=================================================================== RCS file: /cvsrepo/anoncvs/cvs/www/plus.html,v retrieving revision 1.1446 retrieving revision 1.1447 diff -c -r1.1446 -r1.1447 *** www/plus.html 2019/07/31 19:43:48 1.1446 --- www/plus.html 2019/08/16 16:40:34 1.1447 *************** *** 89,94 **** --- 89,187 ----

Implemented backlight control for amdgpu(4), allowing setting of the backlight using wsconsctl(8). +
Modified azalia(4) to enable speaker routing on the ThinkPad X1C7. +
Fixed a segmentation fault in awk(1). +
Allowed PXE booting using U-Boot by relaxing requirements of the EFI PXE protocol. +
Enabled amdgpu(4) on amd64. + +
Added Union Memory NVMe pci(4) ids. +
Modified ospfd(8) to warn when a neighbor changes its source IP address. + +
Ensured that mail rejected by the LMTP server in smtpd(8) will stay queued, rather than bouncing. +
Added clock support to sxisyscon(4), a driver for the system controller found on various Allwinner SoCs. +
Fixed pluart(4) output when a machine is under load. + +
Imported from OpenSSL 1.1.1 to ultimately support CMS in crypto(3). + +
Moved to 6.6-beta. +
Used unveil(2) to restrict ldpd(8) filesystem access. +
Added TSC synchronization for multiprocessor machines and re-enabled TSC as the default amd64 time source. +
Imported snmp(1), a new snmp client which aims to be netsnmp-compatible for supported features. It will shortly replace snmpctl(8). + +
Added --address argument to openrsync(1) to bind to the specified address when connecting to an rsync daemon. +
Began supporting WPA2 CCMP encryption/decryption in hardware with iwm(4). +
Disabled filesystem access for dhcpd(8) invoked with -A/-C/-L through use of unveil(2). + +
Removed -d dst and -t minutes_west from date(1) as part of the kernel timezone removal effort. +
Added recognition of the azalia(4) Realtek ALC285. +
Mitigated CVE-2019-1125, a potential exploit utilizing a variant of the Spectre side-channel vulnerability in Intel CPUs built since 2012. +
Added uvideo(4) support for dual functions on integrated USB cameras. +
Added uvideo(4) support for the KSMedia 8-bit IR format. +
Improved bgpd(8) RIB reload behavior and removed 'route-collector yes|no' from the bgpd config in favor of 'rde rib Loc-RIB no evaluate', which can be altered during runtime. + +
Fixed random kernel hangs on some sparc64 machines by blocking interrupts while sending an IPI on sunv4 (as on sun4u). + +
Fixed vnode leak bugs in unveil(2) and realpath(3) where namei(9) reference counted the equal parent and lookup vnode twice. + +
Implemented smbios(4) support on arm64. + +
Increased maxusers to 80 on arm64, allowing growth up to 128. +
Ensured a one-shot-upgrade on compatible systems by having the bootloader us fchmod -x upon discovering and opening /bsd.upgrade, so that the file cannot be re-executed on the next boot. + +
Added Ampere vendor and eMAG PCIe pci(4) ids. + +
Fixed an smtpd(8) crash on excessively large input. +
Fixed a umount(8) device busy error when unveil(2) and chroot(8) are used together. + +
Added tpmr(4), an 802.1Q two-port MAC relay implementation. + +
Fixed dual booting of MacOS 9.2.2 formatted disks. +
Enabled the AUTOCONF4 dhclient(8) flag, set on startup and able to be set/unset by ifconfig(8). + +
Prevented a panic when setting up a gre(4) tunnel when IPv6 duplicate address detection sends a packet too soon. +
Made nc(1) proxy auth work with http 1.1-speaking webservers. +
Added support for 802.11n Tx aggregation to net80211 and iwm(4). + +
Added iavf(4) driver for Intel Ethernet Adaptive Virtual Functions compatible with SR-IOV virtual functions of Intel 700 series and newer ethernet controllers. +
Added octeon bootloader to files copied to the boot partition. To use the bootloader, the firmware must be configured to load file "boot" instead of "bsd." +
Increased the maximum channels for uaudio(4) devices from 16 to 64. + +
Fixed booting from nvme(4) on sparc64. +
Moved ldomd(8) configuration format from ldomctl(8) into ldom.conf(5). + +
Added recognition of sparc64 PCI buses which don't support INTx. + +
Added Sun Static Direct I/O pci(4) ids. +
Added checks for programs trying to access files hidden by unveil(2) and added these violators to the lastcomm(1) output and daily mail. + +
Fixed a pledge(2) violation in ssh(1) when a combination of a Yubikey, GnuPG and remote forwarding is used. +
Made SMTPS default to port 465 in relay-host. +
Ensured that -n overrides -t in lock(1), irrespective of order. + + +
Skipped sending mail in secure mode (-S) in vi(1) when executing the :pre[serve] command or dying from SIGTERM, allowing creation of the recovery file without adding to the pledge(2). +
Disabled caches and MMU on 32-bit ARM before jumping to the kernel entry point, to meet OpenBSD/armv7 kernel expectations of a boot with these off while UEFI and U-Boot work with them enabled. +
Applied unveil(2) to switchd(8). + + +
Ensured bridge(4) will choose the physical interface for delivery when multiple ports share the same MAC address. + +
Removed the default timeout from lock(1). +
Prevented a possible race condition during dhclient(8) startup. +
Increased efficiency of poll() in bgpd(8) by allocating increased send and receive buffers for socketpair(). +
Added "slow" to the list of ethernet protocol names in pcap(3). + +
Allowed the ssh-keygen(1) verbose flag when searching for host keys in known hosts, printing the matching hosts's random art signature. + +
Prevented a kernel crash in pf(4) by adding a check to prevent expired once rules from being added to pf_rule_gcl. +
Changed the bgpd(8) Adj-RIB-Out to a per-peer set of RB trees, improving speed. +
Added a bootloader for octeon to be enabled later. The loader program is accompanied by the octboot(4) device, which allows loading and launching kernels. + +
Prevented integer overflow when checking mbuf limits. +
Fixed a race condition in ntpd(8) and adjusted to re-resolve and retrieve constraints after clock syncing to correct shifts during time adjustment.
Made realpath(3) posixly correct by changing the kernel implementation not to succeed on final path components which do not exist.
Added support for PKCS8 as an optional format for storage of private ssh(1) keys, enabled via ssh-keygen -m PKCS8.