[BACK]Return to 56.html CVS log [TXT][DIR] Up to [local] / www

Annotation of www/56.html, Revision 1.20

1.1       deraadt     1: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
                      2: <html>
                      3: <head>
                      4: <title>OpenBSD 5.6</title>
                      5: <meta name="resource-type" content="document">
                      6: <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
                      7: <meta name="description" content="OpenBSD 5.6">
                      8: <meta name="keywords" content="openbsd,main">
                      9: <meta name="distribution" content="global">
                     10: <meta name="copyright" content="This document copyright 2014 by OpenBSD.">
                     11: </head>
                     12:
                     13: <body bgcolor="#ffffff" text="#000000" link="#24248E">
                     14:
                     15: <a href="index.html">
                     16: <img alt="[OpenBSD]" height="30" width="141" hspace="24" src="images/smalltitle.gif" border="0"></a>
                     17: <p>
                     18:
1.20    ! deraadt    19: <a href="images/CaptainTedu.jpg">
        !            20: <img align="left" width="227" height="343" hspace="24" src="images/CaptainTedu.jpg"></a>
1.1       deraadt    21: <h2><font color="#0000e0">OpenBSD 5.6</font></h2>
                     22: <p>
1.20    ! deraadt    23: To be released Nov 1, 2014<br>
1.1       deraadt    24: Copyright 1997-2014, Theo de Raadt.<br>
                     25: <font color="#e00000">ISBN 978-0-9881561-4-2</font>
                     26: <br>
1.20    ! deraadt    27: <a href="lyrics.html#56">5.6 Song: "Ride of the Valkyries"</a>
1.1       deraadt    28: <p>
                     29:
                     30: <ul>
                     31: <li>Order a CDROM from our <a href="orders.html">ordering system</a>.
                     32: <li>See the information on <a href="ftp.html">the FTP page</a> for
                     33:     a list of mirror machines.
                     34: <li>Go to the <font color="#e00000">pub/OpenBSD/5.6/</font> directory on
                     35:     one of the mirror sites.
                     36: <li>Have a look at <a href="errata56.html">the 5.6 errata page</a> for a list
                     37:     of bugs and workarounds.
                     38: <li>See a <a href="plus56.html">detailed log of changes</a> between the
                     39:     5.5 and 5.6 releases.
                     40: <p>
1.10      deraadt    41: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=signify&amp;sektion=1">signify(1)</a> pubkeys for this release:<br>
                     42: base: RWR0EANmo9nqhpPbPUZDIBcRtrVcRwQxZ8UKGWY8Ui4RHi229KFL84wV<br>
                     43: fw:   RWT4e3jpYgSeLYs62aDsUkcvHR7+so5S/Fz/++B859j61rfNVcQTRxMw<br>
                     44: pkg:  RWSPEf7Vpp2j0PTDG+eLs5L700nlqBFzEcSmHuv3ypVUEOYwso+UucXb<br>
1.1       deraadt    45: </ul>
                     46: <br clear=all>
                     47: All applicable copyrights and credits can be found in the applicable
                     48: file sources found in the files src.tar.gz, sys.tar.gz,
                     49: xenocara.tar.gz, or in the files fetched via ports.tar.gz.  The
                     50: distribution files used to build packages from the ports.tar.gz file
                     51: are not included on the CDROM because of lack of space.
                     52: <p>
                     53:
                     54: <a name="new"></a>
                     55: <hr>
                     56: <p>
                     57: <h3><font color="#0000e0">What's New</font></h3>
                     58: <p>
                     59: This is a partial list of new features and systems included in OpenBSD 5.6.
                     60: For a comprehensive list, see the <a href="plus56.html">changelog</a> leading
                     61: to 5.6.
                     62: <p>
                     63:
                     64: <ul>
                     65: <li>...
                     66: <p>
                     67:
                     68:
                     69: <li>Installer improvements:
                     70:     <ul>
1.15      krw        71:     <li>Remove ftp and tape as install methods.
                     72:     <li>Preserve the disklabel (and next 6 blocks) when installing boot block on
                     73: 4k-sector disk drives.
                     74:     <li>Change the "Server?" question to "HTTP Server?" to allow unambiguous auto-install handling.
1.1       deraadt    75:     <li>...
                     76:     </ul>
                     77: <p>
                     78:
                     79: <li>New/extended platforms:
                     80:     <ul>
                     81:     <li>...
                     82:     </ul>
                     83: <p>
                     84:
                     85: <li>Improved hardware support, including:
                     86:     <ul>
1.13      dlg        87:     <li>SCSI Multipathing support via <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/mpath.4">mpath(4)</a> and associated path drivers on several architectures.
1.1       deraadt    88:     </ul>
                     89: <p>
                     90:
                     91: <li>Generic network stack improvements:
                     92:     <ul>
1.19      lteo       93:     <li><a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/divert.4">divert(4)</a> now supports checksum offload.
1.1       deraadt    94:     </ul>
                     95: <p>
                     96:
                     97: <li>Routing daemons and other userland network improvements:
                     98:     <ul>
1.19      lteo       99:     <li>When used with the -v flag, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/tcpdump.8">tcpdump(8)</a> now shows the actual bad checksum within the IP/protocol header itself and what the good checksum should be.
                    100:     <li><a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/ftp.1">ftp(1)</a> now allows its User-Agent to be changed via the -U command-line option.
1.1       deraadt   101:     </ul>
                    102: <p>
                    103:
                    104: <li>OpenSMTPD 5.4.2 (includes changes to 5.4.1):
                    105:     <ul>
                    106:     <li>...
                    107:     </ul>
                    108: <p>
                    109:
                    110: <li>Security improvements:
                    111:     <ul>
1.2       pascal    112:     <li>Changed the heuristics of the stack protector to also protect functions with local array definitions and references to local frame addresses.  This matches the -fstack-protector-strong option of upstream GCC.
                    113:     <li>Position-independent executables (PIE) are now used by default on powerpc.
                    114:     <li>Removed Kerberos.
                    115:     </ul>
                    116: <p>
                    117:
                    118: <li>Assorted improvements:
                    119:     <ul>
1.3       espie     120:     <li>locate databases for both base and xenocara, as
                    121:     <code>/usr/lib/locate/src.db</code> and
                    122:     <code>/usr/X11R6/lib/locate/xorg.db</code>.
                    123:     <li>Much faster package updates, due to package contents reordering that
                    124:     precludes re-downloading unchanged files.
1.16      krw       125:     <li>Fix many programs that failed when accessing disks having sector sizes other than 512 bytes, including
                    126: <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/badsect.8">badsect(8)</a>,
                    127: <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/df.1">df(1)</a>,
                    128: <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/dump.8">dump(8)</a>,
                    129: <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/dumpfs.8">dumpfs(8)</a>,
                    130: <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/fsck_ext2fs.8">fsck_ext2fs(8)</a>,
                    131: <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/fsck_ffs.8">fsck_ffs(8)</a>,
                    132: <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/fsdb.8">fsdb(8)</a>,
                    133: <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/growfs.8">growfs(8)</a>,
                    134: <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/ncheck_ffs.8">ncheck_ffs(8)</a>,
                    135: <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/quotacheck.8">quotacheck(8)</a>,
                    136: <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/tunefs.8">tunefs(8)</a>.
1.17      krw       137:     <li>Constrain MSDOS timestamps to 1/1/1980 through 12/31/2107.  64-bit
                    138: time_t values outside that range are stored as 1/1/1980.
                    139:     <li>Enhance
                    140: <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/disklabel.8">disklabel(8)</a> to recover filesystem mountpoint information when reading saved ascii labels.
1.18      krw       141:     <li>Properly handle
                    142: <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man3/msgbuf_write.3">msgbuf_write(3)</a> EOF conditions, including uses in
                    143: <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/tmux.1">tmux(1)</a>,
                    144: <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/dvmrpd.8">dvmrpd(8)</a>,
                    145: <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/ldapd.8">ldapd(8)</a>,
                    146: <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/ldpd.8">ldpd(8)</a>,
                    147: <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/ospf6d.8">ospf6d(8)</a>,
                    148: <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/ospfd.8">ospfd(8)</a>,
                    149: <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/relayd.8">relayd(8)</a>,
                    150: <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/ripd.8">ripd(8)</a>,
                    151: <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/smtpd.8">smtpd(8)</a>,
                    152: <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/ypldap.8">ypldap(8)</a>.
1.1       deraadt   153:     </ul>
                    154: <p>
                    155:
1.2       pascal    156: <li>LibreSSL
1.1       deraadt   157:     <ul>
                    158:     <li>...
                    159:     </ul>
                    160: <p>
                    161:
1.2       pascal    162: <li>OpenSSH 6.7
1.1       deraadt   163:     <ul>
1.14      sobrado   164:     <li>Potentially-incompatible changes:
1.1       deraadt   165:       <ul>
1.14      sobrado   166:       <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&amp;sektion=8">sshd(8)</a>:
                    167:         The default set of ciphers and <i>MAC</i>s has been altered to remove
                    168:         unsafe algorithms.  In particular, <i>CBC ciphers</i> and
                    169:         <i>arcfour*</i> are disabled by default.
                    170:       <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&amp;sektion=8">sshd(8)</a>:
                    171:         Support for <i>tcpwrappers</i>/<i>libwrap</i> has been removed.
                    172:       <li>OpenSSH 6.5 and 6.6 have a bug that causes ~0.2% of connections
                    173:         using the "curve25519-sha256@libssh.org" <i>KEX exchange method</i>
                    174:         to fail when connecting with something that implements the
                    175:         specification correctly.  OpenSSH 6.7 disables this KEX method when
                    176:         speaking to one of the affected versions.
1.1       deraadt   177:       </ul>
                    178:     <li>New/changed features:
                    179:       <ul>
1.14      sobrado   180:       <li>Major internal refactoring to begin to make part of OpenSSH usable
                    181:         as a library.  So far the wire parsing, key handling and KRL code
                    182:         has been refactored.  Please note that we do not consider the API
                    183:         stable yet, nor do we offer the library in separable form.
                    184:       <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&amp;sektion=1">ssh(1)</a>,
                    185:         <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&amp;sektion=8">sshd(8)</a>:
                    186:         Add support for <i>Unix domain socket</i> forwarding.  A remote TCP
                    187:         port may be forwarded to a local Unix domain socket and vice versa or
                    188:         both ends may be a Unix domain socket.
                    189:       <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&amp;sektion=1">ssh(1)</a>,
                    190:         <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh-keygen&amp;sektion=1">ssh-keygen(1)</a>:
                    191:         Add support for <i>SSHFP DNS records</i> for <i>Ed2551</i>9 key types.
                    192:       <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sftp&amp;sektion=1">sftp(1)</a>:
                    193:         Allow resumption of interrupted uploads.
                    194:       <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&amp;sektion=1">ssh(1)</a>:
                    195:         When rekeying, skip file/DNS lookups of the hostkey if it is the same
                    196:         as the one sent during initial key exchange.  (bz#2154)
                    197:       <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&amp;sektion=8">sshd(8)</a>:
                    198:         Allow explicit ::1 and 127.0.0.1 forwarding bind addresses when
                    199:         <tt>GatewayPorts=no</tt>; allows client to choose address family.
                    200:         (bz#2222)
                    201:       <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&amp;sektion=8">sshd(8)</a>:
                    202:         Add a
                    203:         <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd_config&amp;sektion=5">sshd_config(5)</a>
                    204:         <tt>PermitUserRC</tt> option to control whether <tt>~/.ssh/rc</tt> is
                    205:         executed, mirroring the <tt>no-user-rc</tt> authorized_keys option.
                    206:         (bz#2160)
                    207:       <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&amp;sektion=1">ssh(1)</a>:
                    208:         Add a %C escape sequence for <tt>LocalCommand</tt> and
                    209:         <tt>ControlPath</tt> that expands to a unique identifer based on a
                    210:         hash of the tuple of (local host, remote user, hostname, port).  Helps
                    211:         avoid exceeding miserly pathname limits for Unix domain sockets in
                    212:         multiplexing control paths.  (bz#2220)
                    213:       <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&amp;sektion=8">sshd(8)</a>:
                    214:         Make the "Too many authentication failures" message include the user,
                    215:         source address, port and protocol in a format similar to the
                    216:         authentication success/failure messages.  (bz#2199)
                    217:       <li>Added <i>unit</i> and <i>fuzz</i> tests for refactored code.
1.1       deraadt   218:       </ul>
                    219:     <li>The following significant bugs have been fixed in this release:
                    220:       <ul>
1.14      sobrado   221:       <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&amp;sektion=8">sshd(8)</a>:
                    222:         Fix remote forwarding with same listen port but different listen
                    223:         address.
                    224:       <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&amp;sektion=1">ssh(1)</a>:
                    225:         Fix inverted test that caused <i>PKCS#11</i> keys that were explicitly
                    226:         listed in
                    227:         <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh_config&amp;sektion=5">ssh_config(5)</a>
                    228:         or on the commandline not to be preferred.
                    229:       <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh-keygen&amp;sektion=1">ssh-keygen(1)</a>:
                    230:         Fix bug in KRL generation: multiple consecutive revoked certificate
                    231:         serial number ranges could be serialised to an invalid format.
                    232:         Readers of a broken KRL caused by this bug will fail closed, so no
                    233:         should-have-been-revoked key will be accepted.
                    234:       <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&amp;sektion=1">ssh(1)</a>:
                    235:         Reflect stdio-forward ("<tt>ssh -W host:port ...</tt>") failures in
                    236:         exit status.  Previously we were always returning 0.  (bz#2255)
                    237:       <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&amp;sektion=1">ssh(1)</a>,
                    238:         <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh-keygen&amp;sektion=1">ssh-keygen(1)</a>:
                    239:         Make Ed25519 keys' title fit properly in the randomart border.
                    240:         (bz#2247)
                    241:       <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh-agent&amp;sektion=1">ssh-agent(1)</a>:
                    242:         Only cleanup agent socket in the main agent process and not in any
                    243:         subprocesses it may have started (e.g. forked askpass).  Fixes agent
                    244:         sockets being zapped when askpass processes <i>fatal()</i>.  (bz#2236)
                    245:       <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh-add&amp;sektion=1">ssh-add(1)</a>:
                    246:         Make stdout line-buffered; saves partial output getting lost when
                    247:         <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh-add&amp;sektion=1">ssh-add(1)</a>
                    248:         <i>fatal()</i>s part-way through (e.g. when listing keys from an
                    249:         agent that supports key types that
                    250:         <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh-add&amp;sektion=1">ssh-add(1)</a>
                    251:         doesn't).  (bz#2234)
                    252:       <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh-keygen&amp;sektion=1">ssh-keygen(1)</a>:
                    253:         When hashing or removing hosts, don't choke on "@revoked" markers and
                    254:         don't remove "@cert-authority" markers.  (bz#2241)
                    255:       <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&amp;sektion=1">ssh(1)</a>:
                    256:         Don't fatal when hostname canonicalisation fails and a
                    257:         <tt>ProxyCommand</tt> is in use; continue and allow the
                    258:         <tt>ProxyCommand</tt> to connect anyway (e.g. to a host with a name
                    259:         outside the DNS behind a bastion).
                    260:       <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=scp&amp;sektion=1">scp(1)</a>:
                    261:         When copying local->remote fails during read, don't send uninitialised
                    262:         heap to the remote end.
                    263:       <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sftp&amp;sektion=1">sftp(1)</a>:
                    264:         Fix fatal "el_insertstr failed" errors when tab-completing filenames
                    265:         with a single quote char somewhere in the string.  (bz#2238)
                    266:       <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh-keyscan&amp;sektion=1">ssh-keyscan(1)</a>:
                    267:         Scan for Ed25519 keys by default.
                    268:       <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&amp;sektion=1">ssh(1)</a>:
                    269:         When using <tt>VerifyHostKeyDNS</tt> with a DNSSEC resolver,
                    270:         down-convert any certificate keys to plain keys and attempt SSHFP
                    271:         resolution.  Prevents a server from skipping SSHFP lookup and forcing
                    272:         a new-hostkey dialog by offering only certificate keys.
                    273:       <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&amp;sektion=8">sshd(8)</a>:
                    274:         Avoid crash at exit via NULL pointer reference.  (bz#2225)
                    275:       <li>Fix some strict-alignment errors.
1.1       deraadt   276:       </ul>
                    277:     </ul>
                    278: <p>
                    279:
                    280: <li>Ports and packages:
                    281:     <ul>
1.2       pascal    282:     <li>Over 8,800 ports.
1.1       deraadt   283:     <li>...
                    284:     </ul>
                    285: <p>
                    286: <li>Many pre-built packages for each architecture:
                    287:     <table border=0 cellspacing=0 cellpadding=2 width="95%">
                    288:     <tr>
                    289:     <td valign="top" width="25%">
                    290:     <ul>
                    291:       <li>i386:       XXXX
                    292:       <li>sparc64:    XXXX
                    293:       <li>alpha:      XXXX
                    294:       <li>m68k:       XXXX
                    295:     </ul></td><td valign=top width="25%"><ul>
                    296:       <li>sh:         XXXX
                    297:       <li>amd64:      XXXX
                    298:       <li>powerpc:    XXXX
                    299:       <li>m88k:       XXXX
                    300:     </ul></td><td valign=top width="25%"><ul>
                    301:       <li>sparc:      XXXX
                    302:       <li>arm:        XXXX
                    303:       <li>hppa:       XXXX
                    304:     </ul></td><td valign=top width="25%"><ul>
                    305:       <li>vax:        XXXX
                    306:       <li>mips64:     XXXX
                    307:       <li>mips64el:   XXXX
                    308:   </ul></td></tr></table>
                    309: <p>
                    310:
                    311: <li>Some highlights:
                    312:     <ul>
1.2       pascal    313:     <li>GNOME 3.12.2                   <li>KDE 3.5.10
1.11      zhuk      314:     <li>KDE 4.13.3
1.1       deraadt   315:     <li>Xfce 4.10                      <li>MySQL 5.1.73
1.2       pascal    316:     <li>PostgreSQL 9.3.4               <li>Postfix 2.11.1
                    317:     <li>OpenLDAP 2.3.43 and 2.4.39     <li>Mozilla Firefox 31.0
                    318:     <li>Mozilla Thunderbird 31.0       <li>GHC 7.6.3
                    319:     <li>LibreOffice 4.1.6.2            <li>Emacs 21.4 and 24.3
                    320:     <li>Vim 7.4.135                    <li>PHP 5.3.28, 5.4.30 and 5.5.14
                    321:     <li>Python 2.7.8, 3.3.5 and 3.4.1  <li>Ruby 1.8.7.374, 1.9.3.545, 2.0.0.481 and 2.1.2
                    322:     <li>Tcl/Tk 8.5.15 and 8.6.1                <li>JDK 1.6.0.32 and 1.7.0.55
                    323:     <li>Mono 3.4.0                     <li>Chromium 36.0.1985.125
                    324:     <li>Groff 1.22.2                   <li>Go 1.3
                    325:     <li>GCC 4.6.4, 4.8.3 and 4.9.0     <li>LLVM/Clang 3.5 (20140228)
                    326:     <li>Node.js 0.10.28
1.1       deraadt   327:     </ul>
                    328: <p>
                    329:
                    330: <li>As usual, steady improvements in manual pages and other documentation.
                    331: <p>
                    332:
                    333: <li>The system includes the following major components from outside suppliers:
                    334:     <ul>
1.2       pascal    335:     <li>Xenocara (based on X.Org 7.7 with xserver 1.15.2 + patches,
                    336:       freetype 2.5.3, fontconfig 2.11.1, Mesa 10.2.3, xterm 309,
                    337:       xkeyboard-config 2.11 and more)
1.1       deraadt   338:     <li>Gcc 4.2.1 (+ patches) and 3.3.6 (+ patches)
1.12      lteo      339:     <li>Perl 5.18.2 (+ patches)
1.2       pascal    340:     <li>Nginx 1.6.0 (+ patches)
                    341:     <li>SQLite 3.8.4.3 (+ patches)
1.1       deraadt   342:     <li>Sendmail 8.14.8, with libmilter
                    343:     <li>Bind 9.4.2-P2 (+ patches)
1.12      lteo      344:     <li>NSD 4.0.3
1.2       pascal    345:     <li>Unbound 1.4.22
1.1       deraadt   346:     <li>Sudo 1.7.2p8
                    347:     <li>Ncurses 5.7
                    348:     <li>Binutils 2.15 (+ patches)
                    349:     <li>Gdb 6.3 (+ patches)
1.12      lteo      350:     <li>Less 458 (+ patches)
1.1       deraadt   351:     <li>Awk Aug 10, 2011 version
                    352:     </ul>
                    353:
                    354: </ul>
                    355:
                    356: <a name="install"></a>
                    357: <hr>
                    358: <p>
                    359: <h3><font color="#0000e0">How to install</font></h3>
                    360: <p>
                    361: Following this are the instructions which you would have on a piece of
                    362: paper if you had purchased a CDROM set instead of doing an alternate
                    363: form of install.  The instructions for doing an FTP (or other style
                    364: of) install are very similar; the CDROM instructions are left intact
                    365: so that you can see how much easier it would have been if you had
                    366: purchased a CDROM instead.
                    367: <p>
                    368:
                    369: <hr>
                    370: Please refer to the following files on the three CDROMs or FTP mirror for
                    371: extensive details on how to install OpenBSD 5.6 on your machine:
                    372: <p>
                    373: <ul>
1.8       deraadt   374: <li><a href="http://ftp.openbsd.org/pub/OpenBSD/5.6/hppa/INSTALL.alpha">
                    375:        .../OpenBSD/5.6/alpha/INSTALL.alpha (on CD1)</a>
1.1       deraadt   376: <li><a href="http://ftp.openbsd.org/pub/OpenBSD/5.6/i386/INSTALL.i386">
                    377:        .../OpenBSD/5.6/i386/INSTALL.i386 (on CD1)</a>
1.8       deraadt   378: <li><a href="http://ftp.openbsd.org/pub/OpenBSD/5.6/hppa/INSTALL.hppa">
                    379:        .../OpenBSD/5.6/hppa/INSTALL.hppa (on CD1)</a>
1.1       deraadt   380: <p>
                    381: <li><a href="http://ftp.openbsd.org/pub/OpenBSD/5.6/amd64/INSTALL.amd64">
1.8       deraadt   382:        .../OpenBSD/5.6/amd64/INSTALL.amd64 (on CD2)</a>
1.1       deraadt   383: <li><a href="http://ftp.openbsd.org/pub/OpenBSD/5.6/macppc/INSTALL.macppc">
1.8       deraadt   384:        .../OpenBSD/5.6/macppc/INSTALL.macppc (on CD2)</a>
1.1       deraadt   385: <p>
                    386: <li><a href="http://ftp.openbsd.org/pub/OpenBSD/5.6/sparc64/INSTALL.sparc64">
1.8       deraadt   387:        .../OpenBSD/5.6/sparc64/INSTALL.sparc64 (on CD3)</a>
1.1       deraadt   388: <li><a href="http://ftp.openbsd.org/pub/OpenBSD/5.6/sparc/INSTALL.sparc">
1.8       deraadt   389:        .../OpenBSD/5.6/sparc/INSTALL.sparc (on CD3)</a>
1.1       deraadt   390: <p>
                    391: <li><a href="http://ftp.openbsd.org/pub/OpenBSD/5.6/alpha/INSTALL.alpha">
                    392:        .../OpenBSD/5.6/alpha/INSTALL.alpha</a>
                    393: <li><a href="http://ftp.openbsd.org/pub/OpenBSD/5.6/armish/INSTALL.armish">
                    394:        .../OpenBSD/5.6/armish/INSTALL.armish</a>
                    395: <li><a href="http://ftp.openbsd.org/pub/OpenBSD/5.6/armv7/INSTALL.armv7">
                    396:        .../OpenBSD/5.6/armv7/INSTALL.armv7</a>
                    397: <li><a href="http://ftp.openbsd.org/pub/OpenBSD/5.6/aviion/INSTALL.aviion">
                    398:        .../OpenBSD/5.6/aviion/INSTALL.aviion</a>
                    399: <li><a href="http://ftp.openbsd.org/pub/OpenBSD/5.6/hppa/INSTALL.hppa">
                    400:        .../OpenBSD/5.6/hppa/INSTALL.hppa</a>
                    401: <li><a href="http://ftp.openbsd.org/pub/OpenBSD/5.6/landisk/INSTALL.landisk">
                    402:        .../OpenBSD/5.6/landisk/INSTALL.landisk</a>
                    403: <li><a href="http://ftp.openbsd.org/pub/OpenBSD/5.6/loongson/INSTALL.loongson">
                    404:        .../OpenBSD/5.6/loongson/INSTALL.loongson</a>
                    405: <li><a href="http://ftp.openbsd.org/pub/OpenBSD/5.6/luna88k/INSTALL.luna88k">
                    406:        .../OpenBSD/5.6/luna88k/INSTALL.luna88k</a>
                    407: <li><a href="http://ftp.openbsd.org/pub/OpenBSD/5.6/macppc/INSTALL.macppc">
                    408:        .../OpenBSD/5.6/macppc/INSTALL.macppc</a>
                    409: <li><a href="http://ftp.openbsd.org/pub/OpenBSD/5.6/octeon/INSTALL.octeon">
                    410:        .../OpenBSD/5.6/octeon/INSTALL.octeon</a>
                    411: <li><a href="http://ftp.openbsd.org/pub/OpenBSD/5.6/sgi/INSTALL.sgi">
                    412:        .../OpenBSD/5.6/sgi/INSTALL.sgi</a>
                    413: <li><a href="http://ftp.openbsd.org/pub/OpenBSD/5.6/socppc/INSTALL.socppc">
                    414:        .../OpenBSD/5.6/socppc/INSTALL.socppc</a>
                    415: <li><a href="http://ftp.openbsd.org/pub/OpenBSD/5.6/sparc/INSTALL.sparc">
                    416:        .../OpenBSD/5.6/sparc/INSTALL.sparc</a>
                    417: <li><a href="http://ftp.openbsd.org/pub/OpenBSD/5.6/vax/INSTALL.vax">
                    418:        .../OpenBSD/5.6/vax/INSTALL.vax</a>
                    419: <li><a href="http://ftp.openbsd.org/pub/OpenBSD/5.6/zaurus/INSTALL.zaurus">
                    420:        .../OpenBSD/5.6/zaurus/INSTALL.zaurus</a>
                    421: </ul>
                    422: <hr>
                    423:
                    424: <p>
                    425: Quick installer information for people familiar with OpenBSD, and the
                    426: use of the "disklabel -E" command.  If you are at all confused when
                    427: installing OpenBSD, read the relevant INSTALL.* file as listed above!
                    428: <p>
                    429:
                    430: <h3><font color="#e00000">OpenBSD/i386:</font></h3>
                    431: <ul>
                    432: Play with your BIOS options to enable booting from a CD. The OpenBSD/i386
                    433: release is on CD1. If your BIOS does not support booting from CD, you will need
                    434: to create a boot floppy to install from. To create a boot floppy write
                    435: <i>CD1:5.6/i386/floppy56.fs</i> to a floppy and boot via the floppy drive.
                    436:
                    437: <p>
                    438: Use <i>CD1:5.6/i386/floppyB56.fs</i> instead for greater SCSI controller
                    439: support, or <i>CD1:5.6/i386/floppyC56.fs</i> for better laptop support.
                    440:
                    441: <p>
                    442: If you can't boot from a CD or a floppy disk,
                    443: you can install across the network using PXE as described in
                    444: the included INSTALL.i386 document.
                    445:
                    446: <p>
                    447: If you are planning on dual booting OpenBSD with another OS, you will need to
                    448: read INSTALL.i386.
                    449:
                    450: <p>
                    451: To make a boot floppy under MS-DOS, use the &quot;rawrite&quot; utility located
                    452: at <i>CD1:5.6/tools/rawrite.exe</i>. To make the boot floppy under a Unix OS,
                    453: use the
                    454: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dd&amp;sektion=1">dd(1)</a>
                    455: utility. The following is an example usage of
                    456: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dd&amp;sektion=1">dd(1)</a>,
                    457: where the device could be &quot;floppy&quot;, &quot;rfd0c&quot;, or
                    458: &quot;rfd0a&quot;.
                    459:
                    460: <ul><pre>
                    461: # <strong>dd if=&lt;file&gt; of=/dev/&lt;device&gt; bs=32k</strong>
                    462: </pre></ul>
                    463:
                    464: <p>
                    465: Make sure you use properly formatted perfect floppies with NO BAD BLOCKS or
                    466: your install will most likely fail. For more information on creating a boot
                    467: floppy and installing OpenBSD/i386 please refer to
                    468: <a href="faq/faq4.html#MkFlop">FAQ 4.3.2</a>.
                    469: </ul>
                    470:
                    471: <p>
                    472: <h3><font color="#e00000">OpenBSD/amd64:</font></h3>
                    473: <ul>
                    474: The 5.6 release of OpenBSD/amd64 is located on CD2.
                    475: Boot from the CD to begin the install - you may need to adjust
                    476: your BIOS options first.
                    477: If you can't boot from the CD, you can create a boot floppy to install from.
                    478: To do this, write <i>CD2:5.6/amd64/floppy56.fs</i> to a floppy, then
                    479: boot from the floppy drive.
                    480:
                    481: <p>
                    482: If you can't boot from a CD or a floppy disk,
                    483: you can install across the network using PXE as described in the included
                    484: INSTALL.amd64 document.
                    485:
                    486: <p>
                    487: If you are planning to dual boot OpenBSD with another OS, you will need to
                    488: read INSTALL.amd64.
                    489: </ul>
                    490:
                    491: <p>
                    492: <h3><font color="#e00000">OpenBSD/macppc:</font></h3>
                    493: <ul>
                    494: Burn the image from the FTP site to a CDROM, and power on your machine
                    495: while holding down the <i>C</i> key until the display turns on and
                    496: shows <i>OpenBSD/macppc boot</i>.
                    497:
                    498: <p>
                    499: Alternatively, at the Open Firmware prompt, enter <i>boot cd:,ofwboot
                    500: /5.6/macppc/bsd.rd</i>
                    501: </ul>
                    502:
                    503: <p>
                    504: <h3><font color="#e00000">OpenBSD/sparc64:</font></h3>
                    505: <ul>
                    506: Put CD3 in your CDROM drive and type <i>boot cdrom</i>.
                    507:
                    508: <p>
                    509: If this doesn't work, or if you don't have a CDROM drive, you can write
                    510: <i>CD3:5.6/sparc64/floppy56.fs</i> or <i>CD3:5.6/sparc64/floppyB56.fs</i>
                    511: (depending on your machine) to a floppy and boot it with <i>boot
                    512: floppy</i>. Refer to INSTALL.sparc64 for details.
                    513:
                    514: <p>
                    515: Make sure you use a properly formatted floppy with NO BAD BLOCKS or your install
                    516: will most likely fail.
                    517:
                    518: <p>
                    519: You can also write <i>CD3:5.6/sparc64/miniroot56.fs</i> to the swap partition on
                    520: the disk and boot with <i>boot disk:b</i>.
                    521:
                    522: <p>
                    523: If nothing works, you can boot over the network as described in INSTALL.sparc64.
                    524: </ul>
                    525:
                    526: <p>
                    527: <h3><font color="#e00000">OpenBSD/alpha:</font></h3>
                    528: <ul>
                    529: <p>Write <i>FTP:5.6/alpha/floppy56.fs</i> or
                    530: <i>FTP:5.6/alpha/floppyB56.fs</i> (depending on your machine) to a diskette and
                    531: enter <i>boot dva0</i>. Refer to INSTALL.alpha for more details.
                    532:
                    533: <p>
                    534: Make sure you use a properly formatted floppy with NO BAD BLOCKS or your install
                    535: will most likely fail.
                    536:
                    537: </ul>
                    538:
                    539: <p>
                    540: <h3><font color="#e00000">OpenBSD/armish:</font></h3>
                    541: <ul>
                    542: <p>
                    543: After connecting a serial port, Thecus can boot directly from the network
                    544: either tftp or http. Configure the network using fconfig, reset,
                    545: then load bsd.rd, see INSTALL.armish for specific details.
                    546: IOData HDL-G can only boot from an EXT-2 partition. Boot into linux
                    547: and copy 'boot' and bsd.rd into the first partition on wd0 (hda1)
                    548: then load and run bsd.rd, preserving the wd0i (hda1) ext2fs partition.
                    549: More details are available in INSTALL.armish.
                    550: </ul>
                    551:
                    552: <p>
                    553: <h3><font color="#e00000">OpenBSD/hppa:</font></h3>
                    554: <ul>
                    555: <p>
                    556: Boot over the network by following the instructions in INSTALL.hppa or the
                    557: <a href="hppa.html#install">hppa platform page</a>.
                    558: </ul>
                    559:
                    560: <p>
                    561: <h3><font color="#e00000">OpenBSD/landisk:</font></h3>
                    562: <ul>
                    563: <p>
                    564: Write <i>miniroot56.fs</i> to the start of the CF
                    565: or disk, and boot normally.
                    566: </ul>
                    567:
                    568: <p>
                    569: <h3><font color="#e00000">OpenBSD/loongson:</font></h3>
                    570: <ul>
                    571: <p>
                    572: Write <i>miniroot56.fs</i> to a USB stick and boot bsd.rd from it
                    573: or boot bsd.rd via tftp.
                    574: Refer to the instructions in INSTALL.loongson for more details.
                    575: </ul>
                    576: <p>
                    577:
                    578: <p>
                    579: <h3><font color="#e00000">OpenBSD/luna88k:</font></h3>
                    580: <ul>
                    581: <p>
                    582: Copy `boot' and `bsd.rd' to a Mach or UniOS partition, and boot the bootloader
                    583: from the PROM, and the bsd.rd from the bootloader.
                    584: Refer to the instructions in INSTALL.luna88k for more details.
                    585: </ul>
                    586:
                    587: <p>
                    588: <h3><font color="#e00000">OpenBSD/octeon:</font></h3>
                    589: <ul>
                    590: <p>
                    591: After connecting a serial port, boot bsd.rd over the network via DHCP/tftp.
                    592: Refer to the instructions in INSTALL.octeon for more details.
                    593: </ul>
                    594:
                    595: <p>
                    596: <h3><font color="#e00000">OpenBSD/sgi:</font></h3>
                    597: <ul>
                    598: <p>
                    599: To install, burn cd56.iso on a CD-R, put it in the CD drive of your
                    600: machine and select <i>Install System Software</i> from the System Maintenance
                    601: menu. Indigo/Indy/Indigo2 (R4000) systems will not boot automatically from
                    602: CD-ROM, and need a proper invocation from the PROM prompt.
                    603: Refer to the instructions in INSTALL.sgi for more details.
                    604:
                    605: <p>
                    606: If your machine doesn't have a CD drive, you can setup a DHCP/tftp network
                    607: server, and boot using "bootp()/bsd.rd.IP##" using the kernel matching your
                    608: system type. Refer to the instructions in INSTALL.sgi for more details.
                    609: </ul>
                    610:
                    611: <p>
                    612: <h3><font color="#e00000">OpenBSD/socppc:</font></h3>
                    613: <ul>
                    614: <p>
                    615: After connecting a serial port, boot over the network via DHCP/tftp.
                    616: Refer to the instructions in INSTALL.socppc for more details.
                    617: </ul>
                    618:
                    619: <p>
                    620: <h3><font color="#e00000">OpenBSD/sparc:</font></h3>
                    621: <ul>
                    622: Boot from one of the provided install ISO images, using one of the two
                    623: commands listed below, depending on the version of your ROM.
                    624:
                    625: <ul><pre>
                    626: ok <strong>boot cdrom 5.6/sparc/bsd.rd</strong>
                    627: or
                    628: &gt; <strong>b sd(0,6,0)5.6/sparc/bsd.rd</strong>
                    629: </pre></ul>
                    630:
                    631: <p>
                    632: If your SPARC system does not have a CD drive, you can alternatively boot from floppy.
                    633: To do so you need to write <i>floppy56.fs</i> to a floppy.
                    634: For more information see <a href="faq/faq4.html#MkFlop">FAQ 4.3.2</a>.
                    635: To boot from the floppy use one of the two commands listed below,
                    636: depending on the version of your ROM.
                    637:
                    638: <ul><pre>
                    639: ok <strong>boot floppy</strong>
                    640: or
                    641: &gt; <strong>b fd()</strong>
                    642: </pre></ul>
                    643:
                    644: <p>
                    645: Make sure you use a properly formatted floppy with NO BAD BLOCKS or your install
                    646: will most likely fail.
                    647:
                    648: <p>
                    649: If your SPARC system doesn't have a floppy drive nor a CD drive, you can either
                    650: setup a bootable tape, or install via network, as told in the
                    651: INSTALL.sparc file.
                    652: </ul>
                    653:
                    654: <p>
                    655: <h3><font color="#e00000">OpenBSD/vax:</font></h3>
                    656: <ul>
                    657: Boot over the network via mopbooting as described in INSTALL.vax.
                    658: </ul>
                    659:
                    660: <p>
                    661: <h3><font color="#e00000">OpenBSD/zaurus:</font></h3>
                    662: <ul>
                    663: <p>
                    664: Using the Linux built-in graphical ipkg installer, install the
                    665: openbsd56_arm.ipk package.  Reboot, then run it.  Read INSTALL.zaurus
                    666: for a few important details.
                    667: </ul>
                    668:
                    669: <p>
                    670: <h3><font color="#e00000">Notes about the source code:</font></h3>
                    671: <ul>
                    672: src.tar.gz contains a source archive starting at /usr/src.  This file
                    673: contains everything you need except for the kernel sources, which are
                    674: in a separate archive.  To extract:
                    675: <p>
                    676: <ul><pre>
                    677: # <strong>mkdir -p /usr/src</strong>
                    678: # <strong>cd /usr/src</strong>
                    679: # <strong>tar xvfz /tmp/src.tar.gz</strong>
                    680: </pre></ul>
                    681: <p>
                    682: sys.tar.gz contains a source archive starting at /usr/src/sys.
                    683: This file contains all the kernel sources you need to rebuild kernels.
                    684: To extract:
                    685: <p>
                    686: <ul><pre>
                    687: # <strong>mkdir -p /usr/src/sys</strong>
                    688: # <strong>cd /usr/src</strong>
                    689: # <strong>tar xvfz /tmp/sys.tar.gz</strong>
                    690: </pre></ul>
                    691: <p>
                    692: Both of these trees are a regular CVS checkout.  Using these trees it
                    693: is possible to get a head-start on using the anoncvs servers as
                    694: described <a href="anoncvs.html">here</a>.
                    695: Using these files
                    696: results in a much faster initial CVS update than you could expect from
                    697: a fresh checkout of the full OpenBSD source tree.
                    698: <p>
                    699: </ul>
                    700:
                    701: <a name="upgrade"></a>
                    702: <hr>
                    703: <p>
                    704: <h3><font color="#0000e0">How to upgrade</font></h3>
                    705: <p>
1.6       deraadt   706: If you already have an OpenBSD 5.5 system, and do not want to reinstall,
1.1       deraadt   707: upgrade instructions and advice can be found in the
                    708: <a href="faq/upgrade56.html">Upgrade Guide</a>.
                    709:
                    710: <a name="ports"></a>
                    711: <hr>
                    712: <p>
                    713: <h3><font color="#0000e0">Ports Tree</font></h3>
                    714: <p>
                    715: A ports tree archive is also provided.  To extract:
                    716: <p>
                    717: <ul><pre>
                    718: # <strong>cd /usr</strong>
                    719: # <strong>tar xvfz /tmp/ports.tar.gz</strong>
                    720: </pre></ul>
                    721: <p>
                    722: The <i>ports/</i> subdirectory is a checkout of the OpenBSD ports tree.  Go
                    723: read the <a href="faq/ports/index.html">ports</a> page
                    724: if you know nothing about ports
                    725: at this point.  This text is not a manual of how to use ports.
                    726: Rather, it is a set of notes meant to kickstart the user on the
                    727: OpenBSD ports system.
                    728: <p>
                    729: The <i>ports/</i> directory represents a CVS (see the manpage for
                    730: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cvs&amp;sektion=1&amp;arch=i386">
                    731: cvs(1)</a> if
                    732: you aren't familiar with CVS) checkout of our ports.  As with our complete
                    733: source tree, our ports tree is available via
                    734: <a href="anoncvs.html">AnonCVS</a>.
                    735: So, in order to keep current with it, you must make the <i>ports/</i> tree
                    736: available on a read-write medium and update the tree with a command
                    737: like:
                    738: <p>
                    739: <ul><pre>
                    740: # <strong>cd /usr/ports</strong>
1.6       deraadt   741: # <strong>cvs -d anoncvs@server.openbsd.org:/cvs update -Pd -rOPENBSD_5_6</strong>
1.1       deraadt   742: </pre></ul>
                    743: <p>
                    744: [Of course, you must replace the server name here with a nearby anoncvs
                    745: server.]
                    746: <p>
                    747: Note that most ports are available as packages through FTP. Updated
                    748: packages for the 5.6 release will be made available if problems arise.
                    749: <p>
                    750: If you're interested in seeing a port added, would like to help out, or just
                    751: would like to know more, the mailing list
                    752: <a href="mail.html">ports@openbsd.org</a> is a good place to know.
                    753: <p>
                    754: </body>
                    755: </html>