0.8

0.8.0 - 2026-11-02

Added

• swupdate:
  • List (-l), download (-d), and install (-i) options now all execute
    the new dbupdate(8) first, if
    it is available. This helps ensure that the certificate authority
    database is up-to-date before fetching or installing further updates.
• CHANGELOG.md:
  • Added this CHANGELOG file with detailed documentation for all prior
    releases

Changed

• swupdate:
  • PATH environment variable is now reset and re-exported to prevent
    poisoning/hijacking. Additionally, the PATH is only temporarily
    expanded to include the package localbase paths (e.g. /usr/local/bin
    and /usr/local/sbin) when working with optional binaries installed
    via pkg_add(1), for example: checkrestart(8).
  • Internal variable tool renamed to _self
• README.md:
  • Updated to note new support for dbupdate(8)
  • Added new 'Security Precautions' section noting dbupdate(8), PATH
    poisoning/hijacking prevention, privilege drop, etc.

0.7.1

• When installing updates:
  • Fixed bug in determining whether a file had been modified during syspatch(8) execution (#15)
• Code quality improvements (#15)

0.7

• When listing/downloading/installing updates:
  • Automatically checks for next newer OpenBSD release which may be installed via sysupgrade (unless running snapshots or sysupgrade is not installed; #2)
    • If a newer OpenBSD release is found, links to appropriate HTML documents for detailed changes, errata, and the upgrade guide (#2)
• When installing updates:
  • Prompts to install the next newer OpenBSD release via sysupgrade, if one is found (unless running snapshots or sysupgrade is not installed; #2)

0.6.1

• Drops root user privileges before executing ftp for improved security (#11)
• Verbose output now states when syspatch has been skipped due to running a snapshot or post-beta/pre-release

Important: Please update to this version if you have v0.6 installed!

0.6

Important: This version introduced a potential security vulnerability by executing ftp as the root user. Please update to v0.6.1 if you have this version installed!

• When listing/downloading updates:
  • Automatically detects when kernel is post-beta/pre-release and skips syspatch, plus uses snapshots for packages (#8)
• When installing updates:
  • Automatically detects when kernel is post-beta/pre-release and uses snapshots for package updates (#8)
  • Only executes syspatch a second time if it updated itself (#7)
  • Rounds up to nearest whole minute when calculating execution time of syspatch to more accurately detect updated kernel and prompting for reboot (#6)
• Added Makefile (#9)

0.5

• When installing updates:
  • Remove unused package dependencies after install (Issue #1)
  • Only prompt to reboot if kernel was updated during the execution of syspatch instead of within the last 15 minutes (Issue #5)
  • Run syspatch a second time if it reports it didn't install any patches (which it will do if it updated itself)
• Fixed error from fw_update when listing pending updates (Issue #3)

0.4

• Don't try to list/install syspatches on snapshots.
• Use checkrestart after install, if available.

0.3

• Update firmware prior to applying syspatches
• Safer check for root

0.2

• Prompt to reboot after install if kernel was changed

0.1

• Initial release