Annotation of www/68.html, Revision 1.14
1.1 benno 1: <!doctype html>
2: <html lang=en id=release>
3: <meta charset=utf-8>
4:
5: <title>OpenBSD 6.8</title>
6: <meta name="description" content="OpenBSD 6.8">
7: <meta name="viewport" content="width=device-width, initial-scale=1">
8: <link rel="stylesheet" type="text/css" href="openbsd.css">
9: <link rel="canonical" href="https://www.openbsd.org/68.html">
10:
11: <h2 id=OpenBSD>
12: <a href="index.html">
13: <i>Open</i><b>BSD</b></a>
14: 6.8
15: </h2>
16:
17: <table>
18: <tr>
19: <td>
20: <a href="images/XXX.gif">
21: <img width="227" height="343" src="images/XXX-s.gif" alt="XXX"></a>
22: <td>
23: Released Oct XXX, 2020<br>
24: Copyright 1997-2020, Theo de Raadt.<br>
25: <br>
26: <br>
27: Artwork by XXX.
28: <br>
29: <ul>
30: <li>See the information on <a href="ftp.html">the FTP page</a> for
31: a list of mirror machines.
32: <li>Go to the <code class=reldir>pub/OpenBSD/6.8/</code> directory on
33: one of the mirror sites.
34: <li>Have a look at <a href="errata68.html">the 6.8 errata page</a> for a list
35: of bugs and workarounds.
36: <li>See a <a href="plus68.html">detailed log of changes</a> between the
37: 6.7 and 6.8 releases.
38: <p>
39: <li><a href="https://man.openbsd.org/signify.1">signify(1)</a>
40: pubkeys for this release:<p>
41:
42: <table class=signify>
43: <tr><td>
44: openbsd-68-base.pub:
45: <td>
46: <a href="https://ftp.openbsd.org/pub/OpenBSD/6.8/openbsd-68-base.pub">
47: RWQZj25CSG5R2oLo5735Hh6C48kkjFsj5rJDjW+fGZwyY+BkD5/zps8f
48: <tr><td>
49: openbsd-68-fw.pub:
50: <td>
51: RWSYx4htNi/zavF8ZToMBDFz2xymRfFnnR1MEKV9csYbvnrTBwdkXhdy
52: <tr><td>
53: openbsd-68-pkg.pub:
54: <td>
55: RWQlDXyHx5KlPoEiz4yWRK/Gt/rvPwI8KEAt3utge/dBS7R+EscdzA5K
56: <tr><td>
57: openbsd-68-syspatch.pub:
58: <td>
59: RWRWuHkSV0U8PUX24vGa3ywrvKNQY6llV3PLvKEzDTiTVPfIRaXPfvzR
60: </table>
61: </ul>
62: <p>
63: All applicable copyrights and credits are in the src.tar.gz,
64: sys.tar.gz, xenocara.tar.gz, ports.tar.gz files, or in the
65: files fetched via <code>ports.tar.gz</code>.
66: </table>
67:
68: <hr>
69:
70: <section id=new>
71: <h3>What's New</h3>
72: <p>
73: This is a partial list of new features and systems included in OpenBSD 6.8.
74: For a comprehensive list, see the <a href="plus68.html">changelog</a> leading
75: to 6.8.
76:
77: <ul>
78:
79: <li>General improvements and bugfixes:
80: <ul>
1.3 benno 81: <li>Added support in the kernel and libc for timecounting in
82: userland, eliminating the need for a context switch everytime a
83: process requests the current time, thereby improving speed and
84: responsiveness in programs which make many <a
85: href="https://man.openbsd.org/gettimeofday">gettimeofday(2)</a> calls,
86: especially browsers and office software.<br>The userland timecounters
87: are enabled on the amd64, arm64, macppc, octeon and sparc64
88: architectures.<span style="color:red;">verify architectures</span>
89:
1.1 benno 90: <li>Set <a href="https://man.openbsd.org/ddb">ddb(4)</a> "/t" to show a trace via TID on all architectures.
91: <li>Restored VGA fonts on VT switch, preventing an unusable screen when switching to a VT with a custom VGA font from X.
92: <li>Fixed the <a href="https://man.openbsd.org/ksh">ksh(1)</a> exit code when evaluating a || compound list to prevent termination of the shell when running under -e.
93: <li>Relaxed filename checks in <a href="https://man.openbsd.org/syspatch">syspatch(8)</a> to allow use of hyphens.
94: <li>Rewrote m88k mutex code as a slight variation of the MI mutex code, potentially improving stability and rendering mutex spinning time visible in <a href="https://man.openbsd.org/top">top(1)</a>.
95: <li>Corrected <a href="https://man.openbsd.org/getopt_long">getopt_long(3)</a> parsing of a trailing dash in an option group, which was being incorrectly returned as an argument.
96: <li>Enabled building <a href="https://man.openbsd.org/wsmoused">wsmoused(8)</a> and <a href="https://man.openbsd.org/wsfontload">wsfontload(8)</a> on arm64 and armv7.
97: <li>Added a new column to <a href="https://man.openbsd.org/wsfontload">wsfontload(8)</a> -l output to report the number of characters contained in a loaded font.
98: <li>Fixed a panic in <a href="https://man.openbsd.org/wscons">wscons(4)</a>.
99: <li>Prevented callers inspecting unrelated fields in the libc resolver function asr_run().
100: <li>Prevented <a href="https://man.openbsd.org/rcs">rcs(1)</a> removal of locked revisions with rcs -orange, avoiding leaving behind a lock for a revision which no longer exists.
101: <li>Provided an optimized implementation of <a href="https://man.openbsd.org/ffs">ffs(3)</a> in the kernel on arm64/powerpc/powerpc64.
102: <li>Improved CPU frequency scaling in automatic performance mode by removing accounting for offline CPUs.
103: <li>Fixed <a href="https://man.openbsd.org/sndiod">sndiod(8)</a> crashes when USB devices are disconnected.
104: <li>Fixed the initial <a href="https://man.openbsd.org/sndiod">sndiod(8)</a> alternate device number, preventing device number 1 from being skipped on first use.
105: <li>Allowed switching between alternate devices (-F) with <a href="https://man.openbsd.org/sndioctl">sndioctl(1)</a>.
106: <li>Implemented the gensub(), systime() and strftime() functions for <a href="https://man.openbsd.org/awk">awk(1)</a>.
107: <li>Stopped incrementing openclass for a literal "[" in <a href="https://man.openbsd.org/awk">awk(1)</a>, allowing parsing of expressions such as "/[[/[]/".
108: <li>Added <a href="https://man.openbsd.org/intrmap_create">intrmap</a>, an interrupt to CPU mapping API that is used by hardware drivers to use multiple CPUs for interrupt handling.
109: <li>Added an ioctl PCIOCGETVPD allowing userland to access read-only support information about pci devices via the vpd register.
110: <li>Introduced <a href="https://man.openbsd.org/gettime">gettime(9)</a> and <a href="https://man.openbsd.org/getuptime">getuptime(9)</a> and substituted these for time_second(9) and time_uptime(9) throughout the kernel to prevent split-read problems on 32-bit platforms.
111: <li>Fixed merging of files that lack newlines for <a href="https://man.openbsd.org/diff3">diff3(1)</a>, OpenRCS and OpenCVS.
112: <li>Switched the default CDDB database for <a href="https://man.openbsd.org/cdio">cdio(1)</a> to gnudb.gnudb.org:8880.
113: <li>Introduced a darker <a href="https://man.openbsd.org/xenodm">xenodm(1)</a> login widget and a lower contrast default background.
114: <li>Prevented creation of bogus <a href="https://man.openbsd.org/sd">sd(4)</a> devices for <a href="https://man.openbsd.org/nvme">nvme(4)</a> namespaces which are configured but have size 0.
115: <li>Initialized v4l2_requestbuffers for libv4l compatibility, allowing view of video encodings not directly supported by <a href="https://man.openbsd.org/video">video(1)</a>.
116: <li>Added <a href="https://man.openbsd.org/video">video(1)</a> white balance temperature control through w/W keys.
117: <li>Added the ability to set and display <a href="https://man.openbsd.org/video">video(1)</a> control values directly on the CLI.
118: <li>Allowed the combination of <a href="https://man.openbsd.org/video">video(1)</a> "-dc" options, reset and display control values.
119: <li>Added control for backlight compensation to <a href="https://man.openbsd.org/video">video(4)</a>.
120: <li>Used an LFENCE instruction everywhere RDTSC is used for a time measurement, reducing the jitter in TSC skew measurements.
121: <li>Prevented a core dump in <a href="https://man.openbsd.org/ftp">ftp(1)</a> during fetch abort.
122: <li>Allowed specification of supported TLS protocols in <a href="https://man.openbsd.org/ftp">ftp(1)</a> "-S protocols".
123: <li>Fixed an <a href="https://man.openbsd.org/xconsole">xconsole(1)</a> crash by starting it after setting the background.
124: <li>Fixed <a href="https://man.openbsd.org/ls">ls(1)</a> -R mode to not display subdirectories of a directory beginning with '.' and ensure directory names are always displayed.
125: <li>Introduced <a href="https://man.openbsd.org/kstat">kstat(1)</a>, a subsystem to allow the kernel to expose statistics to userland (and <a href="https://man.openbsd.org/kstat">kstat(8)</a>, the userland side).
126: <li>Added <a href="https://man.openbsd.org/kstat">kstat(1)</a> -w option, allowing update and printing of stats at a specified wait interval.
127: <li>Added kstat to <a href="https://man.openbsd.org/cnmac">cnmac(4)</a>.
128: <li>Added tsc_delay(), a <a href="https://man.openbsd.org/delay">delay(9)</a> implementation based on the TSC, to amd64.
129: <li>Synchronized each core's CP0 cycle counter using the IO clock counter on mips64 and octeon, making the cycle counter usable as timecounter.
130: <li>Added support for set -o pipefail to <a href="https://man.openbsd.org/ksh">ksh(1)</a>, potentially helping error checking.
131: <li>Taught <a href="https://man.openbsd.org/su">su(1)</a> -l -f to start a regular shell for non-csh shells rather than a login shell.
132: <li>Enabled spleen16x32 and spleen32x64 fonts on armv7 for GENERIC kernels.
133: <li>Implemented linear and power-of-two histograms in btrace(5).
134: <li>Added <a href="https://man.openbsd.org/btrace">btrace(8)</a> -p flag to filter all actions by PID.
135: <li>Enabled <a href="https://man.openbsd.org/btrace">btrace(8)</a>.
136: <li>Added support for "&" and "|" operators in btrace scripts.
137: <li>Used <a href="https://man.openbsd.org/su">su(1)</a> -fl to avoid sourcing the target user's .profile in <a href="https://man.openbsd.org/rc.d">rc.d(8)</a>/<a href="https://man.openbsd.org/rcctl">rcctl(8)</a>.
138: <li>Added a <a href="https://man.openbsd.org/ktrace">ktrace(1)</a> -T option to make time-related system calls more prominent.
1.12 schwarze 139: <li>Switched the default <a href="https://man.openbsd.org/man.1">man(1)</a> pager from "<a href="https://man.openbsd.org/more.1">more(1)</a> -s" to <a href="https://man.openbsd.org/less.1">less(1)</a>.
140: <li>Supported -T html -O tag in <a href="https://man.openbsd.org/man.1">man(1)</a> by passing a file:// URI to the pager.
1.1 benno 141: <li>Ensured only pseudo-terminal devices use reprint delays.
142: <li>Prevented <a href="https://man.openbsd.org/mg">mg(1)</a> from running out of memory or segfaulting with <code>query-replace-regex ^</code>.
143: <li>Prevented an <a href="https://man.openbsd.org/unveil">unveil(2)</a> failure with chdir / on <a href="https://man.openbsd.org/sensorsd">sensorsd(8)</a>.
144: <li>Ported NetBSD's arm64 disassembler for <a href="https://man.openbsd.org/ddb">ddb(4)</a>.
145: <li>Added / as an alias for g (grep) in <a href="https://man.openbsd.org/top">top(1)</a>.
146: <li>Added support for remote coverage to <a href="https://man.openbsd.org/kcov">kcov(4)</a>.
147: <li>Avoided reading one byte before the path buffer in <a href="https://man.openbsd.org/mountd">mountd(8)</a>.
148: <li>Added the ability to filter which <a href="https://man.openbsd.org/kstat">kstat(1)</a> entries are displayed.
149: <li>Moved <a href="https://man.openbsd.org/sysctl">sysctl(2)</a> CTL_DEBUG from DEBUG to the new DEBUG_SYSCTL.
150: <li>Added <a href="https://man.openbsd.org/fstat">fstat(1)</a> support for looking up unix domain sockets by file name.
151: <li>Fixed <a href="https://man.openbsd.org/make">make(1)</a> :S with anchors and replacement.
152: <li>Imported <a href="https://man.openbsd.org/login_ldap">login_ldap(8)</a>, using <a href="https://man.openbsd.org/ldap">ldap(1)</a> rather than openldap.
153: <li>Used READ(16)/WRITE(16) commands for disks large enough to require them to access the last sectors, fixing large 512E devices plugged into USB to ATA/ATAPI bridges which mistakenly use 4K sector addresses/sizes.
154: <li>Fixed "$@" splitting with empty IFS in <a href="https://man.openbsd.org/ksh">ksh(1)</a>.
155: <li>Prevented improper disabling of the backlight in <a href="https://man.openbsd.org/umstc">umstc(4)</a> when brightness is adjusted to 0.
1.7 jsg 156: <li>Stopped <a href="https://man.openbsd.org/syslogd">syslogd(8)</a> from closing UDP sockets for sending messages when DNS lookup of a UDP loghost fails, allowing them to be used to send if DNS is working during the next SIGHUP.
1.1 benno 157: <li>Prevented established TCP and TLS sockets of <a href="https://man.openbsd.org/syslogd">syslogd(8)</a> from staying open forever if a client aborted the connection silently.
158: <li>Provided a naptime variable for userspace via <a href="https://man.openbsd.org/kvm_read">kvm_read(3)</a>, usable by <a href="https://man.openbsd.org/vmstat">vmstat(8)</a>.
159: <li>Cleared the screen in <a href="https://man.openbsd.org/ksh">ksh(1)</a>'s vi editing mode before redrawing the line with ^L.
160: <li>Made <a href="https://man.openbsd.org/apmd">apmd(8)</a> always ask the kernel about current hw.perfpolicy rather than maintaining state.
161: <li>Reworked kernel loading with <a href="https://man.openbsd.org/octboot">octboot(4)</a>, which now does not rely on a mounted filesystem.
162: <li>Converted macppc, octeon and loongson to use machine-independent installboot.
163: <li>Forced long-names on msdos filenames for installboot on most 32-bit architectures.
164: <!-- FFS2 -->
165: <li>Improvements in the FFS2 filesystem:
166: <ul>
167: <li>Made FFS2 the default for <a href="https://man.openbsd.org/newfs">newfs(8)</a>, except for mfs.
168: <li>Enabled the FFS2 option on the luna88k ramdisk.
169: <li>Made FFS2 the default non-root filesystems on landisk, sgi and luna88k.
170: </ul>
171: <li>
172: </ul>
173: </ul>
174:
175: <li>SMP-Improvements:
176: <ul>
177: <li>
178: </ul>
179:
180: <li>Improved hardware support and driver bugfixes, including:
181: <ul>
182: <li>Enabled scrollback in <a href="https://man.openbsd.org/simplefb">simplefb(4)</a>.
183: <li>Fixed display glitches on smaller screens or with larger fonts in <a href="https://man.openbsd.org/efifb">efifb(4)</a> associated with remapping and attaching.
184: <li>Disabled <a href="https://man.openbsd.org/ohci">ohci(4)</a> on the amd64 ramdisk kernel.
185: <li>Improved reporting of remaining power with batteries of different capacities in <a href="https://man.openbsd.org/acpi">acpi(4)</a>.
186: <li>Fixed bogus frame sizes being returned by <a href="https://man.openbsd.org/xhci">xhci(4)</a>.
187: <li>Added <a href="https://man.openbsd.org/wsmoused">wsmoused(8)</a> support to <a href="https://man.openbsd.org/efifb">efifb(4)</a>.
188: <li>Added <a href="https://man.openbsd.org/umstc">umstc(4)</a>, a driver for Microsoft Surface Type Cover keyboards.
189: <li>Introduced <a href="https://man.openbsd.org/acpihid">acpihid(4)</a> for ACPI HID event and 5-button array devices.
190: <li>Moved Powerbook5,4 audio from <a href="https://man.openbsd.org/aoa">aoa(4)</a> to <a href="https://man.openbsd.org/snapper">snapper(4)</a>, adding the missing TAS3004 volume control.
191: <li>Fixed broken HID descriptors of Elecom trackballs with 6 or 8 buttons.
192: <li>Added RK3328 PWM, also found in the RK3308, to <a href="https://man.openbsd.org/rkpwm">rkpwm(4)</a>.
193: <li>Added RK3308 temperature sensors to <a href="https://man.openbsd.org/rktemp">rktemp(4)</a>.
194: <li>Added <a href="https://man.openbsd.org/pcamux">pcamux(4)</a>, a driver for the PCA8548 I2C switch.
1.6 jsg 195: <li>Introduced a framework for digital audio interfaces, and added <a href="https://man.openbsd.org/simpleaudio">simpleaudio(4)</a>, a driver for "simple audio cards." This is a wrapper connecting the I2S controller, the codec and some aux devices, and <a href="https://man.openbsd.org/simpleamp">simpleamp(4)</a>, a driver for "simple audio amplifier," one of the aux devices for <a href="https://man.openbsd.org/simpleaudio">simpleaudio(4)</a>.
1.1 benno 196: <li>Enabled <a href="https://man.openbsd.org/nvme">nvme(4)</a> on i386.
197: <li>Added support for the Ericsson F5521gw Mobile Broadband Modem.
198: <li>Implemented pci_intr_establish_cpu() for <a href="https://man.openbsd.org/pyro">pyro(4)</a> and <a href="https://man.openbsd.org/vpci">vpci(4)</a>-based sparc64 systems.
199: <li>Ensured the STOP command sent by <a href="https://man.openbsd.org/sd">sd(4)</a> on powerdown will not result in hanging the machine if commands to the USB mass storage fail.
200: <li>Fixed intermittent failing <a href="https://man.openbsd.org/pms">pms(4)</a> device initialization seen on some Synaptics devices.
201: <li>Corrected trackstick/button attachment of Windows Precision Touchpad <a href="https://man.openbsd.org/imt">imt(4)</a> devices, fixing behavior on certain Dell Latitude laptops.
202: <li>Improved speed of scrolling by optimizing <a href="https://man.openbsd.org/rasops">rasops(9)</a> write-only framebuffer console.
203: <li>Added support for routing interrupts to other CPUs in <a href="https://man.openbsd.org/ampintc">ampintc(4)</a> and <a href="https://man.openbsd.org/agintc">agintc(4)</a>.
204: <li>Modified <a href="https://man.openbsd.org/uvideo">uvideo(4)</a> to fix webcam detection in Firefox 78.
205: <li>Added a SENSOR_ENERGY sensor type to the <a href="https://man.openbsd.org/sensor_attach">sensors framework API</a> which uses microjoules.
206: <li>Added support for the AMDI0010 touchpad on the Inspiron 5505.
207: <li>Avoided nvram lock timeout on sparc64 systems with onboard BCM5704 <a href="https://man.openbsd.org/bge">bge(4)</a> instances that come without a fitted EEPROM/NVRAM.
208: <li>Added support for Gear Head keyboards.
209: <li>Added <a href="https://man.openbsd.org/pms">pms(4)</a> support for the Elantech v1 touchpad with firmware version 0x20022.
210: <li>Added <a href="https://man.openbsd.org/sdmmc">sdmmc(4)</a> support for eMMC HS200 mode.
211: <li>Added Exar XR17V35x serial port support.
212: <li>Properly implemented <a href="https://man.openbsd.org/amlmmc">amlmmc(4)</a> setting of signal voltage.
213: <li>Implemented UHS-I support in the <a href="https://man.openbsd.org/sdmmc">sdmmc(4)</a> midlayer and enabled it in <a href="https://man.openbsd.org/amlmmc">amlmmc(4)</a>.
214: <li>Allowed theoretical multiple attachment of <a href="https://man.openbsd.org/asmc">asmc(4)</a> controllers.
215: <li>Introduced <a href="https://man.openbsd.org/abl">abl(4)</a>, a new driver to control the backlight brightness on Intel-based Apple machines, and allowed it to be controlled through <a href="https://man.openbsd.org/wsconsctl">wsconsctl(8)</a>.
216: <li>Disabled <a href="https://man.openbsd.org/acpivout">acpivout(4)</a> brightness control on machines aware of Windows 8, enabling inteldrm to handle brightness ioctls.
217: <li>Fixed <a href="https://man.openbsd.org/eeprom">eeprom(8)</a> error when setting variables on macppc.
1.4 jsg 218: <li>Updated <a href="https://man.openbsd.org/drm">drm(4)</a> to Linux 5.7.19.
1.1 benno 219: </ul>
220: <li>New or improved network hardware support:
221: <ul>
222: <li>Enabled multiple queues on <a href="https://man.openbsd.org/vmx">vmx(4)</a>, VMware VMXNET3 Virtual Interface Controller.
223: <li>Added support for hardware vlan tagging to <a href="https://man.openbsd.org/mcx">mcx(4)</a>.
224: <li>Fixed a crash in <a href="https://man.openbsd.org/re">re(4)</a>.
1.7 jsg 225: <li>Added <a href="https://man.openbsd.org/bge">bge(4)</a> support for the BCM5719 A1 Ethernet controller.
1.1 benno 226: <li>Handled AGL interfaces on octeon, making management network ports usable on some machines.
227: <li>Implemented rss/toeplitz support for <a href="https://man.openbsd.org/ixl">ixl(4)</a> 710 chips.
228: <li>Added support for the <a href="https://man.openbsd.org/mcx">mcx(4)</a> ConnectX-6 Dx.
229: <li>Fixed a potential crash when bringing down an <a href="https://man.openbsd.org/mcx">mcx(4)</a> interface.
230: <li>Enabled multiq support for <a href="https://man.openbsd.org/ix">ix(4)</a>.
231: <li>Increased the <a href="https://man.openbsd.org/mcx">mcx(4)</a> event queue size, preventing a potential interrupt storm on the ConnectX-4.
232: <li>Fixed outbound <a href="https://man.openbsd.org/bpf">bpf(4)</a> tap on <a href="https://man.openbsd.org/ogx">ogx(4)</a> interfaces.
233: <li>Improved <a href="https://man.openbsd.org/ure">ure(4)</a> TX performance by combining multiple packets into one xfer as possible.
1.13 benno 234: <li>Added support for the RK3308 MAC to <a href="https://man.openbsd.org/dwge">dwge(4)</a>.
1.1 benno 235: </ul>
236: <li>Added or improved wireless network drivers:
237: <ul>
238: <li>Added support to <a href="https://man.openbsd.org/urtwn">urtwn(4)</a> for TP-Link TL-WN822N-EU v5 (and v4).
239: <li>Added WPA2 (CCMP) crypto offload support to <a href="https://man.openbsd.org/iwx">iwx(4)</a>.
240: <li>Fixed a fatal firmware error at run-time on <a href="https://man.openbsd.org/iwx">iwx(4)</a>.
241: <li>Added <a href="https://man.openbsd.org/bwfm">bwfm(4)</a> support for BCM4359 SDIO variants such as the AP6359SA module found on the RockPro64 WiFi module.
242: <li>Enabled critical temperature detection in <a href="https://man.openbsd.org/iwx">iwx(4)</a> firmware.
243: <li>Fixed mbuf leak in <a href="https://man.openbsd.org/urtwn">urtwn(4)</a> with frames CCMP-encrypted by hardware.
244: <li>Added support for the D-Link DWA-121 rev B1 <a href="https://man.openbsd.org/urtwn">urtwn(4)</a> device.
245: <li>Repaired <a href="https://man.openbsd.org/athn">athn(4)</a> in client mode against WPA2 access points.
246: <li>Switched <a href="https://man.openbsd.org/iwx">iwx(4)</a> from -46 to -48 firmware.
247: <li>Fixed <a href="https://man.openbsd.org/athn">athn(4)</a> use with WPA2 APs.
248: <li>Enabled background scanning on <a href="https://man.openbsd.org/iwx">iwx(4)</a> devices.
249: <li>Added <a href="https://man.openbsd.org/rge">rge(4)</a> support for newer RTL8125 chipset (RTL8125B).
250: <li>Fixed gain calibration for some <a href="https://man.openbsd.org/iwn">iwn(4)</a> devices (5000 and up).
251: <li>Added support for AX201 devices to <a href="https://man.openbsd.org/iwx">iwx(4)</a>.
252: </ul>
253:
254: <li>Removed hardware support
255: <ul>
256: <li>
257: </ul>
258:
259:
1.10 benno 260: <li>The powerpc64 architecture was added:
1.1 benno 261: <ul>
1.10 benno 262: <li><span style="color:red;">XXX add a text about current status</span>
1.1 benno 263: </ul>
264:
265:
266: <li>New <a href="https://www.openbsd.org/arm64.html">arm64</a> and <a
267: href="https://www.openbsd.org/armv7.html">armv7</a> hardware support
268: and bugfixes, including:
269: <ul>
270: <li>Added <a href="https://man.openbsd.org/amlpwrc">amlpwrc(4)</a>, a driver for the power domain controller found on Amlogic SoCs.
1.7 jsg 271: <li>Made OpenBSD boot on the ODROID-C4 with power domain in <a href="https://man.openbsd.org/amldwusb">amldwusb(4)</a>.
1.1 benno 272: <li>Added support for the SD card detect pins on the Turris Mox.
1.7 jsg 273: <li>Added support for the Marvell Xenon SDHC, used as storage on the Armada 3700 and 8040 SoCs. This should make eMMC/SD show up on the MACCHIATObin.
274: <li>Opened up a 4GB memory bus window for <a href="https://man.openbsd.org/mvneta">mvneta(4)</a> on the Marvell Armada 3700, making the second Ethernet controller/port work on the Turris Mox.
1.1 benno 275: <li>Added <a href="https://man.openbsd.org/mvkpcie">mkvpcie(4)</a>, a driver for the Aardvark PCIe controller found on the Armada 3700 SoC.
276: <li>Adjusted <a href="https://man.openbsd.org/dwpcie">dwpcie(4)</a> timing to improve likelihood of a successful PCIe link on the i.MX8MM. Avoids a failure to detect <a href="https://man.openbsd.org/em">em(4)</a> on the HummingBoard Pulse.
277: <li>Added <a href="https://man.openbsd.org/cwfg">cwfg(4)</a>, a driver for the Cellwise CW201x fuel gauge on the Pinebook Pro.
278: <li>Populated a list of 256 brightness levels as a fallback when the device tree does not specify a list, making the Pinebook Pro display work with the dtb from Linux 5.7.
279: <li>Added <a href="https://man.openbsd.org/escodec">escodec(4)</a>, a driver for the Everest ES8316 audio codec used on the Pinebook Pro.
1.6 jsg 280: <li>Added <a href="https://man.openbsd.org/rkiis">rkiis(4)</a>, a driver for the I2S controller found on the Rockchip RK3399.
1.1 benno 281: <li>Fixed an <a href="https://man.openbsd.org/sdhc">sdhc(4)</a> panic on the MACCHIATObin due to unaligned memory access.
282: <li>Added <a href="https://man.openbsd.org/bcmtmon">bcmtmon(4)</a>, a driver for the temperature sensor on the Raspberry Pi 4.
283: <li>Introduced <a href="https://man.openbsd.org/opalcons">opalcons(4)</a>, a driver for the OPAL console.
284: <li>Introduced <a href="https://man.openbsd.org/mvpp">mvpp(4)</a>, a driver for the Marvell Packet Processor v2 as used on the Armada 7K and 8K SoCs.
285: <li>Introduced <a href="https://man.openbsd.org/opalsens">opalsens(4)</a>, a driver for sensors provided by the OPAL firmware.
286: <li>Introduced <a href="https://man.openbsd.org/xics">xics(4)</a>, a driver for the OPAL virtual ICS.
287: <li>Improved PLL1(CPU_PLL) stability for the Allwinner H3/H2+.
288: </ul>
289:
290: <li>IEEE 802.11 wireless stack improvements and bugfixes:
291: <ul>
292: <li>Fixed CCMP replay checks with 11n Rx aggregation and CCMP hardware offloading.
293: <li>Offloaded CCMP (WPA2) encryption and decryption to <a href="https://man.openbsd.org/iwm">iwm(4)</a> hardware, reducing CPU load during traffic bursts.
294: <li>Adjusted to complete group key renewal immediately if no station is associated when ieee80211_proto.c runs.
295: <li>Improved processing of lost frames during 802.11 Rx aggregation.
296: <li>Allowed passage of unencrypted 802.11 frames during hardware decryption post-processing, fixing failure of some <a href="https://man.openbsd.org/ral">ral(4)</a> devices to receive packets on encrypted networks.
297: <li>Prevented a fatal <a href="https://man.openbsd.org/iwx">iwx(4)</a> firmware error when the driver moves out of AUTH state.
298: <li>Prevented a panic where <a href="https://man.openbsd.org/athn">athn(4)</a> attempted to transmit old, unencryptable frames after switching to a new group key in hostap mode.
299: <li>Prevented a use-after-free when a wireless device is detached.
300: </ul>
301:
302: <li>Generic network stack improvements and bugfixes:
303: <ul>
304: <!-- carp and pf -->
305: <li>Implemented a <a href="https://man.openbsd.org/carp">carp(4)</a> transmit bypassing the ifq on output, enqueuing the packet directly on the parent interface.
306: <li>Fixed <a href="https://man.openbsd.org/pf.conf">pf.conf(5)</a> "route-to TABLE least-states" in an anchor.
307: <li>Allowed <a href="https://man.openbsd.org/pf">pf(4)</a> to divert packets from <a href="https://man.openbsd.org/bridge">bridge(4)</a> to local socket.
308: <li>Rehashed main <a href="https://man.openbsd.org/pf">pf(4)</a> rulesets after rule expiration.
309: <li>Added a check for <a href="https://man.openbsd.org/pfctl">pfctl(8)</a> that an rtable exists when parsing the config.
310: <!-- wg -->
1.7 jsg 311: <li>Added <a href="https://man.openbsd.org/wg">wg(4)</a>, an in-kernel driver for WireGuard VPN communication.
1.1 benno 312: <!-- network pseudo drivers and other kernel network internals -->
313: <li>Protected the whole <a href="https://man.openbsd.org/pipex">pipex(4)</a> layer by NET_LOCK().
314: <li>Stopped creation of non-existent <a href="https://man.openbsd.org/bridge">bridge(4)</a> interfaces.
315: <li>Added a symmetric toeplitz implementation with integration for nics, usable through the <a href="https://man.openbsd.org/stoeplitz_to_key">stoeplitz_to_key(9)</a> hash algorithm API.
316: <li>Changed <a href="https://man.openbsd.org/tpmr">tpmr(4)</a> from ifconfig [-]trunkport to add|del synopsis.
317: <li>Filtered vlan and svlan packets by default for <a href="https://man.openbsd.org/tpmr">tpmr(4)</a>.
318: <li>Implemented IPv6 source address selection as outlined in RFC 6724 section 5.
319: <li>Set IPv6 source address selection to prefer the address with the highest preferred lifetime in case of a tie.
320: <li>Stopped preventing TCP connections to IPv6 anycast addresses.
321: <li>Added the <a href="https://man.openbsd.org/pcap-filter">pcap-filter(5)</a> "sample NUM" primitive to allow capture of 1/NUM packets.
322: <li>Added a <a href="https://man.openbsd.org/man4/route.4">ROUTE_FLAGFILTER</a> socket option for routing sockets, allowing routing daemons to opt out of receiving messages for L2 and broadcast route entries.
323: <li>Allowed SIOCSWGDPID and SIOCSWGMAXFLOW ioctls for non-root, preventing <a href="https://man.openbsd.org/switch">switch(4)</a> interfaces from appearing partially as <a href="https://man.openbsd.org/bridge">bridge(4)</a> devices for unprivileged users running <a href="https://man.openbsd.org/ifconfig">ifconfig(8)</a>.
324: <li>Modified <a href="https://man.openbsd.org/trunk">trunk(4)</a> to keep port interfaces UP on removal, matching <a href="https://man.openbsd.org/aggr">aggr(4)</a> behavior.
325: </ul>
326:
327: <li>Installer improvements:
328: <ul>
329: <li>sysupgrade(8) can now be used on systems with multiple installations and boot disks.<span style="color:red;">needs check</span>
330: <li>Ensured <a href="https://man.openbsd.org/sysupgrade">sysupgrade(8)</a> on systems with multiple root disks will proceed on the disk with auto_upgrade.conf present.
331: <li>Changed install images called *.fs to *.img to accommodate some UEFI bootloaders.
332: </ul>
333:
334: <li>Security improvements:
335: <ul>
336: <li>Added RB_GOODRANDOM passed from bootloader to kernel in boothowto, indicating confidence a "great seed" was loaded.
337: <li>Passed boothowto from the sparc64 bootloader to the kernel using .openbsd.bootdata.
338: <li>Introduced detection of /etc/random.seed reuse.
339: <li>Rewrote the entropy enqueue ring to collect damage asynchronously and adapted the dequeue to mix a selection of "best" ring entries, exponentially backing off the dequeue timeout, to compensate rapidly for weak seeding in unidentifiable conditions and ensure quality to arc4random() calls early in boot.
340: <li>Enabled PAN (Privileged Access Never) on arm64 CPUs supporting it.
341: <li>Skipped scanning file systems which are both nodev and nosuid for SUID, SGID and device files with <a href="https://man.openbsd.org/security">security(8)</a>.
342:
343:
344: <li>The following security bugs were addressed:
345: <ul>
346: <li>Fixed two out-of-bounds array accesses in ioctl code pathways in
347: <a href="https://man.openbsd.org/wscons">wscons(4)</a>.
348: <li>Fixed information leak in semctl SEM_GET.
349: <li>Prevented root from freezing the UTC clock with <a href="https://man.openbsd.org/settimeofday">settimeofday(2)</a> at securelevel 2.
350: <li>Fixed performance problems relating to tty subsystem abuse.<!-- tty.c,v 1.158 2020/07/14 14:33:03 deraadt -->
351: <li>Fixed heap corruption in the X input method client in libX11.
352: <li>Fixed potential information leak via X server pixel data uninitialized memory.
353: <li>Fixed a race condition for isoc devices during device close.
354: <li>Fixed an integer overflow in libX11 which could lead to a double free.
355: <li>Corrected multiple input validation deficits in X server extensions.
356: </ul>
357: </ul>
358:
359: <li>Routing daemons and other userland network improvements:
360: <ul>
361: <!-- bgpd -->
362: <li>In <a href="https://man.openbsd.org/bgpctl">bgpctl(8)</a>, the
363: "reload" command now takes a 'reason' argument to use as
1.7 jsg 364: Administrative Shutdown Communication to its neighbors.
1.1 benno 365: <li>Added <a href="https://man.openbsd.org/bgpctl">bgpctl(8)</a>
366: support for VPNv6 in the family option of the "show rib" command.
367: <!-- OSPF -->
368: <li>Improve performance of <a href="https://man.openbsd.org/ospfd">ospfd(8)</a>, <a href="https://man.openbsd.org/ospf6d">ospf6d(8)</a> by using the ROUTE_FLAGFILTER setsockopt to filter out routing socket messages
369: for L2 and broadcast routes.
370: <!-- ldap -->
371: <li>Modified <a href="https://man.openbsd.org/ldapd">ldapd(8)</a> use of "ldaps" and "tls" keywords to enable only the libtls defaults for protocols and ciphers. The new "legacy" keyword can be used before these keywords in <a href="https://man.openbsd.org/ldapd.conf">ldapd.conf(5)</a> to enable them all.
372: <li>Added a bsd.schema to <a href="https://man.openbsd.org/ldapd">ldapd(8)</a> including a shadowPassword and an sshPublicKey attribute which can be used to extend existing LDAP users with the additional bsdAccount objectclass.
373: <!-- snmpd -->
374: <li>Removed support for the socket keyword in <a href="https://man.openbsd.org/snmpd.conf">snmpd.conf(5)</a>.
375: <li>Allowed <a href="https://man.openbsd.org/snmp">snmp(1)</a> mibtree to take one or more arguments to be converted to a chosen output format.
376: <!-- httpd and relayd -->
377: <li>Introduced a "dark mode" for directory listings and error pages in <a href="https://man.openbsd.org/httpd">httpd(8)</a>.
378: <li>Allowed specifying -d multiple times in <a href="https://man.openbsd.org/slowcgi">slowcgi(8)</a>.
379: <li>Added <a href="https://man.openbsd.org/unveil">unveil(2)</a> to the main process of <a href="https://man.openbsd.org/relayd">relayd(8)</a>.
380: <li>Added support for non-localhost fastcgi sockets to <a href="https://man.openbsd.org/httpd.conf">httpd.conf(5)</a>.
381: <!-- rpki-client -->
382: <li>Fixed a hang in <a href="https://man.openbsd.org/rpki-client">rpki-client(8)</a> by properly waiting for exiting <a href="https://man.openbsd.org/openrsync">openrsync(1)</a> processes.
383: <li>Removed the -f (force) option in <a href="https://man.openbsd.org/rpki-client">rpki-client(8)</a>.
1.7 jsg 384: <li>Fixed <a href="https://man.openbsd.org/rpki-client">rpki-client(8)</a> return value check for OpenSSL API used during pubkey validation.
1.1 benno 385: <li>Released <a href="https://man.openbsd.org/rpki-client">rpki-client(8)</a> 6.7p1 including OpenBSD 6.7 Errata 015.
386: <li>Changed <a href="https://man.openbsd.org/rpki-client">rpki-client(8)</a> -n behavior to automatically validate the repo.
387: <li>Added a "-s timeout" feature to <a href="https://man.openbsd.org/rpki-client">rpki-client(8)</a> with a one hour default, allowing fresh attempts with <a href="https://man.openbsd.org/cron">cron(8)</a> if rpki-client gets stuck.
388: <!-- other userland -->
389: <li>Added an optional "domain name" <a href="https://man.openbsd.org/acme-client.conf">acme-client.conf(5)</a> option allowing use of multiple domain sections with the same name and creation of an rsa and an ecdsa key for the same domain name.
390: <li>Added <a href="https://man.openbsd.org/netstat">netstat(1)</a> -R to show a summary of rdomains with associated interfaces and tables.
391: <li>Defaulted to showing full IPv6 address entries in the routing tables displayed by <a href="https://man.openbsd.org/route">route(8)</a> show and <a href="https://man.openbsd.org/netstat">netstat(1)</a> -r.
392: <li>Fixed <a href="https://man.openbsd.org/dhclient">dhclient(8)</a> domain-search option processing.
393: <li>Corrected <a href="https://man.openbsd.org/route">route(8)</a> handling of ::/0 and "route add -inet 0.0.0.0 -prefixlen 0 (gateway)".
394: <li>Added initial <a href="https://man.openbsd.org/tcpdump">tcpdump(8)</a> support for handling geneve packets.
395: <li>Added <a href="https://man.openbsd.org/top">top(1)</a> "t" to toggle the display of routing tables.
396: <li>Added filtering by routing table to <a href="https://man.openbsd.org/top">top(1)</a>.
397: <li>Moved <a href="https://man.openbsd.org/ntpd">ntpd(8)</a> to unsynced mode if no replies are received for awhile due to connectivity issues.
398: <li>Made <a href="https://man.openbsd.org/slaacd">slaacd(8)</a> handle IPv6 address configuration in all rdomains in a single daemon, instead of running one daemon per rdomain.
399: <li>Added an explanation for <a href="https://man.openbsd.org/acme-client">acme-client(1)</a> account creation failure.
400: </ul>
401:
402: <li><a href="https://man.openbsd.org/ipsec">ipsec(4)</a> (and related userland programs) improvements and
403: bugfixes:
404: <ul>
405: <li>Fixed an <a href="https://man.openbsd.org/iked">iked(8)</a> policy lookup edge case for simultaneous transport and tunnel mode SAs.
406: <li>Added AES-GCM mode ciphers for IKEv2, configurable in <a href="https://man.openbsd.org/iked.conf">iked.conf(5)</a> with the new "ikesa enc" options aes-128-gcm, aes-256-gcm, aes-128-gcm-12 and aes-256-gcm-12.
407: <li>Fixed <a href="https://man.openbsd.org/iked">iked(8)</a> public key authentication interoperability with *swan and other IKEv2 implementations by making CERT and CERTREQ payloads optional.
408: <li>Prioritized incoming certificate requests by the order of CERTEQ payloads in the received message in <a href="https://man.openbsd.org/iked">iked(8)</a>.
409: <li>Added optional <a href="https://man.openbsd.org/iked">iked(8)</a> time-stamp validation for OCSP.
410: <li>Prevented concurrent CREATE_CHILD_SA and INFORMATION exchanges in <a href="https://man.openbsd.org/iked">iked(8)</a>.
411: <li>Added the new <a href="https://man.openbsd.org/iked">iked(8)</a> configuration option "set enforcesingleikesa" to limit the number of connections for each peer.
412: <li>Added a dpd_check_interval configuration option to <a href="https://man.openbsd.org/iked.conf">iked.conf(5)</a>.
413: <li>Allowed disabling of <a href="https://man.openbsd.org/iked">iked(8)</a> DPD liveness checks by setting dpd_check_interval to 0 in <a href="https://man.openbsd.org/iked.conf">iked.conf(5)</a>.
414: <li>Added a 30 second timeout for OCSP requests in <a href="https://man.openbsd.org/iked">iked(8)</a>.
415: <li>Added a new "set cert_partial_chain" config option to <a href="https://man.openbsd.org/iked.conf">iked.conf(5)</a> to allow verification of partial certificate chains if a trusted intermediate CA is found in /etc/iked/ca.
416: </ul>
417:
418: <li><a href="https://man.openbsd.org/tmux">tmux(1)</a> improvements and bug fixes:
419: <ul>
420: <li>Added -W and -T flags to command-prompt to only complete a window and a target.
421: <li>Added the 'e' key in buffer mode to open the buffer in an editor.
422: <li>Added -e for new-session to set environment variables.
423: <li>Changed refresh-client -F to -f and added -f flags to attach-session and switch-client.
424: <li>Added M-+ and M-- to expand and collapse all items in tree mode.
425: <li>Added a customize mode (C) where keys and options can be browsed and changed.
426: <li>Added a -D flag to run in non-daemonized mode.
427: <li>Added a client flag 'active-pane' which stores the active pane in the client and allows it to be changed independently from the real active pane stored in the window.
428: <li>Added an option to set the pane border lines style as single lines, double or heavy, simple or number (the pane numbers).
429: <li>Added support for pausing a <a href="https://man.openbsd.org/tmux">tmux(1)</a> pane when the output buffered for a control mode client is too far behind, controllable with refresh-client -f and -A.
430: <li>Added a <a href="https://man.openbsd.org/tmux">tmux(1)</a> -A option to pause a pane manually.
431: <li>Added <a href="https://man.openbsd.org/tmux">tmux(1)</a> -b flags to insert a window before (like the existing -a for after) to break-pane, move-window and new-window.
432: <li>Added d and D keys to <a href="https://man.openbsd.org/tmux">tmux(1)</a> customize mode to reset to defaults.
433: <li>Corrected handling of padding cells while searching in <a href="https://man.openbsd.org/tmux">tmux(1)</a>.
434: <li>Added <a href="https://man.openbsd.org/tmux">tmux(1)</a> -d option to display-message to set delay.
435: <li>Changed <a href="https://man.openbsd.org/tmux">tmux(1)</a> searching to behave more like emacs and prevented regex searching from overlapping when searching forward.
436: <li>Added the <a href="https://man.openbsd.org/tmux">tmux(1)</a> n: modifier to get the length of a format.
437: <li>Allowed a-z keys for <a href="https://man.openbsd.org/tmux">tmux(1)</a> display-panes to jump to higher-numbered panes.
438: <li>Allowed use of -N without a command to change or add a note to an existing key in <a href="https://man.openbsd.org/tmux">tmux(1)</a>.
439: </ul>
440:
441: <li>VMM/VMD and ldom/sparc64 virtualization improvements
442: <ul>
443: <li>Made <a href="https://man.openbsd.org/ldomctl">ldomctl(8)</a> "init-system -n" check vcpu and memory constraints.
444: <li>Increased the default number of ldom and ttyV devices for sparc64 from eight to sixteen.
445: <li>Fixed <a href="https://man.openbsd.org/vmd">vmd(8)</a> ns8250 lockup due to a race condition, helping to prevent linux vm crashes when the return key is held on boot.
446: <li>Prevented possible libevent state corruption in <a href="https://man.openbsd.org/vmd">vmd(8)</a>.
447: <li>Fixed a dst/src <a href="https://man.openbsd.org/iked">iked(8)</a> port configuration bug with multiple flows.
448: <li>Handled <a href="https://man.openbsd.org/iked">iked(8)</a> TEMPORARY_FAILURE notification on IKESA rekeying.
449: <li>Corrected ruleset checksum calculation to allow <a href="https://man.openbsd.org/pfsync">pfsync(4)</a> to verify rulesets are identical on all nodes.
450: </ul>
451:
452: <li>OpenSMTPD 6.8.0
453: <ul>
454: <li>Fixed an uninitialized variable and potential stack overflow with IPv6 connections in <a href="https://man.openbsd.org/smtpd">smtpd(8)</a>.
455: <li>Fixed <a href="https://man.openbsd.org/smtpd">smtpd(8)</a> handling of user names containing "@" symbols.
456: <li>Allowed handling of long lines in an <a href="https://man.openbsd.org/smtpd">smtpd(8)</a> aliases table.
457: <li>Removed <a href="https://man.openbsd.org/mail.local">mail.local(8)</a> support for world-writable mail spools.
458: </ul>
459:
460: <li>LibreSSL 3.1.1 XXX <span style="color:red;">Temporary List, replace with LibreSSL ChangeLog:</span>
461: <ul>
462: <li>Enabled the TLSv1.3 server in <a href="https://man.openbsd.org/openssl">openssl(1)</a>.
463: <li>Added -rls1_3 and -no_tls1_3 options to <a href="https://man.openbsd.org/openssl">openssl(1)</a> s_server.
464: <li>Enabled TLSv1.3 support in <a href="https://man.openbsd.org/relayd">relayd(8)</a>.
465: <li>Added a decode error alert when a TLS server provides an empty certificate list.
1.7 jsg 466: <li>Added support for TLS 1.3 server to send certificate status messages with OCSP staples.
1.1 benno 467: <li>Began looking for non-expired certificates first when building a chain, making certificate validation possible for various sites that are serving expired AddTrust certificates.
468: <li>Improved TLSv1.3 client certificate selection to allow use of EC certificates.
469: <li>Added <a href="https://man.openbsd.org/ssl">ssl(8)</a> support for additional GOST curves and aliases for 256-bit GOST curves.
470: <li>Enabled TLSv1.3 for the generic TLS_method().
471: <li>Fixed potential use-after-free and double-free issues in <a href="https://man.openbsd.org/PEM_X509_INFO_read_bio">PEM_X509_INFO_read_bio(3)</a>.
472: <li>Corrected <a href="https://man.openbsd.org/ssl">ssl(8)</a> handling of server requests for an OCSP response.
473: <li>Added P-521 to the list of curves supported by default for TLS.
474: <li>Released <a href="https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.1.4-relnotes.txt">LibreSSL 3.1.4</a>.
475: <li>Released <a href="https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.2.1-relnotes.txt">LibreSSL 3.2.1</a>.
476: <li>Fixed a memory leak in x509_constraints_extract_names.
477: </ul>
478: <ul>
479: <li>New Features
480: <ul>
481: <li>...
482: </ul>
483:
484: <li>API and Documentation Enhancements
485: <ul>
486: <li>...
487: </ul>
488:
489: <li>Compatibility Changes
490: <ul>
491: <li>...
492: </ul>
493:
494: <li>Testing and Proactive Security
495: <ul>
496: <li>...
497: </ul>
498:
499: <li>Internal Improvements
500: <ul>
501: <li>...
502: </ul>
503:
504: <li>Portable Improvements
505: <ul>
506: <li>...
507: </ul>
508:
509: <li>Bug Fixes
510: <ul>
511: <li>...
512: </ul>
513: </ul>
514:
1.14 ! benno 515: <li>OpenSSH 8.4
1.1 benno 516: <ul>
517: <li>Potentially incompatible changes.
1.14 ! benno 518: <ul>
! 519:
! 520: <li>For FIDO/U2F support, OpenSSH recommends the use of libfido2
! 521: 1.5.0 or greater. Older libraries have limited support at the expense
! 522: of disabling particular features. These include resident keys, PIN-
! 523: required keys and multiple attached tokens.
! 524:
! 525: <li><a href="https://man.openbsd.org/ssh-keygen">ssh-keygen(1)</a>:
! 526: the format of the attestation information optionally recorded when a
! 527: FIDO key is generated has changed. It now includes the authenticator
! 528: data needed to validate attestation signatures.
! 529:
! 530: <li>The API between OpenSSH and the FIDO token middleware has
! 531: changed and the SSH_SK_VERSION_MAJOR version has been incremented as a
! 532: result. Third-party middleware libraries must support the current API
! 533: version (7) to work with OpenSSH 8.4.
! 534:
! 535: <li>The portable OpenSSH distribution now requires automake to
! 536: rebuild the configure script and supporting files. This is not
! 537: required when simply building portable OpenSSH from a release tar
! 538: file.
! 539:
! 540: </ul>
1.1 benno 541: <li>New Features
1.14 ! benno 542: <ul>
! 543:
! 544: <li><a href="https://man.openbsd.org/ssh">ssh(1)</a>, <a
! 545: href="https://man.openbsd.org/ssh-keygen">ssh-keygen">ssh-keygen(1)</a>:
! 546: support for FIDO keys that require a PIN for each use. These keys may
! 547: be generated using ssh-keygen using a new "verify-required" option.
! 548: When a PIN-required key is used, the user will be prompted for a PIN
! 549: to complete the signature operation.
! 550:
! 551: <li><a href="https://man.openbsd.org/sshd">sshd(8)</a>:
! 552: authorized_keys now supports a new "verify-required" option to require
! 553: FIDO signatures assert that the token verified that the user was
! 554: present before making the signature. The FIDO protocol supports
! 555: multiple methods for user-verification, but currently OpenSSH only
! 556: supports PIN verification.
! 557:
! 558: <li><a href="https://man.openbsd.org/sshd">sshd(8)</a>, <a
! 559: href="https://man.openbsd.org/ssh-keygen">ssh-keygen(1)</a>: add
! 560: support for verifying FIDO webauthn signatures. Webauthn is a standard
! 561: for using FIDO keys in web browsers. These signatures are a slightly
! 562: different format to plain FIDO signatures and thus require explicit
! 563: support.
! 564:
! 565: <li><a href="https://man.openbsd.org/ssh">ssh(1)</a>: allow some
! 566: keywords to expand shell-style ${ENV} environment variables. The
! 567: supported keywords are CertificateFile, ControlPath, IdentityAgent and
! 568: IdentityFile, plus LocalForward and RemoteForward when used for Unix
! 569: domain socket paths.
! 570:
! 571: <li><a href="https://man.openbsd.org/ssh">ssh(1)</a>, <a
! 572: href="https://man.openbsd.org/ssh-agent">ssh-agent(1)</a>: allow some
! 573: additional control over the use of ssh-askpass via a new
! 574: $SSH_ASKPASS_REQUIRE environment variable, including forcibly enabling
! 575: and disabling its use.
! 576:
! 577: <li><a href="https://man.openbsd.org/ssh">ssh(1)</a>: allow <a
! 578: href="https://man.openbsd.org/ssh_config">ssh_config(5)</a>'s
! 579: AddKeysToAgent keyword accept a time limit for keys in addition to its
! 580: current flag options. Time- limited keys will automatically be removed
! 581: from ssh-agent after their expiry time has passed.
! 582:
! 583: <li><a href="https://man.openbsd.org/scp">scp(1)</a>, <a
! 584: href="https://man.openbsd.org/sftp">sftp(1)</a>: allow the -A flag to
! 585: explicitly enable agent forwarding in scp and sftp. The default
! 586: remains to not forward an agent, even when ssh_config enables it.
! 587:
! 588: <li><a href="https://man.openbsd.org/ssh">ssh(1)</a>: add a '%k'
! 589: TOKEN that expands to the effective HostKey of the destination. This
! 590: allows, e.g., keeping host keys in individual files using
! 591: "UserKnownHostsFile ~/.ssh/known_hosts.d/%k".
! 592:
! 593: <li><a href="https://man.openbsd.org/ssh(1): add %-TOKEN,
! 594: environment variable and tilde expansion to the UserKnownHostsFile
! 595: directive, allowing the path to be completed by the configuration.
! 596:
! 597: <li><a href="https://man.openbsd.org/ssh-keygen">ssh-keygen(1)</a>:
! 598: allow "ssh-add -d -" to read keys to be deleted from stdin.
! 599:
! 600: <li><a href="https://man.openbsd.org/sshd">sshd(8)</a>: improve
! 601: logging for MaxStartups connection throttling. sshd will now log when
! 602: it starts and stops throttling and periodically while in this state.
! 603:
! 604:
! 605: </ul>
1.1 benno 606: <li>Bugfixes
1.14 ! benno 607: <ul>
! 608:
! 609: <li><a href="https://man.openbsd.org/ssh">ssh(1)</a>, <a
! 610: href="https://man.openbsd.org/ssh-keygen">ssh-keygen(1)</a>: better
! 611: support for multiple attached FIDO tokens. In cases where OpenSSH
! 612: cannot unambiguously determine which token to direct a request to, the
! 613: user is now required to select a token by touching it. In cases of
! 614: operations that require a PIN to be verified, this avoids sending the
! 615: wrong PIN to the wrong token and incrementing the token's PIN failure
! 616: counter (tokens effectively erase their keys after too many PIN
! 617: failures).
! 618:
! 619: <li><a href="https://man.openbsd.org/sshd">sshd(8)</a>: fix Include
! 620: before Match in <a
! 621: href="https://man.openbsd.org/sshd_config">sshd_config(5)</a>.
! 622:
! 623: <li><a href="https://man.openbsd.org/ssh">ssh(1)</a>: close
! 624: stdin/out/error when forking after authentication completes ("ssh -f
! 625: ...").
! 626:
! 627: <li><a href="https://man.openbsd.org/ssh">ssh(1)</a>, <a
! 628: href="https://man.openbsd.org/sshd">sshd(8)</a>: limit the amount of
! 629: channel input data buffered, avoiding peers that advertise large
! 630: windows but are slow to read from causing high memory consumption.
! 631:
! 632: <li><a href="https://man.openbsd.org/ssh-agent">ssh-agent(1)</a>:
! 633: handle multiple requests sent in a single write() to the agent.
! 634:
! 635: <li><a href="https://man.openbsd.org/sshd">sshd(8)</a>: allow <a
! 636: href="https://man.openbsd.org/sshd_config">sshd_config(5)</a> longer than 256k
! 637:
! 638: <li><a href="https://man.openbsd.org/sshd">sshd(8)</a>: avoid
! 639: spurious "Unable to load host key" message when sshd load a private
! 640: key but no public counterpart
! 641:
! 642: <li><a href="https://man.openbsd.org/ssh">ssh(1)</a>: prefer the
! 643: default hostkey algorithm list whenever we have a hostkey that matches
! 644: its best-preference algorithm.
! 645:
! 646: <li><a href="https://man.openbsd.org/sshd">sshd(1)</a>: when
! 647: ordering the hostkey algorithms to request from a server, prefer
! 648: certificate types if the known_hosts files contain a key marked as a
! 649: @cert-authority;
! 650:
! 651: <li><a href="https://man.openbsd.org/ssh">ssh(1)</a>: perform host
! 652: key fingerprint comparisons for the "Are you sure you want to continue
! 653: connecting (yes/no/[fingerprint])?" prompt with case sensitivity.
! 654:
! 655: <li><a href="https://man.openbsd.org/sshd">sshd(8)</a>: ensure that
! 656: address/masklen mismatches in sshd_config yield fatal errors at daemon
! 657: start time rather than later when they are evaluated.
! 658:
! 659: <li><a href="https://man.openbsd.org/ssh-keygen">ssh-keygen(1)</a>:
! 660: ensure that certificate extensions are lexically sorted. Previously if
! 661: the user specified a custom extension then the everything would be in
! 662: order except the custom ones.
! 663:
! 664: <li><a href="https://man.openbsd.org/ssh">ssh(1)</a>: also compare
! 665: username when checking for JumpHost loops.
! 666:
! 667: <li><a href="https://man.openbsd.org/ssh-keygen">ssh-keygen(1)</a>:
! 668: preserve group/world read permission on known_hosts files across runs
! 669: of "ssh-keygen -Rf /path". The old behaviour was to remove all rights
! 670: for group/other.
! 671:
! 672: <li><a href="https://man.openbsd.org/ssh-keygen">ssh-keygen(1)</a>:
! 673: Mention the [-a rounds] flag in the ssh-keygen manual page and
! 674: usage().
! 675:
! 676: <li><a href="https://man.openbsd.org/sshd">sshd(8)</a>: explicitly construct path to ~/.ssh/rc rather than
! 677: relying on it being relative to the current directory, so that it
! 678: can still be found if the shell startup changes its directory.
! 679:
! 680: <li><a href="https://man.openbsd.org/sshd">sshd(8)</a>: when
! 681: redirecting sshd's log output to a file, undo this redirection after
! 682: the session child process is forked(). Fixes missing log messages when
! 683: using this feature under some circumstances.
! 684:
! 685: <li><a href="https://man.openbsd.org/sshd">sshd(8)</a>: start
! 686: ClientAliveInterval bookkeeping before first pass through select()
! 687: loop; fixed theoretical case where busy sshd may ignore timeouts from
! 688: client.
! 689:
! 690: <li><a href="https://man.openbsd.org/ssh">ssh(1)</a>: only reset the
! 691: ServerAliveInterval check when we receive traffic from the server and
! 692: ignore traffic from a port forwarding client, preventing a client from
! 693: keeping a connection alive when it should be terminated.
! 694:
! 695: <li><a href="https://man.openbsd.org/ssh-keygen">ssh-keygen(1)</a>:
! 696: avoid spurious error message when ssh-keygen creates files outside
! 697: ~/.ssh
! 698:
! 699: <li><a
! 700: href="https://man.openbsd.org/sftp-client">sftp-client(1)</a>: fix
! 701: off-by-one error that caused sftp downloads to make one more
! 702: concurrent request that desired. This prevented using <a
! 703: href="https://man.openbsd.org/sftp">sftp(1)</a> in unpipelined
! 704: request/response mode, which is useful when debugging.
! 705:
! 706: <li><a href="https://man.openbsd.org/ssh">ssh(1)</a>, <a
! 707: href="https://man.openbsd.org/sshd">sshd(8)</a>: handle EINTR in
! 708: waitfd() and timeout_connect() helpers.
! 709:
! 710: <li><a href="https://man.openbsd.org/ssh">ssh(1)</a>, <a
! 711: href="https://man.openbsd.org/ssh-keygen">ssh-keygen(1)</a>: defer
! 712: creation of ~/.ssh until we attempt to write to it so we don't leave
! 713: an empty .ssh directory when it's not needed.
! 714:
! 715: <li><a href="https://man.openbsd.org/ssh">ssh(1)</a>, <a
! 716: href="https://man.openbsd.org/sshd">sshd(8)</a>: fix multiplier when
! 717: parsing time specifications when handling seconds after other units.
! 718:
! 719: </ul>
1.1 benno 720: </ul>
721:
722: <li>Ports and packages:
723: <p>The package system provides an easy way to install 3rd party software. New features include:
724: <ul>
725: <li>...
726: </ul>
727:
728: <p>Many pre-built packages for each architecture:
729: <!-- number of FTP packages minus SHA256, SHA256.sig, index.txt -->
730: <ul style="column-count: 3">
731: <li>aarch64: XXX
1.11 sthen 732: <li>amd64: 11234
1.1 benno 733: <li>arm: XXX
1.11 sthen 734: <li>i386: 10548
1.1 benno 735: <li>mips64: XXX
736: <li>mips64el: XXX
737: <li>powerpc: XXX
738: <li>sparc64: XXX
739: </ul>
740:
741: <li>As usual, steady improvements in manual pages and other documentation.
742:
743: <li>The system includes the following major components from outside suppliers: XXX
744: <ul><span style="color:red;">this list needs checking</span>
745: <li>Xenocara (based on X.Org 7.7 with xserver 1.20.8 + patches,
1.4 jsg 746: freetype 2.10.2, fontconfig 2.12.4, Mesa 20.0.8, xterm 351,
1.1 benno 747: xkeyboard-config 2.20 and more)
748: <li>LLVM/Clang 10.0.1 (+ patches)
749: <li>GCC 4.2.1 (+ patches) and 3.3.6 (+ patches)
750: <li>Perl 5.30.3 (+ patches)
751: <li>NSD 4.3.2
752: <li>Unbound 1.11.0
753: <li>Ncurses 5.7
754: <li>Binutils 2.17 (+ patches)
755: <li>Gdb 6.3 (+ patches)
756: <li>Awk August 7, 2020 version
757: <li>Expat 2.2.8
758: </ul>
759:
760: <ul><span style="color:red;">XXX. We did not list these before, i got them from plus.html. Do we want them here? libfido2 version looks funny.</span>
761: <li>Updated libpcap to 9.0.
762: <li>Updated Spleen kernel fonts to version 1.8.2.
763: <li>Updated libcbor to v0.7.0.
764: <li>Updated <a href="https://man.openbsd.org/xkbcomp">xkbcomp(1)</a> to 1.4.3.
765: <li>Updated to libfido2 46710ac06.
766: </ul>
767:
768:
769: </ul>
770: </section>
771:
772: <hr>
773:
774: <section id=install>
775: <h3>How to install</h3>
776: <p>
777: Please refer to the following files on the mirror site for
778: extensive details on how to install OpenBSD 6.8 on your machine:
779:
780: <ul>
781: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.8/alpha/INSTALL.alpha">
782: .../OpenBSD/6.8/alpha/INSTALL.alpha</a>
783: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.8/amd64/INSTALL.amd64">
784: .../OpenBSD/6.8/amd64/INSTALL.amd64</a>
785: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.8/arm64/INSTALL.arm64">
786: .../OpenBSD/6.8/arm64/INSTALL.arm64</a>
787: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.8/armv7/INSTALL.armv7">
788: .../OpenBSD/6.8/armv7/INSTALL.armv7</a>
789: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.8/hppa/INSTALL.hppa">
790: .../OpenBSD/6.8/hppa/INSTALL.hppa</a>
791: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.8/i386/INSTALL.i386">
792: .../OpenBSD/6.8/i386/INSTALL.i386</a>
793: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.8/landisk/INSTALL.landisk">
794: .../OpenBSD/6.8/landisk/INSTALL.landisk</a>
795: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.8/loongson/INSTALL.loongson">
796: .../OpenBSD/6.8/loongson/INSTALL.loongson</a>
797: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.8/luna88k/INSTALL.luna88k">
798: .../OpenBSD/6.8/luna88k/INSTALL.luna88k</a>
799: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.8/macppc/INSTALL.macppc">
800: .../OpenBSD/6.8/macppc/INSTALL.macppc</a>
801: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.8/octeon/INSTALL.octeon">
802: .../OpenBSD/6.8/octeon/INSTALL.octeon</a>
803: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.8/powerpc64/INSTALL.powerpc64">
804: .../OpenBSD/6.8/octeon/INSTALL.powerpc64</a>
805: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.8/sgi/INSTALL.sgi">
806: .../OpenBSD/6.8/sgi/INSTALL.sgi</a>
807: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.8/sparc64/INSTALL.sparc64">
808: .../OpenBSD/6.8/sparc64/INSTALL.sparc64</a>
809: </ul>
810: </section>
811:
812: <hr>
813:
814: <section id=quickinstall>
815: <p>
816: Quick installer information for people familiar with OpenBSD, and the use of
817: the "<a href="https://man.openbsd.org/disklabel.8">disklabel</a> -E" command.
818: If you are at all confused when installing OpenBSD, read the relevant
819: INSTALL.* file as listed above!
820:
821: <h3>OpenBSD/alpha:</h3>
822:
823: <p>
824: If your machine can boot from CD, you can write <i>install68.iso</i> or
825: <i>cd68.iso</i> to a CD and boot from it.
826: Refer to INSTALL.alpha for more details.
827:
828: <h3>OpenBSD/amd64:</h3>
829:
830: <p>
831: If your machine can boot from CD, you can write <i>install68.iso</i> or
832: <i>cd68.iso</i> to a CD and boot from it.
833: You may need to adjust your BIOS options first.
834:
835: <p>
836: If your machine can boot from USB, you can write <i>install68.fs</i> or
837: <i>miniroot68.fs</i> to a USB stick and boot from it.
838:
839: <p>
840: If you can't boot from a CD, floppy disk, or USB,
841: you can install across the network using PXE as described in the included
842: INSTALL.amd64 document.
843:
844: <p>
845: If you are planning to dual boot OpenBSD with another OS, you will need to
846: read INSTALL.amd64.
847:
848: <h3>OpenBSD/arm64:</h3>
849:
850: <p>
851: Write <i>miniroot68.fs</i> to a disk and boot from it after connecting
852: to the serial console. Refer to INSTALL.arm64 for more details.
853:
854: <h3>OpenBSD/armv7:</h3>
855:
856: <p>
857: Write a system specific miniroot to an SD card and boot from it after connecting
858: to the serial console. Refer to INSTALL.armv7 for more details.
859:
860: <h3>OpenBSD/hppa:</h3>
861:
862: <p>
863: Boot over the network by following the instructions in INSTALL.hppa or the
864: <a href="hppa.html#install">hppa platform page</a>.
865:
866: <h3>OpenBSD/i386:</h3>
867:
868: <p>
869: If your machine can boot from CD, you can write <i>install68.iso</i> or
870: <i>cd68.iso</i> to a CD and boot from it.
871: You may need to adjust your BIOS options first.
872:
873: <p>
874: If your machine can boot from USB, you can write <i>install68.fs</i> or
875: <i>miniroot68.fs</i> to a USB stick and boot from it.
876:
877: <p>
878: If you can't boot from a CD, floppy disk, or USB,
879: you can install across the network using PXE as described in
880: the included INSTALL.i386 document.
881:
882: <p>
883: If you are planning on dual booting OpenBSD with another OS, you will need to
884: read INSTALL.i386.
885:
886: <h3>OpenBSD/landisk:</h3>
887:
888: <p>
889: Write <i>miniroot68.fs</i> to the start of the CF
890: or disk, and boot normally.
891:
892: <h3>OpenBSD/loongson:</h3>
893:
894: <p>
895: Write <i>miniroot68.fs</i> to a USB stick and boot bsd.rd from it
896: or boot bsd.rd via tftp.
897: Refer to the instructions in INSTALL.loongson for more details.
898:
899: <h3>OpenBSD/luna88k:</h3>
900:
901: <p>
902: Copy 'boot' and 'bsd.rd' to a Mach or UniOS partition, and boot the bootloader
903: from the PROM, and then bsd.rd from the bootloader.
904: Refer to the instructions in INSTALL.luna88k for more details.
905:
906: <h3>OpenBSD/macppc:</h3>
907:
908: <p>
909: Burn the image from a mirror site to a CDROM, and power on your machine
910: while holding down the <i>C</i> key until the display turns on and
911: shows <i>OpenBSD/macppc boot</i>.
912:
913: <p>
914: Alternatively, at the Open Firmware prompt, enter <i>boot cd:,ofwboot
915: /6.8/macppc/bsd.rd</i>
916:
917: <h3>OpenBSD/octeon:</h3>
918:
919: <p>
920: After connecting a serial port, boot bsd.rd over the network via DHCP/tftp.
921: Refer to the instructions in INSTALL.octeon for more details.
922:
923: <h3>OpenBSD/powerpc64:</h3>
924:
925: <p>
926: After XXX
927: Refer to the instructions in INSTALL.powerpc64 for more details.
928:
929: <h3>OpenBSD/sgi:</h3>
930:
931: <p>
932: To install, burn cd68.iso on a CD-R, put it in the CD drive of your
933: machine and select <i>Install System Software</i> from the System Maintenance
934: menu. Indigo/Indy/Indigo2 (R4000) systems will not boot automatically from
935: CD-ROM, and need a proper invocation from the PROM prompt.
936: Refer to the instructions in INSTALL.sgi for more details.
937:
938: <p>
939: If your machine doesn't have a CD drive, you can setup a DHCP/tftp network
940: server, and boot using "bootp()/bsd.rd.IP##" using the kernel matching your
941: system type. Refer to the instructions in INSTALL.sgi for more details.
942:
943: <h3>OpenBSD/sparc64:</h3>
944:
945: <p>
946: Burn the image from a mirror site to a CDROM, boot from it, and type
947: <i>boot cdrom</i>.
948:
949: <p>
950: If this doesn't work, or if you don't have a CDROM drive, you can write
951: <i>floppy68.fs</i> or <i>floppyB68.fs</i>
952: (depending on your machine) to a floppy and boot it with <i>boot
953: floppy</i>. Refer to INSTALL.sparc64 for details.
954:
955: <p>
956: Make sure you use a properly formatted floppy with NO BAD BLOCKS or your install
957: will most likely fail.
958:
959: <p>
960: You can also write <i>miniroot68.fs</i> to the swap partition on
961: the disk and boot with <i>boot disk:b</i>.
962:
963: <p>
964: If nothing works, you can boot over the network as described in INSTALL.sparc64.
965: </section>
966:
967: <hr>
968:
969: <section id=upgrade>
970: <h3>How to upgrade</h3>
971: <p>
1.2 benno 972: If you already have an OpenBSD 6.7 system, and do not want to reinstall,
1.1 benno 973: upgrade instructions and advice can be found in the
974: <a href="faq/upgrade68.html">Upgrade Guide</a>.
975: </section>
976:
977: <hr>
978:
979: <section id=sourcecode>
980: <h3>Notes about the source code</h3>
981: <p>
982: <code>src.tar.gz</code> contains a source archive starting at <code>/usr/src</code>.
983: This file contains everything you need except for the kernel sources,
984: which are in a separate archive.
985: To extract:
986: <blockquote><pre>
987: # <kbd>mkdir -p /usr/src</kbd>
988: # <kbd>cd /usr/src</kbd>
989: # <kbd>tar xvfz /tmp/src.tar.gz</kbd>
990: </pre></blockquote>
991: <p>
992: <code>sys.tar.gz</code> contains a source archive starting at <code>/usr/src/sys</code>.
993: This file contains all the kernel sources you need to rebuild kernels.
994: To extract:
995: <blockquote><pre>
996: # <kbd>mkdir -p /usr/src/sys</kbd>
997: # <kbd>cd /usr/src</kbd>
998: # <kbd>tar xvfz /tmp/sys.tar.gz</kbd>
999: </pre></blockquote>
1000: <p>
1001: Both of these trees are a regular CVS checkout. Using these trees it
1002: is possible to get a head-start on using the anoncvs servers as
1003: described <a href="anoncvs.html">here</a>.
1004: Using these files
1005: results in a much faster initial CVS update than you could expect from
1006: a fresh checkout of the full OpenBSD source tree.
1007: </section>
1008:
1009: <hr>
1010:
1011: <section id=ports>
1012: <h3>Ports Tree</h3>
1013: <p>
1014: A ports tree archive is also provided. To extract:
1015: <blockquote><pre>
1016: # <kbd>cd /usr</kbd>
1017: # <kbd>tar xvfz /tmp/ports.tar.gz</kbd>
1018: </pre></blockquote>
1019: <p>
1020: Go read the <a href="faq/ports/index.html">ports</a> page
1021: if you know nothing about ports
1022: at this point. This text is not a manual of how to use ports.
1023: Rather, it is a set of notes meant to kickstart the user on the
1024: OpenBSD ports system.
1025: <p>
1026: The <i>ports/</i> directory represents a CVS checkout of our ports.
1027: As with our complete source tree, our ports tree is available via
1028: <a href="anoncvs.html">AnonCVS</a>.
1029: So, in order to keep up to date with the -stable branch, you must make
1030: the <i>ports/</i> tree available on a read-write medium and update the tree
1031: with a command like:
1032: <blockquote><pre>
1033: # <kbd>cd /usr/ports</kbd>
1034: # <kbd>cvs -d anoncvs@server.openbsd.org:/cvs update -Pd -rOPENBSD_6_8</kbd>
1035: </pre></blockquote>
1036: <p>
1037: [Of course, you must replace the server name here with a nearby anoncvs
1038: server.]
1039: <p>
1040: Note that most ports are available as packages on our mirrors. Updated
1041: ports for the 6.8 release will be made available if problems arise.
1042: <p>
1043: If you're interested in seeing a port added, would like to help out, or just
1044: would like to know more, the mailing list
1045: <a href="mail.html">ports@openbsd.org</a> is a good place to know.
1046: </section>
![[BACK]](/icons/back.gif){kind=icon}
Return to 68.html CVS log ![[TXT]](/icons/text.gif){kind=icon}
![[DIR]](/icons/dir.gif){kind=icon}
Up to [local] / www