Annotation of www/67.html, Revision 1.1
1.1 ! benno 1: next: <!-- 2019/11/17 -->
! 2:
! 3: <!doctype html>
! 4: <html lang=en id=release>
! 5: <meta charset=utf-8>
! 6:
! 7: <title>OpenBSD 6.7</title>
! 8: <meta name="description" content="OpenBSD 6.7">
! 9: <meta name="viewport" content="width=device-width, initial-scale=1">
! 10: <link rel="stylesheet" type="text/css" href="openbsd.css">
! 11: <link rel="canonical" href="https://www.openbsd.org/67.html">
! 12:
! 13: <h2 id=OpenBSD>
! 14: <a href="index.html">
! 15: <i>Open</i><b>BSD</b></a>
! 16: 6.7
! 17: </h2>
! 18:
! 19: <table>
! 20: <tr>
! 21: <td>
! 22: <a href="images/xxx.gif"><!-- XXX -->
! 23: <img alt="XXX image alt tag" width="227" height="343" src="images/xxx-s.gif"></a>
! 24: <td>
! 25: Released May 19, 2020<br><!-- XXX -->
! 26: Copyright 1997-2020, Theo de Raadt.<br>
! 27: <br>
! 28: <br>
! 29: Artwork by XXX.
! 30: <br>
! 31: <ul>
! 32: <li>See the information on <a href="ftp.html">the FTP page</a> for
! 33: a list of mirror machines.
! 34: <li>Go to the <code class=reldir>pub/OpenBSD/6.7/</code> directory on
! 35: one of the mirror sites.
! 36: <li>Have a look at <a href="errata67.html">the 6.7 errata page</a> for a list
! 37: of bugs and workarounds.
! 38: <li>See a <a href="plus67.html">detailed log of changes</a> between the
! 39: 6.6 and 6.7 releases.
! 40: <p>
! 41: <li><a href="https://man.openbsd.org/signify.1">signify(1)</a>
! 42: pubkeys for this release:<p>
! 43:
! 44: <table class=signify>
! 45: <tr><td>
! 46: openbsd-67-base.pub:
! 47: <td>
! 48: <a href="https://ftp.openbsd.org/pub/OpenBSD/6.7/openbsd-67-base.pub">
! 49: RWRmkIA877Io3oCILSZoJGhAswifJbFK4r18ICoia+3c0PfwANueolNj</a>
! 50: <tr><td>
! 51: openbsd-67-fw.pub:
! 52: <td>
! 53: RWSOSlsdN/fgAY1SvEyFdbTkouV2cIsUBXdJhEIhRscq8TT3bz9iOYRL
! 54: <tr><td>
! 55: openbsd-67-pkg.pub:
! 56: <td>
! 57: RWTR60UGd2MbnaRg+upZbbBYO00ZhHJehXy7tH2ORHvCjGcDH2pZpsxv
! 58: <tr><td>
! 59: openbsd-67-syspatch.pub:
! 60: <td>
! 61: RWTLqtfkjXfBADZEVkBDwSU0EAhy45nb5ovn1xHtQmD3DcqUWe+CouTL
! 62: </table>
! 63: </ul>
! 64: <p>
! 65: All applicable copyrights and credits are in the src.tar.gz,
! 66: sys.tar.gz, xenocara.tar.gz, ports.tar.gz files, or in the
! 67: files fetched via <code>ports.tar.gz</code>.
! 68: </table>
! 69:
! 70: <hr>
! 71:
! 72: <section id=new>
! 73: <h3>What's New</h3>
! 74: <p>
! 75: This is a partial list of new features and systems included in OpenBSD 6.7.
! 76: For a comprehensive list, see the <a href="plus67.html">changelog</a> leading
! 77: to 6.7.
! 78:
! 79: <ul>
! 80:
! 81: <li>General improvements and bugfixes:
! 82: <ul>
! 83: <li>Reduced the minimum allowed number of chunks in a CONCAT
! 84: volume from 2 to 1, increasing the number of volumes which can be
! 85: created on a single disk with <a
! 86: href="https://man.openbsd.org/bioctl">bioctl(8)</a> from 7 to 15. This
! 87: can be used to create more partitions than previously.
! 88: <li>Rewrote the <a href="https://man.openbsd.org/cron">cron(8)</a>
! 89: flag-parsing code to be getopt-like, allowing tight formations like
! 90: -ns and flag repetition. Renamed the "options" field in <a
! 91: href="https://man.openbsd.org/crontab">crontab(5)</a> to "flags".
! 92: <li>Added <a
! 93: href="https://man.openbsd.org/man5/crontab.5">crontab(5)</a> -s flag
! 94: to the command field, indicating that only a single instance of the
! 95: job should run concurrently.
! 96: <li>Added <a href="https://man.openbsd.org/cron">cron(8)</a>
! 97: support for random values using the ~ operator.
! 98: <li>Allowed <a href="https://man.openbsd.org/cwm">cwm(1)</a>
! 99: configuration of window size based on percentage of the master window
! 100: during horizontal and vertical tiling actions.
! 101: <li>Allowed use of window-htile and window-vtile with the "empty"
! 102: group clients in <a href="https://man.openbsd.org/cwm">cwm(1)</a>.
! 103: <li>Switched powerpc to a machine-independent mplock implementation,
! 104: allowing use of <a href="https://man.openbsd.org/witness">
! 105: witness(4)</a>.
! 106: <li>Added <a href="https://man.openbsd.org/acpi">acpi(4)</a>
! 107: support for the _CCA method, indicating whether DMA is cache-coherent.
! 108: <li>Switched the default compiler on powerpc to clang.
! 109: <li>Bumped <a href="https://man.openbsd.org/nvme">nvme(4)</a> max
! 110: physio() i/o size to 128K.
! 111: <li>Blocked <a href="https://man.openbsd.org/apmd">apmd(8)</a>
! 112: autoaction for 60 seconds after resume, preventing spurious
! 113: suspend/resume cycles.
! 114: <li>Checked battery life against autoaction level on power change
! 115: events in <a href="https://man.openbsd.org/apmd">apmd(8)</a>, making
! 116: -z/-Z work with <a
! 117: href="https://man.openbsd.org/acpibat">acpibat(4)</a>.
! 118: <li>Prevented a kernel hang when no unlocked ffs_softdep worklist
! 119: items could be processed.
! 120: <li>Stopped counting pages mapped as PROT_NONE against the
! 121: RLIMIT_DATA limit, helping code which reserves large chunks of address
! 122: space but populates it sparsely.
! 123: <li>Added the $REQUEST_SCHEME variable to <a
! 124: href="https://man.openbsd.org/httpd.conf">httpd.conf(5)</a>, allowing
! 125: preservation of the original connection type (http or https) for
! 126: redirect locations
! 127: <li>Implemented "strip" option in <a
! 128: href="https://man.openbsd.org/httpd.conf">httpd.conf(5)</a> for
! 129: fastcgi to be able to have multiple chroots under /var/www for FastCGI
! 130: servers.
! 131: <li>Changed <a href="https://man.openbsd.org/httpd">httpd(8)</a>
! 132: to send a 408 response when a timeout happens while headers are being
! 133: received, but close the connection if no request is received.
! 134: <li>Updated en_US.UTF-8.src to Unicode 12.1.
! 135: <li>Added a new __tmfd <a
! 136: href="https://man.openbsd.org/__syscall">__syscall(2)</a> that creates
! 137: a new, unnamed file in /tmp, intended for shm/fd passing, but for
! 138: programs that may otherwise like filesystem access
! 139: <li>Imported <a href="https://man.openbsd.org/dt">dt(4)</a>, a
! 140: driver and framework for Dynamic Profiling, and an accompanying bug
! 141: tracer that speaks the <a href="https://man.openbsd.org/bt">bt(5)</a>
! 142: language.
! 143: <li>Added a human-readable mode (-h) to <a
! 144: href="https://man.openbsd.org/systat">systat(1)</a>.
! 145: <li>Implemented scrolling in <a
! 146: href="https://man.openbsd.org/top">top(1)</a> using the 9 and 0 keys.
! 147: <li>Added <a
! 148: href="https://man.openbsd.org/timeout_set_flags">timeout_set_flags(9)</a>
! 149: and TIMEOUT_INITIALIZER_FLAGS(9) to the timeout API, allowing the
! 150: caller to initialize timeouts with arbitrary flags.
! 151: <li>Introduced TIMEOUT_SCHEDULED flag and tos_scheduled statistic
! 152: to <a href="https://man.openbsd.org/timeout.9">timeout(9)</a>.
! 153: <li>Switched to tickless backend in <a
! 154: href="https://man.openbsd.org/timeout.9">timeout(9)</a>, adding new
! 155: interface <a
! 156: href="https://man.openbsd.org/timeout_at_ts">timeout_at_ts(9)</a> to
! 157: avoid backwardly compatible behavior.
! 158: <li>Added the system clock interface <a
! 159: href="https://man.openbsd.org/nanoboottime">nanoboottime(9)</a>,
! 160: returning the UTC time at which the system booted in seconds and
! 161: nanoseconds.
! 162: <li>Introduced efficient page freeing in reverse order from uvm,
! 163: greatly improving cases of massive page freeing.
! 164: <li>Added uvm_objfree to uvm to efficiently free all pages from a
! 165: uvm object, used in the buffer cache for considerable speedup when
! 166: freeing pages.
! 167: <li>Modified buffer cache to use individual uvm_objs per buffer to
! 168: speed page lookups.
! 169: <li>Speed up <a href="https://man.openbsd.org/sort">sort(1)</a> by
! 170: not performing a top-level sort when -c is used with a -k field.
! 171: <li>Modified -z mode verification in <a
! 172: href="https://man.openbsd.org/signify">signify(1)</a> to save the
! 173: header and output it, so signify -zV >saved.tgz will keep the
! 174: signature for later checks.
! 175: <li>Enabled DNSSEC validation in <a
! 176: href="https://man.openbsd.org/unbound">unbound(8)</a> by default.
! 177: <li><a href="https://man.openbsd.org/ntpd">ntpd(8)</a> now does
! 178: constraint validation against 9.9.9.9 and 2620:fe::fe by default.
! 179: <li>Provide debug package information that can be installed
! 180: alongside packages and used to provide better bug reports.
! 181: <li>Added DEBUG_PKG_CACHE functionality to <a
! 182: href="https://man.openbsd.org/pkg_add">pkg_add(1)</a>, fetching debug
! 183: patches when packages are installed.<!-- XXX -->
! 184: <li>Added a -d option to <a
! 185: href="https://man.openbsd.org/pkg_add">pkg_add(1)</a> to add debug
! 186: packages if present alongside intended updates or additions.
! 187: </ul>
! 188:
! 189: <!-- FFS2 -->
! 190: <li>The FFS2 filesystem, which uses 64bit time_t timestamps is now the
! 191: default filesystem on nearly all architectures:
! 192: <ul>
! 193: <li>Enabled ffs2 in sgi bootblocks and ramdisks.
! 194: <li>Made ffs2 the default filesystem type on installs except for landisk, luna88k and sgi.
! 195: <li>Changed the sparc64 bootblocks to be able to read from ffs1, ffs2 and softraid, and enabled the ffs2 option for both floppies.
! 196: <li>Enabled FFS2 on the landisk ramdisk.
! 197: <li>Taught i386 boot(8), cdboot(8) and pxeboot(8) about ffs2.
! 198: <li>Taught macppc boot(8) about ffs2.
! 199: <li>Taught sparc64 boot(8) (but not the sparc64 bootblocks) about ffs2.
! 200: <li>Allowed hppa <a href="https://man.openbsd.org/man8/hppa/boot.8">boot(8)</a> to read from an ffs2 filesystem.
! 201: <li>Allowed alpha boot(8) to read from an ffs2 filesystem and adapted its custom installboot to deal with ffs2. Also fixed the partition read code to deal with offsets greater than 2G.
! 202: <li>Adapted <a href="https://man.openbsd.org/biosboot">biosboot(8)</a> so that it can read <a href="https://man.openbsd.org/boot.8">boot(8)</a> from an ffs2 filesystem.
! 203: <li>Allowed amd64 <a href="https://man.openbsd.org/man8/amd64/boot.8">boot(8)</a> to read from an ffs2 filesystem. Enabled ffs2 for floppy.
! 204: <li>Allowed loongson boot(8) to read from an ffs2 filesystem.
! 205: <li>Allowed arm64 and armv7 efiboot(8) to read from an ffs2 filesystem.
! 206: </ul>
! 207:
! 208: <li>SMP-Improvements, System call unlocking:
! 209: <ul>
! 210: <li>Fixed absolute timeout checking in <a
! 211: href="https://man.openbsd.org/__thrsleep">__thrsleep(2)</a>.
! 212: <li>Introduced <a
! 213: href="https://man.openbsd.org/tsleep_nsec">*sleep_nsec(9)</a> to allow
! 214: sleeping for a specified minimum duration, allowing use at the syscall
! 215: layer and elsewhere within the kernel where this minimum duration is
! 216: required.
! 217: <li>Added the MAXTSLP macro, the maximum sleep duration, to <a
! 218: href="https://man.openbsd.org/tsleep_nsec">tsleep_nsec(9)</a>.
! 219: <li>Unlocked the <a href="https://man.openbsd.org/flock">flock(2)</a>
! 220: system call.
! 221: <li>Reworked AMD smt/core/package detection, helping prevent cores
! 222: being misidentified as threads.
! 223: <li>Unlocked the <a href="https://man.openbsd.org/fcntl">fnctl(2)</a> system call.
! 224: <li>Unlocked the <a
! 225: href="https://man.openbsd.org/ioctl">ioctl(2)</a> system call.
! 226: <li>Pushed the KERNEL_LOCK() inside pgsigio() and selwakeup(),
! 227: allowing separate addressing of the three subsystems: signal,
! 228: poll/select and kqueue.
! 229: <li>Unlocked the <a href="https://man.openbsd.org/close">close(2)</a>
! 230: and <a href="https://man.openbsd.org/dup">dup(2)</a> system calls.
! 231: <li>Made <a
! 232: href="https://man.openbsd.org/__thrsleep">__thrsleep(2)</a> and <a
! 233: href="https://man.openbsd.org/__thrwakeup">__thrwakeup(2)</a> MP-safe.
! 234: <li>Unlocked <a href="https://man.openbsd.org/kqueue">kqueue(2)</a>.
! 235: <li>Unlocked <a href="https://man.openbsd.org/pipe">pipe(2)</a>
! 236: and <a href="https://man.openbsd.org/pipe2">pipe2(2)</a>.
! 237: <li>Avoided false positives in <a
! 238: href="https://man.openbsd.org/witness">witness(4)</a> when detecting
! 239: lock order reversals by using separate rwlock initializations for
! 240: userland and kernel maps.
! 241: <li>Reintroduced socket locking inside socket event filters.
! 242: <li>Allowed sleeping inside kqueue event filters.
! 243: <li>Made <a href="https://man.openbsd.org/vmx">vmx(4)</a> transmit mp-safe.
! 244: </ul>
! 245:
! 246: <li>Improved hardware support, including:
! 247: <ul>
! 248: <li>Improvements in the <a href="https://man.openbsd.org/em">em(4)</a> driver.
! 249: <li>Added <a href="https://man.openbsd.org/dsxrtc">dsxrtc(4)</a>,
! 250: a driver for the Maxim DS3231/DS3232 I2C RTC.
! 251: <li>Enabled use of <a href="https://man.openbsd.org/em">em(4)</a> with MSI-X.
! 252: <li>Added <a href="https://man.openbsd.org/ure">ure(4)</a> support
! 253: for Lenovo OneLine Plus Dock Ethernet.
! 254: <li>Improved <a href="https://man.openbsd.org/ucom">ucom(4)</a> to
! 255: fix firmware upload on some microcontroller boards using DTR and RTS
! 256: as signaling lines to reset the device and enter the bootloader.
! 257: <li>Added a PCI attachment driver for <a
! 258: href="https://man.openbsd.org/com">com(4)</a> to support memory-mapped
! 259: PCI devices which are part of a Low Power Subsystem (LPSS).
! 260: <li>Implemented microsecond resolution using <a
! 261: href="https://man.openbsd.org/microuptime">microuptime(9)</a> to avoid
! 262: a hard hang when starting X on Intel Cherry Trail Atom processors.
! 263: <li>Added support for X553 controllers to <a
! 264: href="https://man.openbsd.org/ix">ix(4)</a>.
! 265: <li>Added <a href="https://man.openbsd.org/usb">usb(4)</a> device
! 266: support for an AMD hub on the APU2 and a Synaptics vendor id and two
! 267: fingerprint readers.
! 268: <li>Prevented buffer overflows with <a
! 269: href="https://man.openbsd.org/uthum">uthum(4)</a> by not assuming the
! 270: report length given by the hardware is necessarily smaller than the
! 271: length of the on-stack buffer.
! 272: <li>Added <a href="https://man.openbsd.org/rge">rge(4)</a>, a driver
! 273: for the Realtek 8125 PCI Express 2.5Gb Ethernet devices.
! 274: <li>Fixed cursor issues and suspend/resume on <a
! 275: href="https://man.openbsd.org/amdgpu">amdgpu(4)</a> due to incomplete
! 276: unmapping. This may help <a
! 277: href="https://man.openbsd.org/radeondrm">radeondrm(4)</a> issues as
! 278: well.
! 279: <li>Enabled mmhub power gating on picasso within <a
! 280: href="https://man.openbsd.org/amdgpu">amdgpu(4)</a>.
! 281: <li>Fixed support for additional I2C busses in <a
! 282: href="https://man.openbsd.org/piixpm">piixpm(4)</a> for older SB800
! 283: SMBus controllers. Prevented sensors from attaching four times on old
! 284: AMD machines.
! 285: <li>Invalidated the <a
! 286: href="https://man.openbsd.org/knote">knote(9)</a> list of <a
! 287: href="https://man.openbsd.org/uhid">uhid(4)</a> after device detach,
! 288: preventing a crash that can happen when kqueue still holds references
! 289: to knotes pointing to the device.
! 290: <li>Prevented a use-after-free causing crashes with <a
! 291: href="https://man.openbsd.org/uhidev">uhidev(4)</a> devices.
! 292:
! 293: <li>Prevented <a href="https://man.openbsd.org/mcx">mcx(4)</a>
! 294: interface lockups due to completion queue overflow.
! 295: <li>Fixed brightness keys on the x395 and other thinkpads with AMD graphics.
! 296: <li>Fixed brightness controls on certain machines where the
! 297: initial brightness values are returned out of range.
! 298: <li>Made <a
! 299: href="https://man.openbsd.org/acpivout">acpivout(4)</a> stop calling
! 300: ACPI methods directly to allow changing brightness other ways on
! 301: certain machines, including the x395.
! 302: <li>Set the default brightness level on attachment for <a
! 303: href="https://man.openbsd.org/pwmbl">pwmbl(4)</a>.
! 304: <li>Fixed <a
! 305: href="https://man.openbsd.org/acpivout">acpivout(4)</a> screen
! 306: brightness adjustment through function keys, better supporting
! 307: machines using exponential brightness scaling.
! 308: <li>Changed <a
! 309: href="https://man.openbsd.org/acpivout">acpivout(4)</a> to increment
! 310: and decrement screen brightness based only on brightness level changes
! 311: of 5% or higher.
! 312: <li>Added <a href="https://man.openbsd.org/amlsm">amlsm(4)</a>, a
! 313: driver for the "secure monitor" firmware interface.
! 314: <li>Fixed Etron EJ168 USB 3.0 Host Controllers via USB 2 devices.
! 315: <li>Added support for the SIERRA MC7700 to <a
! 316: href="https://man.openbsd.org/umsm">umsm(4)</a> UMTS and LTE modem device.
! 317: <li>Fixed RAID volume WWIDs for <a
! 318: href="https://man.openbsd.org/mpii">mpii(4)</a> LSI controllers on
! 319: sparc64, allowing <a
! 320: href="https://man.openbsd.org/autoconf">autoconf(9)</a> to identify
! 321: the volume as the root device and boot off hardware RAID.
! 322: <li>Populated logical disk port WWNs with their RAID volume's WWID
! 323: in <a href="https://man.openbsd.org/mpii">mpii(4)</a>.
! 324: <li>Added <a
! 325: href="https://man.openbsd.org/amdgpio">amdgpio(4)</a>, a driver for
! 326: the GPIO controller found on newer AMD SoC/chipsets.
! 327: <li>Added <a href="https://man.openbsd.org/fido">fido(4)</a>, an
! 328: HID driver for FIDO/U2F security keys.
! 329: <li>Added parsing of DDR4 and LPDDDR3/4 SPD memories to <a
! 330: href="https://man.openbsd.org/spdmem">spdmem(4)</a>.
! 331: <li>Added support to <a
! 332: href="https://man.openbsd.org/lm">lm(4)</a> for NCT6775F, NCT5104D,
! 333: NCT6779D and NCT679[1235]D sensors.
! 334: <li>Added AMD FCH (KERNCZ) to the list of supported devices in <a
! 335: href="https://man.openbsd.org/piixpm">piixpm(4)</a>.
! 336: <li>Updated <a href="https://man.openbsd.org/piixpm">piixpm(4)</a>
! 337: to support newer AMD chips like Hudson-2 and KERNCZ and implemented
! 338: multi-bus support for SB800, Hudson-2 and KERNCZ.
! 339: <li>Extended the expected SPD types to include DDR4 and low-power DDR3/DDR4.
! 340: <li>Enabled full use of jumbo frames on <a
! 341: href="https://man.openbsd.org/bnx">bnx(4)</a> devices.
! 342: <li>Fixed <a href="https://man.openbsd.org/scsi">scsi(8)</a>
! 343: softraid crypto volumes on 4K-sector disks.
! 344: <li>Faked disk info to match expected boot disk when EFI
! 345: bootloader has been received via TFTP, fixing a hang during HP
! 346: Elitebook UEFI boot.
! 347: <li>Improved <a href="https://man.openbsd.org/ksmn">ksmn(4)</a>
! 348: temperature conversion precision.
! 349: <li>Added a quirk to handle Apollo Lake, Gemini Lake and 100
! 350: Series Intel SD/MMC <a href="https://man.openbsd.org/sdhc">sdhc(4)</a>
! 351: controllers which should not have voltages set to 0V.
! 352: <li>Prevented a local user from causing the system to hang by
! 353: reading specific registers when Intel Gen8/Gen9 graphics hardware is
! 354: in a low power state.
! 355: <li>Prevented writes to memory allowed by the Intel Gen9 graphics hardware.
! 356: <li>Added support for buttons 2 and 3 to <a
! 357: href="https://man.openbsd.org/imt">imt(4)</a>.
! 358: <li>Added <a href="https://man.openbsd.org/ogx">ogx(4)</a>, a
! 359: driver for the OCTEON III network processor.
! 360: <li>Fixed endian swapping in <a
! 361: href="https://man.openbsd.org/xhci">xhci(4)</a>, allowing it to work
! 362: again on octeon and other big endian architectures.
! 363: <li>Added <a href="https://man.openbsd.org/sxisid">sxisid(4)</a>,
! 364: a driver to read the on-chip eFuses.
! 365: <li>On newer ThinkPads reporting HKEY version > 1, allowed <a
! 366: href="https://man.openbsd.org/acpivout">acpivout(4)</a> to claim
! 367: backlight controls rather than <a
! 368: href="https://man.openbsd.org/wscons">wscons(4)</a>, allowing use of
! 369: the fine-grained backlight BCL steps defined in <a
! 370: href="https://man.openbsd.org/acpi">acpi(4)</a>.
! 371: <li>Implemented the "parallel boot" feature on compatible sparc64 firmware.
! 372: </ul>
! 373:
! 374: <li>Removed hardware support
! 375: <ul>
! 376: <li>Removed sitaracm(4).
! 377: <li>Removed the rtfps(4) driver.
! 378: <li>Removed the sli(4) driver.
! 379: <li>Removed the dpt(4) driver for DPT EATA SCSI RAID.
! 380: <li>Removed gpr(4).
! 381: </ul>
! 382:
! 383: <li>Improvements in audio drivers and the
! 384: <a href="https://man.openbsd.org/sndio">sndio(7)</a> framework:
! 385: <ul>
! 386: <li>Introduced the <a
! 387: href="https://man.openbsd.org/sndioctl">sndioctl(1)</a> utility to
! 388: control audio parameters exposed by <a
! 389: href="https://man.openbsd.org/sndiod">sndiod(8)</a>.
! 390: <li>Increased the default number of audio devices to 4.
! 391: <li>Disabled access for regular users to /dev/audio* and
! 392: /dev/rmidi*, creating these devices owned by root:_sndiod.
! 393: <li>Added the <a href="https://man.openbsd.org/sndioctl">
! 394: sndioctl(1)</a> -n option to suppress variable names in output and the
! 395: -q option to suppress output when setting variables, as in <a
! 396: href="https://man.openbsd.org/mixerctl">mixerctl(1)</a>.
! 397: <li>Modified <a
! 398: href="https://man.openbsd.org/mixerctl">mixerctl(1)</a> to use
! 399: /dev/audioctlN instead of /dev/mixerN.
! 400: <li>Made libossaudio use <a
! 401: href="https://man.openbsd.org/sndio">sndio(7)</a> instead of the
! 402: kernel <a href="https://man.openbsd.org/mixer">mixer(4)</a> interface.
! 403: <li>Exposed the first 8 <a
! 404: href="https://man.openbsd.org/midi">midi(4)</a> devices to <a
! 405: href="https://man.openbsd.org/sndiod">sndiod(8)</a> clients if no -q
! 406: options are used.
! 407: <li>Corrected inappropriate rate selection in <a
! 408: href="https://man.openbsd.org/uaudio">uaudio(4)</a> preventing
! 409: recording on devices supporting fewer rates for recording than
! 410: playback.
! 411: <li>Introduced the <a
! 412: href="https://man.openbsd.org/sndioctl">sndioctl(1)</a> utility to
! 413: control audio parameters exposed by <a
! 414: href="https://man.openbsd.org/sndiod">sndiod(8)</a>.
! 415: <li>Fixed channel duplication (-j option) in <a
! 416: href="https://man.openbsd.org/sndiod">sndiod(8)</a>.
! 417: <li>Prevented an overflow due to <a
! 418: href="https://man.openbsd.org/xen">xen(4)</a> failing to release the
! 419: interrupt source when unmasking the interrupt.
! 420: <li>Implemented a hexdump command in the bootloader, helping to
! 421: inspect the memory layout created by the firmware and useful for UEFI
! 422: debugging.
! 423: <li>Allowed <a href="https://man.openbsd.org/rc.d">rc.d(8)</a>
! 424: script to reload <a
! 425: href="https://man.openbsd.org/sndiod">sndiod(8)</a>.
! 426: <li>Added an <a
! 427: href="https://man.openbsd.org/azalia">azalia(4)</a> quirk for the
! 428: ALC285 on the X1C7 to avoid a clicking noise on the headphone output.
! 429: <li>Disabled MSI for the AMD Hudson2 <a
! 430: href="https://man.openbsd.org/azalia">azalia(4)</a> HDA to fix random lock ups.
! 431: </ul>
! 432:
! 433: <li>Improved <a href="https://www.openbsd.org/arm64.html">arm64</a>
! 434: and <a href="https://www.openbsd.org/armv7.html">armv7</a> hardware
! 435: support, including:
! 436: <ul>
! 437: <li>Better hardware support for the i.MX8MM platform.
! 438: <li>Better support for Raspbery Pi 3 and 4
! 439: <li>Added <a href="https://man.openbsd.org/bcmbsc">bcmbsc(4)</a>, a driver for the Broadcom Serial Control (BSC) controller.
! 440: <li>Added <a href="https://man.openbsd.org/bcmgpio">bcmgpio(4)</a>, a driver for the Broadcom BCM283x GPIO controller.
! 441: <li>Added <a href="https://man.openbsd.org/bcmsdhost">bcmsdhost(4)</a>, a driver for the Broadcom "sdhost" SD controller found on the Raspberry Pi.
! 442: <li>Added <a href="https://man.openbsd.org/bcmdmac">bcmdmac(4)</a>, a driver for the DMA controller found on BCM283x SoCs.
! 443: <li>Added support for the additional <a href="https://man.openbsd.org/sdhc">sdhc(4)</a> controller found on the Raspberry Pi.
! 444: <li>Added quirks for the <a href="https://man.openbsd.org/sdhc">sdhc(4)</a> controller on the Raspberry Pi, providing microSD card or WiFi support depending on the firmware configuration.
! 445: <li>Added support for hardware with <a href="https://man.openbsd.org/sdhc">sdhc(4)</a> controllers on busses only supporting 32-bit access.
! 446: <li>Added <a href="https://man.openbsd.org/bcmirng">bcmirng(4)</a>, a driver for the RNG200 random number generator found on the Raspberry Pi 4.
! 447: <li>Added <a href="https://man.openbsd.org/bcmclock">bcmclock(4)</a>, a driver for the BCM283X CPRMAN clock controller.
! 448: <li>Added <a href="https://man.openbsd.org/bcmmbox">bcmmbox(4)</a>, a driver for the VideoCore messagebox interface on BCM283X.
! 449: <li>Added <a href="https://man.openbsd.org/bcmpcie">bcmpcie(4)</a>, a driver for the PCIe controller found on the Raspberry Pi 4.
! 450: <li>Added support for the Armada 3720 CPU clock to <a href="https://man.openbsd.org/mvclock">mvclock(4)</a>.
! 451: <li>Added <a href="https://man.openbsd.org/bse">bse(4)</a>, a driver for the Broadcom GENET v5 network interface found on the Raspberry Pi 4.
! 452: <li>Added <a href="https://man.openbsd.org/brgphy">brgphy(4)</a> support for the Broadcom BCM54210E.
! 453: <li>Fixed <a href="https://man.openbsd.org/mvneta">mvneta(4)</a> on arm64.
! 454: <li>Added <a href="https://man.openbsd.org/omcm">omcm(4)</a>, <a href="https://man.openbsd.org/omclock">omclock(4)</a> and <a href="https://man.openbsd.org/omsysc">omsysc(4)</a> drivers that support the new bus structure used in current mainline Linux device trees.
! 455: <li>Added support for RK3328 Crypto/RNG clocks.
! 456: <li>Added glass console support to <a href="https://man.openbsd.org/rkdrm">rkdrm(4)</a> in Rockchip SoCs.
! 457: <li>Fixed the MAC address on Pandaboard-ES by increasing <a href="https://man.openbsd.org/smsc">smsc(4)</a> buffer size used to fetch device tree properties.
! 458: <li>Added <a href="https://man.openbsd.org/omrng">omrng(4)</a>, a driver for the random number generator found on TI OMAP SoCs.
! 459: <li>Restored enabling and setting the output tap delay in <a href="https://man.openbsd.org/rkemmcphy">rkemmcphy(4)</a>, fixing the eMMC module on the rockpro64.
! 460: <li>Added <a href="https://man.openbsd.org/rkrng">rkrng(4)</a>, a driver for the random number generator found on various Rockchip SoCs.
! 461: <li>Added support for additional Allwinner A80 clocks and resets in <a href="https://man.openbsd.org/sxiccmu">sxiccmu(4)</a>.
! 462: <li>Added <a href="https://man.openbsd.org/imxpwm">imxpwm(4)</a>, a driver for the PWM controller found on various NXP i.MX SoCs.
! 463: <li>Fixed CPU frequency scaling support on the Librem5 Devkit.
! 464: <li>Fixed <a href="https://man.openbsd.org/amlpciephy">amlpciephy(4)</a> USB3 support when USB has not been initialized by U-Boot.
! 465: <li>Enabled backlight control use on the Pinebook Pro via <a href="https://man.openbsd.org/wsconsctl">wsconsctl(8)</a>.
! 466: <li>Fixed a crash when no device ports have been registered in ofw.
! 467: <li>Added clock support for i.MX8MM.
! 468: <li>Added <a href="https://man.openbsd.org/bdpmic">bdpmic(4)</a>, a driver for the ROHM BD71837 and BD71847 Power Management IC.
! 469: <li>Added support for reading the i.MX8MM temperature sensors to <a href="https://man.openbsd.org/imxtmu">imxtmu(4)</a>.
! 470: <li>Switched USB to use non-coherent buffers for data transfers, dramatically improving performance on some ARM SoCs where the USB controller is not coherent with the caches.
! 471: <li>Added panel support to <a href="https://man.openbsd.org/rkanxdp">rkanxdp(4)</a>.
! 472: <li>Resolved syscall speculation in armv7 cpus as in arm64, changing the system call ABI to skip two instructions and inserting speculation-blocking sequences.
! 473: <li>Added /dev/drm[0-3] on arm64.
! 474: <li>Fixed "ipmi0: sendcmd fails" errors when there is an <a href="https://man.openbsd.org/ipmi">ipmi(4)</a> sensor which is enumerated but has failed to be read.
! 475: <li>Allowed <a href="https://man.openbsd.org/ipmi">ipmi(4)</a> to attach using mmio.
! 476: <li>Enabled the Rockchip video drivers.
! 477: <li>Implemented the page fault handler for CMA GEM buffers and made <a href="https://man.openbsd.org/drm">drm(4)</a> attach to <a href="https://man.openbsd.org/rkdrm">rkdrm(4)</a>, making KMS work on the RK3399 SoC.
! 478: <li>Added <a href="https://man.openbsd.org/rkdwhdmi">rkdwhdmi(4)</a>, a driver for the HDMI transmitter found on the Rockchip RK3399 SoC.
! 479: <li>Introduced VPLL clock frequency setting to <a href="https://man.openbsd.org/rkclock">rkclock(4)</a>.
! 480: <li>Implemented support for read transfers larger than 32 bytes for <a href="https://man.openbsd.org/rkiic">rkiic(4)</a> controllers and registered the i2c bus, allowing future HDMI support.
! 481: <li>Added <a href="https://man.openbsd.org/rkanxdp">rkanxdp(4)</a>, an attachment driver for <a href="https://man.openbsd.org/anxdp">anxdp(4)</a> on the RK3399.
! 482: <li>Added <a href="https://man.openbsd.org/anxdp">anxdp(4)</a>, a driver for the Analogix Display Port controller.
! 483: <li>Added <a href="https://man.openbsd.org/rkvop">rkvop(4)</a>, a driver for the RK3399's Video Output Processors.
! 484: <li>Added <a href="https://man.openbsd.org/rkdrm">rkdrm(4)</a>, a driver providing kernel mode setting (KMS) functionality for the graphics hardware integrated on Rockchip SoCs.
! 485: <li>Fixed the Pinebook Pro's trackpad by ensuring only hid_input items are accepted when walking the HID descriptor.
! 486: <li>Added support for the RK3399's VOP clocks to <a href="https://man.openbsd.org/rkclock">rkclock(4)</a>.
! 487: <li>Fixed <a href="https://man.openbsd.org/pwmbl">pwmbl(4)</a> attachment on the Pinebook Pro.
! 488: <li>Added <a href="https://man.openbsd.org/simplepanel">simplepanel(4)</a>, a driver for simple display panels. This allows enabling of the Pinebook Pro display panel.
! 489: <li>Enabled <a href="https://man.openbsd.org/umt">umt(4)</a> on arm64.
! 490: <li>Recognized BCM4345 rev 9 as shipped with the Pinebook Pro as an AMPAK AP6256 module in <a href="https://man.openbsd.org/bwfm">bwfm(4)</a>.
! 491: <li>Improved <a href="https://man.openbsd.org/bwfm">bwfm(4)</a> on the Pinebook Pro by acking SDIO interrupts earlier on <a href="https://man.openbsd.org/dwmmc">dwmmc(4)</a>.
! 492: <li>Added <a href="https://man.openbsd.org/amltemp">amltemp(4)</a>, a driver for the temperature sensors on various Amlogic SoCs.
! 493: <li>Added the capability for armv7 boot from another block device than the one from which efiboot was loaded.
! 494: <li>Added thermal sensor clocks to <a href="https://man.openbsd.org/amlclock">amlclock(4)</a>.
! 495: <li>Added arm64 support for lldb.
! 496: <li>Added support for gen2 negotiation to <a href="https://man.openbsd.org/rkpcie">rkpcie(4)</a> and enabled gen2 link state training when the dtb is configured with max-link-speed = 2.
! 497: <li>Added <a href="https://man.openbsd.org/pwmfan">pwmfan(4)</a>, a driver for PWM-regulated fans.
! 498: <li>Added <a href="https://man.openbsd.org/rkpwm">rkpwm(4)</a>, a driver for the RK3399's PWM controller.
! 499: <li>Added support for the RK3399's PWM clock to <a href="https://man.openbsd.org/rkclock">rkclock(4)</a>.
! 500: <li>Added <a href="https://man.openbsd.org/rkemmcphy">rkemmcphy(4)</a>, a driver for the RK3399's eMMC PHY.
! 501: <li>Added support for the RK3399's eMMC clock to <a href="https://man.openbsd.org/rkclock">rkclock(4)</a>.
! 502: <li>Allowed switching to framebuffer "glass" console on armv7, mirroring previous changes to arm64.
! 503: <li>Added <a href="https://man.openbsd.org/sxipwm">sxipwm(4)</a> and <a href="https://man.openbsd.org/pwmbl">pwmbl(4)</a>, drivers which jointly add support for the backlight controller on the Pinebook.
! 504: <li>Corrected cache flush operations on arm64 which were being incorrectly treated as write operations. This fixes a bug where cache flushing caused Firefox to abort.
! 505: </ul>
! 506:
! 507: <li>IEEE 802.11 wireless stack improvements and bugfixes:
! 508: <ul>
! 509: <li>Fixed a problem in <a href="https://man.openbsd.org/iwn">iwn(4)</a>
! 510: where the link gets stuck since every CCMP encrypted frame is
! 511: discarded by the AP as a replay.
! 512: <li>Fixed an automatic Tx rate control issue in <a
! 513: href="https://man.openbsd.org/iwn">iwn(4)</a>.
! 514: <li>Fixed a bug where outstanding frames on the <a
! 515: href="https://man.openbsd.org/iwn">iwn(4)</a> aggregation queue
! 516: interfere with roaming to another AP.
! 517: <li>Implemented a workaround for missing Tx completion interrupts
! 518: in <a href="https://man.openbsd.org/iwm">iwm(4)</a> which could lead
! 519: to failed decisions to roam to other APs.
! 520: <li>Added support for the <a
! 521: href="https://man.openbsd.org/urtwn">urtwn(4)</a> tp-link tl-wn823n
! 522: (TRL8192EU).
! 523:
! 524: <li>Reenabled firmware-based Tx retries at lower rates for <a
! 525: href="https://man.openbsd.org/iwm">iwm(4)</a>, reducing packet loss.
! 526: <li>Enabled DQA mode for <a href="https://man.openbsd.org/iwm">iwm(4)</a>.
! 527: <li>Added support for <a
! 528: href="https://man.openbsd.org/iwm">iwm(4)</a> firmware paging,
! 529: required for newer 8k device firmware.
! 530: <li>Added support for MSI-X for <a
! 531: href="https://man.openbsd.org/iwm">iwm(4)</a> devices.
! 532: <li>Computed RSSI on 9k <a
! 533: href="https://man.openbsd.org/iwm">iwm(4)</a> devices as for previous
! 534: generations, fixing spurious signal strength values of over 100%.
! 535: <li>Added <a href="https://man.openbsd.org/iwm">iwm(4)</a> support
! 536: for 9260 and 9560 devices.
! 537: <li>Fixed <a href="https://man.openbsd.org/iwm">iwm(4)</a> support
! 538: and loaded new firmware for 3168 devices.<
! 539: <li>Fixed an automatic Tx rate control issue in <a
! 540: href="https://man.openbsd.org/iwm">iwm(4)</a> and <a
! 541: href="https://man.openbsd.org/iwx">iwx(4)</a>.
! 542: <li>Fixed MIMO rates with firmware-based rate scaling in <a
! 543: href="https://man.openbsd.org/iwm">iwm(4)</a>.
! 544: <li>Added support for dynamic queue allocation (DQA) to <a
! 545: href="https://man.openbsd.org/iwm">iwm(4)</a>.
! 546: <li>Introduced <a href="https://man.openbsd.org/iwx">iwx(4)</a>, a
! 547: driver for Intel AX200 WiFi devices.
! 548: <li>Worked around a race condition in <a
! 549: href="https://man.openbsd.org/iwm">iwm(4)</a> interrupt handling, and
! 550: synced the fix to <a href="https://man.openbsd.org/iwx">iwx(4)</a>.
! 551:
! 552:
! 553:
! 554: <li>Added support for active scan to <a
! 555: href="https://man.openbsd.org/bwfm">bwfm(4)</a>.
! 556: <li>Increased throughput of the ifq pressure drop mechanism for <a
! 557: href="https://man.openbsd.org/bwfm">bwfm(4)</a>.
! 558: <li>Improved error handling for <a
! 559: href="https://man.openbsd.org/bwfm">bwfm(4)</a> connection attempts.
! 560:
! 561: <li>Fixed the <a
! 562: href="https://man.openbsd.org/ifconfig">ifconfig(8)</a> "media:" line
! 563: for 11n wifi interfaces during and after a background scan.
! 564: <li>Fixed an mbuf corruption issue in net80211 hostap mode when overlarge SSIDs are used.
! 565: <li>Stopped switching to new APs found during background scans
! 566: with RSSI levels which will also trigger background scans, helping to
! 567: prevent repeated switching in areas where APs are tuned for low
! 568: transmit range.
! 569: <li>Increased the net80211 node cache size.
! 570: <li>Reduced stalling with lossy wifi by improving net80211
! 571: handling of the Rx block ack sequence number window and queue.
! 572: <li>Prevented a crash in ieee80211_node2req() which could be
! 573: triggered by an <a href="https://man.openbsd.org/ioctl">ioctl(2)</a>
! 574: if the driver had not yet initialized the channel map.
! 575: <li>Stopped connecting to available open wifi networks when an
! 576: interface is marked up. This behavior must now be explicitly enabled
! 577: with <code><a href="https://man.openbsd.org/ifconfig">ifconfig(8)</a> join
! 578: ""</code>.
! 579: <li>Fixed MiRA's sub-frame error rate computation.
! 580: <li>Lowered the priority of APs which fail to connect in the <a
! 581: href="https://man.openbsd.org/ifconfig">ifconfig(8)</a> join list,
! 582: allowing switching wifi networks by moving between them without having
! 583: to down/up the interface or suspend/resume.
! 584: <li>Triggered a background scan when root runs the <a
! 585: href="https://man.openbsd.org/ifconfig">ifconfig(8)</a> scan command,
! 586: updating the list of cached APs for future scans and forcing a search
! 587: for a better AP to roam to.
! 588: <li>Raised net80211's "beacon miss" threshold to avoid frequent
! 589: reconnects to APs suffering packet loss due to distance.
! 590: <li>Made background scans less frequent when choosing the same AP.
! 591: </ul>
! 592:
! 593: <li>Generic network stack improvements and bugfixes:
! 594: <ul>
! 595:
! 596: <li>Fixed a panic when using <a href="https://man.openbsd.org/pppac">
! 597: pppac(4)</a> without <a href="https://man.openbsd.org/pipex">pipex(4)</a>.
! 598: <li>Fixed a "route contains no arp information" bug where a kernel routing
! 599: table entry was incorrectly deleted upon insertion of a new entry.
! 600: <li>Stopped processing packets under non-exclusive netlock, preventing
! 601: concurrency in the socket layer.
! 602: <li>Prevented data corruption on UDP receive socket buffers by grabbing the
! 603: exclusive NET_LOCK() in the softnet thread.
! 604: <li>Fixed a kernel crash due to unlimited recursion caused by
! 605: local outbound UDP broadcast/multicast packets sent by a spliced
! 606: socket.
! 607: <li>Added IPv6 support to <a href="https://man.openbsd.org/umb">umb(4)</a>.
! 608: <li>Added support for very old firmware umsm devices with <a
! 609: href="https://man.openbsd.org/umsm">umsm(4)</a> rather than <a
! 610: href="https://man.openbsd.org/umb">umb(4)</a>.
! 611: <li>Added <a href="https://man.openbsd.org/pppac">pppac(4)</a>
! 612: code for a dedicated PPP Access Concentrator interface and switched <a
! 613: href="https://man.openbsd.org/npppd.conf">npppd.conf(5)</a> to use <a
! 614: href="https://man.openbsd.org/pppac">pppac(4)</a> instead of <a
! 615: href="https://man.openbsd.org/tun">tun(4)</a>.
! 616: <li>Added a check when IP forwarding is disabled to ensure packet
! 617: destination address matches interface address.
! 618: <li>Fixed kernel crash in pf_ioctl with WITH_PF_LOCK and NET_TASKQ > 1.
! 619: <li>Ensured proper kernel stack alignment on mips64, fixing a
! 620: panic on octeon related to <a
! 621: href="https://man.openbsd.org/pppoe">pppoe(4)</a>.
! 622: <li>Added <a href="https://man.openbsd.org/rge">rge(4)</a>, a new
! 623: driver for Realtek 8125 PCI Express 2.5Gb ethernet devices.
! 624: <li>Repaired the "set delay" option for <a
! 625: href="https://man.openbsd.org/pf">pf(4)</a> to function as specified
! 626: in <a href="https://man.openbsd.org/pf.conf">pf.conf(5)</a>.
! 627: <li>Prevented non-root users from using <a
! 628: href="https://man.openbsd.org/ioctl">ioctl(2)</a> to alter the address
! 629: of a network interface.
! 630: <li>Prevented non-root users from setting the parameters of <a
! 631: href="https://man.openbsd.org/pppoe">pppoe(4)</a> interfaces.
! 632: <li>Removed mobileip(4).
! 633: <li>Stopped checking whether the IPv6 source address of a neighbor
! 634: advertisement is from a neighbor's address, not required in accordance
! 635: with RFC 4861.
! 636:
! 637: </ul>
! 638:
! 639: <li>Installer improvements:
! 640: <ul>
! 641: <li>Simplified <a
! 642: href="https://man.openbsd.org/sysupgrade">sysupgrade(8)</a> directory
! 643: check and creation (/home/_syspatch). It can now be a symlink.
! 644: <li>Printed the URL when <a
! 645: href="https://man.openbsd.org/sysupgrade">sysupgrade(8)</a> fetches
! 646: new sets.
! 647: <li>Added an opportunistic run of <a
! 648: href="https://man.openbsd.org/fw_update">fw_update(1)</a> to <a
! 649: href="https://man.openbsd.org/sysupgrade">sysupgrade(8)</a> before
! 650: rebooting to run the upgrade.
! 651: </ul>
! 652:
! 653: <li>Security improvements:
! 654: <ul>
! 655: <li><a href="https://man.openbsd.org/unveil.2">unveil(2)</a> is
! 656: now used in XXX userland programs to redact filesystem access.
! 657: <li>Used <a href="https://man.openbsd.org/unveil">unveil(2)</a> to
! 658: reduce filesystem access in <a
! 659: href="https://man.openbsd.org/vmstat">vmstat(8)</a>, <a
! 660: href="https://man.openbsd.org/iostat">iostat(8)</a> and <a
! 661: href="https://man.openbsd.org/systat">systat(1)</a>.
! 662: <li><span style="color: red;">mention unveil in ports? Maybe under "Ports and packages" below?</span>
! 663:
! 664: <!-- dig -->
! 665: <li>Extracted <a href="https://man.openbsd.org/dig">dig(1)</a>, <a
! 666: href="https://man.openbsd.org/host">host(1)</a> and <a
! 667: href="https://man.openbsd.org/nslookup">nslookup(1)</a> from the
! 668: bind(8) source code, cleanup the source code by removing not needed
! 669: features and auditing it. The kernel API accessible to these
! 670: programs is now restricted through <a
! 671: href="https://man.openbsd.org/pledge">pledge(2)</a>.
! 672:
! 673: <!-- syscall call-from -->
! 674: <li><span style="color: red;">"syscall call-from" checking</span>
! 675: <li>Introduced <a
! 676: href="https://man.openbsd.org/msyscall">msyscall(2)</a>, permitting
! 677: system calls from selected code regions only: the main program, <a
! 678: href="https://man.openbsd.org/ld.so">ld.so(1)</a>, libc.so and
! 679: sigtramp. This is intended to harden against a mixture of W^X failures
! 680: and JIT bugs allowing syscall misinterpretation.
! 681:
! 682: <li>Prevented stack trace saving from inspecting untrusted data on
! 683: amd64, arm64 and i386.
! 684: <li>Used lfence in place of stac/clac on pre-SMAP CPUs to protect
! 685: against Load-Value-Injection attacks against the kernel.
! 686: <li>Prevented a panic due to missing <a
! 687: href="https://man.openbsd.org/sysctl">sysctl(2)</a> input validation.
! 688: <li>Injected failure to fetch entropy with an rdrand() timeout as
! 689: an entropic event, along with an additional rdtsc measuring the vmexit
! 690: latency.
! 691: <li>Enforced that <a href="https://man.openbsd.org/ksh">ksh(1)</a>
! 692: TMOUT is an integer literal to prevent command execution from the
! 693: environment at shell initialization time.
! 694: <li>Ensured the first 2MB page of the amd64 kernel is correctly
! 695: mapped read-only in the direct map.
! 696: <li>Addressed an arm64 speculative execution issue by changing the
! 697: arm64 system call ABI to skip two instructions and inserting a barrier
! 698: after each system call.
! 699: <li>Fixed arm64 speculative execution of instructions after ERET,
! 700: which had led to spectre-like effects on some processors.
! 701: <li>Tightened permissions for USB device nodes.
! 702: <li>Ensured that <a
! 703: href="https://man.openbsd.org/ld.so">ld.so(1)</a> removed the
! 704: LD_LIBRARY_PATH environment variable for set-user-ID and set-group-ID
! 705: executables in low memory conditions.
! 706: <li>Added support for RSA-PSS to <a
! 707: href="https://man.openbsd.org/crypto">crypto(3)</a>.
! 708: <li>Added retguard for octeon/mips64.
! 709:
! 710: <li>The following security bugs were addressed:
! 711: <ul>
! 712: <li>Reset the login class each time through the loop when using -L
! 713: (loop) mode with <a href="https://man.openbsd.org/su">su(1)</a>. Fixes
! 714: CVE-2019-19519.
! 715: <li>Fixed insufficient username validation performed by libc's
! 716: authentication privilege separation layer and added additional
! 717: validation points, further validating in <a
! 718: href="https://man.openbsd.org/login">login(1)</a> and <a
! 719: href="https://man.openbsd.org/su">su(1)</a>.
! 720: <li>Prevented escalation to the auth group in <a
! 721: href="https://man.openbsd.org/xlock">xlock(1)</a> through path-related
! 722: environment variables and disabled mesa and opengl functionality.
! 723: </ul>
! 724: </ul>
! 725:
! 726: <li>Routing daemons and other userland network improvements:
! 727: <ul>
! 728: <!-- bgpd -->
! 729: <li>Store both IPv4 and IPv6 addresses with local-address in <a
! 730: href="https://man.openbsd.org/bgpd">bgpd(8)</a>, allowing
! 731: configuration of both an IPv4 and IPv6 local-address on a group with
! 732: correct binding of neighbors. Introduced 'no local-address' to reset a
! 733: previously-set local address back to zero. This helps to reduce
! 734: repetition in the configuration.
! 735: <li>Aggregated duplicate <a
! 736: href="https://man.openbsd.org/bgpd">bgpd(8)</a> roa table
! 737: prefix/source-as combos as a single entry with the longest maxlen
! 738: length.
! 739: <li>Extended <a href="https://man.openbsd.org/bgpctl">bgpctl(8)</a>
! 740: 'show neighbor' to include the received and set prefix count, as well
! 741: as the max-prefix out limit if set.
! 742: <li>Implemented <a
! 743: href="https://man.openbsd.org/bgpd.conf">bgpd.conf(5)</a>
! 744: <code>max-prefix NUM out</code> to limit the number of announced
! 745: prefixes, avoiding leaks of full tables to upstreams and peers.
! 746: <li>Began marking stale prefixes in the Adj-RIB-out during
! 747: graceful reload of <a href="https://man.openbsd.org/bgpd">bgpd(8)</a>
! 748: and fixed prefix_withdraw to check the correct prefix flags before
! 749: removing a prefix from the update or withdraw tree.
! 750: <li>Fixed a bug with the fatal <a
! 751: href="https://man.openbsd.org/bgpd">bgpd(8)</a> non-existing prefix
! 752: call to ensure the missing prefix is inserted into the prefix tree.
! 753: <li>Fixed <a href="https://man.openbsd.org/bgpd">bgpd(8)</a>
! 754: crashes where the nexthop_runners tail queue was corrupted.
! 755: <!-- OSPF -->
! 756: <li>Allowed configuration of the <a
! 757: href="https://man.openbsd.org/ospfd">ospfd(8)</a> interface setting
! 758: "type p2p" to be configured globally or per area.
! 759: <li>Added point-to-point <a
! 760: href="https://man.openbsd.org/ospf6d">ospf6d(8)</a> support for
! 761: broadcast interfaces.
! 762: <!-- iked -->
! 763: <li>Added <a href="https://man.openbsd.org/iked">iked(8)</a>
! 764: support for switching rdomain on <a
! 765: href="https://man.openbsd.org/ipsec">ipsec(4)</a>
! 766: encryption/decryption, configurable per policy with the new 'rdomain'
! 767: option in <a
! 768: href="https://man.openbsd.org/iked.conf">iked.conf(5)</a>.
! 769: <li>Added support for automatically moving traffic between
! 770: rdomains on <a href="https://man.openbsd.org/ipsec">ipsec(4)</a>
! 771: encryption or decryption, reducing the attack surface for network
! 772: sidechannel attacks.
! 773: <li>Modified <a href="https://man.openbsd.org/iked">iked(8)</a> to
! 774: always prefer generic signature authentication.
! 775: <li>Fixed an <a href="https://man.openbsd.org/iked">iked(8)</a>
! 776: pubkey leak in the CA process for ASN-DN IDs.
! 777: <li>Reduced temporary address valid lifetime to 2 days in <a
! 778: href="https://man.openbsd.org/slaacd">slaacd(8)</a>.
! 779: <li>Fixed user database corruption resulting from use of the <a
! 780: href="https://man.openbsd.org/ikectl">ikectl(8)</a> reload command.
! 781: <li>Added the <a
! 782: href="https://man.openbsd.org/ikectl">ikectl(8)</a> "show sa" command
! 783: to print information about the state of negotiated IKE SAs, their
! 784: Child SAs and the resulting IPsec flows.
! 785: <li>Added an <a
! 786: href="https://man.openbsd.org/ikectl">ikectl(8)</a> "reset id" command
! 787: to reset all SAs from policies with matching destination IDs.
! 788: <li>Corrected <a href="https://man.openbsd.org/iked">iked(8)</a>
! 789: calculation of IPv6 address leases from small address pools.
! 790: <li>Added a policy relookup to <a
! 791: href="https://man.openbsd.org/iked">iked(8)</a> to replace the default
! 792: policy based on a received cryptographic parameter proposal.
! 793: <li>Added transport mode for child SAs to <a
! 794: href="https://man.openbsd.org/iked.conf">iked.conf(5)</a>.
! 795: <li>Extended the <a
! 796: href="https://man.openbsd.org/ipsecctl">ipsecctl(8)</a> parser to set
! 797: the udpencap flag and port number of an SA.
! 798: <li>Added a -p command line option to <a
! 799: href="https://man.openbsd.org/iked">iked(8)</a> allowing configuration
! 800: of the UDP encapsulation port.
! 801: <li>Removed IPsec flow blocking unencrypted IPv6 traffic in <a
! 802: href="https://man.openbsd.org/iked">iked(8)</a>.
! 803: <li>Fixed <a href="https://man.openbsd.org/isakmpd">isakmpd(8)</a>
! 804: IKE pcap file creation.
! 805: <li>Enabled ESP UDP-encapsulation with the <a
! 806: href="https://man.openbsd.org/iked">iked(8)</a> -t flag.
! 807: <!-- other daemons -->
! 808: <li>Validated authentication lengths in <a
! 809: href="https://man.openbsd.org/ripd">ripd(8)</a> before use to prevent
! 810: crashes.
! 811: <li>Fixed empty response packages sent out by <a
! 812: href="https://man.openbsd.org/ripd">ripd(8)</a> when entries are
! 813: skipped due to split-horizon simple.
! 814: <li>Correctly parse "0/0" as the default route when specifying
! 815: the classless-[ms-]static-routes options in <a
! 816: href="https://man.openbsd.org/dhcpd.conf">dhcpd.conf(5)</a>.
! 817: <li>Allowed <a
! 818: href="https://man.openbsd.org/dhclient">dhclient(8)</a> configuration
! 819: of <a href="https://man.openbsd.org/carp">carp(4)</a> interfaces.
! 820: <li>Rejected leases in <a
! 821: href="https://man.openbsd.org/dhclient">dhclient(8)</a> not providing
! 822: a subnet mask for the address being provided.
! 823: <li>Constrained and corrected the routes being deleted when
! 824: applying a new lease in <a
! 825: href="https://man.openbsd.org/dhclient">dhclient(8)</a> and corrected
! 826: route comparison. This corrects a network failure with "arpresolve:
! 827: ... route contains no information".
! 828: <li>Made <a href="https://man.openbsd.org/slaacd">slaacd(8)</a>
! 829: honor the rdomain in which it runs when configuring the default route.
! 830: <li>Withdrew all proposals on <a
! 831: href="https://man.openbsd.org/slaacd">slaacd(8)</a> startup to prevent
! 832: indefinite retention of nameservers on interfaces no longer flagged
! 833: for autoconf.
! 834: <li>Modified <a href="https://man.openbsd.org/ldpd">ldpd(8)</a> to
! 835: lookup the adjacency by LSR id as well as source IP address, as the
! 836: remote peer may change its LSR id.
! 837:
! 838: <!-- other programs -->
! 839: <li>Added support for printing RFC 2332 NBMA Next Hop Resolution Protocol
! 840: (NHRP) to <a href="https://man.openbsd.org/tcpdump">tcpdump(8)</a>.
! 841: <li>Added <a href="https://man.openbsd.org/tcpdump">tcpdump(8)</a>
! 842: support for printing RFC 8300 Network Service Header (NSH).
! 843: <li>Added <a href="https://man.openbsd.org/tcpdump">tcpdump(8)</a>
! 844: support for VXLAN-GPE.
! 845: <li>Fixed a <a href="https://man.openbsd.org/tcpdump">tcpdump(8)</a>
! 846: crash when printing the contents of a malformed packet where the
! 847: packet length was smaller than the size of the usbpcap header.
! 848:
! 849: <li>Rewrote dhcpv6 parsing in <a
! 850: href="https://man.openbsd.org/tcpdump">tcpdump(8)</a> to match the
! 851: RFC, correctly handling dhcpv6 messages.
! 852: <li>Accept netmask for IPv6 in <a
! 853: href="https://man.openbsd.org/ifconfig">ifconfig(8)</a> instead of
! 854: ignoring it and using only the prefixlen argument.
! 855:
! 856: <li>Fixed <a href="https://man.openbsd.org/snmp">snmp(1)</a> agent
! 857: address parsing to allow IPv6 addresses to be used based on format,
! 858: allow those without brackets to skip the port if it results in a
! 859: nonsensical address (allowing use of ::1), and try to connect to the
! 860: address immediately.
! 861: <li>Implemented a df subcommand for <a
! 862: href="https://man.openbsd.org/snmp">snmp(1)</a> which outputs disk and
! 863: memory information in a <a href="https://man.openbsd.org/df">df(1)</a>
! 864: format.
! 865: <li>Implemented a -Cs option in <a
! 866: href="https://man.openbsd.org/snmp">snmp(1)</a> for snmp walk and
! 867: bulkwalk, allowing subsections of a tree to be skipped.
! 868:
! 869: <li>Added retries and timeouts for test packets to <a
! 870: href="https://man.openbsd.org/radiusctl">radiusctl(8)</a>.
! 871:
! 872:
! 873: <li>Corrected http auth combined with proxy auth in <a
! 874: href="https://man.openbsd.org/ftp">ftp(1)</a>.
! 875: <li>Corrected <a href="https://man.openbsd.org/ftp">ftp(1)</a>
! 876: access to an https server with user/password through the "http_proxy"
! 877: environment variable.
! 878: <li>Fixed <a href="https://man.openbsd.org/ftp">ftp(1)</a>
! 879: tls_handshake() usage, which would break ftp if an handshake wasn't
! 880: successfully completed in one try.
! 881: <li>Prevented <a href="https://man.openbsd.org/ftp">ftp(1)</a>
! 882: from following remote redirects to local files.
! 883: <li>Implemented HTTP/1.1 in <a href="https://man.openbsd.org/ftp">ftp(1)</a>.
! 884: <li>Added new -N name option to <a
! 885: href="https://man.openbsd.org/ftp">ftp(1)</a>, allowing calling
! 886: scripts to change the progname and produce better error messages.
! 887:
! 888: <li>Allowed <a href="https://man.openbsd.org/pfctl">pfctl(8)</a>
! 889: to recursively flush rules and tables.
! 890: <li>Ensured rdr-to with loopback destination will work even when
! 891: IP forwarding is disabled.
! 892:
! 893: <!-- rpki-client -->
! 894:
! 895: <li>Enabled <a
! 896: href="https://man.openbsd.org/rpki-client">rpki-client(8)</a>, a free,
! 897: easy-to-use implementation of the Resource Public Key Infrastructure
! 898: (RPKI) for Relying Parties (RP) to facilitate validation of the Route
! 899: Origin of a BGP announcement. The program queries the RPKI repository
! 900: system and outputs Validated ROA Payloads in the configuration format
! 901: of OpenBGPD, BIRD, and also as CSV or JSON objects for consumption by
! 902: other routing stacks.
! 903: <li>Modified root's <a
! 904: href="https://man.openbsd.org/crontab">crontab(1)</a> to run <a
! 905: href="https://man.openbsd.org/rpki-client">rpki-client(8)</a> and
! 906: reload <a href="https://man.openbsd.org/bgpd">bgpd(8)</a>
! 907: configuration, enabling RPKI ROA filtering.
! 908: <li>Stopped hardcoding the cache directory for <a
! 909: href="https://man.openbsd.org/rpki-client">rpki-client(8)</a>. Cache
! 910: and output directory will use defaults for root users and must be
! 911: specified by non-root users.
! 912: <li>Made <a
! 913: href="https://man.openbsd.org/rpki-client">rpki-client(8)</a> use
! 914: with the existing cache and not exit if rsync(1) exits non-zero.
! 915: <li>Fixed <a
! 916: href="https://man.openbsd.org/rpki-client">rpki-client(8)</a> -j
! 917: option, which had not been producing any output.
! 918: <li>Generated three different BIRD outputs with <a
! 919: href="https://man.openbsd.org/rpki-client">rpki-client(8)</a> -B: v1
! 920: with IPv4 and IPv6 routes, and v2.
! 921: <li>Rewrote the time validity check for mtfs in <a
! 922: href="https://man.openbsd.org/rpki-client">rpki-client(8)</a> to
! 923: correctly account for the timezone.
! 924: <li>Added <a
! 925: href="https://man.openbsd.org/rpki-client">rpki-client(8)</a> output
! 926: formats for bird and CSV.
! 927:
! 928: <!-- unwind -->
! 929:
! 930: <li>Implemented <a
! 931: href="https://man.openbsd.org/unwindctl">unwindctl(8)</a> status
! 932: memory to show cache memory usage.
! 933: <li>Allowed forcing specific domains to be resolved by specific
! 934: resolvers in <a
! 935: href="https://man.openbsd.org/unwind.conf">unwind.conf(5)</a>,
! 936: handling typical split-horizon setups.
! 937: <li>Decayed the <a
! 938: href="https://man.openbsd.org/unwind">unwind(8)</a> resolver histogram
! 939: data over time to reflect strategy performance.
! 940: <li>Measured performance of resolving strategies in <a
! 941: href="https://man.openbsd.org/unwind">unwind(8)</a>, sorting them and
! 942: choosing the next best strategy when one fails.
! 943: <li>Removed captive portal detection from <a
! 944: href="https://man.openbsd.org/unwind">unwind(8)</a>.
! 945: <li>Added tracking of which interfaces have learned nameservers to
! 946: <a href="https://man.openbsd.org/unwind">unwind(8)</a>.
! 947: <li>Began resolving captive portal hosts internally in <a
! 948: href="https://man.openbsd.org/unwind">unwind(8)</a>.
! 949: <li>Implemented DNS proposals in <a
! 950: href="https://man.openbsd.org/unwind">unwind(8)</a> to learn
! 951: nameservers from network autoconfiguration daemons.
! 952: <li>Moved /usr and var remounting earlier to allow <a
! 953: href="https://man.openbsd.org/unwind">unwind(8)</a> to start before <a
! 954: href="https://man.openbsd.org/pf">pf(4)</a> is configured.
! 955: <li>Added opportunistic DoT support to <a
! 956: href="https://man.openbsd.org/unwind">unwind(8)</a>.
! 957: <li>Added an ASR resolver type to <a
! 958: href="https://man.openbsd.org/unwind">unwind(8)</a>, using the libc
! 959: asynchronous resolver directly with DHCP-provided nameservers.
! 960: Switched to the ASR resolver rather than DHCP when behind a captive
! 961: portal.
! 962: </ul>
! 963:
! 964: <li><a href="https://man.openbsd.org/tmux">tmux(1)</a> improvements and bugfixes:
! 965: <ul>
! 966: <li>Indicated the marked pane in <a
! 967: href="https://man.openbsd.org/tmux">tmux(1)</a> choose mode in
! 968: reverse, and added keys to set (m) and clear it (M), and to jump to
! 969: the starting pane (H).
! 970: <li>Allowed <a href="https://man.openbsd.org/tmux">tmux(1)</a>
! 971: main-pane-width and height to be specified as percentages.
! 972: <li>Added a -f filter argument to the <a
! 973: href="https://man.openbsd.org/tmux">tmux(1)</a> list commands like
! 974: choose-tree.
! 975: <li>Added an -s flag to <a
! 976: href="https://man.openbsd.org/tmux">tmux(1)</a> copy-mode to specify a
! 977: different pane for the source content.
! 978: <li>Added a W position to <a
! 979: href="https://man.openbsd.org/tmux">tmux(1)</a> display-menu -y to use
! 980: the line above or below the status line containing the window list.
! 981: <li>Added a -T flag to <a
! 982: href="https://man.openbsd.org/tmux">tmux(1)</a> resize-pane to trim
! 983: lines below the cursor.
! 984: <li>Added non-regex search variants to <a
! 985: href="https://man.openbsd.org/tmux">tmux(1)</a>.
! 986: <li>Added support for <a
! 987: href="https://man.openbsd.org/tmux">tmux(1)</a> overlay popup boxes,
! 988: created with the display-popup command.
! 989: <li>Added a <a href="https://man.openbsd.org/tmux">tmux(1)</a> -d
! 990: flag to run-shell to wait for delay before running the command (or
! 991: delay with no command).
! 992: <li>Added a <a href="https://man.openbsd.org/tmux">tmux(1)</a>
! 993: copy-mode -H flag to hide the position marker in the top right.
! 994: <li>Added <a href="https://man.openbsd.org/tmux">tmux(1)</a> C-g
! 995: to cancel command prompt with <a
! 996: href="https://man.openbsd.org/vi">vi(1)</a> keys as well as emacs, and
! 997: q in command mode.
! 998: <li>Modified <a href="https://man.openbsd.org/tmux">tmux(1)</a> -S
! 999: server socket to be created with umask 177 rather than 117.
! 1000: <li>Introduced a <a
! 1001: href="https://man.openbsd.org/tmux">tmux(1)</a> selection_active
! 1002: format for when the selection is present but not moving with the
! 1003: cursor.
! 1004: <li>Added -a to the list-keys command in <a
! 1005: href="https://man.openbsd.org/tmux">tmux(1)</a> to also list keys
! 1006: without notes with -N.
! 1007: <li>Added <a href="https://man.openbsd.org/tmux">tmux(1)</a> support
! 1008: for adding a note to a key binding with bind-key -N and using this to
! 1009: add descriptions to the default key binding. Using list-keys -N shows
! 1010: key bindings with notes. Changed the default ? binding to show a
! 1011: readable summary of keys.
! 1012: <li>Removed the <a href="https://man.openbsd.org/tmux">tmux(1)</a>
! 1013: terminal type in favor of flags DECSLRM and DECFRA.
! 1014: <li>Added -Z to the default <a
! 1015: href="https://man.openbsd.org/tmux">tmux(1)</a> switch-client command
! 1016: in tree mode.
! 1017: <li>Prevented read-only <a
! 1018: href="https://man.openbsd.org/tmux">tmux(1)</a> clients from limiting
! 1019: the size.
! 1020: <li>Added support for regex searches in <a
! 1021: href="https://man.openbsd.org/tmux">tmux(1)</a> copy mode.
! 1022: <li>Modified <a href="https://man.openbsd.org/tmux">tmux(1)</a>
! 1023: source-file to allow reading from stdin.
! 1024: <li>Added a <a href="https://man.openbsd.org/tmux">tmux(1)</a> p
! 1025: format modifier for padding to width.
! 1026: <li>Added -f for full size to join-pane in <a
! 1027: href="https://man.openbsd.org/tmux">tmux(1)</a>.
! 1028: <li>Changed <a href="https://man.openbsd.org/tmux">tmux(1)</a>
! 1029: new-session -A to attach to the best existing session when a session
! 1030: name is not specified, rather than creating a new session.
! 1031: <li>Added an option to <a
! 1032: href="https://man.openbsd.org/tmux">tmux(1)</a> to set the key sent by
! 1033: backspace for systems using ^H.
! 1034: <li>Added -F flag to <a
! 1035: href="https://man.openbsd.org/tmux">tmux(1)</a> send-keys to expand
! 1036: formats in search-backward and forward copy mode commands.
! 1037: <li>Added support for percentage sizes to <a
! 1038: href="https://man.openbsd.org/tmux">tmux(1)</a> resize-pane ("-x 10%")
! 1039: and changed split-window and join-pane -l to accept similar
! 1040: percentages, deprecating the -p option.
! 1041: </ul>
! 1042:
! 1043: <li>VMM/VMD improvements
! 1044: <ul>
! 1045: <li>Added <a href="https://man.openbsd.org/vmm">vmm(4)</a> IOCTL
! 1046: handler to set the access protections of the ept.
! 1047: <li>Added a check in <a
! 1048: href="https://man.openbsd.org/vmm">vmm(4)</a> for <a
! 1049: href="https://man.openbsd.org/pvclock">pvclock(4)</a> struct crossing
! 1050: of page boundaries, which could potentially corrupt host memory.
! 1051: <li>Tightened rdmsr on svm in <a href="https://man.openbsd.org/vmm">vmm(4)</a>.
! 1052: <li>Fixed an issue where a <a
! 1053: href="https://man.openbsd.org/vmm">vmm(4)</a> guest could write to
! 1054: host memory by passing bogus addresses in <a
! 1055: href="https://man.openbsd.org/pvclock">pvclock(4)</a>.
! 1056: <li>Run <a href="https://man.openbsd.org/cu">cu(1)</a> in
! 1057: restricted mode using -r in <a
! 1058: href="https://man.openbsd.org/vmctl">vmctl(8)</a> and <a
! 1059: href="https://man.openbsd.org/ldomctl">ldomctl(8)</a>.
! 1060: <li>Started virtual machines defined in <a
! 1061: href="https://man.openbsd.org/vm.conf">vm.conf(5)</a> in a staggered
! 1062: fashion, helping prevent overload of the host and improper tsc
! 1063: calibration in guests.
! 1064: <li>Provided proper concurrency control when pausing a vm in <a
! 1065: href="https://man.openbsd.org/vmd">vmd(8)</a>.
! 1066: <li>Fixed a panic when tearing down vms with <a
! 1067: href="https://man.openbsd.org/vmm">vmm(4)</a>.
! 1068: </ul>
! 1069:
! 1070:
! 1071: <li>ldom/sparc64 virtualization improvements
! 1072: <ul>
! 1073: <li>Added support for devaliases for vnet in <a
! 1074: href="https://man.openbsd.org/ldom.conf">ldom.conf(5)</a>.
! 1075: <li>Implemented <a
! 1076: href="https://man.openbsd.org/ldomctl">ldomctl(8)</a> "panic -c" to
! 1077: panic a guest domain (and enter <a
! 1078: href="https://man.openbsd.org/ddb">ddb(4)</a>).
! 1079: <li>Implemented "start -c" in <a
! 1080: href="https://man.openbsd.org/ldomctl">ldomctl(8)</a> to automatically
! 1081: connect to the console.
! 1082: <li>Introduced a -n option to <a
! 1083: href="https://man.openbsd.org/ldomctl">ldomctl(8)</a> to validate the
! 1084: configuration file and exit.
! 1085: <li>Added a create-vdisk command to <a
! 1086: href="https://man.openbsd.org/ldomctl">ldomctl(8)</a> analogous to
! 1087: amd64's <a href="https://man.openbsd.org/vmctl">vmctl(8)</a> create.
! 1088: <li>Added the "console" command to <a
! 1089: href="https://man.openbsd.org/ldomctl">ldomctl(8)</a> which executes
! 1090: <a href="https://man.openbsd.org/cu">cu(1)</a> on the domain's
! 1091: console.
! 1092: <li>Printed guest domain <a
! 1093: href="https://man.openbsd.org/vcctty">vcctty(4)</a> devices in status
! 1094: output in <a href="https://man.openbsd.org/ldomctl">ldomctl(8)</a>.
! 1095: <li>Added list-io command to <a
! 1096: href="https://man.openbsd.org/ldomctl">ldomctl(8)</a>, listing the
! 1097: available PCIe devices to be used with the iodevice parameter in <a
! 1098: href="https://man.openbsd.org/ldom.conf">ldom.conf(5)</a>.
! 1099: </ul>
! 1100:
! 1101: <li>OpenSMTPD 6.7.0
! 1102: <ul>
! 1103: <li>New Features
! 1104: <ul>
! 1105:
! 1106: <li>Allowed use of the <a
! 1107: href="https://man.openbsd.org/smtpd">smtpd(8)</a> session username in
! 1108: built-in filters when available.
! 1109: <li>Introduced option filter-pf-addresses to <a
! 1110: href="https://man.openbsd.org/snmpd.conf">snmpd.conf(5)</a>, allowing
! 1111: the OPENBSD-PF-MIB::pfTblAddrTable tree to be filtered out when many
! 1112: prefixes are stored in pf tables, reducing CPU usage during bulk
! 1113: walks.
! 1114: <li>Introduced a bypass keyword to <a
! 1115: href="https://man.openbsd.org/smtpd">smtpd(8)</a> so that built-in
! 1116: filters can bypass processing when a condition is met.
! 1117: <li>Allowed use of 'auth' as an origin in <a
! 1118: href="https://man.openbsd.org/smtpd.conf">smtpd.conf(5)</a>.
! 1119: <li>Allowed use of mail-from and rctp-to as for and from parameters
! 1120: in <a href="https://man.openbsd.org/smtpd.conf">smtpd.conf(5)</a>.
! 1121: <li>Stored <a href="https://man.openbsd.org/smtp">smtp(1)</a> session
! 1122: usernames in an envelope, allowing the ruleset to match specific users
! 1123: or mailing addresses.
! 1124:
! 1125:
! 1126: </ul>
! 1127: <li>Bug fixes
! 1128: <ul>
! 1129: <li>Ensured legacy <a href="https://man.openbsd.org/ssl">ssl(8)</a>
! 1130: session ID is persistent during a client TLS session, fixing an issue
! 1131: using TLSv1.3 with smtp.mail.yahoo.com.
! 1132: <li>Fixed security vulnerabilities in <a
! 1133: href="https://man.openbsd.org/smtpd">smtpd(8)</a>. Corrected an
! 1134: out-of-bounds read in smtpd allowing an attacker to inject arbitrary
! 1135: commands into the envelope file to be executed as root, and ensured
! 1136: privilege revocation in <a
! 1137: href="https://man.openbsd.org/smtpctl">smtpctl(8)</a> to prevent
! 1138: arbitrary commands from being run with the _smtpq group.
! 1139: <li>Allowed <a
! 1140: href="https://man.openbsd.org/mail.local">mail.local(8)</a> to be run
! 1141: as non-root, opening a pipe to <a
! 1142: href="https://man.openbsd.org/lockspool">lockspool(1)</a> for file
! 1143: locking.
! 1144: <li>Fixed a security vulnerability in <a
! 1145: href="https://man.openbsd.org/smtpd">smtpd(8)</a> which could lead to
! 1146: a privilege escalation on mbox deliveries and unprivileged code
! 1147: execution on lmtp deliveries.
! 1148: <li>Added support for CIDR in a: spf atoms in <a
! 1149: href="https://man.openbsd.org/smtpd">smtpd(8)</a>.
! 1150: <li>Fixed a possible crash in <a
! 1151: href="https://man.openbsd.org/smtpd">smtpd(8)</a> when combining "from
! 1152: rdns" with nested virtual aliases under a particular configuration.
! 1153:
! 1154: </ul>
! 1155: <li>Experimental Features
! 1156: <ul>
! 1157: <li>...
! 1158: </ul>
! 1159: </ul>
! 1160:
! 1161: <li>LibreSSL 3.1.0
! 1162: <ul>
! 1163: <!-- XXX remove these when adding the LibreSSL Changelog -->
! 1164: <!--
! 1165: <li>Added a -groups option to the <a
! 1166: href="https://man.openbsd.org/openssl">openssl(1)</a> s_server,
! 1167: allowing EC groups to be configured.
! 1168: <li>Added <a href="https://man.openbsd.org/openssl">openssl(1)</a>
! 1169: s_client -tls1_3 and -notls1_3 options.
! 1170: <li>Added support for handling hello retry requests in the <a
! 1171: href="https://man.openbsd.org/ssl">ssl(8)</a> TLSv1.3 client.
! 1172: <li>Added support for legacy message callbacks, making <a
! 1173: href="https://man.openbsd.org/openssl">openssl(1)</a> s_client -msg
! 1174: work for handshake messages.
! 1175: <li>Completed the initial TLSv1.3 implementation.
! 1176: <li>Switched to encrypted records in the TLSv1.3 server.
! 1177: <li>Enabled processing and use of signature algorithms in TLSv1.3.
! 1178: <li>Added support for TLS 1.3 post handshake handshake messages
! 1179: and key updates to <a href="https://www.libressl.org/">LibreSSL</a>.
! 1180: <li>Added -keyopt option to <a
! 1181: href="https://man.openbsd.org/openssl">openssl(1)</a> cms subcommand,
! 1182: providing rsa_padding_mode:oaep for cms -encrypt and
! 1183: rsa_padding_mode:pss for cms -sign.
! 1184: -->
! 1185: <li>API and Documentation Enhancements
! 1186: <ul>
! 1187: <li>...
! 1188: </ul>
! 1189:
! 1190: <li>Compatibility Changes
! 1191: <ul>
! 1192: <li>...
! 1193: </ul>
! 1194:
! 1195: <li>Testing and Proactive Security
! 1196: <ul>
! 1197: <li>...
! 1198: </ul>
! 1199:
! 1200: <li>Internal Improvements
! 1201: <ul>
! 1202: <li>...
! 1203: </ul>
! 1204:
! 1205: <li>Portable Improvements
! 1206: <ul>
! 1207: <li>...
! 1208: </ul>
! 1209:
! 1210: <li>Bug Fixes
! 1211: <ul>
! 1212: <li>...
! 1213: </ul>
! 1214: </ul>
! 1215:
! 1216: <li>OpenSSH 8.1
! 1217: <ul>
! 1218: <li>New Features
! 1219: <ul>
! 1220: <li>Allowed use of the IgnoreRhosts directive anywhere in an <a
! 1221: href="https://man.openbsd.org/sshd_config">sshd_config(5)</a> file,
! 1222: not just before Match blocks, and made it a tri-state option.
! 1223: <li>Added TOKEN percent expansion (i.e. userid, hostnames etc.) to <a
! 1224: href="https://man.openbsd.org/ssh">ssh(1)</a> LocalForward and
! 1225: RemoteForward when used for Unix domain socket forwarding.
! 1226: <li>Gave <a
! 1227: href="https://man.openbsd.org/ssh-keygen">ssh-keygen(1)</a> the
! 1228: ability to dump the contents of a binary key revocation list with
! 1229: <code>ssh-keygen -lQf /path</code>.
! 1230: <li>Added <a href="https://man.openbsd.org/ssh">ssh(1)</a> -Q key-sig
! 1231: option for all key and signature types, teaching ssh -Q to accept <a
! 1232: href="https://man.openbsd.org/ssh_config">ssh_config(5)</a> and <a
! 1233: href="https://man.openbsd.org/sshd_config">sshd_config(5)</a>
! 1234: algorithm keywords as an alias for the corresponding query.
! 1235: <li>Updated to libfido2 780ad3c25.
! 1236: <li>Added an <a
! 1237: href="https://man.openbsd.org/sshd_config">sshd_config(5)</a>
! 1238: "Include" directive to allow inclusion of files.
! 1239: <li>Removed ssh-rsa (SHA1) from the list of allowed CA signature algorithms.
! 1240: <li>Removed diffie-hellman-group14-sha1 from the default <a
! 1241: href="https://man.openbsd.org/ssh">ssh(1)</a> key exchange.
! 1242: <li>Renamed <a href="https://man.openbsd.org/ssh-add">ssh-add(1)</a>
! 1243: -O to -K to load resident keys from a FIDO authenticator.
! 1244: <li>Added the ability to download FIDO2 resident keys from a token
! 1245: via the <a href="https://man.openbsd.org/ssh-keygen">ssh-keygen(1)</a>
! 1246: -K option and save public/private keys into the current directory.
! 1247: <li>Implemented support for generating FIDO2 resident keys. "ssh-add
! 1248: -O" will load resident keys from a FIDO2 token and add them to an
! 1249: ssh-agent. Removed the -x option currently used for the
! 1250: FIDO/U2F-specific key flags, now under -O.
! 1251: <li>Removed single letter flags for moduli generation in <a
! 1252: href="https://man.openbsd.org/ssh-keygen">ssh-keygen(1)</a> and moved
! 1253: all moduli generation options to under the -O flag. Breaks existing
! 1254: ssh-keygen commandline syntax for moduli-related operations.
! 1255: <li>Allowed forwarding of a different agent socket to a specified
! 1256: path in <a href="https://man.openbsd.org/ssh">ssh(1)</a>.
! 1257: <li>Allowed <a href="https://man.openbsd.org/ssh">ssh(1)</a> security
! 1258: keys to act as host keys as well as user keys.
! 1259: <li>Used ssh-sk-helper for all security key signing operations and
! 1260: security key enrollment. Most <a
! 1261: href="https://man.openbsd.org/ssh">ssh(1)</a> tools no longer need to
! 1262: link against libfido2 or interact with /dev/uhid* directly.
! 1263: <li>Added "no-touch-required" options to <a
! 1264: href="https://man.openbsd.org/ssh-keygen">ssh-keygen(1)</a> and <a
! 1265: href="https://man.openbsd.org/sshd">sshd(8)</a> to disable touch
! 1266: requirement for authorized_keys and certificates.
! 1267: <li>Added an <a
! 1268: href="https://man.openbsd.org/sshd_config">sshd_config(5)</a>
! 1269: PubkeyAuthOptions directive allowing specification of whether <a
! 1270: href="https://man.openbsd.org/sshd">sshd(8)</a> should check whether
! 1271: user presence was tested before a security key was made.
! 1272: <li>Added direct support for U2F/FIDO2 security keys in <a
! 1273: href="https://man.openbsd.org/ssh">ssh(1)</a>.
! 1274:
! 1275: <li>Added initial infrastructure for U2F/FIDO support in <a
! 1276: href="https://man.openbsd.org/ssh">ssh(1)</a>.
! 1277:
! 1278: <li>Notified the user via TTY or $SSH_ASKPASS when <a
! 1279: href="https://man.openbsd.org/ssh">ssh(1)</a> security keys must be
! 1280: tapped/touched in order to perform a signature operation.
! 1281: <li>Enabled ed25519 support in <a
! 1282: href="https://man.openbsd.org/ssh">ssh(1)</a>.
! 1283:
! 1284:
! 1285: </ul>
! 1286: <li>Bugfixes
! 1287: <ul>
! 1288: <li>Detected and prevented simple <a
! 1289: href="https://man.openbsd.org/ssh">ssh(1)</a> configuration loops when
! 1290: using ProxyJump.
! 1291: <li>Fixed PIN entry bugs on FIDO <a
! 1292: href="https://man.openbsd.org/ssh-keygen">ssh-keygen(1)</a>.
! 1293: <li>Fixed <a
! 1294: href="https://man.openbsd.org/ssh-keygen">ssh-keygen(1)</a> not
! 1295: displaying the authenticator touch prompt.
! 1296: <li>Prevented a timeout in <a
! 1297: href="https://man.openbsd.org/ssh">ssh(1)</a> when the server doesn't
! 1298: immediately send a banner, such as with multiplexers like sslh.
! 1299: <li>Adjusted on-wire signature encoding for ecdsh-sk <a
! 1300: href="https://man.openbsd.org/ssh">ssh(1)</a> keys to better match
! 1301: ec25519-sk keys.
! 1302: <li>Fixed a potential NULL dereference for revoked hostkeys in <a
! 1303: href="https://man.openbsd.org/ssh">ssh(1)</a>.
! 1304: </ul>
! 1305: </ul>
! 1306:
! 1307: <li>Mandoc
! 1308: <ul>
! 1309: <li>Introduced <a
! 1310: href="https://man.openbsd.org/mandoc">mandoc(1)</a> nodes which are
! 1311: semantically transparent, skipped when looking for previous or
! 1312: following high-level macros.
! 1313: <li>Introduced a new <a
! 1314: href="https://man.openbsd.org/mdoc">mdoc(7)</a> macro .Tg ("tag") to
! 1315: explicitly mark a place as defining a term.
! 1316: <li>Added a Content-Security-Policy HTTP header to <a
! 1317: href="https://man.openbsd.org/mandoc">mandoc(1)</a> that allows only
! 1318: CSS.
! 1319:
! 1320: </ul>
! 1321:
! 1322: <li><p>Ports and packages:
! 1323: <ul>
! 1324: <li>Added support for "alpha" suffixes in <a
! 1325: href="https://man.openbsd.org/packages-specs">packages-specs(7)</a>,
! 1326: removing the need for workarounds in certain ports distfiles.
! 1327:
! 1328: </ul>
! 1329: <p>Many pre-built packages for each architecture:
! 1330: <!-- number of FTP packages minus SHA256, SHA256.sig, index.txt -->
! 1331: <ul style="column-count: 3">
! 1332: <li>aarch64: XXXX
! 1333: <li>amd64: XXXX
! 1334: <li>arm: XXXX
! 1335: <li>i386: XXXX
! 1336: <li>mips64: XXXX
! 1337: <li>mips64el: XXXX
! 1338: <li>powerpc: XXXX
! 1339: <li>sparc64: XXXX
! 1340: </ul>
! 1341:
! 1342: <li>As usual, steady improvements in manual pages and other documentation.
! 1343:
! 1344: <li>The system includes the following major components from outside suppliers:
! 1345: <ul>
! 1346: <li>Xenocara (based on X.Org 7.7 with xserver 1.20.8 + patches,
! 1347: freetype 2.10.1, fontconfig 2.12.4, Mesa 19.2.8, xterm 344,
! 1348: xkeyboard-config 2.20 and more)<!-- remove XXX when updated -->
! 1349: <li>LLVM/Clang 8.0.1 (+ patches)
! 1350: <li>GCC 4.2.1 (+ patches) and 3.3.6 (+ patches)
! 1351: <li>Perl 5.30.2 (+ patches)
! 1352: <li>NSD 4.2.4
! 1353: <li>Unbound 1.10.0
! 1354: <li>Ncurses 5.7
! 1355: <li>Binutils 2.17 (+ patches)
! 1356: <li>Gdb 6.3 (+ patches)
! 1357: <li>Awk Dec 20, 2012 version
! 1358: <li>Expat 2.2.8
! 1359: </ul>
! 1360: </ul>
! 1361: </section>
! 1362:
! 1363: <hr>
! 1364:
! 1365: <section id=install>
! 1366: <h3>How to install</h3>
! 1367: <p>
! 1368: Please refer to the following files on the mirror site for
! 1369: extensive details on how to install OpenBSD 6.7 on your machine:
! 1370:
! 1371: <ul>
! 1372: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.7/alpha/INSTALL.alpha">
! 1373: .../OpenBSD/6.7/alpha/INSTALL.alpha</a>
! 1374: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.7/amd64/INSTALL.amd64">
! 1375: .../OpenBSD/6.7/amd64/INSTALL.amd64</a>
! 1376: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.7/arm64/INSTALL.arm64">
! 1377: .../OpenBSD/6.7/arm64/INSTALL.arm64</a>
! 1378: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.7/armv7/INSTALL.armv7">
! 1379: .../OpenBSD/6.7/armv7/INSTALL.armv7</a>
! 1380: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.7/hppa/INSTALL.hppa">
! 1381: .../OpenBSD/6.7/hppa/INSTALL.hppa</a>
! 1382: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.7/i386/INSTALL.i386">
! 1383: .../OpenBSD/6.7/i386/INSTALL.i386</a>
! 1384: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.7/landisk/INSTALL.landisk">
! 1385: .../OpenBSD/6.7/landisk/INSTALL.landisk</a>
! 1386: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.7/loongson/INSTALL.loongson">
! 1387: .../OpenBSD/6.7/loongson/INSTALL.loongson</a>
! 1388: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.7/luna88k/INSTALL.luna88k">
! 1389: .../OpenBSD/6.7/luna88k/INSTALL.luna88k</a>
! 1390: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.7/macppc/INSTALL.macppc">
! 1391: .../OpenBSD/6.7/macppc/INSTALL.macppc</a>
! 1392: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.7/octeon/INSTALL.octeon">
! 1393: .../OpenBSD/6.7/octeon/INSTALL.octeon</a>
! 1394: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.7/sparc64/INSTALL.sparc64">
! 1395: .../OpenBSD/6.7/sparc64/INSTALL.sparc64</a>
! 1396: </ul>
! 1397: </section>
! 1398:
! 1399: <hr>
! 1400:
! 1401: <section id=quickinstall>
! 1402: <p>
! 1403: Quick installer information for people familiar with OpenBSD, and the use of
! 1404: the "<a href="https://man.openbsd.org/disklabel.8">disklabel</a> -E" command.
! 1405: If you are at all confused when installing OpenBSD, read the relevant
! 1406: INSTALL.* file as listed above!
! 1407:
! 1408: <h3>OpenBSD/alpha:</h3>
! 1409:
! 1410: <p>
! 1411: If your machine can boot from CD, you can write <i>install67.iso</i> or
! 1412: <i>cd67.iso</i> to a CD and boot from it.
! 1413: Refer to INSTALL.alpha for more details.
! 1414:
! 1415: <h3>OpenBSD/amd64:</h3>
! 1416:
! 1417: <p>
! 1418: If your machine can boot from CD, you can write <i>install67.iso</i> or
! 1419: <i>cd67.iso</i> to a CD and boot from it.
! 1420: You may need to adjust your BIOS options first.
! 1421:
! 1422: <p>
! 1423: If your machine can boot from USB, you can write <i>install67.fs</i> or
! 1424: <i>miniroot67.fs</i> to a USB stick and boot from it.
! 1425:
! 1426: <p>
! 1427: If you can't boot from a CD, floppy disk, or USB,
! 1428: you can install across the network using PXE as described in the included
! 1429: INSTALL.amd64 document.
! 1430:
! 1431: <p>
! 1432: If you are planning to dual boot OpenBSD with another OS, you will need to
! 1433: read INSTALL.amd64.
! 1434:
! 1435: <h3>OpenBSD/arm64:</h3>
! 1436:
! 1437: <p>
! 1438: Write <i>miniroot67.fs</i> to a disk and boot from it after connecting
! 1439: to the serial console. Refer to INSTALL.arm64 for more details.
! 1440:
! 1441: <h3>OpenBSD/armv7:</h3>
! 1442:
! 1443: <p>
! 1444: Write a system specific miniroot to an SD card and boot from it after connecting
! 1445: to the serial console. Refer to INSTALL.armv7 for more details.
! 1446:
! 1447: <h3>OpenBSD/hppa:</h3>
! 1448:
! 1449: <p>
! 1450: Boot over the network by following the instructions in INSTALL.hppa or the
! 1451: <a href="hppa.html#install">hppa platform page</a>.
! 1452:
! 1453: <h3>OpenBSD/i386:</h3>
! 1454:
! 1455: <p>
! 1456: If your machine can boot from CD, you can write <i>install67.iso</i> or
! 1457: <i>cd67.iso</i> to a CD and boot from it.
! 1458: You may need to adjust your BIOS options first.
! 1459:
! 1460: <p>
! 1461: If your machine can boot from USB, you can write <i>install67.fs</i> or
! 1462: <i>miniroot67.fs</i> to a USB stick and boot from it.
! 1463:
! 1464: <p>
! 1465: If you can't boot from a CD, floppy disk, or USB,
! 1466: you can install across the network using PXE as described in
! 1467: the included INSTALL.i386 document.
! 1468:
! 1469: <p>
! 1470: If you are planning on dual booting OpenBSD with another OS, you will need to
! 1471: read INSTALL.i386.
! 1472:
! 1473: <h3>OpenBSD/landisk:</h3>
! 1474:
! 1475: <p>
! 1476: Write <i>miniroot67.fs</i> to the start of the CF
! 1477: or disk, and boot normally.
! 1478:
! 1479: <h3>OpenBSD/loongson:</h3>
! 1480:
! 1481: <p>
! 1482: Write <i>miniroot67.fs</i> to a USB stick and boot bsd.rd from it
! 1483: or boot bsd.rd via tftp.
! 1484: Refer to the instructions in INSTALL.loongson for more details.
! 1485:
! 1486: <h3>OpenBSD/luna88k:</h3>
! 1487:
! 1488: <p>
! 1489: Copy 'boot' and 'bsd.rd' to a Mach or UniOS partition, and boot the bootloader
! 1490: from the PROM, and then bsd.rd from the bootloader.
! 1491: Refer to the instructions in INSTALL.luna88k for more details.
! 1492:
! 1493: <h3>OpenBSD/macppc:</h3>
! 1494:
! 1495: <p>
! 1496: Burn the image from a mirror site to a CDROM, and power on your machine
! 1497: while holding down the <i>C</i> key until the display turns on and
! 1498: shows <i>OpenBSD/macppc boot</i>.
! 1499:
! 1500: <p>
! 1501: Alternatively, at the Open Firmware prompt, enter <i>boot cd:,ofwboot
! 1502: /6.7/macppc/bsd.rd</i>
! 1503:
! 1504: <h3>OpenBSD/octeon:</h3>
! 1505:
! 1506: <p>
! 1507: After connecting a serial port, boot bsd.rd over the network via DHCP/tftp.
! 1508: Refer to the instructions in INSTALL.octeon for more details.
! 1509:
! 1510: <h3>OpenBSD/sparc64:</h3>
! 1511:
! 1512: <p>
! 1513: Burn the image from a mirror site to a CDROM, boot from it, and type
! 1514: <i>boot cdrom</i>.
! 1515:
! 1516: <p>
! 1517: If this doesn't work, or if you don't have a CDROM drive, you can write
! 1518: <i>floppy67.fs</i> or <i>floppyB67.fs</i>
! 1519: (depending on your machine) to a floppy and boot it with <i>boot
! 1520: floppy</i>. Refer to INSTALL.sparc64 for details.
! 1521:
! 1522: <p>
! 1523: Make sure you use a properly formatted floppy with NO BAD BLOCKS or your install
! 1524: will most likely fail.
! 1525:
! 1526: <p>
! 1527: You can also write <i>miniroot67.fs</i> to the swap partition on
! 1528: the disk and boot with <i>boot disk:b</i>.
! 1529:
! 1530: <p>
! 1531: If nothing works, you can boot over the network as described in INSTALL.sparc64.
! 1532: </section>
! 1533:
! 1534: <hr>
! 1535:
! 1536: <section id=upgrade>
! 1537: <h3>How to upgrade</h3>
! 1538: <p>
! 1539: If you already have an OpenBSD 6.5 system, and do not want to reinstall,
! 1540: upgrade instructions and advice can be found in the
! 1541: <a href="faq/upgrade67.html">Upgrade Guide</a>.
! 1542: </section>
! 1543:
! 1544: <hr>
! 1545:
! 1546: <section id=sourcecode>
! 1547: <h3>Notes about the source code</h3>
! 1548: <p>
! 1549: <code>src.tar.gz</code> contains a source archive starting at <code>/usr/src</code>.
! 1550: This file contains everything you need except for the kernel sources,
! 1551: which are in a separate archive.
! 1552: To extract:
! 1553: <blockquote><pre>
! 1554: # <kbd>mkdir -p /usr/src</kbd>
! 1555: # <kbd>cd /usr/src</kbd>
! 1556: # <kbd>tar xvfz /tmp/src.tar.gz</kbd>
! 1557: </pre></blockquote>
! 1558: <p>
! 1559: <code>sys.tar.gz</code> contains a source archive starting at <code>/usr/src/sys</code>.
! 1560: This file contains all the kernel sources you need to rebuild kernels.
! 1561: To extract:
! 1562: <blockquote><pre>
! 1563: # <kbd>mkdir -p /usr/src/sys</kbd>
! 1564: # <kbd>cd /usr/src</kbd>
! 1565: # <kbd>tar xvfz /tmp/sys.tar.gz</kbd>
! 1566: </pre></blockquote>
! 1567: <p>
! 1568: Both of these trees are a regular CVS checkout. Using these trees it
! 1569: is possible to get a head-start on using the anoncvs servers as
! 1570: described <a href="anoncvs.html">here</a>.
! 1571: Using these files
! 1572: results in a much faster initial CVS update than you could expect from
! 1573: a fresh checkout of the full OpenBSD source tree.
! 1574: </section>
! 1575:
! 1576: <hr>
! 1577:
! 1578: <section id=ports>
! 1579: <h3>Ports Tree</h3>
! 1580: <p>
! 1581: A ports tree archive is also provided. To extract:
! 1582: <blockquote><pre>
! 1583: # <kbd>cd /usr</kbd>
! 1584: # <kbd>tar xvfz /tmp/ports.tar.gz</kbd>
! 1585: </pre></blockquote>
! 1586: <p>
! 1587: Go read the <a href="faq/ports/index.html">ports</a> page
! 1588: if you know nothing about ports
! 1589: at this point. This text is not a manual of how to use ports.
! 1590: Rather, it is a set of notes meant to kickstart the user on the
! 1591: OpenBSD ports system.
! 1592: <p>
! 1593: The <i>ports/</i> directory represents a CVS checkout of our ports.
! 1594: As with our complete source tree, our ports tree is available via
! 1595: <a href="anoncvs.html">AnonCVS</a>.
! 1596: So, in order to keep up to date with the -stable branch, you must make
! 1597: the <i>ports/</i> tree available on a read-write medium and update the tree
! 1598: with a command like:
! 1599: <blockquote><pre>
! 1600: # <kbd>cd /usr/ports</kbd>
! 1601: # <kbd>cvs -d anoncvs@server.openbsd.org:/cvs update -Pd -rOPENBSD_6_7</kbd>
! 1602: </pre></blockquote>
! 1603: <p>
! 1604: [Of course, you must replace the server name here with a nearby anoncvs
! 1605: server.]
! 1606: <p>
! 1607: Note that most ports are available as packages on our mirrors. Updated
! 1608: ports for the 6.7 release will be made available if problems arise.
! 1609: <p>
! 1610: If you're interested in seeing a port added, would like to help out, or just
! 1611: would like to know more, the mailing list
! 1612: <a href="mail.html">ports@openbsd.org</a> is a good place to know.
! 1613: </section>
![[BACK]](/icons/back.gif){kind=icon}
Return to 67.html CVS log ![[TXT]](/icons/text.gif){kind=icon}
![[DIR]](/icons/dir.gif){kind=icon}
Up to [local] / www