Annotation of www/plus74.html, Revision 1.2
1.1 pamela 1: <!doctype html>
2: <html lang=en id=plus>
3: <meta charset=utf-8>
4: <title>OpenBSD 7.4 Changelog</title>
5: <meta name="description" content="OpenBSD 7.4 changes">
6: <meta name="viewport" content="width=device-width, initial-scale=1">
7: <link rel="stylesheet" type="text/css" href="openbsd.css">
8: <link rel="canonical" href="https://www.openbsd.org/plus74.html">
9: <style>
10: strong {
11: color: var(--red);
12: font-weight: normal;
13: }
14:
15: h3 {
16: color: var(--blue);
17: }
18: </style>
19:
20: <h2 id=OpenBSD>
21: <a href="index.html">
22: <i>Open</i><b>BSD</b></a>
23: 7.4 Changelog
24: </h2>
25: <hr>
26:
27: <p>
28: This selection is intended to include all important
29: and all user-visible changes.
30: For a complete record of all changes, please see the "source-changes"
31: mailing list, called "OpenBSD CVS"
32: in the <a href="https://marc.info/?l=openbsd-cvs">archives</a>,
33: or use <a href="anoncvs.html#CVS">CVS</a>.
34:
35: <p>
36: For changes in other releases, click below:<br>
37: <a href="plus20.html">2.0</a>,
38: <a href="plus21.html">2.1</a>,
39: <a href="plus22.html">2.2</a>,
40: <a href="plus23.html">2.3</a>,
41: <a href="plus24.html">2.4</a>,
42: <a href="plus25.html">2.5</a>,
43: <a href="plus26.html">2.6</a>,
44: <a href="plus27.html">2.7</a>,
45: <a href="plus28.html">2.8</a>,
46: <a href="plus29.html">2.9</a>,
47: <a href="plus30.html">3.0</a>,
48: <a href="plus31.html">3.1</a>,
49: <a href="plus32.html">3.2</a>,
50: <a href="plus33.html">3.3</a>,
51: <a href="plus34.html">3.4</a>,
52: <a href="plus35.html">3.5</a>,
53: <a href="plus36.html">3.6</a>,
54: <br>
55: <a href="plus37.html">3.7</a>,
56: <a href="plus38.html">3.8</a>,
57: <a href="plus39.html">3.9</a>,
58: <a href="plus40.html">4.0</a>,
59: <a href="plus41.html">4.1</a>,
60: <a href="plus42.html">4.2</a>,
61: <a href="plus43.html">4.3</a>,
62: <a href="plus44.html">4.4</a>,
63: <a href="plus45.html">4.5</a>,
64: <a href="plus46.html">4.6</a>,
65: <a href="plus47.html">4.7</a>,
66: <a href="plus48.html">4.8</a>,
67: <a href="plus49.html">4.9</a>,
68: <a href="plus50.html">5.0</a>,
69: <a href="plus51.html">5.1</a>,
70: <a href="plus52.html">5.2</a>,
71: <a href="plus53.html">5.3</a>,
72: <br>
73: <a href="plus54.html">5.4</a>,
74: <a href="plus55.html">5.5</a>,
75: <a href="plus56.html">5.6</a>,
76: <a href="plus57.html">5.7</a>,
77: <a href="plus58.html">5.8</a>,
78: <a href="plus59.html">5.9</a>,
79: <a href="plus60.html">6.0</a>,
80: <a href="plus61.html">6.1</a>,
81: <a href="plus62.html">6.2</a>,
82: <a href="plus63.html">6.3</a>,
83: <a href="plus64.html">6.4</a>,
84: <a href="plus65.html">6.5</a>,
85: <a href="plus66.html">6.6</a>,
86: <a href="plus67.html">6.7</a>,
87: <a href="plus68.html">6.8</a>,
88: <a href="plus69.html">6.9</a>,
89: <a href="plus70.html">7.0</a>,
90: <br>
91: <a href="plus71.html">7.1</a>,
92: <a href="plus72.html">7.2</a>,
93: <a href="plus73.html">7.3</a>,
94: <a href="plus.html">current</a>.
95: <br>
96:
97: <p>
98: <h3>Changes made between OpenBSD 7.3 and 7.4</h3>
99: <p>
100:
101: <ul>
1.2 ! pamela 102: <!-- 2023/10/01 -->
! 103: <li>Added <a href="https://man.openbsd.org/sysctl.2">sysctl(2)</a> hw.ucomnames to list "fixed" paths to USB serial ports.
! 104: <li>Fixed an <a href="https://man.openbsd.org/aq.4">aq(4)</a> issue where Atlantic 2 hardware would stop transmitting packets under load on the M2 Pro Mac mini.
! 105: <!-- 2023/09/30 -->
! 106: <!-- 2023/09/29 -->
! 107: <li>Replaced kernel lock with mutex in <a href="https://man.openbsd.org/ixl.4">ixl(4)</a> media status, preventing a potential deadlock.
! 108: <li>Fixed crashes with <a href="https://man.openbsd.org/ipsecctl.8">ipsecctl(8)</a> -m by only forwarding validated pfkey messages to promiscuous listeners.
! 109: <li>Bumped <a href="https://man.openbsd.org/smtpd.8">smtpd(8)</a> to 7.4.0.
! 110: <li>Extended single_thread_set() mode with additional flag attributes SINGLE_DEEP and SINGLE_NOWAIT.
! 111: <!-- 2023/09/28 -->
! 112: <li>Bumped <a href="https://man.openbsd.org/bgpd.8">OpenBGPD</a> to 8.2.
! 113: <!-- 2023/09/27 -->
! 114: <li>Prevented <a href="https://man.openbsd.org/fw_update.8">fw_update(8)</a> from registering firmware already in /var/db/pkg.
! 115: <li>Corrected exit from <a href="https://man.openbsd.org/fw_update.8">fw_update(8)</a>.
! 116: <li>Made <a href="https://man.openbsd.org/fw_update.8">fw_update(8)</a> download firmware to LOCALSRC when using filenames.
! 117: <li>Made <a href="https://man.openbsd.org/deroff.1">deroff(1)</a> use a dynamically-allocated line buffer and resize as needed, fixing a buffer overflow for lines over 2048 bytes.
! 118: <!-- 2023/09/26 -->
! 119: <li>Used existing 'audio_lock' <a href="https://man.openbsd.org/mutex.9">mutex(9)</a> to make 'midi{read,write}_filtops' MP safe.
! 120: <li>Had <a href="https://man.openbsd.org/wg.4">wg(4)</a> copy the priority from the inner packet to the outer encrypted packet, so that higher priority packets are picked from hfsc queues for earlier transmission.
! 121: <!-- 2023/09/25 -->
! 122: <li>Disambiguated <a href="https://man.openbsd.org/vmd.8">vmd(8)</a> log messages per vm and device. Fixed updating log settings dynamically via <a href="https://man.openbsd.org/vmctl.8">vmctl(8)</a>. The "vmm" process now updates its own state properly, so settings survive vm reboots.
! 123: <li>Fixed a <a href="https://man.openbsd.org/vmd.8">vmd(8)</a> vm pause deadlock.
! 124: <li>Implemented <a href="https://man.openbsd.org/apldart.4">apldart(4)</a> support for stream IDs.
! 125: <li>Added <a href="https://man.openbsd.org/mbg.4">mbg(4)</a> support for the Meinberg PZF180PEX DCF77 time signal station receiver card.
! 126: <li>Enabled <a href="https://man.openbsd.org/mbg.4">mbg(4)</a> at pci on amd64.
! 127: <!-- 2023/09/24 -->
! 128: <li>Dropped PTE check in riscv64 pmap_fault_fixup(), resulting in performance improvements.
! 129: <!-- 2023/09/23 -->
! 130: <li>Introduced <a href="https://man.openbsd.org/stfrng.4">stfrng(4)</a>, a driver for the random number generator on the JH7110 SoC.
! 131: <li>Log the <a href="https://man.openbsd.org/vmd.8">vmd(8)</a> vm id instead of the kernel <a href="https://man.openbsd.org/vmm.4">vmm(4)</a> id in vcpu_run_loop.
! 132: <!-- 2023/09/22 -->
! 133: <li>Introduced 'hotplug_mtx' <a href="https://man.openbsd.org/mutex.9">mutex(9)</a> and made 'hotplug_filtops' MP safe.
! 134: <li>Made 'logread_filterops' MP safe.
! 135: <li>Significantly increased the speed of <a href="https://man.openbsd.org/pkg-config.1">pkg-config(1)</a>.
! 136: <!-- 2023/09/21 -->
! 137: <li>Enabled <a href="https://man.openbsd.org/softraid.4">softraid(4)</a> in powerpc64 RAMDISK.
! 138: <!-- 2023/09/20 -->
! 139: <li>Bumped LibreSSL to 3.8.2.
! 140: <!-- 2023/09/19 -->
! 141: <li>Improved the output of <a href="https://man.openbsd.org/ddb.4">ddb(4)</a> "show proc" command and added "/t" as an argument that can be used to specify a proc by TID instead of address.
! 142: <!-- 2023/09/18 -->
! 143: <li>Disabled utf-8 for non-multibyte locales in <a href="https://man.openbsd.org/awk.1">awk(1)</a>, making it possible to get the old awk behavior (where chars are bytes) by setting LC_CTYPE to C or POSIX.
! 144: <li>Moved to 7.4-beta.
! 145: <!-- 2023/09/17 -->
! 146: <li>Updated <a href="https://man.openbsd.org/awk.1">awk(1)</a> to the Sep 12, 2023 version, corresponding to the 2nd edition of "The AWK Programming Language" and adding support for UTF-8 and comma-separated value inputs.
! 147: <!-- 2023/09/16 -->
! 148: <li>Allowed <a href="https://man.openbsd.org/counters_read.9">counters_read(9)</a> to take an optional scratch buffer, allowing the <a href="https://man.openbsd.org/ddb.4">ddb(4)</a> show uvmexp command to work in OOM situations.
! 149: <!-- 2023/09/15 -->
! 150: <li>Added <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> source-file -t option to specify a target pane.
! 151: <!-- 2023/09/14 -->
! 152: <li>Used zero-copy approach and vectored io in <a href="https://man.openbsd.org/vmd.8">vmd(8)</a>/<a href="https://man.openbsd.org/vioblk.4">vioblk(4)</a>, reducing memcpy and multiple read/write syscalls per io transaction.
! 153: <!-- 2023/09/13 -->
! 154: <!-- 2023/09/12 -->
! 155: <!-- 2023/09/11 -->
! 156: <li>Implemented tuples in <a href="https://man.openbsd.org/btrace.8">btrace(8)</a>, allowing export of per-CPU scheduling data.
! 157: <li>Prevented <a href="https://man.openbsd.org/unwind.8">unwind(8)</a> entering a loop due to constant ENOBUF receipt.
! 158: <!-- 2023/09/10 -->
! 159: <li>Updated <a href="https://man.openbsd.org/awk.1">awk(1)</a> to the Sep 6, 2023 version.
! 160: <li>Load amd patch into a <a href="https://man.openbsd.org/malloc.3">malloc'd</a> region to make it page aligned, avoiding a General-Protection Exception on patch loader wrmsr with A10-5700, TN-A1 00610f01 15-10-01.
! 161: <!-- 2023/09/09 -->
! 162: <li>Updated <a href="https://man.openbsd.org/awk.1">awk(1)</a> to the Dec 15, 2022 version: Force hex escapes in strings to be no more than two characters, as they already are in regular expressions.
! 163: <li>Corrected TP-LINK bluetooth ID in <a href="https://man.openbsd.org/ure.4">ure(4)</a>.
! 164: <!-- 2023/09/08 -->
! 165: <!-- 2023/09/07 -->
! 166: <li>Added a request or response declaration feature used through the <a href="https://man.openbsd.org/radiusd.8">radiusd(8)</a> module interface, allowing additional modules to modify RADIUS request or response messages.
! 167: <li>Fixed <a href="https://man.openbsd.org/scp.1">scp(1)</a> in SFTP mode recursive upload and download of directories that contain symlinks to other directories.
! 168: <li>Treat consecutive paragraph indicators as different paragraphs in <a href="https://man.openbsd.org/vi.1">vi(1)</a>.
! 169: <!-- 2023/09/06 -->
! 170: <li>Allowed override of Subsystem directives in <a href="https://man.openbsd.org/sshd.8">sshd(8)</a> Match blocks.
! 171: <li>Converted exclusive to shared net lock for ip_send() and ip6_send().
! 172: <!-- 2023/09/05 -->
! 173: <li>Reduced latency in vcpu work related to i/o by removing an <a href="https://man.openbsd.org/ioctl.2">ioctl(2)</a> from the vcpu thread hotpath in <a href="https://man.openbsd.org/vmd.8">vmd(8)</a>.
! 174: <li>Switched the APMI CPUID mask to an include mask in <a href="https://man.openbsd.org/vmm.4">vmm(4)</a>.
! 175: <li>Fixed a problem with <a href="https://man.openbsd.org/em.4">em(4)</a> where the I217-LM would fail to receive packets for some of the programmed multicast addresses.
! 176: <Li>Made <a href="https://man.openbsd.org/ksmn.4">ksmn(4)</a> attach to 19h/4x devices.
! 177: <li>Updated to <a href="https://man.openbsd.org/unbound.8">unbound(8)</a> to 1.18.0.
! 178: <li>Fixed touchpads on newer <a href="https://man.openbsd.org/apldc.4">apldc(4)</a> device trees.
! 179: <!-- 2023/09/04 -->
! 180: <li>Fixed <a href="https://man.openbsd.org/netstat.1">netstat(1)</a> output of uses of current SYN cache left.
! 181: <li>Made <a href="https://man.openbsd.org/ssh-keygen.1">ssh-keygen(1)</a> generate Ed25519 keys when invoked without arguments.
! 182: <!-- 2023/09/03 -->
! 183: <li>Set interactive mode for <a href="https://man.openbsd.org/ssh.1">ssh(1)</a> ControlPersist sessions if they originally requested a tty, enabling keystroke timing obfuscation for most ControlPersist sessions.
! 184: <li>Allowed UDP for built-in <a href="https://man.openbsd.org/inetd.8">inetd(8)</a> services on 127.0.0.1.
! 185: <!-- 2023/09/02 -->
! 186: <li>Replaced perl's use of <a href="https://man.openbsd.org/syscall.2">syscall(2)</a> with a dispatcher to libc, removing the ability to do direct syscalls from perl.
! 187: <li>Added <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> Setulc1 for setting underline color for ANSI or 256 colors.
! 188: <li>Used a hardware-based number of KDF rounds by default for passphrases in <a href="https://man.openbsd.org/bioctl.8">bioctl(8)</a> using [-r auto].
! 189: <li>Prevented a crash of <a href="https://man.openbsd.org/iwm.4">iwm(4)</a> when aircrack-ng attempts to inject frames via bpf in monitor mode.
! 190: <!-- 2023/09/01 -->
! 191: <li>Prevented virtio block device stalls due to race conditions with the i8259 in <a href="https://man.openbsd.org/vmd.8">vmd(8)</a>.
! 192: <li>Added <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> detach-on-destroy "previous" and "next" argumennts to switch the client to the previous or next session in alphabetical order.
1.1 pamela 193: <!-- 2023/08/31 -->
194: <li>Corrected a bug where <a href="https://man.openbsd.org/fw_update.8">fw_update(8)</a> exiting unexpectedly would mean the package database never unlocked.
195: <li>Improved feedback from <a href="https://man.openbsd.org/fw_update.8">fw_update(8)</a> by using a spinner to show status rather than printing only at the end.
196: <!-- 2023/08/30 -->
197: <li>Preempt a running proc even if there is no other process/thread queued on that CPU's runqueue. Should fix a problem where RLIMIT_CPU is unreliable on idle systems.
198: <!-- 2023/08/29 -->
199: <li>Added FDT support for <a href="https://man.openbsd.org/dwiic.4">dwiic(4)</a>.
200: <!-- 2023/08/28 -->
201: <li>Made <a href="https://man.openbsd.org/sshd_config.5">sshd_config(5)</a> first-match-wins.
202: <li>Limit artificial login delay to a reasonable maximum (5 seconds) and don't delay at all for the "none" <a href="https://man.openbsd.org/ssh.1">ssh(1)</a> authentication mechanism.
203: <!-- 2023/08/27 -->
204: <li>Added keystroke timing obfuscation to the ssh client via a new <a href="https://man.openbsd.org/ssh_config.5">ssh_config(5)</a> ObscureKeystrokeTiming keyword.
205: <li>Added a pair of <a href="https://man.openbsd.org/ssh.1">ssh(1)</a> transport protocol messages to implement a ping capability.
206: <!-- 2023/08/26 -->
207: <li>Adapted <a href="https://man.openbsd.org/glxclk.4">glxclk(4)</a> for clockintr.
208: <li>Fixed <a href="https://man.openbsd.org/iwx.4">iwx(4)</a> scan command such that the driver selects an SSID during bgscan, a possible fix for fatal firmware error 0x20002806.
209: <!-- 2023/08/25 -->
210: <!-- 2023/08/24 -->
211: <!-- 2023/08/23 -->
212: <li>Added -c to <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> run-shell to set working directory.
213: <!-- 2023/08/22 -->
214: <li>Separated cpu_initclocks() from cpu_startclock() on all platforms, allowing the primary CPU an opportunity to perform clock interrupt preparation in a machine-independent manner.
215: <!-- 2023/08/21 -->
216: <li>Made alpha stop running an independent schedclock() and removed the scaffolding. All platforms now call schedclock() from statclock() at an effective schedhz of ~12.5.
217: <li>Ensured the installer continues until passphrase is confirmed correctly with <a href="https://man.openbsd.org/bioctl.8">bioctl(8)</a> rather than bailing out after three failed attempts.
218: <li>Made <a href="https://man.openbsd.org/bioctl.8">bioctl(8)</a> allow retry of passphrase on mismatch by default, like <a href="https://man.openbsd.org/passwd.1">passwd(1)</a>.
219: <li>Made <a href="https://man.openbsd.org/bioctl.8">bioctl(8)</a> print <a href="https://man.openbsd.org/softraid.4">softraid(4)</a> errors on standard error.
220: <!-- 2023/08/20 -->
221: <li>Made <a href="https://man.openbsd.org/kdump.1">kdump(1)</a> show <a href="https://man.openbsd.org/kqueue1.2">kqueue1(2)</a> flags.
222: <li>Bumped zlib version to 1.3.
223: <li>Added the <a href="https://man.openbsd.org/kqueue1.2">kqueue1()</a> system call, adapted from NetBSD, identical to kqueue() except that the close-on-exec flag on the new file descriptor is determined by the O_CLOEXEC flag in the flags argument.
224: <!-- 2023/08/19 -->
225: <!-- 2023/08/18 -->
226: <li>Check for and disable powerpc64 cores that fail to start.
227: <li>Made <a href="https://man.openbsd.org/bioctl.8">bioctl(8)</a> -s read passphrases without prompts or confirmation.
228: <li>Replaced uvm_meter() with update_loadav() for calculating the loadavg, using a simple timeout instead of being called via schedcpu().
229: <li>Fixed the <a href="https://man.openbsd.org/radiusd.8">radiusd(8)</a> config parser to allow comment lines within the "client" block and improve error messages.
230: <!-- 2023/08/17 -->
231: <li>Added <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> session, pane and user mouse range types for the status line and add format variables for mouse_status_line and mouse_status_range so they can be associated with different commands in the key bindings.
232: <!-- 2023/08/16 -->
233: <li>Removed per-AFI ASPA handling in <a href="https://man.openbsd.org/bgpd.8">bgpd(8)</a> internals but continued to allow the old syntax in aspa-set tables.
234: <!-- 2023/08/15 -->
235: <li>Dropped MSDOSFS from i386 floppy.
236: <li><a href="https://man.openbsd.org/pledge.2">Pledged</a> <a href="https://man.openbsd.org/ldd.1">ldd(1)</a> "stdio rpath proc exec prot_exec", dropping either "proc" or "prot_exec" at the <a href="https://man.openbsd.org/dlopen.3">dlopen(3)</a> vs. <a href="https://man.openbsd.org/execve.2">execve(2)</a> split.
237: <li>Added <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> option menu-selected-style to configure the currently selected menu item.
238: <!-- 2023/08/14 -->
239: <li>Extended scheduler tracepoints to follow CPU jumping.
240: <li>Avoided issuing syscalls on a file descriptor invalidated following a socket error condition in <a href="https://man.openbsd.org/nc.1">nc(1)</a>.
241: <!-- 2023/08/13 -->
242: <li>Improved <a href="https://man.openbsd.org/pckbd.4">pckbd(4)</a> attachment to Chromebook keyboards.
243: <!-- 2023/08/12 -->
244: <li>Improved <a href="https://man.openbsd.org/uwacom.4">uwacom(4)</a> support for Intuos S and One S tablets.
245: <li>Prevented <a href="https://man.openbsd.org/ihidev.4">ihidev(4)</a> power down if the device is already opened, for cases such as an <a href="https://man.openbsd.org/ikbd.4">ikbd(4)</a> attaching to become the console keyboard, then userland opening it only once as an input device so it remains unusable after powering down.
246: <!-- 2023/08/11 -->
247: <li>Added <a href="https://man.openbsd.org/iked.8">iked(8)</a> support for route-based <a href="https://man.openbsd.org/sec.4">sec(4)</a> tunnels.
248: <!-- 2023/08/10 -->
249: <li>Prevented potential reuse of softraid CRYPTO volumes when installing.
250: <li>Allowed libpcap to read files with additional link-layer type values, providing translation between DLT_* and LINKTYPE_* values.
251: <li>Added .VARIABLES to <a href="https://man.openbsd.org/make.1">make(1)</a> to list all the names of global variables that have been set.
252: <li>Corrected display of <a href="https://man.openbsd.org/ldomctl.8">ldomctl(8)</a> 'status' to show zero utilization for stopped guests.
253: <!-- 2023/08/09 -->
254: <li>Bumped <a href="https://man.openbsd.org/ssh.1">OpenSSH</a> to 9.4.
255: <!-- 2023/08/08 -->
256: <li>Added <a href="https://man.openbsd.org/dmesg.8">dmesg(8)</a> display of x86 cpu patch level.
257: <li>Added <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> flag to next-prompt/previous-prompt to go to command output instead.
258: <li>Added <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> options and flags for menu styles similar to those existing for popups.
259: <li>Extended the <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> menu drawing function to support custom characters and styles.
260: <!-- 2023/08/07 -->
261: <li>Made <a href="https://man.openbsd.org/dwqe.4">dwqe(4)</a> work at 1000baseT.
262: <li>Repaired powerdown on Tadpole Ultrabook IIe.
263: <!-- 2023/08/06 -->
264: <li>Added support for route-based ipsec vpn negotiation with <a href="https://man.openbsd.org/sec.4">sec(4)</a> via <a href="https://man.openbsd.org/isakmpd.8">isakmpd(8)</a> to <a href="https://man.openbsd.org/ipsecctl.8">ipsecctl(8)</a> and added "interface secX" for use instead of specifying tunnel/transport modes and traffic selectors.
265: <li>Supported configuring interface SAs for route-based ipsec vpns to <a href="https://man.openbsd.org/isakmpd.8">isakmpd(8)</a> with use of "Interface NUMBER".
266: <li>Allowed userland to install (and see) security associations for route-based ipsec vpns.
267: <li>Introduced <a href="https://man.openbsd.org/sec.4">sec(4)</a>, providing point-to-point tunnel interfaces for IPv4 and IPv6 protected by the <a href="https://man.openbsd.org/ipsec.4">ipsec(4)</a> Encapsulating Security Payload (ESP) protocol.
268: <li>Started adding support for route-based ipsec vpns.
269: <!-- 2023/08/05 -->
270: <!-- 2023/08/04 -->
271: <li>Added support for 8bpp X server on LUNA.
272: <li>Applied <a href="https://man.openbsd.org/ssh.1">ssh(1)</a> ConnectTimeout to multiplexing local socket connections.
273: <!-- 2023/08/03 -->
274: <li>Enable vlan stripping of LRO packets in <a href="https://man.openbsd.org/ix.4">ix(4)</a>.
275: <li>Remove the per-cpu load average calculation.
276: <!-- 2023/08/02 -->
277: <li>Set a low water mark on scsi_xfer_pool and prime it so the pagedaemon can write out pages to swap when we're out of physical memory.
278: <li>Added padding to align on an 8-byte boundary to Xinput on luna88k.
279: <li>Prevented bad memory accesses seen with page flipping on alder lake and raptor lake.
280: <!-- 2023/08/01 -->
281: <li>Fixed mmap-ing size for LUNA framebuffer.
282: <!-- 2023/07/31 -->
283: <li>Added AXP15060 support to <a href="https://man.openbsd.org/axppmic.4">axppmic(4)</a>.
284: <li>Implemented audio input source selection in <a href="https://man.openbsd.org/onyx.4">onyx(4)</a>.
285: <!-- 2023/07/30 -->
286: <li>Ensured retpolines will not serve as a net negative on CPUs with eIBRS (enhanced Indirect Branch Restricted Speculation) or IBT enabled in the kernel.
287: <li>Added JH7110 I2C clocks to <a href="https://man.openbsd.org/stfclock.4">stfclock(4)</a>.
288: <!-- 2023/07/29 -->
289: <!-- 2023/07/28 -->
290: <li>Set OPENSSL_NO_ENGINE and remove engine code.
291: <li>Dropped DSO and defined OPENSSL_NO_DSO.
292: <!-- 2023/07/27 -->
293: <li>Made <a href="https://man.openbsd.org/sshd_config.5">sshd_config(5)</a> AuthorizedPrincipalsCommand and AuthorizedKeysCommand accept the %D (routing domain) and a new %C (connection address/port 4-tuple) as expansion sequences.
294: <li>Increased default KDF work-factor for OpenSSH format private keys from 16 to 24.
295: <li>Fixed inline vlan-tag handling of forwarded LRO packets from <a href="https://man.openbsd.org/ix.4">ix(4)</a>.
296: <li>Fixed verbose logging in <a href="https://man.openbsd.org/vmd.8">vmd(8)</a> child processes.
297: <!-- 2023/07/26 -->
298: <li>Made <a href="https://man.openbsd.org/ssh.1">ssh(1)</a> -f (fork after authentication) work properly in multiplexed cases (including ControlPersist).
299: <!-- 2023/07/25 -->
300: <li>Isolated <a href="https://man.openbsd.org/profil.2">profil(2)</a> and GPROF from statclock() now that we have a machine-independent interface to the clock interrupt hardware.
301: <li>Stopped building unused dhclient.
302: <li>Made the built-in keyboard on the Tadpole UltraBook IIe work.
303: <!-- 2023/07/24 -->
304: <li>Added a check before setting DE_CFG bit 9 to ensure compatibility with hypervisors not allowing msr writes to that bit.
305: <li>Fixed <a href="https://man.openbsd.org/wscons.4">wscons(4)</a> scan code value for the print screen key.
306: <li>Prevented the kernel from accessing random memory after receiving some specially crafted DCS or CSI terminal escape sequences by limiting <a href="https://man.openbsd.org/wscons.4">wscons(4)</a> escape sequence argument count to usable bounds.
307: <li>Set DE_CFG[9], a chickenbit which stops Zenbleed.
308: <li>Corrected <a href="https://man.openbsd.org/dmesg.8">dmesg(8)</a> display of pciprobe output after boot block changes on i386.
309: <!-- 2023/07/23 -->
310: <li><a href="https://man.openbsd.org/pledge.2">Pledged</a> (NULL, "stdio rpath") <a href="https://man.openbsd.org/ldd.1">ldd(1)</a>.
311: <li>Improved <a href="https://man.openbsd.org/xhci.4">xhci(4)</a> suspend/resume support.
312: <li>Implemented <a href="https://man.openbsd.org/apldart.4">apldart(4)</a> suspend/resume support.
313: <li>Prevented a spurious attach/detach/attach sequence when resuming with <a href="https://man.openbsd.org/tipd.4">tipd(4)</a> when a USB device is connected.
314: <li>Removed -stats option from <a href="https://man.openbsd.org/openssl.1">openssl(1)</a> errstr.
315: <!-- 2023/07/22 -->
316: <li>Implemented updates for AMD CPU microcode.
317: <li>Introduced <a href="https://man.openbsd.org/qcsdam.4">qcsdam(4)</a>, a driver for the PMIC Shared Direct Access Memory found on Qualcomm SoCs.
318: <!-- 2023/07/21 -->
319: <!-- 2023/07/20 -->
320: <li>Allow <a href="https://man.openbsd.org/cwm.1">cwm(1)</a> to cycle through windows of the same window class as the active window, default key binding to M-grave, respectively Alt-Tilde, like with other window managers.
321: <li>Capped the size of numbers we check for primality to 32k to block a DoS vector.
322: <!-- 2023/07/19 -->
323: <li>Assigned wsdisplay0 to the glass console always for i386 and amd64 RAMDISK and RAMDISK_CD.
324: <li>Fixed skipping of white space after parsing the username in <a href="https://man.openbsd.org/crontab.1">/etc/crontab</a> to make it consistent with how lines without usernames are parsed.
325: <li>Used "early 2" to attach <a href="https://man.openbsd.org/aplpmgr.4">aplpmgr(4)</a> to make sure it attachs before other core drivers that need to enable power domains.
326: <li>Implemented "early 2" locator for <a href="https://man.openbsd.org/mainbus.4">mainbus(4)</a> and simplebus to make drivers attach even earlier.
327: <li>Protected <a href="https://man.openbsd.org/ixl.4">ixl(4)</a> admin queue with <a href="https://man.openbsd.org/mutex.9">mutex(9)</a>.
328: <li>Separated ssh-pkcs11-helpers for each p11 module in <a href="https://man.openbsd.org/ssh.1">ssh(1)</a> and implemented reference counting, fixing some bugs making PKCS11 keys unusable after they have been deleted.
329: <li>Disallowed remote addition of FIDO/PKCS11 provider libraries to <a href="https://man.openbsd.org/ssh-agent.1">ssh-agent(1)</a> by default.
330: <li>Partially fixed interactive mode in <a href="https://man.openbsd.org/patch.1">patch(1)</a>.
331: <li>Fixed <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> hang by correcting visited flag when the last window list is rebuilt by renumbering windows.
332: <!-- 2023/07/18 -->
333: <li>Enabled LRO for TCP by default in the network drivers (currently supported by <a href="https://man.openbsd.org/ix.4">ix(4)</a> and <a href="https://man.openbsd.org/lo.4">lo(4)</a>). LRO can be turned off per-interface with <a href="https://man.openbsd.org/ifconfig.8">ifconfig(8)</a> -tcplro.
334: <li>With the update of the sleep API, implemented the linux emulation of their wait API, schedule() and set_current_state() in a less hacky way, removing some possible race conditions in the wait API.
335: <!-- 2023/07/17 -->
336: <li>Put the <a href="https://man.openbsd.org/tipd.4">tipd(4)</a> USB Type-C power delivery controller into the "S5" state during suspend, preventing USB devices from consuming power.
337: <!-- 2023/07/16 -->
338: <li>Added support for configuration tags to <a href="https://man.openbsd.org/ssh.1">ssh(1)</a>. Added an <a href="https://man.openbsd.org/ssh_config.5">ssh_config(5)</a> "Tag" directive and corresponding "Match tag" predicate.
339: <li>Added a <a href="https://man.openbsd.org/ssh_config.5">ssh_config(5)</a> "match localnetwork" predicate which may be used to vary the effective client configuration based on network location.
340: <!-- 2023/07/15 -->
341: <li>Implemented Pointer Authentication Code support on AArch64.
342: <li>Fixed use of qcow base images in <a href="https://man.openbsd.org/vmd.8">vmd(8)</a> to avoid device failure during startup post-exec when trying to receive device state from the parent vm process.
343: <li>Added mute control to <a href="https://man.openbsd.org/tascodec.4">tascodec(4)</a>.
344: <li>Used <a href="https://man.openbsd.org/unveil.2">unveil(2)</a> to restrict <a href="https://man.openbsd.org/patch.1">patch(1)</a> to its current working directory.
345: <!-- 2023/07/14 -->
346: <li>Ensured <a href="https://man.openbsd.org/dhcrelay6.8">dhcrelay6(8)</a> does not ignore the AF_LINK entries of <a href="https://man.openbsd.org/carp.4">carp(4)</a> interfaces.
347: <!-- 2023/07/13 -->
348: <li>Pulled validation into local prefix parser in <a href="https://man.openbsd.org/vmd.8">vmd(8)</a>.
349: <li>Checked <a href="https://man.openbsd.org/rcctl.8">rcctl(8)</a> input before trying to disable a non-existing daemon to prevent parsing bogus characters.
350: <li>Made use of the deep idle state available on Apple M1/M2 cores in the idle loop and for suspend, resulting in power savings particularly when running in a state with high clock frequency.
351: <!-- 2023/07/12 -->
352: <li>Adressed incomplete validation of ELF program headers in <a href="https://man.openbsd.org/execve.2">execve(2)</a> which could lead to a panic in vmcmd_map_readvn() with a malformed binary/interpreter.
353: <li>Prevented GPROF kernel crash during resume by disabling _mcount() across suspend/resume in sleep_state().
354: <li>Worked around a use after free in <a href="https://man.openbsd.org/httpd.8">httpd(8)</a> due to a malformed HTTP request when httpd is in fastcgi mode.
355: <li>Prevented a session reset in <a href="https://man.openbsd.org/bgpd.8">bgpd(8)</a> due to parser failure.
356: <li>Used ssize_t instead of short for line lengths to lessen chance of underflow and segfault in <a href="https://man.openbsd.org/patch.1">patch(1)</a> with excessive line length.
357: <!-- 2023/07/11 -->
358: <li>Reworked sleep_setup()/sleep_finish() to no longer hold the scheduler lock between calls.
359: <!-- 2023/07/10 -->
360: <li>Allow <a href="https://man.openbsd.org/unveil.2">unveiled</a> programs to dump core by passing BYPASSUNVEIL just for this vnode.
361: <li>Prevented <a href="https://man.openbsd.org/pax.1">pax(1)</a> from attempting to open a file when creating an archive file even if the file will be skipped due to a -s replacement with the empty string.
362: <!-- 2023/07/09 -->
363: <li>Enabled Indirect Branch Tracking for amd64 userland, using XSAVES/XRSTORS to save/restore the state and enabling it at exec-time (and for signal handling) if the PS_NOBTCFI flag isn"t set.
364: <li>Added PS_NOBTCFI, a per-process flag indicating that Branch Target Control Flow Integrity has beendisabled for the process, to be used by the amd64 code.
365: <li>Added mute control to <a href="https://man.openbsd.org/sncodec.4">sncodec(4)</a>.
366: <li>Added suspend key support to <a href="https://man.openbsd.org/wskbd.4">wskbd(4)</a> and made it work on Apple ARM laptops.
367: <!-- 2023/07/08 -->
368: <li>Added request_sleep(), a machine-independent way of sending the machine to sleep in a safe thread, to amd64, i386 and arm64.
369: <li>Updated to <a href="https://man.openbsd.org/perl.1">perl</a> 5.36.1.
370: <li>Introduced <a href="https://man.openbsd.org/stfpciephy.4">stfpciephy(4)</a>, a driver to control the PCIe 2.0 and USB 3.0 PHY on the StarFive JH7110 SoC.
371: <li>Introduced <a href="https://man.openbsd.org/stfpcie.4">stfpcie(4)</a>, a driver to support the PLDA XpressRICH-AXI PCIe controller on the StarFive JH7110 SoC.
372: <li>Added support for the RK3588 PCIe3 PHY to <a href="https://man.openbsd.org/rkpciephy.4">rkpciephy(4)</a>.
373: <li>Added support for the Motorcomm YT8521/YT8531 PHYs and enabled <a href="https://man.openbsd.org/ytphy.4">ytphy(4)</a> on riscv64.
374: <li>Took initial step toward a machine independent safe sleep API.
375: <li>Toggled IBT off during EFI runtime services calls.
376: <!-- 2023/07/07 -->
377: <li>Introduced <a href="https://man.openbsd.org/ietp.4">ietp(4)</a> driver for Elantech I2C touchpads.
378: <li>Made ld.bfd emit PT_OPENBSD_NOBTCFI.
379: <li>Added <a href="https://man.openbsd.org/rkclock.4">rkclock(4)</a> resets for RK3588 USB 3.0 controllers and clocks for the RK3588 I2C controllers and RK3588 PWM controllers.
380: <li>Provided an optimized bn_mulw() for riscv64 for a 1.5-2x performance gain for BN multiplication and similar gain for RSA operations.
381: <li>Provided a libcrypto Makefile.inc for riscv64.
382: <li>Swapped link-auth filter arguments to prevent filter-rspamd <a href="https://man.openbsd.org/smtpd-filters.7">smtpd-filters(7)</a> crash.
383: <li>Enabled reading RSA-PSS certificates.
384: <li>Added support for multiple batteries to <a href="https://man.openbsd.org/acpithinkpad.4">acpithinkpad(4)</a> setchargestart and setchargestop.
385: <!-- 2023/07/06 -->
386: <li>Added AXP305 support and fixes to <a href="https://man.openbsd.org/axppmic.4">axppmic(4)</a>.
387: <li>Used mtx_init() to initialize stack-based mutexes, ensuring the mutex' lock_object has static storage duration.
388: <li>Cleared <a href="https://man.openbsd.org/knote.9">knote(9)</a>s when finishing wseventvar in <a href="https://man.openbsd.org/wscons.4">wscons(4)</a> to prevent a kernel crash.
389: <li>Taught BFD tools how to handle NOBTCFI.
390: <li>Converted tcp_now() time counter to 64 bit.
391: <li>Registered a mapping of <a href="https://man.openbsd.org/dwge.4">dwge(4)</a> interfaces to ofw nodes/phandles.
392: <li>Removed special cases for IBT/BTI introduced during development.
393: <!-- 2023/07/05 -->
394: <li>Added <a href="https://man.openbsd.org/pfsync.4">pfsync(4)</a> specific locks, introduced pfsync support to partition states into independently-running slices, and made <a href="https://man.openbsd.org/pf.4">pf(4)</a> state purges mpsafe.
395: <li>Handled <a href="https://man.openbsd.org/dwge.4">dwge(4)</a> fixed-link configuration in the device tree.
396: <li>Fixed boot of OpenBSD using Hyper-V on Windows 11.
397: <li>Fixed error in the MSI-X interrupt establish loop for <a href="https://man.openbsd.org/virtio.4">virtio(4)</a> which could lead to fallback to shared IRQs.
398: <li>Made softdep mounts a no-op.
399: <li>Added <a href="https://man.openbsd.org/iwm.4">iwm(4)</a>/<a href="https://man.openbsd.org/iwx.4">iwx(4)</a> background scan task to the queue from which it will be deleted, ensuring proper cancellation during driver state transition.
400: <li>Drop kernel lock before panic to avoid WITNESS report during fault on amd64.
401: <li>Implemented support for the GPIOs on the JH7110, making it possible to reboot the VisionFive 2.
402: <li>Restored (R)esize functionality to sparc64 <a href="https://man.openbsd.org/disklabel.8">disklabel(8)</a>.
403: <!-- 2023/07/04 -->
404: <li>Limited the number of transactions/tickets <a href="https://man.openbsd.org/pf.4">pf(4)</a>'s pf_open_trans() can issue for each clone of /dev/pf to 512, avoiding use of all kernel memory by asking DIOCGETRULES for more tickets.
405: <li>Added StarFive JH7110 support to <a href="https://man.openbsd.org/dwqe.4">dwqe(4)</a>.
406: <li>Introduced DIOCXEND to <a href="https://man.openbsd.org/pf.4">pf(4)</a> (and also <a href="https://man.openbsd.org/snmpd.8">snmpd(8)</a> and <a href="https://man.openbsd.org/systat.1">systat(1)</a>) so applications close when done fetching pf rules and cannot consume all kernel memory.
407: <li>Made the <a href="https://man.openbsd.org/bge.4">bge(4)</a> hardware counters available on BCM5705 and newer available in <a href="https://man.openbsd.org/kstat.1">kstat(1)</a>.
408: <!-- 2023/07/03 -->
409: <li>Added unix domain socket support to <a href="https://man.openbsd.org/ssh.1">ssh(1)</a> -W.
410: <li>Added <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> support for marking lines with a shell prompt based on the OSC 133 extension.
411: <li>Enabled mouse.tp.mtbuttons for apldcms.
412: <li>Updated to makedepend 1.0.8.
413: <li>Updated to fontconfig 2.14.2.
414: <li>Updated to pixman 0.42.2.
415: <li>Updated to xtrans 1.5.0.
416: <li>Updated to libXaw 1.0.15
417: <li>Updated to libXt 1.3.0.
418: <li>Updated to xcb-util 0.4.1.
419: <li>Updated to libxshmfence 1.3.2.
420: <li>Updated to libXvMC 1.0.13.
421: <li>Updated to libXv 1.0.12.
422: <li>Updated to libXrandr 1.5.3.
423: <li>Updated to libXi 1.8.1.
424: <li>Updated to libXfixes 6.0.1.
425: <li>Updated to libXdamage 1.1.6.
426: <li>Updated to libXcomposite 0.4.6.
427: <li>Updated to xf86-video-r128 6.12.1.
428: <li>Updated to xf86-video-ati 22.0.0.
429: <li>Updated to xf86-input-mouse 1.9.5.
430: <li>Updated to xwd 1.0.9.
431: <li>Updated to xrdb 1.2.2.
432: <li>Updated to setxkbmap 1.3.4.
433: <li>Removed tls1.0 and 1.1 related options from <a href="https://man.openbsd.org/openssl.1">openssl(1)</a>.
434: <!-- 2023/07/02 -->
435: <li>Added <a href="https://man.openbsd.org/wsmouse.4">wsmouse(4)</a> button mappings for two- and three-finger clicks on clickpads.
436: <li>Used TSO and LRO on the loopback interface to transfer TCP faster (turned off by default).
437: <li>Removed __HAVE_CLOCKINTR symbol on all platforms.
438: <!-- 2023/07/01 -->
439: <li>Added <a href="https://man.openbsd.org/clockintr_cpu_init.9">clockintr_cpu_init(9)</a> stagger by MAXCPUS.
440: <li>Introduced <a href="https://man.openbsd.org/qccpu.4">qccpu(4)</a>, a driver for Qualcomm Snapdragon CPU power states.
441: <li>Enabled AC detection in <a href="https://man.openbsd.org/qcpas.4">qcpas(4)</a>.
442: <li>Added support for JH7110 to <a href="https://man.openbsd.org/dwmmc.4">dwmmc(4)</a>, making the eMMC and microSD mostly work on the StarFive VisionFive 2.
443: <li>Added support for JH7110 to <a href="https://man.openbsd.org/stftemp.4">stftemp(4)</a>, adding temperature sensor support for the StarFive VisionFive 2.
444: <!-- 2023/06/30 -->
445: <!-- 2023/06/29 -->
446: <li>Fixed S3-based suspend on some newer machines by using an opt-in approach for waking up GREs in <a href="https://man.openbsd.org/acpi.4">acpi(4)</a>/<a href="https://man.openbsd.org/acpibtn.4">acpibtn(4)</a>.
447: <li>Fixed <a href="https://man.openbsd.org/disklabel.8">disklabel(8)</a> handling of 'N-* 100' template entries.
448: <li>Updated to <a href="https://man.openbsd.org/nsd.8">nsd(8)</a> 4.7.0.
449: <li>Rewrote <a href="https://man.openbsd.org/relayd.8">relayd(8)</a> pfe_route() to work on 64bit architectures.
450: <!-- 2023/06/28 -->
451: <li>Added <a href="https://man.openbsd.org/iked.8">iked(8)</a> support to verify x509 chain from CERT payloads.
452: <!-- 2023/06/27 -->
453: <li>Introduced <a href="https://man.openbsd.org/qctsens.4">qctsens(4)</a>, a driver for the Temperature Sensor found on Qualcomm SoCs.
454: <li>Removed net lock from <a href="https://man.openbsd.org/pf.4">pf(4)</a> ioctl DIOC{SET,CLR}IFFLAG.
455: <li>Made it possible to store the kstack or ustack in a map in <a href="https://man.openbsd.org/btrace.8">btrace(8)</a>.
456: <li>Restored interrupts and prevented unconditionally reenabling them in amd64 MCOUNT_EXIT.
457: <!-- 2023/06/26 -->
458: <!-- 2023/06/25 -->
459: <li>Provided <a href="https://man.openbsd.org/kstat.1">kstat(1)</a> information based on the byte and packet counters available in some <a href="https://man.openbsd.org/dwge.4">dwge(4)</a> implementations.
460: <li>Provided additional BN primitives for BN_ULLONG architectures.
461: <!-- 2023/06/24 -->
462: <li>Added initial support for StarFive VisionFive V2 to <a href="https://man.openbsd.org/stfclock.4">stfclock(4)</a>.
463: <!-- 2023/06/23 -->
464: <li>Fixed underlining in <a href="https://man.openbsd.org/ex.1">ex(1)</a> 's' command with the 'c' flag when 'number' is off.
465: <li>Improved <a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a> detection of RRDP session desynchronization.
466: <!-- 2023/06/22 -->
467: <li>Added <a href="https://man.openbsd.org/ksmn.4">ksmn(4)</a> support for the thermal sensors on Ryzen 9 79xx.
468: <!-- 2023/06/21 -->
469: <li>Made <a href="https://man.openbsd.org/ksh.1">ksh(1)</a> escape control characters when displaying file name completions.
470: <li>Fixed potential truncation of filtered data lines in <a href="https://man.openbsd.org/smtpd.8">smtpd(8)</a>.
471: <li>Added <a href="https://man.openbsd.org/ospf6ctl.8">ospf6ctl(8)</a> "fib reload" as in <a href="https://man.openbsd.org/ospfctl.8">ospfctl(8)</a> and made it trigger automatically on a timeout after RTM_DESYNC.
472: <!-- 2023/06/20 -->
473: <li>Made <a href="https://man.openbsd.org/ssh.1">ssh(1)</a> -Q CASignatureAlgorithms' only list signature algorithms that are valid for CA signing.
474: <!-- 2023/06/19 -->
475: <li>Fixed "no comment" not showing when running <a href="https://man.openbsd.org/ssh-keygen.1">ssh-keygen(1)</a> -l on multiple keys where one has a comment and other following keys do not.
476: <li>Fixed line wrapping in <a href="https://man.openbsd.org/fdisk.8">fdisk(8)</a>.
477: <li>Separated <a href="https://man.openbsd.org/shutdown.8">shutdown(8)</a> command access from the "operator" group and into a "_shutdown" group, preventing inappropriate disk read access.
478: <!-- 2023/06/18 -->
479: <li>Allowed use of 'a' as a shortcut for 'autoconf' in the installer.
480: <li>Ensured 'chmod a-x /bsd.upgrade' works to prevent re-upgrade for luna88k, matching other architectures.
481: <li>Switched ECDSA_METHOD usage to EC_KEY_METHOD for <a href="https://man.openbsd.org/smtpd.8">smtpd(8)</a>, the last consumer of the deprecated ECDSA_METHOD.
482: <!-- 2023/06/17 -->
483: <li>Fixed incomplete <a href="https://man.openbsd.org/azalia.4">azalia(4)</a> attachment for Ampere eMAG with an AMD GPU with an HD audio function.
484: <li>Improved speed of Montgomery multiplication.
485: <li>Bumped <a href="https://man.openbsd.org/smtpd.8">smtpd(8)</a> to 7.3.0.
486: <!-- 2023/06/16 -->
487: <li>Fixed IPv6 forward counters and icmp6 redirect when TSO is enabled.
488: <!-- 2023/06/15 -->
489: <li>Fixed CVE-2023-3128: X servers could return values from XQueryExtension allowing Xlib to write out-of-bounds entries.
490: <!-- 2023/06/14 -->
491: <li>Added missing kernel lock around (*if_ioctl)().
492: <!-- 2023/06/13 -->
493: <!-- 2023/06/12 -->
494: <li>Moved nd6_ifdetach() out of netlock.
495: <li>Provided and optimized various quad word primitives, providing performance gain across most BN operations on aaarch64.
496: <li>Prevented printing the last value twice in <a href="https://man.openbsd.org/seq.1">seq(1)</a>.
497: <li>Added content-encoding compression support to <a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a>.
498: <!-- 2023/06/11 -->
499: <!-- 2023/06/10 -->
500: <li>Implemented arm64 support for pointer authentication (PAC) in userland, making it possible to "sign" pointers with a hidden key and provide "tail CFI" similar to what retguard provides. (Disabled for x13s).
501: <li>Introduced <a href="https://man.openbsd.org/qcpas.4">qcpas(4)</a>, a driver for the Peripheral Authentication Service found on Qualcomm SoCs.
502: <!-- 2023/06/09 -->
503: <!-- 2023/06/08 -->
504: <!-- 2023/06/07 -->
505: <!-- 2023/06/06 -->
506: <li>Made the tlsv1.0 and tlsv1.1 options in <a href="https://man.openbsd.org/relayd.8">relayd(8)</a> do nothing in preparation for removal of these protocols.
507: <!-- 2023/06/05 -->
508: <li>Stopped calculating IP, TCP and UDP checksums on loopback interface.
509: <!-- 2023/06/04 -->
510: <!-- 2023/06/03 -->
511: <!-- 2023/06/02 -->
512: <li>Permitted restricted <a href="https://man.openbsd.org/profil.2">profil(2)</a> for <a href="https://man.openbsd.org/moncontrol.3">moncontrol(3)</a> in stdio <a href="https://man.openbsd.org/pledge.2">pledge(2)</a>, moving toward making '-pg' binaries pledge-compatible.
513: <!-- 2023/06/01 -->
514: <li>Added support for wireguard peer descriptions to <a href="https://man.openbsd.org/ifconfig.8">ifconfig(8)</a>.
515: <li>Enabled forwarding of <a href="https://man.openbsd.org/ix.4">ix(4)</a> LRO packets via TSO.
516: <!-- 2023/05/31 -->
517: <!-- 2023/05/30 -->
518: <li>Use generic checksum calculation for TCP SYN+ACK packets.
519: <li>Made <a href="https://man.openbsd.org/id.1">id(1)</a> -R fail when an argument is given.
520: <li>Fixed up file modification timestamps to optimize <a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a> failover from RRDP to RSYNC.
521: <li>Split <a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a> cleanup into cleanup and repository cleanup and show how many files are kept/removed in the repository temporary storage.
522: <!-- 2023/05/29 -->
523: <li>Added IBT support to the X86_64 retpoline+znow PLTs.
524: <li>Prevented hangs with <a href="https://man.openbsd.org/vioscsi.4">vioscsi(4)</a> on qemu/windows and in the Oracle cloud.
525: <!-- 2023/05/28 -->
526: <!-- 2023/05/27 -->
1.2 ! pamela 527: <li>Bumped LibreSSL to 3.8.1.
1.1 pamela 528: <li>Implemented battery charge control in <a href="https://man.openbsd.org/aplsmc.4">aplsmc(4)</a>.
529: <!-- 2023/05/26 -->
530: <li>Removed net lock from <a href="https://man.openbsd.org/pf.4">pf(4)</a> ioctls DIOC{S,G}ETLIMIT.
531: <!-- 2023/05/25 -->
532: <li>Added both udp and tcp for https (HTTP/3 over QUIC) to /etc/services.
533: <li>Ensured forced update of internal key for EVP_PKEY after modification, to handle fallout in several applications following a behavioral change in OpenSSL.
534: <!-- 2023/05/24 -->
535: <li>Fixed <a href="https://man.openbsd.org/sshd_config.5">sshd_config(5)</a> AuthorizedPrincipalsCommand when AuthorizedKeysCommand appears previously in configuration.
536: <!-- 2023/05/23 -->
537: <li>Forced comport initialization for certain classes of device, preventing hang or reboot when com@acpi devices fail the comprobe1() check.
538: <li>Introduced <a href="https://man.openbsd.org/qcaoss.4">qcaoss(4)</a>, a driver for the Always On Subsystem found on Qualcomm SoCs.
539: <li>Added IBT support to retpoline PLTs for X86_64, providing IBT support by default.
540: <!-- 2023/05/22 -->
541: <li>Fixed TSO for traffic to a local address on a physical interface.
542: <!-- 2023/05/21 -->
543: <li>Made <a href="https://man.openbsd.org/ypldap.8">ypldap(8)</a> continue trying LDAP servers until full results are received.
544: <li>Fixed booting from disks >8G on systems where the BIOS uses CHS.
545: <li>Updated to freetype 2.13.0.
546: <!-- 2023/05/20 -->
547: <li>Prevented a self-deadlock of vmmaplk in <a href="https://man.openbsd.org/uvm_map.9">uvm_map(9)</a>.
548: <li>Added an <a href="https://man.openbsd.org/openssl.1">openssl(1)</a> '-unaligned n' option.
549: <li>Implemented battery charge control in <a href="https://man.openbsd.org/acpithinkpad.4">acpithinkpad(4)</a>.
550: <!-- 2023/05/19 -->
551: <li>Introduced <a href="https://man.openbsd.org/qcsmptp.4">qcsmptp(4)</a>, a driver to share 32-bit values between (co-)processors.
552: <li>Introduced <a href="https://man.openbsd.org/qcsmem.4">qcsmem(4)</a>, a driver for the shared memory table on Qualcomm SoCs.
553: <li>Added <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> format for server_sessions.
554: <!-- 2023/05/18 -->
555: <li><a href="https://man.openbsd.org/pledge.2">Pledged(2)</a> <a href="https://man.openbsd.org/waitid.2">waitid(2)</a> stdio.
556: <li>Handle paths with whitespace or metacharacters in <a href="https://man.openbsd.org/user.8">user(8)</a>.
557: <li>Asserted <a href="https://man.openbsd.org/pf.4">pf(4)</a> lock on interface handling.
558: <li>Added TSO offloading to <a href="https://man.openbsd.org/ix.4">ix(4)</a>.
559: <!-- 2023/05/17 -->
560: <li>Introduced <a href="https://man.openbsd.org/qcmtx.4">qcmtx(4)</a>, a driver for the hardware spinlock on Qualcomm SoCs.
561: <li>Introduced <a href="https://man.openbsd.org/qcipcc.4">qcipcc(4)</a>, a driver for the inter-processor mailbox interface used to inform (and be informed) of changes to shared memory state.
562: <li>Added support for the Peripheral Authentication Service SMC interface to <a href="https://man.openbsd.org/qcscm.4">qcscm(4)</a>.
563: <li>Implemented battery management <a href="https://man.openbsd.org/sysctl.8">sysctl(8)</a> (hw.battery.chargemode, hw.battery.chargestop and hw.battery.chargestart).
564: <!-- 2023/05/16 -->
565: <li>Used <a href="https://man.openbsd.org/cp.1">cp(1)</a> to copy dot files in <a href="https://man.openbsd.org/useradd.8">useradd(8)</a> instead of <a href="https://man.openbsd.org/pax.1">pax(1)</a>.
566: <li>Introduced separate capabilities for TCP offloading, split into LRO (large receive offloading) and TSO (TCP segmentation offloading). LRO can be toggled via the <a href="https://man.openbsd.org/ifconfig.8">ifconfig(8)</a> tcprecvoffload option. (2023/06/07: Renamed "tcplro").
567: <!-- 2023/05/15 -->
568: <li>Implemented the TCP/IP layer for hardware TCP segmentation offload.
569: <li>Corrected display of Victoria Day in <a href="https://man.openbsd.org/calendar.1">calendar(1)</a>.
570: <li>Added Juneteenth to the US <a href="https://man.openbsd.org/calendar.1">calendar(1)</a>.
571: <li>Turned on pointer-authentication on arm64 by default, effectively enabling -mbranch-protection=standard on arm64.
572: <!-- 2023/05/14 -->
573: <li>Improved <a href="https://man.openbsd.org/vnconfig.8">vnconfig(8)</a> emulation of a disktab entry (-t), enabling <a href="https://man.openbsd.org/installboot.8">installboot(8)</a> to know the vnd device should be treated as a floppy disk.
574: <!-- 2023/05/13 -->
575: <li>Gave softnet threads unique names by suffixing softnet with their index.
576: <li>Made <a href="https://man.openbsd.org/disklabel.8">disklabel(8)</a> use the d_type value provided by the kernel when creating, editing or printing a disklabel in the absence of the "disktype" command line parameter.
577: <li>Removed the kernel lock from IPv6 neighbor discovery.
578: <!-- 2023/05/12 -->
579: <li>Added <a href="https://man.openbsd.org/axppmic.4">axppmic(4)</a> support to the arm64 RAMDISK to support ethernet on the OrangePi One Plus (Allwinner H6).
580: <li>Added display of interface names in front of <a href="https://man.openbsd.org/ifconfig.8">ifconfig(8)</a> error messages.
581: <li>Added a fallback to load the arm64 kernel from the EFI system partition if booting from a disk without a BSD disklabel.
582: <li>Fixed <a href="https://man.openbsd.org/vmd.8">vmd(8)</a> segfault on vm creation.
583: <li>Added <a href="https://man.openbsd.org/btrace.8">btrace(8)</a> support for symbolizing <a href="https://man.openbsd.org/utrace.2">utrace(2)</a> addresses.
584: <li>Added apple-gumx.h for 6.1.28 <a href="https://man.openbsd.org/drm.4">drm(4)</a>.
585: <li>Removed SHA-512 C implementations other than the semi-unrolled version.
586: <!-- 2023/05/11 -->
587: <li>Fixed <a href="https://man.openbsd.org/iwx.4">iwx(4)</a> firmware error when tearing down the state of association to the AP.
588: <!-- 2023/05/10 -->
589: <li>Added Miller-Rabin test for random bases to BPSW.
590: <li>Implemented TCP send offloading (in software only).
591: <!-- 2023/05/09 -->
592: <li>Updated to xf86-video-sunffb 1.2.3.
593: <li>Reduced possible outcomes when a <a href="https://man.openbsd.org/kevent.2">kevent(2)</a> call and a <a href="https://man.openbsd.org/close.2">close(2)</a> call race on the different ends of a pipe.
594: <li>Renamed 'invalid' to 'disqualified' in the <a href="https://man.openbsd.org/bgpctl.8">bgpctl(8)</a> 'show rib' table.
595: <li>Use partial chains in certificate validation in <a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a>.
596: <!-- 2023/05/08 -->
597: <li>Switched <a href="https://man.openbsd.org/pflogd.8">pflogd(8)</a> from using a bpf read timeout to a wait timeout.
598: <li>Prevented signed integer overflow after INT_MAX bad <a href="https://man.openbsd.org/passwd.1">passwd(1)</a>.
599: <li>Updated to xf86-video-dummy 0.4.1.
600: <li>Added ISO8859-14 font encoding.
601: <!-- 2023/05/07 -->
602: <li>Updated to xinput 1.6.4.
603: <li>Updated to xdpyinfo 1.3.4.
604: <li>Updated to libXpm 3.5.16.
605: <li>Updated to libXres 1.2.2.
606: <li>Updated to libXxf86dga 1.1.6.
607: <li>Updated to libfontenc 1.1.7.
608: <li>Updated to libxkbfile 1.1.2.
609: <li>Updated to libXdmcp 1.1.4.
610: <li>Updated to libXScrnSaver 1.2.4.
611: <li>Updated to libICE 1.1.1.
612: <li>Updated to libXau 1.0.11.
613: <li>Updated to xcalc 1.1.2.
614: <li>Removed net lock from <a href="https://man.openbsd.org/pf.4">pf(4)</a> ioctls DIOCOSFP{FLUSH,ADD,GET}.
615: <li>Updated to libXft 2.3.8.
616: <!-- 2023/05/06 -->
617: <li>Added support for random offsets when using trances with a step value in <a href="https://man.openbsd.org/crontab.1">crontab(1)</a>.
618: <li>Added support for RTL8153D to <a href="https://man.openbsd.org/ure.4">ure(4)</a>.
619: <!-- 2023/05/05 -->
620: <!-- 2023/05/04 -->
621: <li>Pushed kernel lock down to sys_sysctl().
622: <li>Introduced a neighbor discovery mutex.
623: <!-- 2023/05/03 -->
624: <li>Removed net lock from <a href="https://man.openbsd.org/pf.4">pf(4)</a> ioctls DIOCGETRULESET and DIOCGETRULESETS.
625: <!-- 2023/05/02 -->
626: <!-- 2023/05/01 -->
627: <li>Bumped <a href="https://man.openbsd.org/bgpd.8">bgpd(9)</a> to version 8.0.
628: <li>Updated to X server 21.1.8.
629: <!-- 2023/04/30 -->
630: <li>Adjusted <a href="https://man.openbsd.org/sftp.1">sftp(1)</a> ftruncate() logic to handle servers that reorder requests.
631: <li>Removed the EFI RTC implementation on amd64.
632: <!-- 2023/04/29 -->
633: <li>Bumped <a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a> version to 8.4.
634: <li>Removed net lock from <a href="https://man.openbsd.org/pf.4">pf(4)</a> ioctls DIOCGETQUEUE and DIOCGETQUEUES.
635: <!-- 2023/04/28 -->
636: <li>Added <a href="https://man.openbsd.org/dmesg.8">dmesg(8)</a> display of VHE feature.
637: <li>Added rtentry refcnt type to <a href="https://man.openbsd.org/dt.4">dt(4)</a>.
638: <li>Allowed <a href="https://man.openbsd.org/vmd.8">vmd(8)</a> vm owners to override the boot kernel via <a href="https://man.openbsd.org/vmctl.8">vmctl(8)</a> to allow booting of recovery media like a ramdisk kernel.
639: <li>Increased MAXDSIZ to 128G on amd64 and 64G on arm64.
640: <li>Retired <a href="https://man.openbsd.org/OpenBSD-7.3/sparc64/timer.4">timer(4/sparc64)</a> driver.
641: <li>Allowed routers to create new neighbor cache entries when receiving a valid Neighbor Advertisement (RFC9131).
642: <li>Improved speed of DIOCGETRULE <a href="https://man.openbsd.org/ioctl.2">ioctl(2)</a> used by <a href="https://man.openbsd.org/pfctl.8">pfctl(8)</a> to retrieve rules from the kernel.
643: <li>Relaxed <a href="https://man.openbsd.org/pf.4">pf(4)</a> "pass all" rule to allow bidirectional neighbor advertisements.
644: <li>Enabled kernel-address sanitizer for clang openbsd target.
645: <li>Implemented <a href="https://man.openbsd.org/openrsync.1">rsync(1)</a> --size-only and --ignore-times.
646: <!-- 2023/04/27 -->
647: <li>Introduced <a href="https://man.openbsd.org/qcrng.4">qcrng(4)</a>, a driver for the Qualcomm rng device found on the Thinkpad x13s.
648: <li>Added support for RTL8188FTV chip to <a href="https://man.openbsd.org/urtwn.4">urtwn(4)</a>.
649: <li>Introduced <a href="https://man.openbsd.org/vmd.8">vmd(8)</a> multi-process model for virtio devices.
650: <li>Added support for <a href="https://man.openbsd.org/st.4">st(4)</a> I/O statistics so tape speeds may be observed with <a href="https://man.openbsd.org/iostat.8">iostat(8)</a>.
651: <li>Fixed softraid crypto installation on Mac.
652: <li>Implemented <a href="https://man.openbsd.org/rsync.1">rsync(1)</a> -V as an alias to --version.
653: <li>Removed kernel lock from <a href="https://man.openbsd.org/rtfree.9">rtfree(9)</a>.
654: <li>Retired <a href="https://man.openbsd.org/disklabel.8">disklabel(8)</a> -E "expert" mode.
655: <li>Fixed <a href="https://man.openbsd.org/ws.4">ws(4)</a> cursor moving diagonally when moved along the horizontal or vertical axis of a rotated touchscreen.
656: <li>Removed net lock from <a href="https://man.openbsd.org/pf.4">pf(4)</a> ioctl DIOCGETTIMEOUT.
657: <li>Fixed config space access for the root bus of a <a href="https://man.openbsd.org/dwpcie.4">dwpcie(4)</a> controller when the root bus number isn't zero.
658: <li>Added RK3588 support to <a href="https://man.openbsd.org/rkcomphy.4">rkcomphy(4)</a>.
659: <!-- 2023/04/26 -->
660: <li>Handled crypto disks as boot disks in amd64, riscv64 and arm64 installer.
661: <li>Added <a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a> -P option to specify evaluation time for testing.
662: <li>Made llvm emit IBT endbr64 instructions by default for amd64. (Disabled jump tables by default).
663: <li>Introduced 'rtlabel_mtx' <a href="https://man.openbsd.org/mutex.9">mutex(9)</a> to protect route labels storage.
664: <li>Implemented <a href="https://man.openbsd.org/dt.4">dt(4)</a> <a href="https://man.openbsd.org/utrace.2">utrace(2)</a> support on amd64 and i386.
665: <li>Improved <a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a> accounting by tracking things by repository and TAL.
666: <li>Allowed IPv6 neighbor advertisement traffic during netstart on boot.
667: <li>Ensured correct handling of arm64 userland branch target traps.
668: <!-- 2023/04/25 -->
669: <li>Set TSO flag on <a href="https://man.openbsd.org/vlan.4">vlan(4)</a> interfaces.
670: <li>Bumped LibreSSL version to 3.8.0.
671: <li>Send an unsolicited neighbor advertisement to the all-routers multicast address when configuring a new address on an interface to speed IPv6 initial packet return.
672: <li>Prevented bootloader attempts to write to read-only softraid on amd64, sparc64 and i386.
673: <li>Enabled <a href="https://man.openbsd.org/softraid.4">softraid(4)</a> in the riscv64 ramdisk kernel, allowing disk crypto install.
674: <li>Enabled power management for <a href="https://man.openbsd.org/dwpcie.4">dwpcie(4)</a> devices.
675: <li>Added suspend/resume support to <a href="https://man.openbsd.org/pwmbl.4">pwmbl(4)</a>.
676: <li>Made <a href="https://man.openbsd.org/pwmleds.4">pwmleds(4)</a> disable keyboard backlight on Apple Silicon laptops on suspend and restore on wakeup.
677: <li>Fixed suspend/resume on x13s with NVMe+MSI.
678: <li>Added <a href="https://man.openbsd.org/makefs.8">makefs(8)</a> option 'rdroot' to simplify creation of rdroot filesystems for the install media.
679: <!-- 2023/04/24 -->
680: <li>Added endbr64 to amd64 syscall stubs and libcrypto as needed.
681: <li>Added prof_state_toggle to keep a count of CPUs with profiling enabled.
682: <li>Allowed <a href="https://man.openbsd.org/vmm.4">vmm(4)</a> guests to enable and use supervisor IBT.
683: <li>Added default <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> config to <a href="https://man.openbsd.org/changelist.5">changelist(5)</a>.
684: <li>Added <a href="https://man.openbsd.org/rdsetroot.8">rdsetroot(8)</a> -s option to simply display the number of bytes available for the rdroot filesystem in the specified kernel.
685: <li>Used the wxallowed flag to decide whether to enforce branch target temporarily.
686: <li>Added <a href="https://man.openbsd.org/aq.4">aq(4)</a> support for Atlantic 2 hardware.
687: <!-- 2023/04/23 -->
688: <li>Made <a href="https://man.openbsd.org/dwqe.4">dwqe(4)</a> handle fixed-link configuration in the device tree.
689: <li>Randomized the order of TLS extensions.
690: <li>Taught the <a href="https://man.openbsd.org/vmd.8">vmd(8)</a> <a href="https://man.openbsd.org/vmm.4">vmm(4)</a> process how to exec, using <a href="https://man.openbsd.org/execvp.3">execvp(3)</a> to launch vm children with new address spaces and introducing use of <a href="https://man.openbsd.org/unveil.2">unveil(2)</a> into the vmm and vm processes.
691: <li>Stopped setting ri->ri_bs in <a href="https://man.openbsd.org/viogpu.4">viogpu(4)</a> to prevent a panic caused by rasops accessing its uninitialized content.
692: <!-- 2023/04/22 -->
693: <li>Introduced <a href="https://man.openbsd.org/iosf.4">iosf(4)</a>, a driver for the Intel OnChip System Fabric.
694: <li>Call pfkeyv2_sysctl_policydumper() with shared netlock.
695: <li>Fixed <a href="https://man.openbsd.org/openssl.1">openssl(1)</a> UTF-8 issuer printing.
696: <li>Fixed <a href="https://man.openbsd.org/vmd.8">vmd(8)</a> vm send/receive issues due to invalid host-side virtual addresses.
697: <li>Reduced delays used in the <a href="https://man.openbsd.org/dwqe.4">dwqe(4)</a> mii/mdio bus ops, producing a significant speed increase.
698: <!-- 2023/04/21 -->
699: <li>Made <a href="https://man.openbsd.org/mg.1">mg(1)</a> tab width customizable per buffer with mg command set-tab-width.
700: <li>Implemented <a href="https://man.openbsd.org/bgpctl.8">bgpctl(8)</a> flowspec add and delete to add/remove flowspec rules dynamically.
701: <!-- 2023/04/20 -->
702: <li>Call sysctl_source() with shared netlock.
703: <li>Introduced <a href="https://man.openbsd.org/viogpu.4">viogpu(4)</a>, a VirtIO GPU driver.
704: <li>Implemented <a href="https://man.openbsd.org/bgpctl.8">bgpctl(8)</a> show flowspec and flowspec flush.
705: <!-- 2023/04/19 -->
706: <li>Moved kernel lock into multicast ioctl handlers.
707: <li>Forced a standard umask before adding/deleting packages with <a href="https://man.openbsd.org/pkg_add.1">pkg_add(1)</a> and <a href="https://man.openbsd.org/pkg_delete.1">pkg_delete(1)</a>.
708: <li>Protected rtable_setsource() and rtable_getsource() with exclusive and shared netlock respectively.
709: <li>Added a new PT_OPENBSD_NOBTCFI "segment type" to indicate that the kernel should not enforce branch target control flow integrity for a binary. Implemented support for PT_OPENBSD_NOBTCFI in <a href="https://man.openbsd.org/ld.lld.1">lld(1)</a>, which can be set using the -z nobtcfi option.
710: <!-- 2023/04/18 -->
711: <li>Stopped advertising non-removable <a href="https://man.openbsd.org/sdmmc.4">sdmmc(4)</a> devices as removable to the scsi layer.
712: <li>Added <a href="https://man.openbsd.org/dwmshc.4">dwmshc(4)</a> support for Designware Mobile Storage Host Controllers.
713: <li>Added arm64 support for loading files from the EFI system partition.
714: <li>Removed kernel lock from ifa_ifwithaddr() and ifa_ifwithdstaddr().
715: <li>Mapped MSI-X in addition to MSI and INTx on <a href="https://man.openbsd.org/xhci.4">xhci(4)</a>, as it is supported by the xHCI controller on Qemu, which will switch from shared INTx to device-specific MSI-X interrupts.
716: <li>Fixed legacy interrupts on machines that use PNP0C0F PCI interrupt link devices in <a href="https://man.openbsd.org/acpipci.4">acpipci(4)</a>.
717: <li>Call sysctl_ifnames(), sysctl_iflist() and sysctl_dumpentry() with shared netlock.
718: <li>Added support for upstreamed AP806/CP110 bindings in <a href="https://man.openbsd.org/mvtemp.4">mvtemp(4)</a>.
719: <!-- 2023/04/17 -->
720: <li>Made -mbranch-protection=bti the default on OpenBSD.
721: <li>Resurrected <a href="https://man.openbsd.org/mg.1">mg(1)</a>'s no-tab-mode.
722: <li>Implemented a basic API to work with flowspec NLRI in <a href="https://man.openbsd.org/bgpd.8">bgpd(8)</a>.
723: <!-- 2023/04/16 -->
724: <li>Enabled Indirect Branch Tracking (IBT) for the amd64 kernel.
725: <li>Added endbr64 instructions to most amd64 ENTRY() macros, IDTVEC() and KIDTVEC().
726: <li>Changed compilation of regular amd64 kernels to use -fcf-protection=branch and ramdisks with -fcf-protection=none, regardless of compiler default.
727: <li>Modified <a href="https://man.openbsd.org/malloc.3">malloc(3)</a> D option to dump (leak) info using <a href="https://man.openbsd.org/utrace.2">utrace(2)</a>.
728: <li>Added <a href="https://man.openbsd.org/kdump.1">kdump(1)</a> -u label option to print selected <a href="https://man.openbsd.org/utrace.2">utrace(2)</a> records.
729: <li>Fixed <a href="https://man.openbsd.org/pcidump.8">pcidump(8)</a> link speed reporting.
730: <li>Provided <a href="https://man.openbsd.org/evp.3">evp(3)</a> methods for SHA512/224, SHA512/256 and SHA3 224/256/384/512.
731: <li>Added <a href="https://man.openbsd.org/aplpcie.4">aplpci(4)</a> support for the PCIe controller found on M2 Pro/Max SoCs.
732: <li>Dropped support for the x509 ProxyCertInfo extension.
733: <li>Added /etc/mixerctl.conf to <a href="https://man.openbsd.org/changelist.5">changelist(5)</a>.
734: <!-- 2023/04/15 -->
735: <li>Made <a href="https://man.openbsd.org/vmm.4">vmm(4)</a> save and restore Intel CET state on vm entry/exit.
736: <li>Imported tiny_sha3, a minimal and readable SHA3 implementation.
737: <li>Unlocked in_ioctl_get(), pushing the kernel lock into in_ioctl_{set,change}_ifaddr().
738: <!-- 2023/04/14 -->
739: <li>Disallowed issuer and subject unique identifiers in <a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a>.
740: <li>Dropped policy printing from <a href="https://man.openbsd.org/openssl.1">openssl(1)</a>.
741: <li>Made <a href="https://man.openbsd.org/xenodm.1">xenodm(1)</a> reload the environment variables after <a href="https://man.openbsd.org/setusercontext.3">setusercontext(3)</a> so environment variables configured in <a href="https://man.openbsd.org/login.conf.5">login.conf(5)</a> are also available.
742: <li>Added <a href="https://man.openbsd.org/crypto.3">crypto(3)</a> support for truncated SHA512 variants SHA512/224 and SHA512/256.
743: <!-- 2023/04/13 -->
744: <li>Added <a href="https://man.openbsd.org/rkrng.4">rkrng(4)</a> support for "rockchip,cryptov2-rng".
745: <li>Added the "local experiments" ethertypes.
746: <!-- 2023/04/12 -->
747: <li>Pulled MP-safe arprequest() out of the kernel lock.
748: <!-- 2023/04/11 -->
749: <li>Added a new implementation of BN_mod_sqrt().
750: <!-- 2023/04/10 -->
751: <li>Updated to xf86-video-nv 2.1.22.
752: <li>Updated to xf86-input-vmmouse 13.2.0.
753: <li>Updated to xf86-input-void 1.4.2.
754: <li>Updated to xf86-input-mouse 1.9.4.
755: <li>Updated to xf86-input-joystick 1.6.4.
756: <li>Updated to xf86-input-elographics 1.4.3.
757: <li>Updated to xwininfo 1.1.6.
758: <li>Updated to xvidtune 1.0.4.
759: <li>Updated to xkbcomp 1.4.6.
760: <li>Updated to xhost 1.0.9.
761: <li>Updated to xdriinfo 1.0.7.
762: <li>Updated to beforelight 1.0.6.
763: <li>Enabled the caps lock LED on modern Apple laptops.
764: <!-- 2023/04/09 -->
765: <li>Removed X9.31 support from <a href="https://man.openbsd.org/openssl.1">openssl(1)</a>.
766: <!-- 2023/04/08 -->
767: <!-- 2023/04/07 -->
768: <li>Fixed <a href="https://man.openbsd.org/ahci.4">ahci(4)</a>, allowing use of sata on the banana pi bpi-r2 pro.
769: <li>Made <a href="https://man.openbsd.org/dwqe.4">dwqe(4)</a> print the gmac to which it attaches.
770: <li>Removed kernel locks from the ARP input path.
771: <li>Ensured the softraid volume's device is chosen as root disk default for guided disk encryption.
772: <!-- 2023/04/06 -->
773: <li>Updated Mesa to 22.3.7.
774: <!-- 2023/04/05 -->
775: <li>Pushed kernel lock into nd6_resolve().
776: <li>Implemented an mbuf hold queue and <a href="https://man.openbsd.org/sysctl.8">sysctl(8)</a> net.inet6.icmp6.nd6_queued for ND6 as in ARP.
777: <li>Enabled Force Unit Access (FUA) for <a href="https://man.openbsd.org/ufshci.4">ufshci(4)</a> write commands to prevent intermittent data corruption.
778: <li>Ensured the PCIe link for the RK3568 PCIe controllers runs at the maximum possible speed.
779: <li>Implemented software control for the internal delays of the RTL8211F PHY.
780: <!-- 2023/04/04 -->
781: <li>Ensured correct checksum is calculated when sending IP packets to userland with divert-packet rules.
782: <li>Enabled guided disk encryption support on arm64.
783: <li>Made root on softraid installations boot out of the box on Raspberry Pis.
784: <!-- 2023/04/03 -->
785: <li>Prevented an accidental second sleep after resume when the lid is closed on a Dell Precision 5510.
786: <!-- 2023/04/02 -->
787: <li>Added <a href="https://man.openbsd.org/ehci.4">ehci(4)</a> support for using standard phy drivers registered with ofw/fdt first, allowing ehci to enable <a href="https://man.openbsd.org/rkusbphy.4">rkusbphy(4)</a>.
788: <li>Added <a href="https://man.openbsd.org/xhci.4">xhci(4)</a> support for enabling both the usb2 and usb3 phys. Added support for using standard phy drivers registered with the ofw/fdt code.
789: <li>Added glue for network interfaces to be found by fdt/ofw node or phandle and registered <a href="https://man.openbsd.org/mvneta.4">mvneta(4)</a> and <a href="https://man.openbsd.org/dwqe.4">dwqe(4)</a> mappings.
790: <li>Added a mutex to protect <a href="https://man.openbsd.org/clockintr.9">clockintr(9)</a> struct clockintr_queue.
791: <li>Added support for TEMPerGold 3.4 to <a href="https://man.openbsd.org/ugold.4">ugold(4)</a>.
792: <!-- 2023/04/01 -->
793: <li>Introduced <a href="https://man.openbsd.org/rkusbphy.4">rkusbphy(4)</a>, a driver for the usb2phy on Rockchip SoCs.
794: <li>Introduced <a href="https://man.openbsd.org/rkiovd.4">rkiovd(4)</a>, a driver for the IO voltage domains on Rockchip SoCs.
795: <li>Implemented regulator notifiers called when the voltage/current for a regulator is changed or when a regulator is initialized when it attaches for the first time.
796: <!-- 2023/03/31 -->
797: <li>Introduced <a href="https://man.openbsd.org/ngbe.4">ngbe(4)</a>, a driver for the WangXun WX1860 series Gigabit Ethernet device.
798: <!-- 2023/03/30 -->
799: <li>Significantly reduced <a href="https://man.openbsd.org/ypldap.8">ypldap(8)</a> memory usage when updating larger directories.
800: <!-- 2023/03/29 -->
801: <!-- 2023/03/28 -->
802: <li>Updated timezone data to include reversion of DST change in Lebanon.
803: <li>Introduced a <a href="https://man.openbsd.org/bgpd.8">bgpd(8)</a> semaphore to protect intermediate state from different RTR sessions from leaking into the RDE.
804: <li>Made <a href="https://man.openbsd.org/mg.1">mg(1)</a> fall back to /bin/sh if $SHELL is undefined.
805: <!-- 2023/03/27 -->
806: <li>Implemented branch target protection using the branch target identification feature introduced in Armv8.5, providing "head-CFI" to complement retguard's "tail-CFI."
807: <li>Added <a href="https://man.openbsd.org/dmesg.8">dmesg(8)</a> display of arm64 BT and SBSS features.
808: <li>Added a <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> format to show if there are unseen changes while in a node.
809: <li>Prevented write to clients attached to different sessions in <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> passthrough.
810: <!-- 2023/03/26 -->
811: <li>Added tilde and environment variable expansion to <a href="https://man.openbsd.org/ssh_config.5">ssh_config(5)</a> RevokedHostKeys.
812: <li>Added a check to <a href="https://man.openbsd.org/scp.1">scp(1)</a> to ensure a local source file exists before opening an SFTP connection to a remote server.
813: <li>Fixed <a href="https://man.openbsd.org/dwqe.4">dwqe(4)</a> on several boards using <a href="https://man.openbsd.org/rgephy.4">rgephy(4)</a>.
814: <li>Added <a href="https://man.openbsd.org/rkclock.4">rkclock(4)</a> support for the RK3568 32k RTC clock.
815: <!-- 2023/03/25 -->
816: <li>Improved <a href="https://man.openbsd.org/fdisk.8">fdisk(8)</a> comments documenting possible sources for MBR partition types and GPT partition GUIDs.
817: <li>Changed <a href="https://man.openbsd.org/malloc.3">malloc(3)</a> chunk sizes to be fine grained.
818: <!-- 2023/03/24 -->
819: <li>Moved to 7.3-current.
820: </ul>