=================================================================== RCS file: /cvsrepo/anoncvs/cvs/www/plus.html,v retrieving revision 1.1488 retrieving revision 1.1489 diff -c -r1.1488 -r1.1489 *** www/plus.html 2021/01/09 12:15:31 1.1488 --- www/plus.html 2021/02/11 19:31:50 1.1489 *************** *** 92,99 ****

Added PerSourceMaxStartups and PerSourceNetBlockSize options to sshd.
Updated to libc++ and libc++abi 10.0.1.
Added requests for a new certificate without requiring -F when acme-client(1) detects an added or removed SAN in the config file not reflected in the existing certificate on disk. --- 92,204 ----
- Moved to 6.9-beta. + +
- Added the new tmux(1) -S flag to new-window to select the existing window if one with the given name already exists, rather than failing. +
- Disabled sndiod(8) autovolume by default and set the default volume to 127. Setting "-w on" will replicate the previous behavior of automatically decreasing playback volume when new programs start playing. + +
- Upgraded to OpenSSL 1.1 compatible crypto API in iked(8). +
- Implemented the nc(1) -D socket debug option in tcpbench(1), allowing analysis of TCP connections. +
- Introduced uhidpp(4), a driver for Logitech HID++ devices. +
- Added support for the Netgear ProSecure UTM25 to octeon. + +
- Turned off the direct ACK on every other data segment, saving processing time and improving network performance. +
- Changed pf_route so pf(4) only runs when packets enter and leave the stack. + +
- Properly implemented "rde med compare strict" in bgpd(8) and ensured that the order of prefixes is always correct. +
- Introduced ftp(1) support for sending the If-Modified-Since header while fetching over http or https. Switched to using the timestamps from the remote server's Last-Modified header if available when saving local files and introduced the ftp "-u" flag to disable this behavior. +
- Fixed a crash that could occur in sndiod(8) when a usb device is unplugged. + +
- Fixed path MTU discovery for ESP tunneled in IPv6. + +
- Changed route-to in pf.conf(5) to send packets to IPs instead of interfaces. +
- Added basic support for BCM4379, found on the Apple M1 SoCs, to bwfm(4). +
- Completed code cleanup to avoid linker issues by satisfying -fno-common on all architectures. + +
- Made editing GPT in fdisk(8) safer by defaulting offset to the beginning of the largest free space and preventing the creation of overlapping partitions. + +
- Stopped relying on USB devices to correctly present their indices, instead searching for the correct interfaces. This fixes E+ Corp. DAC Audio devices. + + +
- Applied unveil(2) to ldapd(8). + +
- Fixed termination assert in kqueue(2) to avoid a panic. +
- Added support for RSA-PSS PKCS1 signatures to iked(8). +
- Recognized Apple Icestorm cores on arm64. +
- Ensured AI_ADDRCONFIG takes routing domain into account when checking for available address families. + +
- Renamed the HostbasedKeyTypes keyword in ssh_config(5) and the HostbasedAcceptedKeyTypes keyword in sshd_config(5) to HostbasedAcceptedAlgorithms. +
- Disabled logging to syslog(3) for libunbound with unwind(8). Does not prevent logging to stderr with "unwind -d". +
- Fixed a data toggle out of sync problem for ugen(4) and uhidev(4) devices on xhci(4) controllers. +
- Raised the mcx(4) max number of queues/interrupts from 1 to 16. +
- Introduced the bgpd.conf(5) per neighbor and global config option "reject as-set yes/no" to allow rejection of received UPDATES with AS_SET segments. These rejected prefixes can be viewed with bgpctl(8) "show rib in error". +
- Fixed wg(4) ioctl to handle multiple wgpeers. +
- Fixed filtering on kstat(1) unit numbers. + +
- Used stoeplitz to provide a flowid for tcp packets when enabled. +
- Updated the default system.fvwmrc for fvwm(1). +
- Implemented DNS64 synthesis in unwind(8). + +
- Prevented memory corruption or improper page access in vmm(4) due to improper TLB flushing for now by wiring the pages used by virtual machines. +
- Added support for ipmi(4) on PowerNV systems. + +
- Set up ims(4) devices in X11 to behave like touchpads. +
- Introduced ujoy(4), a restricted subset of uhid(4) for game controllers which uses /dev/ujoy/* device nodes. + +
- Fixed a memory leak in httpd(8). +
- Removed the snmpd(8) traphandler process. +
- Renamed the PubkeyAcceptedKeyTypes keyword to PubkeyAcceptedAlgorithms in ssh_config(5) and sshd_config(5). +
- Added support for INVALID_KE_PAYLOAD in iked(8) CREATE_CHILD_SA exchange. + +
- Printed rewritten addresses in tcpdump(8) logged with pflog(4) for rdr-to, nat-to and af-to rules. + +
- Disabled com(4) on sparc64 for m3000s. Console i/o should fall back to ofw routines. +
- Implemented intx support in mvkpcie(4). +
- Enabled athn(4) for arm64. +
- Introduced locking for amaps and anons, improving build performance. + +
- Fixed the httpd(8) example configuration not to generate errors when running without TLS keys already in place. +
- Unlocked getppid(2). +
- Introduced new function if_unit(9), returning a pointer to the interface descriptor corresponding to the unique name. + +
- Added a tmux(1) -N flag to never start the server even if the command would normally do so. +
- Dumped the max payload size and max read request size in the pcie cap in pcidump(8). + + + +
- Prevented a panic in some acpi firmware that provided invalid memory regions in their reserved memory region reporting table. + +
- Pledged the doas(1) "-C" code path. + +
- Implemented unwind(8) listening on TCP. +
- Allowed use of ospfd(8) on interfaces that share the same IP. + +
- Used an 8th order FIR low-pass filter for resampling in sndiod(8) and for aucat(1), removing most of the aliasing noise during resampling. +
- Created a path MTU host route for IPsec(4) over IPv6. + +
- Updated to xterm(1) 363. +
- Disabled base-gcc on loongson and octeon. !
- Added PerSourceMaxStartups and PerSourceNetBlockSize options to sshd(8). !
- Enabled powerpc support for floating-point exceptions. !
- Added support for SSL_get_shared_ciphers(3) in TLSv1.3 and fixed to correctly return ciphers shared by the client and the server. !
- Fixed -s option for cmp(1). !
- Added "strip" directive to relayd.conf(5). ! !
- Fixed a boot-time crash on sparc64 due to mutex use during the message buffer initialization. ! !
- Made CheckHostIP default to "no" in ssh_config(5). !
- Added a "xenodm" login class for xenodm(1) and increased openfiles to 512 to avoid running out of file descriptors with a busy desktop. !
- Ensured sleep(3) calls nanosleep(2) if seconds is zero, now delegating all decisions about whether or not to yield the CPU. ! !
- Allowed a process to open a video(4) device multiple times. Fixes webcam usage with Firefox and BigBlueButton. ! !
- Fixed problems which could arise with software such as bacula and icinga when a root certificate was specified as both a trusted and an untrusted certificate. !
- Began distributing the gzip'd version of bsd.rd on all platforms with boot methods supporting it. ! ! !
- Fixed a use after free in carp(4).
- Updated to libc++ and libc++abi 10.0.1.
- Added requests for a new certificate without requiring -F when acme-client(1) detects an added or removed SAN in the config file not reflected in the existing certificate on disk. *************** *** 147,153 ****
- Fixed ofw regulators that use "active-low" polarity.
- Added PCIe clocks to amlclock(4). !
- Implemented select(2) and pselect(2) on top of kqueue(2).
- Made clang the default compiler on loongson.
- Added an ssh_config(5) KnownHostsCommand that allows the client to obtain known_hosts data from a command in addition to the usual files. --- 252,258 ----
- Fixed ofw regulators that use "active-low" polarity.
- Added PCIe clocks to amlclock(4). !
- Implemented select(2) and pselect(2) on top of kqueue(2). (Reverted 2021-01-08).
- Made clang the default compiler on loongson.
- Added an ssh_config(5) KnownHostsCommand that allows the client to obtain known_hosts data from a command in addition to the usual files.