www/71.html - diff

Return to 71.html CVS log

Up to [local] / www

Diff for /www/71.html between version 1.10 and 1.11

version 1.10, 2022/04/09 10:41:57

version 1.11, 2022/04/09 12:01:26

Line 83

<ul>

<li>Added <a href="https://man.openbsd.org/aplspi.4">aplspi(4)</a>, a driver for the SPI controller found on the Apple M1 SoC.

<li>Added <a href="https://man.openbsd.org/aplhidev.4">aplhidev(4)</a> support for the keyboard/touchpad on Apple M1 laptops.

<li>Introduced <a href="https://man.openbsd.org/aplpmgr.4">aplpmgr(4)</a>, a driver for the power management controller found on various Apple SoCs.

<li>Introduced <a href="https://man.openbsd.org/aplmbox.4">aplmbox(4)</a>, a driver for the mailbox that provides a communication channel with additional cores integrated on Apple SoCs.

<li>Introduced <a href="https://man.openbsd.org/apliic.4">apliic(4)</a>, a driver for the I2C controller found on various Apple SoCs.

<li>Added the chip ids used on Apple M1 Pro/Max and Apple T2 Macs to <a href="https://man.openbsd.org/bwfm.4">bwfm(4)</a>.

<li>Rewrote arm64 kernel FPU handling code to fix the random crashes seen with SMP kernels on Apple M1.

<li>Restricted the <a href="https://man.openbsd.org/pci.4">pci(4)</a> ioctl interface to devices detected by the kernel, preventing Xorg PCI probes from breaking the WiFi chip on M1 macs.

<li>Introduced <a href="https://man.openbsd.org/aplsmc.4">aplsmc(4)</a>, a driver for the SMC found on Apple M1 SoCs.

<li>Introduced <a href="https://man.openbsd.org/aplnco.4">aplnco(4)</a>, a driver for the Numerically-controlled oscillator (NCO) clock which drives the audio clocks on Apple silicon.

<li>Introduced <a href="https://man.openbsd.org/tascodec.4">tascodec(4)</a>, a driver for the TI TAS2770/TAS5770 digital audio amplifier codec found on Apple M1 Macs.

</ul>

<li>Introduced <a

Line 96

Line 105

<li>Added <a href="https://man.openbsd.org/gpiokeys.4">gpiokeys(4)</a>

for arm64, a driver which handles events triggered by GPIO keys such

as lid status and power button.

<li>Added support for controlling keyboard LEDs to <a

href="https://man.openbsd.org/aplhidev.4">aplhidev(4)</a>.

<li>Added pclk clock used by <a

href="https://man.openbsd.org/dwdog.4">dwdog(4)</a> on RK3399 to <a

href="https://man.openbsd.org/rkclock.4">rkclock(4)</a>.

<li>Introduced <a href="https://man.openbsd.org/mpfclock.4">mpfclock(4)</a>, a driver for the PolarFire SoC MSS clock controller.

<li>Implemented powerdown in arm64.

<li>Introduced <a href="https://man.openbsd.org/cdsdhc.4">cdsdhc(4)</a>, a driver for the Cadence SD/SDIO/eMMC host controller.

</ul>

<li>Changes on other architectures:

<ul>

<li>Enabled enforcing of RLIMIT_MEMLOCK on powerpc64.

<li>Enabled <a href="https://man.openbsd.org/uhid.4">uhid(4)</a>/<a href="https://man.openbsd.org/fido.4">fido(4)</a> on riscv64.

<li>Fixed booting from an IDE block device on the Sun Blade 100.

<li>Fixed <a href="https://man.openbsd.org/radeondrm.4">radeondrm(4)</a> console colors on sparc64.

<li>Added missing locking to <a href="https://man.openbsd.org/pmap_extract.9">pmap_extract(9)</a> and <a href="https://man.openbsd.org/pmap_unwire.9">pmap_unwire(9)</a> on arm64 and riscv64.

<li>Enabled <a href="https://man.openbsd.org/dt.4">dt(4)</a> on macppc.

<li>Increased <a href="https://man.openbsd.org/ddb.1">ddb(1)</a> access to registers on macppc and powerpc64.

</ul>

Line 118

Line 142

hw.perfpolicy to "auto" at startup, defaulting to 100%

performance with AC power connected and using the auto algorithm when

on battery.

<li>Switched to using long filenames by default with <a

href="https://man.openbsd.org/mount_msdos.8">mount_msdos(8)</a> on FAT

filesystems.

<li>Fixed <a href="https://man.openbsd.org/hilkbd.4">hilkbd(4)</a> Swedish keyboard layout on non-PS/2 style keyboards.

<li>Made futexes work in shared anonymous memory.

<li>Aligned memory allocation for USB device drivers and USB HC drivers, enlarging the USB memory pool.

<li>Reworked garbage collector for <a href="https://man.openbsd.org/unix.4">unix(4)</a> sockets to prevent potential kernel panics.

<li>Fixed hibernate setups where removal of a <a

href="https://man.openbsd.org/umass.4">umass(4)</a> device results in

a renumbered <a

href="https://man.openbsd.org/softraid.4">softraid(4)</a> boot device.

<li>Fix hibernate on newer hardware by allowing more memory ranges.

</ul>

<li>SMP Improvements

Line 132

Line 169

<li>Unlocked top part of UVM fault hander on mips64.

<li>Unlocked the <a href="https://man.openbsd.org/kevent.2">kevent(2)</a> system call.

<li>Made the kqread event filter MP-safe.

<li>Reduced the time overhead of <a

href="https://man.openbsd.org/kqueue.2">kqueue(2)</a>-based <a

href="https://man.openbsd.org/poll.2">poll(2)</a> and <a

href="https://man.openbsd.org/select.2">select(2)</a> systems calls by

keeping knotes between the system calls.

<li>Unlocked <a href="https://man.openbsd.org/accept.2">accept(2)</a>

and <a href="https://man.openbsd.org/accept4.2">accept4(2)</a>

syscalls.

<li>Prevented <a

href="https://man.openbsd.org/select.2">select(2)</a> from blocking if

registering found pending events.

<li>Protected <a href="https://man.openbsd.org/ipsec.4">ipsec(4)</a>

input and output with the kernel lock to allow forwarding of non-ipsec

traffic in parallel.

<li>Unlocked the bottom part of the uvm fault handler.

<li>Unlocked <a href="https://man.openbsd.org/getpeername.2">getpeername(2)</a>.

<li>Made <a href="https://man.openbsd.org/bpf.4">bpf(4)</a> MP-safe.

</ul>

Line 171

Line 219

running guests.

<li>Added a new login class for <a href="https://man.openbsd.org/vmd.8">

vmd(8)</a> on amd64.

<li>Fixed spurious abort of a VM by <a

href="https://man.openbsd.org/vmd.8">vmd(8)</a> when the scheduler

moves a VM to a different core while it is sleeping on a lock.

<li>Fixed broken <a href="https://man.openbsd.org/vmd.8">vmd(8)</a>

"boot device cdrom" feature after a fix in seabios.

<li>Reintroduced support for <a

href="https://man.openbsd.org/vmctl.8">vmctl(8)</a> <code>start -B net

-b bsd.rd</code>, which emulates a PXE boot and performs an

autoinstall.

<li>Made <a href="https://man.openbsd.org/vmm.4">vmm(4)</a> <a href="https://man.openbsd.org/dt.4">dt(4)</a> tracepoints amd64-only.

</ul>

<li>Various new userland features:

<ul>

<li>Added <a

href="https://man.openbsd.org/realpath.1">realpath(1)</a>, a wrapper

for <a href="https://man.openbsd.org/realpath.3">realpath(3)</a> for

Line 184

Line 242

by <a href="https://man.openbsd.org/fdisk.8">fdisk(8)</a>.

<li>Removed <a href="https://man.openbsd.org/fdisk.8">fdisk(8)</a>

"disk" editing command.

<li>Prevented the possible creation of MBRs with overlapping

partitions 0 and 3 in <a

href="https://man.openbsd.org/fdisk.8">fdisk(8)</a>.

<li>Allowed <a href="https://man.openbsd.org/fdisk.8">fdisk(8)</a> to

extend the default OpenBSD partition to the end of the disk, rather

than truncating at the end of the last full cylinder.

<li>Corrected checksums written by <a href="https://man.openbsd.org/fdisk.8">fdisk(8)</a> on big-endian architectures to be little-endian as per spec.

<li>Added <a href="https://man.openbsd.org/rcctl.8">rcctl(8)</a> "ls

rogue" to show daemons which are running but not set as "enabled" in

<a href="https://man.openbsd.org/rc.conf.local.8">rc.conf.local(8)</a>.

<li>Allowed passing a different signal than SIGTERM in the default

rc_stop() function in <a

href="https://man.openbsd.org/rc.subr.8">rc.subr(8)</a>.

<li>Improved and simplified timer handling in <a

href="https://man.openbsd.org/rc.d.8">rc.d(8)</a> "stop" and "reload".

<li>Implemented probe variables in BPFtrace (<a href="https://man.openbsd.org/bt.5">bt(5)</a>).

<li>Provided common <a

href="https://man.openbsd.org/btrace.8">btrace(8)</a> scripts

kprofile.bt (to save kernel stackframes and produce flamegraphs) and

runqlat.bt (to measure the latency of the scheduler runqueues).

<li>Implemented RFC6840 (AD flag processing) in the libc resolver, if

using trusted name servers specified with 'trust-ad' in <a

href="https://man.openbsd.org/resolv.conf.5">resolv.conf(5)</a>

<li>Switched LLD_ARCHs (architectures using the LLVM <a

href="https://man.openbsd.org/ld.lld.1">ld.lld(1)</a> linker) to also

user the LLVM archiver <a

href="https://man.openbsd.org/llvm-ar.1">llvm-ar(1)</a>.

</ul>

Line 210

Line 285

<li>Merged bugfixes from upstream into <a

href="https://man.openbsd.org/less.1">less(1)</a> including fixes for

the prompt hiding feature (CTRL-P) and an integer overflow.

<li>Fixed possible use after free with long lines in <a href="https://man.openbsd.org/less.1">less(1)</a>.

<li>Fixed file descriptor leak of /dev/tty on <a

href="https://man.openbsd.org/doas.1">doas(1)</a> auth failure.

<li>Replaced <a href="https://man.openbsd.org/lrint.3">lrint(3)</a>,

Line 226

Line 302

stdout and stderr are redirected to a non-tty.

<li>Fixed octal escape parsing in <a href="https://man.openbsd.org/tr.1">tr(1)</a> backslash().

<li>Added <a href="https://man.openbsd.org/uniq.1">uniq(1)</a> support for arbitrarily long input lines.

<li>Made <a href="https://man.openbsd.org/uniq.1">uniq(1)</a> ignore trailing newlines when comparing lines.

<li>Made <a href="https://man.openbsd.org/uniq.1">uniq(1)</a> skip() each input line only once, improving performance.

<li>Prevented an access to uninitialized memory in <a href="https://man.openbsd.org/awk.1">awk(1)</a>.

<li>Updated <a href="https://man.openbsd.org/awk.1">awk(1)</a> to the October 12, 2021 version.

<li>Increased <a href="https://man.openbsd.org/tee.1">tee(1)</a> I/O buffer size for 8KB to 64KB.

<li>Allowed bare numbers for key and mouse bindings in <a href="https://man.openbsd.org/cwm.1">cwm(1)</a>.

<li>Added a <a href="https://man.openbsd.org/cwm.1">cwm(1)</a> "group-last" command that shows only the previously active group.

<li>Set cpuspeed to 0 in <a href="https://man.openbsd.org/apm.8">apm(8)</a> when hw.cpuspeed cannot be retrieved.

<li>Improved performance of <a href="https://man.openbsd.org/rev.1">rev(1)</a>.

<li>Copied the <a href="https://man.openbsd.org/cos.3">cos(3)</a>

cosine software implementation from FreeBSD-13, and disabled assembly

implementations of trig functions on x86 platforms.

<li>Added optimization for tiny x in <a href="https://man.openbsd.org/cos.3">cos(3)</a> and <a href="https://man.openbsd.org/sin.3">sin(3) trigonometry functions</a>.

<li>Made <a href="https://man.openbsd.org/ed.1">ed(1)</a> flush all stdio streams before running a shell command.

<li>Prevented a file descriptor leak in <a href="https://man.openbsd.org/touch.1">touch(1)</a> after <a href="https://man.openbsd.org/futimens.2">futimens(2)</a> failure.

</ul>

<li>Improved hardware support and driver bugfixes, including:

Line 255

Line 344

devices.

<li>Fixed handling of interrupts shared between multiple <a

href="https://man.openbsd.org/dwiic.4">swiic(4)</a> devices.

<li>Introduced <a

href="https://man.openbsd.org/iicmux.4">iicmux(4)</a>, a driver that

switches between I2C busses connected to a single I2C controller by

using the pin muxing facilities of an SoC.

<li>Introduced <a

href="https://man.openbsd.org/pcyrtc.4">pcyrtc(4)</a>, a driver for

the NXP PCF85063A/TP RTC chips.

<li>Fixed a panic when running <a

href="https://man.openbsd.org/utvfu.4">utvfu(4)</a> on <a

href="https://man.openbsd.org/xhci.4">xhci(4)</a>.

<li>Added <a href="https://man.openbsd.org/acpipci.4">acpipci(4)</a>

support for interrupts represented by ACPI PCI Interrupt Link Devices,

making PCI interrupts work on QEMU's SBSA target.

<li>Added handling of multi-port controllers to <a href="https://man.openbsd.org/uslcom.4">uslcom(4)</a>.

<li>Make <a href="https://man.openbsd.org/com.4">com(4)</a> attach over <a href="https://man.openbsd.org/acpi.4">acpi(4)</a> on amd64.

<li>Added address locators for the ACPI "bus" and used these to fix the order of the <a href="https://man.openbsd.org/com.4">com(4)</a> devices to match the traditional order on the ISA bus.

<li>Added Intel Jasper Lake to the <a href="https://man.openbsd.org/azalia.4">azalia(4)</a> audio driver.

<li>Added Synopsys Designware UART support to <a href="https://man.openbsd.org/com.4">com(4)</a>.

<li>Fixed an issue where <a href="https://man.openbsd.org/com.4">com(4)</a> would attach for a disabled serial port leading to misdirection of the hardware variant and a subsequent hang when /etc/rc runs <a href="https://man.openbsd.org/ttyflags.8">ttyflags(8)</a> -a.

<li>Fixed <a href="https://man.openbsd.org/sdhc.4">sdhc(4)</a> for Jasper Lake eMMC.

<li>Improved how quirks are handled on <a href="https://man.openbsd.org/sdhc.4">sdhc(4)</a>-compatible drivers.

</ul>

Line 267

Line 377

does so as well.

<li>Added <a href="https://man.openbsd.org/igc.4">igc(4)</a>, a

driver for the Intel 2.5Gb Ethernet controllers.

<li>Implemented <a href="https://man.openbsd.org/em.4">em(4)</a>

support for selecting SMGII or SerDes mode depending on the plugged-in

SFP transceiver and for reading out transceiver information via <a

href="https://man.openbsd.org/ifconfig.8">ifconfig(8)</a>.

<li>Applied MP-safe changes from <a

href="https://man.openbsd.org/dwge.4">dwge(4)</a> to <a

href="https://man.openbsd.org/dwxe.4">dwxe(4)</a>.

</ul>

Line 318

Line 435

<li>Fixed "null node" panics in <a href="https://man.openbsd.org/run.4">run(4)</a>.

<li>Fixed "(null node)" panics on <a href="https://man.openbsd.org/run.4">run(4)</a>.

<li>Fixed <a href="https://man.openbsd.org/iwn.4">iwn(4)</a> with 4965 devices.

<li>Disabled active scanning on <a href="https://man.openbsd.org/iwm.4">iwm(4)</a> 9260 and 9560 to prevent a device lockup.

<li>Fixed monitor mode on <a href="https://man.openbsd.org/iwm.4">iwm(4)</a> and <a href="https://man.openbsd.org/iwx.4">iwx(4)</a>.

<li>Let <a href="https://man.openbsd.org/iwx.4">iwx(4)</a> and <a

href="https://man.openbsd.org/iwm.4">iwm(4)</a> use per-Tx-queue

interface timers to ensure timeout if a particular Tx queue gets

stuck.

<li>Disabled probe requests during scans in <a

href="https://man.openbsd.org/iwx.4">iwx(4)</a> again, preventing

device timeouts for some devices.

<li>Switched <a href="https://man.openbsd.org/iwx.4">iwx(4)</a> to new -67 firmware images.

<li>Introduced <a href="https://man.openbsd.org/mtw.4">mtw(4)</a>, a driver for MediaTek MT7601U wifi devices.

<li>Made <a href="https://man.openbsd.org/iwm.4">iwm(4)</a> attach to PCI devices with product ID 0x31dc, part of the 9560 chip family.

<li>Disabled minimum power consumption in <a href="https://man.openbsd.org/bwfm.4">bwfm(4)</a> hostap mode, improving connection reliability when used as an access point.

<li>Fixed wrong pointer assignment causing the driver to read block ack request information sent by firmware from the wrong offset in <a href="https://man.openbsd.org/iwx.4">iwx(4)</a>.

<li>Fixed and reenabled active scans on <a href="https://man.openbsd.org/iwm.4">iwm(4)</a> and <a href="https://man.openbsd.org/iwx.4">iwx(4)</a>.

</ul>

<li>IEEE 802.11 wireless stack improvements and bugfixes:

Line 329

Line 460

<li>Cached the old BSSID when roaming with <a href="https://man.openbsd.org/iwm.4">iwm(4)</a> so firmware commands can continue using it while roaming to a new AP.

<li>Added support for 40MHz channels to net80211 RA.

<li>Added monitoring of 20/40MHz channel width changes in beacons sent by our access point, notifying drivers when the channel width has changed.

<li>Introduced an optional driver-specific bgscan_done() handler which allows the driver to take control of the roaming teardown sequence, ensuring that race conditions between firmware state and net80211 state are avoided.

<li>Implemented bgscan_done() handlers for <a href="https://man.openbsd.org/iwx.4">iwx(4)</a> and <a href="https://man.openbsd.org/iwm.4">iwm(4)</a>.

<li>Taught the net80211 stack to remove corresponding frames from ic_pwrsaveq when a power-saving client decides to leave our hostap interface, preventing a panic.

</ul>

Line 337

Line 471

<ul>

<li>Fixed <a href="https://man.openbsd.org/pfctl.8">pfctl(8)</a> $nr incorrect macro expansion.

<li>Added support for PPP IPCP extensions for DNS to <a href="https://man.openbsd.org/sppp.4">sppp(4)</a>.

<li>Added display of DNS information from <a href="https://man.openbsd.org/sppp.4">sppp(4)</a> to <a href="https://man.openbsd.org/ifconfig.8">ifconfig(8)</a>.

<li>Switched to calculating <a href="https://man.openbsd.org/pppoe.4">pppoe(4)</a> session duration using system uptime rather than UTC.

<li>Made "set skip on ..." in <a

href="https://man.openbsd.org/pf.conf.5">pf.conf(5)</a> dynamic, with

this, "set skip" can be used on interfaces that are not configured

yet.

<li>Fixed <a href="https://man.openbsd.org/veb.4">veb(4)</a> vport handling to prevent improper drop of packets leaving a vport interface.

</ul>

<li>Installer and upgrade improvements:

Line 353

Line 495

OpenBSD installation and upgrade customization.

<li>Corrected "!" escape handling in the installer when accepting WEP/WPA passphrase.

<li>Made <a href="https://man.openbsd.org/config.8">config(8)</a> -e work with ramdisk kernels.

<li>Made <a href="https://man.openbsd.org/config.8">config(8)</a> -c

cmdfile use lines from the command file for all input, not just

commands. This allows complex actions like changing device parameters.

<li>Prevented a potential race which could make <a

href="https://man.openbsd.org/umount.8">umount(8)</a> fail spuriously

in the installer.

<li>Returned to a shell-script based <a

href="https://man.openbsd.org/fw_update.8">fw_update(8)</a>, written

to be usable by the install script, allowing earlier retrieval of

downloaded firmwares.

<li>Stopped <a

href="https://man.openbsd.org/fw_update.8">fw_update(8)</a> from

downloading SHA256.sig when not needed, to allow installing local

files without network access.

<li>Modified the installer to use <a

href="https://man.openbsd.org/fw_update.8">fw_update(8)</a> to install

non-free firmware files if present on the install media.

<li>Made <a href="https://man.openbsd.org/fw_update.8">fw_update(8)</a> re-download existing files with failed checksums.

</ul>

Line 365

Line 525

<li>Fixed a panic by prohibiting renames of tmpfs mount-points.

<li>Fixed <a href="https://man.openbsd.org/vi.1">vi(1)</a> use after free with unsaved buffer.

<li>Disabled <a href="https://man.openbsd.org/xterm.1">xterm(1)</a> mouse tracking by default.

<li>On arm64 architectures, used "rng-seed" and "kaslr-seed" properties from the device tree to mix extra entropy into the random pool.

<li>Restricted <a

href="https://man.openbsd.org/usbhidctl.1">usbhidctl(1)</a> and <a

href="https://man.openbsd.org/usbhidaction.1">usbhidaction(1)</a> file

system access with <a

href="https://man.openbsd.org/unveil.2">unveil(2)</a>.

<li>Updated libexpat to 2.4.4, fixing CVE-2022-23852 and CVE-2022-23990.

</ul>

<li>Routing daemons and other userland network improvements:

<ul>

<li>Modified <a href="https://man.openbsd.org/syslog.conf.5">syslog.conf(5)</a> examples to use TLS rather than the plaintext protocols.

<li>Stopped ignoring <a href="https://man.openbsd.org/carp.4">carp(4)</a> interfaces in <a href="https://man.openbsd.org/dhcpleased.8">dhcpleased(8)</a>.

<li>Fixed <a href="https://man.openbsd.org/httpd.8">httpd(8)</a> to respond with 400 Bad Request when a client sends header lines without a colon.

<li>Added protocol version checking to <a href="https://man.openbsd.org/httpd.8">httpd(8)</a>.

<li>Fixed crashes in <a href="https://man.openbsd.org/httpd.8">httpd(8)</a>.

<li>Implemented <a href="https://man.openbsd.org/openrsync.1">openrsync(1)</a> --compare-dest, allowing specification of additional directories to check for files to be available.

<li>Implemented <a href="https://man.openbsd.org/openrsync.1">openrsync(1)</a> --max-size and --min-size.

<li>Limited the number of <a href="https://man.openbsd.org/openrsync.1">openrsync(1)</a> processes being spawned by <a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a> to 16.

<li>Switched <a href="https://man.openbsd.org/nsd.8">nsd(8)</a> to enable default DNS cookies on, matching behavior as released in OpenBSD 7.0.

<li>Ensured enabled resolvers are honored by <a href="https://man.openbsd.org/unwind.8">unwind(8)</a> to keep unused forwarders disabled properly.

<li>Installed missing scope identifiers for IPv6 link-local addresses for <a href="https://man.openbsd.org/unwind.8">unwind(8)</a> and <a href="https://man.openbsd.org/resolvd.8">resolvd(8)</a>.

<li>Allowed interface names as scope-id in IPv6 link-local addresses in <a href="https://man.openbsd.org/unbound.8">unbound(8)</a>.

<li>Fixed <a href="https://man.openbsd.org/httpd.8">httpd(8)</a> to respond with 400 Bad Request when a client sends header lines without a colon.

<li>Added protocol version checking to <a href="https://man.openbsd.org/httpd.8">httpd(8)</a>.

<li>Fixed crashes in <a href="https://man.openbsd.org/httpd.8">httpd(8)</a>.

<li>Annotated an <a href="https://man.openbsd.org/httpd.8">httpd(8)</a> 413 error with "request body too large" in the error log.

<li>Corrected <a href="https://man.openbsd.org/httpd.8">httpd(8)</a> version string checking, responding with 505 Version Not Supported rather than 400 Bad Request when the version format is incorrect.

<li>Stopped duplicating "Connection: close" headers in <a href="https://man.openbsd.org/relayd.8">relayd(8)</a>, only adding it if it's not a websocket response.

<li>In <a href="https://man.openbsd.org/httpd.8">httpd(8)</a>, stopped sending content alongside responses to HEAD requests.

<li>Switched <a href="https://man.openbsd.org/nsd.8">nsd(8)</a> to enable default DNS cookies on, matching behavior as released in OpenBSD 7.0.

<li>Added <a href="https://man.openbsd.org/httpd.8">httpd(8)</a> custom error page facility.

<li>Made <a href="https://man.openbsd.org/iked.conf.5">iked.conf(5)</a> proto config option accept a list to allow specifying multiple protocols for a single policy.

<li>Fixed broken key exchange negotiation with matching proposals in <a href="https://man.openbsd.org/iked.8">iked(8)</a>.

<li>Added <a href="https://man.openbsd.org/ikectl.8">ikectl(8)</a> "show certinfo" to show trusted CAs and certificates.

<li>Added <a href="https://man.openbsd.org/iked.8">iked(8)</a> -V to display the version.

<li>Fixed removal of SAs that could not be flushed with <a href="https://man.openbsd.org/ipsecctl.8">ipsecctl(8)</a> -F.

<li>Fixed a bug where <a href="https://man.openbsd.org/iked.8">iked(8)</a> sent zero-prefixed NAT-T messages on port 500, causing parsing errors.

<li>Changed <a href="https://man.openbsd.org/isakmpd.8">isakmpd(8)</a> to log a warning when proto is NULL rather than dereferencing it.

<li>Limited <a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a> HTTP requests to 2GB of data.

<li>Published <a href="https://man.openbsd.org/rpki-client.8">rpki-client</a> 7.5.

<li>Limited the number of publication points under a given TAL in <a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a>.

<li>Introduced a validated cache which holds all the files successfully verified by <a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a>.

<li>Allowed <a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a> to display more than one file in -f mode.

<li>Allowed rsync:// URIs as files in <a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a> -f mode.

<li>Properly handled .mft files in <a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a>, preventing replay attacks using old but still valid files.

<li>Modified <a href="https://man.openbsd.org/syslog.conf.5">syslog.conf(5)</a> examples to use TLS rather than the plaintext protocols.

<li>Stopped ignoring <a href="https://man.openbsd.org/carp.4">carp(4)</a> interfaces in <a href="https://man.openbsd.org/dhcpleased.8">dhcpleased(8)</a>.

<li>Made the <a href="https://man.openbsd.org/dhcpleased.8">dhcpleased(8)</a> host name DHCP option configurable.

<li>Prevented a crash in <a href="https://man.openbsd.org/slaacd.8">slaacd(8)</a> due to updating an interface which no longer exists.

<li>Fix <a href="https://man.openbsd.org/unveil.2">unveil(2)</a> in <a href="https://man.openbsd.org/ldapd.8">ldapd(8)</a>, create permissions are required for databases.

<li>Made <a href="https://man.openbsd.org/dhcpd.8">dhcpd(8)</a> start listening on interface in 'down' state. Interfaces can come up later, at which point dhcpd(8) will start receiving packets.

<li>Added a basic printer for EAPOL packets to <a href="https://man.openbsd.org/tcpdump.8">tcpdump(8)</a>.

</ul>

<li><a href="https://man.openbsd.org/tmux">tmux(1)</a> improvements and bug fixes:

Line 417

Line 612

display it.

<li>Added a cursor-colour option to <a href="https://man.openbsd.org/tmux.1">tmux(1)</a>.

<li>Added a cursor-style option to <a href="https://man.openbsd.org/tmux.1">tmux(1)</a>.

<li>Added a pane-border-format pane option to <a href="https://man.openbsd.org/tmux.1">tmux(1)</a>.

<li>Added attempts to turn on less-capable mouse modes when <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> turns on more-capable ones, in case the terminal doesn't support the desired mode.

</ul>