===================================================================
RCS file: /cvsrepo/anoncvs/cvs/www/plus.html,v
retrieving revision 1.1475
retrieving revision 1.1476
diff -u -r1.1475 -r1.1476
--- www/plus.html 2020/05/06 21:48:12 1.1475
+++ www/plus.html 2020/06/19 16:36:37 1.1476
@@ -91,4 +91,163 @@
+
+- Added a tmux(1) -A option to pause a pane manually.
+
+
- Added escodec(4), a driver for the Everest ES8316 audio codec used on the Pinebook Pro.
+
- Added rkiis(4), a driver for the I25 controller found on the Rockchip RK3399.
+
- Added simpleamp(4), a driver for "simple audio amplifier," one of the aux devices for simpleaudio(4).
+
- Added simpleaudio(4), a driver for "simple audio cards." This is a wrapper connecting the I25 controller, the codec and some aux devices.
+
- Introduced a framework for digital audio interfaces.
+
- Populated a list of 256 brightness levels as a fallback when the device tree does not specify a list, making the Pinebook Pro display work with the dtb from Linux 5.7.
+
- Updated awk(1) through the June 5, 2020 version.
+
- Provided an optimized implementation of ffs(3) in the kernel on arm64/powerpc/powerpc64.
+
- Added cwfg(4), a driver for the Cellwise CW201x fuel gauge on the Pinebook Pro.
+
- Added opal(4), a driver that interacts with the OPAL firmware on powerpc64 and implements RTC functionality.
+
+
- Added IBM POWER9 host bridge pci(4) id.
+
- Prevented rcs(1) removal of locked revisions with rcs -orange, avoiding leaving behind a lock for a revision which no longer exists.
+
+
- Added Intel 200 Series HD Audio pci(4) id.
+
- Prevented a use-after-free when a wireless device is detached.
+
- Updated drm(4) to linux 5.7.
+
+
- Added Marvel 88SE9215 and 88SE9235 AHCI pci(4) ids.
+
- Prevented callers inspecting unrelated fields in the libc resolver function asr_run().
+
+
- Moved Powerbook5,4 audio from aoa(4) to snapper(4), adding the missing TAS3004 volume control.
+
+
- Added ssl(8) support for additional GOST curves and aliases for 256-bit GOST curves.
+
- Added support for pausing a tmux(1) pane when the output buffered for a control mode client is too far behind, controllable with refresh-client -f and -A.
+
+
- Prevented the HID parser from overflowing if a malicious device provides too many PUSH.
+
- Added support for the Cortex-A78 cpu.
+
- Improved TLSv1.3 client certificate selection to allow use of EC certificates.
+
- Fixed pf.conf(5) "route-to TABLE least-states" in an anchor.
+
+
- Updated perl(1) to 5.30.3.
+
+
- Introduced acpihid(4) for ACPI HID event and 5-button array devices.
+
- Added support for hardware vlan tagging to mcx(4).
+
+
+
- Added an SK hynix NVMe pci(4) id.
+
- Released LibreSSL 3.2.0.
+
- Added umstc(4), a driver for Microsoft Surface Type Cover keyboards.
+
- Began looking for non-expired certificates first when building a chain, making certificate validation possible for various sites that are serving expired AddTrust certificates.
+
+
- Improved CPU frequency scaling in automatic performance mode by removing accounting for offline CPUs.
+
+
- Added to ssh_config(5) a selection of keywords allowed to expand shell-style ${ENV} environment variables on the client side.
+
- Adjusted to complete group key renewal immediately if no station is associated when ieee80211_proto.c runs.
+
- Prevented a panic where athn(4) attempted to transmit old, unencryptable frames after switching to a new group key in hostap mode.
+
+
- Enabled building wsmoused(8) and wsfontload(8) on arm64 and armv7.
+
- Fixed display glitches on smaller screens or with larger fonts in efifb(4) associated with remapping and attaching.
+
- Enabled scrollback in simplefb(4).
+
- Prevented unconditional initialization of VGA on amd64 boot causing video distortion.
+
+
- Corrected getopt_long(3) parsing of a trailing dash in an option group, which was being incorrectly returned as an argument.
+
+
- Removed mail.local(8) support for world-writable mail spools.
+
- Added AES-GCM mode ciphers for IKEv2, configurable in iked.conf(5) with the new "ikesa enc" options aes-128-pcm, aes-256-gcm, aes-128-gcm-12 and aes-256-gcm-12.
+
- Rewrote the entropy enqueue ring to collect damage asynchronously and adapted the dequeue to mix a selection of "best" ring entries, exponentially backing off the dequeue timeout, to compensate rapidly for weak seeding in unidentifiable conditions and ensure quality to arc4random() calls early in boot.
+
- Introduced detection of /etc/random.seed reuse.
+
- Reworked kernel loading with octboot(4), which now does not rely on a mounted filesystem.
+
- Prevented a fatal iwx(4) firmware error when the driver moves out of AUTH state.
+
- Rewrote m88k mutex code as a slight variation of the MI mutex code, potentially improving stability and rendering mutex spinning time visible in top(1).
+
- Allowed passage of unencrypted 802.11 frames during hardware decryption post-processing, fixing failure of some ral(4) devices to receive packets on encrypted networks.
+
- Added support to urtwn(4) for TP-Link TL-WN822N-EU v5 (and v4).
+
+
- Restricted ssh-agent(1) from signing web challenges for FIDO keys, preventing ssh-agent forwarding on a host that has FIDO keys attached from granting the ability for the remote side to also sign challenges for web authentication using those keys.
+
- Increased the default number of ldom and ttyV devices for sparc64 from eight to sixteen.
+
- Passed boothowto from the sparc64 bootloader to the kernel using .openbsd.bootdata.
+
- Added wsmoused(8) support to efifb(4).
+
- Added support for the ThingM blink(1) USB notification light.
+
- Stopped syslogd(8) from closing UDP sockets for sending messages when DNS lookup of a UDP loghost fails, alloiwing them to be used to send if DNS is working during the next SIGHUP.
+
- Made non-root filesystems FFS2 for landisk, sgi and luna88k.
+
+
- Made ldomctl(8) "init-system -n" check vcpu and memory constraints.
+
- Relaxed filename checks in syspatch(8) to allow use of hyphens.
+
+
- Adjusted dwpcie(4) timing to improve likelihood of a successful PCIe link on the i.MX8MM. Avoids a failure to detect em(4) on the HummingBoard Pulse.
+
+
- Added RB_GOODRANDOM passed from bootloader to kernel in boothowto, indicating confidence a "great seed" was loaded.
+
- Added an Atheros QCA986x/988x pci(4) ID.
+
- Enabled the FFS2 option on the luna88k ramdisk.
+
- Added support for the Marvell Xenon SDHC, used as storage on the Armada 3700 and 8040 SoCs. This should make eMMC7CD show up on the MACCHIATObin.
+
- Added support for the SD card detect pins on the Turris Mox.
+
- Added mkvpcie(4), a driver for the Aardvark PCIe controller found on the Armada 3700 SoC.
+
- Fixed the ksh(1) exit code when evaluating a || compound list to prevent termination of the shell when running under -e.
+
+
- Added an ASMedia ASM1182e PCIe switch pci(4) id.
+
- Fixed an uninitialized variable and potential stack overflow with IPv6 connections in smtpd(8).
+
+
- Implemented a carp(4) transmit bypassing the ifq on output, enqueuing the packet directly on the parent interface.
+
- Opened up a 4GB memory bus window for mvneta(4) on the Marvell Armada 3700, making the second ethernet controller/port work on the Turris Mox.
+
+
- Released OpenSMTPD 6.7.0p1.
+
- Moved back to FFS1 by default for MFS.
+
- Updated unbound(8) to 1.10.1.
+
+
- Added support for TLS 1.3 server to send certificate status messages with oscp staples.
+
- Released rpki-client(8) 6.7p0.
+
- Offloaded CCMP (WPA2) encryption and decryption to iwm(4) hardware, reducing CPU load during traffic bursts.
+
- Introduced a "dark mode" for directory listings and error pages in httpd(8).
+
- Made OpenBSD boot on the odroid c4 with power domain in amldwusb(4).
+
- Added amlpwrc(4), a driver for the power domain controller found on Amlogic SoCs.
+
- Fixed a hang in rpki-client(8) by properly waiting for exiting openrsync(1) processes.
+
- Made FFS2 the default for newfs(8).
+
+
- Changed install images called *.fs to *.img to accommodate some UEFI bootloaders.
+
- Restored VGA fonts on VT switch, preventing an unusable screen when switching to a VT with a custom VGA font from X.
+
- Added a decode error alert when a TLS server provides an empty certificate list.
+
+
- Began initial development of an OpenBSD/powerpc64 port.
+
- In tmux(1):
+
+- Added an option to set the pane border lines style as single lines, double or heavy, simple or number (the pane numbers).
+
- Added a client flag 'active-pane' which stores the active pane in the client and allows it to be changed independently from the real active pane stored in the window.
+
- Added a -D flag to run in non-daemonized mode.
+
- Added a customize mode (C) where keys and options can be browsed and changed.
+
- Added M-+ and M-- to expand and collapse all items in tree mode.
+
- Changed refresh-client -F to -f and added -f flags to attach-session and switch-client.
+
- Added -e for new-session to set environment variables.
+
- Added the 'e' key in buffer mode to open the buffer in an editor.
+
- Added -W and -T flags to command-prompt to only complete a window and a target.
+
+ - Ensured that a TLSv1.3 server has provided a certificate before attempting validation.
+
- Implemented kqueue(2) support for video(4).
+
- Updated to xkbprint 1.0.5.
+
- Updated to libXxf86dga 1.1.5.
+
- Updated to libXrandr 1.5.2 and xrandr(1) 1.5.1.
+
- Updated to libxcb 1.14 and xcb-proto 1.14.
+
+
- Fixed CCMP replay checks with 11n Rx aggregation and CCMP hardware offloading.
+
- Disabled ohci(4) on the amd64 ramdisk kernel.
+
- Fixed dhclient(8) domain-search option processing.
+
+
- Enabled TLSv1.3 support in relayd(8).
+
- Set ddb(4) "/t" to show a trace via TID on all architectures.
+
- Updated nsd(8) to 4.3.1.
+
+
- Added -rls1_3 and -no_tls1_3 options to openssl(1) s_server.
+
- Preserved group/world read permission on known_hosts files across runs of ssh-keygen(1) "-Rf /path".
+
+
+
- Fixed an iked(8) policy lookup edge case for simultaneous transport and tunnel mode SAs.
+
- Enabled the TLSv1.3 server in openssl(1).
+
- Improved reporting of remaining power with batteries of different capacities in acpi(4).
+
- Allowed specifying -d multiple times in slowcgi(8).
+
- Added bgpctl(8) support for VPNv6 in the family option of the "show rib" command.
+
+
- Fixed two out-of-bounds array accesses in ioctl code pathways in wscons(4).
+
- Made "reason" parsing in bgpctl(8) more generic and introduced it to the "reload" command.
+
- Added an optional "domain name" acme-client.conf(5) option allowing use of multiple domain sections with the same name and creation of an rsa and an ecdsa key for the same domain name.
+
+
+
- Fixed a crash on landisk in unwind(8) due to cmsg buffer misalignment.
+
- Prevented hangs in existing processes due to an indefinite wait for flushing when closing a tty.
+
+
- Moved to 6.7-current.