www/71.html - diff

Return to 71.html CVS log

Up to [local] / www

Diff for /www/71.html between version 1.14 and 1.15

version 1.14, 2022/04/09 20:13:15

version 1.15, 2022/04/10 10:31:40

Line 93

<li>Introduced <a href="https://man.openbsd.org/aplnco.4">aplnco(4)</a>, a driver for the Numerically-controlled oscillator (NCO) clock which drives the audio clocks on Apple silicon.

<li>Introduced <a href="https://man.openbsd.org/tascodec.4">tascodec(4)</a>, a driver for the TI TAS2770/TAS5770 digital audio amplifier codec found on Apple M1 Macs.

<li>Introduced <a href="https://man.openbsd.org/apldma.4">apldma(4)</a>, a driver for the DMA controller found on Apple SoCs.

<li>Added support to explicitly power on some PCIe devices on the M1 and M1 Pro/Max through a GPIO controlled by the SMC.

<li>Added <a href="https://man.openbsd.org/aplcpu.4">aplcpu(4)</a>, a driver to control the CPU performance levels on Apple SoCs.

<li>Modified <a href="https://man.openbsd.org/aplintc.4">aplintc(4)</a> to support a newer interrupt controller, making OpenBSD run on M1 Pro/Max machines.

<li>Added nvmem support to <a href="https://man.openbsd.org/aplpmu.4">aplpmu(4)</a> and made it available on Apple SPMI PMUs.

<li>Added RTC support to <a href="https://man.openbsd.org/aplsmc.4">aplsmc(4)</a>.

<li>Made the arm64 ramdisk installer fetch <a href="https://man.openbsd.org/bwfm.4">bwfm(4)</a> firmware from the EFI System Partition on Apple Silicon devices for use during installation and addition to the newly installed system.

<li>Added support for controlling keyboard LEDs to <a

href="https://man.openbsd.org/aplhidev.4">aplhidev(4)</a>.

<li>Added basic GPIO support to <a href="https://man.openbsd.org/aplsmc.4">aplsmc(4)</a>.

<li>Ensured <a href="https://man.openbsd.org/apldart.4">apldart(4)</a> keeps the DART enabled in front of the display controller to preserve its access to the framebuffer and continued display.

<li>Fixed reading motherboard time on Apple machines with old SMC firmware.

<li>Implemented reboot/powerdown support in <a href="https://man.openbsd.org/aplsmc.4">aplsmc(4)</a>.

<li>Implemented <a href="https://man.openbsd.org/aplintc.4">aplintc(4)</a> support for multiple dies, making OpenBSD work on the M1 Ultra.

</ul>

<li>Introduced <a

Line 106

Line 119

<li>Added <a href="https://man.openbsd.org/gpiokeys.4">gpiokeys(4)</a>

for arm64, a driver which handles events triggered by GPIO keys such

as lid status and power button.

<li>Added support for controlling keyboard LEDs to <a

href="https://man.openbsd.org/aplhidev.4">aplhidev(4)</a>.

<li>Added pclk clock used by <a

href="https://man.openbsd.org/dwdog.4">dwdog(4)</a> on RK3399 to <a

href="https://man.openbsd.org/rkclock.4">rkclock(4)</a>.

<li>Introduced <a href="https://man.openbsd.org/mpfclock.4">mpfclock(4)</a>, a driver for the PolarFire SoC MSS clock controller.

<li>Implemented powerdown in arm64.

<li>Introduced <a href="https://man.openbsd.org/cdsdhc.4">cdsdhc(4)</a>, a driver for the Cadence SD/SDIO/eMMC host controller.

<li>Introduced <a href="https://man.openbsd.org/mpfiic.4">mpfiic(4)</a>, a driver for the PolarFire SoC MSS I2C controller.

<li>Introduced <a href="https://man.openbsd.org/mpfgpio.4">mpfgpio(4)</a>, a driver for the PolarFire SoC MSS GPIO controller.

<li>Enabled <a href="https://man.openbsd.org/cduart.4">cduart(4)</a> on arm64.

<li>Added <a href="https://man.openbsd.org/mvpinctrl.4">mvpinctrl(4)</a> support for the CP115 block found on Marvell CN9K SoCs.

<li>Added <a href="https://man.openbsd.org/mvclock.4">mvclock(4)</a> support for the AP807 block found on Marvell CN9K SoCs.

</ul>

<li>Changes on other architectures:

Line 127

Line 143

<li>Enabled <a href="https://man.openbsd.org/dt.4">dt(4)</a> on macppc.

<li>Increased <a href="https://man.openbsd.org/ddb.1">ddb(1)</a> access to registers on macppc and powerpc64.

<li>Allowed <a href="https://man.openbsd.org/ddb.4">ddb(4)</a> trace through interrupt on macppc.

<li>Improved stack unwinding on riscv64 in <a href="https://man.openbsd.org/ddb.4">ddb(4)</a>.

<li>Fixed kernel stack alignment on riscv64.

<li>Fixed RISC-V lld link code when dealing with object files created with "ld -b".

<li>Made sure armv7,arm64 and risc-v FDT bootloader code does not write beyond the FDT data structure.

<li>Made sure nothing can map address zero on RISC-V.

</ul>

Line 157

Line 179

a renumbered <a

href="https://man.openbsd.org/softraid.4">softraid(4)</a> boot device.

<li>Fix hibernate on newer hardware by allowing more memory ranges.

<li>If CPU sleep state S4 is not available, use S5 for the ACPI-transitions in hibernate support.

<li>Grew the <a href="https://man.openbsd.org/dmesg.8">dmesg(8)</a> buffer on i386 from 4 to 8 pages.

<li>Improved tracking of mbuf memory usage in the whole system.

<li>Prevent panic in <a href="https://man.openbsd.org/softraid.4">softraid(4)</a> while rebooting if softraid has been disabled.

<li>Added code to update hw.power whenever AC state changes on resume.

</ul>

Line 194

Line 220

href="https://man.openbsd.org/poll.2">poll(2)</a> system call on top

of the <a href="https://man.openbsd.org/kqueue.2">kqueue(2)</a>

subsystem, obsoleting the old, non-MP-safe poll backend.

<li>Made <a href="https://man.openbsd.org/audio.4">audio(4)</a> event filters MP-safe.

<li>Unlocked <a href="https://man.openbsd.org/getsockname.2">getsockname(2)</a>.

<li>Added kernel interfaces for atomic load and store functions for int and long to be used in reference counted struct members.

</ul>

Line 237

Line 266

-b bsd.rd</code>, which emulates a PXE boot and performs an

autoinstall.

<li>Made <a href="https://man.openbsd.org/vmm.4">vmm(4)</a> <a href="https://man.openbsd.org/dt.4">dt(4)</a> tracepoints amd64-only.

<li>Provided a login class for <a href="https://man.openbsd.org/vmd.8">vmd(8)</a>.

<li>Added handling for <a href="https://man.openbsd.org/vmd.8">vmd(8)</a> hitting resource limits when starting a vm and added memory error messages for the user.

<li>Added quiesce/wakeup hooks to sync vcpu state in <a href="https://man.openbsd.org/vmm.4">vmm(4)</a>.

</ul>

Line 246

Line 278

href="https://man.openbsd.org/realpath.1">realpath(1)</a>, a wrapper

for <a href="https://man.openbsd.org/realpath.3">realpath(3)</a> for

use in ports.

<li>Removed an unused decoding of c/h/s from the MBR read from disk

by <a href="https://man.openbsd.org/fdisk.8">fdisk(8)</a>.

<li>Removed <a href="https://man.openbsd.org/fdisk.8">fdisk(8)</a>

Line 259

Line 292

<li>Corrected checksums written by <a href="https://man.openbsd.org/fdisk.8">fdisk(8)</a> on big-endian architectures to be little-endian as per spec.

<li>Made <a href="https://man.openbsd.org/fdisk.8">fdisk(8)</a> -A preserve BIOS boot partition.

<li>Switched to using <a href="https://man.openbsd.org/fdisk.8">fdisk(8)</a> -b to create boot partitions on multiple architectures.

<li>Used <a href="https://man.openbsd.org/fdisk.8">fdisk(8)</a> -b to create the desired 1MB MSDOS boot partition for macppc rather than relying on /usr/mdec/mbr.

<li>Made <a href="https://man.openbsd.org/fdisk.8">fdisk(8)</a> preserve the EFI System partition when auto-allocating space on GPT disks with magic Apple partitions.

<li>Added <a href="https://man.openbsd.org/rcctl.8">rcctl(8)</a> "ls

rogue" to show daemons which are running but not set as "enabled" in

<a href="https://man.openbsd.org/rc.conf.local.8">rc.conf.local(8)</a>.

Line 287

Line 322

/etc/login.conf.d, allowing easy addition of custom login classes from

packages.

<li>Made <a href="https://man.openbsd.org/rcctl.8">rcctl(8)</a> look for the login class in both login.conf and login.conf.d/${class}.

<li>Enabled subpixel rendering in FreeType.

<li>Updated xorg-server to 21.1.3, leaving in place an earlier change to compute the screen resolution from dimensions returned by the screen, reverted by upstream.

<li>Added a <a href="https://man.openbsd.org/malloc.3">malloc(3)</a> cache of regions between 128k and 2M to accommodate programs allocating and deallocating regions of these sizes quickly.

<li>Added <a href="https://man.openbsd.org/pax.1">pax(1)</a> support for mtime/atime/ctime extended headers (in not-SMALL builds).

<li>Added openvpn ports (udp/1194 & tcp/1194) to /etc/services.

<li>Added -k flag to <a href="https://man.openbsd.org/gzip.1">gzip(1)</a> and <a href="https://man.openbsd.org/gunzip.1">gunzip(1)</a> to retain (de)compressed file.

</ul>

Line 334

Line 375

<li>Added optimization for tiny x in <a href="https://man.openbsd.org/cos.3">cos(3)</a> and <a href="https://man.openbsd.org/sin.3">sin(3) trigonometry functions</a>.

<li>Made <a href="https://man.openbsd.org/ed.1">ed(1)</a> flush all stdio streams before running a shell command.

<li>Prevented a file descriptor leak in <a href="https://man.openbsd.org/touch.1">touch(1)</a> after <a href="https://man.openbsd.org/futimens.2">futimens(2)</a> failure.

<li>Fixed <a href="https://man.openbsd.org/vi.1">vi(1)</a> recovery mode.

<li>Added <a href="https://man.openbsd.org/seq.1">seq(1)</a>, a command to print sequences of numbers.

<li>Extended and reordered the process accounting information structure <a href="https://man.openbsd.org/acct.5">acct(5)</a>. Flag Day for the <a href="https://man.openbsd.org/acct.2">acct(2)</a> file format.

<li>Fixed <a href="https://man.openbsd.org/setusercontext.3">setusercontext(3)</a> error when /etc/login.conf is not present.

<li>Switched <a href="https://man.openbsd.org/aucat.1">aucat(1)</a> internal sample representation and default file encoding to 24-bit.

<li>Switched <a href="https://man.openbsd.org/sndiod.8">sndiod(8)</a> internal sample representation to 24-bit fixed point.

<li>Fixed glass console and <a href="https://man.openbsd.org/getty.8">getty(8)</a> interference with Xorg on arm64.

<li>Reinstated a <a href="https://man.openbsd.org/drm.4">drm(4)</a> workaround to get framebuffer size from efifb, preventing fatal errors for the BESSTAR TECH HM90 with Ryzen 9 4900H.

Line 360

Line 409

<li>Stopped binding audio devices exposed by <a

href="https://man.openbsd.org/sndiod.8">sndiod(8)</a> to physical

devices.

<li>Fixed handling of interrupts shared between multiple <a

href="https://man.openbsd.org/dwiic.4">swiic(4)</a> devices.

<li>Introduced <a

Line 379

Line 429

<li>Make <a href="https://man.openbsd.org/com.4">com(4)</a> attach over <a href="https://man.openbsd.org/acpi.4">acpi(4)</a> on amd64.

<li>Added address locators for the ACPI "bus" and used these to fix the order of the <a href="https://man.openbsd.org/com.4">com(4)</a> devices to match the traditional order on the ISA bus.

<li>Added Intel Jasper Lake to the <a href="https://man.openbsd.org/azalia.4">azalia(4)</a> audio driver.

<li>Ensured <a href="https://man.openbsd.org/azalia.4">azalia(4)</a> matches on Intel 300 Series audio, fixing attaching on the Dell G3 3590.

<li>Added Synopsys Designware UART support to <a href="https://man.openbsd.org/com.4">com(4)</a>.

<li>Fixed an issue where <a href="https://man.openbsd.org/com.4">com(4)</a> would attach for a disabled serial port leading to misdirection of the hardware variant and a subsequent hang when /etc/rc runs <a href="https://man.openbsd.org/ttyflags.8">ttyflags(8)</a> -a.

<li>Fixed <a href="https://man.openbsd.org/sdhc.4">sdhc(4)</a> for Jasper Lake eMMC.

<li>Improved how quirks are handled on <a href="https://man.openbsd.org/sdhc.4">sdhc(4)</a>-compatible drivers.

<li>Enabled <a href="https://man.openbsd.org/acpibat.4">acpibat(4)</a> use with the Surface Go 3.

<li>Fixed suspend/resume issues with <a href="https://man.openbsd.org/com.4">com(4)</a> at <a href="https://man.openbsd.org/acpi.4">acpi(4)</a>.

<li>Correlated <a href="https://man.openbsd.org/uaudio.4">uaudio(4)</a> and <a href="https://man.openbsd.org/ucc.4">ucc(4)</a> devices attacked over USB in order to adjust the volume of the correct attached audio device rather than the first one attached.

<li>Enabled PL011 UART FIFO support in <a href="https://man.openbsd.org/pluart.4">pluart(4)</a>.

<li>Added support for XBox One game controller on usb.

<li>Stopped suspending the <a href="https://man.openbsd.org/tpm.4">tpm(4)</a> device upon hibernation, preventing some systems from hanging when hibernating a second time.

</ul>

Line 406

Line 462

<li>Enabled hardware vlan tagging for <a href="https://man.openbsd.org/ixl.4">ixl(4)</a>.

<li>Re-enabled <a href="https://man.openbsd.org/ixl.4">ixl(4)</a> IPv4, TCP4/6 and UDP4/6 checksum offloading.

<li>Enabled receive checksum offloading on <a href="https://man.openbsd.org/ixl.4">ixl(4)</a>.

<li>Prevented a possible deadlock in <a href="https://man.openbsd.org/cad.4">cad(4)</a>.

<li>Fixed receive filter handling in <a href="https://man.openbsd.org/aq.4">aq(4)</a>.

<li>Enable vlan promisc, header stripping and vlan RX/TX offload on <a href="https://man.openbsd.org/aq.4">aq(4)</a>.

<li>Enabled checksum offloads on <a href="https://man.openbsd.org/aq.4">aq(4)</a>.

<li>Enabled interrupt moderation on <a href="https://man.openbsd.org/aq.4">aq(4)</a>, aiming at around 20k per second.

<li>Fixed <a href="https://man.openbsd.org/aq.4">aq(4)</a> occasional errors seen on rockpro64.

<li>Fixed <a href="https://man.openbsd.org/ure.4">ure(4)</a> vlan transmission with hw tagging.

</ul>

Line 470

Line 533

<li>Introduced <a href="https://man.openbsd.org/mtw.4">mtw(4)</a>, a driver for MediaTek MT7601U wifi devices.

<li>Made <a href="https://man.openbsd.org/iwm.4">iwm(4)</a> attach to PCI devices with product ID 0x31dc, part of the 9560 chip family.

<li>Disabled minimum power consumption in <a href="https://man.openbsd.org/bwfm.4">bwfm(4)</a> hostap mode, improving connection reliability when used as an access point.

<li>Added support for the BCM4387 to <a href="https://man.openbsd.org/bwfm.4">bwfm(4)</a>.

<li>Fixed wrong pointer assignment causing the driver to read block ack request information sent by firmware from the wrong offset in <a href="https://man.openbsd.org/iwx.4">iwx(4)</a>.

<li>Fixed and reenabled active scans on <a href="https://man.openbsd.org/iwm.4">iwm(4)</a> and <a href="https://man.openbsd.org/iwx.4">iwx(4)</a>.

<li>Improved roaming stability on <a href="https://man.openbsd.org/iwn.4">iwn(4)</a>, particularly with wpa_supplicant.

<li>Improved TX performance on <a href="https://man.openbsd.org/urtwn.4">urtwn(4)</a> RTL8192EU devices.

<li>Added 802.11ac support on <a href="https://man.openbsd.org/iwx.4">iwx(4)</a>.

<li>Fix TX rate used by <a href="https://man.openbsd.org/rtwn.4">rtwn(4)</a> and <a href="https://man.openbsd.org/urtwn.4">urtwn(4)</a> for RTS frames.

<li>Add initial 802.11ac support to <a href="https://man.openbsd.org/iwm.4">iwm(4)</a>.

<li>Fixed attach of multiple <a href="https://man.openbsd.org/iwm.4">iwm(4)</a> or <a href="https://man.openbsd.org/iwx.4">iwx(4)</a> interfaces in the same machine.

<li>Prevent announcing VHT capabilities on <a href="https://man.openbsd.org/iwm.4">iwm(4)</a> and <a href="https://man.openbsd.org/iwx.4">iwx(4)</a> for 2GHz bands during scans.

<li>Fixed <a href="https://man.openbsd.org/iwm.4">iwm(4)</a> 802.11ac throughput at a distance.

<li>Enabled <a href="https://man.openbsd.org/mtw.4">mtw(4)</a> on i386, macppc and arm64.

<li>Added preliminary <a href="https://man.openbsd.org/ure.4">ure(4)</a> support for RTL8156B and bug fixes for RTL8153/RTL8156.

</ul>

Line 485

Line 559

<li>Introduced an optional driver-specific bgscan_done() handler which allows the driver to take control of the roaming teardown sequence, ensuring that race conditions between firmware state and net80211 state are avoided.

<li>Implemented bgscan_done() handlers for <a href="https://man.openbsd.org/iwx.4">iwx(4)</a> and <a href="https://man.openbsd.org/iwm.4">iwm(4)</a>.

<li>Taught the net80211 stack to remove corresponding frames from ic_pwrsaveq when a power-saving client decides to leave our hostap interface, preventing a panic.

<li>Added initial 802.11ac (VHT) support to the wifi stack.

<li>Made <a href="https://man.openbsd.org/tcpdump.8">tcpdump(8)</a> show 802.11ac VHT capability and operation IEs in -v mode.

<li>Added 802.11ac/VHT TX rate adaptation support to the wifi stack.

<li>When choosing networks during SSID selection, give a higher score to 11ac and 11n access points, prioritizing 11ac.

</ul>

Line 492

Line 570

<li>Generic network stack improvements and bugfixes:

<ul>

<li>Fixed <a href="https://man.openbsd.org/pfctl.8">pfctl(8)</a> $nr incorrect macro expansion.

<li>Fixed <a href="https://man.openbsd.org/pfctl.8">pfctl(8)</a> rdr-to rules failing on certain port ranges when explicitly specified.

<li>Ensured the <a href="https://man.openbsd.org/pf.4">pf(4)</a> "set prio" values are checked consistently.

<li>Added support for PPP IPCP extensions for DNS to <a href="https://man.openbsd.org/sppp.4">sppp(4)</a>.

<li>Added display of DNS information from <a href="https://man.openbsd.org/sppp.4">sppp(4)</a> to <a href="https://man.openbsd.org/ifconfig.8">ifconfig(8)</a>.

<li>Switched to calculating <a href="https://man.openbsd.org/pppoe.4">pppoe(4)</a> session duration using system uptime rather than UTC.

Line 501

Line 581

yet.

<li>Fixed <a href="https://man.openbsd.org/veb.4">veb(4)</a> vport handling to prevent improper drop of packets leaving a vport interface.

<li>Reworked <a href="https://man.openbsd.org/ix.4">ix(4)</a> checksum/vlan offloading and enabled it for IPv6.

<li>Enabled IP header checksum offloading in <a href="https://man.openbsd.org/ix.4">ix(4)</a>.

<li>Prevented tweaks to <a href="https://man.openbsd.org/tun.4">tun(4)</a> if_flags when the NET_LOCK isn't held.

<li>Prevented reopening of <a href="https://man.openbsd.org/tun.4">tun(4)</a>/<a href="https://man.openbsd.org/tap.4">tap(4)</a> interfaces which are being destroyed.

<li>Rewrote <a href="https://man.openbsd.org/vxlan.4">vxlan(4)</a> to

operate independently of <a

href="https://man.openbsd.org/bridge.4">bridge(4)</a>, create and bind

udp sockets and prevent loops.

<li>Stopped hiding the mtu on "bridge" interfaces which do handle l3 traffic in <a href="https://man.openbsd.org/ifconfig.8">ifconfig(8)</a>.

<li>Protected <a href="https://man.openbsd.org/pfsync.4">pfsync(4)</a> tdb flags and lists with a mutex to prevent crashes involving pfsync, IPsec and parallel forwarding.

<li>Added mbuf tags to prevent output loops in <a href="https://man.openbsd.org/etherip.4">etherip(4)</a>.

<li>Added rtable capability to <a href="https://man.openbsd.org/login.conf.5">login.conf(5)</a>, allowing to specify the rtable a process uses.

<li>Made <a href="https://man.openbsd.org/su.1">su(1)</a> honor the login class routing table when doing a full login with su -l.

<li>Prevented <a href="https://man.openbsd.org/aq.4">aq(4)</a> nics from writing to mbufs taken off the ring when the interface was taken down.

<li>Fix crash in IPSec while doing parallel IP forwarding.

<li>Fix IP output routines on raw sockets so route sourceaddr can take effect using <a href="https://man.openbsd.org/sendto.2">sendto(2)</a> or similar.

<li>Ensured <a href="https://man.openbsd.org/pcap_lookupdev.3">pcap_lookupdev(3)</a> matches only on complete interface names.

</ul>

Line 537

Line 633

non-free firmware files if present on the install media.

<li>Made <a href="https://man.openbsd.org/fw_update.8">fw_update(8)</a> re-download existing files with failed checksums.

<li>Stopped unregistering firmware with <a href="https://man.openbsd.org/fw_update.8">fw_update(8)</a> when the SHA256.sig cannot be fetched.

<li>Made <a href="https://man.openbsd.org/fw_update.8">fw_update(8)</a> use the /snapshots directory only on -current.

<li>Used <a href="https://man.openbsd.org/installboot.8">installboot(8)</a> in riscv64 install.md.

<li>Used <a href="https://man.openbsd.org/installboot.8">installboot(8)</a> in install.md for armv7.

<li>New logic for <a href="https://man.openbsd.org/pkg_add.1">pkg_add(1)</a> to avoid excessive moving of files during updates when possible.

<li>Ensured that an interrupted arm64 install from the ramdisk kernel can be restarted.

</ul>

Line 551

Line 651

<li>Fixed <a href="https://man.openbsd.org/vi.1">vi(1)</a> use after free with unsaved buffer.

<li>Disabled <a href="https://man.openbsd.org/xterm.1">xterm(1)</a> mouse tracking by default.

<li>On arm64 architectures, used "rng-seed" and "kaslr-seed" properties from the device tree to mix extra entropy into the random pool.

<li>Made <a href="https://man.openbsd.org/apmd.8">apmd(8)</a> replace /etc/random.seed for hibernate-resumes.

<li>Restricted <a

href="https://man.openbsd.org/usbhidctl.1">usbhidctl(1)</a> and <a

href="https://man.openbsd.org/usbhidaction.1">usbhidaction(1)</a> file

Line 558

Line 659

href="https://man.openbsd.org/unveil.2">unveil(2)</a>.

<li>Updated libexpat to 2.4.4, fixing CVE-2022-23852 and CVE-2022-23990.

<li>Added <a href="https://man.openbsd.org/ps.1">ps(1)</a> status flag "c" to indicate a process is chrooted.

<li>In <a

href="https://man.openbsd.org/rpc.rusersd.8">rpc.rusersd(8)</a> <a

href="https://man.openbsd.org/unveil.2">unveil(2)</a> "/dev" read-only

instead of using <a

href="https://man.openbsd.org/chroot.2">chroot(2)</a>.

</ul>

<li>Routing daemons and other userland network improvements:

Line 573

Line 679

<li>Ensured enabled resolvers are honored by <a href="https://man.openbsd.org/unwind.8">unwind(8)</a> to keep unused forwarders disabled properly.

<li>Installed missing scope identifiers for IPv6 link-local addresses for <a href="https://man.openbsd.org/unwind.8">unwind(8)</a> and <a href="https://man.openbsd.org/resolvd.8">resolvd(8)</a>.

<li>Allowed interface names as scope-id in IPv6 link-local addresses in <a href="https://man.openbsd.org/unbound.8">unbound(8)</a>.

<li>Let <a href="https://man.openbsd.org/unwind.8">unwind(8)</a> probe for DNS64 presence with an absolute name, so asr doesn't add search domains and retry.

<li>Fixed <a href="https://man.openbsd.org/httpd.8">httpd(8)</a> to respond with 400 Bad Request when a client sends header lines without a colon.

Line 583

Line 690

<li>Stopped duplicating "Connection: close" headers in <a href="https://man.openbsd.org/relayd.8">relayd(8)</a>, only adding it if it's not a websocket response.

<li>In <a href="https://man.openbsd.org/httpd.8">httpd(8)</a>, stopped sending content alongside responses to HEAD requests.

<li>Added <a href="https://man.openbsd.org/httpd.8">httpd(8)</a> custom error page facility.

<li>Added a gzip-static option to <a href="https://man.openbsd.org/httpd.conf.5">httpd.conf(5)</a>, allowing delivery of precompressed files with content-encoding gzip.

<li>Improved handling of static compressed gzip files in <a href="https://man.openbsd.org/httpd.8">httpd(8)</a>.

<li>Made <a href="https://man.openbsd.org/iked.conf.5">iked.conf(5)</a> proto config option accept a list to allow specifying multiple protocols for a single policy.

<li>Fixed broken key exchange negotiation with matching proposals in <a href="https://man.openbsd.org/iked.8">iked(8)</a>.

Line 592

Line 702

<li>Fixed removal of SAs that could not be flushed with <a href="https://man.openbsd.org/ipsecctl.8">ipsecctl(8)</a> -F.

<li>Fixed a bug where <a href="https://man.openbsd.org/iked.8">iked(8)</a> sent zero-prefixed NAT-T messages on port 500, causing parsing errors.

<li>Changed <a href="https://man.openbsd.org/isakmpd.8">isakmpd(8)</a> to log a warning when proto is NULL rather than dereferencing it.

<li>Improved message fragment retransmissions for <a href="https://man.openbsd.org/iked.8">iked(8)</a>.

<li>Make sure <a href="https://man.openbsd.org/iked.8">iked(8)</a> vroute messages are correctly aligned, fixes autoconfiguration of addresses on octeon.

Line 604

Line 716

<li>Properly handled .mft files in <a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a>, preventing replay attacks using old but still valid files.

<li>Enforced RFC 6384 certificate policy for RPKI in <a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a>.

<li>Added a CRL check for manifests to <a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a>.

<li>Capped the daemon <a href="https://man.openbsd.org/login.1">login</a> class datasize at either 1G or 4G depending on the architecture and set the <a href="https://man.openbsd.org/bgpd.8">bgpd</a> class datasize to either 16G or 1G.

<li>Made it possible to bind and connect to non-default ports in <a href="https://man.openbsd.org/bgpd.conf.5">bgpd.conf(5)</a>.

<li>Fixed overflow protection code in <a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a>.

<li>Changed the way $macros are expanded in <a href="https://man.openbsd.org/bgpd.conf.5">bgpd.conf(5)</a>.

<li>Implemented most of CMS related checks in rpki-client(8) required by RFC 6488 section 3.

<li>Modified <a href="https://man.openbsd.org/syslog.conf.5">syslog.conf(5)</a> examples to use TLS rather than the plaintext protocols.

<li>Stopped ignoring <a href="https://man.openbsd.org/carp.4">carp(4)</a> interfaces in <a href="https://man.openbsd.org/dhcpleased.8">dhcpleased(8)</a>.

<li>Made the <a href="https://man.openbsd.org/dhcpleased.8">dhcpleased(8)</a> host name DHCP option configurable.

<li>Prevented a crash in <a href="https://man.openbsd.org/slaacd.8">slaacd(8)</a> due to updating an interface which no longer exists.

<li>Prevented a potential crash when <a href="https://man.openbsd.org/slaacd.8">slaacd(8)</a> receives more than 7 nameservers.

<li>Fixed crash in <a href="https://man.openbsd.org/slaacd.8">slaacd(8)</a> when receiving a negative length field for DNS labels.

<li>Fix <a href="https://man.openbsd.org/unveil.2">unveil(2)</a> in <a href="https://man.openbsd.org/ldapd.8">ldapd(8)</a>, create permissions are required for databases.

<li>Made <a href="https://man.openbsd.org/dhcpd.8">dhcpd(8)</a> start listening on interface in 'down' state. Interfaces can come up later, at which point dhcpd(8) will start receiving packets.

<li>Added a basic printer for EAPOL packets to <a href="https://man.openbsd.org/tcpdump.8">tcpdump(8)</a>.

<li>Made <a href="https://man.openbsd.org/ping.8">ping(8)</a> print out the source address and sequence number when the signature on an icmp echo reply doesn't match.

<li>Rate limit <a href="https://man.openbsd.org/rad.8">rad(8)</a> router advertisements according to RFC 4861.

Line 644

Line 766

<li>Added attempts to turn on less-capable mouse modes when <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> turns on more-capable ones, in case the terminal doesn't support the desired mode.

<li>Added a <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> option to show arrows for the active pane indicator.

<li>Added a key in <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> copy mode to toggle the position indicator.

<li>Added an option in <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> to set the character for unused areas of the terminal.

<li>Add <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> option to control if it scrolls into history on clear.

<li>Added OSC 7 capability to <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> for setting titles.

</ul>

<li>OpenSMTPD version

<ul>

<li>Stopped <a href="https://man.openbsd.org/smtpd.8">smtpd(8)</a> from verifying the cert or CA for a relay using opportunistic TLS.

<li>Enabled TLS verify by default for outbound "smtps://" and "smtp+tls://", restoring documented <a href="https://man.openbsd.org/smtpd.8">smtpd(8)</a> behavior.

</ul>

<li>LibreSSL version

Line 964

Line 1090

<li>Fixed the width of the <code>\h</code> (horizontal motion)

escape sequence in the PostScript and PDF output modes.

<li>Avoid legacy CSS2 syntax and use CSS3 two-value syntax in <a

href="https://man.openbsd.org/mandoc.1">mandoc(1)</a>.

</ul>

<li>Ports and packages: