version 1.2, 2022/09/28 16:50:40 |
version 1.3, 2022/09/29 07:05:26 |
|
|
<h3>Changes made between OpenBSD 7.1 and 7.2</h3> |
<h3>Changes made between OpenBSD 7.1 and 7.2</h3> |
<p> |
<p> |
|
|
|
<ul> |
|
<!-- 2022/09/26 --> |
|
<li>OpenSSH version 9.1. |
|
<li>Added Wacom One S (CTL-472) support to <a href="https://man.openbsd.org/uwacom.4">uwacom(4)</a>. |
|
<!-- 2022/09/25 --> |
|
<li>Changed <a href="https://man.openbsd.org/mfii.4">mfii(4)</a> to allow the firmware more time to transition out of the UNDEFINED state. |
|
<!-- 2022/09/24 --> |
|
<li><a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a> version 8.1. |
|
<li>OpenBGPD version 7.7. |
|
<!-- 2022/09/23 --> |
|
<li>Updated <a href="https://man.openbsd.org/unbound.8">unbound(8)</a> to 1.16.3. |
|
<!-- 2022/09/22 --> |
|
<!-- 2022/09/21 --> |
|
<!-- 2022/09/20 --> |
|
<li>Updated <a href="https://man.openbsd.org/awk.1">awk(1)</a> to the September 12, 2022 version. |
|
<li>Updated libexpat to version 2.4.9. |
|
<li>Fixed line length trimming in <a href="https://man.openbsd.org/ps.1">ps(1)</a> -f mode. |
|
<!-- 2022/09/19 --> |
|
<li>Added <a href="https://man.openbsd.org/iked.8">iked(8)</a> connection statistics for successful and failed connections, error types, and other events that can be printed with "ikectl show stats". |
|
<li>Added <a href="https://man.openbsd.org/sftp.1">sftp(1)</a> client support for "users-groups-by-id@openssh.com". |
|
<li>Added a "user-groups-by-id@openssh.com" extension request to <a href="https://man.openbsd.org/sftp-server.8">sftp-server(8)</a> that allows the client to obtain user/group names that correspond to a set of uids/gids. |
|
<!-- 2022/09/18 --> |
|
<!-- 2022/09/17 --> |
|
<li>Added RequiredRSASize for <a href="https://man.openbsd.org/sshd.8">sshd(8)</a>. RSA keys that fail to meet this minimum length will be ignored for user and host-based authentication. |
|
<!-- 2022/09/16 --> |
|
<!-- 2022/09/15 --> |
|
<li>Changed <a href="https://man.openbsd.org/ftp.1">ftp(1)</a> to use non-blocking <a href="https://man.openbsd.org/connect.2">connect(2)</a> with <a href="https://man.openbsd.org/ppoll.2">ppoll(2)</a> and timeout instead of <a href="https://man.openbsd.org/alarm.3">alarm(3)</a>. This allows failing over to another IP address for hosts that have more than one. |
|
<!-- 2022/09/14 --> |
|
<!-- 2022/09/13 --> |
|
<li>Changed <a href="https://man.openbsd.org/ssh-agent.1">ssh-agent(1)</a> to attempt FIDO key signing without a PIN and use the error to determine whether a PIN is required and prompt only if necessary. |
|
<!-- 2022/09/12 --> |
|
<!-- 2022/09/11 --> |
|
<!-- 2022/09/10 --> |
|
<!-- 2022/09/09 --> |
|
<li>Implemented the F_SHORTER filter in <a href="https://man.openbsd.org/bgpd.8">bgpd(8)</a>. |
|
<li>Bumped <a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a> version to 8.0. |
|
<li>Adjusted <a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a> chunked encoding handling. |
|
<!-- 2022/09/08 --> |
|
<!-- 2022/09/07 --> |
|
<li>Allowed reading of MSR_TSC on <a href="https://man.openbsd.org/vmm.4">vmm(4)</a> Intel hosts. |
|
<!-- 2022/09/06 --> |
|
<!-- 2022/09/05 --> |
|
<!-- 2022/09/04 --> |
|
<!-- 2022/09/03 --> |
|
<li>Moved the <a href="https://man.openbsd.org/relayd.8">relayd(8)</a> <a href="https://man.openbsd.org/daemon.3">daemon(3)</a> call to just before forking the children so the parent disassociates from its controlling terminal and shell, but not from its children. |
|
<li>Made <a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a> handle multiple X.509 locations by picking the first location and issuing a warning. |
|
<li>Added apldcms(4), a driver for the touchpad on Apple M2 laptops. |
|
<!-- 2022/09/02 --> |
|
<li>Implemented RRDP_ABORT in <a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a>. |
|
<li>Accelerated <a href="https://man.openbsd.org/wc.1">wc(1)</a> word counting. |
|
<li>Added the recvmmsg system call that allows receiving multiple msghdrs at once. |
|
<li>Added UFS2 support to landisk boot blocks. |
|
<li>Made <a href="https://man.openbsd.org/resolvd.8">resolvd(8)</a> write /etc/resolv.conf in a more atomic manner. |
|
<li>Added <a href="https://man.openbsd.org/softraid.4">softraid(4)</a> RAID 1C boot support to sparc64. |
|
<li>Made newer mime type definitions take precedence over existing ones in <a href="https://man.openbsd.org/httpd.8">httpd(8)</a>. |
|
<!-- 2022/09/01 --> |
|
<li>Fixed <a href="https://man.openbsd.org/ssh.1">ssh(1)</a> key_lookup() on tokens with built-in UV. |
|
<li>Changed <a href="https://man.openbsd.org/vmm.4">vmm(4)</a> to send all port io emulation to userland. |
|
<li>Added forest (-f) mode to <a href="https://man.openbsd.org/ps.1">ps(1)</a>. |
|
<li>Updated <a href="https://man.openbsd.org/awk.1">awk(1)</a> to the August 30, 2022 version. |
|
<li>Added privilege separation to <a href="https://man.openbsd.org/snmpd.8">snmpd(8)</a>. |
|
<li>Imported <a href="https://man.openbsd.org/snmpd_metrics.8">snmpd_metrics(8)</a>. This allows those who need to use net-snmpd the ability to access base <a href="https://man.openbsd.org/snmpd.8">snmpd(8)</a> metrics. |
|
<li>Added the new "configtest" action to <a href="https://man.openbsd.org/rc.d.8">rc.d(8)</a>. |
<!-- 2022/08/31 --> |
<!-- 2022/08/31 --> |
|
<li>Stopped <a href="https://man.openbsd.org/vnconfig.8">vnconfig(8)</a> from printing the device name on failure. |
|
<li>Changed <a href="https://man.openbsd.org/ts.1">ts(1)</a> to parse the user format string once. |
|
<li>Added <a href="https://man.openbsd.org/qcgpio.4">qcgpio(4)</a> and <a href="https://man.openbsd.org/qciic.4">qciic(4)</a> drivers for the Qualcomm GPIO and I2C controllers found on the SC8280XP SoC. These drivers make the keyboard, trackpoint and touchpad work on the ThinkPad X13s. |
|
<li>Added apldc(4), apldchidev(4), apldckdb(4), and aplrtkit(4) to arm64. These drivers implement support for the Dockchannel-base keyboard found on Apple M2 laptops. |
|
<li>Made sure only one <a href="https://man.openbsd.org/bgpd.8">bgpd(8)</a> roa softreconfig runner is run at any time. |
|
<li>Fixed <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> window size reporting. |
|
<li>Avoided a potential NULL dereference in <a href="https://man.openbsd.org/ssl.3">ssl(3)</a> ssl_set_pkey(). |
<!-- 2022/08/30 --> |
<!-- 2022/08/30 --> |
|
<li>Added a missing input validation step to <a href="https://man.openbsd.org/pipex.4">pipex(4)</a> mppe keylenbits. |
|
<li>Added support for ASPA objects (draft-ietf-sidrops-aspa-profile-10) to <a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a>. |
|
<li>Added initial support for mmio assist to <a href="https://man.openbsd.org/vmd.4">vmd(4)</a>. |
|
<li>In cases where a file in the <a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a> validated cache directory is no longer valid while the newer file in the .rrdp directory is not yet valid, stopped <a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a> from copying the old file over the newer file. |
<!-- 2022/08/29 --> |
<!-- 2022/08/29 --> |
|
<li>Fixed the growth check in <a href="https://man.openbsd.org/compress.1">compress(1)</a> and <a href="https://man.openbsd.org/gzip.1">gzip(1)</a> in cases of small files or files with sufficiently random data. |
|
<li>Made <a href="https://man.openbsd.org/fdisk.8">fdisk(8)</a> print a warning when a GPT partition start or end is outside the usable LBA area of the device. |
|
<li>Changed <a href="https://man.openbsd.org/rc.subr.8">rc.subr(8)</a> to copy the message to stdout when using <a href="https://man.openbsd.org/logger.1">logger(1)</a> to avoid needing to check syslog when running in debug mode. |
|
<li>Fixed <a href="https://man.openbsd.org/installboot.8">installboot(8)</a> messaging when verbose (-v) and dry-run (-n) modes are combined with <a href="https://man.openbsd.org/softraid.4">softraid(4)</a>. |
|
<li>Fixed integer overflows in the <a href="https://man.openbsd.org/iwm.4">iwm(4)</a> and <a href="https://man.openbsd.org/iwx.4">iwx(4)</a> firmware file parsers. |
|
<li>Changed the /sbin daemons <a href="https://man.openbsd.org/dhcpleased.8">dhcpleased(8)</a>, <a href="https://man.openbsd.org/mountd.8">mountd(8)</a>, <a href="https://man.openbsd.org/nfsd.8">nfsd(8)</a>, <a href="https://man.openbsd.org/pflogd.8">pflogd(8)</a>, <a href="https://man.openbsd.org/resolvd.8">resolvd(8)</a>, <a href="https://man.openbsd.org/slaacd.8">slaacd(8)</a>, and <a href="https://man.openbsd.org/unwind.8">unwind(8)</a> to be dynamically linked to allow them to benefit from all the additional mitigations that dynamically linked executables gain. NFS mounting of /usr must now use statically configured IP addresses. |
|
<li>Added a printed message when <a href="https://man.openbsd.org/ld.so.1">ld.so(1)</a> fails inside <a href="https://man.openbsd.org/execve.2">execve(2)</a> to clarify the failure mode when a dynamic executable is run while /usr isn't mounted. |
|
<li>Updated <a href="https://man.openbsd.org/unbound.8">unbound(8)</a> to 1.16.2. |
|
<li>Worked around MSI and INTx issues on the Qualcomm SC8280XP in <a href="https://man.openbsd.org/acpipci.4">acpipci(4)</a>. This makes the onboard <a href="https://man.openbsd.org/nvme.4">nvme(4)</a> work on the ThinkPad x13s. |
|
<li>Made <a href="https://man.openbsd.org/fdisk.8">fdisk(8)</a> print a warning when an MBR partition starts or extends past the end of the device. |
<!-- 2022/08/28 --> |
<!-- 2022/08/28 --> |
|
<li>Updated libfido2 to 1.11.0. |
|
<li>Added SPI support for interrupts on ThinkPad x13s. |
<!-- 2022/08/27 --> |
<!-- 2022/08/27 --> |
|
<li>Added power button support to <a href="https://man.openbsd.org/aplsmc.4">aplsmc(4)</a>. |
<!-- 2022/08/26 --> |
<!-- 2022/08/26 --> |
<!-- 2022/08/25 --> |
<!-- 2022/08/25 --> |
|
<li>Added support for the changed layout of the "state" register on Apple's M2 SoC "Avalanche" performance cores to <a href="https://man.openbsd.org/aplcpu.4">aplcpu(4)</a>. |
|
<li>Added <a href="https://man.openbsd.org/delay.9">delay(9)</a> implementations acpitimer_delay() and acpihpet_delay() to <a href="https://man.openbsd.org/acpitimer.4">acpitimer(4)</a> and <a href="https://man.openbsd.org/acpihpet.4">acpihpet(4)</a>, respectively. |
|
<li>Changed <a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a> verbose filemode to print details about encapsulated certificates and allow specifying verbose filemode a second time to print in PEM format. |
|
<li>Added delay_init() to provide basic <a href="https://man.openbsd.org/delay.9">delay(9)</a> implementation management on i386 and amd64. |
<!-- 2022/08/24 --> |
<!-- 2022/08/24 --> |
<!-- 2022/08/23 --> |
<!-- 2022/08/23 --> |
|
<li>Fixed a potential kernel panic when an msdosfs partition is filled by fixing instances where msdosfs passed a NULL proc pointer to detrunc(). |
|
<li>Added NFS client support to the luna88k RAMDISK kernel. |
|
<li>Added support for <a href="https://man.openbsd.org/agentx.3">agentx(3)</a> to <a href="https://man.openbsd.org/snmpd.8">snmpd(8)</a>. |
<!-- 2022/08/22 --> |
<!-- 2022/08/22 --> |
|
<li>Stopped building Mesa against llvm on 32-bit powerpc. |
<!-- 2022/08/21 --> |
<!-- 2022/08/21 --> |
|
<li>Changed mips64, octeon, and loongson to trigger deferred clock interrupts from <a href="https://man.openbsd.org/splx.9">splx(9)</a>. |
<!-- 2022/08/20 --> |
<!-- 2022/08/20 --> |
|
<li>Dropped detection code for Cyrix CPUs older than the Cyrix M2. |
<!-- 2022/08/19 --> |
<!-- 2022/08/19 --> |
<li>Improved <a href="https://man.openbsd.org/bioctl.8">bioctl(8)</a> RAID level parsing to check numeric levels before checking single character levels. This allows recognition of RAID 10 as a valid but unsupported level. |
<li>Improved <a href="https://man.openbsd.org/bioctl.8">bioctl(8)</a> RAID level parsing to check numeric levels before checking single character levels. This allows recognition of RAID 10 as a valid but unsupported level. |
<li>Changed <a href="https://man.openbsd.org/ssh.1">ssh(1)</a> to attempt <a href="https://man.openbsd.org/fido.4">fido(4)</a> key signing without a PIN and use the error code returned to fall back only if necessary. This avoids PIN prompts for FIDO tokens that don't require them. |
<li>Changed <a href="https://man.openbsd.org/ssh.1">ssh(1)</a> to attempt <a href="https://man.openbsd.org/fido.4">fido(4)</a> key signing without a PIN and use the error code returned to fall back only if necessary. This avoids PIN prompts for FIDO tokens that don't require them. |