OpenBSD 4.3 released (May 1, 2008)

This is a partial list of the major machine-independent changes (i.e., these are the changes people ask about most often). Machine specific changes have also been made, and are sometimes mentioned in the pages for the specific platforms.

There is a separate list of Changes to the ports collection.

Note: Problems for which patches exist are marked in red.

For changes in other releases, click below:
2.0, 2.1, 2.2, 2.3, 2.4, 2.5, 2.6, 2.7, 2.8, 2.9, 3.0, 3.1, 3.2, 3.3, 3.4, 3.5, 3.6,
3.7, 3.8, 3.9, 4.0, 4.1, 4.2, 4.4, 4.5, 4.6, 4.7, 4.8, 4.9, 5.0, 5.1, 5.2, 5.3, 5.4,
5.5, current.

Changes made between OpenBSD 4.2 and 4.3

• Fix the RX FIFO problem for re(4) devices, especially visible when using them at gig speeds.
• ral(4) RT2860 microcode is now included.
• Make the alpha CD ISO image contain a bsd.rd called 'bsd' to avoid need for PROM commandline options to get to the kernel.
• On zaurus X11, remove SunPaste symbol from the Fn+v key combination to avoid xterm(1) from calling insert-selection() when v alone is pressed.
• Move hppa bootblocks in memory so bsd.rd fits.
• Work around NULL pointer dereference in the de(4) driver.
• Allow 80 and 160 second timeouts in pkg_add(8) to help big updates.
• Fix segfault in rcs(1) when trying to lock and unlock rcs files that contain no revisions.
• Prevent the VFS layer from creating files with a NULL filename.
• Added Atlantis Land A02-UP1-W54 to the list of supported rum(4) devices.
• Fix use-after-free in the IPv6 rt_llinfo route handling code.
• Added serial console handling for alpha, macppc and zaurus when installing.
• Added Palm 700WX support to the uplcom(4) driver.
• Fix for small modulo bias in the arc4random used for IP ID and named(8) PRNG.
• While installing, keep a resolv.conf.shadow file around when restarting an install.
• Include sigcode in core dumps, allows gdb to backtrace through signal handlers.
• SECURITY FIX: Buffer overflow in ppp command prompt parsing.
  A source code patch is available.
  [Applied to stable]
• For azalia(4), clear interrupts on detach, fixes interrupt storm on digital-only controllers.
• For em(4) fiber adapters, return nothing when checking flow control status instead of reading the wrong values.
• Fix for sf(4) watchdog handling, causing endless loops.
• Allow dryruns (-n) to work properly in OpenCVS.
• Make sparc64 sabtty(4) read and adopt the speed configured in OpenFirmware when it is the console.
• Make sure OpenCVS will not overwrite CVS/Root files when given an alternate CVSROOT.
• Make OpenCVS handle file permissions and owner properly, now you can update group owned files.
• Replaced the IP ID and the named(8) PRNG algorithm with one based on a Durstenfeld shuffle.
• Make sure audio(4) blocksize sticks when set explicitly by an AUDIO_SETINFO call.
• Initial code for BCM5706/5708 fiber support in bge(4).
• Prevent file races in the opencvs code.
• Avoid creating ridiculously large core dumps when the stack memory map is fragmented.
• Add an extension to sftp(1) to perform POSIX atomic rename operations.
• Add support in pciide(4) for ICH8M SATA IDE.
• Corrected the watchdog time code in em(4).
• Fix segfault in gnu cvs(1) when doing checkout -c if there is an unknown flag in the CVSROOT/modules file.
• Make diff3 report temporary file errors on stderr and not stdout.
• Make awk(1) fail nicely instead of crashing for format strings containing '*'.
• Added OpenCVS to the main build, installs as /usr/bin/opencvs.
• Fix memory leak in snmpd(8) parser.
• In bgpd(8), ignore and drop path attributes with a type code of 0, instead of sending an error back.
• Make ftp-proxy(8) not pass quick when tagging so tags can be used later.
• Add support for EPSON CX5400 scanner in the uscanner(4) driver.
• Add support for Axesstel MV100H in the ubsa(4) driver.
• Fix memory leak in the hw_cryptodev engine code of OpenSSL.
• Make ppp(8) allow a range of baud rates similar to tip(1)/cu(1).
• Added et(4) to amd64 and i386 RAMDISK_CD kernels.
• Comment out lii(4) from i386 GENERIC, add commented to amd64 GENERIC.
• Make rmail(8) support giant files by using ftello(3).
• For compress(1), fix setting testmode when using both the -l and the -t flag.
• 64-bit fix in sdmmc(4).
• Make sure the ip6_input code has a complete rthdr before trying to do m_copydata() on it.
• Fix in xterm(1) so script(1) will not exit immediately when started inside an xterm(1) with vmin=0.
• Make the bt code handle "QOS" L2CAP configuration request option.
• Synced the netbt code with NetBSD.
• Added vax install ISO image.
• Fix in ld.so(1), use rounded-down address when changing memory protections on the GOT.
• Prevent memory leaks claimed by ipw(4) firmware on "ifconfig down".
• Add safety check in the libc regex code for allocset() failures.
• Make bnx(4) avoid unaligned PCI config space accesses.
• Allow all SSH2 packet types, including UNIMPLEMENTED to reset the keepalive timer.
• Fix for macppc eeprom(8) command to handle multiple NULL characters within string-valued properties.
• Support for new devices added to axe(4) and uftdi(4).
• Added support for Corega CG-WLUSB2GL WLAN in the rum(4) driver.
• Added I-O Data USBRSAQ5 serial device support to uplcom(4).
• Fix in the xf86_video_intel driver for i830-based devices. Fixes crashes seen on ThinkPad X40s.
• Fix sort(1) processing of numbers containing zeroes in -n (numeric mode).
• Prevent possible free list corruption when malloc(9) sleeps.
• Make sure fxp(4) 16-bit registers do not get accessed by 8-bit reads/writes.
• Enabled envy(4) on amd64 and i386 GENERIC kernels.
• Implement AK4524 input and output volume knobs and output mute switches on envy(4).
• On amd64 GENERIC kernels, allow opl(4) to attach to cmpci(4).
• Fixed return-rst for IPv6 in pf(4).
• Reworked sgi device attachment rules.
• Reworked libc free list handling to prevent cases where freeing memory requires memory.
• Fixed a use-after-free bug in sendmail(8).
• RELIABILITY FIX: Incorrect assumptions in tcp_respond can lead to a kernel panic.
  A source code patch is available.
  [Applied to stable]
• Use autopolling for link status on bge(4) when it has link. Fixes input errors and might avoid firmware hangs on some cards.
• Fix segfault in pstat(8) when called with -vT.
• tda(4) enabled on sparc64 GENERIC kernels.
• On sparc64, make tda(4) run the fans at maximum speed when about to enter ddb(4), in order to avoid overheating in case of a system crash.
• Fix mbuf leak when receiving PPPoE packets but without any PPPoE interfaces set up.
• Added support for the Intel ICH9 chipsets in the em(4) driver.
• Add support for the optics on the Sun variant of ixgb(4) boards.
• Added support for AnyDATA ADU-500A in the umsm(4) driver.
• Change sgivol(8) to not require the -f option.
• Add initial bits in bge(4) for fiber support with the BCM5714/15/80 chipsets.
• Add support for VIA VT8237S south bridge in viapm(4)
• Initial driver for wbsio(4), a driver for Winbond LPC Super I/O chips. Enabled on i386 and amd64 GENERIC kernels.
• In isakmpd.conf(5), define default configurations for AES-192 and AES-256.
• Remove wait instruction from mips64 cpu_idle_cycle, causes problems on RM7000 machines.
• Better error reporting in mfi(4) when running out of ccb's.
• Better support for 11b mode in bwi(4).
• Switch pf(4) to RFC 1948 ISN generation.
• Updated xterm(1) to version 232.
• Reenable idle modes on powerpc.
• Revert workq to pre-mutex state, fixes locking issues on alpha.
• Make bwi(4) deal with 64-bit BAR such as with PCIe chipsets.
• Implemented crypto support in softraid(4).
• Better armish time base calculation for those who do not have very accurate clock generators.
• Fix sparc64 so the interrupt handler does not get on the per-cpu list of pending interrupts twice. Makes usb keyboards work as console.
• Make sshd(8) skip the check for being started with an absolute path when run with -t for configuration test mode.
• Added authpf-noip for authpf(8) to allow multiple users to connect from a single IP.
• Fix 4bit depth xserver for arches without lazy binding.
• Aligned the stack gap for arches where stack grows upward.
• Fix crash in OpenCVS when asking for status on an unknown file.
• Fix for mkdir(1), to better support systrace(1) and mkdir -p.
• Upgraded X11 Mesa to 7.0.2.
• Initial driver for tda(4), controls speed of ambient and CPU fans on sparc64.
• Make the install scripts adjust serial speed tty entry if no console is enabled while installing.
• Better cache handling in the SGI pmap code.
• Upgraded xf86-video-intel to 2.2.0.90 in the xenocara tree.
• Make the TCP input code take the window size into account from the first ACK packet.
• Fix in relayd(8) dns protocol handling.
• Added support in relayd(8) for making snmpd(8) send traps when the state of a host changes.
• Added support for PERC6, aka LSI SAS1078 in mfi(4).
• Fixed watchdog timeouts on gem(4).
• For sparc64 ebus(4), attach the lom-console, hopefully providing a proper console on Netra T4/Netra 20 when the console is redirected to the LOM.
• OpenCVS now makes sure not to allow commits to files that have a sticky date set.
• Delay tilde expansion in sshd(8) for ChrootDirectory until user is logged in.
• Fixed date parsing on date tags set in CVS/Tag or CVS/Entries.
• Extended support for -D in OpenCVS, writes CVS/Tag and CVS/Entries properly now.
• Add 64-bit physmem and usermem entries to sysctl(8), and make sysctl(8) print out these values for hw.physmem and hw.usermem.
• Added date support for OpenCVS annotate.
• Fix memory leak in snmpd(8) ber I/O engine.
• Proper support for -A in checkout/update in OpenCVS.
• Initial version of -D support for checkout and update, both local and remote, in OpenCVS.
• Add sshd_config(5) ChrootDirectory option to chroot(2) users to a directory and tweak internal sftp server to work with it.
• Fix setting of recording parameters in auich(4) when configuring for full-duplex.
• Make arp(8) default to -na when called with no arguments.
• Added -o flag to pkill(1) and pgrep(1).
• Enable DMA in the wd(4) driver for 1-sector devices (most flash devices).
• Add support for 'co -c' in OpenCVS.
• Improved add in OpenCVS, now has fixed server-side adds, support for add in branches and does not add files in N-tagged directories.
• Make sure OpenCVS puts a 'T' in front of sticky tags in the CVS/Entries file.
• Fix possible memory leak in isakmpd(8) when sending Phase 1 IDs.
• Move carp(4) to a simpler configuration scheme. This change also allows for IPv6 NDP balancing. Check your carp setup if you use balancing, this is a flag day.
• Enabled ACPI 3.0 for amd64 and i386 machines.
• Change the way netstat identifies which connections to hide when used without -a.
• Prevent the "ttflush write failed" panic in mg(1) when resizing a the window.
• Linked sftp-server(8) into sshd(8).
• OpenCVS also supports the -i flag now and the -n for checkouts to control execution of programs in CVSROOT/modules.
• Added support for the -k flag in OpenCVS for all commands that support it.
• Add PCI ids for 82571-based em(4) devices.
• Add support in msk(4) for 88E8075 and a second 88E8055 chipset, and initial support for the Marvell Yukon Supreme ASIC.
• Added support for basics of -d support in OpenCVS.
• Added rdiff support to OpenCVS.
• Map sparc64 pcmcia window little-endian as MI code expects.
• For pthreads(3), relocate the internal pipe file descriptor if newfd collides with it.
• Initial CVSROOT/modules support in OpenCVS.
• Make it possible in xenocara to build DRI support.
• Make authpf clean anchors recursively via ioctls to properly clear the users anchors even then anchors are nested inside it.
• Enable filter_opts in pf.conf(5) to be used on anchors.
• snmpd(8) added to the generic build scripts now.
• For all routing daemons, make sure confd's are not leaked on malloc failure in the control_accept() function.
• Make bge(4) recognize BCM5755 C0 ASIC revision devices.
• Make the brgphy(4) recognize BCM5722 PHYs.
• Improved softraid(4) crypto performance by avoiding unnecessary context switches and decrypting only once.
• Prevent segfaults in relayd(8) on certain syntax errors in the configuration file.
• Add support for VIA VT8237S SATA in the pciide(4) driver.
• Make sure relayd(8) frees up resources on parsing failures, since reloads might keep the daemon alive afterwards.
• In pthreads(3) code, make sure stack is properly aligned for code that uses SSE2 instructions.
• On ntpd(8), reconnect the client socket after three consecutive failures. Allows for recovery after an IP address change.
• Fix in pfctl(8) for automatic tables generation in the rule optimizer.
• For mfi(4), sync DMA memory back to CPU on poll failure.
• Added support for some additional VIA C3 cpus.
• Prevent USB network devices from generating page faults on removal while holding open bpf(4) handlers.
• Move softraid(4) to use 16-byte commands, allows for >2TB disks.
• More work on supporting raid 0 in softraid(4).
• Finished the sparc64 beep(4) device by hooking it up to the ukbd(4) beep handler.
• Extended the output of "show rib detail" for bgpctl(8).
• For upgt(4), make monitor mode work again, and enable fast channel switching.
• Added Y.C Cable USB-serial adapter to uplcom(4).
• Fix double VOP_UNLOCK() in the VFS layer error path.
• Fix in dumpfs(8) for FFS2 type dumps.
• Add Fujitsu PRIMEQUEST 10GBASE-SR LAN Card to the list of supported xge(4) devices.
• Make disklabel editor use 64 bit math to hold partition offsets when calculating offsets and sizes of free chunks.
• Update sudo(8) to 1.6.9p12.
• Add shutdown hook to upgt(4) which resets the device when called. Fixes re-attach issues when rebooting.
• Make sure sftp(1) ACKs all issued requests when a remote write error occurs during upload.
• Make sftp(1) use as many file descriptors as we have available, instead of fixed limit at 100.
• Added support for SMC SMCWUSBT-G2 devices to the uath(4) driver.
• Allow upgt(4) users to set fixed rates, but send all management frames at DS1.
• Fix SGI boot time interrupt storm on mec(4).
• Fix in sftp when uploading a filename with glob metacharacters in the name.
• Initial code for softraid(4) raid level 0. Not done yet.
• Make ssh(1) use 64 bit math so it can hold the maximum useful rekey limit. (2^32)
• Fix bug in ssh(1) where it could listen to both v4 and v6 when forwarding ports using -L, despite having set 0.0.0.0 as a bind_address.
• Make sure ssh(1) hashes just the specified hostname when hashing individual hosts.
• In sftp(1), fix remote handle leak on local file open error.
• Fix file descriptor leak in ssh(1) on session multiplexing error path.
• Make scp(1) -q imply "ssh -q" for the underlying connection, not just hush the progress meter.
• Added upgt(4) to macppc GENERIC kernels.
• Endian fix for upgt(4).
• Added LED support to upgt(4).
• Fix crash in dhcpd(8).
• Initial driver for environ(4), a driver for the environment device found on Sun Enterprise machines.
• Added an snmpctl(8) command to send traps to registered receivers using the imsg trap interface.
• Fix RX queue stalling in upgt(4).
• Add cast so myx(4) code compiles on i386.
• Fix in ether_input() soft interrupt scheduling, causing delays for non-real devices like tun(4) on architectures where soft interrupts are executed immediately.
• In snmpd.conf(5), allow optional per-trap receiver community, and restrict the receivers to a specified MIB.
• Add basic snmpv2 support to tcpdump(8).
• Fix in libc readpassphrase(3), use TCSAFLUSH instead of TCSANOW when turning echo back on so that there is no chance of output that was written but still pending to be displayed.
• Fixes from X.org, Misc extension out of bounds array index, file existence disclosure, Xinput extension memory corruption, TOG-cup extension memory corruption, MIT-SHM and EVI extensions integer overflows and PCF Font parser buffer overflow.
• Edit netstart(8) to execute rtsol(8) after trunk(4) and vlan(4) interfaces have been taken up, so they are taken into consideration.
• Update upgt(4) firmware to 2.13.1.0, don't forget to update the firmware package.
• Make xenocara build both the old i810 and the new intel driver and let X autoconfiguration code choose which to use based on the chipset.
• Started working on an interface for snmpd(8) where userland applications may send an imsg to it using a socket resulting in a trap.
• Work around i386 Intel BIOS bug where ACPI tables end up in a region marked free for use.
• For sparc64 machines, make sabtty(4) adopt the speed configured in OpenFirmware when it is the console.
• Enabled umbg(4) on sparc64 GENERIC kernels.
• Add Dell SAS 6/iR to the list of supported mpi(4) devices.
• Add support in xenocara for GeForce 8800 GT in the xf86-video-nv driver.
• Lots of fixes for ac97(4) and auvia(4).
• Enabled umbg(4) on Zaurus GENERIC kernels.
• Internal disklabel now allows for 48 bits in 512 bytes units, resulting in max partition or disk size of 64 PB.
• Fix building of alpha kernels with debug symbols by replacing STABS debug info with limited DWARF2 generated symbols.
• For m88k machines, add a sysctl machdep.cputype to return the processor type.
• Update xf86-video-nv to 2.1.6 in the xenocara source tree.
• Improved error reporting in make(1) for parallel mode, and reorder jobs based on who did output last.
• Fix for gem(4), makes onboard fiber device on Sun fire V880 work.
• Make sure disklabel(8) will not allow users to use (a)dd or (m)odify to create 0 length partitions.
• RELIABILITY FIX: A missing NULL pointer check can lead to a kernel panic.
  A source code patch is available.
  [Applied to stable]
• Make dump(8) compute transfer rates using 64 bit arithmetics.
• Add Broadcom 10Gb PCI id for BCM57710 devices.
• Added support in OpenCVS for local and remote rtag.
• Added some more Intel 10G PCIe entries for the ixgb(4) driver.
• For OpenCVS, do not ignore files and directories due to patterns on the repository side. Finally enables a fully working "cvs checkout src", even though options might not work.
• Make sure OpenCVS commands do not segfault on RCS files without head keyword.
• In OpenCVS, add support for expansion of the Log keyword.
• For hppa, allow multiple uark(4) devices to attach.
• Endian fixes in snmpd(8).
• Changed rc(8) and netstart(8) so pfsync(4) is not brought up before the working ruleset has been loaded.
• Add a couple of USB devices to hppa GENERIC now that they are tested.
• Add support in cmpci(4) for 4,6 and 8 channel playback and fix CMI8768-based devices.
• Make the disklabel(8) (re)calculate command better in showing details of the free space it calculates.
• Make Sparc64 V880 machines force serial console speed to 9600, instead of 115200.
• Update sudo(8) to 1.6.9p11.
• Update time zone data and code to tz2007k.
• Fix kernel build for Sun4c based Sun machines.
• Degrade msts(4) sensor state from OK to WARNING and CRITICAL after a ten minute period.
• On SGI, enable raw keyboard for wscons(4).
• Fix in xenocara Makefile for parallel make builds.
• Make FFS code for disk block numbers 64-bit clean. Quota and statfs is still only 32-bit.
• Updated xf86-video-radeonhd to 1.1.0 in the xenocara tree.
• Add support for msts(4), the Meinberg Standard Time String format as a line discipline similar to nmea(4).
• In xdm(1), set the resolution at which fonts in the login widget are rendered, and switch to Luxi TrueType.
• Added SPARKLAN RT2573 to the list of supported rum(4) devices.
• Mark vadvise(2) as obsolete, and remove its implementation.
• Make sure m68k-based platforms do not leave an unused page after the kernel message buffer.
• Add support for xserver on SGI and enable build for it.
• Add -n flag to snmpctl(8) to dump numeric IODs instead of symbolic names.
• Fix upgt(4) driver so it works on amd64 too.
• Make ipsecctl(8) strip off trailing "/32" when address type is IPV4_ADDR, since isakmpd(8) will not accept it.
• Make lii(4) read the hardware mac address.
• Make sendbug(1) avoid mangling < and > in comments.
• Make vs(4) on mvme88k use wide scsi commands.
• Make named(8) use local zone files for localhost reverse lookups again.
• Moved more of netstat(1) into reading values with sysctl instead of kvm.
• In cwm(1), adjust the initial window placement with any geometry that would place the window at, or over the right or bottom edge.
• Fix for sparc64 trap handling.
• Fix page fault in upgt(4) which occurs when device is detached after a failed attach attempt.
• Fix race condition in mkdir(1) -p that may lead to an erroneous successful exit status.
• Tune TX descriptor to improve upgt(4) TX performance. Still some issues left to fix.
• Make sshd_config(5) allow PermitRootLogin in a Match block.
• Make both scp(1) and rcp(1) with argument "-p" assume "epoch" if they receive timestamps originating before epoch.
• Make libc arc4random*() functions thread safe.
• Enabled upgt(4) and lii(4) in amd64 and i386 GENERIC and RAMDISK_CD kernels.
• Initial driver for lii(4), the Atheros L2 ethernet chip found on Asus eeepc.
• Enabled gbe(4) and mkbc(4) on SGI GENERIC kernels.
• Many improvements on gbe(4) for SGI, including 8 and 16bpp colour depths.
• Make pf(4) "scrub max-mss" rule work correctly.
• Update timezone data and code to 2007j.
• Use correct packet maximum sizes for remote port and agent forwarding in ssh(1), prevents server from killing the connection if too much data is queued.
• Make ssh(1) update the ServerAlive and ClientAlive timers even when receiving unimplemented or ignore messages from the other end.
• Make the clock adjustment handle up to 5000 usec/sec offset.
• Add missing length header check in spamd(8) when receiving sync packets.
• Make sure NFS exported directories use the same chunk size as the underlying file system has for block size.
• Remove last debug bit from m88k machines with a 88110 CPU, and do not force serialization of memory accesses any more. Brings huge speedups.
• Teach hppa bootloaders how to boot 64-bit kernels.
• Increase processor bus timeout on the MVME197LE boards, makes it possible to turn instruction cache back on again.
• Reimplemented an m88110 floating point emulator.
• When disklabel(8) is used with -E, implement "d *" to clear out all partitions, just like "z" does now.
• Make ntpd(8) log if the drift file can not be opened or written to.
• Fix POSIX mode bug in df(1).
• Make sure the cardbus code will not panic if someone inserts a slot for which the support is disabled.
• Updated sudo(8) to 1.6.9p10.
• In relayd(8), implement statistics for redirections.
• Removed an obsolete NFS kludge, improves performance.
• Make sure net ioctls return ENOTTY instead of EINVAL for unknown ioctl requests.
• Fix page fault in upgt(4) TX path.
• Fix le(4) memory allocation on aviion machines.
• New it(4) driver for amd64 and i386.
• Add a power(4) driver for SGI machines, to shut down nicely if the sysctl(8) machdep.kbdreset is set.
• Fix remaining cases of potential mfs problems with concurrent accesses.
• Fix stack increment calculations in core dumps on hppa where the stack grows upward.
• Initial driver for upgt(4), Conexant/Intersil PrismGT SoftMAC USB2.0 devices.
• Disable the instruction cache on 40MHz MVME197LE boards due to instability.
• Change vmstat(8) to use sysctl to gather information, and remove setgid kmem from it.
• On SGI, make gbe(4) attach as the console if the graphical console is selected via ARCBIOS.
• Fix login_radius(8) so a non-standard port name or number can be used.
• snmpd(8) has an official PEN for OpenBSD now, 30155.
• Sync xserver 1.4.0.90 into xenocara.
• Implement sysctls to report IP, TCP, UDP and ICMP statistics, so netstat can use them instead of kvm.
• Large update of ospfd6(8).
• Fix for extra fan sensors on adt7460-based i2c-devices.
• Fix "lls" command in sftp(1).
• Fix usbtablet(4) for X.org 7.3.
• Fix systrace(1) on HPPA by making sure arguments and environment is not stored in the space reserved for stackgap on machines where stack grows upward.
• For macppc i2s-based sound devices, remove support for 8KHz sample rates.
• On vge(4), remove unused HW VLAN stripping and tagging code.
• Updated pixman to 0.9.6 in xenocara.
• Make relayd(8) warn if configuration reload fails, instead of killing the daemon.
• Make lcspx(4) attach to SPX option boards on VAXstation 3100s.
• Enable Out-of-Order execution on 88110 CPUs.
• In ral(4), fix automatic rate control on RT2860-based devices if the rate falls down to 6 or 1 Mbps.
• Added mount_ntfs(8) to the alpha platform, and included support in alpha GENERIC.
• Updated the BIND named(8) to 9.4.2.
• Simplified the pool code in the kernel by removing the pool cache.
• Make the i830 xf86 driver use XAA acceleration instead of EXA.
• Make relayd.conf(5) consider the generic handler to be TCP-based, so you can use "protocol foo" without defining a type.
• hoststated(8) gets renamed to relayd(8). Similar change for relayctl(8).
• Unbreak snmpd(8) on 32bit architectures.
• SMP fixes for mfs concurrent buflist access.
• Make adt(4) also support sch5027.
• In the atascsi layer, ask for write cache and read look ahead to be turned on.
• Fix file descriptor/ssl leak in hoststated(8) SSL checks.
• Make sure sensorsd(8) logs positive events with LOG_INFO instead of LOG_ALERT.
• Add TRENDnet TEW-401PCplus cardbus to the list of supported bwi(4) devices.
• Initial import of snmpd(8) and snmpctl(8), a lightweight SNMP implementation.
• Make sure nfe(4) adapters are not in powerdown mode.
• Work in progress for SMP on m88110-based systems. Boots multiuser.
• Fix attach/detach issues with rt2860-based expresscard ral(4) cards.
• Imported xf86-video-radeonhd into xenocara.
• Added libGL DRI code to xenocara, not connected to the build yet.
• Make puc(4) detachable.
• For sppp(4), handle if the other end insists on a MRU of 1492, even if they should cope with 1500.
• For mfs file systems, avoid out of bounds access at the tail end.
• Allow USB serial number to be printed in verbose mode. Useful for hotplugd(8) users.
• Updated sudo(8) to 1.6.9p9.
• Beginning of a real floating-point exception handler for 88110 CPUs.
• Reworked m88k spinlock code too, similar to i386 fix earlier.
• Make sure pf(4) does not leak state if key allocation fails during add.
• Fix null pointer dereference in the pf(4) ioctl code.
• New 4965AGN iwn(4) firmware, 4.44.1.20.
• Make pci(4) and ppb(4) detachable.
• Initial import of DRM, direct rendering manager on i386, disabled for now.
• Make owtemp(4) handle negative values from the sensors.
• Simplify i386 cpu detection and always assume 386 CPUs are unknown and promote them to 486 instead of panicking.
• Add a "restart wm" function to cwm(1).
• Let hoststated(8) bump the current file descriptor limit to the maximum number for the login class.
• When updating the timestamp on pipes, use getnanotime() instead of nanotime(), since it is cheaper and good enough.
• Add a -d argument to pstat(8) to peek at values in the kernel.
• Implement the amd64/i386 MP fix for spin at splhigh on sparc64 also.
• In zyd(4), properly update the hardware multicast filter.
• In ld.so(1), fix dlsym with special handles when called from an executable that has been linked without -E.
• Removed old TCP_COMPAT_42 from the GENERIC kernels.
• Initial support for SGI Graphics Back End gbe(4). Disabled by default.
• Make carp(4) behave more like an ethernet interface when initializing the IPv4 interface address.
• For xclock(1), invert logic in geometry computation in norender digital mode.
• In bgpd(8), add prefixes (paths) that would cause routing loops to the RIB, but marked as not eligible.
• For wd(4), enable read ahead and write cache if the disk claims it is supported.
• Move amd64 spinning behaviour in line with i386 for MP biglock.
• Add LSI PCI Ids for 1078 based Megaraid devices to mfi(4).
• Added warning to gcc(1) for auto declarations whose size is not known at compile time.
• Add new PERC6/CERC6 PCI Ids to the list of mfi devices.
• In mbg(4), degrade the timedelta sensor if the clock is free running for too long.
• Make libc popen(3)/pclose(3) thread safe.
• Bump ciss(4) maximum cdb size to 16 bytes.
• Added syslog logging to tftpd(8).
• In cas(4), make Cassini+ devices work.
• Move the implementation of the biglock into MD code. For i386, stop spinning at splhigh, and do not try to grab biglock when releasing it. Huge speed improvement for i386.
• Re-enable pthreads(3) support in libGL.
• Implemented a -C option to ftp(1) for continuing ftp, http(s) and file transfers.
• New AGP code for amd64, re-added i965GM device and use correct major for the /dev/agp0 device node.
• Relax MSDOS SecPerTrack limit to allow 64 instead of 63, makes iRiver Clix devices work.
• Fix hardware cursor mapping in the AGP i810 code.
• Make modload(8) use /dev/ksyms as a kernel file by default.
• for wscons(4), ask the emulation code to hide the cursor when leaving emulation mode.
• Make AGP attach as a device, makes more AGP bridges get detected and attached. Enabled on amd64 and i386.
• Re-enabled softraid(4) in GENERIC configs for all platforms.
• Move crypto threads to workq's, lets cryptoraid attach early.
• Fake out the apm device node to switch between apm and acpi on i386.
• Fix mount_mfs(8)/newfs(8) when mounting with a relative path.
• Enable et(4) on amd64 and i386 GENERIC kernels.
• Correctly set up TX descriptors on et(4) devices.
• Add entries for Transmeta Efficeon CPUs.
• Turn off COMPAT_35 in the GENERIC kernels.
• Use ACPI reset methods for reboot on all machines where acpi(4) is available.
• Make config(8) file directive accept multiple pathnames separated by '|'.
• Make msk(4) detachable.
• Added support for the Sigmatel codec id 7662 to the azalia(4) driver.
• Updated xserver, xf86-input-keyboard, xf86-input-mouse, xf86-video-intel, xf86-input-void, xf86-input-vmmouse, xf86-input-acecad, xf86-input-magellan and xf86-input-spaceorb in the xenocara sources.
• Updated inputproto, randrproto, renderproto, libXrandr, libXi, xrandr and Mesa in xenocara and imported xbacklight.
• Make wsmoused(8) sleep increasingly longer while trying to get the mouse device from X after switching to console.
• More fixes for make(1) when running parallel jobs.
• Fix for large clock drift on some macppc models.
• Updated libXfont to 1.3.1 in the xenocara sources.
• Try a forced unmount if mount_mfs(8) is killed with SIGKILL.
• Enabled PCIAGP on amd64 GENERIC kernels.
• Early support for hotplug of sili(4) controllers.
• Implemented scsi vpd page translation for fetching disk serial numbers in atascsi.
• Make the atascsi layer claim SPC-3 when faking an INQUIRY.
• Reimplemented the "mark" keyword in hoststated.conf(5), somewhat similar to pf.conf(5) tags.
• Fix relay roundrobin mode in hoststated(8) when multiple hosts in a table are down.
• Unify number and string reading in top(1) to make sure command line args and interactive use of "d" and "n" now also interpret "max", "infinite" and "all".
• RELIABILITY FIX: A memory leak in pf can lead to machine lockups.
  A source code patch is available.
  [Applied to stable]
• If the ntpd(8) drift file is missing, reset adjfreq to zero.
• Disabled ipmi(4) on i386 GENERIC kernels.
• Fix for panics when running "mt(1) rewoffl".
• In hoststated(8), allow HTTP digest type be either MD5 or SHA1, determined by the length of the digest.
• Fix for M88110 setregs() so binaries work to some extent on MVME197 machines.
• Fix possible mbuf leak on error in the trunk(4) code.
• Fix in pthreads, make the threaded version of vfork(2) actually use the system vfork(2) in order to retain the semantics, instead of calling fork(2).
• Make sure cwm(1) default keybinding always exist. Additional bindings now overlap.
• Make sure the kernel will not overwrite a core file owned by another user.
• In hoststated(8), always enable "late connect" relay mode, if an expect or filter action has been specified.
• Fix in acpimadt(4) for GENERIC.MP kernels where it would map ISA interrupts for which there was an override.
• Add the Planex GW-US54GXS adapter to the list of supported zyd(4) devices.
• Add support in pcidump(8) for dumping PCI config space in hex.
• Fix "mount -a" so it continues to try mounting the rest of the filesystems even if a line refers to a non-existent mount point.
• Updated the zyd(4) ZD1211B firmware, supposed to fix hardware reset problem.
• For cron(8) and vipw(8), deal with unchanged files better, since new timers have finer resolution.
• Fix stalls in nfe(4), by disabling jumbo allocator until low number of buffers case is better handled.
• Fix false splassert warning during boot on m88k machines.
• Make GPIO functionality available on AMD Geode LX CS5536-based machines.
• Make sure to return the correct so_error instead of EINVAL if a non-blocking connect which has completed and failed gets called again.
• Initial import of uticom(4), a driver for TI TUSB3410 usb serial devices.
• Make sure the atascsi layer accepts ATA ioctls, so tools like atactl(8) work on disks behind the atascsi layer.
• Enabled most acpi(4) functionality by default. If you encounter problems, "disable acpi" or "disable apm" and report the problem.
• Initial import of a driver for the Ralink RT2860 chipset. Will attach as ral(4).
• Try to get a working console on sparc64 when redirected to the RSC card on Sun Fire 280R/V480/V880.
• Make i386 MP kernels use smbios to count number of CPUs. If > 1, disable apm(4).
• Make sure the MS-DOS handling code reads 4k when reading the boot sector, help iPod nano file systems.
• Do not call crypto_done() on errors. Fixes panics on crypto errors seen on reboots.
• Add Marvell 88E8042 and 88E8072 to the list of msk(4) devices.
• Make sure ldattach(8) does not set explicit com parameters for the tty, instead use the existing ones. Also do not artificially limit the baudrates.
• Make sure wscons(4) on SGI machines compile ok and prevent it from stealing the console.
• Fix clock drift on MP m88k systems.
• Make an openprom(4) device file for the macppc platform.
• Fix some amd64 problems with lazy fpu context handling.
• Fix for i386 MP where interrupt time was always shown as 0%.
• Make sure pf(4) does not leak pfstatekey upon insert conflicts.
• For SGI macebus, add spurious interrupt detection, enables user to "boot poweroff" from ddb.
• Make sure m88k dma_cachectl() flushes all processors unconditionally.
• In OpenCVS, if a file has modifications in it when being updated, reapply umask.
• Updated eso(4), now recording and setting block size works, and there is a master volume mute.
• Add support for more multifunction Epson devices to uscanner(4).
• Added umbg(4) to i386 and macppc GENERIC kernels.
• Added umbg(4), a driver for USB attached Meinberg USB5131 DCF77 radio clock devices.
• Allow -c in conjunction with -d (and -u) in uniq(1).
• M88k now builds bsd.mp kernels.
• Make sure m88k MP kernels grab the kernel lock when processing soft interrupts.
• On sparc64 MP systems, use the interrupt stack as the initial stack for spinning up secondary CPUs.
• Make the in-kernel disklabel code NTFS aware.
• Add Exar UART XR17C152, 154 and 158 to the list of puc(4) devices.
• Fix AML string parsing in the acpi(4) battery code, to better handle the invalid pointers aml_val2str() sometimes returns.
• Prevent null-pointer dereference in pf(4) when empty groups are used in "set loginterface".
• Fix potential heap overflow in perl(1), given a specially crafted regexp.
• Make md5(1) properly exit with a result code >0 when encountering bad md5 in the checklist.
• Close a race on sparc64 where the FPU state might be dropped to the wrong process in the IPI handlers.
• Prevent panic in the arpintr() code if IF_DEQUEUE returns NULL.
• Have make(1) simplify the way it deals with implicit rules and handle $<.
• Add support for Epson multifunction USB devices, for the functions we do support.
• Update time zone info to tzdata 2007i.
• Avoid coredump in mailwrapper(8) when there is only one token on a line.
• Prevent SEGV in top(1) on wrong sort name.
• Better handling of OSS emulation when calling AUDIO_SETINFO and AUDIO_GETINFO at once.
• Add support in mbg(4) for PEX511 PCI Express DCF77 devices.
• Workaround in acpi(4) for late establishment of interrupts on GENERIC.MP kernels.
• Fix in raid(4), where the disklabel reading to find raid components was causing hangs.
• Cleanup in the audio(4) endianess conversion routines.
• Remove the delay in top(1) when a command line argument is wrong.
• In mbg(4), add support for the Meinberg PCI509 5V DCF77 time signal station receiver.
• Make sure ATI-based ahci(4) devices do not cause a wdc(4) controller appear when running in IDE compat mode.
• Fix lkm(4) for the amd64 platform.
• Make sure spamd(8) clears the last entry from an empty TRAP list.
• In the acpi(4) dsdt code, identify as WinNT in hopes the machine will present "better" AML, or at least better settings for machines that do not support _OSI.
• Update named(8) hint file since l.root-servers.net has a new address.
• Added ldattach(8), a command to attach line disciplines to a tty line.
• Fix incorrect 'retry times' settings in zyd(4), and increase max RX size.
• Fix wpi(4) and iwn(4) reset handling so the firmware does not panic. Also, fix ifconfig -M. Only works when the interface is down.
• In make(1), mark nodes as made when there is no command around the target.
• Avoid errno trashing in signal handler in ssh(1).
• Prevent ssh(1) from getting data from getpwuid(3) clobbered by another getpw*() call.
• In ssh(1), fix memory leak in the process_cmdline() function.
• Updated sudo(8) to 1.6.9p8.
• Lots and lots of work on make(1), including: optimized job runner which avoids forking the last command since it is running in a subshell, replaced parallel job buffering to deal with non-blocking descriptors, store list of errors during parallel make and print them on exit.
• Fix potential panics on the arm xscale based platform by reusing cache cleaning address calculation.
• In top(1), bump arbitrary limit on argument length shown by -C.
• Add Admtek/Shantou ADM8515 to the list of supported udav(4) devices.
• Prevent pf(4) from sending anything in response to blocked icmp packets.
• Make sure sppp(4) does not potentially leak secret authname through ioctl() interfaces.
• Workaround MP timeout/splhigh/scsi race at reboot on amd64/i386 using a delay.
• Initial driver et(4) for the Agere/LSI ET310 ethernet devices.
• Do not print the prompt in readpassphrase(3) when process is backgrounded and the input would not be read anyway.
• Fix for list handling code in the bridge(4) code.
• Fix for m88k when secondary CPU gets its interrupt pin stuck. Put the process it was running on the run queue again, unless it was the idle proc.
• Fix setup of TX descriptors in the ath(4) driver.
• In ssh(1), make behaviour identical for non-existent users regarding options set in the Match block.
• Plug tiny mem leaks in ControlPath and ProxyCommand option processing in ssh(1).
• Enable PCIe snoop for SB600 and MCP51-based azalia(4) devices. Fixes noise, looping and distortion problems.
• On m88k, work around the fact that secondary CPUs are started late in the boot and sched_init_cpu() has to be invoked early. Lets MVME188 SMP systems boot multiuser.
• Make sure m88k machines do not flag a processor as "alive" until it really is ready to accept IPIs.
• Fix panic in siop(4).
• Added envy(4), a driver for ICE1712 VIA Envy24 audio devices.
• Prepare audio(4) for addition of the envy(4) driver, enable 32 bit samples and bump max channels to 12.
• Let vic(4) attach to the virtual pcnet hardware in vmware.
• Take the correct lock on m88k when handling userland data faults in kernel mode, lets bsd.mp run multiuser on SP boards.
• Replace the carp(4) replay protection counter with a cookie.
• Make sure compat errno mapping arrays go up to ELAST for all emulated syscalls.
• Workaround for chip bug on ahci(4) based ATI IXP600 AHCI controllers.
• Fix ring buffer overflow in the audio recording code path.
• Fix file descriptor leak in the freetype library in xenocara.
• Fix alignment issues on sparc64 when running tcpdump(8).
• Improved vmstat(8) output, increasing the "fre" column and aligning memory and traps labels.
• Fix probability rules parsing in pf.conf(5), and add support for 0% and 100%.
• On E250 sparc64s, do not forget the channel number when reading environmental values off the sensor to prevent always reading from channel 0.
• Make sure mips platforms enable interrupts when exiting ddb(4) if they were enabled before the break.
• Update sudo(8) to 1.6.9p7.
• Added support for command line "-D macro=value" to all routing daemons.
• Change m88k system call invocation sequence to no longer pull arguments from stack, improves performance for all syscalls except mmap(). All m88k binaries must run against a 4.1 or more recent kernel.
• Add support for power supply temperature sensors on the E450.
• Fix logic in make(1) command-line / MAKEFLAGS parsing.
• Move scp(1) network read/write into an atomicio()-like function to handle short reads, apply bandwidth limits and update counters.
• Make sftp(1) do argument splitting and parsing so it can cope with common shell escapes and make handling consistent with sh(1).
• Change the daily security(8) script to record package installation/removal.
• Allow alipm(4) to be used for reading spdmem(4) info on sparc64, even if alipm(4) is not used for other parts.
• Add support for the SUNW,envctrl as found on E450 machines.
• Fix for temperature sensor conversion factors on E450 sparc64 machines.
• Added support in uipaq(4) for the HTC smartphones.
• In ssh(1), make sure that both the local and remote port are correct when parsing -L.
• Make mips kernel options recognized from the boot command line in addition to the OSLoadOptions.
• Add a broadcast mode to trunk(4), this mode sends all frames on all ports, and receives frames on any port.
• Added support in hoststated.conf(5) for including other files.
• Added pcidump(8), a utility to read pci configuration spaces.
• Properly document decision weight of prefixes in the bgpd.conf(5) file.
• Do not use next_tick() to start the clock ticking on sparc64 secondary CPUs. It fails from time to time.
• Make the ddb(4) kernel debugger clears its output buffer on powerpc before it starts processing.
• Make sure dhcpd(8) sets the max message size to at least the minimum IP MTU.
• Make cs4280-based devices able to be brought back from power save mode if needed.
• Add support for temperature sensors on the SUNW,envctrltwo device found on the Sun E250.
• Replace DMA and interrupt handling in auich(4), fixes recording from the microphone input as well as full-duplex operation.
• Add ShanTou ZT6688 usb 10/100 nic to the udav(4) device driver.
• Make su(1) call setegid() before seteuid().
• On sparc64, use HDL2CELL when passing OpenFirmware handles, makes bsd.mp boot on an E250.
• Add support in hoststated(8) to schedule an immediate check through hoststatectl(8).
• Fix in the VFS layer for possible spl() problems in the buffer cleaning daemon.
• Add support for the Moosehead PS/2 controller found on SGI O2 machines.
• In OpenCVS, avoid memory leak if a tag is defined in CVSROOT/config more than once.
• Add some LED support to the bwi(4) driver.
• Add support for the Intel ICH9 chipset to the pciide(4) driver.
• Use TCSAFLUSH instead of TCSADRAIN in sudo(8) when turning off echo.
• On sparc64 US-III cpus, spin up secondary CPU if running MP kernel.
• Updated sudo(8) to 1.6.9p6.
• Replacement for the pctr(4) codebase that can handle amd64 processors too.
• On sparc64, make lazy FPU context switching work for MP kernels.
• For top(1), properly handle terminals consisting of only a few lines.
• Make rc(8) allow TCP NFS mounts too.
• Fix in xf86-video-nv driver for G80 displays if BIOS leaves it stuck.
• Allow ntpd(8) to report the status of peers and sensors to syslog.
• Switch kernel arc4random routine to use different arc4 code and rework spl(9) handling so it goes to splhigh and back once per request instead of once per byte.
• Fix stream reset errors on ALC883 based azalia(4) devices by waiting 40 usecs for the run bit to clear before performing a reset.
• Add audio(4)-compatible mixer items for ALC883 in azalia(4).
• Enable wbng(4) on amd64 and i386 GENERIC kernels.
• Provide a way on macppc to attach spdmem(4) by faking an I2C bus with EEPROMs with content from OpenFirmware.
• New wbng(4) driver for Winbond W83793G Hardware Monitor.
• On sgi machines, disable timer/compare interrupts on the macebus(4), prevents interrupt storms on IRQ 6.
• Add Planex GW-US54GD to the list of supported zyd(4) devices.
• Add an "include" directive to pf.conf(5), and make sure the included file have the same strict permissions like the main configuration file.
• Make sure hoststated(8) does not trash errno in the signal handler.
• Remove unused kerberos authentication code from the NFS code base, and make sure we never generate a zero xid.
• Add support for the BCM5906 bge(4) device.
• Allow nmeaattach(8) to turn off timestamping by calling it without the -t option.
• Add support for channel setting on newer Atheros AR5424 and AR2423 etc.
• Added ospf6ctl(8), a controller for the recently imported ospf6d(8) daemon.
• In bge(4), make BGE_JUMBO_FRAMELEN big enough to include a vlan tag.
• Serialize usb(4) probing and attachments.
• Enabled puc(4) on armish GENERIC kernels.
• Fix for acpi(4), when walking the acpi tree to find _PRT methods, check whether device is actually enabled and functioning.
• SECURITY FIX: The SSL_get_shared_ciphers() function in OpenSSL contains an off-by-one overflow.
  A source code patch is available.
  [Applied to stable]
• Fix for macppc when using the new context switching code.
• Reworked the context switching code to a more machine-independent design. Allows MD context switching without spls or locks, and sleep queue wakeup goes from O(n^2) to O(n).
• In bgplg(8), limit the number of allowable characters in a request to prevent cross-site scripting issues.
• Add support for RTL8211B PHY devices in rgephy(4).
• Rework the azalia(4) debug dmesg to perform a more complete codec dump.
• Fix range check for carp(4) vhid in ifconfig(8), vhid 0 is not valid.
• Do not skip i2c scanning for IPMI machines, as done previously, but only use it for non-sensor devices like spdmem(4).
• Add proper support for branch revisions in annotate for OpenCVS.
• Make the OpenCVS rcs code properly resolve branches when given base revisions.
• SECURITY FIX: Malicious DHCP clients could cause dhcpd(8) to corrupt its stack.
  A source code patch is available.
  [Applied to stable]
• Make malo(4) work with trunk(4) also.
• On arm, align the suspend save data to a cache line boundary, prevents issues upon resume.
• Fix trunk(4) on 802.11 devices.
• Fix segfault in OpenCVS when committing new files.
• Enable spdmem(4) on alpha, amd64, armish, i386, macppc and sparc64 GENERIC kernels.
• Added ospfd6(8), an OSPFv3 daemon to support OSPF for IPv6. Not useful yet.
• Add support for 230400 bps speed in the uslcom(4).
• Make spdmem(4) indicate if the memory module is registered.
• Add amdpcib(4) driver for the AMD 8111 series LPC bridge and HPET.
• Make spdmem(4) print CAS latency for DDR/DDR2 memory.
• Added spdmem(4) driver for Serial Presence Detect memory information.
• Add glxpcib(4) support in the i386 architecture for PCI-ISA bridge, timecounter and watchdog found in the CS5536 companion chip to the AMD Geode LX-800 processor.
• Allow dhcpd(8) to operate the various pf(4) table actions independently.
• Make the UFS dirhash code correctly allocate cleared memory, fixes edge cases.
• Fix in hoststated(8) for non-SSL relays.
• In eephy(4), disable fiber/copper auto-selection on the 88E1111 to work around some cards that in fact only have copper connectors.
• Fix in azalia(4) for devices found on Acer TravelMate 3010.
• Update libc date code and timezone data to tz2007h.
• Make tcpdump(8) handle CARP over IPv6 in the printing routine.
• In bgpd(8), when inserting blackhole or reject routes, set the gateway address to 127.0.0.1 / ::1 unconditionally.
• Merge bwi(4) firmware into a single file, requires update of the firmware package to v1.3.
• Added two new ioctl()s to the audio layer, AUDIO_GETPRINFO and AUDIO_GETRRINFO to help porting non-native audio applications and the OSS emulation.
• Added libpixman to xenocara.
• Make OpenCVS reset the default branch early, so rcs_head_get() does not return a possibly wrong revision as 'current'.
• Make gdb(1) distinguish states saved by normal context switches and states saved by satectx(). Makes backtraces from kernel crash dumps work much better.
• Merge xfs(1) 1.0.5 into xenocara, contains security fixes for heap overflow and corruption vulnerabilities.
• Fix in grep(1) for patterns containing $ and ^ but not as the last or first char.
• In libc, fix a libpthread panic regarding seekdir(3).
• Added initial support for the Marvell PCIe Yukon FE+ Fast Ethernet chipsets to msk(4).
• Fix for vr(4) to handle I/O accesses chipsets which do not have PCI power management capabilities.
• Added new Intel E1000 and 10Gb PCIe PCI ids.
• In bwi(4), fix 'bogus xmit rate setup' panic seen while associating with an 11b AP.
• Add support for the high-resolution timer found in GPS170PCI cards to mbg(4).
• Updated xf86-video-nsc in xenocara.
• On i386, only call amd64_errata() on amd64 processors. (family 0xf).
• Fix unaligned access in bwi(4) for strict-alignment architectures.
• Updated libXaw, xf86-video-savage and xf86-video-nv in xenocara.
• Make ospfd(8) always include interface IP address when printing the config.
• Updated libICE and libX11 in xenocara.
• Updated libXcomposite, libXrender, libxtrans and libXdamage in xenocara.
• Fix two panics in bwi(4) on macppc.
• Updated makedepend(1), libXxf86dga and xf86dgaproto in the xenocara source tree.
• Make vnd(4) work on block devices.
• Make startx(1) use /dev/arandom to generate the cookie.
• Implement SNDCTL_DSP_[G|S]ETTRIGGER to the ossaudio(3) code.
• In pf(4), add loginterface support for groups, and modify pfctl(8) to allow a groupname of "all" to see overall statistics.
• Added automatic rate control (AMRR) to bwi(4).
• Fix off-by-one overflow in SSL_get_shared_ciphers, backported from the OpenSSL_0_9_8 branch.
• In hoststated(8), move SSL context creation to after privs are dropped, one more step towards graceful L7 reloads.
• Cleanup in newfs_msdos(8).
• Fix ep(4) packet header initialization.
• Cleanup of the STAC7661 codec for azalia(4).
• Make sppp(4) handle protocol reject packets, now that it has more than one protocol.
• For ssh(1), when updating a key that already exists, update the properties instead of discarding them.
• Fix emulated encodings in uaudio(4).
• Update tht(4) microcode to SNIC 0xf. Fixes UDP reception issues.
• Last piece for equal cost multipath support in ospfd(8). Enabled via sysctl(8).
• Make split(1), authpf(8) and ppp(8) correctly handle empty strings returned from fgets(3).
• Make route(8) obey rtable ID when doing "route flush".
• First step in hoststated(8) for reloading layer-7 configurations, two new functions to load certificates while chrooted and with privileges dropped.
• Add bwi(4) to amd64 and i386 GENERIC kernels, but disabled for now.
• Add radio tap support to bwi(4).
• Fix audioctl(1) returning bogus values for 'output_muted'.
• Add support in OpenCVS to commit modified files to branches.
• Make sure carp(4) code does not crash when dealing with multicast packets.
• Fix crash in bwi(4) when changing media and device is up.
• Fix atime updating issues in the file system code.
• Properly handle physical address in bwi(4), now usable enough to ssh over.
• Make sure OpenCVS overwrites the sticky directory tag if update is given -r, since -r gets priority.
• Make sure OpenCVS does not litter /tmp with 0-sized files on the server when client sends info about a file that is up to date.
• Add support in OpenCVS for checking out with a local repository already in place.
• In tcpdump(8), when printing pfsync packets, print hexdump and not pcap header.
• Add ASUS WL-138g to the list of supported bwi(4) devices.
• Add mixer items, master volume and DACgroup init for Analog Devices AD1984 to the azalia(4) driver.
• Make "mount -a" on sparc and sparc64 recognize Linux ext2 labels.
• Add CrystalFontz CFA 635 to the list of supported uftdi(4) devices.
• Improve parsing of .cvsrc and allow longer command arguments in OpenCVS.
• Various fixes for the exphy(4) driver.
• Make ixgb(4) and xge(4) use the proper baudrate for 10Gbit now that it can fit.
• Update libXinerama, libXcursor and libXtst in the xenocara source tree.
• Allow 4095 multicast group memberships per socket instead of 20.
• In pf(4), allow state reuse if both sides are in FIN_WAIT_2 and a new SYN arrives.
• Correctly track the E-bit of router LSA on config reloads for ospfd(8).
• Make sure sendbug(1) do not treat dmesg lines with angle brackets <...> in them as comments.
• Move ifmedia_baudrate to a 64-bit int.
• Prevent out-of-bounds memory access in tempnam(3).
• Implement the output_muted member to audio_info_t as found in original Sun audio.
• Fixed memory leak in tail(1).
• Updated xman, xmessage, xmodmap, xprop, xrbd, xset, xsetroot, xvinfo and xwininfo in the xenocara source tree.
• Fixed a memory leak in bgpd(8).
• Fix for nexthop issues in ospfd(8) when having multiple point-to-point links between two routers.
• Various fixes and internal work on make(1).
• Allow pulling USB sticks out with mounted FFS file systems on them without crashing or deadlocking.
• Updated xcursorgen, xdm, xdriinfo, xgamma, xhost, xinit, xload and xmag in the xenocara source tree.
• Lots of work on the bwi(4) driver.
• Updated xconsole to 1.0.3 in xenocara.
• Improvements in the common parser code generator for various OpenBSD daemons.
• Plug memory leaks in the tail(1) command.
• Add/sync AMD SB6/7/800 chipsets to the piixpm(4) code.
• Add the NVIDIA MCP73 SMBus controller to the list of nviic(4) devices.
• Add -n option to ntpd(8) for testing the configuration file.
• Added annotate support to OpenCVS for local and remote repositories.
• Make the i386 bootloader not complain about missing apm support.
• Add an option to ntpd.conf(5) to compensate for a reference clock in ntpd(8) that is early or late.
• Port the pctr(4) i386 performance counters to the amd64 platform.
• Initial import of bwi(4), a driver for the Broadcom AirForce wireless devices.
• Update setxkbmap, xcalc and xclock in the xenocara sources.
• Fix for nfe(4), use a TX interrupt to clean up the DMA ring if IFF_OACTIVE is set when starting it up.
• Undo zero-copy RX path for uath(4), it still has issues.
• Similar 64 bit baud rate fixes for bgpd(8), ripd(8) and dvmrpd(8).
• Some 64 bit fixes for netstat(1).
• Move more of the baudrates in ospfd(8) to 64 bit counters.
• Speedups in the kernel arc4 crypto code.
• Updated bdftopcf, iceauth, ico, sessreg and mkfontdir in xenocara.
• Add PLX 9016 to the list of supported puc(4) devices.
• Fix STAC9221-equipped Mac master volume and mute controls by binding the DAC volumes in azalia(4).
• Fix in azalia(4), CMI9880 should work now.
• Improve cylinder group selection in FFS when creating new directories.
• Make sure vnodes are locked before calling ffs_unmount().
• Add support in iwn(4) for 802.11 headers with various sizes.
• Fixes for mac68k interrupt handling.
• Improvements in the iwn(4) sensitivity handling code.
• Make sure cdio(1) do not skip the code which sends QUIT to the CDDB server and validate returned track names.
• Add support in hoststated(8) for relaying DNS traffic. This adds an infrastructure to support UDP based protocols.
• Fix crash in OpenCVS when parsing .cvsrc if an invalid cvs command has been specified.
• Fix setting of multicast filter on ie(4).
• Make sure azalia(4) tries 48KHz if 44.1KHz sample rate is not available.
• Fix for cases where audioctl(1) would produce "set failed" errors on devices without master controls.
• Various fixes in azalia(4) for chipsets which solves no-sound problems for codecs using the generic functions.
• Make sure ptrace(2) cannot change any privileged bits in the Machine State Register on macppc.
• Added support in OpenCVS for checkout -p with local repository.
• Sync rcs(1) ident behavior with GNU RCS.
• Disable page zeroing in the idle loop on SH-based machines.
• Added thmc(4) to i386 GENERIC kernels.
• Added uchcom(4) to alpha,amd64,armish,hppa,i386,landisk,macppc,sparc64 and zaurus GENERIC kernels.
• New thmc(4) driver for TI thmc50/adm1022/adm1028-based devices.
• Fix some false negatives in lint(1) when dealing with unreachable code.
• Fix for uaudio(4) devices using signed mixer controls.
• Update libXfont to 1.3.0 and freetype to 2.3.5 in xenocara.
• Added adl(4) to amd64 and i386 GENERIC kernels.
• Make bioctl(8) exit with a return code of 1 on error.
• Add uchcom(4), a driver for WinChipHead CH340 USB serial adapters.
• Fix OpenCVS so checkout/update -p works in both local and server mode.
• Do not recalculate TCP payload length in pf(4), since it is already cached.
• Re-enable interrupt coalescing on iwn(4), it now properly ACKs interrupts.
• Fix in acpi(4) for the "multiple bus 0" problems.
• Added support in OpenCVS for single file checkouts.
• Make iwn(4) pad the first segment of a TX descriptor if needed to make the length a multiple of 4.
• Added initial driver adl(4) to handle Andigilog aSC7621 devices.
• Fix potential uninitialized memory access in the routing socket code.
• Add "show sessions" command to dump complete list of relay sessions in hoststated(8).
• Tweak heuristics in the speedstep code to better detect compatible Mobile Intel Pentium 3 as found on Dell c610.
• Improvements in the PowerNow K7 power state code.
• Add an unsolicited event handler for the Apple Sigmatel codecs. Now speaker and line outputs will mute and unmute on headphone presence.
• Make ITM touchscreens return pressure as an absolute z axis in the uts(4) driver.
• Make ksh(1) smarter when waiting for input for non-interactive scripts.
• Fix temperature sensors on iwn(4) devices.
• New iwn(4) driver for Intel Wireless WiFi Link 4965AGN. Needs non-free firmware (see man page).
• Make trunk(4) do error checking correctly when packets enter a non-master interface.
• For sdhc(4), do not try to disable bus power before setting the voltage on the controller.
• Fix buffer overflow in cwm(1).
• Update sudo(8) to 1.6.9p5.
• Various internal changes in the qli(4) driver.
• Fixed newfile() algorithm in split(1).
• Add IPv6 support to the sppp(4) layer.
• Make sure ksh(1) calls ERR trap before doing exit handling.
• Remove compat link to /usr/sbin/vnconfig. It is in /sbin only now.
• Add support in eeprom(8) for printing the derived tree from the OpenPROM, like "devinfo" and "prtconf".
• Remove FPU detection code on sparc64, all ultrasparc CPUs have one.
• Initial lmn(4) driver for lm93 sensors, common on IPMI machines.
• Reset the sn(4) chip after internal memory exhaustion, makes the driver more solid with heavy NFS usage.
• Add the ability in hoststated(8) to specify a host header when using http(s) methods.
• In OpenCVS, handle Ctrl-D as a)bort in log message question.
• Make the ssh(1) ConnectTimeout option apply to both the TCP connection and the SSH banner exchange.
• Add support for chained SSL certificates in hoststated(8).
• Make ssh(1) file descriptor code return an error rather than call fatal(), to make masters survive slaves failing to pass all stdio FDs.
• Fixes for mips64 signal handling.
• Change internal communication regarding routes to support 64 bit counters and routing table id in the headers of most routing messages.
• Add __cxa_atexit() support to gcc3, provides support for shared object destructors called at dlclose() time.
• Add memrchr(3) and recalloc(3) call to libc.
• Make ksh(1) not fail if unsetting a non-existent variable.
• In carp(4), make use of the preempt counter to signal number of transitions of any carp group to master status.
• Add some more PCI ids to the mpi(4) driver.
• Disable ROM search acceleration in uow(4) for now.
• Handle quotation marks in .cvsrc correctly for OpenCVS.
• Make sure OpenCVS logs the 1.1 revision as "Initial revision" instead of 1.1.
• Add support for Alltel UTStarcom PPC6700 in the uipac(4) driver.
• Add bthidev(4) bluetooth device.
• Fix a use-after-free in the ccd(4) device driver.
• Add VLAN reception support to vr(4).
• Various fixes to xtsscale(1).
• Delay IPMI sensor creation until kernel goes multiuser, removes annoying delay during boot.
• Add qli(4) (qlogic iSCSI) initial driver, not usable yet.
• Make sure uts(4) does not swap X and Y coordinates while in raw mode.
• Fix lock ordering when updating mount points.
• Remove old CVSROOT caching mechanisms in OpenCVS.
• Make OpenCVS handle sending of multiline commit messages properly.
• Add support in pf.conf(5) for address ranges like "from 10.1.2.50 - 10.1.3.75".
• Make uberry(4) handle new pearl-style devices which now attach their SD cards as umass(4).
• Add missing xfree() in the OpenCVS add code.
• Add AfriNIC whois server to whois(1) so referrals are followed.
• Make pf(4) send RSTs due to "block return" using the correct routing table.
• Back out change in sppp(4) interface code, since the m_pulldown was not copying the header.
• Add -I option to tcpdump(8) for printing the interfaces.
• Make OMRON BX35F not attach as a uhid(4), since it is an UPS.
• Fix for sparc64 dmesg when printing more than 2G of memory.
• Update xterm(1) version to 229.
• Move xenocara expat to 2.0.1.
• Fix a bug leading to infinite recursion in the perl(1) AutoLoader(3p).
• Add new configuration directive to httpd(8), RLimitNOFILE to set the number of open file descriptors.
• Initial support for onboard Fast-Wide scsi on the 735 and 755 hppa machines in siop(4).
• Remove need for hardcoded address of sti(4) on hppa. Makes C180 models work.
• Add compatibility in X11 with the new XInput API.
• Continued development of the nxe(4) driver.
• Make pf(4) allow RST packets with th_seq equal to seqlo +-1. Reduces amount of 'loose state' messages.
• Make banner(1) check the result code from fgets(3) and do a proper newline strip.
• Make ssh(1) execute commands with $SHELL instead of /bin/sh.
• Support for "Banner=none" in sshd_config(5).
• Fix high-power charging on uberry(4) devices.
• Fix in wpi(4) RX code path which could block incoming traffic, only seen when running without WEP.
• Enable Xft support in xdm(1).
• Update the time zone data files and libc time zone code to 2007g.
• Make sure com(4) source compiles with KGDB enabled.
• Fix in OpenSSL for CVE-2007-3108.
• Add a -s option to sort(1) in order to make the radix sort a stable sort.
• Make sure bbc(4) on sparc64 does not repeat the device name on attach failure.
• Fix for sparc64 gdb(1).
• Make sure pf(4) does not access th_flags when it isn't available.