OpenBSD 7.0 released
The OpenBSD projecthas releasedOpenBSD 7.0,the project's 51st release.As usual, the release pageoffers highlights, installation and upgrade instructions, as well as links toother resources such as thedetailed changelog.
Notable improvements include, but are not limited to:
- Support has been added for a new hardware platform,riscv64,for 64-bitRISC-Vsystems.[Seeearlierreports.]
- /etc/bsd.re-config(5)was introduced, providing a mechanism to makeconfig(8)-modifiedGENERIC kernels compatible with KARL.
- Hibernate time has been reduced.[See earlier report.]
- The timeout(1)utility was imported from NetBSD.[See earlier report.]
- openrsync(1)now has include and exclude options.[See earlier report.]
- doas(1)will now retry up to 3 times on password authentication failure.
- ucc(4),a driver for USB HID Consumer Control keyboards, was added.This exposes volume, audio, and application launch keys.
- xterm(1)is nowunveiled.[See earlier report.]
- printf(3)and friends now log an error and abort when confronted with format %n.
- iked(8)now has client-side support for DNS configuration.[See earlier report.]
- traceroute(8)speed has been boosted through asynchronous handling of probe packets and DNS.[See earlier report.]
- dhcpleased(8)andresolvd(8)are both enabled by default and provide the standard mechanism forconfiguring IPv4 addresses by DHCP.[See previousreports.] The combination also makes nameserver information gathered via slaacd usable in dynamic configurations. dhclient(8)remains available for special cases.A "nameserver" command was added toroute(8),allowing sending DNS nameserver prooposals toresolvd(8) over the routing socket.
- In LibreSSL 3.4.1,support has been added for the OpenSSL 1.1.1TLSv3 APIs.The "new" X.509 validator is enabled,allowing verification of modern certificate chains.
- In OpenSSH8.8,the RSA/SHA1 signature type[not RSA ("ssh-rsa") keys -see previous report]is disabled by default.scp(1)supportsoptionaluse of theSFTP protocol.[Since our previous report,the default hasrevertedto using the original scp/rcpprotocol by default.]
Those upgrading from the 6.9 release (or earlier) should consult theUpgrade Guide.
While your install sets download or when your packages update,please take the time to look at and use one or more of the recommended ways to support the project, such as making adonation.Corporate entities may prefer to send money toThe OpenBSD Foundation,a Canadian non-profit corporation.You can also getmerchandiseand help OpenBSD visibility.Also, don't forget to listen to the release song(mp3 orogg)and check out the lyrics.
Thanks to the developers for all the excellent work that has gone into thisgreat new release!