plus72.html

<!doctype html>
<html lang=en id=plus>
<meta charset=utf-8>
<title>OpenBSD 7.2 Changelog</title>
<meta name="description" content="OpenBSD 7.2 changes">
<meta name="viewport" content="width=device-width, initial-scale=1">
<link rel="stylesheet" type="text/css" href="openbsd.css">
<link rel="canonical" href="https://www.openbsd.org/plus72.html">
<style>
strong {
	color: var(--red);
	font-weight: normal;
}

h3 {
	color: var(--blue);
}
</style>

<h2 id=OpenBSD>
<a href="index.html">
<i>Open</i><b>BSD</b></a>
7.2 Changelog
</h2>
<hr>

<p>
This selection is intended to include all important
and all user-visible changes.
For a complete record of all changes, please see the "source-changes"
mailing list, called "OpenBSD CVS"
in the <a href="https://marc.info/?l=openbsd-cvs">archives</a>,
or use <a href="anoncvs.html#CVS">CVS</a>.

<p>
For changes in other releases, click below:<br>
<a href="plus20.html">2.0</a>,
<a href="plus21.html">2.1</a>,
<a href="plus22.html">2.2</a>,
<a href="plus23.html">2.3</a>,
<a href="plus24.html">2.4</a>,
<a href="plus25.html">2.5</a>,
<a href="plus26.html">2.6</a>,
<a href="plus27.html">2.7</a>,
<a href="plus28.html">2.8</a>,
<a href="plus29.html">2.9</a>,
<a href="plus30.html">3.0</a>,
<a href="plus31.html">3.1</a>,
<a href="plus32.html">3.2</a>,
<a href="plus33.html">3.3</a>,
<a href="plus34.html">3.4</a>,
<a href="plus35.html">3.5</a>,
<a href="plus36.html">3.6</a>,
<br>
<a href="plus37.html">3.7</a>,
<a href="plus38.html">3.8</a>,
<a href="plus39.html">3.9</a>,
<a href="plus40.html">4.0</a>,
<a href="plus41.html">4.1</a>,
<a href="plus42.html">4.2</a>,
<a href="plus43.html">4.3</a>,
<a href="plus44.html">4.4</a>,
<a href="plus45.html">4.5</a>,
<a href="plus46.html">4.6</a>,
<a href="plus47.html">4.7</a>,
<a href="plus48.html">4.8</a>,
<a href="plus49.html">4.9</a>,
<a href="plus50.html">5.0</a>,
<a href="plus51.html">5.1</a>,
<a href="plus52.html">5.2</a>,
<a href="plus53.html">5.3</a>,
<br>
<a href="plus54.html">5.4</a>,
<a href="plus55.html">5.5</a>,
<a href="plus56.html">5.6</a>,
<a href="plus57.html">5.7</a>,
<a href="plus58.html">5.8</a>,
<a href="plus59.html">5.9</a>,
<a href="plus60.html">6.0</a>,
<a href="plus61.html">6.1</a>,
<a href="plus62.html">6.2</a>,
<a href="plus63.html">6.3</a>,
<a href="plus64.html">6.4</a>,
<a href="plus65.html">6.5</a>,
<a href="plus66.html">6.6</a>,
<a href="plus67.html">6.7</a>,
<a href="plus68.html">6.8</a>,
<a href="plus69.html">6.9</a>,
<a href="plus70.html">7.0</a>,
<br>
<a href="plus71.html">7.1</a>,
<a href="plus73.html">7.3</a>,
<a href="plus74.html">7.4</a>,
<a href="plus75.html">7.5</a>,
<a href="plus76.html">7.6</a>,
<a href="plus77.html">7.7</a>,
<a href="plus.html">current</a>.
<br>

<p>
<h3>Changes made between OpenBSD 7.1 and 7.2</h3>
<p>

<ul>
<!-- 2022/09/26 -->
<li>OpenSSH version 9.1.
<li>Added Wacom One S (CTL-472) support to <a href="https://man.openbsd.org/uwacom.4">uwacom(4)</a>.
<!-- 2022/09/25 -->
<li>Changed <a href="https://man.openbsd.org/mfii.4">mfii(4)</a> to allow the firmware more time to transition out of the UNDEFINED state.
<!-- 2022/09/24 -->
<li><a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a> version 8.1.
<li>OpenBGPD version 7.7.
<!-- 2022/09/23 -->
<li>Updated <a href="https://man.openbsd.org/unbound.8">unbound(8)</a> to 1.16.3.
<!-- 2022/09/22 -->
<!-- 2022/09/21 -->
<!-- 2022/09/20 -->
<li>Updated <a href="https://man.openbsd.org/awk.1">awk(1)</a> to the September 12, 2022 version.
<li>Updated libexpat to version 2.4.9.
<li>Fixed line length trimming in <a href="https://man.openbsd.org/ps.1">ps(1)</a> -f mode.
<!-- 2022/09/19 -->
<li>Added <a href="https://man.openbsd.org/iked.8">iked(8)</a> connection statistics for successful and failed connections, error types, and other events that can be printed with "ikectl show stats".
<li>Added <a href="https://man.openbsd.org/sftp.1">sftp(1)</a> client support for "users-groups-by-id@openssh.com".
<li>Added a "user-groups-by-id@openssh.com" extension request to <a href="https://man.openbsd.org/sftp-server.8">sftp-server(8)</a> that allows the client to obtain user/group names that correspond to a set of uids/gids.
<!-- 2022/09/18 -->
<!-- 2022/09/17 -->
<li>Added RequiredRSASize for <a href="https://man.openbsd.org/sshd.8">sshd(8)</a>. RSA keys that fail to meet this minimum length will be ignored for user and host-based authentication.
<!-- 2022/09/16 -->
<!-- 2022/09/15 -->
<li>Changed <a href="https://man.openbsd.org/ftp.1">ftp(1)</a> to use non-blocking <a href="https://man.openbsd.org/connect.2">connect(2)</a> with <a href="https://man.openbsd.org/ppoll.2">ppoll(2)</a> and timeout instead of <a href="https://man.openbsd.org/alarm.3">alarm(3)</a>. This allows failing over to another IP address for hosts that have more than one.
<!-- 2022/09/14 -->
<!-- 2022/09/13 -->
<li>Changed <a href="https://man.openbsd.org/ssh-agent.1">ssh-agent(1)</a> to attempt FIDO key signing without a PIN and use the error to determine whether a PIN is required and prompt only if necessary.
<!-- 2022/09/12 -->
<!-- 2022/09/11 -->
<!-- 2022/09/10 -->
<!-- 2022/09/09 -->
<li>Implemented the F_SHORTER filter in <a href="https://man.openbsd.org/bgpd.8">bgpd(8)</a>.
<li>Bumped <a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a> version to 8.0.
<li>Adjusted <a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a> chunked encoding handling.
<!-- 2022/09/08 -->
<!-- 2022/09/07 -->
<li>Allowed reading of MSR_TSC on <a href="https://man.openbsd.org/vmm.4">vmm(4)</a> Intel hosts.
<!-- 2022/09/06 -->
<!-- 2022/09/05 -->
<!-- 2022/09/04 -->
<!-- 2022/09/03 -->
<li>Moved the <a href="https://man.openbsd.org/relayd.8">relayd(8)</a> <a href="https://man.openbsd.org/daemon.3">daemon(3)</a> call to just before forking the children so the parent disassociates from its controlling terminal and shell, but not from its children.
<li>Made <a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a> handle multiple X.509 locations by picking the first location and issuing a warning.
<li>Added apldcms(4), a driver for the touchpad on Apple M2 laptops.
<!-- 2022/09/02 -->
<li>Implemented RRDP_ABORT in <a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a>.
<li>Accelerated <a href="https://man.openbsd.org/wc.1">wc(1)</a> word counting.
<li>Added the recvmmsg system call that allows receiving multiple msghdrs at once.
<li>Added UFS2 support to landisk boot blocks.
<li>Made <a href="https://man.openbsd.org/resolvd.8">resolvd(8)</a> write /etc/resolv.conf in a more atomic manner.
<li>Added <a href="https://man.openbsd.org/softraid.4">softraid(4)</a> RAID 1C boot support to sparc64.
<li>Made newer mime type definitions take precedence over existing ones in <a href="https://man.openbsd.org/httpd.8">httpd(8)</a>.
<!-- 2022/09/01 -->
<li>Fixed <a href="https://man.openbsd.org/ssh.1">ssh(1)</a> key_lookup() on tokens with built-in UV.
<li>Changed <a href="https://man.openbsd.org/vmm.4">vmm(4)</a> to send all port io emulation to userland.
<li>Added forest (-f) mode to <a href="https://man.openbsd.org/ps.1">ps(1)</a>.
<li>Updated <a href="https://man.openbsd.org/awk.1">awk(1)</a> to the August 30, 2022 version.
<li>Added privilege separation to <a href="https://man.openbsd.org/snmpd.8">snmpd(8)</a>.
<li>Imported <a href="https://man.openbsd.org/snmpd_metrics.8">snmpd_metrics(8)</a>. This allows those who need to use net-snmpd the ability to access base <a href="https://man.openbsd.org/snmpd.8">snmpd(8)</a> metrics.
<li>Added the new "configtest" action to <a href="https://man.openbsd.org/rc.d.8">rc.d(8)</a>.
<!-- 2022/08/31 -->
<li>Stopped <a href="https://man.openbsd.org/vnconfig.8">vnconfig(8)</a> from printing the device name on failure.
<li>Changed <a href="https://man.openbsd.org/ts.1">ts(1)</a> to parse the user format string once.
<li>Added <a href="https://man.openbsd.org/qcgpio.4">qcgpio(4)</a> and <a href="https://man.openbsd.org/qciic.4">qciic(4)</a> drivers for the Qualcomm GPIO and I2C controllers found on the SC8280XP SoC. These drivers make the keyboard, trackpoint and touchpad work on the ThinkPad X13s.
<li>Added apldc(4), apldchidev(4), apldckdb(4), and aplrtkit(4) to arm64. These drivers implement support for the Dockchannel-base keyboard found on Apple M2 laptops.
<li>Made sure only one <a href="https://man.openbsd.org/bgpd.8">bgpd(8)</a> roa softreconfig runner is run at any time.
<li>Fixed <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> window size reporting.
<li>Avoided a potential NULL dereference in <a href="https://man.openbsd.org/ssl.3">ssl(3)</a> ssl_set_pkey().
<!-- 2022/08/30 -->
<li>Added a missing input validation step to <a href="https://man.openbsd.org/pipex.4">pipex(4)</a> mppe keylenbits.
<li>Added support for ASPA objects (draft-ietf-sidrops-aspa-profile-10) to <a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a>.
<li>Added initial support for mmio assist to <a href="https://man.openbsd.org/vmd.4">vmd(4)</a>.
<li>In cases where a file in the <a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a> validated cache directory is no longer valid while the newer file in the .rrdp directory is not yet valid, stopped <a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a> from copying the old file over the newer file.
<!-- 2022/08/29 -->
<li>Fixed the growth check in <a href="https://man.openbsd.org/compress.1">compress(1)</a> and <a href="https://man.openbsd.org/gzip.1">gzip(1)</a> in cases of small files or files with sufficiently random data.
<li>Made <a href="https://man.openbsd.org/fdisk.8">fdisk(8)</a> print a warning when a GPT partition start or end is outside the usable LBA area of the device.
<li>Changed <a href="https://man.openbsd.org/rc.subr.8">rc.subr(8)</a> to copy the message to stdout when using <a href="https://man.openbsd.org/logger.1">logger(1)</a> to avoid needing to check syslog when running in debug mode.
<li>Fixed <a href="https://man.openbsd.org/installboot.8">installboot(8)</a> messaging when verbose (-v) and dry-run (-n) modes are combined with <a href="https://man.openbsd.org/softraid.4">softraid(4)</a>.
<li>Fixed integer overflows in the <a href="https://man.openbsd.org/iwm.4">iwm(4)</a> and <a href="https://man.openbsd.org/iwx.4">iwx(4)</a> firmware file parsers.
<li>Changed the /sbin daemons <a href="https://man.openbsd.org/dhcpleased.8">dhcpleased(8)</a>, <a href="https://man.openbsd.org/mountd.8">mountd(8)</a>, <a href="https://man.openbsd.org/nfsd.8">nfsd(8)</a>, <a href="https://man.openbsd.org/pflogd.8">pflogd(8)</a>, <a href="https://man.openbsd.org/resolvd.8">resolvd(8)</a>, <a href="https://man.openbsd.org/slaacd.8">slaacd(8)</a>, and <a href="https://man.openbsd.org/unwind.8">unwind(8)</a> to be dynamically linked to allow them to benefit from all the additional mitigations that dynamically linked executables gain. NFS mounting of /usr must now use statically configured IP addresses.
<li>Added a printed message when <a href="https://man.openbsd.org/ld.so.1">ld.so(1)</a> fails inside <a href="https://man.openbsd.org/execve.2">execve(2)</a> to clarify the failure mode when a dynamic executable is run while /usr isn't mounted.
<li>Updated <a href="https://man.openbsd.org/unbound.8">unbound(8)</a> to 1.16.2.
<li>Worked around MSI and INTx issues on the Qualcomm SC8280XP in <a href="https://man.openbsd.org/acpipci.4">acpipci(4)</a>. This makes the onboard <a href="https://man.openbsd.org/nvme.4">nvme(4)</a> work on the ThinkPad x13s.
<li>Made <a href="https://man.openbsd.org/fdisk.8">fdisk(8)</a> print a warning when an MBR partition starts or extends past the end of the device.
<!-- 2022/08/28 -->
<li>Updated libfido2 to 1.11.0.
<li>Added SPI support for interrupts on ThinkPad x13s.
<!-- 2022/08/27 -->
<li>Added power button support to <a href="https://man.openbsd.org/aplsmc.4">aplsmc(4)</a>.
<!-- 2022/08/26 -->
<!-- 2022/08/25 -->
<li>Added support for the changed layout of the "state" register on Apple's M2 SoC "Avalanche" performance cores to <a href="https://man.openbsd.org/aplcpu.4">aplcpu(4)</a>.
<li>Added <a href="https://man.openbsd.org/delay.9">delay(9)</a> implementations acpitimer_delay() and acpihpet_delay() to <a href="https://man.openbsd.org/acpitimer.4">acpitimer(4)</a> and <a href="https://man.openbsd.org/acpihpet.4">acpihpet(4)</a>, respectively.
<li>Changed <a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a> verbose filemode to print details about encapsulated certificates and allow specifying verbose filemode a second time to print in PEM format.
<li>Added delay_init() to provide basic <a href="https://man.openbsd.org/delay.9">delay(9)</a> implementation management on i386 and amd64.
<!-- 2022/08/24 -->
<!-- 2022/08/23 -->
<li>Fixed a potential kernel panic when an msdosfs partition is filled by fixing instances where msdosfs passed a NULL proc pointer to detrunc().
<li>Added NFS client support to the luna88k RAMDISK kernel.
<li>Added support for <a href="https://man.openbsd.org/agentx.3">agentx(3)</a> to <a href="https://man.openbsd.org/snmpd.8">snmpd(8)</a>.
<!-- 2022/08/22 -->
<li>Stopped building Mesa against llvm on 32-bit powerpc.
<!-- 2022/08/21 -->
<li>Changed mips64, octeon, and loongson to trigger deferred clock interrupts from <a href="https://man.openbsd.org/splx.9">splx(9)</a>.
<!-- 2022/08/20 -->
<li>Dropped detection code for Cyrix CPUs older than the Cyrix M2.
<!-- 2022/08/19 -->
<li>Improved <a href="https://man.openbsd.org/bioctl.8">bioctl(8)</a> RAID level parsing to check numeric levels before checking single character levels. This allows recognition of RAID 10 as a valid but unsupported level.
<li>Changed <a href="https://man.openbsd.org/ssh.1">ssh(1)</a> to attempt <a href="https://man.openbsd.org/fido.4">fido(4)</a> key signing without a PIN and use the error code returned to fall back only if necessary. This avoids PIN prompts for FIDO tokens that don't require them.
<!-- 2022/08/18 -->
<li>Added local bind mode to <a href="https://man.openbsd.org/ypldap.8">ypldap(8)</a>. In this mode ypldap binds its RPC sockets to loopback, so YP services are only available to the host ypldap is running on. In local bind mode one does not need to run <a href="https://man.openbsd.org/portmap.8">portmap(8)</a>.
<!-- 2022/08/17 -->
<li>Fixed <a href="https://man.openbsd.org/vldc.4">vldc(4)</a> event filters.
<!-- 2022/08/16 -->
<li>Removed the "-c" compatibility option from <a href="https://man.openbsd.org/vnconfig.8">vnconfig(8)</a>.
<li>Removed the obsolete kern.nselcoll <a href="https://man.openbsd.org/sysctl.2">sysctl(2)</a>.
<!-- 2022/08/15 -->
<li>Solved an issue when multiple nexthops change concurrently in <a href="https://man.openbsd.org/bgpd.8">bgpd(8)</a>.
<li>Added support for booting from RAID 1C <a href="https://man.openbsd.org/softraid.4">softraid(4)</a> volumes on arm64.
<li>Added a notification when a paste buffer is deleted to <a href="https://man.openbsd.org/tmux.1">tmux(1)</a>.
<li>Added a Nobr terminfo capability to tell <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> the terminal does not use bright colors for bold.
<!-- 2022/08/14 -->
<li>Dropped detection code for 386sx/386dx CPUs. OpenBSD/i386 hasn't actually supported running on either for some time.
<!-- 2022/08/13 -->
<li>Corrected the rx data rate for rtl8192eu <a href="https://man.openbsd.org/urtwn.4">urtwn(4)</a> devices.
<!-- 2022/08/12 -->
<li>Added support for booting from RAID 1C <a href="https://man.openbsd.org/softraid.4">softraid(4)</a> volumes on amd64.
<li>Fixed a race between pflow_output_process() and pflow_clone_destroy() in <a href="https://man.openbsd.org/pflow.4">pflow(4)</a>.
<!-- 2022/08/11 -->
<li>Fixed <a href="https://man.openbsd.org/Xorg.1">Xorg(1)</a> when using the luna88k 1bpp framebuffer hardware.
<li>Added support to <a href="https://man.openbsd.org/sftp-server.8">sftp-server(8)</a> for the home-directory extension defined in draft-ietf-secsh-filexfer-extensions-00.
<li>Simplified TSC synchronization testing on amd64.
<li>Fixed overflow of the number of errors in <a href="https://man.openbsd.org/renice.8">renice(8)</a> by setting error instead of incrementing it.
<li>Corrected handling of an abnormal fastcgi termination in <a href="https://man.openbsd.org/httpd.8">httpd(8)</a>.
<li>Added <a href="https://man.openbsd.org/vi.1">vi(1)</a> Home/End bindings to <a href="https://man.openbsd.org/tmux.1">tmux(1)</a>.
<!-- 2022/08/10 -->
<li>Made the UTC timezone acceptable for certificate validity intervals, sshsig verification times, and authorized_keys expiry-time options by suffixing dates/times with a 'Z' character for <a href="https://man.openbsd.org/sshd.8">sshd(8)</a> and <a href="https://man.openbsd.org/ssh-keygen.1">ssh-keygen(1)</a>. Also added certificate validity intervals specified in raw seconds-since-epoch as a hex value (e.g. "-V 0x1234:0x4567890") to <a href="https://man.openbsd.org/ssh-keygen.1">ssh-keygen(1)</a>.
<li>Allowed <a href="https://man.openbsd.org/spdmem.4">spdmem(4)</a> to attach to <a href="https://man.openbsd.org/loongson/gdiumiic.4">gdiumiic(4)</a>.
<li>Disallowed the AS Resources extension on ROA EE certificates for <a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a>.
<li>Added <a href="https://man.openbsd.org/iic.4">iic(4)</a> at <a href="http://man.openbsd.org/man4/loongson/glxpcib.4">glxpcib(4)</a> to get <a href="https://man.openbsd.org/spdmem.4">spdmem(4)</a> to attach on 2F-based loongson systems.
<!-- 2022/08/09 -->
<li>Prevented <a href="https://man.openbsd.org/mandoc.1">mandoc(1)</a> from turning breakable hyphens in segment identifiers into underscores.
<!-- 2022/08/08 -->
<li>Made <a href="https://man.openbsd.org/putenv.3">putenv(3)</a> return an error if the string starts with the '=' character. This matches the behavior on FreeBSD and NetBSD.
<li>Added seconds to the uptime display of <a href="https://man.openbsd.org/top.1">top(1)</a>.
<li>Set the default <a href="https://man.openbsd.org/openrsync.1">openrsync(1)</a> connection timeout that <a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a> uses to 15 seconds.
<!-- 2022/08/07 -->
<li>Updated libxcvt to 0.1.2.
<li>Added display of an error with the failing path if the <a href="https://man.openbsd.org/xterm.1">xterm(1)</a> <a href="https://man.openbsd.org/unveil.2">unveil(2)</a> fails.
<!-- 2022/08/06 -->
<li>Added a <a href="https://man.openbsd.org/slowcgi.8">slowcgi(8)</a> -t flag to change the request timeout.
<!-- 2022/08/05 -->
<li>Added support for wildcards in <a href="https://man.openbsd.org/fw_update.8">fw_update(8)</a> patterns.
<!-- 2022/08/04 -->
<li>Corrected sparc64 ofwboot to default to the softraid volume on the boot device to make root on softraid work out of the box on sparc64 and be more consistent with softraid boot on other architectures.
<!-- 2022/08/03 -->
<li>Added <a href="https://man.openbsd.org/aplaudio.4">aplaudio(4)</a>, a driver that ties together <a href="https://man.openbsd.org/aplmca.4">aplmca(4)</a> and various codecs to present an <a href="https://man.openbsd.org/audio.4">audio(4)</a> interface to the system.
<li>Added <a href="https://man.openbsd.org/aplmca.4">aplmca(4)</a>, a driver that controls the hardware block that takes data from <a href="https://man.openbsd.org/apldma.4">apldma(4)</a>, serializes it and sends it out on the i2s ports.
<li>Fixed a <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> crash when searching for .* with extremely long lines.
<li>Fixed a bug in <a href="https://man.openbsd.org/pf.4">pf(4)</a> where a pool defined like "172.16.0.0/16" would count as a pool size of one address. Also fixed random selection of source address to be uniform across the whole pool.
<li>Fixed <a href="https://man.openbsd.org/patch.1">patch(1)</a> locate-hunk in empty files.
<li>Fixed <a href="https://man.openbsd.org/patch.1">patch(1)</a> in the case of reversing a patch that creates a file.
<!-- 2022/08/02 -->
<li>Added connection timeout functionality to <a href="https://man.openbsd.org/openrsync.1">openrsync(1)</a> via the --contimeout option.
<li>Added an "all" state to <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> allow-passthrough to work even in invisible panes.
<!-- 2022/08/01 -->
<li>Raised the "staff" login class data-size-cur on arm64 to be the same as that for amd64 in <a href="https://man.openbsd.org/login.conf.5">login.conf(5)</a>.
<!-- 2022/07/31 -->
<!-- 2022/07/30 -->
<li>Randomized the rekey interval of <a href="https://man.openbsd.org/arc4random.3">arc4random(3)</a>.
<li>Killed virtual address randomization for the arm64 EFI runtime.
<li>Enforced allowance of only one image specified for <a href="https://man.openbsd.org/vmctl.8">vmctl(8)</a> create.
<li>Added stack frames to <a href="https://man.openbsd.org/crypto.3">crypto(3)</a> AES-NI x86_64 assembly to silence a false positive from valgrind.
<!-- 2022/07/29 -->
<li>Added a "show swap" command to <a href="https://man.openbsd.org/ddb.4">ddb(4)</a> to help debugging.
<li>Added a "processing" message for when <a href="https://man.openbsd.org/pkg_add.1">pkg_add(1)</a> is transferring data to inform the user that pkg_add is still working.
<!-- 2022/07/28 -->
<li>Added "show all routes" and the ability to show individual routes (e.g. "show route 0xfffffd807e9b0000") to <a href="https://man.openbsd.org/ddb.4">ddb(4)</a>.
<li>Changed <a href="https://man.openbsd.org/rc.8">rc(8)</a> to only attempt to set the <a href="https://man.openbsd.org/yp.8">yp(8)</a> domainname if it has not been set yet.
<!-- 2022/07/27 -->
<!-- 2022/07/26 -->
<li>Retired identification code for Rise CPUs.
<li>Fixed an <a href="https://man.openbsd.org/fdisk.8">fdisk(8)</a> regression to allow editing an MBR of all zeroes.
<!-- 2022/07/25 -->
<li>Changed <a href="https://man.openbsd.org/fdisk.8">fdisk(8)</a> to restrict user actions if neither GPT nor MBR structures can be found on the disk.
<!-- 2022/07/24 -->
<!-- 2022/07/23 -->
<li>Updated libX11 to version 1.8.1.
<li>Updated freetype to version 2.12.1.
<!-- 2022/07/22 -->
<li>Modified <a href="https://man.openbsd.org/pms.4">pms(4)</a> to discard relative movement packets outside of the [-127, 127] range to prevent cursor jumps when using the trackpoint on some Lenovo laptops.
<li>Added an OpenIKED Vendor ID payload in the <a href="https://man.openbsd.org/iked.8">iked(8)</a> initial handshake to make it easier to handle interoperability problems with older versions in the future.
<!-- 2022/07/21 -->
<li>Added support for the new DART variant found on the Apple M2 SoC.
<!-- 2022/07/20 -->
<li>Moved to 7.2-beta.
<!-- 2022/07/19 -->
<li>Changed <a href="https://man.openbsd.org/ssh-keygen.1">ssh-keygen(1)</a> to prompt the user for confirmation when enrolling a resident key on a security token before overwriting a key with matching application and user ID strings.
<!-- 2022/07/18 -->
<li>Restrict pledge("vminfo") callers to read-only <a href="https://man.openbsd.org/swapctl.2">swapctl(2)</a> operations.
<!-- 2022/07/17 -->
<li>Set default sleep value of <a href="https://man.openbsd.org/ico.1">ico(1)</a> to 10ms.
<li>Updated xcb-protos to version 1.15.2.
<!-- 2022/07/16 -->
<li>Added handling for framebuffers where the first pixel isn't page-aligned to <a href="https://man.openbsd.org/wsfb.4">wsfb(4)</a>.
<!-- 2022/07/15 -->
<li>Added support for using the power button to wake up from suspend to <a href="https://man.openbsd.org/axppmic.4">axppmic(4)</a>.
<li>Implemented support for framebuffers that don't start on a page boundary (like those on the new 14" and 16" Macbook Pro).
<li>New <a href="https://man.openbsd.org/ypconnect.2">ypconnect(2)</a> system call creates a socket based upon the IP address encoded directly in a locked ypbinding file, thereby removing a horrible hack to support YP lookups in programs using strong <a href="https://man.openbsd.org/pledge.2">pledge(2)</a> rules.
<li>Changed <a href="https://man.openbsd.org/ypbind.8">ypbind(8)</a> to immediately reach out to learn the TCP port number for a remote <a href="https://man.openbsd.org/ypserv.8">ypserv(8)</a> once we've learned the UDP port number and append the answer to the binding file.
<li>Updated <a href="https://man.openbsd.org/xrefresh.1">xrefresh(1)</a> to version 1.0.7.
<li>Updated <a href="https://man.openbsd.org/xmessage.1">xmessage(1)</a> to version 1.0.6.
<li>Updated <a href="https://man.openbsd.org/xmag.1">xmag(1)</a> to version 1.0.7.
<li>Updated <a href="https://man.openbsd.org/xkbutils.1">xkbutils(1)</a> to version 1.0.5.
<li>Updated <a href="https://man.openbsd.org/xev.1">xev(1)</a> to version 1.2.5.
<li>Updated <a href="https://man.openbsd.org/xwud.1">xwud(1)</a> to version 1.0.6.
<li>Updated <a href="https://man.openbsd.org/xpr.1">xpr(1)</a> to version 1.1.0.
<li>Updated <a href="https://man.openbsd.org/xmodmap.1">xmodmap(1)</a> to version 1.0.11.
<li>Updated <a href="https://man.openbsd.org/xfontsel.1">xfontsel(1)</a> to version 1.1.0.
<li>Updated <a href="https://man.openbsd.org/xconsole.1">xconsole(1)</a> to version 1.0.8.
<li>Updated <a href="https://man.openbsd.org/xclipboard.1">xclipboard(1)</a> to version 1.1.4.
<!-- 2022/07/14 -->
<li>Fixed an interrupt storm upon suspend on Amlogic arm64 boards.
<li>Added <a href="https://man.openbsd.org/sxirintc.4">sxirintc(4)</a>, a driver for the "wake up" interrupt controller found on various Allwinner SoCs.
<li>Added the <a href="https://man.openbsd.org/openssl.1">openssl(1)</a> ciphers -s option to show only the ciphers supported by the specified SSL method.
<!-- 2022/07/13 -->
<li>Implemented the fundamentals for suspend/resume on arm64.
<!-- 2022/07/12 -->
<li>Implemented the Baillie-PSW primality test in <a href="https://man.openbsd.org/crypto.3">crypto(3)</a>.
<li>Added an implementation of the integer square root using a variant of Newton's method with adaptive precision to <a href="https://man.openbsd.org/crypto.3">crypto(3)</a>.
<li>Stopped building <a href="https://man.openbsd.org/lldb.1">lldb(1)</a> support libraries on arches where lldb is not installed.
<li>Added a method (ESC D) to enter <a href="https://man.openbsd.org/ddb.4">ddb(4)</a> on serial drivers that do not have a true BREAK mechanism.
<li>Bumped <a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a> version to 7.9.
<!-- 2022/07/11 -->
<li>Made the EFI bootloader provide the extra parameters necessary to use non-standard UARTs as console.
<li>Switched bootloaders to the extended BOOTARG_CONSDEV struct.
<li>Added send side RFC 7911 (ADD-PATH) support to <a href="https://man.openbsd.org/bgpd.8">bgpd(8)</a>.
<li>Added <a href="https://man.openbsd.org/llvm-profdata.1">llvm-profdata(1)</a> to base so that ports can benefit from profiled builds.
<!-- 2022/07/10 -->
<li>Added anti-feline input protection to <a href="https://man.openbsd.org/fdisk.8">fdisk(8)</a> by refusing to process input of excessive length.
<!-- 2022/07/09 -->
<!-- 2022/07/08 -->
<li>Added <a href="https://man.openbsd.org/iked.8">iked(8)</a> support for sending certificate chains with intermediate CAs in multiple CERT payloads.
<!-- 2022/07/07 -->
<!-- 2022/07/06 -->
<li>Fixed a bug in <a href="https://man.openbsd.org/cron.8">cron(8)</a> where it could exit silently if <a href="https://man.openbsd.org/ppoll.2">ppoll(2)</a> exited. Now it will log to <a href="https://man.openbsd.org/syslog.3">syslog(3)</a> instead of stderr.
<li>Retired NexGen CPU identification code.
<li>Added support for hyperlinks with capture-pane -e and a mouse_hyperlink format to <a href="https://man.openbsd.org/tmux.1">tmux(1)</a>.
<!-- 2022/07/05 -->
<li>Updated capitals and countries in <a href="https://man.openbsd.org/quiz.6">quiz(6)</a>.
<li>Got rid of <a href="https://man.openbsd.org/mandoc.1">mandoc(1)</a> archaic table markup for header and footer lines in favor of flexbox CSS. Rendering now adapts to browser windows of arbitrary narrowness.
<!-- 2022/07/04 -->
<li>Added <a href="https://man.openbsd.org/xhci.4">xhci(4)</a> support for the dual role controllers integrated on the Qualcomm Snapdragon 8cx gen 3 SoC.
<li>Improved accessibility of <a href="https://man.openbsd.org/man.cgi.8">man.cgi(8)</a>.
<li>Bumped to LibreSSL 3.6.0.
<li>Made <a href="https://man.openbsd.org/iked.8">iked(8)</a> ignore any CERT payload after the first rather than failing the exchange when more than one CERT payload is received.
<li>Updated to xorgproto version 2022.1.
<li>Updated to <a href="https://man.openbsd.org/Xft.3">Xft(3)</a> version 2.3.4.
<li>Updated to <a href="https://man.openbsd.org/Xcursor.3">Xcursor(3)</a> version 1.2.1.
<!-- 2022/07/03 -->
<li>Made <a href="https://man.openbsd.org/netstart.8">netstart(8)</a> create virtual interfaces up front if specified on the command line.
<!-- 2022/07/02 -->
<li>Implemented <a href="https://man.openbsd.org/dig.1">dig(1)</a> support for SVCB and HTTPS record types.
<li>Made <a href="https://man.openbsd.org/timeout.1">timeout(1)</a> -s accept HUP like <a href="https://man.openbsd.org/kill.1">kill(1)</a> and GNU timeout(1) do.
<li>Changed <a href="https://man.openbsd.org/dhclient.8">dhclient(8)</a> to defer to <a href="https://man.openbsd.org/dhcpleased.8">dhcpleased(8)</a> by doing execve ifconfig and providing syslog warnings about deprecated options.
<!-- 2022/07/01 -->
<li>Made <a href="https://man.openbsd.org/unix.4">unix(4)</a> domain sockets locking per-socket rather than coarse locking of the entire domain sockets layer.
<!-- 2022/06/30 -->
<li>Fixed a <a href="https://man.openbsd.org/bwfm.4">bwfm(4)</a> crash during USB detach.
<li>Added reference counting of vms and vcpus to <a href="https://man.openbsd.org/vmm.4">vmm(4)</a>.
<li>Introduced a blocklist backend and keyword to <a href="https://man.openbsd.org/snmpd.8">snmpd(8)</a> which deprecates filter-pf-addresses.
<li>Added <a href="https://man.openbsd.org/ssl.3">ssl(3)</a> checks to ensure we do not initiate or negotiate handshakes with versions below the minimum required by the security level.
<li>Updated to <a href="https://man.openbsd.org/nsd.8">nsd(8)</a> 4.6.0.
<li>Added <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> support for OSC 8 hyperlinks.
<!-- 2022/06/29 -->
<li>Fixed an off by one error in a <a href="https://man.openbsd.org/vmd.8">vmd(8)</a> vm memory range check.
<li>Added -m option to <a href="https://man.openbsd.org/ts.1">ts(1)</a>.
<li>Unlocked the <a href="https://man.openbsd.org/pledge.2">pledge(2)</a> system call.
<li>Added <a href="https://man.openbsd.org/ts.1">ts(1)</a>, a timestamp utility.
<li>Added support for using non-standard UARTs (such as the Synopsys DesignWare UART) as an early console.
<!-- 2022/06/28 -->
<li>Added support for the Synopsys DesignWare UART found on the Ryzen Embedded V1000 SoCs to <a href="https://man.openbsd.org/com.4">com(4)</a>.
<li>Ensured that uvm_swap_get() will always sleep rather than returning an error. Previously an error could be returned to the fault handler which would result in processes dying when a system was under a lot of memory pressure.
<li>Made the page daemon consider pmemrange regions when trying to free pages from the inactive list. Previously the page daemon could use a lot of CPU without freeing a page because the global limits were satisfied.
<li>Ensured progress in the swapper by pre-allocating pages in a DMA-reachable region.
<li>Ensure uvm_swap_io() can succeed, even in out of memory situations, by reserving a second segment for the page daemon.
<li>Added <a href="https://man.openbsd.org/bgplgd.8">bgplgd(8)</a>, a fastcgi daemon that provides a REST JSON API to <a href="https://man.openbsd.org/bgpctl.8">bgpctl(8)</a>.
<li>Fixed <a href="https://man.openbsd.org/pf.4">pf(4)</a> syncookies during fast tcp port reuse.
<li>Altered installer behavior so the <a href="https://man.openbsd.org/vlan.4">vlan(4)</a> question won't be asked unless another network interface exists.
<li>Started allowing arguments to the <a href="https://man.openbsd.org/sftp.1">sftp(1)</a> -D option. (e.g. sftp -D "/usr/libexec/sftp-server -el debug3")
<!-- 2022/06/27 -->
<li>Reworked the rttimer code to fix icmp_pmtu_timeout crashes.
<li>Introduced Large Receive Offloading of TCP segment offloading for <a href="https://man.openbsd.org/ix.4">ix(4)</a>. Also added a tso option to <a href="https://man.openbsd.org/ifconfig.8">ifconfig(8)</a> to enable and disable this feature.
<li>Unlocked <a href="https://man.openbsd.org/kbind.2">kbind(2)</a>.
<li>Fixed a lock order reversal in nfs_inactive().
<li>Added support for RFC 9234 (Route Leak Prevention and Detection Using Roles) to <a href="https://man.openbsd.org/bgpd.8">bgpd(8)</a>.
<li>Allowed the <a href="https://man.openbsd.org/pluart.4">pluart(4)</a> baud rate to be changed.
<li>Added <a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a> skiplist option.
<li>Fixed a panic triggered by ifconfig bnxt0 down by changing <a href="https://man.openbsd.org/bnxt.4">bnxt(4)</a> devices to not run rx and tx interrupt handlers when the interface is not running.
<li>Fixed <a href="https://man.openbsd.org/bwfm.4">bwfm(4)</a> ifconfig media display on devices with sta_info command version 3.
<li>Fixed missing interrupts for trackpads on some machines after resume by making sure <a href="https://man.openbsd.org/amdgpio.4">amdgpio(4)</a> restores pin configuration on resume.
<!-- 2022/06/26 -->
<li>Implemented privilege separation in <a href="https://man.openbsd.org/xlock.1">xlock(1)</a>.
<li>Added the --null flag to <a href="https://man.openbsd.org/grep.1">grep(1)</a> which makes grep print an ASCII NUL byte after the file name to make the output unambiguous.
<li>Updated <a href="https://man.openbsd.org/xsm.1">xsm(1)</a> to version 1.0.5.
<li>Updated <a href="https://man.openbsd.org/xlsfonts.1">xlsfonts(1)</a> to version 1.0.7.
<li>Updated <a href="https://man.openbsd.org/xload.1">xload(1)</a> to version 1.1.4.
<li>Updated <a href="https://man.openbsd.org/xedit.1">xedit(1)</a> to version 1.2.3.
<li>Moved the wait for autoconf interfaces from <a href="https://man.openbsd.org/rc.8">rc(8)</a> to <a href="https://man.openbsd.org/netstart.8">netstart(8)</a> to fix tunnel interfaces that depend on working autoconf interfaces.
<li>Updated <a href="https://man.openbsd.org/xdpyinfo.1">xdpyinfo(1)</a> to version 1.3.3.
<!-- 2022/06/25 -->
<li>Updated <a href="https://man.openbsd.org/xclock.1">xclock(1)</a> to version 1.1.1.
<li>Updated <a href="https://man.openbsd.org/xcalc.1">xcalc(1)</a> to version 1.1.1.
<li>Increased the <a href="https://man.openbsd.org/disklabel.8">disklabel(8)</a> auto partitioner's maximum size for /usr to 30G.
<li>Updated <a href="https://man.openbsd.org/xauth.1">xauth(1)</a> to version 1.1.2.
<li>Updated <a href="https://man.openbsd.org/setxkbmap.1">setxkbmap(1)</a> to version 1.3.3.
<li>Updated <a href="https://man.openbsd.org/mkfontscale.1">mkfontscale(1)</a> to version 1.2.2.
<li>Updated <a href="https://man.openbsd.org/listres.1">listres(1)</a> to version 1.0.5.
<li>Updated <a href="https://man.openbsd.org/iceauth.1">iceauth(1)</a> to version 1.0.9.
<li>Updated <a href="https://man.openbsd.org/editres.1">editres(1)</a> to version 1.0.8.
<li>Updated <a href="https://man.openbsd.org/bitmap.1">bitmap(1)</a> to version 1.1.0.
<li>Updated <a href="https://man.openbsd.org/appres.1">appres(1)</a> to version 1.0.6.
<!-- 2022/06/24 -->
<li>Improved accessibility of <a href="https://man.openbsd.org/mandoc.1">mandoc(1)</a> -T html -O toc output by using the &lt;nav&gt; element in the DPUB-ARIA doc-toc role.
<!-- 2022/06/23 -->
<!-- 2022/06/22 -->
<!-- 2022/06/21 -->
<!-- 2022/06/20 -->
<!-- 2022/06/19 -->
<!-- 2022/06/18 -->
<li>Fixed <a href="https://man.openbsd.org/crypto.3">crypto(3)</a> prime recognition when doing trial divisions.
<!-- 2022/06/17 -->
<li>Fixed gzip byte counts with 32-bit integers.
<li>Fixed an issue where a device could show up 32 times by only probing device 0 on PCI busses corresponding to a PCIe root port or a PCIe switch/bridge downstream port.
<!-- 2022/06/16 -->
<li>Bumped MAXCPUS to 256 on arm64.
<li>Ensured cursor remains on selected item on menu in <a href="https://man.openbsd.org/tmux.1">tmux(1)</a>.
<!-- 2022/06/15 -->
<!-- 2022/06/14 -->
<li>Bumped <a href="https://man.openbsd.org/bgpd.8">bgpd(8)</a> version to 7.4.
<!-- 2022/06/13 -->
<li>Fixed a logic bug in pf_find_state() that could cause <a href="https://man.openbsd.org/pf.4">pf(4)</a> to incorrectly block a packet.
<!-- 2022/06/12 -->
<li>Added <a href="https://man.openbsd.org/stftemp.4">stftemp(4)</a>, a driver for the temperature sensor integrated on the StarFive JH7100 SoC.
<!-- 2022/06/11 -->
<!-- 2022/06/10 -->
<li>Fixed a missing <a href="https://man.openbsd.org/kqueue.2">kqueue(2)</a> wakeup to fix a Go test hang.
<li>Implemented CPU_BUSY_CYCLE with the riscv64 ZiHintPause extension.
<!-- 2022/06/09 -->
<li>Fixed bugs in the handling of tap inputs in <a href="https://man.openbsd.org/wscons.4">wscons(4)</a>.
<li>Restored ETHERTYPE_NHRPA case to <a href="https://man.openbsd.org/tcpdump.1">tcpdump(1)</a>.
<li>Added <a href="https://man.openbsd.org/gpiorestart.4">gpiorestart(4)</a>, a driver that resets a SoC/board/machine using a GPIO pin.
<!-- 2022/06/08 -->
<li>Stopped refusing valid IPv6 addresses in -X connect SOCKS support of <a href="https://man.openbsd.org/nc.1">nc(1)</a>.
<li>Added the -b option to <a href="https://man.openbsd.org/sysupgrade.8">sysupgrade(8)</a> to set an alternative base directory to which the installation files will be downloaded to.
<li>Added <a href="https://man.openbsd.org/stfpinctrl.4">stfpinctrl(4)</a>, a driver for the pinctrl/gpio block found on the StarFive JH7100 SoC.
<!-- 2022/06/07 -->
<li>Fixed a <a href="https://man.openbsd.org/pf.4">pf(4)</a> NULL dereference panic triggered by <a href="https://man.openbsd.org/relayd.8">relayd(8)</a>.
<li>Updated unbound to 1.16.0.
<li>Removed the unused uvm_km_valloc_prefer_wait(9) and uvm_km_free_wakeup(9) functions.
<li>Fixed <a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a> path validation of AS numbers.
<!-- 2022/06/06 -->
<li>Bumped pbuild's datasize-cur from 2G to 3G on i386.
<li>Added <a href="https://man.openbsd.org/stfclock.4">stfclock(4)</a>, a driver for the clock controller found on the StarFive JH7100 SoC.
<li>Imported libdrm 2.4.111.
<li>Matched groff behavior to allow arbitrary argument delimiters for \C in <a href="https://man.openbsd.org/mandoc.1">mandoc(1)</a>.
<li>Iterated the tied algorithm in <a href="https://man.openbsd.org/pkg_add.1">pkg_add(1)</a> to prevent O(n^2) behavior when packages contain several hundred copies of the same file.
<!-- 2022/06/05 -->
<!-- 2022/06/04 -->
<li>Added handling of 9k devices which do not support antenna B to <a href="https://man.openbsd.org/iwm.4">iwm(4)</a>.
<!-- 2022/06/03 -->
<li>Fixed multiple memory leaks in <a href="https://man.openbsd.org/awk.1">awk(1)</a>.
<!-- 2022/06/02 -->
<li>Made SetEnv directives first-match-wins in both <a href="https://man.openbsd.org/ssh_config.5">ssh_config(5)</a> and <a href="https://man.openbsd.org/sshd_config.5">sshd_config(5)</a>.
<li>Dropped DSA keys from the SSH keys generated by default by <a href="https://man.openbsd.org/ssh-keygen.1">ssh-keygen</a> -A.
<li>Allowed <a href="https://man.openbsd.org/btrace.8">btrace(8)</a> to execute the END probe upon receiving a SIGTERM signal.
<li>Changed <a href="https://man.openbsd.org/dump.8">dump(8)</a> to not treat the first argument as a 4.3BSD option string if it contains a '/'.
<li>Ensured that when running <a href="https://man.openbsd.org/sysupgrade.8">sysupgrade(8)</a> on -stable that it will move to the next release, not -current.
<li>Implemented and enabled IPv4, TCP, and UDP checksum offloading for <a href="https://man.openbsd.org/igc.4">igc(4)</a>.
<!-- 2022/06/01 -->
<li>Enabled <a href="https://man.openbsd.org/aq.4">aq(4)</a> on arm64.
<!-- 2022/05/31 -->
<li>Implemented a rudimentary version of the <a href="https://man.openbsd.org/roff.7">roff(7)</a> <code>\A</code> escape sequence for <a href="https://man.openbsd.org/mandoc.1">mandoc(1)</a>.
<li>Rewrote <a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a> rsc.c using ASN.1 templates to implement the constrained versions of the RFC 3779 structures.
<li>Implemented <code>verify-required</code> certificate option in <a href="https://man.openbsd.org/ssh-keygen.1">ssh-keygen(1)</a>.
<li>Implemented a <code>max-communities</code> filter match for <a href="https://man.openbsd.org/bgpd.conf.5">bgpd.conf(5)</a>.
<!-- 2022/05/30 -->
<li>Added <a href="https://man.openbsd.org/sfgpio.4">sfgpio(4)</a>, a driver for the GPIO controller found on the SiFive FU740 SoC.
<li>Made <a href="https://man.openbsd.org/grep.1">grep(1)</a> provide full context when using match count (<code>-m</code>).
<li>Added an ACL list for multiple users attaching to the <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> socket.
<li>Made a first pass at providing kstats for <a href="https://man.openbsd.org/mvneta.4">mvneta(4)</a> from the hardware counters.
<!-- 2022/05/29 -->
<!-- 2022/05/28 -->
<!-- 2022/05/27 -->
<li>Limited locked memory to 64k.
<li>Fixed a crash in libpcap when it would walk off the end of the array performing frees.
<!-- 2022/05/26 -->
<li>Made <a href="https://man.openbsd.org/ssh.1">ssh(1)</a> unconditionally call <a href="https://man.openbsd.org/freezero.3">freezero(3)</a> to guarantee that the password is removed from RAM even when sshpkt functions fail.
<li>Introduced a new daemon_execdir variable to <a href="https://man.openbsd.org/rc.d.8">rc.d(8)</a> for changing to a specified directory before running rc_exec.
<!-- 2022/05/25 -->
<li>Migrated <a href="https://man.openbsd.org/tcpdump.8">tcpdump(8)</a> printing of ASnumbers from the old asdot format to asplain format.
<li>Fixed non-transitive extended community handling in <a href="https://man.openbsd.org/bgpd.8">bgpd(8)</a>.
<li>Added RFC 9234 "BGP Role" support to <a href="https://man.openbsd.org/tcpdump.8">tcpdump(8)</a>
<!-- 2022/05/24 -->
<!-- 2022/05/23 -->
<li>Made <a href="https://man.openbsd.org/mg.1">mg(1)</a> automatically delete trailing whitespace on RET in c-mode and auto-indent-mode.
<li>Stopped telling <a href="https://man.openbsd.org/fdisk.8">fdisk(8)</a> that macppc HAS_MBR.
<li>Added support for the <a href="https://man.openbsd.org/ehci.4">ehci(4)</a> controller on marvell 3720 boards.
<li>Fixed a kernel panic in <a href="https://man.openbsd.org/pf.4">pf(4)</a> if IP options with an ICMP payload were truncated. Such packets will now be dropped instead.
<!-- 2022/05/22 -->
<li>Made <a href="https://man.openbsd.org/xterm.1">xterm(1)</a> use a much safer FD-passing idiom for updating <a href="https://man.openbsd.org/utmp.5">utmp(5)</a>.
<!-- 2022/05/21 -->
<li>Added kernel locking in nfsrv_rcv() because NFS subsystem is not MP-safe yet.
<li>Converted KVA allocation to kmalloc(9) on hppa, mips64, and sparc64.
<li>Repaired a FILE leak in <a href="https://man.openbsd.org/resolvd.8">resolvd(8)</a>.
<li>Replaced <a href="https://man.openbsd.org/rc.d.8">rc.d(8)</a> $rcexec variable with an rc_exec function. <em>This will require a mechanical change from <code>${rcexec}</code> to <code>rc_exec</code> in rc.d scripts.</em> Kept compatibility to give people a chance to fix their custom scripts.
<!-- 2022/05/20 -->
<li>Fixed <a href="https://man.openbsd.org/system.3">system(3)</a> to ignore SIGINT and SIGQUIT until the shell exits.
<li>Made <a href="https://man.openbsd.org/vmm.4">vmm(4)</a> load the vmcs before reading vcpu registers. This fixes <a href="https://man.openbsd.org/vmctl.8">vmctl(8)</a> send on Intel hosts using <a href="https://man.openbsd.org/vmd.8">vmd(8)</a>.
<!-- 2022/05/19 -->
<li>Changed the semantics of "hid_none" for <a href="https://man.openbsd.org/usbhid.3">hid_start_parse(3)</a> to allow matching of all possible kinds of report IDs.
<li>Made <a href="https://man.openbsd.org/mandoc.1">mandoc(1)</a>'s roff_expand() parse left-to-right rather than right-to-left.
<li>Fixed luna88k MULTIPROCESSOR kernels booting with CPU modules installed in arbitrary slots.
<!-- 2022/05/18 -->
<li>Released <a href="https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.5.3-relnotes.txt">LibreSSL 3.5.3</a>.
<!-- 2022/05/17 -->
<li>Boosted <a href="https://man.openbsd.org/mvclock.4">mvclock(4)</a>'s priority such that it wins against <a href="https://man.openbsd.org/syscon.4">syscon(4)</a>.
<!-- 2022/05/16 -->
<li>Unlocked <a href="https://man.openbsd.org/umask.2">umask(2)</a>.
<!-- 2022/05/15 -->
<!-- 2022/05/14 -->
<li>Corrected <a href="https://man.openbsd.org/veb.4">veb(4)</a> to avoid calling if_enqueue from an smr critical section.
<!-- 2022/05/13 -->
<li>Added an additional <a href="https://man.openbsd.org/vmm.4">vmm(4)</a> fault type, fixing vm receive.
<li>Updated <a href="https://man.openbsd.org/nsd.8">nsd(8)</a> to upstream version 4.5.0.
<!-- 2022/05/12 -->
<li>Corrected reorder_kernel to also handle redirecting stderr to logged output when $KERNEL_DIR.tgz exists.
<li>Arranged <a href="https://man.openbsd.org/scp.1">scp(1)</a> so it won't <a href="https://man.openbsd.org/ftruncate.2">ftruncate(2)</a> files early when in <a href="https://man.openbsd.org/sftp.1">sftp(1)</a> mode.
<li>Added login.conf.d to <a href="https://man.openbsd.org/mtree.8">mtree(8)</a>.
<li>Fixed <a href="https://man.openbsd.org/iwx.4">iwx(4)</a> setting of HT/VHT bits in rate flags of the Tx command that could cause a firmware panic.
<li>Added /etc/login.conf.d/* to <a href="https://man.openbsd.org/changelist.5">changelist(5)</a>.
<li>Elminated a race condition in <a href="https://man.openbsd.org/kqueue.2">kqueue(2)</a>'s knote_remove().
<li>Prevented use of "-u" when <a href="https://man.openbsd.org/fdisk.8">fdisk(8)</a> is operating on GPT formatted disks.
<!-- 2022/05/11 -->
<!-- 2022/05/10 -->
<li>Made the CPU frequency scaling duration relative to the load when in automatic mode on battery.
<li>Fixed <a href="https://man.openbsd.org/rwlock.9">rwlock(9)</a> implementation to be fair to writers. Previously, readers could grab the lock even if writers were waiting first.
<!-- 2022/05/09 -->
<li>Aligned <a href="https://man.openbsd.org/fdisk.8">fdisk(8)</a> logic with that used in the kernel to allow the protective EFI GPT partition to be in MBR partitions 0-3, not just 0.
<li>Added support for AX210/AX211 devices to <a href="https://man.openbsd.org/iwx.4">iwx(4)</a>.
<li>Added preliminary support for decoding RSC objects in filemode to <a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a>.
<!-- 2022/05/08 -->
<li>Allowed <a href="https://man.openbsd.org/ssh-keygen.1">ssh-keygen(1)</a> existing -U (use agent) flag to work with "-Y sign" operations.
<li>Fixed rebooting a received vm in <a href="https://man.openbsd.org/vmd.8">vmd(8)</a>.
<li>Backported an upstream zlib fix for CRC calculation.
<li>Updated zlib to version 1.2.12.
<!-- 2022/05/07 -->
<!-- 2022/05/06 -->
<!-- 2022/05/05 -->
<li>Fixed the watchdog in the installer so that the watchdog is reset after each download and each set installation.
<li>Added check to <a href="https://man.openbsd.org/acme-client.1">acme-client(1)</a> to ensure the challenge token is turned into a filename that is base64url encoded.
<li>Added error handling to <a href="https://man.openbsd.org/kbd.8">kbd(8)</a> for when setting the keyboard encoding fails.
<li>Changed IN_EXPERIMENTAL (aka 240/4) to no longer be considered not forwardable.
<!-- 2022/05/04 -->
<li>Introduced a mutex for <a href="https://man.openbsd.org/ratecheck.9">ratecheck(9)</a> and <a href="https://man.openbsd.org/ppsratecheck.9">ppsratecheck(9)</a>.
<li>Imported the HDKF code from OpenSSL 1.1.1o into <a href="https://man.openbsd.org/crypto.3">crypto(3)</a>.
<li>Bypassed <a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a> timeout in file mode.
<li>Merged the UVM swap-backed and object-backed inactive page lists.
<!-- 2022/05/03 -->
<li>Standardized memory units to bytes in <a href="https://man.openbsd.org/vmm.4">vmm(4)</a>, <a href="https://man.openbsd.org/vmctl.8">vmctl(8)</a>, and <a href="https://man.openbsd.org/vmd.8">vmd(8)</a>.
<li>Rate limited uvn_flush errors during pageout messages, preventing slowdown of system boot when a filesystem is full.
<li>Made <a href="https://man.openbsd.org/pf.4">pf(4)</a> more paranoid about IGMP/MKP messages.
<li>Activated parallel IP forwarding, starting 4 softnet tasks but limiting the usage to the number of CPUs.
<!-- 2022/05/02 -->
<li>Disabled bcmgenet DMA as part of hardware reset, preventing the hardware from ending up in a partially initialized state during netboot.
<!-- 2022/05/01 -->
<li>Installed useful <a href="https://man.openbsd.org/btrace.8">btrace(8)</a> scripts in /usr/share/btrace.
<li>Prevented out-of-bounds array access with binaries that use unsupported relocations on amd64.
<!-- 2022/04/30 -->
<!-- 2022/04/29 -->
<li>Enabled running of IP input and forwarding with a shared netlock.
<li>Enabled <a href="https://man.openbsd.org/pkg_add.1">pkg_add(1)</a> caching by default.
<li>Updated libdrm to version 2.4.110.
<li>Altered <a href="https://man.openbsd.org/sndiod.8">sndiod(8)</a> to wait until the buffer is drained before closing the device.
<li>Changed <a href="https://man.openbsd.org/pf.4">pf(4)</a> handling of IGMP and ICMP6 MLD packets to allow multicast control packets to work by default.
<li>Introduced <a href="https://man.openbsd.org/sio_flush.3">sio_flush(3)</a> to stop playback immediately.
<!-- 2022/04/28 -->
<li>Fixed a potential leak of an SK device in <a href="https://man.openbsd.org/ssh.1">ssh(1)</a>.
<li>Fixed a memory leak on the session-bind path of <a href="https://man.openbsd.org/ssh-agent.1">ssh-agent(1)</a>.
<li>Protected the global lists with a mutex and moved rttimer entries into a temporary list to make route timers MP safe.
<li>Decoupled IP input and forwarding from protocol input to allow parallel IP processing while the upper layers are still not MP safe.
<!-- 2022/04/27 -->
<li>Removed the ASN.1 decoder tag/length cache (TLC) from <a href="https://man.openbsd.org/crypto.3">crypto(3)</a>.
<li>Added <a href="https://man.openbsd.org/dt.4">dt(4)</a> tracepoints for <a href="https://man.openbsd.org/vmm.4">vmm(4)</a> vm exit reporting.
<!-- 2022/04/26 -->
<li>Added cpu frequency sensors for each core on CPUs that have MPERF/APERF support.
<!-- 2022/04/25 -->
<li>Reimplemented the page allocation code using <a href="https://man.openbsd.org/bus_dma.9">bus_dma(9)</a> APIs to make sure DMA addresses are translated properly on architectures with an IOMMU. This fixed <a href="https://man.openbsd.org/amdgpu.4">amdgpu(4)</a> and <a href="https://man.openbsd.org/radeondrm.4">radeondrm(4)</a> on powerpc, sparc64, and arm64 machines.
<li>Updated libX11 to version 1.7.5.
<li>Updated <a href="https://man.openbsd.org/xterm">xterm(1)</a> to version 372.
<li>Extended <a href="https://man.openbsd.org/ksmn.4">ksmn(4)</a> to show CCD temperatures if available.
<!-- 2022/04/24 -->
<!-- 2022/04/23 -->
<li>Increased rx buffer size on <a href="https://man.openbsd.org/uaq.4">uaq(4)</a> to 62kB.
<li>Added missing uuid_dec_le() to init_fp() so <a href="https://man.openbsd.org/fdisk.8">fdisk(8)</a> -A works on big-endian architectures.
<!-- 2022/04/22 -->
<li>Updated <a href="https://man.openbsd.org/vi">vi(1)</a> to apply expandtab to the output of a ! command.
<li>Protected <a href="https://man.openbsd.org/arp.4">arp(4)</a>, ND6, and <a href="https://man.openbsd.org/pppoe.4">pppoe(4)</a> with the kernel lock so that IP forwarding can be run in parallel.
<!-- 2022/04/21 -->
<li>Updated various wireless drivers to use <a href="https://man.openbsd.org/memset.3">memset(3)</a> to initialize ieee80211_rxinfo struct properly.
<li>Prevented a crash in <a href="https://man.openbsd.org/vi">vi(1)</a> when cursor key support is disabled.
<li>Introduced dedicated link entries for snapshots to <a href="https://man.openbsd.org/pfsync.4">pfsync(4)</a>.
<!-- 2022/04/20 -->
<li>Repaired <a href="https://man.openbsd.org/rge.4">rge(4)</a> hardware vlan tagging.
<li>Changed <a href="https://man.openbsd.org/crypto.3">crypto(3)</a> to avoid expensive RFC 3779 checks during certificate verification.
<li>Updated Mesa to version 21.3.8.
<li>Added concatenated JSON output to <a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a> filemode.
<!-- 2022/04/19 -->
<li>Made <a href="https://man.openbsd.org/ssh.1">ssh(1)</a> try to continue running local I/O for channels in OPEN state during transport rekeying to allow escapes to work in the client if the connection stalls during a rekey event.
<li>Made <a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a> hard error when parse_filepath() is passed an unknown repository id.
<!-- 2022/04/18 -->
<li>Restored <a href="https://man.openbsd.org/vte.4">vte(4)</a> original MDC speed control register value on vte_reset, needed for Vortex86DX3 machines.
<li>Enabled <a href="https://man.openbsd.org/kstat.4">kstat(4)</a> and <a href="https://man.openbsd.org/kstat.1">kstat(1)</a>.
<!-- 2022/04/17 -->
<li>Fixed <a href="https://man.openbsd.org/kbd.8">kbd(8)</a> so it doesn't fail silently when executed by a regular user.
<!-- 2022/04/16 -->
<li>Made device matching in <a href="https://man.openbsd.org/iwx.4">iwx(4)</a> more similar to linux iwlwifi.
<!-- 2022/04/15 -->
<li>Allowed more than one CRL URI in certificates for <a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a>
<li>Made use of the fact that repositories are unique objects in <a href="https://man.openbsd.org/pkg_add">pkg_add(1)</a> and annotated the quirks repository as cached, allowing for a large speed increase.
<!-- 2022/04/14 -->
<li>Relaxed address availability check for <a href="https://man.openbsd.org/multicast.4">multicast(4)</a> binds so processes listening for the same multicast address do not need to be the same UID.
<li>Fixed witness lock issue found where <a href="https://man.openbsd.org/pfsync.4">pfsync(4)</a> holds the mutex and an interrupt grabs the kernel lock.
<!-- 2022/04/13 -->
<li>Updated <a href="https://man.openbsd.org/afterboot.8">afterboot(8)</a> to direct the user to use binary packages.
<li>Changed to a simpler formula to calculate a default kern.maxthread value: 2*NPROCESS.
<!-- 2022/04/12 -->
<li>Simplified machine command handling in <a href="https://man.openbsd.org/ddb.4">ddb(4)</a>.
<li>Fixed <a href="https://man.openbsd.org/openrsync">openrsync(1)</a> on sparc64 by eliminating a redundant second conversion of the int value from little to host endian.
<li>Extended <a href="https://man.openbsd.org/rpki-client">rpki-client(8)</a> -f filemode to decode and print TAL details.
<!-- 2022/04/11 -->
<!-- 2022/04/10 -->
<li>Changed <a href="https://man.openbsd.org/compress">compress(1)</a> to print a more accurate message when -v is used with -k.
<li>Added missing arches (aarch64, mipsel64, powerpc64) to categories in <a href="https://man.openbsd.org/sendbug">sendbug(1)</a>.
<!-- 2022/04/09 -->
<!-- 2022/04/08 -->
<li>Fixed calculation of the width of spanned columns in <a href="https://man.openbsd.org/mandoc">mandoc(1)</a>.
<li>Fixed memory leak in <a href="https://man.openbsd.org/ipmi.4">ipmi(4)</a> get_sdr on failure.
<!-- 2022/04/07 -->
<li>Added support for more power sensors to <a href="https://man.openbsd.org/ipmi.4">ipmi(4)</a>.
<!-- 2022/04/06 -->
<li>Added support for switching from glass console to serial console on arm64 systems that default to glass console.
<li>Allowed bsd.rd and bsd/bsd.mp to boot on Oracle Cloud amd64 instances.
</ul>