plus68.html

<!doctype html>
<html lang=en id=plus>
<meta charset=utf-8>
<title>OpenBSD 6.8 Changelog</title>
<meta name="description" content="OpenBSD 6.8 changes">
<meta name="viewport" content="width=device-width, initial-scale=1">
<link rel="stylesheet" type="text/css" href="openbsd.css">
<link rel="canonical" href="https://www.openbsd.org/plus68.html">
<style>
strong {
	color: var(--red);
	font-weight: normal;
}

h3 {
	color: var(--blue);
}
</style>

<h2 id=OpenBSD>
<a href="index.html">
<i>Open</i><b>BSD</b></a>
6.8 Changelog
</h2>
<hr>

<p>
This selection is intended to include all important
and all user-visible changes.
For a complete record of all changes, please see the "source-changes"
mailing list, called "OpenBSD CVS"
in the <a href="https://marc.info/?l=openbsd-cvs">archives</a>,
or use <a href="anoncvs.html#CVS">CVS</a>.

<p>
For changes in other releases, click below:<br>
<a href="plus20.html">2.0</a>,
<a href="plus21.html">2.1</a>,
<a href="plus22.html">2.2</a>,
<a href="plus23.html">2.3</a>,
<a href="plus24.html">2.4</a>,
<a href="plus25.html">2.5</a>,
<a href="plus26.html">2.6</a>,
<a href="plus27.html">2.7</a>,
<a href="plus28.html">2.8</a>,
<a href="plus29.html">2.9</a>,
<a href="plus30.html">3.0</a>,
<a href="plus31.html">3.1</a>,
<a href="plus32.html">3.2</a>,
<a href="plus33.html">3.3</a>,
<a href="plus34.html">3.4</a>,
<a href="plus35.html">3.5</a>,
<a href="plus36.html">3.6</a>,
<br>
<a href="plus37.html">3.7</a>,
<a href="plus38.html">3.8</a>,
<a href="plus39.html">3.9</a>,
<a href="plus40.html">4.0</a>,
<a href="plus41.html">4.1</a>,
<a href="plus42.html">4.2</a>,
<a href="plus43.html">4.3</a>,
<a href="plus44.html">4.4</a>,
<a href="plus45.html">4.5</a>,
<a href="plus46.html">4.6</a>,
<a href="plus47.html">4.7</a>,
<a href="plus48.html">4.8</a>,
<a href="plus49.html">4.9</a>,
<a href="plus50.html">5.0</a>,
<a href="plus51.html">5.1</a>,
<a href="plus52.html">5.2</a>,
<a href="plus53.html">5.3</a>,
<br>
<a href="plus54.html">5.4</a>,
<a href="plus55.html">5.5</a>,
<a href="plus56.html">5.6</a>,
<a href="plus57.html">5.7</a>,
<a href="plus58.html">5.8</a>,
<a href="plus59.html">5.9</a>,
<a href="plus60.html">6.0</a>,
<a href="plus61.html">6.1</a>,
<a href="plus62.html">6.2</a>,
<a href="plus63.html">6.3</a>,
<a href="plus64.html">6.4</a>,
<a href="plus65.html">6.5</a>,
<a href="plus66.html">6.6</a>,
<a href="plus67.html">6.7</a>,
<a href="plus69.html">6.9</a>,
<a href="plus70.html">7.0</a>,
<a href="plus71.html">7.1</a>,
<br>
<a href="plus72.html">7.2</a>,
<a href="plus73.html">7.3</a>,
<a href="plus74.html">7.4</a>,
<a href="plus75.html">7.5</a>,
<a href="plus76.html">7.6</a>,
<a href="plus77.html">7.7</a>,
<a href="plus.html">current</a>.
<br>

<p>
<h3>Changes made between OpenBSD 6.7 and 6.8</h3>
<p>

<ul>
<!-- 2020/10/04 -->
<li>Reintroduced checks against heavy amap allocations for MAP_SHARED to prevent a panic reachable with <a href="https://man.openbsd.org/mmap">mmap(2)</a>.
<li>On arm64 and powerpc64, changed <a href="https://man.openbsd.org/kcopy">kcopy(9)</a> to perform 64-bit and 32-bit copies whenever possible, needed for <a href="https://man.openbsd.org/kbind">kbind(2)</a> to update PLT/GOT entries atomically when doing lazy binding.
<!-- 2020/09/29 -->
<li>Added support for the PCA9546 I2C switch to <a href="https://man.openbsd.org/pcamux">pcamux(4)</a>.
<li>Set length correctly in <a href="https://man.openbsd.org/ugen">ugen(4)</a> to prevent incorrect copy of descriptors to userland and kernel memory leaks.
<!-- 2020/09/28 -->
<li>Added the TP-LINK UE300 to <a href="https://man.openbsd.org/ure">ure(4)</a>.
<li>Added support for Comet Lake I2C controllers to <a href="https://man.openbsd.org/dwiic">dwiic(4)</a>, needed for the trackpad on machines such as the 8th generation Lenovo X1.
<li>Fixed a segfault in <a href="https://man.openbsd.org/pstat">pstat(8)</a> -v.
<!-- 2020/09/27 -->
<li>Released <a href="https://www.openssh.com/txt/release-8.4">OpenSSH 8.4</a>.
<!-- 2020/09/26 -->
<li>Added powerpc support for POWER9P "Axone" CPUs.
<!-- 2020/09/25 -->
<li>Updated LibreSSL to 3.2.2.
<!-- 2020/09/24 -->
<li>Made <a href="https://man.openbsd.org/apmd">apmd(8)</a> always ask the kernel about current hw.perfpolicy rather than maintaining state.
<!-- 2020/09/23 -->
<li>Added a new "set cert_partial_chain" config option to <a href="https://man.openbsd.org/iked.conf">iked.conf(5)</a> to allow verification of partial certificate chains if a trusted intermediate CA is found in /etc/iked/ca.
<!-- 2020/09/22 -->
<li>Used an IPI on powerpc64 so hw.setperf affects all cores in the mp kernel.
<li>Allowed handling of long lines in an <a href="https://man.openbsd.org/smtpd">smtpd(8)</a> aliases table.
<li>Ensured <a href="https://man.openbsd.org/sysupgrade">sysupgrade(8)</a> on systems with multiple root disks will proceed on the disk with auto_upgrade.conf present.
<!-- 2020/09/21 -->
<li>Moved to Mesa 20.0.8 in response to hard hangs on certain systems.
<li>Fixed <a href="https://man.openbsd.org/eeprom">eeprom(8)</a> error when setting variables on macppc.
<!-- 2020/09/20 -->
<li>Cleared the screen in <a href="https://man.openbsd.org/ksh">ksh(1)</a>'s vi editing mode before redrawing the line with ^L.
<li>Capped <a href="https://man.openbsd.org/ssh">ssh(1)</a> channel input buffer size at 16MB, avoiding high memory use when a peer advertises a large window but is slow to consume sent data.
<!-- 2020/09/19 -->
<li>Fixed a memory leak in x509_constraints_extract_names.
<li>Fixed frame pointer slot on aarch64 for functions not saving callee registers with reguard enabled.
<li>Added a bsd.schema to <a href="https://man.openbsd.org/ldapd">ldapd(8)</a> including a shadowPassword and an sshPublicKey attribute which can be used to extend existing LDAP users with the additional bsdAccount objectclass.
<!-- 2020/09/18 -->
<!-- 2020/09/17 -->
<li>Added a check for <a href="https://man.openbsd.org/pfctl">pfctl(8)</a> that an rtable exists when parsing the config.
<!-- 2020/09/16 -->
<li>Disabled <a href="https://man.openbsd.org/acpivout">acpivout(4)</a> brightness control on machines aware of Windows 8, enabling inteldrm to handle brightness ioctls.
<!-- 2020/09/15 -->
<li>Provided a naptime variable for userspace via <a href="https://man.openbsd.org/kvm_read">kvm_read(3)</a>, usable by <a href="https://man.openbsd.org/vmstat">vmstat(8)</a>.
<li>Defaulted to showing full IPv6 address entries in the routing tables displayed by <a href="https://man.openbsd.org/route">route(8)</a> show and <a href="https://man.openbsd.org/netstat">netstat(1)</a> -r.
<li>Introduced <a href="https://man.openbsd.org/abl">abl(4)</a>, a new driver to control the backlight brightness on Intel-based Apple machines, and allowed it to be controlled through <a href="https://man.openbsd.org/wsconsctl">wsconsctl(8)</a>.
<li>Added a "-s timeout" feature to <a href="https://man.openbsd.org/rpki-client">rpki-client(8)</a> with a one hour default, allowing fresh attempts with <a href="https://man.openbsd.org/cron">cron(8)</a> if rpki-client gets stuck.
<!-- 2020/09/14 -->
<li>Prevented established TCP and TLS sockets of <a href="https://man.openbsd.org/syslogd">syslogd(8)</a> from staying open forever if a client aborted the connection silently.
<li>Ensured certain registers are read before a potential sleep in trap()
<li>Added support for "&" and "|" operators in btrace scripts.
<li>Fixed <a href="https://man.openbsd.org/smtpd">smtpd(8)</a> handling of user names containing "@" symbols.
<li>Prevented improper disabling of the backlight in <a href="https://man.openbsd.org/umstc">umstc(4)</a> when brightness is adjusted to 0.
<li>Allowed <a href="https://man.openbsd.org/snmp">snmp(1)</a> mibtree to take one or more arguments to be converted to a chosen output format.
<li>Skipped scanning file systems which are both nodev and nosuid for SUID, SGID and device files with <a href="https://man.openbsd.org/security">security(8)</a>.
<li>Added an explanation for <a href="https://man.openbsd.org/acme-client">acme-client(1)</a> account creation failure.
<li>Allowed <a href="https://man.openbsd.org/slaacd">slaacd(8)</a> to handle all rdomains in a single daemon.
<!-- 2020/09/13 -->
<li>Fixed "$@" splitting with empty IFS in <a href="https://man.openbsd.org/ksh">ksh(1)</a>.
<li>Used READ(16)/WRITE(16) commands for disks large enough to require them to access the last sectors, fixing large 512E devices plugged into USB to ATA/ATAPI bridges which mistakenly use 4K sector addresses/sizes.
<!-- 2020/09/12 -->
<li>Imported <a href="https://man.openbsd.org/login_ldap">login_ldap(8)</a>, using <a href="https://man.openbsd.org/ldap">ldap(1)</a> rather than openldap.
<li>Allowed theoretical multiple attachment of <a href="https://man.openbsd.org/asmc">asmc(4)</a> controllers.
<li>Changed <a href="https://man.openbsd.org/rpki-client">rpki-client(8)</a> -n behavior to automatically validate the repo.
<li>Added support for the RK3308 MAC to <a href="https://man.openbsd.org/dwge">dwge(4)</a>.
<li>Modified <a href="https://man.openbsd.org/trunk">trunk(4)</a> to keep port interfaces UP on removal, matching <a href="https://man.openbsd.org/aggr">aggr(4)</a> behavior.
<li>Enabled <a href="https://man.openbsd.org/btrace">btrace(8)</a>.
<!-- 2020/09/11 -->
<li>Added <a href="https://man.openbsd.org/btrace">btrace(8)</a> -p flag to filter all actions by PID.
<!-- 2020/09/10 -->
<!-- 2020/09/09 -->
<li>Fixed outbound <a href="https://man.openbsd.org/bpf">bpf(4)</a> tap for <a href="https://man.openbsd.org/ogx">ogx(4)</a>.
<!-- 2020/09/08 -->
<li>Handled AGL interfaces on octeon, making management network ports usable on some machines.
<li>Allowed use of -N without a command to change or add a note to an existing key in <a href="https://man.openbsd.org/tmux">tmux(1)</a>.
<!-- 2020/09/07 -->
<li>Added RK3308 temperature sensors to <a href="https://man.openbsd.org/rktemp">rktemp(4)</a>.
<li>Added RK3328 PWM, also found in the RK3308, to <a href="https://man.openbsd.org/rkpwm">rkpwm(4)</a>.
<li>Added control for backlight compensation to <a href="https://man.openbsd.org/video">video(4)</a>.
<!-- 2020/09/06 -->
<li>Added tsc_delay(), a <a href="https://man.openbsd.org/delay">delay(9)</a> implementation based on the TSC, to amd64.
<li>Allowed specification of supported TLS protocols in <a href="https://man.openbsd.org/ftp">ftp(1)</a> "-S protocols".
<!-- 2020/09/05 -->
<li>Added <a href="https://man.openbsd.org/mpii">mpii(4)</a> to powerpc64.
<!-- 2020/09/04 -->
<li>Added kstat to <a href="https://man.openbsd.org/cnmac">cnmac(4)</a>.
<!-- 2020/09/03 -->
<li>Updated Mesa to 20.1.7.
<!-- 2020/09/02 -->
<li>Added a 30 second timeout for OCSP requests in <a href="https://man.openbsd.org/iked">iked(8)</a>.
<!-- 2020/09/01 -->
<li>Allowed a-z keys for <a href="https://man.openbsd.org/tmux">tmux(1)</a> display-panes to jump to higher-numbered panes.
<!-- 2020/08/31 -->
<li>Moved to 6.8-beta.
<!-- 2020/08/30 -->
<li>Moved <a href="https://man.openbsd.org/ntpd">ntpd(8)</a> to unsynced mode if no replies are received for awhile due to connectivity issues.
<li>Fixed <a href="https://man.openbsd.org/make">make(1)</a> :S with anchors and replacement.
<!-- 2020/08/29 -->
<li>Improved PLL1(CPU_PLL) stability for the Allwinner H3/H2+.
<!-- 2020/08/28 -->
<!-- 2020/08/27 -->
<!-- 2020/08/26 -->
<li>Added support for requiring user-verified FIDO keys in <a href="https://man.openbsd.org/sshd">sshd(8)</a>.
<li>Improved detection of the proper powerpc64 boot device by choosing the disk matching the bootduid of the boot kernel.
<li>Added <a href="https://man.openbsd.org/top">top(1)</a> "t" to toggle the display of routing tables.
<li>Allowed disabling of <a href="https://man.openbsd.org/iked">iked(8)</a> DPD liveness checks by setting dpd_check_interval to 0 in <a href="https://man.openbsd.org/iked.conf">iked.conf(5)</a>.
<li>Updated Mesa to 20.1.6.
<!-- 2020/08/25 -->
<li>Fixed a race in single-thread mode switching.
<li>Corrected multiple input validation deficits in X server extensions.
<li>Fixed an integer overflow in libX11 which could lead to a double free.
<li>Added a dpd_check_interval configuration option to <a href="https://man.openbsd.org/iked.conf">iked.conf(5)</a>.
<!-- 2020/08/24 -->
<li>Released <a href="https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.2.1-relnotes.txt">LibreSSL 3.2.1</a>.
<li>Added support for non-localhost fastcgi sockets to <a href="https://man.openbsd.org/httpd.conf">httpd.conf(5)</a>.
<li>Rehashed main <a href="https://man.openbsd.org/pf">pf(4)</a> rulesets after rule expiration.
<li>Implemented UHS-I support in the <a href="https://man.openbsd.org/sdmmc">sdmmc(4)</a> midlayer and enabled it in <a href="https://man.openbsd.org/amlmmc">amlmmc(4)</a>.
<li>Updated <a href="https://man.openbsd.org/unbound">unbound(8)</a> to 1.11.0.
<!-- 2020/08/23 -->
<li>Added filtering by routing table to <a href="https://man.openbsd.org/top">top(1)</a>.
<li>Added support for the IBM POWER8 host bridge.
<li>Introduced <a href="https://man.openbsd.org/xicp">xicp(4)</a>, a driver for the interrupt control presenter hardware found on POWER8 CPUs.
<li>Added the new <a href="https://man.openbsd.org/iked">iked(8)</a> configuration option "set enforcesingleikesa" to limit the number of connections for each peer.
<li>Added powerpc64 support for "normal" external interrupts, needed for running POWER8 and earlier CPUs.
<!-- 2020/08/22 -->
<li>Updated to libfido2 46710ac06.
<li>Prevented concurrent CREATE_CHILD_SA and INFORMATION exchanges in <a href="https://man.openbsd.org/iked">iked(8)</a>.
<li>Added <a href="https://man.openbsd.org/fstat">fstat(1)</a> support for looking up unix domain sockets by file name.
<li>Moved <a href="https://man.openbsd.org/sysctl">sysctl(2)</a> CTL_DEBUG from DEBUG to the new DEBUG_SYSCTL.
<!-- 2020/08/21 -->
<!-- 2020/08/20 -->
<li>Added the <a href="https://man.openbsd.org/tmux">tmux(1)</a> n: modifier to get the length of a format.
<!-- 2020/08/19 -->
<li>Allowed SIOCSWGDPID and SIOCSWGMAXFLOW ioctls for non-root, preventing <a href="https://man.openbsd.org/switch">switch(4)</a> interfaces from appearing partially as <a href="https://man.openbsd.org/bridge">bridge(4)</a> devices for unprivileged users running <a href="https://man.openbsd.org/ifconfig">ifconfig(8)</a>.
<li>Added support for IODA2 bridges such as those found on POWER8 chips.
<li>Added powerpc support for POWER8 CPUs.
<li>Added <a href="https://man.openbsd.org/unveil">unveil(2)</a> to the main process of <a href="https://man.openbsd.org/relayd">relayd(8)</a>.
<!-- 2020/08/18 -->
<li>Added optional <a href="https://man.openbsd.org/iked">iked(8)</a> time-stamp validation for OCSP.
<!-- 2020/08/17 -->
<li>Enabled PAN (Privileged Access Never) on arm64 CPUs supporting it.
<li>Added initial <a href="https://man.openbsd.org/tcpdump">tcpdump(8)</a> support for handling geneve packets.
<!-- 2020/08/16 -->
<li>Updated <a href="https://man.openbsd.org/xkbcomp">xkbcomp(1)</a> to 1.4.3.
<li>Properly implemented <a href="https://man.openbsd.org/amlmmc">amlmmc(4)</a> setting of signal voltage.
<!-- 2020/08/15 -->
<!-- 2020/08/14 -->
<li>Added Exar XR17V35x serial port support.
<li>Added <a href="https://man.openbsd.org/sdmmc">sdmmc(4)</a> support for eMMC HS200 mode.
<!-- 2020/08/13 -->
<!-- 2020/08/12 -->
<li>Added a ROUTE_FLAGFILTER socket option for routing sockets, allowing routing daemons to opt out of receiving messages for L2 and broadcast route entries.
<!-- 2020/08/11 -->
<li>Prioritized incoming certificate requests by the order of CERTEQ payloads in the received message in <a href="https://man.openbsd.org/iked">iked(8)</a>.
<li>Updated <a href="https://man.openbsd.org/awk">awk(1)</a> to the August 7, 2020 version.
<li>Added optional time limits for the AddKeysToAgent keyword in <a href="https://man.openbsd.org/ssh_config">ssh_config(5)</a>.
<li>Allowed the combination of <a href="https://man.openbsd.org/video">video(1)</a> "-dc" options, reset and display control values.
<!-- 2020/08/10 -->
<li>Added <a href="https://man.openbsd.org/kstat">kstat(1)</a> -w option, allowing update and printing of stats at a specified wait interval.
<li>Added <a href="https://man.openbsd.org/pms">pms(4)</a> support for the Elantech v1 touchpad with firmware version 0x20022.
<li>Updated compiler-rt to 10.0.1.
<li>Released <a href="https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.1.4-relnotes.txt">LibreSSL 3.1.4</a>.
<li>Stopped blocking IPIs when acquiring the rendezvous mutex of mips64, which may fix some hangs on sgi.
<!-- 2020/08/09 -->
<li>Added the ability to filter which <a href="https://man.openbsd.org/kstat">kstat(1)</a> entries are displayed.
<li>Added P-521 to the list of curves supported by default for TLS.
<li>Updated LLVM to 10.0.1 including clang, lld and lldb.
<!-- 2020/08/08 -->
<li>Stopped preventing TCP connections to IPv6 anycast addresses.
<!-- 2020/08/07 -->
<li>Set IPv6 source address selection to prefer the address with the highest preferred lifetime in case of a tie.
<!-- 2020/08/06 -->
<li>Allowed <a href="https://man.openbsd.org/pf">pf(4)</a> to divert packets from <a href="https://man.openbsd.org/bridge">bridge(4)</a> to local socket.
<li>Avoided reading one byte before the path buffer in <a href="https://man.openbsd.org/mountd">mountd(8)</a>.
<!-- 2020/08/05 -->
<li>Added the ability to set and display <a href="https://man.openbsd.org/video">video(1)</a> control values directly on the CLI.
<li>Changed <a href="https://man.openbsd.org/tmux">tmux(1)</a> searching to behave more like emacs and prevented regex searching from overlapping when searching forward.
<!-- 2020/08/04 -->
<li>Built installXX.{img,iso} powerpc64 files.
<li>Added powerpc64 cd9660, msdos and inet6 ramdisk support.
<li>Improved <a href="https://man.openbsd.org/ure">ure(4)</a> TX performance by combining multiple packets into one xfer as possible.
<!-- 2020/08/03 -->
<li>Corrected <a href="https://man.openbsd.org/ssl">ssl(8)</a> handling of server requests for an OCSP response.
<li>Added additional scsi devices on powerpc64.
<li>Updated LLVM to 10.0.0, including clang, lld and lldb.
<li>Added support for Gear Head keyboards.
<!-- 2020/08/02 -->
<li>Updated libpcap to 9.0.
<li>Added the <a href="https://man.openbsd.org/pcap-filter">pcap-filter(5)</a> "sample NUM" primitive to allow capture of 1/NUM packets.
<li>Allowed <a href="https://man.openbsd.org/scp">scp(1)</a> and <a href="https://man.openbsd.org/sftp">sftp(1)</a> -A option to explicitly enable agent forwarding.
<li>Updated libcbor to v0.7.0.
<!-- 2020/08/01 -->
<li>Added support for AX201 devices to <a href="https://man.openbsd.org/iwx">iwx(4)</a>.
<li>Added support for remote coverage to <a href="https://man.openbsd.org/kcov">kcov(4)</a>.
<!-- 2020/07/31 -->
<li>Updated Spleen kernel fonts to version 1.8.2.
<li>Fixed a race condition for isoc devices during device close.
<li>Fixed potential information leak via X server pixel data uninitialized memory.
<li>Fixed heap corruption in the X input method client in libX11.
<li>Enabled userland timecounter code on sparc64.
<!-- 2020/07/30 -->
<li>Updated <a href="https://man.openbsd.org/awk">awk(1)</a> through the July 30, 2020 version.
<li>Added Intel Wi-Fi 6 AX201 <a href="https://man.openbsd.org/pci">pci(4)</a> device ID.
<!-- 2020/07/29 -->
<li>Fixed a panic in <a href="https://man.openbsd.org/wscons">wscons(4)</a>.
<!-- 2020/07/28 -->
<li>Implemented IPv6 source address selection as outlined in RFC 6724 section 5.
<li>Fixed bogus frame sizes being returned by <a href="https://man.openbsd.org/xhci">xhci(4)</a>.
<!-- 2020/07/27 -->
<li>Released <a href="https://man.openbsd.org/rpki-client">rpki-client(8)</a> 6.7p1 including OpenBSD 6.7 Errata 015.
<li>Fixed <a href="https://man.openbsd.org/rpki-client">rpki-client(8)</a> return value check for openssl API used during pubkey validation.
<li>Added <a href="https://man.openbsd.org/tmux">tmux(1)</a> -d option to display-message to set delay.
<!-- 2020/07/26 -->
<li>Added / as an alias for g (grep) in <a href="https://man.openbsd.org/top">top(1)</a>.
<li>Avoided nvram lock timeout on sparc64 systems with onboard BCM5704 <a href="https://man.openbsd.org/bge">bge(4)</a> instances that come without a fitted EEPROM/NVRAM.
<!-- 2020/07/25 -->
<li>Ported NetBSD's arm64 disassembler for <a href="https://man.openbsd.org/ddb">ddb(4)</a>.
<!-- 2020/07/24 -->
<!-- 2020/07/23 -->
<li>Fixed potential use-after-free and double-free issues in <a href="https://man.openbsd.org/PEM_X509_INFO_read_bio">PEM_X509_INFO_read_bio(3)</a>.
<li>Increased the powerpc64 MAXCPUS to 48, the maximum cores available in any POWER9 system.
<li>Updated <a href="https://man.openbsd.org/nsd">nsd(8)</a> to 4.3.2.
<li>Added support for the AMDI0010 touchpad on the Inspiron 5505.
<!-- 2020/07/22 -->
<li>Increased the <a href="https://man.openbsd.org/mcx">mcx(4)</a> event queue size, preventing a potential interrupt storm on the ConnectX-4.
<li>Implemented IPIs on powerpc64.
<li>Prevented an <a href="https://man.openbsd.org/unveil">unveil(2)</a> failure with chdir / on <a href="https://man.openbsd.org/sensorsd">sensorsd(8)</a>.
<li>Built bsd.mp on powerpc64.
<li>Created /dev nodes for sparc64 and powerpc console.
<li>Prevented <a href="https://man.openbsd.org/mg">mg(1)</a> from running out of memory or segfaulting with <code>query-replace-regex ^</code>.
<li>Added support for Intel AX200 Bluetooth <a href="https://man.openbsd.org/usb">usb(4)</a> devices.
<li>Forced long-names on msdos filenames for installboot on most 32-bit architectures.
<li>Filtered vlan and svlan packets by default for <a href="https://man.openbsd.org/tpmr">tpmr(4)</a>.
<!-- 2020/07/21 -->
<li>Changed <a href="https://man.openbsd.org/tpmr">tpmr(4)</a> from ifconfig [-]trunkport to add|del synopsis.
<li>Added <a href="https://man.openbsd.org/rge">rge(4)</a> support for newer RTL8125 chipset (RTL8125B).
<li>Introduced powerpc64 GENERIC.MP.
<li>Corrected ruleset checksum calculation to allow <a href="https://man.openbsd.org/pfsync">pfsync(4)</a> to verify rulesets are identical on all nodes.
<li>Improved processing of lost frames during 802.11 Rx aggregation.
<!-- 2020/07/20 -->
<li>Handled <a href="https://man.openbsd.org/iked">iked(8)</a> TEMPORARY_FAILURE notification on IKESA rekeying.
<li>Fixed a dst/src <a href="https://man.openbsd.org/iked">iked(8)</a> port configuration bug with multiple flows.
<li>Ensured only pseudo-terminal devices use reprint delays.
<li>Switched the default pager from "<a href="https://man.openbsd.org/more">more(1)</a> -s" to <a href="https://man.openbsd.org/less">less(1)</a>.
<li>Added a new column to <a href="https://man.openbsd.org/wsfontload">wsfontload(8)</a> -l output to report the number of characters contained in a loaded font.
<li>Updated Spleen kernel fonts to version 1.8.1.
<li>Fixed gain calibration for some <a href="https://man.openbsd.org/iwn">iwn(4)</a> devices (5000 and up).
<!-- 2020/07/19 -->
<li>Enabled <a href="https://man.openbsd.org/xhci">xhci(4)</a> in the powerpc64 BOOT kernel.
<li>Fixed the initial <a href="https://man.openbsd.org/sndiod">sndiod(8)</a> alternate device number, preventing device number 1 from being skipped on first use.
<!-- 2020/07/18 -->
<li>Added additional Atheros <a href="https://man.openbsd.org/pci">pci(4)</a> IDs.
<li>Improved the powerpc64 kernel linker script and installed proper page protections via pmap_bootstrap().
<li>Passed boothowto and bootduid parameters to the booted powerpc64 kernel via the device tree.
<!-- 2020/07/17 -->
<li>Implemented userland timecounting for macppc and octeon.
<li>Added initial powerpc64 X sets.
<li>Randomized the system stoeplitz key.
<li>Added installboot powerpc64 support.
<li>Added <a href="https://man.openbsd.org/video">video(1)</a> white balance temperature control through w/W keys.
<li>Enabled multiq support for <a href="https://man.openbsd.org/ix">ix(4)</a>.
<!-- 2020/07/16 -->
<li>Added a "%k" TOKEN to <a href="https://man.openbsd.org/ssh_config">ssh_config(5)</a> that expands to the effective HostKey of the destination.
<li>Added %-TOKEN, environment variable and tilde expansion to UserKnownHostsFile in <a href="https://man.openbsd.org/ssh_config">ssh_config(5)</a>.
<li>Introduced an initial bootloader for OpenBSD/powerpc64.
<li>Added a <a href="https://man.openbsd.org/ktrace">ktrace(1)</a> -T option to make time-related system calls more prominent.
<li>Fixed a potential crash when bringing down an <a href="https://man.openbsd.org/mcx">mcx(4)</a> interface.
<!-- 2020/07/15 -->
<li>Optimized character rendering in 32bpp mode, providing double-pixel rendering for the common font widths and a signicant speed increase.
<li>Added a SENSOR_ENERGY sensor type which uses microjoules.
<li>Implemented userland timecounter for arm64.
<li>Prevented root from freezing the UTC clock with <a href="https://man.openbsd.org/settimeofday">settimeofday(2)</a> at securelevel 2.
<li>Fixed <a href="https://man.openbsd.org/iked">iked(8)</a> public key authentication interoperability with *swan and other IKEv2 implementations by making CERT and CERTREQ payloads optional.
<li>Corrected handling of padding cells while searching in <a href="https://man.openbsd.org/tmux">tmux(1)</a>.
<!-- 2020/07/14 -->
<li>Allowed additional control over the use of <a href="https://man.openbsd.org/ssh-askpass">ssh-askpass(1)</a> in <a href="https://man.openbsd.org/ssh-add">ssh-add(1)</a>, including force-enable/disable.
<li>Introduced <a href="https://man.openbsd.org/xics">xics(4)</a>, a driver for the OPAL virtual ICS.
<li>Added powerpc64 FDT interrupt support.
<li>Added support for routing interrupts to other CPUs in <a href="https://man.openbsd.org/ampintc">ampintc(4)</a> and <a href="https://man.openbsd.org/agintc">agintc(4)</a>.
<li>Fixed performance problems relating to tty subsystem abuse.
<!-- 2020/07/13 -->
<li>Enabled background scanning on <a href="https://man.openbsd.org/iwx">iwx(4)</a> devices.
<li>Fixed <a href="https://man.openbsd.org/athn">athn(4)</a> use with WPA2 APs.
<!-- 2020/07/12 -->
<li>Stopped creation of non-existent <a href="https://man.openbsd.org/bridge">bridge(4)</a> interfaces.
<li>Used <a href="https://man.openbsd.org/su">su(1)</a> -fl to avoid sourcing the target user's .profile in <a href="https://man.openbsd.org/rc.d">rc.d(8)</a>/<a href="https://man.openbsd.org/rcctl">rcctl(8)</a>.
<!-- 2020/07/11 -->
<li>Synchronized each core's CP0 cycle counter using the IO clock counter on mips64 and octeon, making the cycle counter usable as timecounter.
<li>Improved speed of scrolling by optimizing <a href="https://man.openbsd.org/rasops">rasops(9)</a> write-only framebuffer console.
<li>Implemented linear and power-of-two histograms in btrace(5).
<!-- 2020/07/10 -->
<li>Added the Spleen 6x12 font to wsfont.
<!-- 2020/07/09 -->
<li>Corrected trackstick/button attachment of Windows Precision Touchpad <a href="https://man.openbsd.org/imt">imt(4)</a> devices, fixing behavior on certain Dell Latitude laptops.
<li>Fixed information leak in semctl SEM_GET.
<li>Enabled spleen16x32 and spleen32x64 fonts on armv7 for GENERIC kernels.
<!-- 2020/07/08 -->
<li>Taught <a href="https://man.openbsd.org/su">su(1)</a> -l -f to start a regular shell for non-csh shells rather than a login shell.
<!-- 2020/07/07 -->
<li>Introduced <a href="https://man.openbsd.org/opalsens">opalsens(4)</a>, a driver for sensors provided by the OPAL firmware.
<li>Enabled TLSv1.3 for the generic TLS_method().
<li>Corrected <a href="https://man.openbsd.org/route">route(8)</a> handling of ::/0 and "route add -inet 0.0.0.0 -prefixlen 0 (gateway)".
<li>Switched <a href="https://man.openbsd.org/iwx">iwx(4)</a> from -46 to -48 firmware.
<li>Added support for set -o pipefail to <a href="https://man.openbsd.org/ksh">ksh(1)</a>, potentially helping error checking.
<!-- 2020/07/06 -->
<li>Protected the whole <a href="https://man.openbsd.org/pipex">pipex(4)</a> layer by NET_LOCK().
<li>Increased the buffer size for OFW parameter name strings, making it possible to dump the full device tree on POWER9 systems using eeprom -p.
<li>Added support for timecounting in userland, improving speed and responsiveness in programs which make many time of day calls.
<li>Repaired <a href="https://man.openbsd.org/athn">athn(4)</a> in client mode against WPA2 access points.
<li>Added support for the D-Link DWA-121 rev B1 <a href="https://man.openbsd.org/urtwn">urtwn(4)</a> device.
<!-- 2020/07/05 -->
<li>Introduced <a href="https://man.openbsd.org/kstat">kstat(1)</a>, a subsystem to allow the kernel to expose statistics to userland (and <a href="https://man.openbsd.org/kstat">kstat(8)</a>, the userland side).
<li>Fixed <a href="https://man.openbsd.org/ls">ls(1)</a> -R mode to not display subdirectories of a directory beginning with '.' and ensure directory names are always displayed.
<li>Modified <a href="https://man.openbsd.org/uvideo">uvideo(4)</a> to fix webcam detection in Firefox 78.
<li>Began natively compiling for the powerpc64 architecture.
<li>Fixed mbuf leak in <a href="https://man.openbsd.org/urtwn">urtwn(4)</a> with frames CCMP-encrypted by hardware.
<!-- 2020/07/04 -->
<li>Fixed an <a href="https://man.openbsd.org/xconsole">xconsole(1)</a> crash by starting it after setting the background.
<li>Prevented a core dump in <a href="https://man.openbsd.org/ftp">ftp(1)</a> during fetch abort.
<li>Fixed intermittent failing <a href="https://man.openbsd.org/pms">pms(4)</a> device initialization seen on some Synaptics devices.
<!-- 2020/07/03 -->
<li>Used an LFENCE instruction everywhere RDTSC is used for a time measurement, reducing the jitter in TSC skew measurements.
<li>Prevented <a href="https://man.openbsd.org/ssh">ssh(1)</a> port forwarding clients from keeping a connection alive when it should be terminated.
<!-- 2020/07/02 -->
<li>Updated <a href="https://man.openbsd.org/awk">awk(1)</a> to July 2, 2020 version.
<!-- 2020/07/01 -->
<li>Initialized v4l2_requestbuffers for libv4l compatibility, allowing view of video encodings not directly supported by <a href="https://man.openbsd.org/video">video(1)</a>.
<!-- 2020/06/30 -->
<li>Fixed gpu hangs when starting Xorg seen with 4.19 and 5.7 drm.
<li>Removed support for the socket keyword in <a href="https://man.openbsd.org/snmpd.conf">snmpd.conf(5)</a>.
<li>Removed the -f (force) option in <a href="https://man.openbsd.org/rpki-client">rpki-client(8)</a>.
<!-- 2020/06/29 -->
<li>Added support for the <a href="https://man.openbsd.org/mcx">mcx(4)</a> ConnectX-6 Dx.
<li>Introduced arch/powerpc64.
<li>Prevented creation of bogus <a href="https://man.openbsd.org/sd">sd(4)</a> devices for <a href="https://man.openbsd.org/nvme">nvme(4)</a> namespaces which are configured but have size 0.
<li>Updated Spleen kernel fonts to version 1.8.0.
<!-- 2020/06/28 -->
<li>Prevented possible libevent state corruption in <a href="https://man.openbsd.org/vmd">vmd(8)</a>.
<li>Introduced a darker <a href="https://man.openbsd.org/xenodm">xenodm(1)</a> login widget and a lower contrast default background.
<li>Allowed switching between alternate devices (-F) with <a href="https://man.openbsd.org/sndioctl">sndioctl(1)</a>.
<!-- 2020/06/27 -->
<li>Fixed a problem where switching to a vt and back was needed to see rc output and login prompt on some intel machines with skylake and newer graphics.
<li>Converted macppc, octeon and loongson to use machine-independent installboot.
<li>Updated to freetype 2.10.2.
<!-- 2020/06/26 -->
<li>Switched the default CDDB database for <a href="https://man.openbsd.org/cdio">cdio(1)</a> to gnudb.gnudb.org:8880.
<li>Fixed merging of files that lack newlines for <a href="https://man.openbsd.org/diff3">diff3(1)</a>, OpenRCS and OpenCVS.
<li>Allowed <a href="https://man.openbsd.org/ssh-add">ssh-add(1)</a> "-d -" to read keys to be deleted from stdin.
<!-- 2020/06/25 -->
<li>Fixed variable shadowing in <a href="https://man.openbsd.org/vpci">vpci(4)</a> which led to a noticeable delay while attaching devices using multiple msi-x vectors.
<li>Introduced a framework for MII busses.
<li>Introduced <a href="https://man.openbsd.org/mvpp">mvpp(4)</a>, a driver for the Marvell Packet Processor v2 as used on the Armada 7K and 8K SoCs.
<li>Implemented rss/toeplitz support for <a href="https://man.openbsd.org/ixl">ixl(4)</a> 710 chips.
<!-- 2020/06/24 -->
<li>Allowed <a href="https://man.openbsd.org/sshd_config">sshd_config(5)</a> longer than 256k.
<li>Ensured the STOP command sent by <a href="https://man.openbsd.org/sd">sd(4)</a> on powerdown will not result in hanging the machine if commands to the USB mass storage fail.
<li>Modified <a href="https://man.openbsd.org/ldapd">ldapd(8)</a> use of "ldaps" and "tls" keywords to enable only the libtls defaults for protocols and ciphers. The new "legacy" keyword can be used before these keywords in <a href="https://man.openbsd.org/ldapd.conf">ldapd.conf(5)</a> to enable them all.
<!-- 2020/06/23 -->
<li>Enabled <a href="https://man.openbsd.org/wg">wg(4)</a>.
<li>Stopped incrementing openclass for a literal "[" in <a href="https://man.openbsd.org/awk">awk(1)</a>, allowing parsing of expressions such as "/[[/[]/".
<li>Increased pbuild datasize limit to 8G to allow Firefox to build with Rust 1.44.
<!-- 2020/06/22 -->
<li>Implemented pci_intr_establish_cpu() for <a href="https://man.openbsd.org/pyro">pyro(4)</a> and <a href="https://man.openbsd.org/vpci">vpci(4)</a>-based sparc64 systems.
<li>Introduced <a href="https://man.openbsd.org/gettime">gettime(9)</a> and <a href="https://man.openbsd.org/getuptime">getuptime(9)</a> and substituted these for time_second(9) and time_uptime(9) throughout the kernel to prevent split-read problems on 32-bit platforms.
<li>Introduced <a href="https://man.openbsd.org/opalcons">opalcons(4)</a>, a driver for the OPAL console.
<li>Added support for the Ericsson F5521gw Mobile Broadband Modem.
<li>Resolved a panic in bridge_ioctl() by ensuring the netlock is held when calling ioctl handlers and dropped for the <a href="https://man.openbsd.org/wg">wg(4)</a>-specific ioctls.
<li>Enabled critical temperature detection in <a href="https://man.openbsd.org/iwx">iwx(4)</a> firmware.
<!-- 2020/06/21 -->
<li>Added <a href="https://man.openbsd.org/ssh">ssh(1)</a> support for <a href="https://man.openbsd.org/fido">fido(4)</a> WebAuthn (verification only).
<li>Added an ioctl allowing userland to access read-only support information about pci devices via the vpd register.
<li>Enabled <a href="https://man.openbsd.org/nvme">nvme(4)</a> on i386.
<li>Fixed <a href="https://man.openbsd.org/vmd">vmd(8)</a> ns8250 lockup due to a race condition, helping to prevent linux vm crashes when the return key is held on boot.
<li>Updated Spleen kernel fonts to version 1.7.1.
<li>Added <a href="https://man.openbsd.org/wg">wg(4)</a>, an in-kernel driver for Wireguard vpn communication.
<!-- 2020/06/20 -->
<li>Added <a href="https://man.openbsd.org/bcmtmon">bcmtmon(4)</a>, a driver for the temperature sensor on the Raspberry Pi 4.
<!-- 2020/06/19 -->
<li>Added <a href="https://man.openbsd.org/bwfm">bwfm(4)</a> support for BCM4359 SDIO variants such as the AP6359SA module found on the RockPro64 WiFi module.
<li>Fixed a fatal firmware error at run-time on <a href="https://man.openbsd.org/iwx">iwx(4)</a>.
<li>Added WPA2 (CCMP) crypto offload support to <a href="https://man.openbsd.org/iwx">iwx(4)</a>.
<!-- 2020/06/18 -->
<li>Added <a href="https://man.openbsd.org/pcamux">pcamux(4)</a>, a driver for the PCA8548 I2C switch.
<li>Added <a href="https://man.openbsd.org/bge">bge(4)</a> support for the BCM5719 A1.
<!-- 2020/06/17 -->
<li>Fixed broken HID descriptors of Elecom trackballs with 6 or 8 buttons.
<li>Fixed a crash in <a href="https://man.openbsd.org/re">re(4)</a>.
<li>Enabled multiple queues on <a href="https://man.openbsd.org/vmx">vmx(4)</a>.
<!-- 2020/06/16 -->
<li>Added intrmap, an api that picks CPUs for devices to attach interruptions to.
<li>Added d and D keys to <a href="https://man.openbsd.org/tmux">tmux(1)</a> customize mode to reset to defaults.
<li>Added a symmetric toeplitz implementation with integration for nics, usable through the <a href="https://man.openbsd.org/stoeplitz_to_key">stoeplitz_to_key(9)</a> API.
<!-- 2020/06/15 -->
<li>Supported -T html -O tag for <a href="https://man.openbsd.org/mandoc">mandoc(1)</a> by passing a file:// URI to the pager.
<!-- 2020/06/14 -->
<li>Fixed an <a href="https://man.openbsd.org/sdhc">sdhc(4)</a> panic on the MACCHIATObin due to unaligned memory access.
<!-- 2020/06/13 -->
<li>Added support for the XIVE interrupt controller found on POWER9 CPUs.
<li>Added <a href="https://man.openbsd.org/tmux">tmux(1)</a> -b flags to insert a window before (like the existing -a for after) to break-pane, move-window and new-window.
<!-- 2020/06/12 -->
<li>Implemented the gensub(), systime() and strftime() functions for <a href="https://man.openbsd.org/awk">awk(1)</a>.
<li>Fixed <a href="https://man.openbsd.org/sndiod">sndiod(8)</a> crashes when USB devices are disconnected.
<li>Added <a href="https://man.openbsd.org/netstat">netstat(1)</a> -R to show a summary of rdomains with associated interfaces and tables.
<!-- 2020/06/11 -->
<li>Added a <a href="https://man.openbsd.org/tmux">tmux(1)</a> -A option to pause a pane manually.
<!-- 2020/06/10 -->
<li>Added <a href="https://man.openbsd.org/escodec">escodec(4)</a>, a driver for the Everest ES8316 audio codec used on the Pinebook Pro.
<li>Added <a href="https://man.openbsd.org/rkiis">rkiis(4)</a>, a driver for the I25 controller found on the Rockchip RK3399.
<li>Added <a href="https://man.openbsd.org/simpleamp">simpleamp(4)</a>, a driver for "simple audio amplifier," one of the aux devices for <a href="https://man.openbsd.org/simpleaudio">simpleaudio(4)</a>.
<li>Added <a href="https://man.openbsd.org/simpleaudio">simpleaudio(4)</a>, a driver for "simple audio cards." This is a wrapper connecting the I25 controller, the codec and some aux devices.
<li>Introduced a framework for digital audio interfaces.
<li>Populated a list of 256 brightness levels as a fallback when the device tree does not specify a list, making the Pinebook Pro display work with the dtb from Linux 5.7.
<li>Updated <a href="https://man.openbsd.org/awk">awk(1)</a> through the June 5, 2020 version.
<li>Provided an optimized implementation of <a href="https://man.openbsd.org/ffs">ffs(3)</a> in the kernel on arm64/powerpc/powerpc64.
<li>Added <a href="https://man.openbsd.org/cwfg">cwfg(4)</a>, a driver for the Cellwise CW201x fuel gauge on the Pinebook Pro.
<li>Added <a href="https://man.openbsd.org/opal">opal(4)</a>, a driver that interacts with the OPAL firmware on powerpc64 and implements RTC functionality.
<!-- 2020/06/09 -->
<li>Added IBM POWER9 host bridge <a href="https://man.openbsd.org/pci">pci(4)</a> id.
<li>Prevented <a href="https://man.openbsd.org/rcs">rcs(1)</a> removal of locked revisions with rcs -orange, avoiding leaving behind a lock for a revision which no longer exists.
<!-- 2020/06/08 -->
<li>Added Intel 200 Series HD Audio <a href="https://man.openbsd.org/pci">pci(4)</a> id.
<li>Prevented a use-after-free when a wireless device is detached.
<li>Updated <a href="https://man.openbsd.org/drm">drm(4)</a> to linux 5.7.
<!-- 2020/06/07 -->
<li>Added Marvel 88SE9215 and 88SE9235 AHCI <a href="https://man.openbsd.org/pci">pci(4)</a> ids.
<li>Prevented callers inspecting unrelated fields in the libc resolver function asr_run().
<!-- 2020/06/06 -->
<li>Moved Powerbook5,4 audio from <a href="https://man.openbsd.org/aoa">aoa(4)</a> to <a href="https://man.openbsd.org/snapper">snapper(4)</a>, adding the missing TAS3004 volume control.
<!-- 2020/06/05 -->
<li>Added <a href="https://man.openbsd.org/ssl">ssl(8)</a> support for additional GOST curves and aliases for 256-bit GOST curves.
<li>Added support for pausing a <a href="https://man.openbsd.org/tmux">tmux(1)</a> pane when the output buffered for a control mode client is too far behind, controllable with refresh-client -f and -A.
<!-- 2020/06/04 -->
<li>Prevented the HID parser from overflowing if a malicious device provides too many PUSH.
<li>Added support for the Cortex-A78 cpu.
<li>Improved TLSv1.3 client certificate selection to allow use of EC certificates.
<li>Fixed <a href="https://man.openbsd.org/pf.conf">pf.conf(5)</a> "route-to TABLE least-states" in an anchor.
<!-- 2020/06/03 -->
<li>Updated <a href="https://man.openbsd.org/perl">perl(1)</a> to 5.30.3.
<!-- 2020/06/02 -->
<li>Introduced <a href="https://man.openbsd.org/acpihid">acpihid(4)</a> for ACPI HID event and 5-button array devices.
<li>Added support for hardware vlan tagging to <a href="https://man.openbsd.org/mcx">mcx(4)</a>.
<!-- 2020/06/01 -->
<!-- 2020/05/31 -->
<li>Added an SK hynix NVMe <a href="https://man.openbsd.org/pci">pci(4)</a> id.
<li>Released <a href="https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.2.0-relnotes.txt">LibreSSL</a> 3.2.0.
<li>Added <a href="https://man.openbsd.org/umstc">umstc(4)</a>, a driver for Microsoft Surface Type Cover keyboards.
<li>Began looking for non-expired certificates first when building a chain, making certificate validation possible for various sites that are serving expired AddTrust certificates.
<!-- 2020/05/30 -->
<li>Improved CPU frequency scaling in automatic performance mode by removing accounting for offline CPUs.
<!-- 2020/05/29 -->
<li>Added to <a href="https://man.openbsd.org/ssh_config">ssh_config(5)</a> a selection of keywords allowed to expand shell-style ${ENV} environment variables on the client side.
<li>Adjusted to complete group key renewal immediately if no station is associated when ieee80211_proto.c runs.
<li>Prevented a panic where <a href="https://man.openbsd.org/athn">athn(4)</a> attempted to transmit old, unencryptable frames after switching to a new group key in hostap mode.
<!-- 2020/05/28 -->
<li>Enabled building <a href="https://man.openbsd.org/wsmoused">wsmoused(8)</a> and <a href="https://man.openbsd.org/wsfontload">wsfontload(8)</a> on arm64 and armv7.
<li>Fixed display glitches on smaller screens or with larger fonts in <a href="https://man.openbsd.org/efifb">efifb(4)</a> associated with remapping and attaching.
<li>Enabled scrollback in <a href="https://man.openbsd.org/simplefb">simplefb(4)</a>.
<li>Prevented unconditional initialization of VGA on amd64 boot causing video distortion.
<!-- 2020/05/27 -->
<li>Corrected <a href="https://man.openbsd.org/getopt_long">getopt_long(3)</a> parsing of a trailing dash in an option group, which was being incorrectly returned as an argument.
<!-- 2020/05/26 -->
<li>Removed <a href="https://man.openbsd.org/mail.local">mail.local(8)</a> support for world-writable mail spools.
<li>Added AES-GCM mode ciphers for IKEv2, configurable in <a href="https://man.openbsd.org/iked.conf">iked.conf(5)</a> with the new "ikesa enc" options aes-128-gcm, aes-256-gcm, aes-128-gcm-12 and aes-256-gcm-12.
<li>Rewrote the entropy enqueue ring to collect damage asynchronously and adapted the dequeue to mix a selection of "best" ring entries, exponentially backing off the dequeue timeout, to compensate rapidly for weak seeding in unidentifiable conditions and ensure quality to arc4random() calls early in boot.
<li>Introduced detection of /etc/random.seed reuse.
<li>Reworked kernel loading with <a href="https://man.openbsd.org/octboot">octboot(4)</a>, which now does not rely on a mounted filesystem.
<li>Prevented a fatal <a href="https://man.openbsd.org/iwx">iwx(4)</a> firmware error when the driver moves out of AUTH state.
<li>Rewrote m88k mutex code as a slight variation of the MI mutex code, potentially improving stability and rendering mutex spinning time visible in <a href="https://man.openbsd.org/top">top(1)</a>.
<li>Allowed passage of unencrypted 802.11 frames during hardware decryption post-processing, fixing failure of some <a href="https://man.openbsd.org/ral">ral(4)</a> devices to receive packets on encrypted networks.
<li>Added support to <a href="https://man.openbsd.org/urtwn">urtwn(4)</a> for TP-Link TL-WN822N-EU v5 (and v4).
<!-- 2020/05/25 -->
<li>Restricted <a href="https://man.openbsd.org/ssh-agent">ssh-agent(1)</a> from signing web challenges for FIDO keys, preventing ssh-agent forwarding on a host that has FIDO keys attached from granting the ability for the remote side to also sign challenges for web authentication using those keys.
<li>Increased the default number of ldom and ttyV devices for sparc64 from eight to sixteen.
<li>Passed boothowto from the sparc64 bootloader to the kernel using .openbsd.bootdata.
<li>Added <a href="https://man.openbsd.org/wsmoused">wsmoused(8)</a> support to <a href="https://man.openbsd.org/efifb">efifb(4)</a>.
<li>Added support for the ThingM blink(1) USB notification light.
<li>Stopped <a href="https://man.openbsd.org/syslogd">syslogd(8)</a> from closing UDP sockets for sending messages when DNS lookup of a UDP loghost fails, alloiwing them to be used to send if DNS is working during the next SIGHUP.
<li>Made non-root filesystems FFS2 for landisk, sgi and luna88k.
<!-- 2020/05/24 -->
<li>Made <a href="https://man.openbsd.org/ldomctl">ldomctl(8)</a> "init-system -n" check vcpu and memory constraints.
<li>Relaxed filename checks in <a href="https://man.openbsd.org/syspatch">syspatch(8)</a> to allow use of hyphens.
<!-- 2020/05/23 -->
<li>Adjusted <a href="https://man.openbsd.org/dwpcie">dwpcie(4)</a> timing to improve likelihood of a successful PCIe link on the i.MX8MM. Avoids a failure to detect <a href="https://man.openbsd.org/em">em(4)</a> on the HummingBoard Pulse.
<!-- 2020/05/22 -->
<li>Added RB_GOODRANDOM passed from bootloader to kernel in boothowto, indicating confidence a "great seed" was loaded.
<li>Added an Atheros QCA986x/988x <a href="https://man.openbsd.org/pci">pci(4)</a> ID.
<li>Enabled the FFS2 option on the luna88k ramdisk.
<li>Added support for the Marvell Xenon SDHC, used as storage on the Armada 3700 and 8040 SoCs. This should make eMMC7CD show up on the MACCHIATObin.
<li>Added support for the SD card detect pins on the Turris Mox.
<li>Added <a href="https://man.openbsd.org/mvkpcie">mkvpcie(4)</a>, a driver for the Aardvark PCIe controller found on the Armada 3700 SoC.
<li>Fixed the <a href="https://man.openbsd.org/ksh">ksh(1)</a> exit code when evaluating a || compound list to prevent termination of the shell when running under -e.
<!-- 2020/05/21 -->
<li>Added an ASMedia ASM1182e PCIe switch <a href="https://man.openbsd.org/pci">pci(4)</a> id.
<li>Fixed an uninitialized variable and potential stack overflow with IPv6 connections in <a href="https://man.openbsd.org/smtpd">smtpd(8)</a>.
<!-- 2020/05/20 -->
<li>Implemented a <a href="https://man.openbsd.org/carp">carp(4)</a> transmit bypassing the ifq on output, enqueuing the packet directly on the parent interface.
<li>Opened up a 4GB memory bus window for <a href="https://man.openbsd.org/mvneta">mvneta(4)</a> on the Marvell Armada 3700, making the second ethernet controller/port work on the Turris Mox.
<!-- 2020/05/19 -->
<li>Released <a href="https://opensmtpd.org/announces/release-6.7.0p1.txt">OpenSMTPD</a> 6.7.0p1.
<li>Moved back to FFS1 by default for MFS.
<li>Updated <a href="https://man.openbsd.org/unbound">unbound(8)</a> to 1.10.1.
<!-- 2020/05/18 -->
<li>Added support for TLS 1.3 server to send certificate status messages with oscp staples.
<li>Released <a href="https://man.openbsd.org/rpki-client">rpki-client(8)</a> 6.7p0.
<li>Offloaded CCMP (WPA2) encryption and decryption to <a href="https://man.openbsd.org/iwm">iwm(4)</a> hardware, reducing CPU load during traffic bursts.
<li>Introduced a "dark mode" for directory listings and error pages in <a href="https://man.openbsd.org/httpd">httpd(8)</a>.
<li>Made OpenBSD boot on the odroid c4 with power domain in <a href="https://man.openbsd.org/amldwusb">amldwusb(4)</a>.
<li>Added <a href="https://man.openbsd.org/amlpwrc">amlpwrc(4)</a>, a driver for the power domain controller found on Amlogic SoCs.
<li>Fixed a hang in <a href="https://man.openbsd.org/rpki-client">rpki-client(8)</a> by properly waiting for exiting <a href="https://man.openbsd.org/openrsync">openrsync(1)</a> processes.
<li>Made FFS2 the default for <a href="https://man.openbsd.org/newfs">newfs(8)</a>.
<!-- 2020/05/17 -->
<li>Changed install images called *.fs to *.img to accommodate some UEFI bootloaders.
<li>Restored VGA fonts on VT switch, preventing an unusable screen when switching to a VT with a custom VGA font from X.
<li>Added a decode error alert when a TLS server provides an empty certificate list.
<!-- 2020/05/16 -->
<li>Began initial development of an OpenBSD/powerpc64 port.
<li>In <a href="https://man.openbsd.org/tmux">tmux(1)</a>:
<ul>
<li>Added an option to set the pane border lines style as single lines, double or heavy, simple or number (the pane numbers).
<li>Added a client flag 'active-pane' which stores the active pane in the client and allows it to be changed independently from the real active pane stored in the window.
<li>Added a -D flag to run in non-daemonized mode.
<li>Added a customize mode (C) where keys and options can be browsed and changed.
<li>Added M-+ and M-- to expand and collapse all items in tree mode.
<li>Changed refresh-client -F to -f and added -f flags to attach-session and switch-client.
<li>Added -e for new-session to set environment variables.
<li>Added the 'e' key in buffer mode to open the buffer in an editor.
<li>Added -W and -T flags to command-prompt to only complete a window and a target.
</ul>
<li>Ensured that a TLSv1.3 server has provided a certificate before attempting validation.
<li>Implemented <a href="https://man.openbsd.org/kqueue">kqueue(2)</a> support for <a href="https://man.openbsd.org/video">video(4)</a>.
<li>Updated to xkbprint 1.0.5.
<li>Updated to libXxf86dga 1.1.5.
<li>Updated to libXrandr 1.5.2 and <a href="https://man.openbsd.org/xrandr">xrandr(1)</a> 1.5.1.
<li>Updated to libxcb 1.14 and xcb-proto 1.14.
<!-- 2020/05/15 -->
<li>Fixed CCMP replay checks with 11n Rx aggregation and CCMP hardware offloading.
<li>Disabled <a href="https://man.openbsd.org/ohci">ohci(4)</a> on the amd64 ramdisk kernel.
<li>Fixed <a href="https://man.openbsd.org/dhclient">dhclient(8)</a> domain-search option processing.
<!-- 2020/05/14 -->
<li>Enabled TLSv1.3 support in <a href="https://man.openbsd.org/relayd">relayd(8)</a>.
<li>Set <a href="https://man.openbsd.org/ddb">ddb(4)</a> "/t" to show a trace via TID on all architectures.
<li>Updated <a href="https://man.openbsd.org/nsd">nsd(8)</a> to 4.3.1.
<!-- 2020/05/13 -->
<li>Added -rls1_3 and -no_tls1_3 options to <a href="https://man.openbsd.org/openssl">openssl(1)</a> s_server.
<li>Preserved group/world read permission on known_hosts files across runs of <a href="https://man.openbsd.org/ssh-keygen">ssh-keygen(1)</a> "-Rf /path".
<!-- 2020/05/12 -->
<!-- 2020/05/11 -->
<li>Fixed an <a href="https://man.openbsd.org/iked">iked(8)</a> policy lookup edge case for simultaneous transport and tunnel mode SAs.
<li>Enabled the TLSv1.3 server in <a href="https://man.openbsd.org/openssl">openssl(1)</a>.
<li>Improved reporting of remaining power with batteries of different capacities in <a href="https://man.openbsd.org/acpi">acpi(4)</a>.
<li>Allowed specifying -d multiple times in <a href="https://man.openbsd.org/slowcgi">slowcgi(8)</a>.
<li>Added <a href="https://man.openbsd.org/bgpctl">bgpctl(8)</a> support for VPNv6 in the family option of the "show rib" command.
<!-- 2020/05/10 -->
<li>Fixed two out-of-bounds array accesses in ioctl code pathways in <a href="https://man.openbsd.org/wscons">wscons(4)</a>.
<li>Made "reason" parsing in <a href="https://man.openbsd.org/bgpctl">bgpctl(8)</a> more generic and introduced it to the "reload" command.
<li>Added an optional "domain name" <a href="https://man.openbsd.org/acme-client.conf">acme-client.conf(5)</a> option allowing use of multiple domain sections with the same name and creation of an rsa and an ecdsa key for the same domain name.
<!-- 2020/05/09 -->
<!-- 2020/05/08 -->
<li>Fixed a crash on landisk in <a href="https://man.openbsd.org/unwind">unwind(8)</a> due to cmsg buffer misalignment.
<li>Prevented hangs in existing processes due to an indefinite wait for flushing when closing a tty.
<!-- 2020/05/07 -->
<li>Moved to 6.7-current.
</ul>