-
Notifications
You must be signed in to change notification settings - Fork 43
/
Copy pathplus74.html
824 lines (818 loc) · 65.7 KB
/
plus74.html
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
<!doctype html>
<html lang=en id=plus>
<meta charset=utf-8>
<title>OpenBSD 7.4 Changelog</title>
<meta name="description" content="OpenBSD 7.4 changes">
<meta name="viewport" content="width=device-width, initial-scale=1">
<link rel="stylesheet" type="text/css" href="openbsd.css">
<link rel="canonical" href="https://www.openbsd.org/plus74.html">
<style>
strong {
color: var(--red);
font-weight: normal;
}
h3 {
color: var(--blue);
}
</style>
<h2 id=OpenBSD>
<a href="index.html">
<i>Open</i><b>BSD</b></a>
7.4 Changelog
</h2>
<hr>
<p>
This selection is intended to include all important
and all user-visible changes.
For a complete record of all changes, please see the "source-changes"
mailing list, called "OpenBSD CVS"
in the <a href="https://marc.info/?l=openbsd-cvs">archives</a>,
or use <a href="anoncvs.html#CVS">CVS</a>.
<p>
For changes in other releases, click below:<br>
<a href="plus20.html">2.0</a>,
<a href="plus21.html">2.1</a>,
<a href="plus22.html">2.2</a>,
<a href="plus23.html">2.3</a>,
<a href="plus24.html">2.4</a>,
<a href="plus25.html">2.5</a>,
<a href="plus26.html">2.6</a>,
<a href="plus27.html">2.7</a>,
<a href="plus28.html">2.8</a>,
<a href="plus29.html">2.9</a>,
<a href="plus30.html">3.0</a>,
<a href="plus31.html">3.1</a>,
<a href="plus32.html">3.2</a>,
<a href="plus33.html">3.3</a>,
<a href="plus34.html">3.4</a>,
<a href="plus35.html">3.5</a>,
<a href="plus36.html">3.6</a>,
<br>
<a href="plus37.html">3.7</a>,
<a href="plus38.html">3.8</a>,
<a href="plus39.html">3.9</a>,
<a href="plus40.html">4.0</a>,
<a href="plus41.html">4.1</a>,
<a href="plus42.html">4.2</a>,
<a href="plus43.html">4.3</a>,
<a href="plus44.html">4.4</a>,
<a href="plus45.html">4.5</a>,
<a href="plus46.html">4.6</a>,
<a href="plus47.html">4.7</a>,
<a href="plus48.html">4.8</a>,
<a href="plus49.html">4.9</a>,
<a href="plus50.html">5.0</a>,
<a href="plus51.html">5.1</a>,
<a href="plus52.html">5.2</a>,
<a href="plus53.html">5.3</a>,
<br>
<a href="plus54.html">5.4</a>,
<a href="plus55.html">5.5</a>,
<a href="plus56.html">5.6</a>,
<a href="plus57.html">5.7</a>,
<a href="plus58.html">5.8</a>,
<a href="plus59.html">5.9</a>,
<a href="plus60.html">6.0</a>,
<a href="plus61.html">6.1</a>,
<a href="plus62.html">6.2</a>,
<a href="plus63.html">6.3</a>,
<a href="plus64.html">6.4</a>,
<a href="plus65.html">6.5</a>,
<a href="plus66.html">6.6</a>,
<a href="plus67.html">6.7</a>,
<a href="plus68.html">6.8</a>,
<a href="plus69.html">6.9</a>,
<a href="plus70.html">7.0</a>,
<br>
<a href="plus71.html">7.1</a>,
<a href="plus72.html">7.2</a>,
<a href="plus73.html">7.3</a>,
<a href="plus75.html">7.5</a>,
<a href="plus76.html">7.6</a>,
<a href="plus77.html">7.7</a>,
<a href="plus.html">current</a>.
<br>
<p>
<h3>Changes made between OpenBSD 7.3 and 7.4</h3>
<p>
<ul>
<!-- 2023/10/01 -->
<li>Added <a href="https://man.openbsd.org/sysctl.2">sysctl(2)</a> hw.ucomnames to list "fixed" paths to USB serial ports.
<li>Fixed an <a href="https://man.openbsd.org/aq.4">aq(4)</a> issue where Atlantic 2 hardware would stop transmitting packets under load on the M2 Pro Mac mini.
<!-- 2023/09/30 -->
<!-- 2023/09/29 -->
<li>Replaced kernel lock with mutex in <a href="https://man.openbsd.org/ixl.4">ixl(4)</a> media status, preventing a potential deadlock.
<li>Fixed crashes with <a href="https://man.openbsd.org/ipsecctl.8">ipsecctl(8)</a> -m by only forwarding validated pfkey messages to promiscuous listeners.
<li>Bumped <a href="https://man.openbsd.org/smtpd.8">smtpd(8)</a> to 7.4.0.
<li>Extended single_thread_set() mode with additional flag attributes SINGLE_DEEP and SINGLE_NOWAIT.
<!-- 2023/09/28 -->
<li>Bumped <a href="https://man.openbsd.org/bgpd.8">OpenBGPD</a> to 8.2.
<!-- 2023/09/27 -->
<li>Prevented <a href="https://man.openbsd.org/fw_update.8">fw_update(8)</a> from registering firmware already in /var/db/pkg.
<li>Corrected exit from <a href="https://man.openbsd.org/fw_update.8">fw_update(8)</a>.
<li>Made <a href="https://man.openbsd.org/fw_update.8">fw_update(8)</a> download firmware to LOCALSRC when using filenames.
<li>Made <a href="https://man.openbsd.org/deroff.1">deroff(1)</a> use a dynamically-allocated line buffer and resize as needed, fixing a buffer overflow for lines over 2048 bytes.
<!-- 2023/09/26 -->
<li>Used existing 'audio_lock' <a href="https://man.openbsd.org/mutex.9">mutex(9)</a> to make 'midi{read,write}_filtops' MP safe.
<li>Had <a href="https://man.openbsd.org/wg.4">wg(4)</a> copy the priority from the inner packet to the outer encrypted packet, so that higher priority packets are picked from hfsc queues for earlier transmission.
<!-- 2023/09/25 -->
<li>Disambiguated <a href="https://man.openbsd.org/vmd.8">vmd(8)</a> log messages per vm and device. Fixed updating log settings dynamically via <a href="https://man.openbsd.org/vmctl.8">vmctl(8)</a>. The "vmm" process now updates its own state properly, so settings survive vm reboots.
<li>Fixed a <a href="https://man.openbsd.org/vmd.8">vmd(8)</a> vm pause deadlock.
<li>Implemented <a href="https://man.openbsd.org/apldart.4">apldart(4)</a> support for stream IDs.
<li>Added <a href="https://man.openbsd.org/mbg.4">mbg(4)</a> support for the Meinberg PZF180PEX DCF77 time signal station receiver card.
<li>Enabled <a href="https://man.openbsd.org/mbg.4">mbg(4)</a> at pci on amd64.
<!-- 2023/09/24 -->
<li>Dropped PTE check in riscv64 pmap_fault_fixup(), resulting in performance improvements.
<!-- 2023/09/23 -->
<li>Introduced <a href="https://man.openbsd.org/stfrng.4">stfrng(4)</a>, a driver for the random number generator on the JH7110 SoC.
<li>Log the <a href="https://man.openbsd.org/vmd.8">vmd(8)</a> vm id instead of the kernel <a href="https://man.openbsd.org/vmm.4">vmm(4)</a> id in vcpu_run_loop.
<!-- 2023/09/22 -->
<li>Introduced 'hotplug_mtx' <a href="https://man.openbsd.org/mutex.9">mutex(9)</a> and made 'hotplug_filtops' MP safe.
<li>Made 'logread_filterops' MP safe.
<li>Significantly increased the speed of <a href="https://man.openbsd.org/pkg-config.1">pkg-config(1)</a>.
<!-- 2023/09/21 -->
<li>Enabled <a href="https://man.openbsd.org/softraid.4">softraid(4)</a> in powerpc64 RAMDISK.
<!-- 2023/09/20 -->
<li>Bumped LibreSSL to 3.8.2.
<!-- 2023/09/19 -->
<li>Improved the output of <a href="https://man.openbsd.org/ddb.4">ddb(4)</a> "show proc" command and added "/t" as an argument that can be used to specify a proc by TID instead of address.
<!-- 2023/09/18 -->
<li>Disabled utf-8 for non-multibyte locales in <a href="https://man.openbsd.org/awk.1">awk(1)</a>, making it possible to get the old awk behavior (where chars are bytes) by setting LC_CTYPE to C or POSIX.
<li>Moved to 7.4-beta.
<!-- 2023/09/17 -->
<li>Updated <a href="https://man.openbsd.org/awk.1">awk(1)</a> to the Sep 12, 2023 version, corresponding to the 2nd edition of "The AWK Programming Language" and adding support for UTF-8 and comma-separated value inputs.
<!-- 2023/09/16 -->
<li>Allowed <a href="https://man.openbsd.org/counters_read.9">counters_read(9)</a> to take an optional scratch buffer, allowing the <a href="https://man.openbsd.org/ddb.4">ddb(4)</a> show uvmexp command to work in OOM situations.
<!-- 2023/09/15 -->
<li>Added <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> source-file -t option to specify a target pane.
<!-- 2023/09/14 -->
<li>Used zero-copy approach and vectored io in <a href="https://man.openbsd.org/vmd.8">vmd(8)</a>/<a href="https://man.openbsd.org/vioblk.4">vioblk(4)</a>, reducing memcpy and multiple read/write syscalls per io transaction.
<!-- 2023/09/13 -->
<!-- 2023/09/12 -->
<!-- 2023/09/11 -->
<li>Implemented tuples in <a href="https://man.openbsd.org/btrace.8">btrace(8)</a>, allowing export of per-CPU scheduling data.
<li>Prevented <a href="https://man.openbsd.org/unwind.8">unwind(8)</a> entering a loop due to constant ENOBUF receipt.
<!-- 2023/09/10 -->
<li>Updated <a href="https://man.openbsd.org/awk.1">awk(1)</a> to the Sep 6, 2023 version.
<li>Load amd patch into a <a href="https://man.openbsd.org/malloc.3">malloc'd</a> region to make it page aligned, avoiding a General-Protection Exception on patch loader wrmsr with A10-5700, TN-A1 00610f01 15-10-01.
<!-- 2023/09/09 -->
<li>Updated <a href="https://man.openbsd.org/awk.1">awk(1)</a> to the Dec 15, 2022 version: Force hex escapes in strings to be no more than two characters, as they already are in regular expressions.
<li>Corrected TP-LINK bluetooth ID in <a href="https://man.openbsd.org/ure.4">ure(4)</a>.
<!-- 2023/09/08 -->
<!-- 2023/09/07 -->
<li>Added a request or response declaration feature used through the <a href="https://man.openbsd.org/radiusd.8">radiusd(8)</a> module interface, allowing additional modules to modify RADIUS request or response messages.
<li>Fixed <a href="https://man.openbsd.org/scp.1">scp(1)</a> in SFTP mode recursive upload and download of directories that contain symlinks to other directories.
<li>Treat consecutive paragraph indicators as different paragraphs in <a href="https://man.openbsd.org/vi.1">vi(1)</a>.
<!-- 2023/09/06 -->
<li>Allowed override of Subsystem directives in <a href="https://man.openbsd.org/sshd.8">sshd(8)</a> Match blocks.
<li>Converted exclusive to shared net lock for ip_send() and ip6_send().
<!-- 2023/09/05 -->
<li>Reduced latency in vcpu work related to i/o by removing an <a href="https://man.openbsd.org/ioctl.2">ioctl(2)</a> from the vcpu thread hotpath in <a href="https://man.openbsd.org/vmd.8">vmd(8)</a>.
<li>Switched the APMI CPUID mask to an include mask in <a href="https://man.openbsd.org/vmm.4">vmm(4)</a>.
<li>Fixed a problem with <a href="https://man.openbsd.org/em.4">em(4)</a> where the I217-LM would fail to receive packets for some of the programmed multicast addresses.
<Li>Made <a href="https://man.openbsd.org/ksmn.4">ksmn(4)</a> attach to 19h/4x devices.
<li>Updated to <a href="https://man.openbsd.org/unbound.8">unbound(8)</a> to 1.18.0.
<li>Fixed touchpads on newer <a href="https://man.openbsd.org/apldc.4">apldc(4)</a> device trees.
<!-- 2023/09/04 -->
<li>Fixed <a href="https://man.openbsd.org/netstat.1">netstat(1)</a> output of uses of current SYN cache left.
<li>Made <a href="https://man.openbsd.org/ssh-keygen.1">ssh-keygen(1)</a> generate Ed25519 keys when invoked without arguments.
<!-- 2023/09/03 -->
<li>Set interactive mode for <a href="https://man.openbsd.org/ssh.1">ssh(1)</a> ControlPersist sessions if they originally requested a tty, enabling keystroke timing obfuscation for most ControlPersist sessions.
<li>Allowed UDP for built-in <a href="https://man.openbsd.org/inetd.8">inetd(8)</a> services on 127.0.0.1.
<!-- 2023/09/02 -->
<li>Replaced perl's use of <a href="https://man.openbsd.org/syscall.2">syscall(2)</a> with a dispatcher to libc, removing the ability to do direct syscalls from perl.
<li>Added <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> Setulc1 for setting underline color for ANSI or 256 colors.
<li>Used a hardware-based number of KDF rounds by default for passphrases in <a href="https://man.openbsd.org/bioctl.8">bioctl(8)</a> using [-r auto].
<li>Prevented a crash of <a href="https://man.openbsd.org/iwm.4">iwm(4)</a> when aircrack-ng attempts to inject frames via bpf in monitor mode.
<!-- 2023/09/01 -->
<li>Prevented virtio block device stalls due to race conditions with the i8259 in <a href="https://man.openbsd.org/vmd.8">vmd(8)</a>.
<li>Added <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> detach-on-destroy "previous" and "next" argumennts to switch the client to the previous or next session in alphabetical order.
<!-- 2023/08/31 -->
<li>Corrected a bug where <a href="https://man.openbsd.org/fw_update.8">fw_update(8)</a> exiting unexpectedly would mean the package database never unlocked.
<li>Improved feedback from <a href="https://man.openbsd.org/fw_update.8">fw_update(8)</a> by using a spinner to show status rather than printing only at the end.
<!-- 2023/08/30 -->
<li>Preempt a running proc even if there is no other process/thread queued on that CPU's runqueue. Should fix a problem where RLIMIT_CPU is unreliable on idle systems.
<!-- 2023/08/29 -->
<li>Added FDT support for <a href="https://man.openbsd.org/dwiic.4">dwiic(4)</a>.
<!-- 2023/08/28 -->
<li>Made <a href="https://man.openbsd.org/sshd_config.5">sshd_config(5)</a> first-match-wins.
<li>Limit artificial login delay to a reasonable maximum (5 seconds) and don't delay at all for the "none" <a href="https://man.openbsd.org/ssh.1">ssh(1)</a> authentication mechanism.
<!-- 2023/08/27 -->
<li>Added keystroke timing obfuscation to the ssh client via a new <a href="https://man.openbsd.org/ssh_config.5">ssh_config(5)</a> ObscureKeystrokeTiming keyword.
<li>Added a pair of <a href="https://man.openbsd.org/ssh.1">ssh(1)</a> transport protocol messages to implement a ping capability.
<!-- 2023/08/26 -->
<li>Adapted <a href="https://man.openbsd.org/glxclk.4">glxclk(4)</a> for clockintr.
<li>Fixed <a href="https://man.openbsd.org/iwx.4">iwx(4)</a> scan command such that the driver selects an SSID during bgscan, a possible fix for fatal firmware error 0x20002806.
<!-- 2023/08/25 -->
<!-- 2023/08/24 -->
<!-- 2023/08/23 -->
<li>Added -c to <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> run-shell to set working directory.
<!-- 2023/08/22 -->
<li>Separated cpu_initclocks() from cpu_startclock() on all platforms, allowing the primary CPU an opportunity to perform clock interrupt preparation in a machine-independent manner.
<!-- 2023/08/21 -->
<li>Made alpha stop running an independent schedclock() and removed the scaffolding. All platforms now call schedclock() from statclock() at an effective schedhz of ~12.5.
<li>Ensured the installer continues until passphrase is confirmed correctly with <a href="https://man.openbsd.org/bioctl.8">bioctl(8)</a> rather than bailing out after three failed attempts.
<li>Made <a href="https://man.openbsd.org/bioctl.8">bioctl(8)</a> allow retry of passphrase on mismatch by default, like <a href="https://man.openbsd.org/passwd.1">passwd(1)</a>.
<li>Made <a href="https://man.openbsd.org/bioctl.8">bioctl(8)</a> print <a href="https://man.openbsd.org/softraid.4">softraid(4)</a> errors on standard error.
<!-- 2023/08/20 -->
<li>Made <a href="https://man.openbsd.org/kdump.1">kdump(1)</a> show <a href="https://man.openbsd.org/kqueue1.2">kqueue1(2)</a> flags.
<li>Bumped zlib version to 1.3.
<li>Added the <a href="https://man.openbsd.org/kqueue1.2">kqueue1()</a> system call, adapted from NetBSD, identical to kqueue() except that the close-on-exec flag on the new file descriptor is determined by the O_CLOEXEC flag in the flags argument.
<!-- 2023/08/19 -->
<!-- 2023/08/18 -->
<li>Check for and disable powerpc64 cores that fail to start.
<li>Made <a href="https://man.openbsd.org/bioctl.8">bioctl(8)</a> -s read passphrases without prompts or confirmation.
<li>Replaced uvm_meter() with update_loadav() for calculating the loadavg, using a simple timeout instead of being called via schedcpu().
<li>Fixed the <a href="https://man.openbsd.org/radiusd.8">radiusd(8)</a> config parser to allow comment lines within the "client" block and improve error messages.
<!-- 2023/08/17 -->
<li>Added <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> session, pane and user mouse range types for the status line and add format variables for mouse_status_line and mouse_status_range so they can be associated with different commands in the key bindings.
<!-- 2023/08/16 -->
<li>Removed per-AFI ASPA handling in <a href="https://man.openbsd.org/bgpd.8">bgpd(8)</a> internals but continued to allow the old syntax in aspa-set tables.
<!-- 2023/08/15 -->
<li>Dropped MSDOSFS from i386 floppy.
<li><a href="https://man.openbsd.org/pledge.2">Pledged</a> <a href="https://man.openbsd.org/ldd.1">ldd(1)</a> "stdio rpath proc exec prot_exec", dropping either "proc" or "prot_exec" at the <a href="https://man.openbsd.org/dlopen.3">dlopen(3)</a> vs. <a href="https://man.openbsd.org/execve.2">execve(2)</a> split.
<li>Added <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> option menu-selected-style to configure the currently selected menu item.
<!-- 2023/08/14 -->
<li>Extended scheduler tracepoints to follow CPU jumping.
<li>Avoided issuing syscalls on a file descriptor invalidated following a socket error condition in <a href="https://man.openbsd.org/nc.1">nc(1)</a>.
<!-- 2023/08/13 -->
<li>Improved <a href="https://man.openbsd.org/pckbd.4">pckbd(4)</a> attachment to Chromebook keyboards.
<!-- 2023/08/12 -->
<li>Improved <a href="https://man.openbsd.org/uwacom.4">uwacom(4)</a> support for Intuos S and One S tablets.
<li>Prevented <a href="https://man.openbsd.org/ihidev.4">ihidev(4)</a> power down if the device is already opened, for cases such as an <a href="https://man.openbsd.org/ikbd.4">ikbd(4)</a> attaching to become the console keyboard, then userland opening it only once as an input device so it remains unusable after powering down.
<!-- 2023/08/11 -->
<li>Added <a href="https://man.openbsd.org/iked.8">iked(8)</a> support for route-based <a href="https://man.openbsd.org/sec.4">sec(4)</a> tunnels.
<!-- 2023/08/10 -->
<li>Prevented potential reuse of softraid CRYPTO volumes when installing.
<li>Allowed libpcap to read files with additional link-layer type values, providing translation between DLT_* and LINKTYPE_* values.
<li>Added .VARIABLES to <a href="https://man.openbsd.org/make.1">make(1)</a> to list all the names of global variables that have been set.
<li>Corrected display of <a href="https://man.openbsd.org/ldomctl.8">ldomctl(8)</a> 'status' to show zero utilization for stopped guests.
<!-- 2023/08/09 -->
<li>Bumped <a href="https://man.openbsd.org/ssh.1">OpenSSH</a> to 9.4.
<!-- 2023/08/08 -->
<li>Added <a href="https://man.openbsd.org/dmesg.8">dmesg(8)</a> display of x86 cpu patch level.
<li>Added <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> flag to next-prompt/previous-prompt to go to command output instead.
<li>Added <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> options and flags for menu styles similar to those existing for popups.
<li>Extended the <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> menu drawing function to support custom characters and styles.
<!-- 2023/08/07 -->
<li>Made <a href="https://man.openbsd.org/dwqe.4">dwqe(4)</a> work at 1000baseT.
<li>Repaired powerdown on Tadpole Ultrabook IIe.
<!-- 2023/08/06 -->
<li>Added support for route-based ipsec vpn negotiation with <a href="https://man.openbsd.org/sec.4">sec(4)</a> via <a href="https://man.openbsd.org/isakmpd.8">isakmpd(8)</a> to <a href="https://man.openbsd.org/ipsecctl.8">ipsecctl(8)</a> and added "interface secX" for use instead of specifying tunnel/transport modes and traffic selectors.
<li>Supported configuring interface SAs for route-based ipsec vpns to <a href="https://man.openbsd.org/isakmpd.8">isakmpd(8)</a> with use of "Interface NUMBER".
<li>Allowed userland to install (and see) security associations for route-based ipsec vpns.
<li>Introduced <a href="https://man.openbsd.org/sec.4">sec(4)</a>, providing point-to-point tunnel interfaces for IPv4 and IPv6 protected by the <a href="https://man.openbsd.org/ipsec.4">ipsec(4)</a> Encapsulating Security Payload (ESP) protocol.
<li>Started adding support for route-based ipsec vpns.
<!-- 2023/08/05 -->
<!-- 2023/08/04 -->
<li>Added support for 8bpp X server on LUNA.
<li>Applied <a href="https://man.openbsd.org/ssh.1">ssh(1)</a> ConnectTimeout to multiplexing local socket connections.
<!-- 2023/08/03 -->
<li>Enable vlan stripping of LRO packets in <a href="https://man.openbsd.org/ix.4">ix(4)</a>.
<li>Remove the per-cpu load average calculation.
<!-- 2023/08/02 -->
<li>Set a low water mark on scsi_xfer_pool and prime it so the pagedaemon can write out pages to swap when we're out of physical memory.
<li>Added padding to align on an 8-byte boundary to Xinput on luna88k.
<li>Prevented bad memory accesses seen with page flipping on alder lake and raptor lake.
<!-- 2023/08/01 -->
<li>Fixed mmap-ing size for LUNA framebuffer.
<!-- 2023/07/31 -->
<li>Added AXP15060 support to <a href="https://man.openbsd.org/axppmic.4">axppmic(4)</a>.
<li>Implemented audio input source selection in <a href="https://man.openbsd.org/onyx.4">onyx(4)</a>.
<!-- 2023/07/30 -->
<li>Ensured retpolines will not serve as a net negative on CPUs with eIBRS (enhanced Indirect Branch Restricted Speculation) or IBT enabled in the kernel.
<li>Added JH7110 I2C clocks to <a href="https://man.openbsd.org/stfclock.4">stfclock(4)</a>.
<!-- 2023/07/29 -->
<!-- 2023/07/28 -->
<li>Set OPENSSL_NO_ENGINE and remove engine code.
<li>Dropped DSO and defined OPENSSL_NO_DSO.
<!-- 2023/07/27 -->
<li>Made <a href="https://man.openbsd.org/sshd_config.5">sshd_config(5)</a> AuthorizedPrincipalsCommand and AuthorizedKeysCommand accept the %D (routing domain) and a new %C (connection address/port 4-tuple) as expansion sequences.
<li>Increased default KDF work-factor for OpenSSH format private keys from 16 to 24.
<li>Fixed inline vlan-tag handling of forwarded LRO packets from <a href="https://man.openbsd.org/ix.4">ix(4)</a>.
<li>Fixed verbose logging in <a href="https://man.openbsd.org/vmd.8">vmd(8)</a> child processes.
<!-- 2023/07/26 -->
<li>Made <a href="https://man.openbsd.org/ssh.1">ssh(1)</a> -f (fork after authentication) work properly in multiplexed cases (including ControlPersist).
<!-- 2023/07/25 -->
<li>Isolated <a href="https://man.openbsd.org/profil.2">profil(2)</a> and GPROF from statclock() now that we have a machine-independent interface to the clock interrupt hardware.
<li>Stopped building unused dhclient.
<li>Made the built-in keyboard on the Tadpole UltraBook IIe work.
<!-- 2023/07/24 -->
<li>Added a check before setting DE_CFG bit 9 to ensure compatibility with hypervisors not allowing msr writes to that bit.
<li>Fixed <a href="https://man.openbsd.org/wscons.4">wscons(4)</a> scan code value for the print screen key.
<li>Prevented the kernel from accessing random memory after receiving some specially crafted DCS or CSI terminal escape sequences by limiting <a href="https://man.openbsd.org/wscons.4">wscons(4)</a> escape sequence argument count to usable bounds.
<li>Set DE_CFG[9], a chickenbit which stops Zenbleed.
<li>Corrected <a href="https://man.openbsd.org/dmesg.8">dmesg(8)</a> display of pciprobe output after boot block changes on i386.
<!-- 2023/07/23 -->
<li><a href="https://man.openbsd.org/pledge.2">Pledged</a> (NULL, "stdio rpath") <a href="https://man.openbsd.org/ldd.1">ldd(1)</a>.
<li>Improved <a href="https://man.openbsd.org/xhci.4">xhci(4)</a> suspend/resume support.
<li>Implemented <a href="https://man.openbsd.org/apldart.4">apldart(4)</a> suspend/resume support.
<li>Prevented a spurious attach/detach/attach sequence when resuming with <a href="https://man.openbsd.org/tipd.4">tipd(4)</a> when a USB device is connected.
<li>Removed -stats option from <a href="https://man.openbsd.org/openssl.1">openssl(1)</a> errstr.
<!-- 2023/07/22 -->
<li>Implemented updates for AMD CPU microcode.
<li>Introduced <a href="https://man.openbsd.org/qcsdam.4">qcsdam(4)</a>, a driver for the PMIC Shared Direct Access Memory found on Qualcomm SoCs.
<!-- 2023/07/21 -->
<!-- 2023/07/20 -->
<li>Allow <a href="https://man.openbsd.org/cwm.1">cwm(1)</a> to cycle through windows of the same window class as the active window, default key binding to M-grave, respectively Alt-Tilde, like with other window managers.
<li>Capped the size of numbers we check for primality to 32k to block a DoS vector.
<!-- 2023/07/19 -->
<li>Assigned wsdisplay0 to the glass console always for i386 and amd64 RAMDISK and RAMDISK_CD.
<li>Fixed skipping of white space after parsing the username in <a href="https://man.openbsd.org/crontab.1">/etc/crontab</a> to make it consistent with how lines without usernames are parsed.
<li>Used "early 2" to attach <a href="https://man.openbsd.org/aplpmgr.4">aplpmgr(4)</a> to make sure it attachs before other core drivers that need to enable power domains.
<li>Implemented "early 2" locator for <a href="https://man.openbsd.org/mainbus.4">mainbus(4)</a> and simplebus to make drivers attach even earlier.
<li>Protected <a href="https://man.openbsd.org/ixl.4">ixl(4)</a> admin queue with <a href="https://man.openbsd.org/mutex.9">mutex(9)</a>.
<li>Separated ssh-pkcs11-helpers for each p11 module in <a href="https://man.openbsd.org/ssh.1">ssh(1)</a> and implemented reference counting, fixing some bugs making PKCS11 keys unusable after they have been deleted.
<li>Disallowed remote addition of FIDO/PKCS11 provider libraries to <a href="https://man.openbsd.org/ssh-agent.1">ssh-agent(1)</a> by default.
<li>Partially fixed interactive mode in <a href="https://man.openbsd.org/patch.1">patch(1)</a>.
<li>Fixed <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> hang by correcting visited flag when the last window list is rebuilt by renumbering windows.
<!-- 2023/07/18 -->
<li>Enabled LRO for TCP by default in the network drivers (currently supported by <a href="https://man.openbsd.org/ix.4">ix(4)</a> and <a href="https://man.openbsd.org/lo.4">lo(4)</a>). LRO can be turned off per-interface with <a href="https://man.openbsd.org/ifconfig.8">ifconfig(8)</a> -tcplro.
<li>With the update of the sleep API, implemented the linux emulation of their wait API, schedule() and set_current_state() in a less hacky way, removing some possible race conditions in the wait API.
<!-- 2023/07/17 -->
<li>Put the <a href="https://man.openbsd.org/tipd.4">tipd(4)</a> USB Type-C power delivery controller into the "S5" state during suspend, preventing USB devices from consuming power.
<!-- 2023/07/16 -->
<li>Added support for configuration tags to <a href="https://man.openbsd.org/ssh.1">ssh(1)</a>. Added an <a href="https://man.openbsd.org/ssh_config.5">ssh_config(5)</a> "Tag" directive and corresponding "Match tag" predicate.
<li>Added a <a href="https://man.openbsd.org/ssh_config.5">ssh_config(5)</a> "match localnetwork" predicate which may be used to vary the effective client configuration based on network location.
<!-- 2023/07/15 -->
<li>Implemented Pointer Authentication Code support on AArch64.
<li>Fixed use of qcow base images in <a href="https://man.openbsd.org/vmd.8">vmd(8)</a> to avoid device failure during startup post-exec when trying to receive device state from the parent vm process.
<li>Added mute control to <a href="https://man.openbsd.org/tascodec.4">tascodec(4)</a>.
<li>Used <a href="https://man.openbsd.org/unveil.2">unveil(2)</a> to restrict <a href="https://man.openbsd.org/patch.1">patch(1)</a> to its current working directory.
<!-- 2023/07/14 -->
<li>Ensured <a href="https://man.openbsd.org/dhcrelay6.8">dhcrelay6(8)</a> does not ignore the AF_LINK entries of <a href="https://man.openbsd.org/carp.4">carp(4)</a> interfaces.
<!-- 2023/07/13 -->
<li>Pulled validation into local prefix parser in <a href="https://man.openbsd.org/vmd.8">vmd(8)</a>.
<li>Checked <a href="https://man.openbsd.org/rcctl.8">rcctl(8)</a> input before trying to disable a non-existing daemon to prevent parsing bogus characters.
<li>Made use of the deep idle state available on Apple M1/M2 cores in the idle loop and for suspend, resulting in power savings particularly when running in a state with high clock frequency.
<!-- 2023/07/12 -->
<li>Adressed incomplete validation of ELF program headers in <a href="https://man.openbsd.org/execve.2">execve(2)</a> which could lead to a panic in vmcmd_map_readvn() with a malformed binary/interpreter.
<li>Prevented GPROF kernel crash during resume by disabling _mcount() across suspend/resume in sleep_state().
<li>Worked around a use after free in <a href="https://man.openbsd.org/httpd.8">httpd(8)</a> due to a malformed HTTP request when httpd is in fastcgi mode.
<li>Prevented a session reset in <a href="https://man.openbsd.org/bgpd.8">bgpd(8)</a> due to parser failure.
<li>Used ssize_t instead of short for line lengths to lessen chance of underflow and segfault in <a href="https://man.openbsd.org/patch.1">patch(1)</a> with excessive line length.
<!-- 2023/07/11 -->
<li>Reworked sleep_setup()/sleep_finish() to no longer hold the scheduler lock between calls.
<!-- 2023/07/10 -->
<li>Allow <a href="https://man.openbsd.org/unveil.2">unveiled</a> programs to dump core by passing BYPASSUNVEIL just for this vnode.
<li>Prevented <a href="https://man.openbsd.org/pax.1">pax(1)</a> from attempting to open a file when creating an archive file even if the file will be skipped due to a -s replacement with the empty string.
<!-- 2023/07/09 -->
<li>Enabled Indirect Branch Tracking for amd64 userland, using XSAVES/XRSTORS to save/restore the state and enabling it at exec-time (and for signal handling) if the PS_NOBTCFI flag isn"t set.
<li>Added PS_NOBTCFI, a per-process flag indicating that Branch Target Control Flow Integrity has beendisabled for the process, to be used by the amd64 code.
<li>Added mute control to <a href="https://man.openbsd.org/sncodec.4">sncodec(4)</a>.
<li>Added suspend key support to <a href="https://man.openbsd.org/wskbd.4">wskbd(4)</a> and made it work on Apple ARM laptops.
<!-- 2023/07/08 -->
<li>Added request_sleep(), a machine-independent way of sending the machine to sleep in a safe thread, to amd64, i386 and arm64.
<li>Updated to <a href="https://man.openbsd.org/perl.1">perl</a> 5.36.1.
<li>Introduced <a href="https://man.openbsd.org/stfpciephy.4">stfpciephy(4)</a>, a driver to control the PCIe 2.0 and USB 3.0 PHY on the StarFive JH7110 SoC.
<li>Introduced <a href="https://man.openbsd.org/stfpcie.4">stfpcie(4)</a>, a driver to support the PLDA XpressRICH-AXI PCIe controller on the StarFive JH7110 SoC.
<li>Added support for the RK3588 PCIe3 PHY to <a href="https://man.openbsd.org/rkpciephy.4">rkpciephy(4)</a>.
<li>Added support for the Motorcomm YT8521/YT8531 PHYs and enabled <a href="https://man.openbsd.org/ytphy.4">ytphy(4)</a> on riscv64.
<li>Took initial step toward a machine independent safe sleep API.
<li>Toggled IBT off during EFI runtime services calls.
<!-- 2023/07/07 -->
<li>Introduced <a href="https://man.openbsd.org/ietp.4">ietp(4)</a> driver for Elantech I2C touchpads.
<li>Made ld.bfd emit PT_OPENBSD_NOBTCFI.
<li>Added <a href="https://man.openbsd.org/rkclock.4">rkclock(4)</a> resets for RK3588 USB 3.0 controllers and clocks for the RK3588 I2C controllers and RK3588 PWM controllers.
<li>Provided an optimized bn_mulw() for riscv64 for a 1.5-2x performance gain for BN multiplication and similar gain for RSA operations.
<li>Provided a libcrypto Makefile.inc for riscv64.
<li>Swapped smtpd link-auth filter arguments to avoid ambiguities with user names containing a "|" character.
<li>Bumped <a href="https://man.openbsd.org/smtpd-filters.7">smtpd-filters(7)</a> protocol version.
<li>Enabled reading RSA-PSS certificates.
<li>Added support for multiple batteries to <a href="https://man.openbsd.org/acpithinkpad.4">acpithinkpad(4)</a> setchargestart and setchargestop.
<!-- 2023/07/06 -->
<li>Added AXP305 support and fixes to <a href="https://man.openbsd.org/axppmic.4">axppmic(4)</a>.
<li>Used mtx_init() to initialize stack-based mutexes, ensuring the mutex' lock_object has static storage duration.
<li>Cleared <a href="https://man.openbsd.org/knote.9">knote(9)</a>s when finishing wseventvar in <a href="https://man.openbsd.org/wscons.4">wscons(4)</a> to prevent a kernel crash.
<li>Taught BFD tools how to handle NOBTCFI.
<li>Converted tcp_now() time counter to 64 bit.
<li>Registered a mapping of <a href="https://man.openbsd.org/dwge.4">dwge(4)</a> interfaces to ofw nodes/phandles.
<li>Removed special cases for IBT/BTI introduced during development.
<!-- 2023/07/05 -->
<li>Added <a href="https://man.openbsd.org/pfsync.4">pfsync(4)</a> specific locks, introduced pfsync support to partition states into independently-running slices, and made <a href="https://man.openbsd.org/pf.4">pf(4)</a> state purges mpsafe.
<li>Handled <a href="https://man.openbsd.org/dwge.4">dwge(4)</a> fixed-link configuration in the device tree.
<li>Fixed boot of OpenBSD using Hyper-V on Windows 11.
<li>Fixed error in the MSI-X interrupt establish loop for <a href="https://man.openbsd.org/virtio.4">virtio(4)</a> which could lead to fallback to shared IRQs.
<li>Made softdep mounts a no-op.
<li>Added <a href="https://man.openbsd.org/iwm.4">iwm(4)</a>/<a href="https://man.openbsd.org/iwx.4">iwx(4)</a> background scan task to the queue from which it will be deleted, ensuring proper cancellation during driver state transition.
<li>Drop kernel lock before panic to avoid WITNESS report during fault on amd64.
<li>Implemented support for the GPIOs on the JH7110, making it possible to reboot the VisionFive 2.
<li>Restored (R)esize functionality to sparc64 <a href="https://man.openbsd.org/disklabel.8">disklabel(8)</a>.
<!-- 2023/07/04 -->
<li>Limited the number of transactions/tickets <a href="https://man.openbsd.org/pf.4">pf(4)</a>'s pf_open_trans() can issue for each clone of /dev/pf to 512, avoiding use of all kernel memory by asking DIOCGETRULES for more tickets.
<li>Added StarFive JH7110 support to <a href="https://man.openbsd.org/dwqe.4">dwqe(4)</a>.
<li>Introduced DIOCXEND to <a href="https://man.openbsd.org/pf.4">pf(4)</a> (and also <a href="https://man.openbsd.org/snmpd.8">snmpd(8)</a> and <a href="https://man.openbsd.org/systat.1">systat(1)</a>) so applications close when done fetching pf rules and cannot consume all kernel memory.
<li>Made the <a href="https://man.openbsd.org/bge.4">bge(4)</a> hardware counters available on BCM5705 and newer available in <a href="https://man.openbsd.org/kstat.1">kstat(1)</a>.
<!-- 2023/07/03 -->
<li>Added unix domain socket support to <a href="https://man.openbsd.org/ssh.1">ssh(1)</a> -W.
<li>Added <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> support for marking lines with a shell prompt based on the OSC 133 extension.
<li>Enabled mouse.tp.mtbuttons for apldcms.
<li>Updated to makedepend 1.0.8.
<li>Updated to fontconfig 2.14.2.
<li>Updated to pixman 0.42.2.
<li>Updated to xtrans 1.5.0.
<li>Updated to libXaw 1.0.15
<li>Updated to libXt 1.3.0.
<li>Updated to xcb-util 0.4.1.
<li>Updated to libxshmfence 1.3.2.
<li>Updated to libXvMC 1.0.13.
<li>Updated to libXv 1.0.12.
<li>Updated to libXrandr 1.5.3.
<li>Updated to libXi 1.8.1.
<li>Updated to libXfixes 6.0.1.
<li>Updated to libXdamage 1.1.6.
<li>Updated to libXcomposite 0.4.6.
<li>Updated to xf86-video-r128 6.12.1.
<li>Updated to xf86-video-ati 22.0.0.
<li>Updated to xf86-input-mouse 1.9.5.
<li>Updated to xwd 1.0.9.
<li>Updated to xrdb 1.2.2.
<li>Updated to setxkbmap 1.3.4.
<li>Removed tls1.0 and 1.1 related options from <a href="https://man.openbsd.org/openssl.1">openssl(1)</a>.
<!-- 2023/07/02 -->
<li>Added <a href="https://man.openbsd.org/wsmouse.4">wsmouse(4)</a> button mappings for two- and three-finger clicks on clickpads.
<li>Used TSO and LRO on the loopback interface to transfer TCP faster (turned off by default).
<li>Removed __HAVE_CLOCKINTR symbol on all platforms.
<!-- 2023/07/01 -->
<li>Added <a href="https://man.openbsd.org/clockintr_cpu_init.9">clockintr_cpu_init(9)</a> stagger by MAXCPUS.
<li>Introduced <a href="https://man.openbsd.org/qccpu.4">qccpu(4)</a>, a driver for Qualcomm Snapdragon CPU power states.
<li>Enabled AC detection in <a href="https://man.openbsd.org/qcpas.4">qcpas(4)</a>.
<li>Added support for JH7110 to <a href="https://man.openbsd.org/dwmmc.4">dwmmc(4)</a>, making the eMMC and microSD mostly work on the StarFive VisionFive 2.
<li>Added support for JH7110 to <a href="https://man.openbsd.org/stftemp.4">stftemp(4)</a>, adding temperature sensor support for the StarFive VisionFive 2.
<!-- 2023/06/30 -->
<!-- 2023/06/29 -->
<li>Fixed S3-based suspend on some newer machines by using an opt-in approach for waking up GREs in <a href="https://man.openbsd.org/acpi.4">acpi(4)</a>/<a href="https://man.openbsd.org/acpibtn.4">acpibtn(4)</a>.
<li>Fixed <a href="https://man.openbsd.org/disklabel.8">disklabel(8)</a> handling of 'N-* 100' template entries.
<li>Updated to <a href="https://man.openbsd.org/nsd.8">nsd(8)</a> 4.7.0.
<li>Rewrote <a href="https://man.openbsd.org/relayd.8">relayd(8)</a> pfe_route() to work on 64bit architectures.
<!-- 2023/06/28 -->
<li>Added <a href="https://man.openbsd.org/iked.8">iked(8)</a> support to verify x509 chain from CERT payloads.
<!-- 2023/06/27 -->
<li>Introduced <a href="https://man.openbsd.org/qctsens.4">qctsens(4)</a>, a driver for the Temperature Sensor found on Qualcomm SoCs.
<li>Removed net lock from <a href="https://man.openbsd.org/pf.4">pf(4)</a> ioctl DIOC{SET,CLR}IFFLAG.
<li>Made it possible to store the kstack or ustack in a map in <a href="https://man.openbsd.org/btrace.8">btrace(8)</a>.
<li>Restored interrupts and prevented unconditionally reenabling them in amd64 MCOUNT_EXIT.
<!-- 2023/06/26 -->
<!-- 2023/06/25 -->
<li>Provided <a href="https://man.openbsd.org/kstat.1">kstat(1)</a> information based on the byte and packet counters available in some <a href="https://man.openbsd.org/dwge.4">dwge(4)</a> implementations.
<li>Provided additional BN primitives for BN_ULLONG architectures.
<!-- 2023/06/24 -->
<li>Added initial support for StarFive VisionFive V2 to <a href="https://man.openbsd.org/stfclock.4">stfclock(4)</a>.
<!-- 2023/06/23 -->
<li>Fixed underlining in <a href="https://man.openbsd.org/ex.1">ex(1)</a> 's' command with the 'c' flag when 'number' is off.
<li>Improved <a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a> detection of RRDP session desynchronization.
<!-- 2023/06/22 -->
<li>Added <a href="https://man.openbsd.org/ksmn.4">ksmn(4)</a> support for the thermal sensors on Ryzen 9 79xx.
<!-- 2023/06/21 -->
<li>Made <a href="https://man.openbsd.org/ksh.1">ksh(1)</a> escape control characters when displaying file name completions.
<li>Fixed potential truncation of filtered data lines in <a href="https://man.openbsd.org/smtpd.8">smtpd(8)</a>.
<li>Added <a href="https://man.openbsd.org/ospf6ctl.8">ospf6ctl(8)</a> "fib reload" as in <a href="https://man.openbsd.org/ospfctl.8">ospfctl(8)</a> and made it trigger automatically on a timeout after RTM_DESYNC.
<!-- 2023/06/20 -->
<li>Made <a href="https://man.openbsd.org/ssh.1">ssh(1)</a> -Q CASignatureAlgorithms' only list signature algorithms that are valid for CA signing.
<!-- 2023/06/19 -->
<li>Fixed "no comment" not showing when running <a href="https://man.openbsd.org/ssh-keygen.1">ssh-keygen(1)</a> -l on multiple keys where one has a comment and other following keys do not.
<li>Fixed line wrapping in <a href="https://man.openbsd.org/fdisk.8">fdisk(8)</a>.
<li>Separated <a href="https://man.openbsd.org/shutdown.8">shutdown(8)</a> command access from the "operator" group and into a "_shutdown" group, preventing inappropriate disk read access.
<!-- 2023/06/18 -->
<li>Allowed use of 'a' as a shortcut for 'autoconf' in the installer.
<li>Ensured 'chmod a-x /bsd.upgrade' works to prevent re-upgrade for luna88k, matching other architectures.
<li>Switched ECDSA_METHOD usage to EC_KEY_METHOD for <a href="https://man.openbsd.org/smtpd.8">smtpd(8)</a>, the last consumer of the deprecated ECDSA_METHOD.
<!-- 2023/06/17 -->
<li>Fixed incomplete <a href="https://man.openbsd.org/azalia.4">azalia(4)</a> attachment for Ampere eMAG with an AMD GPU with an HD audio function.
<li>Improved speed of Montgomery multiplication.
<li>Bumped <a href="https://man.openbsd.org/smtpd.8">smtpd(8)</a> to 7.3.0.
<!-- 2023/06/16 -->
<li>Fixed IPv6 forward counters and icmp6 redirect when TSO is enabled.
<!-- 2023/06/15 -->
<li>Fixed CVE-2023-3128: X servers could return values from XQueryExtension allowing Xlib to write out-of-bounds entries.
<!-- 2023/06/14 -->
<li>Added missing kernel lock around (*if_ioctl)().
<!-- 2023/06/13 -->
<!-- 2023/06/12 -->
<li>Moved nd6_ifdetach() out of netlock.
<li>Provided and optimized various quad word primitives, providing performance gain across most BN operations on aaarch64.
<li>Prevented printing the last value twice in <a href="https://man.openbsd.org/seq.1">seq(1)</a>.
<li>Added content-encoding compression support to <a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a>.
<!-- 2023/06/11 -->
<!-- 2023/06/10 -->
<li>Implemented arm64 support for pointer authentication (PAC) in userland, making it possible to "sign" pointers with a hidden key and provide "tail CFI" similar to what retguard provides. (Disabled for x13s).
<li>Introduced <a href="https://man.openbsd.org/qcpas.4">qcpas(4)</a>, a driver for the Peripheral Authentication Service found on Qualcomm SoCs.
<!-- 2023/06/09 -->
<!-- 2023/06/08 -->
<!-- 2023/06/07 -->
<!-- 2023/06/06 -->
<li>Made the tlsv1.0 and tlsv1.1 options in <a href="https://man.openbsd.org/relayd.8">relayd(8)</a> do nothing in preparation for removal of these protocols.
<!-- 2023/06/05 -->
<li>Stopped calculating IP, TCP and UDP checksums on loopback interface.
<!-- 2023/06/04 -->
<!-- 2023/06/03 -->
<!-- 2023/06/02 -->
<li>Permitted restricted <a href="https://man.openbsd.org/profil.2">profil(2)</a> for <a href="https://man.openbsd.org/moncontrol.3">moncontrol(3)</a> in stdio <a href="https://man.openbsd.org/pledge.2">pledge(2)</a>, moving toward making '-pg' binaries pledge-compatible.
<!-- 2023/06/01 -->
<li>Added support for wireguard peer descriptions to <a href="https://man.openbsd.org/ifconfig.8">ifconfig(8)</a>.
<li>Enabled forwarding of <a href="https://man.openbsd.org/ix.4">ix(4)</a> LRO packets via TSO.
<!-- 2023/05/31 -->
<!-- 2023/05/30 -->
<li>Use generic checksum calculation for TCP SYN+ACK packets.
<li>Made <a href="https://man.openbsd.org/id.1">id(1)</a> -R fail when an argument is given.
<li>Fixed up file modification timestamps to optimize <a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a> failover from RRDP to RSYNC.
<li>Split <a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a> cleanup into cleanup and repository cleanup and show how many files are kept/removed in the repository temporary storage.
<!-- 2023/05/29 -->
<li>Added IBT support to the X86_64 retpoline+znow PLTs.
<li>Prevented hangs with <a href="https://man.openbsd.org/vioscsi.4">vioscsi(4)</a> on qemu/windows and in the Oracle cloud.
<!-- 2023/05/28 -->
<!-- 2023/05/27 -->
<li>Bumped LibreSSL to 3.8.1.
<li>Implemented battery charge control in <a href="https://man.openbsd.org/aplsmc.4">aplsmc(4)</a>.
<!-- 2023/05/26 -->
<li>Removed net lock from <a href="https://man.openbsd.org/pf.4">pf(4)</a> ioctls DIOC{S,G}ETLIMIT.
<!-- 2023/05/25 -->
<li>Added both udp and tcp for https (HTTP/3 over QUIC) to /etc/services.
<li>Ensured forced update of internal key for EVP_PKEY after modification, to handle fallout in several applications following a behavioral change in OpenSSL.
<!-- 2023/05/24 -->
<li>Fixed <a href="https://man.openbsd.org/sshd_config.5">sshd_config(5)</a> AuthorizedPrincipalsCommand when AuthorizedKeysCommand appears previously in configuration.
<!-- 2023/05/23 -->
<li>Forced comport initialization for certain classes of device, preventing hang or reboot when com@acpi devices fail the comprobe1() check.
<li>Introduced <a href="https://man.openbsd.org/qcaoss.4">qcaoss(4)</a>, a driver for the Always On Subsystem found on Qualcomm SoCs.
<li>Added IBT support to retpoline PLTs for X86_64, providing IBT support by default.
<!-- 2023/05/22 -->
<li>Fixed TSO for traffic to a local address on a physical interface.
<!-- 2023/05/21 -->
<li>Made <a href="https://man.openbsd.org/ypldap.8">ypldap(8)</a> continue trying LDAP servers until full results are received.
<li>Fixed booting from disks >8G on systems where the BIOS uses CHS.
<li>Updated to freetype 2.13.0.
<!-- 2023/05/20 -->
<li>Prevented a self-deadlock of vmmaplk in <a href="https://man.openbsd.org/uvm_map.9">uvm_map(9)</a>.
<li>Added an <a href="https://man.openbsd.org/openssl.1">openssl(1)</a> '-unaligned n' option.
<li>Implemented battery charge control in <a href="https://man.openbsd.org/acpithinkpad.4">acpithinkpad(4)</a>.
<!-- 2023/05/19 -->
<li>Introduced <a href="https://man.openbsd.org/qcsmptp.4">qcsmptp(4)</a>, a driver to share 32-bit values between (co-)processors.
<li>Introduced <a href="https://man.openbsd.org/qcsmem.4">qcsmem(4)</a>, a driver for the shared memory table on Qualcomm SoCs.
<li>Added <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> format for server_sessions.
<!-- 2023/05/18 -->
<li><a href="https://man.openbsd.org/pledge.2">Pledged(2)</a> <a href="https://man.openbsd.org/waitid.2">waitid(2)</a> stdio.
<li>Handle paths with whitespace or metacharacters in <a href="https://man.openbsd.org/user.8">user(8)</a>.
<li>Asserted <a href="https://man.openbsd.org/pf.4">pf(4)</a> lock on interface handling.
<li>Added TSO offloading to <a href="https://man.openbsd.org/ix.4">ix(4)</a>.
<!-- 2023/05/17 -->
<li>Introduced <a href="https://man.openbsd.org/qcmtx.4">qcmtx(4)</a>, a driver for the hardware spinlock on Qualcomm SoCs.
<li>Introduced <a href="https://man.openbsd.org/qcipcc.4">qcipcc(4)</a>, a driver for the inter-processor mailbox interface used to inform (and be informed) of changes to shared memory state.
<li>Added support for the Peripheral Authentication Service SMC interface to <a href="https://man.openbsd.org/qcscm.4">qcscm(4)</a>.
<li>Implemented battery management <a href="https://man.openbsd.org/sysctl.8">sysctl(8)</a> (hw.battery.chargemode, hw.battery.chargestop and hw.battery.chargestart).
<!-- 2023/05/16 -->
<li>Used <a href="https://man.openbsd.org/cp.1">cp(1)</a> to copy dot files in <a href="https://man.openbsd.org/useradd.8">useradd(8)</a> instead of <a href="https://man.openbsd.org/pax.1">pax(1)</a>.
<li>Introduced separate capabilities for TCP offloading, split into LRO (large receive offloading) and TSO (TCP segmentation offloading). LRO can be toggled via the <a href="https://man.openbsd.org/ifconfig.8">ifconfig(8)</a> tcprecvoffload option. (2023/06/07: Renamed "tcplro").
<!-- 2023/05/15 -->
<li>Implemented the TCP/IP layer for hardware TCP segmentation offload.
<li>Corrected display of Victoria Day in <a href="https://man.openbsd.org/calendar.1">calendar(1)</a>.
<li>Added Juneteenth to the US <a href="https://man.openbsd.org/calendar.1">calendar(1)</a>.
<li>Turned on pointer-authentication on arm64 by default, effectively enabling -mbranch-protection=standard on arm64.
<!-- 2023/05/14 -->
<li>Improved <a href="https://man.openbsd.org/vnconfig.8">vnconfig(8)</a> emulation of a disktab entry (-t), enabling <a href="https://man.openbsd.org/installboot.8">installboot(8)</a> to know the vnd device should be treated as a floppy disk.
<!-- 2023/05/13 -->
<li>Gave softnet threads unique names by suffixing softnet with their index.
<li>Made <a href="https://man.openbsd.org/disklabel.8">disklabel(8)</a> use the d_type value provided by the kernel when creating, editing or printing a disklabel in the absence of the "disktype" command line parameter.
<li>Removed the kernel lock from IPv6 neighbor discovery.
<!-- 2023/05/12 -->
<li>Added <a href="https://man.openbsd.org/axppmic.4">axppmic(4)</a> support to the arm64 RAMDISK to support ethernet on the OrangePi One Plus (Allwinner H6).
<li>Added display of interface names in front of <a href="https://man.openbsd.org/ifconfig.8">ifconfig(8)</a> error messages.
<li>Added a fallback to load the arm64 kernel from the EFI system partition if booting from a disk without a BSD disklabel.
<li>Fixed <a href="https://man.openbsd.org/vmd.8">vmd(8)</a> segfault on vm creation.
<li>Added <a href="https://man.openbsd.org/btrace.8">btrace(8)</a> support for symbolizing <a href="https://man.openbsd.org/utrace.2">utrace(2)</a> addresses.
<li>Added apple-gumx.h for 6.1.28 <a href="https://man.openbsd.org/drm.4">drm(4)</a>.
<li>Removed SHA-512 C implementations other than the semi-unrolled version.
<!-- 2023/05/11 -->
<li>Fixed <a href="https://man.openbsd.org/iwx.4">iwx(4)</a> firmware error when tearing down the state of association to the AP.
<!-- 2023/05/10 -->
<li>Added Miller-Rabin test for random bases to BPSW.
<li>Implemented TCP send offloading (in software only).
<!-- 2023/05/09 -->
<li>Updated to xf86-video-sunffb 1.2.3.
<li>Reduced possible outcomes when a <a href="https://man.openbsd.org/kevent.2">kevent(2)</a> call and a <a href="https://man.openbsd.org/close.2">close(2)</a> call race on the different ends of a pipe.
<li>Renamed 'invalid' to 'disqualified' in the <a href="https://man.openbsd.org/bgpctl.8">bgpctl(8)</a> 'show rib' table.
<li>Use partial chains in certificate validation in <a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a>.
<!-- 2023/05/08 -->
<li>Switched <a href="https://man.openbsd.org/pflogd.8">pflogd(8)</a> from using a bpf read timeout to a wait timeout.
<li>Prevented signed integer overflow after INT_MAX bad <a href="https://man.openbsd.org/passwd.1">passwd(1)</a>.
<li>Updated to xf86-video-dummy 0.4.1.
<li>Added ISO8859-14 font encoding.
<!-- 2023/05/07 -->
<li>Updated to xinput 1.6.4.
<li>Updated to xdpyinfo 1.3.4.
<li>Updated to libXpm 3.5.16.
<li>Updated to libXres 1.2.2.
<li>Updated to libXxf86dga 1.1.6.
<li>Updated to libfontenc 1.1.7.
<li>Updated to libxkbfile 1.1.2.
<li>Updated to libXdmcp 1.1.4.
<li>Updated to libXScrnSaver 1.2.4.
<li>Updated to libICE 1.1.1.
<li>Updated to libXau 1.0.11.
<li>Updated to xcalc 1.1.2.
<li>Removed net lock from <a href="https://man.openbsd.org/pf.4">pf(4)</a> ioctls DIOCOSFP{FLUSH,ADD,GET}.
<li>Updated to libXft 2.3.8.
<!-- 2023/05/06 -->
<li>Added support for random offsets when using trances with a step value in <a href="https://man.openbsd.org/crontab.1">crontab(1)</a>.
<li>Added support for RTL8153D to <a href="https://man.openbsd.org/ure.4">ure(4)</a>.
<!-- 2023/05/05 -->
<!-- 2023/05/04 -->
<li>Pushed kernel lock down to sys_sysctl().
<li>Introduced a neighbor discovery mutex.
<!-- 2023/05/03 -->
<li>Removed net lock from <a href="https://man.openbsd.org/pf.4">pf(4)</a> ioctls DIOCGETRULESET and DIOCGETRULESETS.
<!-- 2023/05/02 -->
<!-- 2023/05/01 -->
<li>Bumped <a href="https://man.openbsd.org/bgpd.8">bgpd(9)</a> to version 8.0.
<li>Updated to X server 21.1.8.
<!-- 2023/04/30 -->
<li>Adjusted <a href="https://man.openbsd.org/sftp.1">sftp(1)</a> ftruncate() logic to handle servers that reorder requests.
<li>Removed the EFI RTC implementation on amd64.
<!-- 2023/04/29 -->
<li>Bumped <a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a> version to 8.4.
<li>Removed net lock from <a href="https://man.openbsd.org/pf.4">pf(4)</a> ioctls DIOCGETQUEUE and DIOCGETQUEUES.
<!-- 2023/04/28 -->
<li>Added <a href="https://man.openbsd.org/dmesg.8">dmesg(8)</a> display of VHE feature.
<li>Added rtentry refcnt type to <a href="https://man.openbsd.org/dt.4">dt(4)</a>.
<li>Allowed <a href="https://man.openbsd.org/vmd.8">vmd(8)</a> vm owners to override the boot kernel via <a href="https://man.openbsd.org/vmctl.8">vmctl(8)</a> to allow booting of recovery media like a ramdisk kernel.
<li>Increased MAXDSIZ to 128G on amd64 and 64G on arm64.
<li>Retired <a href="https://man.openbsd.org/OpenBSD-7.3/sparc64/timer.4">timer(4/sparc64)</a> driver.
<li>Allowed routers to create new neighbor cache entries when receiving a valid Neighbor Advertisement (RFC9131).
<li>Improved speed of DIOCGETRULE <a href="https://man.openbsd.org/ioctl.2">ioctl(2)</a> used by <a href="https://man.openbsd.org/pfctl.8">pfctl(8)</a> to retrieve rules from the kernel.
<li>Relaxed <a href="https://man.openbsd.org/pf.4">pf(4)</a> "pass all" rule to allow bidirectional neighbor advertisements.
<li>Enabled kernel-address sanitizer for clang openbsd target.
<li>Implemented <a href="https://man.openbsd.org/openrsync.1">rsync(1)</a> --size-only and --ignore-times.
<!-- 2023/04/27 -->
<li>Introduced <a href="https://man.openbsd.org/qcrng.4">qcrng(4)</a>, a driver for the Qualcomm rng device found on the Thinkpad x13s.
<li>Added support for RTL8188FTV chip to <a href="https://man.openbsd.org/urtwn.4">urtwn(4)</a>.
<li>Introduced <a href="https://man.openbsd.org/vmd.8">vmd(8)</a> multi-process model for virtio devices.
<li>Added support for <a href="https://man.openbsd.org/st.4">st(4)</a> I/O statistics so tape speeds may be observed with <a href="https://man.openbsd.org/iostat.8">iostat(8)</a>.
<li>Fixed softraid crypto installation on Mac.
<li>Implemented <a href="https://man.openbsd.org/rsync.1">rsync(1)</a> -V as an alias to --version.
<li>Removed kernel lock from <a href="https://man.openbsd.org/rtfree.9">rtfree(9)</a>.
<li>Retired <a href="https://man.openbsd.org/disklabel.8">disklabel(8)</a> -E "expert" mode.
<li>Fixed <a href="https://man.openbsd.org/ws.4">ws(4)</a> cursor moving diagonally when moved along the horizontal or vertical axis of a rotated touchscreen.
<li>Removed net lock from <a href="https://man.openbsd.org/pf.4">pf(4)</a> ioctl DIOCGETTIMEOUT.
<li>Fixed config space access for the root bus of a <a href="https://man.openbsd.org/dwpcie.4">dwpcie(4)</a> controller when the root bus number isn't zero.
<li>Added RK3588 support to <a href="https://man.openbsd.org/rkcomphy.4">rkcomphy(4)</a>.
<!-- 2023/04/26 -->
<li>Handled crypto disks as boot disks in amd64, riscv64 and arm64 installer.
<li>Added <a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a> -P option to specify evaluation time for testing.
<li>Made llvm emit IBT endbr64 instructions by default for amd64. (Disabled jump tables by default).
<li>Introduced 'rtlabel_mtx' <a href="https://man.openbsd.org/mutex.9">mutex(9)</a> to protect route labels storage.
<li>Implemented <a href="https://man.openbsd.org/dt.4">dt(4)</a> <a href="https://man.openbsd.org/utrace.2">utrace(2)</a> support on amd64 and i386.
<li>Improved <a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a> accounting by tracking things by repository and TAL.
<li>Allowed IPv6 neighbor advertisement traffic during netstart on boot.
<li>Ensured correct handling of arm64 userland branch target traps.
<!-- 2023/04/25 -->
<li>Set TSO flag on <a href="https://man.openbsd.org/vlan.4">vlan(4)</a> interfaces.
<li>Bumped LibreSSL version to 3.8.0.
<li>Send an unsolicited neighbor advertisement to the all-routers multicast address when configuring a new address on an interface to speed IPv6 initial packet return.
<li>Prevented bootloader attempts to write to read-only softraid on amd64, sparc64 and i386.
<li>Enabled <a href="https://man.openbsd.org/softraid.4">softraid(4)</a> in the riscv64 ramdisk kernel, allowing disk crypto install.
<li>Enabled power management for <a href="https://man.openbsd.org/dwpcie.4">dwpcie(4)</a> devices.
<li>Added suspend/resume support to <a href="https://man.openbsd.org/pwmbl.4">pwmbl(4)</a>.
<li>Made <a href="https://man.openbsd.org/pwmleds.4">pwmleds(4)</a> disable keyboard backlight on Apple Silicon laptops on suspend and restore on wakeup.
<li>Fixed suspend/resume on x13s with NVMe+MSI.
<li>Added <a href="https://man.openbsd.org/makefs.8">makefs(8)</a> option 'rdroot' to simplify creation of rdroot filesystems for the install media.
<!-- 2023/04/24 -->
<li>Added endbr64 to amd64 syscall stubs and libcrypto as needed.
<li>Added prof_state_toggle to keep a count of CPUs with profiling enabled.
<li>Allowed <a href="https://man.openbsd.org/vmm.4">vmm(4)</a> guests to enable and use supervisor IBT.
<li>Added default <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> config to <a href="https://man.openbsd.org/changelist.5">changelist(5)</a>.
<li>Added <a href="https://man.openbsd.org/rdsetroot.8">rdsetroot(8)</a> -s option to simply display the number of bytes available for the rdroot filesystem in the specified kernel.
<li>Used the wxallowed flag to decide whether to enforce branch target temporarily.
<li>Added <a href="https://man.openbsd.org/aq.4">aq(4)</a> support for Atlantic 2 hardware.
<!-- 2023/04/23 -->
<li>Made <a href="https://man.openbsd.org/dwqe.4">dwqe(4)</a> handle fixed-link configuration in the device tree.
<li>Randomized the order of TLS extensions.
<li>Taught the <a href="https://man.openbsd.org/vmd.8">vmd(8)</a> <a href="https://man.openbsd.org/vmm.4">vmm(4)</a> process how to exec, using <a href="https://man.openbsd.org/execvp.3">execvp(3)</a> to launch vm children with new address spaces and introducing use of <a href="https://man.openbsd.org/unveil.2">unveil(2)</a> into the vmm and vm processes.
<li>Stopped setting ri->ri_bs in <a href="https://man.openbsd.org/viogpu.4">viogpu(4)</a> to prevent a panic caused by rasops accessing its uninitialized content.
<!-- 2023/04/22 -->
<li>Introduced <a href="https://man.openbsd.org/iosf.4">iosf(4)</a>, a driver for the Intel OnChip System Fabric.
<li>Call pfkeyv2_sysctl_policydumper() with shared netlock.
<li>Fixed <a href="https://man.openbsd.org/openssl.1">openssl(1)</a> UTF-8 issuer printing.
<li>Fixed <a href="https://man.openbsd.org/vmd.8">vmd(8)</a> vm send/receive issues due to invalid host-side virtual addresses.
<li>Reduced delays used in the <a href="https://man.openbsd.org/dwqe.4">dwqe(4)</a> mii/mdio bus ops, producing a significant speed increase.
<!-- 2023/04/21 -->
<li>Made <a href="https://man.openbsd.org/mg.1">mg(1)</a> tab width customizable per buffer with mg command set-tab-width.
<li>Implemented <a href="https://man.openbsd.org/bgpctl.8">bgpctl(8)</a> flowspec add and delete to add/remove flowspec rules dynamically.
<!-- 2023/04/20 -->
<li>Call sysctl_source() with shared netlock.
<li>Introduced <a href="https://man.openbsd.org/viogpu.4">viogpu(4)</a>, a VirtIO GPU driver.
<li>Implemented <a href="https://man.openbsd.org/bgpctl.8">bgpctl(8)</a> show flowspec and flowspec flush.
<!-- 2023/04/19 -->
<li>Moved kernel lock into multicast ioctl handlers.
<li>Forced a standard umask before adding/deleting packages with <a href="https://man.openbsd.org/pkg_add.1">pkg_add(1)</a> and <a href="https://man.openbsd.org/pkg_delete.1">pkg_delete(1)</a>.
<li>Protected rtable_setsource() and rtable_getsource() with exclusive and shared netlock respectively.
<li>Added a new PT_OPENBSD_NOBTCFI "segment type" to indicate that the kernel should not enforce branch target control flow integrity for a binary. Implemented support for PT_OPENBSD_NOBTCFI in <a href="https://man.openbsd.org/ld.lld.1">lld(1)</a>, which can be set using the -z nobtcfi option.
<!-- 2023/04/18 -->
<li>Stopped advertising non-removable <a href="https://man.openbsd.org/sdmmc.4">sdmmc(4)</a> devices as removable to the scsi layer.
<li>Added <a href="https://man.openbsd.org/dwmshc.4">dwmshc(4)</a> support for Designware Mobile Storage Host Controllers.
<li>Added arm64 support for loading files from the EFI system partition.
<li>Removed kernel lock from ifa_ifwithaddr() and ifa_ifwithdstaddr().
<li>Mapped MSI-X in addition to MSI and INTx on <a href="https://man.openbsd.org/xhci.4">xhci(4)</a>, as it is supported by the xHCI controller on Qemu, which will switch from shared INTx to device-specific MSI-X interrupts.
<li>Fixed legacy interrupts on machines that use PNP0C0F PCI interrupt link devices in <a href="https://man.openbsd.org/acpipci.4">acpipci(4)</a>.
<li>Call sysctl_ifnames(), sysctl_iflist() and sysctl_dumpentry() with shared netlock.
<li>Added support for upstreamed AP806/CP110 bindings in <a href="https://man.openbsd.org/mvtemp.4">mvtemp(4)</a>.
<!-- 2023/04/17 -->
<li>Made -mbranch-protection=bti the default on OpenBSD.
<li>Resurrected <a href="https://man.openbsd.org/mg.1">mg(1)</a>'s no-tab-mode.
<li>Implemented a basic API to work with flowspec NLRI in <a href="https://man.openbsd.org/bgpd.8">bgpd(8)</a>.
<!-- 2023/04/16 -->
<li>Enabled Indirect Branch Tracking (IBT) for the amd64 kernel.
<li>Added endbr64 instructions to most amd64 ENTRY() macros, IDTVEC() and KIDTVEC().
<li>Changed compilation of regular amd64 kernels to use -fcf-protection=branch and ramdisks with -fcf-protection=none, regardless of compiler default.
<li>Modified <a href="https://man.openbsd.org/malloc.3">malloc(3)</a> D option to dump (leak) info using <a href="https://man.openbsd.org/utrace.2">utrace(2)</a>.
<li>Added <a href="https://man.openbsd.org/kdump.1">kdump(1)</a> -u label option to print selected <a href="https://man.openbsd.org/utrace.2">utrace(2)</a> records.
<li>Fixed <a href="https://man.openbsd.org/pcidump.8">pcidump(8)</a> link speed reporting.
<li>Provided <a href="https://man.openbsd.org/evp.3">evp(3)</a> methods for SHA512/224, SHA512/256 and SHA3 224/256/384/512.
<li>Added <a href="https://man.openbsd.org/aplpcie.4">aplpci(4)</a> support for the PCIe controller found on M2 Pro/Max SoCs.
<li>Dropped support for the x509 ProxyCertInfo extension.
<li>Added /etc/mixerctl.conf to <a href="https://man.openbsd.org/changelist.5">changelist(5)</a>.
<!-- 2023/04/15 -->
<li>Made <a href="https://man.openbsd.org/vmm.4">vmm(4)</a> save and restore Intel CET state on vm entry/exit.
<li>Imported tiny_sha3, a minimal and readable SHA3 implementation.
<li>Unlocked in_ioctl_get(), pushing the kernel lock into in_ioctl_{set,change}_ifaddr().
<!-- 2023/04/14 -->
<li>Disallowed issuer and subject unique identifiers in <a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a>.
<li>Dropped policy printing from <a href="https://man.openbsd.org/openssl.1">openssl(1)</a>.
<li>Made <a href="https://man.openbsd.org/xenodm.1">xenodm(1)</a> reload the environment variables after <a href="https://man.openbsd.org/setusercontext.3">setusercontext(3)</a> so environment variables configured in <a href="https://man.openbsd.org/login.conf.5">login.conf(5)</a> are also available.
<li>Added <a href="https://man.openbsd.org/crypto.3">crypto(3)</a> support for truncated SHA512 variants SHA512/224 and SHA512/256.
<!-- 2023/04/13 -->
<li>Added <a href="https://man.openbsd.org/rkrng.4">rkrng(4)</a> support for "rockchip,cryptov2-rng".
<li>Added the "local experiments" ethertypes.
<!-- 2023/04/12 -->
<li>Pulled MP-safe arprequest() out of the kernel lock.
<!-- 2023/04/11 -->
<li>Added a new implementation of BN_mod_sqrt().
<!-- 2023/04/10 -->
<li>Updated to xf86-video-nv 2.1.22.
<li>Updated to xf86-input-vmmouse 13.2.0.
<li>Updated to xf86-input-void 1.4.2.
<li>Updated to xf86-input-mouse 1.9.4.
<li>Updated to xf86-input-joystick 1.6.4.
<li>Updated to xf86-input-elographics 1.4.3.
<li>Updated to xwininfo 1.1.6.
<li>Updated to xvidtune 1.0.4.
<li>Updated to xkbcomp 1.4.6.
<li>Updated to xhost 1.0.9.
<li>Updated to xdriinfo 1.0.7.
<li>Updated to beforelight 1.0.6.
<li>Enabled the caps lock LED on modern Apple laptops.
<!-- 2023/04/09 -->
<li>Removed X9.31 support from <a href="https://man.openbsd.org/openssl.1">openssl(1)</a>.
<!-- 2023/04/08 -->
<!-- 2023/04/07 -->
<li>Fixed <a href="https://man.openbsd.org/ahci.4">ahci(4)</a>, allowing use of sata on the banana pi bpi-r2 pro.
<li>Made <a href="https://man.openbsd.org/dwqe.4">dwqe(4)</a> print the gmac to which it attaches.
<li>Removed kernel locks from the ARP input path.
<li>Ensured the softraid volume's device is chosen as root disk default for guided disk encryption.
<!-- 2023/04/06 -->
<li>Updated Mesa to 22.3.7.
<!-- 2023/04/05 -->
<li>Pushed kernel lock into nd6_resolve().
<li>Implemented an mbuf hold queue and <a href="https://man.openbsd.org/sysctl.8">sysctl(8)</a> net.inet6.icmp6.nd6_queued for ND6 as in ARP.
<li>Enabled Force Unit Access (FUA) for <a href="https://man.openbsd.org/ufshci.4">ufshci(4)</a> write commands to prevent intermittent data corruption.
<li>Ensured the PCIe link for the RK3568 PCIe controllers runs at the maximum possible speed.
<li>Implemented software control for the internal delays of the RTL8211F PHY.
<!-- 2023/04/04 -->
<li>Ensured correct checksum is calculated when sending IP packets to userland with divert-packet rules.
<li>Enabled guided disk encryption support on arm64.
<li>Made root on softraid installations boot out of the box on Raspberry Pis.
<!-- 2023/04/03 -->
<li>Prevented an accidental second sleep after resume when the lid is closed on a Dell Precision 5510.
<!-- 2023/04/02 -->
<li>Added <a href="https://man.openbsd.org/ehci.4">ehci(4)</a> support for using standard phy drivers registered with ofw/fdt first, allowing ehci to enable <a href="https://man.openbsd.org/rkusbphy.4">rkusbphy(4)</a>.
<li>Added <a href="https://man.openbsd.org/xhci.4">xhci(4)</a> support for enabling both the usb2 and usb3 phys. Added support for using standard phy drivers registered with the ofw/fdt code.
<li>Added glue for network interfaces to be found by fdt/ofw node or phandle and registered <a href="https://man.openbsd.org/mvneta.4">mvneta(4)</a> and <a href="https://man.openbsd.org/dwqe.4">dwqe(4)</a> mappings.
<li>Added a mutex to protect <a href="https://man.openbsd.org/clockintr.9">clockintr(9)</a> struct clockintr_queue.
<li>Added support for TEMPerGold 3.4 to <a href="https://man.openbsd.org/ugold.4">ugold(4)</a>.
<!-- 2023/04/01 -->
<li>Introduced <a href="https://man.openbsd.org/rkusbphy.4">rkusbphy(4)</a>, a driver for the usb2phy on Rockchip SoCs.
<li>Introduced <a href="https://man.openbsd.org/rkiovd.4">rkiovd(4)</a>, a driver for the IO voltage domains on Rockchip SoCs.
<li>Implemented regulator notifiers called when the voltage/current for a regulator is changed or when a regulator is initialized when it attaches for the first time.
<!-- 2023/03/31 -->
<li>Introduced <a href="https://man.openbsd.org/ngbe.4">ngbe(4)</a>, a driver for the WangXun WX1860 series Gigabit Ethernet device.
<!-- 2023/03/30 -->
<li>Significantly reduced <a href="https://man.openbsd.org/ypldap.8">ypldap(8)</a> memory usage when updating larger directories.
<!-- 2023/03/29 -->
<!-- 2023/03/28 -->
<li>Updated timezone data to include reversion of DST change in Lebanon.
<li>Introduced a <a href="https://man.openbsd.org/bgpd.8">bgpd(8)</a> semaphore to protect intermediate state from different RTR sessions from leaking into the RDE.
<li>Made <a href="https://man.openbsd.org/mg.1">mg(1)</a> fall back to /bin/sh if $SHELL is undefined.
<!-- 2023/03/27 -->
<li>Implemented branch target protection using the branch target identification feature introduced in Armv8.5, providing "head-CFI" to complement retguard's "tail-CFI."
<li>Added <a href="https://man.openbsd.org/dmesg.8">dmesg(8)</a> display of arm64 BT and SBSS features.
<li>Added a <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> format to show if there are unseen changes while in a node.
<li>Prevented write to clients attached to different sessions in <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> passthrough.
<!-- 2023/03/26 -->
<li>Added tilde and environment variable expansion to <a href="https://man.openbsd.org/ssh_config.5">ssh_config(5)</a> RevokedHostKeys.
<li>Added a check to <a href="https://man.openbsd.org/scp.1">scp(1)</a> to ensure a local source file exists before opening an SFTP connection to a remote server.
<li>Fixed <a href="https://man.openbsd.org/dwqe.4">dwqe(4)</a> on several boards using <a href="https://man.openbsd.org/rgephy.4">rgephy(4)</a>.
<li>Added <a href="https://man.openbsd.org/rkclock.4">rkclock(4)</a> support for the RK3568 32k RTC clock.
<!-- 2023/03/25 -->
<li>Improved <a href="https://man.openbsd.org/fdisk.8">fdisk(8)</a> comments documenting possible sources for MBR partition types and GPT partition GUIDs.
<li>Changed <a href="https://man.openbsd.org/malloc.3">malloc(3)</a> chunk sizes to be fine grained.
<!-- 2023/03/24 -->
<li>Moved to 7.3-current.
</ul>