-
Notifications
You must be signed in to change notification settings - Fork 43
/
Copy pathplus71.html
792 lines (785 loc) · 64.3 KB
/
plus71.html
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
<!doctype html>
<html lang=en id=plus>
<meta charset=utf-8>
<title>OpenBSD 7.1 Changelog</title>
<meta name="description" content="OpenBSD 7.1 changes">
<meta name="viewport" content="width=device-width, initial-scale=1">
<link rel="stylesheet" type="text/css" href="openbsd.css">
<link rel="canonical" href="https://www.openbsd.org/plus71.html">
<style>
strong {
color: var(--red);
font-weight: normal;
}
h3 {
color: var(--blue);
}
</style>
<h2 id=OpenBSD>
<a href="index.html">
<i>Open</i><b>BSD</b></a>
7.1 Changelog
</h2>
<hr>
<p>
This selection is intended to include all important
and all user-visible changes.
For a complete record of all changes, please see the "source-changes"
mailing list, called "OpenBSD CVS"
in the <a href="https://marc.info/?l=openbsd-cvs">archives</a>,
or use <a href="anoncvs.html#CVS">CVS</a>.
<p>
For changes in other releases, click below:<br>
<a href="plus20.html">2.0</a>,
<a href="plus21.html">2.1</a>,
<a href="plus22.html">2.2</a>,
<a href="plus23.html">2.3</a>,
<a href="plus24.html">2.4</a>,
<a href="plus25.html">2.5</a>,
<a href="plus26.html">2.6</a>,
<a href="plus27.html">2.7</a>,
<a href="plus28.html">2.8</a>,
<a href="plus29.html">2.9</a>,
<a href="plus30.html">3.0</a>,
<a href="plus31.html">3.1</a>,
<a href="plus32.html">3.2</a>,
<a href="plus33.html">3.3</a>,
<a href="plus34.html">3.4</a>,
<a href="plus35.html">3.5</a>,
<a href="plus36.html">3.6</a>,
<br>
<a href="plus37.html">3.7</a>,
<a href="plus38.html">3.8</a>,
<a href="plus39.html">3.9</a>,
<a href="plus40.html">4.0</a>,
<a href="plus41.html">4.1</a>,
<a href="plus42.html">4.2</a>,
<a href="plus43.html">4.3</a>,
<a href="plus44.html">4.4</a>,
<a href="plus45.html">4.5</a>,
<a href="plus46.html">4.6</a>,
<a href="plus47.html">4.7</a>,
<a href="plus48.html">4.8</a>,
<a href="plus49.html">4.9</a>,
<a href="plus50.html">5.0</a>,
<a href="plus51.html">5.1</a>,
<a href="plus52.html">5.2</a>,
<a href="plus53.html">5.3</a>,
<br>
<a href="plus54.html">5.4</a>,
<a href="plus55.html">5.5</a>,
<a href="plus56.html">5.6</a>,
<a href="plus57.html">5.7</a>,
<a href="plus58.html">5.8</a>,
<a href="plus59.html">5.9</a>,
<a href="plus60.html">6.0</a>,
<a href="plus61.html">6.1</a>,
<a href="plus62.html">6.2</a>,
<a href="plus63.html">6.3</a>,
<a href="plus64.html">6.4</a>,
<a href="plus65.html">6.5</a>,
<a href="plus66.html">6.6</a>,
<a href="plus67.html">6.7</a>,
<a href="plus68.html">6.8</a>,
<a href="plus69.html">6.9</a>,
<a href="plus70.html">7.0</a>,
<br>
<a href="plus72.html">7.2</a>,
<a href="plus73.html">7.3</a>,
<a href="plus74.html">7.4</a>,
<a href="plus75.html">7.5</a>,
<a href="plus76.html">7.6</a>,
<a href="plus77.html">7.7</a>,
<a href="plus.html">current</a>.
<br>
<p>
<h3>Changes made between OpenBSD 7.0 and 7.1</h3>
<p>
<ul>
<!-- 2022/04/04 -->
<li>Moved to OpenSSH 9.0.
<li>Stopped suspending the <a href="https://man.openbsd.org/tpm.4">tpm(4)</a> device upon hibernation, preventing some systems from hanging when hibernating a second time.
<li>Fixed <a href="https://man.openbsd.org/pfctl.8">pfctl(8)</a> rdr-to rules failing on certain port ranges when explicitly specified.
<!-- 2022/04/03 -->
<li>Added <a href="https://man.openbsd.org/mvpinctrl.4">mvpinctrl(4)</a> support for the CP115 block found on Marvell CN9K SoCs.
<li>Added <a href="https://man.openbsd.org/mvclock.4">mvclock(4)</a> support for the AP807 block found on Marvell CN9K SoCs.
<!-- 2022/04/02 -->
<li>Fixed <a href="https://man.openbsd.org/ure.4">ure(4)</a> vlan transmission with hw tagging.
<li>Added preliminary <a href="https://man.openbsd.org/ure.4">ure(4)</a> support for RTL8156B and bug fixes for RTL8153/RTL8156.
<li>Fixed <a href="https://man.openbsd.org/aq.4">aq(4)</a> occasional errors seen on rockpro64.
<!-- 2022/04/01 -->
<li>Ensured <a href="https://man.openbsd.org/azalia.4">azalia(4)</a> matches on Intel 300 Series audio, fixing attaching on the Dell G3 3590.
<li>Stopped printing "You may wish to update your font path" with use of <a href="https://man.openbsd.org/pkg_add.1">pkg_add(1)</a> for paths which are under /usr/local/share/fonts.
<!-- 2022/03/31 -->
<li>Implemented <a href="https://man.openbsd.org/aplintc.4">aplintc(4)</a> support for multiple dies, making OpenBSD work on the M1 Ultra.
<li>Ensured that an interrupted arm64 install from the ramdisk kernel can be restarted.
<!-- 2022/03/30 -->
<li>Added support for the <a href="https://man.openbsd.org/sftp-server.8">sftp-server(8)</a> "copy-data" protocol extension to allow server-side copies to be performed without going via the client.
<li>Added <a href="https://man.openbsd.org/sftp.1">sftp(1)</a> "cp" command which supports server-side copying of files.
<!-- 2022/03/29 -->
<li>Ensured i386/amd64 machines boot from partition 'a' when selected, rather than the partition marked active.
<!-- 2022/03/28 -->
<li>Reinstated a <a href="https://man.openbsd.org/drm.4">drm(4)</a> workaround to get framebuffer size from efifb, preventing fatal errors for the BESSTAR TECH HM90 with Ryzen 9 4900H.
<li>Fixed glass console and <a href="https://man.openbsd.org/getty.8">getty(8)</a> interference with Xorg on arm64.
<!-- 2022/03/27 -->
<li>Added quiesce/wakeup hooks to sync vcpu state in <a href="https://man.openbsd.org/vmm.4">vmm(4)</a>.
<li>Ensured <a href="https://man.openbsd.org/pcap_lookupdev.3">pcap_lookupdev(3)</a> matches only on complete interface names.
<!-- 2022/03/26 -->
<li>Enabled <a href="https://man.openbsd.org/mtw.4">mtw(4)</a> on i386, macppc and arm64.
<!-- 2022/03/25 -->
<li>Implemented reboot/powerdown support in <a href="https://man.openbsd.org/aplsmc.4">aplsmc(4)</a>.
<li>Implemented most of CMS related checks in rpki-client(8) required by RFC 6488 section 3.
<li>Added fix in zlib for CLEAR_HASH macro.
<li>Added OSC 7 capability to <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> for setting titles.
<!-- 2022/03/24 -->
<li>Fixed a small <a href="https://man.openbsd.org/ntpd.8">ntpd(8)</a> leak.
<li>Rate limit <a href="https://man.openbsd.org/rad.8">rad(8)</a> router advertisements according to RFC 4861.
<li>Fixed <a href="https://man.openbsd.org/iwm.4">iwm(4)</a> 802.11ac throughput at a distance.
<!-- 2022/03/23 -->
<!-- 2022/03/22 -->
<li>Made sure nothing can map address zero on RISC-V.
<!-- 2022/03/21 -->
<li>Fixed crash in <a href="https://man.openbsd.org/slaacd.8">slaacd(8)</a> when receiving a negative length field for DNS labels.
<li>Added code to update hw.power whenever AC state changes on resume.
<li>Added support for XBox One game controller on usb.
<!-- 2022/03/21 -->
<li>Fix IP output routines on raw sockets so route sourceaddr can take effect using <a href="https://man.openbsd.org/sendto.2">sendto(2)</a> or similar.
<li>Avoid calling <a href="https://man.openbsd.org/setrtable.2">setrtable(2)</a> unless "rtable" is set explicitly in login.conf.
<li>Prevent panic in <a href="https://man.openbsd.org/softraid.4">softraid(4)</a> while rebooting if softraid has been disabled.
<li>Prevent announcing VHT capabilities on <a href="https://man.openbsd.org/iwm.4">iwm(4)</a> and <a href="https://man.openbsd.org/iwx.4">iwx(4)</a> for 2GHz bands during scans.
<li>Fixed argument list leak in <a href="https://man.openbsd.org/scp.1">scp(1)</a>.
<!-- 2022/03/20 -->
<li>Enabled interrupt moderation on <a href="https://man.openbsd.org/aq.4">aq(4)</a>, aiming at around 20k per second.
<li>When choosing networks during SSID selection, give a higher score to 11ac and 11n access points, prioritizing 11ac.
<li>Fixed attach of multiple <a href="https://man.openbsd.org/iwm.4">iwm(4)</a> or <a href="https://man.openbsd.org/iwx.4">iwx(4)</a> interfaces in the same machine.
<li>Add initial 802.11ac support to <a href="https://man.openbsd.org/iwm.4">iwm(4)</a>.
<li>Added 802.11ac/VHT TX rate adaptation support to the wifi stack.
<!-- 2022/03/19 -->
<!-- 2022/03/18 -->
<li>Made sure <a href="https://man.openbsd.org/sshd.8">sshd(8)</a> does not try to resolve ListenAddress when re-execing.
<li>Fixed ssh-keygen(1) SEGV when using -Y check-novalidate.
<li>New logic for <a href="https://man.openbsd.org/pkg_add.1">pkg_add(1)</a> to avoid excessive moving of files during updates when possible.
<li>Avoid legacy CSS2 syntax and use CSS3 two-value syntax in <a href="https://man.openbsd.org/mandoc.1">mandoc(1)</a>.
<li>Updated time zone database to tzdata2022a.
<li>Made <a href="https://man.openbsd.org/tcpdump.8">tcpdump(8)</a> show 802.11ac VHT capability and operation IEs in -v mode.
<li>Add <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> option to control if it scrolls into history on clear.
<!-- 2022/03/17 -->
<li>Make sure <a href="https://man.openbsd.org/iked.8">iked(8)</a> vroute messages are correctly aligned, fixes autoconfiguration of addresses on octeon.
<li>Added an option in <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> to set the character for unused areas of the terminal.
<li>Updated <a href="https://man.openbsd.org/nsd.8">nsd(8)</a> to version 4.4.0.
<!-- 2022/03/16 -->
<li>Bumped LibreSSL to 3.5.2.
<li>Fixed reading motherboard time on Apple machines with old SMC firmware.
<li>Make <a href="https://man.openbsd.org/su.1">su(1)</a> honor the login class routing table when doing a full login with su -l.
<li>Fixed infinite loop in libcrypto for certain elliptic curve public key operations.
<li>Enabled IP header checksum offloading in <a href="https://man.openbsd.org/ix.4">ix(4)</a>.
<li>Changed the way $macros are expanded in <a href="https://man.openbsd.org/bgpd.conf.5">bgpd.conf(5)</a>.
<li>Fix TX rate used by <a href="https://man.openbsd.org/rtwn.4">rtwn(4)</a> and <a href="https://man.openbsd.org/urtwn.4">urtwn(4)</a> for RTS frames.
<!-- 2022/03/15 -->
<li>Fixed <a href="https://man.openbsd.org/sndiod.8">sndiod(8)</a> crash.
<li>Enabled checksum offloads on <a href="https://man.openbsd.org/aq.4">aq(4)</a>.
<li>Added -k flag to <a href="https://man.openbsd.org/gzip.1">gzip(1)</a> and <a href="https://man.openbsd.org/gunzip.1">gunzip(1)</a> to retain (de)compressed file.
<li>Made sure armv7,arm64 and risc-v FDT bootloader code does not write beyond the FDT data structure.
<li>Added 802.11ac support on <a href="https://man.openbsd.org/iwx.4">iwx(4)</a>.
<li>Added initial 802.11ac (VHT) support to the wifi stack.
<li>Improved TX performance on <a href="https://man.openbsd.org/urtwn.4">urtwn(4)</a> RTL8192EU devices.
<li>Improved message fragment retransmissions for <a href="https://man.openbsd.org/iked.8">iked(8)</a>.
<!-- 2022/03/14 -->
<li>Fix crash in IPSec while doing parallel IP forwarding.
<li>Add missing error check for x509 constraints code in libcrypto.
<li>Enable vlan promisc, header stripping and vlan RX/TX offload on <a href="https://man.openbsd.org/aq.4">aq(4)</a>.
<!-- 2022/03/13 -->
<li>Let <a href="https://man.openbsd.org/unwind.8">unwind(8)</a> probe for DNS64 presence with an absolute name, so asr doesn't add search domains and retry.
<!-- 2022/03/12 -->
<li>Made <a href="https://man.openbsd.org/fdisk.8">fdisk(8)</a> preserve the EFI System partition when auto-allocating space on GPT disks with magic Apple partitions.
<li>Fixed receive filter handling in <a href="https://man.openbsd.org/aq.4">aq(4)</a>.
<li>Fixed masked signal traps while in a debugger.
<li>Fixed overflow protection code in <a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a>.
<!-- 2022/03/11 -->
<li>Enabled PL011 UART FIFO support in <a href="https://man.openbsd.org/pluart.4">pluart(4)</a>.
<li>Fixed RISC-V lld link code when dealing with object files created with "ld -b".
<li>Added kernel interfaces for atomic load and store functions for int and long to be used in reference counted struct members.
<li>Prevented an assert in uvm_page.c when freeing an anon after swapping out its memory.
<li>Added <a href="https://man.openbsd.org/mtw.4">mtw(4)</a> to <a href="https://man.openbsd.org/fw_update.8">fw_update(8)</a>.
<!-- 2022/03/10 -->
<li>Prevented <a href="https://man.openbsd.org/aq.4">aq(4)</a> nics from writing to mbufs taken off the ring when the interface was taken down.
<!-- 2022/03/09 -->
<li>Updated libexpat to 2.4.7.
<li>Improved roaming stability on <a href="https://man.openbsd.org/iwn.4">iwn(4)</a>, particularly with wpa_supplicant.
<!-- 2022/03/08 -->
<!-- 2022/03/07 -->
<li>Switched <a href="https://man.openbsd.org/aucat.1">aucat(1)</a> internal sample representation and default file encoding to 24-bit.
<li>Switched <a href="https://man.openbsd.org/sndiod.8">sndiod(8)</a> internal sample representation to 24-bit fixed point.
<li>Renamed net80211 <a href="https://man.openbsd.org/ioctl.2">ioctl(2)</a> struct ieee80211_channel to struct ieee80211_chaninfo.
<li>Updated to xf86-video-amdgpu 22.0.0.
<li>Prevented a possible deadlock in <a href="https://man.openbsd.org/cad.4">cad(4)</a>.
<!-- 2022/03/06 -->
<li>Made the arm64 ramdisk installer fetch <a href="https://man.openbsd.org/bwfm.4">bwfm(4)</a> firmware from the EFI System Partition on Apple Silicon devices for use during installation and addition to the newly installed system.
<!-- 2022/03/05 -->
<!-- 2022/03/04 -->
<li>Added support for the BCM4387 to <a href="https://man.openbsd.org/bwfm.4">bwfm(4)</a>.
<!-- 2022/03/03 -->
<li>Improved handling of static compressed gzip files in <a href="https://man.openbsd.org/httpd.8">httpd(8)</a>.
<!-- 2022/03/02 -->
<li>Added openvpn ports (udp/1194 & tcp/1194) to /etc/services.
<li>Added an ofw interface to write to an nvmem cell.
<li>Added RTC support to <a href="https://man.openbsd.org/aplsmc.4">aplsmc(4)</a>.
<li>Added nvmem support to <a href="https://man.openbsd.org/aplpmu.4">aplpmu(4)</a> and made it available on Apple SPMI PMUs.
<!-- 2022/03/01 -->
<li>Added <a href="https://man.openbsd.org/pax.1">pax(1)</a> support for mtime/atime/ctime extended headers in !SMALL builds.
<li>Ensured <a href="https://man.openbsd.org/apldart.4">apldart(4)</a> keeps the DART enabled in front of the display controller to preserve its access to the framebuffer and continued display.
<li>Added handling for <a href="https://man.openbsd.org/vmd.8">vmd(8)</a> hitting resource limits when starting a vm and added memory error messages for the user.
<li>Modified <a href="https://man.openbsd.org/aplintc.4">aplintc(4)</a> to support a newer interrupt controller, making OpenBSD run on M1 Pro/Max machines.
<!-- 2022/02/28 -->
<li>Added rtable capability to <a href="https://man.openbsd.org/login.conf.5">login.conf(5)</a>.
<li>Provided a login class for <a href="https://man.openbsd.org/vmd.8">vmd(8)</a>.
<!-- 2022/02/27 -->
<li>Added mbuf tags to prevent output loops in <a href="https://man.openbsd.org/etherip.4">etherip(4)</a>.
<li>Fixed backtraces on i386 and armv7.
<li>Added a gzip-static option to <a href="https://man.openbsd.org/httpd.conf.5">httpd.conf(5)</a>, allowing delivery of precompressed files with content-encoding gzip.
<!-- 2022/02/26 -->
<li>Added a <a href="https://man.openbsd.org/malloc.3">malloc(3)</a> cache of regions between 128k and 2M to accommodate programs allocating and deallocating regions of these sizes quickly.
<li>Fixed <a href="https://man.openbsd.org/setusercontext.3">setusercontext(3)</a> error when /etc/login.conf is not present.
<!-- 2022/02/25 -->
<li>Protected <a href="https://man.openbsd.org/pfsync.4">pfsync(4)</a> tdb flags and lists with a mutex to prevent crashes involving pfsync, IPsec and parallel forwarding.
<li>Enabled <a href="https://man.openbsd.org/cduart.4">cduart(4)</a> on arm64.
<!-- 2022/02/24 -->
<li>Released <a href="https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.5.0-relnotes.txt">LibreSSL 3.5.0</a>.
<li>Fixed kernel stack alignment on riscv64.
<li>Unlocked <a href="https://man.openbsd.org/getsockname.2">getsockname(2)</a>.
<!-- 2022/02/23 -->
<li>Updated Mesa to 21.3.7.
<li>Updated to <a href="https://man.openbsd.org/unbound.8">unbound(8)</a> 1.15.0.
<li>Made it possible to bind and connect to non-default ports in <a href="https://man.openbsd.org/bgpd.conf.5">bgpd.conf(5)</a>.
<li>Randomized the password used in fakepw in <a href="https://man.openbsd.org/ssh.1">ssh(1)</a>.
<li>Released <a href="https://www.openssh.com/txt/release-8.9">OpenSSH 8.9</a>.
<!-- 2022/02/22 -->
<li>Extended and reordered the process accounting information structure <a href="https://man.openbsd.org/acct.5">acct(5)</a>. Flag Day for the <a href="https://man.openbsd.org/acct.2">acct(2)</a> file format.
<li>Added <a href="https://man.openbsd.org/seq.1">seq(1)</a>, a command to print sequences of numbers.
<li>Added new _MAXCOMLEN (a proper string expanded to 24 bytes including the NUL) to syslimits, allowing replacement of the MAXCOMLEN symbol from sys/param.h in userland.
<li>Updated libexpat to 2.4.6.
<li>Stopped hiding the mtu on "bridge" interfaces which do handle l3 traffic in <a href="https://man.openbsd.org/ifconfig.8">ifconfig(8)</a>.
<li>Improved stack unwinding on riscv64 in <a href="https://man.openbsd.org/ddb.4">ddb(4)</a>.
<li>Made <a href="https://man.openbsd.org/audio.4">audio(4)</a> event filters MP-safe.
<!-- 2022/02/21 -->
<li>In <a href="https://man.openbsd.org/rpc.rusersd.8">rpc.rusersd(8)</a> <a href="https://man.openbsd.org/unveil.2">unveil(2)</a> "/dev" read-only instead of using <a href="https://man.openbsd.org/chroot.2">chroot(2)</a>.
<li>Updated to libX11 1.7.3.1.
<!-- 2022/02/20 -->
<li>Capped the daemon <a href="https://man.openbsd.org/login.1">login</a> class datasize at either 1G or 4G depending on the architecture and set the <a href="https://man.openbsd.org/bgpd.8">bgpd</a> class datasize to either 16G or 1G.
<li>Made <a href="https://man.openbsd.org/ping.8">ping(8)</a> print out the source address and sequence number when the signature on an icmp echo reply doesn't match.
<li>Made <a href="https://man.openbsd.org/fw_update.8">fw_update(8)</a> use the /snapshots directory only on -current.
<li>Fixed <a href="https://man.openbsd.org/vi.1">vi(1)</a> recovery mode.
<li>Added <a href="https://man.openbsd.org/aplcpu.4">aplcpu(4)</a>, a driver to control the CPU performance levels on Apple SoCs.
<li>Prevented a potential crash when <a href="https://man.openbsd.org/slaacd.8">slaacd(8)</a> receives more than 7 nameservers.
<li>Updated xorg-server to 21.1.3, leaving in place an earlier change to compute the screen resolution from dimensions returned by the screen, reverted by upstream.
<li>Moved to OpenBSD 7.1-beta.
<!-- 2022/02/19 -->
<li>Enabled subpixel rendering in FreeType.
<li>Used <a href="https://man.openbsd.org/installboot.8">installboot(8)</a> in install.md for armv7.
<!-- 2022/02/18 -->
<li>Made <a href="https://man.openbsd.org/apmd.8">apmd(8)</a> replace /etc/random.seed for hibernate-resumes.
<li>Enabled TLS verify by default for outbound "smtps://" and "smtp+tls://", restoring documented <a href="https://man.openbsd.org/smtpd.8">smtpd(8)</a> behavior.
<li>Introduced <a href="https://man.openbsd.org/mpfgpio.4">mpfgpio(4)</a>, a driver for the PolarFire SoC MSS GPIO controller.
<!-- 2022/02/17 -->
<li>If S4 is not available, use S5 for the ACPI-transitions in hibernate support.
<li>Corrected architecture checking to prevent partial building of binutils-2.17 on unsupported systems.
<!-- 2022/02/16 -->
<li>Introduced <a href="https://man.openbsd.org/mpfiic.4">mpfiic(4)</a>, a driver for the PolarFire SoC MSS I2C controller.
<li>Included <a href="https://man.openbsd.org/clang-local.1">minimal UBSan libraries</a>, for runtime detection of undefined behavior.
<!-- 2022/02/15 -->
<li>Correlated <a href="https://man.openbsd.org/uaudio.4">uaudio(4)</a> and <a href="https://man.openbsd.org/ucc.4">ucc(4)</a> devices attached over USB in order to adjust the volume of the correct attached audio device rather than the first one attached. (Reverted 2022/03/29)
<li>Fixed suspend/resume issues with <a href="https://man.openbsd.org/com.4">com(4)</a> at <a href="https://man.openbsd.org/acpi.4">acpi(4)</a>.
<li>Ensured the <a href="https://man.openbsd.org/pf.4">pf(4)</a> "set prio" values are checked consistently.
<li>Prevented reopening of <a href="https://man.openbsd.org/tun.4">tun(4)</a>/<a href="https://man.openbsd.org/tap.4">tap(4)</a> interfaces which are being destroyed.
<li>Rewrote <a href="https://man.openbsd.org/vxlan.4">vxlan(4)</a> to operate independently of <a href="https://man.openbsd.org/bridge.4">bridge(4)</a>, create and bind udp sockets and prevent loops.
<!-- 2022/02/14 -->
<li>Prevented tweaks to <a href="https://man.openbsd.org/tun.4">tun(4)</a> if_flags when the NET_LOCK isn't held.
<li>Used <a href="https://man.openbsd.org/fdisk.8">fdisk(8)</a> -b to create the desired 1MB MSDOS boot partition for macppc rather than relying on /usr/mdec/mbr.
<!-- 2022/02/13 -->
<li>Added support to explicitly power on some PCIe devices on the M1 and M1 Pro/Max through a GPIO controlled by the SMC.
<li>Added basic GPIO support to <a href="https://man.openbsd.org/aplsmc.4">aplsmc(4)</a>.
<li>Improved tracking of mbuf memory usage in the whole system.
<!-- 2022/02/12 -->
<!-- 2022/02/11 -->
<!-- 2022/02/10 -->
<li>Made <a href="https://man.openbsd.org/rcctl.8">rcctl(8)</a> look for the login class in both login.conf and login.conf.d/${class}.
<li>Enabled receive checksum offloading on <a href="https://man.openbsd.org/ixl.4">ixl(4)</a>.
<li>Stopped <a href="https://man.openbsd.org/smtpd.8">smtpd(8)</a> from verifying the cert or CA for a relay using opportunistic TLS.
<li>Updated Devel::PPPort to 3.6.4.
<li><a href="https://man.openbsd.org/unveil.2">Unveil(2)</a> _PATH_LOGIN_CONF_D.
<li>Introduced support for storing capability databases in /etc/login.conf.d, allowing easy addition of custom login classes from packages.
<li>Switched to using <a href="https://man.openbsd.org/fdisk.8">fdisk(8)</a> -b to create boot partitions on multiple architectures.
<!-- 2022/02/09 -->
<li>Stopped unregistering firmware with <a href="https://man.openbsd.org/fw_update.8">fw_update(8)</a> when the SHA256.sig cannot be fetched.
<li>Enabled <a href="https://man.openbsd.org/acpibat.4">acpibat(4)</a> use with the Surface Go 3.
<li>Fixed <a href="https://man.openbsd.org/getcap.1">getcap(1)</a> -f option when passed multiple files.
<li>Enabled more flexible device matching for I2C devices.
<li>Increased armv7 ramdisk size.
<!-- 2022/02/08 -->
<li>Added a CRL check for manifests to <a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a>.
<li>Re-enabled <a href="https://man.openbsd.org/ixl.4">ixl(4)</a> IPv4, TCP4/6 and UDP4/6 checksum offloading.
<li>Switched <a href="https://man.openbsd.org/ssh.1">ssh(1)</a> hpdelim interface to accept only ":" as a delimiter.
<li>Enabled hardware vlan tagging for <a href="https://man.openbsd.org/ixl.4">ixl(4)</a>.
<li>Implemented the <a href="https://man.openbsd.org/poll.2">poll(2)</a> system call on top of the <a href="https://man.openbsd.org/kqueue.2">kqueue(2)</a> subsystem, obsoleting the old, non-MP-safe poll backend.
<li>Plugged a leak in libtls CRL handling.
<!-- 2022/02/07 -->
<li>Reworked <a href="https://man.openbsd.org/ix.4">ix(4)</a> checksum/vlan offloading and enabled it for IPv6.
<li>Added <a href="https://man.openbsd.org/ps.1">ps(1)</a> status flag "c" to indicate a process is chrooted.
<li>Allowed <a href="https://man.openbsd.org/ddb.4">ddb(4)</a> trace through interrupt on macppc.
<li>Released <a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a> 7.6.
<!-- 2022/02/06 -->
<li>Allowed riscv64 installation on a disk with a GPT.
<li>Enabled support for displaying an estimated battery recharge time in <a href="https://man.openbsd.org/apm.8">apm(8)</a> and <a href="https://man.openbsd.org/apmd.8">apmd(8)</a>.
<!-- 2022/02/05 -->
<li>Grew the <a href="https://man.openbsd.org/dmesg.8">dmesg(8)</a> buffer on i386 from 4 to 8 pages.
<!-- 2022/02/04 -->
<li>Enforced RFC 6384 certificate policy for RPKI in <a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a>.
<!-- 2022/02/03 -->
<li>Moved to <a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a> 7.6.
<li>Made <a href="https://man.openbsd.org/fdisk.8">fdisk(8)</a> -A preserve BIOS boot partition.
<li>Used <a href="https://man.openbsd.org/installboot.8">installboot(8)</a> in riscv64 install.md.
<li>Added a key in <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> copy mode to toggle the position indicator.
<!-- 2022/02/02 -->
<li>Introduced <a href="https://man.openbsd.org/apldma.4">apldma(4)</a>, a driver for the DMA controller found on Apple SoCs.
<!-- 2022/02/01 -->
<li>Allowed <a href="https://man.openbsd.org/ssh-keygen.1">ssh-keygen(1)</a> -Y find-principals to match wildcard principals in allowed_signers files.
<li>Added a <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> option to show arrows for the active pane indicator.
<li>Attempted to guarantee that on copy-on-write faulting, the new copy can't be written to while any thread can see the original version of the page via a not-yet-flushed stale TLB entry.
<!-- 2022/01/31 -->
<li>Changed <a href="https://man.openbsd.org/isakmpd.8">isakmpd(8)</a> to log a warning when proto is NULL rather than dereferencing it.
<!-- 2022/01/30 -->
<li>Updated libexpat to 2.4.4, fixing CVE-2022-23852 and CVE-2022-23990.
<li>Introduced <a href="https://man.openbsd.org/aplnco.4">aplnco(4)</a>, a driver for the Numerically-controlled oscillator (NCO) clock which drives the audio clocks on Apple silicon.
<li>Introduced <a href="https://man.openbsd.org/tascodec.4">tascodec(4)</a>, a driver for the TI TAS2770/TAS5770 digital audio amplifier codec found on Apple M1 Macs.
<!-- 2022/01/29 -->
<!-- 2022/01/28 -->
<li>Prevented a file descriptor leak in <a href="https://man.openbsd.org/touch.1">touch(1)</a> after <a href="https://man.openbsd.org/futimens.2">futimens(2)</a> failure.
<li>Increased <a href="https://man.openbsd.org/ddb.1">ddb(1)</a> access to registers on macppc and powerpc64.
<li>Properly handled .mft files in <a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a>, preventing replay attacks using old but still valid files.
<!-- 2022/01/27 -->
<li>Added a <a href="https://man.openbsd.org/cwm.1">cwm(1)</a> "group-last" command that shows only the previously active group.
<li>Update <a href="https://man.openbsd.org/awk.1">awk(1)</a> to Dec 8, 2021 version.
<!-- 2022/01/26 -->
<li>Allowed rsync:// URIs as files in <a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a> -f mode.
<li>Fixed an issue where <a href="https://man.openbsd.org/com.4">com(4)</a> would attach for a disabled serial port leading to misdirection of the hardware variant and a subsequent hang when /etc/rc runs <a href="https://man.openbsd.org/ttyflags.8">ttyflags(8)</a> -a.
<!-- 2022/01/25 -->
<li>Made <a href="https://man.openbsd.org/vmm.4">vmm(4)</a> <a href="https://man.openbsd.org/dt.4">dt(4)</a> tracepoints amd64-only.
<!-- 2022/01/24 -->
<!-- 2022/01/23 -->
<li>Made <a href="https://man.openbsd.org/fw_update.8">fw_update(8)</a> re-download existing files with failed checksums.
<li>Allowed <a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a> to display more than one file in -f mode.
<!-- 2022/01/22 -->
<li>Made <a href="https://man.openbsd.org/ed.1">ed(1)</a> flush all stdio streams before running a shell command.
<!-- 2022/01/21 -->
<li>Fixed and reenabled active scans on <a href="https://man.openbsd.org/iwm.4">iwm(4)</a> and <a href="https://man.openbsd.org/iwx.4">iwx(4)</a>.
<li>Enabled <a href="https://man.openbsd.org/dt.4">dt(4)</a> on macppc.
<!-- 2022/01/20 -->
<li>Added optimization for tiny x in <a href="https://man.openbsd.org/cos.3">cos(3)</a> and <a href="https://man.openbsd.org/sin.3">sin(3)</a>.
<li>Disabled assembly implementations of trig functions on x86 platforms.
<li>Copied the <a href="https://man.openbsd.org/cos.3">cos(3)</a> software implementation from FreeBSD-13.
<!-- 2022/01/19 -->
<!-- 2022/01/18 -->
<li>Improved how quirks are handled on <a href="https://man.openbsd.org/sdhc.4">sdhc(4)</a>-compatible drivers.
<li>Introduced <a href="https://man.openbsd.org/cdsdhc.4">cdsdhc(4)</a>, a driver for the Cadence SD/SDIO/eMMC host controller.
<!-- 2022/01/17 -->
<li>Made transferring multiple files in <a href="https://man.openbsd.org/scp.1">scp(1)</a> mode create the destination if it doesn't already exist.
<li>Updated libexpat to 2.4.3.
<!-- 2022/01/16 -->
<li>Allowed more memory ranges in hibernate.
<!-- 2022/01/15 -->
<!-- 2022/01/14 -->
<li>Introduced a validated cache which holds all the files successfully verified by <a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a>.
<li>Enabled <a href="https://man.openbsd.org/openssl.1">openssl(1)</a> pkey -{,pub}check and pkeyparam -check.
<li>Implemented new-style OpenSSL BIO callbacks in <a href="https://man.openbsd.org/crypto.3">crypto(3)</a>.
<!-- 2022/01/13 -->
<li>Updated <a href="https://man.openbsd.org/drm.4">drm(4)</a> to linux 5.15.14.
<li>Allowed pin-required FIDO keys to be added to <a href="https://man.openbsd.org/ssh-agent.1">ssh-agent(1)</a>.
<li>Made <a href="https://man.openbsd.org/bpf.4">bpf(4)</a> MP-safe.
<li>Implemented powerdown in arm64.
<!-- 2022/01/12 -->
<li>Improved performance of <a href="https://man.openbsd.org/rev.1">rev(1)</a>.
<li>Set cpuspeed to 0 in <a href="https://man.openbsd.org/apm.8">apm(8)</a> when hw.cpuspeed cannot be retrieved.
<!-- 2022/01/11 -->
<li>Fixed <a href="https://man.openbsd.org/sdhc.4">sdhc(4)</a> for Jasper Lake eMMC.
<li>Added Synopsys Designware UART support to <a href="https://man.openbsd.org/com.4">com(4)</a>.
<li>Unlocked <a href="https://man.openbsd.org/getpeername.2">getpeername(2)</a>.
<!-- 2022/01/10 -->
<li>Modified the installer to use <a href="https://man.openbsd.org/fw_update.8">fw_update(8)</a> to install non-free firmware files if present on the install media.
<li>Added Intel Jasper Lake to <a href="https://man.openbsd.org/azalia.4">azalia(4)</a>.
<li>Introduced <a href="https://man.openbsd.org/aplsmc.4">aplsmc(4)</a>, a driver for the SMC found on Apple M1 SoCs.
<!-- 2022/01/09 -->
<li>Fixed GOST skip certificate verify handling.
<li>Fixed a problem where unveil("/", "r") and unveil("usr/bin/id", "rx") cause an error when read accessing /usr/bin.
<!-- 2022/01/08 -->
<li>Stopped <a href="https://man.openbsd.org/fw_update.8">fw_update(8)</a> from downloading SHA256.sig when not needed, to allow installing local files without network access.
<li>Removed apldwusb(4).
<li>Fixed possible use after free with long lines in <a href="https://man.openbsd.org/less.1">less(1)</a>.
<!-- 2022/01/07 -->
<li>Applied MP-safe changes from <a href="https://man.openbsd.org/dwge.4">dwge(4)</a> to <a href="https://man.openbsd.org/dwxe.4">dwxe(4)</a>.
<!-- 2022/01/06 -->
<li>Made <a href="https://man.openbsd.org/ssh-keysign.8">ssh-keysign(8)</a> use the requested signature algorithm and not the default for the keytype.
<li>Made <a href="https://man.openbsd.org/ssh.1">ssh(1)</a> UpdateHostkey signature verification logic more strict.
<li>Fixed <a href="https://man.openbsd.org/sshd.8">sshd(8)</a> signature algorithm selection logic for UpdateHostkeys.
<!-- 2022/01/05 -->
<li>Fixed wrong pointer assignment causing the driver to read block ack request information sent by firmware from the wrong offset in <a href="https://man.openbsd.org/iwx.4">iwx(4)</a>.
<li>Returned to a shell-script based <a href="https://man.openbsd.org/fw_update.8">fw_update(8)</a>, written to be usable by the install script, allowing earlier retrieval of downloaded firmwares.
<!-- 2022/01/04 -->
<li>Added a basic printer for EAPOL packets to <a href="https://man.openbsd.org/tcpdump.8">tcpdump(8)</a>.
<li>Changed <a href="https://man.openbsd.org/ssh-keygen.1">ssh-keygen(1)</a> to allow selection of hash algorithm at sshsig signing time.
<li>Fixed an <a href="https://man.openbsd.org/ssh-keygen.1">ssh-keygen(1)</a> NULL dereference when using find-principals and matching an allowed_signers line that contains a namespace restriction but no restriction specified on command line.
<li>Introduced <a href="https://man.openbsd.org/mpfclock.4">mpfclock(4)</a>, a driver for the PolarFire SoC MSS clock controller.
<li>Fixed hibernate setups where a removed <a href="https://man.openbsd.org/umass.4">umass(4)</a> device results in a renumbered <a href="https://man.openbsd.org/softraid.4">softraid(4)</a> device.
<li>Restricted the <a href="https://man.openbsd.org/pci.4">pci(4)</a> ioctl interface to devices detected by hthe kernel, preventing Xorg PCI probes from breaking the WiFi chip on M1 macs.
<!-- 2022/01/03 -->
<li>Made the <a href="https://man.openbsd.org/dhcpleased.8">dhcpleased(8)</a> host name DHCP option configurable.
<!-- 2022/01/02 -->
<li>Corrected checksums written by <a href="https://man.openbsd.org/fdisk.8">fdisk(8)</a> on big-endian architectures to be little-endian as per spec.
<!-- 2022/01/01 -->
<li>Rewrote arm64 kernel FPU handling code to fix the random crashes seen with SMP kernels on Apple M1.
<!-- 2021/12/31 -->
<li>Added attempts to turn on less-capable mouse modes when <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> turns on more-capable ones, in case the terminal doesn't support the desired mode.
<li>Added missing locking to <a href="https://man.openbsd.org/pmap_extract.9">pmap_extract(9)</a> and <a href="https://man.openbsd.org/pmap_unwire.9">pmap_unwire(9)</a> on arm64 and riscv64.
<!-- 2021/12/30 -->
<li>Reintroduced support for <a href="https://man.openbsd.org/vmctl.8">vmctl(8)</a> <code>start -B net -b bsd.rd</code>, which emulates a PXE boot and performs an autoinstall.
<!-- 2021/12/29 -->
<li>Prevented a potential race when assigning new <a href="https://man.openbsd.org/wskbd.4">wskbd(4)</a> keymap.
<!-- 2021/12/28 -->
<li>Fixed <a href="https://man.openbsd.org/veb.4">veb(4)</a> vport handling to prevent improper drop of packets leaving a vport interface.
<li>Unlocked the bottom part of the uvm fault handler.
<!-- 2021/12/27 -->
<li>Added the chip ids used on Apple M1 Pro/Max and Apple T2 Macs to <a href="https://man.openbsd.org/bwfm.4">bwfm(4)</a>.
<!-- 2021/12/26 -->
<li>Reworked garbage collector for <a href="https://man.openbsd.org/unix.4">unix(4)</a> sockets to prevent potential kernel panics.
<li>Added address locators for the ACPI "bus" and used these to fix the order of the <a href="https://man.openbsd.org/com.4">com(4)</a> devices to match the traditional order on the ISA bus.
<!-- 2021/12/25 -->
<li>Made "set skip on ..." in <a href="https://man.openbsd.org/pf.conf.5">pf.conf(5)</a> dynamic.
<!-- 2021/12/24 -->
<li>Allowed bare numbers for key and mouse bindings in <a href="https://man.openbsd.org/cwm.1">cwm(1)</a>.
<li>Made <a href="https://man.openbsd.org/uniq.1">uniq(1)</a> skip() each input line only once, improving performance.
<!-- 2021/12/23 -->
<li>Introduced <a href="https://man.openbsd.org/apliic.4">apliic(4)</a>, a driver for the I2C controller found on various Apple SoCs.
<li>Protected <a href="https://man.openbsd.org/ipsec.4">ipsec(4)</a> input and output with the kernel lock to allow forwarding of non-ipsec traffic in parallel.
<!-- 2021/12/22 -->
<li>Disabled minimum power consumption in <a href="https://man.openbsd.org/bwfm.4">bwfm(4)</a> hostap mode, improving connection reliability when used as an access point.
<li>Updated to <a href="https://man.openbsd.org/nsd.8">nsd(8)</a> 4.3.9.
<!-- 2021/12/21 -->
<!-- 2021/12/20 -->
<li>Made <a href="https://man.openbsd.org/dhcpd.8">dhcpd(8)</a> start listening on DOWN interfaces.
<li>Made <a href="https://man.openbsd.org/iwm.4">iwm(4)</a> attach to PCI devices with product ID 0x31dc, part of the 9560 chip family.
<li>Introduced <a href="https://man.openbsd.org/mtw.4">mtw(4)</a>, a driver for MediaTek MT7601U wifi devices.
<!-- 2021/12/19 -->
<li>Added unbound and host-bound options for <a href="https://man.openbsd.org/ssh.1">ssh(1)</a> PubkeyAuthentication for hardware devices unable to sign longer pubkey authentication challenges.
<li>Required host-bound userauth requests for forwarded SSH connections.
<li>Gave <a href="https://man.openbsd.org/ssh-agent.1">ssh-agent(1)</a> the ability to parse [email protected] constraints and to apply them to keys.
<li>Made <a href="https://man.openbsd.org/ssh-add.1">ssh-add(1)</a> accept a list of "destination constraints" that allow restricting where keys may be used in conjunction with an ssh-agent/ssh that supports session ID/hostkey binding.
<!-- 2021/12/18 -->
<li>Fixed <a href="https://man.openbsd.org/radeondrm.4">radeondrm(4)</a> console colors on sparc64.
<li>Introduced <a href="https://man.openbsd.org/aplmbox.4">aplmbox(4)</a>, a driver for the mailbox that provides a communication channel with additional cores integrated on Apple SoCs.
<!-- 2021/12/17 -->
<li>Updated to LLVM 13.0.0.
<!-- 2021/12/16 -->
<li>Attached <a href="https://man.openbsd.org/com.4">com(4)</a> over <a href="https://man.openbsd.org/acpi.4">acpi(4)</a> on amd64.
<!-- 2021/12/15 -->
<li>Added create permissions to <a href="https://man.openbsd.org/unveil.2">unveil(2)</a> on <a href="https://man.openbsd.org/ldapd.8">ldapd(8)</a>.
<li>Restricted <a href="https://man.openbsd.org/usbhidctl.1">usbhidctl(1)</a> and <a href="https://man.openbsd.org/usbhidaction.1">usbhidaction(1)</a> file system access with <a href="https://man.openbsd.org/unveil.2">unveil(2)</a>.
<!-- 2021/12/14 -->
<li>Implemented <a href="https://man.openbsd.org/em.4">em(4)</a> support for selecting SMGII or SerDes mode depending on the plugged-in SFP transceiver and for reading out transceiver information via <a href="https://man.openbsd.org/ifconfig.8">ifconfig(8)</a>.
<li>Used "rng-seed" and "kaslr-seed" properties from the device tree to mix extra entropy into the pool for arm64.
<!-- 2021/12/13 -->
<li>Added pclk clock used by <a href="https://man.openbsd.org/dwdog.4">dwdog(4)</a> on RK3399 to <a href="https://man.openbsd.org/rkclock.4">rkclock(4)</a>.
<li>Increased <a href="https://man.openbsd.org/tee.1">tee(1)</a> I/O buffer size from 8KB to 64KB.
<li>Added handling of multi-port controllers to <a href="https://man.openbsd.org/uslcom.4">uslcom(4)</a>.
<li>Added a pane-border-format pane option to <a href="https://man.openbsd.org/tmux.1">tmux(1)</a>.
<li>Reduced unnecessary usage of sys/cdefs.h includes.
<li>Cleaned up unnecessary sys/param.h includes across the kernel and userland, replacing some macros with local copies.
<!-- 2021/12/12 -->
<li>Added a "vnode" parameter to <a href="https://man.openbsd.org/VOP_STRATEGY.9">VOP_STRATEGY(9)</a>.
<!-- 2021/12/11 -->
<li>Added <a href="https://man.openbsd.org/acpipci.4">acpipci(4)</a> support for interrupts represented by ACPI PCI Interrupt Link Devices, making PCI interrupts work on QEMU's SBSA target.
<!-- 2021/12/10 -->
<!-- 2021/12/09 -->
<li>Fixed a potential DOS associated with <a href="https://man.openbsd.org/BIO_indent.3">BIO_indent(3)</a> when a caller asks for a negative number of bytes of output.
<li>Fixed a bug where <a href="https://man.openbsd.org/iked.8">iked(8)</a> sent zero-prefixed NAT-T messages on port 500, causing parsing errors.
<li>Introduced <a href="https://man.openbsd.org/aplpmgr.4">aplpmgr(4)</a>, a driver for the power management controller found on various Apple SoCs.
<!-- 2021/12/08 -->
<!-- 2021/12/07 -->
<li>Taught the net80211 stack to remove corresponding frames from ic_pwrsaveq when a power-saving client decides to leave our hostap interface, preventing a panic.
<li>Allowed <a href="https://man.openbsd.org/fdisk.8">fdisk(8)</a> to extend the default OpenBSD partition to the end of the disk, rather than truncating at the end of the last full cylinder.
<!-- 2021/12/06 -->
<!-- 2021/12/05 -->
<!-- 2021/12/04 -->
<li>Fixed spurious abort of a VM by <a href="https://man.openbsd.org/vmd.8">vmd(8)</a> when the scheduler moves a VM to a different core while it is sleeping on a lock.
<li>Fixed broken <a href="https://man.openbsd.org/vmd.8">vmd(8)</a> "boot device cdrom" feature after a fix in seabios.
<!-- 2021/12/03 -->
<li>Switched <a href="https://man.openbsd.org/iwx.4">iwx(4)</a> to new -67 firmware images.
<li>Disabled probe requests during scans in <a href="https://man.openbsd.org/iwx.4">iwx(4)</a> again, preventing device timeouts for some devices.
<li>Implemented bgscan_done() handlers for <a href="https://man.openbsd.org/iwx.4">iwx(4)</a> and <a href="https://man.openbsd.org/iwm.4">iwm(4)</a>.
<li>Introduced an optional driver-specific bgscan_done() handler which allows the driver to take control of the roaming teardown sequence, ensuring that race conditions between firmware state and net80211 state are avoided.
<li>Fixed an xserver 1.21.1 crash when attempting to run <a href="https://man.openbsd.org/fvwm.1">fvwm(1)</a> on an x61/965gm with the modesetting driver on amd64.
<!-- 2021/12/02 -->
<li>Prevented a potential race which could make <a href="https://man.openbsd.org/umount.8">umount(8)</a> fail spuriously in the installer.
<li>Improved the testing of credentials against inserted FIDO keys, reducing spurious "Confirm user presence" notifications for key handles relating to FIDO keys which are not currently inserted.
<!-- 2021/12/01 -->
<li>Ensured ^C may be used to kill <a href="https://man.openbsd.org/ssh.1">ssh(1)</a> sessions where SessionType=none.
<li>Fixed removal of SAs that could not be flushed with <a href="https://man.openbsd.org/ipsecctl.8">ipsecctl(8)</a> -F.
<li>Fixed booting from an IDE block device on the Sun Blade 100.
<!-- 2021/11/30 -->
<!-- 2021/11/29 -->
<li>Prevented <a href="https://man.openbsd.org/select.2">select(2)</a> from blocking if registering found pending events.
<li>Enabled <a href="https://man.openbsd.org/uhid.4">uhid(4)</a>/<a href="https://man.openbsd.org/fido.4">fido(4)</a> on riscv64.
<li>Unlocked <a href="https://man.openbsd.org/accept.2">accept(2)</a> and <a href="https://man.openbsd.org/accept4.2">accept4(2)</a> syscalls.
<li>Added <a href="https://man.openbsd.org/iked.8">iked(8)</a> -V to display the version.
<!-- 2021/11/28 -->
<li>Prevented a crash in <a href="https://man.openbsd.org/slaacd.8">slaacd(8)</a> due to updating an interface which no longer exists.
<!-- 2021/11/27 -->
<li>Let <a href="https://man.openbsd.org/iwx.4">iwx(4)</a> and <a href="https://man.openbsd.org/iwm.4">iwm(4)</a> use per-Tx-queue interface timers to ensure timeout if a particular Tx queue gets stuck.
<li>Added <a href="https://man.openbsd.org/ssh-keygen.1">ssh-keygen(1)</a> -Y match-principals operation to perform matching of principals names against an allowed signers file.
<!-- 2021/11/26 -->
<li>Dropped support for netscape certificates and server gated keys in <a href="https://man.openbsd.org/openssl.1">openssl(1)</a>.
<!-- 2021/11/25 -->
<li>Released <a href="https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.4.2-relnotes.txt">LibreSSL 3.4.2</a>.
<li>Prevented the possible creation of MBRs with overlapping partitions 0 and 3 in <a href="https://man.openbsd.org/fdisk.8">fdisk(8)</a>.
<!-- 2021/11/24 -->
<li>Fixed a panic when running <a href="https://man.openbsd.org/utvfu.4">utvfu(4)</a> on <a href="https://man.openbsd.org/xhci.4">xhci(4)</a>.
<li>Fixed timestamp printing in Signed Certificate Timestamps.
<!-- 2021/11/23 -->
<li>Switched to calculating <a href="https://man.openbsd.org/pppoe.4">pppoe(4)</a> session duration using system uptime rather than UTC.
<li>Updated to <a href="https://man.openbsd.org/openchrome.4">openchrome(4)</a> 0.6.409.
<li>Switched LLD_ARCHs to <a href="https://man.openbsd.org/llvm-ar.1">llvm-ar(1)</a>.
<!-- 2021/11/22 -->
<li>Introduced <a href="https://man.openbsd.org/pcyrtc.4">pcyrtc(4)</a>, a driver for the NXP PCF85063A/TP RTC chips.
<li>Implemented RFC6840 (AD flag processing) if using trusted name servers.
<li>Aligned memory allocation for USB device drivers and USB HC drivers, enlarging the USB memory pool.
<!-- 2021/11/21 -->
<li>Added <a href="https://man.openbsd.org/ikectl.8">ikectl(8)</a> "show certinfo" to show trusted CAs and certificates.
<li>Introduced <a href="https://man.openbsd.org/iicmux.4">iicmux(4)</a>, a driver that switches between I2C busses connected to a single I2C controller by using the pin muxing facilities of an SoC.
<!-- 2021/11/20 -->
<!-- 2021/11/19 -->
<li>Made <a href="https://man.openbsd.org/config.8">config(8)</a> -c cmdfile use lines from the command file for all input, not just commands. This allows complex actions like changing device parameters.
<li>Allowed interface names as scope-id in IPv6 link-local addresses in <a href="https://man.openbsd.org/unbound.8">unbound(8)</a>.
<li>Made futexes work in shared anonymous memory.
<li>Fixed monitor mode on <a href="https://man.openbsd.org/iwm.4">iwm(4)</a> and <a href="https://man.openbsd.org/iwx.4">iwx(4)</a>.
<!-- 2021/11/18 -->
<!-- 2021/11/17 -->
<li>Made <a href="https://man.openbsd.org/uniq.1">uniq(1)</a> ignore trailing newlines when comparing lines.
<li>Fixed a crash when <a href="https://man.openbsd.org/xrandr.1">xrandr(1)</a> is invoked with X server 21.1.1.
<li>Added display of DNS information from <a href="https://man.openbsd.org/sppp.4">sppp(4)</a> to <a href="https://man.openbsd.org/ifconfig.8">ifconfig(8)</a>.
<li>Disabled active scanning on <a href="https://man.openbsd.org/iwm.4">iwm(4)</a> 9260 and 9560 to prevent a device lockup.
<!-- 2021/11/16 -->
<li>Installed missing scope identifiers for IPv6 link-local addresses for <a href="https://man.openbsd.org/unwind.8">unwind(8)</a> and <a href="https://man.openbsd.org/resolvd.8">resolvd(8)</a>.
<li>Fixed <a href="https://man.openbsd.org/hilkbd.4">hilkbd(4)</a> Swedish keyboard layout on non-PS/2 style keyboards.
<!-- 2021/11/15 -->
<!-- 2021/11/14 -->
<li>Improved and simplified timer handling in <a href="https://man.openbsd.org/rc.d.8">rc.d(8)</a> "stop" and "reload".
<!-- 2021/11/13 -->
<li>Switched to using long filenames by default with <a href="https://man.openbsd.org/mount_msdos.8">mount_msdos(8)</a> on FAT filesystems.
<!-- 2021/11/12 -->
<li>Added support for controlling keyboard LEDs to <a href="https://man.openbsd.org/aplhidev.4">aplhidev(4)</a>.
<li>Implemented the probe variable in <a href="https://man.openbsd.org/bt.5">bt(5)</a>.
<li>Updated <a href="https://man.openbsd.org/awk.1">awk(1)</a> to the Nov 3, 2021 version.
<li>Added support for 40MHz channels to <a href="https://man.openbsd.org/iwn.4">iwn(4)</a>.
<!-- 2021/11/11 -->
<li>Reduced the time overhead of <a href="https://man.openbsd.org/kqueue.2">kqueue(2)</a>-based <a href="https://man.openbsd.org/poll.2">poll(2)</a> and <a href="https://man.openbsd.org/select.2">select(2)</a> systems calls by keeping knotes between the system calls.
<li>Made <a href="https://man.openbsd.org/config.8">config(8)</a> -e work with ramdisk kernels.
<li>Fixed crashes in <a href="https://man.openbsd.org/httpd.8">httpd(8)</a>.
<li>Fixed <a href="https://man.openbsd.org/iwn.4">iwn(4)</a> with 4965 devices.
<li>Retired switch(4), switchd(8) and switchctl(8).
<li>Updated to <a href="https://man.openbsd.org/Xserver.1">Xserver(1)</a> 21.1.1.
<li>Updated to libXi 1.8.
<li>Updated to libXfixes 6.0.0.
<li>Updated to xorgprotos 2021.5.
<li>Updated to fontconfig 2.13.94.
<li>Updated to Freetype 2.11.0.
<!-- 2021/11/10 -->
<li>Added support for PPP IPCP extensions for DNS to <a href="https://man.openbsd.org/sppp.4">sppp(4)</a>.
<li>Fixed broken key exchange negotiation with matching proposals in <a href="https://man.openbsd.org/iked.8">iked(8)</a>.
<!-- 2021/11/09 -->
<li>Added the [email protected] hybrid ECDH/x25519 + Streamlined NTRU Prime post-quantum KEX to the default KEXAlgorithms list fo <a href="https://man.openbsd.org/ssh_config.5">ssh_config(5)</a> and <a href="https://man.openbsd.org/sshd_config.5">sshd_config(5)</a>.
<li>Fixed <a href="https://man.openbsd.org/ssh-keysign.8">ssh-keysign(8)</a> for KEX algorithms that use SHA384/512 exchange hashes.
<li>Added <a href="https://man.openbsd.org/gpiokeys.4">gpiokeys(4)</a> for arm64, a driver which handles events triggered by GPIO keys such as lid status and power button.
<li>Published <a href="https://man.openbsd.org/rpki-client.8">rpki-client</a> 7.5.
<li>Limited the number of publication points under a given TAL in <a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a>.
<!-- 2021/11/08 -->
<li>Documented <a href="https://man.openbsd.org/install.site.5">install.site(5)</a>, OpenBSD installation and upgrade customization.
<!-- 2021/11/07 -->
<li>Fixed handling of interrupts shared between multiple <a href="https://man.openbsd.org/dwiic.4">swiic(4)</a> devices.
<!-- 2021/11/06 -->
<li>Allowed passing a different signal than SIGTERM in the default rc_stop() function in <a href="https://man.openbsd.org/rc.subr.8">rc.subr(8)</a>.
<!-- 2021/11/05 -->
<li>Made the kqread event filter MP-safe.
<li>Corrected <a href="https://man.openbsd.org/httpd.8">httpd(8)</a> version string checking, responding with 505 Version Not Supported rather than 400 Bad Request when the version format is incorrect.
<!-- 2021/11/04 -->
<!-- 2021/11/03 -->
<li>Limited the number of <a href="https://man.openbsd.org/openrsync.1">openrsync(1)</a> processes being spawned by <a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a> to 16.
<li>Fixed <a href="https://man.openbsd.org/ASN1_TIME_diff">ASN1_TIME_diff(3)</a> with NULL times.
<li>Added a cursor-style option to <a href="https://man.openbsd.org/tmux.1">tmux(1)</a>.
<li>Fixed "(null node)" panics on <a href="https://man.openbsd.org/run.4">run(4)</a>.
<!-- 2021/11/02 -->
<li>Improved handling of FIDO keys on tokens which provide user verification on the device itself, including biometric keys.
<li>Corrected "!" escape handling in the installer when accepting WEP/WPA passphrase.
<li>Updated <a href="https://man.openbsd.org/awk.1">awk(1)</a> to the October 12, 2021 version.
<!-- 2021/11/01 -->
<li>Added <a href="https://man.openbsd.org/uniq.1">uniq(1)</a> support for arbitrarily long input lines.
<li>Prevented <a href="https://man.openbsd.org/awk.1">awk(1)</a> access to uninitialized data.
<li>Improved SNI hostname validation.
<li>Stopped binding audio devices exposed by <a href="https://man.openbsd.org/sndiod.8">sndiod(8)</a> to physical devices.
<li>Fixed "null node" panics in <a href="https://man.openbsd.org/run.4">run(4)</a>.
<li>Added a cursor-colour option to <a href="https://man.openbsd.org/tmux.1">tmux(1)</a>.
<li>Added <a href="https://man.openbsd.org/aplhidev.4">aplhidev(4)</a> support for the keyboard/touchpad on Apple M1 laptops.
<!-- 2021/10/31 -->
<li>Enabled RFC 3779 (X.509 Extensions for IP Addresses and AS Identifiers) code in OpenSSl.
<li>Fixed octal escape parsing in <a href="https://man.openbsd.org/tr.1">tr(1)</a> backslash().
<li>Disabled <a href="https://man.openbsd.org/xterm.1">xterm(1)</a> mouse tracking by default.
<li>Added <a href="https://man.openbsd.org/aplspi.4">aplspi(4)</a>, a driver for the SPI controller found on the Apple M1 SoC.
<li>Added <a href="https://man.openbsd.org/igc.4">igc(4)</a>, a driver for the Intel 2.5Gb Ethernet controllers.
<li>Made <a href="https://man.openbsd.org/athn.4">athn(4)</a> attach to the Sony UWA-BR100.
<!-- 2021/10/30 -->
<li>Changed <a href="https://man.openbsd.org/sysctl.8">sysctl(8)</a> default to hw.perfpolicy=auto at startup, defaulting to 100% performance with AC power connected and using the auto algorithm when on battery.
<li>Fixed UNIX domain sockets leak in soclose().
<!-- 2021/10/29 -->
<li>Updated to libepoxy 1.5.9.
<li>Limited <a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a> HTTP requests to 2GB of data.
<li>Implemented <a href="https://man.openbsd.org/openrsync.1">openrsync(1)</a> --max-size and --min-size.
<!-- 2021/10/28 -->
<!-- 2021/10/27 -->
<li>When downloading resident keys from a FIDO token, made <a href="https://man.openbsd.org/ssh.1">ssh(1)</a> pass back the user ID that was used when the key was created and append it to the filename the key was written to (if not the default).
<!-- 2021/10/26 -->
<li>Unlocked the <a href="https://man.openbsd.org/kevent.2">kevent(2)</a> system call.
<li>Updated to libfido2 1.8.0.
<li>Made <a href="https://man.openbsd.org/iked.conf.5">iked.conf(5)</a> proto config option accept a list to allow specifying multiple protocols for a single policy.
<li>Improved unhibernate performance by skipping attach of irrelevant devices.
<li>Enabled <a href="https://man.openbsd.org/vmx.4">vmx(4)</a> on arm64.
<li>Cleaned up irrelevant uses of 3rd mode_t parameter for <a href="https://man.openbsd.org/open.2">open(2)</a>/<a href="https://man.openbsd.org/openat.2">openat(2)</a>, unused when not creating files.
<li>Ensured armv7 and arm64 efiboot allocate fresh memory for the device tree with at least one page of free space to extend into. This fixes booting on VMWare Fusion.
<li>Added rejection of malformed Subject Alternative Names at certificate creation time to LibreSSL.
<!-- 2021/10/25 -->
<li>Added a way to force a color to RGB in <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> and a format to display it.
<li>Fixed <a href="https://man.openbsd.org/pfctl.8">pfctl(8)</a> $nr incorrect macro expansion.
<li>Fixed <a href="https://man.openbsd.org/vi.1">vi(1)</a> use after free with unsaved buffer.
<li>Added -s and -S to <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> display-popup to set popup and border style.
<li>Fixed application-set fg and bg in <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> panes.
<!-- 2021/10/24 -->
<li>Added <a href="https://man.openbsd.org/httpd.8">httpd(8)</a> custom error page facility.
<li>Added mount -ur/uw support to tmpfs.
<li>Unlocked top part of UVM fault hander on mips64.
<li>Used <a href="https://man.openbsd.org/unveil.2">unveil(2)</a> for the possible <a href="https://man.openbsd.org/btrace.8">btrace(8)</a> script file, <a href="https://man.openbsd.org/dt.4">dt(4)</a> and <a href="https://man.openbsd.org/ksyms.4">ksyms(4)</a> nodes.
<li>Used <a href="https://man.openbsd.org/ifconfig.8">ifconfig(8)</a> "join" command by default in <a href="https://man.openbsd.org/hostname.if.5">hostname.if(5)</a> files, replacing the old "nwid".
<li>Switched <a href="https://man.openbsd.org/nsd.8">nsd(8)</a> to enable default DNS cookies on, matching behavior as released in OpenBSD 7.0.
<li>Updated to <a href="https://man.openbsd.org/nsd.8">nsd(8)</a> 4.3.8.
<li>Implemented <a href="https://man.openbsd.org/poll.2">poll(2)</a>, <a href="https://man.openbsd.org/select.2">select(2)</a>, <a href="https://man.openbsd.org/ppoll.2">ppoll(2)</a> and <a href="https://man.openbsd.org/pselect.2">pselect(2)</a> on top of kqueue.
<li>Stopped prompting whether to fall back to HTTP in the installer, making the fallback automatic.
<li>Fixed a panic by prohibiting renames of tmpfs mount-points.
<li>Set klist lock for sockets to make socket event filters MP-safe.
<li>Made pipe event filters MP-safe.
<!-- 2021/10/23 -->
<li>In <a href="https://man.openbsd.org/httpd.8">httpd(8)</a>, stopped sending content alongside responses to HEAD requests.
<li>Stopped duplicating "Connection: close" headers in <a href="https://man.openbsd.org/relayd.8">relayd(8)</a>, only adding it if it's not a websocket response.
<li>Provided common <a href="https://man.openbsd.org/btrace.8">btrace(8)</a> scripts kprofile.bt (to save kernel stackframes and produce flamegraphs) and runqlat.bt (to measure the latency of the scheduler runqueues).
<li>Added call to <a href="https://man.openbsd.org/unveil.2">unveil(2)</a> to restrict <a href="https://man.openbsd.org/stty.1">stty(1)</a> -f filesystem access.
<li>Added support for tpm2 CRB interface to <a href="https://man.openbsd.org/tpm.4">tpm(4)</a>, fixing recent S4 regressions on the Surface Go 2 caused by a firmware change.
<li>Retired asynchronous crypto API.
<li>Added new OpenSSL api SSL_write_ex, SSL_read_ex and SSL_peek_ex.
<li>Annotated an <a href="https://man.openbsd.org/httpd.8">httpd(8)</a> 413 error with "request body too large" in the error log.
<li>Fixed double free after allocation failure in <a href="https://man.openbsd.org/bpf.4">bpf(4)</a>.
<li>Provided a way to determine our maximum legacy version for TLS in libssl, unbreaking RSA KEX for the TLS client when the non-version specific method is used with TLSv1.0 or TLSv1.1.
<li>Called <a href="https://man.openbsd.org/pledge.2">pledge(2)</a> later to prevent it from killing various games using ncurses when both stdout and stderr are redirected to a non-tty.
<li>Removed unusable <a href="https://man.openbsd.org/route.8">route(8)</a> -T and exec support from ramdisk.
<li>Reinstated the fips mode test functions to libcrypto.
<li>Added <a href="https://man.openbsd.org/rcctl.8">rcctl(8)</a> "ls rogue" to show daemons which are running but not set as "enabled" in <a href="https://man.openbsd.org/rc.conf.local.8">rc.conf.local(8)</a>.
<li>Fixed a potential buffer overflow in <a href="https://man.openbsd.org/openssl.1">openssl(1)</a> certhash.
<!-- 2021/10/22 -->
<li>Renamed Pacific/Enderbury timezone to Pacific/Kanton.
<li>Fixed an interrupt storm on <a href="https://man.openbsd.org/dwge.4">dwge(4)</a> variants which support Energy Efficient Ethernet when connected to a switch which does so as well.
<li>Ensured enabled resolvers are honored by <a href="https://man.openbsd.org/unwind.8">unwind(8)</a> to keep unused forwarders disabled properly.
<li>Implemented <a href="https://man.openbsd.org/rsync.1">rsync(1)</a> --compare-dest, allowing specification of additional directories to check for files to be available.
<li>Prevented <a href="https://man.openbsd.org/ssh.1">ssh(1)</a> memory leak if getaddrinfo returns no addresses.
<li>Added protocol version checking to <a href="https://man.openbsd.org/httpd.8">httpd(8)</a>.
<!-- 2021/10/21 -->
<li>Ensured use of the correct encoding in xenocara when /etc/kbdtype is present with an attached <a href="https://man.openbsd.org/ucc.4">ucc(4)</a> keyboard.
<li>Removed hifn(4), safe(4) and ubsec(4) crypto drivers.
<li>Removed <a href="https://man.openbsd.org/fdisk.8">fdisk(8)</a> "disk" editing command.
<li>Fixed <a href="https://man.openbsd.org/httpd.8">httpd(8)</a> to respond with 400 Bad Request when a client sends header lines without a colon.
<li>Bumped to LibreSSL 3.5.0.
<li>Added -T to set a popup title in <a href="https://man.openbsd.org/tmux.1">tmux(1)</a>.
<!-- 2021/10/20 -->
<li>Stopped ignoring <a href="https://man.openbsd.org/carp.4">carp(4)</a> interfaces in <a href="https://man.openbsd.org/dhcpleased.8">dhcpleased(8)</a>.
<!-- 2021/10/19 -->
<!-- 2021/10/18 -->
<li>Removed an unused decoding of c/h/s from the MBR read from disk by <a href="https://man.openbsd.org/fdisk.8">fdisk(8)</a>.
<!-- 2021/10/17 -->
<li>Updated to <a href="https://man.openbsd.org/xterm.1">xterm(1)</a> 369.
<!-- 2021/10/16 -->
<li>Corrected installer to use "inet autoconf" properly for <a href="https://man.openbsd.org/hostname.if.5">hostname.if(5)</a> files.
<!-- 2021/10/15 -->
<li>Returned to use of the SFTP protocol for <a href="https://man.openbsd.org/scp.1">scp(1)</a>.
<li>Added initial 40MHz support to the <a href="https://man.openbsd.org/iwx.4">iwx(4)</a> driver.
<li>Fixed a problem with repeat in <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> copy mode.
<!-- 2021/10/14 -->
<li>Released <a href="https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.4.1-relnotes.txt">LibreSSL 3.4.1</a>.
<li>Replaced <a href="https://man.openbsd.org/lrint.3">lrint(3)</a>, <a href="https://man.openbsd.org/lrintf.3">lrintf(3)</a>, <a href="https://man.openbsd.org/llrint.3">llrint(3)</a> and <a href="https://man.openbsd.org/llrintf.3">llrintf(3)</a> implementations from NetBSD with the existing FreeBSD implementations we were already using for <a href="https://man.openbsd.org/lrintl.3">lrintl(3)</a> and <a href="https://man.openbsd.org/llrintl.3">llrintl(3)</a>.
<li>Fixed a <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> redraw problem on automargin terminals.
<!-- 2021/10/13 -->
<li>Modified <a href="https://man.openbsd.org/syslog.conf.5">syslog.conf(5)</a> examples to use TLS rather than the plaintext protocols.
<li>Fixed file descriptor leak of /dev/tty on <a href="https://man.openbsd.org/doas.1">doas(1)</a> auth failure.
<li>Added <a href="https://man.openbsd.org/realpath.1">realpath(1)</a>, a wrapper for <a href="https://man.openbsd.org/realpath.3">realpath(3)</a> for use in ports.
<!-- 2021/10/12 -->
<li>Enabled enforcing of RLIMIT_MEMLOCK on powerpc64.
<li>Reverted to use <a href="https://man.openbsd.org/iwm.4">iwm(4)</a> firmware v17 on Intel AC 7265, fixing instability issues on X1 Carbon gen3.
<li>Cached the old BSSID when roaming with <a href="https://man.openbsd.org/iwx.4">iwx(4)</a>.
<li>Explicitly stopped <a href="https://man.openbsd.org/iwx.4">iwx(4)</a> Rx block ack when roaming between access points.
<!-- 2021/10/11 -->
<li>Added support for 802.11n 40MHz channels to the <a href="https://man.openbsd.org/iwm.4">iwm(4)</a> driver.
<li>Added monitoring of 20/40MHz channel width changes in beacons sent by our access point, notifying drivers when the channel width has changed.
<!-- 2021/10/10 -->
<li>Added support for 40MHz channels to net80211 RA.
<li>Fixed establishing legacy INTx interrupts on machines without a (usable) MSI interrupt controller.
<!-- 2021/10/09 -->
<li>Merged bugfixes from upstream into <a href="https://man.openbsd.org/less.1">less(1)</a> including fixes for the prompt hiding feature (CTRL-P) and an integer overflow.
<!-- 2021/10/08 -->
<!-- 2021/10/07 -->
<li>Cached the old BSSID when roaming with <a href="https://man.openbsd.org/iwm.4">iwm(4)</a> so firmware commands can continue using it while roaming to a new AP.
<!-- 2021/10/06 -->
<li>Stopped <a href="https://man.openbsd.org/pkg_add.1">pkg_add(1)</a> from communicating warnings starting with "XXX" which appeared to indicate errors.
<li>Ensured <a href="https://man.openbsd.org/iwm.4">iwm(4)</a> uses only the HT (high throughput) frame format for data frames.
<li>Allowed AUTH->AUTH state transitions in the <a href="https://man.openbsd.org/iwm.4">iwm(4)</a> and <a href="https://man.openbsd.org/iwx.4">iwx(4)</a> drivers again, needed if the access point uses band-steering.
<li>Removed the <a href="https://man.openbsd.org/ifconfig.8">ifconfig(8)</a> autoconfprivacy deprecation warning.
<!-- 2021/10/05 -->
<li>Retired the Loongson platform.
<li>Fixed <a href="https://man.openbsd.org/iwm.4">iwm(4)</a> performance drop after roaming between APs in 11n mode.
<!-- 2021/10/04 -->
<li>Applied a workaround in <a href="https://man.openbsd.org/mvkpcie.4">mvkpcie(4)</a> to fix an external abort under load with <a href="https://man.openbsd.org/athn.4">athn(4)</a>.
<!-- 2021/10/03 -->
<li>Added relicensed wireless firmwares from Realtek for <a href="https://man.openbsd.org/rsu.4">rsu(4)</a>, <a href="https://man.openbsd.org/rtwn.4">rtwn(4)</a> and <a href="https://man.openbsd.org/urtwn.4">urtwn(4)</a> devices, allowing these devices to work without requiring a separate firmware download.
<li>Added a workaround for buggy <a href="https://man.openbsd.org/athn.4">athn(4)</a> devices to prevent filling up the node cache when used in hostap mode.
<!-- 2021/10/02 -->
<li>Made redistributable firmwares available across all architectures.
<li>Fixed memory leak in <a href="https://man.openbsd.org/fuse.4">fuse(4)</a> when calling <a href="https://man.openbsd.org/namei.9">namei(9)</a>.
<li>Fixed a panic when <a href="https://man.openbsd.org/iwx.4">iwx(4)</a> cannot find firmware at boot time.
<!-- 2021/10/01 -->
<li>Released LibreSSL <a href="https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.3.5-relnotes.txt">3.3.5</a> and <a href="https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.2.7-relnotes.txt">3.2.7</a>.
<!-- 2021/09/30 -->
<li>Enabled X509_V_FLAG_TRUSTED_FIRST by default in the legacy verifier.
<li>Deleted expired DST Root CA X3.
<li>Prevented <a href="https://man.openbsd.org/iwm.4">iwm(4)</a> and <a href="https://man.openbsd.org/iwx.4">iwx(4)</a> attempts to transition toward the same state where this would result in a redundant or illegal state transition and a potential hang.
<!-- 2021/09/29 -->
<li>Removed the constraint that <a href="https://man.openbsd.org/fdisk.8">fdisk(8)</a> -b specified block count or block size must be greater than 63.
<li>Added support to <a href="https://man.openbsd.org/pchgpio.4">pchgpio(4)</a> for Cannon Lake H and Tiger Lake H platforms.
<!-- 2021/09/28 -->
<!-- 2021/09/27 -->
<li>Fixed a crash in <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> when a session with multiple clients is destroyed but tmux does not close completely due to other sessions.
<!-- 2021/09/26 -->
<!-- 2021/09/25 -->
<li>Introduced <a href="https://man.openbsd.org/gpiocharger.4">gpiocharger(4)</a>, a driver providing support for battery chargers connected to GPIO pins, such as those found on the Pinebook Pro.
<li>Introduced <a href="https://man.openbsd.org/gpioleds.4">gpioleds(4)</a> for arm64, a driver providing support for LEDs connected to GPIO pins, such as those found on the Pinebook Pro.
<!-- 2021/09/24 -->
<li>Reset the Tx timer upon validation of a BA notification sent by <a href="https://man.openbsd.org/iwx.4">iwx(4)</a> and <a href="https://man.openbsd.org/iwm.4">iwm(4)</a> firmware.
<!-- 2021/09/23 -->
<li>Added support to <a href="https://man.openbsd.org/umb.4">umb(4)</a> for SIMCom SIM7600.
<li>Released <a href="https://man.openbsd.org/rpki-client.8">rpki-client</a> 7.3.
<li>Removed wpath from <a href="https://man.openbsd.org/less.1">less(1)</a> secure mode pledge.
<li>Added <a href="https://man.openbsd.org/iwx.4">iwx(4)</a> Tx aggregation support.
<li>Added an ADDBA_OFFLOAD capability for wifi devices to manage Tx block ack sessions entirely in firmware.
<li>Released <a href="https://man.openbsd.org/bgpd.8">OpenBGPD</a> 7.2.
<!-- 2021/09/22 -->
<li>Cleared length of keys in <a href="https://man.openbsd.org/vnconfig.8">vnconfig(8)</a> alongside keys themselves.
</ul>