www/57.html - diff

Return to 57.html CVS log

Up to [local] / www

Diff for /www/57.html between version 1.95 and 1.96

version 1.95, 2015/10/01 12:59:37

version 1.96, 2016/03/21 05:46:19

Line 36

<li>See a <a href="plus57.html">detailed log of changes</a> between the

5.6 and 5.7 releases.

<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=signify&sektion=1">signify(1)</a> pubkeys for this release:

<li><a href="http://man.openbsd.org?query=signify&sektion=1">signify(1)</a> pubkeys for this release:

<pre>

base: RWSvUZXnw9gUb70PdeSNnpSmodCyIPJEGN1wWr+6Time1eP7KiWJ5eAM

fw: RWSuRBL44FVkb2QuvtlwOJmzS9UJtbKZd7GEYcol8HPXu4On/Ct1LoZr

Line 64

<ul>

<li>Improved hardware support, including:

<ul>

<li>New <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/xhci.4?query=xhci&sec=4">xhci(4)</a> driver for USB 3.0 host controllers.

<li>New <a href="http://man.openbsd.org/OpenBSD-current/man4/xhci.4?query=xhci&sec=4">xhci(4)</a> driver for USB 3.0 host controllers.

<li>New <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/umcs.4?query=umcs&sec=4">umcs(4)</a> driver for MosChip Semiconductor 78x0 USB multiport serial adapters.

<li>New <a href="http://man.openbsd.org/OpenBSD-current/man4/umcs.4?query=umcs&sec=4">umcs(4)</a> driver for MosChip Semiconductor 78x0 USB multiport serial adapters.

<li>New <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/i386/skgpio.4?query=skgpio&sec=4">skgpio(4)</a> driver for Soekris net6501 GPIO and LEDs.

<li>New <a href="http://man.openbsd.org/OpenBSD-current/man4/i386/skgpio.4?query=skgpio&sec=4">skgpio(4)</a> driver for Soekris net6501 GPIO and LEDs.

<li>New <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/uslhcom.4?query=uslhcom&sec=4">uslhcom(4)</a> driver for Silicon Labs CP2110 USB HID based UART.

<li>New <a href="http://man.openbsd.org/OpenBSD-current/man4/uslhcom.4?query=uslhcom&sec=4">uslhcom(4)</a> driver for Silicon Labs CP2110 USB HID based UART.

<li>New <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/nep.4?query=nep&sec=4">nep(4)</a> driver for Sun Neptune 10Gb Ethernet devices.

<li>New <a href="http://man.openbsd.org/OpenBSD-current/man4/nep.4?query=nep&sec=4">nep(4)</a> driver for Sun Neptune 10Gb Ethernet devices.

<li>New <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/iwm.4?query=iwm&sec=4">iwm(4)</a> driver for Intel 7260, 7265, and 3160 wifi cards.

<li>New <a href="http://man.openbsd.org/OpenBSD-current/man4/iwm.4?query=iwm&sec=4">iwm(4)</a> driver for Intel 7260, 7265, and 3160 wifi cards.

<li>The <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/rtsx.4?query=rtsx&sec=4">rtsx(4)</a> driver now supports RTS5227 and RTL8411B card readers.

<li>The <a href="http://man.openbsd.org/OpenBSD-current/man4/rtsx.4?query=rtsx&sec=4">rtsx(4)</a> driver now supports RTS5227 and RTL8411B card readers.

<li>The <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/bge.4?query=bge&sec=4">bge(4)</a> driver now supports jumbo frames on various additional BCM57xx chipsets.

<li>The <a href="http://man.openbsd.org/OpenBSD-current/man4/bge.4?query=bge&sec=4">bge(4)</a> driver now supports jumbo frames on various additional BCM57xx chipsets.

<li>The <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/ciss.4?query=ciss&sec=4">ciss(4)</a> driver now supports HP Gen9 Smart Array/Smart HBA devices.

<li>The <a href="http://man.openbsd.org/OpenBSD-current/man4/ciss.4?query=ciss&sec=4">ciss(4)</a> driver now supports HP Gen9 Smart Array/Smart HBA devices.

<li>The <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/mpi.4?query=mpi&sec=4">mpi(4)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/mfi.4">mfi(4)</a> drivers now have mpsafe interrupt handlers running without the big lock.

<li>The <a href="http://man.openbsd.org/OpenBSD-current/man4/mpi.4?query=mpi&sec=4">mpi(4)</a> and <a href="http://man.openbsd.org/OpenBSD-current/man4/mfi.4">mfi(4)</a> drivers now have mpsafe interrupt handlers running without the big lock.

<li>The <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/ppb.4?query=ppb&sec=4">ppb(4)</a> driver now supports PCI bridges that support subtractive decoding (fixes PCMCIA behind the ATI SB400 PCI bridge), and devices with 64-bit BARs behind PCI-PCI bridges as seen on SPARC T5-2 systems.

<li>The <a href="http://man.openbsd.org/OpenBSD-current/man4/ppb.4?query=ppb&sec=4">ppb(4)</a> driver now supports PCI bridges that support subtractive decoding (fixes PCMCIA behind the ATI SB400 PCI bridge), and devices with 64-bit BARs behind PCI-PCI bridges as seen on SPARC T5-2 systems.

<li>The <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/puc.4?query=puc&sec=4">puc(4)</a> driver now supports Winchiphead CH382 devices.

<li>The <a href="http://man.openbsd.org/OpenBSD-current/man4/puc.4?query=puc&sec=4">puc(4)</a> driver now supports Winchiphead CH382 devices.

<li>The <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/sdmmc.4?query=sdmmc&sec=4">sdmmc(4)</a> driver now supports eMMC storage devices larger than 2GB.

<li>The <a href="http://man.openbsd.org/OpenBSD-current/man4/sdmmc.4?query=sdmmc&sec=4">sdmmc(4)</a> driver now supports eMMC storage devices larger than 2GB.

<li>The <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/sdhc.4?query=sdhc&sec=4">sdhc(4)</a> driver can properly resume on Ricoh controllers.

<li>The <a href="http://man.openbsd.org/OpenBSD-current/man4/sdhc.4?query=sdhc&sec=4">sdhc(4)</a> driver can properly resume on Ricoh controllers.

<li>The <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/sdhc.4?query=sdhc&sec=4">sdhc(4)</a> driver now supports Ricoh R5U822 and R5U823 card readers.

<li>The <a href="http://man.openbsd.org/OpenBSD-current/man4/sdhc.4?query=sdhc&sec=4">sdhc(4)</a> driver now supports Ricoh R5U822 and R5U823 card readers.

<li>The <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/mfii.4?query=mfii&sec=4">mfii(4)</a> driver now supports the Megaraid 3008 (Fury) and 3108 (Invader) cards.

<li>The <a href="http://man.openbsd.org/OpenBSD-current/man4/mfii.4?query=mfii&sec=4">mfii(4)</a> driver now supports the Megaraid 3008 (Fury) and 3108 (Invader) cards.

<li>The <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/myx.4?query=myx&sec=4">myx(4)</a> driver runs less code under the big lock.

<li>The <a href="http://man.openbsd.org/OpenBSD-current/man4/myx.4?query=myx&sec=4">myx(4)</a> driver runs less code under the big lock.

<li>The <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/msk.4?query=msk&sec=4">msk(4)</a> driver now supports Yukon Prime, Yukon Optima 2, Yukon 88E8079, and various EC U and Supreme chipsets.

<li>The <a href="http://man.openbsd.org/OpenBSD-current/man4/msk.4?query=msk&sec=4">msk(4)</a> driver now supports Yukon Prime, Yukon Optima 2, Yukon 88E8079, and various EC U and Supreme chipsets.

<li>The <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/umass.4?query=umass&sec=4">umass(4)</a> driver now supports Archos 24y Vision devices.

<li>The <a href="http://man.openbsd.org/OpenBSD-current/man4/umass.4?query=umass&sec=4">umass(4)</a> driver now supports Archos 24y Vision devices.

<li>The <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/athn.4?query=athn&sec=4">athn(4)</a> driver now supports Atheros UB94 devices.

<li>The <a href="http://man.openbsd.org/OpenBSD-current/man4/athn.4?query=athn&sec=4">athn(4)</a> driver now supports Atheros UB94 devices.

<li>The <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/azalia.4?query=azalia&sec=4">azalia(4)</a> driver now supports Realtek ALC885 codecs and Bay Trail HD Audio devices.

<li>The <a href="http://man.openbsd.org/OpenBSD-current/man4/azalia.4?query=azalia&sec=4">azalia(4)</a> driver now supports Realtek ALC885 codecs and Bay Trail HD Audio devices.

<li>The <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/ix.4?query=ix&sec=4">ix(4)</a> driver now supports onboard Ethernet devices in SPARC T5 machines.

<li>The <a href="http://man.openbsd.org/OpenBSD-current/man4/ix.4?query=ix&sec=4">ix(4)</a> driver now supports onboard Ethernet devices in SPARC T5 machines.

<li>The <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/upd.4?query=upd&sec=4">upd(4)</a> driver now handles UPSes with broken report descriptors.

<li>The <a href="http://man.openbsd.org/OpenBSD-current/man4/upd.4?query=upd&sec=4">upd(4)</a> driver now handles UPSes with broken report descriptors.

<li>The <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/ums.4?query=ums&sec=4">ums(4)</a> driver now supports the USB Tablet device emulated by Qemu.

<li>The <a href="http://man.openbsd.org/OpenBSD-current/man4/ums.4?query=ums&sec=4">ums(4)</a> driver now supports the USB Tablet device emulated by Qemu.

<li>The <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/umsm.4?query=umsm&sec=4">umsm(4)</a> driver now supports MEDION S4222 devices.

<li>The <a href="http://man.openbsd.org/OpenBSD-current/man4/umsm.4?query=umsm&sec=4">umsm(4)</a> driver now supports MEDION S4222 devices.

<li>The <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/pciide.4?query=pciide&sec=4">pciide(4)</a> driver now supports Intel C610 chipsets.

<li>The <a href="http://man.openbsd.org/OpenBSD-current/man4/pciide.4?query=pciide&sec=4">pciide(4)</a> driver now supports Intel C610 chipsets.

<li>The <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/ukbd.4?query=ukbd&sec=4">ukbd(4)</a> driver now supports "wellspring" Apple keyboards.

<li>The <a href="http://man.openbsd.org/OpenBSD-current/man4/ukbd.4?query=ukbd&sec=4">ukbd(4)</a> driver now supports "wellspring" Apple keyboards.

<li>The <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/pms.4?query=pms&sec=4">pms(4)</a> driver now supports click-and-drag with Elantech v4 touchpads.

<li>The <a href="http://man.openbsd.org/OpenBSD-current/man4/pms.4?query=pms&sec=4">pms(4)</a> driver now supports click-and-drag with Elantech v4 touchpads.

<li>The <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/umodem.4?query=umodem&sec=4">umodem(4)</a> driver now supports Arduino Leonardo devices.

<li>The <a href="http://man.openbsd.org/OpenBSD-current/man4/umodem.4?query=umodem&sec=4">umodem(4)</a> driver now supports Arduino Leonardo devices.

<li>The <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/sk.4?query=sk&sec=4">sk(4)</a> driver now supports receive ring scaling.

<li>The <a href="http://man.openbsd.org/OpenBSD-current/man4/sk.4?query=sk&sec=4">sk(4)</a> driver now supports receive ring scaling.

<li>Replaced custom jumbo allocators in

<a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/sk.4?query=sk&sec=4">sk(4)</a>,

<a href="http://man.openbsd.org/OpenBSD-current/man4/sk.4?query=sk&sec=4">sk(4)</a>,

<a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/nge.4?query=nge&sec=4">nge(4)</a>,

<a href="http://man.openbsd.org/OpenBSD-current/man4/nge.4?query=nge&sec=4">nge(4)</a>,

<a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/lge.4?query=lge&sec=4">lge(4)</a>, and

<a href="http://man.openbsd.org/OpenBSD-current/man4/lge.4?query=lge&sec=4">lge(4)</a>, and

<a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/ti.4?query=ti&sec=4">ti(4)</a> with

<a href="http://man.openbsd.org/OpenBSD-current/man4/ti.4?query=ti&sec=4">ti(4)</a> with

<a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man9/MCLGETI.9?query=MCLGETI&sec=9">MCLGETI(9)</a>.

<a href="http://man.openbsd.org/OpenBSD-current/man9/MCLGETI.9?query=MCLGETI&sec=9">MCLGETI(9)</a>.

<li>Wireless network scanning problems with the <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/iwn.4?query=iwn&sec=4">iwn(4)</a> driver have been fixed.

<li>Wireless network scanning problems with the <a href="http://man.openbsd.org/OpenBSD-current/man4/iwn.4?query=iwn&sec=4">iwn(4)</a> driver have been fixed.

<li>Support for RS* IGP Radeon devices in the <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/radeondrm.4?query=radeondrm&sec=4">radeondrm(4)</a> driver has been fixed.

<li>Support for RS* IGP Radeon devices in the <a href="http://man.openbsd.org/OpenBSD-current/man4/radeondrm.4?query=radeondrm&sec=4">radeondrm(4)</a> driver has been fixed.

<li>PowerMac7,2 and PowerMac7,3 can now boot with a multiprocessor kernel.

</ul>

<li>Removed hardware support:

<ul>

<li>The <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-5.6/man4/lofn.4?query=lofn&sec=4">lofn(4)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-5.6/man4/nofn.4?query=nofn&sec=4">nofn(4)</a> drivers for Hifn crypto accelerator devices have been removed.

<li>The <a href="http://man.openbsd.org/OpenBSD-5.6/man4/lofn.4?query=lofn&sec=4">lofn(4)</a> and <a href="http://man.openbsd.org/OpenBSD-5.6/man4/nofn.4?query=nofn&sec=4">nofn(4)</a> drivers for Hifn crypto accelerator devices have been removed.

<li>The <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-5.6/man4/art.4?query=art&sec=4">art(4)</a> driver for Accoom Networks Artery T1/E1 devices has been removed.

<li>The <a href="http://man.openbsd.org/OpenBSD-5.6/man4/art.4?query=art&sec=4">art(4)</a> driver for Accoom Networks Artery T1/E1 devices has been removed.

<li>The <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-5.6/man4/urio.4?query=urio&sec=4">urio(4)</a> driver for Diamond Multimedia Rio MP3 players has been removed.

<li>The <a href="http://man.openbsd.org/OpenBSD-5.6/man4/urio.4?query=urio&sec=4">urio(4)</a> driver for Diamond Multimedia Rio MP3 players has been removed.

</ul>

Line 118

<ul>

<li>The routing table is now used for most of the address lookup operations superseding the RB-tree and IPv4 address list.

<li>The SipHash algorithm is now used for PCB hashing,

<a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/trunk.4?query=trunk&sec=4">trunk(4)</a> loadbalancing,

<a href="http://man.openbsd.org/OpenBSD-current/man4/trunk.4?query=trunk&sec=4">trunk(4)</a> loadbalancing,

<a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/pf.4?query=pf&sec=4">pf(4)</a> and

<a href="http://man.openbsd.org/OpenBSD-current/man4/pf.4?query=pf&sec=4">pf(4)</a> and

<a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/bridge.4?query=bridge&sec=4">bridge(4)</a>.

<a href="http://man.openbsd.org/OpenBSD-current/man4/bridge.4?query=bridge&sec=4">bridge(4)</a>.

<li>Traffic destinated to link-local IPv6 addresses can now be seen with

<a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/tcpdump.8?query=tcpdump&sec=8">tcpdump(8)</a>.

<a href="http://man.openbsd.org/OpenBSD-current/man8/tcpdump.8?query=tcpdump&sec=8">tcpdump(8)</a>.

<li>A <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=carp&sektion=4">carp(4)</a> now needs to be configured with an explicit carpdev parent interface.

<li>A <a href="http://man.openbsd.org?query=carp&sektion=4">carp(4)</a> now needs to be configured with an explicit carpdev parent interface.

<li>The

layer has been made mpsafe.

<li>Introduce mbuf_list and mbuf_queue structures and APIs.

<li>Support changing the IPv6 input queue length via

<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sysctl&sektion=1">sysctl(1)</a> and net.inet6.ip6.ifq.

<a href="http://man.openbsd.org?query=sysctl&sektion=1">sysctl(1)</a> and net.inet6.ip6.ifq.

</ul>

Line 140

from <tt>base</tt> and <tt>xbase</tt> during installation and upgrades.

Note that this includes the <tt>rc</tt> and <tt>rc.conf</tt> files!

<li>The installer now supports

<a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/trunk.4?query=trunk&sec=4">trunk(4)</a>

<a href="http://man.openbsd.org/OpenBSD-current/man4/trunk.4?query=trunk&sec=4">trunk(4)</a>

interfaces during upgrades.

<li>The discovery of the responsefile location for unattended installation and

upgrades has been extended to be more flexible.

Line 154

<li>Ignore hostname.if.* files when upgrading.

<li>Configure all physical interfaces before any dynamic interface types (e.g. trunks, vlans) when upgrading.

<li>

<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fdisk&sektion=8">fdisk(8)</a> now zeros out GPT signatures found when writing out an MBR that has been re-initialized and has no EFI or EFISYS partition.

<a href="http://man.openbsd.org?query=fdisk&sektion=8">fdisk(8)</a> now zeros out GPT signatures found when writing out an MBR that has been re-initialized and has no EFI or EFISYS partition.

<li>Fixed manipulation of 'ro' and 'rw' fstab options to avoid damage to other options that happen to contain 'ro' or 'rw'.

<li>The ramdisk binary (one binary contains all the commands) is now compiled without optimization and security features. The benefit is a substantial saving in space, allowing more features in the future.

</ul>

Line 166

<li>sliplogin has been removed.

<li>Sendmail has been removed from base -- use the package if you need it.

<li>IPv6 router solicitations are now sent by the kernel ("inet6 autoconf"); rtsol(8) and rtsold(8) are no longer necessary and have been removed.

<li>Enhancements and bugfixes in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=arp&sektion=8">arp(8)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ndp&sektion=8">ndp(8)</a>

<li>Enhancements and bugfixes in <a href="http://man.openbsd.org?query=arp&sektion=8">arp(8)</a> and <a href="http://man.openbsd.org?query=ndp&sektion=8">ndp(8)</a>

<li>The effects of the AI_ADDRCONFIG flag on <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getaddrinfo&sektion=3">getaddrinfo(3)</a> results are limited to DNS queries. This avoids erratic behavior with transient network problems, "raw" addresses and localhost entries in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=hosts&sektion=5">/etc/hosts</a>.

<li>The effects of the AI_ADDRCONFIG flag on <a href="http://man.openbsd.org?query=getaddrinfo&sektion=3">getaddrinfo(3)</a> results are limited to DNS queries. This avoids erratic behavior with transient network problems, "raw" addresses and localhost entries in <a href="http://man.openbsd.org?query=hosts&sektion=5">/etc/hosts</a>.

<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=gethostbyname&sektion=3">gethostbyname(3)</a> now no longer fails when more than 16 addresses/aliases are returned. The original pre-asr limit of 35 has been restored, with additional results being truncated.

<li><a href="http://man.openbsd.org?query=gethostbyname&sektion=3">gethostbyname(3)</a> now no longer fails when more than 16 addresses/aliases are returned. The original pre-asr limit of 35 has been restored, with additional results being truncated.

<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tftp&sektion=1">tftp(1)</a> now supports sending or receiving files larger than 65536 blocks in size.

<li><a href="http://man.openbsd.org?query=tftp&sektion=1">tftp(1)</a> now supports sending or receiving files larger than 65536 blocks in size.

<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tpd&sec=8">ntpd(8)</a> now supports authenticated TLS constraints.

<li><a href="http://man.openbsd.org?query=tpd&sec=8">ntpd(8)</a> now supports authenticated TLS constraints.

</ul>

Line 179

<li>Stricter enforcement of W^X in the kernel address space, especially on architectures with the right featureset (amd64, in particular, has seen substantial improvements).

<li>Support for loadable kernel modules has been removed.

<li>procfs has been removed.

<li>Comprehensive audit of the tree to use the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=reallocarray&sektion=3">reallocarray(3)</a> idiom throughout.

<li>Comprehensive audit of the tree to use the <a href="http://man.openbsd.org?query=reallocarray&sektion=3">reallocarray(3)</a> idiom throughout.

<li>Many conversions from <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=select&sektion=2">select(2)</a> to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=poll&sektion=2">poll(2)</a>.

<li>Many conversions from <a href="http://man.openbsd.org?query=select&sektion=2">select(2)</a> to <a href="http://man.openbsd.org?query=poll&sektion=2">poll(2)</a>.

<li>/var/tmp is now a symbolic link to /tmp, as a first step towards reducing the "fill it up" attack surface against the /var partition.

<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=memcpy&sektion=3">memcpy(3)</a> with overlapping arguments now aborts a program (with a syslog report), allowing these problems to be found. Overlapping copies should use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=memmove&sektion=3">memmove(3)</a>. Sometime after 5.7 release, having learned more about the situation and repairing instances that are discovered by users during release use, we will go back to the optimized version.

<li><a href="http://man.openbsd.org?query=memcpy&sektion=3">memcpy(3)</a> with overlapping arguments now aborts a program (with a syslog report), allowing these problems to be found. Overlapping copies should use <a href="http://man.openbsd.org?query=memmove&sektion=3">memmove(3)</a>. Sometime after 5.7 release, having learned more about the situation and repairing instances that are discovered by users during release use, we will go back to the optimized version.

<li>Change

<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rand&sektion=3">rand(3)</a>,

<a href="http://man.openbsd.org?query=rand&sektion=3">rand(3)</a>,

<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=random&sektion=3">random(3)</a>,

<a href="http://man.openbsd.org?query=random&sektion=3">random(3)</a>,

<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=drand48&sektion=3">drand48(3)</a>,

<a href="http://man.openbsd.org?query=drand48&sektion=3">drand48(3)</a>,

<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=lrand48&sektion=3">lrand48(3)</a>,

<a href="http://man.openbsd.org?query=lrand48&sektion=3">lrand48(3)</a>,

<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mrand48&sektion=3">mrand48(3)</a>,

<a href="http://man.openbsd.org?query=mrand48&sektion=3">mrand48(3)</a>,

<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=srand48&sektion=3">srand48(3)</a>

<a href="http://man.openbsd.org?query=srand48&sektion=3">srand48(3)</a>

to return non-deterministic strong random values by default, sourced from

<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=arc4random&sektion=3">arc4random(3)</a>.

<a href="http://man.openbsd.org?query=arc4random&sektion=3">arc4random(3)</a>.

New functions

<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=srand_deterministic&sektion=3">srand_deterministic(3)</a>,

<a href="http://man.openbsd.org?query=srand_deterministic&sektion=3">srand_deterministic(3)</a>,

<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=srandom_deterministic&sektion=3">srandom_deterministic(3)</a>,

<a href="http://man.openbsd.org?query=srandom_deterministic&sektion=3">srandom_deterministic(3)</a>,

<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=seed48_deterministic&sektion=3">seed48_deterministic(3)</a> and

<a href="http://man.openbsd.org?query=seed48_deterministic&sektion=3">seed48_deterministic(3)</a> and

<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=lcong48_deterministic&sektion=3">lcong48_deterministic(3)</a>

<a href="http://man.openbsd.org?query=lcong48_deterministic&sektion=3">lcong48_deterministic(3)</a>

are added for cases where determinism needs to be requested.

<li>At resume (or unhibernate) time, use a variety of methods to reseed the random number generator. This also works on VMs which wake up (if a wakeup event is seen).

<li>All architectures have been transitioned to static PIE, meaning the statically linked binaries in /bin and /sbin now have randomly located text segments.

<li>Allow larger .openbsd.randomdata ELF segments.

<li>Sync kernel AES code and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> AES code to the one shipped with OpenSSL/LibreSSL.

<li>Sync kernel AES code and <a href="http://man.openbsd.org?query=ssh&sektion=1">ssh(1)</a> AES code to the one shipped with OpenSSL/LibreSSL.

<li>Removed <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=passwd&sektion=1">passwd(1)</a> support for all password ciphers except <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=blowfish&sektion=3">blowfish(3)</a>.

<li>Removed <a href="http://man.openbsd.org?query=passwd&sektion=1">passwd(1)</a> support for all password ciphers except <a href="http://man.openbsd.org?query=blowfish&sektion=3">blowfish(3)</a>.

<li>Use sha512 instead of md5 for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcp&sektion=4">tcp(4)</a> initial sequence number.

<li>Use sha512 instead of md5 for <a href="http://man.openbsd.org?query=tcp&sektion=4">tcp(4)</a> initial sequence number.

<li>Use sha512 instead of md5 in the random number generator.

<li>Delete secret or secret-derived data in many base utilities with <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=explicit_bzero&sektion=3">explicit_bzero(3)</a>.

<li>Delete secret or secret-derived data in many base utilities with <a href="http://man.openbsd.org?query=explicit_bzero&sektion=3">explicit_bzero(3)</a>.

</ul>

<li>Assorted improvements:

<ul>

<li>New <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rcctl&sektion=8"">rcctl(8)</a> utility to control daemons.

<li>New <a href="http://man.openbsd.org?query=rcctl&sektion=8"">rcctl(8)</a> utility to control daemons.

<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fw_update&sektion=1">fw_update(1)</a> has been rewritten to be faster and smarter.

<li><a href="http://man.openbsd.org?query=fw_update&sektion=1">fw_update(1)</a> has been rewritten to be faster and smarter.

<li>Cleanup <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=event&sektion=3">libevent(3)</a>,

<li>Cleanup <a href="http://man.openbsd.org?query=event&sektion=3">libevent(3)</a>,

the compatibility layer for other operating systems has been removed.

The API is still compatible with upstream libevent 1.4.15-stable.

<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=openssl&sektion=1">openssl(1)</a>

<li><a href="http://man.openbsd.org?query=openssl&sektion=1">openssl(1)</a>

s_client now supports a -proxy parameter for connecting over an HTTP proxy.

<li>gzsig has been removed.

<li>Switch to fast assembly versions of some libc functions on amd64.

<li>Frequency scaling has been moved from <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=apmd&sektion=1">apmd(8)</a> to the kernel with an improved algorithm.

<li>Frequency scaling has been moved from <a href="http://man.openbsd.org?query=apmd&sektion=1">apmd(8)</a> to the kernel with an improved algorithm.

<li>Switch last workq API uses to

<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=taskq_create&sektion=9">taskq</a> API and remove all traces of workq.

<a href="http://man.openbsd.org?query=taskq_create&sektion=9">taskq</a> API and remove all traces of workq.

<li>Use

<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=services&sektion=5">services(5)</a> names in the default pf rules in force during startup.

<a href="http://man.openbsd.org?query=services&sektion=5">services(5)</a> names in the default pf rules in force during startup.

<li>

<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=what&sektion=1">what(1)</a> now correctly displays $OpenBSD$ expansions.

<a href="http://man.openbsd.org?query=what&sektion=1">what(1)</a> now correctly displays $OpenBSD$ expansions.

<li>

<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhcpd&sektion=8">dhcpd(8)</a> now removes addresses from its pf table a single time when they expire, rather than at every timeout after the expiry.

<a href="http://man.openbsd.org?query=dhcpd&sektion=8">dhcpd(8)</a> now removes addresses from its pf table a single time when they expire, rather than at every timeout after the expiry.

<li>

<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhcpd&sektion=8">dhcpd(8)</a> now ensures that the pf table process exits when the main process does.

<a href="http://man.openbsd.org?query=dhcpd&sektion=8">dhcpd(8)</a> now ensures that the pf table process exits when the main process does.

<li>

<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhcpd&sektion=8">dhcpd(8)</a> has more informative log entries for DHCPACKs issued in response to DHCPINFORM messages.

<a href="http://man.openbsd.org?query=dhcpd&sektion=8">dhcpd(8)</a> has more informative log entries for DHCPACKs issued in response to DHCPINFORM messages.

<li>Added POSIX types blkcnt_t (int64) and blksize_t (int32), and used them for st_blocks (formerly int64_t) and st_blksize (formerly u_int32_t) in struct stat.

<li>Improved typography for

<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=banner&sektion=6">banner(6)</a>.

<a href="http://man.openbsd.org?query=banner&sektion=6">banner(6)</a>.

<li>Allow <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=hangman&sektion=6">hangman</a>

<li>Allow <a href="http://man.openbsd.org?query=hangman&sektion=6">hangman</a>

to play against any ELF file.

<li>

<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhclient&sektion=8">dhclient(8)</a> adjusts MTU when the interface-mtu DHCP option is provided.

<a href="http://man.openbsd.org?query=dhclient&sektion=8">dhclient(8)</a> adjusts MTU when the interface-mtu DHCP option is provided.

<li>Various memory leaks in

<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhclient&sektion=8">dhclient(8)</a> plugged, providing more stability for long running (in terms of time or renewals) instances.

<a href="http://man.openbsd.org?query=dhclient&sektion=8">dhclient(8)</a> plugged, providing more stability for long running (in terms of time or renewals) instances.

<li>The

<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhclient&sektion=8">dhclient(8)</a>

<a href="http://man.openbsd.org?query=dhclient&sektion=8">dhclient(8)</a>

command line options -q (quiet) and -d (don't daemonize) are now mutually exclusive.

<li>The communication between the privileged and unprivileged

<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhclient&sektion=8">dhclient(8)</a> processes was reworked to further minimize information sharing.

<a href="http://man.openbsd.org?query=dhclient&sektion=8">dhclient(8)</a> processes was reworked to further minimize information sharing.

<li>

<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhclient&sektion=8">dhclient(8)</a> ensures lease timeouts (renew, rebind, expire) are sane and uses default values closer to RFC suggestions.

<a href="http://man.openbsd.org?query=dhclient&sektion=8">dhclient(8)</a> ensures lease timeouts (renew, rebind, expire) are sane and uses default values closer to RFC suggestions.

<li>

<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhclient&sektion=8">dhclient(8)</a> no longer crashes when a lease expires and cannot be renewed or replaced.

<a href="http://man.openbsd.org?query=dhclient&sektion=8">dhclient(8)</a> no longer crashes when a lease expires and cannot be renewed or replaced.

<li>

<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhclient&sektion=8">dhclient(8)</a> improved tracking network interface link states.

<a href="http://man.openbsd.org?query=dhclient&sektion=8">dhclient(8)</a> improved tracking network interface link states.

<li>Improved network error tracking and accounting in

<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhclient&sektion=8">dhclient(8)</a>.

<a href="http://man.openbsd.org?query=dhclient&sektion=8">dhclient(8)</a>.

<li>Private number conversion functions in

<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhclient&sektion=8">dhclient(8)</a> eliminated in favour of standard library functions.

<a href="http://man.openbsd.org?query=dhclient&sektion=8">dhclient(8)</a> eliminated in favour of standard library functions.

<li>Further signal race cleanups in

<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ftp&sektion=1">ftp(1)</a>.

<a href="http://man.openbsd.org?query=ftp&sektion=1">ftp(1)</a>.

<li>BIND has been retired, encouraging use of

<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=nsd&sektion=8">nsd(8)</a> and

<a href="http://man.openbsd.org?query=nsd&sektion=8">nsd(8)</a> and

<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=unbound&sektion=8">unbound(8)</a>.

<a href="http://man.openbsd.org?query=unbound&sektion=8">unbound(8)</a>.

<li>Significant namespace cleanup in the /usr/include files, especially related to <sys/param.h> and <limits.h>.

<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=softraid&sektion=4">softraid(4)</a> RAID1 and CRYPTO volumes are now bootable on the sparc64 platform.

<li><a href="http://man.openbsd.org?query=softraid&sektion=4">softraid(4)</a> RAID1 and CRYPTO volumes are now bootable on the sparc64 platform.

<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=relayd&sektion=8">relayd(8)</a> now uses "TLS" rather than "SSL" terminology to reflect the deprecation of the latter.

<li><a href="http://man.openbsd.org?query=relayd&sektion=8">relayd(8)</a> now uses "TLS" rather than "SSL" terminology to reflect the deprecation of the latter.

<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=relayd&sektion=8">relayd(8)</a> now supports the random and source-hash modes with redirections.

<li><a href="http://man.openbsd.org?query=relayd&sektion=8">relayd(8)</a> now supports the random and source-hash modes with redirections.

<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=relayd&sektion=8">relayd(8)</a> now supports the <a href="http://cvsweb.openbsd.org/cgi-bin/cvsweb/~checkout~/src/share/snmp/OPENBSD-RELAYD-MIB.txt?rev=1.1">OPENBSD-RELAYD-MIB</a> via agentx with <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=snmpd&sektion=8">snmpd(8)</a>.

<li><a href="http://man.openbsd.org?query=relayd&sektion=8">relayd(8)</a> now supports the <a href="http://cvsweb.openbsd.org/cgi-bin/cvsweb/~checkout~/src/share/snmp/OPENBSD-RELAYD-MIB.txt?rev=1.1">OPENBSD-RELAYD-MIB</a> via agentx with <a href="http://man.openbsd.org?query=snmpd&sektion=8">snmpd(8)</a>.

<li>Added interfaces for setting the close-on-exec flag on new FILE handles and for requesting exclusive creation via the the 'e' and 'x' mode letters for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fopen&sektion=3">fopen(3)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fdopen&sektion=3">fdopen(3)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=freopen&sektion=3">freopen(3)</a>, and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=popen&sektion=3">popen(3)</a>.

<li>Added interfaces for setting the close-on-exec flag on new FILE handles and for requesting exclusive creation via the the 'e' and 'x' mode letters for <a href="http://man.openbsd.org?query=fopen&sektion=3">fopen(3)</a>, <a href="http://man.openbsd.org?query=fdopen&sektion=3">fdopen(3)</a>, <a href="http://man.openbsd.org?query=freopen&sektion=3">freopen(3)</a>, and <a href="http://man.openbsd.org?query=popen&sektion=3">popen(3)</a>.

<li>Many library functions and programs changed to use the above for safety or simplicity.

<li>Added <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=chflagsat&sektion=2">chflagsat(2)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sockatmark&sektion=3">sockatmark(3)</a>, and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=stravis&sektion=3">stravis(3)</a>.

<li>Added <a href="http://man.openbsd.org?query=chflagsat&sektion=2">chflagsat(2)</a>, <a href="http://man.openbsd.org?query=sockatmark&sektion=3">sockatmark(3)</a>, and <a href="http://man.openbsd.org?query=stravis&sektion=3">stravis(3)</a>.

<li>Merged performance and safety fixes for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fts&sektion=3">fts(3)</a> from FreeBSD.

<li>Merged performance and safety fixes for <a href="http://man.openbsd.org?query=fts&sektion=3">fts(3)</a> from FreeBSD.

<li>Merged fixes for file descriptor leaks in various <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rpc&sektion=3">rpc(3)</a> functions from NetBSD.

<li>Merged fixes for file descriptor leaks in various <a href="http://man.openbsd.org?query=rpc&sektion=3">rpc(3)</a> functions from NetBSD.

<li>Added a <tt>kern.global_ptrace</tt> <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sysctl&sektion=1">sysctl(1)</a> to disable, by default, the ability to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ptrace&sektion=2">ptrace(2)</a> processes that aren't your descendent.

<li>Added a <tt>kern.global_ptrace</tt> <a href="http://man.openbsd.org?query=sysctl&sektion=1">sysctl(1)</a> to disable, by default, the ability to <a href="http://man.openbsd.org?query=ptrace&sektion=2">ptrace(2)</a> processes that aren't your descendent.

<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=kdump&sektion=1">kdump(1)</a> now always displays both the numeric and the textual forms for users, groups, timestamps, and sysctl ids, eliminating the <tt>-r</tt> option. It also auto-selects between decimal and hex format for arguments, renders more types of flags, and is more robust when parsing corrupt ktrace files.

<li><a href="http://man.openbsd.org?query=kdump&sektion=1">kdump(1)</a> now always displays both the numeric and the textual forms for users, groups, timestamps, and sysctl ids, eliminating the <tt>-r</tt> option. It also auto-selects between decimal and hex format for arguments, renders more types of flags, and is more robust when parsing corrupt ktrace files.

<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=chmod&sektion=1">chmod(1)</a>/<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=chgrp&sektion=1">chgrp(1)</a>/<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=chown&sektion=8">chown(8)</a> now comply with POSIX's requirements when they encounter symlinks when the <tt>-R</tt> option is used, and are safe from race conditions when doing so.

<li><a href="http://man.openbsd.org?query=chmod&sektion=1">chmod(1)</a>/<a href="http://man.openbsd.org?query=chgrp&sektion=1">chgrp(1)</a>/<a href="http://man.openbsd.org?query=chown&sektion=8">chown(8)</a> now comply with POSIX's requirements when they encounter symlinks when the <tt>-R</tt> option is used, and are safe from race conditions when doing so.

<li>The <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dmesg&sektion=8">dmesg(8)</a> utility can now display the console message buffer in addition to the system message buffer.

<li>The <a href="http://man.openbsd.org?query=dmesg&sektion=8">dmesg(8)</a> utility can now display the console message buffer in addition to the system message buffer.

<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=inetd&sektion=8">inetd(8)</a> now uses libevent instead of

<li><a href="http://man.openbsd.org?query=inetd&sektion=8">inetd(8)</a> now uses libevent instead of

<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=select&sektion=3">select(3)</a>.

<a href="http://man.openbsd.org?query=select&sektion=3">select(3)</a>.

<li>Reworking of the kernel

implementation to provide mpsafety and pave the way for performance improvements.

<li>Removed the

<a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-5.6/man9/workq_add_task.9?query=workq_add_task&sec=9">workq API</a>

<a href="http://man.openbsd.org/OpenBSD-5.6/man9/workq_add_task.9?query=workq_add_task&sec=9">workq API</a>

after replacing it with the

<a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man9/task_add.9?query=task_add&sec=9">task API</a>.

<a href="http://man.openbsd.org/OpenBSD-current/man9/task_add.9?query=task_add&sec=9">task API</a>.

<li>Add support for creating kernel threads that cannot sleep to

<a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-5.6/man9/taskq_create.9?query=taskq_create&sec=9">taskq_create(9)</a>.

<a href="http://man.openbsd.org/OpenBSD-5.6/man9/taskq_create.9?query=taskq_create&sec=9">taskq_create(9)</a>.

<li>Completed the implementation of the atomic (eg,

<a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man9/atomic_cas_uint.9?query=atomic_cas_uint&sec=9">atomic_cas_uint(9)</a>,

<a href="http://man.openbsd.org/OpenBSD-current/man9/atomic_cas_uint.9?query=atomic_cas_uint&sec=9">atomic_cas_uint(9)</a>,

<a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man9/atomic_swap_uint.9?query=atomic_swap_uint&sec=9">atomic_swap_uint(9)</a>,

<a href="http://man.openbsd.org/OpenBSD-current/man9/atomic_swap_uint.9?query=atomic_swap_uint&sec=9">atomic_swap_uint(9)</a>,

<a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man9/atomic_add_int.9?query=atomic_add_int&sec=9">atomic_add_int(9)</a>,

<a href="http://man.openbsd.org/OpenBSD-current/man9/atomic_add_int.9?query=atomic_add_int&sec=9">atomic_add_int(9)</a>,

<a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man9/atomic_sub_int.9?query=atomic_sub_int&sec=9">atomic_sub_int(9)</a>,

<a href="http://man.openbsd.org/OpenBSD-current/man9/atomic_sub_int.9?query=atomic_sub_int&sec=9">atomic_sub_int(9)</a>,

<a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man9/atomic_inc_int.9?query=atomic_inc_int&sec=9">atomic_inc_int(9)</a>, and

<a href="http://man.openbsd.org/OpenBSD-current/man9/atomic_inc_int.9?query=atomic_inc_int&sec=9">atomic_inc_int(9)</a>, and

<a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man9/atomic_dec_int.9?query=atomic_inc_int&sec=9">atomic_dec_int(9)</a>)

<a href="http://man.openbsd.org/OpenBSD-current/man9/atomic_dec_int.9?query=atomic_inc_int&sec=9">atomic_dec_int(9)</a>)

and membar

(<a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man9/membar_sync.9?query=membar_sync&sec=9">membar_sync(9)</a>)

(<a href="http://man.openbsd.org/OpenBSD-current/man9/membar_sync.9?query=membar_sync&sec=9">membar_sync(9)</a>)

APIs across all supported architectures.

</ul>

<li>OpenBSD <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=httpd&sektion=8">httpd(8)</a>:

<li>OpenBSD <a href="http://man.openbsd.org?query=httpd&sektion=8">httpd(8)</a>:

<ul>

<li>SSLv2/3 is not supported anymore; renamed all occurrences of "SSL" to "TLS".

<li>Various TLS improvements with better support for ECDHE/DHE forward secrecy.

<li>Improved support for virtual hosts by supporting name- and IP- based aliases.

<li>Added support for basic authentication by checking against files created with <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=htpasswd&sektion=1">htpasswd(1)</a>.

<li>Added support for basic authentication by checking against files created with <a href="http://man.openbsd.org?query=htpasswd&sektion=1">htpasswd(1)</a>.

<li>Added support for custom error codes, blocking and dropping of connections.

<li>Added support for redirections and macros in specified target URLs.

<li>Added the "root strip" option to sanitize PATH_INFO for some CGI scripts.

<li>Added an option to specify an alternative log directory instead of /var/www/logs.

<li>Various FastCGI improvements; <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=httpd&sektion=8">httpd(8)</a> is now compatible with many well-known web applications.

<li>Various FastCGI improvements; <a href="http://man.openbsd.org?query=httpd&sektion=8">httpd(8)</a> is now compatible with many well-known web applications.

<li>Various other fixes and improvements.

</ul>

Line 331

<ul>

<li>Potentially-incompatible changes:

<ul>

<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a>:

<li><a href="http://man.openbsd.org?query=sshd&sektion=8">sshd(8)</a>:

<tt>UseDNS</tt> now defaults to 'no'. Configurations that match

against the client host name (via

<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd_config&sektion=5">sshd_config(5)</a>

<a href="http://man.openbsd.org?query=sshd_config&sektion=5">sshd_config(5)</a>

or <tt>authorized_keys</tt>) may need to re-enable it or convert to

matching against addresses.

</ul>

Line 344

library-like. These changes are mostly not user-visible, but

have greatly improved OpenSSH's testability and internal layout.

<li>Add <tt>FingerprintHash</tt> option to

and

<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a>,

<a href="http://man.openbsd.org?query=sshd&sektion=8">sshd(8)</a>,

and equivalent command-line flags to the other tools to control

algorithm used for key fingerprints. The default changes from MD5

to SHA256 and format from hex to base64. Fingerprints now have the

hash algorithm prepended. Please note that visual host keys will also

be different.

<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>,

<li><a href="http://man.openbsd.org?query=ssh&sektion=1">ssh(1)</a>,

<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a>:

<a href="http://man.openbsd.org?query=sshd&sektion=8">sshd(8)</a>:

Experimental host key rotation support. Add a protocol extension

for a server to inform a client of all its available host keys after

authentication has completed. The client may record the keys in

Line 361

algorithms and a server to gracefully rotate its keys. The client

side of this is controlled by a <tt>UpdateHostkeys</tt> config option

(default off).

<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>:

<li><a href="http://man.openbsd.org?query=ssh&sektion=1">ssh(1)</a>:

Add a

<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh_config&sektion=5">ssh_config(5)</a>

<a href="http://man.openbsd.org?query=ssh_config&sektion=5">ssh_config(5)</a>

<tt>HostbasedKeyType</tt> option to control which host public key types

are tried during host-based authentication.

<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>,

<li><a href="http://man.openbsd.org?query=ssh&sektion=1">ssh(1)</a>,

<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a>:

<a href="http://man.openbsd.org?query=sshd&sektion=8">sshd(8)</a>:

fix connection-killing host key mismatch errors when

offers multiple ECDSA keys of different lengths.

<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>:

<li><a href="http://man.openbsd.org?query=ssh&sektion=1">ssh(1)</a>:

when host name canonicalisation is enabled, try to parse host names

as addresses before looking them up for canonicalisation. Fixes

bz#2074 and avoiding needless DNS lookups in some cases.

<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh-keygen&sektion=1">ssh-keygen(1)</a>,

<li><a href="http://man.openbsd.org?query=ssh-keygen&sektion=1">ssh-keygen(1)</a>,

<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a>:

<a href="http://man.openbsd.org?query=sshd&sektion=8">sshd(8)</a>:

Key Revocation Lists (KRLs) no longer require OpenSSH to be

compiled with OpenSSL support.

<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>,

<li><a href="http://man.openbsd.org?query=ssh&sektion=1">ssh(1)</a>,

<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh-keysign&sektion=8">ssh-keysign(8)</a>:

<a href="http://man.openbsd.org?query=ssh-keysign&sektion=8">ssh-keysign(8)</a>:

Make ed25519 keys work for host based authentication.

<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a>:

<li><a href="http://man.openbsd.org?query=sshd&sektion=8">sshd(8)</a>:

SSH protocol v.1 workaround for the Meyer, et al., Bleichenbacher

Side Channel Attack. Fake up a bignum key before RSA decryption.

<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a>:

<li><a href="http://man.openbsd.org?query=sshd&sektion=8">sshd(8)</a>:

Remember which public keys have been used for authentication and

refuse to accept previously-used keys. This allows

<tt>AuthenticationMethods=publickey,publickey</tt> to require that

users authenticate using two different public keys.

<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a>:

<li><a href="http://man.openbsd.org?query=sshd&sektion=8">sshd(8)</a>:

add

<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd_config&sektion=5">sshd_config(5)</a>

<a href="http://man.openbsd.org?query=sshd_config&sektion=5">sshd_config(5)</a>

<tt>HostbasedAcceptedKeyTypes</tt> and <tt>PubkeyAcceptedKeyTypes</tt>

options to allow

to control what public key types will be accepted. Currently defaults

to all.

<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a>:

<li><a href="http://man.openbsd.org?query=sshd&sektion=8">sshd(8)</a>:

Don't count partial authentication success as a failure against

<tt>MaxAuthTries</tt>.

<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>:

<li><a href="http://man.openbsd.org?query=ssh&sektion=1">ssh(1)</a>:

Add <tt>RevokedHostKeys</tt> option for the client to allow text-file

or KRL-based revocation of host keys.

<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh-keygen&sektion=1">ssh-keygen(1)</a>,

<li><a href="http://man.openbsd.org?query=ssh-keygen&sektion=1">ssh-keygen(1)</a>,

<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a>:

<a href="http://man.openbsd.org?query=sshd&sektion=8">sshd(8)</a>:

Permit KRLs that revoke certificates by serial number or key ID without

scoping to a particular CA.

<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>:

<li><a href="http://man.openbsd.org?query=ssh&sektion=1">ssh(1)</a>:

Add a "Match canonical" criteria that allows

<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh_config&sektion=5">ssh_config(5)</a>

<a href="http://man.openbsd.org?query=ssh_config&sektion=5">ssh_config(5)</a>

<tt>Match</tt> blocks to trigger only in the second config pass.

<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>:

<li><a href="http://man.openbsd.org?query=ssh&sektion=1">ssh(1)</a>:

Add a <tt>-G</tt> option to

that causes it to parse its configuration and dump the result to

stdout, similar to "<tt>sshd -T</tt>".

<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>:

<li><a href="http://man.openbsd.org?query=ssh&sektion=1">ssh(1)</a>:

Allow <tt>Match</tt> criteria to be negated

(e.g. "<tt>Match !host</tt>").

<li>The regression test suite has been extended to cover more OpenSSH

Line 426

</ul>

<li>The following significant bugs have been fixed in this release:

<ul>

<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh-keyscan&sektion=1">ssh-keyscan(1)</a>:

<li><a href="http://man.openbsd.org?query=ssh-keyscan&sektion=1">ssh-keyscan(1)</a>:

<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh-keyscan&sektion=1">ssh-keyscan(1)</a>

<a href="http://man.openbsd.org?query=ssh-keyscan&sektion=1">ssh-keyscan(1)</a>

has been made much more robust again servers that hang or violate

the SSH protocol.

<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>,

<li><a href="http://man.openbsd.org?query=ssh&sektion=1">ssh(1)</a>,

<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh-keygen&sektion=1">ssh-keygen(1)</a>:

<a href="http://man.openbsd.org?query=ssh-keygen&sektion=1">ssh-keygen(1)</a>:

Fix regression bz#2306: Key path names were being lost as comment

fields.

<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>:

<li><a href="http://man.openbsd.org?query=ssh&sektion=1">ssh(1)</a>:

Allow

<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh_config&sektion=5">ssh_config(5)</a>

<a href="http://man.openbsd.org?query=ssh_config&sektion=5">ssh_config(5)</a>

<tt>Port</tt> options set in the second config parse phase to be

applied (they were being ignored). (bz#2286)

<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>:

<li><a href="http://man.openbsd.org?query=ssh&sektion=1">ssh(1)</a>:

Tweak config re-parsing with host canonicalisationmake the

second pass through the config files always run when host name

canonicalisation is enabled (and not whenever the host name changes).

(bz#2267)

<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>:

<li><a href="http://man.openbsd.org?query=ssh&sektion=1">ssh(1)</a>:

Fix passing of wildcard forward bind addresses when connection

multiplexing is in use. (bz#2324)

<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh-keygen&sektion=1">ssh-keygen(1)</a>:

<li><a href="http://man.openbsd.org?query=ssh-keygen&sektion=1">ssh-keygen(1)</a>:

Fix broken private key conversion from non-OpenSSH formats. (bz#2345)

<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh-keygen&sektion=1">ssh-keygen(1)</a>:

<li><a href="http://man.openbsd.org?query=ssh-keygen&sektion=1">ssh-keygen(1)</a>:

Fix KRL generation bug when multiple CAs are in use.

<li>Various fixes to manual pages. (bz#2273, bz#2288 and bz#2316)

</ul>

Line 465

APIs.

<li>Jettison DTLS over SCTP.

<li>Move

<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=openssl&sektion=1">openssl(1)</a>

<a href="http://man.openbsd.org?query=openssl&sektion=1">openssl(1)</a>

from <tt>/usr/sbin/openssl</tt> to <tt>/usr/bin/openssl</tt>.

<li>Two important cipher suites, GOST and Camellia, have been reworked

or reenabled, providing better interoperability with systems around

the world.

<li>libtls: New API for loading CA chains directly from memory instead

of a file, allowing verification with privilege separation in a

<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=chroot&sektion=8">chroot(8)</a>

<a href="http://man.openbsd.org?query=chroot&sektion=8">chroot(8)</a>

without direct access to CA certificate files.

<li>libtls: Ciphers default to TLSv1.2 with AEAD and PFS.

<li>libtls: Improved error handling and message generation.

Line 482

<li>New AEAD "MAC alias" allows configuring TLSv1.2 AEAD ciphers by

using 'TLSv1.2+AEAD' as the cipher selection string.

<li>New

<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=openssl&sektion=1">openssl(1)</a>

<a href="http://man.openbsd.org?query=openssl&sektion=1">openssl(1)</a>

command '<tt>certhash</tt>' replaces the <tt>c_rehash</tt> script.

<li>Application-Layer Protocol Negotiation (ALPN) support.

</ul>

Line 513

<li>mandoc 1.13.3:

<ul>

<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=man&sektion=1">man(1)</a>,

<li><a href="http://man.openbsd.org?query=man&sektion=1">man(1)</a>,

<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=apropos&sektion=1">apropos(1)</a>, and

<a href="http://man.openbsd.org?query=apropos&sektion=1">apropos(1)</a>, and

<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mandoc&sektion=1">mandoc(1)</a>

<a href="http://man.openbsd.org?query=mandoc&sektion=1">mandoc(1)</a>

now have a unified user interface, all with the same options,

and are in fact all implemented by the same binary program.

<li>For <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=man&sektion=1">man(1)</a>,

<li>For <a href="http://man.openbsd.org?query=man&sektion=1">man(1)</a>,

this implies new options -l and -IKOTW,

and it now finds manual pages by the names in their NAME sections

even if they lack matching file names.

<li>For <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=apropos&sektion=1">apropos(1)</a>,

<li>For <a href="http://man.openbsd.org?query=apropos&sektion=1">apropos(1)</a>,

this implies new options -acfhklw and -IKOTW.

<li>For <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mandoc&sektion=1">mandoc(1)</a>,

<li>For <a href="http://man.openbsd.org?query=mandoc&sektion=1">mandoc(1)</a>,

this implies new options -acfhkl.

<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mandoc&sektion=1">mandoc(1)</a>

<li><a href="http://man.openbsd.org?query=mandoc&sektion=1">mandoc(1)</a>

now automatically detects and transparently accepts input encoded

in utf-8 and iso-8859-1, and provides a new option -K to explicitly

specify the input encoding.

<li>The <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mandoc&sektion=1">mandoc(1)</a>

<li>The <a href="http://man.openbsd.org?query=mandoc&sektion=1">mandoc(1)</a>

default output mode now is -Tlocale rather than -Tascii.

now supports in-line equations,

and terminal rendering of equations is considerably improved.

<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mandoc&sektion=1">mandoc(1)</a> -Thtml

<li><a href="http://man.openbsd.org?query=mandoc&sektion=1">mandoc(1)</a> -Thtml

now generates polyglot HTML5 and renders

using MathML.

<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mandoc&sektion=1">mandoc(1)</a>

<li><a href="http://man.openbsd.org?query=mandoc&sektion=1">mandoc(1)</a>

can no longer fail with fatal errors, no matter how broken the input

file may be, and the -Wfatal message level no longer has any effect.

A new diagnostic level -Wunsupp is provided. Besides, many

Line 551

<li>Syslogd:

<ul>

<li>OpenBSD <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=syslogd&sektion=8">syslogd(8)</a>

<li>OpenBSD <a href="http://man.openbsd.org?query=syslogd&sektion=8">syslogd(8)</a>

is based on

<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=event&sektion=3">libevent</a>

<a href="http://man.openbsd.org?query=event&sektion=3">libevent</a>

now.

<li>Sending and receiving UDP messages works with both IPv4 and IPv6.

<li>Syslog messages can also be sent over TCP or TLS.

The syntax to specify the loghost is documented in

<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=syslog.conf&sektion=5">syslog.conf(5)</a>.

<a href="http://man.openbsd.org?query=syslog.conf&sektion=5">syslog.conf(5)</a>.

<li>Sending over TCP and TLS is reliable.

If a connection terminates, syslogd tries to reconnect.

When the message buffer in memory gets full, the number of dropped

Line 1015

OpenBSD ports system.

The ports/ directory represents a CVS (see the manpage for

cvs(1)</a> if

you aren't familiar with CVS) checkout of our ports. As with our complete

source tree, our ports tree is available via