Contributed by Peter N. M. Hansteen on from the keep puffing it up dept.
The new release contains a number of innovations and improvements across a number of areas, including
- Mandatory enforcement of indirect branch targets [See earlier report].
viogpu(4), a VirtIO GPU driver [See earlier report].vmd(8)has moved to a multi-process model forvirtio(4)block and network devices [See earlier report].- Virtual machine owners can now override the boot kernel [See earlier report].
malloc(3)now has built-in leak detection [See earlier report]. Chunk sizes are now fine-grained, and all chunks in the delayed free list are checked for write-after-free.- In LibreSSL 3.8.2, TLSv1.0 and TLSv 1.1 are disabled in
libssl. Ed25519 certificates are now supported inopenssl(1)caandreq. - In OpenSSH 9.5,
ssh-kengen(1)generates Ed25519 keys by default. Keystroke timing obfuscation has been added tossh(1)[See earlier report]. The fingerprint of a newly generated host key is printed on first boot [See commit]. cron(8)now supports random ranges with steps [See earlier report].shutdown(8)/reboot(8)now require membership of group_shutdown[See earlier report].sec(4)for Route Based IPSec VPNs [See earlier reports].- Soft updates (softdep) have been disabled for future VFS work [See earlier report].
- There has been a major rewrite of
pfsync(4)[See earlier report]. - AMD processor microcode update is now supported [See earlier report].
ifconfig(8)has a newwgdescr[iption]option which allows labelling peers.
as well as the general churn of optimizations and fixes across the system.
Package counts (packages prebuilt for this release) for the more popular
architectures are
i386: 10603,
amd64: 11845,
aarch64: 11508,
sparc64: 8469,
with more to follow as bulk builds complete.
As always, the release is available for download from mirror sites all over the world; be sure to pick one that is near you, network-wise! Those upgrading from the 7.3 release (or earlier) should consult the Upgrade Guide.
Thanks again to the developers for the dedicated effort that went into producing this new release!
(Comments are closed)
By Chakl (chakl) chakl@syscall.de on
Yay! Thanks to everyone involved!
Upgraded a few systems, smooth and just working as expected. Love it.
By Axe Xae (axeXae) axo@tango.lu on http://localhost
thumbs UP for staying systemD free :D
By Peter J. Philipp (pjp) nospam@delphinusdns.org on
Congratulations. It's been nearly 25 years since I first installed OpenBSD and at BSDcon 2000 I decided I wanted the "canadian BSD" as my mainstay. I don't regret that at all. Yes there ups and downs that I had with OpenBSD and its community, but I am very grateful to be here (and to be writing this). If there is one thing in life I learned is that "we are not in control of our fate", but OpenBSD to me has always been a steadyness in tumultous and not so tumultous times. Thank you
OpenBSD!