=================================================================== RCS file: /cvsrepo/anoncvs/cvs/www/plus.html,v retrieving revision 1.1441 retrieving revision 1.1442 diff -c -r1.1441 -r1.1442 *** www/plus.html 2019/06/01 23:12:48 1.1441 --- www/plus.html 2019/06/12 16:27:08 1.1442 *************** *** 89,95 **** --- 89,228 ----

Changed the number of wsmouse(4) devices created by MAKEDEV to 10, allowing X input configs for many devices at once on newer machines. + +
Implemented SHA-2 support for snmpd(8) authentication (RFC 7860). +
Added the mcx(4) driver to sparc64. +
Implemented MSI-X support on sparc64. + +
Allowed drm(4) allocation of memory without constraints if the hardware supports 64-bit DMA. +
Introduced ntpd(8) automatic settime mode. + +
Included mount_nfs(8) on the amd64 ramdisk_cd. +
Skipped PCI host bridges and devices not present with acpi(1) when establishing the mapping between ACPI device nodes and PCI devices. + +
Added the ukspan(4) driver for the Keyspan USA19HS USB serial adapter. +
Implemented RFC 8555 "Automatic Certificate Management Environment (ACME)" to enable acme-client(1) to communicate with the v02 Let's Encrypt API. IMPORTANT NOTE: Users must change the api url in /etc/acme-client.conf to https://acme-v02.api.letsencrypt.org/directory. The v01 API will no longer be usable. Additionally, the acme-client(1) -A and -D flags have been removed. +
Enabled mcx(4) on arm64. + + +
Added a -v flag to source-file in tmux(1) to show the commands and line numbers. +
Introduced an ECDSA privsep engine and the code required for smtpd(8) to load and use ECDSA certificates. + +
Supported 64BIT DMA for io in mpii(4). +
Increased MAXCPUs to 32 in arm64, allowing use of all cores on the Ampere eMAG. + +
Prevented corruption of the pckbc(4) command queue when the first of multiple synchronous commands to timeout clears the command queue. +
Allowed mg(1) beginning-of-buffer and end-of-buffer commands the ability to take a numeric argument and remove n/10th of the way from the top or bottom of the current buffer respectively. +
Fixed MSI/MSI-X on arm64 machines with agintc(4). +
Implemented mcx(4) rx filtering using the flow table. + +
Switched bintime routines to bintimeadd(9) and introduced bintimecmp(9), with similar behavior to the timeradd(3) macros. +
Used a simple hash table to look up blocks by the fast-hash in openrsync(1) and used a rolling computation, putting openrsync speed on par with gpl rsync for file updates. +
Added mandoc(1) support for 'prefers-color-scheme: dark'. + +
Called uvm_growkernel(9) before uvm is initialized on arm64 to ensure machines with large amounts of physical memory do not fail to initialize uvm. + +
Added support for the Cortex-A65 CPU. +
Re-enabled RETGUARD leaf function optimization for arm64. +
Added relayd(8) support for SNI with new 'tls keypair' option to load additional certificates. +
Checked the type of a network statement when looking for duplicates in bgpd(8). This fixes added network 0.0.0.0/0 after 'network inet static'. +
Added MSI-X support for acpipci(4), pciecam, dwpcie(4) and rkpcie(4). + + +
Changed vmctl(8) syntax to specify command options before the create, start and stop commands, matching commonly-expected style. +
Added mcx(4) jumbo frame support, setting the port MTU up to 9500. + +
Worked around an ntpd(8) bootstrap failure in a dnssec environment by repeating a failed DNS lookup after an incorrect time leads to dnssec validation failure and disallows setting the correct time. + +
Made improvements to bgpd(8) peer finding in the case where many peers have been configured. +
Fixed ubcmtp(4) multitouch by properly reading multi-finger data on type4 devices with padding between finger data. +
Fixed a tmux(1) crash when killing the current window. + +
Supported virtio(4) 1.0 for virtio_pci. +
Modified tcpdump(8) to support '-T erspan' and allow arbitrary gre protocols. +
Allowed specifying area by number as well as id in ospf6d(8). + + +
Updated perl(1) to 5.28.2. + +
Shutdown the service port when behind a captive portal with unwind(8), allowing bypass of captive portals that correctly answer SOA queries for the root zone and return NXDOMAIN for the captive portal redirect domain if edns0 is present. +
Implemented 'show mrt neighbors' in bgpctl(8), a command to print the neighbor table of MRT TABLE_DUMP_V2 dumps. +
Replaced the tmux(1) parser code, unifying parsing of the configuration file and string commands (and allowing constructs formerly unique to configuration to be used in string commands). +
Merged Mesa 19.0.5. + +
Prevented more than one thread from opening a wscons(4) device in read/write mode. +
Ignored APM_UPDATE_TIME events in i386/amd64 apm(4). This prevents constant erosion of the system wallclock on certain systems. +
Stopped duplicate lease negotiation and application in dhclient(8) when RTM_IFINFO reports a change to the MTU of the interface, which had been confusing Google Compute Engine. + +
Added amdgpu(4) from linux 4.19.44 to support recent AMD Radeon cards. + +
Modified vmd(8) to drop fatalx calls when claiming a new vm id, preventing a crash of vmd and existing vms. + +
Adjusted ssh(1) to default to using the rsa-sha2-512 signature algorith when signing certificates with an RSA key. This will render these certificates incompatible with OpenSSH < 7.2 unless the default is overridden by use of the (1) -t flag. +
Fixed integer overflow in block size calculation in aucat(1), fixing truncation of contents of files with rate above 64kHz generated in offline (-n) mode. + +
Used unveil(2) on tetris(6). + +
Prevented dhclient(8) from repeatedly obtaining a new/renewed lease when interface-mtu is present in a lease. +
Mitigated Intel's Microarchitectural Data Sampling vulnerability by using the new CPU VERW behavior if available or by using the proper sequence from Intel's "Deep Dive" doc in the return-to-userspace and enter-VMM-guest paths. Updated vmm(4) to pass through the MSR bits so that guests can apply the optimal mitigation. +
Added tcpdump(8) handling specific to ERSPAN type I. + +
Improved athn(4) support for AR9271 to use the correct clock control register. +
Fixed vmd(8) -b to allow use of 'vmctl start foo -b /bsd -d disk.img -cL'. +
Adjusted ospfctl(8) to accept address and number format for 'ospfctl show database area XXX'. +
Modified vmctl(8) to treat vms disabled in vm.conf the same as any other vm which is stopped. +
Stopped changing router-id on ospfd(8) reload if unspecified. + +
Attached two dwiic(4)-pci devices that are now functioning, enabling correct behavior of the trackpad and trackpoint of the Dell Precision 7520. +
Added support to the amd64 BIOS bootloader to load a kernel at a random virtual address. + +
Allowed specification of a cmdfile for config(8) rather than piping in commands for -ef. +
Added support for 'boot device' to vm.conf(5) grammar, the '-B device' counterpart from vmctl(8). + +
Added tee(1) to the ramdisk filesystem to provide a moving progress bar during auto upgrade/install and a clean log. +
Emulated kvm pvclock in vmm(4), compatible with pvclock(4) in OpenBSD. + +
Added elf(3) support for -znoretpolineplt and made -zretpolineplt the default. Affects i386 and amd64. +
Fixed ifconfig(8) newflags. Added a new 'stayauth' nwflag which can be set to let net80211 ignore deauth frames, useful when deauth frames are being spoofed by an attacker. +
Ensured the extended acpi(4) PM register descriptions actually exist before using them, fixing machines with ACPI 1.0. +
Added first drm render node to the fbtab(5) list of devices to change when logging in on ttyC0. Added drm0 to loongson and added the complete set of wscons and drm devices to arm64. +
Added simple menus to tmux(1) tree, client and buffer modes. + +
Added the colemak keyboard layout. +
Added support for remapping ACPI(4) PM registers using the 'extended' gasio representation from the FADT, fixing the Lanner NCA-1510. +
Enabled reporting of the vm state through use of the vmctl(8) 'status' command. +
Modified ld.so(1) to prune visited leaves when walking dependencies to call init functions in topological sort order, greatly reducing cost. +
Repaired and improved v6 default route selection in install.sub, fixing autoinstalls. +
Added support for IKEv2 Message Fragmentation (RFC 7383) to iked(8). +
Implemented interrupt controller functionality in rkgpio(4), allowing use of the fusbtc(4) interrupt on the RockPro64. +
Added fusbtc(4) to support the Fairchild FUSB302 USB Type-C controller. + +
Synced vm state in vmd(8) when (un)pausing a vm to ensure both vmm(4) and vmd(8) processes know the vm is paused. +
Handled some unhandled instructions for SVM which led to vmm(4) guest termination, as well as RDTSCP and INVLPGA instructions. +
Added sysupgrade(8) support to the sparc64 bootloader. +
Added logging of ssh(1) PermitOpen and PermitListen violations. +
Added a fallback to ehci(4) which enables the USB ports on the RockPro64. +
Added support for simple tmux(1) menus usable with mouse or keyboard. Introduced the command "display-menu" to show a menu bound to the mouse on status line by default. +
Enabled switching between wireless and wired interfaces in dhclient(8), setting the default route with the interface address and allowing two default routes in the routing table. A wired interface will be preferred when connected. +
Explicitly disabled BCM4331 chips present in 2011-2012 Apple Mac systems to prevent an interrupt storm that can result when the Mac EFI firmware enables, but does not disable, the wireless controller. +
Added Intel Atom C3000 pci(4) ids. +
Added port protection support to switch(4). Domain membership is checked for unicast, flooded (broadcast) and local (host-network-bound, e.g. trunk) traffic. +
Introduced malloc_conceal(3) and calloc_conceal(3), which return memory in pages marked MAP_CONCEAL and call freezero() on free(). +
Implemented DNS block lists in unwind(8). +
Fixed a bridge(4) memory leak when multiple interfaces do MAC filtering. +
Added support for from/to in relayd(8) filter rules. + +
Introduced a -k flag to sysupgrade(8) to preserve the files in /home/_sysupgrade after upgrading. +
Added measurement of poll intervals with monotonic clock to acpisbs(4). +
Added consistent use of 'ifconfig $_if [-inet| -inet6]' to clear existing configurations completely after restarting an install. +
Added a sysctl(8) accessor to struct pf_status to allow export of current status and statistics without super-user rights via sysctl. Used this to print systat pf. +
Changed the behavior of swap-window -d in tmux(1) to match swap-pane. +
Preserved dhcp configuration when restarting an install. +
Modified systat(1) to allow the use of 'b' to switch to stats since boot. +
Added ucrcom(4), a driver for the serial console of certain chromebooks.
Removed ld.so-local stack-protector handling functions on retguard systems, as hard-traps are used.
Set the REQUEST_URI CGI variable to the requested URI and query string instead of the rewritten ones in httpd(8).
Fixed integer overflow with an excessively large number of kqueue(2) events.