OpenBSD Journal

OpenBSD Journal

OpenBSD -current has moved to version 8.0

Contributed by rueda on from the here-we-go-again dept.

The OpenBSD 8.0 release cycle is entering its final phases…

With the following commit, Theo de Raadt (deraadt@) moved -current to version 8.0 (dropping the "-beta"):

CVSROOT:	/cvs
Module name:	src
Changes by:	deraadt@cvs.openbsd.org	2026/09/26 10:41:23

Modified files:
	sys/conf       : newvers.sh 

Log message:
leave -beta

For those unfamiliar with the process:
this is not the 8.0 release, but is part of the standard build-up to the release.

Remember: It's time to start using "-D snap" with pkg_add(1) (and pkg_info(1)).

(Regular readers will know what comes next…)
This serves as an excellent reminder to upgrade snapshots frequently, test both base and ports, and report problems [plus, of course, donate!].

OpenBSD gains new networking daemon - rtrd(8)

Contributed by rueda on from the late-reports dept.

Job Snijders (job@) imported rtrd(8), and its associated control program, rtrctl(8):

CVSROOT:	/cvs
Module name:	src
Changes by:	job@cvs.openbsd.org	2026/09/16 10:11:46

Added files:
	usr.sbin/rtrctl: Makefile ometric.c ometric.h rtrctl.8 rtrctl.c 
	usr.sbin/rtrd  : Makefile RTRX.PROTOCOL cache.c cache.h 
	                 commands.c commands.h hash.c hash.h ip_utils.c 
	                 ip_utils.h logs.c logs.h packets.c packets.h 
	                 rtr_config.h rtrd.8 rtrd.c sched.c sched.h 
	                 send.c send.h signals.c signals.h sockets.c 
	                 sockets.h stats.c stats.h structs.h tables.c 
	                 tables.h version.h 

Log message:
Import rtrd(8), an easy-to-use RPKI-To-Router protocol implementation

The rtrd(8) program is intended as a scalable distribution layer to
deliver data produced by rpki-client(8) to clients such as bgpd(8)
in multi-node/multi-vendor IXP and ISP deployments. A single rtrd(8)
instance can concurrently serve many BGP routers and route servers.

Many thanks to Ralph Covelli from Hurricane Electric for creating rtrd!

OK deraadt@ claudio@

The software was later linked to the build

The original author, Ralph Covelli, is now rcovelli@.

vmm(4)/vmd(8) gain support for multi-processor VMs

Contributed by rueda on from the late-reports dept.

Mike Larkin (mlarkin@) committed support for multi-processor virtual machines (i.e. guests):

CVSROOT:	/cvs
Module name:	src
Changes by:	mlarkin@cvs.openbsd.org	2026/09/17 20:35:55

Modified files:
	sys/arch/amd64/amd64: vmm_machdep.c 
	sys/arch/amd64/include: vmmvar.h 
	sys/dev/vmm    : vmm.c 
	usr.sbin/vmctl : main.c vmctl.8 vmctl.c vmctl.h 
	usr.sbin/vmd   : arm64_vm.c fw_cfg.c lapic.c lapic.h parse.y 
	                 vm.c vm.conf.5 vmd.c vmd.h x86_vm.c 

Log message:
vmm(4)/vmd(8): mp plumbing

Implements the sipi/init lapic state machine, mp IPI support and various
other changes required for mp. vmctl and man page changes for new start
and vm.conf options.

tested by dv and me on various guests

ok dv

This represents a huge jump forward in vmm(4)/vmd(8) flexibility and usability.

GEFS, the "Good Enough File System" on the horizon for OpenBSD

Contributed by Peter N. M. Hansteen on from the files§ good! dept.

Filesystems on OpenBSD have come in two varieties, UFS1 or UFS2. Ori Bernstein has set out to possibly introduce a new option, the "Good Enough File System", which Ori describes as

"a new, crash-safe, snapshotting, copy on write FS that I wrote for 9front, and which I am in the process of moving to OpenBSD.

Ori gave a presentation about the work at EuroBSDCon 2026, and posted a summary message titled GEFS on OpenBSD: A very early preview to tech@, inviting hacking and testing:

List:       openbsd-tech
Subject:    GEFS on OpenBSD: A very early preview
From:       ori () eigenstate ! org
Date:       2026-09-15 15:45:05
Message-ID: EBB049B251DCF60A8C9A0575F6FC7DC9 () eigenstate ! org

Before anyone asks: I am *not* proposing to put
this in tree for a while yet.

What is it
----------
So, as people may have seen at EuroBSD, I've got a
rough, buggy, issue-filled preview of GEFS running
on OpenBSD. The port is NOT ready for production,
and data loss is currently expected, especially on
error.

Read more…

OpenSMTPD 7.9.0p0 released

Contributed by Peter N. M. Hansteen on from the smoother delivery dept.

In an annoucement that vastly understates the usefulness of their code, the OpenSMTPD project have announced their new OpenSMTPD 7.9.0p0 release.

The announcement says,

List:       openbsd-announce
Subject:    OpenSMTPD 7.9.0p0
From:       "Omar Polo" <op () openbsd ! org>
Date:       2026-09-13 21:11:58

OpenSMTPD is a FREE implementation of the SMTP protocol with some common
extensions. It allows ordinary machines to exchange e-mails with systems
speaking the SMTP protocol. It implements a fairly large part of RFC5321
and can already cover a large range of use-cases.

Read more…

EuroBSDCon 2026 talks online

Contributed by Paul 'WEiRD' de Weerd on from the fishy-videos dept.

Last weekend was the EuroBSDCon conference, this time in Brussels, Belgium. Several talks were held, with quite a few on OpenBSD.

You can watch all the talks on peer tube, check the dedicated OpenBSD playlist, or pick your favorite talk from the list:

rpki-client 9.9 released

Contributed by Peter N. M. Hansteen on from the rpki me up dept.

It's a big day for routing security aficionados. The OpenBGPD project (a sub-project of the OpenBSD project) have announced version 9.9 of rpki-client(8), with various improvements, enhancements and fixes.

The announcement reads

List:       openbsd-announce
Subject:    rpki-client 9.9 released
From:       Sebastian Benoit <benno () openbsd ! org>
Date:       2026-08-23 19:25:37
Message-ID: aotJMUL7356PdqRC () jackline ! openbsd ! adns ! de

rpki-client 9.9 has just been released and will be available in the
rpki-client directory of any OpenBSD mirror soon. It is recommended
that all users upgrade to this version for improved reliability.

Read more…

Donate!

Donate to OpenBSD

Features

We are constantly on the lookout for stories of how you put OpenBSD to work. Please submit any informative articles on how OpenBSD is helping your company.

OpenBSD Errata

Unofficial RSS feed of OpenBSD errata

OpenBSD 7.9

0212026-09-14 SECURITY In ldapd(8), an authentication result from one transaction could be applied to another.
0202026-09-14 SECURITY Multiple vulnerabilities in the X server and server side font library. CVE-2026-55999 CVE-2026-56000 CVE-2026-56001 CVE-2026-56002 CVE-2026-56003
0192026-09-14 SECURITY Backport all changes from libexpat 2.8.4. CVE-2026-66046 CVE-2026-76641 CVE-2026-76957
0182026-09-14 RELIABILITY Prevent integer overflow in shmat(4).
0172026-09-14 RELIABILITY Prevent integer overflow in wscons(4).
0162026-09-14 SECURITY A malicous NFS server could aid a local user in avoiding access controls.

OpenBSD 7.8

0572026-09-14 SECURITY In ldapd(8), an authentication result from one transaction could be applied to another.
0562026-09-14 SECURITY Multiple vulnerabilities in the X server and server side font library. CVE-2026-55999 CVE-2026-56000 CVE-2026-56001 CVE-2026-56002 CVE-2026-56003
0552026-09-14 SECURITY Backport all changes from libexpat 2.8.4. CVE-2026-66046 CVE-2026-76641 CVE-2026-76957
0542026-09-14 RELIABILITY Prevent integer overflow in shmat(4).
0532026-09-14 RELIABILITY Prevent integer overflow in wscons(4).
0522026-09-14 SECURITY A malicous NFS server could aid a local user in avoiding access controls.

XML/RSS/RDF

Users wishing RSS/RDF summary files of OpenBSD Journal can retrieve: RSS feed

Options are available.

Credits

Copyright © - Daniel Hartmeier. All rights reserved. Articles and comments are copyright their respective authors, submission implies license to publish on this web site. Contents of the archive prior to as well as images and HTML templates were copied from the fabulous original deadly.org with Jose's and Jim's kind permission. This journal runs as CGI with httpd(8) on OpenBSD, the source code is BSD licensed. undeadly \Un*dead"ly\, a. Not subject to death; immortal. [Obs.]