-
Notifications
You must be signed in to change notification settings - Fork 40
/
66.html
1143 lines (1067 loc) · 50.6 KB
/
66.html
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
<!doctype html>
<html lang=en id=release>
<meta charset=utf-8>
<title>OpenBSD 6.6</title>
<meta name="description" content="OpenBSD 6.6">
<meta name="viewport" content="width=device-width, initial-scale=1">
<link rel="stylesheet" type="text/css" href="openbsd.css">
<link rel="canonical" href="https://www.openbsd.org/66.html">
<h2 id=OpenBSD>
<a href="index.html">
<i>Open</i><b>BSD</b></a>
6.6
</h2>
<table>
<tr>
<td>
<a href="images/sixdotsix.gif"><!-- XXX -->
<img width="227" height="343" src="images/sixdotsix-s.gif" alt="sixdotsix" ></a>
<td>
Released Oct 17, 2019<br>
Copyright 1997-2019, Theo de Raadt.<br>
<br>
<br>
Artwork by Natasha Allegri.
<br>
<ul>
<li>See the information on <a href="ftp.html">the FTP page</a> for
a list of mirror machines.
<li>Go to the <code class=reldir>pub/OpenBSD/6.6/</code> directory on
one of the mirror sites.
<li>Have a look at <a href="errata66.html">the 6.6 errata page</a> for a list
of bugs and workarounds.
<li>See a <a href="plus66.html">detailed log of changes</a> between the
6.5 and 6.6 releases.
<p>
<li><a href="https://man.openbsd.org/signify.1">signify(1)</a>
pubkeys for this release:<p>
<table class=signify>
<tr><td>
openbsd-66-base.pub:
<td>
<a href="https://ftp.openbsd.org/pub/OpenBSD/6.6/openbsd-66-base.pub">
RWSvK/c+cFe24BIalifKnqoqdvLlXfeZ9MIj3MINndNeKgyYw5PpcWGn</a>
<tr><td>
openbsd-66-fw.pub:
<td>
RWSKyzM3wogTrgHkO88MnRiK/yuu8xy2OeIqhnP/uGL/j2IF4I5djMIM
<tr><td>
openbsd-66-pkg.pub:
<td>
RWSS4lqHZ5ayOFMBPj3leAkE9tCsSWG9OxD6MmAIS5Y3H3tD6F4vP/eF
<tr><td>
openbsd-66-syspatch.pub:
<td>
RWRQMmZg6mMlSTfHsJH9czeLAvf9e+ViLvkQ4id4dxaQqWU3aX9Cl/W1
</table>
</ul>
<p>
All applicable copyrights and credits are in the src.tar.gz,
sys.tar.gz, xenocara.tar.gz, ports.tar.gz files, or in the
files fetched via <code>ports.tar.gz</code>.
</table>
<hr>
<section id=new>
<h3>What's New</h3>
<p>
This is a partial list of new features and systems included in OpenBSD 6.6.
For a comprehensive list, see the <a href="plus66.html">changelog</a> leading
to 6.6.
<ul>
<li>General improvements and bugfixes:
<ul>
<li>Fixed support for amd64 machines with greater than 1023GB
physical memory.
<li><a href="https://man.openbsd.org/drm.4">drm(4)</a> updates.
<li>The octeon platform is now using
<a href="https://man.openbsd.org/clang-local.1">clang(1)</a>
as the base system compiler.
<li>The powerpc architecture is now provided with
<a href="https://man.openbsd.org/clang.1">clang(1)</a>, in
addition to aarch64, amd64, armv7, i386, mips64el, sparc64.
<li>Disabled <a href="https://man.openbsd.org/gcc.1">gcc</a> in
base on armv7 and i386.
<li>Prevented <a href="https://man.openbsd.org/dhclient.8">dhclient(8)</a>
from repeatedly obtaining a new lease when the mtu is given in a
lease.
<li>Prevented more than one thread from opening a
<a href="https://man.openbsd.org/wscons.4">wscons(4)</a> device in
read/write mode.
<li>Allowed non-root users to become owner of the
<a href="https://man.openbsd.org/drm.4">drm(4)</a> device when they are
the first to open it.
<li>Added regular expression support for the format search, match
and substitute modifiers in
<a href="https://man.openbsd.org/tmux.1">tmux(1)</a>.
<li>Added a -v flag to source-file in
<a href="https://man.openbsd.org/tmux.1">tmux(1)</a> to show the commands
and line numbers.
<li>Added simple menus usable with mouse or keyboard in
<a href="https://man.openbsd.org/tmux.1">tmux(1)</a>.
Introduced the command "display-menu" to show a menu bound to
the mouse on status line by default, and added menus in tree,
client and buffer modes.
<li>Changed the behavior of swap-window -d in
<a href="https://man.openbsd.org/tmux.1">tmux(1)</a> to match
swap-pane.
<li>Allow panes to be empty in
<a href="https://man.openbsd.org/tmux.1">tmux(1)</a>, and
enabling output to be piped to them with split-window or
display-message -I.
<li>Adjusted <a href="https://man.openbsd.org/tmux.1">tmux(1)</a>
to automatically scroll when dragging to create a selection with
the mouse when the cursor reaches the top or bottom line.
<li>Fixed a <a href="https://man.openbsd.org/tmux.1">tmux(1)</a>
crash when killing the current window, and other bugfixes.
</ul>
<li>SMP-Improvements, System call unlocking:
<ul>
<li>Unlocked <a href="https://man.openbsd.org/getrlimit.2">getrlimit(2)</a>
and <a href="https://man.openbsd.org/setrlimit.2">setrlimit(2)</a>
syscalls.
<li>Unlocked <a href="https://man.openbsd.org/read.2">read(2)</a> and
<a href="https://man.openbsd.org/write.2">write(2)</a> syscalls.
<li>Removed the KERNEL_LOCK from
the <a href="https://man.openbsd.org/bridge.4">bridge(4)</a>
output fast-path.
<li>Made resource limit access MP-safe.
<li>Made
<a href="https://man.openbsd.org/file.9">file(9)</a>
offset access MP-safe.
</ul>
<li>Improved hardware support, including:
<ul>
<li>Implemented Linux compatible
<a href="https://man.openbsd.org/acpi.4">acpi(4)</a>
interfaces and enabled the ACPI support code in
<a href="https://man.openbsd.org/radeon.4">radeon(4)</a> and
<a href="https://man.openbsd.org/amdgpu.4">amdgpu(4)</a>.
<li>Implemented backlight control for
<a href="https://man.openbsd.org/amdgpu.4">amdgpu(4)</a>, allowing setting
of the backlight using
<a href="https://man.openbsd.org/wsconsctl.8">wsconsctl(8)</a>.
<li>Both sets of speakers work by default on the ThinkPad X1C7.
<li>Added <a href="https://man.openbsd.org/amdgpu.4">amdgpu(4)</a>, an AMD
Radeon GPU video driver.
<li>Added TSC synchronization for multiprocessor machines and re-enabled TSC
as the default amd64 time source.
<li>Added support for Realtek ALC285 in
<a href="https://man.openbsd.org/azalia.4">azalia(4)</a>.
<li>Added <a href="https://man.openbsd.org/uvideo.4">uvideo(4)</a> support
for the KSMedia 8-bit IR format and for dual functions on integrated USB
cameras.
<li>Added the <a href="https://man.openbsd.org/aplgpio.4">aplgpio(4)</a>
driver for the GPIO controllers on Intel's Apollo Lake SoC.
<li>Implemented MSI-X support on sparc64.
<li>Skipped PCI host bridges and devices not present with
<a href="https://man.openbsd.org/acpi.4">acpi(4)</a> when establishing
the mapping between ACPI device nodes and PCI devices.
<li>Added the <a href="https://man.openbsd.org/ukspan.4">ukspan(4)</a>
driver for the Keyspan USA19HS USB serial adapter.
<li>Improved support for SAS3 controllers, made device enumeration during
boot more reliable, and enabled 64bit DMA for io in
<a href="https://man.openbsd.org/mpii.4">mpii(4)</a>.
<li>Fixed MSI/MSI-X on arm64 machines with
<a href="https://man.openbsd.org/agintc.4">agintc(4)</a>.
<li>Added MSI-X support in
<a href="https://man.openbsd.org/acpipci.4">acpipci(4)</a>, pciecam,
<a href="https://man.openbsd.org/dwpcie.4">dwpcie(4)</a> and
<a href="https://man.openbsd.org/rkpcie.4">rkpcie(4)</a>.
<li>Improved support for type4 devices in the
<a href="https://man.openbsd.org/ubcmtp.4">ubcmtp(4)</a> multi-touch
trackpad driver.
<li>Support for <a href="https://man.openbsd.org/virtio.4">virtio(4)</a> 1.0
specification for PCI devices.
<li>Improved support for the AR9271 chipset
in <a href="https://man.openbsd.org/athn.4">athn(4)</a> .
<li>Repaired support for <a href="https://man.openbsd.org/athn.4">athn(4)</a>
9280 1T2R devices (broken since OpenBSD 6.5).
<li>Added support for the trackpad and trackpoint of the Dell Precision 7520
laptop.
<li>Added the Colemak keyboard layout.
<li>New <a href="https://man.openbsd.org/fusbtc.4">fusbtc(4)</a>
driver for the Fairchild FUSB302 USB Type-C controller.
<li>Added a fallback to
<a href="https://man.openbsd.org/ehci.4">ehci(4)</a>
which enables the USB ports on the RockPro64.
<li>Added support for more Intel 300 Series PCH devices to
<a href="https://man.openbsd.org/ichiic.4">ichiic(4)</a>.
<li>Added <a href="https://man.openbsd.org/mcx.4">mcx(4)</a> driver for
Mellanox ConnectX-4 (and later) Ethernet controllers.
<li>Added support for the cryptographic coprocessor found on newer
AMD Ryzen CPUs/APUs.
<li>Improved the <a href="https://man.openbsd.org/envy.4">envy(4)</a> codec
API and used it on ESI Juli@ cards.
<li>Enabled EnvyHT-specific sample rates (above 96kHz) on the host
controller for <a href="https://man.openbsd.org/envy.4">envy(4)</a>
devices.
<li>Added support for the USB serial adapter found in Juniper SRX 300 to
<a href="https://man.openbsd.org/uslcom.4">uslcom(4)</a>.
<li>Updated shared drm code,
<a href="https://man.openbsd.org/inteldrm.4">inteldrm(4)</a>
and <a href="https://man.openbsd.org/radeondrm.4">radeondrm(4)</a>
to linux 4.19.78. This adds support for Intel Broxton/Apollo
Lake, Amber Lake, Gemini Lake, Coffee Lake, Whiskey Lake,
and Comet Lake hardware.
<li>Made <a href="https://man.openbsd.org/startx.1">startx(1)</a> and
<a href="https://man.openbsd.org/xinit.1">xinit(1)</a> work again on
modern systems using
<a href="https://man.openbsd.org/inteldrm.4">inteldrm(4)</a>,
<a href="https://man.openbsd.org/radeondrm.4">radeondrm(4)</a>
and <a href="https://man.openbsd.org/amdgpu.4">amdgpu(4)</a>.
<li>Added <a href="https://man.openbsd.org/mcprtc.4">mcprtc(4)</a>, a driver
for the Microchip MCP79400 RTC and similar.
<li>Added I2C clock gates to <a href="https://man.openbsd.org/mvclock.4">
mvclock(4)</a>.
<li>Added support for MSI-X to <a href="https://man.openbsd.org/bnxt.4">
bnxt(4)</a>.
<li>Added <a href="https://man.openbsd.org/octpip.4">octpip(4)</a>, a driver
for the Octeon packet input processing unit.
<li>Added the <a href="https://man.openbsd.org/octiic.4">octiic(4)</a>
driver for OCTEON two-wire serial interfaces.
<li>Enabled <a href="https://man.openbsd.org/nvme.4">nvme(4)</a> on octeon.
<li>Added <a href="https://man.openbsd.org/octpcie.4">octpcie(4)</a>, a
driver for the PCIe controller found on OCTEON II and OCTEON III.
<li>Fixed random kernel hangs on
some <a href="https://www.openbsd.org/sparc64.html">sparc64</a>
machines by blocking interrupts while sending an IPI on sunv4
(as on sun4u).
<li><a href="https://man.openbsd.org/ure.4">ure(4)</a> now supports
RTL8153B devices, adding support for Ethernet on Lenovo USB-C docks.
<li>Added new <a href="http://man.openbsd.org/ksmn.4">ksmn(4)</a> driver
for temperature sensor on AMD Family 17h CPUs.
<li>Explicitly disable BCM4331 wifi chips present in 2011-2012 Apple Mac systems.
Fixes an interrupt storm that consumes about 50% of CPU0 on affected machines.
</ul>
<li>Improved <a href="https://www.openbsd.org/arm64.html">arm64</a> hardware
support, including:
<ul>
<li>Added support for Ampere eMAG CPU based systems.
<li>Added support to <a href="https://man.openbsd.org/amlclock.4">amlclock(4)</a>
for obtaining CPU clock frequency.
<li>Enabled <a href="https://man.openbsd.org/amlmmc.4">amlmmc(4)</a>, a
driver for the SD/MMC controller found on various Amlogic SoCs.
<li>Implemented setting the CPU clock for Allwinner A64 SoCs in
<a href="https://man.openbsd.org/sxiccmu.4">sxiccmu(4)</a>.
<li>Added <a href="https://man.openbsd.org/amldwusb.4">amldwusb(4)</a>,
<a href="https://man.openbsd.org/amlusbphy.4">amlusbphy(4)</a> and
<a href="https://man.openbsd.org/amlpciephy.4">amlpciephy(4)</a>, drivers
for the USB controller and PHYs on the Amlogic G12A/B SoCs.
<li>Added <a href="https://man.openbsd.org/imxtmu.4">imxtmu(4)</a>, a driver
to support the temperature sensors on i.MX8M SoCs.
<li>Added <a href="https://man.openbsd.org/amlrng.4">amlrng(4)</a>, a simple
random number generator driver for Amlogic SoCs.
<li>Added <a href="https://man.openbsd.org/amclock.4">amclock(4)</a>,
a driver for the Amlogic SoC clocks.
<li>Added <a href="https://man.openbsd.org/amluart.4">amluart(4)</a>, a
driver for the UARTs found on various Amlogic SoCs.
<li>Added support for the SMBus System Interfaces (SSIF) to
<a href="https://man.openbsd.org/ipmi.4">ipmi(4)</a>.
<li>PXE booting using U-Boot works now.
<li>Added clock support
to <a href="https://man.openbsd.org/sxisyscon.4">sxisyscon(4)</a>,
a driver for the system controller found on various Allwinner
SoCs.
<li>Implemented <a href="https://man.openbsd.org/smbios.4">smbios(4)</a>
support on arm64.
<li>Added <a href="https://man.openbsd.org/ucrcom.4">ucrcom(4)</a>, a driver
for the serial console of chromebooks.
<li>Enabled <a href="https://man.openbsd.org/mvmdio.4">mvmdio(4)</a> and
<a href="https://man.openbsd.org/mvneta.4">mvneta(4)</a> on arm64.
<li>Added <a href="https://man.openbsd.org/pinctrl.4">pinctrl(4)</a>
support for 'pinconf-single' devices and support for
bias and drive-strength properties, needed for HiSilicon SoCs.
<li>Added <a href="https://man.openbsd.org/mvdog.4">mvdog(4)</a>, a driver
to support the watchdog on the Armada 3700 SoC.
<li>Added support for the Allwinner H6 to
<a href="https://man.openbsd.org/sxipio.4">sxipio(4)</a> and
<a href="https://man.openbsd.org/sxiccmu.4">sxiccmu(4)</a>.
<li>Added <a href="https://man.openbsd.org/mviic.4">mviic(4)</a>, a driver
to support the I2C controller on the Armada 3700 SoC.
<li>Added <a href="https://man.openbsd.org/mvuart.4">mvuart(4)</a> to
support the Armada 3720's serial console.
<li>Added support for the Armada 3720 clocks to
<a href="https://man.openbsd.org/mvclock.4">mvclock(4)</a>.
<li>Added support for the Armada 3720 pinctrl controller to
<a href="https://man.openbsd.org/mvpinctrl.4">mvpinctrl(4)</a>. This
controller also includes GPIO controller functionality.
<li>Added the RK3328 and RK3399 GMAC clocks to
<a href="https://man.openbsd.org/rkclock.4">rkclock(4)</a>.
<li>Increased MAXCPUs to 32 in arm64, allowing use of all cores on the Ampere
eMAG.
<li>Added support for the Cortex-A65 CPU.
<li>Implemented interrupt controller functionality in
<a href="https://man.openbsd.org/rkgpio.4">rkgpio(4)</a>,
allowing use of the
<a href="https://man.openbsd.org/fusbtc.4">fusbtc(4)</a>
interrupt on the RockPro64.
</ul>
<li>IEEE 802.11 wireless stack improvements:
<ul>
<li>Repaired the
<a href="https://man.openbsd.org/ifconfig.8">ifconfig(8)</a>
'nwflag' command (broken since OpenBSD 6.4).
<li>Added a new 'stayauth' nwflag which can be set to ignore deauth frames.
This is useful when deauth frames are being spoofed by an attacker.
<li>Repaired the
<a href="https://man.openbsd.org/ifconfig.8">ifconfig(8)</a>
'mode' command to properly force a wireless interface into 11a/b/g/n mode.
<li>Made 11n Tx rate selection more sensitive to transmission failures.
<li>Fixed automatic use of HT protection in 11n hostap mode.
<li>Fixed WPA APs occasionally appearing as non-WPA APs during AP selection.
<li>Fixed some eligible APs being ignored during AP selection after a
roaming failure.
<li>Added support for 802.11n Tx aggregation to net80211 and the
<a href="https://man.openbsd.org/iwn.4">iwn(4)</a> driver.
<li>Made net80211 expose reasons for association failures to have
<a href="https://man.openbsd.org/ifconfig.8">ifconfig(8)</a>
display them in "scan" output and on the
<a href="https://man.openbsd.org/ieee80211.9">ieee80211(9)</a>
status line.
<li>Made all wireless drivers submit a batch of received packets to the
network stack during one interrupt if possible, rather than submitting
each packet individually. Prevents packet loss under high load due to
backpressure from the network stack.
</ul>
<li>Generic network stack improvements:
<ul>
<li>Enabled TCP and UDP checksum offloading by default for
<a href="https://man.openbsd.org/ix.4">ix(4)</a>.
<li>Added <a href="https://man.openbsd.org/tpmr.4">tpmr(4)</a>, a 802.1Q
two-port MAC relay implementation.
<li>Added <a href="https://man.openbsd.org/iavf.4">iavf(4)</a>, a driver for
Intel SR-IOV Virtual Functions of Intel 700 series Ethernet controllers.
<li>Added <a href="https://man.openbsd.org/aggr.4">aggr(4)</a>, a
dedicated driver to implement 802.1AX link aggregation.
<li>Added port protection support
to <a href="https://man.openbsd.org/switch.4">switch(4)</a>. Domain
membership is checked for unicast, flooded (broadcast) and local
(host-network-bound, e.g. trunk) traffic.
<li>Disabled <a href="https://man.openbsd.org/mobileip.4">mobileip(4)</a>.
<li>Added support
to <a href="https://man.openbsd.org/ifconfig.8">ifconfig(8)</a>
for getting and setting rxprio, finishing support for RFC
2983. Implemented configuring rxprio
in <a href="https://man.openbsd.org/vlan.4">vlan(4)</a>,
<a href="https://man.openbsd.org/gre.4">gre(4)</a>,
<a href="https://man.openbsd.org/mpw.4">mpw(4)</a>,
<a href="https://man.openbsd.org/mpe.4">mpe(4)</a>,
<a href="https://man.openbsd.org/mpip.4">mpip(4)</a>,
<a href="https://man.openbsd.org/etherip.4">etherip(4)</a>
and <a href="https://man.openbsd.org/bpe.4">bpe(4)</a>.
<li>Implemented Tx mitigation by calling the hardware transmit
routine per several packets rather than for individual
packets. Defers calls to the transmit routine to a network taskq,
or until a backlog of packets has built up.
<li>Stopped using <a href="https://man.openbsd.org/splnet.9">splnet(9)</a> when
running the network stack now
that it is using the NET_LOCK for protection, reducing latency spikes.
<li>Added support for reading SFPs to some ethernet cards.
</ul>
<li>Installer improvements:
<ul>
<li>Allowed quoted SSIDs in the installer, rather than ignoring
those containing whitespace.
<li>Introduced <a href="https://man.openbsd.org/sysupgrade.8">sysupgrade(8)</a>
that can be used to upgrade OpenBSD unattended.
<li><a href="errata65.html#p012_sysupgrade">A syspatch was provided which adds</a>
<a href="https://man.openbsd.org/sysupgrade.8">sysupgrade(8)</a>
to 6.5, so unattended upgrades to 6.6 can be
performed on amd64/arm64/i386 with <b># syspatch && sysupgrade</b>.
<li>Created an <a href="https://www.openbsd.org/octeon.html">octeon</a>
bootloader which is a modified kernel. To use this bootloader, the
firmware must be configured to load file "boot" instead of "bsd".
<li>Included <a href="https://man.openbsd.org/mount_nfs.8">mount_nfs(8)</a>
on the amd64 CD ramdisk.
<li>Added <a href="https://man.openbsd.org/tee.1">tee(1)</a> to the ramdisk, and
display a moving progress bar
during auto upgrade/install.
<li>Repaired and improved v6 default route selection, fixing autoinstalls.
<li>Added <a href="https://man.openbsd.org/sysupgrade.8">sysupgrade(8)</a>
support to the sparc64 bootloader.
<li>The DHCP configuration is now preserved when restarting an install.
<li>The installer now remembers 'autoconf' when restarting an install.
<li>Stopped prompting for disks that do not contain a root
partition during upgrades. This defaults to the correct disk
when full disk encryption is in use, and will be useful for
future unattended upgrades.
</ul>
<li>Security improvements:
<ul>
<li><a href="https://man.openbsd.org/unveil.2">unveil(2)</a> is
now used in 77 userland programs to redact filesystem access.
<li>Various changes
in <a href="https://man.openbsd.org/unveil.2">unveil(2)</a>
to improve application behavior when encountering hidden
filesystem paths.
<li><a href="https://man.openbsd.org/ps.1">ps(1)</a> can show which
processes have called <a href="https://man.openbsd.org/unveil.2">unveil(2)</a>
with the <b>u</b> and <b>U</b> flags in STATE field.
<li><a href="https://man.openbsd.org/ps.1">ps(1)</a> can show the list
of <a href="https://man.openbsd.org/pledge.2">pledge(2)</a> options
processes use with the <b>-o pledge</b> option.
<li>Further and improved mitigations against Spectre side-channel
vulnerability in Intel CPUs built since 2012.
<li>Mitigations for Intel's Microarchitectural Data Sampling
vulnerability, using the new CPU VERW behavior if available or
by using the proper sequence from Intel's "Deep Dive" doc in the
return-to-userspace and enter-VMM-guest
paths. Updated <a href="https://man.openbsd.org/vmm.4">vmm(4)</a>
to pass through the MSR bits so that guests can apply the
optimal mitigation.
<li>Rewrote <a href="https://man.openbsd.org/doas.1">doas(1)</a>
environment inheritance not to inherit, and instead reset to the
target user's values by default.
<li>Prepare
the <a href="https://www.openbsd.org/amd64.html">amd64</a> BIOS
bootloader for loading the kernel at a random virtual address (future work).
<li>Introduced
<a href="https://man.openbsd.org/malloc_conceal.3">malloc_conceal(3)</a>
and <a href="https://man.openbsd.org/calloc_conceal.3">calloc_conceal(3)</a>,
which return memory in pages marked MAP_CONCEAL and call
<a href="https://man.openbsd.org/freezero.3">freezero(3)</a>
on <a href="https://man.openbsd.org/free.3">free(3)</a>.
<li>Make 'systat pf' not require root permissions
(<a href="https://man.openbsd.org/systat.1">systat(1)</a>).
<li>Added support for the EFI Random Number Generator Protocol,
using it to XOR random data into the buffer we feed the kernel for
<a href="https://www.openbsd.org/amd64.html">amd64</a>.
<li>Added information about system call memory write protection
and stack mapping violations to system
accounting. Now <a href="https://man.openbsd.org/daily.8">daily(8)</a>
will print a list of affected processes
and <a href="https://man.openbsd.org/lastcomm.1">lastcomm(1)</a>
will flag violations with 'M'.
</ul>
<li>Routing daemons and other userland network improvements:
<ul>
<li>The <a href="https://man.openbsd.org/ntpd.8">ntpd(8)</a>
daemon now gets and sets the clock in a secure way when booting
even when a battery-backed clock is absent.
<li><a href="https://man.openbsd.org/slaacd.8">slaacd(8)</a> now
removes IPv6 addresses when it detects a link-state change but
no new router advertisement is received.
<li><a href="https://man.openbsd.org/ifconfig.8">ifconfig(8)</a>
now reports SFP, SFP+ and QSFP module information when using
the <b>sff</b> option.
<li>Imported <a href="https://man.openbsd.org/snmp.1">snmp(1)</a>,
a new SNMP client which aims to be netsnmp-compatible for
supported features, and
removed <a href="https://man.openbsd.org/OpenBSD-6.5/snmpctl.8">snmpctl(8)</a>.
<li>Improvements
in <a href="https://man.openbsd.org/ntpd.8">ntpd(8)</a> DNS
resolving and constraints checking, especially during
startup. Unreliable NTP peers are removed from the pool and
DNS resolving is repeated to add replacements.
<li>Changed the <a href="https://man.openbsd.org/bgpd.8">bgpd(8)</a>
Adj-RIB-Out to a per-peer set of RB trees, improving speed.
<li>Rewrote <a href="https://man.openbsd.org/bgpd.8">bgpd(8)</a>
community matching and handling code and improved performance
for setups using many communities.
<li>Checked the type of a network statement when looking for
duplicates
in <a href="https://man.openbsd.org/bgpd.8">bgpd(8)</a>. This
fixes added network 0.0.0.0/0 after 'network inet static'.
<li>Made improvements
to <a href="https://man.openbsd.org/bgpd.8">bgpd(8)</a> speed when
configuring many peers.
<li>Implemented <a href="https://man.openbsd.org/bgpctl.8">bgpctl(8)</a>
'show mrt neighbors', to print the neighbor table of MRT
TABLE_DUMP_V2 dumps.
<li>Moved <a href="https://man.openbsd.org/bgpd.8">bgpd(8)</a>
pfkey socket to the parent process. The refreshing of the keys
for MD5 and IPSEC is done whenever the session state changes to
IDLE or ACTIVE, which should behave better when reloading
configs with auth changes.
<li>In <a href="https://man.openbsd.org/bgpd.8">bgpd(8)</a>, fixed
reloading of network statements that have no fixed prefix
specification.
<li>Extended the maximum size of
the <a href="https://man.openbsd.org/bgpd.8">bgpd(8)</a>
shutdown communication message to 255 bytes.
<li>Improvements
in <a href="https://man.openbsd.org/pfctl.8">pfctl(8)</a>, to
always check for namespace collisions on table
commands. Introduced 'pfctl -FR' to reset pfctl(8) settings to
defaults.
<li>Imported Kristaps Dzonsons' RPKI
validator, <a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a>.
<li> <a href="https://man.openbsd.org/relayd.8">relayd(8)</a> now supports
binary protocol health checking. See
<a href="https://man.openbsd.org/relayd.conf.5">relayd.conf(5)</a>.
<li>Added support for OCSP stapling
to <a href="https://man.openbsd.org/relayd.8">relayd(8)</a>.
<li>Added <a href="https://man.openbsd.org/relayd.8">relayd(8)</a>
support for SNI with new 'tls keypair' option to load additional
certificates.
<li>Added support for 'from/to address[/prefix]'
in <a href="https://man.openbsd.org/relayd.8">relayd(8)</a> filter rules.
<li>Implemented RFC 8555 "Automatic Certificate Management
Environment (ACME)" to
enable <a href="https://man.openbsd.org/acme-client.1">acme-client(1)</a>
to communicate with the v02 Let's Encrypt API. Read the
<a href="faq/upgrade66.html">upgrade guide</a> for more information.
<li><a href="https://man.openbsd.org/tcpdump.8">tcpdump(8)</a>
support for '-T erspan' and
arbitrary <a href="https://man.openbsd.org/gre.4">gre(4)</a>
protocols.
<li>Allowed specifying area by number as well as id
in <a href="https://man.openbsd.org/ospf6d.8">ospf6d(8)</a>.
<li><a href="https://man.openbsd.org/ospfctl.8">ospfctl(8)</a> now
accepts both address and number format for 'ospfctl show
database area XXX'.
<li><a href="https://man.openbsd.org/ospfd.8">ospfd(8)</a> reload
improvements.
<li>Added a check
to <a href="https://man.openbsd.org/ospfd.8">ospfd(8)</a>
and <a href="https://man.openbsd.org/ospf6d.8">ospf6d(8)</a>
that any "depend on" interfaces are in the same rdomain.
<li>Make 'passive' (announce a network configured on an interface
as a stub network) work with P2P interfaces
in <a href="https://man.openbsd.org/ospfd.8">ospfd(8)</a>.
<li>Shutdown the service port when behind a captive portal
with <a href="https://man.openbsd.org/unwind.8">unwind(8)</a>,
allowing bypass of captive portals that correctly answer SOA
queries for the root zone and return NXDOMAIN for the captive
portal redirect domain if edns0 is present.
<li>Implemented DNS block lists
in <a href="https://man.openbsd.org/unwind.8">unwind(8)</a>.
<li>Added support for IKEv2 Message Fragmentation (RFC 7383)
to <a href="https://man.openbsd.org/iked.8">iked(8)</a>.
<li>Enabled switching between wireless and wired interfaces in
dhclient(8), setting the default route with the interface
address and allowing two default routes in the routing table. A
wired interface will be preferred when connected.
<li>Added consistent use of 'ifconfig $_if [-inet| -inet6]' to clear existing
configurations completely after restarting an install.
<li>Added 'forwarded' log format extending the 'combined' log
format in <a href="https://man.openbsd.org/httpd.8">httpd(8)</a>.
</ul>
<li>Assorted improvements:
<ul>
<li> The filesystem buffer cache now more aggressively uses memory
outside the DMA region, to improve cache performance on amd64
machines.
<li> The BER API previously internal to
<a href="https://man.openbsd.org/ldap.1">ldap(1)</a>,
<a href="https://man.openbsd.org/ldapd.8">ldapd(8)</a>,
<a href="https://man.openbsd.org/ypldap.8">ypldap(8)</a>, and
<a href="https://man.openbsd.org/snmpd.8">snmpd(8)</a> has been moved into
libutil.
See <a href="https://man.openbsd.org/ber_read_elements.3">ber_read_elements(3)</a>.
<li>Removed the old
userland <a href="https://man.openbsd.org/realpath.3">realpath(3)</a>
and replaced it with __realpath(2), a kernel
implementation. This will prevent
calling <a href="https://man.openbsd.org/readlink.2">readlink(2)</a>
on every component of a path and improve performance for
<a href="https://man.openbsd.org/unveil.2">unveil(2)</a>.
<li><a href="https://man.openbsd.org/ld.so.1">ld.so(1)</a> speedups,
improving dynamic linker performance for large objects.
<li>Modified <a href="https://man.openbsd.org/systat.1">systat(1)</a>
to allow the use of 'b' to switch to stats since boot.
<li>From <a href="https://man.openbsd.org/perldoc.1">perldoc(1)</a>,
always produce <a href="https://man.openbsd.org/man.7">man(7)</a>
output in UTF-8, which gives better results with our
<a href="https://man.openbsd.org/mandoc.1">mandoc(1)</a>
renderer no matter which <code>LC_CTYPE</code> the user selected.
</ul>
<li>VMM/VMD improvements
<ul>
<li>Added support for 'boot device'
to <a href="https://man.openbsd.org/vm.conf.5#boot_device">vm.conf(5)</a>
grammar, the '-B device' counterpart
from <a href="https://man.openbsd.org/vmctl.8">vmctl(8)</a>.
<li>Emulated kvm pvclock
in <a href="https://man.openbsd.org/vmm.4">vmm(4)</a>, compatible
with <a href="https://man.openbsd.org/pvclock.4">pvclock(4)</a> in
OpenBSD.
<li>Enabled reporting of the vm state through use of
the <a href="https://man.openbsd.org/vmctl.8">vmctl(8)</a>
'status' command.
<li>Synced vm state
in <a href="https://man.openbsd.org/vmd.8">vmd(8)</a> when
(un)pausing a vm to ensure
both <a href="https://man.openbsd.org/vmm.4">vmm(4)</a>
and <a href="https://man.openbsd.org/vmd.8">vmd(8)</a> processes
know the vm is paused.
<li>Handled some unhandled instructions for SVM which led
to <a href="https://man.openbsd.org/vmm.4">vmm(4)</a> guest
termination, as well as RDTSCP and INVLPGA instructions.
<li>Modified <a href="https://man.openbsd.org/vmm.4">vmm(4)</a> to
flush guest TLB entries if the guest disables paging.
</ul>
<li>OpenSMTPD 6.6.0
<ul>
<li>New Features
<ul>
<li>Introduced support for ECDSA certificates with an ECDSA privsep engine.
<li>Introduced builtin filters to allow basic filtering of incoming sessions
in <a href="https://man.openbsd.org/smtpd.8">smtpd(8)</a>.
<li>Introduced option to deliver junk to a Junk folder
in <a href="https://man.openbsd.org/mail.maildir.8">mail.maildir(8)</a>.
</ul>
<li>Bug fixes
<ul>
<li>Fixed the <a href="https://man.openbsd.org/smtp.1">smtp(1)</a> client
so it uses correct default port for SMTPS.
<li>Fixed an <a href="https://man.openbsd.org/smtpd.8">smtpd(8)</a> crash on
excessively large input.
<li>Ensured mail rejected by an LMTP server will stay queued rather than bouncing.
</ul>
<li>Experimental Features
<ul>
<li>Introduced a filters API to allow writing standalone filters
for <a href="https://man.openbsd.org/smtpd.8">smtpd(8)</a>,
with multiple filters made available in ports.
<li>Introduced support for proxy-v2 protocol
allowing <a href="https://man.openbsd.org/smtpd.8">smtpd(8)</a> to
operate behind proxy.
</ul>
</ul>
<li>LibreSSL 3.0.2
<ul>
<li>API and Documentation Enhancements
<ul>
<li>Completed the port of RSA_METHOD accessors from the
OpenSSL 1.1 API.
<li>Documented undescribed options and removed unfunctional
options description
in <a href="https://man.openbsd.org/openssl.1">openssl(1)</a>
manual.
</ul>
<li>Compatibility Changes
<ul>
</ul>
<li>Testing and Proactive Security
<ul>
<li>
A plethora of small fixes due to regular oss-fuzz testing.
<li>
Various side channels in DSA and ECDSA were addressed. These
are some of the many issues found in an extensive systematic
analysis of bignum usage by Samuel Weiser, David Schrammel et
al.
<li>
Try to compute the cofactor if a nonsensical value was
provided for ECC parameters. Fix from Billy Brumley.
</ul>
<li>Internal Improvements
<ul>
</ul>
<li>Portable Improvements
<ul>
<li>Enabled performance optimizations when building with Visual
Studio on Windows.
<li>Enabled <a href="https://man.openbsd.org/openssl.1">openssl(1)</a>
speed subcommand on Windows platform.
</ul>
<li>Bug Fixes
<ul>
<li>Fixed issue where SRTP extension would not be sent by
server.
<li>Fixed incorrect carry operation in 512 addition for
Streebog.
<li>Fixed -modulus option with
<a href="https://man.openbsd.org/openssl.1">openssl(1)</a>
dsa subcommand.
<li>Fixed PVK format output issue with
<a href="https://man.openbsd.org/openssl.1">openssl(1)</a>
dsa and rsa subcommand.
<li>Fixed a padding oracle attack in <code>PKCS7_dataDecode()</code>
and <code>CMS_decrypt_set1_pkey()</code> (<code>CMS</code>
is currently disabled). From Bernd Edlinger.
</ul>
</ul>
<li>OpenSSH 8.1
<ul>
<li>New Features
<ul>
<li><a href='https://man.openbsd.org/ssh.1'>ssh(1)</a>: Allow %n to be
expanded in ProxyCommand strings
<li><a href='https://man.openbsd.org/ssh.1'>ssh(1)</a>,
<a href='https://man.openbsd.org/sshd.8'>sshd(8)</a>: Allow
prepending a list of algorithms to the default set by
starting the list with the '^' character, E.g.
"HostKeyAlgorithms ^ssh-ed25519"
<li><a href='https://man.openbsd.org/ssh-keygen.1'>ssh-keygen(1)</a>:
add an experimental lightweight signature and verification
ability. Signatures may be made using regular ssh keys held
on disk or stored in a ssh-agent and verified against an
authorized_keys-like list of allowed keys. Signatures embed
a namespace that prevents confusion and attacks between
different usage domains (e.g. files vs email).
<li><a href='https://man.openbsd.org/ssh-keygen.1'>ssh-keygen(1)</a>:
print key comment when extracting public key from a private
key. <a href='https://bugzilla.mindrot.org/show_bug.cgi?id=3052'>bz#3052</a>
<li><a href='https://man.openbsd.org/ssh-keygen.1'>ssh-keygen(1)</a>:
accept the verbose flag when searching for host keys in
known hosts (i.e. "ssh-keygen -vF host") to print the
matching host's random-art signature
too. <a href='https://bugzilla.mindrot.org/show_bug.cgi?id=3003'>bz#3003</a>
<li>All: support PKCS8 as an optional format for storage of
private keys to disk. The OpenSSH native key format remains
the default, but PKCS8 is a superior format to PEM if
interoperability with non-OpenSSH software is required, as
it may use a less insecure key derivation function than
PEM's.
</ul>
<li>Bugfixes
<ul>
<li><a href='https://man.openbsd.org/ssh.1'>ssh(1)</a>: if a
PKCS#11 token returns no keys then try to login and
refetch them. Based on patch from Jakub
Jelen; <a href='https://bugzilla.mindrot.org/show_bug.cgi?id=2430'>bz#2430</a>
<li><a href='https://man.openbsd.org/ssh.1'>ssh(1)</a>:
produce a useful error message if the user's shell is set
incorrectly during "match exec"
processing. <a href='https://bugzilla.mindrot.org/show_bug.cgi?id=2791'>bz#2791</a>
<li><a href='https://man.openbsd.org/sftp.1'>sftp(1)</a>:
allow the maximum uint32 value for the argument passed to
-b which allows better error messages from later
validation.
<a href='https://bugzilla.mindrot.org/show_bug.cgi?id=3050'>bz#3050</a>
<li><a href='https://man.openbsd.org/ssh.1'>ssh(1)</a>:
avoid pledge sandbox violations in some combinations of
remote forwarding, connection multiplexing and
ControlMaster.
<li><a href='https://man.openbsd.org/ssh-keyscan.1'>ssh-keyscan(1)</a>:
include SHA2-variant RSA key algorithms in KEX proposal;
allows ssh-keyscan to harvest keys from servers that
disable old SHA1
ssh-rsa. <a href='https://bugzilla.mindrot.org/show_bug.cgi?id=3029'>bz#3029</a>
<li><a href='https://man.openbsd.org/sftp.1'>sftp(1)</a>:
print explicit "not modified" message if a file was
requested for resumed download but was considered already
complete.
<a href='https://bugzilla.mindrot.org/show_bug.cgi?id=2978'>bz#2978</a>
<li><a href='https://man.openbsd.org/sftp.1'>sftp(1)</a>:
fix a typo and make <esc><right> move right to the
closest end of a word just like <esc><left> moves
left to the closest beginning of a word.
<li><a href='https://man.openbsd.org/sshd.8'>sshd(8)</a>:
cap the number of permitopen/permitlisten directives
allowed to appear on a single authorized_keys line.
<li>All: fix a number of memory leaks (one-off or on exit paths).
<li>Regression tests: a number of fixes and improvements,
including fixes to the interop tests, adding the ability
to run most tests on builds that disable OpenSSL support,
better support for running tests under Valgrind and a
number of bug-fixes.
<li><a href='https://man.openbsd.org/ssh.1'>ssh(1)</a>,
<a href='https://man.openbsd.org/sshd.8'>sshd(8)</a>:
check for convtime() refusing to accept times that resolve
to LONG_MAX Reported by Kirk Wolf bz2977
<li><a href='https://man.openbsd.org/ssh.1'>ssh(1)</a>:
slightly more instructive error message when the user
specifies multiple -J options on the command-line. bz3015
<li><a href='https://man.openbsd.org/ssh-agent.1'>ssh-agent(1)</a>:
process agent requests for RSA certificate private keys
using correct signature algorithm when requested. bz3016
<li><a href='https://man.openbsd.org/sftp.1'>sftp(1)</a>:
check for user@host when parsing sftp target. This allows
user@[1.2.3.4] to work without a
path. <a href='https://bugzilla.mindrot.org/show_bug.cgi?id=2999'>bz#2999</a>
<li><a href='https://man.openbsd.org/sshd.8'>sshd(8)</a>:
enlarge format buffer size for certificate serial number
so the log message can record any 64-bit integer without
truncation. <a href='https://bugzilla.mindrot.org/show_bug.cgi?id=3012'>bz#3012</a>
<li><a href='https://man.openbsd.org/sshd.8'>sshd(8)</a>:
for PermitOpen violations add the remote host and port to
be able to more easily ascertain the source of the
request. Add the same logging for PermitListen violations
which where not previously logged at all.
<li><a href='https://man.openbsd.org/scp.1'>scp(1)</a>,
<a href='https://man.openbsd.org/sftp.1'>sftp(1)</a>:
use the correct POSIX format style for left justification
for the transfer progress
meter. <a href='https://bugzilla.mindrot.org/show_bug.cgi?id=3002'>bz#3002</a>
<li><a href='https://man.openbsd.org/sshd.8'>sshd(8)</a>
when examining a configuration using sshd -T, assume any
attribute not provided by -C does not match, which allows
it to work when sshd_config contains a Match directive
with or without -C.
<a href='https://bugzilla.mindrot.org/show_bug.cgi?id=2858'>bz#2858</a>
<li><a href='https://man.openbsd.org/ssh.1'>ssh(1)</a>,
<a href='https://man.openbsd.org/ssh-keygen.1'>ssh-keygen(1)</a>:
downgrade PKCS#11 "provider returned no slots" warning
from log level error to debug. This is common when
attempting to enumerate keys on smartcard readers with no
cards plugged
in. <a href='https://bugzilla.mindrot.org/show_bug.cgi?id=3058'>bz#3058</a>
<li><a href='https://man.openbsd.org/ssh.1'>ssh(1)</a>,
<a href='https://man.openbsd.org/ssh-keygen.1'>ssh-keygen(1)</a>:
do not unconditionally log in to PKCS#11 tokens. Avoids
spurious PIN prompts for keys not selected for
authentication
in <a href='https://man.openbsd.org/ssh.1'>ssh(1)</a> and
when listing public keys available in a token
using <a href='https://man.openbsd.org/ssh-keygen.1'>ssh-keygen(1)</a>.
<a href='https://bugzilla.mindrot.org/show_bug.cgi?id=3006'>bz#3006</a>
</ul>
</ul>
<li>Mandoc
<ul>
<li>Slowly start implementing tagging support for
<a href="https://man.openbsd.org/man.7">man(7)</a> pages:
tag alphabetic arguments of <code>.IP</code>, <code>.TP</code>,
and <code>.TQ</code> macros.
<li>In HTML output, wrap text and phrasing elements in paragraphs
unless already contained in flow containers; never put them
directly into sections. This helps to format paragraphs with
the CSS class selector <code>.Pp</code>.
<li>Implement the <a href="https://man.openbsd.org/roff.7">roff(7)</a>
<code>.break</code> request to break out of a <code>.while</code>
loop.
<li>If messages are shown and output is printed without a pager,
display a heads-up on standard error output at the end because
otherwise, users may easily miss the messages.
<li>Let <code>mandoc.css</code> support
<code>prefers-color-scheme: dark</code>.
<li>For pages lacking a SYNOPSIS, let
<a href="https://man.openbsd.org/man.1">man(1)</a>
show the NAME section.
</ul>
<li><p>Ports and packages:
<ul>
</ul>
<p>Many pre-built packages for each architecture:
<!-- number of FTP packages minus SHA256, SHA256.sig, index.txt -->
<ul style="column-count: 3">
<li>aarch64: 10075
<li>amd64: 10736
<li>armv7: 8943
<li>i386: 10682
<li>mips64: 7921
<li>mips64el: 6583
<li>powerpc: 9700
<li>sparc64: 9685
</ul>
<li>As usual, steady improvements in manual pages and other documentation.
<li>The system includes the following major components from outside suppliers:
<ul>
<li>Xenocara (based on X.Org 7.7 with xserver 1.20.5 + patches,
freetype 2.10.1, fontconfig 2.12.4, Mesa 19.0.8, xterm 344,
xkeyboard-config 2.20 and more)
<li>LLVM/Clang 8.0.1 (+ patches)
<li>GCC 4.2.1 (+ patches) and 3.3.6 (+ patches)
<li>Perl 5.28.2 (+ patches)
<li>NSD 4.2.2
<li>Unbound 1.9.4
<li>Ncurses 5.7
<li>Binutils 2.17 (+ patches)
<li>Gdb 6.3 (+ patches)
<li>Awk Aug 10, 2011 version
<li>Expat 2.2.8
</ul>
</ul>
</section>
<hr>
<section id=install>
<h3>How to install</h3>
<p>
Please refer to the following files on the mirror site for
extensive details on how to install OpenBSD 6.6 on your machine:
<ul>
<li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.6/alpha/INSTALL.alpha">
.../OpenBSD/6.6/alpha/INSTALL.alpha</a>
<li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.6/amd64/INSTALL.amd64">
.../OpenBSD/6.6/amd64/INSTALL.amd64</a>
<li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.6/arm64/INSTALL.arm64">
.../OpenBSD/6.6/arm64/INSTALL.arm64</a>
<li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.6/armv7/INSTALL.armv7">
.../OpenBSD/6.6/armv7/INSTALL.armv7</a>
<li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.6/hppa/INSTALL.hppa">
.../OpenBSD/6.6/hppa/INSTALL.hppa</a>
<li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.6/i386/INSTALL.i386">
.../OpenBSD/6.6/i386/INSTALL.i386</a>
<li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.6/landisk/INSTALL.landisk">
.../OpenBSD/6.6/landisk/INSTALL.landisk</a>
<li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.6/loongson/INSTALL.loongson">
.../OpenBSD/6.6/loongson/INSTALL.loongson</a>
<li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.6/luna88k/INSTALL.luna88k">
.../OpenBSD/6.6/luna88k/INSTALL.luna88k</a>
<li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.6/macppc/INSTALL.macppc">
.../OpenBSD/6.6/macppc/INSTALL.macppc</a>
<li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.6/octeon/INSTALL.octeon">
.../OpenBSD/6.6/octeon/INSTALL.octeon</a>
<li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.6/sparc64/INSTALL.sparc64">
.../OpenBSD/6.6/sparc64/INSTALL.sparc64</a>
</ul>
</section>
<hr>
<section id=quickinstall>
<p>
Quick installer information for people familiar with OpenBSD, and the use of
the "<a href="https://man.openbsd.org/disklabel.8">disklabel</a> -E" command.
If you are at all confused when installing OpenBSD, read the relevant
INSTALL.* file as listed above!
<h3>OpenBSD/alpha:</h3>
<p>
Write <i>floppy66.fs</i> or <i>floppyB66.fs</i> (depending on your machine)
to a diskette and enter <i>boot dva0</i>.
Refer to INSTALL.alpha for more details.
<p>
Make sure you use a properly formatted floppy with NO BAD BLOCKS or your install
will most likely fail.
<h3>OpenBSD/amd64:</h3>
<p>
If your machine can boot from CD, you can write <i>install66.iso</i> or
<i>cd66.iso</i> to a CD and boot from it.
You may need to adjust your BIOS options first.
<p>
If your machine can boot from USB, you can write <i>install66.fs</i> or
<i>miniroot66.fs</i> to a USB stick and boot from it.
<p>
If you can't boot from a CD, floppy disk, or USB,
you can install across the network using PXE as described in the included
INSTALL.amd64 document.
<p>
If you are planning to dual boot OpenBSD with another OS, you will need to
read INSTALL.amd64.
<h3>OpenBSD/arm64:</h3>
<p>
Write <i>miniroot66.fs</i> to a disk and boot from it after connecting
to the serial console. Refer to INSTALL.arm64 for more details.
<h3>OpenBSD/armv7:</h3>
<p>
Write a system specific miniroot to an SD card and boot from it after connecting
to the serial console. Refer to INSTALL.armv7 for more details.
<h3>OpenBSD/hppa:</h3>
<p>
Boot over the network by following the instructions in INSTALL.hppa or the
<a href="hppa.html#install">hppa platform page</a>.
<h3>OpenBSD/i386:</h3>
<p>
If your machine can boot from CD, you can write <i>install66.iso</i> or
<i>cd66.iso</i> to a CD and boot from it.
You may need to adjust your BIOS options first.
<p>
If your machine can boot from USB, you can write <i>install66.fs</i> or
<i>miniroot66.fs</i> to a USB stick and boot from it.
<p>
If you can't boot from a CD, floppy disk, or USB,
you can install across the network using PXE as described in
the included INSTALL.i386 document.
<p>
If you are planning on dual booting OpenBSD with another OS, you will need to