[BACK]Return to plus73.html CVS log [TXT][DIR] Up to [local] / www

File: [local] / www / plus73.html (download) (as text)

Revision 1.5, Sun Mar 10 18:46:16 2024 UTC (2 months ago) by tj
Branch: MAIN
CVS Tags: HEAD
Changes since 1.4: +1 -0 lines

reroll plus pages for 7.5

<!doctype html>
<html lang=en id=plus>
<meta charset=utf-8>
<title>OpenBSD 7.3 Changelog</title>
<meta name="description" content="OpenBSD 7.3 changes">
<meta name="viewport" content="width=device-width, initial-scale=1">
<link rel="stylesheet" type="text/css" href="openbsd.css">
<link rel="canonical" href="https://www.openbsd.org/plus73.html">
<style>
strong {
	color: var(--red);
	font-weight: normal;
}

h3 {
	color: var(--blue);
}
</style>

<h2 id=OpenBSD>
<a href="index.html">
<i>Open</i><b>BSD</b></a>
7.3 Changelog
</h2>
<hr>

<p>
This selection is intended to include all important
and all user-visible changes.
For a complete record of all changes, please see the "source-changes"
mailing list, called "OpenBSD CVS"
in the <a href="https://marc.info/?l=openbsd-cvs">archives</a>,
or use <a href="anoncvs.html#CVS">CVS</a>.

<p>
For changes in other releases, click below:<br>
<a href="plus20.html">2.0</a>,
<a href="plus21.html">2.1</a>,
<a href="plus22.html">2.2</a>,
<a href="plus23.html">2.3</a>,
<a href="plus24.html">2.4</a>,
<a href="plus25.html">2.5</a>,
<a href="plus26.html">2.6</a>,
<a href="plus27.html">2.7</a>,
<a href="plus28.html">2.8</a>,
<a href="plus29.html">2.9</a>,
<a href="plus30.html">3.0</a>,
<a href="plus31.html">3.1</a>,
<a href="plus32.html">3.2</a>,
<a href="plus33.html">3.3</a>,
<a href="plus34.html">3.4</a>,
<a href="plus35.html">3.5</a>,
<a href="plus36.html">3.6</a>,
<br>
<a href="plus37.html">3.7</a>,
<a href="plus38.html">3.8</a>,
<a href="plus39.html">3.9</a>,
<a href="plus40.html">4.0</a>,
<a href="plus41.html">4.1</a>,
<a href="plus42.html">4.2</a>,
<a href="plus43.html">4.3</a>,
<a href="plus44.html">4.4</a>,
<a href="plus45.html">4.5</a>,
<a href="plus46.html">4.6</a>,
<a href="plus47.html">4.7</a>,
<a href="plus48.html">4.8</a>,
<a href="plus49.html">4.9</a>,
<a href="plus50.html">5.0</a>,
<a href="plus51.html">5.1</a>,
<a href="plus52.html">5.2</a>,
<a href="plus53.html">5.3</a>,
<br>
<a href="plus54.html">5.4</a>,
<a href="plus55.html">5.5</a>,
<a href="plus56.html">5.6</a>,
<a href="plus57.html">5.7</a>,
<a href="plus58.html">5.8</a>,
<a href="plus59.html">5.9</a>,
<a href="plus60.html">6.0</a>,
<a href="plus61.html">6.1</a>,
<a href="plus62.html">6.2</a>,
<a href="plus63.html">6.3</a>,
<a href="plus64.html">6.4</a>,
<a href="plus65.html">6.5</a>,
<a href="plus66.html">6.6</a>,
<a href="plus67.html">6.7</a>,
<a href="plus68.html">6.8</a>,
<a href="plus69.html">6.9</a>,
<a href="plus70.html">7.0</a>,
<br>
<a href="plus71.html">7.1</a>,
<a href="plus72.html">7.2</a>,
<a href="plus74.html">7.4</a>,
<a href="plus75.html">7.5</a>,
<a href="plus.html">current</a>.
<br>

<p>
<h3>Changes made between OpenBSD 7.2 and 7.3</h3>
<p>

<ul>
<!-- 2023/03/19 -->
<li>Added <a href="https://man.openbsd.org/rkpciephy.4">rkpciephy(4)</a>, a driver for the PCIe 3.0 PHY found on the RK356x.
<!-- 2023/03/18 -->
<li>Fixed a potential NULL dereference in the unpriv child expanding %{mda} in <a href="https://man.openbsd.org/smtpd.8">smtpd(8)</a>.
<!-- 2023/03/17 -->
<!-- 2023/03/16 -->
<li>Added <a href="https://man.openbsd.org/dwpcie.4">dwpcie(4)</a> code to bring up the PCIe controller on the RK356x.
<li>Bumped LibreSSL version to 3.7.2.
<!-- 2023/03/15 -->
<li>Fixed a number of out of bounds reads in DNS response parsing.
<li>Made WEP encryption work on <a href="https://man.openbsd.org/bwfm.4">bwfm(4)</a>.
<li>Released OpenSSH 9.3.
<li>Made <a href="https://man.openbsd.org/route.8">route(8)</a> sourceaddr print the used addresses for inet and inet6, or "default" if no sourceaddr is set and the default algorithm is used.
<li>Fixed <a href="https://man.openbsd.org/amdgpu.4">amdgpu(4)</a> failing to init on Steam Deck after drm 6.1 update.
<!-- 2023/03/14 -->
<!-- 2023/03/13 -->
<li>Switched alpha to machine-independent boot blocks.
<li>Made <a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a> filemode display the moment the signature path will expire and print details for .cer certificates.
<li>Extended <a href="https://man.openbsd.org/bgpctl.8">bgpctl(8)</a> show rib with new options "invalid" and "leaked." Extended <a href="https://man.openbsd.org/bgplgd.8">bgplgd(8)</a> to handle these options.
<li>Fixed usbpcap handler to properly detect overflows using TCHECK macros.
<li>Added "machine poweroff" command on luna88k bootloader.
<li>Added Kingston NV2 NVMe drive.
<!-- 2023/03/12 -->
<li>Added <a href="https://man.openbsd.org/rkcomphy.4">rkcomphy(4)</a>, a driver for the "naneng" combo PHY found on the RK356x (and RK3588). Only PCIe, SATA and USB3 support are implemented.
<li>Enabled <a href="https://man.openbsd.org/mvtemp.4">mvtemp(4)</a> on armv7.
<li>Added the Armada 380 temperature sensor to <a href="https://man.openbsd.org/mvtemp.4">mvtemp(4)</a>.
<!-- 2023/03/11 -->
<li>Bumped <a href="https://man.openbsd.org/bgpd.8">bgpd(8)</a> to version 7.8.
<!-- 2023/03/10 -->
<li>Added new <a href="https://man.openbsd.org/dt.4">dt(4)</a> ioctl DTIOCARGS to get the type of probe arguments.
<li>Implemented setting the parent clock for RK356x in <a href="https://man.openbsd.org/rkclock.4">rkclock(4)</a>.
<li>Compiled the <a href="https://man.openbsd.org/bgpd.8">bgpd(8)</a> output filter rules into per peer filter rules, for a potential substantial speedup.
<!-- 2023/03/09 -->
<li>Implemented ASPA support in <a href="https://man.openbsd.org/bgpd.8">bgpd(8)</a> RTR.
<li>Added a workaround for Intel Braswell/Cherry Trail mwait hang.
<li>Improved <a href="https://man.openbsd.org/bgpd.8">bgpd(8)</a> support for RFC9234.
<li>Improved <a href="https://man.openbsd.org/vnet.4">vnet(4)</a> to work better in busy conditions.
<!-- 2023/03/08 -->
<li>Added a <a href="https://man.openbsd.org/bpf.4">bpf(4)</a> timeout (BIOCSWTIMEOUT) between capturing a packet and making the buffer readable, preventing for example <a href="https://man.openbsd.org/pflogd.8">pflogd(8)</a> waking every half second even if there is nothing to read. By default this buffer is infinite and must be filled to become readable.
<li>Added a priority queue to <a href="https://man.openbsd.org/clockintr.9">clockintr(9)</a>.
<li>Stopped offering WEP in the installer if not supported.
<!-- 2023/03/07 -->
<li>Avoided enabling TSO on interfaces which are already attached to a bridge.
<li>Switched loongson ramdisk to use <a href="https://man.openbsd.org/installboot.8">installboot(8)</a> -p.
<li>Added initial support in the installer for guided disk encryption for amd64, i386, riscv64 and sparc64.
<li>Added initialization code for RK356x in <a href="https://man.openbsd.org/dwpcie.4">dwpcie(4)</a> to prevent kernel hangs.
<!-- 2023/03/06 -->
<li>Replaced broken UTF-8 logic in <a href="https://man.openbsd.org/wscons.4">wscons(4)</a> with a better one borrowed from Citrus.
<li>Switched all <a href="https://man.openbsd.org/iwx.4">iwx(4)</a> devices to -77 firmware images.
<li>Made <a href="https://man.openbsd.org/iwx.4">iwx(4)</a> get the primary channel number from AP beacon info, preventing problems on 40/80Mhz channels if there is a mismatch.
<li>Avoided trying to remove keys while doing crypto in hardware if the station is not active in <a href="https://man.openbsd.org/iwx.4">iwx(4)</a> firmware, fixing a firmware panic.
<li>Fixed <a href="https://man.openbsd.org/iwx.4">iwx(4)</a> session protection event duration.
<li>Added support for the new <a href="https://man.openbsd.org/iwx.4">iwx(4)</a> SCD_QUEUE_CONFIG command, required for adding/removing Tx queues on new firmware versions.
<li>Added support for the <a href="https://man.openbsd.org/iwx.4">iwx(4)</a> BAID allocation config command, required to set up Rx aggregation on new firmware.
<li>Added support for <a href="https://man.openbsd.org/iwx.4">iwx(4)</a> RLC config command, IWX_STA_MAC_DATA_API_S_VER_2 API, and PHY context cmd version 4.
<li>Added support for <a href="https://man.openbsd.org/iwx.4">iwx(4)</a> rate_n_flags API version 2 and removed fixed Tx rate support.
<li>Added support for <a href="https://man.openbsd.org/iwx.4">iwx(4)</a> TLC config command v4.
<li>Added support for <a href="https://man.openbsd.org/iwx.4">iwx(4)</a> firmware alive response version 6.
<!-- 2023/03/05 -->
<li>Made <a href="https://man.openbsd.org/rktemp.4">rktemp(4)</a> work on RK356x with U-Boot.
<!-- 2023/03/04 -->
<li>Implemented <a href="https://man.openbsd.org/rkpinctrl.4">rkpinctrl(4)</a> support for explicit routing to use alternative pin muxings.
<li>Added <a href="https://man.openbsd.org/ytphy.4">ytphy(4)</a>, a driver for the MotorComm YT8511 PHY.
<li>Synced proc.c from <a href="https://man.openbsd.org/vmd.8">vmd(8)</a> to enabled fork + exec for all processes.
<li>Enforced a lower bound of 80 bits for ECDSA.
<li>Capped the number of iterations in DSA and ECDSA signing.
<li>Moved to 7.3-beta.
<!-- 2023/03/03 -->
<li>Added polling to <a href="https://man.openbsd.org/tipmic.4">tipmic(4)</a> driver when starting from a cold boot, fixing a hang on boot.
<li>Added <a href="https://man.openbsd.org/execve.2">execve(2)</a> violations of <a href="https://man.openbsd.org/pinsyscall.2">pinsyscall(2)</a> policy to the daily mail, available by setting rc.conf.local(5) accounting=YES.
<li>Made <a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a> filemode print the certification path towards the Trust Anchor.
<!-- 2023/03/02 -->
<li>Added <a href="https://man.openbsd.org/mvortc.4">mvortc(4)</a>, a driver for the RTC on the ARMADA 38x series.
<li>Added <a href="https://man.openbsd.org/mvodog.4">mvodog(4)</a>, a driver for the watchdog on the ARMADA 38x series.
<li>Added <a href="https://man.openbsd.org/eephy.4">eephy(4)</a>, found on the Turris Omnia WAN port, to armv7.
<!-- 2023/03/01 -->
<!-- 2023/02/28 -->
<!-- 2023/02/27 -->
<li>In <a href="https://man.openbsd.org/mvneta.4">mvneta(4)</a>, passed MII flags depending on the phy mode specified in the device tree, making the WAN port work on the Turris Omnia.
<li>Turned off TSO if interface is added to layer 2 devices.
<!-- 2023/02/26 -->
<li>Added a kernel-facing API for <a href="https://man.openbsd.org/clockintr.9">clockintr(9)</a>.
<li>Added missing <a href="https://man.openbsd.org/wscons.4">wscons(4)</a> bounds checks when processing terminal escape sequences.
<li>Worked around an issue on the StarFive JH7100 SoC to make <a href="https://man.openbsd.org/dwge.4">dwge(4)</a> ethernet work reliably on the StarFive VisionFive 1 board.
<li>Added RK3588 support to <a href="https://man.openbsd.org/rkclock.4">rkclock(4)</a> and <a href="https://man.openbsd.org/rkpinctrl.4">rkpinctrl(4)</a>.
<li>In <a href="https://man.openbsd.org/rkgpio.4">rkgpio(4)</a>, handled different register layouts in modern Rockchip SoCs as seen in the RK356x and RK3588.
<!-- 2023/02/25 -->
<li>Unlocked <a href="https://man.openbsd.org/select.2">select(2)</a>, <a href="https://man.openbsd.org/pselect.2">pselect(2)</a>, <a href="https://man.openbsd.org/poll.2">poll(2)</a>, and <a href="https://man.openbsd.org/ppoll.2">ppoll(2)</a>.
<!-- 2023/02/24 -->
<li>Changed luna88k to use the default bsd.prog.mk "install" target.
<li>Switched mips64 <a href="https://man.openbsd.org/ld.lld.1">ld.lld(1)</a> to execute-only.
<li>Disabled jump tables by default on sparc64 in preparation for default execute-only.
<li>Stopped holding the vm_map lock while flushing pages in <a href="https://man.openbsd.org/msync.2">msync(2)</a> and <a href="https://man.openbsd.org/madvise.2">madvise(2)</a>. Prevents a 3-thread deadlock between <a href="https://man.openbsd.org/msync.2">msync(2)</a>, page-fault and <a href="https://man.openbsd.org/mmap.2">mmap(2)</a>.
<!-- 2023/02/23 -->
<li>Removed dangerous user-settable "addr" variable from MI bootloader, only compiling tty-related code on platforms where it makes sense for the bootloader to control it.
<li>Made <a href="https://man.openbsd.org/time.1">time(1)</a> work correctly in the luna88k bootloader.
<!-- 2023/02/22 -->
<!-- 2023/02/21 -->
<li>Fixed <a href="https://man.openbsd.org/ssh.1">ssh(1)</a> progressmeter corruption on wide displays.
<li>Added <a href="https://man.openbsd.org/lastcomm.1">lastcomm(1)</a> reporting for process kills due to <a href="https://man.openbsd.org/execve.2">execve(2)</a> from non-pinned syscall address
<li>Attached Apollo Lake HD Audio device to <a href="https://man.openbsd.org/azalia.4">azalia(4)</a>, enabling audio.
<li>Made <a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a> ensure there is no trailing garbage in signed objects.
<!-- 2023/02/20 -->
<li>Fixed a possible freeze in <a href="https://man.openbsd.org/execve.2">execve(2)</a> when a dual-cpu macppc started daemons during boot.
<li>Improved the default choice for the installer's install media disk question.
<li>Made <a href="https://man.openbsd.org/pinsyscall.2">pinsyscall(2)</a> always available for pledged processes.
<li>Added <a href="https://man.openbsd.org/psci.4">psci(4)</a> support for available deep idle states as advertised in device trees.
<li>Prevented potential panics by disallowing the <a href="https://man.openbsd.org/iwx.4">iwx(4)</a> init task from running in parallel to wakeup code during resume.
<!-- 2023/02/19 -->
<!-- 2023/02/18 -->
<!-- 2023/02/17 -->
<li>Used <a href="https://man.openbsd.org/pinsyscall.2">pinsyscall(2)</a> to tell the kernel the location of the execve stub in libc.so, so it must be called from that region in non-static binaries or else the process will be killed.
<li>Made the kernel validate the <a href="https://man.openbsd.org/execve.2">execve(2)</a> libc stub location.
<!-- 2023/02/16 -->
<li>Fixed MAC address register offsets in <a href="https://man.openbsd.org/dwqe.4">dwqe(4)</a>.
<li>Unlocked <a href="https://man.openbsd.org/utrace.2">utrace(2)</a>.
<!-- 2023/02/15 -->
<li>Added <a href="https://man.openbsd.org/pinsyscall.2">pinsyscall(2)</a>, to tell the kernel the location of the syscall stub in libc.so for a specified syscall.
<li>Relaxed kernel lock assertion within <a href="https://man.openbsd.org/tsleep.9">tsleep(9)</a>.
<li>Fixed a panic in <a href="https://man.openbsd.org/pfsync.4">pfsync(4)</a> when there are no data ready for bulk transfer.
<li>Added GMAC-related RK356x clocks to <a href="https://man.openbsd.org/rkclock.4">rkclock(4)</a>.
<li>Corrected the order of arguments for <a href="https://man.openbsd.org/shutdown.2">shutdown(2)</a> in <a href="https://man.openbsd.org/slaacd.8">slaacd(8)</a>, <a href="https://man.openbsd.org/dhcpleased.8">dhcpleased(8)</a> and <a href="https://man.openbsd.org/unwind.8">unwind(8)</a>.
<!-- 2023/02/14 -->
<li>Updated <a href="https://man.openbsd.org/perl.1">perl(1)</a> to 5.36.0.
<li>Fixed <a href="https://man.openbsd.org/openrsync.1">rsync(1)</a> handling of port numbers in rsync://host[:port]/module URLS.
<li>Added -mpls to the route(8) monitor case.
<!-- 2023/02/13 -->
<li>Added <a href="https://man.openbsd.org/scmi.4">scmi(4)</a>, a driver for the ARM System Control and Management Interface.
<li>Added support for RK356x TSADC clocks to <a href="https://man.openbsd.org/rkclock.4">rkclock(4)</a>.
<li>Added <a href="https://man.openbsd.org/dwqe.4">dwqe(4)</a>, a driver for the Synopsis DesignWare Ethernet QoS controller used on the NXP i.MX8MP, the Rockchip RK35XX series and Intel Elkhart Lake.
<li>Added support for the Shenzhen Tangcheng Technology TCS4525 voltage regulator to <a href="https://man.openbsd.org/fanpwr.4">fanpwr(4)</a>.
<li>Made efiboot fdt support device trees with NOPs in them (like the kernel version).
<li>Fixed an alignment issue in <a href="https://man.openbsd.org/iwx.4">iwx(4)</a> Rx descriptors.
<li>Ensured execute-only rules are applied to forked processes.
<!-- 2023/02/12 -->
<!-- 2023/02/11 -->
<li>Removed backwards compatible padded functions in the kernel.
<!-- 2023/02/10 -->
<li>Made <a href="https://man.openbsd.org/ls.1">ls(1)</a> work correctly in the luna88k bootloader.
<li>Added <a href="https://man.openbsd.org/iked.8">iked(8)</a> support for configuring multiple name servers.
<li>Made <a href="https://man.openbsd.org/tun.4">tun(4)</a> and <a href="https://man.openbsd.org/tap.4">tap(4)</a> event filters MP-safe.
<!-- 2023/02/09 -->
<li>Allowed <a href="https://man.openbsd.org/ssh-keygen.1">ssh-keygen(1)</a> and <a href="https://man.openbsd.org/ssh-keyscan.1">ssh-keyscan(1)</a> to accept -0hashalg=sha1|sha256 when outputting SSHFP fingerprints to allow algorithm selection.
<li>Added an <a href="https://man.openbsd.org/sshd.8">sshd(8)</a> -G option that parses and prints the effective configuration without attempting to load private keys and perform other checks.
<li>Stopped the installer from asking to initialize disks that have <a href="https://man.openbsd.org/softraid.4">softraid(4)</a> chunks.
<li>Ensured there is a terminating newline when adding a new entry to <a href="https://man.openbsd.org/ssh.1">ssh(1)</a> known_hosts.
<!-- 2023/02/08 -->
<li>Prevented an <a href="https://man.openbsd.org/openssl.1">openssl(1)</a> crash upon inspecting malformed PKCs7 files.
<!-- 2023/02/07 -->
<li>Switched sparc64 to default --execute-only.
<li>Fixed arbitrary memory read in x509 GENERAL_NAME_cmp().
<li>Extended <a href="https://man.openbsd.org/disklabel.8">disklabel(8)</a> template parsing to allow "[mount point] *" as the specification for putting the maximum available free space into a partition, and extended command line parsing to allow "T-" as the specification to read the template from stdin.
<li>Added a <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> L modifier like P, W, S to loop over clients.
<!-- 2023/02/06 -->
<li>Made <a href="https://man.openbsd.org/vmd.8">vmd(8)</a> scan the pci bus to determine bootorder strings.
<li>Prevented <a href="https://man.openbsd.org/smtpd.8">smtpd(8)</a> abort due to a connection from a local, scoped ipv6 address.
<li>Made <a href="https://man.openbsd.org/tcpdrop.8">tcpdrop(8)</a> accept netstat-style address.port syntax.
<li>Added -f to list-clients in <a href="https://man.openbsd.org/tmux.1">tmux(1)</a>.
<!-- 2023/02/05 -->
<li>Disallowed multiple consecutive line separators in <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> menu.
<li>Extended display-message to work for control clients in <a href="https://man.openbsd.org/tmux.1">tmux(1)</a>.
<li>Switched mips64 to default --execute-only.
<li>Made <a href="https://man.openbsd.org/ld.bfd.1">ld.bfd(1)</a> default to --execute-only on mips64.
<li>Switched mips64 linker scripts to the templates that order .rodata before .text.
<!-- 2023/02/04 -->
<li>Added <a href="https://man.openbsd.org/ufshci.4">ufshci(4)</a>, a driver for Universal Flash Storage (UFS) Host Controllers.
<li>Made <a href="https://man.openbsd.org/ld.bfd.1">ld.bfd(1)</a> default to --execute-only on amd64.
<li>Set <a href="https://man.openbsd.org/sncodec.4">sncodec(4)</a> and <a href="https://man.openbsd.org/tascodec.4">tascodec(4)</a> default volume to -30dB instead of the hardware default of 0dB (maximum).
<!-- 2023/02/03 -->
<li>Added <a href="https://man.openbsd.org/sncodec.4">sncodec(4)</a>, a driver for the TI SNO12776/TAS2764 digital amplifier.
<li>Added ASPA to <a href="https://man.openbsd.org/bgplg.8">bgplg(8)</a>.
<li>Added ASPA to <a href="https://man.openbsd.org/bgplgd.8">bgplgd(8)</a> FastCGI server.
<!-- 2023/02/02 -->
<li>Made sparc64 <a href="https://man.openbsd.org/ld.lld.1">ld.lld(1)</a> --execute-only by default (but <a href="https://man.openbsd.org/ld.lld.1">ld.lld(1)</a> is not the default).
<li>Made --execute-only <a href="https://man.openbsd.org/ld.lld.1">ld.lld(1)</a> the default on powerpc.
<li>Fixed vlans on <a href="https://man.openbsd.org/em.4">em(4)</a> sparc64 systems.
<li>Denied "pipex no" tunnel setting for <a href="https://man.openbsd.org/pppx.4">pppx(4)</a> interfaces.
<!-- 2023/02/01 -->
<li>Enabled i386 and alpha <a href="https://man.openbsd.org/ld.so.1">ld.so(1)</a> execute-only text LOAD.
<li>Fixed resizing partitions on an auto-allocated disk that had a boot partition.
<!-- 2023/01/31 -->
<li>Mitigated against classic BROP on systems without execute-only mmu hardware-enforcement.
<!-- 2023/01/30 -->
<li>Added execute-only support for macppc G5.
<li>Enabled --execute-only <a href="https://man.openbsd.org/ld.so.1">ld.so(1)</a> for powerpc.
<li>Reworked arm64 cpu_init_secondary() to allow use for both initial powerup and wakeup from deeper sleep states.
<!-- 2023/01/29 -->
<li>Replaced selwakeup() with KNOTE() in <a href="https://man.openbsd.org/pppac.4">pppac(4)</a> and <a href="https://man.openbsd.org/pppx.4">pppx(4)</a>.
<li>Added saving and restoring guest pkru to <a href="https://man.openbsd.org/vmm.4">vmm(4)</a>.
<li>Stopped being paranoid about hypervisor correct PKU handling.
<li>Permitted --execute-only <a href="https://man.openbsd.org/ld.lld.1">ld.lld(1)</a> on powerpc, not as default.
<li>Switched powerpc <a href="https://man.openbsd.org/ld.so.1">ld.so(1)</a> to --execute-only.
<!-- 2023/01/28 -->
<li>Made it possible to set keyboard layout(s) on arm64's ramdisk.
<li>Permitted --execute-only <a href="https://man.openbsd.org/ld.lld.1">ld.lld(1)</a> on i386, not as default.
<li>Made --execute-only <a href="https://man.openbsd.org/ld.lld.1">ld.lld(1)</a> the default on powerpc64.
<!-- 2023/01/27 -->
<li>Switched to use <a href="https://man.openbsd.org/llvm-strip.1">llvm-strip(1)</a> on architectures that use <a href="https://man.openbsd.org/ld.lld.1">ld.lld(1)</a>.
<li>Made <a href="https://man.openbsd.org/ld.lld.1">ld.lld(1)</a> --execute-only work on powerpc64.
<!-- 2023/01/26 -->
<!-- 2023/01/25 -->
<li>Fixed unbounded variable expansion in <a href="https://man.openbsd.org/pkg-config.1">pkg-config(1)</a>.
<li>Switched armv7 <a href="https://man.openbsd.org/gptimer.4">gptimer(4)</a> to <a href="https://man.openbsd.org/clockintr.9">clockintr(9)</a>.
<li>Implemented powerpc64 execute-only mappings by using the Virtual Page Class Key Protection mechanism provided by modern POWER CPUs.
<!-- 2023/01/24 -->
<li>Permitted execute-only on ppc64 <a href="https://man.openbsd.org/ld.lld.1">ld.lld(1)</a>, not as default.
<li>Fixed a crash in <a href="https://man.openbsd.org/iwx.4">iwx(4)</a> when connecting to WEP networks via <a href="https://man.openbsd.org/ifconfig.8">ifconfig(8)</a> join.
<li>Implemented <a href="https://man.openbsd.org/bgpctl.8">bgpctl(8)</a> "show rib avs invalid" to show all invalid ASPA paths.
<li>Hooked up the same USB device drivers as arm64/conf/GENERIC on riscv64 GENERIC and enabled access to <a href="https://man.openbsd.org/usb.4">usb(4)</a>, <a href="https://man.openbsd.org/ugen.4">ugen(4)</a>, <a href="https://man.openbsd.org/ulpt.4">ulpt(4)</a>, <a href="https://man.openbsd.org/ucom.4">ucom(4)</a> and <a href="https://man.openbsd.org/ujoy.4">ujoy(4)</a>.
<li>Printed the ASPA validation state (avs) in various <a href="https://man.openbsd.org/bgpctl.8">bgpctl(8)</a> show rib outputs.
<li>Implemented ASPA validation and reload logic on ASPA set changes in <a href="https://man.openbsd.org/bgpd.8">bgpd(8)</a>.
<li>For execute-only, added a specific routine to fetch instructions from sparc64 userland when doing floating-point emulation.
<!-- 2023/01/23 -->
<li>Matched unknown ATI display devices as amdgpu in <a href="https://man.openbsd.org/fw_update.8">fw_update(8)</a>.
<li>Made <a href="https://man.openbsd.org/ptrace.2">ptrace(2)</a> use compatible with execute-only.
<li>Added Backtab key support to <a href="https://man.openbsd.org/tmux.1">tmux(1)</a>
<!-- 2023/01/22 -->
<li>Adjusted <a href="https://man.openbsd.org/vmd.8">vmd(8)</a> error paths to avoid removal of configuration-defined (known) VMs on error.
<!-- 2023/01/21 -->
<li>Enabled <a href="https://man.openbsd.org/ld.lld.1">ld.lld(1)</a> --exec-only by default on amd64.
<li>Improved <a href="https://man.openbsd.org/qcrtc.4">qcrtc(4)</a> RTC reliability.
<!-- 2023/01/20 -->
<li>Added a flag to <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> display-menu to select the menu item chosen first.
<li>Marked amd64 <a href="https://man.openbsd.org/ld.so.1">ld.so(1)</a> execute-only.
<li>On amd64 cpu with the PKU feature, forced the PKU register to inhibit data read against PKU key1 memory on every exit from kernel to userland and abort the process on (some) traps into the kernel if the register is changed, offering execute-only functionality on most modern intel and AMD cpus.
<li>Made <a href="https://man.openbsd.org/ppb.4">ppb(4)</a> bus range available after detaching, fixing unplugging and replugging thunderbolt devices that were plugged in when the machine was booted.
<!-- 2023/01/19 -->
<li>Revised arm64 implementation of <a href="https://man.openbsd.org/pmap_protect.9">pmap_protect(9)</a> in preparation for execute-only support.
<li>Restricted <a href="https://man.openbsd.org/vmm.4">vmm(4)</a> exposed cpuid extended feature flags.
<!-- 2023/01/18 -->
<li>Created and installed <a href="https://man.openbsd.org/sshd.8">sshd(8)</a> random relink kit.
<!-- 2023/01/17 -->
<li>Added a <a href="https://man.openbsd.org/sshd.8">sshd(8)</a> -V (version) option.
<li>Disabled policy checks by default in the X.509 verifier.
<li>Made the installer skip interface configuration questions when no interfaces are available.
<li>Supported -1 without -N for list-keys in <a href="https://man.openbsd.org/tmux.1">tmux(1)</a>.
<li>Removed the <a href="https://man.openbsd.org/OpenBSD-7.2/elansc.4">elansc(4)</a> driver for AMD Elan SC520 System Controller.
<li>Added a configurable <a href="https://man.openbsd.org/sshd_config.5">sshd_config(5)</a> UnusedConnectionTimeout option to terminate client connections that have no open channels.
<!-- 2023/01/16 -->
<li>Switched arm <a href="https://man.openbsd.org/amptimer.4">amptimer(4)</a> and <a href="https://man.openbsd.org/armv7/agtimer.4">agtimer(4/armv7)</a> to <a href="https://man.openbsd.org/clockintr.9">clockintr(9)</a>.
<li>Switched armv7 <a href="https://man.openbsd.org/dmtimer.4">dmtimer(4)</a> and <a href="https://man.openbsd.org/sxitimer.4">sxitimer(4)</a> to <a href="https://man.openbsd.org/clockintr.9">clockintr(9)</a>.
<li>In <a href="https://man.openbsd.org/disklabel.8">disklabel(8)</a>, used the size of the largest chunk of free space, not the total of all such chunks, when checking for sufficient space to add a partition.
<!-- 2023/01/15 -->
<!-- 2023/01/14 -->
<li>Changed arm64 suspend idle loop from WFE to WFI, avoiding spurious wakeups while other CPUs are still active.
<li>Changed <a href="https://man.openbsd.org/vmd.8">vmd(8)</a> to only open /dev/vmm once, having the parent process send the fd to the vmm child process.
<li>Added <a href="https://man.openbsd.org/dwge.4">dwge(4)</a> support for "enhanced descriptor" mode found on some variants of the Synopsys DesignWare GMAC.
<li>Changed the <a href="https://man.openbsd.org/ld.lld.1">ld.lld(1)</a> default to --execute-only on amd64 and sparc64.
<li>Created /dev/efi on amd64 and arm64.
<li>Implemented access to EFI variables ESRT through an <a href="https://man.openbsd.org/ioctl.2">ioctl(2)</a> interface compatible with what FreeBSD and NetBSD have.
<!-- 2023/01/13 -->
<li>Made amd64 cpuid recognize protection keys for supervisor mode (PKS).
<li>Fixed .wav files generated by <a href="https://man.openbsd.org/aucat.1">aucat(1)</a> by using extended header format.
<li>Added aspa-set to openbgpd config output in <a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a>, which can be disabled with the -A flag.
<!-- 2023/01/12 -->
<li>Switched sparc64 to <a href="https://man.openbsd.org/clockintr.9">clockintr(9)</a>.
<li>Added a "Host" line to the output of <a href="https://man.openbsd.org/ssh.1">ssh(1)</a> -G showing the original host argument.
<li>Made <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> recognize pasted texts wrapped in bracket paste sequences, rather than only forwarding to the program inside.
<li>Made "!" drop into a <a href="https://man.openbsd.org/ksh.1">ksh(1)</a> environment rather than the more limited <a href="https://man.openbsd.org/sh.1">sh(1)</a> during install.
<li>Added signal as a full argument name for <a href="https://man.openbsd.org/timeout.1">timeout(1)</a> -s.
<li>Prevented possible kernel crashes by dropping TCP packets with destination port 0 in <a href="https://man.openbsd.org/pf.4">pf(4)</a> and the stack.
<li>Added cursor back tab support to <a href="https://man.openbsd.org/wscons.4">wscons(4)</a> VT100 emulation.
<li>Added aixterm bright color sequences (SGR 90-97 and 100-107).
<!-- 2023/01/11 -->
<li>Implemented execute-only mappings on sun4u.
<li>Added <a href="https://man.openbsd.org/ld.so.1">ld.so(1)</a> linker scripts on m88k and sh.
<li>Prepared the mips64 (octeon, loongson) kernel to run --execute-only <a href="https://man.openbsd.org/ld.so.1">ld.so(1)</a>.
<li>Switched hppa, arm64 and riscv64 to --execute-only by default.
<li>Added ASPA validation functions to the <a href="https://man.openbsd.org/bgpd.8">bgpd(8)</a> RDE.
<!-- 2023/01/10 -->
<li>Enabled TLB read inhibit on OCTEON Plus and newer SoCs.
<li>Added mips64 TLB bypass for instruction emulation.
<li>Added MIPS64r2 TLB read inhibit support.
<li>Added retguard to amd64 syscalls.
<li>Prepared hppa <a href="https://man.openbsd.org/ld.so.1">ld.so(1)</a> to support execute-only text.
<li>Switched luna88k boot loader to MI boot code.
<li>Fixed frame buffer corruption and additional bugs after wakeup on Apple Silicon laptops and the Lenovo x13s.
<li>Added short options for <a href="https://man.openbsd.org/timeout.1">timeout(1)</a> --foreground and --preserve-status.
<!-- 2023/01/09 -->
<li>Hid the WAITPKG cpu feature from <a href="https://man.openbsd.org/vmm.4">vmm(4)</a>  guests, preventing invalid instruction exceptions. Also added WAITPKG feature identification to i386 and amd64.
<li>Set the arm64 default for the machdep.lidaction <a href="https://man.openbsd.org/sysctl.8">sysctl(8)</a> to 1.
<li>Implemented suspend on lid close for <a href="https://man.openbsd.org/aplsmc.4">aplsmc(4)</a>.
<li>Generated "combreloc" scripts for the new <a href="https://man.openbsd.org/ld.bfd.1">ld.bfd(1)</a> linker script template.
<li>Adopted a workaround for a bug in the ARM generic timer on the A64, disabling userland timecounter support on affected hardware pending a similar libc workaround.
<li>Prepared riscv64 <a href="https://man.openbsd.org/ld.so.1">ld.so(1)</a> for execute-only.
<li>Adjusted hppa linker scripts to make it possible to make .text execute-only.
<li>Implemented --execute-only (and made --no-execute-only do the opposite) for <a href="https://man.openbsd.org/ld.bfd.1">ld.bfd(1)</a> pending changes to the linker scripts.
<li>Made hppa assembly code avoid reads from .text and built C code using -fno-jump-tables to prepare it for execute-only.
<li>Made <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> tty-keys accept \007 as terminator to OSC 10 or 11.
<!-- 2023/01/08 -->
<li>Added thread names to vm processes in <a href="https://man.openbsd.org/vmd.8">vmd(8)</a>.
<!-- 2023/01/07 -->
<li>Added the <a href="https://man.openbsd.org/audioctl.8">audioctl(8)</a> -w option to display variables periodically.
<li>Made <a href="https://man.openbsd.org/ld.lld.1">ld.lld(1)</a> accept --executable-only on aarch64, riscv64 and mips64.
<li>Made net80211 drop beacons received on secondary HT/VHT channels, preventing <a href="https://man.openbsd.org/iwm.4">iwm(4)</a> firmware panics and making association work with 11ac APs which transmit beacons on channels other than their primary.
<li>Made use of the PA-RISC architecture supporting execute-only mappings with a "remain at privilege level 3" gateway page.
<!-- 2023/01/06 -->
<li>Removed copystr(9) from public API.
<!-- 2023/01/05 -->
<li>Added an <a href="https://man.openbsd.org/sshd_config.5">sshd_config(5)</a> ChannelTimeouts directive that allows configurable channel inactivity timeouts.
<li>Ensured that the signal trampoline can be PROT_EXEC everywhere.
<li>Added a dummy --no-execute-only option to <a href="https://man.openbsd.org/ld.bfd.1">ld.bfd(1)</a> for compatibility with <a href="https://man.openbsd.org/ld.lld.1">ld.lld(1)</a> architectures, useful for ports.
<li>Ensured <a href="https://man.openbsd.org/pfctl.8">pfctl(8)</a> correctly adds addresses to the undefined/inactive
table.
<!-- 2023/01/04 -->
<li>Suppressed <a href="https://man.openbsd.org/sftp.1">sftp(1)</a> "Connection closed" messages in quiet mode.
<li>Added a per eBGP session role to <a href="https://man.openbsd.org/bgpd.conf.5">bgpd.conf(5)</a>.
<!-- 2023/01/03 -->
<li>Made <a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a> print RRDP Session ID and Serial in verbose mode.
<li>Disabled display backlights on Apple Silicon laptops when suspending in
<a href="https://man.openbsd.org/gpiobl.4">gpiobl(4)</a>.
<!-- 2023/01/02 -->
<li>Fixed the alpha check for BWX extensions, repairing operations on 21164
processors lacking BWX.
<li>Fixed a bug in <a href="https://man.openbsd.org/ssh.1">ssh(1)</a> PermitRemoteOpen where it ignored initial arguments other than "any" or "none."
<!-- 2023/01/01 -->
<li>Used stoeplitz to generate a hash/flowid for <a href="https://man.openbsd.org/pf.4">pf(4)</a> state keys.
<li>Changed <a href="https://man.openbsd.org/df.1">df(1)</a> to round up fractional percentages.
<li>Enabled <a href="https://man.openbsd.org/aplpcie.4">aplpcie(4)</a> power management for PCI devices.
<!-- 2022/12/31 -->
<li>Updated <a href="https://man.openbsd.org/drm.4">drm(4)</a> to linux 6.1.2.
<!-- 2022/12/30 -->
<li>Updated libcbor to 0.10.0.
<li>Let luna88k's bootloader pass RB_GOODRANDOM to the kernel.
<li>Fixed <a href="https://man.openbsd.org/bwfm.4">bwfm(4)</a> issues with suspend/resume and possible firmware crashes on the M2 Macbook Air.
<!-- 2022/12/29 -->
<li>Added <a href="https://man.openbsd.org/uftdi.4">uftdi(4)</a> support for FTDI FT232R.
<!-- 2022/12/28 -->
<li>Implemented <a href="https://man.openbsd.org/iostat.8">iostat(8)</a> periodic display with <a href="https://man.openbsd.org/setitimer.2">setitimer(2)</a>.
<li>Implemented execute-only mappings in RISC-V.
<!-- 2022/12/27 -->
<!-- 2022/12/26 -->
<li>Provided a detailed e820 memory map when booting <a href="https://man.openbsd.org/vmd.8">vmd(8)</a> guests with SeaBIOS.
<li>Repaired <a href="https://man.openbsd.org/ddb.4">ddb(4)</a> input on macppc <a href="https://man.openbsd.org/adb.4">adb(4)</a> machines.
<li>Made <a href="https://man.openbsd.org/rc.8">rc(8)</a> reorder libraries in parallel to <a href="https://man.openbsd.org/netstart.8">netstart(8)</a>, as this does not depend on network access.
<li>Added support for a personal <a href="https://man.openbsd.org/units.1">units(1)</a> library by passing -f multiple times.
<!-- 2022/12/25 -->
<!-- 2022/12/24 -->
<li>Made the USB ports work after a suspend/resume cycle on the x13s.
<li>Made .text (and .btext) execute-only on arm64.
<li>Enabled <a href="https://man.openbsd.org/pcagpio.4">pcagpio(4)</a> and <a href="https://man.openbsd.org/pcamux.4">pcamux(4)</a>, making the SFP port on the ClearFog Base (CN9130) work.
<li>Built libc with executable-only ELF .text segments on arm64.
<!-- 2022/12/23 -->
<li>Implemented zero-copy operations on virtqueues in <a href="https://man.openbsd.org/vmd.8">vmd(8)</a>.
<li>Added arm64 detection of EPAN feature bit.
<li>Avoided use of 1GB mappings
<li>Prevented an <a href="https://man.openbsd.org/iwx.4">iwx(4)</a> firmware error when authentication to the AP times out.
<!-- 2022/12/22 -->
<li>Allowed configuration of interfaces by lladdr in the installer.
<li>Moved the flag mappings displayed by "route show" from <a href="https://man.openbsd.org/netstat.1">netstat(1)</a> to <a href="https://man.openbsd.org/route.8">route(8)</a>.
<!-- 2022/12/21 -->
<li>Implemented wakeup interrupt handling in <a href="https://man.openbsd.org/agintc.4">agintc(4)</a>.
<!-- 2022/12/20 -->
<li>Fixed a panic seen with <a href="https://man.openbsd.org/rge.4">rge(4)</a> RTL8125 with MCLGETL.
<li>Added <a href="https://man.openbsd.org/kdump.1">kdump(1)</a> argument support for msyscall, pledge, unveil, __realpath, ypconnect and __tmpfd.
<!-- 2022/12/19 -->
<li>Added <a href="https://man.openbsd.org/mimmutable.2">mimmutable(2)</a> and <a href="https://man.openbsd.org/munmap.2">munmap(2)</a> reporting to <a href="https://man.openbsd.org/kdump.1">kdump(1)</a>.
<li>Prevented a possible crash when a <a href="https://man.openbsd.org/ugen.4">ugen(4)</a> device is detached.
<!-- 2022/12/18 -->
<li>Added WTRAPPED option for <a href="https://man.openbsd.org/waitid.2">waitid(2)</a> to control whether CMD_TRAPPED state changes are reported.
<li>Prevented <a href="https://man.openbsd.org/bioctl.8">bioctl(8)</a> -d detach of the boot volume.
<li>Stopped claiming <a href="https://man.openbsd.org/nc.1">nc(1)</a> connection success in udp mode unless true.
<li>Encoded unexpected SANs before printing in <a href="https://man.openbsd.org/acme-client.1">acme-client(1)</a>.
<li>Disabled the keyboard on the Samsung Galaxy Book Go pending interrupt storm fix in <a href="https://man.openbsd.org/qcgpio.4">qcgpio(4)</a>.
<!-- 2022/12/17 -->
<li>Unlocked <a href="https://man.openbsd.org/minherit.2">minherit(2)</a>.
<li>Added <a href="https://man.openbsd.org/aplefuse.4">aplefuse(4)</a>, a driver for the eFuses on Apple Silicon SoCs.
<!-- 2022/12/16 -->
<li>Corrected <a href="https://man.openbsd.org/top.1">top(1)</a> display of online CPUs.
<!-- 2022/12/15 -->
<li>Added <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> send-keys -K to handle keys directly as if typed.
<li>Prioritized lladdr over name/unit in <a href="https://man.openbsd.org/hostname.if.5">hostname.if(5)</a> processing.
<li>Added a -X option to <a href="https://man.openbsd.org/scp.1">scp(1)</a> and <a href="https://man.openbsd.org/sftp.1">sftp(1)</a> to allow control over the SFTP copy buffer length and number of inflight requests.
<li>Fixed <a href="https://man.openbsd.org/pfsync.4">pfsync(4)</a> crashing on pf_state_key removal.
<li>Made <a href="https://man.openbsd.org/acme-client.1">acme-client(1)</a> use time checks which eliminate time-zone variation.
<li>Added <a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a> -m flag to output a metrics file written in OpenMetrics format, as in <a href="https://man.openbsd.org/bgpctl.8">bgpctl(8)</a>.
<!-- 2022/12/14 -->
<!-- 2022/12/13 -->
<li>Improved speed of access to the runtime clock for networking purposes such as in the tcp timer, where the clock should not advance while suspended.
<!-- 2022/12/12 -->
<li>Added <a href="https://man.openbsd.org/tipd.4">tipd(4)</a>, a driver fixing USB hotplug of type-C connectors on Apple Silicon hardware.
<li>Improved <a href="https://man.openbsd.org/aplpmu.4">aplpmu(4)</a> range check to protect against overflow.
<li>Bumped to LibreSSL 3.7.1.
<!-- 2022/12/11 -->
<!-- 2022/12/10 -->
<li>Began using evcount_percpu() with platform interrupt counters on octeon.
<li>Increased <a href="https://man.openbsd.org/apliic.4">apliic(4)</a> transfer completion timeout to 100ms to accommodate USB Type-C PD chips.
<li>Fixed handling of escaped backslashes in <a href="https://man.openbsd.org/vi.1">vi(1)</a> ex_range.
<li>Switched alpha to <a href="https://man.openbsd.org/clockintr.9">clockintr(9)</a>.
<li>Mitigated Spectre-BHB by using core-specific trampoline vectors.
<!-- 2022/12/09 -->
<li>Added detection for Spectre-BHB related CLRBHB, ECBHB and CSV2_3/HCXT feature bits.
<!-- 2022/12/08 -->
<li>Added server debugging for hostbased <a href="https://man.openbsd.org/ssh.1">ssh(1)</a> authentication.
<li>Prevented a panic on macppc: vref used where vget required.
<li>Set <a href="https://man.openbsd.org/bgpctl.8">bgpctl(8)</a> to prefer CLOCK_MONOTONIC to <a href="https://man.openbsd.org/gettimeofday.2">gettimeofday(2)</a> when measuring elapsed time.
<!-- 2022/12/07 -->
<li>Set console output to the framebuffer on the Lenovo x13s.
<li>Worked around incomplete ACPI tables on the Lenovo x13s by loading the alternate device tree binaries from disk.
<li>Applied Spectre mitigations to libkern on amd64.
<!-- 2022/12/06 -->
<li>Implemented support in <a href="https://man.openbsd.org/aplpinctrl.4">aplpinctrl(4)</a> for shared interrupts.
<!-- 2022/12/05 -->
<li>Switched to <a href="https://man.openbsd.org/clockintr.9">clockintr(9)</a> on hppa, m88k, luna88k, sh, landisk and i386.
<li>Added support for configuring <a href="https://man.openbsd.org/hostname.if.5">hostname.if(5)</a> by lladdr.
<li>Added support for the backlight connector property to <a href="https://man.openbsd.org/amdgpu.4">amdgpu(4)</a> as in <a href="https://man.openbsd.org/inteldrm.4">inteldrm(4)</a>, making <a href="https://man.openbsd.org/xbacklight.1">xbacklight(1)</a> work when using the Xorg modesetting driver.
<li>Triggered a kevent when changing the backlight to allow Xorg drivers an opportunity to notice the update of the backlight connector property.
<li>Made <a href="https://man.openbsd.org/aplaudio.4">aplaudio(4)</a> calculate the bit clock based on numbers of channels, bytes/sample and sample rate.
<!-- 2022/12/04 -->
<li>Modified the vmstat view in <a href="https://man.openbsd.org/systat.1">systat(1)</a> to measure elapsed time using <a href="https://man.openbsd.org/clock_gettime.2">clock_gettime(2)</a>.
<li>Changed <a href="https://man.openbsd.org/ld.so.1">ld.so(1)</a> to map certain regions of memory as immutable when loading shared libraries.
<!-- 2022/12/03 -->
<!-- 2022/12/02 -->
<li>Completed removing kernel lock from IPv6 read ioctls.
<!-- 2022/12/01 -->
<!-- 2022/11/30 -->
<li>Used shared socket/net lock for IP sockets.
<li>Unlocked <a href="https://man.openbsd.org/getsockopt.2">getsockopt(2)</a> and <a href="https://man.openbsd.org/setsockopt.2">setsockopt(2)</a>.
<!-- 2022/11/29 -->
<li>Added configtest for <a href="https://man.openbsd.org/snmpd.8">snmpd(8)</a> to <a href="https://man.openbsd.org/rc.d.8">rc.d(8)</a>.
<!-- 2022/11/28 -->
<li>Added <a href="https://man.openbsd.org/uhidpp.4">uhidpp(4)</a> support for the Unified Battery feature often found in newer Logitech HID++ hardware.
<li>Switched to <a href="https://man.openbsd.org/clockintr.9">clockintr(9)</a> on powerpc, powerpc64 and macppc.
<li>Fixed booting bsd.rd from 7.2 or newer with <a href="https://man.openbsd.org/vmd.8">vmd(8)</a>.
<li>Made <a href="https://man.openbsd.org/rc.8">rc(8)</a> print the name of each library before relinking as a signal to the operator that boot has not stalled.
<!-- 2022/11/27 -->
<li>Tightened the <a href="https://man.openbsd.org/pledge.2">pledge(2)</a> after <a href="https://man.openbsd.org/ssh.1">ssh(1)</a> session establishment.
<li>Added <a href="https://man.openbsd.org/ssh_config.5">ssh_config(5)</a> EnableEscapeCommandline option, controlling whether the -C escape is available (defaults to no).
<li>Implemented <a href="https://man.openbsd.org/dwpcie.4">dwpcie(4)</a> support for the (optional) MSI controller of the Synopsis Designware PCIe host bridge.
<!-- 2022/11/26 -->
<li>Decreased netlock pressure in <a href="https://man.openbsd.org/pppx.4">pppx(4)</a>, potentially increasing performance.
<li>Added arm64 lid_action <a href="https://man.openbsd.org/sysctl.8">sysctl(8)</a> for <a href="https://man.openbsd.org/aplsmc.4">aplsmc(4)</a> Apple Silicon laptops.
<li>Added support for authenticating geofeed data CSV files in <a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a> filemode.
<!-- 2022/11/25 -->
<li>Added <a href="https://man.openbsd.org/ifconfig.8">ifconfig(8)</a> -M (mac) to find the mac address on an interface and print it.
<li>Disabled screen backlight with <a href="https://man.openbsd.org/aplsmc.4">aplsmc(4)</a> on Apple Silicon laptops when the lid is closed.
<li>Prevented an <a href="https://man.openbsd.org/unwind.8">unwind(8)</a> crash when a tcp query is larger than the length field indicated.
<!-- 2022/11/24 -->
<!-- 2022/11/23 -->
<li>Added <a href="https://man.openbsd.org/pwmleds.4">pwmleds(4)</a>, a driver for PWM controlled LEDs.
<!-- 2022/11/22 -->
<li>Protected interface tables in <a href="https://man.openbsd.org/pf.4">pf(4)</a> with PF_LOCK(), allowing removal of NET_LOCK() protection from the <a href="https://man.openbsd.org/ioctl.2">ioctl(2)</a> code path in pf.
<li>Copied apple-boot firmware to EFI system partition, enabling automatic bootloader updates on Apple Silicon computers.
<!-- 2022/11/21 -->
<li>Improved <a href="https://man.openbsd.org/mcx.4">mcx(4)</a> performance by using interrupt-based command completion.
<li>Added <a href="https://man.openbsd.org/aplpwm.4">aplpwm(4)</a>, a driver for the PWM controller found on Apple Silicon.
<li>Made <a href="https://man.openbsd.org/aplhidev.4">aplhidev(4)</a> wait for a reply when switching the touchpad into raw mode, preventing SMC crashes on machines with firmware from macOS 12.6.1.
<li>Fixed the DIOCIGETIFACES ioctl so all network interfaces and interface groups are reported in <a href="https://man.openbsd.org/pfctl.8">pfctl(8)</a>.
<!-- 2022/11/20 -->
<!-- 2022/11/19 -->
<li>Switched riscv64, mips64, loongson and octeon to <a href="https://man.openbsd.org/clockintr.9">clockintr(9)</a>.
<!-- 2022/11/18 -->
<li>Wired up HMAC to raw private key methods for Ruby's OpenSSL gem.
<li>Fixed <a href="https://man.openbsd.org/ed.1">ed(1)</a> to print bytes read/written and the ? prompt to stdout, not stderr.
<!-- 2022/11/17 -->
<li>Began implementing ASPA support in <a href="https://man.openbsd.org/bgpd.8">bgpd(8)</a>.
Placed mutexes after struct vm_map fields inspected bylibkvm and procmap(8).
<li>Aded <a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a> shortlist functionality, companion to skiplist, which will connect only to the hosts specified when using -H at least once, followed by FQDN.
<li>Prevented Ed25519 signature malleability in accordance with RFC 8032.
<li>Added restrictions to the input <a href="https://man.openbsd.org/getaddrinfo.3">getaddrinfo(3)</a> will attempt to resolve.
<li>Added apple-boot firmware for Apple arm64 machines in <a href="https://man.openbsd.org/fw_update.8">fw_update(8)</a> patterns.
<!-- 2022/11/16 -->
<!-- 2022/11/15 -->
<!-- 2022/11/14 -->
<li>Unlocked SIOCGIFCONF, SIOCGIFGMEMB, SIOCGIFGATTR, and SIOCGIFGLIST.
<li>Updated NSD to 4.6.1.
<li>Fixed delays with mips64 clock due to missing clock trigger on loongson.
<li>Relaxed the list of interfaces supporting IPv6 to allow non-multicast interfaces to support IPv6.
<li>Increased the size of amd64 EFI partition to accommodate newer x86 firmware updating methods.
<li>Preserved original order of nameservers written <a href="https://man.openbsd.org/resolv.conf.5">resolv.conf(5)</a> in <a href="https://man.openbsd.org/resolvd.8">resolvd(8)</a>.
<!-- 2022/11/14 06:39:37 -->
<li>Ensured <a href="https://man.openbsd.org/installboot.8">installboot(8)</a> correctly warns on offline <a href="https://man.openbsd.org/softraid.4">softraid(4)</a> data chunks.
<!-- 2022/11/13 -->
<!-- 2022/11/12 -->
<li>Fixed <a href="https://man.openbsd.org/pmap.9">pmap(9)</a> bugs involving entering an executable mapping for a page before synchronizing the data and instruction cache on arm64 and riscv64.
<!-- 2022/11/11 -->
<li>Removed the legacy interactive mode from <a href="https://man.openbsd.org/openssl.1">openssl(1)</a>.
<li>Moved <a href="https://man.openbsd.org/pf.4">pf(4)</a> purge tasks out from under the kernel lock.
<li>Added <a href="https://man.openbsd.org/icc.4">icc(4)</a>, a driver to handle Customer Control keyboards attached to an i2c bus.
<li>Added a mutex to <a href="https://man.openbsd.org/pf.4">pf(4)</a> pf_state.
<!-- 2022/11/10 -->
<li>Handled <a href="https://man.openbsd.org/ssh.1">ssh(1)</a> dynamic remote port forwarding in escape commandline's -R processing.
<li>Bumped LibreSSL to 3.7.
<li>Ported EVP raw key API from OpenSSL to deal with Curve25519 based keys.
<li>Added suspend/resume support to control the power domain to <a href="https://man.openbsd.org/aplsart.4">aplsart(4)</a>.
<li>Added <a href="https://man.openbsd.org/qcpdc.4">qcpdc(4)</a>, a driver for the Qualcomm Power Domain controller found on Qualcomm SoCs.
<li>Made the power button function as a wakeup button during suspend in <a href="https://man.openbsd.org/aplsmc.4">aplsmc(4)</a>.
<li>Put CPUs in the lowest P-state before the final suspend step, needed for systems where we park CPUs in a low-power idle state ourselves.
<li>Cleaned up multiple devices from retired architectures.
<li>Changed the default <a href="https://man.openbsd.org/procmap.1">procmap(1)</a> output to -a format.
<li>Added support for per-cpu event counters, to be used for clock and IPI counters where the event counted occurs across all CPUs in the system.
<!-- 2022/11/09 -->
<li>Hooked up <a href="https://man.openbsd.org/gpiobl.4">gpiobl(4)</a> to the screen burner instead of <a href="https://man.openbsd.org/wsdisplay.4">wsdisplay(4)</a> brightness control, allowing automatic screen blanking with X and <a href="https://man.openbsd.org/wscons.4">wscons(4)</a> once <a href="https://man.openbsd.org/wsfb.4">wsfb(4)</a> is fixed.
<li>Allowed IPPROTO_TCP:TCP_NODELAY in <a href="https://man.openbsd.org/pledge.2">pledge(2)</a> "stdio".
<li>Added <a href="https://man.openbsd.org/qcpwm.4">qcpwm(4)</a>, a driver for the PWM found on Qualcomm SoCs.
<li>Implemented wakeup interrupt support in <a href="https://man.openbsd.org/aplintc.4">aplintc(4)</a>.
<li>Prevented <a href="https://man.openbsd.org/acme-client.1">acme-client(1)</a> from leaking an http get request when receiving a redirect without a location header.
<li>Made <a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a> error out upon receipt of an ROA payload with too many ipAddrBlocks.
<li>Added suspend/resume support to <a href="https://man.openbsd.org/aplns.4">aplns(4)</a>.
<li>Adjusted ipv6 address width to allow aligned display in <a href="https://man.openbsd.org/ndp.8">ndp(8)</a>, <a href="https://man.openbsd.org/route.8">route(8)</a> and <a href="https://man.openbsd.org/netstat.1">netstat(1)</a> as already available in <a href="https://man.openbsd.org/systat.1">systat(1)</a>'s netstat.
<li>Made <a href="https://man.openbsd.org/vmm.4">vmm(4)</a> treat vcpu lists as immutable, removing the need to reference count individual vcpu objects and use a rwlock.
<li>Used <a href="https://man.openbsd.org/stravis.3">stravis(3)</a> to sanitize redirect URIs from <a href="https://man.openbsd.org/ftp.1">ftp(1)</a> fetch before printing.
<li>Reworked BoringSSL ED25519 API to conform to RFC and align with OpenSSL API and X25519 API.
<li>Made <a href="https://man.openbsd.org/aplpmgr.4">aplpmgr(4)</a> work as a reset controller.
<li>Added display of the MPLS label of an L3VPN route in <a href="https://man.openbsd.org/bgpctl.8">bgpctl(8)</a> show fib output.
<li>Marked <a href="https://man.openbsd.org/sched_yield.2">sched_yield(2)</a> as NOLOCK.
<li>Translated Fn+(1-10,-,=) keys to F1-F12 on M1 laptops with touchbars.
<li>Made <a href="https://man.openbsd.org/aplhidev.4">aplhidev(4)</a> recognize M1 laptops with touchbars.
<!-- 2022/11/08 -->
<li>Added <a href="https://man.openbsd.org/qcrtc.4">qcrtc(4)</a>, a driver for the RTC found on Qualcomm PMICs.
<li>Added <a href="https://man.openbsd.org/qcpon.4">qcpon(4)</a>, a driver for the Qualcomm PMIC block that hosts the powerkey and reset input.
<li>Added <a href="https://man.openbsd.org/qcpmicgpio.4">qcpmicgpio(4)</a>, a driver for the GPIO block inside the Qualcomm PMICs.
<li>Added <a href="https://man.openbsd.org/qcpmic.4">qcpmic(4)</a>, a driver for the SPMI-connected PMICs found on Qualcomm SoCs.
<li>Added <a href="https://man.openbsd.org/qcspmi.4">qcspmi(4)</a>, a driver for the SPMI PMIC Arbiter found on Qualcomm SoCs.
<li>Increased speed of delivery of interrupts to a running vcpu in <a href="https://man.openbsd.org/vmm.4">vmm(4)</a>.
<li>Allowed KERN_AUTOCONF_SERIAL <a href="https://man.openbsd.org/sysctl.8">sysctl(8)</a> in processes under a <a href="https://man.openbsd.org/pledge.2">pledge(2)</a>.
<li>Added <a href="https://man.openbsd.org/gpiobl.4">gpiobl(4)</a>, a driver for gpio controlled display backlights, to allow screen shutoff for Apple Silicon laptops until a proper display controller driver is implemented.
<li>Implemented alternative mailbox handling mechanism required by newer <a href="https://man.openbsd.org/bwfm.4">bwfm(4)</a> firmware.
<li>Removed locking in <a href="https://man.openbsd.org/vmm.4">vmm(4)</a> vmm_intr_pending, reducing slowdowns due to requests for a lock held while the VM is running.
<li>Switched amd64 and arm64 to the <a href="https://man.openbsd.org/clockintr.9">clockintr(9)</a> subsystem.
<li>Extended arm64 suspend/resume to include support for parking CPUs in a WFE/WFI loop.
<li>Made installboot skip <a href="https://man.openbsd.org/softraid.4">softraid(4)</a> keydisks silently.
<li>Switched libressl to use BoringSSL's date conversion scheme.
<li>Marked <a href="https://man.openbsd.org/mmap.2">mmap(2)</a>, <a href="https://man.openbsd.org/munmap.2">munmap(2)</a>, and <a href="https://man.openbsd.org/mprotect.2">mprotect(2)</a> as NOLOCK.
<li>Fixed <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> C-S-Tab without extended keys.
<!-- 2022/11/07 -->
<li>Added support for the PCIe controller on the Qualcomm SC8280XP to <a href="https://man.openbsd.org/dwpcie.4">dwpcie(4)</a>.
<li>Implemented the "halt" IPI in <a href="https://man.openbsd.org/aplintc.4">aplintc(4)</a>.
<li>Introduced a new kern.autoconf_serial <a href="https://man.openbsd.org/sysctl.8">sysctl(8)</a> that can be used by userland to monitor state changes of the kernel device tree.
<li>Set <a href="https://man.openbsd.org/vmm.4">vmm(4)</a> RAX guest register state based on VMCB.
<li>Modified TCP receive buffer size auto-scaling to use the smoothed RTT (SRTT) instead of the timestamp option, which improves performance on high latency networks if the timestamp option isn't available.
<li>Set up <a href="https://man.openbsd.org/logger.1">logger(1)</a> traps earlier to ensure kernel relinking does not fail silently without log trace when /usr is mounted read-only.
<!-- 2022/11/06 -->
<li>Fixed <a href="https://man.openbsd.org/ssh-keygen.1">ssh-keygen(1)</a> parsing of hex cert expiry time.
<li>Allocated reference for vm and vcpu SLISTs in <a href="https://man.openbsd.org/vmm.4">vmm(4)</a>, keeping vmm from triggering excessive wakeup calls while iterating through the list of vms while servicing an <a href="https://man.openbsd.org/ioctl.2">ioctl(2)</a>.
<li>Enabled <a href="https://man.openbsd.org/em.4">em(4)</a> IPv4, TCP and UDP checksum offloading and VLAN HW tagging for 82575, 82576, i350 and i210.
<li>Enabled Ed25519 internal to libcrypto.
<li>Added FDT-based attachment for <a href="https://man.openbsd.org/qcgpio.4">qcgpio(4)</a> and <a href="https://man.openbsd.org/qciic.4">qciic(4)</a>.
<li>Made /dev/pf a clonable device.
<li>Changed character drawing depth when "pseudo" framebuffer depth is changed on luna88k.
<li>Added <a href="https://man.openbsd.org/qcdwusb.4">qcdwusb(4)</a>, a driver controlling the interface logic for the Synopsis DesignWare USB 3.0 controller found on various Qualcomm Snapdragon SoCs.
<li>Disabled <a href="https://man.openbsd.org/smmu.4">smmu(4)</a> for the Qualcomm SC8280XP on FDT attachment as on ACPI.
<li>Mark TEXTREL binaries immutable after text relocations complete.
<li>Mark library RELRO sections immutable after final PROT_READ.
<li>Made octeon ramdisk installer use <a href="https://man.openbsd.org/installboot.8">installboot(8)</a> -p.
<li>Made static TEXTREL binaries perform the <a href="https://man.openbsd.org/mimmutable.2">mimmutable(2)</a> operations themselves since a loader may want to perform text relocations inside mprotect permission flips.
<!-- 2022/11/05 -->
<li>Added <a href="https://man.openbsd.org/mount_nfs.8">mount_nfs(8)</a> to the sparc64 installer, to fetch sets over NFS.
<li>Introduced <a href="https://man.openbsd.org/clockintr.9">clockintr(9)</a>, a machine-independent clock interrupt controller.
<li>Made the /var/run/ld.so.hints file mapping immutable.
<li>Taught <a href="https://man.openbsd.org/ld.so.1">ld.so(1)</a> how to call the <a href="https://man.openbsd.org/mimmutable.2">mimmutable(2)</a> system call.
<li>Added powerpc64 userspace timecounting support.
<li>Made the kernel skip immutability of all non-writable memory segments for TEXTREL binaries. crt0 and <a href="https://man.openbsd.org/ld.so.1">ld.so(1)</a> will call <a href="https://man.openbsd.org/mimmutable.2">mimmutable(2)</a> later.
<!-- 2022/11/04 -->
<li>Made <a href="https://man.openbsd.org/azalia.4">azalia(4)</a> match on Intel 500 Series HD Audio.
<li>Intalled a fault handler for amd64 EFI firmware.
<!-- 2022/11/03 -->
<li>Flushed memory writes before remote sfence.vma in riscv64 pmap.
<li>Enabled smbios0 on arm64 ramdisk to provide the correct hw.version info to the code mitigating crashes on the x13s.
<li>Constrained KeyUsage and ExtendedKeyUsage on both CA and EE certificates in <a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a>.
<li>Changed riscv64 pmap to flush writes before remote sfence.vma to prevent some crashes on Unmatched machines.
<li>Fixed a <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> crash when there are no window buffers.
<li>Added a -l flag to <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> display-message to disable format expansion.
<!-- 2022/11/02 -->
<li>Implemented RFC 9323 (A Profile for RPKI Signed Checkists) support in <a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a>.
<li>Changed <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> to only set the extended flag when searching, which allows send-keys to work.
<!-- 2022/11/01 -->
<li>Added modified tab key sequences to <a href="https://man.openbsd.org/tmux.1">tmux(1)</a>.
<!-- 2022/10/31 -->
<li>Updated <a href="https://man.openbsd.org/vmm.4">vmm(4)</a> to allow guests to read MSR_HWCR and MSR_PSTATEDEF, which is necessary to determine the TSC frequency on AMD families 17h and 19h.
<li>Updated timezone information to 2022fgtz.
<li>Removed unfinished user accounting from <a href="https://man.openbsd.org/vmd.8">vmd(8)</a>.
<!-- 2022/10/30 -->
<li>Stopped attaching to the multiport USB controller on Lenovo X13s machines since it leads to hard resets.
<!-- 2022/10/29 -->
<!-- 2022/10/28 -->
<!-- 2022/10/27 -->
<li>Improved <a href="https://man.openbsd.org/ssh-keyscan.1">ssh-keyscan(1)</a> to accept CIDR address ranges for targets to scan.
<li>Updated libexpat to 2.5.0.
<!-- 2022/10/26 -->
<li>Limited display of wireguard peers by <a href="https://man.openbsd.org/ifconfig.8">ifconfig(8)</a> to when either a wireguard interface is specified or the flag "-A" is used.
<!-- 2022/10/25 -->
<li>Implemented the <a href="https://man.openbsd.org/waitid.2">waitid(2)</a> system call which is now part of POSIX and used by Mozilla.
<!-- 2022/10/24 -->
<li>Increased <a href="https://man.openbsd.org/ssh.1">ssh(1)</a> paranoia when dealing with host/domain names coming from the resolver by refusing to follow CNAMEs with invalid characters and never writing a name with bad characters to a known_hosts file.
<li>Improved <a href="https://man.openbsd.org/scp.1">scp(1)</a> handling of globbing when using the SFTP protocol for transport.
<li>Stopped <a href="https://man.openbsd.org/netstart.8">netstart(8)</a> from waiting for autoconf during a dry-run (-n).
<!-- 2022/10/23 -->
<li>Made sure <a href="https://man.openbsd.org/apldma.4">apldma(4)</a> driver is attached before allocating a channel. Prevents a crash on M2 Macbook Air.
<li>Introduced <a href="https://man.openbsd.org/pijuice.4">pijuice(4)</a>, an apm/sensor driver for the PiJuice HAT UPS.
<li>Bumped tsleep timeout for <a href="https://man.openbsd.org/bwfm.4">bwfm(4)</a> PCI devices to help prevent failures loading firmware, particularly on Apple M2 laptops.
<li>Synced pbuild class for powerpc64 and riscv64 to amd64 and arm64, increasing to 8G.
<!-- 2022/10/22 -->
<li>Added support to <a href="https://man.openbsd.org/gunzip.1">gunzip(1)</a> for zip files that contain a single member.
<li>Bumped pbuild's login.conf datasize-cur to 8G on arm64.
<!-- 2022/10/21 -->
<li>Added hw.power, machdep.lidaction, and machdep.pwraction support for macppc.
<li>Allowed changing of immutable RW regions to R for recent chrome renderers.
<li>Made the read-only relro portion of static binaries <a href="https://man.openbsd.org/mimmutable.2">mimmutable(2)</a>.
<li>Adapted <a href="https://man.openbsd.org/sigaltstack.2">sigaltstack(2)</a> to work on mimmutable regions allowing the stack to be marked immutable again.
<li>Automatically marked immutable certain regions in program and <a href="https://man.openbsd.org/ld.so.1">ld.so(1)</a> LOADs.
<!-- 2022/10/20 -->
<li>Added hooks to disable and enable GPIO interrupts.
<li>Added support for the Rockchip RK3568 processor.
<li>Added zap-to-char and zap-up-to-char to <a href="https://man.openbsd.org/mg.1">mg(1)</a>. Bound zap-to-char to M-z.
<li>Stopped attempting to use EFI runtime services on UEFI versions before 2.1.
<li>Updated base libz to 1.2.13.
<li>Updated <a href="https://man.openbsd.org/unbound.8">unbound(8)</a> to 1.17.0.
<!-- 2022/10/19 -->
<li>Excluded /tmp/*.shm files from /tmp cleaning in <a href="https://man.openbsd.org/daily.8">daily(8)</a>. Removing them interferes with programs that use <a href="https://man.openbsd.org/shm_open.3">shm_open(3)</a>.
<li>Dropped support for $rc_exec in <a href="https://man.openbsd.org/rc.subr.8">rc.subr(8)</a>. The rc_exec function should be used instead.
<!-- 2022/10/18 -->
<li>Added support for the DS1339 RTC as found on the PiJuice.
<li>Initialized last_updown in <a href="https://man.openbsd.org/bgpd.8">bgpd(8)</a> so that it is reported correctly for peers that never managed to establish a connection.
<li>Fixed misidentification of <a href="https://man.openbsd.org/mpii.4">mpii(4)</a> RAID 1E.
<!-- 2022/10/17 -->
<li>Implemented uncached mapping on the StarFive JH7100 SoC.
<li>Converted more RTC drivers to use todr_attach(). Quality of the RTC is set such that "discrete" RTC chips are preferred over RTCs integrated on a SoC.
<li>Fixed ofwboot OpenFirmware "map" call. This fixed booting on some sparc64 machines.
<li>Fixed a potential <a href="https://man.openbsd.org/crypto.3">crypto(3)</a> divide by zero in BIO_dump_indent_cb().
<li>Fixed <a href="https://man.openbsd.org/crypto.3">crypto(3)</a> ASN.1 indefinite length encoding.
<li>Implemented openmetric output via the <a href="https://man.openbsd.org/bgpctl.8">bgpctl(8)</a> show metric command.
<li>Preserved the marked pane when renumbering windows in <a href="https://man.openbsd.org/tmux.1">tmux(1)</a>.
<!-- 2022/10/16 -->
<li>Improved the clickpad/touchpad detection in hidmt.
<li>Fixed a bug in the initialization mechanism of <a href="https://man.openbsd.org/wsmouse.4">wsmouse(4)</a>.
<li>Went back to the old approach to <a href="https://man.openbsd.org/sigaltstack.2">sigaltstack(2)</a> but added checks for assuring it is a non-syscall region and protection needing to be exactly RW besides the existing placement in a new anonymous mapping.
<!-- 2022/10/15 -->
<li>Converted the remaining I2C RTC drivers to use todr_attach().
<li>Implemented the RFC 8781 PREF64 router advertisement option in <a href="https://man.openbsd.org/rad.8">rad(8)</a>.
<!-- 2022/10/14 -->
<li>Added passing of boot device information from the bootloader to the kernel on luna88k.
<!-- 2022/10/13 -->
<li>Fixed a crash when using <a href="https://man.openbsd.org/virtio.4">virtio(4)</a> with <a href="https://man.openbsd.org/agintc.4">agintc(4)</a> by properly implementing LPI interrupts.
<li>Added support for the RK3568 PCIe controller to <a href="https://man.openbsd.org/dwpcie.4">dwpcie(4)</a>.
<li>Implemented support for message based interrupts on arm64.
<!-- 2022/10/12 -->
<li>Added client certificate authentication and an optional SASL EXTERNAL bind to <a href="https://man.openbsd.org/ypldap.8">ypldap(8)</a>.
<li>Allowed assigning a quality number to RTC implementations so the "best" RTC can be chosen if a system has more than one.
<!-- 2022/10/11 -->
<li>Had the kernel inform the user if the <a href="https://man.openbsd.org/disklabel.5">disklabel(5)</a> is obsolete.
<!-- 2022/10/10 -->
<li>Added support for the Rockchip RK817 PMIC.
<li>Restored recalculation of the checksum of normalized packets in <a href="https://man.openbsd.org/pf.4">pf(4)</a>.
<li>Fixed memory leak in the error path of <a href="https://man.openbsd.org/cdio.1">cdio(1)</a>.
<!-- 2022/10/09 -->
<li>Added support for the Rockchip RK3566/RK3568 SoCs.
<li>Added support for newlines inside the alternative names block in <a href="https://man.openbsd.org/acme-client.conf.5">acme-client.conf</a>.
<!-- 2022/10/08 -->
<li>Added support for Qualcomm SoCs to <a href="https://man.openbsd.org/sdhc.4">sdhc(4)</a>.
<li>Marked the signal trampoline and timekeep regions immutable at <a href="https://man.openbsd.org/execve.2">execve(2)</a> time.
<li>Added support for the Wacom One M CTL-672 tablet to <a href="https://man.openbsd.org/uwacom.4">uwacom(4)</a>.
<!-- 2022/10/07 -->
<li>Added support for showing the entry immutable bit to <a href="https://man.openbsd.org/procmap.1">procmap(1)</a>.
<li>Added a <a href="https://man.openbsd.org/mimmutable.2">mimmutable(2)</a> stub to libc and cranked the minor revision.
<li>Added support for the new "openbsd.mutable" section to <a href="https://man.openbsd.org/ld.bfd.1">ld.bfd(1)</a>, <a href="https://man.openbsd.org/ld.lld.1">ld.lld(1)</a>, <a href="https://man.openbsd.org/readelf.1">readelf(1)</a>, and <a href="https://man.openbsd.org/objdump.1">objdump(1)</a>.
<li>Added the new <a href="https://man.openbsd.org/mimmutable.2">mimmutable(2)</a> system call, which locks the permissions (PROT_*) of memory mappings so they cannot be changed by later <a href="https://man.openbsd.org/mmap.2">mmap(2)</a>, <a href="https://man.openbsd.org/mprotect.2">mprotect(2)</a>, or <a href="https://man.openbsd.org/munmap.2">munmap(2)</a> calls, which will error with EPERM instead.
<!-- 2022/10/06 -->
<li>Added identifiers for the new "mutable bss" ELF section.
<li>Fixed sparc64's ofwboot.net after it was broken by the last libz update.
<li>Made <a href="https://man.openbsd.org/ssh.1">ssh(1)</a> honor the user's umask if it is more restrictive than the ssh default.
<li>Increased the number of <a href="https://man.openbsd.org/vdsp.4">vdsp(4)</a> devices created by default on sparc64 to 24.
<li>Made <a href="https://man.openbsd.org/ldomctl.8">ldomctl(8)</a> accept more descriptive name-based paths in addition to number-based paths in <a href="https://man.openbsd.org/ldom.conf.5">ldom.conf(5)</a>.
<!-- 2022/10/05 -->
<li>Made <a href="https://man.openbsd.org/installboot.8">installboot(8)</a> skip <a href="https://man.openbsd.org/softraid.4">softraid(4)</a> keydisks.
<!-- 2022/10/04 -->
<li>Switched <a href="https://man.openbsd.org/tftpd.8">tftpd(8)</a> to default to read-only unless -w is specified for write access (the previous default).
<li>Enabled the Data Independent Timing feature in both the kernel and userland on arm64 CPUs that support it to mitigate timing side-channel attacks.
<li>Stopped printing the prompt for non-interactive usage of <a href="https://man.openbsd.org/tftp.1">tftp(1)</a>.
<li>Changed <a href="https://man.openbsd.org/rarpd.8">rarpd(8)</a> to only unveil /tftpboot if -t is specified.
<!-- 2022/10/03 -->
<li>Added support for a clean shutdown with the power button to <a href="https://man.openbsd.org/dapmic.4">dapmic(4)</a>.
<li>Kept system calls should not fail due to temporary memory shortage in <a href="https://man.openbsd.org/malloc.9">malloc(9)</a> or <a href="https://man.openbsd.org/pool_get.9">pool_get(9)</a>.
<li>Enabled use of absolute paths starting with /usr/share/zoneinfo while still rejecting other absolute paths for TZ.
<!-- 2022/10/02 -->
<!-- 2022/10/01 -->
<li>Removed "config file" support from makesyscalls.sh since it was only used for long-removed compat layers.
<!-- 2022/09/30 -->
<!-- 2022/09/29 -->
<!-- 2022/09/28 -->
<li>Fixed incorrect range check for size in <a href="https://man.openbsd.org/setvbuf.3">setvbuf(3)</a>.
<li>Fixed memory corruptions with sysv semaphores due to sleeps in <a href="https://man.openbsd.org/copyin.9">copyin(9)</a>, <a href="https://man.openbsd.org/copyout.9">copyout(9)</a>, and <a href="https://man.openbsd.org/malloc.9">malloc(8)</a>.
<li>Added scroll-top and scroll-bottom <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> commands to scroll so cursor is at the top or bottom respectively.
<li>Added a -T flag to <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> capture-pane to capture up to the last used cell and not the full width of the pane.
<!-- 2022/09/27 -->
<!-- 2022/09/26 -->
<li>Changed use of here documents in install.sub to eliminate the need for escaping and improve readability.
<li>Moved to 7.2-current.
</ul>