===================================================================
RCS file: /cvsrepo/anoncvs/cvs/www/70.html,v
retrieving revision 1.46
retrieving revision 1.47
diff -c -r1.46 -r1.47
*** www/70.html	2021/10/02 15:44:46	1.46
--- www/70.html	2021/10/02 15:48:08	1.47
***************
*** 419,451 ****
  
  <li>Installer and upgrade improvements:
    <ul>
! 	<li>Checked the installer's /tmp/i/hostname.* files for a configured IP address so that configurations without a broadcast address are detected as well.
  	<li>Handled "inet autoconf" in the ramdisk.
! 	<li>Allowed <a href="https://man.openbsd.org/cad.4">cad(4)</a> recognition as boot interface when using netboot, making autoinstall/upgrade work.
! 	<li>Introduced a short wait in <a href="https://man.openbsd.org/rc.8">rc(8)</a> after <a href="https://man.openbsd.org/netstart.8">netstart(8)</a> finishes until an IPv4 or IPv6 default route is present before continuing boot. Fixed setups depending on working network and DNS resolution during early boot when using autoconfiguration (<a href="https://man.openbsd.org/dhcpleased.8">dhcpleased(8)</a> or <a href="https://man.openbsd.org/slaacd.8">slaacd(8)</a>).
! 	<li>Made <a href="https://man.openbsd.org/fdisk.8">fdisk(8)</a> always create an EFI SYS partition if the -b option is specified when initializing a GPT.
! 	<li>Allowed (w)hole disk allocation for GPT disks in arm64, using <a href="https://man.openbsd.org/fdisk.8">fdisk(8)</a> -A when an Apple APFS ISC partition is detected and fdisk -ig otherwise. Created EFI SYS boot partitions only on ROOTDISK GPT disks.
! 	<li>Added <a href="https://man.openbsd.org/installboot.8">installboot(8)</a> "-p" to prepare by creating a new filesystem on the partition reserved for the bootloader on relevant architectures.
! 	<li>Added GPT support to <a href="armv7.html">armv7</a> <a href="https://man.openbsd.org/installboot.8">installboot(8)</a>.
! 	<li>Added the Spleen 12x24 and 16x32 font on amd64's RAMDISK_CD and RAMDISK kernels.
! 	<li>Use <a href="https://man.openbsd.org/installboot.8">installboot(8)</a> on arm64 ramdisks.
! 	<li>Enable <a href="https://man.openbsd.org/dhcpleased.8">dhcpleased(8)</a> on
! 		ramdisks, and activate <a href="https://man.openbsd.org/resolvd.8">resolvd(8)</a>,
! 		replacing <a href="https://man.openbsd.org/dhclient.8">dhclient(8)</a>.
! 	<li>Enable <a href="https://man.openbsd.org/slaacd.8">sclaacd(8)</a> to configure nameservers on ramsdisks.
!  </ul>
  
  <li>Security improvements:
    <ul>
  	<li>Moved objcopy to base set to allow KARL to work on all installs.
! 	<li>Added <a href="https://man.openbsd.org/unveil.2">unveil(2)</a> calls to xterm in the case where there are no exec-formatted or exec-selected resources set.
! 	<li>Changed usage of %n from a syslog warning to syslog and abort for <a href="https://man.openbsd.org/printf.3">printf(3)</a> (and associated variants).
  	<li>Made kernel stop all threads when terminating via pledge_fail().
    </ul>
  
  <li>Routing daemons and other userland network improvements:
    <ul>
!     <li>The <a href="https://man.openbsd.org/bgpd.8">bgpd(8)</a> daemon saw the following changes:
      <ul>
  	<li>Stop processing queued UPDATES when the max-prefix limit was reached.
  	<li>Improved negotiation for route refresh, graceful restart and
--- 419,482 ----
  
  <li>Installer and upgrade improvements:
    <ul>
! 	<li>Checked the installer's /tmp/i/hostname.* files for a configured
! 		IP address so that configurations without a broadcast address are
! 		detected as well.
  	<li>Handled "inet autoconf" in the ramdisk.
! 	<li>Allowed <a href="https://man.openbsd.org/cad.4">cad(4)</a>
! 		recognition as boot interface when using netboot, making
! 		autoinstall/upgrade work.
! 	<li>Introduced a short wait in <a
! 		href="https://man.openbsd.org/rc.8">rc(8)</a> after <a
! 		href="https://man.openbsd.org/netstart.8">netstart(8)</a> finishes
! 		until an IPv4 or IPv6 default route is present before continuing boot.
! 		Fixed setups depending on working network and DNS resolution during
! 		early boot when using autoconfiguration (<a
! 		href="https://man.openbsd.org/dhcpleased.8">dhcpleased(8)</a> or <a
! 		href="https://man.openbsd.org/slaacd.8">slaacd(8)</a>).
! 	<li>Made <a href="https://man.openbsd.org/fdisk.8">fdisk(8)</a>
! 		always create an EFI SYS partition if the -b option is specified when
! 		initializing a GPT.
! 	<li>Allowed (w)hole disk allocation for GPT disks in arm64, using <a
! 		href="https://man.openbsd.org/fdisk.8">fdisk(8)</a> -A when an Apple
! 		APFS ISC partition is detected and fdisk -ig otherwise. Created EFI
! 		SYS boot partitions only on ROOTDISK GPT disks.
! 	<li>Added <a
! 		href="https://man.openbsd.org/installboot.8">installboot(8)</a> "-p"
! 		to prepare by creating a new filesystem on the partition reserved for
! 		the bootloader on relevant architectures.
! 	<li>Added GPT support to <a href="armv7.html">armv7</a> <a
! 		href="https://man.openbsd.org/installboot.8">installboot(8)</a>.
! 	<li>Added the Spleen 12x24 and 16x32 font on amd64's RAMDISK_CD and
! 		RAMDISK kernels.
! 	<li>Use <a
! 		href="https://man.openbsd.org/installboot.8">installboot(8)</a> on
! 		arm64 ramdisks.
! 	<li>Enable <a
! 		href="https://man.openbsd.org/dhcpleased.8">dhcpleased(8)</a> on
! 		ramdisks, and activate <a
! 		href="https://man.openbsd.org/resolvd.8">resolvd(8)</a>, replacing <a
! 		href="https://man.openbsd.org/dhclient.8">dhclient(8)</a>.
! 	<li>Enable <a href="https://man.openbsd.org/slaacd.8">sclaacd(8)</a>
! 		to configure nameservers on ramsdisks.
!   </ul>
  
  <li>Security improvements:
    <ul>
  	<li>Moved objcopy to base set to allow KARL to work on all installs.
! 	<li>Added <a href="https://man.openbsd.org/unveil.2">unveil(2)</a>
! 		calls to xterm in the case where there are no exec-formatted or
! 		exec-selected resources set.
! 	<li>Changed usage of %n from a syslog warning to syslog and abort for
! 		<a href="https://man.openbsd.org/printf.3">printf(3)</a> (and
! 		associated variants).
  	<li>Made kernel stop all threads when terminating via pledge_fail().
    </ul>
  
  <li>Routing daemons and other userland network improvements:
    <ul>
!     <li>The <a href="https://man.openbsd.org/bgpd.8">bgpd(8)</a>
! 	daemon saw the following changes:
      <ul>
  	<li>Stop processing queued UPDATES when the max-prefix limit was reached.
  	<li>Improved negotiation for route refresh, graceful restart and
***************
*** 468,474 ****
  	<li>Improved output of Adj-RIB-Out by updating nexthop and ASPATH before
  		adding the prefix to the RIB. This improves `bgpctl show rib out`
  		output.
! 	<li>Added command line option to both <a href="https://man.openbsd.org/bgpd.8">bgpd(8)</a> and <a href="https://man.openbsd.org/bgpctl.8">bgpctl(8)</a> to show the version
  	<li>Added support for RFC 9072 - Extended Optional Parameters Lenght for
  		BGP OPEN Message
  	<li>Added support for RFC 8050 - MRT Format with BGP Additional Path Extensions
--- 499,508 ----
  	<li>Improved output of Adj-RIB-Out by updating nexthop and ASPATH before
  		adding the prefix to the RIB. This improves `bgpctl show rib out`
  		output.
! 	<li>Added command line option to both <a
! 		href="https://man.openbsd.org/bgpd.8">bgpd(8)</a> and <a
! 		href="https://man.openbsd.org/bgpctl.8">bgpctl(8)</a> to show the
! 		version.
  	<li>Added support for RFC 9072 - Extended Optional Parameters Lenght for
  		BGP OPEN Message
  	<li>Added support for RFC 8050 - MRT Format with BGP Additional Path Extensions
***************
*** 535,542 ****
  	   jumping backwards as synced repository.
  	<li>Made -R (rsync only) also apply to the fetching of TA files.
  	<li>Only sync *.{cer,crl,gbr,mft,roa} files via rsync and exclude all others.
! 	<li>When producing output for <a href="https://man.openbsd.org/bgpd.8">bgpd(8)</a>, make use of the 'roa-set
! 	   expires' attribute to prevent machines from loading outdated roa-sets.
  	<li>In RRDP, limited the number of deltas to 300 per repo. If more deltas
  	   exist, downloading a full snapshot is faster.
  	<li>Limited the validation depth of X509 certificate chains to 12, double
--- 569,578 ----
  	   jumping backwards as synced repository.
  	<li>Made -R (rsync only) also apply to the fetching of TA files.
  	<li>Only sync *.{cer,crl,gbr,mft,roa} files via rsync and exclude all others.
! 	<li>When producing output for <a
! 		href="https://man.openbsd.org/bgpd.8">bgpd(8)</a>, make use of the
! 		'roa-set expires' attribute to prevent machines from loading outdated
! 		roa-sets.
  	<li>In RRDP, limited the number of deltas to 300 per repo. If more deltas
  	   exist, downloading a full snapshot is faster.
  	<li>Limited the validation depth of X509 certificate chains to 12, double
***************
*** 589,596 ****
      <li>Other userland network changes:
      <ul>
  	<li>Fixed <a href="https://man.openbsd.org/acme-client.1">acme-client(1)</a> SAN generation for CSRs.
- 
- 
  	<li>Added <a href="https://man.openbsd.org/pledge.8">pledge(8)</a> for <a href="https://man.openbsd.org/ftpd.8">ftpd(8)</a> user processes.
  	<li>Allowed router solicitations from the unspecified address (::) in <a href="https://man.openbsd.org/rad.8">rad(8)</a>.
  	<li>Altered <a href="https://man.openbsd.org/slowcgi.8">slowcgi(8)</a> so it no longer sends debug logging to syslog unless debug logging is requested via the new -v flag.
--- 625,630 ----