===================================================================
RCS file: /cvsrepo/anoncvs/cvs/www/73.html,v
retrieving revision 1.20
retrieving revision 1.21
diff -c -r1.20 -r1.21
*** www/73.html	2023/04/03 18:47:55	1.20
--- www/73.html	2023/04/03 19:08:11	1.21
***************
*** 84,89 ****
--- 84,99 ----
  <li>Various kernel improvements:
    <ul>
  
+ 
+   <li>On arm64, avoid usin 1GB mappings for the identity map in the
+ 	early kernel bootstrap phase and when booting the secondary CPUs. This
+ 	avoids accidentally mapping memory regions that should not be mapped
+ 	(i.e. secure memory) as all mapped memory can be accessed
+ 	speculatively.
+ 
+   <li>Added arm64 detection of EPAN feature bit. Enhanced Privileged Access Never
+ 	(EPAN) allows Privileged Access Never to be used with Execute-only mappings.
+ 
    <li>Removed copystr(9) from public API.
  
    <li>Made the USB ports work after a suspend/resume cycle on the x13s.
***************
*** 379,387 ****
  
  <li>Added or improved wireless network drivers:
    <ul>
! <li>Fixed <a href="https://man.openbsd.org/bwfm.4">bwfm(4)</a> issues with suspend/resume and possible firmware crashes on the M2 Macbook Air.
  
! 
    <li>Fixed a crash in <a href="https://man.openbsd.org/iwx.4">iwx(4)</a> when connecting to WEP networks via <a href="https://man.openbsd.org/ifconfig.8">ifconfig(8)</a> join.
    <li>Fixed an alignment issue in <a href="https://man.openbsd.org/iwx.4">iwx(4)</a> Rx descriptors.
    <li>Avoided trying to remove keys while doing crypto in hardware if the station is not active in <a href="https://man.openbsd.org/iwx.4">iwx(4)</a> firmware, fixing a firmware panic.
--- 389,397 ----
  
  <li>Added or improved wireless network drivers:
    <ul>
!   <li>Fixed <a href="https://man.openbsd.org/bwfm.4">bwfm(4)</a> issues with suspend/resume and possible firmware crashes on the M2 Macbook Air.
  
!   <li>Prevented an <a href="https://man.openbsd.org/iwx.4">iwx(4)</a> firmware error when authentication to the AP times out.
    <li>Fixed a crash in <a href="https://man.openbsd.org/iwx.4">iwx(4)</a> when connecting to WEP networks via <a href="https://man.openbsd.org/ifconfig.8">ifconfig(8)</a> join.
    <li>Fixed an alignment issue in <a href="https://man.openbsd.org/iwx.4">iwx(4)</a> Rx descriptors.
    <li>Avoided trying to remove keys while doing crypto in hardware if the station is not active in <a href="https://man.openbsd.org/iwx.4">iwx(4)</a> firmware, fixing a firmware panic.
***************
*** 414,420 ****
  	href="https://man.openbsd.org/ksh.1">ksh(1)</a> environment rather
  	than the more limited <a href="https://man.openbsd.org/sh.1">sh(1)</a>.
    <li>Added support for configuring interfaces by lladdr (MAC).
-   <li>Added support for <a href="https://man.openbsd.org/hostname.if.5">hostname.if(5)</a> by lladdr.
    <li>Made the installer skip interface configuration questions when no interfaces are available.
    <li>Fixed resizing partitions on an auto-allocated disk that had a boot partition.
    <li>Stopped the installer from asking to initialize disks that have
--- 424,429 ----
***************
*** 425,431 ****
  	a disk with softraid chunks (hosting the root disk, for example).
    <li>Stopped offering WEP in the installer if not supported.
    <li>Fixed lock file error on installer exit/abort.
-   <li>Cleaned up lots of code.
    <li>Made <a href="https://man.openbsd.org/installboot.8">installboot(8)</a> <code>-p</code>
  	support <a href="https://man.openbsd.org/softraid.4">softraid(4)</a>.
    <li>Made <a href="https://man.openbsd.org/installboot.8">installboot(8)</a> silently skip
--- 434,439 ----
***************
*** 676,682 ****
  	<li>...
    </ul>
  
!   <li>...
    <!-- smtpd -->
    <li>Prevented <a href="https://man.openbsd.org/smtpd.8">smtpd(8)</a>
  	abort due to a connection from a local, scoped ipv6 address.
--- 684,695 ----
  	<li>...
    </ul>
  
!   <li>Added support for configuring interfaces by lladdr to support
! 	interface configurations bound to a specfic hardware device. The "if"
! 	part of the <a
! 	href="https://man.openbsd.org/hostname.if.5">hostname.if(5)</a>
! 	configuration file can now be a MAC address.
! 
    <!-- smtpd -->
    <li>Prevented <a href="https://man.openbsd.org/smtpd.8">smtpd(8)</a>
  	abort due to a connection from a local, scoped ipv6 address.