The LibreSSL project has announced their latest release LibreSSL 4.2.0, with numerous improvements. The release announcement reads,

List:       openbsd-announce
Subject:    LibreSSL 4.2.0 Released
From:       Brent Cook <busterb () gmail ! com>
Date:       2025-10-14 14:19:28


We have released LibreSSL 4.2.0, which will be arriving in the
LibreSSL directory of your local OpenBSD mirror soon. This is the
first stable release for the 4.2.x branch, also to be available with OpenBSD 7.8

It includes the following changes from LibreSSL 4.1.0:

Cranking up the heat for the upcoming OpenBSD 7.8 release, the OpenSSH project has issued OpenSSH 10.2.

This is a bugfix release that supersedes the previously announced OpenSSH 10.1 in time for the general release.

From the release notes:

Changes since OpenSSH 10.1
==========================

This is a bugfix release, primarily to fix a problem that rendered
ssh(1) unusable when ControlPersist was enabled.

Jonathan Gray (jsg@) updated the version of OpenBSD -current from "7.8" to "7.8-current".

Those running the latest-and-greatest [via a sufficiently new snapshot or built from source] no longer need to use "-D snap" with pkg_add(1) (and pkg_info(1)).

The OpenSSH project has released OpenSSH 10.1, which is also the release that will be part of the upcoming OpenBSD 7.8 release.

The release was marked by a very unobtrusive sequence of www commits, with the first saying simply

List:       openbsd-cvs
Subject:    CVS: cvs.openbsd.org: www
From:       Damien Miller <djm () cvs ! openbsd ! org>
Date:       2025-10-06 7:11:57


CVSROOT:	/cvs
Module name:	www
Changes by:	djm@cvs.openbsd.org	2025/10/06 01:11:57

Added files:
	openssh/txt    : release-10.1 

Log message:
openssh-10.1 release notes

which points to the OpenSSH 10.1 release notes, giving a fuller description of the new release.

If you're running -current or jumping snapshot to snapshot, you should already be running code equal to or very close to this.

Version 0.120 of Game of Trees has been released (and the port updated):

• disable gotwebd authentication if it is not enabled in /etc/gotwebd.conf
• ensure that GOTWEBD_LOGIN_TIMEOUT is used consistently at build time
• prevent date-specific gotsysd regress failures due to asctime_r whitespace
• make gotwebd refuse to start up if the _gotwebd user is root
• make gotwebd warn if the webserver's user is set to root in /etc/gotwebd.conf
• add /etc/gotwebd.conf parameters for hiding repositories
• reject bad hostnames provided to the gotsh weblogin command
• allow gotwebd to optionally display a login hint when authentication fails

LibreSSL version 4.1.1 and 4.0.1 have been released.

The 4.1.1 release notes read:

Version 0.119 of Game of Trees has been released (and the port updated):

The OpenBSD 7.8 release cycle is entering its final phases…

With the following commit, Theo de Raadt (deraadt@) moved -current to version 7.8 (dropping the "-beta"):

List:       openbsd-cvs
Subject:    CVS: cvs.openbsd.org: src
From:       Theo de Raadt <deraadt () cvs ! openbsd ! org>
Date:       2025-09-30 14:49:51

CVSROOT:	/cvs
Module name:	src
Changes by:	deraadt@cvs.openbsd.org	2025/09/30 08:49:51

Modified files:
	sys/conf       : newvers.sh 

Log message:
move out of -beta

For those unfamiliar with the process:
this is not the 7.8 release, but is part of the standard build-up to the release.

Remember: It's time to start using "-D snap" with pkg_add(1) (and pkg_info(1)).

(Regular readers will know what comes next…)
This serves as an excellent reminder to upgrade snapshots frequently, test both base and ports, and report problems [plus, of course, donate!].

Claudio Jeker (claudio@) announced the release of version 8.9 of OpenBGPD, the OpenBSD project's Border Gateway Protocol (BGP) daemon:

We have released OpenBGPD 8.9, which will be arriving in the
OpenBGPD directory of your local OpenBSD mirror soon.

This release includes the following changes to the previous release:

    * In verbose mode log the NOTIFICATION data for UPDATE errors.

    * Fix a busy loop error in the pfkey handling for OpenBSD and FreeBSD.

    * Introduce monotime - an internal time API using microsecond
      resolution.

    * Fix accounting of the pending update counter

    * Use new ibufq interface instead of handrolling the same.

    * Large refactoring of internal APIs to make the code easier to share
      and cleaner.