User: Password:
Subscribe / Log in / New account

OpenBSD 4.8 released

From:  Theo de Raadt <>
Subject:  OpenBSD 4.8 released Nov 1, 2010
Date:  Mon, 01 Nov 2010 09:03:09 -0600
Message-ID:  <>
Archive-link:  Article

- OpenBSD 4.8 RELEASED -------------------------------------------------

Nov 1, 2010.

We are pleased to announce the official release of OpenBSD 4.8.
This is our 28th release on CD-ROM (and 29th via FTP).  We remain
proud of OpenBSD's record of more than ten years with only two remote
holes in the default install.

As in our previous releases, 4.8 provides significant improvements,
including new features, in nearly all areas of the system:

 - New/extended platforms:
    o i386 and amd64:
       - ACPI-based suspend/resume works on most machines with
         Intel/ATI video. Machines using NVidia graphics will not
         resume the graphics.  cardbus(4) and pcmcia(4) will still
         have some problems, too.

 - Improved hardware support, including:
    o New acpisony(4) driver for Sony ACPI control.
    o New itherm(4) driver for Intel 3400 temperature sensor.
    o New se(4) driver for SiS 190 10/100/Gigabit Ethernet devices.
    o New uguru(4) driver for ABIT temperature, voltage and fan sensors.
    o New owctr(4) driver for 1-Wire counter devices.
    o New pgs(4) driver for Programmers Switch found on some macppc machines.
    o Support for 82576 fiber and 82577/82578 (PCH) based devices has been
      added to em(4).
    o Support for 24-bit encodings and USB 2.0 playback has been added to
    o Support for Winbond/Nuvoton W83627DHG-P has been added to wbsio(4).
    o Support for RTL8168E has been added to re(4).
    o Support for 800x480 has been added to udl(4).
    o Support for M-audio Audiophile 192k has been added to envy(4).
    o Support for Intel Core i3/i5 internal graphics (Ironlake) has been
      added to inteldrm(4) and agp(4).
    o The ss(4) and uscanner(4) drivers have been removed.
    o Improved robustness of several SCSI/SAS/RAID HBA drivers, including
      mpi(4), mpii(4) and ciss(4). 

 - New tools:
    o iked(8), an Internet Key Exchange version 2 (IKEv2) daemon.
    o ldapd(8), a Lightweight Directory Access Protocol (LDAP) daemon.

 - Filesystem midlayer improvements:
    o Fix internal locking in (still experimental!) NTFS.

 - OpenBGPD, OpenOSPFD and other routing daemon improvements:
    o bgpd(8) control sockets are now specified in the config file.
      This removes the -s and -r arguments to bgpd.
    o Extended the BGP MPLS VPN support to allow Layer-3 MPLS VPNs to be
      terminated on OpenBSD with the help of mpe(4), ldpd(8), and bgpd(8).
    o bgpd(8) supports multiple FIBs and it is possible to assign them
      to RIBs for redistribution.
    o bgpd now supports to use neighbor-as in AS filter statements and
      added two new filters -- max-as-seq and max-as-len -- to limit the
      length of a sequence of a single AS or the total length of an AS path.
    o Added softreconfig support in bgpd for peers changing the RIB.
    o Fixed multiprotocol MRT dumps and added 4-byte AS-Number support in bgpd(8).
    o Added support for ping6 and traceroute6 in bgplg(8) and bgplgsh(8)
    o ospfd(8) has better LSA pruning and config reload support.
    o ospf6d(8) now supports LSAs larger than the link MTU, has improved
      interoperability with other OSPFv3 implementations, can redistribute
      the default route, and will correctly handle IPv6 prefixes advertised
      by neighbours on the same link but not configured on the router itself.
    o Various improvements in ldpd(8) including correct penultimate hop
      popping, better session handling, and a imporved config file parser.

 - Generic network stack improvements:
    o ifconfig(8) and route(8)  get better Multiprotocol Label
      Switching support.
    o traceroute(8) now supports extended ICMP headers which allows
      printing of MPLS labels.
    o Support for RFC 4941 privacy extensions for stateless address
      autoconfiguration has been added to inet6(4) and can be enabled
      via ifconfig(8).
    o ifconfig(8) now supports random selection of MAC addresses.
    o tcpdump(8) now decodes Multicast Listener Discovery version 2
      and Internet Key Exchange version 2 traffic.
    o enc(4) and ipsec(4) are now aware of routing domains.
    o dhcpd(8) and dhclient(8) and are now capable of running in different
      routing domains.
    o Added MPLS support and a simple keepalive mechanism to gre(4).
    o Added MPLS support to gif(4).
    o Support for 802.1ad-style QinQ nested VLANs with the addition
      of svlan(4) (service VLAN) interfaces.
    o Added a RTM_DESYNC routing message as indicator that route messages
      got dropped because of insufficent buffer space. ospfd(8) uses
      this message to keep the internal view of the routing table in sync.

 - SCSI improvements:
    o better cd(4) detaching.
    o better st(4) sense data and buf handling.
    o eliminate excessive delays when starting DVD playing.
    o ask only for minimal (i.e. 18 bytes) sense data, fixing usb devices.
    o migrate to using bufq.
    o always try READ CAPACITY 16 on devices claiming to be SCSI-3.
    o many performance and reliability improvements as a result of
      new SCSI midlayer:
      - introduce round-robin scheduling of resources for
        outstanding device commands to prevent a single device
        from monopolising the bus.
      - significant reduction in memory consumption used for
        tracking devices attached to buses.
      - eliminate many unnecessary splbio/splx calls in SCSI drivers.
      - eliminate many use after free's exposed by new SCSI midlayer.
      - eliminate scsi_scsi_cmd(), simplifying calling inside SCSI midlayer.
      - eliminate struct scsi_device.
      - eliminate many uninitialized data references and invalid
        scsi_done() calls exposed by new SCSI midlayer.
      - eliminate use of EAGAIN.
      - eliminate almost all uses of NO_CCB and XS_NO_CCB. 

 - Assorted improvements:
    o mbtowc(3) multi-byte/wide-character conversion functions have been added
      to the C library, and setlocale(3) now supports the en_US.UTF-8 locale.
    o posix_madvise(2), posix_memalign(3), strndup(3), and strnlen(3) have been
      added to the C library.
    o The event(3) library was updated to version 1.4.14b.
    o The pthreads(3) library now implements the
      pthread_rwlock_timed{rd,wr}lock interfaces.
    o AES-NI support has been integrated into the OpenSSL crypto(3) library.
    o MIDI control in non-server mode was added to aucat(1), including seeking
      within .wav files
    o A new record-what-you-hear feature was added to aucat(1).
    o The minimum extra latency of the aucat(1) server was lowered to a single
      block, improving usability of low-latency programs without stability
    o disklabel(8) now supports unique disk identifiers.
    o ftp(1) now handles redirection to relative URLs in the Location: header
      of HTTP responses.
    o lint(1) now recognizes the C99 data types _Bool and _Complex and some
      related gcc extensions.
    o make(1) now allows variables in SysV modifiers, and implements the :QL
      (quote list) modifier.
    o man(1) now allows to combine the -s option with -m or -M.
    o Improved directory editing in mg(1).
    o newfs(8) has been tweaked to better support large file systems.
    o od(1) now supports the POSIX -A option to select an input address base.
    o sendbug(1) now includes the output of usbdevs -v into the template.
    o smtpd(8) now supports the SIZE and ENHANCEDSTATUSCODES extensions and
      the "plain" backend for maps, and performance was improved when
      handling large amounts of mail.
    o wsconsctl(8) now handles more than one keyboard, mouse and display.
    o Many memory leaks have been fixed in various userland utilities.
    o amd64, i386, hppa, sparc64, socppc and macppc platforms were switched
      over to gcc4. 
    o newfs(8) now makes FFS2 the default for partitions larger
      than INT_MAX blocks.
    o dhcpd(8) now includes the server id in NAK messages, as
      required by some relays.
    o disklabel(8) now aligns the start and end of FFS partitions on
      bsize boundaries where it can, to improve performance on
      4096-byte block devices.
    o by default, read and write caching is now turned on for
      non-USB scsi disks.
    o getdirentries(2) now checks to ensure that it doesn't wrap
      or truncate directory information on architectures where LONG
      is a different size from LONG LONG.
    o disklabel(8) now ensures correct physical bounds and disk size
      are used when building a disklabel from saved ascii disklabel.
    o it is again possible to build a bsd.rd that has DDB.
    o pms(4) now works much better with various trackpads and over
      suspend/resume cycles.
    o fdisk(8) now aligns the OpenBSD partition on a power of 2
      block boundary to improve performance on 4096-byte block devices.
    o nfsd(8) now logs start up errors to the system log as well
      as the console.
    o nfsd(8) now errors out if given an invalid number of servers to run. 

 - Install/Upgrade process changes:
    o If the system time is off by more than 120 seconds, ask if the user
      wants to set it accordingly.
    o disklabel(8) now allows to customize auto allocated labels using
      the -R option.
    o Default network install method changed from FTP to HTTP.
    o Automatically set /etc/pkg.conf `installfrom' entry to the public
      mirror used while installing or upgrading.
    o sysmerge(8) now automatically installs missing users and groups.

 - OpenSSH 5.5:
    o New features:
      - Added a ControlPersist option to ssh_config(5).
      - Hostbased authentication may now use certificate host keys.
      - ssh-keygen(1) now supports signing certificate using a CA key
        that has been stored in a PKCS#11 token.
      - ssh(1) will now log the hostname and address that we connected to
        at LogLevel=verbose after authentication is successful to mitigate
        "phishing" attacks.
      - Expand %h to the hostname in ssh_config Hostname options.
      - Allow ssh-keygen(1) to import and export of PEM and PKCS#8 keys.
      - sshd(8) will now queue debug messages for bad ownership or permissions
        on the user's keyfiles encountered during authentication.
      - ssh(1) connection multiplexing now supports remote forwarding with
        dynamic port allocation and can report the allocated port back to
        the user.
      - sshd(8) now supports indirection in matching of principal names
        listed in certificates. sshd(8) now has a new AuthorizedPrincipalsFile
      - Additional sshd_config(5) options are now valid inside Match blocks:
          o AuthorizedKeysFile
          o AuthorizedPrincipalsFile
          o HostbasedUsesNameFromPacketOnly
          o PermitTunnel
    o The following significant bugs have been fixed in this release:
      - The PKCS#11 code now retries a lookup for a private key if there is
        no matching key with CKA_SIGN attribute enabled (bz#1736).
      - Unbreak strdelim() skipping past quoted strings.
      - sftp(1): fix swapped args in upload_dir_internal() (bz#1797).
      - Fix a longstanding problem where if you suspend scp(1) at the
        password/passphrase prompt the terminal mode is not restored.
      - Fix a PKCS#11 crash on some smartcards by validating the length
        returned for C_GetAttributValue (bz#1773).
      - sftp(1): fix ls in working directories that contain globbing
        characters in their pathnames (bz#1655).
      - Print warning for missing home directory when ChrootDirectory=none.
      - sftp(1): fix a memory leak in do_realpath() error path (bz#1771).
      - ssh-keygen(1): Standardise error messages when attempting to open
        private key files to include "progname: filename: error reason"
      - Replace verbose and overflow-prone Linebuf code with
        read_keyfile_line() (bz#1565).
      - Include the user name on "subsystem request for ..." log messages.
      - ssh(1) and sshd(8): remove hardcoded limit of 100 permitopen clauses
        and port forwards per direction (bz#1327).
      - sshd(8): ignore stderr output from subsystems to avoid hangs if a
        subsystem or shell initialisation writes to stderr (bz#1750).
      - Skip the initial check for access with an empty password when
        PermitEmptyPasswords=no (bz#1638).
      - sshd(8): fix logspam when key options (from="..." especially) deny
        non-matching keys (bz#1765).
      - ssh-keygen(1): display a more helpful error message when $HOME is
        inaccessible while trying to create .ssh directory (bz#1740).
      - ssh(1): fix hang when terminating a mux slave using ~ (bz#1758).
      - ssh-keygen(1): refuse to generate keys longer than
        OPENSSL_[RD]SA_MAX_MODULUS_BITS (bz#1516).
      - Suppress spurious tty warning when using -O and stdin is not
        a tty (bz#1746).
      - Kill channel when pty allocation requests fail (bz#1698).

 - Mandoc 1.10.5:
    o The mandoc(1) utility is now used to build all manuals in the base
      system and in Xenocara from mdoc(7) and man(7) sources.
    o New integrated roff preprocessor with minimal support for conditional
      requests, nested roff requests, string definitions, roff registers,
      also parsing and ignoring macro definitions.
    o Improved support for manual pages generated by pod2man(1).
    o Many parser improvements, in particular mdoc(7) support for word
      keeps, synopsis mode in arbitrary sections, graceful handling of
      badly nested blocks, and improved parsing of column displays.
    o New PostScript and PDF output frontends.
    o Many ASCII and HTML output formatting improvements, for example
      proper synopsis indentation and improved end-of-sentence detection.
    o Considerably improved syntax checking and error reporting.

 - Over 5,800 ports, major robustness and speed improvements in package tools.
 - Many pre-built packages for each architecture:
    o i386: 6218                      o sparc64: 5950
    o alpha: 5827                     o sh: 1100
    o amd64: 6166                     o powerpc: 5996
    o sparc: 4130                     o arm: 5628
    o hppa: 5632                      o vax: 1528
    o mips64: 3632                    o mips64el: 4486

 - Some highlights:
    o Gnome 2.30.2                    o KDE 3.5.10
    o Xfce 4.6.2                      o MySQL 5.1.48
    o PostgreSQL 8.4.4                o Postfix 2.7.1
    o OpenLDAP 2.3.43                 o Mozilla Firefox 3.6.8 and 3.5.11
    o Mozilla Thunderbird 3.1.1       o 3.2.1
    o Emacs 21.4 and 22.3             o Vim 7.2.444
    o PHP 5.2.13                      o Python 2.4.6, 2.5.4 and 2.6.5
    o Ruby                  o Mono 2.6.4

 - As usual, steady improvements in manual pages and other documentation.

 - The system includes the following major components from outside suppliers:
    o Xenocara (based on X.Org 7.5 with xserver 1.8 + patches, freetype 2.3.12, fontconfig 2.8.0,
Mesa 7.8.2, xterm 258 and more)
    o Gcc 2.95.3 (+ patches), 3.3.5 (+ patches) and 4.2.1 (+patches)
      (depends on the architecture)
    o Perl 5.10.1 (+ patches)
    o Our improved and secured version of Apache 1.3, with SSL/TLS and DSO support
    o OpenSSL 0.9.8k (+ patches)
    o Groff 1.15
    o Sendmail 8.14.3, with libmilter
    o Bind 9.4.2-P2 (+ patches)
    o Lynx 2.8.6rel.5 with HTTPS and IPv6 support (+ patches)
    o Sudo 1.7.2
    o Ncurses 5.7
    o Latest KAME IPv6
    o Heimdal 0.7.2 (+ patches)
    o Arla 0.35.7
    o Binutils 2.15 (+ patches)
    o Gdb 6.3 (+ patches) 

If you'd like to see a list of what has changed between OpenBSD 4.7
and 4.8, look at

Even though the list is a summary of the most important changes
made to OpenBSD, it still is a very very long list.

- SECURITY AND ERRATA --------------------------------------------------

We provide patches for known security threats and other important
issues discovered after each CD release.  As usual, between the
creation of the OpenBSD 4.8 FTP/CD-ROM binaries and the actual 4.8
release date, our team found and fixed some new reliability problems
(note: most are minor and in subsystems that are not enabled by
default).  Our continued research into security means we will find
new security problems -- and we always provide patches as soon as
possible.  Therefore, we advise regular visits to

Security patch announcements are sent to the
mailing list.  For information on OpenBSD mailing lists, please see:

- CD-ROM SALES ---------------------------------------------------------

OpenBSD 4.8 is also available on CD-ROM.  The 3-CD set costs $50 CDN and
is available via mail order and from a number of contacts around the
world.  The set includes a colourful booklet which carefully explains the
installation of OpenBSD.  A new set of cute little stickers is also
included (sorry, but our FTP mirror sites do not support STP, the Sticker
Transfer Protocol).  As an added bonus, the second CD contains an audio
track, a song entitled "El Puffiachi".  MP3 and OGG versions of
the audio track can be found on the first CD.

Lyrics (and an explanation) for the songs may be found at:

Profits from CD sales are the primary income source for the OpenBSD
project -- in essence selling these CD-ROM units ensures that OpenBSD
will continue to make another release six months from now.

The OpenBSD 4.8 CD-ROMs are bootable on the following four platforms:

  o i386
  o amd64
  o macppc
  o sparc64

(Other platforms must boot from floppy, network, or other method).

For more information on ordering CD-ROMs, see:

The above web page lists a number of places where OpenBSD CD-ROMs
can be purchased from.  For our default mail order, go directly to:

All of our developers strongly urge you to buy a CD-ROM and support
our future efforts.  Additionally, donations to the project are
highly appreciated, as described in more detail at:

- OPENBSD FOUNDATION ---------------------------------------------------

For those unable to make their contributions as straightforward gifts,
the OpenBSD Foundation ( is a Canadian
not-for-profit corporation that can accept larger contributions and
issue receipts.  In some situations, their receipt may qualify as a
business expense writeoff, so this is certainly a consideration for
some organizations or businesses.  There may also be exposure benefits
since the Foundation may be interested in participating in press releases.
In turn, the Foundation then uses these contributions to assist OpenBSD's
infrastructure needs.  Contact the foundation directors at for more information.

- T-SHIRT SALES --------------------------------------------------------

The OpenBSD distribution companies also sell tshirts and polo shirts.
And our users like them too.  We have a variety of shirts available,
with the new and old designs, from our web ordering system at, as
described above.

There is no specific new OpenBSD shirt for this release -- we decided
to skip a release.  Hoever, we also sell our older shirts, as well as
a selection of OpenSSH t-shirts.

- FTP INSTALLS ---------------------------------------------------------

If you choose not to buy an OpenBSD CD-ROM, OpenBSD can be easily
installed via FTP.  Typically you need a single small piece of boot
media (e.g., a boot floppy) and then the rest of the files can be
installed from a number of locations, including directly off the
Internet.  Follow this simple set of instructions to ensure that
you find all of the documentation you will need while performing
an install via FTP.  With the CD-ROMs, the necessary documentation
is easier to find.

1) Read either of the following two files for a list of ftp
   mirrors which provide OpenBSD, then choose one near you:

   As of Nov 1, 2010, the following ftp mirror sites have the 4.8 release:	Stockholm, Sweden         Oldenburg, Germany     Brisbane, Australia        Vienna, Austria	CO, USA	CA, USA         Michigan, USA

	The release is also available at the master site:	        Alberta, Canada

	However it is strongly suggested you use a mirror.

   Other mirror sites may take a day or two to update.

2) Connect to that ftp mirror site and go into the directory
   pub/OpenBSD/4.8/ which contains these files and directories.
   This is a list of what you will see:

        ANNOUNCEMENT     armish/          mvme68k/         sparc64/
        Changelogs/      ftplist          mvme88k/         src.tar.gz
        HARDWARE         hp300/           packages/        sys.tar.gz
        PACKAGES         hppa/            ports.tar.gz     tools/
        PORTS            i386/            root.mail        vax/
        README           landisk/         sgi/             xenocara.tar.gz
        alpha/           mac68k/          socppc/          zaurus/
        amd64/           macppc/          sparc/

   It is quite likely that you will want at LEAST the following
   files which apply to all the architectures OpenBSD supports.

        README          - generic README
        HARDWARE        - list of hardware we support
        PORTS           - description of our "ports" tree
        PACKAGES        - description of pre-compiled packages
        root.mail       - a copy of root's mail at initial login.
			  (This is really worthwhile reading).

3) Read the README file.  It is short, and a quick read will make
   sure you understand what else you need to fetch.

4) Next, go into the directory that applies to your architecture,
   for example, i386.  This is a list of what you will see:

	INSTALL.i386    cd48.iso        floppyB48.fs    pxeboot*
	INSTALL.linux   cdboot*         floppyC48.fs    xbase48.tgz
	MD5             cdbr*           game48.tgz      xetc48.tgz
	base48.tgz      cdemu48.iso     index.txt       xfont48.tgz
	bsd*            comp48.tgz      install48.iso   xserv48.tgz*         etc48.tgz       man48.tgz       xshare48.tgz
	bsd.rd*         floppy48.fs     misc48.tgz

   If you are new to OpenBSD, fetch _at least_ the file INSTALL.i386
   and the appropriate floppy*.fs or install48.iso files.  Consult the
   INSTALL.i386 file if you don't know which of the floppy images
   you need (or simply fetch all of them).

   If you use the install48.iso file (roughly 200MB in size), then you
   do not need the various *.tgz files since they are contained on that
   one-step ISO-format install CD.

5) If you are an expert, follow the instructions in the file called
   README; otherwise, use the more complete instructions in the
   file called INSTALL.i386.  INSTALL.i386 may tell you that you
   need to fetch other files.

6) Just in case, take a peek at:

   This is the page where we talk about the mistakes we made while
   creating the 4.8 release, or the significant bugs we fixed
   post-release which we think our users should have fixes for.
   Patches and workarounds are clearly described there.

Note: If you end up needing to write a raw floppy using Windows,
      you can use "fdimage.exe" located in the pub/OpenBSD/4.8/tools
      directory to do so.

- X.ORG FOR MOST ARCHITECTURES -----------------------------------------

X.Org has been integrated more closely into the system.  This release
contains X.Org 7.4.  Most of our architectures ship with X.Org, including
amd64, sparc, sparc64 and macppc.  During installation, you can install
X.Org quite easily.  Be sure to try out xdm(1) and see how we have
customized it for OpenBSD.

- PORTS TREE -----------------------------------------------------------

The OpenBSD ports tree contains automated instructions for building
third party software.  The software has been verified to build and
run on the various OpenBSD architectures.  The 4.8 ports collection,
including many of the distribution files, is included on the 3-CD
set.  Please see the PORTS file for more information.

Note: some of the most popular ports, e.g., the Apache web server
and several X applications, come standard with OpenBSD.  Also, many
popular ports have been pre-compiled for those who do not desire
to build their own binaries (see BINARY PACKAGES, below).

- BINARY PACKAGES WE PROVIDE -------------------------------------------

A large number of binary packages are provided.  Please see the PACKAGES
file ( for more details.

- SYSTEM SOURCE CODE ---------------------------------------------------

The CD-ROMs contain source code for all the subsystems explained
above, and the README (
file explains how to deal with these source files.  For those who
are doing an FTP install, the source code for all four subsystems
can be found in the pub/OpenBSD/4.8/ directory:

        xenocara.tar.gz     ports.tar.gz   src.tar.gz     sys.tar.gz

- THANKS ---------------------------------------------------------------

Ports tree and package building by Jasper Lievisse Adriaanse,
Landry Breuil, Michael Erdely, Stuart Henderson, Peter Hessler,
Paul Irofti, Antoine Jacoutot, Robert Nagy, and Christian Weisgerber.
System builds by Theo de Raadt, Mark Kettenis, and Miod Vallat.
X11 builds by Todd Fries and Miod Vallat.  ISO-9660 filesystem
layout by Theo de Raadt.

We would like to thank all of the people who sent in bug reports, bug
fixes, donation cheques, and hardware that we use.  We would also like
to thank those who pre-ordered the 4.8 CD-ROM or bought our previous
CD-ROMs.  Those who did not support us financially have still helped
us with our goal of improving the quality of the software.

Our developers are:

    Alexander Bluhm, Alexander Hall, Alexander von Gernler,
    Alexander Yurchenko, Alexandre Ratchov, Alexey Vatchenko,
    Anders Magnusson, Andreas Gunnarsson, Anil Madhavapeddy,
    Antoine Jacoutot, Ariane van der Steldt, Artur Grabowski,
    Austin Hook, Benoit Lecocq, Bernd Ahlers, Bob Beck, Bret Lambert,
    Can Erkin Acar, Chad Loder, Charles Longeau, Chris Kuethe,
    Christian Weisgerber, Claudio Jeker, Dale Rahn, Damien Bergamini,
    Damien Miller, Dariusz Swiderski, Darren Tucker,
    David Gwynne,  David Hill, David Krause, Edd Barrett, Eric Faurot,
    Esben Norby,  Fabien Romano, Federico G. Schwindt, Felix Kronlage,
    Gilles Chehade, Giovanni Bechis, Gordon Willem Klok,
    Henning Brauer, Ian Darwin, Igor Sobrado, Ingo Schwarze,
    Jacek Masiulaniec, Jacob Meuser, Jakob Schlyter, Janne Johansson,
    Jared Yanovich, Jason Dixon, Jason George, Jason McIntyre,
    Jason Meltzer, Jasper Lievisse Adriaanse, Jim Razmus II, Joel Sing,
    Joerg Goltermann, Johan Mson Lindman, Jolan Luff, Jonathan Armani,
    Jonathan Gray, Jordan Hargrave, Joshua Stein, Kenneth R Westerback,
    Kevin Lo, Kevin Steves, Kjell Wooding, Kurt Miller, Landry Breuil,
    Laurent Fanis, Marc Espie, Marco Peereboom, Marco Pfatschbacher,
    Marco S Hyman, Marcus Glocker, Marek Vasut, Mark Kettenis,
    Mark Uemura, Markus Friedl, Martin Reindl, Martynas Venckus,
    Mathieu Sauve-Frankel, Mats O Jansson, Matthias Kilian,
    Matthieu Herrb, Michael Erdely, Michael Knudsen, Michele Marchetto,
    Mike Larkin, Miod Vallat, Moritz Grimm, Moritz Jodeit,
    Nicholas Marriott, Nick Holland, Nikolay Sturm, Okan Demirmen,
    Oleg Safiullin, Otto Moerbeek, Owain Ainsworth, Paul de Weerd,
    Paul Irofti, Peter Hessler, Peter Stromberg, Peter Valchev,
    Philip Guenther, Pierre-Emmanuel Andre, Pierre-Yves Ritschard,
    Rainer Giedat, Reyk Floeter, Robert Nagy, Rui Reis,
    Ryan Thomas McBride, Simon Bertrang, Simon Perreault, Stefan Kempf,
    Stefan Sperling, Stephan A. Rickauer, Steven Mestdagh,
    Stuart Henderson, Takuya Asada, Ted Unangst, Theo de Raadt,
    Thordur I Bjornsson, Tobias Stoeckmann, Tobias Weingartner,
    Todd C. Miller, Todd Fries, Will Maier, William Yodlowsky,
    Xavier Santolaria, Yasuoka Masahiko, Yojiro Uo

(Log in to post comments)

OpenBSD 4.8 released

Posted Nov 2, 2010 20:04 UTC (Tue) by nix (subscriber, #2304) [Link]

Isn't OpenSSH 5.5 rather... old? You'd think OpenBSD, of all projects, could afford to include the latest OpenSSH. (Maybe they just have a really long freeze time before releasing?)

OpenBSD 4.8 released

Posted Nov 2, 2010 20:58 UTC (Tue) by mp (subscriber, #5615) [Link]

Isn't it just a typo? The changes do look rather like these:

OpenBSD 4.8 released

Posted Nov 3, 2010 19:21 UTC (Wed) by nix (subscriber, #2304) [Link]

Ah, yes, true enough. I thought the list of changes looked rather out of sync, but lazily didn't look any further.

Copyright © 2010, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds