OpenBSD Journal

OpenBSD 7.0 released

Contributed by rueda on from the Undeadly-SYNs dept.

The OpenBSD project has released OpenBSD 7.0, the project's 51st release. As usual, the release page offers highlights, installation and upgrade instructions, as well as links to other resources such as the detailed changelog.

Notable improvements include, but are not limited to:

  • Support has been added for a new hardware platform, riscv64, for 64-bit RISC-V systems. [See earlier reports.]
  • /etc/ was introduced, providing a mechanism to make config(8)-modified GENERIC kernels compatible with KARL.
  • Hibernate time has been reduced. [See earlier report.]
  • The timeout(1) utility was imported from NetBSD. [See earlier report.]
  • openrsync(1) now has include and exclude options. [See earlier report.]
  • doas(1) will now retry up to 3 times on password authentication failure.
  • ucc(4), a driver for USB HID Consumer Control keyboards, was added. This exposes volume, audio, and application launch keys.
  • xterm(1) is now unveiled. [See earlier report.]
  • printf(3) and friends now log an error and abort when confronted with format %n.
  • iked(8) now has client-side support for DNS configuration. [See earlier report.]
  • traceroute(8) speed has been boosted through asynchronous handling of probe packets and DNS. [See earlier report.]
  • dhcpleased(8) and resolvd(8) are both enabled by default and provide the standard mechanism for configuring IPv4 addresses by DHCP. [See previous reports.] The combination also makes nameserver information gathered via slaacd usable in dynamic configurations. dhclient(8) remains available for special cases. A "nameserver" command was added to route(8), allowing sending DNS nameserver prooposals to resolvd(8) over the routing socket.
  • In LibreSSL 3.4.1, support has been added for the OpenSSL 1.1.1 TLSv3 APIs. The "new" X.509 validator is enabled, allowing verification of modern certificate chains.
  • In OpenSSH 8.8, the RSA/SHA1 signature type [not RSA ("ssh-rsa") keys - see previous report] is disabled by default. scp(1) supports optional use of the SFTP protocol. [Since our previous report, the default has reverted to using the original scp/rcp protocol by default.]

Those upgrading from the 6.9 release (or earlier) should consult the Upgrade Guide.

While your install sets download or when your packages update, please take the time to look at and use one or more of the recommended ways to support the project, such as making a donation. Corporate entities may prefer to send money to The OpenBSD Foundation, a Canadian non-profit corporation. You can also get merchandise and help OpenBSD visibility. Also, don't forget to listen to the release song (mp3 or ogg) and check out the lyrics.

Thanks to the developers for all the excellent work that has gone into this great new release!

(Comments are closed)

  1. By n/a (Cabal) on

    Congratulations to all involved!

  2. By Noryungi (noryungi) on

    Thanks to all the hard-working OpenBSD contributors!!

  3. By raindog308 (raindog308) on

    Farewell, SGI platform.

  4. By Will Backman (bitgeist) on

    Once again, another easy upgrade! Thank you to the developers and testers.
    I too will shed a tear for the SGI platform, but those machines are gone from my home now.

  5. By Leon Shaw (sshaw) on

    Thank you OpenBSD team for your continued development. Awesome!

  6. By Alen Mistric (alenmeister) on

    Much appreciated. Keep up the amazing work!


Copyright © - Daniel Hartmeier. All rights reserved. Articles and comments are copyright their respective authors, submission implies license to publish on this web site. Contents of the archive prior to as well as images and HTML templates were copied from the fabulous original with Jose's and Jim's kind permission. This journal runs as CGI with httpd(8) on OpenBSD, the source code is BSD licensed. undeadly \Un*dead"ly\, a. Not subject to death; immortal. [Obs.]