Annotation of www/plus.html, Revision 1.1465
1.1440 bentley 1: <!doctype html>
2: <html lang=en id=plus>
3: <meta charset=utf-8>
1.1384 tj 4: <title>OpenBSD -current Changelog</title>
1.1045 david 5: <meta name="description" content="OpenBSD -current changes">
1.1383 deraadt 6: <meta name="viewport" content="width=device-width, initial-scale=1">
7: <link rel="stylesheet" type="text/css" href="openbsd.css">
1.1400 tb 8: <link rel="canonical" href="https://www.openbsd.org/plus.html">
1.1440 bentley 9: <style>
10: strong {
11: color: var(--red);
12: font-weight: normal;
13: }
14:
15: h3 {
16: color: var(--blue);
17: }
18: </style>
1.14 deraadt 19:
1.1440 bentley 20: <h2 id=OpenBSD>
1.1383 deraadt 21: <a href="index.html">
1.1440 bentley 22: <i>Open</i><b>BSD</b></a>
23: -current Changelog
1.1384 tj 24: </h2>
1.863 naddy 25: <hr>
1.14 deraadt 26:
27: <p>
1.1216 schwarze 28: This selection is intended to include all important
29: and all user-visible changes.
30: For a complete record of all changes, please see the "source-changes"
31: mailing list, called "OpenBSD CVS"
32: in the <a href="mail.html#Archives">archives</a>,
33: or use <a href="anoncvs.html#CVS">CVS</a>.
34:
35: <p>
1.846 deraadt 36: For changes in other releases, click below:<br>
37: <a href="plus20.html">2.0</a>,
38: <a href="plus21.html">2.1</a>,
39: <a href="plus22.html">2.2</a>,
40: <a href="plus23.html">2.3</a>,
41: <a href="plus24.html">2.4</a>,
42: <a href="plus25.html">2.5</a>,
43: <a href="plus26.html">2.6</a>,
44: <a href="plus27.html">2.7</a>,
45: <a href="plus28.html">2.8</a>,
46: <a href="plus29.html">2.9</a>,
47: <a href="plus30.html">3.0</a>,
48: <a href="plus31.html">3.1</a>,
1.868 deraadt 49: <a href="plus32.html">3.2</a>,
1.889 david 50: <a href="plus33.html">3.3</a>,
1.916 david 51: <a href="plus34.html">3.4</a>,
1.935 miod 52: <a href="plus35.html">3.5</a>,
1.941 deraadt 53: <a href="plus36.html">3.6</a>,
1.1118 deraadt 54: <br>
1.963 deraadt 55: <a href="plus37.html">3.7</a>,
1.999 deraadt 56: <a href="plus38.html">3.8</a>,
1.1028 deraadt 57: <a href="plus39.html">3.9</a>,
1.1044 deraadt 58: <a href="plus40.html">4.0</a>,
1.1069 deraadt 59: <a href="plus41.html">4.1</a>,
1.1097 deraadt 60: <a href="plus42.html">4.2</a>,
1.1118 deraadt 61: <a href="plus43.html">4.3</a>,
1.1140 deraadt 62: <a href="plus44.html">4.4</a>,
1.1152 deraadt 63: <a href="plus45.html">4.5</a>,
1.1163 deraadt 64: <a href="plus46.html">4.6</a>,
1.1177 deraadt 65: <a href="plus47.html">4.7</a>,
1.1194 deraadt 66: <a href="plus48.html">4.8</a>,
1.1198 nick 67: <a href="plus49.html">4.9</a>,
1.1212 schwarze 68: <a href="plus50.html">5.0</a>,
1.1242 lum 69: <a href="plus51.html">5.1</a>,
1.1276 deraadt 70: <a href="plus52.html">5.2</a>,
1.1300 brett 71: <a href="plus53.html">5.3</a>,
1.1330 deraadt 72: <br>
73: <a href="plus54.html">5.4</a>,
1.1352 brett 74: <a href="plus55.html">5.5</a>,
1.1365 deraadt 75: <a href="plus56.html">5.6</a>,
1.1372 deraadt 76: <a href="plus57.html">5.7</a>,
1.1382 deraadt 77: <a href="plus58.html">5.8</a>,
1.1392 deraadt 78: <a href="plus59.html">5.9</a>,
1.1401 deraadt 79: <a href="plus60.html">6.0</a>,
1.1403 deraadt 80: <a href="plus61.html">6.1</a>,
81: <a href="plus62.html">6.2</a>,
1.1406 deraadt 82: <a href="plus63.html">6.3</a>,
1.1435 pamela 83: <a href="plus64.html">6.4</a>,
1.1457 pamela 84: <a href="plus65.html">6.5</a>,
85: <a href="plus66.html">6.6</a>.
1.422 deraadt 86: <br>
1.186 deraadt 87:
88: <p>
1.1457 pamela 89: <h3>Changes made between OpenBSD 6.6 and -current</h3>
1.847 deraadt 90: <p>
1.1316 brett 91:
1.422 deraadt 92: <ul>
1.1465 ! pamela 93: <!-- 2019/12/16 -->
! 94: <li>Updated bind to 9.10.8-P1, the last ISC-licensed release.
! 95: <li>Added support to <a href="https://man.openbsd.org/lm">lm(4)</a> for NCT6775F, NCT5104D, NCT6779D and NCT679[1235]D sensors.
! 96: <li>Added AMD FCH (KERNCZ) to the list of supported devices in <a href="https://man.openbsd.org/piixpm">piixpm(4)</a>.
! 97: <li>Updated <a href="https://man.openbsd.org/piixpm">piixpm(4)</a> to support newer AMD chips like Hudson-2 and KERNCZ and implemented multi-bus support for SB800, Hudson-2 and KERNCZ.
! 98: <li>Extended the expected SPD types to include DDR4 and low-power DDR3/DDR4.
! 99: <li>Added <a href="https://man.openbsd.org/pledge">pledge(2)</a> inet to <a href="https://man.openbsd.org/dig">dig(1)</a>.
! 100: <li>Updated bind to 9.10.5-P3. This tree is only used to build <a href="https://man.openbsd.org/host">host(1)</a>, <a href="https://man.openbsd.org/dig">dig(1)</a> and <a href="https://man.openbsd.org/nslookup">nslookup(1)</a>.
! 101: <li>Made <a href="https://man.openbsd.org/rpki-client">rpki-client(8)</a> work with the existing cache and not exit if <a href="https://man.openbsd.org/rsync">rsync(1)</a> exits non-zero.
! 102: <!-- 2019/12/15 -->
! 103: <li>Allowed <a href="https://man.openbsd.org/ssh">ssh(1)</a> security keys to act as host keys as well as user keys.
! 104: <!-- 2019/12/14 -->
! 105: <li>Added support for gen2 negotiation to <a href="https://man.openbsd.org/rkpcie">rkpcie(4)</a> and enabled gen2 link state training when the dtb is configured with max-link-speed = 2.
! 106: <li>Introduced a bypass keyword to <a href="https://man.openbsd.org/smtpd">smtpd(8)</a> so that built-in filters can bypass processing when a condition is met.
! 107: <li>Updated to libXfont2 2.0.4.
! 108: <li>Updated to font/util 1.3.2.
! 109: <li>Updated to font/encodings 1.0.5.
! 110: <!-- 2019/12/13 -->
! 111: <li>Tightened permissions for USB device nodes.
! 112: <li>Removed gpr(4).
! 113: <li>Used ssh-sk-helper for all security key signing operations and security key enrollment. Most <a href="https://man.openbsd.org/ssh">ssh(1)</a> tools no longer need to link against libfido2 or interact with /dev/uhid* directly.
! 114: <li>Added support for CIDR in a: spf atoms in <a href="https://man.openbsd.org/smtpd">smtpd(8)</a>.
! 115: <!-- 2019/12/12 -->
! 116: <li>Attached <a href="https://man.openbsd.org/pvclock">pvclock(4)</a> with a lower priority in case of unstable tsc rather than not attaching at all.
! 117: <li>Prevented an overflow due to <a href="https://man.openbsd.org/xen">xen(4)</a> failing to release the interrupt source when unmasking the interrupt.
! 118: <li>Reintroduced socket locking inside socket event filters.
! 119: <li>Fixed an issue where <a href="https://man.openbsd.org/adjtime">adjtime(2)</a> could be set so low that time could be frozen until reboot.
! 120: <li>Allowed sleeping inside kqueue event filters.
! 121: <li>Prevented a hang in the boot loader on the HP EliteBook 830 G6.
! 122: <li>Modified <a href="https://man.openbsd.org/tmux">tmux(1)</a> source-file to allow reading from stdin.
! 123: <li>Updated to X server 1.20.6.
! 124: <!-- 2019/12/11 -->
! 125: <li>Started virtual machines defined in <a href="https://man.openbsd.org/vm.conf">vm.conf(5)</a> in a staggered fashion, helping prevent overload of the host and improper tsc calibration in guests.
! 126: <li>Modified <a href="https://man.openbsd.org/ldpd">ldpd(8)</a> to lookup the adjacency by LSR id as well as source IP address, as the remote peer may change its LSR id.
! 127: <li>Ensured that <a href="https://man.openbsd.org/ld.so">ld.so(1)</a> removed the LD_LIBRARY_PATH environment variable for set-user-ID and set-group-ID executables in low memory conditions.
1.1464 pamela 128: <!-- 2019/12/10 -->
129: <li>Provided proper concurrency control when pausing a vm in <a href="https://man.openbsd.org/vmd">vmd(8)</a>.
130: <li>Fixed <a href="https://man.openbsd.org/isakmpd">isakmpd(8)</a> IKE pcap file creation.
131: <!-- 2019/12/09 -->
132: <li>Fixed empty response packages sent out by <a href="https://man.openbsd.org/ripd">ripd(8)</a> when entries are skipped due to split-horizon simple.
133: <li>Swapped <a href="https://man.openbsd.org/smtpd">smtpd(8)</a> filter response protocol fields to match query protocol. Filters used will need updating.
134: <li>Re-enabled "syscall call-from" checking.
135: <li>Modified -z mode verification in <a href="https://man.openbsd.org/signify">signify(1)</a> to save the header and output it, so signify -zV >saved.tgz will keep the signature for later checks.
136: <!-- 2019/12/08 -->
137: <li>Reduced the maximum number of frame buffers for <a href="https://man.openbsd.org/uvideo">uvideo(4)</a> to allow running higher resolutions without running out of kernel memory.
138: <li>Removed kernel VM86 support.
139: <li>Added a check when IP forwarding is disabled to ensure packet destination address matches interface address.
140: <!-- 2019/12/07 -->
141: <li>Reset the login class each time through the loop when using -L (loop) mode with <a href="https://man.openbsd.org/su">su(1)</a>. Fixes CVE-2019-19519.
142: <!-- 2019/12/06 -->
143: <li>Retired piixpcib(4).
144: <li>Stopped hardcoding the cache directory for <a href="https://man.openbsd.org/rpki-client">rpki-client(8)</a>. Cache and output directory will use defaults for root users and must be specified by non-root users.
145: <!-- 2019/12/05 -->
146: <li>Enabled full use of jumbo frames on <a href="https://man.openbsd.org/bnx">bnx(4)</a> devices.
147: <!-- 2019/12/04 -->
148: <li>Added DEBUG_PKG_CACHE functionality to <a href="https://man.openbsd.org/pkg_add">pkg_add(1)</a>, fetching debug patches when packages are installed.
149: <li>Fixed <a href="https://man.openbsd.org/xenodm">xenodm(1)</a> to use the libc authentication layer correctly.
150: <li>Fixed insufficient username validation performed by libc's authentication privilege separation layer and added additional validation points, further validating in <a href="https://man.openbsd.org/login">login(1)</a> and <a href="https://man.openbsd.org/su">su(1)</a>.
151: <li>Fixed a panic when tearing down vms with <a href="https://man.openbsd.org/vmm">vmm(4)</a>.
1.1462 pamela 152: <!-- 2019/12/03 -->
1.1464 pamela 153: <li>Prevented a <a href="https://man.openbsd.org/radiusd">radiusd(8)</a> crash when user does not exist.
1.1465 ! pamela 154: <li>Prevented escalation to the auth group in <a href="https://man.openbsd.org/xlock">xlock(1)</a> through path-related environment variables and disabled mesa and opengl functionality.
1.1464 pamela 155: <li>Added display of mode sense data to <a href="https://man.openbsd.org/scsi">scsi(8)</a> debug.
1.1462 pamela 156: <li>Added <a href="https://man.openbsd.org/pwmfan">pwmfan(4)</a>, a driver for PWM-regulated fans.
157: <li>Added <a href="https://man.openbsd.org/rkpwm">rkpwm(4)</a>, a driver for the RK3399's PWM controller.
158: <li>Added support for the RK3399's PWM clock to <a href="https://man.openbsd.org/rkclock">rkclock(4)</a>.
159: <!-- 2019/12/02 -->
160: <li>Added <a href="https://man.openbsd.org/tcpdump">tcpdump(8)</a> support for printing RFC 8300 Network Service Header (NSH).
161: <li>Added <a href="https://man.openbsd.org/tcpdump">tcpdump(8)</a> support for VXLAN-GPE.
162: <li>Rewrote dhcpv6 parsing in <a href="https://man.openbsd.org/tcpdump">tcpdump(8)</a> to match the rfc, correctly handling dhcpv6 messages.
163: <li>Assumed <a href="https://man.openbsd.org/grep">grep(1)</a> -R passed with "." rather than printing a warning by default.
164: <li>Reverted switch to tickless backend.
165: <!-- 2019/12/01 -->
166: <li>Allowed forcing specific domains to be resolved by specific resolvers in <a href="https://man.openbsd.org/unwind.conf">unwind.conf(5)</a>, handling typical split-horizon setups.
1.1463 pamela 167: <li>Simplified <a href="https://man.openbsd.org/sysupgrade">sysupgrade(8)</a> directory check and creation (/home/_syspatch). It can now be a symlink.
1.1462 pamela 168: <!-- 2019/11/30 -->
169: <li>Accepted netmask for IPv6 properly in <a href="https://man.openbsd.org/ifconfig">ifconfig(8)</a>.
1.1460 beck 170: <!-- 2019/11/29 -->
1.1462 pamela 171: <li>Added a create-vdisk command to <a href="https://man.openbsd.org/ldomctl">ldomctl(8)</a> analogous to amd64's <a href="https://man.openbsd.org/vmctl">vmctl(8)</a> create.
172: <li>Added uvm_objfree to uvm to efficiently free all pages from a uvm object, used in the buffer cache for considerable speedup when freeing pages.
173: <li>Added <a href="https://man.openbsd.org/rkemmcphy">rkemmcphy(4)</a>, a driver for the RK3399's eMMC PHY.
174: <li>Added support for the RK3399's eMMC clock to <a href="https://man.openbsd.org/rkclock">rkclock(4)</a>.
1.1460 beck 175: <!-- 2019/11/28 -->
1.1462 pamela 176: <li>Introduced <a href="https://man.openbsd.org/msyscall">msyscall(2)</a>, permitting system calls from selected code regions only: the main program, <a href="https://man.openbsd.org/ld.so">ld.so(1)</a>, libc.so and sigtramp. This is intended to harden against a mixture of W^X failures and JIT bugs allowing syscall misinterpretation.
177: <li>Modified root's <a href="https://man.openbsd.org/crontab">crontab(1)</a> to run <a href="https://man.openbsd.org/rpki-client">rpki-client(8)</a> and reload <a href="https://man.openbsd.org/bgpd">bgpd(8)</a> configuration, enabling RPKI ROA filtering.
178: <li>Modified buffer cache to use individual uvm_objs per buffer to speed page lookups.
179: <li>Decayed the <a href="https://man.openbsd.org/unwind">unwind(8)</a> resolver histogram data over time to reflect strategy performance.
180: <li>Removed the -r flag in <a href="https://man.openbsd.org/rpki-client">rpki-client(8)</a>. CRLs will always be checked.
181: <li>Added the "console" command to <a href="https://man.openbsd.org/ldomctl">ldomctl(8)</a> which executes <a href="https://man.openbsd.org/cu">cu(1)</a> on the domain's console.
182: <li>Printed guest domain <a href="https://man.openbsd.org/vcctty">vcctty(4)</a> devices in status output in <a href="https://man.openbsd.org/ldomctl">ldomctl(8)</a>.
183: <li>Removed km_mapblocks from kmemstats and its always-zero column from the <a href="https://man.openbsd.org/ddb">ddb(4)</a> "show malloc" output.
184: <!-- 2019/11/27 -->
185: <li>Implemented a hexdump command in the bootloader, helping to inspect the memory layout created by the firmware and useful for UEFI debugging.
186: <li>Added list-io command to <a href="https://man.openbsd.org/ldomctl">ldomctl(8)</a>, listing the available PCIe devices to be used with the iodevice parameter in <a href="https://man.openbsd.org/ldom.conf">ldom.conf(5)</a>.
187: <li>Measured performance of resolving strategies in <a href="https://man.openbsd.org/unwind">unwind(8)</a>, sorting them and choosing the next best strategy when one fails.
188: <li>Removed captive portal detection from <a href="https://man.openbsd.org/unwind">unwind(8)</a>.
189: <li>Reinstated support for monitor mode and multiple frames in <a href="https://man.openbsd.org/iwm">iwm(4)</a>.
190: <li>Updated GLU to 9.0.1.
191: <li>Updated libdrm to 2.4.100.
1.1460 beck 192: <!-- 2019/11/26 -->
1.1462 pamela 193: <li>Added support for TLS 1.3 post handshake handshake messages and key updates to <a href="https://www.libressl.org/">LibreSSL</a>.
194: <li>Fixed <a href="https://man.openbsd.org/scsi">scsi(8)</a> softraid crypto volumes on 4K-sector disks.
195: <li>Faked disk info to match expected boot disk when EFI bootloader has been received via TFTP, fixing a hang during HP Elitebook UEFI boot.
196: <li>Fixed kernel crash in pf_ioctl with WITH_PF_LOCK and NET_TASKQ > 1.
197: <li>Switched to tickless backend in <a href="https://man.openbsd.org/timeout">timeout(9)</a>, adding new interface <a href="https://man.openbsd.org/timeout_at_ts">timeout_at_ts(9)</a> to avoid backwardly compatible behavior.
198: <li>Allowed use of 'auth' as an origin in <a href="https://man.openbsd.org/smtpd.conf">smtpd.conf(5)</a>.
199: <li>Added support for MSI-X for <a href="https://man.openbsd.org/iwm">iwm(4)</a> devices.
200: <!-- 2019/11/25 -->
201: <li>Allowed use of mail-from and rctp-to as for and from parameters in <a href="https://man.openbsd.org/smtpd.conf">smtpd.conf(5)</a>.
202: <li>Computed RSSI on 9k <a href="https://man.openbsd.org/iwm">iwm(4)</a> devices as for previous generations, fixing spurious signal strength values of over 100%.
203: <li>Added a <a href="https://man.openbsd.org/tmux">tmux(1)</a> p format modifier for padding to width.
204: <li>Stored <a href="https://man.openbsd.org/smtp">smtp(1)</a> session usernames in an envelope, allowing the ruleset to match specific users or mailing addresses.
205: <!-- 2019/11/24 -->
206: <li>Added "no-touch-required" options to <a href="https://man.openbsd.org/ssh-keygen">ssh-keygen(1)</a> and <a href="https://man.openbsd.org/sshd">sshd(8)</a> to disable touch requirement for authorized_keys and certificates.
207: <li>Added an <a href="https://man.openbsd.org/sshd_config">sshd_config(5)</a> PubkeyAuthOptions directive allowing specification of whether <a href="https://man.openbsd.org/sshd">sshd(8)</a> should check whether user presence was tested before a security key was made.
208: <!-- 2019/11/23 -->
209: <li>Withdrew all proposals on <a href="https://man.openbsd.org/slaacd">slaacd(8)</a> startup to prevent indefinite retention of nameservers on interfaces no longer flagged for autoconf.
210: <!-- 2019/11/22 -->
211: <!-- 2019/11/21 -->
212: <li>Prevented a timeout in <a href="https://man.openbsd.org/ssh">ssh(1)</a> when the server doesn't immediately send a banner, such as with multiplexers like sslh.
213: <li>Allowed <a href="https://man.openbsd.org/rc.d">rc.d(8)</a> script to reload <a href="https://man.openbsd.org/sndiod">sndiod(8)</a>.
214: <li>Added tracking of which interfaces have learned nameservers to <a href="https://man.openbsd.org/unwind">unwind(8)</a>.
215: <!-- 2019/11/20 -->
216: <li>Improved <a href="https://man.openbsd.org/ksmn">ksmn(4)</a> temperature conversion precision.
217: <li>Added a quirk to handle Apollo Lake, Gemini Lake and 100 Series Intel SD/MMC <a href="https://man.openbsd.org/sdhc">sdhc(4)</a> controllers which should not have voltages set to 0V.
218: <li>Added Gemini Lake SD/MMC controller <a href="https://man.openbsd.org/pci">pci(4)</a> ids.
219: <li>Ensured proper kernel stack alignment on mips64, fixing a panic on octeon related to <a href="https://man.openbsd.org/pppoe">pppoe(4)</a>.
220: <!-- 2019/11/19 -->
221: <li>Adjusted on-wire signature encoding for ecdsh-sk <a href="https://man.openbsd.org/ssh">ssh(1)</a> keys to better match ec25519-sk keys.
222: <!-- 2019/11/18 -->
223: <li>Fixed an off-by-one TRB issue in bulk transfers larger than 64k, making <a href="https://man.openbsd.org/udl">udl(4)</a> work on <a href="https://man.openbsd.org/xhci">xhci(4)</a>.
224: <li>Added <a href="https://man.openbsd.org/iwm">iwm(4)</a> support for 9260 and 9560 devices.
225: <li>Enabled ESP UDP-encapsulation with the <a href="https://man.openbsd.org/iked">iked(8)</a> -t flag.
226: <li>Added -keyopt option to <a href="https://man.openbsd.org/openssl">openssl(1)</a> cms subcommand, providing rsa_padding_mode:oaep for cms -encrypt and rsa_padding_mode:pss for cms -sign.
227: <li>Added -f for full size to join-pane in <a href="https://man.openbsd.org/tmux">tmux(1)</a>.
228: <!-- 2019/11/17 -->
229: <li>Added <a href="https://man.openbsd.org/rge">rge(4)</a>, a new driver for Realtek 8125 PCI Express 2.5Gb ethernet devices.
230: <li>Repaired the "set delay" option for <a href="https://man.openbsd.org/pf">pf(4)</a> to function as specified in <a href="https://man.openbsd.org/pf.conf">pf.conf(5)</a>.
231: <li>Added the initial framework for the TLSv1.3 server.
232: <li>Used disable-bt overlay with raspberry pi to use <a href="https://man.openbsd.org/pluart">pluart(4)</a> as console, rather than the 'mini uart'.
233: <!-- 2019/11/16 -->
234: <li>Added a -d option to <a href="https://man.openbsd.org/pkg_add">pkg_add(1)</a> to add debug packages if present alongside intended updates or additions.
235: <!-- 2019/11/15 -->
236: <li>Fixed a segmentation fault in <a href="https://man.openbsd.org/ncurses">ncurses(3)</a>.
237: <!-- 2019/11/14 -->
238: <li>Implemented HTTP/1.1 in <a href="https://man.openbsd.org/ftp">ftp(1)</a>.
239: <li>Added direct support for U2F/FIDO2 security keys in <a href="https://man.openbsd.org/ssh">ssh(1)</a>.
240: <li>Began resolving captive portal hosts internally in <a href="https://man.openbsd.org/unwind">unwind(8)</a>.
241: <li>Changed <a href="https://man.openbsd.org/tmux">tmux(1)</a> new-session -A to attach to the best existing session when a session name is not specified, rather than creating a new session.
242: <li>Added an option to <a href="https://man.openbsd.org/tmux">tmux(1)</a> to set the key sent by backspace for systems using ^H.
243: <!-- 2019/11/13 -->
244: <li>Prevented non-root users from using <a href="https://man.openbsd.org/ioctl">ioctl(2)</a> to alter the address of a network interface.
245: <li>Prevented non-root users from setting the parameters of <a href="https://man.openbsd.org/pppoe">pppoe(4)</a> interfaces.
246: <li>Prevented a local user from causing the system to hang by reading specific registers when Intel Gen8/Gen9 graphics hardware is in a low power state.
247: <li>Prevented writes to memory allowed by the Intel Gen9 graphics hardware.
248: <!-- 2019/11/12 -->
249: <li>Notified the user via TTY or $SSH_ASKPASS when <a href="https://man.openbsd.org/ssh">ssh(1)</a> security keys must be tapped/touched in order to perform a signature operation.
250: <li>Enabled ed25519 support in <a href="https://man.openbsd.org/ssh">ssh(1)</a>.
251: <li>Fixed <a href="https://man.openbsd.org/iwm">iwm(4)</a> support and loaded new firmware for 3168 devices.
252: <!-- 2019/11/11 -->
253: <li>Enabled <a href="https://man.openbsd.org/rpki-client">rpki-client(8)</a>.
254: <li>Printed the URL when <a href="https://man.openbsd.org/sysupgrade">sysupgrade(8)</a> fetches new sets.
255: <li>Prevented a crash in ieee80211_node2req() which could be triggered by an <a href="https://man.openbsd.org/ioctl">ioctl(2)</a> if the driver had not yet initialized the channel map.
256: <li>Implemented DNS proposals in <a href="https://man.openbsd.org/unwind">unwind(8)</a> to learn nameservers from network autoconfiguration daemons.
257: <!-- 2019/11/10 -->
258: <li>Moved /usr and var remounting earlier to allow <a href="https://man.openbsd.org/unwind">unwind(8)</a> to start before <a href="https://man.openbsd.org/pf">pf(4)</a> is configured.
259: <li>Added a Content-Security-Policy HTTP header to <a href="https://man.openbsd.org/mandoc">mandoc(1)</a> that allows only CSS.
260: <li>Added an opportunistic run of <a href="https://man.openbsd.org/fw_update">fw_update(1)</a> to <a href="https://man.openbsd.org/sysupgrade">sysupgrade(8)</a> before rebooting to run the upgrade.
261: <li>Introduced a "trusted" modifier to <a href="https://man.openbsd.org/ntpd">ntpd(8)</a>, for peers which should be on a local net, used in situations where https constraints cannot be used but auto settime is desired.
262: <li>Stopped connecting to available open wifi networks when an interface is marked up. This behavior must now be explicitly enabled with <a href="https://man.openbsd.org/ifconfig">ifconfig(8)</a> join "".
263: <!-- 2019/11/09 -->
264: <li>Added support for active scan to <a href="https://man.openbsd.org/bwfm">bwfm(4)</a>.
265: <li>Lowered the priority of APs which fail to connect in the <a href="https://man.openbsd.org/ifconfig">ifconfig(8)</a> join list, allowing switching wifi networks by moving between them without having to down/up the interface or suspend/resume.
266: <!-- 2019/11/08 -->
267: <li>Triggered a background scan when root runs the <a href="https://man.openbsd.org/ifconfig">ifconfig(8)</a> scan command, updating the list of cached APs for future scans and forcing a search for a better AP to roam to.
268: <li>Switched 8260 and 8265 <a href="https://man.openbsd.org/iwm">iwm(4)</a> devices to -34 firmware.
269: <!-- 2019/11/07 -->
270: <li>Added support for buttons 2 and 3 to <a href="https://man.openbsd.org/imt">imt(4)</a>.
271: <li>Enabled DNSSEC validation in <a href="https://man.openbsd.org/unbound">unbound(8)</a> by default.
272: <li>Prevented non-root users from setting the WEP key on <a href="https://man.openbsd.org/an">an(4)</a> wireless network devices.
273: <li>Added -F flag to <a href="https://man.openbsd.org/tmux">tmux(1)</a> send-keys to expand formats in search-backward and forward copy mode commands.
274: <!-- 2019/11/06 -->
275: <li>Performed constraint validation against 9.9.9.9 and 2620:fe::fe by default in <a href="https://man.openbsd.org/ntpd.conf">ntpd.conf(5)</a>.
276: <li>Fixed a bug where outstanding frames on the <a href="https://man.openbsd.org/iwn">iwn(4)</a> aggregation queue interfere with roaming to another AP.
277: <li>Raised net80211's "beacon miss" threshold to avoid frequent reconnects to APs suffering packet loss due to distance.
278: <!-- 2019/11/05 -->
279: <!-- 2019/11/04 -->
280: <li>Removed mobileip(4).
281: <li>Added <a href="https://man.openbsd.org/ogx">ogx(4)</a>, a driver for the OCTEON III network processor.
282: <li>Reinstated <a href="https://man.openbsd.org/openssl">OpenSSL(1)</a> CMS.
283: <li>Switched <a href="https://man.openbsd.org/iwm">iwm(4)</a> 3160, 7260 and 7265 to -17 firmware images.
284: <li>Enabled DQA mode for <a href="https://man.openbsd.org/iwm">iwm(4)</a>.
285: <li>Added support for <a href="https://man.openbsd.org/iwm">iwm(4)</a> firmware paging, required for newer 8k device firmware.
286: <!-- 2019/11/03 -->
287: <li>Fixed a possible crash in <a href="https://man.openbsd.org/smtpd">smtpd(8)</a> when combining "from rdns" with nested virtual aliases under a particular configuration.
288: <li>Released <a href="https://man.openbsd.org/smtpd">smtpd(8)</a>.
289: <li>Added opportunistic DoT support to <a href="https://man.openbsd.org/unwind">unwind(8)</a>.
1.1459 pamela 290: <!-- 2019/11/02 -->
291: <li>Hooked <a href="https://man.openbsd.org/rpki-client">rpki-client(8)</a> up to the build.
292: <li>Enabled CMS in <a href="https://man.openbsd.org/ssl">ssl(8)</a>.
293: <!-- 2019/11/01 -->
294: <!-- 2019/10/31 -->
295: <li>Added initial infrastructure for U2F/FIDO support in <a href="https://man.openbsd.org/ssh">ssh(1)</a>.
296: <li>Constrained and corrected the routes being deleted when applying a new lease in <a href="https://man.openbsd.org/dhclient">dhclient(8)</a> and corrected route comparison. This corrects a network failure with "arpresolve: ... route contains no information".
297: <li>Released OpenBGPD 6.6p0.
298: <li>Added support for RSA-PSS to <a href="https://man.openbsd.org/crypto">crypto(3)</a>.
299: <li>Added an ASR resolver type to <a href="https://man.openbsd.org/unwind">unwind(8)</a>, using the libc asynchronous resolver directly with DHCP-provided nameservers. Switched to the ASR resolver rather than DHCP when behind a captive portal.
300: <li>Made background scans less frequent when choosing the same AP.
301: <!-- 2019/10/30 -->
302: <!-- 2019/10/29 -->
303: <li>Began marking stale prefixes in the Adj-RIB-out during graceful reload of <a href="https://man.openbsd.org/bgpd">bgpd(8)</a> and fixed prefix_withdraw to check the correct prefix flags before removing a prefix from the update or withdraw tree.
304: <li>Added an Intel 9260 wifi card <a href="https://man.openbsd.org/pci">pci(4)</a> id.
305: <li>Added Marvell 88SE9128 AHCI <a href="https://man.openbsd.org/pci">pci(4)</a> id.
306: <li>Fixed a bug with the fatal <a href="https://man.openbsd.org/bgpd">bgpd(8)</a> non-existing prefix call to ensure the missing prefix is inserted into the prefix tree.
307: <li>Fixed <a href="https://man.openbsd.org/bgpd">bgpd(8)</a> crashes where the nexthop_runners tail queue was corrupted.
308: <!-- 2019/10/28 -->
309: <li>Improved error handling for <a href="https://man.openbsd.org/bwfm">bwfm(4)</a> connection attempts.
310: <!-- 2019/10/27 -->
311: <li>Added code laying groundwork for the use of multiple processors on armv7.
312: <!-- 2019/10/26 -->
313: <li>Made <a href="https://man.openbsd.org/vmx">vmx(4)</a> transmit mp-safe.
314: <li>Corrected <a href="https://man.openbsd.org/clock_getres">clock_getres(2)</a> to provide the actual resolution of a given clock.
315: <li>Released <a href="https://www.opensmtpd.org/announces/release-6.6.0.txt">OpenSMTPD 6.6.0</a>.
316: <!-- 2019/10/25 -->
317: <li>Allowed switching to framebuffer "glass" console on armv7, mirroring previous changes to arm64.
318: <!-- 2019/10/24 -->
319: <li>Added retguard for octeon/mips64.
320: <li>Added a missing <a href="https://man.openbsd.org/unveil">unveil(2)</a> of /etc/shells for <a href="https://man.openbsd.org/passwd">passwd(1)</a>.
321: <li>Printed IP addresses in verbose mode in <a href="https://man.openbsd.org/nc">nc(1)</a>.
322: <!-- 2019/10/23 -->
323: <li>Reverted change to <a href="https://man.openbsd.org/nc">nc(1)</a> fixing the -N flag due to regress failures for tls.
324: <li>Added <a href="https://man.openbsd.org/sxisid">sxisid(4)</a>, a driver to read the on-chip eFuses.
325: <li>Added new -N name option to <a href="https://man.openbsd.org/ftp">ftp(1)</a>, allowing calling scripts to change the progname and produce better error messages.
326: <li>Updated timezone information to reflect DST changes for Fiji and Norfolk Island.
327: <li>Rewrote the time validity check for mtfs in <a href="https://man.openbsd.org/rpki-client">rpki-client(8)</a> to correctly account for the timezone.
328: <!-- 2019/10/22 -->
329: <li>Added the system clock interface <a href="https://man.openbsd.org/nanoboottime">nanoboottime(9)</a>, returning the UTC time at which the system booted in seconds and nanoseconds.
330: <!-- 2019/10/21 -->
331: <li>Added <a href="https://man.openbsd.org/sxipwm">sxipwm(4)</a> and <a href="https://man.openbsd.org/pwmbl">pwmbl(4)</a>, drivers which jointly add support for the backlight controller on the Pinebook.
332: <li>On newer ThinkPads reporting HKEY version > 1, allowed <a href="https://man.openbsd.org/acpivout">acpivout(4)</a> to claim backlight controls rather than <a href="https://man.openbsd.org/wscons">wscons(4)</a>, allowing use of the fine-grained backlight BCL steps defined in <a href="https://man.openbsd.org/acpi">acpi(4)</a>.
333: <li>Changed <a href="https://man.openbsd.org/acpivout">acpivout(4)</a> to increment and decrement screen brightness based only on brightness level changes of 5% or higher.
334: <li>Prevented an infinite loop when aborting <a href="https://man.openbsd.org/ulpt">ulpt(4)</a>'s pipe after an I/O error.
335: <!-- 2019/10/20 -->
336: <li>Implemented the "parallel boot" feature on compatible sparc64 firmware.
1.1458 pamela 337: <!-- 2019/10/19 -->
338: <li>Corrected a memory leak in <a href="https://man.openbsd.org/unwind">unwind(1)</a> when the list of DHCP resolvers doesn't change.
339: <!-- 2019/10/18 -->
340: <li>Stopped checking whether the IPv6 source address of a neighbor advertisement is from a neighbor's address, not required in accordance with RFC 4861.
341: <li>Added support for dynamic queue allocation (DQA) to <a href="https://man.openbsd.org/iwm">iwm(4)</a>.
342: <!-- 2019/10/17 -->
343: <li>Corrected cache flush operations on arm64 which were being incorrectly treated as write operations. This fixes a bug where cache flushing caused Firefox to abort.
344: <li>Fixed the -N flag for <a href="https://man.openbsd.org/nc">nc(1)</a> to shut down the socket when input stops, or when tls is in use and either side of the socket goes away.
345: <!-- 2019/10/16 -->
346: <li>Added <a href="https://man.openbsd.org/rpki-client">rpki-client(8)</a> output formats for bird and CSV.
347: <li>Fixed a potential NULL dereference for revoked hostkeys in <a href="https://man.openbsd.org/ssh">ssh(1)</a>.
348: <!-- 2019/10/15 -->
349: <li>Added support for percentage sizes to <a href="https://man.openbsd.org/tmux">tmux(1)</a> resize-pane ("-x 10%") and changed split-window and join-pane -l to accept similar percentages, deprecating the -p option.
350: <li>Made sparc64 <a href="https://man.openbsd.org/autoconf">autoconf(4)</a> try to match the devid against the bootpath if link->port_wwn doesn't work, helping when booting off of an <a href="https://man.openbsd.org/mpii">mpii(4)</a> controller.
351: <!-- 2019/10/14 -->
352: <li>Used <a href="https://man.openbsd.org/unveil">unveil(2)</a> to reduce filesystem access in <a href="https://man.openbsd.org/vmstat">vmstat(8)</a>, <a href="https://man.openbsd.org/iostat">iostat(8)</a> and <a href="https://man.openbsd.org/systat">systat(1)</a>.
353: <li>Changed <a href="https://man.openbsd.org/httpd">httpd(8)</a> to send a 408 response when a timeout happens while headers are being received, but close the connection if no request is received.
354: <!-- 2019/10/13 -->
355: <li>Added an <a href="https://man.openbsd.org/azalia">azalia(4)</a> quirk for the ALC285 on the X1C7 to avoid a clicking noise on the headphone output.
356: <!-- 2019/10/12 -->
357: <li>Moved to 6.6-current.
1.1164 deraadt 358: </ul>
![[BACK]](/icons/back.gif){kind=icon}
Return to plus.html CVS log ![[TXT]](/icons/text.gif){kind=icon}
![[DIR]](/icons/dir.gif){kind=icon}
Up to [local] / www