Issue #21

The OpenBSD development team has published five errata for version 8.0, addressing critical security issues across multiple components. These patches fix vulnerabilities in the ppp(4) networking protocol, the nsd(8) DNS server, IPsec implementation using AES-GMAC, and webcams utilizing the video(4) driver. Additionally, the release introduces the new dbupdate(8) utility for maintaining certificate authorities and time zones between major releases.

Smooth Upgrades

Users upgrading from OpenBSD 7.9 have reported smooth transitions with no significant bugs encountered so far. The wine compatibility layer in the -current branch also appears stable, indicating the project's continued focus on reliability and security.

Security Management

The system provides convenient tools for security patch management. The syspatch utility allows administrators to check for available patches with 'syspatch -c' and view installed patches with 'syspatch -l'. When no patches are available, these commands produce no output, making them ideal for automated monitoring through root's crontab.

Since erratum 005, OpenBSD 8.0 includes dbupdate(8), which refreshes the certificate authorities list at /etc/ssl/cert.pem and time zone data at /usr/share/zoneinfo. Administrators can preview changes using 'doas dbupdate -n' without applying them. Users who added custom certificate authorities should move them to /etc/ssl/cert.local.pem to preserve them during updates.