[BACK]Return to 63.html CVS log [TXT][DIR] Up to [local] / www

Annotation of www/63.html, Revision 1.33

1.1       deraadt     1: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
                      2: <html>
                      3: <head>
                      4: <title>OpenBSD 6.3</title>
                      5: <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
                      6: <meta name="description" content="OpenBSD 6.3">
                      7: <meta name="copyright" content="This document copyright 2018 by OpenBSD.">
                      8: <meta name="viewport" content="width=device-width, initial-scale=1">
                      9: <link rel="stylesheet" type="text/css" href="openbsd.css">
                     10: <link rel="canonical" href="https://www.openbsd.org/63.html">
                     11: </head>
                     12:
                     13: <body bgcolor="#ffffff" text="#000000" link="#24248E">
                     14:
                     15: <h2>
                     16: <a href="index.html">
                     17: <i><font color="#0000ff">Open</font></i><font color="#000084">BSD</font></a>
                     18: <font color="#e00000">6.3</font>
                     19: </h2>
                     20:
                     21: <a href="images/XXX.gif">
                     22: <img align="left" width="227" height="343" hspace="24" src="images/XXX.gif"></a>
                     23: Released Apr 15, 2018<br>
                     24: Copyright 1997-2018, Theo de Raadt.<br>
                     25: <br>
                     26: <br>
                     27: 6.3 Song: XXX.
                     28:
                     29: <br>
                     30: <ul>
                     31: <li>See the information on <a href="ftp.html">the FTP page</a> for
                     32:     a list of mirror machines.
                     33: <li>Go to the <font color="#e00000">pub/OpenBSD/6.3/</font> directory on
                     34:     one of the mirror sites.
                     35: <li>Have a look at <a href="errata63.html">the 6.3 errata page</a> for a list
                     36:     of bugs and workarounds.
                     37: <li>See a <a href="plus63.html">detailed log of changes</a> between the
                     38:     6.2 and 6.3 releases.
                     39: <p>
                     40: <li><a href="https://man.openbsd.org/signify.1">signify(1)</a>
                     41:     pubkeys for this release:<br>
                     42: <pre>
1.6       sthen      43: base: RWRxzbLwAd76ZZxHU7wuIFUOVGwl6SjNNzanKWTql8w+hui7WLE/72mW
                     44: fw:   RWT3tdmiAc+DH/CJOxPFT10kUM90/UcLTgSEUEKzhKm9QEhy+UD4CWPy
                     45: pkg:  RWT58k1AWz/zZO9DHcPHXiHhDNP6hdwGjxNkyMoc/sh4O5NI8Zz1R1lD
1.1       deraadt    46: </pre>
                     47: <p>
                     48: All applicable copyrights and credits are in the src.tar.gz,
                     49: sys.tar.gz, xenocara.tar.gz, ports.tar.gz files, or in the
                     50: files fetched via ports.tar.gz.
                     51: </ul>
                     52: <br clear=all>
                     53:
                     54: <hr>
                     55:
                     56: <h3 id="new"><font color="#0000e0">What's New</font></h3>
                     57:
                     58: This is a partial list of new features and systems included in OpenBSD 6.3.
                     59: For a comprehensive list, see the <a href="plus63.html">changelog</a> leading
                     60: to 6.3.
                     61:
                     62: <ul>
                     63:
                     64: <li>Improved hardware support, including:
                     65:     <ul>
1.26      kettenis   66:     <li>SMP support on OpenBSD/arm64 platforms.
1.28      kettenis   67:     <li>VFP and NEON support on OpenBSD/armv7 platforms.
1.21      jsg        68:     <li>New <a href="https://man.openbsd.org/acrtc.4">acrtc(4)</a> driver
                     69:        for X-Powers AC100 audio codec and Real Time Clock.
                     70:     <li>New <a href="https://man.openbsd.org/axppmic.4">axppmic(4)</a> driver
                     71:        for X-Powers AXP Power Management ICs.
                     72:     <li>New <a href="https://man.openbsd.org/bcmrng.4">bcmrng(4)</a> driver
                     73:        for Broadcom BCM2835/BCM2836/BCM2837 random number generator.
                     74:     <li>New <a href="https://man.openbsd.org/bcmtemp.4">bcmtemp(4)</a> driver
                     75:        for Broadcom BCM2835/BCM2836/BCM2837 temperature monitor.
                     76:     <li>New <a href="https://man.openbsd.org/bgw.4">bgw(4)</a> driver
                     77:        for Bosch motion sensor.
                     78:     <li>New <a href="https://man.openbsd.org/bwfm.4">bwfm(4)</a> driver
                     79:        for Broadcom and Cypress FullMAC 802.11 devices.
                     80:     <li>New <a href="https://man.openbsd.org/efi.4">efi(4)</a> driver
                     81:        for EFI runtime services.
                     82:     <li>New <a href="https://man.openbsd.org/imxanatop.4">imxanatop(4)</a> driver
                     83:        for i.MX6 integrated regulator.
                     84:     <li>New <a href="https://man.openbsd.org/rkpcie.4">rkpcie(4)</a> driver
                     85:        for Rockchip RK3399 Host/PCIe bridge.
                     86:     <li>New <a href="https://man.openbsd.org/sxirsb.4">sxirsb(4)</a> driver
                     87:        for Allwinner Reduced Serial Bus controller.
                     88:     <li>New <a href="https://man.openbsd.org/sxitemp.4">sxitemp(4)</a> driver
                     89:        for Allwinner temperature monitor.
                     90:     <li>New <a href="https://man.openbsd.org/sxits.4">sxits(4)</a> driver
                     91:        for temperature sensor on Allwinner A10/A20 touchpad controller.
                     92:     <li>New <a href="https://man.openbsd.org/sxitwi.4">sxitwi(4)</a> driver
                     93:        for two-wire bus found on several Allwinner SoCs.
                     94:     <li>New <a href="https://man.openbsd.org/sypwr.4">sypwr(4)</a> driver
                     95:        for the Silergy SY8106A regulator.
1.26      kettenis   96:     <li>Support for Rockchip RK3328 SoCs has been added to the
                     97:         <a href="https://man.openbsd.org/dwge.4">dwge(4)</a>,
                     98:         <a href="https://man.openbsd.org/rkgrf.4">rkgrf(4)</a>,
                     99:        <a href="https://man.openbsd.org/rkclock.4">rkclock(4)</a> and
                    100:        <a href="https://man.openbsd.org/rkpinctrl.4">rkpinctrl(4)</a>
                    101:        drivers.
                    102:     <li>Support for Rockchip RK3228/3328 SoCs has been added to the
                    103:         <a href="https://man.openbsd.org/rktemp.4">rktemp(4)</a>
                    104:        driver.
                    105:     <li>Support for Allwinner A10/A20, A23/A33, A80 and R40/V40
                    106:         SoCs has been added to the
                    107:        <a href="https://man.openbsd.org/sxiccmu.4">sxiccmu(4)</a> driver.
                    108:     <li>Support for Allwinner A33, GR8 and R40/V40 SoCs has been
                    109:         added to the
                    110:        <a href="https://man.openbsd.org/sxipio.4">sxipio(4)</a> driver.
1.21      jsg       111:     <li>support for SAS3.5 MegaRAIDs was added to the
                    112:         <a href="https://man.openbsd.org/mfii.4">mfii(4)</a> driver.
                    113:     <li>support for Intel Cannon Lake and Ice Lake integrated Ethernet
                    114:         was added to the
                    115:         <a href="https://man.openbsd.org/em.4">em(4)</a> driver.
1.23      visa      116:     <li><a href="https://man.openbsd.org/cnmac.4">cnmac(4)</a> ports are now
                    117:         assigned to different CPU cores for distributed interrupt processing.
1.24      anton     118:     <li>The <a href="https://man.openbsd.org/pms.4">pms(4)</a> driver now
                    119:         detects and handles reset announcements.
1.25      jsg       120:     <li>On amd64 Intel CPU microcode is loaded on boot and installed/updated by
                    121:         <a href="https://man.openbsd.org/fw_update.1">fw_update(1)</a>.
1.1       deraadt   122:     </ul>
                    123:
                    124: <p>
                    125: <li><a href="https://man.openbsd.org/amd64/vmm.4">vmm(4)</a>/
                    126:     <a href="https://man.openbsd.org/amd64/vmd.8">vmd(8)</a> improvements:
                    127:     <ul>
1.8       ccardena  128:     <li>Add CD-ROM/DVD ISO support to <a
                    129:         href="https://man.openbsd.org/amd64/vmd.8">vmd(8)</a> via <a
                    130:        href="https://man.openbsd.org/vioscsi.4">vioscsi(4)</a>.
                    131:     <li><a href="https://man.openbsd.org/amd64/vmd.8">vmd(8)</a> no longer
                    132:        creates an underlying bridge interface for virtual switches defined in
1.18      mlarkin   133:        <a href="https://man.openbsd.org/amd64/vm.conf.5">vm.conf(5)</a>
1.8       ccardena  134:     <li><a href="https://man.openbsd.org/amd64/vmd.8">vmd(8)</a> receives
                    135:        switch information (rdomain, etc) from underlying switch interface in
                    136:        conjunction of settings in <a
1.18      mlarkin   137:        href="https://man.openbsd.org/amd64/vm.conf.5">vm.conf(5)</a>
                    138:     <li>TSC (time stamp counter) support in guest VMs
                    139:     <li>Support ukvm/Solo5 unikernels in
                    140:         <a href="https://man.openbsd.org/amd64/vmm.4">vmm(4)</a>
                    141:     <li>Handle valid (but uncommon) instruction encodings better
                    142:     <li>Better PAE paging support for 32-bit Linux guest VMs
                    143:     <li><a href="https://man.openbsd.org/amd64/vmd.8">vmd(8)</a> now allows up
                    144:         to 4 network interfaces in each VM
1.17      pd        145:     <li>Add paused migration and snapshotting support to <a
                    146:         href="https://man.openbsd.org/amd64/vmm.4">vmm(4)</a> for AMD SVM/RVI
                    147:         hosts.
1.33    ! mpi       148:     <li> BREAK commands sent over a
        !           149:      <a href="https://man.openbsd.org/pty.4">pty(4)</a> are now understood by
        !           150:      <a href="https://man.openbsd.org/vmd.8">vmd(8)</a>.
1.8       ccardena  151:     <li>Many fixes to <a href="https://man.openbsd.org/amd64/vmctl.8">vmctl(8)</a>
1.18      mlarkin   152:         and <a href="https://man.openbsd.org/amd64/vmd.8">vmd(8)</a> error handling
1.1       deraadt   153:     </ul>
                    154: <p>
                    155:
                    156: <li>IEEE 802.11 wireless stack improvements:
                    157:     <ul>
1.2       deraadt   158:     <li>...
1.1       deraadt   159:     </ul>
                    160: <p>
                    161:
                    162: <li>Generic network stack improvements:
                    163:     <ul>
1.33    ! mpi       164:       <li> The network stack no longer runs with the KERNEL_LOCK() when IPsec is
        !           165:       enabled.
        !           166:       <li> Processing of incoming TCP/UDP packets is now done without
        !           167:       KERNEL_LOCK().
1.12      florian   168:     <li> Cleanup and removal of code in sys/netinet6 since autoconfiguration
                    169:          runs in userland now.
1.33    ! mpi       170:     <li> <a href="https://man.openbsd.org/bridge.4">bridge(4)</a> members can
        !           171:          now be prevented to talk to each others with the new <b>protected</b>
        !           172:          option.
1.2       deraadt   173:     <li>...
1.1       deraadt   174:     </ul>
                    175: <p>
                    176:
                    177: <li>Installer improvements:
                    178:     <ul>
1.2       deraadt   179:     <li>...
1.1       deraadt   180:     </ul>
                    181: <p>
                    182:
                    183: <li>Routing daemons and other userland network improvements:
                    184:     <ul>
1.10      deraadt   185:     <li><a href="https://man.openbsd.org/bgpctl.8">bgpctl(8)</a> has a new
1.11      florian   186:         <b>ssv</b> option which outputs rib entries as a single semicolon-seperated
1.10      deraadt   187:         like for selection before output.
1.13      florian   188:     <li><a href="https://man.openbsd.org/slaacd.8">slaacd(8)</a> generates
                    189:         random but stable IPv6 stateless autoconfiguration addresses according
                    190:         to RFC 7217.
                    191:         These are enabled per default in accordance with RFC 8064.
1.15      florian   192:     <li><a href="https://man.openbsd.org/slaacd.8">slaacd(8)</a> can generate
                    193:         RFC 7217 (random but stable) and RFC 4941 (privacy) style stateless
                    194:         autoconfiguration addresses on non-/64 prefixes.
1.27      remi      195:     <li><a href="https://man.openbsd.org/ospfd.8">ospfd(8)</a> can now set the
                    196:         metric for a route depending on the status of an interface.
1.33    ! mpi       197:     <li> <a href="https://man.openbsd.org/ifconfig.8">ifconfig(8)</a> has a new
        !           198:          <b>staticarp</b> option to make interfaces reply to ARP requests only.
        !           199:     <li> <a href="https://man.openbsd.org/ipsecctl.8">ipsecctl(8)</a> can now
        !           200:          collapse flow outputs having the same source or destination
1.2       deraadt   201:     <li>...
1.1       deraadt   202:     </ul>
                    203: <p>
                    204:
                    205: <li>Security improvements:
                    206:     <ul>
1.10      deraadt   207:     <li>Use even more trap-sleds on various architectures.
                    208:     <li>More use of .rodata for constant variables in assembly source.
                    209:     <li>Stop using x86 "repz ret" in dusty corners of the tree.
                    210:     <li>Introduce "execpromises" in
                    211:         <a href="https://man.openbsd.org/pledge.2">pledge(2)</a>.
                    212:     <li>Prepare for the introduction of <b>MAP_STACK</b> to
                    213:         <a href="https://man.openbsd.org/mmap.2">mmap(2)</a> after 6.3.
                    214:     <li>Push a small piece of KARL-linked kernel text into the random
                    215:         number generator as entropy at startup.
                    216:     <li>Put a small random gap at the top of thread stacks, so that attackers
                    217:         have yet another calculation to perform for their ROP work.
1.19      mlarkin   218:     <li>Mitigation for Meltdown vulnerability for Intel brand amd64 CPUs
1.26      kettenis  219:     <li>OpenBSD/arm64 now uses kernel page table isolation to mitigate
                    220:         Spectre variant 3 (Meltdown) attacks.
                    221:     <li>OpenBSD/armv7 and OpenBSD/arm64 now flush the branch target
                    222:         cache (BTB) on processors that do speculative execution to
                    223:         mitigate Spectre variant 2 attacks.
1.2       deraadt   224:     <li>...
1.1       deraadt   225:     </ul>
                    226: <p>
                    227:
                    228: <li><a href="https://man.openbsd.org/dhcpd.8">dhcpd(8)</a>/
                    229:     <a href="https://man.openbsd.org/dhcrelay.8">dhcrelay(8)</a> improvements:
                    230:     <ul>
1.2       deraadt   231:     <li>...
1.1       deraadt   232:     </ul>
                    233: <p>
                    234:
                    235: <li><a href="https://man.openbsd.org/dhclient.8">dhclient(8)</a> improvements:
                    236:     <ul>
1.32      krw       237:       <li>parsing <a href="https://man.openbsd.org/dhclient.conf.5">
                    238:        dhclient.conf(5)</a> no longer leaks SSID strings, strings that are
                    239:        too long for the parsing buffer or repeated string options and commands.
                    240:       <li>storing leases in <a href="https://man.openbsd.org/dhclient.conf.5">
                    241:          dhclient.conf(5)</a> is no longer supported.
                    242:       <li>'DENY' is no longer valid in  <a href="https://man.openbsd.org/dhclient.conf.5">
                    243:          dhclient.conf(5)</a>.
                    244:       <li><a href="https://man.openbsd.org/dhclient.conf.5">
                    245:          dhclient.conf(5)</a> and
                    246:        <a href="https://man.openbsd.org/dhclient.leases.5">
                    247:          dhclient.leases(5)</a>
                    248:        parsing error messages have been simplified and clarified, with
                    249:        improved behaviour in the presence of unexpected semicolons.
                    250:       <li>more care is taken to only use configuration information that was
                    251:        successfully parsed.
                    252:       <li> the '-n' command line option has been added to
                    253:        <a href="https://man.openbsd.org/dhclient.8">
                    254:          dhclient(8)</a>, which causes
                    255:        <a href="https://man.openbsd.org/dhclient.8">
                    256:          dhclient(8)</a> to parse
                    257:        <a href="https://man.openbsd.org/dhclient.conf.5">
                    258:          dhclient.conf(5)</a> and immediately exit without taking
                    259:        charge of the interface.
1.2       deraadt   260:     <li>...
1.1       deraadt   261:     </ul>
                    262: <p>
                    263:
                    264: <li>Assorted improvements:
                    265:     <ul>
1.9       otto      266:     <li>Code reorganization and other improvements to
                    267:         <a href="https://man.openbsd.org/malloc.3">malloc(3)</a>
                    268:        and friends to make them more efficient.
1.10      deraadt   269:     <li>When performing suspend or hibernate operations, ensure all filesystems
                    270:         are properly syncronized and marked clean, or if they cannot be
                    271:         put into perfectly clean state on disk (due to open+unlinked files)
                    272:         then mark them dirty, so that a failed resume/unhinbernate is gauranteed
                    273:        to perform fsck.
1.16      florian   274:     <li><a href="https://man.openbsd.org/acme-client.1">acme-client(1)</a>
                    275:         autodetects the agreement url and follows 30x http redirects.
1.20      guenther  276:     <li>Added __cxa_thread_atexit() to support modern C++ tool chains
                    277:     <li>Added EVFILT_DEVICE support to
                    278:        <a href="https://man.openbsd.org/kqueue.2">kqueue(2)</a> for
                    279:        monitoring changes to drm devices.
1.23      visa      280:     <li><a href="https://man.openbsd.org/ldexp.3">ldexp(3)</a> now handles
1.30      krw       281:       the sign of denormal numbers correctly on mips64.
                    282:     <li><a href="https://man.openbsd.org/fdisk.8">fdisk(8)</a> now ensures the
                    283:       validity of MBR partition offsets entered while editing.
                    284:     <li><a href="https://man.openbsd.org/fdisk.8">fdisk(8)</a> now ensures that
                    285:       default values lie within the valid range.
                    286:     <li><a href="https://man.openbsd.org/less.1">less(1)</a> now splits only
1.32      krw       287:       the environment variable LESS on '$'.
1.30      krw       288:     <li><a href="https://man.openbsd.org/less.1">less(1)</a> no longer creates
                    289:       a spurious file when encountering '$' in the initial command.
                    290:     <li><a href="https://man.openbsd.org/softraid.4">softraid(4)</a> now validates
                    291:       the number of chunks when assembling a volume, ensuring the on-disk
                    292:       and in-memory metadata are in sync.
1.31      krw       293:     <li><a href="https://man.openbsd.org/disklabel.8">disklabel(8)</a> now
                    294:       always offers to edit an FFS partition's fragment size before offering to
                    295:       edit the blocksize.
                    296:     <li><a href="https://man.openbsd.org/disklabel.8">disklabel(8)</a> now
                    297:       allows editing the cylinders/group (cpg) attribute whenever the partition
                    298:       blocksize can be edited.
                    299:     <li><a href="https://man.openbsd.org/disklabel.8">disklabel(8)</a> now
                    300:       detects ^D and invalid input during (R)esize commands.
                    301:     <li><a href="https://man.openbsd.org/disklabel.8">disklabel(8)</a> now
                    302:       detects underflows and overflows when -/+ operators are used.
                    303:     <li><a href="https://man.openbsd.org/disklabel.8">disklabel(8)</a> now
                    304:       avoids an off-by-one when calculating the number of cylinders in a free
                    305:       chunk.
                    306:     <li><a href="https://man.openbsd.org/disklabel.8">disklabel(8)</a> now
                    307:       validates the requested partition size against the size of the largest free
                    308:       chunk instead of the total free space.
1.33    ! mpi       309:     <li> Support for dumping USB transfers via
        !           310:          <a href="https://man.openbsd.org/bpf.4">bpf(4)</a>
        !           311:     <li> <a href="https://man.openbsd.org/tcpdump.8">tcpdump(8)</a> can now
        !           312:          unserstand dumps of USB transfers in the
        !           313:          <a href="http://desowin.org/usbpcap/captureformat.html">USBPcap</a>
        !           314:          format.
1.2       deraadt   315:     <li>...
1.1       deraadt   316:     </ul>
                    317: <p>
                    318:
1.22      jsg       319: <li>OpenSMTPD 6.0.4
1.1       deraadt   320:     <ul>
1.2       deraadt   321:     <li>...
1.1       deraadt   322:     </ul>
                    323: <p>
                    324:
1.22      jsg       325: <li>OpenSSH 7.7
1.1       deraadt   326:     <ul>
                    327:     <li>Security:
                    328:       <ul>
1.2       deraadt   329:       <li>...
1.1       deraadt   330:       </ul>
                    331:     <li>New/changed features:
                    332:       <ul>
1.2       deraadt   333:       <li>...
1.1       deraadt   334:       </ul>
                    335:     <li>The following significant bugs have been fixed in this release:
                    336:       <ul>
1.2       deraadt   337:       <li>...
1.1       deraadt   338:       </ul>
                    339:     </ul>
                    340: <p>
                    341:
1.22      jsg       342: <li>LibreSSL 2.7.2
1.29      beck      343:    <ul>
                    344:    <li> Fixed a bug in int_x509_param_set_hosts, calling strlen() if name
                    345:    length provided is 0 to match the OpenSSL behaviour. Issue noticed
                    346:    by Christian Heimes <christian@python.org>
                    347:    <li> Added support for many OpenSSL 1.0.2 and 1.1 APIs, based on
                    348:    observations of real-world usage in applications. These are
                    349:    implemented in parallel with existing OpenSSL 1.0.1 APIs - visibility
                    350:    changes have not been made to existing structs, allowing code written
                    351:    for older OpenSSL APIs to continue working.
                    352:    <li> Extensive corrections, improvements, and additions to the
                    353:    API documentation, including new public APIs from OpenSSL that had
                    354:    no pre-existing documentation.
                    355:    <li> Added support for automatic library initialization in libcrypto,
                    356:    libssl, and libtls. Support for pthread_once or a compatible
                    357:    equivalent is now required of the target operating system. As a
                    358:    side-effect, minimum Windows support is Vista or higher.
                    359:    <li> Converted more packet handling methods to CBB, which improves
                    360:    resiliency when generating TLS messages.
                    361:    <li> Completed TLS extension handling rewrite, improving consistency of
                    362:    checks for malformed and duplicate extensions.
                    363:    <li>Rewrote ASN1_TYPE_{get,set}_octetstring() using templated ASN.1.
                    364:    This removes the last remaining use of the old M_ASN1_* macros
                    365:    (asn1_mac.h) from API that needs to continue to exist.
                    366:    <li> Added support for client-side session resumption in libtls.
                    367:    A libtls client can specify a session file descriptor (a regular
                    368:    file with appropriate ownership and permissions) and libtls will
                    369:    manage reading and writing of session data across TLS handshakes.
                    370:    <li> Improved support for strict alignment on ARMv7 architectures,
                    371:    conditionally enabling assembly in those cases.
                    372:    <li> Fixed a memory leak in libtls when reusing a tls_config.
                    373:    <li> Merged more DTLS support into the regular TLS code path, removing
                    374:    duplicated code.
                    375:    </ul>
1.1       deraadt   376: <p>
                    377: <li>mandoc 1.14.3
                    378:     <ul>
1.2       deraadt   379:     <li>...
1.1       deraadt   380:     </ul>
                    381: <p>
                    382:
                    383: <li>Ports and packages:
                    384:     <dl>
                    385:     <dt>Many pre-built packages for each architecture:
                    386:     </dl>
                    387:     <!-- number of FTP packages minus SHA256, SHA256.sig, index.txt -->
                    388:     <table border=0 cellspacing=0 cellpadding=2 width="95%">
                    389:     <tr>
                    390:     <td valign="top" width="25%">
                    391:     <ul>
                    392:       <li>aarch64:    XXXX
                    393:       <li>amd64:      XXXX
                    394:       <li>arm:        XXXX
                    395:     </ul></td><td valign=top width="25%"><ul>
                    396:       <li>hppa:       XXXX
                    397:       <li>i386:       XXXX
                    398:       <li>mips64:     XXXX
                    399:     </ul></td><td valign=top width="25%"><ul>
                    400:       <li>mips64el:   XXXX
                    401:       <li>powerpc:    XXXX
                    402:       <li>sparc64:    XXXX
                    403:     </ul></td></tr></table>
                    404:     <p>
                    405:
                    406:     <dl>
                    407:     <dt>Some highlights:
                    408:     </dl>
                    409:     <table border=0 cellspacing=0 cellpadding=2 width="95%">
                    410:     <tr>
                    411:     <td valign="top" width="50%"><ul>
1.3       lteo      412:        <li>AFL 2.52b
                    413:        <li>CMake 3.10.2
1.14      kn        414:        <li>Chromium 65.0.3325.181
1.1       deraadt   415:        <li>Emacs 21.4 and 25.3
                    416:        <li>GCC 4.9.4
1.3       lteo      417:        <li>GHC 8.2.2
1.1       deraadt   418:        <li>Gimp 2.8.22
1.3       lteo      419:        <li>GNOME 3.26.2
                    420:        <li>Go 1.10
1.1       deraadt   421:        <li>Groff 1.22.3
                    422:        <li>JDK 8u144
                    423:        <li>KDE 3.5.10 and 4.14.3 (plus KDE4 core updates)
1.3       lteo      424:        <li>LLVM/Clang 5.0.1
                    425:        <li>LibreOffice 6.0.2.1
                    426:        <li>Lua 5.1.5, 5.2.4 and 5.3.4
                    427:        <li>MariaDB 10.0.34
1.14      kn        428:        <li>Mozilla Firefox 52.7.2esr and 59.0.1
1.3       lteo      429:        <li>Mozilla Thunderbird 52.6.0
1.1       deraadt   430:     </ul></td><td valign=top width="50%"><ul>
1.3       lteo      431:        <li>Mutt 1.9.4 and NeoMutt 20180223
                    432:        <li>Node.js 8.9.4
1.1       deraadt   433:        <li>Ocaml 4.03.0
                    434:        <li>OpenLDAP 2.3.43 and 2.4.45
1.3       lteo      435:        <li>PHP 5.6.34 and 7.0.28
                    436:        <li>Postfix 3.3.0 and 3.4-20180203
                    437:        <li>PostgreSQL 10.3
                    438:        <li>Python 2.7.14 and 3.6.4
1.7       lteo      439:        <li>R 3.4.4
1.3       lteo      440:        <li>Ruby 2.3.6, 2.4.3 and 2.5.0
                    441:        <li>Rust 1.24.0
1.1       deraadt   442:        <li>Sendmail 8.16.0.21
1.14      kn        443:        <li>SQLite3 3.22.0
1.3       lteo      444:        <li>Sudo 1.8.22
                    445:        <li>Tcl/Tk 8.5.19 and 8.6.8
                    446:        <li>TeX Live 2017
                    447:        <li>Vim 8.0.1589
1.1       deraadt   448:        <li>Xfce 4.12
                    449:     </ul></td></tr></table>
                    450: <p>
                    451:
                    452: <li>As usual, steady improvements in manual pages and other documentation.
                    453: <p>
                    454:
                    455: <li>The system includes the following major components from outside suppliers:
                    456:     <ul>
1.4       matthieu  457:     <li>Xenocara (based on X.Org 7.7 with xserver 1.19.6 + patches,
                    458:       freetype 2.8.1, fontconfig 2.12.4, Mesa 13.0.6, xterm 330,
1.1       deraadt   459:       xkeyboard-config 2.20 and more)
1.4       matthieu  460:     <li>LLVM/Clang 5.0.1 (+ patches)
1.1       deraadt   461:     <li>GCC 4.2.1 (+ patches) and 3.3.6 (+ patches)
1.4       matthieu  462:     <li>Perl 5.24.3 (+ patches)
                    463:     <li>NSD 4.1.20
                    464:     <li>Unbound 1.6.8
1.1       deraadt   465:     <li>Ncurses 5.7
                    466:     <li>Binutils 2.17 (+ patches)
                    467:     <li>Gdb 6.3 (+ patches)
                    468:     <li>Awk Aug 10, 2011 version
1.4       matthieu  469:     <li>Expat 2.2.5
1.1       deraadt   470:     </ul>
                    471: </ul>
                    472:
                    473: <hr>
                    474:
                    475: <h3 id="install"><font color="#0000e0">How to install</font></h3>
                    476:
                    477: Please refer to the following files on the mirror site for
                    478: extensive details on how to install OpenBSD 6.3 on your machine:
                    479:
                    480: <ul>
                    481: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.3/alpha/INSTALL.alpha">
                    482:        .../OpenBSD/6.3/alpha/INSTALL.alpha</a>
                    483: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.3/amd64/INSTALL.amd64">
                    484:        .../OpenBSD/6.3/amd64/INSTALL.amd64</a>
                    485: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.3/arm64/INSTALL.arm64">
                    486:        .../OpenBSD/6.3/arm64/INSTALL.arm64</a>
                    487: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.3/armv7/INSTALL.armv7">
                    488:        .../OpenBSD/6.3/armv7/INSTALL.armv7</a>
                    489: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.3/hppa/INSTALL.hppa">
                    490:        .../OpenBSD/6.3/hppa/INSTALL.hppa</a>
                    491: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.3/i386/INSTALL.i386">
                    492:        .../OpenBSD/6.3/i386/INSTALL.i386</a>
                    493: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.3/landisk/INSTALL.landisk">
                    494:        .../OpenBSD/6.3/landisk/INSTALL.landisk</a>
                    495: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.3/loongson/INSTALL.loongson">
                    496:        .../OpenBSD/6.3/loongson/INSTALL.loongson</a>
                    497: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.3/luna88k/INSTALL.luna88k">
                    498:        .../OpenBSD/6.3/luna88k/INSTALL.luna88k</a>
                    499: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.3/macppc/INSTALL.macppc">
                    500:        .../OpenBSD/6.3/macppc/INSTALL.macppc</a>
                    501: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.3/octeon/INSTALL.octeon">
                    502:        .../OpenBSD/6.3/octeon/INSTALL.octeon</a>
                    503: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.3/sgi/INSTALL.sgi">
                    504:        .../OpenBSD/6.3/sgi/INSTALL.sgi</a>
                    505: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.3/sparc64/INSTALL.sparc64">
                    506:        .../OpenBSD/6.3/sparc64/INSTALL.sparc64</a>
                    507: </ul>
                    508:
                    509: <hr>
                    510:
                    511: <p>
                    512: Quick installer information for people familiar with OpenBSD, and the use of
                    513: the "<a href="https://man.openbsd.org/disklabel.8">disklabel</a> -E" command.
                    514: If you are at all confused when installing OpenBSD, read the relevant
                    515: INSTALL.* file as listed above!
                    516:
                    517: <h3><font color="#e00000">OpenBSD/alpha:</font></h3>
                    518:
                    519: <ul style="list-style-type: none">
                    520: <li>
                    521: Write <i>floppy63.fs</i> or <i>floppyB63.fs</i> (depending on your machine)
                    522: to a diskette and enter <i>boot dva0</i>.
                    523: Refer to INSTALL.alpha for more details.
                    524: <p>
                    525: <li>
                    526: Make sure you use a properly formatted floppy with NO BAD BLOCKS or your install
                    527: will most likely fail.
                    528: </ul>
                    529:
                    530: <h3><font color="#e00000">OpenBSD/amd64:</font></h3>
                    531:
                    532: <ul style="list-style-type: none">
                    533: <li>
                    534: If your machine can boot from CD, you can write <i>install63.iso</i> or
                    535: <i>cd63.iso</i> to a CD and boot from it.
                    536: You may need to adjust your BIOS options first.
                    537: <p>
                    538: <li>
                    539: If your machine can boot from USB, you can write <i>install63.fs</i> or
                    540: <i>miniroot63.fs</i> to a USB stick and boot from it.
                    541: <p>
                    542: <li>
                    543: If you can't boot from a CD, floppy disk, or USB,
                    544: you can install across the network using PXE as described in the included
                    545: INSTALL.amd64 document.
                    546: <p>
                    547: <li>
                    548: If you are planning to dual boot OpenBSD with another OS, you will need to
                    549: read INSTALL.amd64.
                    550: </ul>
                    551:
                    552: <h3><font color="#e00000">OpenBSD/arm64:</font></h3>
                    553:
                    554: <ul style="list-style-type: none">
                    555: <li>
                    556: Write <i>miniroot63.fs</i> to a disk and boot from it after connecting
                    557: to the serial console.  Refer to INSTALL.arm64 for more details.
                    558: <p>
                    559: </ul>
                    560:
                    561: <h3><font color="#e00000">OpenBSD/armv7:</font></h3>
                    562:
                    563: <ul style="list-style-type: none">
                    564: <li>
                    565: Write a system specific miniroot to an SD card and boot from it after connecting
                    566: to the serial console.  Refer to INSTALL.armv7 for more details.
                    567: <p>
                    568: </ul>
                    569:
                    570: <h3><font color="#e00000">OpenBSD/hppa:</font></h3>
                    571:
                    572: <ul style="list-style-type: none">
                    573: <li>
                    574: Boot over the network by following the instructions in INSTALL.hppa or the
                    575: <a href="hppa.html#install">hppa platform page</a>.
                    576: </ul>
                    577:
                    578: <h3><font color="#e00000">OpenBSD/i386:</font></h3>
                    579:
                    580: <ul style="list-style-type: none">
                    581: <li>
                    582: If your machine can boot from CD, you can write <i>install63.iso</i> or
                    583: <i>cd63.iso</i> to a CD and boot from it.
                    584: You may need to adjust your BIOS options first.
                    585: <p>
                    586: <li>
                    587: If your machine can boot from USB, you can write <i>install63.fs</i> or
                    588: <i>miniroot63.fs</i> to a USB stick and boot from it.
                    589: <p>
                    590: <li>
                    591: If you can't boot from a CD, floppy disk, or USB,
                    592: you can install across the network using PXE as described in
                    593: the included INSTALL.i386 document.
                    594: <p>
                    595: <li>
                    596: If you are planning on dual booting OpenBSD with another OS, you will need to
                    597: read INSTALL.i386.
                    598: </ul>
                    599:
                    600: <h3><font color="#e00000">OpenBSD/landisk:</font></h3>
                    601:
                    602: <ul style="list-style-type: none">
                    603: <li>
                    604: Write <i>miniroot63.fs</i> to the start of the CF
                    605: or disk, and boot normally.
                    606: </ul>
                    607:
                    608: <h3><font color="#e00000">OpenBSD/loongson:</font></h3>
                    609:
                    610: <ul style="list-style-type: none">
                    611: <li>
                    612: Write <i>miniroot63.fs</i> to a USB stick and boot bsd.rd from it
                    613: or boot bsd.rd via tftp.
                    614: Refer to the instructions in INSTALL.loongson for more details.
                    615: </ul>
                    616:
                    617: <h3><font color="#e00000">OpenBSD/luna88k:</font></h3>
                    618:
                    619: <ul style="list-style-type: none">
                    620: <li>
                    621: Copy `boot' and `bsd.rd' to a Mach or UniOS partition, and boot the bootloader
                    622: from the PROM, and then bsd.rd from the bootloader.
                    623: Refer to the instructions in INSTALL.luna88k for more details.
                    624: </ul>
                    625:
                    626: <h3><font color="#e00000">OpenBSD/macppc:</font></h3>
                    627:
                    628: <ul style="list-style-type: none">
                    629: <li>
                    630: Burn the image from a mirror site to a CDROM, and power on your machine
                    631: while holding down the <i>C</i> key until the display turns on and
                    632: shows <i>OpenBSD/macppc boot</i>.
                    633: <p>
                    634: <li>
                    635: Alternatively, at the Open Firmware prompt, enter <i>boot cd:,ofwboot
                    636: /6.3/macppc/bsd.rd</i>
                    637: </ul>
                    638:
                    639: <h3><font color="#e00000">OpenBSD/octeon:</font></h3>
                    640:
                    641: <ul style="list-style-type: none">
                    642: <li>
                    643: After connecting a serial port, boot bsd.rd over the network via DHCP/tftp.
                    644: Refer to the instructions in INSTALL.octeon for more details.
                    645: </ul>
                    646:
                    647: <h3><font color="#e00000">OpenBSD/sgi:</font></h3>
                    648:
                    649: <ul style="list-style-type: none">
                    650: <li>
                    651: To install, burn cd63.iso on a CD-R, put it in the CD drive of your
                    652: machine and select <i>Install System Software</i> from the System Maintenance
                    653: menu. Indigo/Indy/Indigo2 (R4000) systems will not boot automatically from
                    654: CD-ROM, and need a proper invocation from the PROM prompt.
                    655: Refer to the instructions in INSTALL.sgi for more details.
                    656:
                    657: <p>
                    658: <li>
                    659: If your machine doesn't have a CD drive, you can setup a DHCP/tftp network
                    660: server, and boot using "bootp()/bsd.rd.IP##" using the kernel matching your
                    661: system type. Refer to the instructions in INSTALL.sgi for more details.
                    662: </ul>
                    663:
                    664: <h3><font color="#e00000">OpenBSD/sparc64:</font></h3>
                    665:
                    666: <ul style="list-style-type: none">
                    667: <li>
                    668: Burn the image from a mirror site to a CDROM, boot from it, and type
                    669: <i>boot cdrom</i>.
                    670: <p>
                    671: <li>
                    672: If this doesn't work, or if you don't have a CDROM drive, you can write
                    673: <i>floppy63.fs</i> or <i>floppyB63.fs</i>
                    674: (depending on your machine) to a floppy and boot it with <i>boot
                    675: floppy</i>. Refer to INSTALL.sparc64 for details.
                    676: <p>
                    677: <li>
                    678: Make sure you use a properly formatted floppy with NO BAD BLOCKS or your install
                    679: will most likely fail.
                    680: <p>
                    681: <li>
                    682: You can also write <i>miniroot63.fs</i> to the swap partition on
                    683: the disk and boot with <i>boot disk:b</i>.
                    684: <p>
                    685: <li>
                    686: If nothing works, you can boot over the network as described in INSTALL.sparc64.
                    687: </ul>
                    688:
                    689: <hr>
                    690:
                    691: <h3 id="upgrade"><font color="#0000e0">How to upgrade</font></h3>
                    692:
1.5       matthieu  693: If you already have an OpenBSD 6.2 system, and do not want to reinstall,
1.1       deraadt   694: upgrade instructions and advice can be found in the
                    695: <a href="faq/upgrade63.html">Upgrade Guide</a>.
                    696: <p>
                    697:
                    698: <hr>
                    699:
                    700: <h3 id="sourcecode"><font color="#0000e0">Notes about the source code</font></h3>
                    701:
                    702: <tt>src.tar.gz</tt> contains a source archive starting at <tt>/usr/src</tt>.
                    703: This file contains everything you need except for the kernel sources,
                    704: which are in a separate archive.
                    705: To extract:
                    706:
                    707: <blockquote><pre>
                    708: # <b>mkdir -p /usr/src</b>
                    709: # <b>cd /usr/src</b>
                    710: # <b>tar xvfz /tmp/src.tar.gz</b>
                    711: </pre></blockquote>
                    712:
                    713: <tt>sys.tar.gz</tt> contains a source archive starting at <tt>/usr/src/sys</tt>.
                    714: This file contains all the kernel sources you need to rebuild kernels.
                    715: To extract:
                    716:
                    717: <blockquote><pre>
                    718: # <b>mkdir -p /usr/src/sys</b>
                    719: # <b>cd /usr/src</b>
                    720: # <b>tar xvfz /tmp/sys.tar.gz</b>
                    721: </pre></blockquote>
                    722:
                    723: Both of these trees are a regular CVS checkout.  Using these trees it
                    724: is possible to get a head-start on using the anoncvs servers as
                    725: described <a href="anoncvs.html">here</a>.
                    726: Using these files
                    727: results in a much faster initial CVS update than you could expect from
                    728: a fresh checkout of the full OpenBSD source tree.
                    729: <p>
                    730:
                    731: <hr>
                    732:
                    733: <h3 id="ports"><font color="#0000e0">Ports Tree</font></h3>
                    734:
                    735: A ports tree archive is also provided.  To extract:
                    736:
                    737: <blockquote><pre>
                    738: # <b>cd /usr</b>
                    739: # <b>tar xvfz /tmp/ports.tar.gz</b>
                    740: </pre></blockquote>
                    741:
                    742: Go read the <a href="faq/ports/index.html">ports</a> page
                    743: if you know nothing about ports
                    744: at this point.  This text is not a manual of how to use ports.
                    745: Rather, it is a set of notes meant to kickstart the user on the
                    746: OpenBSD ports system.
                    747: <p>
                    748: The <i>ports/</i> directory represents a CVS checkout of our ports.
                    749: As with our complete source tree, our ports tree is available via
                    750: <a href="anoncvs.html">AnonCVS</a>.
                    751: So, in order to keep up to date with the -stable branch, you must make
                    752: the <i>ports/</i> tree available on a read-write medium and update the tree
                    753: with a command like:
                    754:
                    755: <blockquote><pre>
                    756: # <b>cd /usr/ports</b>
                    757: # <b>cvs -d anoncvs@server.openbsd.org:/cvs update -Pd -rOPENBSD_6_3</b>
                    758: </pre></blockquote>
                    759:
                    760: [Of course, you must replace the server name here with a nearby anoncvs
                    761: server.]
                    762: <p>
                    763: Note that most ports are available as packages on our mirrors. Updated
                    764: ports for the 6.3 release will be made available if problems arise.
                    765: <p>
                    766: If you're interested in seeing a port added, would like to help out, or just
                    767: would like to know more, the mailing list
                    768: <a href="mail.html">ports@openbsd.org</a> is a good place to know.
                    769: <p>
                    770: </body>
                    771: </html>