OpenBSD 7.2 is being released!

YesItsMe · 10-19-2022, 07:37 PM

Right now, my OpenBSD machines run the upgrade:

Code:

$ doas sysupgrade

The release page lists a couple of improvements, especially Apple M2 support and a few speed improvements in core components.

Please read the upgrade guide and follow the steps:

Code:

$ doas sysmerge
# now, follow the "Configuration and syntax changes" paragraph

Enjoy!

YesItsMe · 10-20-2022, 07:53 AM

Heads up: It may happen that inet autoconf breaks after the sysupgrade, at least it did on one of my OpenBSD servers.
Solution: Use inet <your IPv4 address> in /etc/hostname.<your adapter> and set your gateway in /etc/mygate.

hitest · 10-20-2022, 10:24 AM

Thanks! Installed and finishing up initial set-up.

hitest · 10-20-2022, 10:53 AM

Set-up finished. 7.2 is smooth as silk. Many thanks to Theo and the developers!

Code:

puffy$ uname -a
OpenBSD puffy.darkstar.home 7.2 GENERIC.MP#758 amd64

fatmac · 10-20-2022, 02:28 PM

Just grabbing mine now - good timing.

I was about to install 7.1 onto a couple of old computers, now it can be 7.2.

YesItsMe · 10-20-2022, 03:41 PM

I noticed that pkg_add -u is amazingly fast now!

Turbocapitalist · 10-20-2022, 10:05 PM

Quote:

Originally Posted by YesItsMe

I noticed that pkg_add -u is amazingly fast now!

What changed? Or should I dig through CVS?

YesItsMe · 10-21-2022, 06:51 AM

Basically, they enabled caching for pkg_add, including quirks.
Ref.: http://undeadly.org/cgi?action=artic...20220504061330

Turbocapitalist · 10-21-2022, 07:58 AM

Thanks.

YesItsMe · 10-25-2022, 06:13 AM

Syspatch 001 (all architectures):
Custom verification callbacks could cause the X.509 verifier to fail to store errors resulting from leaf certificate verification.

Syspatch 002 (all architectures):
Unbreak ASN.1 indefinite length encoding.

YesItsMe · 10-30-2022, 03:19 PM

Syspatch 003 (all architectures):
Restore operation of Apple-specific Fn-key keyboard sequences.

YesItsMe · 11-01-2022, 05:41 PM

Syspatch 004 (all architectures):
In libexpat fix heap use-after-free vulnerability CVE-2022-43680.

YesItsMe · 11-14-2022, 09:02 AM

Syspatch 005 (all architectures):
CVE-2022-44638: An integer overflow in pixman may lead to an out-of-bounds write.

YesItsMe · 12-01-2022, 03:00 PM

Syspatch 006 (amd64):
Incorrect reference counting and locking caused a vmm(4) performance regression.

Syspatch 007 (all architectures):
A crafted TCP query from localhost could crash the unwind(8) daemon.

Syspatch 008 (all architectures):
Fix a assertion crash during pfsync state update.

YesItsMe · 12-16-2022, 12:11 PM

Syspatch 009 (all architectures):
In X11 server fix local privileges elevation and and remote code execution for ssh X forwarding sessions. This addresses CVE-2022-46340 CVE-2022-46341 CVE-2022-46342 CVE-2022-46343 CVE-2022-46344.

Syspatch 010 (amd64):
Incorrect reference counting and locking caused a vmm(4) performance regression.
Fix booting vmd(8) guests from ramdisk with more than 4g of memory.

Syspatch 011 (amd64, i386):
TLB entries were not invalidated for all types of engine on 12th generation Intel graphics (Tiger Lake, Rocket Lake, Alder Lake).

Syspatch 012 (all architectures):
Removing a domain can result in an out-of-bounds write in acme-client(8).