Annotation of www/plus.html, Revision 1.1502
1.1440 bentley 1: <!doctype html>
2: <html lang=en id=plus>
3: <meta charset=utf-8>
1.1384 tj 4: <title>OpenBSD -current Changelog</title>
1.1045 david 5: <meta name="description" content="OpenBSD -current changes">
1.1383 deraadt 6: <meta name="viewport" content="width=device-width, initial-scale=1">
7: <link rel="stylesheet" type="text/css" href="openbsd.css">
1.1400 tb 8: <link rel="canonical" href="https://www.openbsd.org/plus.html">
1.1440 bentley 9: <style>
10: strong {
11: color: var(--red);
12: font-weight: normal;
13: }
14:
15: h3 {
16: color: var(--blue);
17: }
18: </style>
1.14 deraadt 19:
1.1440 bentley 20: <h2 id=OpenBSD>
1.1383 deraadt 21: <a href="index.html">
1.1440 bentley 22: <i>Open</i><b>BSD</b></a>
23: -current Changelog
1.1384 tj 24: </h2>
1.863 naddy 25: <hr>
1.14 deraadt 26:
27: <p>
1.1216 schwarze 28: This selection is intended to include all important
29: and all user-visible changes.
30: For a complete record of all changes, please see the "source-changes"
31: mailing list, called "OpenBSD CVS"
1.1494 tj 32: in the <a href="https://marc.info/?l=openbsd-cvs">archives</a>,
1.1216 schwarze 33: or use <a href="anoncvs.html#CVS">CVS</a>.
34:
35: <p>
1.846 deraadt 36: For changes in other releases, click below:<br>
37: <a href="plus20.html">2.0</a>,
38: <a href="plus21.html">2.1</a>,
39: <a href="plus22.html">2.2</a>,
40: <a href="plus23.html">2.3</a>,
41: <a href="plus24.html">2.4</a>,
42: <a href="plus25.html">2.5</a>,
43: <a href="plus26.html">2.6</a>,
44: <a href="plus27.html">2.7</a>,
45: <a href="plus28.html">2.8</a>,
46: <a href="plus29.html">2.9</a>,
47: <a href="plus30.html">3.0</a>,
48: <a href="plus31.html">3.1</a>,
1.868 deraadt 49: <a href="plus32.html">3.2</a>,
1.889 david 50: <a href="plus33.html">3.3</a>,
1.916 david 51: <a href="plus34.html">3.4</a>,
1.935 miod 52: <a href="plus35.html">3.5</a>,
1.941 deraadt 53: <a href="plus36.html">3.6</a>,
1.1118 deraadt 54: <br>
1.963 deraadt 55: <a href="plus37.html">3.7</a>,
1.999 deraadt 56: <a href="plus38.html">3.8</a>,
1.1028 deraadt 57: <a href="plus39.html">3.9</a>,
1.1044 deraadt 58: <a href="plus40.html">4.0</a>,
1.1069 deraadt 59: <a href="plus41.html">4.1</a>,
1.1097 deraadt 60: <a href="plus42.html">4.2</a>,
1.1118 deraadt 61: <a href="plus43.html">4.3</a>,
1.1140 deraadt 62: <a href="plus44.html">4.4</a>,
1.1152 deraadt 63: <a href="plus45.html">4.5</a>,
1.1163 deraadt 64: <a href="plus46.html">4.6</a>,
1.1177 deraadt 65: <a href="plus47.html">4.7</a>,
1.1194 deraadt 66: <a href="plus48.html">4.8</a>,
1.1198 nick 67: <a href="plus49.html">4.9</a>,
1.1212 schwarze 68: <a href="plus50.html">5.0</a>,
1.1242 lum 69: <a href="plus51.html">5.1</a>,
1.1276 deraadt 70: <a href="plus52.html">5.2</a>,
1.1300 brett 71: <a href="plus53.html">5.3</a>,
1.1330 deraadt 72: <br>
73: <a href="plus54.html">5.4</a>,
1.1352 brett 74: <a href="plus55.html">5.5</a>,
1.1365 deraadt 75: <a href="plus56.html">5.6</a>,
1.1372 deraadt 76: <a href="plus57.html">5.7</a>,
1.1382 deraadt 77: <a href="plus58.html">5.8</a>,
1.1392 deraadt 78: <a href="plus59.html">5.9</a>,
1.1401 deraadt 79: <a href="plus60.html">6.0</a>,
1.1403 deraadt 80: <a href="plus61.html">6.1</a>,
81: <a href="plus62.html">6.2</a>,
1.1406 deraadt 82: <a href="plus63.html">6.3</a>,
1.1435 pamela 83: <a href="plus64.html">6.4</a>,
1.1457 pamela 84: <a href="plus65.html">6.5</a>,
1.1473 deraadt 85: <a href="plus66.html">6.6</a>,
1.1483 deraadt 86: <a href="plus67.html">6.7</a>,
1.1493 pamela 87: <a href="plus68.html">6.8</a>,
1.1499 deraadt 88: <a href="plus69.html">6.9</a>,
89: <a href="plus70.html">7.0</a>.
1.422 deraadt 90: <br>
1.186 deraadt 91:
92: <p>
1.1499 deraadt 93: <h3>Changes made between OpenBSD 7.0 and -current</h3>
1.847 deraadt 94: <p>
1.1316 brett 95:
1.422 deraadt 96: <ul>
1.1502 ! pamela 97: <!-- 2021/12/26 -->
! 98: <li>Reworked garbage collector for <a href="https://man.openbsd.org/unix.4">unix(4)</a> sockets to prevent potential kernel panics.
! 99: <li>Added address locators for the ACPI "bus" and used these to fix the order of the <a href="https://man.openbsd.org/com.4">com(4)</a> devices to match the traditional order on the ISA bus.
! 100: <!-- 2021/12/25 -->
! 101: <li>Made "set skip on ..." in <a href="https://man.openbsd.org/pf.conf.5">pf.conf(5)</a> dynamic.
! 102: <!-- 2021/12/24 -->
! 103: <li>Allowed bare numbers for key and mouse bindings in <a href="https://man.openbsd.org/cwm.1">cwm(1)</a>.
! 104: <li>Made <a href="https://man.openbsd.org/uniq.1">uniq(1)</a> skip() each input line only once, improving performance.
! 105: <!-- 2021/12/23 -->
! 106: <li>Introduced <a href="https://man.openbsd.org/apliic.4">apliic(4)</a>, a driver for the I2C controller found on various Apple SoCs.
! 107: <li>Protected <a href="https://man.openbsd.org/ipsec.4">ipsec(4)</a> input and output with the kernel lock to allow forwarding of non-ipsec traffic in parallel.
! 108: <!-- 2021/12/22 -->
! 109: <li>Disabled minimum power consumption in <a href="https://man.openbsd.org/bwfm.4">bwfm(4)</a> hostap mode, improving connection reliability when used as an access point.
! 110: <li>Updated to <a href="https://man.openbsd.org/nsd.8">nsd(8)</a> 4.3.9.
! 111: <!-- 2021/12/21 -->
! 112: <!-- 2021/12/20 -->
! 113: <li>Made <a href="https://man.openbsd.org/dhcpd.8">dhcpd(8)</a> start listening on DOWN interfaces.
! 114: <li>Made <a href="https://man.openbsd.org/iwm.4">iwm(4)</a> attach to PCI devices with product ID 0x31dc, part of the 9560 chip family.
! 115: <li>Introduced <a href="https://man.openbsd.org/mtw.4">mtw(4)</a>, a driver for MediaTek MT7601U wifi devices.
! 116: <!-- 2021/12/19 -->
! 117: <li>Added unbound and host-bound options for <a href="https://man.openbsd.org/ssh.1">ssh(1)</a> PubkeyAuthentication for hardware devices unable to sign longer pubkey authentication challenges.
! 118: <li>Required host-bound userauth requests for forwarded SSH connections.
! 119: <li>Gave <a href="https://man.openbsd.org/ssh-agent.1">ssh-agent(1)</a> the ability to parse restrict-destination-v00@openssh.com constraints and to apply them to keys.
! 120: <li>Made <a href="https://man.openbsd.org/ssh-add.1">ssh-add(1)</a> accept a list of "destination constraints" that allow restricting where keys may be used in conjunction with an ssh-agent/ssh that supports session ID/hostkey binding.
! 121: <!-- 2021/12/18 -->
! 122: <li>Fixed <a href="https://man.openbsd.org/radeondrm.4">radeondrm(4)</a> console colors on sparc64.
! 123: <li>Introduced <a href="https://man.openbsd.org/aplmbox.4">aplmbox(4)</a>, a driver for the mailbox that provides a communication channel with additional cores integrated on Apple SoCs.
! 124: <!-- 2021/12/17 -->
! 125: <li>Updated to LLVM 13.0.0.
! 126: <!-- 2021/12/16 -->
! 127: <li>Attached <a href="https://man.openbsd.org/com.4">com(4)</a> over <a href="https://man.openbsd.org/acpi.4">acpi(4)</a> on amd64.
! 128: <!-- 2021/12/15 -->
! 129: <li>Added create permissions to <a href="https://man.openbsd.org/unveil.2">unveil(2)</a> on <a href="https://man.openbsd.org/ldapd.8">ldapd(8)</a>.
! 130: <li>Restricted <a href="https://man.openbsd.org/usbhidctl.1">usbhidctl(1)</a> and <a href="https://man.openbsd.org/usbhidaction.1">usbhidaction(1)</a> file system access with <a href="https://man.openbsd.org/unveil.2">unveil(2)</a>.
! 131: <!-- 2021/12/14 -->
! 132: <li>Implemented <a href="https://man.openbsd.org/em.4">em(4)</a> support for selecting SMGII or SerDes mode depending on the plugged-in SFP transceiver and for reading out transceiver information via <a href="https://man.openbsd.org/ifconfig.8">ifconfig(8)</a>.
! 133: <li>Used "rng-seed" and "kaslr-seed" properties from the device tree to mix extra entropy into the pool for arm64.
! 134: <!-- 2021/12/13 -->
! 135: <li>Added pclk clock used by <a href="https://man.openbsd.org/dwdog.4">dwdog(4)</a> on RK3399 to <a href="https://man.openbsd.org/rkclock.4">rkclock(4)</a>.
! 136: <li>Increased <a href="https://man.openbsd.org/tee.1">tee(1)</a> I/O buffer size for 8KB to 64KB.
! 137: <li>Added handling of multi-port controllers to <a href="https://man.openbsd.org/uslcom.4">uslcom(4)</a>.
! 138: <li>Added a pane-border-format pane option to <a href="https://man.openbsd.org/tmux.1">tmux(1)</a>.
! 139: <li>Reduced unnecessary usage of sys/cdefs.h includes.
! 140: <li>Cleaned up unnecessary sys/param.h includes across the kernel and userland, replacing some macros with local copies.
! 141: <!-- 2021/12/12 -->
! 142: <li>Added a "vnode" parameter to <a href="https://man.openbsd.org/VOP_STRATEGY.9">VOP_STRATEGY(9)</a>.
! 143: <!-- 2021/12/11 -->
! 144: <li>Added <a href="https://man.openbsd.org/acpipci.4">acpipci(4)</a> support for interrupts represented by ACPI PCI Interrupt Link Devices, making PCI interrupts work on QEMU's SBSA target.
! 145: <!-- 2021/12/10 -->
! 146: <!-- 2021/12/09 -->
! 147: <li>Fixed a potential DOS associated with <a href="https://man.openbsd.org/BIO_indent.3">BIO_indent(3)</a> when a caller asks for a negative number of bytes of output.
! 148: <li>Fixed a bug where <a href="https://man.openbsd.org/iked.8">iked(8)</a> sent zero-prefixed NAT-T messages on port 500, causing parsing errors.
! 149: <li>Introduced <a href="https://man.openbsd.org/aplpmgr.4">aplpmgr(4)</a>, a driver for the power management controller found on various Apple SoCs.
! 150: <!-- 2021/12/08 -->
! 151: <!-- 2021/12/07 -->
! 152: <li>Taught the net80211 stack to remove corresponding frames from ic_pwrsaveq when a power-saving client decides to leave our hostap interface, preventing a panic.
! 153: <li>Allowed <a href="https://man.openbsd.org/fdisk.8">fdisk(8)</a> to extend the default OpenBSD partition to the end of the disk, rather than truncating at the end of the last full cylinder.
! 154: <!-- 2021/12/06 -->
! 155: <!-- 2021/12/05 -->
! 156: <!-- 2021/12/04 -->
! 157: <li>Fixed spurious abort of a VM by <a href="https://man.openbsd.org/vmd.8">vmd(8)</a> when the scheduler moves a VM to a different core while it is sleeping on a lock.
! 158: <li>Fixed broken <a href="https://man.openbsd.org/vmd.8">vmd(8)</a> "boot device cdrom" feature after a fix in seabios.
! 159: <!-- 2021/12/03 -->
! 160: <li>Switched <a href="https://man.openbsd.org/iwx.4">iwx(4)</a> to new -67 firmware images.
! 161: <li>Disabled probe requests during scans in <a href="https://man.openbsd.org/iwx.4">iwx(4)</a> again, preventing device timeouts for some devices.
! 162: <li>Implemented bgscan_done() handlers for <a href="https://man.openbsd.org/iwx.4">iwx(4)</a> and <a href="https://man.openbsd.org/iwm.4">iwm(4)</a>.
! 163: <li>Introduced an optional driver-specific bgscan_done() handler which allows the driver to take control of the roaming teardown sequence, ensuring that race conditions between firmware state and net80211 state are avoided.
! 164: <li>Fixed an xserver 1.21.1 crash when attempting to run <a href="https://man.openbsd.org/fvwm.1">fvwm(1)</a> on an x61/965gm with the modesetting driver on amd64.
! 165: <!-- 2021/12/02 -->
! 166: <li>Prevented a potential race which could make <a href="https://man.openbsd.org/umount.8">umount(8)</a> fail spuriously in the installer.
! 167: <li>Improved the testing of credentials against inserted FIDO keys, reducing spurious "Confirm user presence" notifications for key handles relating to FIDO keys which are not currently inserted.
! 168: <!-- 2021/12/01 -->
! 169: <li>Ensured ^C may be used to kill <a href="https://man.openbsd.org/ssh.1">ssh(1)</a> sessions where SessionType=none.
! 170: <li>Fixed removal of SAs that could not be flushed with <a href="https://man.openbsd.org/ipsecctl.8">ipsecctl(8)</a> -F.
! 171: <li>Fixed booting from an IDE block device on the Sun Blade 100.
! 172: <!-- 2021/11/30 -->
! 173: <!-- 2021/11/29 -->
! 174: <li>Prevented <a href="https://man.openbsd.org/select.2">select(2)</a> from blocking if registering found pending events.
! 175: <li>Enabled <a href="https://man.openbsd.org/uhid.4">uhid(4)</a>/<a href="https://man.openbsd.org/fido.4">fido(4)</a> on riscv64.
! 176: <li>Unlocked <a href="https://man.openbsd.org/accept.2">accept(2)</a> and <a href="https://man.openbsd.org/accept4.2">accept4(2)</a> syscalls.
! 177: <li>Added <a href="https://man.openbsd.org/iked.8">iked(8)</a> -V to display the version.
! 178: <!-- 2021/11/28 -->
! 179: <li>Prevented a crash in <a href="https://man.openbsd.org/slaacd.8">slaacd(8)</a> due to updating an interface which no longer exists.
! 180: <!-- 2021/11/27 -->
! 181: <li>Let <a href="https://man.openbsd.org/iwx.4">iwx(4)</a> and <a href="https://man.openbsd.org/iwm.4">iwm(4)</a> use per-Tx-queue interface timers to ensure timeout if a particular Tx queue gets stuck.
! 182: <li>Added <a href="https://man.openbsd.org/ssh-keygen.1">ssh-keygen(1)</a> -Y match-principals operation to perform matching of principals names against an allowed signers file.
! 183: <!-- 2021/11/26 -->
! 184: <li>Dropped support for netscape certificates and server gated keys in <a href="https://man.openbsd.org/openssl.1">openssl(1)</a>.
! 185: <!-- 2021/11/25 -->
! 186: <li>Released <a href="https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.4.2-relnotes.txt">LibreSSL 3.4.2</a>.
! 187: <li>Prevented the possible creation of MBRs with overlapping partitions 0 and 3 in <a href="https://man.openbsd.org/fdisk.8">fdisk(8)</a>.
! 188: <!-- 2021/11/24 -->
! 189: <li>Fixed a panic when running <a href="https://man.openbsd.org/utvfu.4">utvfu(4)</a> on <a href="https://man.openbsd.org/xhci.4">xhci(4)</a>.
! 190: <li>Fixed timestamp printing in Signed Certificate Timestamps.
! 191: <!-- 2021/11/23 -->
! 192: <li>Switched to calculating <a href="https://man.openbsd.org/pppoe.4">pppoe(4)</a> session duration using system uptime rather than UTC.
! 193: <li>Updated to <a href="https://man.openbsd.org/openchrome.4">openchrome(4)</a> 0.6.409.
! 194: <li>Switched LLD_ARCHs to <a href="https://man.openbsd.org/llvm-ar.1">llvm-ar(1)</a>.
! 195: <!-- 2021/11/22 -->
! 196: <li>Introduced <a href="https://man.openbsd.org/pcyrtc.4">pcyrtc(4)</a>, a driver for the NXP PCF85063A/TP RTC chips.
! 197: <li>Implemented RFC6840 (AD flag processing) if using trusted name servers.
! 198: <li>Aligned memory allocation for USB device drivers and USB HC drivers, enlarging the USB memory pool.
! 199: <!-- 2021/11/21 -->
! 200: <li>Added <a href="https://man.openbsd.org/ikectl.8">ikectl(8)</a> "show certinfo" to show trusted CAs and certificates.
! 201: <li>Introduced <a href="https://man.openbsd.org/iicmux.4">iicmux(4)</a>, a driver that switches between I2C busses connected to a single I2C controller by using the pin muxing facilities of an SoC.
! 202: <!-- 2021/11/20 -->
! 203: <!-- 2021/11/19 -->
! 204: <li>Made <a href="https://man.openbsd.org/config.8">config(8)</a> -c cmdfile use lines from the command file for all input, not just commands. This allows complex actions like changing device parameters.
! 205: <li>Allowed interface names as scope-id in IPv6 link-local addresses in <a href="https://man.openbsd.org/unbound.8">unbound(8)</a>.
! 206: <li>Made futexes work in shared anonymous memory.
! 207: <li>Fixed monitor mode on <a href="https://man.openbsd.org/iwm.4">iwm(4)</a> and <a href="https://man.openbsd.org/iwx.4">iwx(4)</a>.
! 208: <!-- 2021/11/18 -->
! 209: <!-- 2021/11/17 -->
! 210: <li>Made <a href="https://man.openbsd.org/uniq.1">uniq(1)</a> ignore trailing newlines when comparing lines.
! 211: <li>Fixed a crash when <a href="https://man.openbsd.org/xrandr.1">xrandr(1)</a> is invoked with X server 21.1.1.
! 212: <li>Added display of DNS information from <a href="https://man.openbsd.org/sppp.4">sppp(4)</a> to <a href="https://man.openbsd.org/ifconfig.8">ifconfig(8)</a>.
! 213: <li>Disabled active scanning on <a href="https://man.openbsd.org/iwm.4">iwm(4)</a> 9260 and 9560 to prevent a device lockup.
! 214: <!-- 2021/11/16 -->
! 215: <li>Installed missing scope identifiers for IPv6 link-local addresses for <a href="https://man.openbsd.org/unwind.8">unwind(8)</a> and <a href="https://man.openbsd.org/resolvd.8">resolvd(8)</a>.
! 216: <li>Fixed <a href="https://man.openbsd.org/hilkbd.4">hilkbd(4)</a> Swedish keyboard layout on non-PS/2 style keyboards.
! 217: <!-- 2021/11/15 -->
! 218: <!-- 2021/11/14 -->
! 219: <li>Improved and simplified timer handling in <a href="https://man.openbsd.org/rc.d.8">rc.d(8)</a> "stop" and "reload".
! 220: <!-- 2021/11/13 -->
! 221: <li>Switched to using long filenames by default with <a href="https://man.openbsd.org/mount_msdos.8">mount_msdos(8)</a> on FAT filesystems.
! 222: <!-- 2021/11/12 -->
! 223: <li>Added support for controlling keyboard LEDs to <a href="https://man.openbsd.org/aplhidev.4">aplhidev(4)</a>.
! 224: <li>Implemented the probe variable in <a href="https://man.openbsd.org/bt.5">bt(5)</a>.
! 225: <li>Updated <a href="https://man.openbsd.org/awk.1">awk(1)</a> to the Nov 3, 2021 version.
! 226: <li>Added support for 40MHz channels to <a href="https://man.openbsd.org/iwn.4">iwn(4)</a>.
! 227: <!-- 2021/11/11 -->
! 228: <li>Reduced the time overhead of <a href="https://man.openbsd.org/kqueue.2">kqueue(2)</a>-based <a href="https://man.openbsd.org/poll.2">poll(2)</a> and <a href="https://man.openbsd.org/select.2">select(2)</a> systems calls by keeping knotes between the system calls.
! 229: <li>Made <a href="https://man.openbsd.org/config.8">config(8)</a> -e work with ramdisk kernels.
! 230:
! 231: <li>Fixed crashes in <a href="https://man.openbsd.org/httpd.8">httpd(8)</a>.
! 232: <li>Fixed <a href="https://man.openbsd.org/iwn.4">iwn(4)</a> with 4965 devices.
! 233: <li>Retired switch(4), switchd(8) and switchctl(8).
! 234: <li>Updated to <a href="https://man.openbsd.org/Xserver.1">Xserver(1)</a> 21.1.1.
! 235: <li>Updated to libXi 1.8.
! 236: <li>Updated to libXfixes 6.0.0.
! 237: <li>Updated to xorgprotos 2021.5.
! 238: <li>Updated to fontconfig 2.13.94.
! 239: <li>Updated to Freetype 2.11.0.
! 240: <!-- 2021/11/10 -->
! 241: <li>Added support for PPP IPCP extensions for DNS to <a href="https://man.openbsd.org/sppp.4">sppp(4)</a>.
! 242: <li>Fixed broken key exchange negotiation with matching proposals in <a href="https://man.openbsd.org/iked.8">iked(8)</a>.
! 243: <!-- 2021/11/09 -->
! 244: <li>Added the sntrup761x25519-sha512@openssh.com hybrid ECDH/x25519 + Streamlined NTRU Prime post-quantum KEX to the default KEXAlgorithms list fo <a href="https://man.openbsd.org/ssh_config.5">ssh_config(5)</a> and <a href="https://man.openbsd.org/sshd_config.5">sshd_config(5)</a>.
! 245: <li>Fixed <a href="https://man.openbsd.org/ssh-keysign.8">ssh-keysign(8)</a> for KEX algorithms that use SHA384/512 exchange hashes.
! 246: <li>Added <a href="https://man.openbsd.org/gpiokeys.4">gpiokeys(4)</a> for arm64, a driver which handles events triggered by GPIO keys such as lid status and power button.
! 247: <li>Published <a href="https://man.openbsd.org/rpki-client.8">rpki-client</a> 7.5.
! 248: <li>Limited the number of publication points under a given TAL in <a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a>.
! 249: <!-- 2021/11/08 -->
! 250: <li>Documented <a href="https://man.openbsd.org/install.site.5">install.site(5)</a>, OpenBSD installation and upgrade customization.
! 251: <!-- 2021/11/07 -->
! 252: <li>Fixed handling of interrupts shared between multiple <a href="https://man.openbsd.org/dwiic.4">swiic(4)</a> devices.
! 253: <!-- 2021/11/06 -->
! 254: <li>Allowed passing a different signal than SIGTERM in the default rc_stop() function in <a href="https://man.openbsd.org/rc.subr.8">rc.subr(8)</a>.
! 255: <!-- 2021/11/05 -->
! 256: <li>Made the kqread event filter MP-safe.
! 257: <li>Corrected <a href="https://man.openbsd.org/httpd.8">httpd(8)</a> version string checking, responding with 505 Version Not Supported rather than 400 Bad Request when the version format is incorrect.
! 258: <!-- 2021/11/04 -->
! 259: <!-- 2021/11/03 -->
! 260: <li>Limited the number of <a href="https://man.openbsd.org/openrsync.1">openrsync(1)</a> processes being spawned by <a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a> to 16.
! 261: <li>Fixed <a href="https://man.openbsd.org/ASN1_TIME_diff">ASN1_TIME_diff(3)</a> with NULL times.
! 262: <li>Added a cursor-style option to <a href="https://man.openbsd.org/tmux.1">tmux(1)</a>.
! 263: <li>Fixed "(null node)" panics on <a href="https://man.openbsd.org/run.4">run(4)</a>.
! 264: <!-- 2021/11/02 -->
! 265: <li>Improved handling of FIDO keys on tokens which provide user verification on the device itself, including biometric keys.
! 266: <li>Corrected "!" escape handling in the installer when accepting WEP/WPA passphrase.
! 267: <li>Updated <a href="https://man.openbsd.org/awk.1">awk(1)</a> to the October 12, 2021 version.
! 268: <!-- 2021/11/01 -->
! 269: <li>Added <a href="https://man.openbsd.org/uniq.1">uniq(1)</a> support for arbitrarily long input lines.
! 270: <li>Prevented <a href="https://man.openbsd.org/awk.1">awk(1)</a> access to uninitialized data.
! 271: <li>Improved SNI hostname validation.
! 272: <li>Stopped binding audio devices exposed by <a href="https://man.openbsd.org/sndiod.8">sndiod(8)</a> to physical devices.
! 273: <li>Fixed "null node" panics in <a href="https://man.openbsd.org/run.4">run(4)</a>.
! 274: <li>Added a cursor-colour option to <a href="https://man.openbsd.org/tmux.1">tmux(1)</a>.
! 275: <li>Added <a href="https://man.openbsd.org/aplhidev.4">aplhidev(4)</a> support for the keyboard/touchpad on Apple M1 laptops.
! 276: <!-- 2021/10/31 -->
! 277: <li>Enabled RFC 3779 (X.509 Extensions for IP Addresses and AS Identifiers) code in OpenSSl.
! 278: <li>Fixed octal escape parsing in <a href="https://man.openbsd.org/tr.1">tr(1)</a> backslash().
! 279: <li>Disabled <a href="https://man.openbsd.org/xterm.1">xterm(1)</a> mouse tracking by default.
! 280: <li>Added <a href="https://man.openbsd.org/aplspi.4">aplspi(4)</a>, a driver for the SPI controller found on the Apple M1 SoC.
! 281: <li>Added <a href="https://man.openbsd.org/igc.4">igc(4)</a>, a driver for the Intel 2.5Gb Ethernet controllers.
! 282: <li>Made <a href="https://man.openbsd.org/athn.4">athn(4)</a> attach to the Sony UWA-BR100.
! 283: <!-- 2021/10/30 -->
! 284: <li>Changed <a href="https://man.openbsd.org/sysctl.8">sysctl(8)</a> default to hw.perfpolicy=auto at startup, defaulting to 100% performance with AC power connected and using the auto algorithm when on battery.
! 285: <li>Fixed UNIX domain sockets leak in soclose().
! 286: <!-- 2021/10/29 -->
! 287: <li>Updated to libepoxy 1.5.9.
! 288: <li>Limited <a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a> HTTP requests to 2GB of data.
! 289: <li>Implemented <a href="https://man.openbsd.org/openrsync.1">openrsync(1)</a> --max-size and --min-size.
! 290: <!-- 2021/10/28 -->
1.1501 pamela 291: <!-- 2021/10/27 -->
292: <li>When downloading resident keys from a FIDO token, made <a href="https://man.openbsd.org/ssh.1">ssh(1)</a> pass back the user ID that was used when the key was created and append it to the filename the key was written to (if not the default).
293: <!-- 2021/10/26 -->
294: <li>Unlocked the <a href="https://man.openbsd.org/kevent.2">kevent(2)</a> system call.
295: <li>Updated to libfido2 1.8.0.
296: <li>Made <a href="https://man.openbsd.org/iked.conf.5">iked.conf(5)</a> proto config option accept a list to allow specifying multiple protocols for a single policy.
297: <li>Improved unhibernate performance by skipping attach of irrelevant devices.
298: <li>Enabled <a href="https://man.openbsd.org/vmx.4">vmx(4)</a> on arm64.
299: <li>Cleaned up irrelevant uses of 3rd mode_t parameter for <a href="https://man.openbsd.org/open.2">open(2)</a>/<a href="https://man.openbsd.org/openat.2">openat(2)</a>, unused when not creating files.
300: <li>Ensured armv7 and arm64 efiboot allocate fresh memory for the device tree with at least one page of free space to extend into. This fixes booting on VMWare Fusion.
301: <li>Added rejection of malformed Subject Alternative Names at certificate creation time to LibreSSL.
302: <!-- 2021/10/25 -->
303: <li>Added a way to force a color to RGB in <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> and a format to display it.
304: <li>Fixed <a href="https://man.openbsd.org/pfctl.8">pfctl(8)</a> $nr incorrect macro expansion.
305: <li>Fixed <a href="https://man.openbsd.org/vi.1">vi(1)</a> use after free with unsaved buffer.
306: <li>Added -s and -S to <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> display-popup to set popup and border style.
307: <li>Fixed application-set fg and bg in <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> panes.
308: <!-- 2021/10/24 -->
309: <li>Added <a href="https://man.openbsd.org/httpd.8">httpd(8)</a> custom error page facility.
310: <li>Added mount -ur/uw support to tmpfs.
311: <li>Unlocked top part of UVM fault hander on mips64.
312: <li>Used <a href="https://man.openbsd.org/unveil.2">unveil(2)</a> for the possible <a href="https://man.openbsd.org/btrace.8">btrace(8)</a> script file, <a href="https://man.openbsd.org/dt.4">dt(4)</a> and <a href="https://man.openbsd.org/ksyms.4">ksyms(4)</a> nodes.
313: <li>Used <a href="https://man.openbsd.org/ifconfig.8">ifconfig(8)</a> "join" command by default in <a href="https://man.openbsd.org/hostname.if.5">hostname.if(5)</a> files, replacing the old "nwid".
314: <li>Switched <a href="https://man.openbsd.org/nsd.8">nsd(8)</a> to enable default DNS cookies on, matching behavior as released in OpenBSD 7.0.
315: <li>Updated to <a href="https://man.openbsd.org/nsd.8">nsd(8)</a> 4.3.8.
316: <li>Implemented <a href="https://man.openbsd.org/poll.2">poll(2)</a>, <a href="https://man.openbsd.org/select.2">select(2)</a>, <a href="https://man.openbsd.org/ppoll.2">ppoll(2)</a> and <a href="https://man.openbsd.org/pselect.2">pselect(2)</a> on top of kqueue.
317: <li>Stopped prompting whether to fall back to HTTP in the installer, making the fallback automatic.
318: <li>Fixed a panic by prohibiting renames of tmpfs mount-points.
319: <li>Set klist lock for sockets to make socket event filters MP-safe.
320: <li>Made pipe event filters MP-safe.
321: <!-- 2021/10/23 -->
322: <li>In <a href="https://man.openbsd.org/httpd.8">httpd(8)</a>, stopped sending content alongside responses to HEAD requests.
323: <li>Stopped duplicating "Connection: close" headers in <a href="https://man.openbsd.org/relayd.8">relayd(8)</a>, only adding it if it's not a websocket response.
324: <li>Provided common <a href="https://man.openbsd.org/btrace.8">btrace(8)</a> scripts kprofile.bt (to save kernel stackframes and produce flamegraphs) and runqlat.bt (to measure the latency of the scheduler runqueues).
325: <li>Added call to <a href="https://man.openbsd.org/unveil.2">unveil(2)</a> to restrict <a href="https://man.openbsd.org/stty.1">stty(1)</a> -f filesystem access.
326: <li>Added support for tpm2 CRB interface to <a href="https://man.openbsd.org/tpm.4">tpm(4)</a>, fixing recent S4 regressions on the Surface Go 2 caused by a firmware change.
327: <li>Retired asynchronous crypto API.
328: <li>Added new OpenSSL api SSL_write_ex, SSL_read_ex and SSL_peek_ex.
329: <li>Annotated an <a href="https://man.openbsd.org/httpd.8">httpd(8)</a> 413 error with "request body too large" in the error log.
330: <li>Fixed double free after allocation failure in <a href="https://man.openbsd.org/bpf.4">bpf(4)</a>.
331: <li>Provided a way to determine our maximum legacy version for TLS in libssl, unbreaking RSA KEX for the TLS client when the non-version specific method is used with TLSv1.0 or TLSv1.1.
332: <li>Called <a href="https://man.openbsd.org/pledge.2">pledge(2)</a> later to prevent it from killing various games using ncurses when both stdout and stderr are redirected to a non-tty.
333: <li>Removed unusable <a href="https://man.openbsd.org/route.8">route(8)</a> -T and exec support from ramdisk.
334: <li>Reinstated the fips mode test functions to libcrypto.
335: <li>Added <a href="https://man.openbsd.org/rcctl.8">rcctl(8)</a> "ls rogue" to show daemons which are running but not set as "enabled" in <a href="https://man.openbsd.org/rc.conf.local.8">rc.conf.local(8)</a>.
336: <li>Fixed a potential buffer overflow in <a href="https://man.openbsd.org/openssl.1">openssl(1)</a> certhash.
337: <!-- 2021/10/22 -->
338: <li>Renamed Pacific/Enderbury timezone to Pacific/Kanton.
339: <li>Fixed an interrupt storm on <a href="https://man.openbsd.org/dwge.4">dwge(4)</a> variants which support Energy Efficient Ethernet when connected to a switch which does so as well.
340: <li>Ensured enabled resolvers are honored by <a href="https://man.openbsd.org/unwind.8">unwind(8)</a> to keep unused forwarders disabled properly.
341: <li>Implemented <a href="https://man.openbsd.org/rsync.1">rsync(1)</a> --compare-dest, allowing specification of additional directories to check for files to be available.
342: <li>Prevented <a href="https://man.openbsd.org/ssh.1">ssh(1)</a> memory leak if getaddrinfo returns no addresses.
343: <li>Added protocol version checking to <a href="https://man.openbsd.org/httpd.8">httpd(8)</a>.
344: <!-- 2021/10/21 -->
345: <li>Ensured use of the correct encoding in xenocara when /etc/kbdtype is present with an attached <a href="https://man.openbsd.org/ucc.4">ucc(4)</a> keyboard.
346: <li>Removed hifn(4), safe(4) and ubsec(4) crypto drivers.
347: <li>Removed <a href="https://man.openbsd.org/fdisk.8">fdisk(8)</a> "disk" editing command.
348: <li>Fixed <a href="https://man.openbsd.org/httpd.8">httpd(8)</a> to respond with 400 Bad Request when a client sends header lines without a colon.
349: <li>Bumped to LibreSSL 3.5.0.
350: <li>Added -T to set a popup title in <a href="https://man.openbsd.org/tmux.1">tmux(1)</a>.
351: <!-- 2021/10/20 -->
352: <li>Stopped ignoring <a href="https://man.openbsd.org/carp.4">carp(4)</a> interfaces in <a href="https://man.openbsd.org/dhcpleased.8">dhcpleased(8)</a>.
353: <!-- 2021/10/19 -->
354: <!-- 2021/10/18 -->
355: <li>Removed an unused decoding of c/h/s from the MBR read from disk by <a href="https://man.openbsd.org/fdisk.8">fdisk(8)</a>.
356: <!-- 2021/10/17 -->
357: <li>Updated to <a href="https://man.openbsd.org/xterm.1">xterm(1)</a> 369.
358: <!-- 2021/10/16 -->
359: <li>Corrected installer to use "inet autoconf" properly for <a href="https://man.openbsd.org/hostname.if.5">hostname.if(5)</a> files.
360: <!-- 2021/10/15 -->
361: <li>Returned to use of the SFTP protocol for <a href="https://man.openbsd.org/scp.1">scp(1)</a>.
362: <li>Added initial 40MHz support to the <a href="https://man.openbsd.org/iwx.4">iwx(4)</a> driver.
363: <li>Fixed a problem with repeat in <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> copy mode.
364: <!-- 2021/10/14 -->
365: <li>Released <a href="https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.4.1-relnotes.txt">LibreSSL 3.4.1</a>.
366: <li>Replaced <a href="https://man.openbsd.org/lrint.3">lrint(3)</a>, <a href="https://man.openbsd.org/lrintf.3">lrintf(3)</a>, <a href="https://man.openbsd.org/llrint.3">llrint(3)</a> and <a href="https://man.openbsd.org/llrintf.3">llrintf(3)</a> implementations from NetBSD with the existing FreeBSD implementations we were already using for <a href="https://man.openbsd.org/lrintl.3">lrintl(3)</a> and <a href="https://man.openbsd.org/llrintl.3">llrintl(3)</a>.
367: <li>Fixed a <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> redraw problem on automargin terminals.
368: <!-- 2021/10/13 -->
369: <li>Modified <a href="https://man.openbsd.org/syslog.conf.5">syslog.conf(5)</a> examples to use TLS rather than the plaintext protocols.
370: <li>Fixed file descriptor leak of /dev/tty on <a href="https://man.openbsd.org/doas.1">doas(1)</a> auth failure.
371: <li>Added <a href="https://man.openbsd.org/realpath.1">realpath(1)</a>, a wrapper for <a href="https://man.openbsd.org/realpath.3">realpath(3)</a> for use in ports.
1.1500 pamela 372: <!-- 2021/10/12 -->
1.1501 pamela 373: <li>Enabled enforcing of RLIMIT_MEMLOCK on powerpc64.
1.1500 pamela 374: <li>Reverted to use <a href="https://man.openbsd.org/iwm.4">iwm(4)</a> firmware v17 on Intel AC 7265, fixing instability issues on X1 Carbon gen3.
375: <li>Cached the old BSSID when roaming with <a href="https://man.openbsd.org/iwx.4">iwx(4)</a>.
376: <li>Explicitly stopped <a href="https://man.openbsd.org/iwx.4">iwx(4)</a> Rx block ack when roaming between access points.
377: <!-- 2021/10/11 -->
378: <li>Added support for 802.11n 40MHz channels to the <a href="https://man.openbsd.org/iwm.4">iwm(4)</a> driver.
379: <li>Added monitoring of 20/40MHz channel width changes in beacons sent by our access point, notifying drivers when the channel width has changed.
380: <!-- 2021/10/10 -->
381: <li>Added support for 40MHz channels to net80211 RA.
382: <li>Fixed establishing legacy INTx interrupts on machines without a (usable) MSI interrupt controller.
383: <!-- 2021/10/09 -->
384: <li>Merged bugfixes from upstream into <a href="https://man.openbsd.org/less.1">less(1)</a> including fixes for the prompt hiding feature (CTRL-P) and an integer overflow.
385: <!-- 2021/10/08 -->
386: <!-- 2021/10/07 -->
387: <li>Cached the old BSSID when roaming with <a href="https://man.openbsd.org/iwm.4">iwm(4)</a> so firmware commands can continue using it while roaming to a new AP.
388: <!-- 2021/10/06 -->
389: <li>Stopped <a href="https://man.openbsd.org/pkg_add.1">pkg_add(1)</a> from communicating warnings starting with "XXX" which appeared to indicate errors.
390: <li>Ensured <a href="https://man.openbsd.org/iwm.4">iwm(4)</a> uses only the HT (high throughput) frame format for data frames.
391: <li>Allowed AUTH->AUTH state transitions in the <a href="https://man.openbsd.org/iwm.4">iwm(4)</a> and <a href="https://man.openbsd.org/iwx.4">iwx(4)</a> drivers again, needed if the access point uses band-steering.
392: <li>Removed the <a href="https://man.openbsd.org/ifconfig.8">ifconfig(8)</a> autoconfprivacy deprecation warning.
393: <!-- 2021/10/05 -->
394: <li>Retired the Loongson platform.
395: <li>Fixed <a href="https://man.openbsd.org/iwm.4">iwm(4)</a> performance drop after roaming between APs in 11n mode.
396: <!-- 2021/10/04 -->
397: <li>Applied a workaround in <a href="https://man.openbsd.org/mvkpcie.4">mvkpcie(4)</a> to fix an external abort under load with <a href="https://man.openbsd.org/athn.4">athn(4)</a>.
398: <!-- 2021/10/03 -->
399: <li>Added relicensed wireless firmwares from Realtek for <a href="https://man.openbsd.org/rsu.4">rsu(4)</a>, <a href="https://man.openbsd.org/rtwn.4">rtwn(4)</a> and <a href="https://man.openbsd.org/urtwn.4">urtwn(4)</a> devices, allowing these devices to work without requiring a separate firmware download.
400: <li>Added a workaround for buggy <a href="https://man.openbsd.org/athn.4">athn(4)</a> devices to prevent filling up the node cache when used in hostap mode.
401: <!-- 2021/10/02 -->
402: <li>Made redistributable firmwares available across all architectures.
403: <li>Fixed memory leak in <a href="https://man.openbsd.org/fuse.4">fuse(4)</a> when calling <a href="https://man.openbsd.org/namei.9">namei(9)</a>.
404: <li>Fixed a panic when <a href="https://man.openbsd.org/iwx.4">iwx(4)</a> cannot find firmware at boot time.
405: <!-- 2021/10/01 -->
406: <li>Released LibreSSL <a href="https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.3.5-relnotes.txt">3.3.5</a> and <a href="https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.2.7-relnotes.txt">3.2.7</a>.
407: <!-- 2021/09/30 -->
408: <li>Enabled X509_V_FLAG_TRUSTED_FIRST by default in the legacy verifier.
409: <li>Deleted expired DST Root CA X3.
410: <li>Prevented <a href="https://man.openbsd.org/iwm.4">iwm(4)</a> and <a href="https://man.openbsd.org/iwx.4">iwx(4)</a> attempts to transition toward the same state where this would result in a redundant or illegal state transition and a potential hang.
411: <!-- 2021/09/29 -->
412: <li>Removed the constraint that <a href="https://man.openbsd.org/fdisk.8">fdisk(8)</a> -b specified block count or block size must be greater than 63.
413: <li>Added support to <a href="https://man.openbsd.org/pchgpio.4">pchgpio(4)</a> for Cannon Lake H and Tiger Lake H platforms.
414: <!-- 2021/09/28 -->
415: <!-- 2021/09/27 -->
416: <li>Fixed a crash in <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> when a session with multiple clients is destroyed but tmux does not close completely due to other sessions.
417: <!-- 2021/09/26 -->
418: <!-- 2021/09/25 -->
419: <li>Introduced <a href="https://man.openbsd.org/gpiocharger.4">gpiocharger(4)</a>, a driver providing support for battery chargers connected to GPIO pins, such as those found on the Pinebook Pro.
420: <li>Introduced <a href="https://man.openbsd.org/gpioleds.4">gpioleds(4)</a> for arm64, a driver providing support for LEDs connected to GPIO pins, such as those found on the Pinebook Pro.
421: <!-- 2021/09/24 -->
422: <li>Reset the Tx timer upon validation of a BA notification sent by <a href="https://man.openbsd.org/iwx.4">iwx(4)</a> and <a href="https://man.openbsd.org/iwm.4">iwm(4)</a> firmware.
423: <!-- 2021/09/23 -->
424: <li>Added support to <a href="https://man.openbsd.org/umb.4">umb(4)</a> for SIMCom SIM7600.
425: <li>Released <a href="https://man.openbsd.org/rpki-client.8">rpki-client</a> 7.3.
426: <li>Removed wpath from <a href="https://man.openbsd.org/less.1">less(1)</a> secure mode pledge.
427: <li>Added <a href="https://man.openbsd.org/iwx.4">iwx(4)</a> Tx aggregation support.
428: <li>Added an ADDBA_OFFLOAD capability for wifi devices to manage Tx block ack sessions entirely in firmware.
429: <li>Released <a href="https://man.openbsd.org/bgpd.8">OpenBGPD</a> 7.2.
430: <!-- 2021/09/22 -->
431: <li>Cleared length of keys in <a href="https://man.openbsd.org/vnconfig.8">vnconfig(8)</a> alongside keys themselves.
1.1164 deraadt 432: </ul>