ProHoster > Blog > Internet News > Release of OpenBSD 6.9.

Release of OpenBSD 6.9.

The release of the free cross-platform UNIX-like operating system OpenBSD 6.9 has been announced. It is noted that this is the 50th release of the project, which will celebrate its 26th anniversary this year. The OpenBSD project was founded by Theo de Raadt in 1995 after a conflict with the NetBSD developers, which resulted in Theo being denied access to the CVS repository of NetBSD. Following this, Theo de Raadt and a group of like-minded individuals created a new open operating system based on the NetBSD source tree, with primary development goals of portability (supporting 13 hardware platforms), standardization, correctness, active security, and integrated cryptographic tools. The size of the full installation ISO image of the OpenBSD 6.9 base system is 544 MB.

In addition to the operating system itself, the OpenBSD project is known for its components that have been adopted in other systems and proven to be among the most secure and high-quality solutions. Among them: LibreSSL (a fork of OpenSSL), OpenSSH, the packet filter PF, routing daemons OpenBGPD and OpenOSPFD, the NTP server OpenNTPD, mail server OpenSMTPD, terminal multiplexer (analog of GNU screen) tmux, identd daemon implementing the IDENT protocol, BSDL alternative to the GNU groff package — mandoc, protocol for organizing fault-tolerant systems CARP (Common Address Redundancy Protocol), lightweight HTTP server, and the file synchronization utility OpenRSYNC.

Key Improvements:

  • The softraid driver has added a RAID1C mode with the implementation of software RAID1 with data encryption.
  • Two new background processes have been included — dhcpleased and resolvd, which work alongside slaacd and unwind for the automatic configuration of network interfaces and name resolution in DNS. The dhcpleased implements the DHCP protocol for obtaining IP addresses, while the resolvd manages the contents of resolv.conf based on information about name servers obtained from dhcpleased, slaacd, and drivers like umb.
  • Initial support for Apple devices with the M1 processor has been added. This includes recognition of the Apple Icestorm/Firestorm arm64 cores and support for the BCM4378 wireless chips used in the Apple M1 SoC.
  • Support for the powerpc64 platform has been improved, developed for 64-bit systems based on POWER8 and POWER9 processors. Compared to the previous release, support for the RETGUARD protection mechanism has been implemented for powerpc64, an astfb driver has been added for the Aspeed BMC framebuffer, issues with radeondrm and amdgpu drivers on AMD GPU systems have been resolved, network boot capability has been added to the kernel builds for ram disks, support for CPU POWER9 power-saving modes has been provided, support for exceptions generated during floating-point operations has been added, and IPMI support for PowerNV systems has been implemented.
  • Support for ARM64 platforms has been provided for CPU Cortex-A78AE, Cortex-X1, and Neoverse V1, with optimized ARM64 versions of copyin, copyout, and kcopy calls implemented, a cryptox driver added for ARMv8 crypto extensions support, and a smmu driver for RM System MMU with Guard Page support. Improved support for Raspberry Pi, Rock Pi N10, NanoPi, and Pinebook Pro devices.
  • The video driver has been updated with the sysctl parameter kern.video.record, which, like kern.audio.record, controls the inclusion of an empty image output when attempting to capture video (for capture resolution, the value must be set to 1). Processes are now allowed to open the video device multiple times (resolving issues with using webcams in Firefox and BigBlueButton).
  • Tracing points have been added for malloc and free calls, allowing memory allocation-related activity to be tracked using dt and btrace. The btrace tool has been enhanced with the '-n' option for parsing a program without executing any actions.
  • Support for multiprocessor systems (SMP) has been enhanced. The implementation of UNIX sockets has been removed from the global kernel lock, a common mutex has been added for serializing operations with msgbuf, the uvm_pagealloc call has been made mp-safe, and getppid and sendsyslog calls have been freed from locks.
  • Issues in the DRM (Direct Rendering Manager) components have been fixed, including crashes in the radeondrm driver on Powerbook5/6 and RV350 systems. DRI3 support has been established in the amdgpu and ati drivers, and device creation in the /dev/dri/ directory has been implemented for Linux compatibility.
  • Improvements have been made to the VMM hypervisor. The backend for managing virtual machines, vmd, now supports booting from compressed RAM disks.
  • Enhancements have been made to the audio subsystem. It is now possible to dedicate sndio sound devices solely for playback or recording. The sndiod now features an eighth-order finite impulse response (FIR) low-pass filter, which has eliminated noise caused by spectrum overlap during resampling. By default, the automatic volume reduction function when a new program starts playback (autovolume) is disabled, with the default volume level set to 127. Mixing sound from alternative devices with differing levels of supported functionality in sndiod has been enabled.
  • The LLDB debugger build and installation is enabled by default.
  • Support for the logger handler has been added to rcctl, rc.subr, and rc.d, allowing for organizing log output from background processes sending data to stdout/stderr.
  • Touchpads now allow button layout configuration via wsconsctl. Concurrent touch handling has been improved in wscons.
  • APM support for obtaining power consumption and battery charge data has been implemented for ARM64 devices. An unveil call is used to restrict the apmd process's access to the filesystem.
  • Hardware support has been expanded. New drivers acpige (for handling ACPI events like power button presses), pchgpio (for GPIO controllers found in modern Intel PCH), ujoy (for game controllers), and uhidpp (for Logitech HID++ devices) have been added. Support for AMD Vi and Intel VTD IOMMU extensions for isolating PCI devices and blocking improper memory access has also been added. Support for Lynloong LM9002/9003 and LM9013 computers has been introduced. ACPI support has been added to the pcamux and imxiic drivers.
  • Network adapter support has been improved: mvpp (SFP+ and 10G for Marvel Armada Ethernet), mvneta (1000base-x and 2500base-x), mvsw (Marvel SOHO switches), rge (Wake on LAN support), Netgear ProSecure UTM25. For wireless drivers iwm, iwn, and athn, RA (802.11n Tx Rate Adaptation) support has been added. The wireless stack has been set up for automatic mode selection 11a/b/g/n/ac when using a network interface as an access point.
  • The network stack has implemented the veb (Virtual Ethernet Bridge) driver. Monitoring mode support has been added, whereby incoming packets on the network interface are not passed to the network stack for processing, but traffic analysis mechanisms such as BPF can be applied to them. A new type of network interface — etherbridge — has been introduced. The command route sourceaddr allows for overriding the source address for programs, bypassing the standard address selection algorithm. an IP address Automatic activation of network interfaces is provided when entering autoconfiguration mode (AUTOCONF4 and AUTOCONF6).
  • The installer now provides a compressed ramdisk image (bsd.rd) on all platforms that support such booting.
  • A warning about the use of the printf string formatting substitution "%n" has been implemented for syslog output.
  • The OpenBGPD routing daemon has added support for the RTR (Resource Public Key Infrastructure (RPKI) to Router Protocol). A new command, "bgpctl show rtr", has been added to display basic information about RTR sessions.
  • The code for ospfd and ospf6d has been restructured to unify it with other routing daemons and simplify maintenance. Support for point-to-point network interfaces has been established.
  • New options "location (found|notfound)" have been implemented in the built-in HTTP server httpd to check the existence of resources.
  • The rpki-client utility has added support for the RRDP (The RPKI Repository Delta Protocol, RFC 8182). It is now possible to specify more than one URI in the TAL file.
  • The dig utility has implemented support for RFC 8914 (Extended DNS Error) and RFC 8976 (ZONEMD).
  • The dhclient has added the ability to specify options in hostname.if files using "dhcp" strings.
  • The snmpd daemon has provided full support for transforming Trapv1 into Trapv2 (RFC 3584). New keywords read, write, and notify have been added to snmpd.conf. The snmp utility has implemented support for SMI enumerations.
  • The unwind DNS resolver has added support for DNS64 and the acceptance of connections over TCP port.
  • The ftp utility has added support for permanent redirections (RFC 7538) and the ability to send the If-Modified-Since header when making HTTP/HTTPS requests.
  • In OpenSMTPD, the "-a" option has been added for performing authentication before sending a message. Encryption facilities have been transitioned to use the libtls library. The option to configure multiple certificates, selected based on the name (SNI), has been implemented for listening sockets for TLS. domain (SNI).
  • LibreSSL has added support for the DTLSv1.2 protocol. It is now possible to build only libtls ('--enable-libtls-only') without libcrypto and libssl.
  • The OpenSSH package has been updated. A detailed overview of the improvements can be found here: OpenSSH 8.5, OpenSSH 8.6.
  • The number of ports for the AMD64 architecture is 11310, for aarch64 — 10943, for i386 — 10468. Among the application versions available in the ports are: Xfce 4.16, Asterisk 18.3.0, Chromium 90.0.4430.72, FFmpeg 4.3.2, GCC 8.4.0, GNOME 3.38, Go 1.16.2, KDE Applications 20.12.3, Krita 4.4.3, LLVM/Clang 10.0.1, LibreOffice 7.0.5.2, Lua 5.3.6, MariaDB 10.5.9, Firefox 88.0 and ESR 78.10.0, Thunderbird 78.10.0, Node.js 12.16.1, PHP 8.0.3, Postfix 3.5.10, PostgreSQL 13.2, Python 3.9.2, Ruby 3.0.1, Rust 1.51.0.

    Third-party components included in OpenBSD 6.9 have been updated:

    • The graphical stack Xenocara based on X.Org 7.7 with xserver 1.20.10 + patches, freetype 2.10.4, fontconfig 2.12.4, Mesa 20.0.8, xterm 367, xkeyboard-config 2.20, fonttosfnt 1.2.1.
    • LLVM/Clang 10.0.1 (+ patches)
    • GCC 4.2.1 (+ patches) and 3.3.6 (+ patches)
    • Perl 5.32.1 (+ patches)
    • NSD 4.3.6
    • Unbound 1.13.1
    • Ncurses 5.7
    • Binutils 2.17 (+ patches)
    • Gdb 6.3 (+ patch)
    • Awk 18.12.2020
    • Expat 2.2.10

The release of OpenBSD 6.9 is accompanied by a new song "Vetera Novis."

Source: opennet.ru

Buy reliable website hosting with DDoS protection, VPS VDS servers 🔥 Buy reliable website hosting with DDoS protection, VPS VDS servers | ProHoster