plus75.html

<!doctype html>
<html lang=en id=plus>
<meta charset=utf-8>
<title>OpenBSD 7.5 Changelog</title>
<meta name="description" content="OpenBSD 7.5 changes">
<meta name="viewport" content="width=device-width, initial-scale=1">
<link rel="stylesheet" type="text/css" href="openbsd.css">
<link rel="canonical" href="https://www.openbsd.org/plus75.html">
<style>
strong {
	color: var(--red);
	font-weight: normal;
}

h3 {
	color: var(--blue);
}
</style>

<h2 id=OpenBSD>
<a href="index.html">
<i>Open</i><b>BSD</b></a>
7.5 Changelog
</h2>
<hr>

<p>
This selection is intended to include all important
and all user-visible changes.
For a complete record of all changes, please see the "source-changes"
mailing list, called "OpenBSD CVS"
in the <a href="https://marc.info/?l=openbsd-cvs">archives</a>,
or use <a href="anoncvs.html#CVS">CVS</a>.

<p>
For changes in other releases, click below:<br>
<a href="plus20.html">2.0</a>,
<a href="plus21.html">2.1</a>,
<a href="plus22.html">2.2</a>,
<a href="plus23.html">2.3</a>,
<a href="plus24.html">2.4</a>,
<a href="plus25.html">2.5</a>,
<a href="plus26.html">2.6</a>,
<a href="plus27.html">2.7</a>,
<a href="plus28.html">2.8</a>,
<a href="plus29.html">2.9</a>,
<a href="plus30.html">3.0</a>,
<a href="plus31.html">3.1</a>,
<a href="plus32.html">3.2</a>,
<a href="plus33.html">3.3</a>,
<a href="plus34.html">3.4</a>,
<a href="plus35.html">3.5</a>,
<a href="plus36.html">3.6</a>,
<br>
<a href="plus37.html">3.7</a>,
<a href="plus38.html">3.8</a>,
<a href="plus39.html">3.9</a>,
<a href="plus40.html">4.0</a>,
<a href="plus41.html">4.1</a>,
<a href="plus42.html">4.2</a>,
<a href="plus43.html">4.3</a>,
<a href="plus44.html">4.4</a>,
<a href="plus45.html">4.5</a>,
<a href="plus46.html">4.6</a>,
<a href="plus47.html">4.7</a>,
<a href="plus48.html">4.8</a>,
<a href="plus49.html">4.9</a>,
<a href="plus50.html">5.0</a>,
<a href="plus51.html">5.1</a>,
<a href="plus52.html">5.2</a>,
<a href="plus53.html">5.3</a>,
<br>
<a href="plus54.html">5.4</a>,
<a href="plus55.html">5.5</a>,
<a href="plus56.html">5.6</a>,
<a href="plus57.html">5.7</a>,
<a href="plus58.html">5.8</a>,
<a href="plus59.html">5.9</a>,
<a href="plus60.html">6.0</a>,
<a href="plus61.html">6.1</a>,
<a href="plus62.html">6.2</a>,
<a href="plus63.html">6.3</a>,
<a href="plus64.html">6.4</a>,
<a href="plus65.html">6.5</a>,
<a href="plus66.html">6.6</a>,
<a href="plus67.html">6.7</a>,
<a href="plus68.html">6.8</a>,
<a href="plus69.html">6.9</a>,
<a href="plus70.html">7.0</a>,
<br>
<a href="plus71.html">7.1</a>,
<a href="plus72.html">7.2</a>,
<a href="plus73.html">7.3</a>,
<a href="plus74.html">7.4</a>,
<a href="plus76.html">7.6</a>,
<a href="plus77.html">7.7</a>,
<a href="plus.html">current</a>.
<br>

<p>
<h3>Changes made between OpenBSD 7.4 and 7.5</h3>
<p>

<ul>
<!-- 2024/03/08 -->
<li>Fixed <a href="https://man.openbsd.org/ssh-keygen.1">ssh-keygen(1)</a> find-principals on allowed_signers files with blank lines.
<!-- 2024/03/07 -->
<li>Disabled LRO in <a href="https://man.openbsd.org/ix.4">ix(4)</a> on sparc64 by default for stability for the 7.5 release.
<!-- 2024/03/06 -->
<li>Enabled <a href="https://man.openbsd.org/dwxe.4">dwxe(4)</a> on riscv64.
<li>Added Allwinner D1 ethernet controller clocks and reset support to <a href="https://man.openbsd.org/sxiccmu.4">sxiccmu(4)</a>.
<li>Added SPI clocks for other 64-bit Rockchip SoCs in <a href="https://man.openbsd.org/rkclock.4">rkclock(4)</a>.
<!-- 2024/03/05 -->
<li>Added backup of disklabel for <a href="https://man.openbsd.org/softraid.4">softraid(4)</a> chunks to <a href="https://man.openbsd.org/security.8">security(8)</a>.
<li>Converted 't_lock', 'r_keypair_lock' and 'c_lock' <a href="https://man.openbsd.org/rwlock.9">rwlock(9)</a>s to corresponding <a href="https://man.openbsd.org/mutex.9">mutex(9)</a>es.
<li>Switched to using whois.internic.net for <a href="https://man.openbsd.org/whois.1">whois(1)</a> -i.
<li>Added validation for IPv4 packet options in <a href="https://man.openbsd.org/divert.4">divert(4)</a>.
<!-- 2024/03/04 -->
<li>Fixed detection of qcpas0 driver on x13s when booted in ACPI mode.
<!-- 2024/03/03 -->
<li>Separated <a href="https://man.openbsd.org/ssh.1">ssh(1)</a> parsing of string array options from applying them to the active configuration. Fixed some cases where the config parser improperly rejected valid configuration.
<li>Started flushing the D-cache before disabling the cache on armv7 in efiboot.
<li>Added a workaround for an 88100 errata where FPU imprevise exceptions could be raised in error.
<!-- 2024/03/02 -->
<li>Fixed <a href="https://man.openbsd.org/awacs.4">awacs(4)</a> audio on some iMac G3 models.
<li>Bumped <a href="https://man.openbsd.org/smtpd.8">smtpd(8)</a> version to 7.5.0.
<li>Added support for attaching <a href="https://man.openbsd.org/rkpmic.4">rkpmic(4)</a> to an SPI bus. Added support for the RK806 PMIC which can attach to both I2C and SPI.
<li>Added <a href="https://man.openbsd.org/rkspi.4">rkspi(4)</a>, a driver for the SPI controller found on various Rockchip SoCs.
<li>Added clocks for the RK3588 SPI controller to <a href="https://man.openbsd.org/rkclock.4">rkclock(4)</a>.
<li>Made <a href="https://man.openbsd.org/iked.8">iked(8)</a> trigger retransmission only for fragment 1/x to prevent each received fragment triggering retransmission of the full fragment queue.
<li>Bumped OpenIKED to 7.4.
<li>Bumped libressl to 3.9.0.
<li>Removed GOST and STREEBOG support from libressl.
<!-- 2024/03/01 -->
<li>Added <a href="https://man.openbsd.org/mktemp.1">mktemp(1)</a> suffix support for compatibility with the GNU version. It is now possible to use templates where the Xs are not at the end.
<li>Added <a href="https://man.openbsd.org/mkdtemps.3">mkdtemps(3)</a>, identical to <a href="https://man.openbsd.org/mkdtemp.3">mkdtemp(3)</a> except that it permits a suffix to exist in the template.
<li>Allowed <a href="https://man.openbsd.org/fdisk.8">fdisk(8)</a> to add GPT partitions of protected types, making it possible to provision virtual machine images that need a "BIOS Boot" partition.
<li>Bumped <a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a> to 9.0.
<li>Bumped <a href="https://man.openbsd.org/bgpd.8">bgpd(8)</a> to 8.4.
<li>Prevented arm64 printing of CPU feature flags in <a href="https://man.openbsd.org/dmesg.8">dmesg(8)</a> unless they differ from the previous entry.
<li>Protected pool_get() with kernel lock in sys_ypconnect().
<li>Added <a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a> -x to enable processing of experimental file formats (currently only the Signed Prefix list).
<!-- 2024/02/29 -->
<li>Moved from 7.5-beta to 7.5.
<!-- 2024/02/28 -->
<li>Enabled IPv6 AF for <a href="https://man.openbsd.org/ppp.4">ppp(4)</a>.
<!-- 2024/02/27 -->
<!-- 2024/02/26 -->
<li>Enabled MSIs on RK3588 in <a href="https://man.openbsd.org/dwpcie.4">dwpcie(4)</a>.
<li>Added GMAC related RK3588 clocks to <a href="https://man.openbsd.org/rkclock.4">rkclock(4)</a>.
<li>Added RK3588 support to <a href="https://man.openbsd.org/dwqe.4">dwqe(4)</a>.
<li>Fixed Tx rate selection for management frames in <a href="https://man.openbsd.org/iwx.4">iwx(4)</a>.
<li>Made <a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a> track the number of new files moving from 'staging' to 'validated cache'.
<!-- 2024/02/25 -->
<!-- 2024/02/24 -->
<li>Added new accounting flag ABTCFI to <a href="https://man.openbsd.org/acct.5">acct(5)</a> to indicate SIGILL + code ILL_BTCFI has occurred in the process.
<li>Explicitly disabled MSR_CET_NO_TRACK_EN in MSR_S_CET to prevent accidentally allowing "notrack" indirect branches.
<!-- 2024/02/23 -->
<li>Changed the system uptime clock to start at 0.0 rather than 1.0, fixing a problem in <a href="https://man.openbsd.org/sdmmc.4">sdmmc(4)</a> during boot.
<!-- 2024/02/22 -->
<li>Added <a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a> support for RPKI Signed Prefix Lists.
<li>Added suspend/resume support to <a href="https://man.openbsd.org/qwx.4">qwx(4)</a>.
<!-- 2024/02/21 -->
<li>Imported <a href="https://man.openbsd.org/mwx.4">mwx(4)</a>, a driver for Mediatek MT7921 and MT7922 802.11ax devices.
<!-- 2024/02/20 -->
<li>Handled /reserved-memory nodes from device trees on arm64.
<li>Added multithreading to <a href="https://man.openbsd.org/vmd.8">vmd(8)</a>'s vionet, allowing RX and TX to operate independently to reduce overall network latency for guests and alleviate the TX side dominating cpu time.
<li>Added the 7.6 fw key.
<li>Implemented disassociation (RUN->AUTH/INIT) in the <a href="https://man.openbsd.org/qwx.4">qwx(4)</a> driver state machine.
<!-- 2024/02/19 -->
<li>Made <a href="https://man.openbsd.org/bwfm.4">bwfm(4)</a> work with MAC addresses set via ifconfig lladdr.
<li>Fixed a deadlock in <a href="https://man.openbsd.org/openrsync.1">openrsync(1)</a> when big files are synced using the hash algorithm.
<li>Fixed pthread errors which could lead to crashes on sparc64.
<!-- 2024/02/18 -->
<li>Prevented ioctl(WSKBDIO_GETENCODINGS) NULL dereference when sysctl machdep.forceukbd is enabled with no USB keyboard attached.
<!-- 2024/02/17 -->
<li>Removed <a href="https://man.openbsd.org/dt.4">dt(4)</a> clock interrupt staggering to reduce profiling overhead.
<li>Moved to 7.5-beta.
<li>Added JH7100 I2C clocks to <a href="https://man.openbsd.org/stfclock.4">stfclock(4)</a>.
<!-- 2024/02/16 -->
<li>Added TCP Segmentation Offload (TSO) support to <a href="https://man.openbsd.org/em.4">em(4)</a>.
<li>Fixed issues in intel wifi drivers where only a subset of channels were scanned.
<!-- 2024/02/15 -->
<li>Enabled <a href="https://man.openbsd.org/qwx.4">qwx(4)</a> on arm64 and amd64.
<li>Added TCP/UDP Checksum Offloading for IPv4/6 to <a href="https://man.openbsd.org/vmx.4">vmx(4)</a>.
<li>Fixed bogus packet length calculation in the <a href="https://man.openbsd.org/ix.4">ix(4)</a> RX/LRO path, which could lead to TSO tagging forwarded packets incorrectly.
<!-- 2024/02/14 -->
<li>Made <a href="https://man.openbsd.org/qwx.4">qwx(4)</a> work with custom MAC addresses set via <a href="https://man.openbsd.org/ifconfig.8">ifconfig(8)</a>.
<!-- 2024/02/13 -->
<li>Enabled the pool gc thread on m88k MULTIPROCESSOR kernels.
<li>Synced with <a href="https://man.openbsd.org/unbound.8">unbound(8)</a> to fix CVE-2023-50387 and CVE-2023-50868, usable to cause high CPU load and potentially denial of service with specifically crafted DNSSEC responses.
<li>Added two new values for the <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> destroy-unattached option to destroy sessions only if they are not members of sessions groups.
<!-- 2024/02/12 -->
<li>Disabled hardclock() on secondary CPUs, reducing every system's normal clock interrupt rate by (HZ - HZ/10) per secondary CPU.
<li>Added Allwinner H616 support to <a href="https://man.openbsd.org/ehci.4">ehci(4)</a>.
<li>Added <a href="https://man.openbsd.org/vi.1">vi(1)</a> showfilename set option to display the file name in the lower left corner.
<!-- 2024/02/11 -->
<li>Enabled disk encryption in unattended installations using a plaintext passphrase or keydisk.
<li>Used 'sb_mtx' instead of 'inp_mtx' in the receive path for inet sockets.
<!-- 2024/02/10 -->
<li>Made <a href="https://man.openbsd.org/pkg-config.1">pkg-config(1)</a> accept both "CFlags:" and "Cflags:".
<li>Updated libexpat to 2.6.0.
<li>Grew arm64 iso media.
<li>Stopped 'sysctl hw.ucomnames' from returning an error on systems without <a href="https://man.openbsd.org/ucom.4">ucom(4)</a> support.
<!-- 2024/02/09 -->
<li>Fixed locked address interfaces in <a href="https://man.openbsd.org/vmd.8">vmd(8)</a>.
<li>Moved <a href="https://man.openbsd.org/dt.4">dt(4)</a> interval/profile entry points from the fixed-frequency hardclock() to a dedicated clock interrupt callback so probes can fire at arbitrary frequencies.
<li>Enabled <a href="https://man.openbsd.org/igc.4">igc(4)</a> on sparc64.
<li>Made <a href="https://man.openbsd.org/ifconfig.8">ifconfig(8)</a> display the Tx rate selected by <a href="https://man.openbsd.org/qwx.4">qwx(4)</a> firmware.
<li>Added nochroot parameter to <a href="https://man.openbsd.org/radiusd.8">radiusd(8)</a> module_drop_privilege() so that modules can use <a href="https://man.openbsd.org/unveil.2">unveil(2)</a> instead of <a href="https://man.openbsd.org/chroot.2">chroot(2)</a> if needed.
<!-- 2024/02/08 -->
<li>Marked full <a href="https://man.openbsd.org/qwx.4">qwx(4)</a> Tx queues, such that the OACTIVE mechanism will be used.
<!-- 2024/02/07 -->
<li>Added Allwinner H616 support to <a href="https://man.openbsd.org/sxiccmu.4">sxiccmu(4)</a>, <a href="https://man.openbsd.org/sximmc.4">sximmc(4)</a> and <a href="https://man.openbsd.org/sxipio.4">sxipio(4)</a>.
<li>Added and installed the zonenow.tab file, a table where each row stands for a timezone where civil timestamps are predicted to agree from now on.
<!-- 2024/02/06 -->
<li>Implemented basic <a href="https://man.openbsd.org/bpf.4">bpf(4)</a> support for <a href="https://man.openbsd.org/qwx.4">qwx(4)</a>.
<!-- 2024/02/05 -->
<li>Added risc-v support code for clang -msave-restore.
<li>Added a netstat counter for route cache.
<li>Used the 'sb-mtx' <a href="https://man.openbsd.org/mutex.9">mutex(9)</a> to protect 'sb_timeo_nsecs'.
<li>Stopped sending route messages while rebooting after a panic, to prevent an additional panic in the <a href="https://man.openbsd.org/knote.9">knote(9)</a> layer.
<li>Update timezone info to include Kazakhstan's switch to unified UTC+5 and Palestine time change after Ramadan.
<li>Made <a href="https://man.openbsd.org/btrace.8">btrace(8)</a> print statistics on stderr to be able to redirect <a href="https://man.openbsd.org/bt.5">bt(5)</a> script output.
<!-- 2024/02/04 -->
<li>Added a DMA constraint for the x13s.
<!-- 2024/02/03 -->
<li>Reworked socket buffers locking for shared netlock, introducing 'sb_mtx' <a href="https://man.openbsd.org/mutex.9">mutex(9)</a> to protect sockbuf.
<li>Prevented cpu spinning when a <a href="https://man.openbsd.org/vio.4">vio(4)</a> device would be activated by a driver but before virtqueues were provided.
<li>Removed Softdep.
<li>Added new amd64-only sysctl machdep.retpoline which says whether the cpu requires retpoline.
<li>Implemented Multiple Message MSI support on arm64, currently working only on systems that use <a href="https://man.openbsd.org/agintcmsi.4">agintcmsi(4)</a> as the MSI controller combined with the <a href="https://man.openbsd.org/dwpcie.4">dwpcie(4)</a> Hots/PCIe bridge.
<li>Implemented qwx_tx() in <a href="https://man.openbsd.org/qwx.4">qwx(4)</a>, enabling the 4-way handshake.
<!-- 2024/02/02 -->
<li>Ensured that <a href="https://man.openbsd.org/smtpd.8">smtpd(8)</a> only processes the .forward file of the alternate delivery user provided in a dispatcher, and no other recipient .forward file.
<li>Disallowed custom commands and file reading in a .forward file, allowing only forwarding addresses and users, so that <a href="https://man.openbsd.org/smtpd.8">smtpd(8)</a> can't execute custom commands set by root in a .forward.
<li>Reverted <a href="https://man.openbsd.org/smtpd.8">smtpd(8)</a> to running lmtp deliveries as the recipient user, not SMTPD_USER (_smtpd).
<li>Implemented the basics of the <a href="https://man.openbsd.org/qwx.4">qwx(4)</a> data frame Rx path, allowing our net80211 stack to see the initial WPA handshake packet sent by the AP.
<li>Made <a href="https://man.openbsd.org/vmd.8">vmd(8)</a> explain missing agentx group on <a href="https://man.openbsd.org/getgrnam.3">getgrnam(3)</a> failure.
<!-- 2024/02/01 -->
<li>Added <a href="https://man.openbsd.org/sximmc.4">sximmc(4)</a> Allwinner D1 support and enabled it on riscv64.
<!-- 2024/01/31 -->
<li>In <a href="https://man.openbsd.org/aucat.1">aucat(1)</a>, fixed MIDI control of the levels of individual files.
<li>Added a route generation number that is updated whenever the routing table changes, allowing discarding of older cached routes without waiting for socket closure or invalidation.
<!-- 2024/01/30 -->
<li>Added MediaTek UART support.
<li>Rewrote <a href="https://man.openbsd.org/vmd.8">vmd(8)</a>'s vionet to be zero-copy.
<li>Increased macppc and arm maximum text segment size to accommodate clang.
<li>Fixed a race in <a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a> between scheduling a new request onto an idle connection and closing the same connection.
<!-- 2024/01/29 -->
<li>Updated to libdrm 2.4.120.
<li>Changed TCP timers to run without kernel lock.
<li>Handled <a href="https://man.openbsd.org/qwx.4">qwx(4)</a> association state transitions from ASSOC to RUN, allowing successful completion of the association sequence with the AP.
<li>Prevented a kernel panic in the case that <a href="https://man.openbsd.org/apldrm.4">apldrm(4)</a> fails to create a framebuffer without propagating an error to its callers.
<!-- 2024/01/28 -->
<li>Added <a href="https://man.openbsd.org/qwx.4">qwx(4)</a> support for sending management frames.
<li>Allowed escaping inside quotes in <a href="https://man.openbsd.org/smtpd.8">smtpd(8)</a>.
<li>Updated to xbiff 1.0.5.
<li>Updated to xeyes 1.3.0.
<li>Updated to fonttosfnt 1.2.3.
<li>Updated to xserver 21.1.11.
<!-- 2024/01/27 -->
<li>Forced -fno-stack-protector on "boot block" that can't have a stack protector (alpha and sparc64).
<li>Set -fno-stack-protector in NORMAL_C_NOP, used to compile mcount.c, ensuring there is never a stack protector prologue/epilogue in the functions in that file.
<li>Enabled the <a href="https://man.openbsd.org/openssl.1">openssl(1)</a> command line tool to generate ECDSA certificates and CMS products.
<li>Added the <a href="https://man.openbsd.org/sxitimer.4">sxitimer(4)</a> driver to riscv64 to be able to trigger external interrupts on the Allwinner D1.
<li>Added <a href="https://man.openbsd.org/sxirtc.4">sxirtc(4)</a> support for newer SoCs that store the data as number of days since the Unix epoch instead of a calendar date.
<li>Implemented an initial SMIv2 parser in <a href="https://man.openbsd.org/snmpd.8">snmpd(8)</a>.
<!-- 2024/01/26 -->
<li>Put checksum flags in bpf_hdr to use them in userland <a href="https://man.openbsd.org/dhcpleased.8">dhcpleased(8)</a> so it can accept non-calculatred checksums verified by hardware/hypervisor.
<li>Added Allwinner D1 support to <a href="https://man.openbsd.org/sxidog.4">sxidog(4)</a>, support for the USB PHY to <a href="https://man.openbsd.org/ehci.4">ehci(4)</a> and initial clock support to <a href="https://man.openbsd.org/sxiccmu.4">sxiccmu(4)</a>.
<li>Unlocked <a href="https://man.openbsd.org/listen.2">listen(2)</a>.
<li>Added <a href="https://man.openbsd.org/bgplgd.8">bgplgd(8)</a> -V to list version.
<li>Implemented T-Head cache management operations needed to handle SoCs like the Allwinner D1 on riscv64.
<li>Updated libcxx, libcxxabi and libunwind to 16.0.6.
<!-- 2024/01/25 -->
<li>Made <a href="https://man.openbsd.org/btrace.8">btrace(8)</a> return 0 when accessing an argument not defined in a probe.
<li>Updated <a href="https://man.openbsd.org/awk.1">awk(1)</a> to the Jan 22, 2024 version.
<li>Fixed various NULL dereferences in PKCS #12.
<li>Implemented RFC7606 treat-as-withdraw for ORIGIN attributes with an invalid value in <a href="https://man.openbsd.org/bgpd.8">bgpd(8)</a>.
<li>Implemented <a href="https://man.openbsd.org/qwx.4">qwx(4)</a> qwx_auth() to move the device from SCAN into AUTH state.
<li>Added processing for scan results to <a href="https://man.openbsd.org/qwx.4">qwx(4)</a>.
<li>Implemented multi-vector MSI interrupts in <a href="https://man.openbsd.org/qwx.4">qwx(4)</a>.
<!-- 2024/01/24 -->
<li>Switched <a href="https://man.openbsd.org/clockintr.9">clockintr(9)</a> from callee- to caller-allocated clockintr structs to remove <a href="https://man.openbsd.org/dt.4">dt(4)</a>-incompatible behavior.
<li>Implemented a per connection peerid for <a href="https://man.openbsd.org/iked.8">iked(8)</a> control replies.
<li>Added <a href="https://man.openbsd.org/iwm.4">iwm(4)</a> to arm64 GENERIC.
<!-- 2024/01/23 -->
<li>Tagged packets going out a <a href="https://man.openbsd.org/sec.4">sec(4)</a> interface to prevent route/encap loops.
<li>Implemented a workaround to a T-Head page attribute extension violating the RISC-V specification. This is designed to make use of the Svpbmt extension and gets us closer to booting OpenBSD on an Allwinner D1 SoC.
<li>Introduced pipex_iterator() to perform 'pipex_session_list' for each walkthrough with 'pipex_list_mtx' <a href="https://man.openbsd.org/mutex.9">mutex(9)</a> relocking.
<li>Forced Apple backlight update after resume.
<li>Updated to zlib 1.3.1.
<li>Explicitly disabled <a href="https://man.openbsd.org/eephy.4">eephy(4)</a> Energy-Efficient Ethernet (EEE) on Marvell E151x.
<li>Changed <a href="https://man.openbsd.org/igc.4">igc(4)</a> default duplex setting and simplied the setup of srrctl.BSIZEPKT.
<!-- 2024/01/22 -->
<li>Made <a href="https://man.openbsd.org/login.conf.5">login.conf(5)</a> and <a href="https://man.openbsd.org/crypt_newhash.3">crypt_newhash(3)</a> and the underlying code consistent regarding bcrypt,a instead of blowfish,a.
<li>Added <a href="https://man.openbsd.org/apldcp.4">apldcp(4)</a>, a driver to control the display coprocessor integrated on Apple SoCs.
<li>Added <a href="https://man.openbsd.org/apldrm.4">apldrm(4)</a>, a driver providing kernel mode setting (KMS) functionality for the graphics hardware integrated on Apple SoCs.
<li>Reduced static binary size by switching to use of libc-private __hash_open() in /etc files cases where the <a href="https://man.openbsd.org/dbopen.3">dbopen(3)</a> function otherwise pulls in all three database backends.
<li>Increased buffer size to avoid truncating styles in <a href="https://man.openbsd.org/tmux.1">tmux(1)</a>.
<li>Created a new libc-private function for when <a href="https://man.openbsd.org/getpwnam.3">getpwnam(3)</a> reaches out to <a href="https://man.openbsd.org/yp.8">yp(8)</a> which can skip socket/address work which isn't needed. Reduces text segment by ~100k in most static binaries and removes 5-7 system call stubs, which might matter for non-pledged binaries which otherwise lack <a href="https://man.openbsd.org/socket.2">socket(2)</a>.
<li>Rewrote assorted imsg code to use new ibuf API.
<!-- 2024/01/21 -->
<li>Disallowed <a href="https://man.openbsd.org/madvise.2">madvise(2)</a> and <a href="https://man.openbsd.org/msync.2">msync(2)</a> memory/mapping destructive ops on immutable memory regions for these operationS, instead returning EPERM.
<!-- 2024/01/20 -->
<li>Increased max VM mem size to 128GB by removing <a href="https://man.openbsd.org/vmd.8">vmd(8)</a> limit.
<li>Improved formatting for <a href="https://man.openbsd.org/pax.1">pax(1)</a> extended header times.
<!-- 2024/01/19 -->
<li>Replaced pinsyscall(2) with the new <a href="https://man.openbsd.org/pinsyscalls.2">pinsyscalls(2)</a> which handles all system calls.
<li>Made <a href="https://man.openbsd.org/mktemp.3">mktemp(3)</a> callback-driven and split into multiple files so only the necessary system calls will be reachable from the binary.
<li>Implemented Multiple Message MSI support on amd64 to aid <a href="https://man.openbsd.org/qwx.4">qwx(4)</a> development.
<!-- 2024/01/18 -->
<li>Added <a href="https://man.openbsd.org/iwn.4">iwn(4)</a> to arm64 GENERIC.
<li>Added TSO support to <a href="https://man.openbsd.org/bnxt.4">bnxt(4)</a>.
<li>Unified inpcb API for inet and inet6.
<li>Completed base program conversion to use imsg_get_fd() in place of imsg.fd.
<li>Used solock() instead of netlock within fill_ifile(), making all socket types protected.
<!-- 2024/01/17 -->
<li>Fixed core file writing when a file map into memory has later been truncated to be smaller than the mapping.
<!-- 2024/01/16 -->
<li>Updated drm to linux 6.6.12.
<li>Made the kernel read pinsyscall tables out of PT_OPENBSD_SYSCALLS in the main program or ld.so, and accept a submission of that information for libc.so from ld.so via <a href="https://man.openbsd.org/pinsyscalls.2">pinsyscalls(2)</a>. At system call invocation, the syscall number is matched to the specific address from which it must come.
<li>Patched X server and Xwayland vulnerabilities CVE-2023-6816, CVE-2024-0229, CVE-2024-21885, CVE-2024-21886, CVE-2024-0408 and CVE-2024-0409.
<!-- 2024/01/15 -->
<li>Added an <a href="https://man.openbsd.org/iked.8">iked(8)</a> debug message when no policy is found.
<li>Ensured a proper string is returned by <a href="https://man.openbsd.org/getaddrinfo.3">getaddrinfo(3)</a> when AI_CANONNAME or AI_FQDN is set.
<li>Added arm64 support for bringing up RTKit while !cold.
<li>Implemented '<a href="https://man.openbsd.org/pfctl.8">pfctl(8)</a> -a "*" -sT' behavior to print all tables attached to every anchor loaded to <a href="https://man.openbsd.org/pf.4">pf(4)</a> (to join the existing "" -sr, which shows the rules found in every anchor).
<!-- 2024/01/14 -->
<li>Prevented <a href="https://man.openbsd.org/vio.4">vio(4)</a> panics by polling device status after issuing device reset to avoid a potential race condition.
<li>Changed ld.so to only load the first libc version encountered requested and substituting it for all further loads, ensuring that the libc version requested by an executable itself is the one loaded.
<!-- 2024/01/13 -->
<li>Provided a more complete implementation of the drm "component" APIs.
<!-- 2024/01/12 -->
<li>Switched to sending UDP packets in parallel now that sending UDP packets via datagram socket is MP safe.
<!-- 2024/01/11 -->
<li>Fixed Linux NFS clients freezing after five minutes of inactivity.
<li>Extended <a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a> -P to work for Trust Anchor certificates.
<li>Improved <a href="https://man.openbsd.org/bgpd.8">bgpd(8)</a> RTR version negotiation.
<li>Made <a href="https://man.openbsd.org/qwx.4">qwx(4)</a> handle MHI M1->M2 state transitions.
<!-- 2024/01/10 -->
<li>Made DSA key support compile-time optional, defaulting to on.
<li>Split UDP PCB table into IPv4 and IPv6 tables, reducing contention on the per table lock.
<!-- 2024/01/09 -->
<li>Prevented a potential <a href="https://man.openbsd.org/bnxt.4">bnxt(4)</a> crash after failure to bring up a queue.
<li>Added instruction length to vm exit information to allow <a href="https://man.openbsd.org/vmd.8">vmd(8)</a> to manipulate the instruction pointer after io emulation, preparation for emulating string-based io instructions.
<li>Added a "global" ChannelTimeout type to <a href="https://man.openbsd.org/ssh.1">ssh(1)</a> and <a href="https://man.openbsd.org/sshd.8">sshd(8)</a> that watches all open channels and will close all open channels if there is no traffic on any of them for the specified interval.
<li>Converted <a href="https://man.openbsd.org/bgpd.8">bgpd(8)</a> parent processing imsg handling over to new imsg API.
<!-- 2024/01/08 -->
<li>Deleted support for FFS filesystems before the in-inode symlink optimization.
<li>Implemented <a href="https://man.openbsd.org/acpi.4">acpi(4)</a> RootPathString support in the LoadTable() AML function, fixing OpenBSD boot on an older version of Hyper-V.
<!-- 2024/01/07 -->
<li>Made syscalls error out if taking more than six arguments.
<li>Updated xserver to 21.1.10.
<li>Added certificate revocation timestamps to <a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a> filemode warning messages.
<!-- 2024/01/06 -->
<li>Prevented use after free of TLS context at <a href="https://man.openbsd.org/syslogd.8">syslogd(8)</a> shutdown.
<!-- 2024/01/05 -->
<!-- 2024/01/04 -->
<li>Improved <a href="https://man.openbsd.org/httpd.8">httpd(8)</a> auto-index, adding human-readable file sizes and allowing per-column sorting.
<li>Fixed <a href="https://man.openbsd.org/smtpd.8">smtpd(8)</a> IPv6 addresses table lookups.
<li>Added <a href="https://man.openbsd.org/axen.4">axen(4)</a> support for AX88179A and prevented incorrect recording of dummy headers as dropped frames.
<!-- 2024/01/03 -->
<li>Improved <a href="https://man.openbsd.org/vmd.8">vmd(8)</a> error messages when out of tap devices.
<li>Enabled Apple brightness keys for arches other than macppc.
<li>Enabled running <a href="https://man.openbsd.org/connect.2">connect(2)</a> system call in parallel within inet domain.
<li>Relaxed <a href="https://man.openbsd.org/smtpd.8">smtpd(8)</a> ORCTP syntax validation to allow parameters which are not valid rfc822 addresses.
<!-- 2024/01/02 -->
<li>Updated to <a href="https://github.com/JodaOrg/global-tz">2023dgtz</a>.
<li>Prevented simultaneous <a href="https://man.openbsd.org/dt.4">dt(4)</a> open.
<!-- 2024/01/01 -->
<li>Protected the link between <a href="https://man.openbsd.org/pf.4">pf(4)</a> and inp with mutex. 
<li>Moved fdt attachment into sys/conf/files.conf instead of duplicating it on an MD basis.
<!-- 2023/12/31 -->
<li>Increased i386 <a href="https://man.openbsd.org/login.conf.5">login.conf(5)</a> datasize to 1536MB for running llvm-tblgen.
<li>Added TCP Segmentation Offload (TSO) support for <a href="https://man.openbsd.org/em.4">em(4)</a>.
<!-- 2023/12/30 -->
<li>Set <a href="https://man.openbsd.org/ixl.4">ixl(4)</a> IXL_TX_PKT_DESCS to 8 from 32, which is unnecessary for ixl and could cause interface lockup with oactive.
<li>Fixed <a href="https://man.openbsd.org/iwx.4">iwx(4)</a> device info table entries for So+Hr devices.
<li>Improved the RTKit code from arm64, introducing crashlog and syslog parsing support and fixes needed to bring up the DCP.
<li>Protected <a href="https://man.openbsd.org/em.4">em(4)</a> refill timeout with splnet.
<!-- 2023/12/29 -->
<li>Added a per cpu pool cache for pmap_pv_pool on arm64.
<li>Removed the last users of <a href="https://man.openbsd.org/SSL_set_debug.3">SSL_set_debug(3)</a> in <a href="https://man.openbsd.org/openssl.1">openssl(1)</a> and began removing the API from libssl.
<li>Made <a href="https://man.openbsd.org/lo.4">loopback interface</a> counters MP safe.
<li>Prevented potential kernel crashes when opening a drm device node by checking for validity of the minor and returning ENXIO if invalid. 
<!-- 2023/12/28 -->
<li>Introduced <a href="https://man.openbsd.org/qwx.4">qwx(4)</a>, a work-in-progress port of the Linux ath11k driver.
<li>Fixed Tx watchdog trigger and freeze in <a href="https://man.openbsd.org/dwqe.4">dwqe(4)</a>.
<li>Made <a href="https://man.openbsd.org/eephy.4">eephy(4)</a> assume of RGMII-to-Copper mode by default for 88E151x PHYs.
<li>Added <a href="https://man.openbsd.org/aplpcie.4">aplpcie(4)</a> stream ID mapping support for the PCIe controller found on M2 Pro/Max SoCs.
<!-- 2023/12/27 -->
<li>Removed flags from the prefix before comparing with the received key so that <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> modifier keys with flags work correctly.
<li>Corrected <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> handling of window ops with no pane.
<li>Fixed <a href="https://man.openbsd.org/rsync.1">rsync(1)</a> handling of skipped elements on the very first element transmitted.
<li>Added 'pax' format support for mtime and atime to <a href="https://man.openbsd.org/tar.1">tar(1)</a>.
<!-- 2023/12/26 -->
<li>Prevented <a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a> from accepting empty delta elements.
<li>Improved handling of SError interrupts on arm64.
<!-- 2023/12/25 -->
<!-- 2023/12/24 -->
<!-- 2023/12/23 -->
<li>Rewrote <a href="https://man.openbsd.org/dev_mkdb.8">dev_mkdb(8)</a> with FTS, adding support for the devices in nested directories.
<li>Relaxed <a href="https://man.openbsd.org/ftp.1">ftp(1)</a> -C pledge to unbreak shelling out in interactive mode.
<li>Updated to perl 5.36.3.
<li>Added <a href="https://man.openbsd.org/apldart.4">apldart(4)</a> support for "locked" DARTs.
<!-- 2023/12/22 -->
<li>Added 'pax' format support for files over 8GB to <a href="https://man.openbsd.org/tar.1">tar(1)</a>. 
<!-- 2023/12/21 -->
<li>Updated <a href="https://man.openbsd.org/rge.4">rge(4)</a> microcode, initialization and reset behavior.
<li>Added support for new TEMPerGOLD sensor to <a href="https://man.openbsd.org/ugold.4">ugold(4)</a>.
<!-- 2023/12/20 -->
<li>Added <a href="https://man.openbsd.org/strnstr.9">strnstr(9)</a> string search within character limit.
<li>Updated to nsd 4.8.0.
<li>Prevented creation of an <a href="https://man.openbsd.org/sd.4">sd(4)</a> larger than what the namespace will allow.
<li>Added checksum offloading for TCP/UDP in IPv6 packets to <a href="https://man.openbsd.org/vio.4">vio(4)</a>.
<li>Ensured that <a href="https://man.openbsd.org/iwm.4">iwm(4)</a>/<a href="https://man.openbsd.org/iwx.4">iwx(4)</a> devices announce VHT capabilities in probe requests.
<!-- 2023/12/19 -->
<li>Added a <a href="https://man.openbsd.org/malloc.3">malloc(3)</a> type for <a href="https://man.openbsd.org/pinsyscall.2">pinsyscall(2)</a> arrays.
<li>Added display of the RTR protocol version in the <a href="https://man.openbsd.org/bgpctl.8">bgpctl(8)</a> 'show rtr' output.
<!-- 2023/12/18 -->
<li>Released <a href="https://www.openssh.com/releasenotes.html">OpenSSH 9.6</a>.
<li>Made <a href="https://man.openbsd.org/ssh-agent.1">ssh-agent(1)</a> record failed session-bind attempts and refuse signing operations on that connection henceforth.
<li>Banned user/hostnames provided to <a href="https://man.openbsd.org/ssh.1">ssh(1)</a> on the commandline that contain most shell metacharacters.
<li>Made <a href="https://man.openbsd.org/ssh.1">ssh(1)</a> and <a href="https://man.openbsd.org/sshd.8">sshd(8)</a> more strict in handling non-compliant peers that send more data than the advertised channel window allows.
<li>Made it possible to specify certificates when loading PKCS#11 keys in <a href="https://man.openbsd.org/ssh-agent.1">ssh-agent(1)</a>.
<li>Implemented "strict key exchange" in <a href="https://man.openbsd.org/ssh.1">ssh(1)</a> and <a href="https://man.openbsd.org/sshd.8">sshd(8)</a>.
<li>Fixed race between <a href="https://man.openbsd.org/ifconfig.8">ifconfig(8)</a> destroy and ARP timer.
<li>Enabled running <a href="https://man.openbsd.org/bind.2">bind(2)</a> system call in parallel.
<!-- 2023/12/17 -->
<!-- 2023/12/16 -->
<li>Introduced 'fd_lock' <a href="https://man.openbsd.org/rwlock.9">rwlock(9)</a> and used it for 'fd_fbufs_in' <a href="https://man.openbsd.org/fuse.4">fuse(4)</a> buffers queue and 'fd_rklist' knotes list protection.
<li>Reworked pflowioctl() lock handling to reduce breaking atomicity.
<!-- 2023/12/15 -->
<li>Moved non-daemon services to run in a different <a href="https://man.openbsd.org/rc.8">rc(8)</a> process group to avoid SIGHUP at boot.
<li>Added <a href="https://man.openbsd.org/ktrace.1">ktrace(1)</a> and <a href="https://man.openbsd.org/kdump.1">kdump(1)</a> support to observe <a href="https://man.openbsd.org/pinsyscall.2">pinsyscall(2)</a> violations.
<li>Changed <a href="https://man.openbsd.org/ftp.1">ftp(1)</a> to avoid use of the interactive shell if -o is given.
<li>Synced loongson login class limits with octeon.
<!-- 2023/12/14 -->
<li>For amd64 cdXX.iso and installXX.iso, created an EFI system partition image containing the EFI boot loaders to be installed as an El Torito boot image, making the install CDs bootable in EFI mode.
<li>Used the inpcb table mutex to set addresses, protecting all remaining write access to inp_faddr and inp_laddr.
<li>Added a workaround for clang which has a broken -fno-zero-initialized-in-bss implementation.
<li>Changed the default logic to set nkmempages to use physical memory / 4 for up to 1G physmem, and add an extra 16MB per 1G of memory additional. Clamped this down depending on available kernel virtual address space.
<li>Made <a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a> IP address block checks stricter.
<!-- 2023/12/13 -->
<li>Adapted arm64 implementation of per-CPU caching for the page table page (vp) pool and the PTE descriptor (pted) pool to the riscv64 pmap implementation.
<li>Fixed syscall number bounds check computations.
<li>Imposed constraints on RPKI Trust Anchors.
<!-- 2023/12/12 -->
<li>When invoking <a href="https://man.openbsd.org/ssh_config.5">ssh_config(5)</a> KnownHostsCommand to determine the order of host key algorithms to request, ensure that the hostname passed to the command is decorated with the port number for ports other than 22.
<li>Dropped <a href="https://man.openbsd.org/ftp.1">ftp(1)</a> -o '' support.
<li>Put <a href="https://man.openbsd.org/pinsyscalls.2">pinsyscalls(2)</a> into the <a href="https://man.openbsd.org/pledge.2">pledge(2)</a> "always" group.
<li>Extended <a href="https://man.openbsd.org/imsg_init.3">imsg</a> and <a href="https://man.openbsd.org/ibuf_add.3">ibuf</a> API with useful getter methods.
<li>Created a duplicate entry for <a href="https://man.openbsd.org/kbind.2">kbind(2)</a> (which self-protects) to force the kernel's <a href="https://man.openbsd.org/pinsyscall.2">pinsyscall(2)</a> code to skip validation, rather than labelling it illegal.
<li>Removed support for <a href="https://man.openbsd.org/syscall.2">syscall(2)</a>, the "indirection system call," a dangerous alternative entry point for all system calls and incompatible with the precision system call entry point scheme we are heading towards.
<!-- 2023/12/11 -->
<li>Turned 'pflowstats' statistics counters into per-CPU counters to make them mpsafe.
<li>Ensured the syscall table entries for libc and ld.so are aligned on a 4-byte boundary.
<li>Implemented per-CPU caching for the page table page (vp) pool and the PTE descriptor (pted) pool in the arm64 pmap implementation. This significantly reduces the side-effects of lock contention on the kernel map lock and leads to significant speedups on machines with many CPU scores.
<li>Synchronized datasize-cur limit for staff with the default class on armv7/i386/loongson/macppc/sparc64.
<li>Added an <a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a> log warning when a manifest replay is detected and when the same manifestNumber is recycled across multiple issuances of that manifest.
<li>Turned 'pflow_softc' list into SMR list.
<!-- 2023/12/10 -->
<li>Introduced <a href="https://man.openbsd.org/ampchwm.4">ampchwm(4)</a>, a driver to access the Ampere Altra Fine-Grained Power Telemetry.
<li>Added accounting flag and <a href="https://man.openbsd.org/lastcomm.1">lastcomm(1)</a> report for syscall pinning violations.
<li>Added a step to flush EPTs after enabling VMX mode in <a href="https://man.openbsd.org/vmm.4">vmm(4)</a>.
<li>Added a new label "sigcodecall" inside every sigtramp definition, used to caculate the start of the syscall for SYS_sigreturn and pinned system calls.
<li>Populated the non-LOAD openbsd.syscalls section (and PT_OPENBSD_SYSCALL) with {uint offset, uint syscall#} entries in libc and ld.so.
<!-- 2023/12/09 -->
<li>Fixed support for devices that attach multiple <a href="https://man.openbsd.org/uaudio.4">uaudio(4)</a> drivers.
<li>Added basic write support for <a href="https://man.openbsd.org/pax.1">pax(1)</a> format archives.
<li>Fixed <a href="https://man.openbsd.org/sndiod.8">sndiod(8)</a> server abort after wrong call to slot->ops->exit().
<li>Added recv TCP/UDP checksum offloading to <a href="https://man.openbsd.org/vio.4">vio(4)</a>.
<!-- 2023/12/08 -->
<li>After a failed fetch, made <a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a> use a previously cached and valid RPKI Manifest.
<li>Introduced 'sc_mtx' <a href="https://man.openbsd.org/mutex.9">mutex(9)</a> to protect most of the pflow_softc structure.
<li>Ensured TIB_INIT correctly initializes tib_thread_flags.
<li>Collected .openbsd.syscalls sections into a new PT_OPENBSD_SYSCALLS segment, used to pin system calls to designated call sites.
<!-- 2023/12/07 -->
<li>Added new TEMPerHUM sensor to <a href="https://man.openbsd.org/ugold.4">ugold(4)</a>.
<li>Added inpcb table mutex protecting addr and port during <a href="https://man.openbsd.org/bind.2">bind(2)</a> and <a href="https://man.openbsd.org/connect.2">connect(2)</a>.
<li>Added services entries for Matter, a protocol for discovery and comms with "smart home"/IoT devices which runs over TCP or UDP over v6 over various physical/network layers.
<!-- 2023/12/06 -->
<!-- 2023/12/05 -->
<li>Protected the socket receive buffer in IP multicast routing.
<li>Made <a href="https://man.openbsd.org/smtpd.8">smtpd(8)</a> reject headers that start with a space or tab.
<li>Removed <a href="https://man.openbsd.org/eephy.4">eephy(4)</a> "disable auto-negotiation" workaround for Marvell Alaska PHYs.
<!-- 2023/12/04 -->
<li>Protected access to the gnu warning map with a mutex to avoid random crashes.
<li>Made <a href="https://man.openbsd.org/malloc.3">malloc(3)</a> save backtraces to show in leak dump with depth of backtrace set via malloc option D (aka 1), 2, 3 or 4.
<!-- 2023/12/03 -->
<li>Made <a href="https://man.openbsd.org/uthum.4">uthum(4)</a> TEMPer{1,2} devices display minus degC.
<li>Enabled <a href="https://man.openbsd.org/smtpd.8">smtpd(8)</a> DSN (delivery status notification) for the implicit socket and an <a href="https://man.openbsd.org/smtpd.conf.5">smtpd.conf(5)</a> 'no-dsn' option for "listen on socket".
<li>Made rtm_senddesync_timer() <a href="https://man.openbsd.org/timeout.9">timeout(9)</a> handler mpsafe.
<li>Made ipsp_ids_gc() <a href="https://man.openbsd.org/timeout.9">timeout(9)</a> handler mpsafe.
<!-- 2023/12/02 -->
<li>Fixed <a href="https://man.openbsd.org/virtio.4">virtio(4)</a> handling of feature bits >= 32.
<!-- 2023/12/01 -->
<li>The <a href="https://man.openbsd.org/pipex.4">pipex(4)</a> layer is completely mp-safe, so moved the pipex_timer() <a href="https://man.openbsd.org/timeout.9">timeout(9)</a> handler out of kernel lock.
<li>Ensured read of a complete struct fsinfo even if the filesystem sectors are smaller.
<li>Prevented a <a href="https://man.openbsd.org/pf.4">pf(4)</a> race between pf_test() and pf_purge_expired_states().
<li>Allowed <a href="https://man.openbsd.org/smtpd.8">smtpd(8)</a> to parse tables and filter listing over multiple lines.
<!-- 2023/11/30 -->
<li>Overhauled <a href="https://man.openbsd.org/ugold.4">ugold(4)</a> device identification logic and added support for additional devices.
<!-- 2023/11/29 -->
<li>Unlocked the <a href="https://man.openbsd.org/bind.2">bind(2)</a> syscall.
<li>Changed to running TCP syn cache timer without kernel lock.
<li>Deferred <a href="https://man.openbsd.org/relayd.8">relayd(8)</a> relay_read_http header parsing until after line continuation, preventing potential request smuggling attacks.
<!-- 2023/11/28 -->
<li>Added <a href="https://man.openbsd.org/mpii.4">mpii(4)</a> support for new SAS HBAs (codenamed Aero and Sea, sold as Broadcom HBA 9500, Dell HBA350/5, Lenovo ThinkSystem 440 HBA, Supermicro AOC-S3808/16), which shared a hardware problem resulting in reads of some registers returning all zeros under transient conditions.
<li>Increased the number of address ranges in acpi attach args from 4 to 8.
<li>Updated <a href="https://man.openbsd.org/awk.1">awk(1)</a> to the Nov 27, 2023 version.
<li>Tightened up <a href="https://man.openbsd.org/relayd.8">relayd(8)</a> header parsing.
<!-- 2023/11/27 -->
<li>Avoided a <a href="https://man.openbsd.org/ypbind.8">ypbind(8)</a> crash when no default domain is set.
<li>Implemented <a href="https://man.openbsd.org/rsync.1">rsync(1)</a> --omit-link-times (-J) option to omit symlinks from --times.
<li>Added <a href="https://man.openbsd.org/rsync.1">rsync(1)</a> --no-O and --no-omit-dir-times options for compatibility.
<!-- 2023/11/26 -->
<li>Added arm64 bti pads for range extension thunks.
<li>Fixed perl read/write past buffer end.
<!-- 2023/11/25 -->
<li>Fixed oslog support and arm64 booting with newer firmware such as that currently installed by the Asahi installer.
<li>Updated <a href="https://man.openbsd.org/awk.1">awk(1)</a> to the Nov 24, 2023 version.
<li>Allowed <a href="https://man.openbsd.org/dhcpleased.8">dhcpleased(8)</a> to request "IPv6-only preferred" and deconfigure IPv4 on the interface if the server replies with this option.
<!-- 2023/11/24 -->
<li>Fixed <a href="https://man.openbsd.org/vmm.4">vmm(4)</a> memory scribbling by updating GDTR/TR if vcpu moves.
<!-- 2023/11/23 -->
<li>Required <a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a> files to be at least 100 bytes minimum in the RRDP and RSYNC transports.
<li>Added <a href="https://man.openbsd.org/rsync.1">rsync(1)</a> --omit-dir-times (-O) to omit directories from --times.
<!-- 2023/11/22 -->
<li>Added an <a href="https://man.openbsd.org/ifconfig.8">ifconfig(8)</a> endpoint command for "bridges" that use addresses as endpoints, usable to add static entries on interfaces like <a href="https://man.openbsd.org/vxlan.4">vxlan(4)</a>.
<li>Added <a href="https://man.openbsd.org/ifconfig.8">ifconfig(8)</a> support for specifying ports on the src address in tunnel endpoints.
<li>Added operating performance point info about each arm64 cpu via <a href="https://man.openbsd.org/kstat.1">kstat(1)</a>.
<li>Exposed the states of thermal zones as <a href="https://man.openbsd.org/kstat.1">kstats(1)</a>.
<li>Fixed race when initializing TSC.
<li>Added <a href="https://man.openbsd.org/wskbd.4">wskbd(4)</a> support for keyboard backlight hotkeys and hooked up macppc Apple keyboards.
<li>Added support for keyboard backlights on Apple Powerbooks.
<li>Made <a href="https://man.openbsd.org/dhcp-options.5">dhcp-options(5)</a> recognize option ipv6-only-preferred (RFC8925).
<!-- 2023/11/21 -->
<li>Prevented <a href="https://man.openbsd.org/ftp.1">ftp(1)</a> dropping into the "ftp> " shell when piping to stdout.
<li>Updated <a href="https://man.openbsd.org/awk.1">awk(1)</a> to the Nov 20, 2023 version.
<li>Prevented short-circuiting of localhost resolution when AI_NUMERICHOST is set.
<li>Added <a href="https://man.openbsd.org/mkhybrid.8">mkhybrid(8)</a> '-e' (-eltorito-boot-efi) option for writing an EFI eltorito boot image, in addition to or instead of the x86 boot image, to the output file.
<!-- 2023/11/20 -->
<li>Prevented erroring out when .gcc_except_table relocs point at discarded sections, allowing fortran ports and others to build on riscv64.
<!-- 2023/11/19 -->
<li>Changed to only enable BTI and PAC by default on arm64.
<li>Disabled LOAD_STACK_GUARD on OpenBSD/armv7.
<!-- 2023/11/18 -->
<li>Prevented <a href="https://man.openbsd.org/exit.2">exit(2)</a> from being called by a crt0 helper function with no debugging information by aborting instead.
<!-- 2023/11/17 -->
<li>Built and installed tzdata.zi and leap-seconds.list, now expected by third-party software.
<li>Corrected renewal of expired certificates in <a href="https://man.openbsd.org/iked.8">iked(8)</a>.
<!-- 2023/11/16 -->
<li>Switched to using <a href="https://man.openbsd.org/tset.1">tset(1)</a> -I for all terminals, not just xterm.
<li>Increased mips64 MAXTSIZ and octeon login class limits to accommodate llvm-16.
<li>Improved <a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a> CRL extension checking.
<li>Made <a href="https://man.openbsd.org/smtpd.8">smtpd(8)</a> treat an MX of "localhost" as if it were a "Null MX".
<!-- 2023/11/15 -->
<li>Made <a href="https://man.openbsd.org/ssh.1">ssh(1)</a> filter addresses by AddressFamily when connecting by socket if one was specified.
<li>Enabled <a href="https://man.openbsd.org/ssh.1">ssh(1)</a> keystroke timing obfuscation as an option only when a channel with a tty is open.
<li>Ensured correct denominators when converting NTP fixed point values to double and vice-versa in <a href="https://man.openbsd.org/ntpd.8">ntpd(8)</a>.
<!-- 2023/11/14 -->
<li>Improved <a href="https://man.openbsd.org/fw_update.1">fw_update(1)</a> output on errors and improved ftp error handling.
<li>Made <a href="https://man.openbsd.org/grep.1">grep(1)</a> -m behavior match GNU grep.
<!-- 2023/11/13 -->
<li>Raised i386's datasize for the 'daemon' class to 1500M for llvm-16.
<li>Removed libcsi (for now).
<li>Enabled UDF on arm64 install media.
<li>Bumped datasize for staff in riscv64 to match amd64.
<li>Eliminated the <a href="https://man.openbsd.org/timegm.3">timegm(3)</a> dependency in libcrypto.
<!-- 2023/11/12 -->
<li>Bumped armv7 MAXDSIZ to 2G for llvm-16.
<li>Fixed parsing of branch target protection options on arm64 to enable BTI and PAC again by default.
<li>Stopped attempting to modify route info sockaddr in rtm_addrs().
<li>Bumped amd64/arm64/sparc64/riscv64/armv7/powerpc64 datasizes to 1536M for the default login class to accommodate building llvm-16.
<li>Added <a href="https://man.openbsd.org/fanpwr.4">fanpwr(4)</a> support for the Rockchip RK8602 and RK8603 voltage regulators.
<!-- 2023/11/11 -->
<li>Updated to llvm 16.0.6 including clang, lld, and lldb, and updated build infrastructure.
<li>Enabled CD9660 in arm64 RAMDISK to allow CD-ROM mounting.
<li>Corrected wrong register offset macros for <a href="https://man.openbsd.org/dwqe.4">dwqe(4)</a> DMA burst length.
<!-- 2023/11/10 -->
<li>Added group handling matching <a href="https://man.openbsd.org/fbtab.5">fbtab(5)</a> to xenodm.
<li>Prevented <a href="https://man.openbsd.org/fdisk.8">fdisk(8)</a> 'flag' from altering other GPT partition attributes when flagging a partition as the only bootable partition.
<li>Made ifq and ifiq interfaces mpsafe.
<li>Enhanced <a href="https://man.openbsd.org/fdisk.8">fdisk(8)</a> 'flag' to accept hex values.
<li>Allowed <a href="https://man.openbsd.org/ps.1">ps(1)</a> to accept numerical user IDs.
<li>Made <a href="https://man.openbsd.org/iked.8">iked(8)</a> always prefer group from the initial KE payload as responder if supported.
<!-- 2023/11/09 -->
<li>Switched to running arp timeout without kernel lock.
<li>Tightened <a href="https://man.openbsd.org/pax.1">pax(1)</a> <a href="https://man.openbsd.org/pledge.2">pledge(2)</a> in List and Append modes.
<li>In <a href="https://man.openbsd.org/pflogd.8">pflogd(8)</a>, avoid restartable syscalls with siginterrupt() against all our handlers.
<li>Added <a href="https://man.openbsd.org/kdump.1">kdump(1)</a> [-p program] to filter dumps by basename.
<li>Eliminated the ioctl whitelist that <a href="https://man.openbsd.org/bio.4">bio(4)</a> will tunnel for other devices, allowing bio to be used with other (non-raid) related devices.
<li>Prevented <a href="https://man.openbsd.org/vmctl.8">vmctl(8)</a> abort when given an invalid "kernel" file.
<!-- 2023/11/08 -->
<li>Increased i386 NKMEMPAGES_MAX_DEFAULT to the same value as on amd64.
<li>In <a href="https://man.openbsd.org/xbf.4">xbf(4)</a>, allowed Xen to use backing store devices with 4K-byte sectors.
<li>Implemented RFC 7505 ("Null MX") handling in <a href="https://man.openbsd.org/smtpd.8">smtpd(8)</a>.
<!-- 2023/11/07 -->
<!-- 2023/11/06 -->
<li>Provided machine/apmvar.h on riscv64 for ports support.
<li>Avoided using MCS9 in <a href="https://man.openbsd.org/iwm.4">iwm(4)</a> Tx rate selection if 40MHz is disabled, fixing a firmware panic in 20MHz mode.
<li>Updated to Perl Term::Cap 1.18.
<!-- 2023/11/05 -->
<li>Added loongson cdXX.iso to MDEXT for it to be included in SHA256.
<!-- 2023/11/04 -->
<!-- 2023/11/03 -->
<li>Fixed <a href="https://man.openbsd.org/vmd.8">vmd(8)</a> block size calculation for vioscsi devices.
<!-- 2023/11/02 -->
<li>Added check to ensure <a href="https://man.openbsd.org/pfctl.8">pfctl(8)</a> -f won't accept a directory and install an empty ruleset.
<!-- 2023/11/01 -->
<li>Updated to Mesa 23.1.9.
<!-- 2023/10/31 -->
<li>Added support for <a href="https://man.openbsd.org/cksum.1">cksum(1)</a> -c checking base64 digests in reverse mode.
<!-- 2023/10/30 -->
<li>Updated <a href="https://man.openbsd.org/awk.1">awk(1)</a> to Oct 30, 2023 version.
<li>Prevented <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> use of combined UTF-8 characters that are too long.
<li>Adjusted KERNEL_ASSERT_UNLOCKED() to not assert during a panic.
<!-- 2023/10/29 -->
<li>Made gnu99 the default for gcc 3.3.6 and 4.2.1 rather than defaulting to gnu89.
<li>Updated to libXrandr 1.5.4.
<li>Updated to xserver 21.1.9.
<li>Updated to xorgproto 2023.2.
<li>Enabled ISO C11 APIs when building libc, even with an older compiler, to ensure needed prototypes are visible.
<li>Dropped <a href="https://man.openbsd.org/relayd.8">relayd(8)</a> and <a href="https://man.openbsd.org/httpd.8">httpd(8)</a> mentions of ssl, long changed to tls. Removed mention of SSL/TLS in favor of TLS.
<!-- 2023/10/28 -->
<li>Fixed <a href="https://man.openbsd.org/awk.1">awk(1)</a> buffer overflow with utf-8 strings.
<!-- 2023/10/27 -->
<li>Forwarded TCP LRO disabling to parent devices and disabled TCP LR0 on bridged <a href="https://man.openbsd.org/vlan.4">vlan(4)</a> and default for <a href="https://man.openbsd.org/bpe.4">bpe(4)</a>, <a href="https://man.openbsd.org/nvgre.4">nvgre(4)</a> and <a href="https://man.openbsd.org/vxlan.4">vxlan(4)</a>.
<li>Made out-of-swap checking more robust, preventing potential deadlocks.
<!-- 2023/10/26 -->
<li>Constructed EFI bootable cdXX.iso and installXX.iso files for arm64.
<!-- 2023/10/25 -->
<li>Fixed <a href="https://man.openbsd.org/unveil.2">unveil(2)</a> in <a href="https://man.openbsd.org/patch.1">patch(1)</a> with explicit patchfile.
<li>Stopped toggling irq deassert for edge triggered devices in <a href="https://man.openbsd.org/vmd.8">vmd(8)</a>.
<li>Made <a href="https://man.openbsd.org/vscsi.4">vscsi(4)</a> 'vscsi_filtops' mpsafe and extended the 'sc_state_mtx' <a href="https://man.openbsd.org/mutex.9">mutex(9)</a> to protect 'sc_klist' knotes list.
<li>Fixed several input validation errors in the X server.
<!-- 2023/10/24 -->
<li>Imported regenerated moduli.
<li>Made snmptop work with <a href="https://man.openbsd.org/snmpd.8">snmpd(8)</a>.
<li>Added an installer fallback IPv6 addres for ftplist1.openbsd.org.
<li>Made three context switches machine-independent: when a process forks and the new proc needs to be scheduled by proc_trampoline, cpu_hatch: when booting APs, and sched_exit: when a proc exits.
<li>Added <a href="https://man.openbsd.org/evp.3">evp(3)</a> chacha aliases for OpenSSL compatibility.
<li>Made <a href="https://man.openbsd.org/umb.4">umb(4)</a> delete any existing v4 address before setting a new one, allowing keeping of a working default route when the address changes.
<li>Removed <a href="https://man.openbsd.org/snmpd.8">snmpd(8)</a> filter-pf-addresses.
<!-- 2023/10/23 -->
<li>Created __OpenBSD versions of llvm cxa guard implementation using futex() with the correct number of arguments and without using <a href="https://man.openbsd.org/syscall.2">syscall(2)</a>.
<li>Prevented <a href="https://man.openbsd.org/wg.4">wg(4)</a> getting stuck on peer destruction.
<li>Made <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> unzoom a window at the start of destroy so it doesn't happen later after the layout has been freed.
<!-- 2023/10/22 -->
<li>Fixed <a href="https://man.openbsd.org/radiusd.8">radiusd(8)</a> to fixup MPPE-{Send,Recv}-Key and Tunnel-Password attributes of the response properly.
<li>When option D is active in <a href="https://man.openbsd.org/malloc.3">malloc(3)</a>, store callers for all chunks, avoiding the 0x0 call sites for leak reports.
<!-- 2023/10/21 -->
<li>Ignored wide channel configs not appearing in the 802.11ac spec.
<li>Ensured that <a href="https://man.openbsd.org/iwm.4">iwm(4)</a> uses the 80Mhz primary channel index announced in beacons.
<!-- 2023/10/20 -->
<li>Adopted MI re-upgrade prevention on octeon and powerpc64.
<li>Moved to 7.4-stable.
<!-- 2023/10/19 -->
<li>Added counting of dropped UDP packets to <a href="https://man.openbsd.org/syslogd.8">syslogd(8)</a>.
<li>Added experimental support for secp256r1 aka P-256 aka prime256v1 to <a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a>.
<li>Enabled TCP segmentation offloading for <a href="https://man.openbsd.org/ixl.4">ixl(4)</a>.
<li>Added IBM encoded version of the "Spleen 8x16" font.
<!-- 2023/10/18 -->
<li>Added support to encrypt the root disk with a key disk in the installer.
<li>Added forcible read-only mounting of a dirty powerpc64 or octeon filessystem.
<!-- 2023/10/17 -->
<li>Increased max depth for Perl termcaps.
<li>Grew arm64 iso media space.
<li>Updated libXpm to version 3.5.17.
<li>Updated ncurses and associated libraries (form, panel, menu) to 6.4-20230826.
<!-- 2023/10/16 -->
<li>Improved IPv6 link-local address handling in <a href="https://man.openbsd.org/bgpd.8">bgpd(8)</a>.
<!-- 2023/10/15 -->
<li>Deprecated <a href="https://man.openbsd.org/audio.9">audio(9)</a> start_{output,input}.
<!-- 2023/10/14 -->
<li>Made <a href="https://man.openbsd.org/fw_update.8">fw_update(8)</a> verify but not overwrite SHA256.sig.
<!-- 2023/10/13 -->
<li>Added <a href="https://man.openbsd.org/sxipio.4">sxipio(4)</a> Allwinner D1 support.
<li>Allowed <a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a> imposition of constraints on RPKI trust anchors.
<!-- 2023/10/12 -->
<li>Made <a href="https://man.openbsd.org/syslogd.8">syslogd(8)</a> retry DNS lookups for remote loghost if not working upon startup.
<li>Ensured <a href="https://man.openbsd.org/pflog.4">pflog(4)</a> logs malformed packets dropped by the default rule as block.
<li>Added a TIMEOUT_MPSAFE flag to <a href="https://man.openbsd.org/timeout.9">timeout(9)</a>.
<li>Added <a href="https://man.openbsd.org/bt.5">bt(5)</a> and <a href="https://man.openbsd.org/btrace.8">btrace(8)</a> support for binary modulo operator ('%').
<li>Fixed a <a href="https://man.openbsd.org/bgpd.8">bgpd(8)</a> fatal error when "announce add-path send all" is used.
<li>Removed default sets answer in <a href="https://man.openbsd.org/autoinstall.8">autoinstall(8)</a> response file such that it now populates only with non-defaults.
<!-- 2023/10/11 -->
<li>Added <a href="https://man.openbsd.org/ssh_config.5">ssh_config(5)</a> ChannelTimeout support to the client, mirroring the same option in the server.
<li>Added support for reading ED25519 private keys in PEM PKCS8 format.
<li>Added initial support for Elkhart Lake ethernet to <a href="https://man.openbsd.org/dwqe.4">dwqe(4)</a>.
<!-- 2023/10/10 -->
<li>Prevented <a href="https://man.openbsd.org/pf.4">pf(4)</a> from passing packets if state cannot be created.
<li>Fixed handling of non-transitive ex-communities to prevent termination by peer in <a href="https://man.openbsd.org/bgpd.8">bgpd(8)</a>.
<!-- 2023/10/09 -->
<li>Added recognition for GICv4 in the MADT, configuring it as arm,gic-v3.
<li>Made <a href="https://man.openbsd.org/bwfm.8">bwfm(8)</a> handle an arbitrary number of D11 cores and only disable them instead of doing a full reset.
<li>Added Message-Id as needed in <a href="https://man.openbsd.org/smtpd.8">smtpd(8)</a> for messages received on the submission port.
<li>Added <a href="https://man.openbsd.org/pledge.2">pledge(2)</a> stdio before parsing pfkey messages to <a href="https://man.openbsd.org/ipsecctl.8">ipsecctl(8)</a> -m and -s.
<!-- 2023/10/08 -->
<!-- 2023/10/07 -->
<li>Added <a href="https://man.openbsd.org/bioctl.8">bioctl(8)</a> retry on empty passphrase.
<li>Improved <a href="https://man.openbsd.org/ls.1">ls(1)</a> horizontal alignment in long format.
<li>Silenced list of specific firmware not needing update in <a href="https://man.openbsd.org/pkg_add.1">pkg_add(1)</a>.
<!-- 2023/10/06 -->
<li>Updated <a href="https://man.openbsd.org/awk.1">awk(1)</a> to Sep 24, 2023 version.
<li>Ignored thermal dual-chain requests from <a href="https://man.openbsd.org/iwx.4">iwx(4)</a> firmware to silence warnings.
<!-- 2023/10/05 -->
<li>Introduced <a href="https://man.openbsd.org/dhcpd.8">dhcpd(8)</a> log output to stderr and '-v' option to make this output more verbose.
<!-- 2023/10/04 -->
<li>Moved to 7.4-current.
</ul>