Annotation of www/plus.html, Revision 1.1466
1.1440 bentley 1: <!doctype html>
2: <html lang=en id=plus>
3: <meta charset=utf-8>
1.1384 tj 4: <title>OpenBSD -current Changelog</title>
1.1045 david 5: <meta name="description" content="OpenBSD -current changes">
1.1383 deraadt 6: <meta name="viewport" content="width=device-width, initial-scale=1">
7: <link rel="stylesheet" type="text/css" href="openbsd.css">
1.1400 tb 8: <link rel="canonical" href="https://www.openbsd.org/plus.html">
1.1440 bentley 9: <style>
10: strong {
11: color: var(--red);
12: font-weight: normal;
13: }
14:
15: h3 {
16: color: var(--blue);
17: }
18: </style>
1.14 deraadt 19:
1.1440 bentley 20: <h2 id=OpenBSD>
1.1383 deraadt 21: <a href="index.html">
1.1440 bentley 22: <i>Open</i><b>BSD</b></a>
23: -current Changelog
1.1384 tj 24: </h2>
1.863 naddy 25: <hr>
1.14 deraadt 26:
27: <p>
1.1216 schwarze 28: This selection is intended to include all important
29: and all user-visible changes.
30: For a complete record of all changes, please see the "source-changes"
31: mailing list, called "OpenBSD CVS"
32: in the <a href="mail.html#Archives">archives</a>,
33: or use <a href="anoncvs.html#CVS">CVS</a>.
34:
35: <p>
1.846 deraadt 36: For changes in other releases, click below:<br>
37: <a href="plus20.html">2.0</a>,
38: <a href="plus21.html">2.1</a>,
39: <a href="plus22.html">2.2</a>,
40: <a href="plus23.html">2.3</a>,
41: <a href="plus24.html">2.4</a>,
42: <a href="plus25.html">2.5</a>,
43: <a href="plus26.html">2.6</a>,
44: <a href="plus27.html">2.7</a>,
45: <a href="plus28.html">2.8</a>,
46: <a href="plus29.html">2.9</a>,
47: <a href="plus30.html">3.0</a>,
48: <a href="plus31.html">3.1</a>,
1.868 deraadt 49: <a href="plus32.html">3.2</a>,
1.889 david 50: <a href="plus33.html">3.3</a>,
1.916 david 51: <a href="plus34.html">3.4</a>,
1.935 miod 52: <a href="plus35.html">3.5</a>,
1.941 deraadt 53: <a href="plus36.html">3.6</a>,
1.1118 deraadt 54: <br>
1.963 deraadt 55: <a href="plus37.html">3.7</a>,
1.999 deraadt 56: <a href="plus38.html">3.8</a>,
1.1028 deraadt 57: <a href="plus39.html">3.9</a>,
1.1044 deraadt 58: <a href="plus40.html">4.0</a>,
1.1069 deraadt 59: <a href="plus41.html">4.1</a>,
1.1097 deraadt 60: <a href="plus42.html">4.2</a>,
1.1118 deraadt 61: <a href="plus43.html">4.3</a>,
1.1140 deraadt 62: <a href="plus44.html">4.4</a>,
1.1152 deraadt 63: <a href="plus45.html">4.5</a>,
1.1163 deraadt 64: <a href="plus46.html">4.6</a>,
1.1177 deraadt 65: <a href="plus47.html">4.7</a>,
1.1194 deraadt 66: <a href="plus48.html">4.8</a>,
1.1198 nick 67: <a href="plus49.html">4.9</a>,
1.1212 schwarze 68: <a href="plus50.html">5.0</a>,
1.1242 lum 69: <a href="plus51.html">5.1</a>,
1.1276 deraadt 70: <a href="plus52.html">5.2</a>,
1.1300 brett 71: <a href="plus53.html">5.3</a>,
1.1330 deraadt 72: <br>
73: <a href="plus54.html">5.4</a>,
1.1352 brett 74: <a href="plus55.html">5.5</a>,
1.1365 deraadt 75: <a href="plus56.html">5.6</a>,
1.1372 deraadt 76: <a href="plus57.html">5.7</a>,
1.1382 deraadt 77: <a href="plus58.html">5.8</a>,
1.1392 deraadt 78: <a href="plus59.html">5.9</a>,
1.1401 deraadt 79: <a href="plus60.html">6.0</a>,
1.1403 deraadt 80: <a href="plus61.html">6.1</a>,
81: <a href="plus62.html">6.2</a>,
1.1406 deraadt 82: <a href="plus63.html">6.3</a>,
1.1435 pamela 83: <a href="plus64.html">6.4</a>,
1.1457 pamela 84: <a href="plus65.html">6.5</a>,
85: <a href="plus66.html">6.6</a>.
1.422 deraadt 86: <br>
1.186 deraadt 87:
88: <p>
1.1457 pamela 89: <h3>Changes made between OpenBSD 6.6 and -current</h3>
1.847 deraadt 90: <p>
1.1316 brett 91:
1.422 deraadt 92: <ul>
1.1466 ! pamela 93: <!-- 2020/01/16 -->
! 94: <li>Added a -p command line option to <a href="https://man.openbsd.org/iked">iked(8)</a> allowing configuration of the UDP encapsulation port.
! 95: <li>Implemented "start -c" in <a href="https://man.openbsd.org/ldomctl">ldomctl(8)</a> to automatically connect to the console.
! 96: <!-- 2020/01/15 -->
! 97: <li>Allowed <a href="https://man.openbsd.org/pfctl">pfctl(8)</a> to recursively flush rules and tables.
! 98: <!-- 2020/01/14 -->
! 99: <li>Removed IPsec flow blocking unencrypted IPv6 traffic in <a href="https://man.openbsd.org/iked">iked(8)</a>.
! 100: <li>Fixed <a href="https://man.openbsd.org/acpivout">acpivout(4)</a> screen brightness adjustment through function keys, better supporting machines using exponential brightness scaling.
! 101: <li>Updated to libXt 1.2.0, xauth 1.1, xhost 1.0.8, viewres 1.0.6, fonttosfnt 1.1.0 and libXmu 1.1.3.
! 102: <li>Added <a href="https://man.openbsd.org/amlsm">amlsm(4)</a>, a driver for the "secure monitor" firmware interface.
! 103: <li>Added <a href="https://man.openbsd.org/amltemp">amltemp(4)</a>, a driver for the temperature sensors on various Amlogic SoCs.
! 104: <!-- 2020/01/13 -->
! 105: <li>Fixed Etron EJ168 USB 3.0 Host Controllers via USB 2 devices.
! 106: <li>Unlocked <a href="https://man.openbsd.org/kqueue">kqueue(2)</a>.
! 107: <li>Added the capability for armv7 boot from another block device than the one from which efiboot was loaded.
! 108: <!-- 2020/01/12 -->
! 109: <li>Added thermal sensor clocks to <a href="https://man.openbsd.org/amlclock">amlclock(4)</a>.
! 110: <li>Removed the <a href="https://man.openbsd.org/tmux">tmux(1)</a> terminal type in favor of flags DECSLRM and DECFRA.
! 111: <li>Added a human-readable mode (-h) to <a href="https://man.openbsd.org/systat">systat(1)</a>.
! 112: <!-- 2020/01/11 -->
! 113: <li>Introduced <a href="https://man.openbsd.org/tsleep_nsec">*sleep_nsec(9)</a> to allow sleeping for a specified minimum duration, allowing use at the syscall layer and elsewhere within the kernel where this minimum duration is required.
! 114: <li>Added support for the SIERRA MC7700 to <a href="https://man.openbsd.org/umsm">umsm(4)</a>.
! 115: <!-- 2020/01/10 -->
! 116: <li>Removed the sli(4) driver.
! 117: <li>Fixed channel duplication (-j option) in <a href="https://man.openbsd.org/sndiod">sndiod(8)</a>.
! 118: <li>Prevented a kernel panic with "dangling vnode" during forced unmount.
! 119: <!-- 2020/01/09 -->
! 120: <li>Removed the dpt(4) driver for DPT EATA SCSI RAID.
! 121: <!-- 2020/01/08 -->
! 122: <li>Added an ADATA SX82000 Pro <a href="https://man.openbsd.org/pci">pci(4)</a> id.
! 123: <!-- 2020/01/07 -->
! 124: <li>Added -Z to the default <a href="https://man.openbsd.org/tmux">tmux(1)</a> switch-client command in tree mode.
! 125: <li>Allowed use of the <a href="https://man.openbsd.org/smtpd">smtpd(8)</a> session username in built-in filters when available.
! 126: <li>Corrected verification of TLS certificates in <a href="https://man.openbsd.org/nc">nc(1)</a>.
! 127: <!-- 2020/01/06 -->
! 128: <li>Implemented scrolling in <a href="https://man.openbsd.org/top">top(1)</a> using the 9 and 0 keys.
! 129: <li>Allowed <a href="https://man.openbsd.org/ipmi">ipmi(4)</a> to attach using mmio.
! 130: <!-- 2020/01/05 -->
! 131: <!-- 2020/01/04 -->
! 132: <li>Updated to xorgproto 2019.2, libX11 1.6.9, libXi 1.7.10, libXvMC 1.0.12, libxkbfile 1.1.0 and libXpm 3.5.13.
! 133: <li>Allowed freeing of anons as a list of pages rather than one at a time, allowing for more efficient memory freeing.
! 134: <li>Introduced a -n option to <a href="https://man.openbsd.org/ldomctl">ldomctl(8)</a> to validate the configuration file and exit.
! 135: <li>Prevented a use-after-free causing crashes with <a href="https://man.openbsd.org/uhidev">uhidev(4)</a> devices.
! 136: <!-- 2020/01/03 -->
! 137: <li>Fixed RAID volume WWIDs for <a href="https://man.openbsd.org/mpii">mpii(4)</a> LSI controllers on sparc64, allowing <a href="https://man.openbsd.org/autoconf">autoconf(9)</a> to identify the volume as the root device and boot off hardware RAID.
! 138: <!-- 2020/01/02 -->
! 139: <li>Added <a href="https://man.openbsd.org/timeout_set_flags">timeout_set_flags(9)</a> and TIMEOUT_INITIALIZER_FLAGS(9), allowing the caller to initialize timeouts with arbitrary flags.
! 140: <li>Added the ability to download FIDO2 resident keys from a token via the <a href="https://man.openbsd.org/ssh-keygen">ssh-keygen(1)</a> -K option and save public/private keys into the current directory.
! 141: <li>Unlocked <a href="https://man.openbsd.org/pipe">pipe(2)</a> and <a href="https://man.openbsd.org/pipe2">pipe2(2)</a>.
! 142: <li>Introduced option filter-pf-addresses to <a href="https://man.openbsd.org/snmpd.conf">snmpd.conf(5)</a>, allowing the OPENBSD-PF-MIB::pfTblAddrTable tree to be filtered out when many prefixes are stored in pf tables, reducing CPU usage during bulk walks.
! 143: <!-- 2020/01/01 -->
! 144: <!-- 2019/12/31 -->
! 145: <li>Introduced efficient page freeing in reverse order from uvm, greatly improving cases of massive page freeing.
! 146: <!-- 2019/12/30 -->
! 147: <li>Prevented read-only <a href="https://man.openbsd.org/tmux">tmux(1)</a> clients from limiting the size.
! 148: <li>Stopped performing a top-level <a href="https://man.openbsd.org/sort">sort(1)</a> when -c is used with a -k field.
! 149: <li>Added <a href="https://man.openbsd.org/ne">ne(4)</a> support on <a href="https://man.openbsd.org/cbus">cbus(4)</a>.
! 150: <li>Implemented support for generating FIDO2 resident keys. "ssh-add -O" will load resident keys from a FIDO2 token and add them to an ssh-agent. Removed the -x option currently used for the FIDO/U2F-specific key flags, now under -O.
! 151: <li>Removed single letter flags for moduli generation in <a href="https://man.openbsd.org/ssh-keygen">ssh-keygen(1)</a> and moved all moduli generation options to under the -O flag. Breaks existing ssh-keygen commandline syntax for moduli-related operations.
! 152: <li>Updated perl to 5.30.1.
! 153: <!-- 2019/12/29 -->
! 154: <li>Stopped switching to new APs found during background scans with RSSI levels which will also trigger background scans, helping to prevent repeated switching in areas where APs are tuned for low transmit range.
! 155: <li>Increased the net80211 node cache size.
! 156: <li>Updated to <a href="https://man.openbsd.org/xterm">xterm(1)</a> 351.
! 157: <li>Populated logical disk port WWNs with their RAID volume's WWID in <a href="https://man.openbsd.org/mpii">mpii(4)</a>.
! 158: <!-- 2019/12/28 -->
! 159: <li>Ran <a href="https://man.openbsd.org/cu">cu(1)</a> in restricted mode using -r in <a href="https://man.openbsd.org/vmctl">vmctl(8)</a> and <a href="https://man.openbsd.org/ldomctl">ldomctl(8)</a>.
! 160: <!-- 2019/12/27 -->
! 161: <li>Attached Symbios Logic Flash Accelerator eMLC cards.
! 162: <li>Added support for regex searches in <a href="https://man.openbsd.org/tmux">tmux(1)</a> copy mode.
! 163: <!-- 2019/12/26 -->
! 164: <li>Stopped generating "cpu" nodes for disabled CPUs in ACPI mode for efiboot, fixing booting on ACPI machines where the MADT table lists CPUs which are disabled.
! 165: <li>Added point-to-point <a href="https://man.openbsd.org/ospf6d">ospf6d(8)</a> support for broadcast interfaces.
! 166: <!-- 2019/12/25 -->
! 167: <!-- 2019/12/24 -->
! 168: <li>Introduced TIMEOUT_SCHEDULED flag and tos_scheduled statistic to <a href="https://man.openbsd.org/timeout.9">timeout(9)</a>.
! 169: <li>Updated to <a href="https://man.openbsd.org/makedepend">makedepend(1)</a> 1.0.6.
! 170: <li>Updated to <a href="https://man.openbsd.org/xrdb">xrdb(1)</a> 1.2.0.
! 171: <!-- 2019/12/23 -->
! 172: <li>Ensured rdr-to with loopback destination will work even when IP forwarding is disabled.
! 173: <li>Added <a href="https://man.openbsd.org/amdgpio">amdgpio(4)</a>, a driver for the GPIO controller found on newer AMD SoC/chipsets.
! 174: <!-- 2019/12/22 -->
! 175: <!-- 2019/12/21 -->
! 176: <li>Added arm64 for support for lldb.
! 177: <!-- 2019/12/20 -->
! 178: <li>Prevented <a href="https://man.openbsd.org/ftp">ftp(1)</a> from following remote redirects to local files.
! 179: <li>Allowed forwarding of a different agent socket to a specified path in <a href="https://man.openbsd.org/ssh">ssh(1)</a>.
! 180: <li>Reduced stalling with lossy wifi by improving net80211 handling of the Rx block ack sequence number window and queue.
! 181: <li>Disabled TSX when MSR_ARCH_CAPABILITIES sets TSX_CTRL on amd64 and i386. Currently, TSX is disabled unconditionally when possible even if TAA_NO is set.
! 182: <!-- 2019/12/19 -->
! 183: <li>Fixed <a href="https://man.openbsd.org/rpki-client">rpki-client(8)</a> -j option, which had not been producing any output.
! 184: <li>Validated authentication lengths in <a href="https://man.openbsd.org/ripd">ripd(8)</a> before use to prevent crashes.
! 185: <!-- 2019/12/18 -->
! 186: <li>Updated to <a href="https://man.openbsd.org/unbound">unbound(8)</a> 1.9.6.
! 187: <li>Updated to <a href="https://man.openbsd.org/nsd">nsd(8)</a> 4.2.4.
! 188: <li>Reenabled firmware-based Tx retries at lower rates for <a href="https://man.openbsd.org/iwm">iwm(4)</a>, reducing packet loss.
! 189: <li>Implemented <a href="https://man.openbsd.org/unwindctl">unwindctl(8)</a> status memory to show cache memory usage.
! 190: <li>Avoided false positives in <a href="https://man.openbsd.org/witness">witness(4)</a> when detecting lock order reversals by using separate rwlock initializations for userland and kernel maps.
! 191: <!-- 2019/12/17 -->
! 192: <li>Fixed arm64 speculative execution of instructions after ERET, which had led to spectre-like effects on some processors.
! 193: <li>Rejected leases in <a href="https://man.openbsd.org/dhclient">dhclient(8)</a> not providing a subnet mask for the address being provided.
! 194: <li>Added <a href="https://man.openbsd.org/fido">fido(4)</a>, an HID driver for FIDO/U2F security keys.
! 195: <li>Added parsing of DDR4 and LPDDDR3/4 SPD memories to <a href="https://man.openbsd.org/spdmem">spdmem(4)</a>.
1.1465 pamela 196: <!-- 2019/12/16 -->
197: <li>Updated bind to 9.10.8-P1, the last ISC-licensed release.
198: <li>Added support to <a href="https://man.openbsd.org/lm">lm(4)</a> for NCT6775F, NCT5104D, NCT6779D and NCT679[1235]D sensors.
199: <li>Added AMD FCH (KERNCZ) to the list of supported devices in <a href="https://man.openbsd.org/piixpm">piixpm(4)</a>.
200: <li>Updated <a href="https://man.openbsd.org/piixpm">piixpm(4)</a> to support newer AMD chips like Hudson-2 and KERNCZ and implemented multi-bus support for SB800, Hudson-2 and KERNCZ.
201: <li>Extended the expected SPD types to include DDR4 and low-power DDR3/DDR4.
202: <li>Added <a href="https://man.openbsd.org/pledge">pledge(2)</a> inet to <a href="https://man.openbsd.org/dig">dig(1)</a>.
203: <li>Updated bind to 9.10.5-P3. This tree is only used to build <a href="https://man.openbsd.org/host">host(1)</a>, <a href="https://man.openbsd.org/dig">dig(1)</a> and <a href="https://man.openbsd.org/nslookup">nslookup(1)</a>.
1.1466 ! pamela 204: <li>Made <a href="https://man.openbsd.org/rpki-client">rpki-client(8)</a> work with the existing cache and not exit if rsync(1) exits non-zero.
1.1465 pamela 205: <!-- 2019/12/15 -->
206: <li>Allowed <a href="https://man.openbsd.org/ssh">ssh(1)</a> security keys to act as host keys as well as user keys.
207: <!-- 2019/12/14 -->
208: <li>Added support for gen2 negotiation to <a href="https://man.openbsd.org/rkpcie">rkpcie(4)</a> and enabled gen2 link state training when the dtb is configured with max-link-speed = 2.
209: <li>Introduced a bypass keyword to <a href="https://man.openbsd.org/smtpd">smtpd(8)</a> so that built-in filters can bypass processing when a condition is met.
210: <li>Updated to libXfont2 2.0.4.
211: <li>Updated to font/util 1.3.2.
212: <li>Updated to font/encodings 1.0.5.
213: <!-- 2019/12/13 -->
214: <li>Tightened permissions for USB device nodes.
215: <li>Removed gpr(4).
216: <li>Used ssh-sk-helper for all security key signing operations and security key enrollment. Most <a href="https://man.openbsd.org/ssh">ssh(1)</a> tools no longer need to link against libfido2 or interact with /dev/uhid* directly.
217: <li>Added support for CIDR in a: spf atoms in <a href="https://man.openbsd.org/smtpd">smtpd(8)</a>.
218: <!-- 2019/12/12 -->
219: <li>Attached <a href="https://man.openbsd.org/pvclock">pvclock(4)</a> with a lower priority in case of unstable tsc rather than not attaching at all.
220: <li>Prevented an overflow due to <a href="https://man.openbsd.org/xen">xen(4)</a> failing to release the interrupt source when unmasking the interrupt.
221: <li>Reintroduced socket locking inside socket event filters.
222: <li>Fixed an issue where <a href="https://man.openbsd.org/adjtime">adjtime(2)</a> could be set so low that time could be frozen until reboot.
223: <li>Allowed sleeping inside kqueue event filters.
224: <li>Prevented a hang in the boot loader on the HP EliteBook 830 G6.
225: <li>Modified <a href="https://man.openbsd.org/tmux">tmux(1)</a> source-file to allow reading from stdin.
226: <li>Updated to X server 1.20.6.
227: <!-- 2019/12/11 -->
228: <li>Started virtual machines defined in <a href="https://man.openbsd.org/vm.conf">vm.conf(5)</a> in a staggered fashion, helping prevent overload of the host and improper tsc calibration in guests.
229: <li>Modified <a href="https://man.openbsd.org/ldpd">ldpd(8)</a> to lookup the adjacency by LSR id as well as source IP address, as the remote peer may change its LSR id.
230: <li>Ensured that <a href="https://man.openbsd.org/ld.so">ld.so(1)</a> removed the LD_LIBRARY_PATH environment variable for set-user-ID and set-group-ID executables in low memory conditions.
1.1464 pamela 231: <!-- 2019/12/10 -->
232: <li>Provided proper concurrency control when pausing a vm in <a href="https://man.openbsd.org/vmd">vmd(8)</a>.
233: <li>Fixed <a href="https://man.openbsd.org/isakmpd">isakmpd(8)</a> IKE pcap file creation.
234: <!-- 2019/12/09 -->
235: <li>Fixed empty response packages sent out by <a href="https://man.openbsd.org/ripd">ripd(8)</a> when entries are skipped due to split-horizon simple.
236: <li>Swapped <a href="https://man.openbsd.org/smtpd">smtpd(8)</a> filter response protocol fields to match query protocol. Filters used will need updating.
237: <li>Re-enabled "syscall call-from" checking.
238: <li>Modified -z mode verification in <a href="https://man.openbsd.org/signify">signify(1)</a> to save the header and output it, so signify -zV >saved.tgz will keep the signature for later checks.
239: <!-- 2019/12/08 -->
240: <li>Reduced the maximum number of frame buffers for <a href="https://man.openbsd.org/uvideo">uvideo(4)</a> to allow running higher resolutions without running out of kernel memory.
241: <li>Removed kernel VM86 support.
242: <li>Added a check when IP forwarding is disabled to ensure packet destination address matches interface address.
243: <!-- 2019/12/07 -->
244: <li>Reset the login class each time through the loop when using -L (loop) mode with <a href="https://man.openbsd.org/su">su(1)</a>. Fixes CVE-2019-19519.
245: <!-- 2019/12/06 -->
246: <li>Retired piixpcib(4).
247: <li>Stopped hardcoding the cache directory for <a href="https://man.openbsd.org/rpki-client">rpki-client(8)</a>. Cache and output directory will use defaults for root users and must be specified by non-root users.
248: <!-- 2019/12/05 -->
249: <li>Enabled full use of jumbo frames on <a href="https://man.openbsd.org/bnx">bnx(4)</a> devices.
250: <!-- 2019/12/04 -->
251: <li>Added DEBUG_PKG_CACHE functionality to <a href="https://man.openbsd.org/pkg_add">pkg_add(1)</a>, fetching debug patches when packages are installed.
252: <li>Fixed <a href="https://man.openbsd.org/xenodm">xenodm(1)</a> to use the libc authentication layer correctly.
253: <li>Fixed insufficient username validation performed by libc's authentication privilege separation layer and added additional validation points, further validating in <a href="https://man.openbsd.org/login">login(1)</a> and <a href="https://man.openbsd.org/su">su(1)</a>.
254: <li>Fixed a panic when tearing down vms with <a href="https://man.openbsd.org/vmm">vmm(4)</a>.
1.1462 pamela 255: <!-- 2019/12/03 -->
1.1464 pamela 256: <li>Prevented a <a href="https://man.openbsd.org/radiusd">radiusd(8)</a> crash when user does not exist.
1.1465 pamela 257: <li>Prevented escalation to the auth group in <a href="https://man.openbsd.org/xlock">xlock(1)</a> through path-related environment variables and disabled mesa and opengl functionality.
1.1464 pamela 258: <li>Added display of mode sense data to <a href="https://man.openbsd.org/scsi">scsi(8)</a> debug.
1.1462 pamela 259: <li>Added <a href="https://man.openbsd.org/pwmfan">pwmfan(4)</a>, a driver for PWM-regulated fans.
260: <li>Added <a href="https://man.openbsd.org/rkpwm">rkpwm(4)</a>, a driver for the RK3399's PWM controller.
261: <li>Added support for the RK3399's PWM clock to <a href="https://man.openbsd.org/rkclock">rkclock(4)</a>.
262: <!-- 2019/12/02 -->
263: <li>Added <a href="https://man.openbsd.org/tcpdump">tcpdump(8)</a> support for printing RFC 8300 Network Service Header (NSH).
264: <li>Added <a href="https://man.openbsd.org/tcpdump">tcpdump(8)</a> support for VXLAN-GPE.
265: <li>Rewrote dhcpv6 parsing in <a href="https://man.openbsd.org/tcpdump">tcpdump(8)</a> to match the rfc, correctly handling dhcpv6 messages.
266: <li>Assumed <a href="https://man.openbsd.org/grep">grep(1)</a> -R passed with "." rather than printing a warning by default.
267: <li>Reverted switch to tickless backend.
268: <!-- 2019/12/01 -->
269: <li>Allowed forcing specific domains to be resolved by specific resolvers in <a href="https://man.openbsd.org/unwind.conf">unwind.conf(5)</a>, handling typical split-horizon setups.
1.1463 pamela 270: <li>Simplified <a href="https://man.openbsd.org/sysupgrade">sysupgrade(8)</a> directory check and creation (/home/_syspatch). It can now be a symlink.
1.1462 pamela 271: <!-- 2019/11/30 -->
272: <li>Accepted netmask for IPv6 properly in <a href="https://man.openbsd.org/ifconfig">ifconfig(8)</a>.
1.1460 beck 273: <!-- 2019/11/29 -->
1.1462 pamela 274: <li>Added a create-vdisk command to <a href="https://man.openbsd.org/ldomctl">ldomctl(8)</a> analogous to amd64's <a href="https://man.openbsd.org/vmctl">vmctl(8)</a> create.
275: <li>Added uvm_objfree to uvm to efficiently free all pages from a uvm object, used in the buffer cache for considerable speedup when freeing pages.
276: <li>Added <a href="https://man.openbsd.org/rkemmcphy">rkemmcphy(4)</a>, a driver for the RK3399's eMMC PHY.
277: <li>Added support for the RK3399's eMMC clock to <a href="https://man.openbsd.org/rkclock">rkclock(4)</a>.
1.1460 beck 278: <!-- 2019/11/28 -->
1.1462 pamela 279: <li>Introduced <a href="https://man.openbsd.org/msyscall">msyscall(2)</a>, permitting system calls from selected code regions only: the main program, <a href="https://man.openbsd.org/ld.so">ld.so(1)</a>, libc.so and sigtramp. This is intended to harden against a mixture of W^X failures and JIT bugs allowing syscall misinterpretation.
280: <li>Modified root's <a href="https://man.openbsd.org/crontab">crontab(1)</a> to run <a href="https://man.openbsd.org/rpki-client">rpki-client(8)</a> and reload <a href="https://man.openbsd.org/bgpd">bgpd(8)</a> configuration, enabling RPKI ROA filtering.
281: <li>Modified buffer cache to use individual uvm_objs per buffer to speed page lookups.
282: <li>Decayed the <a href="https://man.openbsd.org/unwind">unwind(8)</a> resolver histogram data over time to reflect strategy performance.
283: <li>Removed the -r flag in <a href="https://man.openbsd.org/rpki-client">rpki-client(8)</a>. CRLs will always be checked.
284: <li>Added the "console" command to <a href="https://man.openbsd.org/ldomctl">ldomctl(8)</a> which executes <a href="https://man.openbsd.org/cu">cu(1)</a> on the domain's console.
285: <li>Printed guest domain <a href="https://man.openbsd.org/vcctty">vcctty(4)</a> devices in status output in <a href="https://man.openbsd.org/ldomctl">ldomctl(8)</a>.
286: <li>Removed km_mapblocks from kmemstats and its always-zero column from the <a href="https://man.openbsd.org/ddb">ddb(4)</a> "show malloc" output.
287: <!-- 2019/11/27 -->
288: <li>Implemented a hexdump command in the bootloader, helping to inspect the memory layout created by the firmware and useful for UEFI debugging.
289: <li>Added list-io command to <a href="https://man.openbsd.org/ldomctl">ldomctl(8)</a>, listing the available PCIe devices to be used with the iodevice parameter in <a href="https://man.openbsd.org/ldom.conf">ldom.conf(5)</a>.
290: <li>Measured performance of resolving strategies in <a href="https://man.openbsd.org/unwind">unwind(8)</a>, sorting them and choosing the next best strategy when one fails.
291: <li>Removed captive portal detection from <a href="https://man.openbsd.org/unwind">unwind(8)</a>.
292: <li>Reinstated support for monitor mode and multiple frames in <a href="https://man.openbsd.org/iwm">iwm(4)</a>.
293: <li>Updated GLU to 9.0.1.
294: <li>Updated libdrm to 2.4.100.
1.1460 beck 295: <!-- 2019/11/26 -->
1.1462 pamela 296: <li>Added support for TLS 1.3 post handshake handshake messages and key updates to <a href="https://www.libressl.org/">LibreSSL</a>.
297: <li>Fixed <a href="https://man.openbsd.org/scsi">scsi(8)</a> softraid crypto volumes on 4K-sector disks.
298: <li>Faked disk info to match expected boot disk when EFI bootloader has been received via TFTP, fixing a hang during HP Elitebook UEFI boot.
299: <li>Fixed kernel crash in pf_ioctl with WITH_PF_LOCK and NET_TASKQ > 1.
1.1466 ! pamela 300: <li>Switched to tickless backend in <a href="https://man.openbsd.org/timeout.9">timeout(9)</a>, adding new interface <a href="https://man.openbsd.org/timeout_at_ts">timeout_at_ts(9)</a> to avoid backwardly compatible behavior.
1.1462 pamela 301: <li>Allowed use of 'auth' as an origin in <a href="https://man.openbsd.org/smtpd.conf">smtpd.conf(5)</a>.
302: <li>Added support for MSI-X for <a href="https://man.openbsd.org/iwm">iwm(4)</a> devices.
303: <!-- 2019/11/25 -->
304: <li>Allowed use of mail-from and rctp-to as for and from parameters in <a href="https://man.openbsd.org/smtpd.conf">smtpd.conf(5)</a>.
305: <li>Computed RSSI on 9k <a href="https://man.openbsd.org/iwm">iwm(4)</a> devices as for previous generations, fixing spurious signal strength values of over 100%.
306: <li>Added a <a href="https://man.openbsd.org/tmux">tmux(1)</a> p format modifier for padding to width.
307: <li>Stored <a href="https://man.openbsd.org/smtp">smtp(1)</a> session usernames in an envelope, allowing the ruleset to match specific users or mailing addresses.
308: <!-- 2019/11/24 -->
309: <li>Added "no-touch-required" options to <a href="https://man.openbsd.org/ssh-keygen">ssh-keygen(1)</a> and <a href="https://man.openbsd.org/sshd">sshd(8)</a> to disable touch requirement for authorized_keys and certificates.
310: <li>Added an <a href="https://man.openbsd.org/sshd_config">sshd_config(5)</a> PubkeyAuthOptions directive allowing specification of whether <a href="https://man.openbsd.org/sshd">sshd(8)</a> should check whether user presence was tested before a security key was made.
311: <!-- 2019/11/23 -->
312: <li>Withdrew all proposals on <a href="https://man.openbsd.org/slaacd">slaacd(8)</a> startup to prevent indefinite retention of nameservers on interfaces no longer flagged for autoconf.
313: <!-- 2019/11/22 -->
314: <!-- 2019/11/21 -->
315: <li>Prevented a timeout in <a href="https://man.openbsd.org/ssh">ssh(1)</a> when the server doesn't immediately send a banner, such as with multiplexers like sslh.
316: <li>Allowed <a href="https://man.openbsd.org/rc.d">rc.d(8)</a> script to reload <a href="https://man.openbsd.org/sndiod">sndiod(8)</a>.
317: <li>Added tracking of which interfaces have learned nameservers to <a href="https://man.openbsd.org/unwind">unwind(8)</a>.
318: <!-- 2019/11/20 -->
319: <li>Improved <a href="https://man.openbsd.org/ksmn">ksmn(4)</a> temperature conversion precision.
320: <li>Added a quirk to handle Apollo Lake, Gemini Lake and 100 Series Intel SD/MMC <a href="https://man.openbsd.org/sdhc">sdhc(4)</a> controllers which should not have voltages set to 0V.
321: <li>Added Gemini Lake SD/MMC controller <a href="https://man.openbsd.org/pci">pci(4)</a> ids.
322: <li>Ensured proper kernel stack alignment on mips64, fixing a panic on octeon related to <a href="https://man.openbsd.org/pppoe">pppoe(4)</a>.
323: <!-- 2019/11/19 -->
324: <li>Adjusted on-wire signature encoding for ecdsh-sk <a href="https://man.openbsd.org/ssh">ssh(1)</a> keys to better match ec25519-sk keys.
325: <!-- 2019/11/18 -->
326: <li>Fixed an off-by-one TRB issue in bulk transfers larger than 64k, making <a href="https://man.openbsd.org/udl">udl(4)</a> work on <a href="https://man.openbsd.org/xhci">xhci(4)</a>.
327: <li>Added <a href="https://man.openbsd.org/iwm">iwm(4)</a> support for 9260 and 9560 devices.
328: <li>Enabled ESP UDP-encapsulation with the <a href="https://man.openbsd.org/iked">iked(8)</a> -t flag.
329: <li>Added -keyopt option to <a href="https://man.openbsd.org/openssl">openssl(1)</a> cms subcommand, providing rsa_padding_mode:oaep for cms -encrypt and rsa_padding_mode:pss for cms -sign.
330: <li>Added -f for full size to join-pane in <a href="https://man.openbsd.org/tmux">tmux(1)</a>.
331: <!-- 2019/11/17 -->
332: <li>Added <a href="https://man.openbsd.org/rge">rge(4)</a>, a new driver for Realtek 8125 PCI Express 2.5Gb ethernet devices.
333: <li>Repaired the "set delay" option for <a href="https://man.openbsd.org/pf">pf(4)</a> to function as specified in <a href="https://man.openbsd.org/pf.conf">pf.conf(5)</a>.
334: <li>Added the initial framework for the TLSv1.3 server.
335: <li>Used disable-bt overlay with raspberry pi to use <a href="https://man.openbsd.org/pluart">pluart(4)</a> as console, rather than the 'mini uart'.
336: <!-- 2019/11/16 -->
337: <li>Added a -d option to <a href="https://man.openbsd.org/pkg_add">pkg_add(1)</a> to add debug packages if present alongside intended updates or additions.
338: <!-- 2019/11/15 -->
339: <li>Fixed a segmentation fault in <a href="https://man.openbsd.org/ncurses">ncurses(3)</a>.
340: <!-- 2019/11/14 -->
341: <li>Implemented HTTP/1.1 in <a href="https://man.openbsd.org/ftp">ftp(1)</a>.
342: <li>Added direct support for U2F/FIDO2 security keys in <a href="https://man.openbsd.org/ssh">ssh(1)</a>.
343: <li>Began resolving captive portal hosts internally in <a href="https://man.openbsd.org/unwind">unwind(8)</a>.
344: <li>Changed <a href="https://man.openbsd.org/tmux">tmux(1)</a> new-session -A to attach to the best existing session when a session name is not specified, rather than creating a new session.
345: <li>Added an option to <a href="https://man.openbsd.org/tmux">tmux(1)</a> to set the key sent by backspace for systems using ^H.
346: <!-- 2019/11/13 -->
347: <li>Prevented non-root users from using <a href="https://man.openbsd.org/ioctl">ioctl(2)</a> to alter the address of a network interface.
348: <li>Prevented non-root users from setting the parameters of <a href="https://man.openbsd.org/pppoe">pppoe(4)</a> interfaces.
349: <li>Prevented a local user from causing the system to hang by reading specific registers when Intel Gen8/Gen9 graphics hardware is in a low power state.
350: <li>Prevented writes to memory allowed by the Intel Gen9 graphics hardware.
351: <!-- 2019/11/12 -->
352: <li>Notified the user via TTY or $SSH_ASKPASS when <a href="https://man.openbsd.org/ssh">ssh(1)</a> security keys must be tapped/touched in order to perform a signature operation.
353: <li>Enabled ed25519 support in <a href="https://man.openbsd.org/ssh">ssh(1)</a>.
354: <li>Fixed <a href="https://man.openbsd.org/iwm">iwm(4)</a> support and loaded new firmware for 3168 devices.
355: <!-- 2019/11/11 -->
356: <li>Enabled <a href="https://man.openbsd.org/rpki-client">rpki-client(8)</a>.
357: <li>Printed the URL when <a href="https://man.openbsd.org/sysupgrade">sysupgrade(8)</a> fetches new sets.
358: <li>Prevented a crash in ieee80211_node2req() which could be triggered by an <a href="https://man.openbsd.org/ioctl">ioctl(2)</a> if the driver had not yet initialized the channel map.
359: <li>Implemented DNS proposals in <a href="https://man.openbsd.org/unwind">unwind(8)</a> to learn nameservers from network autoconfiguration daemons.
360: <!-- 2019/11/10 -->
361: <li>Moved /usr and var remounting earlier to allow <a href="https://man.openbsd.org/unwind">unwind(8)</a> to start before <a href="https://man.openbsd.org/pf">pf(4)</a> is configured.
362: <li>Added a Content-Security-Policy HTTP header to <a href="https://man.openbsd.org/mandoc">mandoc(1)</a> that allows only CSS.
363: <li>Added an opportunistic run of <a href="https://man.openbsd.org/fw_update">fw_update(1)</a> to <a href="https://man.openbsd.org/sysupgrade">sysupgrade(8)</a> before rebooting to run the upgrade.
364: <li>Introduced a "trusted" modifier to <a href="https://man.openbsd.org/ntpd">ntpd(8)</a>, for peers which should be on a local net, used in situations where https constraints cannot be used but auto settime is desired.
365: <li>Stopped connecting to available open wifi networks when an interface is marked up. This behavior must now be explicitly enabled with <a href="https://man.openbsd.org/ifconfig">ifconfig(8)</a> join "".
366: <!-- 2019/11/09 -->
367: <li>Added support for active scan to <a href="https://man.openbsd.org/bwfm">bwfm(4)</a>.
368: <li>Lowered the priority of APs which fail to connect in the <a href="https://man.openbsd.org/ifconfig">ifconfig(8)</a> join list, allowing switching wifi networks by moving between them without having to down/up the interface or suspend/resume.
369: <!-- 2019/11/08 -->
370: <li>Triggered a background scan when root runs the <a href="https://man.openbsd.org/ifconfig">ifconfig(8)</a> scan command, updating the list of cached APs for future scans and forcing a search for a better AP to roam to.
371: <li>Switched 8260 and 8265 <a href="https://man.openbsd.org/iwm">iwm(4)</a> devices to -34 firmware.
372: <!-- 2019/11/07 -->
373: <li>Added support for buttons 2 and 3 to <a href="https://man.openbsd.org/imt">imt(4)</a>.
374: <li>Enabled DNSSEC validation in <a href="https://man.openbsd.org/unbound">unbound(8)</a> by default.
375: <li>Prevented non-root users from setting the WEP key on <a href="https://man.openbsd.org/an">an(4)</a> wireless network devices.
376: <li>Added -F flag to <a href="https://man.openbsd.org/tmux">tmux(1)</a> send-keys to expand formats in search-backward and forward copy mode commands.
377: <!-- 2019/11/06 -->
378: <li>Performed constraint validation against 9.9.9.9 and 2620:fe::fe by default in <a href="https://man.openbsd.org/ntpd.conf">ntpd.conf(5)</a>.
379: <li>Fixed a bug where outstanding frames on the <a href="https://man.openbsd.org/iwn">iwn(4)</a> aggregation queue interfere with roaming to another AP.
380: <li>Raised net80211's "beacon miss" threshold to avoid frequent reconnects to APs suffering packet loss due to distance.
381: <!-- 2019/11/05 -->
382: <!-- 2019/11/04 -->
383: <li>Removed mobileip(4).
384: <li>Added <a href="https://man.openbsd.org/ogx">ogx(4)</a>, a driver for the OCTEON III network processor.
385: <li>Reinstated <a href="https://man.openbsd.org/openssl">OpenSSL(1)</a> CMS.
386: <li>Switched <a href="https://man.openbsd.org/iwm">iwm(4)</a> 3160, 7260 and 7265 to -17 firmware images.
387: <li>Enabled DQA mode for <a href="https://man.openbsd.org/iwm">iwm(4)</a>.
388: <li>Added support for <a href="https://man.openbsd.org/iwm">iwm(4)</a> firmware paging, required for newer 8k device firmware.
389: <!-- 2019/11/03 -->
390: <li>Fixed a possible crash in <a href="https://man.openbsd.org/smtpd">smtpd(8)</a> when combining "from rdns" with nested virtual aliases under a particular configuration.
391: <li>Released <a href="https://man.openbsd.org/smtpd">smtpd(8)</a>.
392: <li>Added opportunistic DoT support to <a href="https://man.openbsd.org/unwind">unwind(8)</a>.
1.1459 pamela 393: <!-- 2019/11/02 -->
394: <li>Hooked <a href="https://man.openbsd.org/rpki-client">rpki-client(8)</a> up to the build.
395: <li>Enabled CMS in <a href="https://man.openbsd.org/ssl">ssl(8)</a>.
396: <!-- 2019/11/01 -->
397: <!-- 2019/10/31 -->
398: <li>Added initial infrastructure for U2F/FIDO support in <a href="https://man.openbsd.org/ssh">ssh(1)</a>.
399: <li>Constrained and corrected the routes being deleted when applying a new lease in <a href="https://man.openbsd.org/dhclient">dhclient(8)</a> and corrected route comparison. This corrects a network failure with "arpresolve: ... route contains no information".
400: <li>Released OpenBGPD 6.6p0.
401: <li>Added support for RSA-PSS to <a href="https://man.openbsd.org/crypto">crypto(3)</a>.
402: <li>Added an ASR resolver type to <a href="https://man.openbsd.org/unwind">unwind(8)</a>, using the libc asynchronous resolver directly with DHCP-provided nameservers. Switched to the ASR resolver rather than DHCP when behind a captive portal.
403: <li>Made background scans less frequent when choosing the same AP.
404: <!-- 2019/10/30 -->
405: <!-- 2019/10/29 -->
406: <li>Began marking stale prefixes in the Adj-RIB-out during graceful reload of <a href="https://man.openbsd.org/bgpd">bgpd(8)</a> and fixed prefix_withdraw to check the correct prefix flags before removing a prefix from the update or withdraw tree.
407: <li>Added an Intel 9260 wifi card <a href="https://man.openbsd.org/pci">pci(4)</a> id.
408: <li>Added Marvell 88SE9128 AHCI <a href="https://man.openbsd.org/pci">pci(4)</a> id.
409: <li>Fixed a bug with the fatal <a href="https://man.openbsd.org/bgpd">bgpd(8)</a> non-existing prefix call to ensure the missing prefix is inserted into the prefix tree.
410: <li>Fixed <a href="https://man.openbsd.org/bgpd">bgpd(8)</a> crashes where the nexthop_runners tail queue was corrupted.
411: <!-- 2019/10/28 -->
412: <li>Improved error handling for <a href="https://man.openbsd.org/bwfm">bwfm(4)</a> connection attempts.
413: <!-- 2019/10/27 -->
414: <li>Added code laying groundwork for the use of multiple processors on armv7.
415: <!-- 2019/10/26 -->
416: <li>Made <a href="https://man.openbsd.org/vmx">vmx(4)</a> transmit mp-safe.
417: <li>Corrected <a href="https://man.openbsd.org/clock_getres">clock_getres(2)</a> to provide the actual resolution of a given clock.
418: <li>Released <a href="https://www.opensmtpd.org/announces/release-6.6.0.txt">OpenSMTPD 6.6.0</a>.
419: <!-- 2019/10/25 -->
420: <li>Allowed switching to framebuffer "glass" console on armv7, mirroring previous changes to arm64.
421: <!-- 2019/10/24 -->
422: <li>Added retguard for octeon/mips64.
423: <li>Added a missing <a href="https://man.openbsd.org/unveil">unveil(2)</a> of /etc/shells for <a href="https://man.openbsd.org/passwd">passwd(1)</a>.
424: <li>Printed IP addresses in verbose mode in <a href="https://man.openbsd.org/nc">nc(1)</a>.
425: <!-- 2019/10/23 -->
426: <li>Reverted change to <a href="https://man.openbsd.org/nc">nc(1)</a> fixing the -N flag due to regress failures for tls.
427: <li>Added <a href="https://man.openbsd.org/sxisid">sxisid(4)</a>, a driver to read the on-chip eFuses.
428: <li>Added new -N name option to <a href="https://man.openbsd.org/ftp">ftp(1)</a>, allowing calling scripts to change the progname and produce better error messages.
429: <li>Updated timezone information to reflect DST changes for Fiji and Norfolk Island.
430: <li>Rewrote the time validity check for mtfs in <a href="https://man.openbsd.org/rpki-client">rpki-client(8)</a> to correctly account for the timezone.
431: <!-- 2019/10/22 -->
432: <li>Added the system clock interface <a href="https://man.openbsd.org/nanoboottime">nanoboottime(9)</a>, returning the UTC time at which the system booted in seconds and nanoseconds.
433: <!-- 2019/10/21 -->
434: <li>Added <a href="https://man.openbsd.org/sxipwm">sxipwm(4)</a> and <a href="https://man.openbsd.org/pwmbl">pwmbl(4)</a>, drivers which jointly add support for the backlight controller on the Pinebook.
435: <li>On newer ThinkPads reporting HKEY version > 1, allowed <a href="https://man.openbsd.org/acpivout">acpivout(4)</a> to claim backlight controls rather than <a href="https://man.openbsd.org/wscons">wscons(4)</a>, allowing use of the fine-grained backlight BCL steps defined in <a href="https://man.openbsd.org/acpi">acpi(4)</a>.
436: <li>Changed <a href="https://man.openbsd.org/acpivout">acpivout(4)</a> to increment and decrement screen brightness based only on brightness level changes of 5% or higher.
437: <li>Prevented an infinite loop when aborting <a href="https://man.openbsd.org/ulpt">ulpt(4)</a>'s pipe after an I/O error.
438: <!-- 2019/10/20 -->
439: <li>Implemented the "parallel boot" feature on compatible sparc64 firmware.
1.1458 pamela 440: <!-- 2019/10/19 -->
441: <li>Corrected a memory leak in <a href="https://man.openbsd.org/unwind">unwind(1)</a> when the list of DHCP resolvers doesn't change.
442: <!-- 2019/10/18 -->
443: <li>Stopped checking whether the IPv6 source address of a neighbor advertisement is from a neighbor's address, not required in accordance with RFC 4861.
444: <li>Added support for dynamic queue allocation (DQA) to <a href="https://man.openbsd.org/iwm">iwm(4)</a>.
445: <!-- 2019/10/17 -->
446: <li>Corrected cache flush operations on arm64 which were being incorrectly treated as write operations. This fixes a bug where cache flushing caused Firefox to abort.
447: <li>Fixed the -N flag for <a href="https://man.openbsd.org/nc">nc(1)</a> to shut down the socket when input stops, or when tls is in use and either side of the socket goes away.
448: <!-- 2019/10/16 -->
449: <li>Added <a href="https://man.openbsd.org/rpki-client">rpki-client(8)</a> output formats for bird and CSV.
450: <li>Fixed a potential NULL dereference for revoked hostkeys in <a href="https://man.openbsd.org/ssh">ssh(1)</a>.
451: <!-- 2019/10/15 -->
452: <li>Added support for percentage sizes to <a href="https://man.openbsd.org/tmux">tmux(1)</a> resize-pane ("-x 10%") and changed split-window and join-pane -l to accept similar percentages, deprecating the -p option.
453: <li>Made sparc64 <a href="https://man.openbsd.org/autoconf">autoconf(4)</a> try to match the devid against the bootpath if link->port_wwn doesn't work, helping when booting off of an <a href="https://man.openbsd.org/mpii">mpii(4)</a> controller.
454: <!-- 2019/10/14 -->
455: <li>Used <a href="https://man.openbsd.org/unveil">unveil(2)</a> to reduce filesystem access in <a href="https://man.openbsd.org/vmstat">vmstat(8)</a>, <a href="https://man.openbsd.org/iostat">iostat(8)</a> and <a href="https://man.openbsd.org/systat">systat(1)</a>.
456: <li>Changed <a href="https://man.openbsd.org/httpd">httpd(8)</a> to send a 408 response when a timeout happens while headers are being received, but close the connection if no request is received.
457: <!-- 2019/10/13 -->
458: <li>Added an <a href="https://man.openbsd.org/azalia">azalia(4)</a> quirk for the ALC285 on the X1C7 to avoid a clicking noise on the headphone output.
459: <!-- 2019/10/12 -->
460: <li>Moved to 6.6-current.
1.1164 deraadt 461: </ul>
![[BACK]](/icons/back.gif){kind=icon}
Return to plus.html CVS log ![[TXT]](/icons/text.gif){kind=icon}
![[DIR]](/icons/dir.gif){kind=icon}
Up to [local] / www