www/plus74.html - view

Return to plus74.html CVS log

Up to [local] / www

File: [local] / www / plus74.html (download) (as text)

Revision 1.4, Wed Apr 10 13:06:40 2024 UTC (4 weeks, 6 days ago) by deraadt
Branch: MAIN
CVS Tags: HEAD
Changes since 1.3: +1 -0 lines

a missing link

<!doctype html>
<html lang=en id=plus>
<meta charset=utf-8>
<title>OpenBSD 7.4 Changelog</title>
<meta name="description" content="OpenBSD 7.4 changes">
<meta name="viewport" content="width=device-width, initial-scale=1">
<link rel="stylesheet" type="text/css" href="openbsd.css">
<link rel="canonical" href="https://www.openbsd.org/plus74.html">
<style>
strong {
	color: var(--red);
	font-weight: normal;
}

h3 {
	color: var(--blue);
}
</style>

<h2 id=OpenBSD>
<a href="index.html">
<i>Open</i><b>BSD</b></a>
7.4 Changelog
</h2>
<hr>

<p>
This selection is intended to include all important
and all user-visible changes.
For a complete record of all changes, please see the "source-changes"
mailing list, called "OpenBSD CVS"
in the <a href="https://marc.info/?l=openbsd-cvs">archives</a>,
or use <a href="anoncvs.html#CVS">CVS</a>.

<p>
For changes in other releases, click below:<br>
<a href="plus20.html">2.0</a>,
<a href="plus21.html">2.1</a>,
<a href="plus22.html">2.2</a>,
<a href="plus23.html">2.3</a>,
<a href="plus24.html">2.4</a>,
<a href="plus25.html">2.5</a>,
<a href="plus26.html">2.6</a>,
<a href="plus27.html">2.7</a>,
<a href="plus28.html">2.8</a>,
<a href="plus29.html">2.9</a>,
<a href="plus30.html">3.0</a>,
<a href="plus31.html">3.1</a>,
<a href="plus32.html">3.2</a>,
<a href="plus33.html">3.3</a>,
<a href="plus34.html">3.4</a>,
<a href="plus35.html">3.5</a>,
<a href="plus36.html">3.6</a>,
<br>
<a href="plus37.html">3.7</a>,
<a href="plus38.html">3.8</a>,
<a href="plus39.html">3.9</a>,
<a href="plus40.html">4.0</a>,
<a href="plus41.html">4.1</a>,
<a href="plus42.html">4.2</a>,
<a href="plus43.html">4.3</a>,
<a href="plus44.html">4.4</a>,
<a href="plus45.html">4.5</a>,
<a href="plus46.html">4.6</a>,
<a href="plus47.html">4.7</a>,
<a href="plus48.html">4.8</a>,
<a href="plus49.html">4.9</a>,
<a href="plus50.html">5.0</a>,
<a href="plus51.html">5.1</a>,
<a href="plus52.html">5.2</a>,
<a href="plus53.html">5.3</a>,
<br>
<a href="plus54.html">5.4</a>,
<a href="plus55.html">5.5</a>,
<a href="plus56.html">5.6</a>,
<a href="plus57.html">5.7</a>,
<a href="plus58.html">5.8</a>,
<a href="plus59.html">5.9</a>,
<a href="plus60.html">6.0</a>,
<a href="plus61.html">6.1</a>,
<a href="plus62.html">6.2</a>,
<a href="plus63.html">6.3</a>,
<a href="plus64.html">6.4</a>,
<a href="plus65.html">6.5</a>,
<a href="plus66.html">6.6</a>,
<a href="plus67.html">6.7</a>,
<a href="plus68.html">6.8</a>,
<a href="plus69.html">6.9</a>,
<a href="plus70.html">7.0</a>,
<br>
<a href="plus71.html">7.1</a>,
<a href="plus72.html">7.2</a>,
<a href="plus73.html">7.3</a>,
<a href="plus75.html">7.5</a>,
<a href="plus.html">current</a>.
<br>

<p>
<h3>Changes made between OpenBSD 7.3 and 7.4</h3>
<p>

<ul>
<!-- 2023/10/01 -->
<li>Added <a href="https://man.openbsd.org/sysctl.2">sysctl(2)</a> hw.ucomnames to list "fixed" paths to USB serial ports.
<li>Fixed an <a href="https://man.openbsd.org/aq.4">aq(4)</a> issue where Atlantic 2 hardware would stop transmitting packets under load on the M2 Pro Mac mini.
<!-- 2023/09/30 -->
<!-- 2023/09/29 -->
<li>Replaced kernel lock with mutex in <a href="https://man.openbsd.org/ixl.4">ixl(4)</a> media status, preventing a potential deadlock.
<li>Fixed crashes with <a href="https://man.openbsd.org/ipsecctl.8">ipsecctl(8)</a> -m by only forwarding validated pfkey messages to promiscuous listeners.
<li>Bumped <a href="https://man.openbsd.org/smtpd.8">smtpd(8)</a> to 7.4.0.
<li>Extended single_thread_set() mode with additional flag attributes SINGLE_DEEP and SINGLE_NOWAIT.
<!-- 2023/09/28 -->
<li>Bumped <a href="https://man.openbsd.org/bgpd.8">OpenBGPD</a> to 8.2.
<!-- 2023/09/27 -->
<li>Prevented <a href="https://man.openbsd.org/fw_update.8">fw_update(8)</a> from registering firmware already in /var/db/pkg.
<li>Corrected exit from <a href="https://man.openbsd.org/fw_update.8">fw_update(8)</a>.
<li>Made <a href="https://man.openbsd.org/fw_update.8">fw_update(8)</a> download firmware to LOCALSRC when using filenames.
<li>Made <a href="https://man.openbsd.org/deroff.1">deroff(1)</a> use a dynamically-allocated line buffer and resize as needed, fixing a buffer overflow for lines over 2048 bytes.
<!-- 2023/09/26 -->
<li>Used existing 'audio_lock' <a href="https://man.openbsd.org/mutex.9">mutex(9)</a> to make 'midi{read,write}_filtops' MP safe.
<li>Had <a href="https://man.openbsd.org/wg.4">wg(4)</a> copy the priority from the inner packet to the outer encrypted packet, so that higher priority packets are picked from hfsc queues for earlier transmission.
<!-- 2023/09/25 -->
<li>Disambiguated <a href="https://man.openbsd.org/vmd.8">vmd(8)</a> log messages per vm and device. Fixed updating log settings dynamically via <a href="https://man.openbsd.org/vmctl.8">vmctl(8)</a>. The "vmm" process now updates its own state properly, so settings survive vm reboots.
<li>Fixed a <a href="https://man.openbsd.org/vmd.8">vmd(8)</a> vm pause deadlock.
<li>Implemented <a href="https://man.openbsd.org/apldart.4">apldart(4)</a> support for stream IDs.
<li>Added <a href="https://man.openbsd.org/mbg.4">mbg(4)</a> support for the Meinberg PZF180PEX DCF77 time signal station receiver card.
<li>Enabled <a href="https://man.openbsd.org/mbg.4">mbg(4)</a> at pci on amd64.
<!-- 2023/09/24 -->
<li>Dropped PTE check in riscv64 pmap_fault_fixup(), resulting in performance improvements.
<!-- 2023/09/23 -->
<li>Introduced <a href="https://man.openbsd.org/stfrng.4">stfrng(4)</a>, a driver for the random number generator on the JH7110 SoC.
<li>Log the <a href="https://man.openbsd.org/vmd.8">vmd(8)</a> vm id instead of the kernel <a href="https://man.openbsd.org/vmm.4">vmm(4)</a> id in vcpu_run_loop.
<!-- 2023/09/22 -->
<li>Introduced 'hotplug_mtx' <a href="https://man.openbsd.org/mutex.9">mutex(9)</a> and made 'hotplug_filtops' MP safe.
<li>Made 'logread_filterops' MP safe.
<li>Significantly increased the speed of <a href="https://man.openbsd.org/pkg-config.1">pkg-config(1)</a>.
<!-- 2023/09/21 -->
<li>Enabled <a href="https://man.openbsd.org/softraid.4">softraid(4)</a> in powerpc64 RAMDISK.
<!-- 2023/09/20 -->
<li>Bumped LibreSSL to 3.8.2.
<!-- 2023/09/19 -->
<li>Improved the output of <a href="https://man.openbsd.org/ddb.4">ddb(4)</a> "show proc" command and added "/t" as an argument that can be used to specify a proc by TID instead of address.
<!-- 2023/09/18 -->
<li>Disabled utf-8 for non-multibyte locales in <a href="https://man.openbsd.org/awk.1">awk(1)</a>, making it possible to get the old awk behavior (where chars are bytes) by setting LC_CTYPE to C or POSIX.
<li>Moved to 7.4-beta.
<!-- 2023/09/17 -->
<li>Updated <a href="https://man.openbsd.org/awk.1">awk(1)</a> to the Sep 12, 2023 version, corresponding to the 2nd edition of "The AWK Programming Language" and adding support for UTF-8 and comma-separated value inputs.
<!-- 2023/09/16 -->
<li>Allowed <a href="https://man.openbsd.org/counters_read.9">counters_read(9)</a> to take an optional scratch buffer, allowing the <a href="https://man.openbsd.org/ddb.4">ddb(4)</a> show uvmexp command to work in OOM situations.
<!-- 2023/09/15 -->
<li>Added <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> source-file -t option to specify a target pane.
<!-- 2023/09/14 -->
<li>Used zero-copy approach and vectored io in <a href="https://man.openbsd.org/vmd.8">vmd(8)</a>/<a href="https://man.openbsd.org/vioblk.4">vioblk(4)</a>, reducing memcpy and multiple read/write syscalls per io transaction.
<!-- 2023/09/13 -->
<!-- 2023/09/12 -->
<!-- 2023/09/11 -->
<li>Implemented tuples in <a href="https://man.openbsd.org/btrace.8">btrace(8)</a>, allowing export of per-CPU scheduling data.
<li>Prevented <a href="https://man.openbsd.org/unwind.8">unwind(8)</a> entering a loop due to constant ENOBUF receipt.
<!-- 2023/09/10 -->
<li>Updated <a href="https://man.openbsd.org/awk.1">awk(1)</a> to the Sep 6, 2023 version.
<li>Load amd patch into a <a href="https://man.openbsd.org/malloc.3">malloc'd</a> region to make it page aligned, avoiding a General-Protection Exception on patch loader wrmsr with A10-5700, TN-A1 00610f01 15-10-01.
<!-- 2023/09/09 -->
<li>Updated <a href="https://man.openbsd.org/awk.1">awk(1)</a> to the Dec 15, 2022 version: Force hex escapes in strings to be no more than two characters, as they already are in regular expressions.
<li>Corrected TP-LINK bluetooth ID in <a href="https://man.openbsd.org/ure.4">ure(4)</a>.
<!-- 2023/09/08 -->
<!-- 2023/09/07 -->
<li>Added a request or response declaration feature used through the <a href="https://man.openbsd.org/radiusd.8">radiusd(8)</a> module interface, allowing additional modules to modify RADIUS request or response messages.
<li>Fixed <a href="https://man.openbsd.org/scp.1">scp(1)</a> in SFTP mode recursive upload and download of directories that contain symlinks to other directories.
<li>Treat consecutive paragraph indicators as different paragraphs in <a href="https://man.openbsd.org/vi.1">vi(1)</a>.
<!-- 2023/09/06 -->
<li>Allowed override of Subsystem directives in <a href="https://man.openbsd.org/sshd.8">sshd(8)</a> Match blocks.
<li>Converted exclusive to shared net lock for ip_send() and ip6_send().
<!-- 2023/09/05 -->
<li>Reduced latency in vcpu work related to i/o by removing an <a href="https://man.openbsd.org/ioctl.2">ioctl(2)</a> from the vcpu thread hotpath in <a href="https://man.openbsd.org/vmd.8">vmd(8)</a>.
<li>Switched the APMI CPUID mask to an include mask in <a href="https://man.openbsd.org/vmm.4">vmm(4)</a>.
<li>Fixed a problem with <a href="https://man.openbsd.org/em.4">em(4)</a> where the I217-LM would fail to receive packets for some of the programmed multicast addresses.
<Li>Made <a href="https://man.openbsd.org/ksmn.4">ksmn(4)</a> attach to 19h/4x devices.
<li>Updated to <a href="https://man.openbsd.org/unbound.8">unbound(8)</a> to 1.18.0.
<li>Fixed touchpads on newer <a href="https://man.openbsd.org/apldc.4">apldc(4)</a> device trees.
<!-- 2023/09/04 -->
<li>Fixed <a href="https://man.openbsd.org/netstat.1">netstat(1)</a> output of uses of current SYN cache left.
<li>Made <a href="https://man.openbsd.org/ssh-keygen.1">ssh-keygen(1)</a> generate Ed25519 keys when invoked without arguments.
<!-- 2023/09/03 -->
<li>Set interactive mode for <a href="https://man.openbsd.org/ssh.1">ssh(1)</a> ControlPersist sessions if they originally requested a tty, enabling keystroke timing obfuscation for most ControlPersist sessions.
<li>Allowed UDP for built-in <a href="https://man.openbsd.org/inetd.8">inetd(8)</a> services on 127.0.0.1.
<!-- 2023/09/02 -->
<li>Replaced perl's use of <a href="https://man.openbsd.org/syscall.2">syscall(2)</a> with a dispatcher to libc, removing the ability to do direct syscalls from perl.
<li>Added <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> Setulc1 for setting underline color for ANSI or 256 colors.
<li>Used a hardware-based number of KDF rounds by default for passphrases in <a href="https://man.openbsd.org/bioctl.8">bioctl(8)</a> using [-r auto].
<li>Prevented a crash of <a href="https://man.openbsd.org/iwm.4">iwm(4)</a> when aircrack-ng attempts to inject frames via bpf in monitor mode.
<!-- 2023/09/01 -->
<li>Prevented virtio block device stalls due to race conditions with the i8259 in <a href="https://man.openbsd.org/vmd.8">vmd(8)</a>.
<li>Added <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> detach-on-destroy "previous" and "next" argumennts to switch the client to the previous or next session in alphabetical order.
<!-- 2023/08/31 -->
<li>Corrected a bug where <a href="https://man.openbsd.org/fw_update.8">fw_update(8)</a> exiting unexpectedly would mean the package database never unlocked.
<li>Improved feedback from <a href="https://man.openbsd.org/fw_update.8">fw_update(8)</a> by using a spinner to show status rather than printing only at the end.
<!-- 2023/08/30 -->
<li>Preempt a running proc even if there is no other process/thread queued on that CPU's runqueue. Should fix a problem where RLIMIT_CPU is unreliable on idle systems.
<!-- 2023/08/29 -->
<li>Added FDT support for <a href="https://man.openbsd.org/dwiic.4">dwiic(4)</a>.
<!-- 2023/08/28 -->
<li>Made <a href="https://man.openbsd.org/sshd_config.5">sshd_config(5)</a> first-match-wins.
<li>Limit artificial login delay to a reasonable maximum (5 seconds) and don't delay at all for the "none" <a href="https://man.openbsd.org/ssh.1">ssh(1)</a> authentication mechanism.
<!-- 2023/08/27 -->
<li>Added keystroke timing obfuscation to the ssh client via a new <a href="https://man.openbsd.org/ssh_config.5">ssh_config(5)</a> ObscureKeystrokeTiming keyword.
<li>Added a pair of <a href="https://man.openbsd.org/ssh.1">ssh(1)</a> transport protocol messages to implement a ping capability.
<!-- 2023/08/26 -->
<li>Adapted <a href="https://man.openbsd.org/glxclk.4">glxclk(4)</a> for clockintr.
<li>Fixed <a href="https://man.openbsd.org/iwx.4">iwx(4)</a> scan command such that the driver selects an SSID during bgscan, a possible fix for fatal firmware error 0x20002806.
<!-- 2023/08/25 -->
<!-- 2023/08/24 -->
<!-- 2023/08/23 -->
<li>Added -c to <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> run-shell  to set working directory.
<!-- 2023/08/22 -->
<li>Separated cpu_initclocks() from cpu_startclock() on all platforms, allowing the primary CPU an opportunity to perform clock interrupt preparation in a machine-independent manner.
<!-- 2023/08/21 -->
<li>Made alpha stop running an independent schedclock() and removed the scaffolding. All platforms now call schedclock() from statclock() at an effective schedhz of ~12.5.
<li>Ensured the installer continues until passphrase is confirmed correctly with <a href="https://man.openbsd.org/bioctl.8">bioctl(8)</a> rather than bailing out after three failed attempts.
<li>Made <a href="https://man.openbsd.org/bioctl.8">bioctl(8)</a> allow retry of passphrase on mismatch by default, like <a href="https://man.openbsd.org/passwd.1">passwd(1)</a>.
<li>Made <a href="https://man.openbsd.org/bioctl.8">bioctl(8)</a> print <a href="https://man.openbsd.org/softraid.4">softraid(4)</a> errors on standard error.
<!-- 2023/08/20 -->
<li>Made <a href="https://man.openbsd.org/kdump.1">kdump(1)</a> show <a href="https://man.openbsd.org/kqueue1.2">kqueue1(2)</a> flags.
<li>Bumped zlib version to 1.3.
<li>Added the <a href="https://man.openbsd.org/kqueue1.2">kqueue1()</a> system call, adapted from NetBSD, identical to kqueue() except that the close-on-exec flag on the new file descriptor is determined by the O_CLOEXEC flag in the flags argument.
<!-- 2023/08/19 -->
<!-- 2023/08/18 -->
<li>Check for and disable powerpc64 cores that fail to start.
<li>Made <a href="https://man.openbsd.org/bioctl.8">bioctl(8)</a> -s read passphrases without prompts or confirmation.
<li>Replaced uvm_meter() with update_loadav() for calculating the loadavg, using a simple timeout instead of being called via schedcpu().
<li>Fixed the <a href="https://man.openbsd.org/radiusd.8">radiusd(8)</a> config parser to allow comment lines within the "client" block and improve error messages.
<!-- 2023/08/17 -->
<li>Added <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> session, pane and user mouse range types for the status line and add format variables for mouse_status_line and mouse_status_range so they can be associated with different commands in the key bindings.
<!-- 2023/08/16 -->
<li>Removed per-AFI ASPA handling in <a href="https://man.openbsd.org/bgpd.8">bgpd(8)</a> internals but continued to allow the old syntax in aspa-set tables.
<!-- 2023/08/15 -->
<li>Dropped MSDOSFS from i386 floppy.
<li><a href="https://man.openbsd.org/pledge.2">Pledged</a> <a href="https://man.openbsd.org/ldd.1">ldd(1)</a> "stdio rpath proc exec prot_exec", dropping either "proc" or "prot_exec" at the <a href="https://man.openbsd.org/dlopen.3">dlopen(3)</a> vs. <a href="https://man.openbsd.org/execve.2">execve(2)</a> split.
<li>Added <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> option menu-selected-style to configure the currently selected menu item.
<!-- 2023/08/14 -->
<li>Extended scheduler tracepoints to follow CPU jumping.
<li>Avoided issuing syscalls on a file descriptor invalidated following a socket error condition in <a href="https://man.openbsd.org/nc.1">nc(1)</a>.
<!-- 2023/08/13 -->
<li>Improved <a href="https://man.openbsd.org/pckbd.4">pckbd(4)</a> attachment to Chromebook keyboards.
<!-- 2023/08/12 -->
<li>Improved <a href="https://man.openbsd.org/uwacom.4">uwacom(4)</a> support for Intuos S and One S tablets.
<li>Prevented <a href="https://man.openbsd.org/ihidev.4">ihidev(4)</a> power down if the device is already opened, for cases such as an <a href="https://man.openbsd.org/ikbd.4">ikbd(4)</a> attaching to become the console keyboard, then userland opening it only once as an input device so it remains unusable after powering down.
<!-- 2023/08/11 -->
<li>Added <a href="https://man.openbsd.org/iked.8">iked(8)</a> support for route-based <a href="https://man.openbsd.org/sec.4">sec(4)</a> tunnels.
<!-- 2023/08/10 -->
<li>Prevented potential reuse of softraid CRYPTO volumes when installing.
<li>Allowed libpcap to read files with additional link-layer type values, providing translation between DLT_* and LINKTYPE_* values.
<li>Added .VARIABLES to <a href="https://man.openbsd.org/make.1">make(1)</a> to list all the names of global variables that have been set.
<li>Corrected display of <a href="https://man.openbsd.org/ldomctl.8">ldomctl(8)</a> 'status' to show zero utilization for stopped guests.
<!-- 2023/08/09 -->
<li>Bumped <a href="https://man.openbsd.org/ssh.1">OpenSSH</a> to 9.4.
<!-- 2023/08/08 -->
<li>Added <a href="https://man.openbsd.org/dmesg.8">dmesg(8)</a> display of x86 cpu patch level.
<li>Added <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> flag to next-prompt/previous-prompt to go to command output instead.
<li>Added <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> options and flags for menu styles similar to those existing for popups.
<li>Extended the <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> menu drawing function to support custom characters and styles.
<!-- 2023/08/07 -->
<li>Made <a href="https://man.openbsd.org/dwqe.4">dwqe(4)</a> work at 1000baseT.
<li>Repaired powerdown on Tadpole Ultrabook IIe.
<!-- 2023/08/06 -->
<li>Added support for route-based ipsec vpn negotiation with <a href="https://man.openbsd.org/sec.4">sec(4)</a> via <a href="https://man.openbsd.org/isakmpd.8">isakmpd(8)</a> to <a href="https://man.openbsd.org/ipsecctl.8">ipsecctl(8)</a> and added "interface secX" for use instead of specifying tunnel/transport modes and traffic selectors.
<li>Supported configuring interface SAs for route-based ipsec vpns to <a href="https://man.openbsd.org/isakmpd.8">isakmpd(8)</a> with use of "Interface NUMBER".
<li>Allowed userland to install (and see) security associations for route-based ipsec vpns.
<li>Introduced <a href="https://man.openbsd.org/sec.4">sec(4)</a>, providing point-to-point tunnel interfaces for IPv4 and IPv6 protected by the <a href="https://man.openbsd.org/ipsec.4">ipsec(4)</a> Encapsulating Security Payload (ESP) protocol.
<li>Started adding support for route-based ipsec vpns.
<!-- 2023/08/05 -->
<!-- 2023/08/04 -->
<li>Added support for 8bpp X server on LUNA.
<li>Applied <a href="https://man.openbsd.org/ssh.1">ssh(1)</a> ConnectTimeout to multiplexing local socket connections.
<!-- 2023/08/03 -->
<li>Enable vlan stripping of LRO packets in <a href="https://man.openbsd.org/ix.4">ix(4)</a>.
<li>Remove the per-cpu load average calculation.
<!-- 2023/08/02 -->
<li>Set a low water mark on scsi_xfer_pool and prime it so the pagedaemon can write out pages to swap when we're out of physical memory.
<li>Added padding to align on an 8-byte boundary to Xinput on luna88k.
<li>Prevented bad memory accesses seen with page flipping on alder lake and raptor lake.
<!-- 2023/08/01 -->
<li>Fixed mmap-ing size for LUNA framebuffer.
<!-- 2023/07/31 -->
<li>Added AXP15060 support to <a href="https://man.openbsd.org/axppmic.4">axppmic(4)</a>.
<li>Implemented audio input source selection in <a href="https://man.openbsd.org/onyx.4">onyx(4)</a>.
<!-- 2023/07/30 -->
<li>Ensured retpolines will not serve as a net negative on CPUs with eIBRS (enhanced Indirect Branch Restricted Speculation) or IBT enabled in the kernel.
<li>Added JH7110 I2C clocks to <a href="https://man.openbsd.org/stfclock.4">stfclock(4)</a>.
<!-- 2023/07/29 -->
<!-- 2023/07/28 -->
<li>Set OPENSSL_NO_ENGINE and remove engine code.
<li>Dropped DSO and defined OPENSSL_NO_DSO.
<!-- 2023/07/27 -->
<li>Made <a href="https://man.openbsd.org/sshd_config.5">sshd_config(5)</a> AuthorizedPrincipalsCommand and AuthorizedKeysCommand accept the %D (routing domain) and a new %C (connection address/port 4-tuple) as expansion sequences.
<li>Increased default KDF work-factor for OpenSSH format private keys from 16 to 24.
<li>Fixed inline vlan-tag handling of forwarded LRO packets from <a href="https://man.openbsd.org/ix.4">ix(4)</a>.
<li>Fixed verbose logging in <a href="https://man.openbsd.org/vmd.8">vmd(8)</a> child processes.
<!-- 2023/07/26 -->
<li>Made <a href="https://man.openbsd.org/ssh.1">ssh(1)</a> -f (fork after authentication) work properly in multiplexed cases (including ControlPersist).
<!-- 2023/07/25 -->
<li>Isolated <a href="https://man.openbsd.org/profil.2">profil(2)</a> and GPROF from statclock() now that we have a machine-independent interface to the clock interrupt hardware.
<li>Stopped building unused dhclient.
<li>Made the built-in keyboard on the Tadpole UltraBook IIe work.
<!-- 2023/07/24 -->
<li>Added a check before setting DE_CFG bit 9 to ensure compatibility with hypervisors not allowing msr writes to that bit.
<li>Fixed <a href="https://man.openbsd.org/wscons.4">wscons(4)</a> scan code value for the print screen key.
<li>Prevented the kernel from accessing random memory after receiving some specially crafted DCS or CSI terminal escape sequences by limiting <a href="https://man.openbsd.org/wscons.4">wscons(4)</a> escape sequence argument count to usable bounds.
<li>Set DE_CFG[9], a chickenbit which stops Zenbleed.
<li>Corrected <a href="https://man.openbsd.org/dmesg.8">dmesg(8)</a> display of pciprobe output after boot block changes on i386.
<!-- 2023/07/23 -->
<li><a href="https://man.openbsd.org/pledge.2">Pledged</a> (NULL, "stdio rpath") <a href="https://man.openbsd.org/ldd.1">ldd(1)</a>.
<li>Improved <a href="https://man.openbsd.org/xhci.4">xhci(4)</a> suspend/resume support.
<li>Implemented <a href="https://man.openbsd.org/apldart.4">apldart(4)</a> suspend/resume support.
<li>Prevented a spurious attach/detach/attach sequence when resuming with <a href="https://man.openbsd.org/tipd.4">tipd(4)</a> when a USB device is connected.
<li>Removed -stats option from <a href="https://man.openbsd.org/openssl.1">openssl(1)</a> errstr.
<!-- 2023/07/22 -->
<li>Implemented updates for AMD CPU microcode.
<li>Introduced <a href="https://man.openbsd.org/qcsdam.4">qcsdam(4)</a>, a driver for the PMIC Shared Direct Access Memory found on Qualcomm SoCs.
<!-- 2023/07/21 -->
<!-- 2023/07/20 -->
<li>Allow <a href="https://man.openbsd.org/cwm.1">cwm(1)</a> to cycle through windows of the same window class as the active window, default key binding to M-grave, respectively Alt-Tilde, like with other window managers.
<li>Capped the size of numbers we check for primality to 32k to block a DoS vector.
<!-- 2023/07/19 -->
<li>Assigned wsdisplay0 to the glass console always for i386 and amd64 RAMDISK and RAMDISK_CD.
<li>Fixed skipping of white space after parsing the username in <a href="https://man.openbsd.org/crontab.1">/etc/crontab</a> to make it consistent with how lines without usernames are parsed.
<li>Used "early 2" to attach <a href="https://man.openbsd.org/aplpmgr.4">aplpmgr(4)</a> to make sure it attachs before other core drivers that need to enable power domains.
<li>Implemented "early 2" locator for <a href="https://man.openbsd.org/mainbus.4">mainbus(4)</a> and simplebus to make drivers attach even earlier.
<li>Protected <a href="https://man.openbsd.org/ixl.4">ixl(4)</a> admin queue with <a href="https://man.openbsd.org/mutex.9">mutex(9)</a>.
<li>Separated ssh-pkcs11-helpers for each p11 module in <a href="https://man.openbsd.org/ssh.1">ssh(1)</a> and implemented reference counting, fixing some bugs making PKCS11 keys unusable after they have been deleted.
<li>Disallowed remote addition of FIDO/PKCS11 provider libraries to <a href="https://man.openbsd.org/ssh-agent.1">ssh-agent(1)</a> by default.
<li>Partially fixed interactive mode in <a href="https://man.openbsd.org/patch.1">patch(1)</a>.
<li>Fixed <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> hang by correcting visited flag when the last window list is rebuilt by renumbering windows.
<!-- 2023/07/18 -->
<li>Enabled LRO for TCP by default in the network drivers (currently supported by <a href="https://man.openbsd.org/ix.4">ix(4)</a> and <a href="https://man.openbsd.org/lo.4">lo(4)</a>). LRO can be turned off per-interface with <a href="https://man.openbsd.org/ifconfig.8">ifconfig(8)</a> -tcplro.
<li>With the update of the sleep API, implemented the linux emulation of their wait API, schedule() and set_current_state() in a less hacky way, removing some possible race conditions in the wait API.
<!-- 2023/07/17 -->
<li>Put the <a href="https://man.openbsd.org/tipd.4">tipd(4)</a> USB Type-C power delivery controller into the "S5" state during suspend, preventing USB devices from consuming power.
<!-- 2023/07/16 -->
<li>Added support for configuration tags to <a href="https://man.openbsd.org/ssh.1">ssh(1)</a>. Added an <a href="https://man.openbsd.org/ssh_config.5">ssh_config(5)</a> "Tag" directive and corresponding "Match tag" predicate.
<li>Added a <a href="https://man.openbsd.org/ssh_config.5">ssh_config(5)</a> "match localnetwork" predicate which may be used to vary the effective client configuration based on network location.
<!-- 2023/07/15 -->
<li>Implemented Pointer Authentication Code support on AArch64.
<li>Fixed use of qcow base images in <a href="https://man.openbsd.org/vmd.8">vmd(8)</a> to avoid device failure during startup post-exec when trying to receive device state from the parent vm process.
<li>Added mute control to <a href="https://man.openbsd.org/tascodec.4">tascodec(4)</a>.
<li>Used <a href="https://man.openbsd.org/unveil.2">unveil(2)</a> to restrict <a href="https://man.openbsd.org/patch.1">patch(1)</a> to its current working directory.
<!-- 2023/07/14 -->
<li>Ensured <a href="https://man.openbsd.org/dhcrelay6.8">dhcrelay6(8)</a> does not ignore the AF_LINK entries of <a href="https://man.openbsd.org/carp.4">carp(4)</a> interfaces.
<!-- 2023/07/13 -->
<li>Pulled validation into local prefix parser in <a href="https://man.openbsd.org/vmd.8">vmd(8)</a>.
<li>Checked <a href="https://man.openbsd.org/rcctl.8">rcctl(8)</a> input before trying to disable a non-existing daemon to prevent parsing bogus characters.
<li>Made use of the deep idle state available on Apple M1/M2 cores in the idle loop and for suspend, resulting in power savings particularly when running in a state with high clock frequency.
<!-- 2023/07/12 -->
<li>Adressed incomplete validation of ELF program headers in <a href="https://man.openbsd.org/execve.2">execve(2)</a> which could lead to a panic in vmcmd_map_readvn() with a malformed binary/interpreter.
<li>Prevented GPROF kernel crash during resume by disabling _mcount() across suspend/resume in sleep_state().
<li>Worked around a use after free in <a href="https://man.openbsd.org/httpd.8">httpd(8)</a> due to a malformed HTTP request when httpd is in fastcgi mode.
<li>Prevented a session reset in <a href="https://man.openbsd.org/bgpd.8">bgpd(8)</a> due to parser failure.
<li>Used ssize_t instead of short for line lengths to lessen chance of underflow and segfault in <a href="https://man.openbsd.org/patch.1">patch(1)</a> with excessive line length.
<!-- 2023/07/11 -->
<li>Reworked sleep_setup()/sleep_finish() to no longer hold the scheduler lock between calls.
<!-- 2023/07/10 -->
<li>Allow <a href="https://man.openbsd.org/unveil.2">unveiled</a> programs to dump core by passing BYPASSUNVEIL just for this vnode.
<li>Prevented <a href="https://man.openbsd.org/pax.1">pax(1)</a> from attempting to open a file when creating an archive file even if the file will be skipped due to a -s replacement with the empty string.
<!-- 2023/07/09 -->
<li>Enabled Indirect Branch Tracking for amd64 userland, using XSAVES/XRSTORS to save/restore the state and enabling it at exec-time (and for signal handling) if the PS_NOBTCFI flag isn"t set.
<li>Added PS_NOBTCFI, a per-process flag indicating that Branch Target Control Flow Integrity has beendisabled for the process, to be used by the amd64 code.
<li>Added mute control to <a href="https://man.openbsd.org/sncodec.4">sncodec(4)</a>.
<li>Added suspend key support to <a href="https://man.openbsd.org/wskbd.4">wskbd(4)</a> and made it work on Apple ARM laptops.
<!-- 2023/07/08 -->
<li>Added request_sleep(), a machine-independent way of sending the machine to sleep in a safe thread, to amd64, i386 and arm64.
<li>Updated to <a href="https://man.openbsd.org/perl.1">perl</a> 5.36.1.
<li>Introduced <a href="https://man.openbsd.org/stfpciephy.4">stfpciephy(4)</a>, a driver to control the PCIe 2.0 and USB 3.0 PHY on the StarFive JH7110 SoC.
<li>Introduced <a href="https://man.openbsd.org/stfpcie.4">stfpcie(4)</a>, a driver to support the PLDA XpressRICH-AXI PCIe controller on the StarFive JH7110 SoC.
<li>Added support for the RK3588 PCIe3 PHY to <a href="https://man.openbsd.org/rkpciephy.4">rkpciephy(4)</a>.
<li>Added support for the Motorcomm YT8521/YT8531 PHYs and enabled <a href="https://man.openbsd.org/ytphy.4">ytphy(4)</a> on riscv64.
<li>Took initial step toward a machine independent safe sleep API.
<li>Toggled IBT off during EFI runtime services calls.
<!-- 2023/07/07 -->
<li>Introduced <a href="https://man.openbsd.org/ietp.4">ietp(4)</a> driver for Elantech I2C touchpads.
<li>Made ld.bfd emit PT_OPENBSD_NOBTCFI.
<li>Added <a href="https://man.openbsd.org/rkclock.4">rkclock(4)</a> resets for RK3588 USB 3.0 controllers and clocks for the RK3588 I2C controllers and RK3588 PWM controllers.
<li>Provided an optimized bn_mulw() for riscv64 for a 1.5-2x performance gain for BN multiplication and similar gain for RSA operations.
<li>Provided a libcrypto Makefile.inc for riscv64.
<li>Swapped smtpd link-auth filter arguments to avoid ambiguities with user names containing a "|" character.
<li>Bumped <a href="https://man.openbsd.org/smtpd-filters.7">smtpd-filters(7)</a> protocol version.
<li>Enabled reading RSA-PSS certificates.
<li>Added support for multiple batteries to <a href="https://man.openbsd.org/acpithinkpad.4">acpithinkpad(4)</a> setchargestart and setchargestop.
<!-- 2023/07/06 -->
<li>Added AXP305 support and fixes to <a href="https://man.openbsd.org/axppmic.4">axppmic(4)</a>.
<li>Used mtx_init() to initialize stack-based mutexes, ensuring the mutex' lock_object has static storage duration.
<li>Cleared <a href="https://man.openbsd.org/knote.9">knote(9)</a>s when finishing wseventvar in <a href="https://man.openbsd.org/wscons.4">wscons(4)</a> to prevent a kernel crash.
<li>Taught BFD tools how to handle NOBTCFI.
<li>Converted tcp_now() time counter to 64 bit.
<li>Registered a mapping of <a href="https://man.openbsd.org/dwge.4">dwge(4)</a> interfaces to ofw nodes/phandles.
<li>Removed special cases for IBT/BTI introduced during development.
<!-- 2023/07/05 -->
<li>Added <a href="https://man.openbsd.org/pfsync.4">pfsync(4)</a> specific locks, introduced pfsync support to partition states into independently-running slices, and made <a href="https://man.openbsd.org/pf.4">pf(4)</a> state purges mpsafe.
<li>Handled <a href="https://man.openbsd.org/dwge.4">dwge(4)</a> fixed-link configuration in the device tree.
<li>Fixed boot of OpenBSD using Hyper-V on Windows 11.
<li>Fixed error in the MSI-X interrupt establish loop for <a href="https://man.openbsd.org/virtio.4">virtio(4)</a> which could lead to fallback to shared IRQs.
<li>Made softdep mounts a no-op.
<li>Added <a href="https://man.openbsd.org/iwm.4">iwm(4)</a>/<a href="https://man.openbsd.org/iwx.4">iwx(4)</a> background scan task to the queue from which it will be deleted, ensuring proper cancellation during driver state transition.
<li>Drop kernel lock before panic to avoid WITNESS report during fault on amd64.
<li>Implemented support for the GPIOs on the JH7110, making it possible to reboot the VisionFive 2.
<li>Restored (R)esize functionality to sparc64 <a href="https://man.openbsd.org/disklabel.8">disklabel(8)</a>.
<!-- 2023/07/04 -->
<li>Limited the number of transactions/tickets <a href="https://man.openbsd.org/pf.4">pf(4)</a>'s pf_open_trans() can issue for each clone of /dev/pf to 512, avoiding use of all kernel memory by asking DIOCGETRULES for more tickets.
<li>Added StarFive JH7110 support to <a href="https://man.openbsd.org/dwqe.4">dwqe(4)</a>.
<li>Introduced DIOCXEND to <a href="https://man.openbsd.org/pf.4">pf(4)</a> (and also <a href="https://man.openbsd.org/snmpd.8">snmpd(8)</a> and <a href="https://man.openbsd.org/systat.1">systat(1)</a>) so applications close when done fetching pf rules and cannot consume all kernel memory.
<li>Made the <a href="https://man.openbsd.org/bge.4">bge(4)</a> hardware counters available on BCM5705 and newer available in <a href="https://man.openbsd.org/kstat.1">kstat(1)</a>.
<!-- 2023/07/03 -->
<li>Added unix domain socket support to <a href="https://man.openbsd.org/ssh.1">ssh(1)</a> -W.
<li>Added <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> support for marking lines with a shell prompt based on the OSC 133 extension.
<li>Enabled mouse.tp.mtbuttons for apldcms.
<li>Updated to makedepend 1.0.8.
<li>Updated to fontconfig 2.14.2.
<li>Updated to pixman 0.42.2.
<li>Updated to xtrans 1.5.0.
<li>Updated to libXaw 1.0.15
<li>Updated to libXt 1.3.0.
<li>Updated to xcb-util 0.4.1.
<li>Updated to libxshmfence 1.3.2.
<li>Updated to libXvMC 1.0.13.
<li>Updated to libXv 1.0.12.
<li>Updated to libXrandr 1.5.3.
<li>Updated to libXi 1.8.1.
<li>Updated to libXfixes 6.0.1.
<li>Updated to libXdamage 1.1.6.
<li>Updated to libXcomposite 0.4.6.
<li>Updated to xf86-video-r128 6.12.1.
<li>Updated to xf86-video-ati 22.0.0.
<li>Updated to xf86-input-mouse 1.9.5.
<li>Updated to xwd 1.0.9.
<li>Updated to xrdb 1.2.2.
<li>Updated to setxkbmap 1.3.4.
<li>Removed tls1.0 and 1.1 related options from <a href="https://man.openbsd.org/openssl.1">openssl(1)</a>.
<!-- 2023/07/02 -->
<li>Added <a href="https://man.openbsd.org/wsmouse.4">wsmouse(4)</a> button mappings for two- and three-finger clicks on clickpads.
<li>Used TSO and LRO on the loopback interface to transfer TCP faster (turned off by default).
<li>Removed __HAVE_CLOCKINTR symbol on all platforms.
<!-- 2023/07/01 -->
<li>Added <a href="https://man.openbsd.org/clockintr_cpu_init.9">clockintr_cpu_init(9)</a> stagger by MAXCPUS.
<li>Introduced <a href="https://man.openbsd.org/qccpu.4">qccpu(4)</a>, a driver for Qualcomm Snapdragon CPU power states.
<li>Enabled AC detection in <a href="https://man.openbsd.org/qcpas.4">qcpas(4)</a>.
<li>Added support for JH7110 to <a href="https://man.openbsd.org/dwmmc.4">dwmmc(4)</a>, making the eMMC and microSD mostly work on the StarFive VisionFive 2.
<li>Added support for JH7110 to <a href="https://man.openbsd.org/stftemp.4">stftemp(4)</a>, adding temperature sensor support for the StarFive VisionFive 2.
<!-- 2023/06/30 -->
<!-- 2023/06/29 -->
<li>Fixed S3-based suspend on some newer machines by using an opt-in approach for waking up GREs in <a href="https://man.openbsd.org/acpi.4">acpi(4)</a>/<a href="https://man.openbsd.org/acpibtn.4">acpibtn(4)</a>.
<li>Fixed <a href="https://man.openbsd.org/disklabel.8">disklabel(8)</a> handling of 'N-* 100' template entries.
<li>Updated to <a href="https://man.openbsd.org/nsd.8">nsd(8)</a> 4.7.0.
<li>Rewrote <a href="https://man.openbsd.org/relayd.8">relayd(8)</a> pfe_route() to work on 64bit architectures.
<!-- 2023/06/28 -->
<li>Added <a href="https://man.openbsd.org/iked.8">iked(8)</a> support to verify x509 chain from CERT payloads.
<!-- 2023/06/27 -->
<li>Introduced <a href="https://man.openbsd.org/qctsens.4">qctsens(4)</a>, a driver for the Temperature Sensor found on Qualcomm SoCs.
<li>Removed net lock from <a href="https://man.openbsd.org/pf.4">pf(4)</a> ioctl DIOC{SET,CLR}IFFLAG.
<li>Made it possible to store the kstack or ustack in a map in <a href="https://man.openbsd.org/btrace.8">btrace(8)</a>.
<li>Restored interrupts and prevented unconditionally reenabling them in amd64 MCOUNT_EXIT.
<!-- 2023/06/26 -->
<!-- 2023/06/25 -->
<li>Provided <a href="https://man.openbsd.org/kstat.1">kstat(1)</a> information based on the byte and packet counters available in some <a href="https://man.openbsd.org/dwge.4">dwge(4)</a> implementations.
<li>Provided additional BN primitives for BN_ULLONG architectures.
<!-- 2023/06/24 -->
<li>Added initial support for StarFive VisionFive V2 to <a href="https://man.openbsd.org/stfclock.4">stfclock(4)</a>.
<!-- 2023/06/23 -->
<li>Fixed underlining in <a href="https://man.openbsd.org/ex.1">ex(1)</a> 's' command with the 'c' flag when 'number' is off.
<li>Improved <a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a> detection of RRDP session desynchronization.
<!-- 2023/06/22 -->
<li>Added <a href="https://man.openbsd.org/ksmn.4">ksmn(4)</a> support for the thermal sensors on Ryzen 9 79xx.
<!-- 2023/06/21 -->
<li>Made <a href="https://man.openbsd.org/ksh.1">ksh(1)</a> escape control characters when displaying file name completions.
<li>Fixed potential truncation of filtered data lines in <a href="https://man.openbsd.org/smtpd.8">smtpd(8)</a>.
<li>Added <a href="https://man.openbsd.org/ospf6ctl.8">ospf6ctl(8)</a> "fib reload" as in <a href="https://man.openbsd.org/ospfctl.8">ospfctl(8)</a> and made it trigger automatically on a timeout after RTM_DESYNC.
<!-- 2023/06/20 -->
<li>Made <a href="https://man.openbsd.org/ssh.1">ssh(1)</a> -Q CASignatureAlgorithms' only list signature algorithms that are valid for CA signing.
<!-- 2023/06/19 -->
<li>Fixed "no comment" not showing when running <a href="https://man.openbsd.org/ssh-keygen.1">ssh-keygen(1)</a> -l on multiple keys where one has a comment and other following keys do not.
<li>Fixed line wrapping in <a href="https://man.openbsd.org/fdisk.8">fdisk(8)</a>.
<li>Separated <a href="https://man.openbsd.org/shutdown.8">shutdown(8)</a> command access from the "operator" group and into a "_shutdown" group, preventing inappropriate disk read access.
<!-- 2023/06/18 -->
<li>Allowed use of 'a' as a shortcut for 'autoconf' in the installer.
<li>Ensured 'chmod a-x /bsd.upgrade' works to prevent re-upgrade for luna88k, matching other architectures.
<li>Switched ECDSA_METHOD usage to EC_KEY_METHOD for <a href="https://man.openbsd.org/smtpd.8">smtpd(8)</a>, the last consumer of the deprecated ECDSA_METHOD.
<!-- 2023/06/17 -->
<li>Fixed incomplete <a href="https://man.openbsd.org/azalia.4">azalia(4)</a> attachment for Ampere eMAG with an AMD GPU with an HD audio function.
<li>Improved speed of Montgomery multiplication.
<li>Bumped <a href="https://man.openbsd.org/smtpd.8">smtpd(8)</a> to 7.3.0.
<!-- 2023/06/16 -->
<li>Fixed IPv6 forward counters and icmp6 redirect when TSO is enabled.
<!-- 2023/06/15 -->
<li>Fixed CVE-2023-3128: X servers could return values from XQueryExtension allowing Xlib to write out-of-bounds entries.
<!-- 2023/06/14 -->
<li>Added missing kernel lock around (*if_ioctl)().
<!-- 2023/06/13 -->
<!-- 2023/06/12 -->
<li>Moved nd6_ifdetach() out of netlock.
<li>Provided and optimized various quad word primitives, providing performance gain across most BN operations on aaarch64.
<li>Prevented printing the last value twice in <a href="https://man.openbsd.org/seq.1">seq(1)</a>.
<li>Added content-encoding compression support to <a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a>.
<!-- 2023/06/11 -->
<!-- 2023/06/10 -->
<li>Implemented arm64 support for pointer authentication (PAC) in userland, making it possible to "sign" pointers with a hidden key and provide "tail CFI" similar to what retguard provides. (Disabled for x13s).
<li>Introduced <a href="https://man.openbsd.org/qcpas.4">qcpas(4)</a>, a driver for the Peripheral Authentication Service found on Qualcomm SoCs.
<!-- 2023/06/09 -->
<!-- 2023/06/08 -->
<!-- 2023/06/07 -->
<!-- 2023/06/06 -->
<li>Made the tlsv1.0 and tlsv1.1 options in <a href="https://man.openbsd.org/relayd.8">relayd(8)</a> do nothing in preparation for removal of these protocols.
<!-- 2023/06/05 -->
<li>Stopped calculating IP, TCP and UDP checksums on loopback interface.
<!-- 2023/06/04 -->
<!-- 2023/06/03 -->
<!-- 2023/06/02 -->
<li>Permitted restricted <a href="https://man.openbsd.org/profil.2">profil(2)</a> for <a href="https://man.openbsd.org/moncontrol.3">moncontrol(3)</a> in stdio <a href="https://man.openbsd.org/pledge.2">pledge(2)</a>, moving toward making '-pg' binaries pledge-compatible.
<!-- 2023/06/01 -->
<li>Added support for wireguard peer descriptions to <a href="https://man.openbsd.org/ifconfig.8">ifconfig(8)</a>.
<li>Enabled forwarding of <a href="https://man.openbsd.org/ix.4">ix(4)</a> LRO packets via TSO.
<!-- 2023/05/31 -->
<!-- 2023/05/30 -->
<li>Use generic checksum calculation for TCP SYN+ACK packets.
<li>Made <a href="https://man.openbsd.org/id.1">id(1)</a> -R fail when an argument is given.
<li>Fixed up file modification timestamps to optimize <a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a> failover from RRDP to RSYNC.
<li>Split <a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a> cleanup into cleanup and repository cleanup and show how many files are kept/removed in the repository temporary storage.
<!-- 2023/05/29 -->
<li>Added IBT support to the X86_64 retpoline+znow PLTs.
<li>Prevented hangs with <a href="https://man.openbsd.org/vioscsi.4">vioscsi(4)</a> on qemu/windows and in the Oracle cloud.
<!-- 2023/05/28 -->
<!-- 2023/05/27 -->
<li>Bumped LibreSSL to 3.8.1.
<li>Implemented battery charge control in <a href="https://man.openbsd.org/aplsmc.4">aplsmc(4)</a>.
<!-- 2023/05/26 -->
<li>Removed net lock from <a href="https://man.openbsd.org/pf.4">pf(4)</a> ioctls DIOC{S,G}ETLIMIT.
<!-- 2023/05/25 -->
<li>Added both udp and tcp for https (HTTP/3 over QUIC) to /etc/services.
<li>Ensured forced update of internal key for EVP_PKEY after modification, to handle fallout in several applications following a behavioral change in OpenSSL.
<!-- 2023/05/24 -->
<li>Fixed <a href="https://man.openbsd.org/sshd_config.5">sshd_config(5)</a> AuthorizedPrincipalsCommand when AuthorizedKeysCommand appears previously in configuration.
<!-- 2023/05/23 -->
<li>Forced comport initialization for certain classes of device, preventing hang or reboot when com@acpi devices fail the comprobe1() check.
<li>Introduced <a href="https://man.openbsd.org/qcaoss.4">qcaoss(4)</a>, a driver for the Always On Subsystem found on Qualcomm SoCs.
<li>Added IBT support to retpoline PLTs for X86_64, providing IBT support by default.
<!-- 2023/05/22 -->
<li>Fixed TSO for traffic to a local address on a physical interface.
<!-- 2023/05/21 -->
<li>Made <a href="https://man.openbsd.org/ypldap.8">ypldap(8)</a> continue trying LDAP servers until full results are received.
<li>Fixed booting from disks >8G on systems where the BIOS uses CHS.
<li>Updated to freetype 2.13.0.
<!-- 2023/05/20 -->
<li>Prevented a self-deadlock of vmmaplk in <a href="https://man.openbsd.org/uvm_map.9">uvm_map(9)</a>.
<li>Added an <a href="https://man.openbsd.org/openssl.1">openssl(1)</a> '-unaligned n' option.
<li>Implemented battery charge control in <a href="https://man.openbsd.org/acpithinkpad.4">acpithinkpad(4)</a>.
<!-- 2023/05/19 -->
<li>Introduced <a href="https://man.openbsd.org/qcsmptp.4">qcsmptp(4)</a>, a driver to share 32-bit values between (co-)processors.
<li>Introduced <a href="https://man.openbsd.org/qcsmem.4">qcsmem(4)</a>, a driver for the shared memory table on Qualcomm SoCs.
<li>Added <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> format for server_sessions.
<!-- 2023/05/18 -->
<li><a href="https://man.openbsd.org/pledge.2">Pledged(2)</a> <a href="https://man.openbsd.org/waitid.2">waitid(2)</a> stdio.
<li>Handle paths with whitespace or metacharacters in <a href="https://man.openbsd.org/user.8">user(8)</a>.
<li>Asserted <a href="https://man.openbsd.org/pf.4">pf(4)</a> lock on interface handling.
<li>Added TSO offloading to <a href="https://man.openbsd.org/ix.4">ix(4)</a>.
<!-- 2023/05/17 -->
<li>Introduced <a href="https://man.openbsd.org/qcmtx.4">qcmtx(4)</a>, a driver for the hardware spinlock on Qualcomm SoCs.
<li>Introduced <a href="https://man.openbsd.org/qcipcc.4">qcipcc(4)</a>, a driver for the inter-processor mailbox interface used to inform (and be informed) of changes to shared memory state.
<li>Added support for the Peripheral Authentication Service SMC interface to <a href="https://man.openbsd.org/qcscm.4">qcscm(4)</a>.
<li>Implemented battery management <a href="https://man.openbsd.org/sysctl.8">sysctl(8)</a> (hw.battery.chargemode, hw.battery.chargestop and hw.battery.chargestart).
<!-- 2023/05/16 -->
<li>Used <a href="https://man.openbsd.org/cp.1">cp(1)</a> to copy dot files in <a href="https://man.openbsd.org/useradd.8">useradd(8)</a> instead of <a href="https://man.openbsd.org/pax.1">pax(1)</a>.
<li>Introduced separate capabilities for TCP offloading, split into LRO (large receive offloading) and TSO (TCP segmentation offloading). LRO can be toggled via the <a href="https://man.openbsd.org/ifconfig.8">ifconfig(8)</a> tcprecvoffload option. (2023/06/07: Renamed "tcplro").
<!-- 2023/05/15 -->
<li>Implemented the TCP/IP layer for hardware TCP segmentation offload.
<li>Corrected display of Victoria Day in <a href="https://man.openbsd.org/calendar.1">calendar(1)</a>.
<li>Added Juneteenth to the US <a href="https://man.openbsd.org/calendar.1">calendar(1)</a>.
<li>Turned on pointer-authentication on arm64 by default, effectively enabling -mbranch-protection=standard on arm64.
<!-- 2023/05/14 -->
<li>Improved <a href="https://man.openbsd.org/vnconfig.8">vnconfig(8)</a> emulation of a disktab entry (-t), enabling <a href="https://man.openbsd.org/installboot.8">installboot(8)</a> to know the vnd device should be treated as a floppy disk.
<!-- 2023/05/13 -->
<li>Gave softnet threads unique names by suffixing softnet with their index.
<li>Made <a href="https://man.openbsd.org/disklabel.8">disklabel(8)</a> use the d_type value provided by the kernel when creating, editing or printing a disklabel in the absence of the "disktype" command line parameter.
<li>Removed the kernel lock from IPv6 neighbor discovery.
<!-- 2023/05/12 -->
<li>Added <a href="https://man.openbsd.org/axppmic.4">axppmic(4)</a> support to the arm64 RAMDISK to support ethernet on the OrangePi One Plus (Allwinner H6).
<li>Added display of interface names in front of <a href="https://man.openbsd.org/ifconfig.8">ifconfig(8)</a> error messages.
<li>Added a fallback to load the arm64 kernel from the EFI system partition if booting from a disk without a BSD disklabel.
<li>Fixed <a href="https://man.openbsd.org/vmd.8">vmd(8)</a> segfault on vm creation.
<li>Added <a href="https://man.openbsd.org/btrace.8">btrace(8)</a> support for symbolizing <a href="https://man.openbsd.org/utrace.2">utrace(2)</a> addresses.
<li>Added apple-gumx.h for 6.1.28 <a href="https://man.openbsd.org/drm.4">drm(4)</a>.
<li>Removed SHA-512 C implementations other than the semi-unrolled version.
<!-- 2023/05/11 -->
<li>Fixed <a href="https://man.openbsd.org/iwx.4">iwx(4)</a> firmware error when tearing down the state of association to the AP.
<!-- 2023/05/10 -->
<li>Added Miller-Rabin test for random bases to BPSW.
<li>Implemented TCP send offloading (in software only).
<!-- 2023/05/09 -->
<li>Updated to xf86-video-sunffb 1.2.3.
<li>Reduced possible outcomes when a <a href="https://man.openbsd.org/kevent.2">kevent(2)</a> call and a <a href="https://man.openbsd.org/close.2">close(2)</a> call race on the different ends of a pipe.
<li>Renamed 'invalid' to 'disqualified' in the <a href="https://man.openbsd.org/bgpctl.8">bgpctl(8)</a> 'show rib' table.
<li>Use partial chains in certificate validation in <a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a>.
<!-- 2023/05/08 -->
<li>Switched <a href="https://man.openbsd.org/pflogd.8">pflogd(8)</a> from using a bpf read timeout to a wait timeout.
<li>Prevented signed integer overflow after INT_MAX bad <a href="https://man.openbsd.org/passwd.1">passwd(1)</a>.
<li>Updated to xf86-video-dummy 0.4.1.
<li>Added ISO8859-14 font encoding.
<!-- 2023/05/07 -->
<li>Updated to xinput 1.6.4.
<li>Updated to xdpyinfo 1.3.4.
<li>Updated to libXpm 3.5.16.
<li>Updated to libXres 1.2.2.
<li>Updated to libXxf86dga 1.1.6.
<li>Updated to libfontenc 1.1.7.
<li>Updated to libxkbfile 1.1.2.
<li>Updated to libXdmcp 1.1.4.
<li>Updated to libXScrnSaver 1.2.4.
<li>Updated to libICE 1.1.1.
<li>Updated to libXau 1.0.11.
<li>Updated to xcalc 1.1.2.
<li>Removed net lock from <a href="https://man.openbsd.org/pf.4">pf(4)</a> ioctls DIOCOSFP{FLUSH,ADD,GET}.
<li>Updated to libXft 2.3.8.
<!-- 2023/05/06 -->
<li>Added support for random offsets when using trances with a step value in <a href="https://man.openbsd.org/crontab.1">crontab(1)</a>.
<li>Added support for RTL8153D to <a href="https://man.openbsd.org/ure.4">ure(4)</a>.
<!-- 2023/05/05 -->
<!-- 2023/05/04 -->
<li>Pushed kernel lock down to sys_sysctl().
<li>Introduced a neighbor discovery mutex.
<!-- 2023/05/03 -->
<li>Removed net lock from <a href="https://man.openbsd.org/pf.4">pf(4)</a> ioctls DIOCGETRULESET and DIOCGETRULESETS.
<!-- 2023/05/02 -->
<!-- 2023/05/01 -->
<li>Bumped <a href="https://man.openbsd.org/bgpd.8">bgpd(9)</a> to version 8.0.
<li>Updated to X server 21.1.8.
<!-- 2023/04/30 -->
<li>Adjusted <a href="https://man.openbsd.org/sftp.1">sftp(1)</a> ftruncate() logic to handle servers that reorder requests.
<li>Removed the EFI RTC implementation on amd64.
<!-- 2023/04/29 -->
<li>Bumped <a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a> version to 8.4.
<li>Removed net lock from <a href="https://man.openbsd.org/pf.4">pf(4)</a> ioctls DIOCGETQUEUE and DIOCGETQUEUES.
<!-- 2023/04/28 -->
<li>Added <a href="https://man.openbsd.org/dmesg.8">dmesg(8)</a> display of VHE feature.
<li>Added rtentry refcnt type to <a href="https://man.openbsd.org/dt.4">dt(4)</a>.
<li>Allowed <a href="https://man.openbsd.org/vmd.8">vmd(8)</a> vm owners to override the boot kernel via <a href="https://man.openbsd.org/vmctl.8">vmctl(8)</a> to allow booting of recovery media like a ramdisk kernel.
<li>Increased MAXDSIZ to 128G on amd64 and 64G on arm64.
<li>Retired <a href="https://man.openbsd.org/OpenBSD-7.3/sparc64/timer.4">timer(4/sparc64)</a> driver.
<li>Allowed routers to create new neighbor cache entries when receiving a valid Neighbor Advertisement (RFC9131).
<li>Improved speed of DIOCGETRULE <a href="https://man.openbsd.org/ioctl.2">ioctl(2)</a> used by <a href="https://man.openbsd.org/pfctl.8">pfctl(8)</a> to retrieve rules from the kernel.
<li>Relaxed <a href="https://man.openbsd.org/pf.4">pf(4)</a> "pass all" rule to allow bidirectional neighbor advertisements.
<li>Enabled kernel-address sanitizer for clang openbsd target.
<li>Implemented <a href="https://man.openbsd.org/openrsync.1">rsync(1)</a> --size-only and --ignore-times.
<!-- 2023/04/27 -->
<li>Introduced <a href="https://man.openbsd.org/qcrng.4">qcrng(4)</a>, a driver for the Qualcomm rng device found on the Thinkpad x13s.
<li>Added support for RTL8188FTV chip to <a href="https://man.openbsd.org/urtwn.4">urtwn(4)</a>.
<li>Introduced <a href="https://man.openbsd.org/vmd.8">vmd(8)</a> multi-process model for virtio devices.
<li>Added support for <a href="https://man.openbsd.org/st.4">st(4)</a> I/O statistics so tape speeds may be observed with <a href="https://man.openbsd.org/iostat.8">iostat(8)</a>.
<li>Fixed softraid crypto installation on Mac.
<li>Implemented <a href="https://man.openbsd.org/rsync.1">rsync(1)</a> -V as an alias to --version.
<li>Removed kernel lock from <a href="https://man.openbsd.org/rtfree.9">rtfree(9)</a>.
<li>Retired <a href="https://man.openbsd.org/disklabel.8">disklabel(8)</a> -E "expert" mode.
<li>Fixed <a href="https://man.openbsd.org/ws.4">ws(4)</a> cursor moving diagonally when moved along the horizontal or vertical axis of a rotated touchscreen.
<li>Removed net lock from <a href="https://man.openbsd.org/pf.4">pf(4)</a> ioctl DIOCGETTIMEOUT.
<li>Fixed config space access for the root bus of a <a href="https://man.openbsd.org/dwpcie.4">dwpcie(4)</a> controller when the root bus number isn't zero.
<li>Added RK3588 support to <a href="https://man.openbsd.org/rkcomphy.4">rkcomphy(4)</a>.
<!-- 2023/04/26 -->
<li>Handled crypto disks as boot disks in amd64, riscv64 and arm64 installer.
<li>Added <a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a> -P option to specify evaluation time for testing.
<li>Made llvm emit IBT endbr64 instructions by default for amd64. (Disabled jump tables by default).
<li>Introduced 'rtlabel_mtx' <a href="https://man.openbsd.org/mutex.9">mutex(9)</a> to protect route labels storage.
<li>Implemented <a href="https://man.openbsd.org/dt.4">dt(4)</a> <a href="https://man.openbsd.org/utrace.2">utrace(2)</a> support on amd64 and i386.
<li>Improved <a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a> accounting by tracking things by repository and TAL.
<li>Allowed IPv6 neighbor advertisement traffic during netstart on boot.
<li>Ensured correct handling of arm64 userland branch target traps.
<!-- 2023/04/25 -->
<li>Set TSO flag on <a href="https://man.openbsd.org/vlan.4">vlan(4)</a> interfaces.
<li>Bumped LibreSSL version to 3.8.0.
<li>Send an unsolicited neighbor advertisement to the all-routers multicast address when configuring a new address on an interface to speed IPv6 initial packet return.
<li>Prevented bootloader attempts to write to read-only softraid on amd64, sparc64 and i386.
<li>Enabled <a href="https://man.openbsd.org/softraid.4">softraid(4)</a> in the riscv64 ramdisk kernel, allowing disk crypto install.
<li>Enabled power management for <a href="https://man.openbsd.org/dwpcie.4">dwpcie(4)</a> devices.
<li>Added suspend/resume support to <a href="https://man.openbsd.org/pwmbl.4">pwmbl(4)</a>.
<li>Made <a href="https://man.openbsd.org/pwmleds.4">pwmleds(4)</a> disable keyboard backlight on Apple Silicon laptops on suspend and restore on wakeup.
<li>Fixed suspend/resume on x13s with NVMe+MSI.
<li>Added <a href="https://man.openbsd.org/makefs.8">makefs(8)</a> option 'rdroot' to simplify creation of rdroot filesystems for the install media.
<!-- 2023/04/24 -->
<li>Added endbr64 to amd64 syscall stubs and libcrypto as needed.
<li>Added prof_state_toggle to keep a count of CPUs with profiling enabled.
<li>Allowed <a href="https://man.openbsd.org/vmm.4">vmm(4)</a> guests to enable and use supervisor IBT.
<li>Added default <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> config to <a href="https://man.openbsd.org/changelist.5">changelist(5)</a>.
<li>Added <a href="https://man.openbsd.org/rdsetroot.8">rdsetroot(8)</a> -s option to simply display the number of bytes available for the rdroot filesystem in the specified kernel.
<li>Used the wxallowed flag to decide whether to enforce branch target temporarily.
<li>Added <a href="https://man.openbsd.org/aq.4">aq(4)</a> support for Atlantic 2 hardware.
<!-- 2023/04/23 -->
<li>Made <a href="https://man.openbsd.org/dwqe.4">dwqe(4)</a> handle fixed-link configuration in the device tree.
<li>Randomized the order of TLS extensions.
<li>Taught the <a href="https://man.openbsd.org/vmd.8">vmd(8)</a> <a href="https://man.openbsd.org/vmm.4">vmm(4)</a> process how to exec, using <a href="https://man.openbsd.org/execvp.3">execvp(3)</a> to launch vm children with new address spaces and introducing use of <a href="https://man.openbsd.org/unveil.2">unveil(2)</a> into the vmm and vm processes.
<li>Stopped setting ri->ri_bs in <a href="https://man.openbsd.org/viogpu.4">viogpu(4)</a> to prevent a panic caused by rasops accessing its uninitialized content.
<!-- 2023/04/22 -->
<li>Introduced <a href="https://man.openbsd.org/iosf.4">iosf(4)</a>, a driver for the Intel OnChip System Fabric.
<li>Call pfkeyv2_sysctl_policydumper() with shared netlock.
<li>Fixed <a href="https://man.openbsd.org/openssl.1">openssl(1)</a> UTF-8 issuer printing.
<li>Fixed <a href="https://man.openbsd.org/vmd.8">vmd(8)</a> vm send/receive issues due to invalid host-side virtual addresses.
<li>Reduced delays used in the <a href="https://man.openbsd.org/dwqe.4">dwqe(4)</a> mii/mdio bus ops, producing a significant speed increase.
<!-- 2023/04/21 -->
<li>Made <a href="https://man.openbsd.org/mg.1">mg(1)</a> tab width customizable per buffer with mg command set-tab-width.
<li>Implemented <a href="https://man.openbsd.org/bgpctl.8">bgpctl(8)</a> flowspec add and delete to add/remove flowspec rules dynamically.
<!-- 2023/04/20 -->
<li>Call sysctl_source() with shared netlock.
<li>Introduced <a href="https://man.openbsd.org/viogpu.4">viogpu(4)</a>, a VirtIO GPU driver.
<li>Implemented <a href="https://man.openbsd.org/bgpctl.8">bgpctl(8)</a> show flowspec and flowspec flush.
<!-- 2023/04/19 -->
<li>Moved kernel lock into multicast ioctl handlers.
<li>Forced a standard umask before adding/deleting packages with <a href="https://man.openbsd.org/pkg_add.1">pkg_add(1)</a> and <a href="https://man.openbsd.org/pkg_delete.1">pkg_delete(1)</a>.
<li>Protected rtable_setsource() and rtable_getsource() with exclusive and shared netlock respectively.
<li>Added a new PT_OPENBSD_NOBTCFI "segment type" to indicate that the kernel should not enforce branch target control flow integrity for a binary. Implemented support for PT_OPENBSD_NOBTCFI in <a href="https://man.openbsd.org/ld.lld.1">lld(1)</a>, which can be set using the -z nobtcfi option.
<!-- 2023/04/18 -->
<li>Stopped advertising non-removable <a href="https://man.openbsd.org/sdmmc.4">sdmmc(4)</a> devices as removable to the scsi layer.
<li>Added <a href="https://man.openbsd.org/dwmshc.4">dwmshc(4)</a> support for Designware Mobile Storage Host Controllers.
<li>Added arm64 support for loading files from the EFI system partition.
<li>Removed kernel lock from ifa_ifwithaddr() and ifa_ifwithdstaddr().
<li>Mapped MSI-X in addition to MSI and INTx on <a href="https://man.openbsd.org/xhci.4">xhci(4)</a>, as it is supported by the xHCI controller on Qemu, which will switch from shared INTx to device-specific MSI-X interrupts.
<li>Fixed legacy interrupts on machines that use PNP0C0F PCI interrupt link devices in <a href="https://man.openbsd.org/acpipci.4">acpipci(4)</a>.
<li>Call sysctl_ifnames(), sysctl_iflist() and sysctl_dumpentry() with shared netlock.
<li>Added support for upstreamed AP806/CP110 bindings in <a href="https://man.openbsd.org/mvtemp.4">mvtemp(4)</a>.
<!-- 2023/04/17 -->
<li>Made -mbranch-protection=bti the default on OpenBSD.
<li>Resurrected <a href="https://man.openbsd.org/mg.1">mg(1)</a>'s no-tab-mode.
<li>Implemented a basic API to work with flowspec NLRI in <a href="https://man.openbsd.org/bgpd.8">bgpd(8)</a>.
<!-- 2023/04/16 -->
<li>Enabled Indirect Branch Tracking (IBT) for the amd64 kernel.
<li>Added endbr64 instructions to most amd64 ENTRY() macros, IDTVEC() and KIDTVEC().
<li>Changed compilation of regular amd64 kernels to use -fcf-protection=branch and ramdisks with -fcf-protection=none, regardless of compiler default.
<li>Modified <a href="https://man.openbsd.org/malloc.3">malloc(3)</a> D option to dump (leak) info using <a href="https://man.openbsd.org/utrace.2">utrace(2)</a>.
<li>Added <a href="https://man.openbsd.org/kdump.1">kdump(1)</a> -u label option to print selected <a href="https://man.openbsd.org/utrace.2">utrace(2)</a> records.
<li>Fixed <a href="https://man.openbsd.org/pcidump.8">pcidump(8)</a> link speed reporting.
<li>Provided <a href="https://man.openbsd.org/evp.3">evp(3)</a> methods for SHA512/224, SHA512/256 and SHA3 224/256/384/512.
<li>Added <a href="https://man.openbsd.org/aplpcie.4">aplpci(4)</a> support for the PCIe controller found on M2 Pro/Max SoCs.
<li>Dropped support for the x509 ProxyCertInfo extension.
<li>Added /etc/mixerctl.conf to <a href="https://man.openbsd.org/changelist.5">changelist(5)</a>.
<!-- 2023/04/15 -->
<li>Made <a href="https://man.openbsd.org/vmm.4">vmm(4)</a> save and restore Intel CET state on vm entry/exit.
<li>Imported tiny_sha3, a minimal and readable SHA3 implementation.
<li>Unlocked in_ioctl_get(), pushing the kernel lock into in_ioctl_{set,change}_ifaddr().
<!-- 2023/04/14 -->
<li>Disallowed issuer and subject unique identifiers in <a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a>.
<li>Dropped policy printing from <a href="https://man.openbsd.org/openssl.1">openssl(1)</a>.
<li>Made <a href="https://man.openbsd.org/xenodm.1">xenodm(1)</a> reload the environment variables after <a href="https://man.openbsd.org/setusercontext.3">setusercontext(3)</a> so environment variables configured in <a href="https://man.openbsd.org/login.conf.5">login.conf(5)</a> are also available.
<li>Added <a href="https://man.openbsd.org/crypto.3">crypto(3)</a> support for truncated SHA512 variants SHA512/224 and SHA512/256.
<!-- 2023/04/13 -->
<li>Added <a href="https://man.openbsd.org/rkrng.4">rkrng(4)</a> support for "rockchip,cryptov2-rng".
<li>Added the "local experiments" ethertypes.
<!-- 2023/04/12 -->
<li>Pulled MP-safe arprequest() out of the kernel lock.
<!-- 2023/04/11 -->
<li>Added a new implementation of BN_mod_sqrt().
<!-- 2023/04/10 -->
<li>Updated to xf86-video-nv 2.1.22.
<li>Updated to xf86-input-vmmouse 13.2.0.
<li>Updated to xf86-input-void 1.4.2.
<li>Updated to xf86-input-mouse 1.9.4.
<li>Updated to xf86-input-joystick 1.6.4.
<li>Updated to xf86-input-elographics 1.4.3.
<li>Updated to xwininfo 1.1.6.
<li>Updated to xvidtune 1.0.4.
<li>Updated to xkbcomp 1.4.6.
<li>Updated to xhost 1.0.9.
<li>Updated to xdriinfo 1.0.7.
<li>Updated to beforelight 1.0.6.
<li>Enabled the caps lock LED on modern Apple laptops.
<!-- 2023/04/09 -->
<li>Removed X9.31 support from <a href="https://man.openbsd.org/openssl.1">openssl(1)</a>.
<!-- 2023/04/08 -->
<!-- 2023/04/07 -->
<li>Fixed <a href="https://man.openbsd.org/ahci.4">ahci(4)</a>, allowing use of sata on the banana pi bpi-r2 pro.
<li>Made <a href="https://man.openbsd.org/dwqe.4">dwqe(4)</a> print the gmac to which it attaches.
<li>Removed kernel locks from the ARP input path.
<li>Ensured the softraid volume's device is chosen as root disk default for guided disk encryption.
<!-- 2023/04/06 -->
<li>Updated Mesa to 22.3.7.
<!-- 2023/04/05 -->
<li>Pushed kernel lock into nd6_resolve().
<li>Implemented an mbuf hold queue and <a href="https://man.openbsd.org/sysctl.8">sysctl(8)</a> net.inet6.icmp6.nd6_queued for ND6 as in ARP.
<li>Enabled Force Unit Access (FUA) for <a href="https://man.openbsd.org/ufshci.4">ufshci(4)</a> write commands to prevent intermittent data corruption.
<li>Ensured the PCIe link for the RK3568 PCIe controllers runs at the maximum possible speed.
<li>Implemented software control for the internal delays of the RTL8211F PHY.
<!-- 2023/04/04 -->
<li>Ensured correct checksum is calculated when sending IP packets to userland with divert-packet rules.
<li>Enabled guided disk encryption support on arm64.
<li>Made root on softraid installations boot out of the box on Raspberry Pis.
<!-- 2023/04/03 -->
<li>Prevented an accidental second sleep after resume when the lid is closed on a Dell Precision 5510.
<!-- 2023/04/02 -->
<li>Added <a href="https://man.openbsd.org/ehci.4">ehci(4)</a> support for using standard phy drivers registered with ofw/fdt first, allowing ehci to enable <a href="https://man.openbsd.org/rkusbphy.4">rkusbphy(4)</a>.
<li>Added <a href="https://man.openbsd.org/xhci.4">xhci(4)</a> support for enabling both the usb2 and usb3 phys. Added support for using standard phy drivers registered with the ofw/fdt code.
<li>Added glue for network interfaces to be found by fdt/ofw node or phandle and registered <a href="https://man.openbsd.org/mvneta.4">mvneta(4)</a> and <a href="https://man.openbsd.org/dwqe.4">dwqe(4)</a> mappings.
<li>Added a mutex to protect <a href="https://man.openbsd.org/clockintr.9">clockintr(9)</a> struct clockintr_queue.
<li>Added support for TEMPerGold 3.4 to <a href="https://man.openbsd.org/ugold.4">ugold(4)</a>.
<!-- 2023/04/01 -->
<li>Introduced <a href="https://man.openbsd.org/rkusbphy.4">rkusbphy(4)</a>, a driver for the usb2phy on Rockchip SoCs.
<li>Introduced <a href="https://man.openbsd.org/rkiovd.4">rkiovd(4)</a>, a driver for the IO voltage domains on Rockchip SoCs.
<li>Implemented regulator notifiers called when the voltage/current for a regulator is changed or when a regulator is initialized when it attaches for the first time.
<!-- 2023/03/31 -->
<li>Introduced <a href="https://man.openbsd.org/ngbe.4">ngbe(4)</a>, a driver for the WangXun WX1860 series Gigabit Ethernet device.
<!-- 2023/03/30 -->
<li>Significantly reduced <a href="https://man.openbsd.org/ypldap.8">ypldap(8)</a> memory usage when updating larger directories.
<!-- 2023/03/29 -->
<!-- 2023/03/28 -->
<li>Updated timezone data to include reversion of DST change in Lebanon.
<li>Introduced a <a href="https://man.openbsd.org/bgpd.8">bgpd(8)</a> semaphore to protect intermediate state from different RTR sessions from leaking into the RDE.
<li>Made <a href="https://man.openbsd.org/mg.1">mg(1)</a> fall back to /bin/sh if $SHELL is undefined.
<!-- 2023/03/27 -->
<li>Implemented branch target protection using the branch target identification feature introduced in Armv8.5, providing "head-CFI" to complement retguard's "tail-CFI."
<li>Added <a href="https://man.openbsd.org/dmesg.8">dmesg(8)</a> display of arm64 BT and SBSS features.
<li>Added a <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> format to show if there are unseen changes while in a node.
<li>Prevented write to clients attached to different sessions in <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> passthrough.
<!-- 2023/03/26 -->
<li>Added tilde and environment variable expansion to <a href="https://man.openbsd.org/ssh_config.5">ssh_config(5)</a> RevokedHostKeys.
<li>Added a check to <a href="https://man.openbsd.org/scp.1">scp(1)</a> to ensure a local source file exists before opening an SFTP connection to a remote server.
<li>Fixed <a href="https://man.openbsd.org/dwqe.4">dwqe(4)</a> on several boards using <a href="https://man.openbsd.org/rgephy.4">rgephy(4)</a>.
<li>Added <a href="https://man.openbsd.org/rkclock.4">rkclock(4)</a> support for the RK3568 32k RTC clock.
<!-- 2023/03/25 -->
<li>Improved <a href="https://man.openbsd.org/fdisk.8">fdisk(8)</a> comments documenting possible sources for MBR partition types and GPT partition GUIDs.
<li>Changed <a href="https://man.openbsd.org/malloc.3">malloc(3)</a> chunk sizes to be fine grained.
<!-- 2023/03/24 -->
<li>Moved to 7.3-current.
</ul>