File: [local] / www / plus61.html (download) (as text)
Revision 1.20, Sun Mar 10 18:46:16 2024 UTC (2 months ago) by tj
Branch: MAIN
CVS Tags: HEAD
Changes since 1.19: +1 -0 lines
reroll plus pages for 7.5
|
<!doctype html>
<html lang=en id=plus>
<meta charset=utf-8>
<title>OpenBSD 6.1 Changelog</title>
<meta name="description" content="OpenBSD 6.1 changes">
<meta name="viewport" content="width=device-width, initial-scale=1">
<link rel="stylesheet" type="text/css" href="openbsd.css">
<link rel="canonical" href="https://www.openbsd.org/plus61.html">
<style>
strong {
color: var(--red);
font-weight: normal;
}
h3 {
color: var(--blue);
}
</style>
<h2 id=OpenBSD>
<a href="index.html">
<i>Open</i><b>BSD</b></a>
6.1 Changelog
</h2>
<hr>
<p>
This selection is intended to include all important
and all user-visible changes.
For a complete record of all changes, please see the "source-changes"
mailing list, called "OpenBSD CVS"
in the <a href="https://marc.info/?l=openbsd-cvs">archives</a>,
or use <a href="anoncvs.html#CVS">CVS</a>.
<p>
For changes in other releases, click below:<br>
<a href="plus20.html">2.0</a>,
<a href="plus21.html">2.1</a>,
<a href="plus22.html">2.2</a>,
<a href="plus23.html">2.3</a>,
<a href="plus24.html">2.4</a>,
<a href="plus25.html">2.5</a>,
<a href="plus26.html">2.6</a>,
<a href="plus27.html">2.7</a>,
<a href="plus28.html">2.8</a>,
<a href="plus29.html">2.9</a>,
<a href="plus30.html">3.0</a>,
<a href="plus31.html">3.1</a>,
<a href="plus32.html">3.2</a>,
<a href="plus33.html">3.3</a>,
<a href="plus34.html">3.4</a>,
<a href="plus35.html">3.5</a>,
<a href="plus36.html">3.6</a>,
<br>
<a href="plus37.html">3.7</a>,
<a href="plus38.html">3.8</a>,
<a href="plus39.html">3.9</a>,
<a href="plus40.html">4.0</a>,
<a href="plus41.html">4.1</a>,
<a href="plus42.html">4.2</a>,
<a href="plus43.html">4.3</a>,
<a href="plus44.html">4.4</a>,
<a href="plus45.html">4.5</a>,
<a href="plus46.html">4.6</a>,
<a href="plus47.html">4.7</a>,
<a href="plus48.html">4.8</a>,
<a href="plus49.html">4.9</a>,
<a href="plus50.html">5.0</a>,
<a href="plus51.html">5.1</a>,
<a href="plus52.html">5.2</a>,
<a href="plus53.html">5.3</a>,
<br>
<a href="plus54.html">5.4</a>,
<a href="plus55.html">5.5</a>,
<a href="plus56.html">5.6</a>,
<a href="plus57.html">5.7</a>,
<a href="plus58.html">5.8</a>,
<a href="plus59.html">5.9</a>,
<a href="plus60.html">6.0</a>,
<a href="plus62.html">6.2</a>,
<a href="plus63.html">6.3</a>,
<a href="plus64.html">6.4</a>,
<a href="plus65.html">6.5</a>,
<a href="plus66.html">6.6</a>,
<a href="plus67.html">6.7</a>,
<a href="plus68.html">6.8</a>,
<a href="plus69.html">6.9</a>,
<a href="plus70.html">7.0</a>,
<a href="plus71.html">7.1</a>,
<br>
<a href="plus72.html">7.2</a>,
<a href="plus73.html">7.3</a>,
<a href="plus74.html">7.4</a>,
<a href="plus75.html">7.5</a>,
<a href="plus.html">current</a>.
<br>
<p>
<h3>Changes made between OpenBSD 6.0 and 6.1</h3>
<p>
<ul>
<!-- 2017/03/31 -->
<!-- 2017/03/30 -->
<li>Disabled <a href="https://man.openbsd.org/smtpd">smtpd(8)</a> client-initiated renegotiation.
<li>Used <a href="https://man.openbsd.org/m_devget">m_devget(9)</a> to replace <a href="https://man.openbsd.org/ure">ure(4)</a> code which incorrectly assumes a received packet must fit into a single mbuf cluster, potentially fixing observed pool corruption.
<!-- 2017/03/29 -->
<li>Set the interface flag to VMIFF_UP when using the <a href="https://man.openbsd.org/vmctl">vmctl(8)</a> -i option, making <a href="https://man.openbsd.org/vmd">vmd(8)</a> ensure the interfaces are up on startup.
<!-- 2017/03/28 -->
<li>Allowed additional protocol matching to enable <a href="https://man.openbsd.org/umodem">umodem(4)</a> to attach to the serial console on the OverDrive 1000.
<li>Fixed a panic triggered by <a href="https://man.openbsd.org/init">init(8)</a> on the OverDrive 1000 with A1120 (Cortex A57 r1p2) after changing vfp state.
<li>Prevented editing messages in <a href="https://man.openbsd.org/mail">mail(1)</a> from corrupting the mailbox.
<!-- 2017/03/27 -->
<li>Stopped rejecting <a href="https://man.openbsd.org/etherip">etherip(4)</a> packets protected with <a href="https://man.openbsd.org/ipsec">ipsec(4)</a>.
<li>Added <a href="https://man.openbsd.org/iked">iked(8)</a> support for RFC 4754 (ECDSA) and RFC 7427 authentication.
<li>Fixed the prefixlen sent by RTM_NEWADDR on new addresses without masks.
<!-- 2017/03/26 -->
<li>Implemented a missing command in <a href="https://man.openbsd.org/vioblk">vioblk(4)</a> and allowed > MAXPHYS transfers, allowing Ubuntu 14.04 amd64 guests to work.
<li>Added support for additional Allwinner H3 clocks to <a href="https://man.openbsd.org/sxiccmu">sxiccmu(4)</a>.
<!-- 2017/03/25 -->
<li>Implemented TLS ticket support in <a href="https://man.openbsd.org/httpd">httpd(8)</a>. This is off by default and can be enabled with a 2h ticket lifetime.
<li>Booted in <a href="https://man.openbsd.org/vmd">vmd(8)</a> using BIOS from /etc/firmware/vmm-bios by default. The "vmm" BIOS must be installed using <a href="https://man.openbsd.org/fw_update">fw_update(1)</a>.
<!-- 2017/03/24 -->
<li>Updated to Mesa 13.0.6.
<li>Implemented mvxhci(4), a driver for Marvell's XHCI controller, and mvahci(4), for Marvell's AHCI controller. These enable use of USB and SATA, respectively, on devices like the SolidRun ClearFog or Omnia Turris.
<li>Prevented panics on the ClearFog by not loading the empty memory region mainline u-boot provides into <a href="https://man.openbsd.org/uvm">uvm(9)</a>.
<li>Handled interrupts after retiring a cpuid instruction, allowing <a href="https://man.openbsd.org/vmd">vmd(8)</a> to proceed.
<!-- 2017/03/23 -->
<!-- 2017/03/22 -->
<li>Implemented kernel W^X for arm64.
<li>Added <a href="https://man.openbsd.org/tmux">tmux(1)</a> support for the strikethrough attribute (SGR 9).
<!-- 2017/03/21 -->
<li>Prevented unusable configurations where both WEP and WPA are active by disabling one when a key for the other is set.
<!-- 2017/03/20 -->
<li>Fixed errors in NS8250 (UART) <a href="https://man.openbsd.org/vmm">vmm(4)</a> emulation that had caused seabios not to be able to output data.
<li>Showed inet6 proposals in <a href="https://man.openbsd.org/route">route(8)</a> monitor.
<li>Read the free clusters bitmap in 1MB chunks, rather than attempting to read it all together, causing a panic in <a href="https://man.openbsd.org/malloc">malloc(9)</a> with large NTFS filesystems.
<li>Added <a href="https://man.openbsd.org/sensorsd">sensorsd(8)</a> command line option -f to specify an alternative config file.
<!-- 2017/03/19 -->
<li>Released <a href="https://www.openssh.com/txt/release-7.5">OpenSSH 7.5</a>.
<li>Enabled snooping on Kaby Lake U/Y PCH HDA in <a href="https://man.openbsd.org/azalia">azalia(4)</a> to avoid audio glitches.
<li>Matched the Kaby Lake and Lewisburg (Skylake-EP PCH) MACs with I219 PHYs.
<li>Added Intel Kaby Lake and 3168/8265 wlan <a href="https://man.openbsd.org/pci">pci(4)</a> device ids.
<li>Added AMD A1100 <a href="https://man.openbsd.org/pci">pci(4)</a> ids and additional qemu and virtio devices.
<!-- 2017/03/18 -->
<li>Introduced <a href="https://man.openbsd.org/slaacd">slaacd(8)</a>, a Stateless Address Autoconfiguration Daemon.
<li>Fixed <a href="https://man.openbsd.org/brk">brk(2)</a> and synced the brk()/sbrk() aarch64 implementation with arm.
<!-- 2017/03/17 -->
<li>Enabled <a href="https://man.openbsd.org/dhcrelay6">dhcrelay6(8)</a>, implementing RFCs 3315, 4649 and 6221.
<li>Added h and l for collapse and expand in <a href="https://man.openbsd.org/tmux">tmux(1)</a> choose mode with <a href="https://man.openbsd.org/vi">vi(1)</a> keys.
<!-- 2017/03/16 -->
<!-- 2017/03/15 -->
<li>Configured and applied the multitouch-tracking functions of wsmouse to <a href="https://man.openbsd.org/ubcmtp">ubcmtp(4)</a>.
<li>Handled various shutdown and reboot cases in <a href="https://man.openbsd.org/vmmci">vmmci(4)</a>, allowing powering off the VM even when unresponsive, stuck in ddb or shutdown on the VM guest side.
<li>Closed the tty when a <a href="https://man.openbsd.org/vmd">vmd(8)</a> VM is powered down.
<li>Added minimal support for deep linking into <a href="https://man.openbsd.org/man.7">man(7)</a> pages to <a href="https://man.openbsd.org/mandoc">mandoc(1)</a>.
<!-- 2017/03/14 -->
<li>Fixed a segfault when <a href="https://man.openbsd.org/sshd">sshd(8)</a> attempts to load RSA1 keys and protocol v.1 support is enabled for the client.
<li>Updated LLVM to 4.0.0.
<!-- 2017/03/13 -->
<li>Modified <a href="https://man.openbsd.org/mg">mg(1)</a> to keep the current buffer instead of switching to scratch when aborting switch-to-buffer, bringing mg in line with emacs.
<li>Ported ctags-style, <a href="https://man.openbsd.org/less">less(1)</a> :t internal searching from terminal output to HTML output in <a href="https://man.openbsd.org/mandoc">mandoc(1)</a>.
<li>Printed title="..." in addition to id="..." attributes for macro keys in <a href="https://man.openbsd.org/mandoc">mandoc(1)</a> that can be searched for by <a href="https://man.openbsd.org/apropos">apropos(1)</a>, such that the semantic function appears in a tooltip when hovering with the mouse.
<li>Resolved simultaneous IKE and Child SA rekeying in <a href="https://man.openbsd.org/iked">iked(8)</a>.
<li>Made <a href="https://man.openbsd.org/ifconfig">ifconfig(8)</a> "scan" show WPA information for other APs correctly while the interface operates in hostap mode.
<!-- 2017/03/12 -->
<li>Stopped limiting physmem to 2GB on arm64.
<li>Brought SROP mitigation to arm64.
<li>Added code to initialize the USB 3 PHY on Exynos 5.
<!-- 2017/03/11 -->
<li>Allowed <a href="https://man.openbsd.org/ssh">ssh(1)</a> to use certificates accompanied by a private key file but no corresponding plain *.pub public key.
<li>Added support for RTL8153 devices.
<li>Made <a href="https://man.openbsd.org/ifconfig">ifconfig(8)</a> "scan" display AP encryption correctly if WEP is configured on the local wifi interface.
<li>Fixed a panic in <a href="https://man.openbsd.org/pfsync">pfsync(4)</a> when the syncdev is destroyed.
<li>Disabled writing of autolinks in <a href="https://man.openbsd.org/mandoc">mandoc(1)</a> to prevent writing of potentially dangerous raw HTML tags with markdown.
<li>Introduced "machdep.forceukbd" to force the first USB keyboard as console input, allowing use of a USB keyboard in <a href="https://man.openbsd.org/ddb">ddb(4)</a> even if the BIOS emulates a <a href="https://man.openbsd.org/pckbd">pckbd(4)</a>.
<li>Added a -Dsnap option to <a href="https://man.openbsd.org/pkg_add">pkg_add(1)</a> that forces %c to use snapshots.
<li>Fixed autoboot on the OverDrive 3000.
<!-- 2017/03/10 -->
<li>Added <a href="https://man.openbsd.org/exrtc">exrtc(4)</a>, a driver for the RTC found on Samsung Exynos SoCs.
<li>Ensured that the mirror server ends up in <a href="https://man.openbsd.org/installurl">installurl(5)</a> when the distribution sets are fetched from a mirror and the siteXX.tgz file is fetched from a local server.
<li>Always created the <a href="https://man.openbsd.org/installurl">installurl(5)</a> file during installation and upgrade if not present.
<li>Fixed a use-after-free when sending <a href="https://man.openbsd.org/usb">usb(4)</a> root hub control transfers.
<li>Made the armv7 kernel recognize all the memory on the Odroid XU4.
<!-- 2017/03/09 -->
<li>Explicitly loaded bootaa64.efi on the ESP to allow the SoftIron OverDrive 3000 to load without manual intervention.
<li>Accepted RSA keys when updating <a href="https://man.openbsd.org/ssh">ssh(1)</a> hostkeys if HostkeyAlgorithms contains any RSA keytype.
<li>Fixed case insensitivity to hostname matching in <a href="https://man.openbsd.org/ssh">ssh(1)</a>.
<li>Fixed a regression in <a href="https://man.openbsd.org/ssh">ssh(1)</a> 7.4 server-sig-algs where SHA2 RSA signature methods were excluded.
<li>Enabled <a href="https://man.openbsd.org/amphy">amphy(4)</a> for <a href="https://man.openbsd.org/udav">udav(4)</a> and <a href="https://man.openbsd.org/urlphy">urlphy(4)</a> for <a href="https://man.openbsd.org/url">url(4)</a>.
<li>Plugged file descriptor leaks of auth_sock in <a href="https://man.openbsd.org/ssh">ssh(1)</a>.
<li>Fixed <a href="https://man.openbsd.org/ssh">ssh(1)</a> hashing of hosts with a port number.
<li>Enabled <a href="https://man.openbsd.org/syscon">syscon(4)</a> on armv7, allowing reboot of the Odroid XU4.
<li>Fixed an off-by-one error in <a href="https://man.openbsd.org/xnf">xnf(4)</a> which led to ring stalls when the consumer index equaled the consumer event index.
<li>Added <a href="https://man.openbsd.org/syscon">syscon(4)</a>, a driver providing reboot/poweroff functionality through the generic "regmap" interface.
<li>Added a "regmap" interface allowing devices to provide access to their registers to drivers elsewhere in the device tree.
<li>Corrected the TLS error message displayed by <a href="https://man.openbsd.org/nc">nc(1)</a> if the handshake after accept fails.
<!-- 2017/03/08 -->
<li>Fixed the logic in <a href="https://man.openbsd.org/OpenBSD-6.1/sq">sq(4)</a> preventing it from receiving broadcast frames before configuring an address, allowing use of <a href="https://man.openbsd.org/dhclient">dhclient(8)</a>.
<li>Added copying of the rpi3 u-boot to the installed disk to the arm64 ramdisk installer.
<!-- 2017/03/07 -->
<li>Prevented <a href="https://man.openbsd.org/mandoc">mandoc(1)</a> memory exhaustion due to user-defined macros exceeding the stack limit by discarding what remains in the open stack levels on abort.
<li>Used the target mask for the boot CPU upon <a href="https://man.openbsd.org/ampintc">ampintc(4)</a> attachment to pick the target CPU interface when establishing an interrupt, allowing interrupts to work on machines that boot up on a CPU attached to a CPU interface that isn't zero.
<li>Changed priq enqueue policy to drop lower priority packets, allowing high priority traffic a place in the queue and low priority bulk traffic a chance to regulate its throughput.
<li>Corrected handling of TLS PRF with MD5+SHA1 in <a href="https://man.openbsd.org/ssl.3">ssl(3)</a>.
<!-- 2017/03/06 -->
<li>Introduced <a href="https://man.openbsd.org/recallocarray">recallocarray(3)</a>, a blend of <a href="https://man.openbsd.org/calloc">calloc(3)</a> and <a href="https://man.openbsd.org/reallocarray">reallocarray(3)</a> which additionally clears released memory.
<li>Corrected <a href="https://man.openbsd.org/tmux">tmux(1)</a> collection of strings when on terminals not supporting UTF-8.
<li>Saved and restored the cursor in <a href="https://man.openbsd.org/tmux">tmux(1)</a> when redrawing a combined UTF-8 character in its existing position so the next character is added in the correct place.
<!-- 2017/03/05 -->
<li>Attached exiic(4) and other exynos drivers using the FDT.
<li>Stopped copying the on-disk /etc/hosts file to the bsd.rd /tmp dir for use during upgrade, and switched to creating a minimal hosts file that does not risk filling the filesystem.
<li>Provided a rolling handshake hash in <a href="https://man.openbsd.org/ssl.3">ssl(3)</a> which starts when the cipher suite has been selected, and converted the final MAC to use this handshake hash.
<!-- 2017/03/04 -->
<li>Updated to Unicode 8.
<li>In 11n hostap mode, dynamically adjusted HT protection settings based on the presence of non-HT nodes in the node cache. OpenBSD 11n APs will now disable HT protection if it is not necessary. Fixed display of HT protection settings in <a href="https://man.openbsd.org/tcpdump">tcpdump(8)</a>.
<li>Allowed R (resize auto-partition) after A as well as when started with -A in <a href="https://man.openbsd.org/disklabel">disklabel(8)</a>.
<!-- 2017/03/03 -->
<li>Sent VPLS MAC withdrawals in <a href="https://man.openbsd.org/ldpd">ldpd(8)</a> as specified by RFC 4762, which can improve convergence time in VPLS networks.
<li>Implemented RFC 5561 (LDP Capabilities), RFC 5918 (Typed Wildcard FEC), RFC 6667 (Typed Wildcard FEC for PWid) and RFC 5919 (LDP End-of-LIB) in <a href="https://man.openbsd.org/ldpd">ldpd(8)</a>.
<li>Implemented support for PWid group wildcards in <a href="https://man.openbsd.org/ldpd">ldpd(8)</a> as specified in RFC 4447.
<li>Allowed specification of an alternate control socket in <a href="https://man.openbsd.org/ldpd">ldpd(8)</a>, needed to run multiple instances. Additionally, allowed ldpd to run on a non-default rdomain.
<li>Introduced <a href="https://man.openbsd.org/mandoc">mandoc(1)</a> -mdoc -Tmarkdown output mode.
<!-- 2017/03/02 -->
<li>Fixed <a href="https://man.openbsd.org/ssh-keygen">ssh-keygen(1)</a> -H corrupting known_hosts containing entries which have already been hashed.
<li>Enabled FFS2 on armv7 and arm64 ramdisks.
<li>Added the new <a href="https://man.openbsd.org/sysctl.2">sysctl(2)</a> machdep.lidaction to allow hibernating or suspending when the lid closes.
<li>Added a "locked lladdr" option in <a href="https://man.openbsd.org/vm.conf">vm.conf(5)</a> to prevent VMs from spoofing MAC addresses.
<!-- 2017/03/01 -->
<li>Allowed MPLS switching and VPLS across rdomains.
<li>Fixed a bug allowing a man-in-the-middle attack against WPA wireless clients. A malicious AP could trick clients into connecting to itself rather than the desired AP, then all frames would be sent in the clear.
<li>Added an "owner" option to <a href="https://man.openbsd.org/vm.conf">vm.conf(5)</a> to set user/group ownership for pre-configured VMs, allowing matching users console access and the power to start/stop VMs.
<!-- 2017/02/28 -->
<li>Dynamically attached <a href="https://man.openbsd.org/edma">edma(4)</a> using the FDT.
<li>Created the /etc/installurl file during upgrade if a mirror was used and the file did not yet exist.
<li>Modified the installer logic to determine the default answer for the "Location of sets?" question. Presents "http" as the default answer if /etc/installurl exists, correcting an issue where "cd" was overriding "http".
<!-- 2017/02/27 -->
<li>Handled touchpad input in <a href="https://man.openbsd.org/wsmouse">wsmouse(4)</a>.
<li>Bumped block size for <a href="https://man.openbsd.org/dd">dd(1)</a> for arm64, for a substantial speed increase.
<li>Added support to <a href="https://man.openbsd.org/psci">psci(4)</a> for the older generation spec of PSCI, which supports shutdown and reset only if the function ID is explicitly provided in the device tree.
<!-- 2017/02/26 -->
<li>Switched to <a href="https://man.openbsd.org/xenodm">xenodm(1)</a>.
<li>Updated Mesa to 13.0.5.
<!-- 2017/02/25 -->
<li>Attached <a href="https://man.openbsd.org/acpithinkpad">acpithinkpad(4)</a> to LEN0268 HID, found on newer thinkpads.
<li>Implemented <a href="https://man.openbsd.org/ampintcmsi">ampintcmsi(4)</a> in <a href="https://man.openbsd.org/ampintc">ampintc(4)</a> to support MSI for arm64.
<!-- 2017/02/24 -->
<li>Implemented an API for establishing legacy PCI interrupts for amd64.
<li>Introduced pciecam(4), a driver for generic ECAM compatible PCI host controllers.
<!-- 2017/02/23 -->
<!-- 2017/02/22 -->
<li>Introduced the "e" command to <a href="https://man.openbsd.org/dc">dc(1)</a>, equivalent to "p" but writing to stderr.
<li>Added a generic <a href="https://man.openbsd.org/ahci">ahci(4)</a> frontend for FDT and enabled <a href="https://man.openbsd.org/ahci">ahci(4)</a> on arm64.
<li>Added <a href="https://man.openbsd.org/acpisbs">acpisbs(4)</a>, an ACPI smart battery subsystem driver reading data over smbus.
<li>Added <a href="https://man.openbsd.org/pledge">pledge(2)</a> to <a href="https://man.openbsd.org/man.cgi">man.cgi(8)</a>.
<li>Allowed specification of an alternate socket path in <a href="https://man.openbsd.org/eigrpctl">eigrpctl(8)</a>.
<li>Stopped grabbing the NET_LOCK() when using <a href="https://man.openbsd.org/poll">poll(2)</a> on unix domain sockets, fixing the "X freeze" while scanning with wireless interfaces.
<!-- 2017/02/21 -->
<li>Disabled BFD to allow continued work on unlocking the socket layer.
<li>Updated to <a href="https://man.openbsd.org/unbound">unbound(8)</a> 1.6.1 release.
<!-- 2017/02/20 -->
<li>Bumped the default size of the MSDOS partition on octeon from 16MB to 32MB.
<li>Used <a href="https://man.openbsd.org/memcpy">memcpy(3)</a> a character row at a time to the framebuffer in <a href="https://man.openbsd.org/rasops">rasops(9)</a>, rather than sending pixel by pixel. This greatly speeds up the text framebuffer on some EFI implementations.
<!-- 2017/02/19 -->
<li>Fixed asynchronous system traps on arm64, allowing processes to be killed using Ctrl-C.
<li>Restored a local change to <a href="https://man.openbsd.org/xkeyboard-config">xkeyboard-config(7)</a> to handle Ctrl-Alt-Backspace to kill X by default.
<li>Removed trailing whitespace in the installer that ended up passing a bogus argument to <a href="https://man.openbsd.org/ftp">ftp(1)</a>, disabling redirection and running ftp in the background.
<li>Added SMP config and IPI control logic for the Loongson 3A.
<li>Added an IPI counter to mips64.
<!-- 2017/02/18 -->
<li>Added EDNS0 support, allowing for various DNS extensions, including UDP DNS packets larger than 512 bytes.
<!-- 2017/02/17 -->
<li>Added miniroot and ramdisk hooks for the Raspberry Pi 3. The u-boot-aarch64 and raspberrypi-firmware packages are now required to run make release on arm64.
<li>Updated to <a href="https://man.openbsd.org/nsd">nsd(8)</a> 4.1.15.
<li>Updated to <a href="https://man.openbsd.org/unbound">unbound(8)</a> 1.6.1rc3.
<li>Implemented <a href="https://man.openbsd.org/ddb">ddb(4)</a> backtrace support for arm64.
<li>Fixed <a href="https://man.openbsd.org/ipcomp">ipcomp(4)</a> with IPv6 transport mode.
<li>Fixed a bug in <a href="https://man.openbsd.org/chmod">chmod(1)</a>'s symbolic mode without -h and -R flags where permissions on the symbolic link were nonetheless changed.
<!-- 2017/02/16 -->
<li>Surrounded the host name with brackets in <a href="https://man.openbsd.org/ssh">ssh(1)</a> for ProxyJump/-J to allow use of literal IPv6 addresses.
<li>Increased UDP packet buffer to 4096 bytes from 512 to handle broken DNS servers not attempting to use EDNS0.
<!-- 2017/02/15 -->
<!-- 2017/02/14 -->
<li>Restored the keyboard backlight value on system resume for <a href="https://man.openbsd.org/asmc">asmc(4)</a>.
<li>Added a new implementation of a standalone LMTP client to <a href="https://man.openbsd.org/smtpd">smtpd(8)</a>.
<!-- 2017/02/13 -->
<li>Fixed powerdown with <a href="https://man.openbsd.org/vmmci">vmmci(4)</a> VMs using a shutdown and no reset.
<li>Allowed negation of the authenticated keyword in <a href="https://man.openbsd.org/smtpd">smtpd(8)</a>, i.e. <code>accept ! authenticated [...]</code>.
<!-- 2017/02/12 -->
<li>Created an empty /root/.ssh/authorized_keys file with correct permissions.
<!-- 2017/02/11 -->
<!-- 2017/02/10 -->
<li>Corrected handling of <a href="https://man.openbsd.org/ldapd">ldapd(8)</a> requests to delete individual attribute values.
<li>Disabled aen handling on <a href="https://man.openbsd.org/mfii">mfii(4)</a>, which led to excessive load.
<!-- 2017/02/09 -->
<li>Introduced naming of <a href="https://man.openbsd.org/tmux">tmux(1)</a> session groups, allowing use of these names with -t instead of a target session.
<li>Fixed <a href="https://man.openbsd.org/relayd">relayd(8)</a> and <a href="https://man.openbsd.org/relayctl">relayctl(8)</a> to show "send/expect failed" rather than "tcp read timeout" when appropriate.
<li>Correctly released the NET_LOCK() before calling unp_detach().
<!-- 2017/02/08 -->
<li>Fit the installer to 80 columns.
<li>Updated to xkeyboard-config 2.20.
<li>Stopped potentially freeing a grant table entry still in use due to an incorrect test while allocating, which may allow a second allocation in <a href="https://man.openbsd.org/xen">xen(4)</a>.
<li>Used an additional <a href="https://man.openbsd.org/poll">poll(2)</a> during tls_handshake() in <a href="https://man.openbsd.org/nc">nc(1)</a> and respected the -w timeout option to avoid waiting in a busy loop. Applied the same fix to tls_close().
<li>Retried BS->ExitBootServices() if it fails on EFI boot for arm64, as in amd64.
<!-- 2017/02/07 -->
<li>Correctly flushed and invalidated the instruction cache upon entering a page with <a href="https://man.openbsd.org/pmap_enter">pmap_enter(9)</a>, allowing use of the AMD Seattle.
<li>Raised <a href="https://man.openbsd.org/ampintc">ampintc(4)</a> IRQs to the proper levels, allowing interrupts to work on the AMD Seattle SoC.
<li>Updated to terminfo-20170128.
<li>Enabled the short slot time feature in 802.11n mode.
<li>Improved parsing of the HTTP request line in <a href="https://man.openbsd.org/httpd">httpd(8)</a>, allowing quick detection of non-ASCII requests.
<li>Enabled per-CPU caches on mbuf pools and stopped counting individual pool items, limiting mbufs by how much memory can be allocated for pages by the system.
<!-- 2017/02/06 -->
<li>Handled physical disk state changes in <a href="https://man.openbsd.org/mfii">mfii(4)</a>.
<li>Listed openfiles-max explicitly in default /etc/login.conf files to prevent raising openfiles-cur over the implicit -max value, resulting in the setting not being applied at all.
<li>Implemented Dynamic Profiling for i386.
<!-- 2017/02/05 -->
<li>Implemented <a href="https://man.openbsd.org/mfii">mfii(4)</a> scsi command timeouts.
<li>Added the ability for MegaRAID SAS fusion chips to abort tasks in <a href="https://man.openbsd.org/mfii">mfii(4)</a>.
<li>Implemented <a href="https://man.openbsd.org/intr_barrier">intr_barrier(9)</a> for arm64.
<!-- 2017/02/04 -->
<li>Updated libdrm to 2.4.75.
<li>Added support to <a href="https://man.openbsd.org/nc">nc(1)</a> for IPv6 proxy addresses.
<li>Updated Perl to 5.24.1.
<li>Prevented a netlock-related deadlock with the X server during <a href="https://man.openbsd.org/iwm">iwm(4)</a> scans.
<!-- 2017/02/03 -->
<li>Prevented arm64 efiboot failures by ensuring data are saved before turning off the MMU and removing cache contents.
<li>Added a connection username to <a href="https://man.openbsd.org/ssh">ssh(1)</a> packet log messages and a preamble string for disconnect messages.
<li>Added a window or pane id "tag" to each format tree and used it to separate jobs in <a href="https://man.openbsd.org/tmux">tmux(1)</a>.
<li>Fixed 11b clients sending bogus ratesets in association requests and rates when an AP is selected after a scan.
<li>Fixed a bug in <a href="https://man.openbsd.org/vmt">vmt(4)</a> that led a "guest shutdown" to result in a reboot.
<!-- 2017/02/02 -->
<li>Fixed <a href="https://man.openbsd.org/httpd">httpd(8)</a> support for HTTP pipelining by handling all requests in the buffer.
<li>Synced the <a href="https://man.openbsd.org/video.4">video(4)</a> V4L2 (Video for Linux Two) API with Linux kernel version 4.10-rc6.
<li>Prevented panics in hostap mode by removing unnecessary global counters from struct ieee80211com.
<li>Disabled client-initiated TLS renegotiation by default in <a href="https://man.openbsd.org/relayd">relayd(8)</a>.
<!-- 2017/02/01 -->
<li>Correctly skipped pages marked as unreadable rather an aborting a <a href="https://man.openbsd.org/uvm">uvm(9)</a> core dump.
<li>Fixed bioctl on <a href="https://man.openbsd.org/mfi">mfi(4)</a>.
<li>Added AMRR support to <a href="https://man.openbsd.org/rtwn">rtwn(4)</a>.
<li>Implemented "all event" (1003) mouse mode in <a href="https://man.openbsd.org/tmux">tmux(1)</a>.
<!-- 2017/01/31 -->
<li>Disabled client-initiated renegotiation for libtls servers.
<li>Reimplemented <a href="https://man.openbsd.org/httpd">httpd(8)</a> support for byte ranges, preventing overuse of memory and applying the watermark and throttling mechanisms to range requests.
<!-- 2017/01/30 -->
<li>Prevented <a href="https://man.openbsd.org/athn">athn(4)</a> from using RTS for non-data frames and stopped athn 11n hostap from applying HT protection to non-11n clients.
<!-- 2017/01/29 -->
<li>Built <a href="https://man.openbsd.org/mkuboot">mkuboot(8)</a> on arm64.
<!-- 2017/01/28 -->
<li>Made MiRA handle out-of-range single frame error rate (SFER) values.
<!-- 2017/01/27 -->
<li>Re-enabled cross-binutils now that parts can be built on aarch64.
<!-- 2017/01/26 -->
<li>Added a fallback to treating a page as preformatted text if <a href="https://man.openbsd.org/mandoc">mandoc(1)</a> parsing reveals that it is neither <a href="https://man.openbsd.org/mdoc">mdoc(7)</a> nor <a href="https://man.openbsd.org/man.7">man(7)</a>.
<li>Disabled <a href="https://man.openbsd.org/pgt">pgt(4)</a> and <a href="https://man.openbsd.org/acx">acx(4)</a> on sparc64 due to kernel space constraints, allowing GENERIC.MP to boot again on the T5220.
<li>Fixed <a href="https://man.openbsd.org/rtwn">rtwn(4)</a> IQ calibration code.
<li>Allowed selection of the routing domain to be used for kill states by host or by label by adding a "-V rdomain" option to <a href="https://man.openbsd.org/pfctl">pfctl(8)</a>.
<!-- 2017/01/25 -->
<li>Prevented <a href="https://man.openbsd.org/pkg_info">pkg_info(1)</a> <code>-e spec</code> cases where the spec would be displayed rather than the name of the package.
<li>Fixed a failure of <a href="https://man.openbsd.org/pkg_add">pkg_add(1)</a> + <a href="https://man.openbsd.org/signify">signify(1)</a>.
<li>Enabled <a href="https://man.openbsd.org/psci">psci(4)</a> and <a href="https://man.openbsd.org/plrtc">plrtc(4)</a> for arm64.
<!-- 2017/01/24 -->
<li>Enabled NET_LOCK().
<li>Constructed a BN-gcd_nonct to avoid the possibility of a sidechannel timing attack during RSA private key generation.
<li>Added the arm64 architecture.
<li>Added <code>-S no verifytime</code> to <a href="https://man.openbsd.org/ftp">ftp(1)</a> to permit an unvalidated TLS connection when the time is unknown.
<li>Prevented use of control and space characters in the answer to the "System hostname" installation question.
<li>Added support for SVM in <a href="https://man.openbsd.org/vmd">vmd(8)</a>.
<li>Added a -groups option to <a href="https://man.openbsd.org/openssl">openssl(1)</a> s_client, allowing specification of supported EC curves as a colon-separated list.
<li>Added support for setting the <a href="https://man.openbsd.org/openssl">openssl(1)</a> supported EC curves, changing the default list of EC curves to be X25519, P-256 and P-384.
<li>Updated LLVM to 4.0.0 rc1.
<!-- 2017/01/23 -->
<li>Prevented a deadlock by allocating a new file descriptor in <a href="https://man.openbsd.org/accept">accept(2)</a> and <a href="https://man.openbsd.org/accept4">accept4(2)</a> before checking whether the socket head's queue is empty and possibly sleeping.
<li>Added the display of process groups to <a href="https://man.openbsd.org/ddb">ddb(4)</a>'s <code>ps /w</code>.
<li>Fixed the 6x_bootscript u-boot commands to work with SABRE Lite boards.
<li>Displayed the thread ID rather than the process group ID in <a href="https://man.openbsd.org/ddb">ddb(4)</a>'s default "ps" view, allowing easy use of <code>tr /p</code>.
<li>Added support for multiple transmit ifqueues per network interface.
<li>Introduced TLS ticket support.
<li>Renamed pfind into <a href="https://man.openbsd.org/tfind.9">tfind(9)</a> to reflect that it deals with threads.
<li>Fixed <code>make release</code> for use of the KEEPKERNELS setting by including <code>make cleandir</code> right before building kernels.
<li>Fixed a race for multi-threaded processes by allocating all memory chunks (and potentially sleeping) before freeing the old array of open files.
<li>Added <a href="https://man.openbsd.org/bcmdog">bcmdog(4)</a>, a watchdog timer for the Raspberry Pi.
<li>Enabled <a href="https://man.openbsd.org/simplefb">simplefb(4)</a> on arm64.
<li>Added the <a href="https://man.openbsd.org/openprom">openprom(4)</a> interface to arm64.
<li>Switched <a href="https://man.openbsd.org/spamd">spamd(8)</a> to nonblocking descriptors so a short write can be obtained when the socket buffers are full, rather than blocking.
<li>For arm64 machines which don't load the kernel at the start of physical memory (e.g. Raspberry Pi 3), changed <a href="https://man.openbsd.org/pmap">pmap(9)</a> to avoid mapping memory outside kernel VA space.
<li>Added drivers for the Raspberry Pi 3.
<!-- 2017/01/22 -->
<li>Built <a href="https://man.openbsd.org/gpioctl">gpioctl(8)</a> and <a href="https://man.openbsd.org/hotplugd">hotplugd(8)</a> on arm64.
<li>Added support for creating RAMDISK kernels for arm64.
<li>Built firmware for usb devices on arm64.
<li>Disabled TLS session cache and tickets by default.
<li>Provided <a href="https://man.openbsd.org/clang">clang(1)</a> as cc, c++ and cpp, and lld as <a href="https://man.openbsd.org/ld">ld(1)</a>.
<!-- 2017/01/21 -->
<li>Introduced the KEEPKERNELS variable: when set in mk.conf or the environment, "make cleandir" does not descend into kernel build directories, ensuring kernel object files survive "make build" on slower architectures.
<li>Added the build infrastructure for lld.
<li>Updated to xf86-input-vmmouse 13.1.0.
<li>Disabled the shader cache in Mesa (which relied on 64 bit operations) on powerpc, restoring 3D functionality.
<li>Fixed races of <a href="https://man.openbsd.org/iwm">iwm(4)</a> driver code against MiRA timeouts, which could lead to crashes in situations like changing channels while the interface is up.
<li>Added the <a href="https://man.openbsd.org/acme-client">acme-client(1)</a> option <code>domain full chain certificate "path"</code>.
<li>Implemented <a href="https://man.openbsd.org/acme-client">acme-client(1)</a> domain chain certificates.
<li>Added Allwinner A64 devices to OpenBSD/arm64, allowing use on the Pine64.
<li>Removed <a href="https://man.openbsd.org/acme-client">acme-client(1)</a> command line arguments -a/c/f/k/s/C in favor of using these in the configuration file, specified by <code>-f configfile</code> and viewable with the new -n option. Also changed command line option -n to -A for a new account key and -N to -D for a new domain key.
<li>Added support for the Allwinner A64 PIO controller clock.
<li>Added support for the Allwinner A64 (sun50i-a64) to <a href="https://man.openbsd.org/sxipio">sxipio(4)</a>.
<!-- 2017/01/20 -->
<li>Changed bsd.obj.mk to only <a href="https://man.openbsd.org/chown">chown(8)</a> :wobj when the command will succeed, allowing use of bsd.prog.mk outside /usr/src by users not belonging to the wobj group.
<li>Implemented EHCI and MMC clock support for the Allwinner A64 SoC in <a href="https://man.openbsd.org/sxiccmu">sxiccmu(4)</a>.
<li>Started creating and using <a href="https://man.openbsd.org/installurl">installurl(5)</a>, created during installation if an OpenBSD mirror server is used to download sets. This file is used by the installer, <a href="https://man.openbsd.org/syspatch">syspatch(8)</a>, and <a href="https://man.openbsd.org/pkg_add">pkg_add(1)</a>. Retired use of the /etc/pkg.conf file.
<li>Added a warning in <a href="https://man.openbsd.org/iked">iked(8)</a> when the address pool is exhausted.
<li>Added per-cpu counters for rtstat.
<!-- 2017/01/19 -->
<li>Added output packet counters to the ifq structure.
<li>Changed <code>/etc/mirror.conf</code> to <code>/etc/installurl</code>.
<li>Ceased sending IPv6 atomic fragments in response to CVE-2016-10142.
<!-- 2017/01/18 -->
<li>Added a method by which the SABRE Lite/BD-SL-i.MX6 u-boot may load a dtb and bootarm.efi, then call bootefi.
<li>Updated Mesa to 13.0.3.
<li>Fixed a panic when removal of the BFD flag on a <a href="https://man.openbsd.org/route">route(8)</a> was attempted after deletion of the route.
<li>Enabled TKIP as pairwise cipher when the wpaprotos option for <a href="https://man.openbsd.org/ifconfig">ifconfig(8)</a> enables WPA1, fixing a problem where WPA1 could not be used without using the wpaciphers option to enable TKIP.
<li>Made <a href="https://man.openbsd.org/mandoc">mandoc(1)</a> HTML output more human readable by introducing simple indentation and altering line break logic around tags.
<li>Allowed <a href="https://man.openbsd.org/pflow">pflow(4)</a> changing of receiver and sender ip/port without switching address family.
<!-- 2017/01/17 -->
<li>Changed <a href="https://man.openbsd.org/spamd">spamd(8)</a> -l to use <a href="https://man.openbsd.org/getaddrinfo">getaddrinfo(3)</a> so that strings will provide useful error messages and IPs and hostnames may be parsed as an argument to <a href="https://man.openbsd.org/bind">bind(2)</a>.
<li>Added printing of the interface mtu of RTM_IFINFO messages in <a href="https://man.openbsd.org/route">route(8)</a> monitor mode.
<li>Fixed a panic when set-field with VLAN is set in <a href="https://man.openbsd.org/switch">switch(4)</a>, but no VLANs are classified in the packet.
<!-- 2017/01/16 -->
<li>Updated to <a href="https://man.openbsd.org/nsd">nsd(8)</a> 4.1.14.
<li>Fixed a kernel crash associated with 11n hostap by resetting block ack state and canceling related timeouts when a HT node disassociates.
<li>Prevented a wireless frame injection attack where an attacker knowing the WPA group key might inject a unicast frame by sending a group-encrypted frame to the AP with particular addresses set, then forwarded by the AP as unicast.
<!-- 2017/01/15 -->
<!-- 2017/01/14 -->
<li>Updated the <a href="https://man.openbsd.org/clang">clang(1)</a> build infrastructure for LLVM 3.9.1.
<li>Added HTTPS proxy support for <a href="https://man.openbsd.org/ftp">ftp(1)</a> with ssl.
<!-- 2017/01/13 -->
<li>Made it possible to remove VMs from the internal queue in <a href="https://man.openbsd.org/vmd">vmd(8)</a>.
<li>Added support for draft-ietf-idr-shutdown to <a href="https://man.openbsd.org/bgpd">bgpd(8)</a>.
<li>Fixed timeout in <a href="https://man.openbsd.org/traceroute">traceroute(8)</a> when <a href="https://man.openbsd.org/poll">poll(2)</a> returns after receiving a packet not intended for it.
<li>Disabled and locked the Silicon Debug feature on modern Intel CPUs. This implements a countermeasure against using Direct Connect Interface (DCI) to debug CPUs via USB3.
<li>Added <a href="https://man.openbsd.org/vmmci">vmmci(4)</a>, a simple guest-side driver for <a href="https://man.openbsd.org/vmm">vmm(4)</a> VMs.
<li>Updated to FreeType-2.7.1.
<!-- 2017/01/12 -->
<li>Fixed the <a href="https://man.openbsd.org/less">less(1)</a> -t command for the case when it goes down by just a few lines, clearing the status before printing content on the last line of the screen.
<li>Finished initial 11n support for <a href="https://man.openbsd.org/athn">athn(4)</a>, supporting MCS 0-15 in client and hostap mode.
<!-- 2017/01/11 -->
<li>Added an imsg communication channel between <a href="https://man.openbsd.org/vmd">vmd(8)</a> and individual virtual machines.
<li>Stopped an error message in the installer by checking whether /tmp/i/hosts exists before calling <code>sed -i</code> on it.
<li>Stopped <a href="https://man.openbsd.org/ftp">ftp(1)</a> from attempting to read .netrc when anonymous FTP is forced (-a).
<li>Removed mfc hash tables and used the OpenBSD routing table for multicast routes, allowing access to the multicast routes in <a href="https://man.openbsd.org/route">route(8)</a>.
<li>Edited <a href="https://man.openbsd.org/syspatch">syspatch(8)</a> checksum handling to match the installer.
<li>Prevented arm64 execution of kernel pages by userland and user pages by the kernel, and userland reads of executable pages that were not mapped explicitly with a read flag. Made a distinction between executing and reading pages.
<!-- 2017/01/10 -->
<li>Increased strictness of the <a href="https://man.openbsd.org/pledge">pledge(2)</a> of the ramdisk version of the <a href="https://man.openbsd.org/ftp">ftp(1)</a> client, which operates only in URL mode.
<li>Added <a href="https://man.openbsd.org/rd">rd(4)</a> to the arm64 list of devices.
<li>Added 64 bytes of entropy from Hyper-V hosts into the kernel entropy pool via <a href="https://man.openbsd.org/acpihve">acpihve(4)</a>.
<li>Added <a href="https://man.openbsd.org/smfb">smfb(4)</a> display of resolution and color depth when attaching.
<li>Stopped requiring 11n wireless drivers to provide an ic_ampdu_rx_start() function, fixing receiving A-MPDUs with an 11n-enabled <a href="https://man.openbsd.org/athn">athn(4)</a> driver.
<!-- 2017/01/09 -->
<li>Fixed audio distortion with <a href="https://man.openbsd.org/azalia">azalia(4)</a> on the Acer TravelMate B117-M.
<li>Used a verified list of distribution set files for installation extracted from the SHA256.sig file signed by the OpenBSD project.
<li>Converted multiple daemons to use a shared log.c file.
<!-- 2017/01/08 -->
<li>Added <a href="https://man.openbsd.org/sxirtc">sxirtc(4)</a> support for the RTC found on the Allwinner H3.
<!-- 2017/01/07 -->
<li>Added Intel Xeon E5v4 <a href="https://man.openbsd.org/pci">pci(4)</a> ids.
<!-- 2017/01/06 -->
<!-- 2017/01/05 -->
<li>Avoided a side-channel cache-timing attack that could leak the ECSDA private keys when signing.
<li>Fixed <a href="https://man.openbsd.org/boot">boot(8)</a> crashing on some amd64 machines when booting from softraid crypto.
<li>Highlighted all occurrences of the <a href="https://man.openbsd.org/tmux">tmux(1)</a> search string after searching in copy mode.
<!-- 2017/01/04 -->
<li>Fixed a crash in <a href="https://man.openbsd.org/sort">sort(1)</a> when <code>sort -m</code> is given no files.
<li>Enforced https for connections to ftplist.cgi and ftpinstall.cgi on platforms which have TLS-enabled <a href="https://man.openbsd.org/ftp">ftp(1)</a>.
<li>Updated compiler-rt to version 3.9.1.
<!-- 2017/01/03 -->
<li>Added the <code>-delete</code> option to <a href="https://man.openbsd.org/find">find(1)</a>.
<li>Added <a href="https://man.openbsd.org/simplefb">simplefb(4)</a>, a driver to support the framebuffer set up by the firmware on some platforms that use device trees. Works on Allwinner (sunxi) and Raspberry Pi (broadcom) armv7 platforms.
<li>Added https support to the OpenBSD installer.
<!-- 2017/01/02 -->
<li>Enabled listening on more than one listen address for UDP and TCP by <a href="https://man.openbsd.org/syslogd">syslogd(8)</a>, allowing acceptance of network input via both IPv4 and IPv6.
<li>Enabled the <a href="https://man.openbsd.org/xbf">xbf(4)</a> driver for the paravirtual disk interface "Blkfront," native to the Xen hypervisor.
<!-- 2017/01/01 -->
<li>Added the Cortex A32 CPU.
<!-- 2016/12/31 -->
<li>Wiped all WPA parameters, including the 802.1x configuration, when WPA is disabled on an interface.
<li>Connected to the <a href="https://man.openbsd.org/syspatch">syspatch(8)</a> test repository over https.
<!-- 2016/12/30 -->
<li>In <a href="https://man.openbsd.org/passwd">passwd(1)</a>, cleared the buffer used when the user retypes the new password.
<li>Added <a href="https://man.openbsd.org/ftp">ftp(1)</a> SSL support, allowing the install script to perform https fetches.
<li>Fixed an <a href="https://man.openbsd.org/ssh">ssh(1)</a> deadlock when keys/principals commands produce a lot of output and a key is matched early.
<li>Updated to terminfo-20161126.
<li>Fixed EFI_CALL() to pass arguments properly in efiboot when the number of arguments is 0.
<!-- 2016/12/29 -->
<!-- 2016/12/28 -->
<li>Discarded the <a href="https://man.openbsd.org/pf">pf(4)</a> packet statekey only if invalid, allowing its use to establish a reverse link.
<!-- 2016/12/27 -->
<li>Converted a relative path to an absolute one with <a href="https://man.openbsd.org/realpath">realpath(3)</a> before <a href="https://man.openbsd.org/chdir">chdir(2)</a> when <a href="https://man.openbsd.org/syslogd">syslogd(8)</a> has been started with a relative path. This allows the program to re-exec itself after startup of the privsep parent or when restarting after a SIGHUP.
<li>Added support for the second <a href="https://man.openbsd.org/sxipio">sxipio(4)</a> device on the Allwinner A80.
<!-- 2016/12/26 -->
<li>Allowed using 11n mode with APs not advertising support for all of MCS 0-7.
<li>Skipped rates not supported by both peers when calculating the set of MCS rates below a particular MCS.
<li>Passed through cacheline size information to <a href="https://man.openbsd.org/vmm">vmm(4)</a> guests, preventing failures running Java.
<!-- 2016/12/25 -->
<!-- 2016/12/24 -->
<li>Implemented booting from softraid on 4K sector disks.
<li>Added support for the second <a href="https://man.openbsd.org/sxipio">sxipio(4)</a> device on the Allwinner H3.
<!-- 2016/12/23 -->
<li>Added support for "arm,gic-400" to <a href="https://man.openbsd.org/ampintc">ampintc(4)</a>.
<li>Supported p2p links in <a href="https://man.openbsd.org/ripd">ripd(8)</a> where endpoints aren't in the same subnet.
<li>Updated and added wide character support types to arm64.
<li>Fixed efiboot to read disklabels on 4K sector size disks properly by converting the sector number in the partition table to the sector number in 512 byte blocks.
<!-- 2016/12/22 -->
<li>Added a "muststaple" option to <a href="https://man.openbsd.org/ftp">ftp(1)</a>, so that oscp stapling can be required for sites expected to provide it.
<li>Extended the size of user virtual address space from 2GB to 1TB on mips64, improving ASLR and complementing W^X added earlier on some systems, improving the architecture's security.
<li>Removed PIM support from the multicast stack.
<!-- 2016/12/21 -->
<li>Added support for ECDHE with X25519 to <a href="https://man.openbsd.org/ssl.3">ssl(3)</a>.
<li>Added <a href="https://man.openbsd.org/octmmc">octmmc(4)</a>, a driver for the OCTEON MMC host controller.
<!-- 2016/12/20 -->
<li>Fixed a bug in <a href="https://man.openbsd.org/pax">pax(1)</a> where archives smaller than 512 bytes would trigger a next volume prompt.
<li>Disabled TKIP (WPA1) by default.
<li>In <a href="https://man.openbsd.org/ifconfig">ifconfig(8)</a>, made <code>ifconfig if0 wpa</code> and <code>ifconfig if0 -wpa</code> reset WPA parameters to their defaults, and made <code>ifconfig if0 wpaprotos</code> reset WPA crypto parameters to settings appropriate for the specified WPA protocol version.
<!-- 2016/12/19 -->
<li>Compiled libc++ and libc++abi with clang by default, allowing our build system to self-host itself after the initial clang bootstrap.
<li>Added experimental support for <a href="https://man.openbsd.org/xen">xen(4)</a> device hot-plugging.
<li>Prevented an "ifa == rt->rt_ifa" assertion panic by removing interface addresses in the case of a route add error.
<li>Extended the multicast sockets and multicast hash table support to multiple domains.
<li>Introduced the NET_LOCK(), a rwlock used to serialize accesses to the part of the network stack not yet ready to be executed in parallel or where new sleeping points are not possible.
<!-- 2016/12/18 -->
<li>Released <a href="https://www.openssh.com/txt/release-7.4">OpenSSH 7.4</a>.
<li>Fixed an off by one when saving and restoring an array of registers in arm64.
<li>Implemented support for cross-compiling arm64 in Makefile.cross.
<!-- 2016/12/17 -->
<li>Completed implementation of TKIP countermeasures in hostap mode.
<li>Prevented an mpath conflict for /32 RTF_CLONING routes by inserting a RTF_CLONED route at a higher priority than its parent.
<li>Imported OpenBSD/arm64.
<li>Fixed IO clock speed and system reset on Octeon III.
<!-- 2016/12/16 -->
<li>Added a <a href="https://man.openbsd.org/dhcrelay">dhcrelay(8)</a> command-line option for replacing Relay Agent Information on the incoming packets.
<li>Added the <a href="https://man.openbsd.org/xp">xp(4)</a> driver for LUNA's I/O processor.
<li>Provided the "machdep.lidsuspend" sysctl on Loongson.
<!-- 2016/12/15 -->
<li>Added support for Intel Bluetooth devices found on x250 and x260 Thinkpads.
<!-- 2016/12/14 -->
<li>Allowed starting of disabled and pre-configured VMs by name to <a href="https://man.openbsd.org/vmctl">vmctl(8)</a>.
<li>Implemented support for cold reboot of a guest in <a href="https://man.openbsd.org/vmm">vmm(4)</a>.
<!-- 2016/12/13 -->
<li>Added the TSC timecounter and used it on Skylake machines.
<li>Disabled Unix-domain socket forwarding when privsep is disabled in <a href="https://man.openbsd.org/ssh">ssh(1)</a>.
<li>Fixed <a href="https://man.openbsd.org/dhcrelay">dhcrelay(8)</a> support on <a href="https://man.openbsd.org/enc">enc(4)</a> interfaces.
<li>Printed the correct netmask instead of /0 when flushing a <a href="https://man.openbsd.org/route">route(8)</a>.
<!-- 2016/12/12 -->
<li>Made v6 tunnel address handling consider IPv6 scope.
<li>Implemented <a href="https://man.openbsd.org/dhcrelay">dhcrelay(8)</a> support for layer 2 relaying and added further Relay Agent Information options per RFC 3046.
<li>Passed WSDISPLAYIO_{GET,SET}PARAM to ws_{get,set}_param in <a href="https://man.openbsd.org/efifb">efifb(4)</a>, allowing the brightness on some machines to be adjusted through <a href="https://man.openbsd.org/wsconsctl">wsconsctl(8)</a>.
<!-- 2016/12/11 -->
<li>Added support for the FTDI Suunto dive computers to <a href="https://man.openbsd.org/uftdi">uftdi(4)</a>.
<li>Added <a href="https://man.openbsd.org/umsm">umsm(4)</a> support for Option iCON 505 devices.
<li>Updated Mesa to 13.0.2.
<!-- 2016/12/10 -->
<li>Corrected <a href="https://man.openbsd.org/xbf">xbf(4)</a> driver attachment failure when optional feature properties aren't found.
<li>Added support for MIMO Tx rates (MCS 8-15) to <a href="https://man.openbsd.org/iwm">iwm(4)</a>.
<li>Stopped enabling HT protection (RTS) unconditionally in <a href="https://man.openbsd.org/iwm">iwm(4)</a> if the AP requires protection from 20Mhz-only STAs on a 40 Mhz channel, as we do not support 40Mhz channels.
<!-- 2016/12/09 -->
<!-- 2016/12/08 -->
<li>Fixed <a href="https://man.openbsd.org/tmux">tmux(1)</a> send-keys with UTF-8.
<li>Added fdt_attach_args and simplebus for implementing fdt-capable drivers on octeon.
<li>Made it possible to install patches with <a href="https://man.openbsd.org/syspatch">syspatch(8)</a> even if not all sets are installed. Syspatch will skip the patch but continue to list it as available, allowing later use if sets are installed in the future.
<!-- 2016/12/07 -->
<li>Supported relay of DHCP requests through multiple relays in <a href="https://man.openbsd.org/dhcrelay">dhcrelay(8)</a>, rather than dropping requests already relayed. A hop counter will be incremented with each relay, per RFC 1542, and requests with this value exceeding 16 silently dropped.
<li>Forwarded packets not only as L3 broadcasts, but also as L2, when the BROADCAST flag is set on a BOOTREPLY in <a href="https://man.openbsd.org/dhcrelay">dhcrelay(8)</a>.
<li>Applied <a href="https://man.openbsd.org/pledge">pledge(2)</a> to <a href="https://man.openbsd.org/dhcrelay">dhcrelay(8)</a> with "stdio route".
<li>Added MiRA support to <a href="https://man.openbsd.org/iwn">iwn(4)</a>.
<li>Cleaned up <a href="https://man.openbsd.org/syspatch">syspatch(8)</a> directories not containing a tarball, meaning the syspatch was not applied properly.
<li>Added <a href="https://man.openbsd.org/xbf">xbf(4)</a>, a driver for Xen Blkfront.
<li>Made prefix work in all <a href="https://man.openbsd.org/tmux">tmux(1)</a> tables, allowing C-b to be bound in the copy mode tables.
<!-- 2016/12/06 -->
<li>Fixed potential buffer overflow(s) in <a href="https://man.openbsd.org/link_ntoa">link_ntoa(3)</a> as described by CVE-2016-6559. This prevents stack overflow of a static buffer in libc through use of a particular struct sockaddr_dl argument, allowing write to arbitrary locations in the data segment.
<li>Allowed booting of X552 SFP+ without a module plugged in.
<li>Prevented loss of the default route when <a href="https://man.openbsd.org/netstart">netstart(8)</a> is run a second time on the interface pointed to by that route.
<li>Fixed a panic by ensuring <a href="https://man.openbsd.org/iwm">iwm(4)</a> calls ieee80211_mira_choose() only while in RUN state.
<li>Fixed <a href="https://man.openbsd.org/hostctl">hostctl(8)</a> -t on <a href="https://man.openbsd.org/vmm">vmm(4)</a> VMs.
<li>Made <a href="https://man.openbsd.org/ssh">ssh(1)</a> IdentityFile successfully load and use certificates that have no corresponding bare public key.
<!-- 2016/12/05 -->
<li>Generated an explicit error when running <a href="https://man.openbsd.org/syspatch">syspatch(1)</a> on an unsupported release.
<li>Ensured <a href="https://man.openbsd.org/syspatch">syspatch(1)</a> rollback tarballs created from empty lists of files result in errors, rather than attempting to patch installations with missing base sets and incomplete rollback tarballs.
<li>Harmonized battery state thresholds across platforms.
<!-- 2016/12/04 -->
<li>Fixed <a href="https://man.openbsd.org/ssh">ssh(1)</a> public key authentication when multiple authentication is in use.
<!-- 2016/12/03 -->
<!-- 2016/12/02 -->
<li>Implemented the connection state machine for OpenFlow 1.0 and 1.3 in <a href="https://man.openbsd.org/switchd">switchd(8)</a> to detect invalid state transitions and invalid protocol version switching after the hello messages exchange.
<!-- 2016/12/01 -->
<li>Added "lldp" to the ether protocol name database.
<li>Changed "menu-window" to display all windows in <a href="https://man.openbsd.org/cwm">cwm(1)</a>, adding "menu-window-hidden" to recreate the original behavior.
<li>Replaced "bind" and "mousebind" options in <a href="https://man.openbsd.org/cwm">cwm(1)</a> with "bind-key" and "bind-mouse".
<!-- 2016/11/30 -->
<li>Updated media types upon SFP module change in <a href="https://man.openbsd.org/ix">ix(4)</a>.
<li>Switched the <a href="https://man.openbsd.org/iwm">iwm(4)</a> driver to MiRA rate adaptation in 11n mode.
<li>Added a new implementation of MiRA, a rate scaling algorithm for 802.11n, designed for use with MIMO and Tx aggregation.
<li>Implemented <a href="https://man.openbsd.org/usermod">usermod(8)</a> -g =uid functionality to create a new group with a unique UID.
<li>Stopped overlaying DMA fragment descriptors with free list handling, decreasing the risk of races due to caching and/or prefetching between the HC and DMA engine.
<!-- 2016/11/29 -->
<li>Added a <a href="https://man.openbsd.org/sshd_config">sshd_config(5)</a> DisableForwarding option that disables X11, agent, TCP, tunnel and Unix domain socket forwarding.
<li>In <a href="https://man.openbsd.org/ssh">ssh(1)</a>, refused to accept a certificate forced-command when it also appears in an authorized keys/principals command= restriction unless they are identical.
<li>Made send -N work for all keys in <a href="https://man.openbsd.org/tmux">tmux(1)</a>, not just in copy mode.
<li>Corrected a bit test in <a href="https://man.openbsd.org/user">user(8)</a> that made it impossible to set a password hash with <a href="https://man.openbsd.org/usermod">usermod(8)</a> if an additional flag was specified.
<!-- 2016/11/28 -->
<!-- 2016/11/27 -->
<!-- 2016/11/26 -->
<li>Added support for the Allwinner sun7i-a20-mmc to <a href="https://man.openbsd.org/sximmc">sximmc(4)</a>.
<li>Implemented basic support for <a href="https://man.openbsd.org/boot.conf">boot.conf(8)</a> on the <a href="https://man.openbsd.org/vmd">vmd(8)</a> disk image.
<li>Set -m/memory size of a VM to 512M if not specified in <a href="https://man.openbsd.org/vmctl">vmctl(8)</a>.
<li>Added the <a href="https://man.openbsd.org/vmctl">vmctl(8)</a> <code>start -n</code> option to add a network interface to the specified virtual switch.
<!-- 2016/11/25 -->
<li>Fixed a potential double-free in <a href="https://man.openbsd.org/vmd">vmd(8)</a> whn ufs_open() has failed.
<li>Increased the default datasize limit in <a href="https://man.openbsd.org/login.conf">login.conf(5)</a> on amd64 from 512M to 768M, allowing xenocara to be built with extra options in malloc.conf.
<li>Removed DHO_ROUTERS and DHO_STATIC_ROUTES options from the effective lease in <a href="https://man.openbsd.org/dhclient">dhclient(8)</a> when DHO_CLASSLESS_[MS_]STATIC_ROUTES are present, in accordance with RFC 3442.
<!-- 2016/11/24 -->
<li>Added AArch64 backend build infrastructure.
<li>Enabled support for the X550 family of 10 Gigabit controllers in <a href="https://man.openbsd.org/ix">ix(4)</a>.
<li>Stopped manually adding a route to an alias IP via 127.0.0.1 in the installer, as this is now automatically handled by the kernel.
<li>Fixed active media reporting for multi-speed fiber modules in <a href="https://man.openbsd.org/ix">ix(4)</a>.
<li>Added <a href="https://man.openbsd.org/vmd">vmd(8)</a> support for booting the kernel from the disk image, making the kernel/-k argument optional. If not specified, the /bsd kernel will be sought in the primary hd0a partition of the first disk image itself.
<!-- 2016/11/23 -->
<li>Forbade combining af-to with route-to in <a href="https://man.openbsd.org/pfctl">pfctl(8)</a>.
<!-- 2016/11/22 -->
<li>Fixed a <a href="https://man.openbsd.org/switch">switch(4)</a> panic on detach hook when interfaces are destroyed.
<li>Implemented <a href="https://man.openbsd.org/switchd">switchd(8)</a> support for version negotiation using hello messages, preventing connections from switching the version in the middle of the operation.
<li>Used CPUID flags to allow <a href="https://man.openbsd.org/hyperv">hyperv(4)</a> to determine working components and avoid attaching when Xen viridium emulation is turned on.
<li>Added disabled VMs into <a href="https://man.openbsd.org/vmd">vmd(8)</a>'s queues and allowed <a href="https://man.openbsd.org/vmctl">vmctl(8)</a> to display them.
<!-- 2016/11/21 -->
<li>Added support for Allwinner sun9i-a80-usb-mod-clk and sun9i-a80-usb-phy-clock compatible clocks to <a href="https://man.openbsd.org/sxiccmu">sxiccmu(4)</a>.
<li>Added the ability to change media type to <a href="https://man.openbsd.org/ix">ix(4)</a>.
<li>Disabled a code path on Loongson 2 that uses a MIPS64r2 register not implemented by the CPU, preventing boot failure.
<li>Turned on the <a href="https://man.openbsd.org/ix">ix(4)</a> PHY power during attach, as it can be disabled by booting into another OS.
<li>Made "addlocal" an alias to "add" on <a href="https://man.openbsd.org/bridge">bridge(4)</a>, as it does not distinguish between routing/forwarding ports.
<!-- 2016/11/20 -->
<!-- 2016/11/19 -->
<li>Made <a href="https://man.openbsd.org/tcpdump">tcpdump(8)</a> indicate basic rates listed in beacons with an asterisk.
<li>Set <a href="https://man.openbsd.org/iwm">iwm(4)</a>'s RTS retry limit to a more reasonable value, preventing small frames from getting stuck in the firmware's Tx queue.
<li>Enabled builds with a dedicated user that cannot elevate privileges or write to /usr/src or /usr/xenocara. Enabled builds with a dedicated user for xenocara.
<!-- 2016/11/18 -->
<li>Updated libdrm to 2.4.73.
<li>Fixed "addlocal" ports on <a href="https://man.openbsd.org/switch">switch(4)</a>.
<li>Recognized active SPF+ DA modules as IFM_10G_SFP_CU in <a href="https://man.openbsd.org/ix">ix(4)</a>.
<li>Added support for multiple listening sockets to <a href="https://man.openbsd.org/snmpd">snmpd(8)</a>. The default is to listen on 0.0.0.0 and ::, allowing better handling of dual-stack setups.
<!-- 2016/11/17 -->
<li>Added drivers for PCI host bridge and built-in UARTs on Loongson 3A.
<li>Made <a href="https://man.openbsd.org/iwm">iwm(4)</a> pass Tx/Rx MCS rates to <a href="https://man.openbsd.org/bpf">bpf(4)</a> to allow examination with <a href="https://man.openbsd.org/tcpdump">tcpdump(8)</a>.
<li>Added an extra check that the hop-by-hop header is always the first extension header after the IPv6 header in <a href="https://man.openbsd.org/pf">pf(4)</a>.
<!-- 2016/11/16 -->
<li>Inherited <a href="https://man.openbsd.org/route">route(8)</a> label when creating dynamic routes for path MTU.
<li>Fixed <a href="https://man.openbsd.org/tmux">tmux(1)</a> dragging not to stop when the wheel is pressed.
<li>Added support for the Sierra Wireless EM7455 LTE module.
<!-- 2016/11/15 -->
<li>Serialized posts to the txstart register in <a href="https://man.openbsd.org/re">re(4)</a>, preventing tx stall.
<li>Turned on margins in <a href="https://man.openbsd.org/tmux">tmux(1)</a>.
<li>Added support for lid state detection in <a href="https://man.openbsd.org/ykbec">ykbec(4)</a>.
<li>Added a simple openflow client to <a href="https://man.openbsd.org/switchctl">switchctl(8)</a> to dump <a href="https://man.openbsd.org/switch">switch(4)</a> information.
<!-- 2016/11/14 -->
<li>Checked for available space before installing a patch with <a href="https://man.openbsd.org/syspatch">syspatch(8)</a>.
<li>Copied mips64 <a href="https://man.openbsd.org/memmove">memmove(3)</a> data by using 64-bit loads and stores rather than 32-bit operations, roughly doubling the routine's throughput.
<li>Increased the number of TX descriptors to 256 in <a href="https://man.openbsd.org/hvn">hvn(4)</a>, increasing the NVS message ring size and resulting in a performance improvement of about 30%.
<li>Reflected interface priorities when inserting RTF_CONNECTED routes, fixing a bug where bringing interfaces up and down when multiple RTF_CLONING routes exist for a given subnet could make it impossible to insert new ARP/NDP entries.
<li>Automatically created a default <a href="https://man.openbsd.org/lo">lo(4)</a> per rdomain, with unit number matching the rdomain and index stored in the rtable/rdomain map.
<!-- 2016/11/13 -->
<li>Added a type for counters to <a href="https://man.openbsd.org/malloc">malloc(3)</a> and added wrappers around common operations on percpu counters.
<li>Updated to xf86-video-ati 7.7.1.
<!-- 2016/11/12 -->
<!-- 2016/11/11 -->
<li>Fixed a crash in <a href="https://man.openbsd.org/tmux">tmux(1)</a> with run-shell -b and no window pane available.
<!-- 2016/11/10 -->
<li>Added support for Allwinner sun9i-a80-apb1-clk compatible clocks to <a href="https://man.openbsd.org/sxiccmu">sxiccmu(4)</a>.
<li>Fixed truncated display of UTF-16 decoded elements in <a href="https://man.openbsd.org/ifconfig">ifconfig(8)</a>.
<li>Added the Apple NVMe controller <a href="https://man.openbsd.org/pci">pci(4)</a> id.
<!-- 2016/11/09 -->
<li>Improved source IP address handling in <a href="https://man.openbsd.org/snmpd">snmpd(8)</a> by sending replies using a source address equal to the destination address of queries and introducing a configuration option to <a href="https://man.openbsd.org/snmpd.conf">snmpd.conf(5)</a> to set the source address of packets sent to trap receivers.
<!-- 2016/11/08 -->
<li>Stopped installing <a href="https://man.openbsd.org/perl">perl(1)</a> .ph files.
<li>Respected -Ooffset for the disklabel location in <a href="https://man.openbsd.org/makefs">makefs(8)</a>.
<li>Added support for sun9i-a80, the Allwinner A80, to <a href="https://man.openbsd.org/sxiccmu">sxiccmu(4)</a> and <a href="https://man.openbsd.org/sxipio">sxipio(4)</a>.
<li>Added a <a href="https://man.openbsd.org/disklabel">disklabel(8)</a> option creating a disklabel with the information provided by <a href="https://man.openbsd.org/disktab">disktab(5)</a>.
<li>Taught <a href="https://man.openbsd.org/switch">switch(4)</a> device <a href="https://man.openbsd.org/read">read(2)</a> operations to behave like a stream socket, allowing userland programs to use it without special treatment.
<li>Supported more than one tag entry for the same search term in <a href="https://man.openbsd.org/mandoc">mandoc(1)</a>.
<li>Only used the routing table for source address selection when processing IP options, and ensured the next hop is directly reachable when IPOPT_SSRR is set.
<!-- 2016/11/07 -->
<li>Implemented support for flow-mod message validation in <a href="https://man.openbsd.org/switchd">switchd(8)</a>.
<!-- 2016/11/06 -->
<li>Split various kernel process IDs from TID, giving processes a PID unrelated to the TID of their initial threads.
<li>Bumped <a href="https://man.openbsd.org/ftp">ftp(1)</a>'s cipher default from "all" to "legacy."
<li>Added OCSP stapling support to <a href="https://man.openbsd.org/httpd">httpd(8)</a>.
<li>Added interrupt handling routines for Loongson 3A.
<li>Added an auto-login mode to <a href="https://man.openbsd.org/xenodm">xenodm(1)</a>.
<!-- 2016/11/05 -->
<li>Validated address ranges for AllowUser/DenyUsers at <a href="https://man.openbsd.org/ssh">ssh(1)</a> configuration load time and refused to accept bad ones, fixing a problem where invalid CIDR address ranges always matched.
<li>Added support for server side OCSP stapling to libtls and <a href="https://man.openbsd.org/nc">nc(1)</a>.
<li>Added <a href="https://man.openbsd.org/crypto">crypto(3)</a> support for X25519.
<li>Removed the obj, xobj and src directories from the base set, so local setups will not be overwritten during upgrades.
<!-- 2016/11/04 -->
<li>Enabled <a href="https://man.openbsd.org/crypto">crypto(3)</a> assembler code for nist 256p curve on amd64.
<!-- 2016/11/03 -->
<li>Stopped processing more than three consecutive TLS records in ssl3_read_bytes() to prevent a peer from causing a loop.
<li>Implemented a Key-Value Pair exchange interface via a text-based <a href="https://man.openbsd.org/pvbus">pvbus(4)</a> interface.
<li>Fixed libtls OCSP handshakes.
<!-- 2016/11/02 -->
<li>Corrected CONSPEED for octeon to the original 115200.
<li>Updated x11proto to 7.0.31.
<li>Added OCSP client side support to libtls.
<li>Required secure defaults for TLS with <a href="https://man.openbsd.org/acme-client">acme-client(1)</a>.
<!-- 2016/11/01 -->
<li>Made it possible to change the link layer address on <a href="https://man.openbsd.org/cnmac">cnmac(4)</a> interfaces.
<!-- 2016/10/31 -->
<li>Used x2APIC if it is enabled by BIOS.
<li>Added the -d flag to the <a href="https://man.openbsd.org/cvs">cvs(1)</a> update command, so directories are created with "cvs up".
<!-- 2016/10/30 -->
<li>Raised the mtu on <a href="https://man.openbsd.org/myx">myx(4)</a> devices to 9380 bytes.
<li>Allowed the installer for verify local set files even if the prefetch area would not fit on the local disk by searching for and creating a prefetch area only for nonlocal sources.
<!-- 2016/10/29 -->
<li>Truncated lengths of ip packets encapsulated in <a href="https://man.openbsd.org/gre">gre(4)</a> or <a href="https://man.openbsd.org/etherip">etherip(4)</a> if they would cause the position to go past snapend in <a href="https://man.openbsd.org/tcpdump">tcpdump(8)</a>.
<li>Fixed an issue where the installer was not able to fetch local sets without a SHA256.sig file in a directory unreachable by the unprivileged users.
<li>Improved the security model of <a href="https://man.openbsd.org/vmm">vmm(4)</a> by restricting pledged vmm processes to prevent use of vmm ioctls on other VMs.
<!-- 2016/10/28 -->
<li>Updated to FreeType 2.7. Subpixel hinting, also known as ClearType hinting, is now enabled by default.
<li>Removed the option to set hints on pages in the <a href="https://man.openbsd.org/malloc">malloc(3)</a> cache.
<li>Prevented an integer underflow in <a href="https://man.openbsd.org/tcpdump">tcpdump(8)</a>.
<li>Stopped forcing RTS for every frame in 11n mode on <a href="https://man.openbsd.org/iwn">iwn(4)</a>.
<li>Stopped <a href="https://man.openbsd.org/pf">pf(4)</a> once rules from attempting to remove their parent rules.
<!-- 2016/10/27 -->
<!-- 2016/10/26 -->
<!-- 2016/10/25 -->
<li>Stopped using a bitfield in the <a href="https://man.openbsd.org/vmm">vmm(4)</a> msr store index structure to prevent VMABORTs during vmentry.
<li>Accepted <a href="https://man.openbsd.org/carp">carp(4)</a> advertisements whose destination is not for multicast
<li>Deduplicated the CRS parsing code and handled <a href="https://man.openbsd.org/acpi">acpi(4)</a> implementations, fixing a problem where the wrong number of resources were defined inside the EC device, preventing initialization of <a href="https://man.openbsd.org/acpiec">acpiec(4)</a>.
<li>Fixed <a href="https://man.openbsd.org/bind">bind(2)</a> of link local addresses to raw sockets.
<li>Masked and unmasked the interrupt source in an intx-specific interrupt handler, fixing lockups on <a href="https://man.openbsd.org/nvme">nvme(4)</a> controllers.
<!-- 2016/10/24 -->
<li>Repaired <a href="https://man.openbsd.org/ssh">ssh(1)</a> port forwarding for non-privileged ports as a non-root user.
<li>Fixed issues with redundant <a href="https://man.openbsd.org/dhcpd">dhcpd(8)</a> servers and CARP-using interfaces by comparing server-identifiers and rejecting packets only after applying the value specified in <a href="https://man.openbsd.org/dhcpd.conf">dhcpd.conf(5)</a>.
<li>Disabled <a href="https://man.openbsd.org/xterm">xterm(1)</a> Tektronics 4014 emulation.
<li>Made the IPv6 network stack simply drop empty non-atomic fragments, rather than attempting to insert them into the queue.
<li>Updated <a href="https://man.openbsd.org/nsd">nsd(8)</a> to 4.1.13.
<!-- 2016/10/23 -->
<li>Only attached <a href="https://man.openbsd.org/sxitimer">sxitimer(4)</a> on sun4i and sun5i, as the timers on later SoCs lack the 64 bit counter used as a timecounter here, and have generic timers instead.
<li>Removed short option names for <code>makefs -o</code>.
<li>Exited autoinstall in the case of missing or duplicate mountpoints, as well as when a template is rejected by <a href="https://man.openbsd.org/disklabel">disklabel(8)</a>.
<li>Added <a href="https://man.openbsd.org/xenodm">xenodm(1)</a>, a stripped down xdm (X Display Manager) for OpenBSD.
<!-- 2016/10/22 -->
<li>Stopped disabling the external pl310 l2 cache on pandaboard.
<li>Taught <a href="https://man.openbsd.org/tcpdump">tcpdump(8)</a> how to read OpenFlow packets.
<li>Fixed a panic when using tmpfs when an Access Flag fault happens on a kernel page.
<li>Attached <a href="https://man.openbsd.org/sxitimer">sxitimer(4)</a> using the FDT.
<li>Used deterministic pseudo-random numbers when the -T flag is used with <a href="https://man.openbsd.org/makefs">makefs(8)</a>, allowing repeatable builds.
<!-- 2016/10/21 -->
<li>Stopped setting MIIF_AUTOTSLEEP in <a href="https://man.openbsd.org/fec">fec(4)</a> and <a href="https://man.openbsd.org/sxie">sxie(4)</a>, which had led to tsleep in an interrupt context, causing panics.
<li>Added support for the <a href="https://man.openbsd.org/acpi">acpi(4)</a> timer opcode.
<li>Implemented a driver for Marvell's Mbus bridge.
<li>Fixed the clock on the Olimux A10s OLinuXino-Micro board by running <a href="https://man.openbsd.org/sxitimer">sxitimer(4)</a> from the 24MHz clock.
<li>Added NetWM-compliant fullscreen support to <a href="https://man.openbsd.org/video">video(1)</a>.
<li>Added generalized access to per cpu data structures and counters, <a href="https://man.openbsd.org/cpumem_get">cpumem_get(9)</a> and <a href="https://man.openbsd.org/counters_alloc">counters_alloc(9)</a>.
<li>Added <a href="https://man.openbsd.org/vmm">vmm(4)</a> for i386.
<!-- 2016/10/20 -->
<li>Mitigated against <a href="https://man.openbsd.org/mpii">mpii(4)</a> device attachment racing with mountroot.
<!-- 2016/10/19 -->
<li>Removed support for fixed ECDH cipher suites.
<li>Stopped forcing <a href="https://man.openbsd.org/iwm">iwm(4)</a> to use RTS for all frames unless required by the AP.
<!-- 2016/10/18 -->
<li>Fixed a <a href="https://man.openbsd.org/mandoc">mandoc(1)</a> bug where macro searches returned pages containing only the first specified macro of a set.
<li>Fixed an <a href="https://man.openbsd.org/ntpd">ntpd(8)</a> random termination bug by preserving child process IDs.
<li>Corrected early termination in <a href="https://man.openbsd.org/bgpd">bgpd(8)</a> when a max-prefix of 1 in <a href="https://man.openbsd.org/bgpd.conf">bgpd.conf(5)</a> would close the session on the first prefix.
<li>Added the <a href="https://man.openbsd.org/ddb">ddb(4)</a> examine /m format, "display in unsigned hex with character dump at the end of each line."
<li>Corrected an issue when openbsd.randomdata was made readonly which led to poor random number generation in the kernel early on.
<li>Installed a signal handler for tty-generated signals and waited for the <a href="https://man.openbsd.org/ssh">ssh(1)</a> child to suspend before suspending <a href="https://man.openbsd.org/ftp">ftp(1)</a>, allowing ssh to restore the terminal mode as needed when suspended at the password prompt.
<!-- 2016/10/17 -->
<li>Randomized the MAC address in <a href="https://man.openbsd.org/vmd">vmd(8)</a> on the host side if not specified by the user. The prefix is incremented by one to differentiate from those addresses generated by OpenBSD in the kernel: fe:e1:bb:xx:xx:xx.
<li>Added the <a href="https://man.openbsd.org/vmd">vmd(8)</a> option to specify an interface group per virtual switch, to be added to all VM <a href="https://man.openbsd.org/tap">tap(4)</a> interfaces in the switch.
<li>Removed the artificial maximum number of unix domain sockets in <a href="https://man.openbsd.org/syslogd">syslogd(8)</a>.
<!-- 2016/10/16 -->
<li>Ensured mbufs are clean when a packet is reinserted to local input processing, and that the packet is in the routing domain of the interface where it is inserted.
<li>Rewrote <a href="https://man.openbsd.org/tmux">tmux(1)</a> command queue handling to add a global command queue and avoid multiple nested command queues.
<li>Imported <a href="https://man.openbsd.org/makefs">makefs(8)</a>, a tool to create filesystem images from a directory, supporting cd9660, ffs and msdosfs. Used this to build bsd.rd.
<li>Updated libdrm to 2.4.71.
<!-- 2016/10/15 -->
<li>Switched <a href="https://man.openbsd.org/rebound">rebound(8)</a> to a re-exec model to reduce sharing.
<li>Allowed adding an interface to a <a href="https://man.openbsd.org/vmd">vmd(8)</a> interface group with the group keyword.
<!-- 2016/10/14 -->
<li>Fixed <a href="https://man.openbsd.org/cvs">cvs(1)</a> update -r and -A to correctly set or reset the sticky tags for files.
<li>Changed the default non -b behavior of <a href="https://man.openbsd.org/config">config(8)</a> to operate with the new compile behavior:
<ul>
<li>create a Makefile including ../Makefile.inc
<li>run "make obj" to create the obj directory
<li>run "make config" to use the logic in ../Makefile.inc to re-run config with the correct -b options, creating a layout in obj/
<li>exit 0
</ul>
<li>Moved kernel builds to compile/CONFIG/obj@ -> /usr/obj/... and committed stock GENERIC and RAMDISK kernels to ensure the src tree can be "readonly" during builds, de-escalating to $BUILDUSER as required.
<li>Added <a href="https://man.openbsd.org/bgpd">bgpd(8)</a> and <a href="https://man.openbsd.org/bgpctl">bgpctl(8)</a> support for draft-ietf-idr-large-community (later RFC 8092).
<li>Displayed unknown attributes and information known about a prefix when looking at its details in <a href="https://man.openbsd.org/bgpctl">bgpctl(8)</a>.
<!-- 2016/10/13 -->
<li>Fixed revision lookups for <a href="https://man.openbsd.org/cvs">cvs(1)</a> branches.
<li>Added support for BCE (background color erase) to <a href="https://man.openbsd.org/tmux">tmux(1)</a>.
<li>Fixed a logic issue in header parsing in <a href="https://man.openbsd.org/smtpd">smtpd(8)</a> which could cause <a href="https://man.openbsd.org/smtp">smtp(1)</a> sessions to hang.
<li>Taught <a href="https://man.openbsd.org/tcpdump">tcpdump(8)</a> to decode bgp path attribute draft-ietf-idr-large-community.
<!-- 2016/10/12 -->
<li>Added the hostname to the display in <a href="https://man.openbsd.org/systat">systat(1)</a>.
<li>Renamed the <a href="https://man.openbsd.org/cdce">cdce(4)</a> CDCE_ZAURUS option to CDCE_CRC32 for clarity.
<li>Added a -N flag to <a href="https://man.openbsd.org/tmux">tmux(1)</a> command-prompt to execute a command as soon as a non-number key is pressed in copy mode.
<li>Enabled <a href="https://man.openbsd.org/vmm">vmm(4)</a> on amd64.
<li>Allowed four <a href="https://man.openbsd.org/vio">vio(4)</a> interfaces in each VM and fixed a bad interrupt assignment causing IRQ9 to be shared between the second disk device and the interfaces, causing poor network performance.
<!-- 2016/10/11 -->
<li>Added "fattr" to the <a href="https://man.openbsd.org/pledge">pledge(2)</a> promises made by <code>make -t</code>, which uses <a href="https://man.openbsd.org/utimes">utimes(2)</a> for its <a href="https://man.openbsd.org/touch">touch(1)</a> built-in.
<li>Added partial UTF-8 line editing support for <a href="https://man.openbsd.org/ksh">ksh(1)</a> vi input mode.
<li>Fixed an off by one error in <a href="https://man.openbsd.org/sed">sed(1)</a> when no matches were found in a substitute.
<li>Added support for double and triple clicking in <a href="https://man.openbsd.org/tmux">tmux(1)</a> and used these for select-word and select-line in copy mode.
<li>Converted <a href="https://man.openbsd.org/tmux">tmux(1)</a> copy mode key bindings from vi-copy and emacs-copy to copy-mode or copy-mode-vi. Keys are bound to "send-keys -X copy-mode-command".
<li>Added support for UTF-8 in the <a href="https://man.openbsd.org/tmux">tmux(1)</a> command prompt.
<li>Enabled the noperm option for <a href="https://man.openbsd.org/mount_mfs">mount_mfs(8)</a>.
<!-- 2016/10/10 -->
<li>Unregistered the <a href="https://man.openbsd.org/ssh">ssh(1)</a> KEXINIT handler after receipt of the message, preventing an unauthenticated peer from repeating the KEXINIT and causing allocation of up to 128MB until the connection is closed.
<li>Stopped echoing RFC 3046/Option 82/Relay Agent Information in <a href="https://man.openbsd.org/dhcpd">dhcpd(8)</a>.
<!-- 2016/10/09 -->
<li>Added <a href="https://man.openbsd.org/psci">psci(4)</a>, a driver for the reset and power down portion of the ARM Power State Coordination Interface (PCSI) specification.
<li>Updated to xkeyboard-config 2.19.
<li>Attached <a href="https://man.openbsd.org/sxiccmu">sxiccmu(4)</a> using the FDT.
<li>Re-enabled fetching sets from local sources as root.
<li>Fixed a heap overflow in the <a href="https://man.openbsd.org/sysctl">sysctl(8)</a> code.
<!-- 2016/10/08 -->
<li>Stopped using MIPS64r2 instructions on Loongson 2.
<li>Prevented infinite loops for <a href="https://man.openbsd.org/uvm_init">uvm_init(9)</a> amap allocations with >=2^17 slots.
<li>Made <a href="https://man.openbsd.org/iwn">iwn(4)</a> write an MCS index into the radiotap rate field and enabled display of the MCS with <a href="https://man.openbsd.org/tcpdump">tcpdump(8)</a>.
<li>Made <a href="https://man.openbsd.org/sxidog">sxidog(4)</a> set cpuresetfn.
<li>Dynamically attached <a href="https://man.openbsd.org/sysreg">sysreg(4)</a> and <a href="https://man.openbsd.org/sxipio">sxipio(4)</a> using the FDT.
<!-- 2016/10/07 -->
<li>Fixed SD/MMC on the Beaglebone Black and Pandaboard.
<li>Fixed large I/Os to RAID5 volumes with many chunks by setting the maximum number of CCBs in a work unit to the number of chunks.
<li>Implemented a driver for Marvell Armada's clock gates.
<li>Switched <a href="https://man.openbsd.org/rebound">rebound(8)</a> to read resolv.conf to find upstream name servers, automatically restarting if that file changes. Started listening on port 54 to avoid collisions with other DNS servers and used the dnsjackport <a href="https://man.openbsd.org/sysctl.2">sysctl(2)</a> to steal DNS connections from libc.
<li>Introduced <a href="https://man.openbsd.org/sysctl.2">sysctl(2)</a> KERN_DNSJACKPORT to hijack DNS sockets. When set to a port number, all DNS socket connections will be redirected to localhost:port.
<li>Supported the Marvell Armada's system controller to allow reset of the machine.
<li>Added <a href="https://man.openbsd.org/switchd">switchd(8)</a> support for multipart replies and implemented a simple ofp 1.3.5 error message sending function.
<li>Added a driver for the Marvell Armada 380 core clock.
<li>Fixed <a href="https://man.openbsd.org/vxlan">vxlan(4)</a> to align 32 bit at the outer IP header and comply with the assumptions of ether_input().
<!-- 2016/10/06 -->
<li>Honored the permissions of the root directory on <a href="https://man.openbsd.org/mount">mount(8)</a> with the "noperm" option.
<li>Enabled <a href="https://man.openbsd.org/pledge">pledge(2)</a> in <a href="https://man.openbsd.org/vmm">vmm(4)</a> and the VM processes.
<li>Enabled <a href="https://man.openbsd.org/switchd">switchd(8)</a> and <a href="https://man.openbsd.org/switchctl">switchctl(8)</a>.
<li>Correctly terminated VMs on shutdown of <a href="https://man.openbsd.org/vmd">vmd(8)</a>.
<li>Per RFC 6842, modified <a href="https://man.openbsd.org/dhcpd">dhcpd(8)</a> to echo the client-identifier value, disambiguating packets for relays and clients when chaddr is 0. Also forced <a href="https://man.openbsd.org/dhclient">dhclient(8)</a> to drop packets when the server provides a client-identifier value not matching the value sent by the client.
<li>Enabled hardware VLAN tagging on <a href="https://man.openbsd.org/hvn">hvn(4)</a>. A PowerShell command must be executed to configure <a href="https://man.openbsd.org/trunk">trunk(4)</a> mode on virtual interfaces.
<li>Used BUILDUSER as the owner of new links/directories created in "make obj" when started as root. Built kernels as root to avoid permission issues when the source tree is not owned by ${BUILDUSER}.
<li>Improved performance in hostap mode for rt2560 chips by disabling RTS for long frames in <a href="https://man.openbsd.org/ral">ral(4)</a>.
<li>Per RFC 5424, added millisecond precision timestamps to <a href="https://man.openbsd.org/syslogd">syslogd(8)</a>.
<!-- 2016/10/05 -->
<li>Fixed the <a href="https://man.openbsd.org/audio">audio(4)</a> condition used to decide whether to automatically start the device, preventing a device opened in full-duplex mode from starting with an empty play buffer.
<li>Made imxdog(4) set cpuresetfn and then removed the unneeded sections of the imx platform, including the imx board IDs.
<li>De-escalated to an unprivileged user during "make build" and "make release". DESTDIR must be on a partition with the noperm flag set for "make release" to work correctly as an unprivileged user.
<li>Added support to <a href="https://man.openbsd.org/vm.conf">vm.conf(5)</a> for enhanced networking configuration and virtual switches.
<li>Added <a href="https://man.openbsd.org/cwm">cwm(1)</a> CM-a for "nogroup".
<li>Allowed <a href="https://man.openbsd.org/bgpd">bgpd(8)</a> route announcement based on a route-label.
<!-- 2016/10/04 -->
<li>Determined mute status at the time of <a href="https://man.openbsd.org/acpithinkpad">acpithinkpad(4)</a> attach, to be used later by the audio subsystem.
<li>Switched <a href="https://man.openbsd.org/syslogd">syslogd(8)</a> to use RFC 5424 ISO format for timestamps with -Z option, converting all logging to UTC.
<li>Added a new <a href="https://man.openbsd.org/vmd">vmd(8)</a> "priv" process, responsible for ioctls and restricted operations not allowed under <a href="https://man.openbsd.org/pledge">pledge(2)</a>.
<li>Stopped supporting SUDO builds.
<li>Avoided a potential MITM in <a href="https://man.openbsd.org/acme-client">acme-client(1)</a> by using a single tls_config.
<li>Converted timeouts needing a process context to <a href="https://man.openbsd.org/timeout_set_proc">timeout_set_proc(9)</a> where use of <a href="https://man.openbsd.org/rtalloc_mpath">rtalloc_mpath(9)</a> inside ip_output() might require a write lock.
<!-- 2016/10/03 -->
<li>Fixed an <a href="https://man.openbsd.org/smtpd">smtpd(8)</a> smtp session logic bug which could lead to a server crash.
<li>Prevented two potential deadlocks by avoiding holding timeout_mutex while interacting with the scheduler.
<!-- 2016/10/02 -->
<li>Disabled sitaracm and added the new ompinmux(4) driver for omap pin muxing/pad configuration that attaches with the FDT, handling 16- and 32-bit values.
<li>Set IFCAP_VLAN_MTU capability in <a href="https://man.openbsd.org/cpsw">cpsw(4)</a>, avoiding "ifconfig: SIOCSETVLAN: No buffer space available" when creating vlan interfaces without first lowering the mtu.
<!-- 2016/10/01 -->
<!-- 2016/09/30 -->
<li>Implemented <a href="https://man.openbsd.org/switchd">switchd(8)</a> socket server code, ofrelay, which properly handles async I/O, partial/multiple messages, connection limits and file descriptor accounting.
<li>Implemented <a href="https://man.openbsd.org/ssh">ssh(1)</a> proxy mux mode.
<!-- 2016/09/29 -->
<li>Implemented fork+exec for <a href="https://man.openbsd.org/vmd">vmd(8)</a>.
<!-- 2016/09/28 -->
<li>Removed support for pre-authentication compression from <a href="https://man.openbsd.org/ssh">ssh(1)</a>.
<li>Added logic for figuring out CPU clock rate and usable memory areas by using Loongson EFI.
<li>Fixed a kernel panic when destroying interfaces attached to the <a href="https://man.openbsd.org/switch">switch(4)</a> without prior removal.
<!-- 2016/09/27 -->
<li>Ran <a href="https://man.openbsd.org/acpidump">acpidump(8)</a> at system startup and stored ACPI tables in the <code>/var/db/acpi</code> directory for later use by <a href="https://man.openbsd.org/sendbug">sendbug(1)</a>.
<!-- 2016/09/26 -->
<li>Taught <a href="https://man.openbsd.org/ntpd">ntpd(8)</a> how to use socket status to shut down the daemon and its constraint process to use exec*() instead of just forking, allowing use of <a href="https://man.openbsd.org/pledge">pledge(2)</a>.
<li>Removed xscale support from arm.
<li>Taught <a href="https://man.openbsd.org/switchd">switchd(8)</a> how to create flows for new connections using OpenFlow 1.3.5 and implemented the OXM filters to use with flow matching and Set-Action.
<!-- 2016/09/25 -->
<li>Added <a href="https://man.openbsd.org/sysctl.2">sysctl(2)</a> kern.allowkmem (default 0) which controls the ability to open <code>/dev/mem</code> or <code>/dev/kmem</code> at securelevel > 0.
<!-- 2016/09/24 -->
<li>Introduced the <a href="https://man.openbsd.org/hashfree">hashfree(9)</a> function to free hash tables.
<!-- 2016/09/23 -->
<li>Attached imxocotp(4) using the FDT.
<li>Reworked Per Packet Info handling in <a href="https://man.openbsd.org/hvn">hvn(4)</a>, bringing support for IP and protocol checksum offloading and initial code for hardware VLAN tagging and jumbo frames.
<li>Removed sqlite3.
<li>Added the Yamaha UR22 audio interface and a quirk to allow it to attach as <a href="https://man.openbsd.org/uaudio">uaudio(4)</a>.
<!-- 2016/09/22 -->
<li>Added a fix to <a href="https://man.openbsd.org/ssl.3">ssl(3)</a> to avoid unbounded memory growth triggered by a TLS client repeatedly sending OCSP status request TLS extensions.
<li>Switched m88k to RELRO.
<li>Added the plain curve25519-sha256 KEX algorithm to <a href="https://man.openbsd.org/ssh">ssh(1)</a>.
<!-- 2016/09/21 -->
<li>Made various improvements to support for <a href="https://man.openbsd.org/iwm">iwm(4)</a> devices.
<li>Added an option to give <a href="https://man.openbsd.org/syslogd">syslogd(8)</a> a server CA used to validate client certificates.
<li>Added support for the Sierra Wireless MC7455 <a href="https://man.openbsd.org/umsm">umsm(4)</a> modem.
<!-- 2016/09/20 -->
<li>Completed <a href="https://man.openbsd.org/bus_dmamap_load_raw">bus_dmamap_load_raw(9)</a> implementation for ARM.
<!-- 2016/09/19 -->
<li>Added <a href="https://man.openbsd.org/pledge">pledge(2)</a> to <a href="https://man.openbsd.org/pstat">pstat(8)</a>.
<li>Switched softraid crypto to <a href="https://man.openbsd.org/bcrypt_pbkdf">bcrypt_pbkdf(3)</a>. New volumes will be created by <a href="https://man.openbsd.org/bioctl">bioctl(8)</a> with bcrypt PBKDF, while existing ones continue to use PKCS5 PBKDF2 until a passphrase change is made.
<li>Allowed only standard dot notation for target IPv4 addresses in <a href="https://man.openbsd.org/traceroute">traceroute(8)</a> and <a href="https://man.openbsd.org/ping">ping(8)</a>.
<!-- 2016/09/18 -->
<li>Set the "triple" on arm to armv7-unknown-openbsdX.Y-gnueabi, making the compiler generate code for armv7 by default (providing proper atomic operations) and select the correct default ABI.
<li>Converted imxccm(4) and imxiomuxc(4) to attach to the fdt using the "early" locator.
<li>Used a locator to allow "early" attachment of designated drivers.
<li>Added <a href="https://man.openbsd.org/bcrypt_pbkdf">bcrypt_pbkdf(3)</a> support to the <a href="https://man.openbsd.org/softraid">softraid(4)</a> crypto boot loader code.
<li>Prevented a crash in <a href="https://man.openbsd.org/ehci">ehci(4)</a> when host controller drivers attempted to use invalid device descriptor bMaxPacketSize values.
<!-- 2016/09/17 -->
<li>Merged ping6(8) into <a href="https://man.openbsd.org/ping">ping(8)</a>.
<!-- 2016/09/16 -->
<li>Enabled Hyper-V guest drivers.
<!-- 2016/09/15 -->
<li>Added <a href="https://man.openbsd.org/omwugen">omwugen(4)</a>, a driver for the TI logic that generates wakeup events and routes interrupts to the GIC/<a href="https://man.openbsd.org/ampintc">ampintc(4)</a>. Makes <a href="https://man.openbsd.org/ommmc">ommmc(4)</a> interrupts work on pandaboard.
<li>Added RTM_INVALIDATE as a <a href="https://man.openbsd.org/route">route(8)</a> message.
<!-- 2016/09/14 -->
<li>Added fork+exec to <a href="https://man.openbsd.org/ntpd">ntpd(8)</a> and <a href="https://man.openbsd.org/switchd">switchd(8)</a>.
<li>Always set the MAC address when initializing an <a href="https://man.openbsd.org/axen">axen(4)</a> chip, making <a href="https://man.openbsd.org/ifconfig">ifconfig(8)</a> "axen0 lladdr" work.
<!-- 2016/09/13 -->
<li>Limited the number of fonts which can be loaded.
<li>Added LSI/Avago SAS3 <a href="https://man.openbsd.org/pci">pci(4)</a> ids and added support for these to <a href="https://man.openbsd.org/mpii">mpii(4)</a>.
<li>Introduced <a href="https://man.openbsd.org/rwsleep">rwsleep(9)</a>, equivalent to <a href="https://man.openbsd.org/msleep">msleep(9)</a> but for code protected by a write lock.
<li>Stopped creating a BFD descriptor when the <a href="https://man.openbsd.org/route">route(8)</a> is created.
<!-- 2016/09/12 -->
<li>Added <a href="https://man.openbsd.org/uwacom">uwacom(4)</a>, a basic pointer driver for Wacom USB tablets.
<!-- 2016/09/11 -->
<li>Switched amd64, i386 and sparc64 boot code to libsa machine-independent softraid.
<li>Introduced machine-independent softraid.{c,h} in lib/libsa.
<!-- 2016/09/10 -->
<li>Used PLL6 as a parent clock for the SDx clocks for frequencies > 400 kHz, making <a href="https://man.openbsd.org/sximmc">sximmc(4)</a> much faster.
<li>Deleted support for 32bit frame backtracing on sparc64.
<!-- 2016/09/09 -->
<li>Tightened <a href="https://man.openbsd.org/pledge">pledge(2)</a> for <a href="https://man.openbsd.org/fsdb">fsdb(8)</a>.
<!-- 2016/09/08 -->
<li>Removed <code>/dev/sound</code> in favor of <code>/dev/audio</code>.
<li>Enabled -static -pie on arm.
<!-- 2016/09/07 -->
<li>Only freed the old cached next hop <a href="https://man.openbsd.org/route.4">route(4)</a> when the new one is valid.
<!-- 2016/09/06 -->
<!-- 2016/09/05 -->
<!-- 2016/09/04 -->
<li>Added full UTF-8 support to <a href="https://man.openbsd.org/column">column(1)</a>.
<li>Removed CMS.
<li>Added ISRG Root X1, the letsencrypt CA root.
<li>Fixed system reboot seen on the Allwinner sun5i-r8.
<li>Removed support for tape block devices.
<li>Purged routes attached to an address when the address is removed.
<li>Improved the auto disk selection and applied it for installs as well as upgrades.
<li>Switched the cubie miniroot from the Allwinner A10-based Cubieboard1 to the Allwinner A20-based Cubieboard2.
<li>Introduced Dynamic Profiling, a <a href="https://man.openbsd.org/ddb">ddb(4)</a>-based and <a href="https://man.openbsd.org/gprof">gprof(1)</a>-compatible kernel profiling framework.
<!-- 2016/09/03 -->
<li>Imported LLVM 3.8.1.
<li>Added infrastructure to build <a href="https://man.openbsd.org/syspatch">syspatch(8)</a>.
<li>Added new Intel 10GbE <a href="https://man.openbsd.org/pci">pci(4)</a> ids.
<li>Made the SSP read-only on the sparc64 kernel by moving the randomdata section into RX text.
<li>Increased the socket buffer size limit from 256 KB to 2 MB.
<li>Added support for Bidirectional Forwarding Detection (RFC 5880/5881).
<li>Introduced a fork+exec privilege separation model in <a href="https://man.openbsd.org/httpd">httpd(8)</a> and <a href="https://man.openbsd.org/relayd">relayd(8)</a>.
<li>Added support for a multipoint-to-multipoint mode in <a href="https://man.openbsd.org/vxlan">vxlan(4)</a>
<li>Retired support for the zaurus platform.
<li>Switched <a href="https://man.openbsd.org/signify">signify(1)</a> to SHA512/256.
<li>Enabled a limited version of <a href="https://man.openbsd.org/doas">doas(1)</a> on the install media.
<li>Enabled PIE on arm.
<li>Used per-ifp tasks to process incoming packets.
<li>Added the necessary pieces to enable NAT on <a href="https://man.openbsd.org/enc">enc(4)</a> in <a href="https://man.openbsd.org/iked">iked(8)</a>.
<!-- 2016/09/02 -->
<li>Removed <a href="https://man.openbsd.org/ping">ping(8)</a> reverse DNS lookups by default in preparation for the merge with <a href="https://man.openbsd.org/ping6">ping6(8)</a>.
<li>Added the concept of "verified auth" to sessions, set via <a href="https://man.openbsd.org/ioctl">ioctl(2)</a> and allowing user and parent process recording to use to bypass authorization requirements.
<li>Enabled SGI for <a href="https://man.openbsd.org/iwm">iwm(4)</a> and <a href="https://man.openbsd.org/iwn">iwn(4)</a>.
<li>Added <a href="https://man.openbsd.org/signify">signify(1)</a> -z option for signing <a href="https://man.openbsd.org/gzip">gzip(1)</a> archives.
<li>Worked to make log.c similar in all daemons.
<li>Provided an implementation of red black trees using functions.
<li>Added <a href="https://man.openbsd.org/switch">switch(4)</a> support to <a href="https://man.openbsd.org/ifconfig">ifconfig(8)</a>.
<li>Turned <a href="https://man.openbsd.org/smtpd">smtpd(8)</a> server preference on for ciphers by default.
<!-- 2016/09/01 -->
<li>Added <a href="https://man.openbsd.org/ioctl">ioctls(2)</a> to get/set VCPU registers.
<li>Added a set of emulated <a href="https://man.openbsd.org/vmd">vmd(8)</a> legacy devices (PIT, PIC, RTC).
<li>Switched OpenBSD/armv7 to ARM EABI (soft-float).
<li>Switched <a href="https://man.openbsd.org/relayd">relayd(8)</a> to TLS session tickets to do TLS session resumption, no longer needing to store SSL session data on the server. Keys are rotated every two hours.
<li>Imported <a href="https://man.openbsd.org/switch">switch(4)</a>, a standalone in-kernel OpenFlow switch.
<li>Added <a href="https://man.openbsd.org/iatp">iatp(4)</a>, a driver for the i2c touchpad and touchscreen found on the chromebook pixel.
<li>Displayed all route flags in <a href="https://man.openbsd.org/route">route(8)</a> <code>get</code> and <code>show</code> and <a href="https://man.openbsd.org/netstat">netstat(1)</a> -r output.
<li>Retired support for the sparc platform.
<li>Converted openbsd.randomdata to read-only in userland and the amd64 and i386 kernels, allowing a read-only stack protector cookie, which will prevent spraying attacks.
<!-- 2016/08/31 -->
<li>Imported <a href="https://man.openbsd.org/acme-client">acme-client(1)</a>.
<li>Removed SIGTRAP, SIGFPE, SIGBUS and SIGSEGV handlers from <a href="https://man.openbsd.org/dump">dump(8)</a>.
<li>Enabled cd9660 in efiboot.
<li>Split the gre(4) interface into <a href="https://man.openbsd.org/gre">gre(4)</a> and <a href="https://man.openbsd.org/mobileip">mobileip(4)</a>.
<li>Stopped attempting to support IPv4-mapped IPv6 addresses in <a href="https://man.openbsd.org/ftpd">ftpd(8)</a>.
<li>Converted driver reports of RSSI in the 20-100 range via <a href="https://man.openbsd.org/ieee80211_ioctl">ieee80211_ioctl(9)</a> to negative values to fix dBm values displayed by <a href="https://man.openbsd.org/ifconfig">ifconfig(8)</a> "scan" with several drivers.
<li>Added <code>admin -C</code> option to <a href="https://man.openbsd.org/cvs">cvs(1)</a> to set a revision's commitid.
<li>Added -E and -S options to <a href="https://man.openbsd.org/rlog">rlog(1)</a> to configure revision separators.
<li>Added Estonian keyboard mapping.
<li>Stopped flushing RTF_CLONED children when adding a new <a href="https://man.openbsd.org/route">route(8)</a>.
<li>Drop <a href="https://man.openbsd.org/gif">gif(4)</a> support in <a href="https://man.openbsd.org/bridge">bridge(4)</a> in favor of <a href="https://man.openbsd.org/etherip">etherip(4)</a>.
<!-- 2016/08/30 -->
<li>Enabled raspos24 for <a href="https://man.openbsd.org/efifb">efifb(4)</a>, allowing qemu with UEFI.
<li>Fixed 32-bit time handling in <a href="https://man.openbsd.org/openssl">openssl(1)</a>.
<li>Fixed "audio0: different play and record parameters" errors by setting i2s "msb" and "bps" fields for both play and record directions.
<li>Used a per-table rwlock to serialize ART updates and walks, rather than taking the kernel lock.
<!-- 2016/08/29 -->
<li>Changed <a href="https://man.openbsd.org/le">le(4)</a> buffer address to enable support of I/O processor in the future.
<li>Updated to DejaVu fonts 2.37.
<!-- 2016/08/28 -->
<li>Retired obsolete <a href="https://man.openbsd.org/gre">gre(4)</a> ioctls.
<li>Enabled the use of the numpad Enter key on <a href="https://man.openbsd.org/cwm">cwm(1)</a> menus.
<!-- 2016/08/27 -->
<li>Added support for the SD/MMC clock to the generic clock code and used it in <a href="https://man.openbsd.org/sximmc">sximmc(4)</a>.
<!-- 2016/08/26 -->
<li>Added Allwinner H3 (xun8i-h3) support to <a href="https://man.openbsd.org/sxipio">sxipio(4)</a>.
<!-- 2016/08/25 -->
<li>Removed <a href="https://man.openbsd.org/pax">pax(1)</a> support for <code>-E none</code>.
<li>Made the full filesystem <a href="https://man.openbsd.org/pkg_check">pkg_check(8)</a> check optional and enabled bypass of a plist check for a file by doubling the use of -q.
<li>Stopped a <a href="https://man.openbsd.org/tmux">tmux(1)</a> crash when display-message is used without a client.
<!-- 2016/08/24 -->
<li>Changed <a href="https://man.openbsd.org/cpio">cpio(1)</a>'s -t option to be a modifier of -i and simplified the recognition of -f- and TAPE=- to mean stdin/stdout.
<!-- 2016/08/23 -->
<li>Added support for the usb clock on sun5i-a13.
<li>Re-enabled acpibkbd(4) by default.
<!-- 2016/08/22 -->
<li>Fixed negated <a href="https://man.openbsd.org/ssh">ssh(1)</a> address matching for address lists consisting of a single negated match.
<li>Added a clock reset signal and frequency-setting APIs.
<li>Enabled SNI support in <a href="https://man.openbsd.org/httpd">httpd(8)</a>.
<li>Provided an API that enables server-side SNI support, adding the ability to provide additional keypairs and allow the <a href="https://man.openbsd.org/tls_server">tls_server(3)</a> to determine which servername the client requested.
<li>Implemented interfaces to disable clocks and to enable/disable all clocks for a device.
<li>Removed the hardcoded clock frequencies for specific armv7 hardware by using the new clock API to get clock frequencies from the device tree and hardware controlling the clocks.
<li>Added code to <a href="https://man.openbsd.org/sxiccmu">sxiccmu(4)</a> to enable the PLL6 clock.
<!-- 2016/08/21 -->
<li>Restored IO performance on Cortex A9 systems which explicitly needed the PL310 L2's store buffer drained.
<li>Added a minimal ofw clock framework on armv7.
<li>Dynamically attached exuart(4) using the FDT.
<!-- 2016/08/20 -->
<li>Changed <a href="https://man.openbsd.org/login">login(1)</a> sleep to one second between retries.
<li>Replaced bcmmuart(4) with <a href="https://man.openbsd.org/com">com(4)</a>.
<!-- 2016/08/19 -->
<li>Marked armv7 device memory as execute-never to prevent a speculative instruction fetch to access it.
<li>Avoided overly large fragments on 4k disks by having <a href="https://man.openbsd.org/disklabel">disklabel(8)</a> start with a default fragsize of 2048, double it for large disks and then cap based on sector size.
<!-- 2016/08/18 -->
<li>Removed <a href="https://man.openbsd.org/sshd_config">sshd_config(5)</a> UseLogin option and support for having /bin/login manage login sessions.
<!-- 2016/08/17 -->
<li>Used additional information from dhcp to <a href="https://man.openbsd.org/autoinstall">autoinstall(8)</a>.
<li>Replaced sxiuart(4) with <a href="https://man.openbsd.org/com">com(4)</a>.
<li>Added Ralink RT5392 and additional RT5390 chipsets to the <a href="https://man.openbsd.org/ral">ral(4)</a> driver.
<li>Gave 5GHz APs a slight priority when a wireless device scans all bands at once and good matches exist in either band.
<!-- 2016/08/16 -->
<li>Tracked SSIDs in the leases file and switched to only considering leases from the current SSID when starting up <a href="https://man.openbsd.org/dhclient">dhclient(8)</a> on wifi interfaces.
<li>Eliminated caching for <a href="https://man.openbsd.org/fuse">fuse(4)</a>.
<li>Changed default to a)bort rather than c)ontinue when attempting to commit to <a href="https://man.openbsd.org/cvs">cvs(1)</a> without a log message, and allowed these responses in uppercase.
<!-- 2016/08/15 -->
<li>Added a version of <a href="https://man.openbsd.org/doas">doas(1)</a> allowing only root to drop privileges.
<li>Ensured cleaning of caches on the Cortex-A7 and other armv7 CPUs, fixing SATA problems on Allwinner A20-based boards.
<li>Imported the <a href="https://man.openbsd.org/sximmc">sximmc(4)</a> driver for the MMC/SD/SDIO controller integrated on Allwinner A1X/A20 SoCs.
<li>Prevented <a href="https://man.openbsd.org/rgephy">rgephy(4)</a> from attaching twice to the RTL8211E PHY on the Banana Pi.
<li>Made <a href="https://man.openbsd.org/httpd">httpd(8)</a> stricter with respect to TLS configuration, not allowing TLS and non-TLS to be configured on the same port or TLS option specification without a TLS listener, and ensuring TLS options are the same when a server is specified on the same address/port.
<li>Removed the <a href="https://man.openbsd.org/sshd">sshd(8)</a> -k option and retired configuration keywords applying to protocol 1, as well as the "protocol" keyword.
<!-- 2016/08/14 -->
<li>Fixed a hang seen on the Allwinner sun5i-r8 board during boot when the driver switches to interrupts and no terminal is attached.
<li>Aliased the deprecated qabs() and qdiv() to <a href="https://man.openbsd.org/llabs">llabs(3)</a> and <a href="https://man.openbsd.org/lldiv">lldiv(3)</a> as part of the ongoing removal of quad operators.
<li>Added <a href="https://man.openbsd.org/imxtemp">imxtemp(4)</a>, a temperature sensor for the i.MX6 SoC.
<li>Fixed setting the SMP bit in the auxiliary control register of the Cortex-A7, enabling it to use its caches consistently.
<!-- 2016/08/13 -->
<li>Added the <a href="https://man.openbsd.org/dwge">dwge(4)</a> driver for the Synopsis Designware GMAC core used on the Allwinner A20 SoCs and later Allwinner SoCs.
<li>Added a minimal ofw regulator framework.
<!-- 2016/08/12 -->
<li>Added ALPN support to libtls.
<!-- 2016/08/11 -->
<!-- 2016/08/10 -->
<li>Took TASKQ_CANTSLEEP away from the softnet taskq, which allows use of rw locks in the network stack.
<li>Began doing a TLB flush whenever an L1 slot is invalidated on armv7, fixing the pmap_fault_fixup issue on Cortex-A7 processors.
<li>Removed the <a href="https://man.openbsd.org/user">user(8)</a> encrypted password length check.
<li>Retired support for the armish platform.
<li>Dynamically attached <a href="https://man.openbsd.org/agtimer">agtimer(4)</a>, <a href="https://man.openbsd.org/omgpio">omgpio(4)</a> and omehci(4).
<!-- 2016/08/09 -->
<li>Fixed a serial console hang on the Allwinner sun5i-r8 by resetting the line speed when required in the sxiuart driver, now <a href="https://man.openbsd.org/com">com(4)</a>.
<li>Fixed an <a href="https://man.openbsd.org/ftp">ftp(1)</a> crash when the window is resized.
<!-- 2016/08/08 -->
<li>Added armv7 as an officially supported platform.
<li>Began mandatory enforcement of W^X, allowing violations only for binaries marked <code>wxneeded</code> executed from filesystems marked <code>wxallowed</code>.
<li>Normalized received prefixes in <a href="https://man.openbsd.org/ldpd">ldpd(8)</a>.
<li>Implemented mmc power sequencing in <a href="https://man.openbsd.org/imxesdhc">imxesdhc(4)</a>, making the sdo interface on the cubox-i function and detect the BCM4330 wireless.
<!-- 2016/08/07 -->
<li>Allowed <a href="https://man.openbsd.org/iwm">iwm(4)</a> to recover from fatal firmware errors by leaving the interface marked UP and scheduling the init task, as with <a href="https://man.openbsd.org/iwn">iwn(4)</a>.
<li>Added initial support for Raspberry Pi 2/3.
<!-- 2016/08/06 -->
<li>Added a generic ofw pinctrl framework.
<li>Implemented interrupt controller functionality in the i.MX6 GPIO driver <a href="https://man.openbsd.org/imxgpio">imxgpio(4)</a>, allowing hookup of Ethernet interrupt on the Nitrogen6x, SABRE Lite and WandBoard.
<li>Fixed <a href="https://man.openbsd.org/vxlan">vxlan(4)</a> multicast mode and added support for IPv6 tunnel endpoints.
<li>Dynamically attached <a href="https://man.openbsd.org/virtio">virtio(4)</a>, <a href="https://man.openbsd.org/plrtc">plrtc(4)</a>, <a href="https://man.openbsd.org/pluart">pluart(4)</a> and <a href="https://man.openbsd.org/intc">intc(4)</a> using the FDT.
<!-- 2016/08/05 -->
<li>Renamed a1xintc to <a href="https://man.openbsd.org/sxiintc">sxiintc(4)</a>.
<li>Dynamically attached sunxi drivers sxiahci(4), <a href="https://man.openbsd.org/sxidog">sxidog(4)</a>, <a href="https://man.openbsd.org/sxirtc">sxirtc(4)</a> and <a href="https://man.openbsd.org/ehci">ehci(4)</a>.
<li>Tightened <a href="https://man.openbsd.org/pledge">pledge(2)</a> restrictions on <a href="https://man.openbsd.org/route6d">route6d(8)</a> and added a -u switch to log route insertions and deletions.
<!-- 2016/08/04 -->
<li>Modified <a href="https://man.openbsd.org/ampintc">ampintc(4)</a> to attach dynamically and register itself as an interrupt controller. Switched all i.MX6 devices to the new FDT-aware interrupt establish API and enabled <a href="https://man.openbsd.org/imxgpc">imxgpc(4)</a>.
<li>Added <a href="https://man.openbsd.org/imxgpc">imxgpc(4)</a>, a driver for the i.MX6 General Power Controller, operating as a transparent interrupt controller by handing interrupt handling to its parent, the Cortex-A9 GIC.
<li>Fixed autonegotiation at 100BaseTX for AR8035 routers.
<li>Added <a href="https://man.openbsd.org/cnmac">cnmac(4)</a> jumbo frame support.
<li>Added <a href="https://man.openbsd.org/mainbus">mainbus(4)</a> support for pre-registering interrupts on armv7, allowing device drivers to establish interrupts before their interrupt controller attaches, solving various dependency problems.
<!-- 2016/08/03 -->
<li>Added a minimal <a href="https://man.openbsd.org/tpm">tpm(4)</a> 1.2 driver to <a href="https://man.openbsd.org/acpi">acpi(4)</a> to issue a "save state" command before suspending in order to fix suspend/resume on some newer amd64 machines.
<li>Prevented race conditions leading to missed notifications with <a href="https://man.openbsd.org/xen">xen(4)</a> devices due to multiple CPUs accessing pending event bits.
<li>Fixed <a href="https://man.openbsd.org/tmux">tmux(1)</a> minimum size when pane status line is enabled.
<li>Switched TLB maintenance primitives on armv7 to operate on the unified TLB, reducing the number of primitives. Simplified TLB flush handling.
<!-- 2016/08/02 -->
<li>Ensured initialization and reset of "lim" with each loop run in <a href="https://man.openbsd.org/ndp">ndp(8)</a>, avoiding possible invalid memory access.
<li>Allowed specification of an alternate socket path in <a href="https://man.openbsd.org/ripd">ripd(8)</a> to allow running multiple ripd instances.
<!-- 2016/08/01 -->
<li>Removed <a href="https://man.openbsd.org/vi">vi(1)</a>'s "directory" option and TMPDIR support.
<li>Implemented an FDT-aware interrupt establish API for armv7.
<li>Released <a href="https://www.openssh.com/txt/release-7.3">OpenSSH 7.3</a>.
<li>Set SDEV_UMASS on all umass devices and began probing all the LUNs a device reports, rather than assuming any ATAPI and UFI device always has only one LUN.
<!-- 2016/07/31 -->
<li>Edited <a href="https://man.openbsd.org/pmap">pmap(9)</a> on armv7 to flush TLB entries causing pmap_fault_fixup messages on Cortex-A53 and Cortex-A7.
<li>Set <a href="https://man.openbsd.org/hotplugd">hotplugd(8)</a> to close /dev/hotplug on exec() to ensure the daemon doesn't fail to restart due to a child process occupying the device.
<li>Adjusted <a href="https://man.openbsd.org/dhclient">dhclient(8)</a> to ask for DHO_BOOTFILE_NAME and DHO_TFTP_SERVER by default, potentially useful for autoinstall and able to provide information about what the dhcp server has done with the desired server name and file name info.
<li>Used <a href="https://man.openbsd.org/m_devget">m_devget(9)</a> to improve the <a href="https://man.openbsd.org/smsc">smsc(4)</a> driver.
<li>Added support for Xeon E3-1200 v5 host bridge and some Sunrise Point H PCH ids.
<li>Added recognition of Cortex A35 and Cortex A73 CPUs.
<!-- 2016/07/30 -->
<li>Added checks to <a href="https://man.openbsd.org/uvm_map">uvm_map(9)</a> for potential overflows and underflows, and a check for wraparound before the 'commit' phase of uvm_map() and uvm_mapanon() to prevent hitting assertions or corrupting data structures during that phase.
<li>Added <a href="https://man.openbsd.org/acpials">acpials(4)</a>, an acpi driver for ambient light sensors.
<li>Removed code paths associated with booting without an FDT in armv7.
<!-- 2016/07/29 -->
<li>Disabled receive ring slot accounting and added a periodic timer to work around missing completion events in <a href="https://man.openbsd.org/xnf">xnf(4)</a>.
<li>Moved <a href="https://man.openbsd.org/xen">xen(4)</a> interrupt handlers to dedicated task queues.
<li>Added a check to <a href="https://man.openbsd.org/uvm_map">uvm_map(9)</a> that arguments to isavail don't overflow, preventing a possible panic.
<li>Reduced number of sent RX and TX producer notifications for <a href="https://man.openbsd.org/xnf">xnf(4)</a>.
<li>Allowed <a href="https://man.openbsd.org/vmd">vmd(8)</a> to start a VM again after it has been terminated.
<li>Added support for common WebDAV methods in <a href="https://man.openbsd.org/relayd">relayd(8)</a>.
<li>Modified <a href="https://man.openbsd.org/smtpd">smtpd(8)</a> to log IP addresses during the authentication phase.
<!-- 2016/07/28 -->
<li>Implemented a true <a href="https://man.openbsd.org/rwlock">rwlock(9)</a> on i386.
<!-- 2016/07/27 -->
<li>Improved boundary checking for iovcnt in <a href="https://man.openbsd.org/ssh">ssh(1)</a>.
<li>Added support for interrupts to the Allwinner-R8 chip.
<li>Removed a feature allowing re-use of existing early bootstrap mappings to provide a physical address to <a href="https://man.openbsd.org/armv7/bus_space_map">bus_space_map(9)</a> in armv7.
<li>Added an open firmware interface to facilitate iterating over GPIOs.
<li>Added a check for zero in the PTE to improve ARM <a href="https://man.openbsd.org/pmap">pmap(9)</a> page removal.
<li>Increased the size of forkstat fields in <a href="https://man.openbsd.org/sysctl">sysctl(8)</a> and <a href="https://man.openbsd.org/vmstat">vmstat(8)</a> to accommodate large values.
<li>Explicitly excluded firmware from the fuzzy auto-reinstall list in <a href="https://man.openbsd.org/pkg_add">pkg_add(1)</a>.
<li>Modified <a href="https://man.openbsd.org/relayd">relayd(8)</a> to improve parsing of the host by following RFC 7230 Section 5.4 more strictly.
<!-- 2016/07/26 -->
<li>Added rewriting of backlight level after system resume in <a href="https://man.openbsd.org/acpi">acpi(4)</a>.
<li>Fixed signed char extension bugs in <a href="https://man.openbsd.org/printf">printf(1)</a>.
<li>Wrapped <a href="https://man.openbsd.org/fpgetround">fpgetround(3)</a> so internal calls go directly instead of through the PLT.
<li>Removed the restriction on armv7 that the kernel must be loaded at the bottom of physical memory, making it possible to boot on platforms with physical memory starting at 0x00000000, as the EFI bootloader will only attempt to load kernels at 0x10000000 and above.
<li>Moved to 6.0-current.
</ul>
![[BACK]](/icons/back.gif){kind=icon}
Return to plus61.html CVS log ![[TXT]](/icons/text.gif){kind=icon}
![[DIR]](/icons/dir.gif){kind=icon}
Up to [local] / www