www/plus.html - view

Return to plus.html CVS log

Up to [local] / www

File: [local] / www / plus.html (download) (as text)

Revision 1.1486, Mon Dec 28 11:21:32 2020 UTC (3 years, 5 months ago) by pamela
Branch: MAIN
Changes since 1.1485: +22 -0 lines

plus for dec 22-27
OK florian

<!doctype html>
<html lang=en id=plus>
<meta charset=utf-8>
<title>OpenBSD -current Changelog</title>
<meta name="description" content="OpenBSD -current changes">
<meta name="viewport" content="width=device-width, initial-scale=1">
<link rel="stylesheet" type="text/css" href="openbsd.css">
<link rel="canonical" href="https://www.openbsd.org/plus.html">
<style>
strong {
	color: var(--red);
	font-weight: normal;
}

h3 {
	color: var(--blue);
}
</style>

<h2 id=OpenBSD>
<a href="index.html">
<i>Open</i><b>BSD</b></a>
-current Changelog
</h2>
<hr>

<p>
This selection is intended to include all important
and all user-visible changes.
For a complete record of all changes, please see the "source-changes"
mailing list, called "OpenBSD CVS"
in the <a href="mail.html#Archives">archives</a>,
or use <a href="anoncvs.html#CVS">CVS</a>.

<p>
For changes in other releases, click below:<br>
<a href="plus20.html">2.0</a>,
<a href="plus21.html">2.1</a>,
<a href="plus22.html">2.2</a>,
<a href="plus23.html">2.3</a>,
<a href="plus24.html">2.4</a>,
<a href="plus25.html">2.5</a>,
<a href="plus26.html">2.6</a>,
<a href="plus27.html">2.7</a>,
<a href="plus28.html">2.8</a>,
<a href="plus29.html">2.9</a>,
<a href="plus30.html">3.0</a>,
<a href="plus31.html">3.1</a>,
<a href="plus32.html">3.2</a>,
<a href="plus33.html">3.3</a>,
<a href="plus34.html">3.4</a>,
<a href="plus35.html">3.5</a>,
<a href="plus36.html">3.6</a>,
<br>
<a href="plus37.html">3.7</a>,
<a href="plus38.html">3.8</a>,
<a href="plus39.html">3.9</a>,
<a href="plus40.html">4.0</a>,
<a href="plus41.html">4.1</a>,
<a href="plus42.html">4.2</a>,
<a href="plus43.html">4.3</a>,
<a href="plus44.html">4.4</a>,
<a href="plus45.html">4.5</a>,
<a href="plus46.html">4.6</a>,
<a href="plus47.html">4.7</a>,
<a href="plus48.html">4.8</a>,
<a href="plus49.html">4.9</a>,
<a href="plus50.html">5.0</a>,
<a href="plus51.html">5.1</a>,
<a href="plus52.html">5.2</a>,
<a href="plus53.html">5.3</a>,
<br>
<a href="plus54.html">5.4</a>,
<a href="plus55.html">5.5</a>,
<a href="plus56.html">5.6</a>,
<a href="plus57.html">5.7</a>,
<a href="plus58.html">5.8</a>,
<a href="plus59.html">5.9</a>,
<a href="plus60.html">6.0</a>,
<a href="plus61.html">6.1</a>,
<a href="plus62.html">6.2</a>,
<a href="plus63.html">6.3</a>,
<a href="plus64.html">6.4</a>,
<a href="plus65.html">6.5</a>,
<a href="plus66.html">6.6</a>,
<a href="plus67.html">6.7</a>,
<a href="plus68.html">6.8</a>.
<br>

<p>
<h3>Changes made between OpenBSD 6.8 and -current</h3>
<p>

<ul>
<!-- 2020/12/27 -->
<li>Fixed "any" and "dynamic" keywords for flows in <a href="https://man.openbsd.org/iked.8">iked(8)</a> and added proper IPv6 support.
<li>Added PCIe support to <a href="https://man.openbsd.org/amlpciephy.4">amlpciephy(4)</a>.
<!-- 2020/12/26 -->
<li>Fixed a memory leak in ld.so's malloc.
<!-- 2020/12/25 -->
<li>Added Gemini Lake I2C id to <a href="https://man.openbsd.org/dwiic.4">dwiic(4)</a>, making the touchpad work on the Teclast F7 Plus laptop.
<!-- 2020/12/24 -->
<li>Corrected accounting of zero length TDs in <a href="https://man.openbsd.org/xhci.4">xhci(4)</a>, preventing free TRBs from running out.
<!-- 2020/12/23 -->
<li>Fixed hangs on amd64 bsd.rd due to misreported core clock frequency on newer Intel Comet Lake models.
<li>Added a global "nowake" channel for threads avoiding <a href="https://man.openbsd.org/wakeup.9">wakeup(9)</a> to <a href="https://man.openbsd.org/tsleep.9">tsleep(9)</a>.
<li>Added Wake on LAN support to <a href="https://man.openbsd.org/rge.4">rge(4)</a>.
<li>Added a specific headline to <a href="https://man.openbsd.org/netstat.1">netstat(1)</a> for TCP state and IP protocol.
<li>Prevented a crash due to premature release of resources by the <a href="https://man.openbsd.org/smtpd.8">smtpd(8)</a> filter state machine.
<li>Allowed the provision of <a href="https://man.openbsd.org/dhclient.8">dhclient(8)</a> options on "dhcp" lines in <a href="https://man.openbsd.org/hostname.if.5">hostname.if(5)</a> files.
<li>Fixed a memory leak in <a href="https://man.openbsd.org/smtpd.8">smtpd(8)</a> resolver.
<li>Introduced a send hold timer in <a href="https://man.openbsd.org/bgpd.8">bgpd(8)</a> to detect stalls on the sending side of a TCP connection, acting as a last resort to detect faulty peers.
<li>Fixed ofw regulators that use "active-low" polarity.
<!-- 2020/12/22 -->
<li>Added PCIe clocks to <a href="https://man.openbsd.org/amlclock.4">amlclock(4)</a>.
<li>Implemented <a href="https://man.openbsd.org/select.2">select(2)</a> and <a href="https://man.openbsd.org/pselect.2">pselect(2)</a> on top of <a href="https://man.openbsd.org/kqueue.2">kqueue(2)</a>.
<!-- 2020/12/21 -->
<li>Made clang the default compiler on loongson.
<li>Added an <a href="https://man.openbsd.org/ssh_config.5">ssh_config(5)</a> KnownHostsCommand that allows the client to obtain known_hosts data from a command in addition to the usual files.
<li>Prevented initiation of new additional SAs for each policy upon every <a href="https://man.openbsd.org/ikectl.8">ikectl(8)</a> config reload.
<li>Introduced <a href="https://man.openbsd.org/smtp.1">smtp(1)</a> -a to perform authentication before sending a message.
<li>Fixed DRI3 support on <a href="https://man.openbsd.org/amdgpu.4">amdgpu(4)</a> and <a href="https://man.openbsd.org/ati.4">ati(4)</a>.
<!-- 2020/12/20 -->
<li>Accepted reject and blackhole routes for IPsec PMTU discovery.
<li>Prevented leaking of ipsec_hosts in <a href="https://man.openbsd.org/iked.8">iked(8)</a> when building hosts_list.
<li>Fixed booting on powerpc64 machines with memory banks higher in physical address space, needing a larger TCE table.
<li>Introduced klistops, introducing a way to associate lock operations with a klist.
<li>Fixed <a href="https://man.openbsd.org/dig.1">dig(1)</a> EDNS Client Subnet option (+subnet=).
<li>Fixed IPv6 link-local address handling for nameservers to talk to and address to bind to in <a href="https://man.openbsd.org/dig.1">dig(1)</a>.
<!-- 2020/12/19 -->
<!-- 2020/12/18 -->
<li>Added support for the i.MX8MP PCIe clocks, USB clocks and second ethernet.
<li>Made large read and write transactions work in <a href="https://man.openbsd.org/amliic.4">amliic(4)</a>.
<li>Updated to the December 18, 2020 version of <a href="https://man.openbsd.org/awk.1">awk(1)</a>.
<li>Added fd close notification for kqueue-based <a href="https://man.openbsd.org/poll.2">poll(2)</a> and <a href="https://man.openbsd.org/select.2">select(2)</a>.
<li>Corrected the first packet of an <a href="https://man.openbsd.org/ipsec.4">ipsec(4)</a> SA to have sequence number 1.
<!-- 2020/12/17 -->
<li>Added "amlogic,meson-g12a-dwmac" to <a href="https://man.openbsd.org/dwge.4">dwge(4)</a>.
<li>Added <a href="https://man.openbsd.org/amlpinctrl.4">amlpinctrl(4)</a> support for the "Always On" GPIOs.
<li>Introduced a delay to work around an issue in <a href="https://man.openbsd.org/bwfm.4">bwfm(4)</a> on the BCM43602 that was triggering "unexpected pairwise key update" errors.
<!-- 2020/12/16 -->
<li>Made <a href="https://man.openbsd.org/pfctl.8">pfctl(8)</a> detect and reject bogus ranges before loading the ruleset to prevent a panic.
<!-- 2020/12/15 -->
<li>Made <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> synchronize-panes a pane option and added set-option -U flag to unset an option on all panes.
<!-- 2020/12/14 -->
<!-- 2020/12/13 -->
<li>Updated to xcb-proto 1.14.1.
<!-- 2020/12/12 -->
<li>Updated to <a href="https://man.openbsd.org/Xserver.1">Xserver(1)</a> 1.20.10.
<!-- 2020/12/11 -->
<li>Prevented a race in <a href="https://man.openbsd.org/dhclient.8">dhclient(8)</a> privsep which could cause autoinstall to fail by calling <a href="https://man.openbsd.org/ftp.1">ftp(1)</a> without a local address.
<li>Correctly enumerated files with more than INT_MAX lines with the <a href="https://man.openbsd.org/cat.1">cat(1)</a> -n flag.
<!-- 2020/12/10 -->
<li>Updated to <a href="https://man.openbsd.org/unbound.8">unbound(8)</a> 1.13.0.
<li>Updated to <a href="https://man.openbsd.org/nsd.8">nsd(8)</a> 4.3.4.
<!-- 2020/12/09 -->
<li>Fixed TCP going over an interface with fq codel enabled.
<li>Avoided spurious "input packet decapsulations failed" errors in <a href="https://man.openbsd.org/netstat.1">netstat(1)</a> -W with A-MSDU enabled.
<li>Allowed booting of amd64/i386 from 4TB GPT formatted disks.
<li>Flushed the reorder buffer after gap timeout to prevent frames from remaining in the buffer until the next frame is received.
<li>Validated ghostbuster records (RFC 6493) in <a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a>.
<!-- 2020/12/08 -->
<li>Fixed 802.11 RSN capabilities announced to peers.
<li>Fixed a potential NULL pointer dereference due to malformed ASN.1 in a certificate revocation list or a timestamp response token.
<!-- 2020/12/07 -->
<li>Fixed the calculation of "maxlen" in <a href="https://man.openbsd.org/iwm.4">iwm(4)</a> and <a href="https://man.openbsd.org/iwx.4">iwx(4)</a> when there are multiple MPDUs in one packet.
<li>Limited the URL embedded in .cer files in <a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a> to alphanumeric characters and punctuation.
<!-- 2020/12/06 -->
<li>Added <a href="https://man.openbsd.org/dwgpio.4">dwgpio(4)</a>, a driver for the Synopsys DesignWare GPIO controller.
<li>Added <a href="https://man.openbsd.org/iked.8">iked(8)</a> support for RSASSA-PSS signature verification (RFC 7427).
<li>Fixed a race condition in <a href="https://man.openbsd.org/wsmux.4">wsmux(4)</a>.
<!-- 2020/12/05 -->
<!-- 2020/12/04 -->
<li>Allowed exporting prefixes from multiple sessions in <a href="https://man.openbsd.org/bgpd.8">bgpd(8)</a> into the same <a href="https://man.openbsd.org/pf.4">pf(4)</a> table, preventing a prefix from being removed from the table on the first withdrawal even if an alternative exists.
<!-- 2020/12/03 -->
<!-- 2020/12/02 -->
<li>Prevented a TOCTOU race in single_thread_set() by extending the scope of the lock.
<li>Enabled auto-negotiation on the SerDes links, allowing in-band-status to work between <a href="https://man.openbsd.org/mvpp.4">mvpp(4)</a> and <a href="https://man.openbsd.org/mvsw.4">mvsw(4)</a> on the ClearFog GT 8K.
<!-- 2020/12/01 -->
<li>Allowed <a href="https://man.openbsd.org/rad.8">rad(8)</a> to handle all rdomains in a single daemon.
<li>Made uvm_pagealloc() mp-safe.
<!-- 2020/11/30 -->
<li>Ensured rekeying of every child SA in <a href="https://man.openbsd.org/iked.8">iked(8)</a>.
<!-- 2020/11/29 -->
<li>Fixed <a href="https://man.openbsd.org/ldapd.8">ldapd(8)</a> cert and key path inference for absolute paths.
<li>Taught lld to link the macppc kernel.
<li>Added support for 1000base-x and 2500base-x connections to <a href="https://man.openbsd.org/mvneta.4">mvneta(4)</a>.
<li>Added <a href="https://man.openbsd.org/mvsw.4">mvsw(4)</a>, a driver for Marvel "SOHO" switches.
<li>Added the <a href="https://man.openbsd.org/iked.8">iked(8)</a> "set stickyaddress" option, which attempts to assign the same "config address" when an IKESA is negotiated with the DSTID of an existing IKESA.
<li>Added support for the use of !command to <a href="https://man.openbsd.org/mygate.5">mygate(5)</a>, so that netstart has a late opportunity to perform network configuration.
<!-- 2020/11/28 -->
<li>Updated to libX11 1.7.0.
<li>Handled an autoconf interface changing its rdomain in <a href="https://man.openbsd.org/slaacd.8">slaacd(8)</a>.
<li>Added <a href="https://man.openbsd.org/iked.8">iked(8)</a> support for multiple address pools.
<!-- 2020/11/27 -->
<!-- 2020/11/26 -->
<li>Set the specified TOS/DSCP for interactive use prior to TCP connect in <a href="https://man.openbsd.org/ssh.1">ssh(1)</a>.
<li>CLeaned up passing of struct passwd from monitor to preauth privsep process in <a href="https://man.openbsd.org/ssh.1">ssh(1)</a>.
<li>Used a counter instead of random IV for AES-GCM in <a href="https://man.openbsd.org/iked.8">iked(8)</a>, eliminating the risk of random collisions.
<!-- 2020/11/25 -->
<li>Changed kqueue_scan() to keep track of collected events in the given context.
<!-- 2020/11/24 -->
<li>Killed <a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a> connection upon <a href="https://man.openbsd.org/openrsync.1">openrsync(1)</a> server stall.
<li>Added a simple --timeout implementation to <a href="https://man.openbsd.org/openrsync.1">openrsync(1)</a>.
<!-- 2020/11/23 -->
<li>Fixed very old <a href="https://man.openbsd.org/umass.4">umass(4)</a> devices where the INQUIRY command succeeds but with a residue equal to the requested bytes.
<!-- 2020/11/22 -->
<li>Fixed a panic seen with mbuf chains on arm64.
<!-- 2020/11/21 -->
<li>Fixed incorrect behavior when using <a href="https://man.openbsd.org/dhclient.conf.5">dhclient.conf(5)</a> to change the lease renew/rebind/expiry timing.
<!-- 2020/11/20 -->
<li>Added <a href="https://man.openbsd.org/iked.8">iked(8)</a> -s socket option to specify a control socket.
<!-- 2020/11/19 -->
<li>When doing an <a href="https://man.openbsd.org/sftp.1">sftp(1)</a> recursive upload or download of a read-only directory, ensured that the directory was created with write and execute permissions in the interim to allow the transfer.
<li>Fixed <a href="https://man.openbsd.org/urtwn.4">urtwn(4)</a> repeated DEAUTH and loss/restoration of link.
<li>Allowed specific <a href="https://man.openbsd.org/sndio.7">sndio(7)</a> devices to be used for play-only and rec-only modes.
<li>Fixed panics on the HoneyComb LX2K with <a href="https://man.openbsd.org/amdgpu.4">amdgpu(4)</a>.
<!-- 2020/11/18 -->
<!-- 2020/11/17 -->
<li>Prevented accidental truncation of large memory segments on loongson.
<li>Added ACPI support to <a href="https://man.openbsd.org/imxiic.4">imxiic(4)</a>.
<!-- 2020/11/16 -->
<li>Implemented the key material exporter for TLSv1.3.
<li>Prevented process exit in multithreaded programs from reporting the wrong error code.
<li>Added multicast support to <a href="https://man.openbsd.org/bwfm.4">bwfm(4)</a> to allow IPv6.
<!-- 2020/11/15 -->
<li>Added <a href="https://man.openbsd.org/acpige.4">acpige(4)</a>, a driver for ACPI generic event devices, used on te HoneyComb LX2K to implement power button handling.
<li>Added <a href="https://man.openbsd.org/pchgpio.4">pchgpio(4)</a>, a driver for the GPIO controllers found on modern Intel PCHs.
<!-- 2020/11/14 -->
<li>Revised the initialization of the <a href="https://man.openbsd.org/drm.4">drm(4)</a> Linux emulation layer to call it only when the first drm instance attaches.
<li>Extended <a href="https://man.openbsd.org/pcamux.4">pcamux(4)</a> with ACPI support.
<li>Added support for the VF610 I2C controller to <a href="https://man.openbsd.org/imxiic.4">imxiic(4)</a>.
<li>Made sure not to replace 0.0.0.0 with a dynamic address in <a href="https://man.openbsd.org/iked.8">iked(8)</a> if it is a network address.
<li>Added 10G media support to <a href="https://man.openbsd.org/mvpp.4">mvpp(4)</a>.
<li>Added SFP+ support to ofw, including support for direct attach cables.
<!-- 2020/11/13 -->
<li>Added support for the PL2303HXN series chips to <a href="https://man.openbsd.org/uplcom.4">uplcom(4)</a>.
<li>Added support for the PCA9547 I2C mux to <a href="https://man.openbsd.org/pcamux.4">pcamux(4)</a>.
<!-- 2020/11/12 -->
<li>Added <a href="https://man.openbsd.org/witness.4">witness(4)</a> check for uninitialized (or zeroed) lock usage.
<li>Prefixed <a href="https://man.openbsd.org/ssh.1">ssh(1)</a> keyboard interactive prompts with "user@host" for easier identification of connections.
<li>Displayed any other hostnames/addresses associated with a new hostkey when <a href="https://man.openbsd.org/ssh.1">ssh(1)</a> prompts the user to accept it.
<!-- 2020/11/11 -->
<li>Implemented auto chain for the TLSv1.3 server.
<li>Updated to freetype 2.10.4.
<li>Fixed <a href="https://man.openbsd.org/athn.4">athn(4)</a> in client mode against APs that use WPA1/TKIP as the group cipher.
<!-- 2020/11/10 -->
<li>Fixed <a href="https://man.openbsd.org/urtwn.4">urtwn(4)</a> against access points using WPA1/TKIP as the group cipher.
<!-- 2020/11/09 -->
<li>Fixed a panic associated with locks and <a href="https://man.openbsd.org/drm.4">drm(4)</a> on macppc with Powerbook5,6 and RV350.
<li>Fixed issues with network stopping after the first down/up cycle in <a href="https://man.openbsd.org/mvpp.4">mvpp(4)</a>.
<li>Fixed link state change behavior in 82598 <a href="https://man.openbsd.org/ix.4">ix(4)</a> chips.
<li>Increased speed of the dependency check pass for <a href="https://man.openbsd.org/pkg_add.1">pkg_add(1)</a>.
<li>Allowed use of ## and # in <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> styles and added a "w" format modifier for width.
<!-- 2020/11/08 -->
<!-- 2020/11/07 -->
<li>Added clock support for i.MX8MP.
<li>Implemented <a href="https://man.openbsd.org/iked.8">iked(8)</a> "from dynamic," installing flows where "dynamic" is replaced by the received dynamic IP address.
<li>Fixed <a href="https://man.openbsd.org/ilogb.3">ilogb(3)</a> implementation, preventing a potential infinite loop.
<!-- 2020/11/06 -->
<li>Changed from <a href="https://man.openbsd.org/rwlock.9">rwlock(9)</a> to <a href="https://man.openbsd.org/mutex.9">mutex(9)</a> for linux rwlocks.
<li>Removed the -L option from <a href="https://man.openbsd.org/dhclient.8">dhclient(8)</a>.
<li>Fixed <a href="https://man.openbsd.org/wg.4">wg(4)</a> on macppc by keeping track of allowed ips pointer correctly.
<li>Added the ClearFog GT 8K to <a href="https://man.openbsd.org/mvclock.4">mvclock(4)</a>.
<!-- 2020/11/05 -->
<li>Enabled <a href="https://man.openbsd.org/iked.8">iked(8)</a> support for ASN1_DN ipsec identifiers.
<li>Fixed rare crashes of <a href="https://man.openbsd.org/unwind.8">unwind(8)</a> when DNS answers are larger than the maximum imsg size.
<li>Fixed <a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a> checks for manifest validity interval.
<li>Released OpenBGPD-6.8p1.
<!-- 2020/11/04 -->
<li>Added recognition of Cortex-A78AE, Cortex-X1 and Neoverse V1 arm64 CPUs.
<!-- 2020/11/03 -->
<li>Corrected an issue where <a href="https://man.openbsd.org/openssl.1">openssl(1)</a> verify might not error on expired certificates.
<li>Fixed an issue in the TLS 1.3 code that caused stalls in haproxy and other software.
<li>Changed <a href="https://man.openbsd.org/crypto.3">crypto(3)</a> to call its get_issuer() callback to try and find a suitable certificate in cases where it has failed to find a print certificate from the supplied roots and intermediates.
<li>Added the 'any' keyword to <a href="https://man.openbsd.org/iked.conf.5">iked.conf(5)</a> for requests to allow "request address any".
<!-- 2020/11/02 -->
<li>Enabled brightness keys on powerbooks where the keyboard attaches as <a href="https://man.openbsd.org/ukbd.4">ukbd(4)</a>.
<li>Set initial default display brightness on macppc via of_setbrightness() to ensure <a href="https://man.openbsd.org/wscons.4">wscons(4)</a> and ofw are in sync.
<!-- 2020/11/01 -->
<li>Added 'dynamic' keyword to <a href="https://man.openbsd.org/iked.conf.5">iked.conf(5)</a> to allow configuration of flows to dynamically assigned addresses.
<li>Implemented RFC 8914 Extended DNS Errors for <a href="https://man.openbsd.org/dig.1">dig(1)</a>.
<li>Added tracking of address proposal creation times to be able to establish total lifetime. This information is used to renew pltime/vltime of privacy addresse per RFC 4941.
<li>Changed <a href="https://man.openbsd.org/slaacd.8">slaacd(8)</a> Duplicate Address Detection (DAD) to only generate a new address if we are using Semantically Opaque Interface Identifiers.
<!-- 2020/10/31 -->
<li>Added a directive to <a href="https://man.openbsd.org/httpd.8">httpd(8)</a> to check if a path is accessible.
<li>Fixed detection of duplicate locations in <a href="https://man.openbsd.org/httpd.8">httpd(8)</a>.
<li>Added support for passing a bootmac command line argument to RAMDISK on powerpc64.
<!-- 2020/10/30 -->
<li>Make <a href="https://man.openbsd.org/iked.8">iked(8)</a> accept ANY dynamic address with 'request addr 0.0.0.0'.
<li>Fixed the "entry point at 0x10010000" hang reported on amd64 machines by using a 64MB block to load the kernel.
<li>Changed <a href="https://man.openbsd.org/astfb.4">astfb(4)</a> to allow it to become the console on powerpc64.
<!-- 2020/10/29 -->
<li>Added support to request IP addresses as IKEv2 initiator to <a href="https://man.openbsd.org/iked.8">iked(8)</a>. If 'request addr 0.0.0.0' is configured, any address will be accepted.
<li>Added the ability to force the selection of source IP address via <a href="https://man.openbsd.org/route.8">route(8)</a>.
<li>Created a new "location (found|notfound)" option for <a href="https://man.openbsd.org/httpd.conf.5">httpd.conf(5)</a> to allow testing for resource path existence.
<!-- 2020/10/28 -->
<li>Prevented kernel reuse of mbuf memory when generating the ICMP6 response to an IPv6 packet.
<li>Updated to <a href="https://man.openbsd.org/unbound.8">unbound(8)</a> 1.12.0.
<!-- 2020/10/27 -->
<li>Added notices to syslog whenever the "%n" format string component of <a href="https://man.openbsd.org/printf.3">printf(3)</a> is used.
<li>Stopped allowing configuration of the same neighbor multiple times in <a href="https://man.openbsd.org/bgpd.8">bgpd(8)</a>.
<li>Edited <a href="https://man.openbsd.org/syspatch.8">syspatch(8)</a> to ensure SHA256.sig has at least three lines.
<li>Added limited emulation of unaligned access in the powerpc64 kernel.
<!-- 2020/10/26 -->
<li>Added AMD Vi and Intel VTD IOMMU support. This creates separate domains for each PCI device and can provide protection against invalid memory access.
<li>Fixed <a href="https://man.openbsd.org/wsconsctl.8">wsconsctl(8)</a> display commands when using <a href="https://man.openbsd.org/drm.4">drm(4)</a> drivers on macppc.
<li>Fixed a deadlock between uvn_io() and uvn_flush().
<li>Added a top-level 'reboot' command to <a href="https://man.openbsd.org/ddb.4">ddb(4)</a>.
<li>Added a -legacy_verify flag to <a href="https://man.openbsd.org/openssl.1">openssl(1)</a> to force use of the old validator.
<li>Fixed a memory leak when parsing <a href="https://man.openbsd.org/bgpd.8">bgpd(8)</a> roa-set lists.
<!-- 2020/10/25 -->
<li>Added a workaround for PCIO devices that cannot address the full 64-bit PCI address space to powerpc64. Needed for <a href="https://man.openbsd.org/radeondrm.4">radeondrm(4)</a> and <a href="https://man.openbsd.org/amdgpu.4">amdgpu(4)</a> since Radeon GPUs only implement 36, 40, or 44 bits of address space.
<li>Introduced a system-wide mutex that serializes msgbuf operations.
<li>Fixed brightness setting on MacBooks.
<!-- 2020/10/24 -->
<!-- 2020/10/23 -->
<li>Updated to <a href="https://man.openbsd.org/fonttosfnt.1">fonttosfnt(1)</a> 1.2.0.
<!-- 2020/10/22 -->
<!-- 2020/10/21 -->
<li>Added retguard macros to powerpc64 locore functions.
<li>Changed <a href="https://man.openbsd.org/ping.8">ping(8)</a> to drain the raw socket of packets received before we were fully setup to avoid reporting ICMP responses intended for other instances of ping(8) running in parallel.
<li>Made <a href="https://man.openbsd.org/sysupgrade.8">sysupgrade(8)</a> specify a version when it uses <a href="https://man.openbsd.org/fw_update.1">fw_update(1)</a> to avoid the situation where upgrading a pre-6.8 snapshot to 6.8 release with "-r" would install firmware packages from snapshots.
<!-- 2020/10/20 -->
<li>Ensured <a href="https://man.openbsd.org/copyout.9">copyout(9)</a>, <a href="https://man.openbsd.org/copyinstr.9">copyinstr(9)</a> and <a href="https://man.openbsd.org/copyoutstr.9">copyoutstr(9)</a> bail out properly if called with a length of 0 on arm64, hppa and mips64.
<li>Modified <a href="https://man.openbsd.org/daily.8">daily(8)</a> to stop reporting disk status and networking statistics.
<li>Released OpenBGPD portable 6.8p0.
<li>Released <a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a> 6.8p0.
<!-- 2020/10/19 -->
<!-- 2020/10/18 -->
<li>Added powerpc64 retguard macros for setjmp/longjmp.
<li>Released LibreSSL 3.2.2.
<!-- 2020/10/17 -->
<!-- 2020/10/16 -->
<li>Implemented linux interval tree functions for <a href="https://man.openbsd.org/drm.4">drm(4)</a>.
<!-- 2020/10/15 -->
<li>Added basic support for kclock timeouts to <a href="https://man.openbsd.org/timeout.9">timeout(9)</a>.
<!-- 2020/10/14 -->
<!-- 2020/10/13 -->
<li>Updated to <a href="https://man.openbsd.org/nsd.8">nsd(8)</a> 4.3.3.
<!-- 2020/10/12 -->
<li>Added RETGUARD implementation for powerpc and powerpc64.
<!-- 2020/10/11 -->
<li>Stopped exempting file systems from <a href="https://man.openbsd.org/security.8">security(8)</a> on the basis of nodev and nosuid options, which may not be used for file systems mounted beneath.
<li>Supported use of more than one URI in the TAL file for <a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a>, sorting with a preference for https.
<!-- 2020/10/10 -->
<li>Prevented a crash due to <a href="https://man.openbsd.org/httpd.8">httpd(8)</a> listening on port 443 with missing TLS certificates.
<!-- 2020/10/09 -->
<li>Optimized arm64 <a href="https://man.openbsd.org/copyin.9">copyin(9)</a>, <a href="https://man.openbsd.org/copyout.9">copyout(9)</a> and <a href="https://man.openbsd.org/kcopy.9">kcopy(9)</a> by doing 16-byte copies if possible.
<li>Added <a href="https://man.openbsd.org/doas.conf.5">doas.conf(5)</a> "nolog" option to avoid <a href="https://man.openbsd.org/syslog.3">syslog(3)</a>.
<!-- 2020/10/08 -->
<!-- 2020/10/07 -->
<!-- 2020/10/06 -->
<li>Added Intel 495 Series LP PCH and Ice Lake graphics <a href="https://man.openbsd.org/pci.4">pci(4)</a> ids.
<!-- 2020/10/05 -->
<li>Fixed a pledge violation in <a href="https://man.openbsd.org/csh.1">csh(1)</a> where redirecting input from a file containing ^T would cause csh(1) to perform a tty ioctl operation against a non-tty.
<!-- 2020/10/04 -->
<li>Fixed a write hang-up on file system in <a href="https://man.openbsd.org/vnd.4">vnd(4)</a>.
<!-- 2020/10/03 -->
<li>Enabled <a href="https://man.openbsd.org/ssh_config.5">ssh_config(5)</a> UpdateHostkeys by default when the configuration has not overridden UserKnownHostFile.
<li>Added bsd.mp to powerpc64's installXX.{img,iso}.
<!-- 2020/10/02 -->
<li>Preferred ed25519 signature algorithm variants over ECDSA in <a href="https://man.openbsd.org/ssh_config.5">ssh_config(5)</a> and <a href="https://man.openbsd.org/sshd_config.5">sshd_config(5)</a>.
<li>Introduced "if_cloners_lock" rwlock and used it to serialize if_clone_{create,destroy}(), avoiding multiple race conditions.
<!-- 2020/10/01 -->
<li>Added <a href="https://man.openbsd.org/astfb.4">astfb(4)</a>, a driver for the framebuffer of the Aspeed BMC found on many POWER8 and POWER9 systems.
<li>Added Intel 400-series chipsets to <a href="https://man.openbsd.org/dwiic.4">dwiic(4)</a>.
<li>Relaxed checks in <a href="https://man.openbsd.org/pfctl.8">pfctl(8)</a> and <a href="https://man.openbsd.org/pf.4">pf(4)</a> to accept any valid routing domain, even if it does not yet exist.
<!-- 2020/09/30 -->
<li>Moved mfokclock(4) from loongson to make it available for other platforms and renamed it to <a href="https://man.openbsd.org/mfokrtc.4">mfokrtc(4)</a>.
<li>Removed osrelease from system.fvwmrc, as the version string matches the kernel of the <a href="https://man.openbsd.org/fvwm.1">fvwm(1)</a> build machine, not the user's kernel.
<li>Moved to 6.8-current.
</ul>