OpenBSD 6.2

-OpenBSD -6.2 +OpenBSD +6.2

Released October 9, 2017
Copyright 1997-2017, Theo de Raadt.

@@ -30,7 +31,7 @@

See the information on the FTP page for a list of mirror machines. -
Go to the pub/OpenBSD/6.2/ directory on +
Go to the pub/OpenBSD/6.2/ directory on one of the mirror sites.
Have a look at the 6.2 errata page for a list of bugs and workarounds. @@ -40,20 +41,19 @@

signify(1) pubkeys for this release:

- -
+ +
openbsd-62-base.pub: - + RWRVWzAMgtyg7g27STK1h1xA6RIwtjex6Vr5Y9q5SC5q5+b0GN4lLhfu -
+
openbsd-62-fw.pub: - + RWSbA8C2TPUQLi48EqHtg7Rx7KGDt6E/2d8OeJinGZPbpoqGRxA0N2oW -
+
openbsd-62-pkg.pub: - + RWRvEq+UPCq0VGI9ar7VMy+HYKDrOb4WS5JLhdUBiX3qvJgPQjyZSTxI -

@@ -61,12 +61,14 @@ sys.tar.gz, xenocara.tar.gz, ports.tar.gz files, or in the files fetched via ports.tar.gz. -
+

What's New

This is a partial list of new features and systems included in OpenBSD 6.2. For a comprehensive list, see the changelog leading to 6.2. @@ -161,7 +163,6 @@

Repair ioapic(4) misconfigurations.

vmm(4)/ vmd(8) improvements:

Many fixes to vmctl(8) and vmd(8) error handling.

IEEE 802.11 wireless stack improvements:

ifconfig(8)

Generic network stack improvements:

Enabled the use of per-CPU caches in the network packet allocators.

Installer improvements:

Backwards compatibility code to support the 'rtsol' keyword in hostname.if(5) has been removed. -
The install.site and upgrade.site scripts are now +
The install.site and upgrade.site scripts are now executed at the end of the install/upgrade process.
More detailed information is shown to identify disks.
The IPv6 default router selection has been fixed.
On the amd64 platform, AES-NI is used if present.

Routing daemons and other userland network improvements:

nc(1) - now has a -W recvlimit option to terminate netcat after + now has a -W recvlimit option to terminate netcat after receiving the specified number of packets. This allows for a UDP request to be sent, a reply to be received and the result checked on the command line.
nc(1) - now has a -Z option, allowing the peer certificate and chain to be + now has a -Z option, allowing the peer certificate and chain to be saved to a file in PEM format. -
A new -T tlscompat option was added to +
A new -T tlscompat option was added to nc(1), which enables the use of all TLS protocols and libtls "compat" ciphers.
Various races have been fixed in @@ -292,7 +289,6 @@ routing domains, this provides virtual router functionality.

Security improvements:

In kernel, randomly bias down the top-of-stack per kthread.

dhcpd(8)/ dhcrelay(8) improvements: @@ -376,7 +371,6 @@ dhcrelay(8) logging to stderr when it is started with the -d option. -

dhclient(8) improvements:

Remove the -u option, broken since 2013 without complaints.
Use /dev/bpf instead of /dev/bpf0.

Assorted improvements:

The performance of the memory deallocator used by ksh(1) has been fixed. -
The emacs-usemeta ksh(1) +
The emacs-usemeta ksh(1) flag is no longer needed and is now deprecated.
New futex(2) syscall.
New pthread @@ -502,12 +495,12 @@ without a system call on OCTEON II and later.
FPU is enabled on OCTEON III.
GENERIC kernels now include a .SUNW_ctf section containing CTF data. -
New ddb(4) kill +
New ddb(4) kill command, send an uncatchable SIGABRT to a process. -
New ddb(4) pprint +
New ddb(4) pprint command, using CTF information to "pretty print" global symbols.
New ddb(4) - show struct command, using CTF information to display the content + show struct command, using CTF information to display the content of in memory C structures.
x86: ddb(4) uses CTF data to display the correct number of function arguments in backtraces. @@ -543,11 +536,10 @@ strstr(3), qsort(3), and glob(3). -
Added support for EV_RECEIPT and EV_DISPATCH to +
Added support for EV_RECEIPT and EV_DISPATCH to kqueue(2).
Added fktrace(2).

OpenSMTPD 6.0.0

Remove experimental support for filters.
Assorted code and documentation cleanups and improvements.

OpenSSH 7.6

@@ -662,7 +653,6 @@ channel IDs greater than 0x7FFFFFFF. -

LibreSSL 2.6.3

@@ -741,7 +731,6 @@ is called with a NULL pointer it now returns the default protocols. -

mandoc 1.14.3

mdoc(7)

.Bl

Ports and packages: -

A massive amount of clang-related fixes happened between 6.1 and 6.2. -
Many pre-built packages for each architecture: -

Ports and packages: +

A massive amount of clang-related fixes happened between 6.1 and 6.2. + +

Many pre-built packages for each architecture: - - -
-
+

aarch64: 7942
alpha: 7426
amd64: 9728 -

arm: 7939
hppa: 6260
i386: 9685 -

mips64: 7972
mips64el: 7984
powerpc: 8133 -

sparc64: 8281 -
-

+ -

Some highlights: -

- - -

Some highlights: +

AFL 2.51b
CMake 3.9.3
Chromium 61.0.3163.100 @@ -836,7 +812,6 @@
MariaDB 10.0.32
Mozilla Firefox 52.4.0esr and 56.0.0
Mozilla Thunderbird 52.2.1 -

Mutt 1.9.1 and NeoMutt 20170912
Node.js 6.11.2
Ocaml 4.03.0 @@ -855,11 +830,9 @@
TeX Live 2016
Vim 8.0.0987
Xfce 4.12 -

As usual, steady improvements in manual pages and other documentation. -

The system includes the following major components from outside suppliers:

Expat 2.2.4

How to install

Please refer to the following files on the mirror site for extensive details on how to install OpenBSD 6.2 on your machine: @@ -914,149 +889,126 @@

.../OpenBSD/6.2/sparc64/INSTALL.sparc64 +

Quick installer information for people familiar with OpenBSD, and the use of the "disklabel -E" command. If you are at all confused when installing OpenBSD, read the relevant INSTALL.* file as listed above! -

OpenBSD/alpha:

+
Write floppy62.fs or floppyB62.fs (depending on your machine) to a diskette and enter boot dva0. Refer to INSTALL.alpha for more details. +
-
Make sure you use a properly formatted floppy with NO BAD BLOCKS or your install will most likely fail. -

OpenBSD/amd64:

+
If your machine can boot from CD, you can write install62.iso or cd62.iso to a CD and boot from it. You may need to adjust your BIOS options first. +
-
If your machine can boot from USB, you can write install62.fs or miniroot62.fs to a USB stick and boot from it. +
-
If you can't boot from a CD, floppy disk, or USB, you can install across the network using PXE as described in the included INSTALL.amd64 document. +
-
If you are planning to dual boot OpenBSD with another OS, you will need to read INSTALL.amd64. -

OpenBSD/arm64:

+
Write miniroot62.fs to a disk and boot from it after connecting to the serial console. Refer to INSTALL.arm64 for more details. -
-

OpenBSD/armv7:

+
Write a system specific miniroot to an SD card and boot from it after connecting to the serial console. Refer to INSTALL.armv7 for more details. -
-

OpenBSD/hppa:

+
Boot over the network by following the instructions in INSTALL.hppa or the hppa platform page. -

OpenBSD/i386:

+
If your machine can boot from CD, you can write install62.iso or cd62.iso to a CD and boot from it. You may need to adjust your BIOS options first. +
-
If your machine can boot from USB, you can write install62.fs or miniroot62.fs to a USB stick and boot from it. +
-
If you can't boot from a CD, floppy disk, or USB, you can install across the network using PXE as described in the included INSTALL.i386 document. +
-
If you are planning on dual booting OpenBSD with another OS, you will need to read INSTALL.i386. -

OpenBSD/landisk:

+
Write miniroot62.fs to the start of the CF or disk, and boot normally. -

OpenBSD/loongson:

+
Write miniroot62.fs to a USB stick and boot bsd.rd from it or boot bsd.rd via tftp. Refer to the instructions in INSTALL.loongson for more details. -

OpenBSD/luna88k:

-Copy `boot' and `bsd.rd' to a Mach or UniOS partition, and boot the bootloader +
+Copy 'boot' and 'bsd.rd' to a Mach or UniOS partition, and boot the bootloader from the PROM, and then bsd.rd from the bootloader. Refer to the instructions in INSTALL.luna88k for more details. -

OpenBSD/macppc:

+
Burn the image from a mirror site to a CDROM, and power on your machine while holding down the C key until the display turns on and shows OpenBSD/macppc boot. +
-
Alternatively, at the Open Firmware prompt, enter boot cd:,ofwboot /6.2/macppc/bsd.rd -

OpenBSD/octeon:

+
After connecting a serial port, boot bsd.rd over the network via DHCP/tftp. Refer to the instructions in INSTALL.octeon for more details. -

OpenBSD/sgi:

+
To install, burn cd62.iso on a CD-R, put it in the CD drive of your machine and select Install System Software from the System Maintenance menu. Indigo/Indy/Indigo2 (R4000) systems will not boot automatically from @@ -1064,51 +1016,51 @@ Refer to the instructions in INSTALL.sgi for more details.
-
If your machine doesn't have a CD drive, you can setup a DHCP/tftp network server, and boot using "bootp()/bsd.rd.IP##" using the kernel matching your system type. Refer to the instructions in INSTALL.sgi for more details. -

OpenBSD/sparc64:

+
Burn the image from a mirror site to a CDROM, boot from it, and type boot cdrom. +
-
If this doesn't work, or if you don't have a CDROM drive, you can write floppy62.fs or floppyB62.fs (depending on your machine) to a floppy and boot it with boot floppy. Refer to INSTALL.sparc64 for details. +
-
Make sure you use a properly formatted floppy with NO BAD BLOCKS or your install will most likely fail. +
-
You can also write miniroot62.fs to the swap partition on the disk and boot with boot disk:b. +
-
If nothing works, you can boot over the network as described in INSTALL.sparc64. -

How to upgrade

If you already have an OpenBSD 6.1 system, and do not want to reinstall, upgrade instructions and advice can be found in the Upgrade Guide. -

Notes about the source code

-src.tar.gz contains a source archive starting at /usr/src. +src.tar.gz contains a source archive starting at /usr/src. This file contains everything you need except for the kernel sources, which are in a separate archive. To extract: @@ -1119,7 +1071,7 @@ # tar xvfz /tmp/src.tar.gz -sys.tar.gz contains a source archive starting at /usr/src/sys. +sys.tar.gz contains a source archive starting at /usr/src/sys. This file contains all the kernel sources you need to rebuild kernels. To extract: @@ -1135,11 +1087,12 @@ Using these files results in a much faster initial CVS update than you could expect from a fresh checkout of the full OpenBSD source tree. -

Ports Tree

A ports tree archive is also provided. To extract: @@ -1175,6 +1128,4 @@ If you're interested in seeing a port added, would like to help out, or just would like to know more, the mailing list ports@openbsd.org is a good place to know. -

- - +

+

-OpenBSD -6.2 +OpenBSD +6.2

What's New

What's New

How to install

How to install

OpenBSD/alpha:

OpenBSD/alpha:

OpenBSD/amd64:

OpenBSD/amd64:

OpenBSD/arm64:

OpenBSD/arm64:

OpenBSD/armv7:

OpenBSD/armv7:

OpenBSD/hppa:

OpenBSD/hppa:

OpenBSD/i386:

OpenBSD/i386:

OpenBSD/landisk:

OpenBSD/landisk:

OpenBSD/loongson:

OpenBSD/loongson:

OpenBSD/luna88k:

OpenBSD/luna88k:

OpenBSD/macppc:

OpenBSD/macppc:

OpenBSD/octeon:

OpenBSD/octeon:

OpenBSD/sgi:

OpenBSD/sgi:

OpenBSD/sparc64:

OpenBSD/sparc64:

How to upgrade

How to upgrade

Notes about the source code

Notes about the source code

Ports Tree

Ports Tree