[BACK]Return to plus74.html CVS log [TXT][DIR] Up to [local] / www

Annotation of www/plus74.html, Revision 1.2

1.1       pamela      1: <!doctype html>
                      2: <html lang=en id=plus>
                      3: <meta charset=utf-8>
                      4: <title>OpenBSD 7.4 Changelog</title>
                      5: <meta name="description" content="OpenBSD 7.4 changes">
                      6: <meta name="viewport" content="width=device-width, initial-scale=1">
                      7: <link rel="stylesheet" type="text/css" href="openbsd.css">
                      8: <link rel="canonical" href="https://www.openbsd.org/plus74.html">
                      9: <style>
                     10: strong {
                     11:        color: var(--red);
                     12:        font-weight: normal;
                     13: }
                     14:
                     15: h3 {
                     16:        color: var(--blue);
                     17: }
                     18: </style>
                     19:
                     20: <h2 id=OpenBSD>
                     21: <a href="index.html">
                     22: <i>Open</i><b>BSD</b></a>
                     23: 7.4 Changelog
                     24: </h2>
                     25: <hr>
                     26:
                     27: <p>
                     28: This selection is intended to include all important
                     29: and all user-visible changes.
                     30: For a complete record of all changes, please see the "source-changes"
                     31: mailing list, called "OpenBSD CVS"
                     32: in the <a href="https://marc.info/?l=openbsd-cvs">archives</a>,
                     33: or use <a href="anoncvs.html#CVS">CVS</a>.
                     34:
                     35: <p>
                     36: For changes in other releases, click below:<br>
                     37: <a href="plus20.html">2.0</a>,
                     38: <a href="plus21.html">2.1</a>,
                     39: <a href="plus22.html">2.2</a>,
                     40: <a href="plus23.html">2.3</a>,
                     41: <a href="plus24.html">2.4</a>,
                     42: <a href="plus25.html">2.5</a>,
                     43: <a href="plus26.html">2.6</a>,
                     44: <a href="plus27.html">2.7</a>,
                     45: <a href="plus28.html">2.8</a>,
                     46: <a href="plus29.html">2.9</a>,
                     47: <a href="plus30.html">3.0</a>,
                     48: <a href="plus31.html">3.1</a>,
                     49: <a href="plus32.html">3.2</a>,
                     50: <a href="plus33.html">3.3</a>,
                     51: <a href="plus34.html">3.4</a>,
                     52: <a href="plus35.html">3.5</a>,
                     53: <a href="plus36.html">3.6</a>,
                     54: <br>
                     55: <a href="plus37.html">3.7</a>,
                     56: <a href="plus38.html">3.8</a>,
                     57: <a href="plus39.html">3.9</a>,
                     58: <a href="plus40.html">4.0</a>,
                     59: <a href="plus41.html">4.1</a>,
                     60: <a href="plus42.html">4.2</a>,
                     61: <a href="plus43.html">4.3</a>,
                     62: <a href="plus44.html">4.4</a>,
                     63: <a href="plus45.html">4.5</a>,
                     64: <a href="plus46.html">4.6</a>,
                     65: <a href="plus47.html">4.7</a>,
                     66: <a href="plus48.html">4.8</a>,
                     67: <a href="plus49.html">4.9</a>,
                     68: <a href="plus50.html">5.0</a>,
                     69: <a href="plus51.html">5.1</a>,
                     70: <a href="plus52.html">5.2</a>,
                     71: <a href="plus53.html">5.3</a>,
                     72: <br>
                     73: <a href="plus54.html">5.4</a>,
                     74: <a href="plus55.html">5.5</a>,
                     75: <a href="plus56.html">5.6</a>,
                     76: <a href="plus57.html">5.7</a>,
                     77: <a href="plus58.html">5.8</a>,
                     78: <a href="plus59.html">5.9</a>,
                     79: <a href="plus60.html">6.0</a>,
                     80: <a href="plus61.html">6.1</a>,
                     81: <a href="plus62.html">6.2</a>,
                     82: <a href="plus63.html">6.3</a>,
                     83: <a href="plus64.html">6.4</a>,
                     84: <a href="plus65.html">6.5</a>,
                     85: <a href="plus66.html">6.6</a>,
                     86: <a href="plus67.html">6.7</a>,
                     87: <a href="plus68.html">6.8</a>,
                     88: <a href="plus69.html">6.9</a>,
                     89: <a href="plus70.html">7.0</a>,
                     90: <br>
                     91: <a href="plus71.html">7.1</a>,
                     92: <a href="plus72.html">7.2</a>,
                     93: <a href="plus73.html">7.3</a>,
                     94: <a href="plus.html">current</a>.
                     95: <br>
                     96:
                     97: <p>
                     98: <h3>Changes made between OpenBSD 7.3 and 7.4</h3>
                     99: <p>
                    100:
                    101: <ul>
1.2     ! pamela    102: <!-- 2023/10/01 -->
        !           103: <li>Added <a href="https://man.openbsd.org/sysctl.2">sysctl(2)</a> hw.ucomnames to list "fixed" paths to USB serial ports.
        !           104: <li>Fixed an <a href="https://man.openbsd.org/aq.4">aq(4)</a> issue where Atlantic 2 hardware would stop transmitting packets under load on the M2 Pro Mac mini.
        !           105: <!-- 2023/09/30 -->
        !           106: <!-- 2023/09/29 -->
        !           107: <li>Replaced kernel lock with mutex in <a href="https://man.openbsd.org/ixl.4">ixl(4)</a> media status, preventing a potential deadlock.
        !           108: <li>Fixed crashes with <a href="https://man.openbsd.org/ipsecctl.8">ipsecctl(8)</a> -m by only forwarding validated pfkey messages to promiscuous listeners.
        !           109: <li>Bumped <a href="https://man.openbsd.org/smtpd.8">smtpd(8)</a> to 7.4.0.
        !           110: <li>Extended single_thread_set() mode with additional flag attributes SINGLE_DEEP and SINGLE_NOWAIT.
        !           111: <!-- 2023/09/28 -->
        !           112: <li>Bumped <a href="https://man.openbsd.org/bgpd.8">OpenBGPD</a> to 8.2.
        !           113: <!-- 2023/09/27 -->
        !           114: <li>Prevented <a href="https://man.openbsd.org/fw_update.8">fw_update(8)</a> from registering firmware already in /var/db/pkg.
        !           115: <li>Corrected exit from <a href="https://man.openbsd.org/fw_update.8">fw_update(8)</a>.
        !           116: <li>Made <a href="https://man.openbsd.org/fw_update.8">fw_update(8)</a> download firmware to LOCALSRC when using filenames.
        !           117: <li>Made <a href="https://man.openbsd.org/deroff.1">deroff(1)</a> use a dynamically-allocated line buffer and resize as needed, fixing a buffer overflow for lines over 2048 bytes.
        !           118: <!-- 2023/09/26 -->
        !           119: <li>Used existing 'audio_lock' <a href="https://man.openbsd.org/mutex.9">mutex(9)</a> to make 'midi{read,write}_filtops' MP safe.
        !           120: <li>Had <a href="https://man.openbsd.org/wg.4">wg(4)</a> copy the priority from the inner packet to the outer encrypted packet, so that higher priority packets are picked from hfsc queues for earlier transmission.
        !           121: <!-- 2023/09/25 -->
        !           122: <li>Disambiguated <a href="https://man.openbsd.org/vmd.8">vmd(8)</a> log messages per vm and device. Fixed updating log settings dynamically via <a href="https://man.openbsd.org/vmctl.8">vmctl(8)</a>. The "vmm" process now updates its own state properly, so settings survive vm reboots.
        !           123: <li>Fixed a <a href="https://man.openbsd.org/vmd.8">vmd(8)</a> vm pause deadlock.
        !           124: <li>Implemented <a href="https://man.openbsd.org/apldart.4">apldart(4)</a> support for stream IDs.
        !           125: <li>Added <a href="https://man.openbsd.org/mbg.4">mbg(4)</a> support for the Meinberg PZF180PEX DCF77 time signal station receiver card.
        !           126: <li>Enabled <a href="https://man.openbsd.org/mbg.4">mbg(4)</a> at pci on amd64.
        !           127: <!-- 2023/09/24 -->
        !           128: <li>Dropped PTE check in riscv64 pmap_fault_fixup(), resulting in performance improvements.
        !           129: <!-- 2023/09/23 -->
        !           130: <li>Introduced <a href="https://man.openbsd.org/stfrng.4">stfrng(4)</a>, a driver for the random number generator on the JH7110 SoC.
        !           131: <li>Log the <a href="https://man.openbsd.org/vmd.8">vmd(8)</a> vm id instead of the kernel <a href="https://man.openbsd.org/vmm.4">vmm(4)</a> id in vcpu_run_loop.
        !           132: <!-- 2023/09/22 -->
        !           133: <li>Introduced 'hotplug_mtx' <a href="https://man.openbsd.org/mutex.9">mutex(9)</a> and made 'hotplug_filtops' MP safe.
        !           134: <li>Made 'logread_filterops' MP safe.
        !           135: <li>Significantly increased the speed of <a href="https://man.openbsd.org/pkg-config.1">pkg-config(1)</a>.
        !           136: <!-- 2023/09/21 -->
        !           137: <li>Enabled <a href="https://man.openbsd.org/softraid.4">softraid(4)</a> in powerpc64 RAMDISK.
        !           138: <!-- 2023/09/20 -->
        !           139: <li>Bumped LibreSSL to 3.8.2.
        !           140: <!-- 2023/09/19 -->
        !           141: <li>Improved the output of <a href="https://man.openbsd.org/ddb.4">ddb(4)</a> "show proc" command and added "/t" as an argument that can be used to specify a proc by TID instead of address.
        !           142: <!-- 2023/09/18 -->
        !           143: <li>Disabled utf-8 for non-multibyte locales in <a href="https://man.openbsd.org/awk.1">awk(1)</a>, making it possible to get the old awk behavior (where chars are bytes) by setting LC_CTYPE to C or POSIX.
        !           144: <li>Moved to 7.4-beta.
        !           145: <!-- 2023/09/17 -->
        !           146: <li>Updated <a href="https://man.openbsd.org/awk.1">awk(1)</a> to the Sep 12, 2023 version, corresponding to the 2nd edition of "The AWK Programming Language" and adding support for UTF-8 and comma-separated value inputs.
        !           147: <!-- 2023/09/16 -->
        !           148: <li>Allowed <a href="https://man.openbsd.org/counters_read.9">counters_read(9)</a> to take an optional scratch buffer, allowing the <a href="https://man.openbsd.org/ddb.4">ddb(4)</a> show uvmexp command to work in OOM situations.
        !           149: <!-- 2023/09/15 -->
        !           150: <li>Added <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> source-file -t option to specify a target pane.
        !           151: <!-- 2023/09/14 -->
        !           152: <li>Used zero-copy approach and vectored io in <a href="https://man.openbsd.org/vmd.8">vmd(8)</a>/<a href="https://man.openbsd.org/vioblk.4">vioblk(4)</a>, reducing memcpy and multiple read/write syscalls per io transaction.
        !           153: <!-- 2023/09/13 -->
        !           154: <!-- 2023/09/12 -->
        !           155: <!-- 2023/09/11 -->
        !           156: <li>Implemented tuples in <a href="https://man.openbsd.org/btrace.8">btrace(8)</a>, allowing export of per-CPU scheduling data.
        !           157: <li>Prevented <a href="https://man.openbsd.org/unwind.8">unwind(8)</a> entering a loop due to constant ENOBUF receipt.
        !           158: <!-- 2023/09/10 -->
        !           159: <li>Updated <a href="https://man.openbsd.org/awk.1">awk(1)</a> to the Sep 6, 2023 version.
        !           160: <li>Load amd patch into a <a href="https://man.openbsd.org/malloc.3">malloc'd</a> region to make it page aligned, avoiding a General-Protection Exception on patch loader wrmsr with A10-5700, TN-A1 00610f01 15-10-01.
        !           161: <!-- 2023/09/09 -->
        !           162: <li>Updated <a href="https://man.openbsd.org/awk.1">awk(1)</a> to the Dec 15, 2022 version: Force hex escapes in strings to be no more than two characters, as they already are in regular expressions.
        !           163: <li>Corrected TP-LINK bluetooth ID in <a href="https://man.openbsd.org/ure.4">ure(4)</a>.
        !           164: <!-- 2023/09/08 -->
        !           165: <!-- 2023/09/07 -->
        !           166: <li>Added a request or response declaration feature used through the <a href="https://man.openbsd.org/radiusd.8">radiusd(8)</a> module interface, allowing additional modules to modify RADIUS request or response messages.
        !           167: <li>Fixed <a href="https://man.openbsd.org/scp.1">scp(1)</a> in SFTP mode recursive upload and download of directories that contain symlinks to other directories.
        !           168: <li>Treat consecutive paragraph indicators as different paragraphs in <a href="https://man.openbsd.org/vi.1">vi(1)</a>.
        !           169: <!-- 2023/09/06 -->
        !           170: <li>Allowed override of Subsystem directives in <a href="https://man.openbsd.org/sshd.8">sshd(8)</a> Match blocks.
        !           171: <li>Converted exclusive to shared net lock for ip_send() and ip6_send().
        !           172: <!-- 2023/09/05 -->
        !           173: <li>Reduced latency in vcpu work related to i/o by removing an <a href="https://man.openbsd.org/ioctl.2">ioctl(2)</a> from the vcpu thread hotpath in <a href="https://man.openbsd.org/vmd.8">vmd(8)</a>.
        !           174: <li>Switched the APMI CPUID mask to an include mask in <a href="https://man.openbsd.org/vmm.4">vmm(4)</a>.
        !           175: <li>Fixed a problem with <a href="https://man.openbsd.org/em.4">em(4)</a> where the I217-LM would fail to receive packets for some of the programmed multicast addresses.
        !           176: <Li>Made <a href="https://man.openbsd.org/ksmn.4">ksmn(4)</a> attach to 19h/4x devices.
        !           177: <li>Updated to <a href="https://man.openbsd.org/unbound.8">unbound(8)</a> to 1.18.0.
        !           178: <li>Fixed touchpads on newer <a href="https://man.openbsd.org/apldc.4">apldc(4)</a> device trees.
        !           179: <!-- 2023/09/04 -->
        !           180: <li>Fixed <a href="https://man.openbsd.org/netstat.1">netstat(1)</a> output of uses of current SYN cache left.
        !           181: <li>Made <a href="https://man.openbsd.org/ssh-keygen.1">ssh-keygen(1)</a> generate Ed25519 keys when invoked without arguments.
        !           182: <!-- 2023/09/03 -->
        !           183: <li>Set interactive mode for <a href="https://man.openbsd.org/ssh.1">ssh(1)</a> ControlPersist sessions if they originally requested a tty, enabling keystroke timing obfuscation for most ControlPersist sessions.
        !           184: <li>Allowed UDP for built-in <a href="https://man.openbsd.org/inetd.8">inetd(8)</a> services on 127.0.0.1.
        !           185: <!-- 2023/09/02 -->
        !           186: <li>Replaced perl's use of <a href="https://man.openbsd.org/syscall.2">syscall(2)</a> with a dispatcher to libc, removing the ability to do direct syscalls from perl.
        !           187: <li>Added <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> Setulc1 for setting underline color for ANSI or 256 colors.
        !           188: <li>Used a hardware-based number of KDF rounds by default for passphrases in <a href="https://man.openbsd.org/bioctl.8">bioctl(8)</a> using [-r auto].
        !           189: <li>Prevented a crash of <a href="https://man.openbsd.org/iwm.4">iwm(4)</a> when aircrack-ng attempts to inject frames via bpf in monitor mode.
        !           190: <!-- 2023/09/01 -->
        !           191: <li>Prevented virtio block device stalls due to race conditions with the i8259 in <a href="https://man.openbsd.org/vmd.8">vmd(8)</a>.
        !           192: <li>Added <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> detach-on-destroy "previous" and "next" argumennts to switch the client to the previous or next session in alphabetical order.
1.1       pamela    193: <!-- 2023/08/31 -->
                    194: <li>Corrected a bug where <a href="https://man.openbsd.org/fw_update.8">fw_update(8)</a> exiting unexpectedly would mean the package database never unlocked.
                    195: <li>Improved feedback from <a href="https://man.openbsd.org/fw_update.8">fw_update(8)</a> by using a spinner to show status rather than printing only at the end.
                    196: <!-- 2023/08/30 -->
                    197: <li>Preempt a running proc even if there is no other process/thread queued on that CPU's runqueue. Should fix a problem where RLIMIT_CPU is unreliable on idle systems.
                    198: <!-- 2023/08/29 -->
                    199: <li>Added FDT support for <a href="https://man.openbsd.org/dwiic.4">dwiic(4)</a>.
                    200: <!-- 2023/08/28 -->
                    201: <li>Made <a href="https://man.openbsd.org/sshd_config.5">sshd_config(5)</a> first-match-wins.
                    202: <li>Limit artificial login delay to a reasonable maximum (5 seconds) and don't delay at all for the "none" <a href="https://man.openbsd.org/ssh.1">ssh(1)</a> authentication mechanism.
                    203: <!-- 2023/08/27 -->
                    204: <li>Added keystroke timing obfuscation to the ssh client via a new <a href="https://man.openbsd.org/ssh_config.5">ssh_config(5)</a> ObscureKeystrokeTiming keyword.
                    205: <li>Added a pair of <a href="https://man.openbsd.org/ssh.1">ssh(1)</a> transport protocol messages to implement a ping capability.
                    206: <!-- 2023/08/26 -->
                    207: <li>Adapted <a href="https://man.openbsd.org/glxclk.4">glxclk(4)</a> for clockintr.
                    208: <li>Fixed <a href="https://man.openbsd.org/iwx.4">iwx(4)</a> scan command such that the driver selects an SSID during bgscan, a possible fix for fatal firmware error 0x20002806.
                    209: <!-- 2023/08/25 -->
                    210: <!-- 2023/08/24 -->
                    211: <!-- 2023/08/23 -->
                    212: <li>Added -c to <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> run-shell  to set working directory.
                    213: <!-- 2023/08/22 -->
                    214: <li>Separated cpu_initclocks() from cpu_startclock() on all platforms, allowing the primary CPU an opportunity to perform clock interrupt preparation in a machine-independent manner.
                    215: <!-- 2023/08/21 -->
                    216: <li>Made alpha stop running an independent schedclock() and removed the scaffolding. All platforms now call schedclock() from statclock() at an effective schedhz of ~12.5.
                    217: <li>Ensured the installer continues until passphrase is confirmed correctly with <a href="https://man.openbsd.org/bioctl.8">bioctl(8)</a> rather than bailing out after three failed attempts.
                    218: <li>Made <a href="https://man.openbsd.org/bioctl.8">bioctl(8)</a> allow retry of passphrase on mismatch by default, like <a href="https://man.openbsd.org/passwd.1">passwd(1)</a>.
                    219: <li>Made <a href="https://man.openbsd.org/bioctl.8">bioctl(8)</a> print <a href="https://man.openbsd.org/softraid.4">softraid(4)</a> errors on standard error.
                    220: <!-- 2023/08/20 -->
                    221: <li>Made <a href="https://man.openbsd.org/kdump.1">kdump(1)</a> show <a href="https://man.openbsd.org/kqueue1.2">kqueue1(2)</a> flags.
                    222: <li>Bumped zlib version to 1.3.
                    223: <li>Added the <a href="https://man.openbsd.org/kqueue1.2">kqueue1()</a> system call, adapted from NetBSD, identical to kqueue() except that the close-on-exec flag on the new file descriptor is determined by the O_CLOEXEC flag in the flags argument.
                    224: <!-- 2023/08/19 -->
                    225: <!-- 2023/08/18 -->
                    226: <li>Check for and disable powerpc64 cores that fail to start.
                    227: <li>Made <a href="https://man.openbsd.org/bioctl.8">bioctl(8)</a> -s read passphrases without prompts or confirmation.
                    228: <li>Replaced uvm_meter() with update_loadav() for calculating the loadavg, using a simple timeout instead of being called via schedcpu().
                    229: <li>Fixed the <a href="https://man.openbsd.org/radiusd.8">radiusd(8)</a> config parser to allow comment lines within the "client" block and improve error messages.
                    230: <!-- 2023/08/17 -->
                    231: <li>Added <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> session, pane and user mouse range types for the status line and add format variables for mouse_status_line and mouse_status_range so they can be associated with different commands in the key bindings.
                    232: <!-- 2023/08/16 -->
                    233: <li>Removed per-AFI ASPA handling in <a href="https://man.openbsd.org/bgpd.8">bgpd(8)</a> internals but continued to allow the old syntax in aspa-set tables.
                    234: <!-- 2023/08/15 -->
                    235: <li>Dropped MSDOSFS from i386 floppy.
                    236: <li><a href="https://man.openbsd.org/pledge.2">Pledged</a> <a href="https://man.openbsd.org/ldd.1">ldd(1)</a> "stdio rpath proc exec prot_exec", dropping either "proc" or "prot_exec" at the <a href="https://man.openbsd.org/dlopen.3">dlopen(3)</a> vs. <a href="https://man.openbsd.org/execve.2">execve(2)</a> split.
                    237: <li>Added <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> option menu-selected-style to configure the currently selected menu item.
                    238: <!-- 2023/08/14 -->
                    239: <li>Extended scheduler tracepoints to follow CPU jumping.
                    240: <li>Avoided issuing syscalls on a file descriptor invalidated following a socket error condition in <a href="https://man.openbsd.org/nc.1">nc(1)</a>.
                    241: <!-- 2023/08/13 -->
                    242: <li>Improved <a href="https://man.openbsd.org/pckbd.4">pckbd(4)</a> attachment to Chromebook keyboards.
                    243: <!-- 2023/08/12 -->
                    244: <li>Improved <a href="https://man.openbsd.org/uwacom.4">uwacom(4)</a> support for Intuos S and One S tablets.
                    245: <li>Prevented <a href="https://man.openbsd.org/ihidev.4">ihidev(4)</a> power down if the device is already opened, for cases such as an <a href="https://man.openbsd.org/ikbd.4">ikbd(4)</a> attaching to become the console keyboard, then userland opening it only once as an input device so it remains unusable after powering down.
                    246: <!-- 2023/08/11 -->
                    247: <li>Added <a href="https://man.openbsd.org/iked.8">iked(8)</a> support for route-based <a href="https://man.openbsd.org/sec.4">sec(4)</a> tunnels.
                    248: <!-- 2023/08/10 -->
                    249: <li>Prevented potential reuse of softraid CRYPTO volumes when installing.
                    250: <li>Allowed libpcap to read files with additional link-layer type values, providing translation between DLT_* and LINKTYPE_* values.
                    251: <li>Added .VARIABLES to <a href="https://man.openbsd.org/make.1">make(1)</a> to list all the names of global variables that have been set.
                    252: <li>Corrected display of <a href="https://man.openbsd.org/ldomctl.8">ldomctl(8)</a> 'status' to show zero utilization for stopped guests.
                    253: <!-- 2023/08/09 -->
                    254: <li>Bumped <a href="https://man.openbsd.org/ssh.1">OpenSSH</a> to 9.4.
                    255: <!-- 2023/08/08 -->
                    256: <li>Added <a href="https://man.openbsd.org/dmesg.8">dmesg(8)</a> display of x86 cpu patch level.
                    257: <li>Added <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> flag to next-prompt/previous-prompt to go to command output instead.
                    258: <li>Added <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> options and flags for menu styles similar to those existing for popups.
                    259: <li>Extended the <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> menu drawing function to support custom characters and styles.
                    260: <!-- 2023/08/07 -->
                    261: <li>Made <a href="https://man.openbsd.org/dwqe.4">dwqe(4)</a> work at 1000baseT.
                    262: <li>Repaired powerdown on Tadpole Ultrabook IIe.
                    263: <!-- 2023/08/06 -->
                    264: <li>Added support for route-based ipsec vpn negotiation with <a href="https://man.openbsd.org/sec.4">sec(4)</a> via <a href="https://man.openbsd.org/isakmpd.8">isakmpd(8)</a> to <a href="https://man.openbsd.org/ipsecctl.8">ipsecctl(8)</a> and added "interface secX" for use instead of specifying tunnel/transport modes and traffic selectors.
                    265: <li>Supported configuring interface SAs for route-based ipsec vpns to <a href="https://man.openbsd.org/isakmpd.8">isakmpd(8)</a> with use of "Interface NUMBER".
                    266: <li>Allowed userland to install (and see) security associations for route-based ipsec vpns.
                    267: <li>Introduced <a href="https://man.openbsd.org/sec.4">sec(4)</a>, providing point-to-point tunnel interfaces for IPv4 and IPv6 protected by the <a href="https://man.openbsd.org/ipsec.4">ipsec(4)</a> Encapsulating Security Payload (ESP) protocol.
                    268: <li>Started adding support for route-based ipsec vpns.
                    269: <!-- 2023/08/05 -->
                    270: <!-- 2023/08/04 -->
                    271: <li>Added support for 8bpp X server on LUNA.
                    272: <li>Applied <a href="https://man.openbsd.org/ssh.1">ssh(1)</a> ConnectTimeout to multiplexing local socket connections.
                    273: <!-- 2023/08/03 -->
                    274: <li>Enable vlan stripping of LRO packets in <a href="https://man.openbsd.org/ix.4">ix(4)</a>.
                    275: <li>Remove the per-cpu load average calculation.
                    276: <!-- 2023/08/02 -->
                    277: <li>Set a low water mark on scsi_xfer_pool and prime it so the pagedaemon can write out pages to swap when we're out of physical memory.
                    278: <li>Added padding to align on an 8-byte boundary to Xinput on luna88k.
                    279: <li>Prevented bad memory accesses seen with page flipping on alder lake and raptor lake.
                    280: <!-- 2023/08/01 -->
                    281: <li>Fixed mmap-ing size for LUNA framebuffer.
                    282: <!-- 2023/07/31 -->
                    283: <li>Added AXP15060 support to <a href="https://man.openbsd.org/axppmic.4">axppmic(4)</a>.
                    284: <li>Implemented audio input source selection in <a href="https://man.openbsd.org/onyx.4">onyx(4)</a>.
                    285: <!-- 2023/07/30 -->
                    286: <li>Ensured retpolines will not serve as a net negative on CPUs with eIBRS (enhanced Indirect Branch Restricted Speculation) or IBT enabled in the kernel.
                    287: <li>Added JH7110 I2C clocks to <a href="https://man.openbsd.org/stfclock.4">stfclock(4)</a>.
                    288: <!-- 2023/07/29 -->
                    289: <!-- 2023/07/28 -->
                    290: <li>Set OPENSSL_NO_ENGINE and remove engine code.
                    291: <li>Dropped DSO and defined OPENSSL_NO_DSO.
                    292: <!-- 2023/07/27 -->
                    293: <li>Made <a href="https://man.openbsd.org/sshd_config.5">sshd_config(5)</a> AuthorizedPrincipalsCommand and AuthorizedKeysCommand accept the %D (routing domain) and a new %C (connection address/port 4-tuple) as expansion sequences.
                    294: <li>Increased default KDF work-factor for OpenSSH format private keys from 16 to 24.
                    295: <li>Fixed inline vlan-tag handling of forwarded LRO packets from <a href="https://man.openbsd.org/ix.4">ix(4)</a>.
                    296: <li>Fixed verbose logging in <a href="https://man.openbsd.org/vmd.8">vmd(8)</a> child processes.
                    297: <!-- 2023/07/26 -->
                    298: <li>Made <a href="https://man.openbsd.org/ssh.1">ssh(1)</a> -f (fork after authentication) work properly in multiplexed cases (including ControlPersist).
                    299: <!-- 2023/07/25 -->
                    300: <li>Isolated <a href="https://man.openbsd.org/profil.2">profil(2)</a> and GPROF from statclock() now that we have a machine-independent interface to the clock interrupt hardware.
                    301: <li>Stopped building unused dhclient.
                    302: <li>Made the built-in keyboard on the Tadpole UltraBook IIe work.
                    303: <!-- 2023/07/24 -->
                    304: <li>Added a check before setting DE_CFG bit 9 to ensure compatibility with hypervisors not allowing msr writes to that bit.
                    305: <li>Fixed <a href="https://man.openbsd.org/wscons.4">wscons(4)</a> scan code value for the print screen key.
                    306: <li>Prevented the kernel from accessing random memory after receiving some specially crafted DCS or CSI terminal escape sequences by limiting <a href="https://man.openbsd.org/wscons.4">wscons(4)</a> escape sequence argument count to usable bounds.
                    307: <li>Set DE_CFG[9], a chickenbit which stops Zenbleed.
                    308: <li>Corrected <a href="https://man.openbsd.org/dmesg.8">dmesg(8)</a> display of pciprobe output after boot block changes on i386.
                    309: <!-- 2023/07/23 -->
                    310: <li><a href="https://man.openbsd.org/pledge.2">Pledged</a> (NULL, "stdio rpath") <a href="https://man.openbsd.org/ldd.1">ldd(1)</a>.
                    311: <li>Improved <a href="https://man.openbsd.org/xhci.4">xhci(4)</a> suspend/resume support.
                    312: <li>Implemented <a href="https://man.openbsd.org/apldart.4">apldart(4)</a> suspend/resume support.
                    313: <li>Prevented a spurious attach/detach/attach sequence when resuming with <a href="https://man.openbsd.org/tipd.4">tipd(4)</a> when a USB device is connected.
                    314: <li>Removed -stats option from <a href="https://man.openbsd.org/openssl.1">openssl(1)</a> errstr.
                    315: <!-- 2023/07/22 -->
                    316: <li>Implemented updates for AMD CPU microcode.
                    317: <li>Introduced <a href="https://man.openbsd.org/qcsdam.4">qcsdam(4)</a>, a driver for the PMIC Shared Direct Access Memory found on Qualcomm SoCs.
                    318: <!-- 2023/07/21 -->
                    319: <!-- 2023/07/20 -->
                    320: <li>Allow <a href="https://man.openbsd.org/cwm.1">cwm(1)</a> to cycle through windows of the same window class as the active window, default key binding to M-grave, respectively Alt-Tilde, like with other window managers.
                    321: <li>Capped the size of numbers we check for primality to 32k to block a DoS vector.
                    322: <!-- 2023/07/19 -->
                    323: <li>Assigned wsdisplay0 to the glass console always for i386 and amd64 RAMDISK and RAMDISK_CD.
                    324: <li>Fixed skipping of white space after parsing the username in <a href="https://man.openbsd.org/crontab.1">/etc/crontab</a> to make it consistent with how lines without usernames are parsed.
                    325: <li>Used "early 2" to attach <a href="https://man.openbsd.org/aplpmgr.4">aplpmgr(4)</a> to make sure it attachs before other core drivers that need to enable power domains.
                    326: <li>Implemented "early 2" locator for <a href="https://man.openbsd.org/mainbus.4">mainbus(4)</a> and simplebus to make drivers attach even earlier.
                    327: <li>Protected <a href="https://man.openbsd.org/ixl.4">ixl(4)</a> admin queue with <a href="https://man.openbsd.org/mutex.9">mutex(9)</a>.
                    328: <li>Separated ssh-pkcs11-helpers for each p11 module in <a href="https://man.openbsd.org/ssh.1">ssh(1)</a> and implemented reference counting, fixing some bugs making PKCS11 keys unusable after they have been deleted.
                    329: <li>Disallowed remote addition of FIDO/PKCS11 provider libraries to <a href="https://man.openbsd.org/ssh-agent.1">ssh-agent(1)</a> by default.
                    330: <li>Partially fixed interactive mode in <a href="https://man.openbsd.org/patch.1">patch(1)</a>.
                    331: <li>Fixed <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> hang by correcting visited flag when the last window list is rebuilt by renumbering windows.
                    332: <!-- 2023/07/18 -->
                    333: <li>Enabled LRO for TCP by default in the network drivers (currently supported by <a href="https://man.openbsd.org/ix.4">ix(4)</a> and <a href="https://man.openbsd.org/lo.4">lo(4)</a>). LRO can be turned off per-interface with <a href="https://man.openbsd.org/ifconfig.8">ifconfig(8)</a> -tcplro.
                    334: <li>With the update of the sleep API, implemented the linux emulation of their wait API, schedule() and set_current_state() in a less hacky way, removing some possible race conditions in the wait API.
                    335: <!-- 2023/07/17 -->
                    336: <li>Put the <a href="https://man.openbsd.org/tipd.4">tipd(4)</a> USB Type-C power delivery controller into the "S5" state during suspend, preventing USB devices from consuming power.
                    337: <!-- 2023/07/16 -->
                    338: <li>Added support for configuration tags to <a href="https://man.openbsd.org/ssh.1">ssh(1)</a>. Added an <a href="https://man.openbsd.org/ssh_config.5">ssh_config(5)</a> "Tag" directive and corresponding "Match tag" predicate.
                    339: <li>Added a <a href="https://man.openbsd.org/ssh_config.5">ssh_config(5)</a> "match localnetwork" predicate which may be used to vary the effective client configuration based on network location.
                    340: <!-- 2023/07/15 -->
                    341: <li>Implemented Pointer Authentication Code support on AArch64.
                    342: <li>Fixed use of qcow base images in <a href="https://man.openbsd.org/vmd.8">vmd(8)</a> to avoid device failure during startup post-exec when trying to receive device state from the parent vm process.
                    343: <li>Added mute control to <a href="https://man.openbsd.org/tascodec.4">tascodec(4)</a>.
                    344: <li>Used <a href="https://man.openbsd.org/unveil.2">unveil(2)</a> to restrict <a href="https://man.openbsd.org/patch.1">patch(1)</a> to its current working directory.
                    345: <!-- 2023/07/14 -->
                    346: <li>Ensured <a href="https://man.openbsd.org/dhcrelay6.8">dhcrelay6(8)</a> does not ignore the AF_LINK entries of <a href="https://man.openbsd.org/carp.4">carp(4)</a> interfaces.
                    347: <!-- 2023/07/13 -->
                    348: <li>Pulled validation into local prefix parser in <a href="https://man.openbsd.org/vmd.8">vmd(8)</a>.
                    349: <li>Checked <a href="https://man.openbsd.org/rcctl.8">rcctl(8)</a> input before trying to disable a non-existing daemon to prevent parsing bogus characters.
                    350: <li>Made use of the deep idle state available on Apple M1/M2 cores in the idle loop and for suspend, resulting in power savings particularly when running in a state with high clock frequency.
                    351: <!-- 2023/07/12 -->
                    352: <li>Adressed incomplete validation of ELF program headers in <a href="https://man.openbsd.org/execve.2">execve(2)</a> which could lead to a panic in vmcmd_map_readvn() with a malformed binary/interpreter.
                    353: <li>Prevented GPROF kernel crash during resume by disabling _mcount() across suspend/resume in sleep_state().
                    354: <li>Worked around a use after free in <a href="https://man.openbsd.org/httpd.8">httpd(8)</a> due to a malformed HTTP request when httpd is in fastcgi mode.
                    355: <li>Prevented a session reset in <a href="https://man.openbsd.org/bgpd.8">bgpd(8)</a> due to parser failure.
                    356: <li>Used ssize_t instead of short for line lengths to lessen chance of underflow and segfault in <a href="https://man.openbsd.org/patch.1">patch(1)</a> with excessive line length.
                    357: <!-- 2023/07/11 -->
                    358: <li>Reworked sleep_setup()/sleep_finish() to no longer hold the scheduler lock between calls.
                    359: <!-- 2023/07/10 -->
                    360: <li>Allow <a href="https://man.openbsd.org/unveil.2">unveiled</a> programs to dump core by passing BYPASSUNVEIL just for this vnode.
                    361: <li>Prevented <a href="https://man.openbsd.org/pax.1">pax(1)</a> from attempting to open a file when creating an archive file even if the file will be skipped due to a -s replacement with the empty string.
                    362: <!-- 2023/07/09 -->
                    363: <li>Enabled Indirect Branch Tracking for amd64 userland, using XSAVES/XRSTORS to save/restore the state and enabling it at exec-time (and for signal handling) if the PS_NOBTCFI flag isn"t set.
                    364: <li>Added PS_NOBTCFI, a per-process flag indicating that Branch Target Control Flow Integrity has beendisabled for the process, to be used by the amd64 code.
                    365: <li>Added mute control to <a href="https://man.openbsd.org/sncodec.4">sncodec(4)</a>.
                    366: <li>Added suspend key support to <a href="https://man.openbsd.org/wskbd.4">wskbd(4)</a> and made it work on Apple ARM laptops.
                    367: <!-- 2023/07/08 -->
                    368: <li>Added request_sleep(), a machine-independent way of sending the machine to sleep in a safe thread, to amd64, i386 and arm64.
                    369: <li>Updated to <a href="https://man.openbsd.org/perl.1">perl</a> 5.36.1.
                    370: <li>Introduced <a href="https://man.openbsd.org/stfpciephy.4">stfpciephy(4)</a>, a driver to control the PCIe 2.0 and USB 3.0 PHY on the StarFive JH7110 SoC.
                    371: <li>Introduced <a href="https://man.openbsd.org/stfpcie.4">stfpcie(4)</a>, a driver to support the PLDA XpressRICH-AXI PCIe controller on the StarFive JH7110 SoC.
                    372: <li>Added support for the RK3588 PCIe3 PHY to <a href="https://man.openbsd.org/rkpciephy.4">rkpciephy(4)</a>.
                    373: <li>Added support for the Motorcomm YT8521/YT8531 PHYs and enabled <a href="https://man.openbsd.org/ytphy.4">ytphy(4)</a> on riscv64.
                    374: <li>Took initial step toward a machine independent safe sleep API.
                    375: <li>Toggled IBT off during EFI runtime services calls.
                    376: <!-- 2023/07/07 -->
                    377: <li>Introduced <a href="https://man.openbsd.org/ietp.4">ietp(4)</a> driver for Elantech I2C touchpads.
                    378: <li>Made ld.bfd emit PT_OPENBSD_NOBTCFI.
                    379: <li>Added <a href="https://man.openbsd.org/rkclock.4">rkclock(4)</a> resets for RK3588 USB 3.0 controllers and clocks for the RK3588 I2C controllers and RK3588 PWM controllers.
                    380: <li>Provided an optimized bn_mulw() for riscv64 for a 1.5-2x performance gain for BN multiplication and similar gain for RSA operations.
                    381: <li>Provided a libcrypto Makefile.inc for riscv64.
                    382: <li>Swapped link-auth filter arguments to prevent filter-rspamd <a href="https://man.openbsd.org/smtpd-filters.7">smtpd-filters(7)</a> crash.
                    383: <li>Enabled reading RSA-PSS certificates.
                    384: <li>Added support for multiple batteries to <a href="https://man.openbsd.org/acpithinkpad.4">acpithinkpad(4)</a> setchargestart and setchargestop.
                    385: <!-- 2023/07/06 -->
                    386: <li>Added AXP305 support and fixes to <a href="https://man.openbsd.org/axppmic.4">axppmic(4)</a>.
                    387: <li>Used mtx_init() to initialize stack-based mutexes, ensuring the mutex' lock_object has static storage duration.
                    388: <li>Cleared <a href="https://man.openbsd.org/knote.9">knote(9)</a>s when finishing wseventvar in <a href="https://man.openbsd.org/wscons.4">wscons(4)</a> to prevent a kernel crash.
                    389: <li>Taught BFD tools how to handle NOBTCFI.
                    390: <li>Converted tcp_now() time counter to 64 bit.
                    391: <li>Registered a mapping of <a href="https://man.openbsd.org/dwge.4">dwge(4)</a> interfaces to ofw nodes/phandles.
                    392: <li>Removed special cases for IBT/BTI introduced during development.
                    393: <!-- 2023/07/05 -->
                    394: <li>Added <a href="https://man.openbsd.org/pfsync.4">pfsync(4)</a> specific locks, introduced pfsync support to partition states into independently-running slices, and made <a href="https://man.openbsd.org/pf.4">pf(4)</a> state purges mpsafe.
                    395: <li>Handled <a href="https://man.openbsd.org/dwge.4">dwge(4)</a> fixed-link configuration in the device tree.
                    396: <li>Fixed boot of OpenBSD using Hyper-V on Windows 11.
                    397: <li>Fixed error in the MSI-X interrupt establish loop for <a href="https://man.openbsd.org/virtio.4">virtio(4)</a> which could lead to fallback to shared IRQs.
                    398: <li>Made softdep mounts a no-op.
                    399: <li>Added <a href="https://man.openbsd.org/iwm.4">iwm(4)</a>/<a href="https://man.openbsd.org/iwx.4">iwx(4)</a> background scan task to the queue from which it will be deleted, ensuring proper cancellation during driver state transition.
                    400: <li>Drop kernel lock before panic to avoid WITNESS report during fault on amd64.
                    401: <li>Implemented support for the GPIOs on the JH7110, making it possible to reboot the VisionFive 2.
                    402: <li>Restored (R)esize functionality to sparc64 <a href="https://man.openbsd.org/disklabel.8">disklabel(8)</a>.
                    403: <!-- 2023/07/04 -->
                    404: <li>Limited the number of transactions/tickets <a href="https://man.openbsd.org/pf.4">pf(4)</a>'s pf_open_trans() can issue for each clone of /dev/pf to 512, avoiding use of all kernel memory by asking DIOCGETRULES for more tickets.
                    405: <li>Added StarFive JH7110 support to <a href="https://man.openbsd.org/dwqe.4">dwqe(4)</a>.
                    406: <li>Introduced DIOCXEND to <a href="https://man.openbsd.org/pf.4">pf(4)</a> (and also <a href="https://man.openbsd.org/snmpd.8">snmpd(8)</a> and <a href="https://man.openbsd.org/systat.1">systat(1)</a>) so applications close when done fetching pf rules and cannot consume all kernel memory.
                    407: <li>Made the <a href="https://man.openbsd.org/bge.4">bge(4)</a> hardware counters available on BCM5705 and newer available in <a href="https://man.openbsd.org/kstat.1">kstat(1)</a>.
                    408: <!-- 2023/07/03 -->
                    409: <li>Added unix domain socket support to <a href="https://man.openbsd.org/ssh.1">ssh(1)</a> -W.
                    410: <li>Added <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> support for marking lines with a shell prompt based on the OSC 133 extension.
                    411: <li>Enabled mouse.tp.mtbuttons for apldcms.
                    412: <li>Updated to makedepend 1.0.8.
                    413: <li>Updated to fontconfig 2.14.2.
                    414: <li>Updated to pixman 0.42.2.
                    415: <li>Updated to xtrans 1.5.0.
                    416: <li>Updated to libXaw 1.0.15
                    417: <li>Updated to libXt 1.3.0.
                    418: <li>Updated to xcb-util 0.4.1.
                    419: <li>Updated to libxshmfence 1.3.2.
                    420: <li>Updated to libXvMC 1.0.13.
                    421: <li>Updated to libXv 1.0.12.
                    422: <li>Updated to libXrandr 1.5.3.
                    423: <li>Updated to libXi 1.8.1.
                    424: <li>Updated to libXfixes 6.0.1.
                    425: <li>Updated to libXdamage 1.1.6.
                    426: <li>Updated to libXcomposite 0.4.6.
                    427: <li>Updated to xf86-video-r128 6.12.1.
                    428: <li>Updated to xf86-video-ati 22.0.0.
                    429: <li>Updated to xf86-input-mouse 1.9.5.
                    430: <li>Updated to xwd 1.0.9.
                    431: <li>Updated to xrdb 1.2.2.
                    432: <li>Updated to setxkbmap 1.3.4.
                    433: <li>Removed tls1.0 and 1.1 related options from <a href="https://man.openbsd.org/openssl.1">openssl(1)</a>.
                    434: <!-- 2023/07/02 -->
                    435: <li>Added <a href="https://man.openbsd.org/wsmouse.4">wsmouse(4)</a> button mappings for two- and three-finger clicks on clickpads.
                    436: <li>Used TSO and LRO on the loopback interface to transfer TCP faster (turned off by default).
                    437: <li>Removed __HAVE_CLOCKINTR symbol on all platforms.
                    438: <!-- 2023/07/01 -->
                    439: <li>Added <a href="https://man.openbsd.org/clockintr_cpu_init.9">clockintr_cpu_init(9)</a> stagger by MAXCPUS.
                    440: <li>Introduced <a href="https://man.openbsd.org/qccpu.4">qccpu(4)</a>, a driver for Qualcomm Snapdragon CPU power states.
                    441: <li>Enabled AC detection in <a href="https://man.openbsd.org/qcpas.4">qcpas(4)</a>.
                    442: <li>Added support for JH7110 to <a href="https://man.openbsd.org/dwmmc.4">dwmmc(4)</a>, making the eMMC and microSD mostly work on the StarFive VisionFive 2.
                    443: <li>Added support for JH7110 to <a href="https://man.openbsd.org/stftemp.4">stftemp(4)</a>, adding temperature sensor support for the StarFive VisionFive 2.
                    444: <!-- 2023/06/30 -->
                    445: <!-- 2023/06/29 -->
                    446: <li>Fixed S3-based suspend on some newer machines by using an opt-in approach for waking up GREs in <a href="https://man.openbsd.org/acpi.4">acpi(4)</a>/<a href="https://man.openbsd.org/acpibtn.4">acpibtn(4)</a>.
                    447: <li>Fixed <a href="https://man.openbsd.org/disklabel.8">disklabel(8)</a> handling of 'N-* 100' template entries.
                    448: <li>Updated to <a href="https://man.openbsd.org/nsd.8">nsd(8)</a> 4.7.0.
                    449: <li>Rewrote <a href="https://man.openbsd.org/relayd.8">relayd(8)</a> pfe_route() to work on 64bit architectures.
                    450: <!-- 2023/06/28 -->
                    451: <li>Added <a href="https://man.openbsd.org/iked.8">iked(8)</a> support to verify x509 chain from CERT payloads.
                    452: <!-- 2023/06/27 -->
                    453: <li>Introduced <a href="https://man.openbsd.org/qctsens.4">qctsens(4)</a>, a driver for the Temperature Sensor found on Qualcomm SoCs.
                    454: <li>Removed net lock from <a href="https://man.openbsd.org/pf.4">pf(4)</a> ioctl DIOC{SET,CLR}IFFLAG.
                    455: <li>Made it possible to store the kstack or ustack in a map in <a href="https://man.openbsd.org/btrace.8">btrace(8)</a>.
                    456: <li>Restored interrupts and prevented unconditionally reenabling them in amd64 MCOUNT_EXIT.
                    457: <!-- 2023/06/26 -->
                    458: <!-- 2023/06/25 -->
                    459: <li>Provided <a href="https://man.openbsd.org/kstat.1">kstat(1)</a> information based on the byte and packet counters available in some <a href="https://man.openbsd.org/dwge.4">dwge(4)</a> implementations.
                    460: <li>Provided additional BN primitives for BN_ULLONG architectures.
                    461: <!-- 2023/06/24 -->
                    462: <li>Added initial support for StarFive VisionFive V2 to <a href="https://man.openbsd.org/stfclock.4">stfclock(4)</a>.
                    463: <!-- 2023/06/23 -->
                    464: <li>Fixed underlining in <a href="https://man.openbsd.org/ex.1">ex(1)</a> 's' command with the 'c' flag when 'number' is off.
                    465: <li>Improved <a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a> detection of RRDP session desynchronization.
                    466: <!-- 2023/06/22 -->
                    467: <li>Added <a href="https://man.openbsd.org/ksmn.4">ksmn(4)</a> support for the thermal sensors on Ryzen 9 79xx.
                    468: <!-- 2023/06/21 -->
                    469: <li>Made <a href="https://man.openbsd.org/ksh.1">ksh(1)</a> escape control characters when displaying file name completions.
                    470: <li>Fixed potential truncation of filtered data lines in <a href="https://man.openbsd.org/smtpd.8">smtpd(8)</a>.
                    471: <li>Added <a href="https://man.openbsd.org/ospf6ctl.8">ospf6ctl(8)</a> "fib reload" as in <a href="https://man.openbsd.org/ospfctl.8">ospfctl(8)</a> and made it trigger automatically on a timeout after RTM_DESYNC.
                    472: <!-- 2023/06/20 -->
                    473: <li>Made <a href="https://man.openbsd.org/ssh.1">ssh(1)</a> -Q CASignatureAlgorithms' only list signature algorithms that are valid for CA signing.
                    474: <!-- 2023/06/19 -->
                    475: <li>Fixed "no comment" not showing when running <a href="https://man.openbsd.org/ssh-keygen.1">ssh-keygen(1)</a> -l on multiple keys where one has a comment and other following keys do not.
                    476: <li>Fixed line wrapping in <a href="https://man.openbsd.org/fdisk.8">fdisk(8)</a>.
                    477: <li>Separated <a href="https://man.openbsd.org/shutdown.8">shutdown(8)</a> command access from the "operator" group and into a "_shutdown" group, preventing inappropriate disk read access.
                    478: <!-- 2023/06/18 -->
                    479: <li>Allowed use of 'a' as a shortcut for 'autoconf' in the installer.
                    480: <li>Ensured 'chmod a-x /bsd.upgrade' works to prevent re-upgrade for luna88k, matching other architectures.
                    481: <li>Switched ECDSA_METHOD usage to EC_KEY_METHOD for <a href="https://man.openbsd.org/smtpd.8">smtpd(8)</a>, the last consumer of the deprecated ECDSA_METHOD.
                    482: <!-- 2023/06/17 -->
                    483: <li>Fixed incomplete <a href="https://man.openbsd.org/azalia.4">azalia(4)</a> attachment for Ampere eMAG with an AMD GPU with an HD audio function.
                    484: <li>Improved speed of Montgomery multiplication.
                    485: <li>Bumped <a href="https://man.openbsd.org/smtpd.8">smtpd(8)</a> to 7.3.0.
                    486: <!-- 2023/06/16 -->
                    487: <li>Fixed IPv6 forward counters and icmp6 redirect when TSO is enabled.
                    488: <!-- 2023/06/15 -->
                    489: <li>Fixed CVE-2023-3128: X servers could return values from XQueryExtension allowing Xlib to write out-of-bounds entries.
                    490: <!-- 2023/06/14 -->
                    491: <li>Added missing kernel lock around (*if_ioctl)().
                    492: <!-- 2023/06/13 -->
                    493: <!-- 2023/06/12 -->
                    494: <li>Moved nd6_ifdetach() out of netlock.
                    495: <li>Provided and optimized various quad word primitives, providing performance gain across most BN operations on aaarch64.
                    496: <li>Prevented printing the last value twice in <a href="https://man.openbsd.org/seq.1">seq(1)</a>.
                    497: <li>Added content-encoding compression support to <a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a>.
                    498: <!-- 2023/06/11 -->
                    499: <!-- 2023/06/10 -->
                    500: <li>Implemented arm64 support for pointer authentication (PAC) in userland, making it possible to "sign" pointers with a hidden key and provide "tail CFI" similar to what retguard provides. (Disabled for x13s).
                    501: <li>Introduced <a href="https://man.openbsd.org/qcpas.4">qcpas(4)</a>, a driver for the Peripheral Authentication Service found on Qualcomm SoCs.
                    502: <!-- 2023/06/09 -->
                    503: <!-- 2023/06/08 -->
                    504: <!-- 2023/06/07 -->
                    505: <!-- 2023/06/06 -->
                    506: <li>Made the tlsv1.0 and tlsv1.1 options in <a href="https://man.openbsd.org/relayd.8">relayd(8)</a> do nothing in preparation for removal of these protocols.
                    507: <!-- 2023/06/05 -->
                    508: <li>Stopped calculating IP, TCP and UDP checksums on loopback interface.
                    509: <!-- 2023/06/04 -->
                    510: <!-- 2023/06/03 -->
                    511: <!-- 2023/06/02 -->
                    512: <li>Permitted restricted <a href="https://man.openbsd.org/profil.2">profil(2)</a> for <a href="https://man.openbsd.org/moncontrol.3">moncontrol(3)</a> in stdio <a href="https://man.openbsd.org/pledge.2">pledge(2)</a>, moving toward making '-pg' binaries pledge-compatible.
                    513: <!-- 2023/06/01 -->
                    514: <li>Added support for wireguard peer descriptions to <a href="https://man.openbsd.org/ifconfig.8">ifconfig(8)</a>.
                    515: <li>Enabled forwarding of <a href="https://man.openbsd.org/ix.4">ix(4)</a> LRO packets via TSO.
                    516: <!-- 2023/05/31 -->
                    517: <!-- 2023/05/30 -->
                    518: <li>Use generic checksum calculation for TCP SYN+ACK packets.
                    519: <li>Made <a href="https://man.openbsd.org/id.1">id(1)</a> -R fail when an argument is given.
                    520: <li>Fixed up file modification timestamps to optimize <a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a> failover from RRDP to RSYNC.
                    521: <li>Split <a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a> cleanup into cleanup and repository cleanup and show how many files are kept/removed in the repository temporary storage.
                    522: <!-- 2023/05/29 -->
                    523: <li>Added IBT support to the X86_64 retpoline+znow PLTs.
                    524: <li>Prevented hangs with <a href="https://man.openbsd.org/vioscsi.4">vioscsi(4)</a> on qemu/windows and in the Oracle cloud.
                    525: <!-- 2023/05/28 -->
                    526: <!-- 2023/05/27 -->
1.2     ! pamela    527: <li>Bumped LibreSSL to 3.8.1.
1.1       pamela    528: <li>Implemented battery charge control in <a href="https://man.openbsd.org/aplsmc.4">aplsmc(4)</a>.
                    529: <!-- 2023/05/26 -->
                    530: <li>Removed net lock from <a href="https://man.openbsd.org/pf.4">pf(4)</a> ioctls DIOC{S,G}ETLIMIT.
                    531: <!-- 2023/05/25 -->
                    532: <li>Added both udp and tcp for https (HTTP/3 over QUIC) to /etc/services.
                    533: <li>Ensured forced update of internal key for EVP_PKEY after modification, to handle fallout in several applications following a behavioral change in OpenSSL.
                    534: <!-- 2023/05/24 -->
                    535: <li>Fixed <a href="https://man.openbsd.org/sshd_config.5">sshd_config(5)</a> AuthorizedPrincipalsCommand when AuthorizedKeysCommand appears previously in configuration.
                    536: <!-- 2023/05/23 -->
                    537: <li>Forced comport initialization for certain classes of device, preventing hang or reboot when com@acpi devices fail the comprobe1() check.
                    538: <li>Introduced <a href="https://man.openbsd.org/qcaoss.4">qcaoss(4)</a>, a driver for the Always On Subsystem found on Qualcomm SoCs.
                    539: <li>Added IBT support to retpoline PLTs for X86_64, providing IBT support by default.
                    540: <!-- 2023/05/22 -->
                    541: <li>Fixed TSO for traffic to a local address on a physical interface.
                    542: <!-- 2023/05/21 -->
                    543: <li>Made <a href="https://man.openbsd.org/ypldap.8">ypldap(8)</a> continue trying LDAP servers until full results are received.
                    544: <li>Fixed booting from disks >8G on systems where the BIOS uses CHS.
                    545: <li>Updated to freetype 2.13.0.
                    546: <!-- 2023/05/20 -->
                    547: <li>Prevented a self-deadlock of vmmaplk in <a href="https://man.openbsd.org/uvm_map.9">uvm_map(9)</a>.
                    548: <li>Added an <a href="https://man.openbsd.org/openssl.1">openssl(1)</a> '-unaligned n' option.
                    549: <li>Implemented battery charge control in <a href="https://man.openbsd.org/acpithinkpad.4">acpithinkpad(4)</a>.
                    550: <!-- 2023/05/19 -->
                    551: <li>Introduced <a href="https://man.openbsd.org/qcsmptp.4">qcsmptp(4)</a>, a driver to share 32-bit values between (co-)processors.
                    552: <li>Introduced <a href="https://man.openbsd.org/qcsmem.4">qcsmem(4)</a>, a driver for the shared memory table on Qualcomm SoCs.
                    553: <li>Added <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> format for server_sessions.
                    554: <!-- 2023/05/18 -->
                    555: <li><a href="https://man.openbsd.org/pledge.2">Pledged(2)</a> <a href="https://man.openbsd.org/waitid.2">waitid(2)</a> stdio.
                    556: <li>Handle paths with whitespace or metacharacters in <a href="https://man.openbsd.org/user.8">user(8)</a>.
                    557: <li>Asserted <a href="https://man.openbsd.org/pf.4">pf(4)</a> lock on interface handling.
                    558: <li>Added TSO offloading to <a href="https://man.openbsd.org/ix.4">ix(4)</a>.
                    559: <!-- 2023/05/17 -->
                    560: <li>Introduced <a href="https://man.openbsd.org/qcmtx.4">qcmtx(4)</a>, a driver for the hardware spinlock on Qualcomm SoCs.
                    561: <li>Introduced <a href="https://man.openbsd.org/qcipcc.4">qcipcc(4)</a>, a driver for the inter-processor mailbox interface used to inform (and be informed) of changes to shared memory state.
                    562: <li>Added support for the Peripheral Authentication Service SMC interface to <a href="https://man.openbsd.org/qcscm.4">qcscm(4)</a>.
                    563: <li>Implemented battery management <a href="https://man.openbsd.org/sysctl.8">sysctl(8)</a> (hw.battery.chargemode, hw.battery.chargestop and hw.battery.chargestart).
                    564: <!-- 2023/05/16 -->
                    565: <li>Used <a href="https://man.openbsd.org/cp.1">cp(1)</a> to copy dot files in <a href="https://man.openbsd.org/useradd.8">useradd(8)</a> instead of <a href="https://man.openbsd.org/pax.1">pax(1)</a>.
                    566: <li>Introduced separate capabilities for TCP offloading, split into LRO (large receive offloading) and TSO (TCP segmentation offloading). LRO can be toggled via the <a href="https://man.openbsd.org/ifconfig.8">ifconfig(8)</a> tcprecvoffload option. (2023/06/07: Renamed "tcplro").
                    567: <!-- 2023/05/15 -->
                    568: <li>Implemented the TCP/IP layer for hardware TCP segmentation offload.
                    569: <li>Corrected display of Victoria Day in <a href="https://man.openbsd.org/calendar.1">calendar(1)</a>.
                    570: <li>Added Juneteenth to the US <a href="https://man.openbsd.org/calendar.1">calendar(1)</a>.
                    571: <li>Turned on pointer-authentication on arm64 by default, effectively enabling -mbranch-protection=standard on arm64.
                    572: <!-- 2023/05/14 -->
                    573: <li>Improved <a href="https://man.openbsd.org/vnconfig.8">vnconfig(8)</a> emulation of a disktab entry (-t), enabling <a href="https://man.openbsd.org/installboot.8">installboot(8)</a> to know the vnd device should be treated as a floppy disk.
                    574: <!-- 2023/05/13 -->
                    575: <li>Gave softnet threads unique names by suffixing softnet with their index.
                    576: <li>Made <a href="https://man.openbsd.org/disklabel.8">disklabel(8)</a> use the d_type value provided by the kernel when creating, editing or printing a disklabel in the absence of the "disktype" command line parameter.
                    577: <li>Removed the kernel lock from IPv6 neighbor discovery.
                    578: <!-- 2023/05/12 -->
                    579: <li>Added <a href="https://man.openbsd.org/axppmic.4">axppmic(4)</a> support to the arm64 RAMDISK to support ethernet on the OrangePi One Plus (Allwinner H6).
                    580: <li>Added display of interface names in front of <a href="https://man.openbsd.org/ifconfig.8">ifconfig(8)</a> error messages.
                    581: <li>Added a fallback to load the arm64 kernel from the EFI system partition if booting from a disk without a BSD disklabel.
                    582: <li>Fixed <a href="https://man.openbsd.org/vmd.8">vmd(8)</a> segfault on vm creation.
                    583: <li>Added <a href="https://man.openbsd.org/btrace.8">btrace(8)</a> support for symbolizing <a href="https://man.openbsd.org/utrace.2">utrace(2)</a> addresses.
                    584: <li>Added apple-gumx.h for 6.1.28 <a href="https://man.openbsd.org/drm.4">drm(4)</a>.
                    585: <li>Removed SHA-512 C implementations other than the semi-unrolled version.
                    586: <!-- 2023/05/11 -->
                    587: <li>Fixed <a href="https://man.openbsd.org/iwx.4">iwx(4)</a> firmware error when tearing down the state of association to the AP.
                    588: <!-- 2023/05/10 -->
                    589: <li>Added Miller-Rabin test for random bases to BPSW.
                    590: <li>Implemented TCP send offloading (in software only).
                    591: <!-- 2023/05/09 -->
                    592: <li>Updated to xf86-video-sunffb 1.2.3.
                    593: <li>Reduced possible outcomes when a <a href="https://man.openbsd.org/kevent.2">kevent(2)</a> call and a <a href="https://man.openbsd.org/close.2">close(2)</a> call race on the different ends of a pipe.
                    594: <li>Renamed 'invalid' to 'disqualified' in the <a href="https://man.openbsd.org/bgpctl.8">bgpctl(8)</a> 'show rib' table.
                    595: <li>Use partial chains in certificate validation in <a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a>.
                    596: <!-- 2023/05/08 -->
                    597: <li>Switched <a href="https://man.openbsd.org/pflogd.8">pflogd(8)</a> from using a bpf read timeout to a wait timeout.
                    598: <li>Prevented signed integer overflow after INT_MAX bad <a href="https://man.openbsd.org/passwd.1">passwd(1)</a>.
                    599: <li>Updated to xf86-video-dummy 0.4.1.
                    600: <li>Added ISO8859-14 font encoding.
                    601: <!-- 2023/05/07 -->
                    602: <li>Updated to xinput 1.6.4.
                    603: <li>Updated to xdpyinfo 1.3.4.
                    604: <li>Updated to libXpm 3.5.16.
                    605: <li>Updated to libXres 1.2.2.
                    606: <li>Updated to libXxf86dga 1.1.6.
                    607: <li>Updated to libfontenc 1.1.7.
                    608: <li>Updated to libxkbfile 1.1.2.
                    609: <li>Updated to libXdmcp 1.1.4.
                    610: <li>Updated to libXScrnSaver 1.2.4.
                    611: <li>Updated to libICE 1.1.1.
                    612: <li>Updated to libXau 1.0.11.
                    613: <li>Updated to xcalc 1.1.2.
                    614: <li>Removed net lock from <a href="https://man.openbsd.org/pf.4">pf(4)</a> ioctls DIOCOSFP{FLUSH,ADD,GET}.
                    615: <li>Updated to libXft 2.3.8.
                    616: <!-- 2023/05/06 -->
                    617: <li>Added support for random offsets when using trances with a step value in <a href="https://man.openbsd.org/crontab.1">crontab(1)</a>.
                    618: <li>Added support for RTL8153D to <a href="https://man.openbsd.org/ure.4">ure(4)</a>.
                    619: <!-- 2023/05/05 -->
                    620: <!-- 2023/05/04 -->
                    621: <li>Pushed kernel lock down to sys_sysctl().
                    622: <li>Introduced a neighbor discovery mutex.
                    623: <!-- 2023/05/03 -->
                    624: <li>Removed net lock from <a href="https://man.openbsd.org/pf.4">pf(4)</a> ioctls DIOCGETRULESET and DIOCGETRULESETS.
                    625: <!-- 2023/05/02 -->
                    626: <!-- 2023/05/01 -->
                    627: <li>Bumped <a href="https://man.openbsd.org/bgpd.8">bgpd(9)</a> to version 8.0.
                    628: <li>Updated to X server 21.1.8.
                    629: <!-- 2023/04/30 -->
                    630: <li>Adjusted <a href="https://man.openbsd.org/sftp.1">sftp(1)</a> ftruncate() logic to handle servers that reorder requests.
                    631: <li>Removed the EFI RTC implementation on amd64.
                    632: <!-- 2023/04/29 -->
                    633: <li>Bumped <a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a> version to 8.4.
                    634: <li>Removed net lock from <a href="https://man.openbsd.org/pf.4">pf(4)</a> ioctls DIOCGETQUEUE and DIOCGETQUEUES.
                    635: <!-- 2023/04/28 -->
                    636: <li>Added <a href="https://man.openbsd.org/dmesg.8">dmesg(8)</a> display of VHE feature.
                    637: <li>Added rtentry refcnt type to <a href="https://man.openbsd.org/dt.4">dt(4)</a>.
                    638: <li>Allowed <a href="https://man.openbsd.org/vmd.8">vmd(8)</a> vm owners to override the boot kernel via <a href="https://man.openbsd.org/vmctl.8">vmctl(8)</a> to allow booting of recovery media like a ramdisk kernel.
                    639: <li>Increased MAXDSIZ to 128G on amd64 and 64G on arm64.
                    640: <li>Retired <a href="https://man.openbsd.org/OpenBSD-7.3/sparc64/timer.4">timer(4/sparc64)</a> driver.
                    641: <li>Allowed routers to create new neighbor cache entries when receiving a valid Neighbor Advertisement (RFC9131).
                    642: <li>Improved speed of DIOCGETRULE <a href="https://man.openbsd.org/ioctl.2">ioctl(2)</a> used by <a href="https://man.openbsd.org/pfctl.8">pfctl(8)</a> to retrieve rules from the kernel.
                    643: <li>Relaxed <a href="https://man.openbsd.org/pf.4">pf(4)</a> "pass all" rule to allow bidirectional neighbor advertisements.
                    644: <li>Enabled kernel-address sanitizer for clang openbsd target.
                    645: <li>Implemented <a href="https://man.openbsd.org/openrsync.1">rsync(1)</a> --size-only and --ignore-times.
                    646: <!-- 2023/04/27 -->
                    647: <li>Introduced <a href="https://man.openbsd.org/qcrng.4">qcrng(4)</a>, a driver for the Qualcomm rng device found on the Thinkpad x13s.
                    648: <li>Added support for RTL8188FTV chip to <a href="https://man.openbsd.org/urtwn.4">urtwn(4)</a>.
                    649: <li>Introduced <a href="https://man.openbsd.org/vmd.8">vmd(8)</a> multi-process model for virtio devices.
                    650: <li>Added support for <a href="https://man.openbsd.org/st.4">st(4)</a> I/O statistics so tape speeds may be observed with <a href="https://man.openbsd.org/iostat.8">iostat(8)</a>.
                    651: <li>Fixed softraid crypto installation on Mac.
                    652: <li>Implemented <a href="https://man.openbsd.org/rsync.1">rsync(1)</a> -V as an alias to --version.
                    653: <li>Removed kernel lock from <a href="https://man.openbsd.org/rtfree.9">rtfree(9)</a>.
                    654: <li>Retired <a href="https://man.openbsd.org/disklabel.8">disklabel(8)</a> -E "expert" mode.
                    655: <li>Fixed <a href="https://man.openbsd.org/ws.4">ws(4)</a> cursor moving diagonally when moved along the horizontal or vertical axis of a rotated touchscreen.
                    656: <li>Removed net lock from <a href="https://man.openbsd.org/pf.4">pf(4)</a> ioctl DIOCGETTIMEOUT.
                    657: <li>Fixed config space access for the root bus of a <a href="https://man.openbsd.org/dwpcie.4">dwpcie(4)</a> controller when the root bus number isn't zero.
                    658: <li>Added RK3588 support to <a href="https://man.openbsd.org/rkcomphy.4">rkcomphy(4)</a>.
                    659: <!-- 2023/04/26 -->
                    660: <li>Handled crypto disks as boot disks in amd64, riscv64 and arm64 installer.
                    661: <li>Added <a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a> -P option to specify evaluation time for testing.
                    662: <li>Made llvm emit IBT endbr64 instructions by default for amd64. (Disabled jump tables by default).
                    663: <li>Introduced 'rtlabel_mtx' <a href="https://man.openbsd.org/mutex.9">mutex(9)</a> to protect route labels storage.
                    664: <li>Implemented <a href="https://man.openbsd.org/dt.4">dt(4)</a> <a href="https://man.openbsd.org/utrace.2">utrace(2)</a> support on amd64 and i386.
                    665: <li>Improved <a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a> accounting by tracking things by repository and TAL.
                    666: <li>Allowed IPv6 neighbor advertisement traffic during netstart on boot.
                    667: <li>Ensured correct handling of arm64 userland branch target traps.
                    668: <!-- 2023/04/25 -->
                    669: <li>Set TSO flag on <a href="https://man.openbsd.org/vlan.4">vlan(4)</a> interfaces.
                    670: <li>Bumped LibreSSL version to 3.8.0.
                    671: <li>Send an unsolicited neighbor advertisement to the all-routers multicast address when configuring a new address on an interface to speed IPv6 initial packet return.
                    672: <li>Prevented bootloader attempts to write to read-only softraid on amd64, sparc64 and i386.
                    673: <li>Enabled <a href="https://man.openbsd.org/softraid.4">softraid(4)</a> in the riscv64 ramdisk kernel, allowing disk crypto install.
                    674: <li>Enabled power management for <a href="https://man.openbsd.org/dwpcie.4">dwpcie(4)</a> devices.
                    675: <li>Added suspend/resume support to <a href="https://man.openbsd.org/pwmbl.4">pwmbl(4)</a>.
                    676: <li>Made <a href="https://man.openbsd.org/pwmleds.4">pwmleds(4)</a> disable keyboard backlight on Apple Silicon laptops on suspend and restore on wakeup.
                    677: <li>Fixed suspend/resume on x13s with NVMe+MSI.
                    678: <li>Added <a href="https://man.openbsd.org/makefs.8">makefs(8)</a> option 'rdroot' to simplify creation of rdroot filesystems for the install media.
                    679: <!-- 2023/04/24 -->
                    680: <li>Added endbr64 to amd64 syscall stubs and libcrypto as needed.
                    681: <li>Added prof_state_toggle to keep a count of CPUs with profiling enabled.
                    682: <li>Allowed <a href="https://man.openbsd.org/vmm.4">vmm(4)</a> guests to enable and use supervisor IBT.
                    683: <li>Added default <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> config to <a href="https://man.openbsd.org/changelist.5">changelist(5)</a>.
                    684: <li>Added <a href="https://man.openbsd.org/rdsetroot.8">rdsetroot(8)</a> -s option to simply display the number of bytes available for the rdroot filesystem in the specified kernel.
                    685: <li>Used the wxallowed flag to decide whether to enforce branch target temporarily.
                    686: <li>Added <a href="https://man.openbsd.org/aq.4">aq(4)</a> support for Atlantic 2 hardware.
                    687: <!-- 2023/04/23 -->
                    688: <li>Made <a href="https://man.openbsd.org/dwqe.4">dwqe(4)</a> handle fixed-link configuration in the device tree.
                    689: <li>Randomized the order of TLS extensions.
                    690: <li>Taught the <a href="https://man.openbsd.org/vmd.8">vmd(8)</a> <a href="https://man.openbsd.org/vmm.4">vmm(4)</a> process how to exec, using <a href="https://man.openbsd.org/execvp.3">execvp(3)</a> to launch vm children with new address spaces and introducing use of <a href="https://man.openbsd.org/unveil.2">unveil(2)</a> into the vmm and vm processes.
                    691: <li>Stopped setting ri->ri_bs in <a href="https://man.openbsd.org/viogpu.4">viogpu(4)</a> to prevent a panic caused by rasops accessing its uninitialized content.
                    692: <!-- 2023/04/22 -->
                    693: <li>Introduced <a href="https://man.openbsd.org/iosf.4">iosf(4)</a>, a driver for the Intel OnChip System Fabric.
                    694: <li>Call pfkeyv2_sysctl_policydumper() with shared netlock.
                    695: <li>Fixed <a href="https://man.openbsd.org/openssl.1">openssl(1)</a> UTF-8 issuer printing.
                    696: <li>Fixed <a href="https://man.openbsd.org/vmd.8">vmd(8)</a> vm send/receive issues due to invalid host-side virtual addresses.
                    697: <li>Reduced delays used in the <a href="https://man.openbsd.org/dwqe.4">dwqe(4)</a> mii/mdio bus ops, producing a significant speed increase.
                    698: <!-- 2023/04/21 -->
                    699: <li>Made <a href="https://man.openbsd.org/mg.1">mg(1)</a> tab width customizable per buffer with mg command set-tab-width.
                    700: <li>Implemented <a href="https://man.openbsd.org/bgpctl.8">bgpctl(8)</a> flowspec add and delete to add/remove flowspec rules dynamically.
                    701: <!-- 2023/04/20 -->
                    702: <li>Call sysctl_source() with shared netlock.
                    703: <li>Introduced <a href="https://man.openbsd.org/viogpu.4">viogpu(4)</a>, a VirtIO GPU driver.
                    704: <li>Implemented <a href="https://man.openbsd.org/bgpctl.8">bgpctl(8)</a> show flowspec and flowspec flush.
                    705: <!-- 2023/04/19 -->
                    706: <li>Moved kernel lock into multicast ioctl handlers.
                    707: <li>Forced a standard umask before adding/deleting packages with <a href="https://man.openbsd.org/pkg_add.1">pkg_add(1)</a> and <a href="https://man.openbsd.org/pkg_delete.1">pkg_delete(1)</a>.
                    708: <li>Protected rtable_setsource() and rtable_getsource() with exclusive and shared netlock respectively.
                    709: <li>Added a new PT_OPENBSD_NOBTCFI "segment type" to indicate that the kernel should not enforce branch target control flow integrity for a binary. Implemented support for PT_OPENBSD_NOBTCFI in <a href="https://man.openbsd.org/ld.lld.1">lld(1)</a>, which can be set using the -z nobtcfi option.
                    710: <!-- 2023/04/18 -->
                    711: <li>Stopped advertising non-removable <a href="https://man.openbsd.org/sdmmc.4">sdmmc(4)</a> devices as removable to the scsi layer.
                    712: <li>Added <a href="https://man.openbsd.org/dwmshc.4">dwmshc(4)</a> support for Designware Mobile Storage Host Controllers.
                    713: <li>Added arm64 support for loading files from the EFI system partition.
                    714: <li>Removed kernel lock from ifa_ifwithaddr() and ifa_ifwithdstaddr().
                    715: <li>Mapped MSI-X in addition to MSI and INTx on <a href="https://man.openbsd.org/xhci.4">xhci(4)</a>, as it is supported by the xHCI controller on Qemu, which will switch from shared INTx to device-specific MSI-X interrupts.
                    716: <li>Fixed legacy interrupts on machines that use PNP0C0F PCI interrupt link devices in <a href="https://man.openbsd.org/acpipci.4">acpipci(4)</a>.
                    717: <li>Call sysctl_ifnames(), sysctl_iflist() and sysctl_dumpentry() with shared netlock.
                    718: <li>Added support for upstreamed AP806/CP110 bindings in <a href="https://man.openbsd.org/mvtemp.4">mvtemp(4)</a>.
                    719: <!-- 2023/04/17 -->
                    720: <li>Made -mbranch-protection=bti the default on OpenBSD.
                    721: <li>Resurrected <a href="https://man.openbsd.org/mg.1">mg(1)</a>'s no-tab-mode.
                    722: <li>Implemented a basic API to work with flowspec NLRI in <a href="https://man.openbsd.org/bgpd.8">bgpd(8)</a>.
                    723: <!-- 2023/04/16 -->
                    724: <li>Enabled Indirect Branch Tracking (IBT) for the amd64 kernel.
                    725: <li>Added endbr64 instructions to most amd64 ENTRY() macros, IDTVEC() and KIDTVEC().
                    726: <li>Changed compilation of regular amd64 kernels to use -fcf-protection=branch and ramdisks with -fcf-protection=none, regardless of compiler default.
                    727: <li>Modified <a href="https://man.openbsd.org/malloc.3">malloc(3)</a> D option to dump (leak) info using <a href="https://man.openbsd.org/utrace.2">utrace(2)</a>.
                    728: <li>Added <a href="https://man.openbsd.org/kdump.1">kdump(1)</a> -u label option to print selected <a href="https://man.openbsd.org/utrace.2">utrace(2)</a> records.
                    729: <li>Fixed <a href="https://man.openbsd.org/pcidump.8">pcidump(8)</a> link speed reporting.
                    730: <li>Provided <a href="https://man.openbsd.org/evp.3">evp(3)</a> methods for SHA512/224, SHA512/256 and SHA3 224/256/384/512.
                    731: <li>Added <a href="https://man.openbsd.org/aplpcie.4">aplpci(4)</a> support for the PCIe controller found on M2 Pro/Max SoCs.
                    732: <li>Dropped support for the x509 ProxyCertInfo extension.
                    733: <li>Added /etc/mixerctl.conf to <a href="https://man.openbsd.org/changelist.5">changelist(5)</a>.
                    734: <!-- 2023/04/15 -->
                    735: <li>Made <a href="https://man.openbsd.org/vmm.4">vmm(4)</a> save and restore Intel CET state on vm entry/exit.
                    736: <li>Imported tiny_sha3, a minimal and readable SHA3 implementation.
                    737: <li>Unlocked in_ioctl_get(), pushing the kernel lock into in_ioctl_{set,change}_ifaddr().
                    738: <!-- 2023/04/14 -->
                    739: <li>Disallowed issuer and subject unique identifiers in <a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a>.
                    740: <li>Dropped policy printing from <a href="https://man.openbsd.org/openssl.1">openssl(1)</a>.
                    741: <li>Made <a href="https://man.openbsd.org/xenodm.1">xenodm(1)</a> reload the environment variables after <a href="https://man.openbsd.org/setusercontext.3">setusercontext(3)</a> so environment variables configured in <a href="https://man.openbsd.org/login.conf.5">login.conf(5)</a> are also available.
                    742: <li>Added <a href="https://man.openbsd.org/crypto.3">crypto(3)</a> support for truncated SHA512 variants SHA512/224 and SHA512/256.
                    743: <!-- 2023/04/13 -->
                    744: <li>Added <a href="https://man.openbsd.org/rkrng.4">rkrng(4)</a> support for "rockchip,cryptov2-rng".
                    745: <li>Added the "local experiments" ethertypes.
                    746: <!-- 2023/04/12 -->
                    747: <li>Pulled MP-safe arprequest() out of the kernel lock.
                    748: <!-- 2023/04/11 -->
                    749: <li>Added a new implementation of BN_mod_sqrt().
                    750: <!-- 2023/04/10 -->
                    751: <li>Updated to xf86-video-nv 2.1.22.
                    752: <li>Updated to xf86-input-vmmouse 13.2.0.
                    753: <li>Updated to xf86-input-void 1.4.2.
                    754: <li>Updated to xf86-input-mouse 1.9.4.
                    755: <li>Updated to xf86-input-joystick 1.6.4.
                    756: <li>Updated to xf86-input-elographics 1.4.3.
                    757: <li>Updated to xwininfo 1.1.6.
                    758: <li>Updated to xvidtune 1.0.4.
                    759: <li>Updated to xkbcomp 1.4.6.
                    760: <li>Updated to xhost 1.0.9.
                    761: <li>Updated to xdriinfo 1.0.7.
                    762: <li>Updated to beforelight 1.0.6.
                    763: <li>Enabled the caps lock LED on modern Apple laptops.
                    764: <!-- 2023/04/09 -->
                    765: <li>Removed X9.31 support from <a href="https://man.openbsd.org/openssl.1">openssl(1)</a>.
                    766: <!-- 2023/04/08 -->
                    767: <!-- 2023/04/07 -->
                    768: <li>Fixed <a href="https://man.openbsd.org/ahci.4">ahci(4)</a>, allowing use of sata on the banana pi bpi-r2 pro.
                    769: <li>Made <a href="https://man.openbsd.org/dwqe.4">dwqe(4)</a> print the gmac to which it attaches.
                    770: <li>Removed kernel locks from the ARP input path.
                    771: <li>Ensured the softraid volume's device is chosen as root disk default for guided disk encryption.
                    772: <!-- 2023/04/06 -->
                    773: <li>Updated Mesa to 22.3.7.
                    774: <!-- 2023/04/05 -->
                    775: <li>Pushed kernel lock into nd6_resolve().
                    776: <li>Implemented an mbuf hold queue and <a href="https://man.openbsd.org/sysctl.8">sysctl(8)</a> net.inet6.icmp6.nd6_queued for ND6 as in ARP.
                    777: <li>Enabled Force Unit Access (FUA) for <a href="https://man.openbsd.org/ufshci.4">ufshci(4)</a> write commands to prevent intermittent data corruption.
                    778: <li>Ensured the PCIe link for the RK3568 PCIe controllers runs at the maximum possible speed.
                    779: <li>Implemented software control for the internal delays of the RTL8211F PHY.
                    780: <!-- 2023/04/04 -->
                    781: <li>Ensured correct checksum is calculated when sending IP packets to userland with divert-packet rules.
                    782: <li>Enabled guided disk encryption support on arm64.
                    783: <li>Made root on softraid installations boot out of the box on Raspberry Pis.
                    784: <!-- 2023/04/03 -->
                    785: <li>Prevented an accidental second sleep after resume when the lid is closed on a Dell Precision 5510.
                    786: <!-- 2023/04/02 -->
                    787: <li>Added <a href="https://man.openbsd.org/ehci.4">ehci(4)</a> support for using standard phy drivers registered with ofw/fdt first, allowing ehci to enable <a href="https://man.openbsd.org/rkusbphy.4">rkusbphy(4)</a>.
                    788: <li>Added <a href="https://man.openbsd.org/xhci.4">xhci(4)</a> support for enabling both the usb2 and usb3 phys. Added support for using standard phy drivers registered with the ofw/fdt code.
                    789: <li>Added glue for network interfaces to be found by fdt/ofw node or phandle and registered <a href="https://man.openbsd.org/mvneta.4">mvneta(4)</a> and <a href="https://man.openbsd.org/dwqe.4">dwqe(4)</a> mappings.
                    790: <li>Added a mutex to protect <a href="https://man.openbsd.org/clockintr.9">clockintr(9)</a> struct clockintr_queue.
                    791: <li>Added support for TEMPerGold 3.4 to <a href="https://man.openbsd.org/ugold.4">ugold(4)</a>.
                    792: <!-- 2023/04/01 -->
                    793: <li>Introduced <a href="https://man.openbsd.org/rkusbphy.4">rkusbphy(4)</a>, a driver for the usb2phy on Rockchip SoCs.
                    794: <li>Introduced <a href="https://man.openbsd.org/rkiovd.4">rkiovd(4)</a>, a driver for the IO voltage domains on Rockchip SoCs.
                    795: <li>Implemented regulator notifiers called when the voltage/current for a regulator is changed or when a regulator is initialized when it attaches for the first time.
                    796: <!-- 2023/03/31 -->
                    797: <li>Introduced <a href="https://man.openbsd.org/ngbe.4">ngbe(4)</a>, a driver for the WangXun WX1860 series Gigabit Ethernet device.
                    798: <!-- 2023/03/30 -->
                    799: <li>Significantly reduced <a href="https://man.openbsd.org/ypldap.8">ypldap(8)</a> memory usage when updating larger directories.
                    800: <!-- 2023/03/29 -->
                    801: <!-- 2023/03/28 -->
                    802: <li>Updated timezone data to include reversion of DST change in Lebanon.
                    803: <li>Introduced a <a href="https://man.openbsd.org/bgpd.8">bgpd(8)</a> semaphore to protect intermediate state from different RTR sessions from leaking into the RDE.
                    804: <li>Made <a href="https://man.openbsd.org/mg.1">mg(1)</a> fall back to /bin/sh if $SHELL is undefined.
                    805: <!-- 2023/03/27 -->
                    806: <li>Implemented branch target protection using the branch target identification feature introduced in Armv8.5, providing "head-CFI" to complement retguard's "tail-CFI."
                    807: <li>Added <a href="https://man.openbsd.org/dmesg.8">dmesg(8)</a> display of arm64 BT and SBSS features.
                    808: <li>Added a <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> format to show if there are unseen changes while in a node.
                    809: <li>Prevented write to clients attached to different sessions in <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> passthrough.
                    810: <!-- 2023/03/26 -->
                    811: <li>Added tilde and environment variable expansion to <a href="https://man.openbsd.org/ssh_config.5">ssh_config(5)</a> RevokedHostKeys.
                    812: <li>Added a check to <a href="https://man.openbsd.org/scp.1">scp(1)</a> to ensure a local source file exists before opening an SFTP connection to a remote server.
                    813: <li>Fixed <a href="https://man.openbsd.org/dwqe.4">dwqe(4)</a> on several boards using <a href="https://man.openbsd.org/rgephy.4">rgephy(4)</a>.
                    814: <li>Added <a href="https://man.openbsd.org/rkclock.4">rkclock(4)</a> support for the RK3568 32k RTC clock.
                    815: <!-- 2023/03/25 -->
                    816: <li>Improved <a href="https://man.openbsd.org/fdisk.8">fdisk(8)</a> comments documenting possible sources for MBR partition types and GPT partition GUIDs.
                    817: <li>Changed <a href="https://man.openbsd.org/malloc.3">malloc(3)</a> chunk sizes to be fine grained.
                    818: <!-- 2023/03/24 -->
                    819: <li>Moved to 7.3-current.
                    820: </ul>