===================================================================
RCS file: /cvsrepo/anoncvs/cvs/www/plus72.html,v
retrieving revision 1.2
retrieving revision 1.3
diff -u -r1.2 -r1.3
--- www/plus72.html 2022/09/28 16:50:40 1.2
+++ www/plus72.html 2022/09/29 07:05:26 1.3
@@ -96,18 +96,115 @@
Changes made between OpenBSD 7.1 and 7.2
+
+
+- OpenSSH version 9.1.
+
- Added Wacom One S (CTL-472) support to uwacom(4).
+
+
- Changed mfii(4) to allow the firmware more time to transition out of the UNDEFINED state.
+
+
- rpki-client(8) version 8.1.
+
- OpenBGPD version 7.7.
+
+
- Updated unbound(8) to 1.16.3.
+
+
+
+
- Updated awk(1) to the September 12, 2022 version.
+
- Updated libexpat to version 2.4.9.
+
- Fixed line length trimming in ps(1) -f mode.
+
+
- Added iked(8) connection statistics for successful and failed connections, error types, and other events that can be printed with "ikectl show stats".
+
- Added sftp(1) client support for "users-groups-by-id@openssh.com".
+
- Added a "user-groups-by-id@openssh.com" extension request to sftp-server(8) that allows the client to obtain user/group names that correspond to a set of uids/gids.
+
+
+
- Added RequiredRSASize for sshd(8). RSA keys that fail to meet this minimum length will be ignored for user and host-based authentication.
+
+
+
- Changed ftp(1) to use non-blocking connect(2) with ppoll(2) and timeout instead of alarm(3). This allows failing over to another IP address for hosts that have more than one.
+
+
+
- Changed ssh-agent(1) to attempt FIDO key signing without a PIN and use the error to determine whether a PIN is required and prompt only if necessary.
+
+
+
+
+
- Implemented the F_SHORTER filter in bgpd(8).
+
- Bumped rpki-client(8) version to 8.0.
+
- Adjusted rpki-client(8) chunked encoding handling.
+
+
+
- Allowed reading of MSR_TSC on vmm(4) Intel hosts.
+
+
+
+
+
- Moved the relayd(8) daemon(3) call to just before forking the children so the parent disassociates from its controlling terminal and shell, but not from its children.
+
- Made rpki-client(8) handle multiple X.509 locations by picking the first location and issuing a warning.
+
- Added apldcms(4), a driver for the touchpad on Apple M2 laptops.
+
+
- Implemented RRDP_ABORT in rpki-client(8).
+
- Accelerated wc(1) word counting.
+
- Added the recvmmsg system call that allows receiving multiple msghdrs at once.
+
- Added UFS2 support to landisk boot blocks.
+
- Made resolvd(8) write /etc/resolv.conf in a more atomic manner.
+
- Added softraid(4) RAID 1C boot support to sparc64.
+
- Made newer mime type definitions take precedence over existing ones in httpd(8).
+
+
- Fixed ssh(1) key_lookup() on tokens with built-in UV.
+
- Changed vmm(4) to send all port io emulation to userland.
+
- Added forest (-f) mode to ps(1).
+
- Updated awk(1) to the August 30, 2022 version.
+
- Added privilege separation to snmpd(8).
+
- Imported snmpd_metrics(8). This allows those who need to use net-snmpd the ability to access base snmpd(8) metrics.
+
- Added the new "configtest" action to rc.d(8).
+
- Stopped vnconfig(8) from printing the device name on failure.
+
- Changed ts(1) to parse the user format string once.
+
- Added qcgpio(4) and qciic(4) drivers for the Qualcomm GPIO and I2C controllers found on the SC8280XP SoC. These drivers make the keyboard, trackpoint and touchpad work on the ThinkPad X13s.
+
- Added apldc(4), apldchidev(4), apldckdb(4), and aplrtkit(4) to arm64. These drivers implement support for the Dockchannel-base keyboard found on Apple M2 laptops.
+
- Made sure only one bgpd(8) roa softreconfig runner is run at any time.
+
- Fixed tmux(1) window size reporting.
+
- Avoided a potential NULL dereference in ssl(3) ssl_set_pkey().
+
- Added a missing input validation step to pipex(4) mppe keylenbits.
+
- Added support for ASPA objects (draft-ietf-sidrops-aspa-profile-10) to rpki-client(8).
+
- Added initial support for mmio assist to vmd(4).
+
- In cases where a file in the rpki-client(8) validated cache directory is no longer valid while the newer file in the .rrdp directory is not yet valid, stopped rpki-client(8) from copying the old file over the newer file.
+
- Fixed the growth check in compress(1) and gzip(1) in cases of small files or files with sufficiently random data.
+
- Made fdisk(8) print a warning when a GPT partition start or end is outside the usable LBA area of the device.
+
- Changed rc.subr(8) to copy the message to stdout when using logger(1) to avoid needing to check syslog when running in debug mode.
+
- Fixed installboot(8) messaging when verbose (-v) and dry-run (-n) modes are combined with softraid(4).
+
- Fixed integer overflows in the iwm(4) and iwx(4) firmware file parsers.
+
- Changed the /sbin daemons dhcpleased(8), mountd(8), nfsd(8), pflogd(8), resolvd(8), slaacd(8), and unwind(8) to be dynamically linked to allow them to benefit from all the additional mitigations that dynamically linked executables gain. NFS mounting of /usr must now use statically configured IP addresses.
+
- Added a printed message when ld.so(1) fails inside execve(2) to clarify the failure mode when a dynamic executable is run while /usr isn't mounted.
+
- Updated unbound(8) to 1.16.2.
+
- Worked around MSI and INTx issues on the Qualcomm SC8280XP in acpipci(4). This makes the onboard nvme(4) work on the ThinkPad x13s.
+
- Made fdisk(8) print a warning when an MBR partition starts or extends past the end of the device.
+
- Updated libfido2 to 1.11.0.
+
- Added SPI support for interrupts on ThinkPad x13s.
+
- Added power button support to aplsmc(4).
+
- Added support for the changed layout of the "state" register on Apple's M2 SoC "Avalanche" performance cores to aplcpu(4).
+
- Added delay(9) implementations acpitimer_delay() and acpihpet_delay() to acpitimer(4) and acpihpet(4), respectively.
+
- Changed rpki-client(8) verbose filemode to print details about encapsulated certificates and allow specifying verbose filemode a second time to print in PEM format.
+
- Added delay_init() to provide basic delay(9) implementation management on i386 and amd64.
+
- Fixed a potential kernel panic when an msdosfs partition is filled by fixing instances where msdosfs passed a NULL proc pointer to detrunc().
+
- Added NFS client support to the luna88k RAMDISK kernel.
+
- Added support for agentx(3) to snmpd(8).
+
- Stopped building Mesa against llvm on 32-bit powerpc.
+
- Changed mips64, octeon, and loongson to trigger deferred clock interrupts from splx(9).
+
- Dropped detection code for Cyrix CPUs older than the Cyrix M2.
- Improved bioctl(8) RAID level parsing to check numeric levels before checking single character levels. This allows recognition of RAID 10 as a valid but unsupported level.
- Changed ssh(1) to attempt fido(4) key signing without a PIN and use the error code returned to fall back only if necessary. This avoids PIN prompts for FIDO tokens that don't require them.