{"id":114805,"date":"2024-04-05T18:25:42","date_gmt":"2024-04-05T16:25:42","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/vypusk-openbsd-7-5"},"modified":"2024-04-05T18:25:42","modified_gmt":"2024-04-05T16:25:42","slug":"vypusk-openbsd-7-5","status":"publish","type":"post","link":"https:\/\/prohoster.info\/en\/blog\/news\/vypusk-openbsd-7-5","title":{"rendered":"Release of OpenBSD 7.5","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>The release of the free UNIX-like operating system OpenBSD 7.5 has been announced. The OpenBSD project was founded by Theo de Raadt in 1995 after a conflict with the developers of NetBSD, which resulted in Theo being denied access to the NetBSD CVS repository. After that, Theo de Raadt and a group of like-minded individuals created a new open-source operating system based on the NetBSD source tree, with the main goals of portability (supporting 13 hardware platforms), standardization, correctness, proactive security, and built-in cryptographic tools. The size of the full installation ISO image of the base system OpenBSD 7.5 is 630 MB.       <\/p>\n<p>In addition to the operating system itself, the OpenBSD project is known for its components, which have gained popularity in other systems and have established themselves as some of the safest and highest-quality solutions. Among them are: LibreSSL (a fork of OpenSSL), OpenSSH, the packet filter PF, the routing daemons OpenBGPD and OpenOSPFD, the NTP server OpenNTPD, the email server OpenSMTPD, the terminal multiplexer (similar to GNU screen) tmux, the identd daemon implementing the IDENT protocol, the BSDL alternative to the GNU groff package \u2014 mandoc, the protocol for organizing fault-tolerant systems CARP (Common Address Redundancy Protocol), and a lightweight HTTP server along with the OpenRSYNC file synchronization utility.          <\/p>\n<p>Key Improvements:   <\/p>\n<ul>\n<li class=\"l\"> The installer has added support for encrypting the root partition. In the automated installation mode (autoinstall), it is now possible to enable disk encryption by providing a plaintext password or supplying keys on a separate medium. Builds for the AMD64 architecture cdXX.iso and installXX.iso have been adapted for booting in EFI mode.\n<li class=\"l\"> A new system call, pinsyscalls, has been added, allowing access to system calls only from specific locations in the process's address space. The kernel and ld.so can register the exact entry point for each system call used by a program and the libc.so library, to subsequently block the submission of system calls from unregistered locations.\n<li class=\"l\"> Support for indirect system call access via the syscall function has been removed. In combination with pinsyscalls, this change allows for the prohibition of direct access to system calls without using the wrappers provided in libc. Packages that involve direct access to system calls, such as Perl and Go, have been modified to use only libc functions.\n<li class=\"l\"> The ARM64 systems have expanded the use of Pointer Authentication (PAC) and Branch Target Identification (BTI) mechanisms.\n<li class=\"l\"> The ppp network interface has been enhanced. <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/en\/lir\/ipv4\/\"   title=\"support for IPv6\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"385\">support for IPv6<\/a>.\n<li class=\"l\"> The netstat utility now includes statistics on the efficiency of route caching (the output of 'netstat -s' now shows hit and miss counters for the cache).\n<li class=\"l\"> The pf packet filter has been updated to account for changes in the networking stack related to parallel operations on multiprocessor systems. When running tcpdump with the pflog network interface, it now displays packets that were dropped when the default 'block' rule was triggered. For rules with 'pass' actions, it shows blocked incorrect packets. A check for the correctness of option settings in IPv4 packets has been added to divert.\n<li class=\"l\"> Support for multiprocessor systems (SMP) has been improved. The timeout handlers in the network stack, packet counting for the loopback interface, and the vscsi_filtops module have been made mp-safe. Parallel execution of system calls bind and connect, as well as operations with UDP tables for IPv4 and IPv6, is now possible. Support for simultaneously sending UDP packets from different threads has been added.\n<li class=\"l\"> Handling of swap space overflow situations has been improved, and changes have been made to eliminate deadlocks.\n<li class=\"l\"> In the kernel for arm64 systems, caching of page table pool contents and PTE descriptors has been implemented, significantly speeding up operations on multicore systems.\n<li class=\"l\"> Improvements have been made to the VMM hypervisor. The implementation of the vionet device has been rewritten to support multithreading and zero-copy data transfer between the host and guest system without intermediate buffering. The stability of the hypervisor has been enhanced on systems with Intel VMX instructions. Additional protection has been added against recently identified vulnerabilities in processors related to speculative execution of instructions and leakage of residual data from registers.\n<li class=\"l\"> For amd64 systems, the sysctl machdep.retpoline has been added to manage the enabling of the retpoline mechanism for protection against Spectre-class attacks.\n<li class=\"l\"> The implementation of the Direct Rendering Manager (drm) framework is synchronized with the Linux kernel 6.6.19 (the previous release was 6.1.55).\n<li class=\"l\"> Support for new hardware has been added and new drivers have been included for components of various SoCs, supporting Ethernet controllers and offloading network operations to the network cards.\n<li class=\"l\"> In the audio subsystem uaudio, attachment of multiple drivers for audio devices has been allowed.\n<li class=\"l\"> Drivers apldcp and apldrm have been added for display controllers used in Apple devices. For the Apple Powerbook, the ability to control keyboard backlighting has been implemented.\n<li class=\"l\"> The qwx driver for Qualcomm IEEE 802.11ax wireless chips has been added, created by porting the ath11k driver from the Linux kernel (included since branch 5.6). This driver enables the use of wireless adapters used in laptops such as Lenovo ThinkPad X13s and DELL XPS 9500. Firmware files must be installed for the driver to work.\n<li class=\"l\"> The pax utility has been enhanced to allow writing to pax archives, and the tar utility has added support for pax archives larger than 8 GB.\n<li class=\"l\"> Support for specifying port numbers for tunnel-related network interfaces, such as gif and gre, has been added to the ifconfig utility.\n<li class=\"l\"> In bgpd, the messaging mechanism and most protocol parsers have been transitioned to a new memory-safe API.\n<li class=\"l\"> In rpki-client, experimental support for the P-256 digital signature algorithm has been added. It is now possible to restrict the RPKI Trust Anchor's actions to specific autonomous system numbers. Support for RPKI signed prefix lists has also been added.\n<li class=\"l\"> Support for RFC 7505 ('Null MX' for identification) has been added to smtpd. <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/en\/domain\/\"   title=\"domains\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"3157\">domains<\/a>, which do not accept mail) and the possibility of embedding multi-line tables and lists with filters in smtpd.conf has been provided.\n<li class=\"l\"> The ability to install a custom KDE Plasma 5.27 environment from the kde-plasma and kde-plasma-extra packages has been introduced (after KDE4 support ended, the support for using the KDE Plasma 5 desktop remained non-functional in OpenBSD). Versions offered for installation include KDE Plasma 5.27.10, KDE Applications 23.08.4, and KDE Frameworks 5.115.0.\n<li class=\"l\"> The LibreSSL and OpenSSH packages have been updated. A detailed overview of improvements can be found in the reviews of LibreSSL 3.9.0, OpenSSH 9.6, and OpenSSH 9.7.\n<li class=\"l\">The number of ports for the AMD64 architecture reached 12309 (up from 11845), for aarch64 - 12145 (up from 11508), and for i386 - 10830 (up from 10603). Among the application versions in the ports:\n<ul>\n<li> Asterisk 16.30.1, 18.21.0, 20.6.0\n<li> Audacity 3.4.2\n<li> CMake 3.28.3\n<li> Chromium 122.0.6261.111\n<li> FFmpeg 4.4.4\n<li> Firefox 123.0.1, ESR 115.8.0\n<li> GCC 8.4.0, 11.2.0\n<li> GHC 9.6.4\n<li> GNOME 45\n<li> Go 1.22.1\n<li> JDK 8u402, 11.0.22, 17.0.10, 21.0.2\n<li> Krita 5.2.2\n<li> LLVM\/Clang 13.0.0, 16.0.6, 17.0.6\n<li> LibreOffice 24.2.1.2\n<li> Lua 5.1.5, 5.2.4, 5.3.6, 5.4.6\n<li> MariaDB 10.9.8\n<li> Mono 6.12.0.199\n<li> Mutt 2.2.13 and NeoMutt 20240201\n<li> Node.js 18.19.1\n<li> OCaml 4.14.1\n<li> OpenLDAP 2.6.7\n<li> PHP 7.4.33, 8.0.30, 8.1.27, 8.2.16, 8.3.3\n<li> Postfix 3.8.6\n<li> PostgreSQL 16.2\n<li> Python 2.7.18, 3.9.18, 3.10.13, 3.11.8\n<li> Qt 5.15.12 (+ kde patches), 6.6.1\n<li> R 4.2.3\n<li> Ruby 3.1.4, 3.2.3, 3.3.0\n<li> Rust 1.76.0\n<li> SQLite 3.44.2\n<li> Shotcut 23.07.29\n<li> Sudo 1.9.15.5\n<li> Suricata 7.0.3\n<li> Tcl\/Tk 8.5.19, 8.6.13\n<li> TeX Live 2023\n<li> Thunderbird 115.8.1\n<li> Vim 9.1.139, Neovim 0.9.5\n<li> Xfce 4.18.1     <\/ul>\n<li class=\"l\"> Updated components from third-party developers included in OpenBSD 7.5:\n<ul>\n<li class=\"l\"> The Xenocara graphics stack based on X.Org 7.7 with xserver 21.1.11 + patches, freetype 2.13.0, fontconfig 2.14.2, Mesa 23.1.9, xterm 378, xkeyboard-config 2.20, fonttosfnt 1.2.3.  <\/li>\n<li class=\"l\">    LLVM\/Clang 16.0.6 (+ patches)  <\/li>\n<li class=\"l\">    GCC 4.2.1 (+ patches) and 3.3.6 (+ patches)  <\/li>\n<li class=\"l\">    Perl 5.36.3 (+ patches)  <\/li>\n<li class=\"l\">    NSD 4.8.0  <\/li>\n<li class=\"l\">    Unbound 1.18  <\/li>\n<li class=\"l\">    Ncurses 5.7  <\/li>\n<li class=\"l\">    Binutils 2.17 (+ patches)  <\/li>\n<li class=\"l\">  Gdb 6.3 (+ patch)  <\/li>\n<li class=\"l\">  Awk 22.01.2024  <\/li>\n<li class=\"l\">  Expat 2.6.0.\n<li class=\"l\"> zlib 1.3.1 (+ patches).  <\/ul>\n<\/ul>\n<p>Source: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=60930\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u0432\u044b\u043f\u0443\u0441\u043a \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0439 UNIX-\u043f\u043e\u0434\u043e\u0431\u043d\u043e\u0439 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b OpenBSD 7.5. \u041f\u0440\u043e\u0435\u043a\u0442 OpenBSD \u0431\u044b\u043b \u043e\u0441\u043d\u043e\u0432\u0430\u043d \u0422\u044d\u043e \u0434\u0435 \u0420\u0430\u0430\u0434\u0442\u043e\u043c (Theo de Raadt) \u0432 1995 \u0433\u043e\u0434\u0443 \u043f\u043e\u0441\u043b\u0435 \u043a\u043e\u043d\u0444\u043b\u0438\u043a\u0442\u0430 \u0441 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430\u043c\u0438 NetBSD, \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u0434\u043b\u044f \u0422\u044d\u043e \u0431\u044b\u043b \u0437\u0430\u043a\u0440\u044b\u0442 \u0434\u043e\u0441\u0442\u0443\u043f \u043a CVS \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044e NetBSD. \u041f\u043e\u0441\u043b\u0435 \u044d\u0442\u043e\u0433\u043e \u0422\u044d\u043e \u0434\u0435 \u0420\u0430\u0430\u0434\u0442 \u0441 \u0433\u0440\u0443\u043f\u043f\u043e\u0439 \u0435\u0434\u0438\u043d\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432 \u0441\u043e\u0437\u0434\u0430\u043b \u043d\u0430 \u0431\u0430\u0437\u0435 \u0434\u0435\u0440\u0435\u0432\u0430 \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u0445 \u0442\u0435\u043a\u0441\u0442\u043e\u0432 NetBSD \u043d\u043e\u0432\u0443\u044e \u043e\u0442\u043a\u0440\u044b\u0442\u0443\u044e [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-114805","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.1.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u0432\u044b\u043f\u0443\u0441\u043a \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0439 UNIX-\u043f\u043e\u0434\u043e\u0431\u043d\u043e\u0439 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b OpenBSD 7.5.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/en\/blog\/news\/vypusk-openbsd-7-5\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.1.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"en_US\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0412\u044b\u043f\u0443\u0441\u043a OpenBSD 7.5 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u0432\u044b\u043f\u0443\u0441\u043a \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0439 UNIX-\u043f\u043e\u0434\u043e\u0431\u043d\u043e\u0439 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b OpenBSD 7.5.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/en\/blog\/news\/vypusk-openbsd-7-5\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2024-04-05T16:25:42+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2024-04-05T16:25:42+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47OpenBSD 7.5 Release | ProHoster","description":"The release of the free UNIX-like operating system OpenBSD 7.5 has been announced.","canonical_url":"https:\/\/prohoster.info\/en\/blog\/news\/vypusk-openbsd-7-5","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"en_US","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412\u044b\u043f\u0443\u0441\u043a OpenBSD 7.5 | ProHoster","og:description":"\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u0432\u044b\u043f\u0443\u0441\u043a \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0439 UNIX-\u043f\u043e\u0434\u043e\u0431\u043d\u043e\u0439 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b OpenBSD 7.5.","og:url":"https:\/\/prohoster.info\/en\/blog\/news\/vypusk-openbsd-7-5","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-04-05T16:25:42+00:00","article:modified_time":"2024-04-05T16:25:42+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"114805","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-11 11:14:31","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-22 21:28:19","updated":"2026-02-11 11:14:31","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/posts\/114805","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/comments?post=114805"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/posts\/114805\/revisions"}],"predecessor-version":[{"id":160550,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/posts\/114805\/revisions\/160550"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/media?parent=114805"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/categories?post=114805"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/tags?post=114805"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}