===================================================================
RCS file: /cvsrepo/anoncvs/cvs/www/plus.html,v
retrieving revision 1.1484
retrieving revision 1.1485
diff -c -r1.1484 -r1.1485
*** www/plus.html 2020/11/14 00:38:00 1.1484
--- www/plus.html 2020/12/26 04:26:53 1.1485
***************
*** 92,97 ****
--- 92,250 ----
+
+ - Made clang the default compiler on loongson.
+
- Added an ssh_config(5) KnownHostsCommand that allows the client to obtain known_hosts data from a command in addition to the usual files.
+
- Prevented initiation of new additional SAs for each policy upon every ikectl(8) config reload.
+
- Introduced smtp(1) -a to perform authentication before sending a message.
+
- Fixed DRI3 support on amdgpu(4) and ati(4).
+
+
- Accepted reject and blackhole routes for IPsec PMTU discovery.
+
- Prevented leaking of ipsec_hosts in iked(8) when building hosts_list.
+
- Fixed booting on powerpc64 machines with memory banks higher in physical address space, needing a larger TCE table.
+
- Introduced klistops, introducing a way to associate lock operations with a klist.
+
- Fixed dig(1) EDNS Client Subnet option (+subnet=).
+
- Fixed IPv6 link-local address handling for nameservers to talk to and address to bind to in dig(1).
+
+
+
- Added support for the i.MX8MP PCIe clocks, USB clocks and second ethernet.
+
- Made large read and write transactions work in amliic(4).
+
- Updated to the December 18, 2020 version of awk(1).
+
- Added fd close notification for kqueue-based poll(2) and select(2).
+
- Corrected the first packet of an ipsec(4) SA to have sequence number 1.
+
+
- Added "amlogic,meson-g12a-dwmac" to dwge(4).
+
- Added amlpinctrl(4) support for the "Always On" GPIOs.
+
- Introduced a delay to work around an issue in bwfm(4) on the BCM43602 that was triggering "unexpected pairwise key update" errors.
+
+
- Made pfctl(8) detect and reject bogus ranges before loading the ruleset to prevent a panic.
+
+
- Made tmux(1) synchronize-panes a pane option and added set-option -U flag to unset an option on all panes.
+
+
+
- Updated to xcb-proto 1.14.1.
+
+
- Updated to Xserver(1) 1.20.10.
+
+
- Prevented a race in dhclient(8) privsep which could cause autoinstall to fail by calling ftp(1) without a local address.
+
- Correctly enumerated files with more than INT_MAX lines with the cat(1) -n flag.
+
+
- Updated to unbound(8) 1.13.0.
+
- Updated to nsd(8) 4.3.4.
+
+
- Fixed TCP going over an interface with fq codel enabled.
+
- Avoided spurious "input packet decapsulations failed" errors in netstat(1) -W with A-MSDU enabled.
+
- Allowed booting of amd64/i386 from 4TB GPT formatted disks.
+
- Flushed the reorder buffer after gap timeout to prevent frames from remaining in the buffer until the next frame is received.
+
- Validated ghostbuster records (RFC 6493) in rpki-client(8).
+
+
- Fixed 802.11 RSN capabilities announced to peers.
+
- Fixed a potential NULL pointer dereference due to malformed ASN.1 in a certificate revocation list or a timestamp response token.
+
+
- Fixed the calculation of "maxlen" in iwm(4) and iwx(4) when there are multiple MPDUs in one packet.
+
- Limited the URL embedded in .cer files in rpki-client(8) to alphanumeric characters and punctuation.
+
+
- Added dwgpio(4), a driver for the Synopsys DesignWare GPIO controller.
+
- Added iked(8) support for RSASSA-PSS signature verification (RFC 7427).
+
- Fixed a race condition in wsmux(4).
+
+
+
- Allowed exporting prefixes from multiple sessions in bgpd(8) into the same pf(4) table, preventing a prefix from being removed from the table on the first withdrawal even if an alternative exists.
+
+
+
- Prevented a TOCTOU race in single_thread_set() by extending the scope of the lock.
+
- Enabled auto-negotiation on the SerDes links, allowing in-band-status to work between mvpp(4) and mvsw(4) on the ClearFog GT 8K.
+
+
- Allowed rad(8) to handle all rdomains in a single daemon.
+
- Made uvm_pagealloc() mp-safe.
+
+
- Ensured rekeying of every child SA in iked(8).
+
+
- Fixed ldapd(8) cert and key path inference for absolute paths.
+
- Taught lld to link the macppc kernel.
+
- Added support for 1000base-x and 2500base-x connections to mvneta(4).
+
- Added mvsw(4), a driver for Marvel "SOHO" switches.
+
- Added the iked(8) "set stickyaddress" option, which attempts to assign the same "config address" when an IKESA is negotiated with the DSTID of an existing IKESA.
+
- Added support for the use of !command to mygate(5), so that netstart has a late opportunity to perform network configuration.
+
+
- Updated to libX11 1.7.0.
+
- Handled an autoconf interface changing its rdomain in slaacd(8).
+
- Added iked(8) support for multiple address pools.
+
+
+
- Set the specified TOS/DSCP for interactive use prior to TCP connect in ssh(1).
+
- CLeaned up passing of struct passwd from monitor to preauth privsep process in ssh(1).
+
- Used a counter instead of random IV for AES-GCM in iked(8), eliminating the risk of random collisions.
+
+
- Changed kqueue_scan() to keep track of collected events in the given context.
+
+
- Killed rpki-client(8) connection upon openrsync(1) server stall.
+
- Added a simple --timeout implementation to openrsync(1).
+
+
- Fixed very old umass(4) devices where the INQUIRY command succeeds but with a residue equal to the requested bytes.
+
+
- Fixed a panic seen with mbuf chains on arm64.
+
+
- Fixed incorrect behavior when using dhclient.conf(5) to change the lease renew/rebind/expiry timing.
+
+
- Added iked(8) -s socket option to specify a control socket.
+
+
- When doing an sftp(1) recursive upload or download of a read-only directory, ensured that the directory was created with write and execute permissions in the interim to allow the transfer.
+
- Fixed urtwn(4) repeated DEAUTH and loss/restoration of link.
+
- Allowed specific sndio(7) devices to be used for play-only and rec-only modes.
+
- Fixed panics on the HoneyComb LX2K with amdgpu(4).
+
+
+
- Prevented accidental truncation of large memory segments on loongson.
+
- Added ACPI support to imxiic(4).
+
+
- Implemented the key material exporter for TLSv1.3.
+
- Prevented process exit in multithreaded programs from reporting the wrong error code.
+
- Added multicast support to bwfm(4) to allow IPv6.
+
+
- Added acpige(4), a driver for ACPI generic event devices, used on te HoneyComb LX2K to implement power button handling.
+
- Added pchgpio(4), a driver for the GPIO controllers found on modern Intel PCHs.
+
+
- Revised the initialization of the drm(4) Linux emulation layer to call it only when the first drm instance attaches.
+
- Extended pcamux(4) with ACPI support.
+
- Added support for the VF610 I2C controller to imxiic(4).
+
- Made sure not to replace 0.0.0.0 with a dynamic address in iked(8) if it is a network address.
+
- Added 10G media support to mvpp(4).
+
- Added SFP+ support to ofw, including support for direct attach cables.
+
+
- Added support for the PL2303HXN series chips to uplcom(4).
+
- Added support for the PCA9547 I2C mux to pcamux(4).
+
+
- Added witness(4) check for uninitialized (or zeroed) lock usage.
+
- Prefixed ssh(1) keyboard interactive prompts with "user@host" for easier identification of connections.
+
- Displayed any other hostnames/addresses associated with a new hostkey when ssh(1) prompts the user to accept it.
+
+
- Implemented auto chain for the TLSv1.3 server.
+
- Updated to freetype 2.10.4.
+
- Fixed athn(4) in client mode against APs that use WPA1/TKIP as the group cipher.
+
+
- Fixed urtwn(4) against access points using WPA1/TKIP as the group cipher.
+
+
- Fixed a panic associated with locks and drm(4) on macppc with Powerbook5,6 and RV350.
+
- Fixed issues with network stopping after the first down/up cycle in mvpp(4).
+
- Fixed link state change behavior in 82598 ix(4) chips.
+
- Increased speed of the dependency check pass for pkg_add(1).
+
- Allowed use of ## and # in tmux(1) styles and added a "w" format modifier for width.
+
+
+
- Added clock support for i.MX8MP.
+
- Implemented iked(8) "from dynamic," installing flows where "dynamic" is replaced by the received dynamic IP address.
+
- Fixed ilogb(3) implementation, preventing a potential infinite loop.
+
+
- Changed from rwlock(9) to mutex(9) for linux rwlocks.
+
- Removed the -L option from dhclient(8).
+
- Fixed wg(4) on macppc by keeping track of allowed ips pointer correctly.
+
- Added the ClearFog GT 8K to mvclock(4).
+
+
- Enabled iked(8) support for ASN1_DN ipsec identifiers.
+
- Fixed rare crashes of unwind(8) when DNS answers are larger than the maximum imsg size.
+
- Fixed rpki-client(8) checks for manifest validity interval.
+
- Released OpenBGPD-6.8p1.
- Added recognition of Cortex-A78AE, Cortex-X1 and Neoverse V1 arm64 CPUs.
***************
*** 121,127 ****
- Created a new "location (found|notfound)" option for httpd.conf(5) to allow testing for resource path existence.
- Prevented kernel reuse of mbuf memory when generating the ICMP6 response to an IPv6 packet.
!
- Updated unbound(8) to 1.12.0.
- Added notices to syslog whenever the "%n" format string component of printf(3) is used.
- Stopped allowing configuration of the same neighbor multiple times in bgpd(8).
--- 274,280 ----
- Created a new "location (found|notfound)" option for httpd.conf(5) to allow testing for resource path existence.
- Prevented kernel reuse of mbuf memory when generating the ICMP6 response to an IPv6 packet.
!
- Updated to unbound(8) 1.12.0.
- Added notices to syslog whenever the "%n" format string component of printf(3) is used.
- Stopped allowing configuration of the same neighbor multiple times in bgpd(8).
***************
*** 162,168 ****
- Added basic support for kclock timeouts to timeout(9).
!
- Updated nsd(8) to 4.3.3.
- Added RETGUARD implementation for powerpc and powerpc64.
--- 315,321 ----
- Added basic support for kclock timeouts to timeout(9).
!
- Updated to nsd(8) 4.3.3.
- Added RETGUARD implementation for powerpc and powerpc64.