changed my name to bridge.home, as it is transparent bridge

1 members found this post helpful.

Really amazing how easy it is to upgrade OpenBSD now!
Not that FreeBSD upgrade is much more complicated, but still.
I mean. Linux has gone SO far from this simplicity... I better not even start in that direction ))))))

But OpenBSD -- in every possible way it really surprises me by offering a high quality product. Yes, it is rather special in its own ways... for example, when I needed to do fstab editing during the installation, I was pushed to use ed (!!). LOL, right, because vi is not available in the installer filesystem. But that made me think of the early days of Unix.

1 members found this post helpful.

Linux make oldconfig always works for me, and takes < 10 minutes to upgrade Linux. I run with busybox userland, plus framebuffer vnc, ssl/ssh and alsa/sndio ... which typically are also easily upgraded.

I've had more issues with OpenBSD upgrades, for instance 7.1 I think it was, when turbo mode when on mains power was set as the default my cpu core started running at 100 degrees plus. Nice for a laptop to warm your lap in winter, not nice at all in summer. Linux also tends to better match with hardware, OpenBSD's ACPI for instance is hit and miss.

What else, if not the standard text editor, would most people want to use?
(Kudos to the first joker who says "Emacs" now.)

So updating Linux (the kernel) is as "fast" as updating OpenBSD (the complete operating system with its environment). I see...

My experiences were the exact opposite.

OpenBSD base is enough for users to perform a range of popular tasks without having to install additional software. a.k.a a "OS".

My Linux "OS" takes around a similar time to compile and dd to a USB as it takes to install OpenBSD. Linux kernel, busybox, fbvnc, ssh/ssl, alsa/sndio. And that's fully compiled rather than just downloading/extracting tarballs. Which is enough to perform a range of popular tasks, ssh into a ssh server for IRC/mutt, vnc into a full gui desktop, telnet into BBS's ...etc.

For the money, both are excellent. Where Linux falters is in there being way too many different distros - therein lays the "Linux" title waivering. I boot or use both. For 7.1/2/3 however I dropped OpenBSD as a desktop as it felt like my laptop would cook under the cpu heat. 7.4 with guidance from Solene and obsdfreq installation has resolved that. During the interval I was glad to have Linux to fall back upon. cpu running at 100 degrees+ may be within permissible tolerance but I didn't want to take the chance of solder points potentially melting and shortening its lifetime.

At other times its been nice to have OpenBSD to fall back upon when Linux was having issues, security flaws for instance.

Browser wise and I prefer to day to day run Linux/chrome, the latest version for general browsing. I don't track OpenBSD current so have to wait six months between upgrades (but do apply patches). So for general browsing, Linux/Chrome, for banking OpenBSD/chromium (kept clean, nowhere else before or after going to my banks web site).

Configuration and documentation wise, OpenBSD is easier/superior.

Best of both worlds better suits my needs/preferences. Comparison wise you can pick/choose elements in reflection of whether you want to paint a good or bad picture.

1 members found this post helpful.

Anyway, let's boot up syspatch again!

Syspatch 012 (all architectures):
Fix multiple xserver heap buffer overflows, out of bounds memory accesses and memory corruption. CVE-2023-6816 CVE-2024-0229 CVE-2024-21885 CVE-2024-21886 CVE-2024-0408 CVE-2024-0409

1 members found this post helpful.

Syspatch 013 (all architectures):
DNSSEC protocol vulnerabilities have been discovered that render various DNSSEC validators victims of Denial Of Service while trying to validate specially crafted DNSSEC responses. Fix CVE-2023-50387 and CVE-2023-50868 in unwind(8) and unbound(8).

1 members found this post helpful.

Syspatch 014 (amd64):
vmm(4) did not restore GDTR limits properly on Intel (VMX) CPUs.

Syspatch 015 (all architectures):
In libexpat fix billion laughs attack vulnerability CVE-2024-28757.

Syspatch 016 (all architectures):
Fix multiple heap buffer overread and data leakage in the X11 server Xi extension and use after free in the Render extention. CVE-2024-31080 CVE-2024-31081 CVE-2024-31083