-
Notifications
You must be signed in to change notification settings - Fork 43
/
Copy pathplus69.html
754 lines (748 loc) · 62.9 KB
/
plus69.html
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
<!doctype html>
<html lang=en id=plus>
<meta charset=utf-8>
<title>OpenBSD 6.9 Changelog</title>
<meta name="description" content="OpenBSD 6.9 changes">
<meta name="viewport" content="width=device-width, initial-scale=1">
<link rel="stylesheet" type="text/css" href="openbsd.css">
<link rel="canonical" href="https://www.openbsd.org/plus69.html">
<style>
strong {
color: var(--red);
font-weight: normal;
}
h3 {
color: var(--blue);
}
</style>
<h2 id=OpenBSD>
<a href="index.html">
<i>Open</i><b>BSD</b></a>
6.9 Changelog
</h2>
<hr>
<p>
This selection is intended to include all important
and all user-visible changes.
For a complete record of all changes, please see the "source-changes"
mailing list, called "OpenBSD CVS"
in the <a href="https://marc.info/?l=openbsd-cvs">archives</a>,
or use <a href="anoncvs.html#CVS">CVS</a>.
<p>
For changes in other releases, click below:<br>
<a href="plus20.html">2.0</a>,
<a href="plus21.html">2.1</a>,
<a href="plus22.html">2.2</a>,
<a href="plus23.html">2.3</a>,
<a href="plus24.html">2.4</a>,
<a href="plus25.html">2.5</a>,
<a href="plus26.html">2.6</a>,
<a href="plus27.html">2.7</a>,
<a href="plus28.html">2.8</a>,
<a href="plus29.html">2.9</a>,
<a href="plus30.html">3.0</a>,
<a href="plus31.html">3.1</a>,
<a href="plus32.html">3.2</a>,
<a href="plus33.html">3.3</a>,
<a href="plus34.html">3.4</a>,
<a href="plus35.html">3.5</a>,
<a href="plus36.html">3.6</a>,
<br>
<a href="plus37.html">3.7</a>,
<a href="plus38.html">3.8</a>,
<a href="plus39.html">3.9</a>,
<a href="plus40.html">4.0</a>,
<a href="plus41.html">4.1</a>,
<a href="plus42.html">4.2</a>,
<a href="plus43.html">4.3</a>,
<a href="plus44.html">4.4</a>,
<a href="plus45.html">4.5</a>,
<a href="plus46.html">4.6</a>,
<a href="plus47.html">4.7</a>,
<a href="plus48.html">4.8</a>,
<a href="plus49.html">4.9</a>,
<a href="plus50.html">5.0</a>,
<a href="plus51.html">5.1</a>,
<a href="plus52.html">5.2</a>,
<a href="plus53.html">5.3</a>,
<br>
<a href="plus54.html">5.4</a>,
<a href="plus55.html">5.5</a>,
<a href="plus56.html">5.6</a>,
<a href="plus57.html">5.7</a>,
<a href="plus58.html">5.8</a>,
<a href="plus59.html">5.9</a>,
<a href="plus60.html">6.0</a>,
<a href="plus61.html">6.1</a>,
<a href="plus62.html">6.2</a>,
<a href="plus63.html">6.3</a>,
<a href="plus64.html">6.4</a>,
<a href="plus65.html">6.5</a>,
<a href="plus66.html">6.6</a>,
<a href="plus67.html">6.7</a>,
<a href="plus68.html">6.8</a>,
<a href="plus70.html">7.0</a>,
<a href="plus71.html">7.1</a>,
<br>
<a href="plus72.html">7.2</a>,
<a href="plus73.html">7.3</a>,
<a href="plus74.html">7.4</a>,
<a href="plus75.html">7.5</a>,
<a href="plus76.html">7.6</a>,
<a href="plus77.html">7.7</a>,
<a href="plus.html">current</a>.
<br>
<p>
<h3>Changes made between OpenBSD 6.8 and 6.9</h3>
<p>
<ul>
<!-- 2021/04/17 -->
<li>Provided U-Boot binaries that work on Raspberry Pi 3 and 4 and firmware for Raspberry Pi 4, allowing use of the same installation method as for 3 without separate UEFI firmware.
<li>Released <a href="https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.3.2-relnotes.txt">LibreSSL 3.3.2</a>.
<!-- 2021/04/16 -->
<li>Implemented a control message to get the state of <a href="https://man.openbsd.org/iscsid.8">iscsid(8)</a> and slowed <a href="https://man.openbsd.org/iscsictl.8">iscsictl(8)</a> loading to prevent mount errors during startup.
<li>Returned to 6.8 behavior of sending two direct ACKs upon receipt of a data segment.
<!-- 2021/04/15 -->
<li>Ensured WEP and plaintext interface link state update by <a href="https://man.openbsd.org/iwi.4">iwi(4)</a>
<li>Switched <a href="https://man.openbsd.org/athn.4">athn(4)</a> 802.11n Tx rate adaptation from MiRA to RA.
<li>Fixed a problem where <a href="https://man.openbsd.org/athn.4">athn(4)</a> devices would use a different channel than the one selected by net80211.
<li>Implemented version 2 of <a href="https://man.openbsd.org/virtio.4">virtio(4)</a> at fdt, as used by Parallels on the Apple M1, allowing use of OpenBSD as VM.
<li>Fixed incorrect parsing of <a href="https://man.openbsd.org/bgpd.8">bgpd(8)</a> config files due to endianess.
<li>Switched back to the legacy X.509 verifier for release.
<li>Fixed <a href="https://man.openbsd.org/bgpctl.8">bgpctl(8)</a> show mrt for UPDATE messages.
<!-- 2021/04/14 -->
<li>Fixed <a href="https://man.openbsd.org/tcpdump.8">tcpdump(8)</a> parsing of <a href="https://man.openbsd.org/wg.4">wg(4)</a> packets on powerpc64.
<li>Made <a href="https://man.openbsd.org/iwx.4">iwx(4)</a> attach to AX201 devices with PCI ID 0x06f0.
<!-- 2021/04/13 -->
<li>Ignored expandtab setting when in <a href="https://man.openbsd.org/vi.1">vi(1)</a> command mode.
<li>Prevented inappropriate privilege elevations with X server XInput input validation failure.
<!-- 2021/04/12 -->
<!-- 2021/04/11 -->
<li>Created install*.img files for arm64, sparc64 and octeon.
<!-- 2021/04/10 -->
<li>Allowed mixing of TLS and non-TLS configuration parameters within <a href="https://man.openbsd.org/httpd.8">httpd(8)</a>.
<!-- 2021/04/09 -->
<li>Allowed specification of TLS ciphers and protocols within <a href="https://man.openbsd.org/smtpd.conf.5">smtpd.conf(5)</a>.
<li>Fixed <a href="https://man.openbsd.org/dhcpleased.8">dhcpleased(8)</a> handling of invalid T1 or T2 responses.
<li>Fixed an <a href="https://man.openbsd.org/iked.8">iked(8)</a> bug where host routes were deleted upon IKE SA rekey.
<!-- 2021/04/08 -->
<li>Stopped requesting unused "classless-static-routes" <a href="https://man.openbsd.org/dhcp-options.5">dhcp-options(5)</a>, which resulted in <a href="https://man.openbsd.org/dhcpleased.8">dhcpleased(8)</a> failing to install a default route.
<!-- 2021/04/07 -->
<li>Introduced <a href="https://man.openbsd.org/graphaudio.4">graphaudio(4)</a>, a driver to support linking together audio components based on the audio graph description.
<li>Added support to <a href="https://man.openbsd.org/rkclock.4">rkclock(4)</a> for the fractional dividers for the i2s clocks, fixing audio on the Pinebook Pro.
<!-- 2021/04/06 -->
<li>Made <a href="https://man.openbsd.org/apm.8">apm(8)</a> report <a href="https://man.openbsd.org/apmd.8">apmd(8)</a> failures.
<li>Updated <a href="https://man.openbsd.org/nsd.8">nsd(8)</a> to 4.3.6.
<li>Fixed an <a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a> hang after hash check failure.
<li>Ensured printing of all <a href="https://man.openbsd.org/mount.2">mount(2)</a> flags in <a href="https://man.openbsd.org/ddb.4">ddb(4)</a> "show all mounts".
<!-- 2021/04/05 -->
<li>Added a flag to prevent attachment of certain video devices not currently supported by <a href="https://man.openbsd.org/uvideo.4">uvideo(4)</a>, such as the Chicony Integrated IR Camera.
<li>Improved <a href="https://man.openbsd.org/vmm.4">vmm(4)</a> exit handling for AMD SVM and Intel VMX, fixing a potential boot loop on AMD hosts.
<li>Added <a href="https://man.openbsd.org/vmd.8">vmd(8)</a> support for booting from compressed kernel images.
<li>Added support to <a href="https://man.openbsd.org/ugold.4">ugold(4)</a> for
TEMPerGold and additional TEMPerHUM devices.
<!-- 2021/04/04 -->
<!-- 2021/04/03 -->
<li>Excluded the first page and added a guard page between I/O virtual address space allocations on arm64.
<!-- 2021/04/02 -->
<li>Included the default cert.pem file path in tls_load_file error messages in <a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a>.
<li>Implemented ZONEMD (RFC 8976) in <a href="https://man.openbsd.org/dig.1">dig(1)</a> to convey a message digest of the content of a DNS zone.
<!-- 2021/04/01 -->
<li>Updated <a href="https://man.openbsd.org/nsd.8">nsd(8)</a> to 4.3.6rc1.
<li>Changed <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> search-again with vi keys to work like <a href="https://man.openbsd.org/vi.1">vi(1)</a>.
<li>Added RRDP (The RPKI Repository Delta Protocol, RFC 8182) support to <a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a>.
<!-- 2021/03/31 -->
<li>Added the <a href="https://man.openbsd.org/rsync.1">rsync(1)</a> option --no-motd to suppress the information output by the client at the start of a daemon transfer.
<li>Allowed <a href="https://man.openbsd.org/smtpd.conf.5">smtpd.conf(5)</a> specification of tls protocols and ciphers on relay actions.
<!-- 2021/03/30 -->
<!-- 2021/03/29 -->
<li>Propagated host-side <a href="https://man.openbsd.org/tap.4">tap(4)</a> lladdr to guest vm process to allow unicast dhcp and bootp renewals with <a href="https://man.openbsd.org/vmd.8">vmd(8)</a>'s built-in dhcp server.
<li>Cleaned up events on <a href="https://man.openbsd.org/vmd.8">vmd(8)</a> pause or resume and fixed an issue leading to broken serial console by cleanly tearing down and restoring emulated device state on vm send/receive.
<!-- 2021/03/28 -->
<li>Ignored WSMOUSEIO_GTYPE ioctl failure when checking /dev/wsmouse to ensure a driver is loaded to listen if a USB mouse is later plugged in.
<li>Added vid/pid table to <a href="https://man.openbsd.org/umb.4">umb(4)</a> allowing matching to alternate configurations.
<li>Ensured WEP and plaintext interface link state update by <a href="https://man.openbsd.org/ipw.4">ipw(4)</a>.
<li>Finished conversion of <a href="https://man.openbsd.org/dhclient.8">dhclient(8)</a> timers to allow monotonic accounting for the active lease.
<!-- 2021/03/27 -->
<li>Added ARMv8-5 instruction set related CPU features to arm64.
<!-- 2021/03/26 -->
<li>Updated to xf86-video-r128 6.12.0.
<li>Inverted the <a href="https://man.openbsd.org/mg.1">mg(1)</a> "R" indicator to mean that a "*" next to a file's name indicates that it is read-only. Made the active buffer indicator more visible by changing it to ">".
<!-- 2021/03/25 -->
<li>Permitted kern.somaxconn when the unix <a href="https://man.openbsd.org/pledge.2">pledge(2)</a> is used, allowing Go programs to use "unix" without also including "inet".
<li>Provided <a href="https://man.openbsd.org/man4/arm64/apm.4">apm(4/arm64)</a> with battery information.
<!-- 2021/03/24 -->
<li>Prevented an amd64 kernel crash with protection fault due to an invalid offset when reading /dev/kmem.
<li>Made <a href="https://man.openbsd.org/wscons.4">wscons(4)</a> touchpad tap detection less restrictive for multi-finger taps and improved tap detection.
<!-- 2021/03/23 -->
<li>Defined a USB quirk for <a href="https://man.openbsd.org/ums.4">ums(4)</a> and <a href="https://man.openbsd.org/umt.4">umt(4)</a> devices needing to keep their pipes open at all times.
<li>Fixed an <a href="https://man.openbsd.org/iked.8">iked(8)</a> interop problem with strongswan if make-before-break is enabled.
<!-- 2021/03/22 -->
<li>Made <a href="https://man.openbsd.org/vmctl.8">vmctl(8)</a> properly indicate VMs are stopped instead of "running" with "vmctl status".
<li>Updated device-tree bindings for <a href="https://man.openbsd.org/cwfg.4">cwfg(4)</a> to correct attaching and account for monitoring interval change, making cwfg(4) export values under hw.sensors as expected when using a Pinebook Pro.
<!-- 2021/03/21 -->
<li>Fixed a race between tx/rx handshakes in <a href="https://man.openbsd.org/wg.4">wg(4)</a>.
<li>Added <a href="https://man.openbsd.org/mg.1">mg(1)</a> quoted strings capability in list values and limitation to characters allowed in symbol names.
<!-- 2021/03/20 -->
<li>Made it possible to disable the "autoconf" flag but keep "temporary" enabled in <a href="https://man.openbsd.org/ifconfig.8">ifconfig(8)</a>.
<li>Added <a href="https://man.openbsd.org/btrace.8">btrace(8)</a> -n (no action) mode, which parses the program and then exits.
<li>Added a "batch" mode to <a href="https://man.openbsd.org/mg.1">mg(1)</a> via the "-b" command line option which will initialize a pty, run the specified file of mg commands and then exit.
<!-- 2021/03/19 -->
<li>Added <a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a> -V option to show version.
<li>Removed <a href="https://man.openbsd.org/vmd.8">vmd(8)</a> booting from kernels in raw/qcow2 images.
<!-- 2021/03/18 -->
<li>Unlocked <a href="https://man.openbsd.org/sendsyslog.2">sendsyslog(2)</a>.
<!-- 2021/03/17 -->
<li>Made <a href="https://man.openbsd.org/ifconfig.8">ifconfig(8)</a> "-mplslabel" work with <a href="https://man.openbsd.org/mpw.4">mpw(4)</a>.
<li>Enabled DTLSv1.2.
<li>Made <a href="https://man.openbsd.org/iwx.4">iwx(4)</a> attach to AX201 devices with PCI ID 0x34f0. Needs <a href="https://man.openbsd.org/fw_update.1">fw_update(1)</a>.
<li>Fixed a problem where <a href="https://man.openbsd.org/iwn.4">iwn(4)</a> firmware would generate bogus block ack requests and stall traffic.
<li>Used the correct rdomain when adding and deleting routes with <a href="https://man.openbsd.org/mpip.4">mpip(4)</a> and <a href="https://man.openbsd.org/mpw.4">mpw(4)</a>.
<li>Released <a href="https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.2.5-relnotes.txt">LibreSSL 3.2.5</a>.
<!-- 2021/03/16 -->
<li>Fixed efiboot on some machines from CD-ROM due to unaligned pointers.
<li>Added client-detached notification in <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> control mode.
<li>Stopped deleting control socket upon <a href="https://man.openbsd.org/apmd.8">apmd(8)</a> exit, preventing accounting of <a href="https://man.openbsd.org/unveil.2">unveil(2)</a> violations when stopping normally.
<!-- 2021/03/15 -->
<!-- 2021/03/14 -->
<li>Skipped <a href="https://man.openbsd.org/xenodm.1">xenodm(1)</a> IPv6 link local addresses for TCP listener authorizations, matching what is done by <a href="https://man.openbsd.org/startx.1">startx(1)</a>.
<!-- 2021/03/13 -->
<li>Added <a href="https://man.openbsd.org/wsfb.4">wsfb(4)</a> support for 30-bit color.
<li>Stopped <a href="https://man.openbsd.org/xenodm.1">xenodm(1)</a> from adding authorizations for TCP connections by default and added "listenTCP" to explicitly add authorizations for existing IP addresses on startup.
<li>Made <a href="https://man.openbsd.org/ftp.1">ftp(1)</a> set timestamps only on files.
<li>Removed the 30s minimum delay for <a href="https://man.openbsd.org/xlock.1">xlock(1)</a> timeouts.
<!-- 2021/03/12 -->
<li>Updated <a href="https://man.openbsd.org/unbound.8">unbound(8)</a> to 1.13.1.
<li>Prevented a WPA failure in <a href="https://man.openbsd.org/ipw.4">ipw(4)</a> due to a state mismatch between firmware and net80211 during the association sequence.
<li>Added a deprecation warning for autoconfprivacy to <a href="https://man.openbsd.org/ifconfig.8">ifconfig(8)</a>.
<li>Implemented RA in <a href="https://man.openbsd.org/iwm.4">iwm(4)</a> and <a href="https://man.openbsd.org/iwn.4">iwn(4)</a>.
<li>Introduced RA, a new 11nm Tx rate adaptation module for net80211. Unlike MiRa, RA does not attempt to precisely measure actual throughput but simply deducts a loss percentage from the theoretical throughput which can be achieved by a given MCS.
<li>Updated Spleen kernel fonts to version 1.9.0.
<li>Emulated "[inet] autoconf" <a href="https://man.openbsd.org/hostname.if.5">hostname.if(5)</a> lines with "dhcp" so users testing <a href="https://man.openbsd.org/dhcpleased.8">dhcpleased(8)</a> will still be able to upgrade manually while the installer uses only <a href="https://man.openbsd.org/dhclient.8">dhclient(8)</a>.
<!-- 2021/03/11 -->
<li>Changed <a href="https://man.openbsd.org/ifconfig.8">ifconfig(8)</a> to adjust terminology to reflect "temporary address extensions" rather than the former "privacy extensions," including the addition of an AUTOCONF6TEMP flag (to replace the negative flag "INET6_NOPRIVACY").
<li>Used <a href="https://man.openbsd.org/unveil.2">unveil(2)</a> for <a href="https://man.openbsd.org/apmd.8">apmd(8)</a>.
<li>Forced the interface up when AUTOCONF4 or AUTOCONF flags are enabled.
<li>Added SMP support to arm64.
<!-- 2021/03/10 -->
<li>Added a <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> "absolute-centre" alignment to use the center of the total space instead of the available space.
<li>Added <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> split-window -Z to start the pane zoomed.
<li>Fixed <a href="https://man.openbsd.org/ksh.1">ksh(1)</a> redrawing of a multiline PS1 prompt in vi mode and added support for ^R (redraw) in insert mode.
<li>Requested client certificate only when required in <a href="https://man.openbsd.org/smtpd.8">smtpd(8)</a>.
<li>Increased the maximum length for CHAP challenges to 96 octets to ensure <a href="https://man.openbsd.org/npppd.8">npppd(8)</a> can handle longer challenges, such as those sent by Juniper.
<!-- 2021/03/09 -->
<li>Prevented a potential hang when trying to remove a <a href="https://man.openbsd.org/tun.4">tun(4)</a> interface.
<li>Recognized Apple Firestorm cores on arm64.
<li>Added support for 30-bit color modes to <a href="https://man.openbsd.org/simplefb.4">simplefb(4)</a>.
<li>Prevented <a href="https://man.openbsd.org/disklabel.8">disklabel(8)</a> from adjusting the swap 'b' partition size if physmem is zero to keep the auto-allocate code from putting a filesystem on that partition.
<!-- 2021/03/08 -->
<li>Enabled <a href="https://man.openbsd.org/ixl.4">ixl(4)</a> on arm64.
<li>Added support for <a href="https://man.openbsd.org/sdhc.4">sdhc(4)</a> on the Raspberry Pi in ACPI mode.
<li>Added support for rk809 to <a href="https://man.openbsd.org/rkpmic.4">rkpmic(4)</a>, as seen on the Rock Pi N10 with the rk3399pro.
<!-- 2021/03/07 -->
<li>Removed workaround permitting Go executables to do syscalls directly, forcing them to use shared libc like all other dynamic binaries.
<!-- 2021/03/06 -->
<li>Completed <a href="https://man.openbsd.org/slaacd.8">slaacd(8)</a> implementation of RFC 8981 temporary address extensions.
<!-- 2021/03/05 -->
<!-- 2021/03/04 -->
<li>Introduced an IOVA allocator to <a href="https://man.openbsd.org/smmu.4">smmu(4)</a>.
<li>Added an initial attempt to support 8-bit ASIDs such as those on Apple's M1 SoC.
<li>Updated clock interrupt count atomically on mips64.
<!-- 2021/03/03 -->
<li>Fixed a problem which prevented use of <a href="https://man.openbsd.org/sysupgrade.8">sysupgrade(8)</a> when an interface failed to come up and <a href="https://man.openbsd.org/dhclient.8">dhclient(8)</a> didn't notice link-timeout expiration.
<li>Released <a href="https://www.openssh.com/txt/release-8.5">OpenSSH 8.5</a>.
<li>Added a configurable button mapping for tap gestures on touchpads to <a href="https://man.openbsd.org/wsconsctl.8">wsconsctl(8)</a>.
<li>Fixed visibility of <a href="https://man.openbsd.org/sndioctl.1">sndioctl(1)</a> output when used through a pipe.
<!-- 2021/03/02 -->
<li>Separated reading of general and touchpad-specific <a href="https://man.openbsd.org/wsmouse.4">wsmouse(4)</a> settings and corrected identification of device type when reading touchpad parameters fails.
<li>Added the ability to define single value variables in the <a href="https://man.openbsd.org/mg.1">mg(1)</a> startup file and use them with find-file.
<li>Removed <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> support for popups where the content is provided directly to tmux.
<li>Introduced <a href="https://man.openbsd.org/bgpd.8">bgpd(8)</a> <code>rde evaluate all</code> to work around path hiding in IXP route-server environments.
<li>Allowed mixing of alternative devices (-F) with different capabilities in <a href="https://man.openbsd.org/sndiod.8">sndiod(8)</a> by treating any device as full-duplex.
<!-- 2021/03/01 -->
<li>Updated <a href="https://man.openbsd.org/perl.1">perl(1)</a> to 5.32.1.
<li>Added support for PCIe on the NanoPi R4S to <a href="https://man.openbsd.org/rkpcie.4">rkpcie(4)</a>.
<!-- 2021/02/28 -->
<li>Added <a href="https://man.openbsd.org/smmu.4">smmu(4)</a>, a driver for the ARM System MMU.
<li>Added <a href="https://man.openbsd.org/acpiiort.4">acpiiort(4)</a>, a driver for the ACPI I/O Remapping Table.
<!-- 2021/02/27 -->
<li>Added <a href="https://man.openbsd.org/apldart.4">apldart(4)</a>, a driver for the IOMMU on Apple M1 SoCs.
<li>Added <a href="https://man.openbsd.org/logger.1">logger(1)</a> support to <a href="https://man.openbsd.org/rcctl.8">rcctl(8)</a>, <a href="https://man.openbsd.org/rc.subr.8">rc.subr(8)</a> and <a href="https://man.openbsd.org/rc.d.8">rc.d(8)</a> for daemons logging to stdout/stderr.
<!-- 2021/02/26 -->
<li>Increased RX buffers available to the <a href="https://man.openbsd.org/bwfm.4">bwfm(4)</a> chip to 256, allowing use of the Apple M1's wifi.
<li>Introduced <a href="https://man.openbsd.org/dhcpleased.8">dhcpleased(8)</a>, a dhcp daemon to acquire IPv4 address leases from servers.
<li>Added <a href="https://man.openbsd.org/aplpcie.4">aplpcie(4)</a>, a driver for the PCIe host bridge on Apple M1 SoCs.
<!-- 2021/02/25 -->
<li>Added support for version 7 of the <a href="https://man.openbsd.org/bwfm.4">bwfm(4)</a> PCIe interface.
<li>Prevented <a href="https://man.openbsd.org/nvme.4">nvme(4)</a> attachment to devices with size zero.
<!-- 2021/02/24 -->
<li>Added <a href="https://man.openbsd.org/resolvd.8">resolvd(8)</a>, a daemon to rewrite <a href="https://man.openbsd.org/resolv.conf.5">resolv.conf(5)</a>.
<!-- 2021/02/23 -->
<li>Cleared interrupts on luna88k processors more efficiently at boot time.
<li>Allowed specification of a path to the <a href="https://man.openbsd.org/mg.1">mg(1)</a> startup file on the command line.
<li>Added support for adding and deleting mac addr entries on <a href="https://man.openbsd.org/nvgre.4">nvgre(4)</a>.
<li>Added support for adding and deleting address table entries to <a href="https://man.openbsd.org/bpe.4">bpe(4)</a>, <a href="https://man.openbsd.org/veb.4">veb(4)</a> and etherbridge.
<li>Added <a href="https://man.openbsd.org/aplintc.4">aplintc(4)</a>, a driver for the interrupt controller found on Apple M1 SoCs.
<!-- 2021/02/22 -->
<li>Introduced <a href="https://man.openbsd.org/veb.4">veb(4)</a>, a Virtual Ethernet Bridge driver.
<li>Added <a href="https://man.openbsd.org/apldog.4">apldog(4)</a>, a driver for the watchdog on Apple M1 SoCs, allowing reboot of the machine.
<li>When cutting off the head of an overlapping fragment during <a href="https://man.openbsd.org/pf.4">pf(4)</a> reassembly, reinserted the fragment into the lookup table with the correct index.
<!-- 2021/02/21 -->
<li>Added <a href="https://man.openbsd.org/cryptox.4">cryptox(4)</a>, a driver for armv8 cryptographic extensions.
<li>Added <a href="https://man.openbsd.org/ping.8">ping(8)</a> -g option to provide a visual display of packets received and lost.
<!-- 2021/02/20 -->
<li>Made the libunwind cache thread-safe.
<li>Fixed disestablishing of PCI interrupt handlers on octeon.
<li>Added etherbridge, the internals of a reusable learning bridge interface providing common code reusable for other drivers needing a mac learning bridge.
<!-- 2021/02/19 -->
<li>Added a MONITOR flag to ifaces to indicate they are used only for watching packets which will not be enter the network stack for processing.
<li>Appended .html suffixes to temporary files in <a href="https://man.openbsd.org/mandoc.1">mandoc(1)</a> to allow recognition by browsers.
<!-- 2021/02/18 -->
<!-- 2021/02/17 -->
<!-- 2021/02/16 -->
<li>Added <a href="https://man.openbsd.org/exuart.4">exuart(4)</a> support for the UART found on the Apple M1 SoC.
<li>Enabled multiple opens of a <a href="https://man.openbsd.org/video.4">video(4)</a> device as described in the V4L2 specification.
<li>Added <a href="https://man.openbsd.org/bgpctl.8">bgpctl(8)</a> "show rtr" to display basic information about RTR sessions.
<li>Added RTR support to <a href="https://man.openbsd.org/bgpd.8">OpenBGPD</a>.
<!-- 2021/02/15 -->
<li>Added PermitRemoteOpen to <a href="https://man.openbsd.org/ssh.1">ssh(1)</a> for remote dynamic forwarding with SOCKS.
<li>Added support for X11 color names and other variations for OSC 10/11 and added OSC 110 and 111 to <a href="https://man.openbsd.org/tmux.1">tmux(1)</a>.
<!-- 2021/02/14 -->
<li>Restored <a href="https://man.openbsd.org/rdsetroot.8">rdsetroot(8)</a> -x usage on stripped bsd.rd.
<li>Updated to <a href="https://man.openbsd.org/xterm.1">xterm(1)</a> 366.
<!-- 2021/02/13 -->
<li>Added <a href="https://man.openbsd.org/iked.8">iked(8)</a> dynamic address configuration for roadwarrior clients, with a new "iface" config option which can be used to specify an interface for the virtual addresses received from the peer.
<!-- 2021/02/12 -->
<li>Synced cert.pem with Mozilla NSS root CAs (except "GeoTrust Global CA").
<li>Created /dev/ drm nodes with the same names as linux to simplify libdrm and negate the need for certain ports patches.
<!-- 2021/02/11 -->
<!-- 2021/02/10 -->
<li>Prevented the kernel from being stuck in an endless recursion during TCP path MTU discovery when <a href="https://man.openbsd.org/pf.4">pf(4)</a> changes the routing table when sending packets.
<li>Moved UNIX domain sockets out of the kernel lock, using the new "unp_lock" <a href="https://man.openbsd.org/rwlock.9">rwlock(9)</a> as solock()'s backend to protect the whole layer.
<!-- 2021/02/09 -->
<li>Enabled build and install of <a href="https://man.openbsd.org/lldb.1">lldb(1)</a>.
<li>Added an optional "group none" transform for child SAs in <a href="https://man.openbsd.org/iked.8">iked(8)</a> to ensure the ability to negotiate optional PFS.
<!-- 2021/02/08 -->
<li>Added a barrier between reading the cqe flags and the command ID to prevent completion of the wrong scsi io for <a href="https://man.openbsd.org/nvme.4">nvme(4)</a> drives.
<li>Removed the maxburst feature from tcp_output.
<li>Corrected raidlevel verification specified by the -c option in <a href="https://man.openbsd.org/bioctl.8">bioctl(8)</a>.
<li>Added a RAID1C (raid1 + crypto) <a href="https://man.openbsd.org/softraid.4">softraid(4)</a> discipline, encrypting data like the CRYPTO discipline and accepting multiple chunks during creation and assembly like the RAID1 discipline.
<!-- 2021/02/07 -->
<!-- 2021/02/06 -->
<li>Moved to 6.9-beta.
<!-- 2021/02/05 -->
<li>Added the new <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> -S flag to new-window to select the existing window if one with the given name already exists, rather than failing.
<li>Disabled <a href="https://man.openbsd.org/sndiod.8">sndiod(8)</a> autovolume by default and set the default volume to 127. Setting "-w on" will replicate the previous behavior of automatically decreasing playback volume when new programs start playing.
<!-- 2021/02/04 -->
<li>Upgraded to OpenSSL 1.1 compatible crypto API in <a href="https://man.openbsd.org/iked.8">iked(8)</a>.
<li>Implemented the <a href="https://man.openbsd.org/nc.1">nc(1)</a> -D socket debug option in <a href="https://man.openbsd.org/tcpbench.1">tcpbench(1)</a>, allowing analysis of TCP connections.
<li>Introduced <a href="https://man.openbsd.org/uhidpp.4">uhidpp(4)</a>, a driver for Logitech HID++ devices.
<li>Added support for the Netgear ProSecure UTM25 to octeon.
<!-- 2021/02/03 -->
<li>Turned off the direct ACK on every other data segment, saving processing time and improving network performance.
<li>Changed pf_route so <a href="https://man.openbsd.org/pf.4">pf(4)</a> only runs when packets enter and leave the stack.
<!-- 2021/02/02 -->
<li>Properly implemented "rde med compare strict" in <a href="https://man.openbsd.org/bgpd.8">bgpd(8)</a> and ensured that the order of prefixes is always correct.
<li>Introduced <a href="https://man.openbsd.org/ftp.1">ftp(1)</a> support for sending the If-Modified-Since header while fetching over http or https. Switched to using the timestamps from the remote server's Last-Modified header if available when saving local files and introduced the ftp "-u" flag to disable this behavior.
<li>Fixed a crash that could occur in <a href="https://man.openbsd.org/sndiod.8">sndiod(8)</a> when a usb device is unplugged.
<!-- 2021/02/01 -->
<li>Fixed path MTU discovery for ESP tunneled in IPv6.
<!-- 2021/01/31 -->
<li>Changed route-to in <a href="https://man.openbsd.org/pf.conf.5">pf.conf(5)</a> to send packets to IPs instead of interfaces.
<li>Added basic support for BCM4379, found on the Apple M1 SoCs, to <a href="https://man.openbsd.org/bwfm.4">bwfm(4)</a>.
<li>Completed code cleanup to avoid linker issues by satisfying -fno-common on all architectures.
<!-- 2021/01/30 -->
<li>Made editing GPT in <a href="https://man.openbsd.org/fdisk.8">fdisk(8)</a> safer by defaulting offset to the beginning of the largest free space and preventing the creation of overlapping partitions.
<!-- 2021/01/29 -->
<li>Stopped relying on USB devices to correctly present their indices, instead searching for the correct interfaces. This fixes E+ Corp. DAC Audio devices.
<!-- 2021/01/28 -->
<!-- 2021/01/27 -->
<li>Applied <a href="https://man.openbsd.org/unveil.2">unveil(2)</a> to <a href="https://man.openbsd.org/ldapd.8">ldapd(8)</a>.
<!-- 2021/01/26 -->
<li>Fixed termination assert in <a href="https://man.openbsd.org/kqueue.2">kqueue(2)</a> to avoid a panic.
<li>Added support for RSA-PSS PKCS1 signatures to <a href="https://man.openbsd.org/iked.8">iked(8)</a>.
<li>Recognized Apple Icestorm cores on arm64.
<li>Ensured AI_ADDRCONFIG takes routing domain into account when checking for available address families.
<!-- 2021/01/25 -->
<li>Renamed the HostbasedKeyTypes keyword in <a href="https://man.openbsd.org/ssh_config.5">ssh_config(5)</a> and the HostbasedAcceptedKeyTypes keyword in <a href="https://man.openbsd.org/sshd_config.5">sshd_config(5)</a> to HostbasedAcceptedAlgorithms.
<li>Disabled logging to <a href="https://man.openbsd.org/syslog.3">syslog(3)</a> for libunbound with <a href="https://man.openbsd.org/unwind.8">unwind(8)</a>. Does not prevent logging to stderr with "unwind -d".
<li>Fixed a data toggle out of sync problem for <a href="https://man.openbsd.org/ugen.4">ugen(4)</a> and <a href="https://man.openbsd.org/uhidev.4">uhidev(4)</a> devices on <a href="https://man.openbsd.org/xhci.4">xhci(4)</a> controllers. (Reverted 2021-02-15).
<li>Raised the <a href="https://man.openbsd.org/mcx.4">mcx(4)</a> max number of queues/interrupts from 1 to 16.
<li>Introduced the <a href="https://man.openbsd.org/bgpd.conf.5">bgpd.conf(5)</a> per neighbor and global config option "reject as-set yes/no" to allow rejection of received UPDATES with AS_SET segments. These rejected prefixes can be viewed with <a href="https://man.openbsd.org/bgpctl.8">bgpctl(8)</a> "show rib in error".
<li>Fixed <a href="https://man.openbsd.org/wg.4">wg(4)</a> ioctl to handle multiple wgpeers.
<li>Fixed filtering on <a href="https://man.openbsd.org/kstat.1">kstat(1)</a> unit numbers.
<!-- 2021/01/24 -->
<li>Used stoeplitz to provide a flowid for tcp packets when enabled.
<li>Updated the default system.fvwmrc for <a href="https://man.openbsd.org/fvwm.1">fvwm(1)</a>.
<li>Implemented DNS64 synthesis in <a href="https://man.openbsd.org/unwind.8">unwind(8)</a>.
<!-- 2021/01/23 -->
<li>Prevented memory corruption or improper page access in <a href="https://man.openbsd.org/vmm.4">vmm(4)</a> due to improper TLB flushing for now by wiring the pages used by virtual machines.
<li>Added support for <a href="https://man.openbsd.org/ipmi.4">ipmi(4)</a> on PowerNV systems.
<!-- 2021/01/22 -->
<li>Set up <a href="https://man.openbsd.org/ims.4">ims(4)</a> devices in X11 to behave like touchpads.
<li>Introduced <a href="https://man.openbsd.org/ujoy.4">ujoy(4)</a>, a restricted subset of <a href="https://man.openbsd.org/uhid.4">uhid(4)</a> for game controllers which uses /dev/ujoy/* device nodes.
<!-- 2021/01/21 -->
<li>Fixed a memory leak in <a href="https://man.openbsd.org/httpd.8">httpd(8)</a>.
<li>Removed the <a href="https://man.openbsd.org/snmpd.8">snmpd(8)</a> traphandler process.
<li>Renamed the PubkeyAcceptedKeyTypes keyword to PubkeyAcceptedAlgorithms in <a href="https://man.openbsd.org/ssh_config.5">ssh_config(5)</a> and <a href="https://man.openbsd.org/sshd_config.5">sshd_config(5)</a>.
<li>Added support for INVALID_KE_PAYLOAD in <a href="https://man.openbsd.org/iked.8">iked(8)</a> CREATE_CHILD_SA exchange.
<!-- 2021/01/20 -->
<li>Printed rewritten addresses in <a href="https://man.openbsd.org/tcpdump.8">tcpdump(8)</a> logged with <a href="https://man.openbsd.org/pflog.4">pflog(4)</a> for rdr-to, nat-to and af-to rules.
<!-- 2021/01/19 -->
<li>Disabled <a href="https://man.openbsd.org/com.4">com(4)</a> on sparc64 for m3000s. Console i/o should fall back to ofw routines.
<li>Implemented intx support in <a href="https://man.openbsd.org/mvkpcie.4">mvkpcie(4)</a>.
<li>Enabled <a href="https://man.openbsd.org/athn.4">athn(4)</a> for arm64.
<li>Introduced locking for amaps and anons, improving build performance.
<!-- 2021/01/18 -->
<li>Fixed the <a href="https://man.openbsd.org/httpd.8">httpd(8)</a> example configuration not to generate errors when running without TLS keys already in place.
<li>Unlocked <a href="https://man.openbsd.org/getppid.2">getppid(2)</a>.
<li>Introduced new function <a href="https://man.openbsd.org/if_unit.9">if_unit(9)</a>, returning a pointer to the interface descriptor corresponding to the unique name.
<!-- 2021/01/17 -->
<li>Added a <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> -N flag to never start the server even if the command would normally do so.
<li>Dumped the max payload size and max read request size in the pcie cap in <a href="https://man.openbsd.org/pcidump.8">pcidump(8)</a>.
<!-- 2021/01/16 -->
<!-- 2021/01/15 -->
<!-- 2021/01/14 -->
<li>Prevented a panic in some acpi firmware that provided invalid memory regions in their reserved memory region reporting table.
<!-- 2021/01/13 -->
<li>Pledged the <a href="https://man.openbsd.org/doas.1">doas(1)</a> "-C" code path.
<!-- 2021/01/12 -->
<li>Implemented <a href="https://man.openbsd.org/unwind.8">unwind(8)</a> listening on TCP.
<li>Allowed use of <a href="https://man.openbsd.org/ospfd.8">ospfd(8)</a> on interfaces that share the same IP.
<!-- 2021/01/11 -->
<li>Used an 8th order FIR low-pass filter for resampling in <a href="https://man.openbsd.org/sndiod.8">sndiod(8)</a> and for <a href="https://man.openbsd.org/aucat.1">aucat(1)</a>, removing most of the aliasing noise during resampling.
<li>Created a path MTU host route for <a href="https://man.openbsd.org/ipsec.4">IPsec(4)</a> over IPv6.
<!-- 2021/01/10 -->
<li>Updated to <a href="https://man.openbsd.org/xterm.1">xterm(1)</a> 363.
<li>Disabled base-gcc on loongson and octeon.
<!-- 2021/01/09 -->
<li>Added PerSourceMaxStartups and PerSourceNetBlockSize options to <a href="https://man.openbsd.org/sshd.8">sshd(8)</a>.
<li>Enabled powerpc support for floating-point exceptions.
<li>Added support for <a href="https://man.openbsd.org/SSL_get_shared_ciphers.3">SSL_get_shared_ciphers(3)</a> in TLSv1.3 and fixed to correctly return ciphers shared by the client and the server.
<li>Fixed -s option for <a href="https://man.openbsd.org/cmp.1">cmp(1)</a>.
<li>Added "strip" directive to <a href="https://man.openbsd.org/relayd.conf.5">relayd.conf(5)</a>.
<!-- 2021/01/08 -->
<li>Fixed a boot-time crash on sparc64 due to mutex use during the message buffer initialization.
<!-- 2021/01/07 -->
<li>Made CheckHostIP default to "no" in <a href="https://man.openbsd.org/ssh_config.5">ssh_config(5)</a>.
<li>Added a "xenodm" login class for <a href="https://man.openbsd.org/xenodm.1">xenodm(1)</a> and increased openfiles to 512 to avoid running out of file descriptors with a busy desktop.
<li>Ensured <a href="https://man.openbsd.org/sleep.3">sleep(3)</a> calls <a href="https://man.openbsd.org/nanosleep.2">nanosleep(2)</a> if seconds is zero, now delegating all decisions about whether or not to yield the CPU.
<!-- 2021/01/06 -->
<li>Allowed a process to open a <a href="https://man.openbsd.org/video.4">video(4)</a> device multiple times. Fixes webcam usage with Firefox and BigBlueButton.
<!-- 2021/01/05 -->
<li>Fixed problems which could arise with software such as bacula and icinga when a root certificate was specified as both a trusted and an untrusted certificate.
<li>Began distributing the gzip'd version of bsd.rd on all platforms with boot methods supporting it.
<!-- 2021/01/04 -->
<!-- 2021/01/03 -->
<li>Fixed a use after free in <a href="https://man.openbsd.org/carp.4">carp(4)</a>.
<!-- 2021/01/02 -->
<li>Updated to libc++ and libc++abi 10.0.1.
<li>Added requests for a new certificate without requiring -F when <a href="https://man.openbsd.org/acme-client.1">acme-client(1)</a> detects an added or removed SAN in the config file not reflected in the existing certificate on disk.
<li>Updated to compiler-rt 11.0.0.
<li>Used native display resolution 1368x768 for Lynloong all-in-one computers.
<li>Made loongson kernels recognize Lynloong LM9002/9003 and LM9013.
<!-- 2021/01/01 -->
<li>Changed the <a href="https://man.openbsd.org/pool.9">pool(9)</a> timeouts to use the system uptime instead of ticks.
<li>Handled permanent redirects (RFC 7538) in <a href="https://man.openbsd.org/ftp.1">ftp(1)</a> fetch.
<li>Added <a href="https://man.openbsd.org/kstat.1">kstat(1)</a> to <a href="https://man.openbsd.org/ogx.4">ogx(4)</a>.
<li>Updated to <a href="https://man.openbsd.org/xkbcomp.1">xkbcomp(1)</a> 1.4.4.<li>Updated to <a href="https://man.openbsd.org/xinit.1">xinit(1)</a> 1.4.1.
<li>Updated to <a href="https://man.openbsd.org/xprop.1">xprop(1)</a> 1.2.5.
<li>Updated to <a href="https://man.openbsd.org/xev.1">xev(1)</a> 1.2.4.
<li>Updated to <a href="https://man.openbsd.org/fonttosfnt.1">fonttosfnt(1)</a> 1.2.1.
<li>Added a -C flag to <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> run-shell to use a tmux command rather than a shell command.
<!-- 2020/12/31 -->
<li>Corrected <a href="https://man.openbsd.org/amltemp.4">amltemp(4)</a> attachment to allow thermal management despite temperature sensor reading failure on Amlogic SoCs.
<li>Added trace points for <a href="https://man.openbsd.org/malloc.9">malloc(9)</a> and <a href="https://man.openbsd.org/free.9">free(9)</a>, making them traceabe via <a href="https://man.openbsd.org/dt.4">dt(4)</a> and <a href="https://man.openbsd.org/btrace.8">btrace(8)</a>.
<li>Enabled IPv4 and TCP/UDP checksum offload on transmission in <a href="https://man.openbsd.org/ogx.4">ogx(4)</a>.
<li>Renamed <a href="https://man.openbsd.org/smtpd.8">smtpd(8)</a> pony process to dispatcher and klondike to crypto.
<!-- 2020/12/30 -->
<li>Set klist lock for pipes.
<li>Added singly-linked tail queue macros from FreeBSD.
<li>Added <a href="https://man.openbsd.org/bgpctl.8">bgpctl(8)</a> "show sets" to display information about the roa-set, as-sets and prefix-sets loaded into <a href="https://man.openbsd.org/bgpd.8">bgpd(8)</a>.
<!-- 2020/12/29 -->
<li>Introduced power-saving mode on POWER9 (ISA v3).
<li>Updated to libexpat 2.2.10.
<!-- 2020/12/28 -->
<li>Added support for kern.video.record to <a href="https://man.openbsd.org/sysctl.8">sysctl(8)</a>.
<li>Introduced kern.video.record for <a href="https://man.openbsd.org/video.4">video(4)</a> devices, an analog to the kern.audio.record <a href="https://man.openbsd.org/sysctl.8">sysctl(8)</a> parameter for <a href="https://man.openbsd.org/audio.4">audio(4)</a> devices. By default, kern.video.record will be set to zero and blank all data delivered by drivers attaching to <a href="https://man.openbsd.org/video.4">video(4)</a>.
<li>Used per-CPU counter for fault and stats counters reached in uvm_fault().
<li>Added support to <a href="https://man.openbsd.org/dwpcie.4">dwpcie(4)</a> for the PCIe controller found on Amlogic G12A/G12B/SM1 SoCs.
<!-- 2020/12/27 -->
<li>Fixed "any" and "dynamic" keywords for flows in <a href="https://man.openbsd.org/iked.8">iked(8)</a> and added proper IPv6 support.
<li>Added PCIe support to <a href="https://man.openbsd.org/amlpciephy.4">amlpciephy(4)</a>.
<!-- 2020/12/26 -->
<li>Fixed a memory leak in ld.so's malloc.
<!-- 2020/12/25 -->
<li>Added Gemini Lake I2C id to <a href="https://man.openbsd.org/dwiic.4">dwiic(4)</a>, making the touchpad work on the Teclast F7 Plus laptop.
<!-- 2020/12/24 -->
<li>Corrected accounting of zero length TDs in <a href="https://man.openbsd.org/xhci.4">xhci(4)</a>, preventing free TRBs from running out.
<!-- 2020/12/23 -->
<li>Fixed hangs on amd64 bsd.rd due to misreported core clock frequency on newer Intel Comet Lake models.
<li>Added a global "nowake" channel for threads avoiding <a href="https://man.openbsd.org/wakeup.9">wakeup(9)</a> to <a href="https://man.openbsd.org/tsleep.9">tsleep(9)</a>.
<li>Added Wake on LAN support to <a href="https://man.openbsd.org/rge.4">rge(4)</a>.
<li>Added a specific headline to <a href="https://man.openbsd.org/netstat.1">netstat(1)</a> for TCP state and IP protocol.
<li>Prevented a crash due to premature release of resources by the <a href="https://man.openbsd.org/smtpd.8">smtpd(8)</a> filter state machine.
<li>Allowed the provision of <a href="https://man.openbsd.org/dhclient.8">dhclient(8)</a> options on "dhcp" lines in <a href="https://man.openbsd.org/hostname.if.5">hostname.if(5)</a> files.
<li>Fixed a memory leak in <a href="https://man.openbsd.org/smtpd.8">smtpd(8)</a> resolver.
<li>Introduced a send hold timer in <a href="https://man.openbsd.org/bgpd.8">bgpd(8)</a> to detect stalls on the sending side of a TCP connection, acting as a last resort to detect faulty peers.
<li>Fixed ofw regulators that use "active-low" polarity.
<!-- 2020/12/22 -->
<li>Added PCIe clocks to <a href="https://man.openbsd.org/amlclock.4">amlclock(4)</a>.
<li>Implemented <a href="https://man.openbsd.org/select.2">select(2)</a> and <a href="https://man.openbsd.org/pselect.2">pselect(2)</a> on top of <a href="https://man.openbsd.org/kqueue.2">kqueue(2)</a>. (Reverted 2021-01-08).
<!-- 2020/12/21 -->
<li>Made clang the default compiler on loongson.
<li>Added an <a href="https://man.openbsd.org/ssh_config.5">ssh_config(5)</a> KnownHostsCommand that allows the client to obtain known_hosts data from a command in addition to the usual files.
<li>Prevented initiation of new additional SAs for each policy upon every <a href="https://man.openbsd.org/ikectl.8">ikectl(8)</a> config reload.
<li>Introduced <a href="https://man.openbsd.org/smtp.1">smtp(1)</a> -a to perform authentication before sending a message.
<li>Fixed DRI3 support on <a href="https://man.openbsd.org/amdgpu.4">amdgpu(4)</a> and <a href="https://man.openbsd.org/ati.4">ati(4)</a>.
<!-- 2020/12/20 -->
<li>Accepted reject and blackhole routes for IPsec PMTU discovery.
<li>Prevented leaking of ipsec_hosts in <a href="https://man.openbsd.org/iked.8">iked(8)</a> when building hosts_list.
<li>Fixed booting on powerpc64 machines with memory banks higher in physical address space, needing a larger TCE table.
<li>Introduced klistops, introducing a way to associate lock operations with a klist.
<li>Fixed <a href="https://man.openbsd.org/dig.1">dig(1)</a> EDNS Client Subnet option (+subnet=).
<li>Fixed IPv6 link-local address handling for nameservers to talk to and address to bind to in <a href="https://man.openbsd.org/dig.1">dig(1)</a>.
<!-- 2020/12/19 -->
<!-- 2020/12/18 -->
<li>Added support for the i.MX8MP PCIe clocks, USB clocks and second ethernet.
<li>Made large read and write transactions work in <a href="https://man.openbsd.org/amliic.4">amliic(4)</a>.
<li>Updated to the December 18, 2020 version of <a href="https://man.openbsd.org/awk.1">awk(1)</a>.
<li>Added fd close notification for kqueue-based <a href="https://man.openbsd.org/poll.2">poll(2)</a> and <a href="https://man.openbsd.org/select.2">select(2)</a>.
<li>Corrected the first packet of an <a href="https://man.openbsd.org/ipsec.4">ipsec(4)</a> SA to have sequence number 1.
<!-- 2020/12/17 -->
<li>Added "amlogic,meson-g12a-dwmac" to <a href="https://man.openbsd.org/dwge.4">dwge(4)</a>.
<li>Added <a href="https://man.openbsd.org/amlpinctrl.4">amlpinctrl(4)</a> support for the "Always On" GPIOs.
<li>Introduced a delay to work around an issue in <a href="https://man.openbsd.org/bwfm.4">bwfm(4)</a> on the BCM43602 that was triggering "unexpected pairwise key update" errors.
<!-- 2020/12/16 -->
<li>Made <a href="https://man.openbsd.org/pfctl.8">pfctl(8)</a> detect and reject bogus ranges before loading the ruleset to prevent a panic.
<!-- 2020/12/15 -->
<li>Made <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> synchronize-panes a pane option and added set-option -U flag to unset an option on all panes.
<!-- 2020/12/14 -->
<!-- 2020/12/13 -->
<li>Updated to xcb-proto 1.14.1.
<!-- 2020/12/12 -->
<li>Updated to <a href="https://man.openbsd.org/Xserver.1">Xserver(1)</a> 1.20.10.
<!-- 2020/12/11 -->
<li>Prevented a race in <a href="https://man.openbsd.org/dhclient.8">dhclient(8)</a> privsep which could cause autoinstall to fail by calling <a href="https://man.openbsd.org/ftp.1">ftp(1)</a> without a local address.
<li>Correctly enumerated files with more than INT_MAX lines with the <a href="https://man.openbsd.org/cat.1">cat(1)</a> -n flag.
<!-- 2020/12/10 -->
<li>Updated to <a href="https://man.openbsd.org/unbound.8">unbound(8)</a> 1.13.0.
<li>Updated to <a href="https://man.openbsd.org/nsd.8">nsd(8)</a> 4.3.4.
<!-- 2020/12/09 -->
<li>Fixed TCP going over an interface with fq codel enabled.
<li>Avoided spurious "input packet decapsulations failed" errors in <a href="https://man.openbsd.org/netstat.1">netstat(1)</a> -W with A-MSDU enabled.
<li>Allowed booting of amd64/i386 from 4TB GPT formatted disks.
<li>Flushed the reorder buffer after gap timeout to prevent frames from remaining in the buffer until the next frame is received.
<li>Validated ghostbuster records (RFC 6493) in <a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a>.
<!-- 2020/12/08 -->
<li>Fixed 802.11 RSN capabilities announced to peers.
<li>Fixed a potential NULL pointer dereference due to malformed ASN.1 in a certificate revocation list or a timestamp response token.
<!-- 2020/12/07 -->
<li>Fixed the calculation of "maxlen" in <a href="https://man.openbsd.org/iwm.4">iwm(4)</a> and <a href="https://man.openbsd.org/iwx.4">iwx(4)</a> when there are multiple MPDUs in one packet.
<li>Limited the URL embedded in .cer files in <a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a> to alphanumeric characters and punctuation.
<!-- 2020/12/06 -->
<li>Added <a href="https://man.openbsd.org/dwgpio.4">dwgpio(4)</a>, a driver for the Synopsys DesignWare GPIO controller.
<li>Added <a href="https://man.openbsd.org/iked.8">iked(8)</a> support for RSASSA-PSS signature verification (RFC 7427).
<li>Fixed a race condition in <a href="https://man.openbsd.org/wsmux.4">wsmux(4)</a>.
<!-- 2020/12/05 -->
<!-- 2020/12/04 -->
<li>Allowed exporting prefixes from multiple sessions in <a href="https://man.openbsd.org/bgpd.8">bgpd(8)</a> into the same <a href="https://man.openbsd.org/pf.4">pf(4)</a> table, preventing a prefix from being removed from the table on the first withdrawal even if an alternative exists.
<!-- 2020/12/03 -->
<!-- 2020/12/02 -->
<li>Prevented a TOCTOU race in single_thread_set() by extending the scope of the lock.
<li>Enabled auto-negotiation on the SerDes links, allowing in-band-status to work between <a href="https://man.openbsd.org/mvpp.4">mvpp(4)</a> and <a href="https://man.openbsd.org/mvsw.4">mvsw(4)</a> on the ClearFog GT 8K.
<!-- 2020/12/01 -->
<li>Allowed <a href="https://man.openbsd.org/rad.8">rad(8)</a> to handle all rdomains in a single daemon.
<li>Made uvm_pagealloc() mp-safe.
<!-- 2020/11/30 -->
<li>Ensured rekeying of every child SA in <a href="https://man.openbsd.org/iked.8">iked(8)</a>.
<!-- 2020/11/29 -->
<li>Fixed <a href="https://man.openbsd.org/ldapd.8">ldapd(8)</a> cert and key path inference for absolute paths.
<li>Taught lld to link the macppc kernel.
<li>Added support for 1000base-x and 2500base-x connections to <a href="https://man.openbsd.org/mvneta.4">mvneta(4)</a>.
<li>Added <a href="https://man.openbsd.org/mvsw.4">mvsw(4)</a>, a driver for Marvel "SOHO" switches.
<li>Added the <a href="https://man.openbsd.org/iked.8">iked(8)</a> "set stickyaddress" option, which attempts to assign the same "config address" when an IKESA is negotiated with the DSTID of an existing IKESA.
<li>Added support for the use of !command to <a href="https://man.openbsd.org/mygate.5">mygate(5)</a>, so that netstart has a late opportunity to perform network configuration.
<!-- 2020/11/28 -->
<li>Updated to libX11 1.7.0.
<li>Handled an autoconf interface changing its rdomain in <a href="https://man.openbsd.org/slaacd.8">slaacd(8)</a>.
<li>Added <a href="https://man.openbsd.org/iked.8">iked(8)</a> support for multiple address pools.
<!-- 2020/11/27 -->
<!-- 2020/11/26 -->
<li>Set the specified TOS/DSCP for interactive use prior to TCP connect in <a href="https://man.openbsd.org/ssh.1">ssh(1)</a>.
<li>CLeaned up passing of struct passwd from monitor to preauth privsep process in <a href="https://man.openbsd.org/ssh.1">ssh(1)</a>.
<li>Used a counter instead of random IV for AES-GCM in <a href="https://man.openbsd.org/iked.8">iked(8)</a>, eliminating the risk of random collisions.
<!-- 2020/11/25 -->
<li>Changed kqueue_scan() to keep track of collected events in the given context.
<!-- 2020/11/24 -->
<li>Killed <a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a> connection upon <a href="https://man.openbsd.org/openrsync.1">openrsync(1)</a> server stall.
<li>Added a simple --timeout implementation to <a href="https://man.openbsd.org/openrsync.1">openrsync(1)</a>.
<!-- 2020/11/23 -->
<li>Fixed very old <a href="https://man.openbsd.org/umass.4">umass(4)</a> devices where the INQUIRY command succeeds but with a residue equal to the requested bytes.
<!-- 2020/11/22 -->
<li>Fixed a panic seen with mbuf chains on arm64.
<!-- 2020/11/21 -->
<li>Fixed incorrect behavior when using <a href="https://man.openbsd.org/dhclient.conf.5">dhclient.conf(5)</a> to change the lease renew/rebind/expiry timing.
<!-- 2020/11/20 -->
<li>Added <a href="https://man.openbsd.org/iked.8">iked(8)</a> -s socket option to specify a control socket.
<!-- 2020/11/19 -->
<li>When doing an <a href="https://man.openbsd.org/sftp.1">sftp(1)</a> recursive upload or download of a read-only directory, ensured that the directory was created with write and execute permissions in the interim to allow the transfer.
<li>Fixed <a href="https://man.openbsd.org/urtwn.4">urtwn(4)</a> repeated DEAUTH and loss/restoration of link.
<li>Allowed specific <a href="https://man.openbsd.org/sndio.7">sndio(7)</a> devices to be used for play-only and rec-only modes.
<li>Fixed panics on the HoneyComb LX2K with <a href="https://man.openbsd.org/amdgpu.4">amdgpu(4)</a>.
<!-- 2020/11/18 -->
<!-- 2020/11/17 -->
<li>Prevented accidental truncation of large memory segments on loongson.
<li>Added ACPI support to <a href="https://man.openbsd.org/imxiic.4">imxiic(4)</a>.
<!-- 2020/11/16 -->
<li>Implemented the key material exporter for TLSv1.3.
<li>Prevented process exit in multithreaded programs from reporting the wrong error code.
<li>Added multicast support to <a href="https://man.openbsd.org/bwfm.4">bwfm(4)</a> to allow IPv6.
<!-- 2020/11/15 -->
<li>Added <a href="https://man.openbsd.org/acpige.4">acpige(4)</a>, a driver for ACPI generic event devices, used on the HoneyComb LX2K to implement power button handling.
<li>Added <a href="https://man.openbsd.org/pchgpio.4">pchgpio(4)</a>, a driver for the GPIO controllers found on modern Intel PCHs.
<!-- 2020/11/14 -->
<li>Revised the initialization of the <a href="https://man.openbsd.org/drm.4">drm(4)</a> Linux emulation layer to call it only when the first drm instance attaches.
<li>Extended <a href="https://man.openbsd.org/pcamux.4">pcamux(4)</a> with ACPI support.
<li>Added support for the VF610 I2C controller to <a href="https://man.openbsd.org/imxiic.4">imxiic(4)</a>.
<li>Made sure not to replace 0.0.0.0 with a dynamic address in <a href="https://man.openbsd.org/iked.8">iked(8)</a> if it is a network address.
<li>Added 10G media support to <a href="https://man.openbsd.org/mvpp.4">mvpp(4)</a>.
<li>Added SFP+ support to ofw, including support for direct attach cables.
<!-- 2020/11/13 -->
<li>Added support for the PL2303HXN series chips to <a href="https://man.openbsd.org/uplcom.4">uplcom(4)</a>.
<li>Added support for the PCA9547 I2C mux to <a href="https://man.openbsd.org/pcamux.4">pcamux(4)</a>.
<!-- 2020/11/12 -->
<li>Added <a href="https://man.openbsd.org/witness.4">witness(4)</a> check for uninitialized (or zeroed) lock usage.
<li>Prefixed <a href="https://man.openbsd.org/ssh.1">ssh(1)</a> keyboard interactive prompts with "user@host" for easier identification of connections.
<li>Displayed any other hostnames/addresses associated with a new hostkey when <a href="https://man.openbsd.org/ssh.1">ssh(1)</a> prompts the user to accept it.
<!-- 2020/11/11 -->
<li>Implemented auto chain for the TLSv1.3 server.
<li>Updated to freetype 2.10.4.
<li>Fixed <a href="https://man.openbsd.org/athn.4">athn(4)</a> in client mode against APs that use WPA1/TKIP as the group cipher.
<!-- 2020/11/10 -->
<li>Fixed <a href="https://man.openbsd.org/urtwn.4">urtwn(4)</a> against access points using WPA1/TKIP as the group cipher.
<!-- 2020/11/09 -->
<li>Fixed a panic associated with locks and <a href="https://man.openbsd.org/drm.4">drm(4)</a> on macppc with Powerbook5,6 and RV350.
<li>Fixed issues with network stopping after the first down/up cycle in <a href="https://man.openbsd.org/mvpp.4">mvpp(4)</a>.
<li>Fixed link state change behavior in 82598 <a href="https://man.openbsd.org/ix.4">ix(4)</a> chips.
<li>Increased speed of the dependency check pass for <a href="https://man.openbsd.org/pkg_add.1">pkg_add(1)</a>.
<li>Allowed use of ## and # in <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> styles and added a "w" format modifier for width.
<!-- 2020/11/08 -->
<!-- 2020/11/07 -->
<li>Added clock support for i.MX8MP.
<li>Implemented <a href="https://man.openbsd.org/iked.8">iked(8)</a> "from dynamic," installing flows where "dynamic" is replaced by the received dynamic IP address.
<li>Fixed <a href="https://man.openbsd.org/ilogb.3">ilogb(3)</a> implementation, preventing a potential infinite loop.
<!-- 2020/11/06 -->
<li>Changed from <a href="https://man.openbsd.org/rwlock.9">rwlock(9)</a> to <a href="https://man.openbsd.org/mutex.9">mutex(9)</a> for linux rwlocks.
<li>Removed the -L option from <a href="https://man.openbsd.org/dhclient.8">dhclient(8)</a>.
<li>Fixed <a href="https://man.openbsd.org/wg.4">wg(4)</a> on macppc by keeping track of allowed ips pointer correctly.
<li>Added the ClearFog GT 8K to <a href="https://man.openbsd.org/mvclock.4">mvclock(4)</a>.
<!-- 2020/11/05 -->
<li>Enabled <a href="https://man.openbsd.org/iked.8">iked(8)</a> support for ASN1_DN ipsec identifiers.
<li>Fixed rare crashes of <a href="https://man.openbsd.org/unwind.8">unwind(8)</a> when DNS answers are larger than the maximum imsg size.
<li>Fixed <a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a> checks for manifest validity interval.
<li>Released OpenBGPD-6.8p1.
<!-- 2020/11/04 -->
<li>Added recognition of Cortex-A78AE, Cortex-X1 and Neoverse V1 arm64 CPUs.
<!-- 2020/11/03 -->
<li>Corrected an issue where <a href="https://man.openbsd.org/openssl.1">openssl(1)</a> verify might not error on expired certificates.
<li>Fixed an issue in the TLS 1.3 code that caused stalls in haproxy and other software.
<li>Changed <a href="https://man.openbsd.org/crypto.3">crypto(3)</a> to call its get_issuer() callback to try and find a suitable certificate in cases where it has failed to find a print certificate from the supplied roots and intermediates.
<li>Added the 'any' keyword to <a href="https://man.openbsd.org/iked.conf.5">iked.conf(5)</a> for requests to allow "request address any".
<!-- 2020/11/02 -->
<li>Enabled brightness keys on powerbooks where the keyboard attaches as <a href="https://man.openbsd.org/ukbd.4">ukbd(4)</a>.
<li>Set initial default display brightness on macppc via of_setbrightness() to ensure <a href="https://man.openbsd.org/wscons.4">wscons(4)</a> and ofw are in sync.
<!-- 2020/11/01 -->
<li>Added 'dynamic' keyword to <a href="https://man.openbsd.org/iked.conf.5">iked.conf(5)</a> to allow configuration of flows to dynamically assigned addresses.
<li>Implemented RFC 8914 Extended DNS Errors for <a href="https://man.openbsd.org/dig.1">dig(1)</a>.
<li>Added tracking of address proposal creation times to be able to establish total lifetime. This information is used to renew pltime/vltime of privacy addresse per RFC 4941.
<li>Changed <a href="https://man.openbsd.org/slaacd.8">slaacd(8)</a> Duplicate Address Detection (DAD) to only generate a new address if we are using Semantically Opaque Interface Identifiers.
<!-- 2020/10/31 -->
<li>Added a directive to <a href="https://man.openbsd.org/httpd.8">httpd(8)</a> to check if a path is accessible.
<li>Fixed detection of duplicate locations in <a href="https://man.openbsd.org/httpd.8">httpd(8)</a>.
<li>Added support for passing a bootmac command line argument to RAMDISK on powerpc64.
<!-- 2020/10/30 -->
<li>Make <a href="https://man.openbsd.org/iked.8">iked(8)</a> accept ANY dynamic address with 'request addr 0.0.0.0'.
<li>Fixed the "entry point at 0x10010000" hang reported on amd64 machines by using a 64MB block to load the kernel.
<li>Changed <a href="https://man.openbsd.org/astfb.4">astfb(4)</a> to allow it to become the console on powerpc64.
<!-- 2020/10/29 -->
<li>Added support to request IP addresses as IKEv2 initiator to <a href="https://man.openbsd.org/iked.8">iked(8)</a>. If 'request addr 0.0.0.0' is configured, any address will be accepted.
<li>Added the ability to force the selection of source IP address via <a href="https://man.openbsd.org/route.8">route(8)</a>.
<li>Created a new "location (found|notfound)" option for <a href="https://man.openbsd.org/httpd.conf.5">httpd.conf(5)</a> to allow testing for resource path existence.
<!-- 2020/10/28 -->
<li>Prevented kernel reuse of mbuf memory when generating the ICMP6 response to an IPv6 packet.
<li>Updated to <a href="https://man.openbsd.org/unbound.8">unbound(8)</a> 1.12.0.
<!-- 2020/10/27 -->
<li>Added notices to syslog whenever the "%n" format string component of <a href="https://man.openbsd.org/printf.3">printf(3)</a> is used.
<li>Stopped allowing configuration of the same neighbor multiple times in <a href="https://man.openbsd.org/bgpd.8">bgpd(8)</a>.
<li>Edited <a href="https://man.openbsd.org/syspatch.8">syspatch(8)</a> to ensure SHA256.sig has at least three lines.
<li>Added limited emulation of unaligned access in the powerpc64 kernel.
<!-- 2020/10/26 -->
<li>Added AMD Vi and Intel VTD IOMMU support. This creates separate domains for each PCI device and can provide protection against invalid memory access.
<li>Fixed <a href="https://man.openbsd.org/wsconsctl.8">wsconsctl(8)</a> display commands when using <a href="https://man.openbsd.org/drm.4">drm(4)</a> drivers on macppc.
<li>Fixed a deadlock between uvn_io() and uvn_flush().
<li>Added a top-level 'reboot' command to <a href="https://man.openbsd.org/ddb.4">ddb(4)</a>.
<li>Added a -legacy_verify flag to <a href="https://man.openbsd.org/openssl.1">openssl(1)</a> to force use of the old validator.
<li>Fixed a memory leak when parsing <a href="https://man.openbsd.org/bgpd.8">bgpd(8)</a> roa-set lists.
<!-- 2020/10/25 -->
<li>Added a workaround for PCIO devices that cannot address the full 64-bit PCI address space to powerpc64. Needed for <a href="https://man.openbsd.org/radeondrm.4">radeondrm(4)</a> and <a href="https://man.openbsd.org/amdgpu.4">amdgpu(4)</a> since Radeon GPUs only implement 36, 40, or 44 bits of address space.
<li>Introduced a system-wide mutex that serializes msgbuf operations.
<li>Fixed brightness setting on MacBooks.
<!-- 2020/10/24 -->
<!-- 2020/10/23 -->
<li>Updated to <a href="https://man.openbsd.org/fonttosfnt.1">fonttosfnt(1)</a> 1.2.0.
<!-- 2020/10/22 -->
<!-- 2020/10/21 -->
<li>Added retguard macros to powerpc64 locore functions.
<li>Changed <a href="https://man.openbsd.org/ping.8">ping(8)</a> to drain the raw socket of packets received before we were fully setup to avoid reporting ICMP responses intended for other instances of ping(8) running in parallel.
<li>Made <a href="https://man.openbsd.org/sysupgrade.8">sysupgrade(8)</a> specify a version when it uses <a href="https://man.openbsd.org/fw_update.1">fw_update(1)</a> to avoid the situation where upgrading a pre-6.8 snapshot to 6.8 release with "-r" would install firmware packages from snapshots.
<!-- 2020/10/20 -->
<li>Ensured <a href="https://man.openbsd.org/copyout.9">copyout(9)</a>, <a href="https://man.openbsd.org/copyinstr.9">copyinstr(9)</a> and <a href="https://man.openbsd.org/copyoutstr.9">copyoutstr(9)</a> bail out properly if called with a length of 0 on arm64, hppa and mips64.
<li>Modified <a href="https://man.openbsd.org/daily.8">daily(8)</a> to stop reporting disk status and networking statistics.
<li>Released OpenBGPD portable 6.8p0.
<li>Released <a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a> 6.8p0.
<!-- 2020/10/19 -->
<!-- 2020/10/18 -->
<li>Added powerpc64 retguard macros for setjmp/longjmp.
<li>Released LibreSSL 3.2.2.
<!-- 2020/10/17 -->
<!-- 2020/10/16 -->
<li>Implemented linux interval tree functions for <a href="https://man.openbsd.org/drm.4">drm(4)</a>.
<!-- 2020/10/15 -->
<li>Added basic support for kclock timeouts to <a href="https://man.openbsd.org/timeout.9">timeout(9)</a>.
<!-- 2020/10/14 -->
<!-- 2020/10/13 -->
<li>Updated to <a href="https://man.openbsd.org/nsd.8">nsd(8)</a> 4.3.3.
<!-- 2020/10/12 -->
<li>Added RETGUARD implementation for powerpc and powerpc64.
<!-- 2020/10/11 -->
<li>Stopped exempting file systems from <a href="https://man.openbsd.org/security.8">security(8)</a> on the basis of nodev and nosuid options, which may not be used for file systems mounted beneath.
<li>Supported use of more than one URI in the TAL file for <a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a>, sorting with a preference for https.
<!-- 2020/10/10 -->
<li>Prevented a crash due to <a href="https://man.openbsd.org/httpd.8">httpd(8)</a> listening on port 443 with missing TLS certificates.
<!-- 2020/10/09 -->
<li>Optimized arm64 <a href="https://man.openbsd.org/copyin.9">copyin(9)</a>, <a href="https://man.openbsd.org/copyout.9">copyout(9)</a> and <a href="https://man.openbsd.org/kcopy.9">kcopy(9)</a> by doing 16-byte copies if possible.
<li>Added <a href="https://man.openbsd.org/doas.conf.5">doas.conf(5)</a> "nolog" option to avoid <a href="https://man.openbsd.org/syslog.3">syslog(3)</a>.
<!-- 2020/10/08 -->
<!-- 2020/10/07 -->
<!-- 2020/10/06 -->
<li>Added Intel 495 Series LP PCH and Ice Lake graphics <a href="https://man.openbsd.org/pci.4">pci(4)</a> ids.
<!-- 2020/10/05 -->
<li>Fixed a pledge violation in <a href="https://man.openbsd.org/csh.1">csh(1)</a> where redirecting input from a file containing ^T would cause csh(1) to perform a tty ioctl operation against a non-tty.
<!-- 2020/10/04 -->
<li>Fixed a write hang-up on file system in <a href="https://man.openbsd.org/vnd.4">vnd(4)</a>.
<!-- 2020/10/03 -->
<li>Enabled <a href="https://man.openbsd.org/ssh_config.5">ssh_config(5)</a> UpdateHostkeys by default when the configuration has not overridden UserKnownHostFile.
<li>Added bsd.mp to powerpc64's installXX.{img,iso}.
<!-- 2020/10/02 -->
<li>Preferred ed25519 signature algorithm variants over ECDSA in <a href="https://man.openbsd.org/ssh_config.5">ssh_config(5)</a> and <a href="https://man.openbsd.org/sshd_config.5">sshd_config(5)</a>.
<li>Introduced "if_cloners_lock" rwlock and used it to serialize if_clone_{create,destroy}(), avoiding multiple race conditions.
<!-- 2020/10/01 -->
<li>Added <a href="https://man.openbsd.org/astfb.4">astfb(4)</a>, a driver for the framebuffer of the Aspeed BMC found on many POWER8 and POWER9 systems.
<li>Added Intel 400-series chipsets to <a href="https://man.openbsd.org/dwiic.4">dwiic(4)</a>.
<li>Relaxed checks in <a href="https://man.openbsd.org/pfctl.8">pfctl(8)</a> and <a href="https://man.openbsd.org/pf.4">pf(4)</a> to accept any valid routing domain, even if it does not yet exist.
<!-- 2020/09/30 -->
<li>Moved mfokclock(4) from loongson to make it available for other platforms and renamed it to <a href="https://man.openbsd.org/mfokrtc.4">mfokrtc(4)</a>.
<li>Removed osrelease from system.fvwmrc, as the version string matches the kernel of the <a href="https://man.openbsd.org/fvwm.1">fvwm(1)</a> build machine, not the user's kernel.
<li>Moved to 6.8-current.
</ul>