------------------------------------------------------------------------ - OpenBSD 4.3 RELEASED ------------------------------------------------- May 1, 2008. We are pleased to announce the official release of OpenBSD 4.3. This is our 23nd release on CD-ROM (and 24rd via FTP). We remain proud of OpenBSD's record of more than ten years with only two remote holes in the default install. As in our previous releases, 4.3 provides significant improvements, including new features, in nearly all areas of the system: - New/extended platforms: o OpenBSD/sparc64. SMP support. This should work on all supported systems, with the exception of the Sun Enterprise 10000. o OpenBSD/hppa. K-class servers like the K200 and K410 are supported now. o OpenBSD/mvme88k SMP support on MVME188 and MVME188A systems. 88110 processor, and thus MVME197LE/SP/DP boards, are supported now. o OpenBSD/sgi. Contains many new drivers, however the kernel requires an important errata fix. - Improved hardware support, including: o The bge(4) driver now supports BCM5906/BCM5906M 10/100 and BCM5755 10/100/Gigabit Ethernet devices. o The cas(4) driver now supports Cassini+ 10/100/Gigabit Ethernet devices. o The em(4) driver now supports ICH9 10/100 and 10/100/Gigabit Ethernet devices. o The gem(4) driver now supports the onboard 1000base-SX interface on the Sun Fire V880 server. o The ixgb(4) driver now supports the Sun 10Gb PCI-X Ethernet devices. o The msk(4) driver now supports Yukon FE+ 10/100 and Yukon Supreme 10/100/Gigabit Ethernet devices. o The nfe(4) driver now supports MCP73, MCP77 and MCP79 10/100/Gigabit Ethernet devices. o The ral(4) driver now supports RT2800 based wireless network devices. o The cmpci(4) driver now supports CMI8768 based audio adapters. o The it(4) driver now supports ITE IT8705F/8712F/8716F/8718F/8726F and SiS SiS950 ICs. Watchdog timer functionality added. o The mfi(4) driver now supports Dell CERC6/PERC6 and LSI SAS1078 RAID controllers. o The viapm(4) driver now supports the VIA VT8237S south bridges SMBus controller. o Support for hotplugging ExpressCard devices has been added. o New amdpcib(4) driver for the AMD-8111 series LPC bridge and timecounter on amd64. o New pctr(4) driver for the CPU performance counters on amd64. o New bwi(4) driver for the Broadcom AirForce IEEE 802.11b/g wireless network device. o New envy(4) driver for the VIA Envy24 audio device. o New et(4) driver for the Agere/LSI ET1310 10/100/Gigabit Ethernet device. o New etphy(4) driver for the Agere/LSI ET1011 TruePHY Gigabit Ethernet PHY. o New amdpcib(4) driver for the AMD-8111 series LPC bridge and timecounter on i386. o New glxpcib(4) driver for the AMD CS5536 PCI-ISA bridge with timecounter, watchdog timer, and GPIO on i386. o New iwn(4) driver for the Intel Wireless WiFi Link 4965AGN IEEE 802.11a/b/g/Draft-N wireless network device. o New msts(4) line discipline to interface Meinberg Standard Time String devices and to provide a timedelta sensor. o New gbe(4) driver for the SGI Graphics Back End (GBE) Frame Buffer on sgi. o New mkbc(4) driver for the Moosehead PS/2 Controller on sgi. o New power(4) driver for the power button on sgi. o New ecadc(4) driver for the Environmental Monitoring Subsystem temperature sensor on sparc64. o New tda(4) driver for the fan controller on the Sun Blade 1000/2000, making these machines much less noisy. o New spdmem(4) driver retrieves information about memory modules. o New thmc(4) driver for the TI THMC50, Analog ADM1022/1028 temperature sensor. o New uchcom(4) driver for the WinChipHead CH341/340 based USB serial adapter. o New umbg(4) driver for the Meinberg Funkuhren USB5131 radio clock to provide a timedelta sensor. o New upgt(4) driver for the Conexant/Intersil PrismGT SoftMAC USB IEEE 802.11b/g wireless network device. o New wbng(4) driver for the Winbond W83793G temperature, voltage, and fan sensor. o New wbsio(4) driver for the Winbond LPC Super I/O ICs. o New adl(4) driver for the Andigilog aSC7621 temperature, voltage, and fan sensor. o The siop(4) driver now supports the (non-PCI) NCR 53c720/770 in big-endian mode. o New lmn(4) driver for the National Semiconductor LM93 sensor. - New tools: o snmpd(8), implementing the Simple Network Management Protocol. o The snmpctl(8) program controls the SNMP daemon. o The pcidump(8) utility displays the device address, vendor, and product name of PCI devices. o ldattach(8) is used to attach a line discipline to a serial line to allow for in-kernel processing of the received and/or sent data. - New functionality: o eeprom(8) is now able to display the OpenPROM device tree on systems that have it. o Support for X11 on sgi has been added. o The periodic security(8) reports now include package changes. o The cmpci(4) driver now supports multichannel audio playback if the hardware supports it. o The auvia(4) driver now supports multichannel audio playback if the hardware supports it. o The auich(4) driver now supports recording from the microphone as well as full-duplex mode. o The eso(4) driver now supports recording as well as full-duplex mode. o The ffs layer is now 64-bit disk block address clean. This means that disks, partitions and filesystems larger than 2TB are now supported, with the exception of statfs(2) and quotas. o DMA is now enabled for 1-sector devices such as flash drives, providing significant speed improvement. o Sparc and Sparc64 disklabels now provide automatic recognition of ext2fs partitions. o Filesystems on USB devices are automatically dismounted if the device is disconnected. o The configuration of carp(4) load balancing has been vastly simplified. o fstab(5) entries referring to non-existent mount points are now ignored, allowing subsequent entries to be processed. o Additional configuration files can now be included in pf.conf(5). o sppp(4) now has IPv6 support. - Assorted improvements and code cleanup: o Improved support for an lkm(4) subsystem on amd64. o ossaudio(3) received several bug fixes and enhancements including but not limited to improved recording and full-duplex support. o audio(4) received several bug fixes and enhancements including but not limited to improved recording and full-duplex support. o make(1) was heavily modified, mostly to improve support for parallel build. Parallel builds now run commands in the same way the sequential builds do, and the output from commands is more readable. A large part of the source tree, xenocara, and quite a few ports now build correctly with make -j. o rcs tools improvements and bug fixes. o RTM_VERSION was increased so that all routing messages could be modified to include additional fields for upcoming networking features. o sendbug(1) has stricter comment parsing, to avoid mangling diffs. o umass(4) devices no longer detect bogus LUNs. o USB st(4) devices can now successfully disconnect. o More deviant umass devices accommodated. o svnd(4) devices now work on block devices. o disklabel(8) is now aware of NTFS partitions. o raidctl(8) now correctly handles trailing whitespace in configuration files. o mt(1) no longer triggers panics when processing the 'rewoffl' command. o raid(4) devices no longer hang when searching for components during boot. o sd(4) devices no longer receive spurious SYNCHRONIZE CACHE commands that confuse some hardware. o sd(4) no longer claim that SYNCHRONIZE CACHE commands are 16 bytes long when they are actually 10 bytes. Some devices took this too literally. o dhcpd(8) now always issues packets equal or larger than the minimum IP MTU. o The disklabel(8) -E mode does not allow manual editing of the 'c' partition, which is always set to cover the entire disk. o The disklabel(8) -E mode does not allow changing the cpg value of a partition. o The disklabel(8) -E mode command 'r' now displays the list of free chunks on the disk. o The disklabel(8) -E mode no longer permits assigning arbitrary sizes to FS_BOOT and FS_UNUSED partitions. o The bge(4) driver problems receiving jumbo frames have been resolved. o Many dangerous unsigned comparisons with -1 when checking the results of read and write calls have been eliminated. o The new M_ZERO flag for malloc(9) replaces many malloc+bzero/memset combinations, fixing a number of bugs in memory initialization and shrinking the kernel. o dhcpd(8) now correctly constructs response packets that use the overflow buffers to store options. o SCSI drivers are more reliable in MP machines due to better locking around command completion. o TCP responses to highly fragmented packets are now constructed without risking corruption of kernel memory. o Sockets now allow 4095 multicast group memberships. - Install/Upgrade process changes: o All platforms now have serial console support when installing. o Serial console speed is detected and appropriate /etc/ttys entries automatically created. o OpenBSD/vax now also has both kinds of install ISO CD images. o DNS server addresses are remembered if an install is restarted. o OpenBSD/sgi can now be installed using the glass console. - OpenBGPD 4.3: o Correctly handle prefixes which would cause a routing loop. o bgpctl's detailed RIB output shows additional attributes like extended communities or the cluster id list. - OpenNTPD 4.3: o Handle IP changes of clients more gracefully. o Log peer and sensor status to syslog if the majority of either is bad, or if a SIGINFO signal is received. o Allow offsetting of time sensors that have a systematic error. - OpenOSPFD 4.3: o Equal cost multipath support -- don't forget to set the right sysctls. o Parser and commandline options are now in sync with bgpd. - relayd 4.3: o hoststated(8)/hoststatectl(8) were renamed to relayd(8)/relayctl(8). o Improved configuration grammar for relayd.conf(5). o Allow to send SNMP traps via snmpd(8) when host states change. o Improved support for URL filtering and protocol actions. o Added support for UDP-based DNS relaying with request ID randomisation. o Various bug fixes, optimisations, and cleanups. o Improved reload support. - OpenSSH 4.8: o Added chroot(2) support for sshd(8), controlled by a new option "ChrootDirectory". Please refer to sshd_config(5) for details, and please use this feature carefully. o Linked sftp-server(8) into sshd(8). The internal sftp server is used when the command "internal-sftp" is specified in a Subsystem or ForceCommand declaration. When used with ChrootDirectory, the internal sftp server requires no special configuration of files inside the chroot environment. Please refer to sshd_config(5) for more information. o Added a protocol extension method "posix-rename@openssh.com" for sftp-server(8) to perform POSIX atomic rename() operations. o Removed the fixed limit of 100 file handles in sftp-server(8). The server will now dynamically allocate handles up to the number of available file descriptors. o ssh(1) will now skip generation of SSH protocol 1 ephemeral server keys when in inetd mode and protocol 2 connections are negotiated. This speeds up protocol 2 connections to inetd-mode servers that also allow Protocol 1. o Accept the PermitRootLogin directive in a sshd_config(5) Match block. Allows for, e.g. permitting root only from the local network. o Reworked sftp(1) argument splitting and escaping to be more internally consistent (i.e. between sftp commands) and more consistent with sh(1). Please note that this will change the interpretation of some quoted strings, especially those with embedded backslash escape sequences. o Support "Banner=none" in sshd_config(5) to disable sending of a pre-login banner (e.g. in a Match block). o ssh(1) ProxyCommands are now executed with $SHELL rather than /bin/sh. o ssh(1)'s ConnectTimeout option is now applied to both the TCP connection and the SSH banner exchange (previously it just covered the TCP connection). This allows callers of ssh(1) to better detect and deal with stuck servers that accept a TCP connection but don't progress the protocol, and also makes ConnectTimeout useful for connections via a ProxyCommand. o Many new regression tests, including interop tests against PuTTY's plink. o SSH2_MSG_UNIMPLEMENTED packets did not correctly reset the client keepalive logic, causing disconnections on servers that did not explicitly implement "keepalive@openssh.com". o ssh(1) used the obsolete SIG DNS RRtype for host keys in DNS, instead of the current standard RRSIG. o Correctly drain ACKs when a sftp(1) upload write fails midway, avoids a fatal() exit from what should be a recoverable condition. o Fixed packet size advertisements. Previously TCP and agent forwarding incorrectly advertised the channel window size as the packet size, causing fatal errors under some conditions. o Many more bugfixes. Please refer to the Release Notes. - Over 4,500 ports, minor robustness improvements in package tools. o Many pre-built packages for each architecture: i386: 4782 sparc64: 4613 alpha: 4233 sh: 2046 amd64: 4708 powerpc: 4634 sparc: 3159 m68k: 830 arm: 3377 hppa: 3971 m88k: 27 mips64: 1897 vax: 296 o Highlights include: o Gnome 2.20.3. o GNUstep 1.14.2. o KDE 3.5.8. o Mozilla Firefox 2.0.0.12. o Mozilla Thunderbird 2.0.0.12. o MySQL 5.0.51a o OpenMotif 2.3.0. o OpenOffice.org 2.3.1. o PostgreSQL 8.2.6. o Xfce 4.4.2. - As usual, steady improvements in manual pages and other documentation. - The system includes the following major components from outside suppliers: o Xenocara (based on X.Org 7.2 + patches, freetype 2.2.1, fontconfig 2.4.2, expat 2.0.0, Mesa 6.5.2, xterm 225 and more) o Gcc 2.95.3 (+ patches) and 3.3.5 (+ patches) o Perl 5.8.8 (+ patches) o Our improved and secured version of Apache 1.3, with SSL/TLS and DSO support o OpenSSL 0.9.7j (+ patches) o Groff 1.15 o Sendmail 8.14.1, with libmilter o Bind 9.3.4 (+ patches) o Lynx 2.8.5rel.4 with HTTPS and IPv6 support (+ patches) o Sudo 1.6.9p4 o Ncurses 5.2 o Latest KAME IPv6 o Heimdal 0.7.2 (+ patches) o Arla 0.35.7 o Binutils 2.15 (+ patches) o Gdb 6.3 (+ patches) If you'd like to see a list of what has changed between OpenBSD 4.2 and 4.3, look at http://www.OpenBSD.org/plus43.html Even though the list is a summary of the most important changes made to OpenBSD, it still is a very very long list. ------------------------------------------------------------------------ - SECURITY AND ERRATA -------------------------------------------------- We provide patches for known security threats and other important issues discovered after each CD release. As usual, between the creation of the OpenBSD 4.3 FTP/CD-ROM binaries and the actual 4.3 release date, our team found and fixed some new reliability problems (note: most are minor and in subsystems that are not enabled by default). Our continued research into security means we will find new security problems -- and we always provide patches as soon as possible. Therefore, we advise regular visits to http://www.OpenBSD.org/security.html and http://www.OpenBSD.org/errata.html Security patch announcements are sent to the security-announce@OpenBSD.org mailing list. For information on OpenBSD mailing lists, please see: http://www.OpenBSD.org/mail.html ------------------------------------------------------------------------ - CD-ROM SALES --------------------------------------------------------- OpenBSD 4.3 is also available on CD-ROM. The 3-CD set costs $50 CDN (EUR 50 including VAT) and is available via mail order and from a number of contacts around the world. The set includes a colourful booklet which carefully explains the installation of OpenBSD. A new set of cute little stickers is also included (sorry, but our FTP mirror sites do not support STP, the Sticker Transfer Protocol). As an added bonus, the second CD contains an audio track, a song entitled "Home to Hypocrisy". MP3 and OGG versions of the audio track can be found on the first CD. Lyrics (and an explanation) for the songs may be found at: http://www.OpenBSD.org/lyrics.html#43 Profits from CD sales are the primary income source for the OpenBSD project -- in essence selling these CD-ROM units ensures that OpenBSD will continue to make another release six months from now. The OpenBSD 4.3 CD-ROMs are bootable on the following four platforms: o i386 o amd64 o macppc o sparc64 (Other platforms must boot from floppy, network, or other method). For more information on ordering CD-ROMs, see: http://www.OpenBSD.org/orders.html The above web page lists a number of places where OpenBSD CD-ROMs can be purchased from. For our default mail order, go directly to: https://https.OpenBSD.org/cgi-bin/order or, for European orders: https://https.OpenBSD.org/cgi-bin/order.eu All of our developers strongly urge you to buy a CD-ROM and support our future efforts. Additionally, donations to the project are highly appreciated, as described in more detail at: http://www.OpenBSD.org/goals.html#funding ------------------------------------------------------------------------ - OPENBSD FOUNDATION --------------------------------------------------- For those unable to make their contributions as straightforward gifts, the OpenBSD Foundation (http://www.openbsdfoundation.org) is a Canadian not-for-profit corporation that can accept larger contributions and issue receipts. In some situations, their receipt may qualify as a business expense writeoff, so this is certainly a consideration for some organizations or businesses. There may also be exposure benefits since the Foundation may be interested in participating in press releases. In turn, the Foundation then uses these contributions to assist OpenBSD's infrastructure needs. Contact the foundation directors at directors@openbsdfoundation.org for more information. ------------------------------------------------------------------------ - T-SHIRT SALES -------------------------------------------------------- The OpenBSD distribution companies also sell tshirts and polo shirts. And our users like them too. We have a variety of shirts available, with the new and old designs, from our web ordering system at: https://https.OpenBSD.org/cgi-bin/order and for Europe: https://https.OpenBSD.org/cgi-bin/order.eu The OpenBSD 4.3 t-shirts are available now. The new shirt for 4.3 has a newly drawn version of Puffy (the blowfish) on a simple green shirt. We also sell our older shirts, as well as a selection of OpenSSH t-shirts. ------------------------------------------------------------------------ - FTP INSTALLS --------------------------------------------------------- If you choose not to buy an OpenBSD CD-ROM, OpenBSD can be easily installed via FTP. Typically you need a single small piece of boot media (e.g., a boot floppy) and then the rest of the files can be installed from a number of locations, including directly off the Internet. Follow this simple set of instructions to ensure that you find all of the documentation you will need while performing an install via FTP. With the CD-ROMs, the necessary documentation is easier to find. 1) Read either of the following two files for a list of ftp mirrors which provide OpenBSD, then choose one near you: http://www.OpenBSD.org/ftp.html ftp://ftp.OpenBSD.org/pub/OpenBSD/4.3/ftplist As of May 1, 2008, the following ftp mirror sites have the 4.3 release: ftp://ftp.kd85.com/pub/OpenBSD/4.3/ Austria ftp://ftp.stacken.kth.se/pub/OpenBSD/4.3/ Sweden ftp://ftp2.usa.openbsd.org/pub/OpenBSD/4.3/ NYC, USA ftp://ftp3.usa.openbsd.org/pub/OpenBSD/4.3/ CO, USA ftp://ftp5.usa.openbsd.org/pub/OpenBSD/4.3/ CA, USA ftp://rt.fm/pub/OpenBSD/4.3/ IL, USA The release is also available at the master site: ftp://ftp.openbsd.org/pub/OpenBSD/4.3/ Alberta, Canada However it is strongly suggested you use a mirror. Other mirror sites may take a day or two to update. 2) Connect to that ftp mirror site and go into the directory pub/OpenBSD/4.3/ which contains these files and directories. This is a list of what you will see: ANNOUNCEMENT amd64/ macppc/ sys.tar.gz Changelogs/ armish/ mvme68k/ tools/ HARDWARE ftplist packages/ vax/ PACKAGES hp300/ ports.tar.gz xenocara.tar.gz PORTS hppa/ root.mail zaurus/ README i386/ sparc/ SIZES landisk/ sparc64/ alpha/ mac68k/ src.tar.gz It is quite likely that you will want at LEAST the following files which apply to all the architectures OpenBSD supports. README - generic README HARDWARE - list of hardware we support PORTS - description of our "ports" tree PACKAGES - description of pre-compiled packages root.mail - a copy of root's mail at initial login. (This is really worthwhile reading). 3) Read the README file. It is short, and a quick read will make sure you understand what else you need to fetch. 4) Next, go into the directory that applies to your architecture, for example, i386. This is a list of what you will see: INSTALL.i386 cd43.iso floppyB43.fs pxeboot* INSTALL.linux cdboot* floppyC43.fs xbase43.tgz MD5 cdbr* game43.tgz xetc43.tgz base43.tgz cdemu43.iso index.txt xfont43.tgz bsd* comp43.tgz install43.iso xserv43.tgz bsd.mp* etc43.tgz man43.tgz xshare43.tgz bsd.rd* floppy43.fs misc43.tgz If you are new to OpenBSD, fetch _at least_ the file INSTALL.i386 and the appropriate floppy*.fs or install43.iso files. Consult the INSTALL.i386 file if you don't know which of the floppy images you need (or simply fetch all of them). If you use the install43.iso file (roughly 200MB in size), then you do not need the various *.tgz files since they are contained on that one-step ISO-format install CD. 5) If you are an expert, follow the instructions in the file called README; otherwise, use the more complete instructions in the file called INSTALL.i386. INSTALL.i386 may tell you that you need to fetch other files. 6) Just in case, take a peek at: http://www.OpenBSD.org/errata.html This is the page where we talk about the mistakes we made while creating the 4.3 release, or the significant bugs we fixed post-release which we think our users should have fixes for. Patches and workarounds are clearly described there. Note: If you end up needing to write a raw floppy using Windows, you can use "fdimage.exe" located in the pub/OpenBSD/4.3/tools directory to do so. ------------------------------------------------------------------------ - X.ORG FOR MOST ARCHITECTURES ----------------------------------------- X.Org has been integrated more closely into the system. This release contains X.Org 7.2.0. Most of our architectures ship with X.Org, including amd64, sparc, sparc64 and macppc. During installation, you can install X.Org quite easily. Be sure to try out xdm(1) and see how we have customized it for OpenBSD. ------------------------------------------------------------------------ - PORTS TREE ----------------------------------------------------------- The OpenBSD ports tree contains automated instructions for building third party software. The software has been verified to build and run on the various OpenBSD architectures. The 4.3 ports collection, including many of the distribution files, is included on the 3-CD set. Please see the PORTS file for more information. Note: some of the most popular ports, e.g., the Apache web server and several X applications, come standard with OpenBSD. Also, many popular ports have been pre-compiled for those who do not desire to build their own binaries (see BINARY PACKAGES, below). ------------------------------------------------------------------------ - BINARY PACKAGES WE PROVIDE ------------------------------------------- A large number of binary packages are provided. Please see the PACKAGES file (ftp://ftp.OpenBSD.org/pub/OpenBSD/4.3/PACKAGES) for more details. ------------------------------------------------------------------------ - SYSTEM SOURCE CODE --------------------------------------------------- The CD-ROMs contain source code for all the subsystems explained above, and the README (ftp://ftp.OpenBSD.org/pub/OpenBSD/4.3/README) file explains how to deal with these source files. For those who are doing an FTP install, the source code for all four subsystems can be found in the pub/OpenBSD/4.3/ directory: xenocara.tar.gz ports.tar.gz src.tar.gz sys.tar.gz ------------------------------------------------------------------------ - THANKS --------------------------------------------------------------- OpenBSD 4.3 includes artwork and CD artistic layout by Ty Semaka, who also arranged an audio track on the OpenBSD 4.3 CD set. Ports tree and package building by Antoine Jacoutot, Nikolay Sturm, Robert Nagy and Christian Weisgerber. System builds by Theo de Raadt, and Miod Vallat. X11 builds by Todd Fries. ISO-9660 filesystem layout by Theo de Raadt. We would like to thank all of the people who sent in bug reports, bug fixes, donation cheques, and hardware that we use. We would also like to thank those who pre-ordered the 4.3 CD-ROM or bought our previous CD-ROMs. Those who did not support us financially have still helped us with our goal of improving the quality of the software. Our developers are: Alexander Bluhm, Alexander von Gernler, Alexandre Anriot, Alexandre Ratchov, Anders Magnusson, Antoine Jacoutot, Artur Grabowski, Austin Hook, Bernd Ahlers, Bob Beck, Brad Smith, Bret Lambert, Can Erkin Acar, Chad Loder, Charles Longeau, Chris Kuethe, Christian Weisgerber, Christopher Pascoe, Claudio Jeker, Constantine A. Murenin, Dale Rahn, Damien Bergamini, Damien Miller, Daniel Hartmeier, Darren Tucker, David Gwynne, David Krause, Deanna Phillips, Eric Faurot, Esben Norby, Federico G. Schwindt, Felix Kronlage, Gilles Chehade, Gordon Willem Klok, Hans-Joerg Hoexer, Henning Brauer, Henric Jungheim, Hugh Graham, Ian Darwin, Igor Sobrado, Jacob Meuser, Jakob Schlyter, Janne Johansson, Jason Dixon, Jason McIntyre, Jasper Lievisse Adriaanse, Joel Knight, Joel Sing, Johan Mson Lindman, Jolan Luff, Jonathan Gray, Jordan Hargrave, Joris Vink, Kenneth R Westerback, Kevin Steves, Kjell Wooding, Kurt Miller, Landry Breuil, Laurent Fanis, Marc Balmer, Marc Espie, Marc Winiger, Marco Peereboom, Marco Pfatschbacher, Marco S Hyman, Marcus Glocker, Mark Kettenis, Mark Uemura, Markus Friedl, Martin Reindl, Martynas Venckus, Mathieu Sauve-Frankel, Mats O Jansson, Matthias Kilian, Matthieu Herrb, Michael Erdely, Michael Knudsen, Mike Belopuhov, Miod Vallat, Moritz Grimm, Moritz Jodeit, Niall O'Higgins, Nick Holland, Nikolay Sturm, Okan Demirmen, Oleg Safiullin, Otto Moerbeek, Owain Ainsworth, Peter Stromberg, Peter Valchev, Pierre-Yves Ritschard, Ray Lai, Reyk Floeter, Robert Nagy, Rui Reis, Ryan Thomas McBride, Saad Kadhi, Simon Bertrang, Stefan Kempf, Steven Mestdagh, Stuart Henderson, Ted Unangst, Theo de Raadt, Thordur I. Bjornsson, Tobias Stoeckmann, Tobias Weingartner, Todd C. Miller, Todd T. Fries, Tomoyuki Sakurai, Uwe Stuehler, Will Maier, Wim Vandeputte, Xavier Santolaria, Joshua Stein