• OpenBSD 7.7 released April 28, 2025 (2/2)

    From Theo de Raadt@21:1/5 to All on Sun Apr 27 12:10:35 2025
    [continued from previous message]

    o Added copy-mode-position-style and copy-mode-selection-style
    options to tmux(1).
    o Added a tmux(1) option allowing users to override the width of
    individual Unicode codepoints.
    o Fixed mouse_hyperlink format in tmux(1) copy mode.
    o Added S-Up and S-Down to move windows in tmux(1) tree mode.
    o Made tmux(1) correctly skip wide characters in hyperlinks.
    o Made tmux(1) only align panes and windows, not sessions.

    - LibreSSL version 4.1.0
    o Portable changes
    - Added initial experimental support for loongarch64.
    - Fixed compilation for mips32 and reenable CI.
    - Fixed CMake builds on FreeBSD.
    - Fixed the --prefix option for cmake --install.
    - Fixed tests for MinGW due to missing sh(1).
    o Internal improvements
    - Cleaned up the error implementation.
    - Many bug fixes and simplifications in the EC ASN.1 code.
    - Corrected DER encoding for EC keys and parameters.
    - Polished EC_POINT_{oct2point,point2oct}(3) internals.
    - Rewrote the wNAF code for fast ECDSA verification.
    - Improved the code setting compressed coordinates for EC
    points.
    - Reworked CPU capabilities detection for amd64 and aarch64.
    - New SHA-1, SHA-256 and SHA-512 assembly implementations for
    amd64. These make use of the SHA-NI instruction if it is
    available and replace the perl-generated assembly optimized
    for museum pieces. These are not yet enabled in
    libressl-portable.
    - New SHA-256 and SHA-512 assembly implementations for aarch64
    making use of the ARM Cryptographic Extension (CE). Not yet
    enabled in libressl-portable.
    - New simplified, readable MD5 implementation for amd64.
    - Rewrote BN_bn2binpad(3) and its lebin siblings.
    - The BIGNUMs in EC_GROUP and EC_POINT are now heap allocated.
    - Rewrote TS_ASN1_INTEGER_print_bio().
    - Improved bit counter handling in MD5.
    - Simplified and cleaned up the BN_RECP_CTX internals.
    - Improved SM4 to match other symmetric ciphers more closely.
    - Rewrote X509_NAME_oneline(3) and X509_NAME_print() using
    CBS/CBB.
    - CRLs are now cached in the issuer cache like certificates.
    - Replaced combinations of BN_MONT_CTX_new(3)/set with an
    internal BN_MONT_CTX_create().
    - Replaced BN_bn2hex(3) reimplementation in openssl(1) ca with
    a proper API call.
    - Fixed integer overflows due to signed shift in obj_dat.c.
    - Improved some X509_VERIFY_PARAM internals and avoid an out of
    bounds read from public API.
    - Imported ML-KEM 768 and 1024 from BoringSSL (not yet public
    API).
    o Compatibility changes
    - Added an OPENSSL_INIT_NO_ATEXIT flag for
    OPENSSL_init_crypto(3). It has no effect since LibreSSL
    doesn't call atexit(3).
    - Elliptic curve parameters are only accepted if they encode a
    built-in curve.
    - EC_METHOD is no longer public and the API exposing it has
    been removed. This includes EC_GROUP_new(3),
    EC_GFp_mont_method(3), EC_GROUP_method_of(3), and
    EC_METHOD_get_field_type().
    - The precomputation stubs for EC_GROUP were removed.
    - The API setting Jacobian projective coordinates for a point
    was removed as were EC_POINTs_{mul,make_affine}(3).
    - All elliptic curves over fields with less than 224 bits and a
    few more were removed from the built-in curves. This includes
    all WTLS curves and P-192.
    - It is no longer necessary to set RSA_FLAG_SIGN_VER to use the
    sign and verify handlers set with RSA_meth_set_{sign,verify}.
    - Removed the -C option to generate "C code" from the
    openssl(1) dh, dhparam, dsaparam, ecparam, and x509
    subcommands.
    - Removed #error in headers when OPENSSL_NO_* is defined.
    - CRYPTO_set_mem_functions(3) now matches OpenSSL 1.1 and
    CRYPTO_set_mem_ex_functions() was removed.
    - The tls_session_secret_cb_fn type now matches OpenSSL 1.1.
    - Unexport X509_NAME_print(3) and X509_OBJECT_up_ref_count(3).
    - const corrected UI_OpenSSL(3) and BN_MONT_CTX_copy(3).
    - Support OPENSSL_NO_FILENAMES.
    - Support SSL_OP_NO_RENEGOTIATION and
    SSL_OP_ALLOW_CLIENT_RENEGOTIATION.
    - Export PKCS12_key_gen_uni() again.
    o New features
    - libtls has a new tls_peer_cert_common_name(3) API call to
    retrieve the peer's common name without having to inspect the
    PEM.
    o Bug fixes
    - Plugged a leak in eckey_compute_pubkey().
    - Again allow the magic values -1, -2 and -3 for the salt
    length of an RSA-PSS key in the EVP_PKEY_CTX_ctrl_str(3)
    interface.
    - Fixed a few memory leaks in legacy code.
    o Documentation
    - The remaining undocumented public EVP API is now documented.
    - Reorganization of existing documentation for clarity and
    accuracy.
    o Testing and proactive security
    - Improved regress coverage of the EC code.

    - OpenSSH 10.0
    o Security fixes
    - sshd(8): fix the DisableForwarding directive, which was
    failing to disable X11 forwarding and agent forwarding as
    documented. X11 forwarding is disabled by default in the
    server and agent forwarding is off by default in the client.
    o Potentially incompatible changes
    - This release removes support for the weak DSA signature
    algorithm, completing the deprecation process that began in
    2015 (when DSA was disabled by default) and repeatedly warned
    over the last 12 months.
    - scp(1), sftp(1): pass "ControlMaster no" to ssh when invoked
    by scp & sftp. This disables implicit session creation by
    these tools when ControlMaster was set to yes/auto by
    configuration, which some users found surprising. This change
    will not prevent scp/sftp from using an existing multiplexing
    session if one had already been created.
    - This release has the version number 10.0 and announces itself
    as "SSH-2.0-OpenSSH_10.0". Software that naively matches
    versions using patterns like "OpenSSH_1*" may be confused by
    this.
    - sshd(8): this release removes the code responsible for the
    user authentication phase of the protocol from the per-
    connection sshd-session binary to a new sshd-auth binary.
    Splitting this code into a separate binary ensures that the
    crucial pre-authentication attack surface has an entirely
    disjoint address space from the code used for the rest of the
    connection. It also yields a small runtime memory saving as
    the authentication code will be unloaded after the
    authentication phase completes. This change should be largely
    invisible to users, though some log messages may now come
    from "sshd-auth" instead of "sshd-session". Downstream
    distributors of OpenSSH will need to package the sshd-auth
    binary.
    - sshd(8): this release disables finite field (a.k.a modp)
    Diffie-Hellman key exchange in sshd by default. Specifically,
    this removes the "diffie-hellman-group*" and
    "diffie-hellman-group-exchange-*" methods from the default
    KEXAlgorithms list. The client is unchanged and continues to
    support these methods by default. Finite field Diffie Hellman
    is slow and computationally expensive for the same security
    level as Elliptic Curve DH or PQ key agreement while offering
    no redeeming advantages. ECDH has been specified for the SSH
    protocol for 15 years and some form of ECDH has been the
    default key exchange in OpenSSH for the last 14 years.
    - sshd(8): this release removes the implicit fallback to
    compiled- in groups for Diffie-Hellman Group Exchange KEX
    when the moduli file exists but does not contain moduli
    within the client- requested range. The fallback behaviour
    remains for the case where the moduli file does not exist at
    all. This allows administrators more explicit control over
    which DH groups will be selected, but can lead to connection
    failures if the moduli file is edited incorrectly.
    o New features
    - ssh(1): the hybrid post-quantum algorithm
    mlkem768x25519-sha256 is now used by default for key
    agreement. This algorithm is considered to be safe against
    attack by quantum computers, is guaranteed to be no less
    strong than the popular curve25519-sha256 algorithm, has been
    standardised by NIST and is considerably faster than the
    previous default.
    - ssh(1): prefer AES-GCM to AES-CTR mode when selecting a
    cipher for the connection. The default cipher preference list
    is now ChaCha20/Poly1305, AES-GCM (128/256) followed by
    AES-CTR (128/192/256).
    - ssh(1): add %-token and environment variable expansion to the
    ssh_config SetEnv directive.
    - ssh(1): allow %-token and environment variable expansion in
    the ssh_config User directive, with the exception of %r and
    %C which would be self-referential.
    - ssh(1), sshd(8): add "Match version" support to ssh_config
    and sshd_config. Allows matching on the local version of
    OpenSSH, e.g. "Match version OpenSSH_10.*".
    - ssh(1): add support for "Match sessiontype" to ssh_config.
    Allows matching on the type of session initially requested,
    either "shell" for interactive sessions, "exec" for command
    execution sessions, "subsystem" for subsystem requests, such
    as sftp, or "none" for transport/forwarding-only sessions.
    - ssh(1): add support for "Match command ..." support to
    ssh_config, allowing matching on the remote command as
    specified on the command-line.
    - ssh(1): allow 'Match tagged ""' and 'Match command ""' to
    match empty tag and command values respectively.
    - sshd(8): allow glob(3) patterns to be used in sshd_config
    AuthorizedKeysFile and AuthorizedPrincipalsFile directives.
    - ssh(1): support the VersionAddendum in the client, mirroring
    the option of the same name in the server.
    - ssh-agent(1): the agent will now delete all loaded keys when
    signaled with SIGUSR1. This allows deletion of keys without
    having access to $SSH_AUTH_SOCK.
    - ssh-keygen(1): support FIDO tokens that return no attestation
    data, e.g. recent WinHello.
    - ssh-agent(1): add a "-Owebsafe-allow=..." option to allow the
    default FIDO application ID allow-list to be overridden.
    - Add a work-in-progress tool to verify FIDO attestation blobs
    that ssh-keygen can optionally write when enrolling FIDO
    keys. This tool is available under
    regress/misc/ssh-verify-attestation for experimentation but
    is not installed by "make install".
    - ssh-keygen(1): allow "-" as output file for moduli screening.
    o Bugfixes
    - sshd(8): remove assumption that the sshd_config and any
    configs it includes can fit in a (possibly enlarged) socket
    buffer. Previously it was possible to create a sufficiently
    large configuration that could cause sshd to fail to accept
    any connection. sshd(8) will now actively manage sending its
    config to the sshd-session sub-process.
    - ssh(1): don't start the ObscureKeystrokeTiming mitigations if
    there has been traffic on a X11 forwarding channel recently.
    Should fix X11 forwarding performance problems when this
    setting is enabled.
    - ssh(1): prohibit the comma character in hostnames accepted,
    but allow an underscore as the first character in a hostname.
    - sftp(1): set high-water when resuming a "put". Prevents bogus
    "server reordered acks" debug message.
    - ssh(1), sshd(8): fix regression in openssh-9.8, which would
    fail to accept "Match criteria=argument" as well as the
    documented "Match criteria argument" syntax in ssh_config and
    sshd_config.
    - sftp(1), ssh(1): fix a number possible NULL dereference bugs,
    including Coverity CIDs 405019 and 477813.
    - sshd(8): fix PerSourcePenalty incorrectly using "crash"
    penalty when LoginGraceTime was exceeded.
    - sshd(8): fix "Match invalid-user" from incorrectly being
    activated in initial configuration pass when no other
    predicates were present on the match line
    - sshd(8): fix debug logging of user specific delay.
    - sshd(8): improve debug logging across sub-process boundaries.
    Previously some log messages were lost early in the sshd-auth
    and sshd-session processes' life.
    - ssh(1): require control-escape character sequences passed via
    the '-e ^x' command-line to be exactly two characters long.
    Avoids one byte out-of-bounds read if ssh is invoked as "ssh
    -e^ ..."
    - ssh(1), sshd(8): prevent integer overflow in X11 port
    handling. These are theoretically possible if the admin
    misconfigured X11DisplayOffset or the user misconfigures
    their own $DISPLAY, but don't happen in normal operation.
    - ssh-keygen(1): don't mess up ssh-keygen -l output when the
    file contains CR characters.
    - sshd(8): add rate limits to logging of connections dropped by
    PerSourcePenalties. Previously these could be noisy in logs.
    - ssh(1): fix argument of "Compression" directive in ssh -G
    config dump, which regressed in openssh-9.8.
    - sshd(8): fix a corner-case triggered by UpdateHostKeys when
    sshd refuses to accept the signature returned by an agent
    holding host keys during the hostkey rotation sub-protocol.
    This situation could occur in situations where a PKCS#11
    smartcard that lacked support for particular signature
    algorithms was used to store host keys.
    - ssh-keygen(1): when using RSA keys to sign messages with
    "ssh-keygen -Y", select the signature algorithm based on the
    requested hash algorithm ("-Ohashalg=xxx"). This allows using
    something other than the default of rsa-sha2-512, which may
    not be supported on all signing backends, e.g. some
    smartcards only support SHA256.
    - ssh(1), sshd(8), ssh-keyscan(1): fix ML-KEM768x25519 KEX on
    big-endian systems.
    - Many regression and interop test improvements.

    - Ports and packages:
    o Pre-built packages are available for the following architectures on
    the day of release:
    - aarch64 (arm64): 12446
    - amd64: 12593
    - i386: 10429
    - mips64: 8635
    - powerpc64: 7501
    - riscv64: 10585
    - sparc64: 9080
    o Packages for the following architectures will be made available as
    their builds complete:
    - arm
    - powerpc

    - Some highlights:

    o Asterisk 16.30.1, 18.26.1, o Mozilla Firefox 137.0 and
    20.13.0 and 22.3.0 ESR 128.9.0
    o Audacity 3.7.3 o Mozilla Thunderbird 128.9.0
    o CMake 3.31.6 o Mutt 2.2.14 and NeoMutt 20250113
    o Chromium 135.0.7049.52 o Node.js 22.14.0
    o Emacs 30.1 o OCaml 4.14.2
    o FFmpeg 6.1.2 o OpenLDAP 2.6.9
    o GCC 8.4.0 and 11.2.0 o PHP 8.2.28, 8.3.19 and 8.4.5
    o GHC 9.8.3 o Postfix 3.10.1
    o GNOME 47 o PostgreSQL 17.4
    o Go 1.24.1 o Python 2.7.18 and 3.12.9
    o JDK 8u442, 11.0.26, 17.0.14 o Qt 5.15.16 (+ kde patches) and
    and 21.0.6 6.8.2
    o KDE Applications 24.12.3 o R 4.4.2
    o KDE Frameworks 6.5.0 o Ruby 3.2.8, 3.3.7 and 3.4.2
    o KDE Plasma 6.3.3 o Rust 1.86.0
    o Krita 5.2.9 o SQLite 3.49.1
    o LLVM/Clang 13.0.0, 16.0.6, o Shotcut 25.01.25
    18.1.8 and 19.1.7 o Sudo 1.9.16p1
    o LibreOffice 25.2.1.2 o Suricata 7.0.7
    o Lua 5.1.5, 5.2.4, 5.3.6 and o Tcl/Tk 8.5.19 and 8.6.16
    5.4.7 o TeX Live 2024
    o MariaDB 11.4.5 o Vim 9.1.1265 and Neovim 0.10.4
    o Mono 6.12.0.199 o Xfce 4.20.0

    - As usual, steady improvements in manual pages and other documentation.

    - The system includes the following major components from outside suppliers:
    o Xenocara (based on X.Org 7.7 with xserver 21.1.16 + patches,
    freetype 2.13.3, fontconfig 2.15.0, Mesa 23.3.6, xterm 395,
    xkeyboard-config 2.20, fonttosfnt 1.2.4, and more)
    o LLVM/Clang 16.0.6 (+ patches)
    o GCC 4.2.1 (+ patches) and 3.3.6 (+ patches)
    o Perl 5.40.1 (+ patches)
    o NSD 4.9.1
    o Unbound 1.22.0
    o Ncurses 6.4
    o Binutils 2.17 (+ patches)
    o Gdb 6.3 (+ patches)
    o Awk 20250116
    o Expat 2.7.1
    o zlib 1.3.1 (+ patches)

    ------------------------------------------------------------------------
    - SECURITY AND ERRATA --------------------------------------------------

    We provide patches for known security threats and other important
    issues discovered after each release. Our continued research into
    security means we will find new security problems -- and we always
    provide patches as soon as possible. Therefore, we advise regular
    visits to

    https://www.OpenBSD.org/security.html
    and
    https://www.OpenBSD.org/errata.html

    ------------------------------------------------------------------------
    - MAILING LISTS AND FAQ ------------------------------------------------

    Mailing lists are an important means of communication among users and developers of OpenBSD. For information on OpenBSD mailing lists, please
    see:

    https://www.OpenBSD.org/mail.html

    You are also encouraged to read the Frequently Asked Questions (FAQ) at:

    https://www.OpenBSD.org/faq/

    ------------------------------------------------------------------------
    - DONATIONS ------------------------------------------------------------

    The OpenBSD Project is a volunteer-driven software group funded by
    donations. Besides OpenBSD itself, we also develop important software
    like OpenSSH, LibreSSL, OpenNTPD, OpenSMTPD, the ubiquitous pf packet
    filter, the quality work of our ports development process, and many
    others. This ecosystem is all handled under the same funding umbrella.

    We hope our quality software will result in contributions that maintain
    our build/development infrastructure, pay our electrical/internet costs,
    and allow us to continue operating very productive developer hackathon
    events.

    All of our developers strongly urge you to donate and support our future efforts. Donations to the project are highly appreciated, and are
    described in more detail at:

    https://www.OpenBSD.org/donations.html

    ------------------------------------------------------------------------
    - OPENBSD FOUNDATION ---------------------------------------------------

    For those unable to make their contributions as straightforward gifts,
    the OpenBSD Foundation (https://www.openbsdfoundation.org) is a Canadian not-for-profit corporation that can accept larger contributions and
    issue receipts. In some situations, their receipt may qualify as a
    business expense write-off, so this is certainly a consideration for
    some organizations or businesses.

    There may also be exposure benefits since the Foundation may be
    interested in participating in press releases. In turn, the Foundation
    then uses these contributions to assist OpenBSD's infrastructure needs.
    Contact the foundation directors at [email protected] for
    more information.

    ------------------------------------------------------------------------
    - HTTPS INSTALLS -------------------------------------------------------

    OpenBSD can be easily installed via HTTPS downloads. Typically you need
    a single small piece of boot media (e.g., a USB flash drive) and then
    the rest of the files can be installed from a number of locations,
    including directly off the Internet. Follow this simple set of
    instructions to ensure that you find all of the documentation you will
    need while performing an install via HTTPS.

    1) Read either of the following two files for a list of HTTPS mirrors
    which provide OpenBSD, then choose one near you:

    https://www.OpenBSD.org/ftp.html
    https://ftp.openbsd.org/pub/OpenBSD/ftplist

    As of April 28, 2025, the following HTTPS mirror sites have the
    7.7 release:

    https://cdn.openbsd.org/pub/OpenBSD/7.7/ Global
    https://ftp.eu.openbsd.org/pub/OpenBSD/7.7/ Stockholm, Sweden
    https://ftp.hostserver.de/pub/OpenBSD/7.7/ Frankfurt, Germany
    https://ftp.bytemine.net/pub/OpenBSD/7.7/ Oldenburg, Germany
    https://ftp.fr.openbsd.org/pub/OpenBSD/7.7/ Paris, France
    https://mirror.aarnet.edu.au/pub/OpenBSD/7.7/ Brisbane, Australia
    https://ftp.usa.openbsd.org/pub/OpenBSD/7.7/ CO, USA
    https://ftp5.usa.openbsd.org/pub/OpenBSD/7.7/ CA, USA
    https://mirror.esc7.net/pub/OpenBSD/7.7/ TX, USA
    https://openbsd.cs.toronto.edu/pub/OpenBSD/7.7/ Toronto, Canada
    https://cloudflare.cdn.openbsd.org/pub/OpenBSD/7.7/ Global
    https://fastly.cdn.openbsd.org/pub/OpenBSD/7.7/ Global

    The release is also available at the master site:

    https://ftp.openbsd.org/pub/OpenBSD/7.7/ Alberta, Canada

    However it is strongly suggested you use a mirror.

    Other mirror sites may take a day or two to update.

    2) Connect to that HTTPS mirror site and go into the directory
    pub/OpenBSD/7.7/ which contains these files and directories.
    This is a list of what you will see:

    ANNOUNCEMENT armv7/ octeon/ root.mail
    README hppa/ openbsd-77-base.pub sparc64/
    SHA256 i386/ packages/ src.tar.gz
    SHA256.sig landisk/ packages-stable/ sys.tar.gz
    alpha/ loongson/ ports.tar.gz xenocara.tar.gz
    amd64/ luna88k/ powerpc64/
    arm64/ macppc/ riscv64/

    It is quite likely that you will want at LEAST the following
    files which apply to all the architectures OpenBSD supports.

    README - generic README
    root.mail - a copy of root's mail at initial login.
    (This is really worthwhile reading).

    3) Read the README file. It is short, and a quick read will make
    sure you understand what else you need to fetch.

    4) Next, go into the directory that applies to your architecture,
    for example, amd64. This is a list of what you will see:

    BOOTIA32.EFI* bsd* floppy77.img pxeboot*
    BOOTX64.EFI* bsd.mp* game77.tgz xbase77.tgz
    BUILDINFO bsd.rd* index.txt xfont77.tgz
    INSTALL.amd64 cd77.iso install77.img xserv77.tgz
    SHA256 cdboot* install77.iso xshare77.tgz
    SHA256.sig cdbr* man77.tgz
    base77.tgz comp77.tgz miniroot77.img

    If you are new to OpenBSD, fetch _at least_ the file INSTALL.amd64
    and install77.iso. The install77.iso file (roughly 782MB in size)
    is a one-step ISO-format install CD image which contains the various
    *.tgz files so you do not need to fetch them separately.

    If you prefer to use a USB flash drive, fetch install77.img and
    follow the instructions in INSTALL.amd64.

    5) If you are an expert, follow the instructions in the file called
    README; otherwise, use the more complete instructions in the
    file called INSTALL.amd64. INSTALL.amd64 may tell you that you
    need to fetch other files.

    6) Just in case, take a peek at:

    https://www.OpenBSD.org/errata.html

    This is the page where we talk about the mistakes we made while
    creating the 7.7 release, or the significant bugs we fixed
    post-release which we think our users should have fixes for.
    Patches and workarounds are clearly described there.

    ------------------------------------------------------------------------
    - X.ORG FOR MOST ARCHITECTURES -----------------------------------------

    X.Org has been integrated more closely into the system. This release
    contains X.Org 7.7. Most of our architectures ship with X.Org, including amd64, sparc64 and macppc. During installation, you can install X.Org
    quite easily using xenodm(1), our simplified X11 display manager forked
    from xdm(1).

    ------------------------------------------------------------------------
    - PACKAGES AND PORTS ---------------------------------------------------

    Many third party software applications have been ported to OpenBSD and
    can be installed as pre-compiled binary packages on the various OpenBSD architectures. Please see https://www.openbsd.org/faq/faq15.html for
    more information on working with packages and ports.

    Note: a few popular ports, e.g., NSD, Unbound, and several X
    applications, come standard with OpenBSD and do not need to be installed separately.

    ------------------------------------------------------------------------
    - SYSTEM SOURCE CODE ---------------------------------------------------

    The source code for all four subsystems can be found in the
    pub/OpenBSD/7.7/ directory:

    xenocara.tar.gz ports.tar.gz src.tar.gz sys.tar.gz

    The README (https://ftp.OpenBSD.org/pub/OpenBSD/7.7/README) file
    explains how to deal with these source files.

    ------------------------------------------------------------------------
    - THANKS ---------------------------------------------------------------

    Ports tree and package building by Jeremie Courreges-Anglas,
    Visa Hankala, Stuart Henderson, Peter Hessler, George Koehler,
    Kurt Mosiejczuk, and Christian Weisgerber. Base and X system builds by
    Kenji Aoyama, Theo de Raadt, and Miod Vallat. Release art by
    Tomáš Rodr.

    We would like to thank all of the people who sent in bug reports, bug
    fixes, donation cheques, and hardware that we use. We would also like
    to thank those who bought our previous CD sets. Those who did not
    support us financially have still helped us with our goal of improving
    the quality of the software.

    Our developers are:

    Aaron Bieber, Adam Wolk, Aisha Tammy, Alexander Bluhm,
    Alexander Hall, Alexandr Nedvedicky, Alexandr Shadchin,
    Alexandre Ratchov, Andrew Hewus Fresh, Anil Madhavapeddy,
    Anthony J. Bentley, Antoine Jacoutot, Anton Lindqvist, Asou Masato,
    Ayaka Koshibe, Benoit Lecocq, Bjorn Ketelaars, Bob Beck,
    Brandon Mercer, Brent Cook, Brian Callahan, Bryan Steele,
    Can Erkin Acar, Caspar Schutijser, Charlene Wendling,
    Charles Longeau, Chris Cappuccio, Christian Weisgerber,
    Christopher Zimmermann, Claudio Jeker, Dale Rahn, Damien Miller,
    Daniel Dickman, Daniel Jakots, Darren Tucker, Dave Voutila,
    David Coppa, David Gwynne, David Hill, Denis Fondras, Edd Barrett,
    Eric Faurot, Florian Obser, Florian Riehm, Frederic Cambus,
    George Koehler, Gerhard Roth, Giannis Tsaraias, Gilles Chehade,
    Giovanni Bechis, Gleydson Soares, Gonzalo L. Rodriguez, Greg Steuck,
    Helg Bredow, Henning Brauer, Ian Darwin, Ian Sutton, Igor Sobrado,
    Ingo Feinerer, Ingo Schwarze, Inoguchi Kinichiro, James Hastings,
    James Turner, Jan Klemkow, Jason McIntyre,
    Jasper Lievisse Adriaanse, Jeremie Courreges-Anglas, Jeremy Evans,
    Job Snijders, Joel Sing, Joerg Jung, Johannes Thyssen Tishman,
    Jonathan Armani, Jonathan Gray, Jonathan Matthew, Jordan Hargrave,
    Josh Rickmar, Joshua Sing, Joshua Stein,
    Juan Francisco Cantero Hurtado, Kazuya Goda, Kenji Aoyama,
    Kenneth R Westerback, Kent R. Spillner, Kevin Lo,
    Kirill A. Korinsky, Kirill Bychkov, Klemens Nanni, Kurt Miller,
    Kurt Mosiejczuk, Landry Breuil, Lawrence Teo, Lucas Gabriel Vuotto,
    Lucas Raab, Marcus Glocker, Mark Kettenis, Mark Lumsden,
    Markus Friedl, Martijn van Duren, Martin Natano, Martin Pieuchot,
    Martin Reindl, Martynas Venckus, Matthew Dempsky, Matthias Kilian,
    Matthieu Herrb, Michael Mikonos, Mike Belopuhov, Mike Larkin,
    Miod Vallat, Moritz Buhl, Nam Nguyen, Nayden Markatchev,
    Nicholas Marriott, Nigel Taylor, Okan Demirmen, Omar Polo,
    Ori Bernstein, Otto Moerbeek, Paco Esteban, Pamela Mosiejczuk,
    Pascal Stumpf, Patrick Wildt, Paul Irofti, Pavel Korovin,
    Peter Hessler, Philip Guenther, Pierre-Emmanuel Andre, Pratik Vyas,
    Rafael Sadowski, Rafael Zalamena, Raphael Graf, Remi Locherer,
    Remi Pointel, Renato Westphal, Ricardo Mestre, Richard Procter,
    Rob Pierce, Robert Nagy, Sasano Takayoshi, Scott Soule Cheloha,
    Sebastian Benoit, Sebastian Reitenbach, Sebastien Marie,
    Solene Rapenne, Stefan Fritsch, Stefan Hagen, Stefan Kempf,
    Stefan Sperling, Steven Mestdagh, Stuart Cassoff, Stuart Henderson,
    Sunil Nimmagadda, T.J. Townsend, Ted Unangst, Theo Buehler,
    Theo de Raadt, Thomas Frohwein, Tim van der Molen, Tobias Heider,
    Tobias Stoeckmann, Todd C. Miller, Todd Mortimer, Tom Cosgrove,
    Tracey Emery, Ulf Brosziewski, Uwe Stuehler, Vadim Zhukov,
    Vincent Gross, Visa Hankala, Vitaliy Makkoveev, Volker Schlecht,
    Yasuoka Masahiko, Yojiro Uo

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)