Annotation of www/57.html, Revision 1.110
1.109 bentley 1: <!doctype html>
2: <html lang=en id=release>
3: <meta charset=utf-8>
4:
1.1 deraadt 5: <title>OpenBSD 5.7</title>
6: <meta name="description" content="OpenBSD 5.7">
1.98 deraadt 7: <meta name="viewport" content="width=device-width, initial-scale=1">
8: <link rel="stylesheet" type="text/css" href="openbsd.css">
1.100 tb 9: <link rel="canonical" href="https://www.openbsd.org/57.html">
1.1 deraadt 10:
11:
1.109 bentley 12: <h2 id=OpenBSD>
1.1 deraadt 13: <a href="index.html">
1.109 bentley 14: <i>Open</i><b>BSD</b></a>
15: 5.7
1.98 deraadt 16: </h2>
1.1 deraadt 17:
1.109 bentley 18: <table>
19: <tr>
20: <td>
1.57 deraadt 21: <a href="images/bluefish.jpg">
1.109 bentley 22: <img width="227" height="343" src="images/bluefish.jpg" alt="Bluefish"></a>
23: <td>
1.88 deraadt 24: Released May 1, 2015<br>
1.1 deraadt 25: Copyright 1997-2015, Theo de Raadt.<br>
1.109 bentley 26: <cite class=isbn>ISBN 978-0-9881561-5-9</cite>
1.1 deraadt 27: <br>
1.92 deraadt 28: 5.7 Song: <a href="lyrics.html#57">"Source Fish"</a>
1.108 deraadt 29: <br>
30: <br>
1.1 deraadt 31: <ul>
32: <li>See the information on <a href="ftp.html">the FTP page</a> for
33: a list of mirror machines.
1.109 bentley 34: <li>Go to the <code class=reldir>pub/OpenBSD/5.7/</code> directory on
1.1 deraadt 35: one of the mirror sites.
36: <li>Have a look at <a href="errata57.html">the 5.7 errata page</a> for a list
37: of bugs and workarounds.
38: <li>See a <a href="plus57.html">detailed log of changes</a> between the
39: 5.6 and 5.7 releases.
40: <p>
1.109 bentley 41: <li><a href="https://man.openbsd.org/signify.1">signify(1)</a> pubkeys for this release:<p>
1.107 deraadt 42:
1.109 bentley 43: <table class=signify>
44: <tr><td>
45: openbsd-57-base.pub:
1.107 deraadt 46: <td>
47: RWSvUZXnw9gUb70PdeSNnpSmodCyIPJEGN1wWr+6Time1eP7KiWJ5eAM
1.109 bentley 48: <tr><td>
1.107 deraadt 49: openbsd-57-fw.pub:
1.109 bentley 50: <td>
1.107 deraadt 51: RWSuRBL44FVkb2QuvtlwOJmzS9UJtbKZd7GEYcol8HPXu4On/Ct1LoZr
1.109 bentley 52: <tr><td>
1.107 deraadt 53: openbsd-57-pkg.pub:
1.109 bentley 54: <td>
1.107 deraadt 55: RWTJ1iHLn/zcvJJSbxJIEU9ChlfAlU16XoLLxmxciliOFWfTLyOv0vQs
56: </td></tr>
57: </table>
58:
1.98 deraadt 59: <p>
60: All applicable copyrights and credits are in the src.tar.gz,
61: sys.tar.gz, xenocara.tar.gz, ports.tar.gz files, or in the
62: files fetched via ports.tar.gz.
1.1 deraadt 63: </ul>
1.109 bentley 64: </table>
1.98 deraadt 65:
66: <hr>
1.1 deraadt 67:
1.109 bentley 68: <section id=new>
69: <h3>What's New</h3>
70:
1.1 deraadt 71: <p>
72: This is a partial list of new features and systems included in OpenBSD 5.7.
73: For a comprehensive list, see the <a href="plus57.html">changelog</a> leading
74: to 5.7.
75:
76: <ul>
77: <li>Improved hardware support, including:
78: <ul>
1.109 bentley 79: <li>New <a href="https://man.openbsd.org/OpenBSD-current/man4/xhci.4">xhci(4)</a> driver for USB 3.0 host controllers.
80: <li>New <a href="https://man.openbsd.org/OpenBSD-current/man4/umcs.4">umcs(4)</a> driver for MosChip Semiconductor 78x0 USB multiport serial adapters.
81: <li>New <a href="https://man.openbsd.org/OpenBSD-current/man4/i386/skgpio.4">skgpio(4)</a> driver for Soekris net6501 GPIO and LEDs.
82: <li>New <a href="https://man.openbsd.org/OpenBSD-current/man4/uslhcom.4">uslhcom(4)</a> driver for Silicon Labs CP2110 USB HID based UART.
83: <li>New <a href="https://man.openbsd.org/OpenBSD-current/man4/nep.4">nep(4)</a> driver for Sun Neptune 10Gb Ethernet devices.
84: <li>New <a href="https://man.openbsd.org/OpenBSD-current/man4/iwm.4">iwm(4)</a> driver for Intel 7260, 7265, and 3160 wifi cards.
85: <li>The <a href="https://man.openbsd.org/OpenBSD-current/man4/rtsx.4">rtsx(4)</a> driver now supports RTS5227 and RTL8411B card readers.
86: <li>The <a href="https://man.openbsd.org/OpenBSD-current/man4/bge.4">bge(4)</a> driver now supports jumbo frames on various additional BCM57xx chipsets.
87: <li>The <a href="https://man.openbsd.org/OpenBSD-current/man4/ciss.4">ciss(4)</a> driver now supports HP Gen9 Smart Array/Smart HBA devices.
88: <li>The <a href="https://man.openbsd.org/OpenBSD-current/man4/mpi.4">mpi(4)</a> and <a href="https://man.openbsd.org/OpenBSD-current/man4/mfi.4">mfi(4)</a> drivers now have mpsafe interrupt handlers running without the big lock.
89: <li>The <a href="https://man.openbsd.org/OpenBSD-current/man4/ppb.4">ppb(4)</a> driver now supports PCI bridges that support subtractive decoding (fixes PCMCIA behind the ATI SB400 PCI bridge), and devices with 64-bit BARs behind PCI-PCI bridges as seen on SPARC T5-2 systems.
90: <li>The <a href="https://man.openbsd.org/OpenBSD-current/man4/puc.4">puc(4)</a> driver now supports Winchiphead CH382 devices.
91: <li>The <a href="https://man.openbsd.org/OpenBSD-current/man4/sdmmc.4">sdmmc(4)</a> driver now supports eMMC storage devices larger than 2GB.
92: <li>The <a href="https://man.openbsd.org/OpenBSD-current/man4/sdhc.4">sdhc(4)</a> driver can properly resume on Ricoh controllers.
93: <li>The <a href="https://man.openbsd.org/OpenBSD-current/man4/sdhc.4">sdhc(4)</a> driver now supports Ricoh R5U822 and R5U823 card readers.
94: <li>The <a href="https://man.openbsd.org/OpenBSD-current/man4/mfii.4">mfii(4)</a> driver now supports the Megaraid 3008 (Fury) and 3108 (Invader) cards.
95: <li>The <a href="https://man.openbsd.org/OpenBSD-current/man4/myx.4">myx(4)</a> driver runs less code under the big lock.
96: <li>The <a href="https://man.openbsd.org/OpenBSD-current/man4/msk.4">msk(4)</a> driver now supports Yukon Prime, Yukon Optima 2, Yukon 88E8079, and various EC U and Supreme chipsets.
97: <li>The <a href="https://man.openbsd.org/OpenBSD-current/man4/umass.4">umass(4)</a> driver now supports Archos 24y Vision devices.
98: <li>The <a href="https://man.openbsd.org/OpenBSD-current/man4/athn.4">athn(4)</a> driver now supports Atheros UB94 devices.
99: <li>The <a href="https://man.openbsd.org/OpenBSD-current/man4/azalia.4">azalia(4)</a> driver now supports Realtek ALC885 codecs and Bay Trail HD Audio devices.
100: <li>The <a href="https://man.openbsd.org/OpenBSD-current/man4/ix.4">ix(4)</a> driver now supports onboard Ethernet devices in SPARC T5 machines.
101: <li>The <a href="https://man.openbsd.org/OpenBSD-current/man4/upd.4">upd(4)</a> driver now handles UPSes with broken report descriptors.
102: <li>The <a href="https://man.openbsd.org/OpenBSD-current/man4/ums.4">ums(4)</a> driver now supports the USB Tablet device emulated by Qemu.
103: <li>The <a href="https://man.openbsd.org/OpenBSD-current/man4/umsm.4">umsm(4)</a> driver now supports MEDION S4222 devices.
104: <li>The <a href="https://man.openbsd.org/OpenBSD-current/man4/pciide.4">pciide(4)</a> driver now supports Intel C610 chipsets.
105: <li>The <a href="https://man.openbsd.org/OpenBSD-current/man4/ukbd.4">ukbd(4)</a> driver now supports "wellspring" Apple keyboards.
106: <li>The <a href="https://man.openbsd.org/OpenBSD-current/man4/pms.4">pms(4)</a> driver now supports click-and-drag with Elantech v4 touchpads.
107: <li>The <a href="https://man.openbsd.org/OpenBSD-current/man4/umodem.4">umodem(4)</a> driver now supports Arduino Leonardo devices.
108: <li>The <a href="https://man.openbsd.org/OpenBSD-current/man4/sk.4">sk(4)</a> driver now supports receive ring scaling.
1.71 dlg 109: <li>Replaced custom jumbo allocators in
1.109 bentley 110: <a href="https://man.openbsd.org/OpenBSD-current/man4/sk.4">sk(4)</a>,
111: <a href="https://man.openbsd.org/OpenBSD-current/man4/nge.4">nge(4)</a>,
112: <a href="https://man.openbsd.org/OpenBSD-current/man4/lge.4">lge(4)</a>, and
113: <a href="https://man.openbsd.org/OpenBSD-current/man4/ti.4">ti(4)</a> with
114: <a href="https://man.openbsd.org/OpenBSD-current/man9/MCLGETI.9">MCLGETI(9)</a>.
115: <li>Wireless network scanning problems with the <a href="https://man.openbsd.org/OpenBSD-current/man4/iwn.4">iwn(4)</a> driver have been fixed.
116: <li>Support for RS* IGP Radeon devices in the <a href="https://man.openbsd.org/OpenBSD-current/man4/radeondrm.4">radeondrm(4)</a> driver has been fixed.
1.66 deraadt 117: <li>PowerMac7,2 and PowerMac7,3 can now boot with a multiprocessor kernel.
1.4 stsp 118: </ul>
119: <p>
120:
121: <li>Removed hardware support:
122: <ul>
1.109 bentley 123: <li>The <a href="https://man.openbsd.org/OpenBSD-5.6/man4/lofn.4">lofn(4)</a> and <a href="https://man.openbsd.org/OpenBSD-5.6/man4/nofn.4">nofn(4)</a> drivers for Hifn crypto accelerator devices have been removed.
124: <li>The <a href="https://man.openbsd.org/OpenBSD-5.6/man4/art.4">art(4)</a> driver for Accoom Networks Artery T1/E1 devices has been removed.
125: <li>The <a href="https://man.openbsd.org/OpenBSD-5.6/man4/urio.4">urio(4)</a> driver for Diamond Multimedia Rio MP3 players has been removed.
1.1 deraadt 126: </ul>
127: <p>
128:
129: <li>Generic network stack improvements:
130: <ul>
1.66 deraadt 131: <li>The routing table is now used for most of the address lookup operations superseding the RB-tree and IPv4 address list.
1.52 lteo 132: <li>The SipHash algorithm is now used for PCB hashing,
1.109 bentley 133: <a href="https://man.openbsd.org/OpenBSD-current/man4/trunk.4">trunk(4)</a> loadbalancing,
134: <a href="https://man.openbsd.org/OpenBSD-current/man4/pf.4">pf(4)</a> and
135: <a href="https://man.openbsd.org/OpenBSD-current/man4/bridge.4">bridge(4)</a>.
1.52 lteo 136: <li>Traffic destinated to link-local IPv6 addresses can now be seen with
1.109 bentley 137: <a href="https://man.openbsd.org/OpenBSD-current/man8/tcpdump.8">tcpdump(8)</a>.
138: <li>A <a href="https://man.openbsd.org/carp.4">carp(4)</a> now needs to be configured with an explicit <em>carpdev</em> parent interface.
1.69 dlg 139: <li>The
1.109 bentley 140: <a href="https://man.openbsd.org/OpenBSD-current/man9/mbuf.9">mbuf(9)</a>
1.69 dlg 141: layer has been made mpsafe.
142: <li>Introduce mbuf_list and mbuf_queue structures and APIs.
1.71 dlg 143: <li>Support changing the IPv6 input queue length via
1.109 bentley 144: <a href="https://man.openbsd.org/sysctl.1">sysctl(1)</a> and net.inet6.ip6.ifq.
1.1 deraadt 145: </ul>
1.44 deraadt 146: <p>
1.1 deraadt 147:
1.10 rpe 148: <li>Installer improvements:
149: <ul>
1.109 bentley 150: <li>The <code>etc</code> and <code>xetc</code> sets are now part of <code>base</code> and
151: <code>xbase</code> and are not distributed separately anymore. They are extracted
152: from <code>base</code> and <code>xbase</code> during installation and upgrades.<br>
153: <b>Note that this includes the <code>rc</code> and <code>rc.conf</code> files!</b>
1.10 rpe 154: <li>The installer now supports
1.109 bentley 155: <a href="https://man.openbsd.org/OpenBSD-current/man4/trunk.4">trunk(4)</a>
1.10 rpe 156: interfaces during upgrades.
157: <li>The discovery of the responsefile location for unattended installation and
1.66 deraadt 158: upgrades has been extended to be more flexible.
1.10 rpe 159: <ul>
1.66 deraadt 160: <li>Ask for the location if DHCP discovery fails for location or mode.
161: <li>Provide a default URL if the 'next-server' DHCP option is found.
1.109 bentley 162: <li>Use <code>/auto_install.conf</code> or <code>/auto_upgrade.conf</code> if present.
1.66 deraadt 163: <li>Automatically start the installer in unattended mode if either one of these
1.10 rpe 164: files is present when the system boots.
165: </ul>
1.29 krw 166: <li>Ignore hostname.if.* files when upgrading.
167: <li>Configure all physical interfaces before any dynamic interface types (e.g. trunks, vlans) when upgrading.
1.35 krw 168: <li>
1.109 bentley 169: <a href="https://man.openbsd.org/fdisk.8">fdisk(8)</a> now zeros out GPT signatures found when writing out an MBR that has been re-initialized and has no EFI or EFISYS partition.
1.36 krw 170: <li>Fixed manipulation of 'ro' and 'rw' fstab options to avoid damage to other options that happen to contain 'ro' or 'rw'.
1.66 deraadt 171: <li>The ramdisk binary (one binary contains all the commands) is now compiled without optimization and security features. The benefit is a substantial saving in space, allowing more features in the future.
1.10 rpe 172: </ul>
173: <p>
174:
1.1 deraadt 175: <li>Routing daemons and other userland network improvements:
176: <ul>
1.109 bentley 177: <li>nginx has been removed from base – use the package if you need it.
1.68 deraadt 178: <li>sliplogin has been removed.
1.109 bentley 179: <li>Sendmail has been removed from base – use the package if you need it.
1.37 sthen 180: <li>IPv6 router solicitations are now sent by the kernel ("inet6 autoconf"); rtsol(8) and rtsold(8) are no longer necessary and have been removed.
1.109 bentley 181: <li>Enhancements and bugfixes in <a href="https://man.openbsd.org/arp.8">arp(8)</a> and <a href="https://man.openbsd.org/ndp.8">ndp(8)</a>
182: <li>The effects of the AI_ADDRCONFIG flag on <a href="https://man.openbsd.org/getaddrinfo.3">getaddrinfo(3)</a> results are limited to DNS queries. This avoids erratic behavior with transient network problems, "raw" addresses and localhost entries in <a href="https://man.openbsd.org/hosts.5">/etc/hosts</a>.
183: <li><a href="https://man.openbsd.org/gethostbyname.3">gethostbyname(3)</a> now no longer fails when more than 16 addresses/aliases are returned. The original pre-asr limit of 35 has been restored, with additional results being truncated.
184: <li><a href="https://man.openbsd.org/tftp.1">tftp(1)</a> now supports sending or receiving files larger than 65536 blocks in size.
185: <li><a href="https://man.openbsd.org/tpd&sec=8">ntpd(8)</a> now supports authenticated TLS constraints.
1.1 deraadt 186: </ul>
187: <p>
188:
189: <li>Security improvements:
190: <ul>
1.66 deraadt 191: <li>Stricter enforcement of W^X in the kernel address space, especially on architectures with the right featureset (amd64, in particular, has seen substantial improvements).
1.27 tedu 192: <li>Support for loadable kernel modules has been removed.
1.32 lteo 193: <li>procfs has been removed.
1.109 bentley 194: <li>Comprehensive audit of the tree to use the <a href="https://man.openbsd.org/reallocarray.3">reallocarray(3)</a> idiom throughout.
195: <li>Many conversions from <a href="https://man.openbsd.org/select.2">select(2)</a> to <a href="https://man.openbsd.org/poll.2">poll(2)</a>.
1.44 deraadt 196: <li>/var/tmp is now a symbolic link to /tmp, as a first step towards reducing the "fill it up" attack surface against the /var partition.
1.109 bentley 197: <li><a href="https://man.openbsd.org/memcpy.3">memcpy(3)</a> with overlapping arguments now aborts a program (with a syslog report), allowing these problems to be found. Overlapping copies should use <a href="https://man.openbsd.org/memmove.3">memmove(3)</a>. Sometime after 5.7 release, having learned more about the situation and repairing instances that are discovered by users during release use, we will go back to the optimized version.
1.44 deraadt 198: <li>Change
1.109 bentley 199: <a href="https://man.openbsd.org/rand.3">rand(3)</a>,
200: <a href="https://man.openbsd.org/random.3">random(3)</a>,
201: <a href="https://man.openbsd.org/drand48.3">drand48(3)</a>,
202: <a href="https://man.openbsd.org/lrand48.3">lrand48(3)</a>,
203: <a href="https://man.openbsd.org/mrand48.3">mrand48(3)</a>,
204: <a href="https://man.openbsd.org/srand48.3">srand48(3)</a>
1.44 deraadt 205: to return non-deterministic strong random values by default, sourced from
1.109 bentley 206: <a href="https://man.openbsd.org/arc4random.3">arc4random(3)</a>.
1.44 deraadt 207: New functions
1.109 bentley 208: <a href="https://man.openbsd.org/srand_deterministic.3">srand_deterministic(3)</a>,
209: <a href="https://man.openbsd.org/srandom_deterministic.3">srandom_deterministic(3)</a>,
210: <a href="https://man.openbsd.org/seed48_deterministic.3">seed48_deterministic(3)</a> and
211: <a href="https://man.openbsd.org/lcong48_deterministic.3">lcong48_deterministic(3)</a>
1.79 deraadt 212: are added for cases where determinism needs to be requested.
1.66 deraadt 213: <li>At resume (or unhibernate) time, use a variety of methods to reseed the random number generator. This also works on VMs which wake up (if a wakeup event is seen).
1.57 deraadt 214: <li>All architectures have been transitioned to static PIE, meaning the statically linked binaries in /bin and /sbin now have randomly located text segments.
1.44 deraadt 215: <li>Allow larger .openbsd.randomdata ELF segments.
1.109 bentley 216: <li>Sync kernel AES code and <a href="https://man.openbsd.org/ssh.1">ssh(1)</a> AES code to the one shipped with OpenSSL/LibreSSL.
217: <li>Removed <a href="https://man.openbsd.org/passwd.1">passwd(1)</a> support for all password ciphers except <a href="https://man.openbsd.org/blowfish.3">blowfish(3)</a>.
218: <li>Use sha512 instead of md5 for <a href="https://man.openbsd.org/tcp.4">tcp(4)</a> initial sequence number.
1.56 benno 219: <li>Use sha512 instead of md5 in the random number generator.
1.109 bentley 220: <li>Delete secret or secret-derived data in many base utilities with <a href="https://man.openbsd.org/explicit_bzero.3">explicit_bzero(3)</a>.
1.1 deraadt 221: </ul>
222: <p>
223:
224: <li>Assorted improvements:
225: <ul>
1.109 bentley 226: <li>New <a href="https://man.openbsd.org/rcctl.8">rcctl(8)</a> utility to control daemons.
227: <li><a href="https://man.openbsd.org/fw_update.1">fw_update(1)</a> has been rewritten to be faster and smarter.
228: <li>Cleanup <a href="https://man.openbsd.org/event.3">libevent(3)</a>,
1.19 bluhm 229: the compatibility layer for other operating systems has been removed.
230: The API is still compatible with upstream libevent 1.4.15-stable.
1.109 bentley 231: <li><a href="https://man.openbsd.org/openssl.1">openssl(1)</a>
1.66 deraadt 232: s_client now supports a -proxy parameter for connecting over an HTTP proxy.
1.27 tedu 233: <li>gzsig has been removed.
1.72 tedu 234: <li>Switch to fast assembly versions of some libc functions on amd64.
1.109 bentley 235: <li>Frequency scaling has been moved from <a href="https://man.openbsd.org/apmd.1">apmd(8)</a> to the kernel with an improved algorithm.
1.66 deraadt 236: <li>Switch last workq API uses to
1.109 bentley 237: <a href="https://man.openbsd.org/taskq_create.9">taskq</a> API and remove all traces of workq.
1.31 krw 238: <li>Use
1.109 bentley 239: <a href="https://man.openbsd.org/services.5">services(5)</a> names in the default pf rules in force during startup.
1.35 krw 240: <li>
1.109 bentley 241: <a href="https://man.openbsd.org/what.1">what(1)</a> now correctly displays $OpenBSD$ expansions.
1.35 krw 242: <li>
1.109 bentley 243: <a href="https://man.openbsd.org/dhcpd.8">dhcpd(8)</a> now removes addresses from its pf table a single time when they expire, rather than at every timeout after the expiry.
1.31 krw 244: <li>
1.109 bentley 245: <a href="https://man.openbsd.org/dhcpd.8">dhcpd(8)</a> now ensures that the pf table process exits when the main process does.
1.31 krw 246: <li>
1.109 bentley 247: <a href="https://man.openbsd.org/dhcpd.8">dhcpd(8)</a> has more informative log entries for DHCPACKs issued in response to DHCPINFORM messages.
1.36 krw 248: <li>Added POSIX types blkcnt_t (int64) and blksize_t (int32), and used them for st_blocks (formerly int64_t) and st_blksize (formerly u_int32_t) in struct stat.
1.38 tedu 249: <li>Improved typography for
1.109 bentley 250: <a href="https://man.openbsd.org/banner.6">banner(6)</a>.
251: <li>Allow <a href="https://man.openbsd.org/hangman.6">hangman</a>
1.91 tedu 252: to play against any ELF file.
1.40 krw 253: <li>
1.109 bentley 254: <a href="https://man.openbsd.org/dhclient.8">dhclient(8)</a> adjusts MTU when the interface-mtu DHCP option is provided.
1.40 krw 255: <li>Various memory leaks in
1.109 bentley 256: <a href="https://man.openbsd.org/dhclient.8">dhclient(8)</a> plugged, providing more stability for long running (in terms of time or renewals) instances.
1.40 krw 257: <li>The
1.109 bentley 258: <a href="https://man.openbsd.org/dhclient.8">dhclient(8)</a>
1.40 krw 259: command line options -q (quiet) and -d (don't daemonize) are now mutually exclusive.
1.66 deraadt 260: <li>The communication between the privileged and unprivileged
1.109 bentley 261: <a href="https://man.openbsd.org/dhclient.8">dhclient(8)</a> processes was reworked to further minimize information sharing.
1.40 krw 262: <li>
1.109 bentley 263: <a href="https://man.openbsd.org/dhclient.8">dhclient(8)</a> ensures lease timeouts (renew, rebind, expire) are sane and uses default values closer to RFC suggestions.
1.40 krw 264: <li>
1.109 bentley 265: <a href="https://man.openbsd.org/dhclient.8">dhclient(8)</a> no longer crashes when a lease expires and cannot be renewed or replaced.
1.40 krw 266: <li>
1.109 bentley 267: <a href="https://man.openbsd.org/dhclient.8">dhclient(8)</a> improved tracking network interface link states.
1.40 krw 268: <li>Improved network error tracking and accounting in
1.109 bentley 269: <a href="https://man.openbsd.org/dhclient.8">dhclient(8)</a>.
1.40 krw 270: <li>Private number conversion functions in
1.109 bentley 271: <a href="https://man.openbsd.org/dhclient.8">dhclient(8)</a> eliminated in favour of standard library functions.
1.66 deraadt 272: <li>Further signal race cleanups in
1.109 bentley 273: <a href="https://man.openbsd.org/ftp.1">ftp(1)</a>.
1.44 deraadt 274: <li>BIND has been retired, encouraging use of
1.109 bentley 275: <a href="https://man.openbsd.org/nsd.8">nsd(8)</a> and
276: <a href="https://man.openbsd.org/unbound.8">unbound(8)</a>.
1.44 deraadt 277: <li>Significant namespace cleanup in the /usr/include files, especially related to <sys/param.h> and <limits.h>.
1.109 bentley 278: <li><a href="https://man.openbsd.org/softraid.4">softraid(4)</a> RAID1 and CRYPTO volumes are now bootable on the sparc64 platform.
279: <li><a href="https://man.openbsd.org/relayd.8">relayd(8)</a> now uses "TLS" rather than "SSL" terminology to reflect the deprecation of the latter.
280: <li><a href="https://man.openbsd.org/relayd.8">relayd(8)</a> now supports the random and source-hash modes with redirections.
281: <li><a href="https://man.openbsd.org/relayd.8">relayd(8)</a> now supports the <a href="https://cvsweb.openbsd.org/src/share/snmp/OPENBSD-RELAYD-MIB.txt?rev=1.1">OPENBSD-RELAYD-MIB</a> via agentx with <a href="https://man.openbsd.org/snmpd.8">snmpd(8)</a>.
282: <li>Added interfaces for setting the close-on-exec flag and/or non-blocking mode on new file descriptors: <a href="https://man.openbsd.org/pipe2.2">pipe2(2)</a>, <a href="https://man.openbsd.org/dup3.2">dup3(2)</a>, <a href="https://man.openbsd.org/accept4.2">accept4(2)</a>, <a href="https://man.openbsd.org/mkostemp.3">mkostemp(3)</a>, <a href="https://man.openbsd.org/mkostemps.3">mkostemps(3)</a>, the <code>SOCK_CLOEXEC</code> and <code>SOCK_NONBLOCK</code> flags for <a href="https://man.openbsd.org/socket.2">socket(2)</a> and <a href="https://man.openbsd.org/socketpair.2">socketpair(2)</a>, and the <code>MSG_CMSG_CLOEXEC</code> flag for <a href="https://man.openbsd.org/recvmsg.2">recvmsg(2)</a>. In addition, <a href="https://man.openbsd.org/posix_spawn_file_actions_adddup2.3">posix_spawn_file_actions_adddup2(3)</a> now always clears the close-on-exec flag.
283: <li>Added interfaces for setting the close-on-exec flag on new FILE handles and for requesting exclusive creation via the the 'e' and 'x' mode letters for <a href="https://man.openbsd.org/fopen.3">fopen(3)</a>, <a href="https://man.openbsd.org/fdopen.3">fdopen(3)</a>, <a href="https://man.openbsd.org/freopen.3">freopen(3)</a>, and <a href="https://man.openbsd.org/popen.3">popen(3)</a>.
1.50 guenther 284: <li>Many library functions and programs changed to use the above for safety or simplicity.
1.109 bentley 285: <li>Added <a href="https://man.openbsd.org/chflagsat.2">chflagsat(2)</a>, <a href="https://man.openbsd.org/sockatmark.3">sockatmark(3)</a>, and <a href="https://man.openbsd.org/stravis.3">stravis(3)</a>.
286: <li>Merged performance and safety fixes for <a href="https://man.openbsd.org/fts.3">fts(3)</a> from FreeBSD.
287: <li>Merged fixes for file descriptor leaks in various <a href="https://man.openbsd.org/rpc.3">rpc(3)</a> functions from NetBSD.
288: <li>Added a <code>kern.global_ptrace</code> <a href="https://man.openbsd.org/sysctl.1">sysctl(1)</a> to disable, by default, the ability to <a href="https://man.openbsd.org/ptrace.2">ptrace(2)</a> processes that aren't your descendent.
289: <li><a href="https://man.openbsd.org/kdump.1">kdump(1)</a> now always displays both the numeric and the textual forms for users, groups, timestamps, and sysctl ids, eliminating the <code>-r</code> option. It also auto-selects between decimal and hex format for arguments, renders more types of flags, and is more robust when parsing corrupt ktrace files.
290: <li><a href="https://man.openbsd.org/chmod.1">chmod(1)</a>/<a href="https://man.openbsd.org/chgrp.1">chgrp(1)</a>/<a href="https://man.openbsd.org/chown.8">chown(8)</a> now comply with POSIX's requirements when they encounter symlinks when the <code>-R</code> option is used, and are safe from race conditions when doing so.
291: <li>The <a href="https://man.openbsd.org/dmesg.8">dmesg(8)</a> utility can now display the console message buffer in addition to the system message buffer.
292: <li><a href="https://man.openbsd.org/inetd.8">inetd(8)</a> now uses libevent instead of
293: <a href="https://man.openbsd.org/select.3">select(3)</a>.
1.70 dlg 294: <li>Reworking of the kernel
1.109 bentley 295: <a href="https://man.openbsd.org/OpenBSD-current/man9/pool.9">pool(9)</a>
1.70 dlg 296: implementation to provide mpsafety and pave the way for performance improvements.
1.71 dlg 297: <li>Removed the
1.109 bentley 298: <a href="https://man.openbsd.org/OpenBSD-5.6/man9/workq_add_task.9">workq API</a>
1.71 dlg 299: after replacing it with the
1.109 bentley 300: <a href="https://man.openbsd.org/OpenBSD-current/man9/task_add.9">task API</a>.
1.71 dlg 301: <li>Add support for creating kernel threads that cannot sleep to
1.109 bentley 302: <a href="https://man.openbsd.org/OpenBSD-5.6/man9/taskq_create.9">taskq_create(9)</a>.
1.110 ! deraadt 303: <li>Completed the implementation of the atomic (eg,
1.109 bentley 304: <a href="https://man.openbsd.org/OpenBSD-current/man9/atomic_cas_uint.9">atomic_cas_uint(9)</a>,
305: <a href="https://man.openbsd.org/OpenBSD-current/man9/atomic_swap_uint.9">atomic_swap_uint(9)</a>,
306: <a href="https://man.openbsd.org/OpenBSD-current/man9/atomic_add_int.9">atomic_add_int(9)</a>,
307: <a href="https://man.openbsd.org/OpenBSD-current/man9/atomic_sub_int.9">atomic_sub_int(9)</a>,
308: <a href="https://man.openbsd.org/OpenBSD-current/man9/atomic_inc_int.9">atomic_inc_int(9)</a>, and
309: <a href="https://man.openbsd.org/OpenBSD-current/man9/atomic_dec_int.9">atomic_dec_int(9)</a>)
1.71 dlg 310: and membar
1.109 bentley 311: (<a href="https://man.openbsd.org/OpenBSD-current/man9/membar_sync.9">membar_sync(9)</a>)
1.71 dlg 312: APIs across all supported architectures.
1.46 reyk 313: </ul>
314: <p>
315:
1.109 bentley 316: <li>OpenBSD <a href="https://man.openbsd.org/httpd.8">httpd(8)</a>:
1.46 reyk 317: <ul>
1.66 deraadt 318: <li>SSLv2/3 is not supported anymore; renamed all occurrences of "SSL" to "TLS".
1.46 reyk 319: <li>Various TLS improvements with better support for ECDHE/DHE forward secrecy.
320: <li>Improved support for virtual hosts by supporting name- and IP- based aliases.
1.109 bentley 321: <li>Added support for basic authentication by checking against files created with <a href="https://man.openbsd.org/htpasswd.1">htpasswd(1)</a>.
1.46 reyk 322: <li>Added support for custom error codes, blocking and dropping of connections.
323: <li>Added support for redirections and macros in specified target URLs.
324: <li>Added the "root strip" option to sanitize PATH_INFO for some CGI scripts.
325: <li>Added an option to specify an alternative log directory instead of /var/www/logs.
1.109 bentley 326: <li>Various FastCGI improvements; <a href="https://man.openbsd.org/httpd.8">httpd(8)</a> is now compatible with many well-known web applications.
1.46 reyk 327: <li>Various other fixes and improvements.
328: </ul>
329: <p>
330:
331: <li>OpenSMTPD 5.4.4:
332: <ul>
1.66 deraadt 333: <li>SSLv3 is not supported anymore.
1.59 gilles 334: <li>Added support for a new message and headers parser.
335: <li>Added support for append-domain.
336: <li>Restricted address lookups to configured address families.
337: <li>Domain is no longer required when mailing a local user.
338: <li>Various other fixes and improvements.
1.1 deraadt 339: </ul>
340: <p>
341:
1.3 sobrado 342: <li>OpenSSH 6.8
1.1 deraadt 343: <ul>
344: <li>Potentially-incompatible changes:
345: <ul>
1.109 bentley 346: <li><a href="https://man.openbsd.org/sshd.8">sshd(8)</a>:
347: <code>UseDNS</code> now defaults to 'no'. Configurations that match
1.3 sobrado 348: against the client host name (via
1.109 bentley 349: <a href="https://man.openbsd.org/sshd_config.5">sshd_config(5)</a>
350: or <code>authorized_keys</code>) may need to re-enable it or convert to
1.3 sobrado 351: matching against addresses.
1.1 deraadt 352: </ul>
353: <li>New/changed features:
354: <ul>
1.3 sobrado 355: <li>Much of OpenSSH's internal code has been re-factored to be more
356: library-like. These changes are mostly not user-visible, but
357: have greatly improved OpenSSH's testability and internal layout.
1.109 bentley 358: <li>Add <code>FingerprintHash</code> option to
359: <a href="https://man.openbsd.org/ssh.1">ssh(1)</a>
1.3 sobrado 360: and
1.109 bentley 361: <a href="https://man.openbsd.org/sshd.8">sshd(8)</a>,
1.3 sobrado 362: and equivalent command-line flags to the other tools to control
363: algorithm used for key fingerprints. The default changes from MD5
364: to SHA256 and format from hex to base64. Fingerprints now have the
365: hash algorithm prepended. Please note that visual host keys will also
366: be different.
1.109 bentley 367: <li><a href="https://man.openbsd.org/ssh.1">ssh(1)</a>,
368: <a href="https://man.openbsd.org/sshd.8">sshd(8)</a>:
1.34 sobrado 369: Experimental host key rotation support. Add a protocol extension
1.28 sobrado 370: for a server to inform a client of all its available host keys after
371: authentication has completed. The client may record the keys in
1.109 bentley 372: <code>known_hosts</code>, allowing it to upgrade to better host key
1.28 sobrado 373: algorithms and a server to gracefully rotate its keys. The client
1.109 bentley 374: side of this is controlled by a <code>UpdateHostkeys</code> config option
1.28 sobrado 375: (default off).
1.109 bentley 376: <li><a href="https://man.openbsd.org/ssh.1">ssh(1)</a>:
1.3 sobrado 377: Add a
1.109 bentley 378: <a href="https://man.openbsd.org/ssh_config.5">ssh_config(5)</a>
379: <code>HostbasedKeyType</code> option to control which host public key types
1.3 sobrado 380: are tried during host-based authentication.
1.109 bentley 381: <li><a href="https://man.openbsd.org/ssh.1">ssh(1)</a>,
382: <a href="https://man.openbsd.org/sshd.8">sshd(8)</a>:
1.3 sobrado 383: fix connection-killing host key mismatch errors when
1.109 bentley 384: <a href="https://man.openbsd.org/sshd.8">sshd(8)</a>
1.3 sobrado 385: offers multiple ECDSA keys of different lengths.
1.109 bentley 386: <li><a href="https://man.openbsd.org/ssh.1">ssh(1)</a>:
1.3 sobrado 387: when host name canonicalisation is enabled, try to parse host names
388: as addresses before looking them up for canonicalisation. Fixes
389: bz#2074 and avoiding needless DNS lookups in some cases.
1.109 bentley 390: <li><a href="https://man.openbsd.org/ssh-keygen.1">ssh-keygen(1)</a>,
391: <a href="https://man.openbsd.org/sshd.8">sshd(8)</a>:
1.3 sobrado 392: <i>Key Revocation Lists</i> (KRLs) no longer require OpenSSH to be
393: compiled with OpenSSL support.
1.109 bentley 394: <li><a href="https://man.openbsd.org/ssh.1">ssh(1)</a>,
395: <a href="https://man.openbsd.org/ssh-keysign.8">ssh-keysign(8)</a>:
1.3 sobrado 396: Make ed25519 keys work for host based authentication.
1.109 bentley 397: <li><a href="https://man.openbsd.org/sshd.8">sshd(8)</a>:
1.3 sobrado 398: SSH protocol v.1 workaround for the Meyer, et al., <i>Bleichenbacher
399: Side Channel Attack</i>. Fake up a bignum key before RSA decryption.
1.109 bentley 400: <li><a href="https://man.openbsd.org/sshd.8">sshd(8)</a>:
1.3 sobrado 401: Remember which public keys have been used for authentication and
402: refuse to accept previously-used keys. This allows
1.109 bentley 403: <code>AuthenticationMethods=publickey,publickey</code> to require that
1.3 sobrado 404: users authenticate using two <i>different</i> public keys.
1.109 bentley 405: <li><a href="https://man.openbsd.org/sshd.8">sshd(8)</a>:
1.3 sobrado 406: add
1.109 bentley 407: <a href="https://man.openbsd.org/sshd_config.5">sshd_config(5)</a>
408: <code>HostbasedAcceptedKeyTypes</code> and <code>PubkeyAcceptedKeyTypes</code>
1.3 sobrado 409: options to allow
1.109 bentley 410: <a href="https://man.openbsd.org/sshd.8">sshd(8)</a>
1.3 sobrado 411: to control what public key types will be accepted. Currently defaults
412: to all.
1.109 bentley 413: <li><a href="https://man.openbsd.org/sshd.8">sshd(8)</a>:
1.3 sobrado 414: Don't count partial authentication success as a failure against
1.109 bentley 415: <code>MaxAuthTries</code>.
416: <li><a href="https://man.openbsd.org/ssh.1">ssh(1)</a>:
417: Add <code>RevokedHostKeys</code> option for the client to allow text-file
1.3 sobrado 418: or KRL-based revocation of host keys.
1.109 bentley 419: <li><a href="https://man.openbsd.org/ssh-keygen.1">ssh-keygen(1)</a>,
420: <a href="https://man.openbsd.org/sshd.8">sshd(8)</a>:
1.3 sobrado 421: Permit KRLs that revoke certificates by serial number or key ID without
422: scoping to a particular CA.
1.109 bentley 423: <li><a href="https://man.openbsd.org/ssh.1">ssh(1)</a>:
1.3 sobrado 424: Add a "Match canonical" criteria that allows
1.109 bentley 425: <a href="https://man.openbsd.org/ssh_config.5">ssh_config(5)</a>
426: <code>Match</code> blocks to trigger only in the second config pass.
427: <li><a href="https://man.openbsd.org/ssh.1">ssh(1)</a>:
428: Add a <code>-G</code> option to
429: <a href="https://man.openbsd.org/ssh.1">ssh(1)</a>
1.3 sobrado 430: that causes it to parse its configuration and dump the result to
1.109 bentley 431: stdout, similar to "<code>sshd -T</code>".
432: <li><a href="https://man.openbsd.org/ssh.1">ssh(1)</a>:
433: Allow <code>Match</code> criteria to be negated
434: (e.g. "<code>Match !host</code>").
1.3 sobrado 435: <li>The regression test suite has been extended to cover more OpenSSH
436: features. The unit tests have been expanded and now cover key
437: exchange.
1.1 deraadt 438: </ul>
439: <li>The following significant bugs have been fixed in this release:
440: <ul>
1.109 bentley 441: <li><a href="https://man.openbsd.org/ssh-keyscan.1">ssh-keyscan(1)</a>:
442: <a href="https://man.openbsd.org/ssh-keyscan.1">ssh-keyscan(1)</a>
1.3 sobrado 443: has been made much more robust again servers that hang or violate
444: the SSH protocol.
1.109 bentley 445: <li><a href="https://man.openbsd.org/ssh.1">ssh(1)</a>,
446: <a href="https://man.openbsd.org/ssh-keygen.1">ssh-keygen(1)</a>:
1.3 sobrado 447: Fix regression bz#2306: Key path names were being lost as comment
448: fields.
1.109 bentley 449: <li><a href="https://man.openbsd.org/ssh.1">ssh(1)</a>:
1.3 sobrado 450: Allow
1.109 bentley 451: <a href="https://man.openbsd.org/ssh_config.5">ssh_config(5)</a>
452: <code>Port</code> options set in the second config parse phase to be
1.3 sobrado 453: applied (they were being ignored). (bz#2286)
1.109 bentley 454: <li><a href="https://man.openbsd.org/ssh.1">ssh(1)</a>:
455: Tweak config re-parsing with host canonicalisation—make the
1.3 sobrado 456: second pass through the config files always run when host name
457: canonicalisation is enabled (and not whenever the host name changes).
458: (bz#2267)
1.109 bentley 459: <li><a href="https://man.openbsd.org/ssh.1">ssh(1)</a>:
1.3 sobrado 460: Fix passing of wildcard forward bind addresses when connection
461: multiplexing is in use. (bz#2324)
1.109 bentley 462: <li><a href="https://man.openbsd.org/ssh-keygen.1">ssh-keygen(1)</a>:
1.3 sobrado 463: Fix broken private key conversion from non-OpenSSH formats. (bz#2345)
1.109 bentley 464: <li><a href="https://man.openbsd.org/ssh-keygen.1">ssh-keygen(1)</a>:
1.3 sobrado 465: Fix KRL generation bug when multiple CAs are in use.
466: <li>Various fixes to manual pages. (bz#2273, bz#2288 and bz#2316)
1.1 deraadt 467: </ul>
468: </ul>
469: <p>
470:
471: <li>LibreSSL
472: <ul>
1.73 sobrado 473: <li>User-visible features:
474: <ul>
1.109 bentley 475: <li>Reluctantly add server-side support for <code>TLS_FALLBACK_SCSV</code>.
1.73 sobrado 476: <li>Import <i>BoringSSL</i>'s crypto bytestring and crypto bytebuilder
477: APIs.
478: <li>Jettison DTLS over SCTP.
479: <li>Move
1.109 bentley 480: <a href="https://man.openbsd.org/openssl.1">openssl(1)</a>
481: from <code>/usr/sbin/openssl</code> to <code>/usr/bin/openssl</code>.
1.73 sobrado 482: <li>Two important cipher suites, GOST and Camellia, have been reworked
483: or reenabled, providing better interoperability with systems around
484: the world.
485: <li>libtls: New API for loading CA chains directly from memory instead
486: of a file, allowing verification with privilege separation in a
1.109 bentley 487: <a href="https://man.openbsd.org/chroot.8">chroot(8)</a>
1.73 sobrado 488: without direct access to CA certificate files.
489: <li>libtls: Ciphers default to TLSv1.2 with AEAD and PFS.
490: <li>libtls: Improved error handling and message generation.
1.109 bentley 491: <li>Added <code>X509_STORE_load_mem</code> API for loading certificates from
1.73 sobrado 492: memory. This facilitates accessing certificates from a chrooted
493: environment.
494: <li>New AEAD "MAC alias" allows configuring TLSv1.2 AEAD ciphers by
495: using 'TLSv1.2+AEAD' as the cipher selection string.
496: <li>New
1.109 bentley 497: <a href="https://man.openbsd.org/openssl.1">openssl(1)</a>
498: command '<code>certhash</code>' replaces the <code>c_rehash</code> script.
1.73 sobrado 499: <li><i>Application-Layer Protocol Negotiation</i> (ALPN) support.
500: </ul>
501: <li>Code improvements:
502: <ul>
503: <li>Dead and disabled code removal including MD5, Netscape workarounds,
504: non-POSIX IO, SCTP, RFC 3779 support, "#if 0" sections, and more.
505: <li>The ASN1 macros are expanded to aid readability and maintainability.
506: <li>Various NULL pointer asserts removed in favor of letting the
507: OS/signal handler catch them.
508: <li>Dozens of issues found with the <i>Coverity scanner</i> fixed.
509: </ul>
510: <li>Security updates:
511: <ul>
512: <li>Fix a Bleichenbacher style timing oracle with bad PKCS padding.
513: <li>Fix memory leaks.
514: <li>Address POODLE attack by disabling SSLv3 by default.
515: <li>SHA256 Camellia cipher suites for TLS 1.2 from RFC 5932.
516: <li>Earlier libtls support for non-blocking sockets and randomized
517: session ID contexts.
518: <li>Ensure the stack is marked non-executable for assembly sections.
519: <li>Multiple CVEs fixed including CVE-2014-3506, CVE-2014-3507,
520: CVE-2014-3508, CVE-2014-3509, CVE-2014-3510, CVE-2014-3511,
521: CVE-2014-3570, CVE-2014-3572, CVE-2014-8275, CVE-2015-0205
522: and CVE-2015-0206.
523: </ul>
1.1 deraadt 524: </ul>
525: <p>
1.33 schwarze 526: <li>mandoc 1.13.3:
1.1 deraadt 527: <ul>
1.109 bentley 528: <li><a href="https://man.openbsd.org/man.1">man(1)</a>,
529: <a href="https://man.openbsd.org/apropos.1">apropos(1)</a>, and
530: <a href="https://man.openbsd.org/mandoc.1">mandoc(1)</a>
1.33 schwarze 531: now have a unified user interface, all with the same options,
532: and are in fact all implemented by the same binary program.
1.109 bentley 533: <li>For <a href="https://man.openbsd.org/man.1">man(1)</a>,
1.33 schwarze 534: this implies new options -l and -IKOTW,
535: and it now finds manual pages by the names in their NAME sections
536: even if they lack matching file names.
1.109 bentley 537: <li>For <a href="https://man.openbsd.org/apropos.1">apropos(1)</a>,
1.33 schwarze 538: this implies new options -acfhklw and -IKOTW.
1.109 bentley 539: <li>For <a href="https://man.openbsd.org/mandoc.1">mandoc(1)</a>,
1.33 schwarze 540: this implies new options -acfhkl.
1.109 bentley 541: <li><a href="https://man.openbsd.org/mandoc.1">mandoc(1)</a>
1.33 schwarze 542: now automatically detects and transparently accepts input encoded
543: in utf-8 and iso-8859-1, and provides a new option -K to explicitly
544: specify the input encoding.
1.109 bentley 545: <li>The <a href="https://man.openbsd.org/mandoc.1">mandoc(1)</a>
1.33 schwarze 546: default output mode now is -Tlocale rather than -Tascii.
1.109 bentley 547: <li><a href="https://man.openbsd.org/eqn.7">eqn(7)</a>
1.33 schwarze 548: now supports in-line equations,
549: and terminal rendering of equations is considerably improved.
1.109 bentley 550: <li><a href="https://man.openbsd.org/mandoc.1">mandoc(1)</a> -Thtml
1.33 schwarze 551: now generates polyglot HTML5 and renders
1.109 bentley 552: <a href="https://man.openbsd.org/eqn.7">eqn(7)</a>
1.33 schwarze 553: using MathML.
1.109 bentley 554: <li><a href="https://man.openbsd.org/mandoc.1">mandoc(1)</a>
1.33 schwarze 555: can no longer fail with fatal errors, no matter how broken the input
556: file may be, and the -Wfatal message level no longer has any effect.
557: A new diagnostic level -Wunsupp is provided. Besides, many
558: diagnostic messages are now more specific.
559: <li>Many crashes were fixed that Jonathan Gray found with the
560: American Fuzzy Lop (afl).
1.1 deraadt 561: </ul>
562:
563: <p>
1.17 bluhm 564: <li>Syslogd:
565: <ul>
1.109 bentley 566: <li>OpenBSD <a href="https://man.openbsd.org/syslogd.8">syslogd(8)</a>
1.52 lteo 567: is based on
1.109 bentley 568: <a href="https://man.openbsd.org/event.3">libevent</a>
1.52 lteo 569: now.
1.17 bluhm 570: <li>Sending and receiving UDP messages works with both IPv4 and IPv6.
571: <li>Syslog messages can also be sent over TCP or TLS.
1.20 bluhm 572: The syntax to specify the loghost is documented in
1.109 bentley 573: <a href="https://man.openbsd.org/syslog.conf.5">syslog.conf(5)</a>.
1.20 bluhm 574: <li>Sending over TCP and TLS is reliable.
575: If a connection terminates, syslogd tries to reconnect.
576: When the message buffer in memory gets full, the number of dropped
577: messages is counted and logged.
1.66 deraadt 578: <li>With TLS, the x509 certificate of the syslog server is verified.
1.17 bluhm 579: <li>The maximum message size has been increased according to newer RFC.
580: </ul>
581: <p>
1.1 deraadt 582: <li>Ports and packages:
583: <ul>
1.58 sthen 584: <li>Over 9,000 ports.
1.1 deraadt 585: </ul>
586: <p>
587: <li>Many pre-built packages for each architecture:
1.109 bentley 588: <ul style="column-count: 4">
1.58 sthen 589: <li>i386: 8722
1.86 sthen 590: <li>sparc64: 8184
591: <li>alpha: 6811
1.85 sthen 592: <li>sh: 0
1.58 sthen 593: <li>amd64: 8745
1.86 sthen 594: <li>powerpc: 8286
595: <li>m88k: 1148
596: <li>sparc: 4026
1.85 sthen 597: <li>arm: 0
1.86 sthen 598: <li>hppa: 6718
599: <li>vax: 1550
1.82 deraadt 600: <li>mips64: 1595
601: <li>mips64el: 6914
1.109 bentley 602: </ul>
1.1 deraadt 603: <p>
604:
605: <li>Some highlights:
1.109 bentley 606: <ul style="column-count: 2">
1.67 sthen 607: <li>Chromium 40.0.2214.115
608: <li>Emacs 21.4 and 24.4
609: <li>GCC 4.8.4 and 4.9.2
610: <li>GHC 7.8.4
611: <li>GNOME 3.14.2
612: <li>Go 1.4.1
613: <li>Groff 1.22.3
614: <li>JDK 1.7.0.71
615: <li>KDE 3.5.10 and 4.14.3
616: <li>LLVM/Clang 3.5 (20140228)
617: <li>LibreOffice 4.3.5.2
618: <li>MariaDB 10.0.16
619: <li>Mono 3.12.0
620: <li>Mozilla Firefox 31.4.0esr and 35.0.1
621: <li>Mozilla Thunderbird 31.4.0
622: <li>Node.js 0.10.35
623: <li>OpenLDAP 2.3.43 and 2.4.40
624: <li>PHP 5.3.29, 5.4.38, 5.5.22 and 5.6.5
625: <li>Postfix 2.11.4
626: <li>PostgreSQL 9.4.1
627: <li>Python 2.7.9 and 3.4.2
628: <li>R 3.1.2
629: <li>Ruby 1.8.7.374, 1.9.3.551, 2.0.0.598, 2.1.5, and 2.2.0
1.81 nick 630: <li>Sendmail 8.15.1
1.67 sthen 631: <li>Tcl/Tk 8.5.16 and 8.6.2
632: <li>TeX Live 2013
633: <li>Vim 7.4.475
634: <li>Xfce 4.10
1.109 bentley 635: </ul>
1.1 deraadt 636: <p>
637:
638: <li>As usual, steady improvements in manual pages and other documentation.
639: <p>
640:
641: <li>The system includes the following major components from outside suppliers:
642: <ul>
1.2 lteo 643: <li>Xenocara (based on X.Org 7.7 with xserver 1.16.4 + patches,
644: freetype 2.5.5, fontconfig 2.11.1, Mesa 10.2.9, xterm 314,
645: xkeyboard-config 2.13 and more)
1.1 deraadt 646: <li>Gcc 4.2.1 (+ patches) and 3.3.6 (+ patches)
1.2 lteo 647: <li>Perl 5.20.1 (+ patches)
648: <li>SQLite 3.8.6 (+ patches)
649: <li>NSD 4.1.1
1.22 brad 650: <li>Unbound 1.5.2
1.1 deraadt 651: <li>Sudo 1.7.2p8
652: <li>Ncurses 5.7
653: <li>Binutils 2.15 (+ patches)
654: <li>Gdb 6.3 (+ patches)
655: <li>Less 458 (+ patches)
656: <li>Awk Aug 10, 2011 version
657: </ul>
658: </ul>
1.109 bentley 659: </section>
1.1 deraadt 660:
661: <hr>
1.109 bentley 662:
663: <section id=install>
664: <h3>How to install</h3>
665:
1.1 deraadt 666: <p>
667: Following this are the instructions which you would have on a piece of
668: paper if you had purchased a CDROM set instead of doing an alternate
1.16 rpe 669: form of install. The instructions for doing an HTTP (or other style
1.1 deraadt 670: of) install are very similar; the CDROM instructions are left intact
671: so that you can see how much easier it would have been if you had
672: purchased a CDROM instead.
673: <p>
674:
675: <hr>
1.16 rpe 676: Please refer to the following files on the three CDROMs or mirror site for
1.1 deraadt 677: extensive details on how to install OpenBSD 5.7 on your machine:
678: <p>
679: <ul>
1.101 tb 680: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/5.7/alpha/INSTALL.alpha">
1.1 deraadt 681: .../OpenBSD/5.7/alpha/INSTALL.alpha (on CD1)</a>
1.101 tb 682: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/5.7/i386/INSTALL.i386">
1.1 deraadt 683: .../OpenBSD/5.7/i386/INSTALL.i386 (on CD1)</a>
1.101 tb 684: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/5.7/hppa/INSTALL.hppa">
1.1 deraadt 685: .../OpenBSD/5.7/hppa/INSTALL.hppa (on CD1)</a>
686: <p>
1.101 tb 687: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/5.7/amd64/INSTALL.amd64">
1.1 deraadt 688: .../OpenBSD/5.7/amd64/INSTALL.amd64 (on CD2)</a>
1.101 tb 689: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/5.7/macppc/INSTALL.macppc">
1.1 deraadt 690: .../OpenBSD/5.7/macppc/INSTALL.macppc (on CD2)</a>
691: <p>
1.101 tb 692: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/5.7/sparc64/INSTALL.sparc64">
1.1 deraadt 693: .../OpenBSD/5.7/sparc64/INSTALL.sparc64 (on CD3)</a>
1.101 tb 694: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/5.7/sparc/INSTALL.sparc">
1.1 deraadt 695: .../OpenBSD/5.7/sparc/INSTALL.sparc (on CD3)</a>
696: <p>
1.101 tb 697: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/5.7/alpha/INSTALL.alpha">
1.95 deraadt 698: .../OpenBSD/5.7/alpha/INSTALL.alpha</a>
1.101 tb 699: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/5.7/armish/INSTALL.armish">
1.1 deraadt 700: .../OpenBSD/5.7/armish/INSTALL.armish</a>
1.101 tb 701: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/5.7/aviion/INSTALL.aviion">
1.1 deraadt 702: .../OpenBSD/5.7/aviion/INSTALL.aviion</a>
1.101 tb 703: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/5.7/hppa/INSTALL.hppa">
1.95 deraadt 704: .../OpenBSD/5.7/hppa/INSTALL.hppa</a>
1.101 tb 705: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/5.7/landisk/INSTALL.landisk">
1.1 deraadt 706: .../OpenBSD/5.7/landisk/INSTALL.landisk</a>
1.101 tb 707: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/5.7/loongson/INSTALL.loongson">
1.1 deraadt 708: .../OpenBSD/5.7/loongson/INSTALL.loongson</a>
1.101 tb 709: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/5.7/luna88k/INSTALL.luna88k">
1.1 deraadt 710: .../OpenBSD/5.7/luna88k/INSTALL.luna88k</a>
1.101 tb 711: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/5.7/macppc/INSTALL.macppc">
1.95 deraadt 712: .../OpenBSD/5.7/macppc/INSTALL.macppc</a>
1.101 tb 713: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/5.7/octeon/INSTALL.octeon">
1.1 deraadt 714: .../OpenBSD/5.7/octeon/INSTALL.octeon</a>
1.101 tb 715: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/5.7/sgi/INSTALL.sgi">
1.1 deraadt 716: .../OpenBSD/5.7/sgi/INSTALL.sgi</a>
1.101 tb 717: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/5.7/socppc/INSTALL.socppc">
1.1 deraadt 718: .../OpenBSD/5.7/socppc/INSTALL.socppc</a>
1.101 tb 719: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/5.7/sparc/INSTALL.sparc">
1.95 deraadt 720: .../OpenBSD/5.7/sparc/INSTALL.sparc</a>
1.101 tb 721: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/5.7/vax/INSTALL.vax">
1.1 deraadt 722: .../OpenBSD/5.7/vax/INSTALL.vax</a>
1.101 tb 723: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/5.7/zaurus/INSTALL.zaurus">
1.1 deraadt 724: .../OpenBSD/5.7/zaurus/INSTALL.zaurus</a>
725: </ul>
726: <hr>
727:
1.109 bentley 728: <section id=quickinstall>
729:
1.1 deraadt 730: <p>
731: Quick installer information for people familiar with OpenBSD, and the
732: use of the "disklabel -E" command. If you are at all confused when
733: installing OpenBSD, read the relevant INSTALL.* file as listed above!
1.109 bentley 734:
735: <h3>OpenBSD/i386:</h3>
736:
1.1 deraadt 737: <p>
1.26 tedu 738: The OpenBSD/i386 release is on CD1.
739: Boot from the CD to begin the install - you may need to adjust
740: your BIOS options first.
1.1 deraadt 741:
742: <p>
1.49 bcallah 743: If your machine can boot from USB, you can write <i>install57.fs</i> or
744: <i>miniroot57.fs</i> to a USB stick and boot from it.
745:
746: <p>
747: If you can't boot from a CD, floppy disk, or USB,
1.1 deraadt 748: you can install across the network using PXE as described in
749: the included INSTALL.i386 document.
750:
751: <p>
752: If you are planning on dual booting OpenBSD with another OS, you will need to
753: read INSTALL.i386.
754:
1.109 bentley 755: <h3>OpenBSD/amd64:</h3>
1.1 deraadt 756:
757: <p>
1.26 tedu 758: The OpenBSD/amd64 release is on CD2.
1.1 deraadt 759: Boot from the CD to begin the install - you may need to adjust
760: your BIOS options first.
761:
762: <p>
1.49 bcallah 763: If your machine can boot from USB, you can write <i>install57.fs</i> or
764: <i>miniroot57.fs</i> to a USB stick and boot from it.
765:
766: <p>
767: If you can't boot from a CD, floppy disk, or USB,
1.1 deraadt 768: you can install across the network using PXE as described in the included
769: INSTALL.amd64 document.
770:
771: <p>
772: If you are planning to dual boot OpenBSD with another OS, you will need to
773: read INSTALL.amd64.
1.109 bentley 774:
775: <h3>OpenBSD/macppc:</h3>
1.1 deraadt 776:
777: <p>
1.16 rpe 778: Burn the image from a mirror site to a CDROM, and power on your machine
1.1 deraadt 779: while holding down the <i>C</i> key until the display turns on and
780: shows <i>OpenBSD/macppc boot</i>.
781:
782: <p>
783: Alternatively, at the Open Firmware prompt, enter <i>boot cd:,ofwboot
784: /5.7/macppc/bsd.rd</i>
1.109 bentley 785:
786: <h3>OpenBSD/sparc64:</h3>
1.1 deraadt 787:
788: <p>
1.87 deraadt 789: <b>
790: <a href="errata57.html#001_sparc64_miniroot">5.7 Errata 001</a>:
791: Unfortunately, 5.7 cannot boot from CDROM on some machines due
1.110 ! deraadt 792: a bootloader bug.
1.87 deraadt 793: </b>
1.109 bentley 794:
795: <p>
1.1 deraadt 796: Put CD3 in your CDROM drive and type <i>boot cdrom</i>.
797:
798: <p>
799: If this doesn't work, or if you don't have a CDROM drive, you can write
800: <i>CD3:5.7/sparc64/floppy57.fs</i> or <i>CD3:5.7/sparc64/floppyB57.fs</i>
801: (depending on your machine) to a floppy and boot it with <i>boot
802: floppy</i>. Refer to INSTALL.sparc64 for details.
803:
804: <p>
805: Make sure you use a properly formatted floppy with NO BAD BLOCKS or your install
806: will most likely fail.
807:
808: <p>
809: You can also write <i>CD3:5.7/sparc64/miniroot57.fs</i> to the swap partition on
810: the disk and boot with <i>boot disk:b</i>.
811:
812: <p>
813: If nothing works, you can boot over the network as described in INSTALL.sparc64.
1.109 bentley 814:
815: <h3>OpenBSD/alpha:</h3>
1.1 deraadt 816:
817: <p>
1.109 bentley 818: Write <i>FTP:5.7/alpha/floppy57.fs</i> or
1.1 deraadt 819: <i>FTP:5.7/alpha/floppyB57.fs</i> (depending on your machine) to a diskette and
820: enter <i>boot dva0</i>. Refer to INSTALL.alpha for more details.
821:
822: <p>
823: Make sure you use a properly formatted floppy with NO BAD BLOCKS or your install
824: will most likely fail.
825:
1.109 bentley 826: <h3>OpenBSD/armish:</h3>
1.1 deraadt 827:
828: <p>
829: After connecting a serial port, Thecus can boot directly from the network
830: either tftp or http. Configure the network using fconfig, reset,
831: then load bsd.rd, see INSTALL.armish for specific details.
832: IOData HDL-G can only boot from an EXT-2 partition. Boot into linux
833: and copy 'boot' and bsd.rd into the first partition on wd0 (hda1)
834: then load and run bsd.rd, preserving the wd0i (hda1) ext2fs partition.
835: More details are available in INSTALL.armish.
1.109 bentley 836:
837: <h3>OpenBSD/hppa:</h3>
1.1 deraadt 838:
839: <p>
840: Boot over the network by following the instructions in INSTALL.hppa or the
841: <a href="hppa.html#install">hppa platform page</a>.
842:
1.109 bentley 843: <h3>OpenBSD/landisk:</h3>
844:
1.1 deraadt 845: <p>
846: Write <i>miniroot57.fs</i> to the start of the CF
847: or disk, and boot normally.
1.109 bentley 848:
849: <h3>OpenBSD/loongson:</h3>
1.1 deraadt 850:
851: <p>
852: Write <i>miniroot57.fs</i> to a USB stick and boot bsd.rd from it
853: or boot bsd.rd via tftp.
854: Refer to the instructions in INSTALL.loongson for more details.
855:
1.109 bentley 856: <h3>OpenBSD/luna88k:</h3>
857:
1.1 deraadt 858: <p>
1.109 bentley 859: Copy 'boot' and 'bsd.rd' to a Mach or UniOS partition, and boot the bootloader
1.1 deraadt 860: from the PROM, and the bsd.rd from the bootloader.
861: Refer to the instructions in INSTALL.luna88k for more details.
1.109 bentley 862:
863: <h3>OpenBSD/octeon:</h3>
1.1 deraadt 864:
865: <p>
866: After connecting a serial port, boot bsd.rd over the network via DHCP/tftp.
867: Refer to the instructions in INSTALL.octeon for more details.
868:
1.109 bentley 869: <h3>OpenBSD/sgi:</h3>
870:
1.1 deraadt 871: <p>
872: To install, burn cd57.iso on a CD-R, put it in the CD drive of your
873: machine and select <i>Install System Software</i> from the System Maintenance
874: menu. Indigo/Indy/Indigo2 (R4000) systems will not boot automatically from
875: CD-ROM, and need a proper invocation from the PROM prompt.
876: Refer to the instructions in INSTALL.sgi for more details.
877:
878: <p>
879: If your machine doesn't have a CD drive, you can setup a DHCP/tftp network
880: server, and boot using "bootp()/bsd.rd.IP##" using the kernel matching your
881: system type. Refer to the instructions in INSTALL.sgi for more details.
1.109 bentley 882:
883: <h3>OpenBSD/socppc:</h3>
1.1 deraadt 884:
885: <p>
886: After connecting a serial port, boot over the network via DHCP/tftp.
887: Refer to the instructions in INSTALL.socppc for more details.
1.109 bentley 888:
889: <h3>OpenBSD/sparc:</h3>
1.1 deraadt 890:
891: <p>
892: Boot from one of the provided install ISO images, using one of the two
893: commands listed below, depending on the version of your ROM.
894:
1.109 bentley 895: <blockquote><pre>
896: ok <kbd>boot cdrom 5.7/sparc/bsd.rd</kbd>
1.1 deraadt 897: or
1.109 bentley 898: > <kbd>b sd(0,6,0)5.7/sparc/bsd.rd</kbd>
899: </pre></blockquote>
1.1 deraadt 900:
901: <p>
902: If your SPARC system does not have a CD drive, you can alternatively boot from floppy.
903: To do so you need to write <i>floppy57.fs</i> to a floppy.
1.99 tj 904: For more information see <a href="faq/faq4.html#MkFlop">this page</a>.
1.1 deraadt 905: To boot from the floppy use one of the two commands listed below,
906: depending on the version of your ROM.
907:
1.109 bentley 908: <blockquote><pre>
909: ok <kbd>boot floppy</kbd>
1.1 deraadt 910: or
1.109 bentley 911: > <kbd>b fd()</kbd>
912: </pre></blockquote>
1.1 deraadt 913:
914: <p>
915: Make sure you use a properly formatted floppy with NO BAD BLOCKS or your install
916: will most likely fail.
917:
918: <p>
919: If your SPARC system doesn't have a floppy drive nor a CD drive, you can either
920: setup a bootable tape, or install via network, as told in the
921: INSTALL.sparc file.
1.109 bentley 922:
923: <h3>OpenBSD/vax:</h3>
1.1 deraadt 924:
925: <p>
926: Boot over the network via mopbooting as described in INSTALL.vax.
1.109 bentley 927:
928: <h3>OpenBSD/zaurus:</h3>
1.1 deraadt 929:
930: <p>
931: Using the Linux built-in graphical ipkg installer, install the
932: openbsd57_arm.ipk package. Reboot, then run it. Read INSTALL.zaurus
933: for a few important details.
934:
1.109 bentley 935: </section>
936:
1.15 rpe 937: <hr>
1.109 bentley 938:
939: <section id=upgrade>
940: <h3>How to upgrade</h3>
1.15 rpe 941: <p>
942: If you already have an OpenBSD 5.6 system, and do not want to reinstall,
943: upgrade instructions and advice can be found in the
944: <a href="faq/upgrade57.html">Upgrade Guide</a>.
1.109 bentley 945: </section>
1.15 rpe 946:
947: <hr>
1.109 bentley 948: <section id=sourcecode>
949: <h3>Notes about the source code</h3>
1.1 deraadt 950: <p>
951: src.tar.gz contains a source archive starting at /usr/src. This file
952: contains everything you need except for the kernel sources, which are
953: in a separate archive. To extract:
954: <p>
1.109 bentley 955: <blockquote><pre>
956: # <kbd>mkdir -p /usr/src</kbd>
957: # <kbd>cd /usr/src</kbd>
958: # <kbd>tar xvfz /tmp/src.tar.gz</kbd>
959: </pre></blockquote>
1.1 deraadt 960: <p>
961: sys.tar.gz contains a source archive starting at /usr/src/sys.
962: This file contains all the kernel sources you need to rebuild kernels.
963: To extract:
964: <p>
1.109 bentley 965: <blockquote><pre>
966: # <kbd>mkdir -p /usr/src/sys</kbd>
967: # <kbd>cd /usr/src</kbd>
1.1 deraadt 968: # <strong>tar xvfz /tmp/sys.tar.gz</strong>
1.109 bentley 969: </pre></blockquote>
1.1 deraadt 970: <p>
971: Both of these trees are a regular CVS checkout. Using these trees it
972: is possible to get a head-start on using the anoncvs servers as
973: described <a href="anoncvs.html">here</a>.
974: Using these files
975: results in a much faster initial CVS update than you could expect from
976: a fresh checkout of the full OpenBSD source tree.
1.109 bentley 977: </section>
978: </section>
1.1 deraadt 979:
980: <hr>
1.109 bentley 981:
982: <section id=ports>
983: <h3>Ports Tree</h3>
1.1 deraadt 984: <p>
985: A ports tree archive is also provided. To extract:
986: <p>
1.109 bentley 987: <blockquote><pre>
988: # <kbd>cd /usr</kbd>
989: # <kbd>tar xvfz /tmp/ports.tar.gz</kbd>
990: </pre></blockquote>
1.1 deraadt 991: <p>
1.18 rpe 992: Go read the <a href="faq/ports/index.html">ports</a> page
1.1 deraadt 993: if you know nothing about ports
994: at this point. This text is not a manual of how to use ports.
995: Rather, it is a set of notes meant to kickstart the user on the
996: OpenBSD ports system.
997: <p>
998: The <i>ports/</i> directory represents a CVS (see the manpage for
1.109 bentley 999: <a href="https://man.openbsd.org/i386/cvs.1">
1.1 deraadt 1000: cvs(1)</a> if
1001: you aren't familiar with CVS) checkout of our ports. As with our complete
1002: source tree, our ports tree is available via
1003: <a href="anoncvs.html">AnonCVS</a>.
1.104 tj 1004: So, in order to keep up to date with the -stable branch, you must make
1.12 rpe 1005: the <i>ports/</i> tree available on a read-write medium and update the tree
1006: with a command like:
1.1 deraadt 1007: <p>
1.109 bentley 1008: <blockquote><pre>
1.1 deraadt 1009: # <strong>cd /usr/ports</strong>
1010: # <strong>cvs -d anoncvs@server.openbsd.org:/cvs update -Pd -rOPENBSD_5_7</strong>
1.109 bentley 1011: </pre></blockquote>
1.1 deraadt 1012: <p>
1013: [Of course, you must replace the server name here with a nearby anoncvs
1014: server.]
1015: <p>
1.16 rpe 1016: Note that most ports are available as packages on our mirrors. Updated
1.9 jca 1017: ports for the 5.7 release will be made available if problems arise.
1.1 deraadt 1018: <p>
1019: If you're interested in seeing a port added, would like to help out, or just
1020: would like to know more, the mailing list
1021: <a href="mail.html">ports@openbsd.org</a> is a good place to know.
1.109 bentley 1022: </section>
![[BACK]](/icons/back.gif){kind=icon}
Return to 57.html CVS log ![[TXT]](/icons/text.gif){kind=icon}
![[DIR]](/icons/dir.gif){kind=icon}
Up to [local] / www