7,3 can now boot with a multiprocessor kernel.      <li>PowerMac7,2 and PowerMac7,3 can now boot with a multiprocessor kernel.
     </ul>      </ul>
 <p>  <p>
   
 <li>Removed hardware support:  <li>Removed hardware support:
     <ul>      <ul>
     <li>The <a href="https://man.openbsd.org/OpenBSD-5.6/man4/lofn.4?query=lofn&sec=4">lofn(4)</a> and <a href="https://man.openbsd.org/OpenBSD-5.6/man4/nofn.4?query=nofn&sec=4">nofn(4)</a> drivers for Hifn crypto accelerator devices have been removed.      <li>The <a href="https://man.openbsd.org/OpenBSD-5.6/man4/lofn.4">lofn(4)</a> and <a href="https://man.openbsd.org/OpenBSD-5.6/man4/nofn.4">nofn(4)</a> drivers for Hifn crypto accelerator devices have been removed.
     <li>The <a href="https://man.openbsd.org/OpenBSD-5.6/man4/art.4?query=art&sec=4">art(4)</a> driver for Accoom Networks Artery T1/E1 devices has been removed.      <li>The <a href="https://man.openbsd.org/OpenBSD-5.6/man4/art.4">art(4)</a> driver for Accoom Networks Artery T1/E1 devices has been removed.
     <li>The <a href="https://man.openbsd.org/OpenBSD-5.6/man4/urio.4?query=urio&sec=4">urio(4)</a> driver for Diamond Multimedia Rio MP3 players has been removed.      <li>The <a href="https://man.openbsd.org/OpenBSD-5.6/man4/urio.4">urio(4)</a> driver for Diamond Multimedia Rio MP3 players has been removed.
     </ul>      </ul>
 <p>  <p>
   
Line 129 
Line 130 
     <ul>      <ul>
     <li>The routing table is now used for most of the address lookup operations superseding the RB-tree and IPv4 address list.      <li>The routing table is now used for most of the address lookup operations superseding the RB-tree and IPv4 address list.
     <li>The SipHash algorithm is now used for PCB hashing,      <li>The SipHash algorithm is now used for PCB hashing,
     <a href="https://man.openbsd.org/OpenBSD-current/man4/trunk.4?query=trunk&sec=4">trunk(4)</a> loadbalancing,      <a href="https://man.openbsd.org/OpenBSD-current/man4/trunk.4">trunk(4)</a> loadbalancing,
     <a href="https://man.openbsd.org/OpenBSD-current/man4/pf.4?query=pf&sec=4">pf(4)</a> and      <a href="https://man.openbsd.org/OpenBSD-current/man4/pf.4">pf(4)</a> and
     <a href="https://man.openbsd.org/OpenBSD-current/man4/bridge.4?query=bridge&sec=4">bridge(4)</a>.      <a href="https://man.openbsd.org/OpenBSD-current/man4/bridge.4">bridge(4)</a>.
     <li>Traffic destinated to link-local IPv6 addresses can now be seen with      <li>Traffic destinated to link-local IPv6 addresses can now be seen with
     <a href="https://man.openbsd.org/OpenBSD-current/man8/tcpdump.8?query=tcpdump&sec=8">tcpdump(8)</a>.      <a href="https://man.openbsd.org/OpenBSD-current/man8/tcpdump.8">tcpdump(8)</a>.
     <li>A <a href="https://man.openbsd.org/?query=carp&sektion=4">carp(4)</a> now needs to be configured with an explicit <em>carpdev</em> parent interface.      <li>A <a href="https://man.openbsd.org/carp.4">carp(4)</a> now needs to be configured with an explicit <em>carpdev</em> parent interface.
     <li>The      <li>The
     <a href="https://man.openbsd.org/OpenBSD-current/man9/mbuf.9?query=mbuf&sec=9">mbuf(9)</a>      <a href="https://man.openbsd.org/OpenBSD-current/man9/mbuf.9">mbuf(9)</a>
     layer has been made mpsafe.      layer has been made mpsafe.
     <li>Introduce mbuf_list and mbuf_queue structures and APIs.      <li>Introduce mbuf_list and mbuf_queue structures and APIs.
     <li>Support changing the IPv6 input queue length via      <li>Support changing the IPv6 input queue length via
     <a href="https://man.openbsd.org/?query=sysctl&amp;sektion=1">sysctl(1)</a> and net.inet6.ip6.ifq.      <a href="https://man.openbsd.org/sysctl.1">sysctl(1)</a> and net.inet6.ip6.ifq.
     </ul>      </ul>
 <p>  <p>
   
 <li>Installer improvements:  <li>Installer improvements:
     <ul>      <ul>
     <li>The <tt>etc</tt> and <tt>xetc</tt> sets are now part of <tt>base</tt> and      <li>The <code>etc</code> and <code>xetc</code> sets are now part of <code>base</code> and
       <tt>xbase</tt> and are not distributed separately anymore. They are extracted        <code>xbase</code> and are not distributed separately anymore. They are extracted
       from <tt>base</tt> and <tt>xbase</tt> during installation and upgrades.<br>        from <code>base</code> and <code>xbase</code> during installation and upgrades.<br>
       <b>Note that this includes the <tt>rc</tt> and <tt>rc.conf</tt> files!</b>        <b>Note that this includes the <code>rc</code> and <code>rc.conf</code> files!</b>
     <li>The installer now supports      <li>The installer now supports
       <a href="https://man.openbsd.org/OpenBSD-current/man4/trunk.4?query=trunk&sec=4">trunk(4)</a>        <a href="https://man.openbsd.org/OpenBSD-current/man4/trunk.4">trunk(4)</a>
       interfaces during upgrades.        interfaces during upgrades.
     <li>The discovery of the responsefile location for unattended installation and      <li>The discovery of the responsefile location for unattended installation and
       upgrades has been extended to be more flexible.        upgrades has been extended to be more flexible.
       <ul>        <ul>
       <li>Ask for the location if DHCP discovery fails for location or mode.        <li>Ask for the location if DHCP discovery fails for location or mode.
       <li>Provide a default URL if the 'next-server' DHCP option is found.        <li>Provide a default URL if the 'next-server' DHCP option is found.
       <li>Use <tt>/auto_install.conf</tt> or <tt>/auto_upgrade.conf</tt> if present.        <li>Use <code>/auto_install.conf</code> or <code>/auto_upgrade.conf</code> if present.
       <li>Automatically start the installer in unattended mode if either one of these        <li>Automatically start the installer in unattended mode if either one of these
         files is present when the system boots.          files is present when the system boots.
       </ul>        </ul>
       <li>Ignore hostname.if.* files when upgrading.        <li>Ignore hostname.if.* files when upgrading.
       <li>Configure all physical interfaces before any dynamic interface types (e.g. trunks, vlans) when upgrading.        <li>Configure all physical interfaces before any dynamic interface types (e.g. trunks, vlans) when upgrading.
     <li>      <li>
     <a href="https://man.openbsd.org/?query=fdisk&amp;sektion=8">fdisk(8)</a> now zeros out GPT signatures found when writing out an MBR that has been re-initialized and has no EFI or EFISYS partition.      <a href="https://man.openbsd.org/fdisk.8">fdisk(8)</a> now zeros out GPT signatures found when writing out an MBR that has been re-initialized and has no EFI or EFISYS partition.
     <li>Fixed manipulation of 'ro' and 'rw' fstab options to avoid damage to other options that happen to contain 'ro' or 'rw'.      <li>Fixed manipulation of 'ro' and 'rw' fstab options to avoid damage to other options that happen to contain 'ro' or 'rw'.
     <li>The ramdisk binary (one binary contains all the commands) is now compiled without optimization and security features.  The benefit is a substantial saving in space, allowing more features in the future.      <li>The ramdisk binary (one binary contains all the commands) is now compiled without optimization and security features.  The benefit is a substantial saving in space, allowing more features in the future.
     </ul>      </ul>
Line 173 
Line 174 
   
 <li>Routing daemons and other userland network improvements:  <li>Routing daemons and other userland network improvements:
     <ul>      <ul>
     <li>nginx has been removed from base -- use the package if you need it.      <li>nginx has been removed from base &ndash; use the package if you need it.
     <li>sliplogin has been removed.      <li>sliplogin has been removed.
     <li>Sendmail has been removed from base -- use the package if you need it.      <li>Sendmail has been removed from base &ndash; use the package if you need it.
     <li>IPv6 router solicitations are now sent by the kernel ("inet6 autoconf"); rtsol(8) and rtsold(8) are no longer necessary and have been removed.      <li>IPv6 router solicitations are now sent by the kernel ("inet6 autoconf"); rtsol(8) and rtsold(8) are no longer necessary and have been removed.
     <li>Enhancements and bugfixes in <a href="https://man.openbsd.org/?query=arp&sektion=8">arp(8)</a> and <a href="https://man.openbsd.org/?query=ndp&sektion=8">ndp(8)</a>      <li>Enhancements and bugfixes in <a href="https://man.openbsd.org/arp.8">arp(8)</a> and <a href="https://man.openbsd.org/ndp.8">ndp(8)</a>
     <li>The effects of the AI_ADDRCONFIG flag on <a href="https://man.openbsd.org/?query=getaddrinfo&amp;sektion=3">getaddrinfo(3)</a> results are limited to DNS queries. This avoids erratic behavior with transient network problems, "raw" addresses and localhost entries in <a href="https://man.openbsd.org/?query=hosts&amp;sektion=5">/etc/hosts</a>.      <li>The effects of the AI_ADDRCONFIG flag on <a href="https://man.openbsd.org/getaddrinfo.3">getaddrinfo(3)</a> results are limited to DNS queries. This avoids erratic behavior with transient network problems, "raw" addresses and localhost entries in <a href="https://man.openbsd.org/hosts.5">/etc/hosts</a>.
     <li><a href="https://man.openbsd.org/?query=gethostbyname&amp;sektion=3">gethostbyname(3)</a> now no longer fails when more than 16 addresses/aliases are returned. The original pre-asr limit of 35 has been restored, with additional results being truncated.      <li><a href="https://man.openbsd.org/gethostbyname.3">gethostbyname(3)</a> now no longer fails when more than 16 addresses/aliases are returned. The original pre-asr limit of 35 has been restored, with additional results being truncated.
     <li><a href="https://man.openbsd.org/?query=tftp&amp;sektion=1">tftp(1)</a> now supports sending or receiving files larger than 65536 blocks in size.      <li><a href="https://man.openbsd.org/tftp.1">tftp(1)</a> now supports sending or receiving files larger than 65536 blocks in size.
     <li><a href="https://man.openbsd.org/?query=tpd&amp;sec=8">ntpd(8)</a> now supports authenticated TLS constraints.      <li><a href="https://man.openbsd.org/tpd&amp;sec=8">ntpd(8)</a> now supports authenticated TLS constraints.
     </ul>      </ul>
 <p>  <p>
   
Line 190 
Line 191 
     <li>Stricter enforcement of W^X in the kernel address space, especially on architectures with the right featureset (amd64, in particular, has seen substantial improvements).      <li>Stricter enforcement of W^X in the kernel address space, especially on architectures with the right featureset (amd64, in particular, has seen substantial improvements).
     <li>Support for loadable kernel modules has been removed.      <li>Support for loadable kernel modules has been removed.
     <li>procfs has been removed.      <li>procfs has been removed.
     <li>Comprehensive audit of the tree to use the <a href="https://man.openbsd.org/?query=reallocarray&amp;sektion=3">reallocarray(3)</a> idiom throughout.      <li>Comprehensive audit of the tree to use the <a href="https://man.openbsd.org/reallocarray.3">reallocarray(3)</a> idiom throughout.
     <li>Many conversions from <a href="https://man.openbsd.org/?query=select&amp;sektion=2">select(2)</a> to <a href="https://man.openbsd.org/?query=poll&amp;sektion=2">poll(2)</a>.      <li>Many conversions from <a href="https://man.openbsd.org/select.2">select(2)</a> to <a href="https://man.openbsd.org/poll.2">poll(2)</a>.
     <li>/var/tmp is now a symbolic link to /tmp, as a first step towards reducing the "fill it up" attack surface against the /var partition.      <li>/var/tmp is now a symbolic link to /tmp, as a first step towards reducing the "fill it up" attack surface against the /var partition.
     <li><a href="https://man.openbsd.org/?query=memcpy&amp;sektion=3">memcpy(3)</a> with overlapping arguments now aborts a program (with a syslog report), allowing these problems to be found.  Overlapping copies should use <a href="https://man.openbsd.org/?query=memmove&amp;sektion=3">memmove(3)</a>.  Sometime after 5.7 release, having learned more about the situation and repairing instances that are discovered by users during release use, we will go back to the optimized version.      <li><a href="https://man.openbsd.org/memcpy.3">memcpy(3)</a> with overlapping arguments now aborts a program (with a syslog report), allowing these problems to be found.  Overlapping copies should use <a href="https://man.openbsd.org/memmove.3">memmove(3)</a>.  Sometime after 5.7 release, having learned more about the situation and repairing instances that are discovered by users during release use, we will go back to the optimized version.
     <li>Change      <li>Change
     <a href="https://man.openbsd.org/?query=rand&amp;sektion=3">rand(3)</a>,      <a href="https://man.openbsd.org/rand.3">rand(3)</a>,
     <a href="https://man.openbsd.org/?query=random&amp;sektion=3">random(3)</a>,      <a href="https://man.openbsd.org/random.3">random(3)</a>,
     <a href="https://man.openbsd.org/?query=drand48&amp;sektion=3">drand48(3)</a>,      <a href="https://man.openbsd.org/drand48.3">drand48(3)</a>,
     <a href="https://man.openbsd.org/?query=lrand48&amp;sektion=3">lrand48(3)</a>,      <a href="https://man.openbsd.org/lrand48.3">lrand48(3)</a>,
     <a href="https://man.openbsd.org/?query=mrand48&amp;sektion=3">mrand48(3)</a>,      <a href="https://man.openbsd.org/mrand48.3">mrand48(3)</a>,
     <a href="https://man.openbsd.org/?query=srand48&amp;sektion=3">srand48(3)</a>      <a href="https://man.openbsd.org/srand48.3">srand48(3)</a>
     to return non-deterministic strong random values by default, sourced from      to return non-deterministic strong random values by default, sourced from
     <a href="https://man.openbsd.org/?query=arc4random&amp;sektion=3">arc4random(3)</a>.      <a href="https://man.openbsd.org/arc4random.3">arc4random(3)</a>.
     New functions      New functions
     <a href="https://man.openbsd.org/?query=srand_deterministic&amp;sektion=3">srand_deterministic(3)</a>,      <a href="https://man.openbsd.org/srand_deterministic.3">srand_deterministic(3)</a>,
     <a href="https://man.openbsd.org/?query=srandom_deterministic&amp;sektion=3">srandom_deterministic(3)</a>,      <a href="https://man.openbsd.org/srandom_deterministic.3">srandom_deterministic(3)</a>,
     <a href="https://man.openbsd.org/?query=seed48_deterministic&amp;sektion=3">seed48_deterministic(3)</a> and      <a href="https://man.openbsd.org/seed48_deterministic.3">seed48_deterministic(3)</a> and
     <a href="https://man.openbsd.org/?query=lcong48_deterministic&amp;sektion=3">lcong48_deterministic(3)</a>      <a href="https://man.openbsd.org/lcong48_deterministic.3">lcong48_deterministic(3)</a>
     are added for cases where determinism needs to be requested.      are added for cases where determinism needs to be requested.
     <li>At resume (or unhibernate) time, use a variety of methods to reseed the random number generator.  This also works on VMs which wake up (if a wakeup event is seen).      <li>At resume (or unhibernate) time, use a variety of methods to reseed the random number generator.  This also works on VMs which wake up (if a wakeup event is seen).
     <li>All architectures have been transitioned to static PIE, meaning the statically linked binaries in /bin and /sbin now have randomly located text segments.      <li>All architectures have been transitioned to static PIE, meaning the statically linked binaries in /bin and /sbin now have randomly located text segments.
     <li>Allow larger .openbsd.randomdata ELF segments.      <li>Allow larger .openbsd.randomdata ELF segments.
     <li>Sync kernel AES code and <a href="https://man.openbsd.org/?query=ssh&sektion=1">ssh(1)</a> AES code to the one shipped with OpenSSL/LibreSSL.      <li>Sync kernel AES code and <a href="https://man.openbsd.org/ssh.1">ssh(1)</a> AES code to the one shipped with OpenSSL/LibreSSL.
     <li>Removed <a href="https://man.openbsd.org/?query=passwd&sektion=1">passwd(1)</a> support for all password ciphers except <a href="https://man.openbsd.org/?query=blowfish&sektion=3">blowfish(3)</a>.      <li>Removed <a href="https://man.openbsd.org/passwd.1">passwd(1)</a> support for all password ciphers except <a href="https://man.openbsd.org/blowfish.3">blowfish(3)</a>.
     <li>Use sha512 instead of md5 for <a href="https://man.openbsd.org/?query=tcp&sektion=4">tcp(4)</a> initial sequence number.      <li>Use sha512 instead of md5 for <a href="https://man.openbsd.org/tcp.4">tcp(4)</a> initial sequence number.
     <li>Use sha512 instead of md5 in the random number generator.      <li>Use sha512 instead of md5 in the random number generator.
     <li>Delete secret or secret-derived data in many base utilities with <a href="https://man.openbsd.org/?query=explicit_bzero&sektion=3">explicit_bzero(3)</a>.      <li>Delete secret or secret-derived data in many base utilities with <a href="https://man.openbsd.org/explicit_bzero.3">explicit_bzero(3)</a>.
     </ul>      </ul>
 <p>  <p>
   
 <li>Assorted improvements:  <li>Assorted improvements:
     <ul>      <ul>
     <li>New <a href="https://man.openbsd.org/?query=rcctl&amp;sektion=8"">rcctl(8)</a> utility to control daemons.      <li>New <a href="https://man.openbsd.org/rcctl.8">rcctl(8)</a> utility to control daemons.
     <li><a href="https://man.openbsd.org/?query=fw_update&amp;sektion=1">fw_update(1)</a> has been rewritten to be faster and smarter.      <li><a href="https://man.openbsd.org/fw_update.1">fw_update(1)</a> has been rewritten to be faster and smarter.
     <li>Cleanup <a href="https://man.openbsd.org/?query=event&amp;sektion=3">libevent(3)</a>,      <li>Cleanup <a href="https://man.openbsd.org/event.3">libevent(3)</a>,
         the compatibility layer for other operating systems has been removed.          the compatibility layer for other operating systems has been removed.
         The API is still compatible with upstream libevent 1.4.15-stable.          The API is still compatible with upstream libevent 1.4.15-stable.
     <li><a href="https://man.openbsd.org/?query=openssl&amp;sektion=1">openssl(1)</a>      <li><a href="https://man.openbsd.org/openssl.1">openssl(1)</a>
         s_client now supports a -proxy parameter for connecting over an HTTP proxy.          s_client now supports a -proxy parameter for connecting over an HTTP proxy.
     <li>gzsig has been removed.      <li>gzsig has been removed.
     <li>Switch to fast assembly versions of some libc functions on amd64.      <li>Switch to fast assembly versions of some libc functions on amd64.
     <li>Frequency scaling has been moved from <a href="https://man.openbsd.org/?query=apmd&amp;sektion=1">apmd(8)</a> to the kernel with an improved algorithm.      <li>Frequency scaling has been moved from <a href="https://man.openbsd.org/apmd.1">apmd(8)</a> to the kernel with an improved algorithm.
     <li>Switch last workq API uses to      <li>Switch last workq API uses to
     <a href="https://man.openbsd.org/?query=taskq_create&amp;sektion=9">taskq</a> API and remove all traces of workq.      <a href="https://man.openbsd.org/taskq_create.9">taskq</a> API and remove all traces of workq.
     <li>Use      <li>Use
     <a href="https://man.openbsd.org/?query=services&amp;sektion=5">services(5)</a> names in the default pf rules in force during startup.      <a href="https://man.openbsd.org/services.5">services(5)</a> names in the default pf rules in force during startup.
     <li>      <li>
     <a href="https://man.openbsd.org/?query=what&amp;sektion=1">what(1)</a> now correctly displays &#36;OpenBSD&#36; expansions.      <a href="https://man.openbsd.org/what.1">what(1)</a> now correctly displays &#36;OpenBSD&#36; expansions.
     <li>      <li>
     <a href="https://man.openbsd.org/?query=dhcpd&amp;sektion=8">dhcpd(8)</a> now removes addresses from its pf table a single time when they expire, rather than at every timeout after the expiry.      <a href="https://man.openbsd.org/dhcpd.8">dhcpd(8)</a> now removes addresses from its pf table a single time when they expire, rather than at every timeout after the expiry.
     <li>      <li>
     <a href="https://man.openbsd.org/?query=dhcpd&amp;sektion=8">dhcpd(8)</a> now ensures that the pf table process exits when the main process does.      <a href="https://man.openbsd.org/dhcpd.8">dhcpd(8)</a> now ensures that the pf table process exits when the main process does.
     <li>      <li>
     <a href="https://man.openbsd.org/?query=dhcpd&amp;sektion=8">dhcpd(8)</a> has more informative log entries for DHCPACKs issued in response to DHCPINFORM messages.      <a href="https://man.openbsd.org/dhcpd.8">dhcpd(8)</a> has more informative log entries for DHCPACKs issued in response to DHCPINFORM messages.
     <li>Added POSIX types blkcnt_t (int64) and blksize_t (int32), and used them for st_blocks (formerly int64_t) and st_blksize (formerly u_int32_t) in struct stat.      <li>Added POSIX types blkcnt_t (int64) and blksize_t (int32), and used them for st_blocks (formerly int64_t) and st_blksize (formerly u_int32_t) in struct stat.
     <li>Improved typography for      <li>Improved typography for
     <a href="https://man.openbsd.org/?query=banner&amp;sektion=6">banner(6)</a>.      <a href="https://man.openbsd.org/banner.6">banner(6)</a>.
     <li>Allow <a href="https://man.openbsd.org/?query=hangman&amp;sektion=6">hangman</a>      <li>Allow <a href="https://man.openbsd.org/hangman.6">hangman</a>
     to play against any ELF file.      to play against any ELF file.
     <li>      <li>
     <a href="https://man.openbsd.org/?query=dhclient&amp;sektion=8">dhclient(8)</a> adjusts MTU when the interface-mtu DHCP option is provided.      <a href="https://man.openbsd.org/dhclient.8">dhclient(8)</a> adjusts MTU when the interface-mtu DHCP option is provided.
     <li>Various memory leaks in      <li>Various memory leaks in
     <a href="https://man.openbsd.org/?query=dhclient&amp;sektion=8">dhclient(8)</a> plugged, providing more stability for long running (in terms of time or renewals) instances.      <a href="https://man.openbsd.org/dhclient.8">dhclient(8)</a> plugged, providing more stability for long running (in terms of time or renewals) instances.
     <li>The      <li>The
     <a href="https://man.openbsd.org/?query=dhclient&amp;sektion=8">dhclient(8)</a>      <a href="https://man.openbsd.org/dhclient.8">dhclient(8)</a>
     command line options -q (quiet) and -d (don't daemonize) are now mutually exclusive.      command line options -q (quiet) and -d (don't daemonize) are now mutually exclusive.
     <li>The communication between the privileged and unprivileged      <li>The communication between the privileged and unprivileged
     <a href="https://man.openbsd.org/?query=dhclient&amp;sektion=8">dhclient(8)</a> processes was reworked to further minimize information sharing.      <a href="https://man.openbsd.org/dhclient.8">dhclient(8)</a> processes was reworked to further minimize information sharing.
     <li>      <li>
     <a href="https://man.openbsd.org/?query=dhclient&amp;sektion=8">dhclient(8)</a> ensures lease timeouts (renew, rebind, expire) are sane and uses default values closer to RFC suggestions.      <a href="https://man.openbsd.org/dhclient.8">dhclient(8)</a> ensures lease timeouts (renew, rebind, expire) are sane and uses default values closer to RFC suggestions.
     <li>      <li>
     <a href="https://man.openbsd.org/?query=dhclient&amp;sektion=8">dhclient(8)</a> no longer crashes when a lease expires and cannot be renewed or replaced.      <a href="https://man.openbsd.org/dhclient.8">dhclient(8)</a> no longer crashes when a lease expires and cannot be renewed or replaced.
     <li>      <li>
     <a href="https://man.openbsd.org/?query=dhclient&amp;sektion=8">dhclient(8)</a> improved tracking network interface link states.      <a href="https://man.openbsd.org/dhclient.8">dhclient(8)</a> improved tracking network interface link states.
     <li>Improved network error tracking and accounting in      <li>Improved network error tracking and accounting in
     <a href="https://man.openbsd.org/?query=dhclient&amp;sektion=8">dhclient(8)</a>.      <a href="https://man.openbsd.org/dhclient.8">dhclient(8)</a>.
     <li>Private number conversion functions in      <li>Private number conversion functions in
     <a href="https://man.openbsd.org/?query=dhclient&amp;sektion=8">dhclient(8)</a> eliminated in favour of standard library functions.      <a href="https://man.openbsd.org/dhclient.8">dhclient(8)</a> eliminated in favour of standard library functions.
     <li>Further signal race cleanups in      <li>Further signal race cleanups in
     <a href="https://man.openbsd.org/?query=ftp&amp;sektion=1">ftp(1)</a>.      <a href="https://man.openbsd.org/ftp.1">ftp(1)</a>.
     <li>BIND has been retired, encouraging use of      <li>BIND has been retired, encouraging use of
     <a href="https://man.openbsd.org/?query=nsd&amp;sektion=8">nsd(8)</a> and      <a href="https://man.openbsd.org/nsd.8">nsd(8)</a> and
     <a href="https://man.openbsd.org/?query=unbound&amp;sektion=8">unbound(8)</a>.      <a href="https://man.openbsd.org/unbound.8">unbound(8)</a>.
     <li>Significant namespace cleanup in the /usr/include files, especially related to &lt;sys/param.h&gt; and &lt;limits.h&gt;.      <li>Significant namespace cleanup in the /usr/include files, especially related to &lt;sys/param.h&gt; and &lt;limits.h&gt;.
     <li><a href="https://man.openbsd.org/?query=softraid&amp;sektion=4">softraid(4)</a> RAID1 and CRYPTO volumes are now bootable on the sparc64 platform.      <li><a href="https://man.openbsd.org/softraid.4">softraid(4)</a> RAID1 and CRYPTO volumes are now bootable on the sparc64 platform.
     <li><a href="https://man.openbsd.org/?query=relayd&amp;sektion=8">relayd(8)</a> now uses &quot;TLS&quot; rather than &quot;SSL&quot; terminology to reflect the deprecation of the latter.      <li><a href="https://man.openbsd.org/relayd.8">relayd(8)</a> now uses &quot;TLS&quot; rather than &quot;SSL&quot; terminology to reflect the deprecation of the latter.
     <li><a href="https://man.openbsd.org/?query=relayd&amp;sektion=8">relayd(8)</a> now supports the random and source-hash modes with redirections.      <li><a href="https://man.openbsd.org/relayd.8">relayd(8)</a> now supports the random and source-hash modes with redirections.
     <li><a href="https://man.openbsd.org/?query=relayd&amp;sektion=8">relayd(8)</a> now supports the <a href="https://cvsweb.openbsd.org/src/share/snmp/OPENBSD-RELAYD-MIB.txt?rev=1.1">OPENBSD-RELAYD-MIB</a> via agentx with <a href="https://man.openbsd.org/?query=snmpd&amp;sektion=8">snmpd(8)</a>.      <li><a href="https://man.openbsd.org/relayd.8">relayd(8)</a> now supports the <a href="https://cvsweb.openbsd.org/src/share/snmp/OPENBSD-RELAYD-MIB.txt?rev=1.1">OPENBSD-RELAYD-MIB</a> via agentx with <a href="https://man.openbsd.org/snmpd.8">snmpd(8)</a>.
     <li>Added interfaces for setting the close-on-exec flag and/or non-blocking mode on new file descriptors: <a href="https://man.openbsd.org/?query=pipe2&amp;sektion=2">pipe2(2)</a>, <a href="https://man.openbsd.org/?query=dup3&amp;sektion=2">dup3(2)</a>, <a href="https://man.openbsd.org/?query=accept4&amp;sektion=2">accept4(2)</a>, <a href="https://man.openbsd.org/?query=mkostemp&amp;sektion=3">mkostemp(3)</a>, <a href="https://man.openbsd.org/?query=mkostemps&amp;sektion=3">mkostemps(3)</a>, the <tt>SOCK_CLOEXEC</tt> and <tt>SOCK_NONBLOCK</tt> flags for <a href="https://man.openbsd.org/?query=socket&amp;sektion=2">socket(2)</a> and <a href="https://man.openbsd.org/?query=socketpair&amp;sektion=2">socketpair(2)</a>, and the <tt>MSG_CMSG_CLOEXEC</tt> flag for <a href="https://man.openbsd.org/?query=recvmsg&amp;sektion=2">recvmsg(2)</a>.  In addition, <a href="https://man.openbsd.org/?query=posix_spawn_file_actions_adddup2&amp;sektion=3">posix_spawn_file_actions_adddup2(3)</a> now always clears the close-on-exec flag.      <li>Added interfaces for setting the close-on-exec flag and/or non-blocking mode on new file descriptors: <a href="https://man.openbsd.org/pipe2.2">pipe2(2)</a>, <a href="https://man.openbsd.org/dup3.2">dup3(2)</a>, <a href="https://man.openbsd.org/accept4.2">accept4(2)</a>, <a href="https://man.openbsd.org/mkostemp.3">mkostemp(3)</a>, <a href="https://man.openbsd.org/mkostemps.3">mkostemps(3)</a>, the <code>SOCK_CLOEXEC</code> and <code>SOCK_NONBLOCK</code> flags for <a href="https://man.openbsd.org/socket.2">socket(2)</a> and <a href="https://man.openbsd.org/socketpair.2">socketpair(2)</a>, and the <code>MSG_CMSG_CLOEXEC</code> flag for <a href="https://man.openbsd.org/recvmsg.2">recvmsg(2)</a>.  In addition, <a href="https://man.openbsd.org/posix_spawn_file_actions_adddup2.3">posix_spawn_file_actions_adddup2(3)</a> now always clears the close-on-exec flag.
     <li>Added interfaces for setting the close-on-exec flag on new FILE handles and for requesting exclusive creation via the the 'e' and 'x' mode letters for <a href="https://man.openbsd.org/?query=fopen&amp;sektion=3">fopen(3)</a>, <a href="https://man.openbsd.org/?query=fdopen&amp;sektion=3">fdopen(3)</a>, <a href="https://man.openbsd.org/?query=freopen&amp;sektion=3">freopen(3)</a>, and <a href="https://man.openbsd.org/?query=popen&amp;sektion=3">popen(3)</a>.      <li>Added interfaces for setting the close-on-exec flag on new FILE handles and for requesting exclusive creation via the the 'e' and 'x' mode letters for <a href="https://man.openbsd.org/fopen.3">fopen(3)</a>, <a href="https://man.openbsd.org/fdopen.3">fdopen(3)</a>, <a href="https://man.openbsd.org/freopen.3">freopen(3)</a>, and <a href="https://man.openbsd.org/popen.3">popen(3)</a>.
     <li>Many library functions and programs changed to use the above for safety or simplicity.      <li>Many library functions and programs changed to use the above for safety or simplicity.
     <li>Added <a href="https://man.openbsd.org/?query=chflagsat&amp;sektion=2">chflagsat(2)</a>, <a href="https://man.openbsd.org/?query=sockatmark&amp;sektion=3">sockatmark(3)</a>, and <a href="https://man.openbsd.org/?query=stravis&amp;sektion=3">stravis(3)</a>.      <li>Added <a href="https://man.openbsd.org/chflagsat.2">chflagsat(2)</a>, <a href="https://man.openbsd.org/sockatmark.3">sockatmark(3)</a>, and <a href="https://man.openbsd.org/stravis.3">stravis(3)</a>.
     <li>Merged performance and safety fixes for <a href="https://man.openbsd.org/?query=fts&amp;sektion=3">fts(3)</a> from FreeBSD.      <li>Merged performance and safety fixes for <a href="https://man.openbsd.org/fts.3">fts(3)</a> from FreeBSD.
     <li>Merged fixes for file descriptor leaks in various <a href="https://man.openbsd.org/?query=rpc&amp;sektion=3">rpc(3)</a> functions from NetBSD.      <li>Merged fixes for file descriptor leaks in various <a href="https://man.openbsd.org/rpc.3">rpc(3)</a> functions from NetBSD.
     <li>Added a <tt>kern.global_ptrace</tt> <a href="https://man.openbsd.org/?query=sysctl&amp;sektion=1">sysctl(1)</a> to disable, by default, the ability to <a href="https://man.openbsd.org/?query=ptrace&amp;sektion=2">ptrace(2)</a> processes that aren't your descendent.      <li>Added a <code>kern.global_ptrace</code> <a href="https://man.openbsd.org/sysctl.1">sysctl(1)</a> to disable, by default, the ability to <a href="https://man.openbsd.org/ptrace.2">ptrace(2)</a> processes that aren't your descendent.
     <li><a href="https://man.openbsd.org/?query=kdump&amp;sektion=1">kdump(1)</a> now always displays both the numeric and the textual forms for users, groups, timestamps, and sysctl ids, eliminating the <tt>-r</tt> option.  It also auto-selects between decimal and hex format for arguments, renders more types of flags, and is more robust when parsing corrupt ktrace files.      <li><a href="https://man.openbsd.org/kdump.1">kdump(1)</a> now always displays both the numeric and the textual forms for users, groups, timestamps, and sysctl ids, eliminating the <code>-r</code> option.  It also auto-selects between decimal and hex format for arguments, renders more types of flags, and is more robust when parsing corrupt ktrace files.
     <li><a href="https://man.openbsd.org/?query=chmod&amp;sektion=1">chmod(1)</a>/<a href="https://man.openbsd.org/?query=chgrp&amp;sektion=1">chgrp(1)</a>/<a href="https://man.openbsd.org/?query=chown&amp;sektion=8">chown(8)</a> now comply with POSIX's requirements when they encounter symlinks when the <tt>-R</tt> option is used, and are safe from race conditions when doing so.      <li><a href="https://man.openbsd.org/chmod.1">chmod(1)</a>/<a href="https://man.openbsd.org/chgrp.1">chgrp(1)</a>/<a href="https://man.openbsd.org/chown.8">chown(8)</a> now comply with POSIX's requirements when they encounter symlinks when the <code>-R</code> option is used, and are safe from race conditions when doing so.
     <li>The <a href="https://man.openbsd.org/?query=dmesg&sektion=8">dmesg(8)</a> utility can now display the console message buffer in addition to the system message buffer.      <li>The <a href="https://man.openbsd.org/dmesg.8">dmesg(8)</a> utility can now display the console message buffer in addition to the system message buffer.
     <li><a href="https://man.openbsd.org/?query=inetd&sektion=8">inetd(8)</a> now uses libevent instead of      <li><a href="https://man.openbsd.org/inetd.8">inetd(8)</a> now uses libevent instead of
     <a href="https://man.openbsd.org/?query=select&amp;sektion=3">select(3)</a>.      <a href="https://man.openbsd.org/select.3">select(3)</a>.
     <li>Reworking of the kernel      <li>Reworking of the kernel
     <a href="https://man.openbsd.org/OpenBSD-current/man9/pool.9?query=pool&sec=9">pool(9)</a>      <a href="https://man.openbsd.org/OpenBSD-current/man9/pool.9">pool(9)</a>
     implementation to provide mpsafety and pave the way for performance improvements.      implementation to provide mpsafety and pave the way for performance improvements.
     <li>Removed the      <li>Removed the
     <a href="https://man.openbsd.org/OpenBSD-5.6/man9/workq_add_task.9?query=workq_add_task&sec=9">workq API</a>      <a href="https://man.openbsd.org/OpenBSD-5.6/man9/workq_add_task.9">workq API</a>
     after replacing it with the      after replacing it with the
     <a href="https://man.openbsd.org/OpenBSD-current/man9/task_add.9?query=task_add&sec=9">task API</a>.      <a href="https://man.openbsd.org/OpenBSD-current/man9/task_add.9">task API</a>.
     <li>Add support for creating kernel threads that cannot sleep to      <li>Add support for creating kernel threads that cannot sleep to
     <a href="https://man.openbsd.org/OpenBSD-5.6/man9/taskq_create.9?query=taskq_create&sec=9">taskq_create(9)</a>.      <a href="https://man.openbsd.org/OpenBSD-5.6/man9/taskq_create.9">taskq_create(9)</a>.
     <li>Completed the implementation of the atomic (eg,      <li>Completed the implementation of the atomic (eg,
     <a href="https://man.openbsd.org/OpenBSD-current/man9/atomic_cas_uint.9?query=atomic_cas_uint&sec=9">atomic_cas_uint(9)</a>,      <a href="https://man.openbsd.org/OpenBSD-current/man9/atomic_cas_uint.9">atomic_cas_uint(9)</a>,
     <a href="https://man.openbsd.org/OpenBSD-current/man9/atomic_swap_uint.9?query=atomic_swap_uint&sec=9">atomic_swap_uint(9)</a>,      <a href="https://man.openbsd.org/OpenBSD-current/man9/atomic_swap_uint.9">atomic_swap_uint(9)</a>,
     <a href="https://man.openbsd.org/OpenBSD-current/man9/atomic_add_int.9?query=atomic_add_int&sec=9">atomic_add_int(9)</a>,      <a href="https://man.openbsd.org/OpenBSD-current/man9/atomic_add_int.9">atomic_add_int(9)</a>,
     <a href="https://man.openbsd.org/OpenBSD-current/man9/atomic_sub_int.9?query=atomic_sub_int&sec=9">atomic_sub_int(9)</a>,      <a href="https://man.openbsd.org/OpenBSD-current/man9/atomic_sub_int.9">atomic_sub_int(9)</a>,
     <a href="https://man.openbsd.org/OpenBSD-current/man9/atomic_inc_int.9?query=atomic_inc_int&sec=9">atomic_inc_int(9)</a>, and      <a href="https://man.openbsd.org/OpenBSD-current/man9/atomic_inc_int.9">atomic_inc_int(9)</a>, and
     <a href="https://man.openbsd.org/OpenBSD-current/man9/atomic_dec_int.9?query=atomic_inc_int&sec=9">atomic_dec_int(9)</a>)      <a href="https://man.openbsd.org/OpenBSD-current/man9/atomic_dec_int.9">atomic_dec_int(9)</a>)
     and membar      and membar
     (<a href="https://man.openbsd.org/OpenBSD-current/man9/membar_sync.9?query=membar_sync&sec=9">membar_sync(9)</a>)      (<a href="https://man.openbsd.org/OpenBSD-current/man9/membar_sync.9">membar_sync(9)</a>)
     APIs across all supported architectures.      APIs across all supported architectures.
     </ul>      </ul>
 <p>  <p>
   
 <li>OpenBSD <a href="https://man.openbsd.org/?query=httpd&amp;sektion=8">httpd(8)</a>:  <li>OpenBSD <a href="https://man.openbsd.org/httpd.8">httpd(8)</a>:
     <ul>      <ul>
     <li>SSLv2/3 is not supported anymore; renamed all occurrences of &quot;SSL&quot; to &quot;TLS&quot;.      <li>SSLv2/3 is not supported anymore; renamed all occurrences of &quot;SSL&quot; to &quot;TLS&quot;.
     <li>Various TLS improvements with better support for ECDHE/DHE forward secrecy.      <li>Various TLS improvements with better support for ECDHE/DHE forward secrecy.
     <li>Improved support for virtual hosts by supporting name- and IP- based aliases.      <li>Improved support for virtual hosts by supporting name- and IP- based aliases.
     <li>Added support for basic authentication by checking against files created with <a href="https://man.openbsd.org/?query=htpasswd&amp;sektion=1">htpasswd(1)</a>.      <li>Added support for basic authentication by checking against files created with <a href="https://man.openbsd.org/htpasswd.1">htpasswd(1)</a>.
     <li>Added support for custom error codes, blocking and dropping of connections.      <li>Added support for custom error codes, blocking and dropping of connections.
     <li>Added support for redirections and macros in specified target URLs.      <li>Added support for redirections and macros in specified target URLs.
     <li>Added the &quot;root strip&quot; option to sanitize PATH_INFO for some CGI scripts.      <li>Added the &quot;root strip&quot; option to sanitize PATH_INFO for some CGI scripts.
     <li>Added an option to specify an alternative log directory instead of /var/www/logs.      <li>Added an option to specify an alternative log directory instead of /var/www/logs.
     <li>Various FastCGI improvements; <a href="https://man.openbsd.org/?query=httpd&amp;sektion=8">httpd(8)</a> is now compatible with many well-known web applications.      <li>Various FastCGI improvements; <a href="https://man.openbsd.org/httpd.8">httpd(8)</a> is now compatible with many well-known web applications.
     <li>Various other fixes and improvements.      <li>Various other fixes and improvements.
     </ul>      </ul>
 <p>  <p>
Line 342 
Line 343 
     <ul>      <ul>
     <li>Potentially-incompatible changes:      <li>Potentially-incompatible changes:
       <ul>        <ul>
       <li><a href="https://man.openbsd.org/?query=sshd&amp;sektion=8">sshd(8)</a>:        <li><a href="https://man.openbsd.org/sshd.8">sshd(8)</a>:
         <tt>UseDNS</tt> now defaults to 'no'.  Configurations that match          <code>UseDNS</code> now defaults to 'no'.  Configurations that match
         against the client host name (via          against the client host name (via
         <a href="https://man.openbsd.org/?query=sshd_config&amp;sektion=5">sshd_config(5)</a>          <a href="https://man.openbsd.org/sshd_config.5">sshd_config(5)</a>
         or <tt>authorized_keys</tt>) may need to re-enable it or convert to          or <code>authorized_keys</code>) may need to re-enable it or convert to
         matching against addresses.          matching against addresses.
       </ul>        </ul>
     <li>New/changed features:      <li>New/changed features:
Line 354 
Line 355 
       <li>Much of OpenSSH's internal code has been re-factored to be more        <li>Much of OpenSSH's internal code has been re-factored to be more
         library-like.  These changes are mostly not user-visible, but          library-like.  These changes are mostly not user-visible, but
         have greatly improved OpenSSH's testability and internal layout.          have greatly improved OpenSSH's testability and internal layout.
       <li>Add <tt>FingerprintHash</tt> option to        <li>Add <code>FingerprintHash</code> option to
         <a href="https://man.openbsd.org/?query=ssh&amp;sektion=1">ssh(1)</a>          <a href="https://man.openbsd.org/ssh.1">ssh(1)</a>
         and          and
         <a href="https://man.openbsd.org/?query=sshd&amp;sektion=8">sshd(8)</a>,          <a href="https://man.openbsd.org/sshd.8">sshd(8)</a>,
         and equivalent command-line flags to the other tools to control          and equivalent command-line flags to the other tools to control
         algorithm used for key fingerprints.  The default changes from MD5          algorithm used for key fingerprints.  The default changes from MD5
         to SHA256 and format from hex to base64.  Fingerprints now have the          to SHA256 and format from hex to base64.  Fingerprints now have the
         hash algorithm prepended.  Please note that visual host keys will also          hash algorithm prepended.  Please note that visual host keys will also
         be different.          be different.
       <li><a href="https://man.openbsd.org/?query=ssh&amp;sektion=1">ssh(1)</a>,        <li><a href="https://man.openbsd.org/ssh.1">ssh(1)</a>,
         <a href="https://man.openbsd.org/?query=sshd&amp;sektion=8">sshd(8)</a>:          <a href="https://man.openbsd.org/sshd.8">sshd(8)</a>:
         Experimental host key rotation support.  Add a protocol extension          Experimental host key rotation support.  Add a protocol extension
         for a server to inform a client of all its available host keys after          for a server to inform a client of all its available host keys after
         authentication has completed.  The client may record the keys in          authentication has completed.  The client may record the keys in
         <tt>known_hosts</tt>, allowing it to upgrade to better host key          <code>known_hosts</code>, allowing it to upgrade to better host key
         algorithms and a server to gracefully rotate its keys.  The client          algorithms and a server to gracefully rotate its keys.  The client
         side of this is controlled by a <tt>UpdateHostkeys</tt> config option          side of this is controlled by a <code>UpdateHostkeys</code> config option
         (default off).          (default off).
       <li><a href="https://man.openbsd.org/?query=ssh&amp;sektion=1">ssh(1)</a>:        <li><a href="https://man.openbsd.org/ssh.1">ssh(1)</a>:
         Add a          Add a
         <a href="https://man.openbsd.org/?query=ssh_config&amp;sektion=5">ssh_config(5)</a>          <a href="https://man.openbsd.org/ssh_config.5">ssh_config(5)</a>
         <tt>HostbasedKeyType</tt> option to control which host public key types          <code>HostbasedKeyType</code> option to control which host public key types
         are tried during host-based authentication.          are tried during host-based authentication.
       <li><a href="https://man.openbsd.org/?query=ssh&amp;sektion=1">ssh(1)</a>,        <li><a href="https://man.openbsd.org/ssh.1">ssh(1)</a>,
         <a href="https://man.openbsd.org/?query=sshd&amp;sektion=8">sshd(8)</a>:          <a href="https://man.openbsd.org/sshd.8">sshd(8)</a>:
         fix connection-killing host key mismatch errors when          fix connection-killing host key mismatch errors when
         <a href="https://man.openbsd.org/?query=sshd&amp;sektion=8">sshd(8)</a>          <a href="https://man.openbsd.org/sshd.8">sshd(8)</a>
         offers multiple ECDSA keys of different lengths.          offers multiple ECDSA keys of different lengths.
       <li><a href="https://man.openbsd.org/?query=ssh&amp;sektion=1">ssh(1)</a>:        <li><a href="https://man.openbsd.org/ssh.1">ssh(1)</a>:
         when host name canonicalisation is enabled, try to parse host names          when host name canonicalisation is enabled, try to parse host names
         as addresses before looking them up for canonicalisation.  Fixes          as addresses before looking them up for canonicalisation.  Fixes
         bz#2074 and avoiding needless DNS lookups in some cases.          bz#2074 and avoiding needless DNS lookups in some cases.
       <li><a href="https://man.openbsd.org/?query=ssh-keygen&amp;sektion=1">ssh-keygen(1)</a>,        <li><a href="https://man.openbsd.org/ssh-keygen.1">ssh-keygen(1)</a>,
         <a href="https://man.openbsd.org/?query=sshd&amp;sektion=8">sshd(8)</a>:          <a href="https://man.openbsd.org/sshd.8">sshd(8)</a>:
         <i>Key Revocation Lists</i> (KRLs) no longer require OpenSSH to be          <i>Key Revocation Lists</i> (KRLs) no longer require OpenSSH to be
         compiled with OpenSSL support.          compiled with OpenSSL support.
       <li><a href="https://man.openbsd.org/?query=ssh&amp;sektion=1">ssh(1)</a>,        <li><a href="https://man.openbsd.org/ssh.1">ssh(1)</a>,
         <a href="https://man.openbsd.org/?query=ssh-keysign&amp;sektion=8">ssh-keysign(8)</a>:          <a href="https://man.openbsd.org/ssh-keysign.8">ssh-keysign(8)</a>:
         Make ed25519 keys work for host based authentication.          Make ed25519 keys work for host based authentication.
       <li><a href="https://man.openbsd.org/?query=sshd&amp;sektion=8">sshd(8)</a>:        <li><a href="https://man.openbsd.org/sshd.8">sshd(8)</a>:
         SSH protocol v.1 workaround for the Meyer, et al., <i>Bleichenbacher          SSH protocol v.1 workaround for the Meyer, et al., <i>Bleichenbacher
         Side Channel Attack</i>.  Fake up a bignum key before RSA decryption.          Side Channel Attack</i>.  Fake up a bignum key before RSA decryption.
       <li><a href="https://man.openbsd.org/?query=sshd&amp;sektion=8">sshd(8)</a>:        <li><a href="https://man.openbsd.org/sshd.8">sshd(8)</a>:
         Remember which public keys have been used for authentication and          Remember which public keys have been used for authentication and
         refuse to accept previously-used keys.  This allows          refuse to accept previously-used keys.  This allows
         <tt>AuthenticationMethods=publickey,publickey</tt> to require that          <code>AuthenticationMethods=publickey,publickey</code> to require that
         users authenticate using two <i>different</i> public keys.          users authenticate using two <i>different</i> public keys.
       <li><a href="https://man.openbsd.org/?query=sshd&amp;sektion=8">sshd(8)</a>:        <li><a href="https://man.openbsd.org/sshd.8">sshd(8)</a>:
         add          add
         <a href="https://man.openbsd.org/?query=sshd_config&amp;sektion=5">sshd_config(5)</a>          <a href="https://man.openbsd.org/sshd_config.5">sshd_config(5)</a>
         <tt>HostbasedAcceptedKeyTypes</tt> and <tt>PubkeyAcceptedKeyTypes</tt>          <code>HostbasedAcceptedKeyTypes</code> and <code>PubkeyAcceptedKeyTypes</code>
         options to allow          options to allow
         <a href="https://man.openbsd.org/?query=sshd&amp;sektion=8">sshd(8)</a>          <a href="https://man.openbsd.org/sshd.8">sshd(8)</a>
         to control what public key types will be accepted.  Currently defaults          to control what public key types will be accepted.  Currently defaults
         to all.          to all.
       <li><a href="https://man.openbsd.org/?query=sshd&amp;sektion=8">sshd(8)</a>:        <li><a href="https://man.openbsd.org/sshd.8">sshd(8)</a>:
         Don't count partial authentication success as a failure against          Don't count partial authentication success as a failure against
         <tt>MaxAuthTries</tt>.          <code>MaxAuthTries</code>.
       <li><a href="https://man.openbsd.org/?query=ssh&amp;sektion=1">ssh(1)</a>:        <li><a href="https://man.openbsd.org/ssh.1">ssh(1)</a>:
         Add <tt>RevokedHostKeys</tt> option for the client to allow text-file          Add <code>RevokedHostKeys</code> option for the client to allow text-file
         or KRL-based revocation of host keys.          or KRL-based revocation of host keys.
       <li><a href="https://man.openbsd.org/?query=ssh-keygen&amp;sektion=1">ssh-keygen(1)</a>,        <li><a href="https://man.openbsd.org/ssh-keygen.1">ssh-keygen(1)</a>,
         <a href="https://man.openbsd.org/?query=sshd&amp;sektion=8">sshd(8)</a>:          <a href="https://man.openbsd.org/sshd.8">sshd(8)</a>:
         Permit KRLs that revoke certificates by serial number or key ID without          Permit KRLs that revoke certificates by serial number or key ID without
         scoping to a particular CA.          scoping to a particular CA.
       <li><a href="https://man.openbsd.org/?query=ssh&amp;sektion=1">ssh(1)</a>:        <li><a href="https://man.openbsd.org/ssh.1">ssh(1)</a>:
         Add a "Match canonical" criteria that allows          Add a "Match canonical" criteria that allows
         <a href="https://man.openbsd.org/?query=ssh_config&amp;sektion=5">ssh_config(5)</a>          <a href="https://man.openbsd.org/ssh_config.5">ssh_config(5)</a>
         <tt>Match</tt> blocks to trigger only in the second config pass.          <code>Match</code> blocks to trigger only in the second config pass.
       <li><a href="https://man.openbsd.org/?query=ssh&amp;sektion=1">ssh(1)</a>:        <li><a href="https://man.openbsd.org/ssh.1">ssh(1)</a>:
         Add a <tt>-G</tt> option to          Add a <code>-G</code> option to
         <a href="https://man.openbsd.org/?query=ssh&amp;sektion=1">ssh(1)</a>          <a href="https://man.openbsd.org/ssh.1">ssh(1)</a>
         that causes it to parse its configuration and dump the result to          that causes it to parse its configuration and dump the result to
         stdout, similar to "<tt>sshd -T</tt>".          stdout, similar to "<code>sshd -T</code>".
       <li><a href="https://man.openbsd.org/?query=ssh&amp;sektion=1">ssh(1)</a>:        <li><a href="https://man.openbsd.org/ssh.1">ssh(1)</a>:
         Allow <tt>Match</tt> criteria to be negated          Allow <code>Match</code> criteria to be negated
         (e.g. "<tt>Match !host</tt>").          (e.g. "<code>Match !host</code>").
       <li>The regression test suite has been extended to cover more OpenSSH        <li>The regression test suite has been extended to cover more OpenSSH
         features.  The unit tests have been expanded and now cover key          features.  The unit tests have been expanded and now cover key
         exchange.          exchange.
       </ul>        </ul>
     <li>The following significant bugs have been fixed in this release:      <li>The following significant bugs have been fixed in this release:
       <ul>        <ul>
       <li><a href="https://man.openbsd.org/?query=ssh-keyscan&amp;sektion=1">ssh-keyscan(1)</a>:        <li><a href="https://man.openbsd.org/ssh-keyscan.1">ssh-keyscan(1)</a>:
         <a href="https://man.openbsd.org/?query=ssh-keyscan&amp;sektion=1">ssh-keyscan(1)</a>          <a href="https://man.openbsd.org/ssh-keyscan.1">ssh-keyscan(1)</a>
         has been made much more robust again servers that hang or violate          has been made much more robust again servers that hang or violate
         the SSH protocol.          the SSH protocol.
       <li><a href="https://man.openbsd.org/?query=ssh&amp;sektion=1">ssh(1)</a>,        <li><a href="https://man.openbsd.org/ssh.1">ssh(1)</a>,
         <a href="https://man.openbsd.org/?query=ssh-keygen&amp;sektion=1">ssh-keygen(1)</a>:          <a href="https://man.openbsd.org/ssh-keygen.1">ssh-keygen(1)</a>:
         Fix regression bz#2306: Key path names were being lost as comment          Fix regression bz#2306: Key path names were being lost as comment
         fields.          fields.
       <li><a href="https://man.openbsd.org/?query=ssh&amp;sektion=1">ssh(1)</a>:        <li><a href="https://man.openbsd.org/ssh.1">ssh(1)</a>:
         Allow          Allow
         <a href="https://man.openbsd.org/?query=ssh_config&amp;sektion=5">ssh_config(5)</a>          <a href="https://man.openbsd.org/ssh_config.5">ssh_config(5)</a>
         <tt>Port</tt> options set in the second config parse phase to be          <code>Port</code> options set in the second config parse phase to be
         applied (they were being ignored).  (bz#2286)          applied (they were being ignored).  (bz#2286)
       <li><a href="https://man.openbsd.org/?query=ssh&amp;sektion=1">ssh(1)</a>:        <li><a href="https://man.openbsd.org/ssh.1">ssh(1)</a>:
         Tweak config re-parsing with host canonicalisation&#151;make the          Tweak config re-parsing with host canonicalisation&mdash;make the
         second pass through the config files always run when host name          second pass through the config files always run when host name
         canonicalisation is enabled (and not whenever the host name changes).          canonicalisation is enabled (and not whenever the host name changes).
         (bz#2267)          (bz#2267)
       <li><a href="https://man.openbsd.org/?query=ssh&amp;sektion=1">ssh(1)</a>:        <li><a href="https://man.openbsd.org/ssh.1">ssh(1)</a>:
         Fix passing of wildcard forward bind addresses when connection          Fix passing of wildcard forward bind addresses when connection
         multiplexing is in use.  (bz#2324)          multiplexing is in use.  (bz#2324)
       <li><a href="https://man.openbsd.org/?query=ssh-keygen&amp;sektion=1">ssh-keygen(1)</a>:        <li><a href="https://man.openbsd.org/ssh-keygen.1">ssh-keygen(1)</a>:
         Fix broken private key conversion from non-OpenSSH formats.  (bz#2345)          Fix broken private key conversion from non-OpenSSH formats.  (bz#2345)
       <li><a href="https://man.openbsd.org/?query=ssh-keygen&amp;sektion=1">ssh-keygen(1)</a>:        <li><a href="https://man.openbsd.org/ssh-keygen.1">ssh-keygen(1)</a>:
         Fix KRL generation bug when multiple CAs are in use.          Fix KRL generation bug when multiple CAs are in use.
       <li>Various fixes to manual pages.  (bz#2273, bz#2288 and bz#2316)        <li>Various fixes to manual pages.  (bz#2273, bz#2288 and bz#2316)
       </ul>        </ul>
Line 471 
Line 472 
     <ul>      <ul>
     <li>User-visible features:      <li>User-visible features:
       <ul>        <ul>
       <li>Reluctantly add server-side support for <tt>TLS_FALLBACK_SCSV</tt>.        <li>Reluctantly add server-side support for <code>TLS_FALLBACK_SCSV</code>.
       <li>Import <i>BoringSSL</i>'s crypto bytestring and crypto bytebuilder        <li>Import <i>BoringSSL</i>'s crypto bytestring and crypto bytebuilder
         APIs.          APIs.
       <li>Jettison DTLS over SCTP.        <li>Jettison DTLS over SCTP.
       <li>Move        <li>Move
         <a href="https://man.openbsd.org/?query=openssl&amp;sektion=1">openssl(1)</a>          <a href="https://man.openbsd.org/openssl.1">openssl(1)</a>
         from <tt>/usr/sbin/openssl</tt> to <tt>/usr/bin/openssl</tt>.          from <code>/usr/sbin/openssl</code> to <code>/usr/bin/openssl</code>.
       <li>Two important cipher suites, GOST and Camellia, have been reworked        <li>Two important cipher suites, GOST and Camellia, have been reworked
         or reenabled, providing better interoperability with systems around          or reenabled, providing better interoperability with systems around
         the world.          the world.
       <li>libtls: New API for loading CA chains directly from memory instead        <li>libtls: New API for loading CA chains directly from memory instead
         of a file, allowing verification with privilege separation in a          of a file, allowing verification with privilege separation in a
         <a href="https://man.openbsd.org/?query=chroot&amp;sektion=8">chroot(8)</a>          <a href="https://man.openbsd.org/chroot.8">chroot(8)</a>
         without direct access to CA certificate files.          without direct access to CA certificate files.
       <li>libtls: Ciphers default to TLSv1.2 with AEAD and PFS.        <li>libtls: Ciphers default to TLSv1.2 with AEAD and PFS.
       <li>libtls: Improved error handling and message generation.        <li>libtls: Improved error handling and message generation.
       <li>Added <tt>X509_STORE_load_mem</tt> API for loading certificates from        <li>Added <code>X509_STORE_load_mem</code> API for loading certificates from
         memory.  This facilitates accessing certificates from a chrooted          memory.  This facilitates accessing certificates from a chrooted
         environment.          environment.
       <li>New AEAD "MAC alias" allows configuring TLSv1.2 AEAD ciphers by        <li>New AEAD "MAC alias" allows configuring TLSv1.2 AEAD ciphers by
         using 'TLSv1.2+AEAD' as the cipher selection string.          using 'TLSv1.2+AEAD' as the cipher selection string.
       <li>New        <li>New
         <a href="https://man.openbsd.org/?query=openssl&amp;sektion=1">openssl(1)</a>          <a href="https://man.openbsd.org/openssl.1">openssl(1)</a>
         command '<tt>certhash</tt>' replaces the <tt>c_rehash</tt> script.          command '<code>certhash</code>' replaces the <code>c_rehash</code> script.
       <li><i>Application-Layer Protocol Negotiation</i> (ALPN) support.        <li><i>Application-Layer Protocol Negotiation</i> (ALPN) support.
       </ul>        </ul>
     <li>Code improvements:      <li>Code improvements:
Line 524 
Line 525 
 <p>  <p>
 <li>mandoc 1.13.3:  <li>mandoc 1.13.3:
     <ul>      <ul>
     <li><a href="https://man.openbsd.org/?query=man&sektion=1">man(1)</a>,      <li><a href="https://man.openbsd.org/man.1">man(1)</a>,
       <a href="https://man.openbsd.org/?query=apropos&sektion=1">apropos(1)</a>, and        <a href="https://man.openbsd.org/apropos.1">apropos(1)</a>, and
       <a href="https://man.openbsd.org/?query=mandoc&sektion=1">mandoc(1)</a>        <a href="https://man.openbsd.org/mandoc.1">mandoc(1)</a>
       now have a unified user interface, all with the same options,        now have a unified user interface, all with the same options,
       and are in fact all implemented by the same binary program.        and are in fact all implemented by the same binary program.
     <li>For <a href="https://man.openbsd.org/?query=man&sektion=1">man(1)</a>,      <li>For <a href="https://man.openbsd.org/man.1">man(1)</a>,
       this implies new options -l and -IKOTW,        this implies new options -l and -IKOTW,
       and it now finds manual pages by the names in their NAME sections        and it now finds manual pages by the names in their NAME sections
       even if they lack matching file names.        even if they lack matching file names.
     <li>For <a href="https://man.openbsd.org/?query=apropos&sektion=1">apropos(1)</a>,      <li>For <a href="https://man.openbsd.org/apropos.1">apropos(1)</a>,
       this implies new options -acfhklw and -IKOTW.        this implies new options -acfhklw and -IKOTW.
     <li>For <a href="https://man.openbsd.org/?query=mandoc&sektion=1">mandoc(1)</a>,      <li>For <a href="https://man.openbsd.org/mandoc.1">mandoc(1)</a>,
       this implies new options -acfhkl.        this implies new options -acfhkl.
     <li><a href="https://man.openbsd.org/?query=mandoc&sektion=1">mandoc(1)</a>      <li><a href="https://man.openbsd.org/mandoc.1">mandoc(1)</a>
       now automatically detects and transparently accepts input encoded        now automatically detects and transparently accepts input encoded
       in utf-8 and iso-8859-1, and provides a new option -K to explicitly        in utf-8 and iso-8859-1, and provides a new option -K to explicitly
       specify the input encoding.        specify the input encoding.
     <li>The <a href="https://man.openbsd.org/?query=mandoc&sektion=1">mandoc(1)</a>      <li>The <a href="https://man.openbsd.org/mandoc.1">mandoc(1)</a>
       default output mode now is -Tlocale rather than -Tascii.        default output mode now is -Tlocale rather than -Tascii.
     <li><a href="https://man.openbsd.org/?query=eqn&sektion=7">eqn(7)</a>      <li><a href="https://man.openbsd.org/eqn.7">eqn(7)</a>
       now supports in-line equations,        now supports in-line equations,
       and terminal rendering of equations is considerably improved.        and terminal rendering of equations is considerably improved.
     <li><a href="https://man.openbsd.org/?query=mandoc&sektion=1">mandoc(1)</a> -Thtml      <li><a href="https://man.openbsd.org/mandoc.1">mandoc(1)</a> -Thtml
       now generates polyglot HTML5 and renders        now generates polyglot HTML5 and renders
       <a href="https://man.openbsd.org/?query=eqn&sektion=7">eqn(7)</a>        <a href="https://man.openbsd.org/eqn.7">eqn(7)</a>
       using MathML.        using MathML.
     <li><a href="https://man.openbsd.org/?query=mandoc&sektion=1">mandoc(1)</a>      <li><a href="https://man.openbsd.org/mandoc.1">mandoc(1)</a>
       can no longer fail with fatal errors, no matter how broken the input        can no longer fail with fatal errors, no matter how broken the input
       file may be, and the -Wfatal message level no longer has any effect.        file may be, and the -Wfatal message level no longer has any effect.
       A new diagnostic level -Wunsupp is provided.  Besides, many        A new diagnostic level -Wunsupp is provided.  Besides, many
Line 562 
Line 563 
 <p>  <p>
 <li>Syslogd:  <li>Syslogd:
     <ul>      <ul>
     <li>OpenBSD <a href="https://man.openbsd.org/?query=syslogd&amp;sektion=8">syslogd(8)</a>      <li>OpenBSD <a href="https://man.openbsd.org/syslogd.8">syslogd(8)</a>
         is based on          is based on
         <a href="https://man.openbsd.org/?query=event&amp;sektion=3">libevent</a>          <a href="https://man.openbsd.org/event.3">libevent</a>
         now.          now.
     <li>Sending and receiving UDP messages works with both IPv4 and IPv6.      <li>Sending and receiving UDP messages works with both IPv4 and IPv6.
     <li>Syslog messages can also be sent over TCP or TLS.      <li>Syslog messages can also be sent over TCP or TLS.
         The syntax to specify the loghost is documented in          The syntax to specify the loghost is documented in
         <a href="https://man.openbsd.org/?query=syslog.conf&amp;sektion=5">syslog.conf(5)</a>.          <a href="https://man.openbsd.org/syslog.conf.5">syslog.conf(5)</a>.
     <li>Sending over TCP and TLS is reliable.      <li>Sending over TCP and TLS is reliable.
         If a connection terminates, syslogd tries to reconnect.          If a connection terminates, syslogd tries to reconnect.
         When the message buffer in memory gets full, the number of dropped          When the message buffer in memory gets full, the number of dropped
Line 584 
Line 585 
     </ul>      </ul>
 <p>  <p>
 <li>Many pre-built packages for each architecture:  <li>Many pre-built packages for each architecture:
     <table border=0 cellspacing=0 cellpadding=2 width="95%">      <ul style="column-count: 4">
     <tr>  
     <td valign="top" width="25%">  
     <ul>  
       <li>i386:       8722        <li>i386:       8722
       <li>sparc64:    8184        <li>sparc64:    8184
       <li>alpha:      6811        <li>alpha:      6811
       <li>sh:         0        <li>sh:         0
     </ul></td><td valign=top width="25%"><ul>  
       <li>amd64:      8745        <li>amd64:      8745
       <li>powerpc:    8286        <li>powerpc:    8286
       <li>m88k:       1148        <li>m88k:       1148
       <li>sparc:      4026        <li>sparc:      4026
     </ul></td><td valign=top width="25%"><ul>  
       <li>arm:        0        <li>arm:        0
       <li>hppa:       6718        <li>hppa:       6718
       <li>vax:        1550        <li>vax:        1550
     </ul></td><td valign=top width="25%"><ul>  
       <li>mips64:     1595        <li>mips64:     1595
       <li>mips64el:   6914        <li>mips64el:   6914
   </ul></td></tr></table>      </ul>
 <p>  <p>
   
 <li>Some highlights:  <li>Some highlights:
     <table border=0 cellspacing=0 cellpadding=2 width="95%">      <ul style="column-count: 2">
     <tr>  
     <td valign="top" width="33%"><ul>  
         <li>Chromium 40.0.2214.115          <li>Chromium 40.0.2214.115
         <li>Emacs 21.4 and 24.4          <li>Emacs 21.4 and 24.4
         <li>GCC 4.8.4 and 4.9.2          <li>GCC 4.8.4 and 4.9.2
Line 626 
Line 619 
         <li>Mono 3.12.0          <li>Mono 3.12.0
         <li>Mozilla Firefox 31.4.0esr and 35.0.1          <li>Mozilla Firefox 31.4.0esr and 35.0.1
         <li>Mozilla Thunderbird 31.4.0          <li>Mozilla Thunderbird 31.4.0
     </ul></td><td valign=top width="33%"><ul>  
         <li>Node.js 0.10.35          <li>Node.js 0.10.35
         <li>OpenLDAP 2.3.43 and 2.4.40          <li>OpenLDAP 2.3.43 and 2.4.40
         <li>PHP 5.3.29, 5.4.38, 5.5.22 and 5.6.5          <li>PHP 5.3.29, 5.4.38, 5.5.22 and 5.6.5
Line 640 
Line 632 
         <li>TeX Live 2013          <li>TeX Live 2013
         <li>Vim 7.4.475          <li>Vim 7.4.475
         <li>Xfce 4.10          <li>Xfce 4.10
     </ul></td><td valign=top width="34%">      </ul>
     </td></tr></table>  
 <p>  <p>
   
 <li>As usual, steady improvements in manual pages and other documentation.  <li>As usual, steady improvements in manual pages and other documentation.
Line 664 
Line 655 
     <li>Less 458 (+ patches)      <li>Less 458 (+ patches)
     <li>Awk Aug 10, 2011 version      <li>Awk Aug 10, 2011 version
     </ul>      </ul>
   
 </ul>  </ul>
   </section>
   
 <a name="install"></a>  
 <hr>  <hr>
   
   <section id=install>
   <h3>How to install</h3>
   
 <p>  <p>
 <h3><font color="#0000e0">How to install</font></h3>  
 <p>  
 Following this are the instructions which you would have on a piece of  Following this are the instructions which you would have on a piece of
 paper if you had purchased a CDROM set instead of doing an alternate  paper if you had purchased a CDROM set instead of doing an alternate
 form of install.  The instructions for doing an HTTP (or other style  form of install.  The instructions for doing an HTTP (or other style
Line 733 
Line 725 
 </ul>  </ul>
 <hr>  <hr>
   
   <section id=quickinstall>
   
 <p>  <p>
 Quick installer information for people familiar with OpenBSD, and the  Quick installer information for people familiar with OpenBSD, and the
 use of the "disklabel -E" command.  If you are at all confused when  use of the "disklabel -E" command.  If you are at all confused when
 installing OpenBSD, read the relevant INSTALL.* file as listed above!  installing OpenBSD, read the relevant INSTALL.* file as listed above!
 <p>  
   
 <h3><font color="#e00000">OpenBSD/i386:</font></h3>  <h3>OpenBSD/i386:</h3>
 <ul>  
   <p>
 The OpenBSD/i386 release is on CD1.  The OpenBSD/i386 release is on CD1.
 Boot from the CD to begin the install - you may need to adjust  Boot from the CD to begin the install - you may need to adjust
 your BIOS options first.  your BIOS options first.
Line 758 
Line 752 
 If you are planning on dual booting OpenBSD with another OS, you will need to  If you are planning on dual booting OpenBSD with another OS, you will need to
 read INSTALL.i386.  read INSTALL.i386.
   
 </ul>  <h3>OpenBSD/amd64:</h3>
   
 <p>  <p>
 <h3><font color="#e00000">OpenBSD/amd64:</font></h3>  
 <ul>  
 The OpenBSD/amd64 release is on CD2.  The OpenBSD/amd64 release is on CD2.
 Boot from the CD to begin the install - you may need to adjust  Boot from the CD to begin the install - you may need to adjust
 your BIOS options first.  your BIOS options first.
Line 779 
Line 771 
 <p>  <p>
 If you are planning to dual boot OpenBSD with another OS, you will need to  If you are planning to dual boot OpenBSD with another OS, you will need to
 read INSTALL.amd64.  read INSTALL.amd64.
 </ul>  
   
   <h3>OpenBSD/macppc:</h3>
   
 <p>  <p>
 <h3><font color="#e00000">OpenBSD/macppc:</font></h3>  
 <ul>  
 Burn the image from a mirror site to a CDROM, and power on your machine  Burn the image from a mirror site to a CDROM, and power on your machine
 while holding down the <i>C</i> key until the display turns on and  while holding down the <i>C</i> key until the display turns on and
 shows <i>OpenBSD/macppc boot</i>.  shows <i>OpenBSD/macppc boot</i>.
Line 791 
Line 782 
 <p>  <p>
 Alternatively, at the Open Firmware prompt, enter <i>boot cd:,ofwboot  Alternatively, at the Open Firmware prompt, enter <i>boot cd:,ofwboot
 /5.7/macppc/bsd.rd</i>  /5.7/macppc/bsd.rd</i>
 </ul>  
   
   <h3>OpenBSD/sparc64:</h3>
   
 <p>  <p>
 <h3><font color="#e00000">OpenBSD/sparc64:</font></h3>  
 <ul>  
     <b>      <b>
     <a href="errata57.html#001_sparc64_miniroot">5.7 Errata 001</a>:      <a href="errata57.html#001_sparc64_miniroot">5.7 Errata 001</a>:
     Unfortunately, 5.7 cannot boot from CDROM on some machines due      Unfortunately, 5.7 cannot boot from CDROM on some machines due
     a bootloader bug.      a bootloader bug.
     </b>      </b>
     <p>  
   <p>
 Put CD3 in your CDROM drive and type <i>boot cdrom</i>.  Put CD3 in your CDROM drive and type <i>boot cdrom</i>.
   
 <p>  <p>
Line 820 
Line 811 
   
 <p>  <p>
 If nothing works, you can boot over the network as described in INSTALL.sparc64.  If nothing works, you can boot over the network as described in INSTALL.sparc64.
 </ul>  
   
   <h3>OpenBSD/alpha:</h3>
   
 <p>  <p>
 <h3><font color="#e00000">OpenBSD/alpha:</font></h3>  Write <i>FTP:5.7/alpha/floppy57.fs</i> or
 <ul>  
 <p>Write <i>FTP:5.7/alpha/floppy57.fs</i> or  
 <i>FTP:5.7/alpha/floppyB57.fs</i> (depending on your machine) to a diskette and  <i>FTP:5.7/alpha/floppyB57.fs</i> (depending on your machine) to a diskette and
 enter <i>boot dva0</i>. Refer to INSTALL.alpha for more details.  enter <i>boot dva0</i>. Refer to INSTALL.alpha for more details.
   
Line 833 
Line 823 
 Make sure you use a properly formatted floppy with NO BAD BLOCKS or your install  Make sure you use a properly formatted floppy with NO BAD BLOCKS or your install
 will most likely fail.  will most likely fail.
   
 </ul>  <h3>OpenBSD/armish:</h3>
   
 <p>  <p>
 <h3><font color="#e00000">OpenBSD/armish:</font></h3>  
 <ul>  
 <p>  
 After connecting a serial port, Thecus can boot directly from the network  After connecting a serial port, Thecus can boot directly from the network
 either tftp or http. Configure the network using fconfig, reset,  either tftp or http. Configure the network using fconfig, reset,
 then load bsd.rd, see INSTALL.armish for specific details.  then load bsd.rd, see INSTALL.armish for specific details.
Line 846 
Line 833 
 and copy 'boot' and bsd.rd into the first partition on wd0 (hda1)  and copy 'boot' and bsd.rd into the first partition on wd0 (hda1)
 then load and run bsd.rd, preserving the wd0i (hda1) ext2fs partition.  then load and run bsd.rd, preserving the wd0i (hda1) ext2fs partition.
 More details are available in INSTALL.armish.  More details are available in INSTALL.armish.
 </ul>  
   
   <h3>OpenBSD/hppa:</h3>
   
 <p>  <p>
 <h3><font color="#e00000">OpenBSD/hppa:</font></h3>  
 <ul>  
 <p>  
 Boot over the network by following the instructions in INSTALL.hppa or the  Boot over the network by following the instructions in INSTALL.hppa or the
 <a href="hppa.html#install">hppa platform page</a>.  <a href="hppa.html#install">hppa platform page</a>.
 </ul>  
   
   <h3>OpenBSD/landisk:</h3>
   
 <p>  <p>
 <h3><font color="#e00000">OpenBSD/landisk:</font></h3>  
 <ul>  
 <p>  
 Write <i>miniroot57.fs</i> to the start of the CF  Write <i>miniroot57.fs</i> to the start of the CF
 or disk, and boot normally.  or disk, and boot normally.
 </ul>  
   
   <h3>OpenBSD/loongson:</h3>
   
 <p>  <p>
 <h3><font color="#e00000">OpenBSD/loongson:</font></h3>  
 <ul>  
 <p>  
 Write <i>miniroot57.fs</i> to a USB stick and boot bsd.rd from it  Write <i>miniroot57.fs</i> to a USB stick and boot bsd.rd from it
 or boot bsd.rd via tftp.  or boot bsd.rd via tftp.
 Refer to the instructions in INSTALL.loongson for more details.  Refer to the instructions in INSTALL.loongson for more details.
 </ul>  
 <p>  
   
   <h3>OpenBSD/luna88k:</h3>
   
 <p>  <p>
 <h3><font color="#e00000">OpenBSD/luna88k:</font></h3>  Copy 'boot' and 'bsd.rd' to a Mach or UniOS partition, and boot the bootloader
 <ul>  
 <p>  
 Copy `boot' and `bsd.rd' to a Mach or UniOS partition, and boot the bootloader  
 from the PROM, and the bsd.rd from the bootloader.  from the PROM, and the bsd.rd from the bootloader.
 Refer to the instructions in INSTALL.luna88k for more details.  Refer to the instructions in INSTALL.luna88k for more details.
 </ul>  
   
   <h3>OpenBSD/octeon:</h3>
   
 <p>  <p>
 <h3><font color="#e00000">OpenBSD/octeon:</font></h3>  
 <ul>  
 <p>  
 After connecting a serial port, boot bsd.rd over the network via DHCP/tftp.  After connecting a serial port, boot bsd.rd over the network via DHCP/tftp.
 Refer to the instructions in INSTALL.octeon for more details.  Refer to the instructions in INSTALL.octeon for more details.
 </ul>  
   
   <h3>OpenBSD/sgi:</h3>
   
 <p>  <p>
 <h3><font color="#e00000">OpenBSD/sgi:</font></h3>  
 <ul>  
 <p>  
 To install, burn cd57.iso on a CD-R, put it in the CD drive of your  To install, burn cd57.iso on a CD-R, put it in the CD drive of your
 machine and select <i>Install System Software</i> from the System Maintenance  machine and select <i>Install System Software</i> from the System Maintenance
 menu. Indigo/Indy/Indigo2 (R4000) systems will not boot automatically from  menu. Indigo/Indy/Indigo2 (R4000) systems will not boot automatically from
Line 905 
Line 879 
 If your machine doesn't have a CD drive, you can setup a DHCP/tftp network  If your machine doesn't have a CD drive, you can setup a DHCP/tftp network
 server, and boot using "bootp()/bsd.rd.IP##" using the kernel matching your  server, and boot using "bootp()/bsd.rd.IP##" using the kernel matching your
 system type. Refer to the instructions in INSTALL.sgi for more details.  system type. Refer to the instructions in INSTALL.sgi for more details.
 </ul>  
   
   <h3>OpenBSD/socppc:</h3>
   
 <p>  <p>
 <h3><font color="#e00000">OpenBSD/socppc:</font></h3>  
 <ul>  
 <p>  
 After connecting a serial port, boot over the network via DHCP/tftp.  After connecting a serial port, boot over the network via DHCP/tftp.
 Refer to the instructions in INSTALL.socppc for more details.  Refer to the instructions in INSTALL.socppc for more details.
 </ul>  
   
   <h3>OpenBSD/sparc:</h3>
   
 <p>  <p>
 <h3><font color="#e00000">OpenBSD/sparc:</font></h3>  
 <ul>  
 Boot from one of the provided install ISO images, using one of the two  Boot from one of the provided install ISO images, using one of the two
 commands listed below, depending on the version of your ROM.  commands listed below, depending on the version of your ROM.
   
 <ul><pre>  <blockquote><pre>
 ok <strong>boot cdrom 5.7/sparc/bsd.rd</strong>  ok <kbd>boot cdrom 5.7/sparc/bsd.rd</kbd>
 or  or
 &gt; <strong>b sd(0,6,0)5.7/sparc/bsd.rd</strong>  > <kbd>b sd(0,6,0)5.7/sparc/bsd.rd</kbd>
 </pre></ul>  </pre></blockquote>
   
 <p>  <p>
 If your SPARC system does not have a CD drive, you can alternatively boot from floppy.  If your SPARC system does not have a CD drive, you can alternatively boot from floppy.
Line 934 
Line 905 
 To boot from the floppy use one of the two commands listed below,  To boot from the floppy use one of the two commands listed below,
 depending on the version of your ROM.  depending on the version of your ROM.
   
 <ul><pre>  <blockquote><pre>
 ok <strong>boot floppy</strong>  ok <kbd>boot floppy</kbd>
 or  or
 &gt; <strong>b fd()</strong>  > <kbd>b fd()</kbd>
 </pre></ul>  </pre></blockquote>
   
 <p>  <p>
 Make sure you use a properly formatted floppy with NO BAD BLOCKS or your install  Make sure you use a properly formatted floppy with NO BAD BLOCKS or your install
Line 948 
Line 919 
 If your SPARC system doesn't have a floppy drive nor a CD drive, you can either  If your SPARC system doesn't have a floppy drive nor a CD drive, you can either
 setup a bootable tape, or install via network, as told in the  setup a bootable tape, or install via network, as told in the
 INSTALL.sparc file.  INSTALL.sparc file.
 </ul>  
   
   <h3>OpenBSD/vax:</h3>
   
 <p>  <p>
 <h3><font color="#e00000">OpenBSD/vax:</font></h3>  
 <ul>  
 Boot over the network via mopbooting as described in INSTALL.vax.  Boot over the network via mopbooting as described in INSTALL.vax.
 </ul>  
   
   <h3>OpenBSD/zaurus:</h3>
   
 <p>  <p>
 <h3><font color="#e00000">OpenBSD/zaurus:</font></h3>  
 <ul>  
 <p>  
 Using the Linux built-in graphical ipkg installer, install the  Using the Linux built-in graphical ipkg installer, install the
 openbsd57_arm.ipk package.  Reboot, then run it.  Read INSTALL.zaurus  openbsd57_arm.ipk package.  Reboot, then run it.  Read INSTALL.zaurus
 for a few important details.  for a few important details.
 </ul>  
   
 <a name="upgrade"></a>  </section>
   
 <hr>  <hr>
   
   <section id=upgrade>
   <h3>How to upgrade</h3>
 <p>  <p>
 <h3><font color="#0000e0">How to upgrade</font></h3>  
 <p>  
 If you already have an OpenBSD 5.6 system, and do not want to reinstall,  If you already have an OpenBSD 5.6 system, and do not want to reinstall,
 upgrade instructions and advice can be found in the  upgrade instructions and advice can be found in the
 <a href="faq/upgrade57.html">Upgrade Guide</a>.  <a href="faq/upgrade57.html">Upgrade Guide</a>.
   </section>
   
 <a name="sourcecode"></a>  
 <hr>  <hr>
   <section id=sourcecode>
   <h3>Notes about the source code</h3>
 <p>  <p>
 <h3><font color="#0000e0">Notes about the source code</font></h3>  
 <p>  
 src.tar.gz contains a source archive starting at /usr/src.  This file  src.tar.gz contains a source archive starting at /usr/src.  This file
 contains everything you need except for the kernel sources, which are  contains everything you need except for the kernel sources, which are
 in a separate archive.  To extract:  in a separate archive.  To extract:
 <p>  <p>
 <ul><pre>  <blockquote><pre>
 # <strong>mkdir -p /usr/src</strong>  # <kbd>mkdir -p /usr/src</kbd>
 # <strong>cd /usr/src</strong>  # <kbd>cd /usr/src</kbd>
 # <strong>tar xvfz /tmp/src.tar.gz</strong>  # <kbd>tar xvfz /tmp/src.tar.gz</kbd>
 </pre></ul>  </pre></blockquote>
 <p>  <p>
 sys.tar.gz contains a source archive starting at /usr/src/sys.  sys.tar.gz contains a source archive starting at /usr/src/sys.
 This file contains all the kernel sources you need to rebuild kernels.  This file contains all the kernel sources you need to rebuild kernels.
 To extract:  To extract:
 <p>  <p>
 <ul><pre>  <blockquote><pre>
 # <strong>mkdir -p /usr/src/sys</strong>  # <kbd>mkdir -p /usr/src/sys</kbd>
 # <strong>cd /usr/src</strong>  # <kbd>cd /usr/src</kbd>
 # <strong>tar xvfz /tmp/sys.tar.gz</strong>  # <strong>tar xvfz /tmp/sys.tar.gz</strong>
 </pre></ul>  </pre></blockquote>
 <p>  <p>
 Both of these trees are a regular CVS checkout.  Using these trees it  Both of these trees are a regular CVS checkout.  Using these trees it
 is possible to get a head-start on using the anoncvs servers as  is possible to get a head-start on using the anoncvs servers as
Line 1005 
Line 974 
 Using these files  Using these files
 results in a much faster initial CVS update than you could expect from  results in a much faster initial CVS update than you could expect from
 a fresh checkout of the full OpenBSD source tree.  a fresh checkout of the full OpenBSD source tree.
 <p>  </section>
   </section>
   
 <a name="ports"></a>  
 <hr>  <hr>
   
   <section id=ports>
   <h3>Ports Tree</h3>
 <p>  <p>
 <h3><font color="#0000e0">Ports Tree</font></h3>  
 <p>  
 A ports tree archive is also provided.  To extract:  A ports tree archive is also provided.  To extract:
 <p>  <p>
 <ul><pre>  <blockquote><pre>
 # <strong>cd /usr</strong>  # <kbd>cd /usr</kbd>
 # <strong>tar xvfz /tmp/ports.tar.gz</strong>  # <kbd>tar xvfz /tmp/ports.tar.gz</kbd>
 </pre></ul>  </pre></blockquote>
 <p>  <p>
 Go read the <a href="faq/ports/index.html">ports</a> page  Go read the <a href="faq/ports/index.html">ports</a> page
 if you know nothing about ports  if you know nothing about ports
Line 1026 
Line 996 
 OpenBSD ports system.  OpenBSD ports system.
 <p>  <p>
 The <i>ports/</i> directory represents a CVS (see the manpage for  The <i>ports/</i> directory represents a CVS (see the manpage for
 <a href="https://man.openbsd.org/?query=cvs&amp;sektion=1&amp;arch=i386">  <a href="https://man.openbsd.org/i386/cvs.1">
 cvs(1)</a> if  cvs(1)</a> if
 you aren't familiar with CVS) checkout of our ports.  As with our complete  you aren't familiar with CVS) checkout of our ports.  As with our complete
 source tree, our ports tree is available via  source tree, our ports tree is available via
Line 1035 
Line 1005 
 the <i>ports/</i> tree available on a read-write medium and update the tree  the <i>ports/</i> tree available on a read-write medium and update the tree
 with a command like:  with a command like:
 <p>  <p>
 <ul><pre>  <blockquote><pre>
 # <strong>cd /usr/ports</strong>  # <strong>cd /usr/ports</strong>
 # <strong>cvs -d anoncvs@server.openbsd.org:/cvs update -Pd -rOPENBSD_5_7</strong>  # <strong>cvs -d anoncvs@server.openbsd.org:/cvs update -Pd -rOPENBSD_5_7</strong>
 </pre></ul>  </pre></blockquote>
 <p>  <p>
 [Of course, you must replace the server name here with a nearby anoncvs  [Of course, you must replace the server name here with a nearby anoncvs
 server.]  server.]
Line 1049 
Line 1019 
 If you're interested in seeing a port added, would like to help out, or just  If you're interested in seeing a port added, would like to help out, or just
 would like to know more, the mailing list  would like to know more, the mailing list
 <a href="mail.html">ports@openbsd.org</a> is a good place to know.  <a href="mail.html">ports@openbsd.org</a> is a good place to know.
 <p>  </section>
 </body>  
 </html>  
Legend:
Removed from v.1.108  
changed lines
  Added in v.1.109