tag:discoverbsd.com,2005:/feeds/posts/default?alt=rssDiscoverBSD - The BSD community linklog2024-03-28T08:46:38Ztag:discoverbsd.com,2005:Post/39352024-03-28T08:46:38Z2024-03-28T08:46:47ZFreeBSD Errata Notice FreeBSD-EN-24:05.tty<p>Under certain conditions an unprivileged user could provoke a kernel panic.</p>
DiscoverBSDtag:discoverbsd.com,2005:Post/39342024-03-28T08:45:16Z2024-03-28T08:45:25ZFreeBSD Errata Notice FreeBSD-EN-24:06.wireguard<p>The part of the mbuf chain being sent along may contain some invalid state that causes a later fault and panic.</p>
DiscoverBSDtag:discoverbsd.com,2005:Post/39332024-03-28T08:44:20Z2024-03-28T08:44:32ZFreeBSD Errata Notice FreeBSD-EN-24:07.clang<p>The compiler crashes instead of generating an object file.</p>
DiscoverBSDtag:discoverbsd.com,2005:Post/39322024-03-28T08:43:31Z2024-03-28T08:43:40ZFreeBSD Errata Notice FreeBSD-EN-24:08.kerberos<p>Attempting to use weak crypto routines when the legacy provider is not loaded results in the application crashing.</p>
DiscoverBSDtag:discoverbsd.com,2005:Post/39312024-03-28T08:42:26Z2024-03-28T08:42:35Z FreeBSD Security Advisory FreeBSD-SA-24:03.unbound<p>A trivially orchestrated attack could render all threads busy with such responses leading to denial of service.</p>
DiscoverBSDtag:discoverbsd.com,2005:Post/39302024-03-27T19:48:11Z2024-03-27T19:58:05ZOn Starting the 2024 FreeBSD Foundation Budget Journey<p>FreeBSD Foundation shares their approach to the FreeBSD Foundation’s budget for 2024. Their commitment to supporting the FreeBSD community and project remains steadfast, funded entirely through the generous contributions of donations and grants.</p>
DiscoverBSDtag:discoverbsd.com,2005:Post/39292024-03-27T19:42:55Z2024-03-27T19:43:02ZTrueNAS CORE 13 is the end of the FreeBSD version<p>The oldest vendor of BSD systems is changing direction away from FreeBSD and toward Linux. There are already mutterings about a fork, so let's see. </p>
DiscoverBSDtag:discoverbsd.com,2005:Post/39282024-03-22T11:34:09Z2024-03-22T11:34:14ZBSD Now 551: The Story of Port 22<p>This week on the show, The story of SSH getting port 22, GGC using Clang, AuxRunner, Stabweek, Using a Kensington SlimBladePro on OpenBSD, and more...</p>
DiscoverBSDtag:discoverbsd.com,2005:Post/39272024-03-21T13:38:19Z2024-03-21T13:38:23ZMarch 2024 Partnerships Update<p>Two sponsored development projects that began at the end of Q4 ‘23 and in January are proceeding well. One, sponsored by RG Nets, is porting VPP to FreeBSD. The other is adding the IOMMU driver to support AMD chips with 512+ cores. </p>
DiscoverBSDtag:discoverbsd.com,2005:Post/39262024-03-19T08:54:20Z2024-03-19T08:54:32ZOpenBSD Errata: March 18, 2024 (expat)<p>Errata patches for libexpat XML library have been released for OpenBSD 7.3 and 7.4. Binary updates for the amd64, arm64 and i386 platform are available via the syspatch utility.</p>
DiscoverBSDtag:discoverbsd.com,2005:Post/39252024-03-19T08:53:35Z2024-03-19T08:53:43ZFreeBSD 2023 fundraising recap<p>They’ve closed the books on their 2023 accounting, and can share that the FreeBSD Foundation raised $1,263,772.05 towards their goal last year. In article, you can learn what are they planning to use it for. </p>
DiscoverBSDtag:discoverbsd.com,2005:Post/39242024-03-18T09:51:59Z2024-03-18T09:52:08Z A FreeBSD user Tries NetBSD 10-RC5<p>In this video we'll have a look at NetBSD 10 RC5, and get a feel on how things are going from the FreeBSD user perspective.</p>
DiscoverBSDtag:discoverbsd.com,2005:Post/39232024-03-18T09:49:39Z2024-03-18T09:49:42ZThe FreeBSD Project Participating in Google Summer of Code 2024<p>FreeBSD Project has again been selected as a mentoring organization for the Google Summer of Code 2024. This year marks the 20th year of GSoC, and also marks the 20th year that the FreeBSD Project will be participating as a mentoring organization. Contributor applications will open on Monday, March 18, 2024, and close on Tuesday, April 2, 2024. </p>
DiscoverBSDtag:discoverbsd.com,2005:Post/39222024-03-15T08:40:00Z2024-03-15T08:40:10ZNetBSD 10.0 RC6 available<p>RC6 fixes a few issues with the new named/bind imported for RC5 plus several minor issues. </p>
DiscoverBSDtag:discoverbsd.com,2005:Post/39212024-03-12T15:19:35Z2024-03-12T15:19:40ZBSD Now 550: Not to late<p>This week on the show, you're not too late to develop the future, netmap on czgbe, OpenZFS 2.2.3, SSH Brute Forcing, some unknown OpenBSD Features, Release notes for the latest Omni OS, and more...</p>
DiscoverBSDtag:discoverbsd.com,2005:Post/39202024-03-12T09:18:08Z2024-03-12T09:18:13ZValuable News – 2024/03/11<p>The Valuable News weekly series is dedicated to provide summary about news, articles and other interesting stuff mostly but not always related to the UNIX/BSD/Linux systems. </p>
DiscoverBSDtag:discoverbsd.com,2005:Post/39192024-03-11T12:35:35Z2024-03-11T12:35:45ZNetBSD Security Advisory 2024-001: Inadequate validation of user-supplied hostname in utmp_update(8)<p>The issue allows malicious users to inject arbitrary data into utmpx(5) database due to the absence of proper filters for provided hostnames. The behaviour can be exploited by the attackers to force tools which display hostnames from utmpx(5) databases such us w(1) or who(1), to unexpectedly inject escape sequences into terminal of the user invoking the program. </p>
DiscoverBSDtag:discoverbsd.com,2005:Post/39182024-03-11T11:16:50Z2024-03-11T11:16:55ZBSD Now 549: htop Tetris<p>FreeBSD Foundation Statement on the European Union Cyber Resiliency Act, DragonFly BSD on a Thinkpad T480s, How FreeBSD Employs Ampere Arm64 Servers in the Data Center, FreeBSD Yubikey authentication, that time I almost added Tetris to htop, and more.</p>
DiscoverBSDtag:discoverbsd.com,2005:Post/39172024-03-11T10:58:13Z2024-03-11T10:58:16ZGuiding the future of FreeBSD releases: Colin Percival, the new Release Engineering Team Lead<p>In November 2023, after completing all the necessary work to bring FreeBSD 14.0 to fruition, Glen Barber, the Release Engineering Team Lead for FreeBSD, passed the leadership baton to Colin Percival, the former Deputy Release Engineering Team Lead.</p>
DiscoverBSDtag:discoverbsd.com,2005:Post/39162024-03-11T08:58:01Z2024-03-11T08:58:11ZConnect FreeBSD 14.0-STABLE to FreeIPA/IDM<p>In the open source world everything lives/evolves/changes. This is why the new version of connecting latest FreeBSD 14.0-STABLE system to the FreeIPA/IDM is needed. One of the things that changed is that security/sssd is now deprecated and security/sssd2 is its successor. Also new version of ports-mgmt/poudriere-devel is available – with needed fixes already merged – and also with new restyled web interface.</p>
DiscoverBSDtag:discoverbsd.com,2005:Post/39152024-03-10T15:13:25Z2024-03-10T15:13:42ZThe Berkeley Software Distribution<p>The Berkeley Software Distribution (BSD), developed by the Computer Systems Research Group (CSRG) at the University of California, Berkeley, was an operating system based on Research Unix. It allowed programmers to learn and improve on the software by distributing its source code for free, making it a pioneering moment in the open-source movement.</p>
DiscoverBSDtag:discoverbsd.com,2005:Post/39142024-03-10T12:26:28Z2024-03-10T12:26:38ZFreeBSD 13.3: What’s new, and how did we get here?<p>FreeBSD is an outstanding choice for those seeking a modern, enterprise-class open source operating system. Its permissive licensing, superior security, exceptional performance, and rock-solid stability make it an ideal solution for businesses and organizations of all sizes. FreeBSD 13.3-RELEASE offers significant enhancements to infrastructure, hardware compatibility, and security, further demonstrating its value to the industry. This version builds upon the strong foundation established by previous versions within the 13.x series and aligns with the development timeline that includes the FreeBSD 14 branch, which was introduced in November 2023.</p>
DiscoverBSDtag:discoverbsd.com,2005:Post/39132024-03-10T12:25:25Z2024-03-10T12:25:29ZValuable News – 2024/03/04<p>The Valuable News weekly series is dedicated to provide summary about news, articles and other interesting stuff mostly but not always related to the UNIX/BSD/Linux systems.</p>
DiscoverBSDtag:discoverbsd.com,2005:Post/39122024-03-09T11:43:46Z2024-03-09T11:44:21ZHardenedBSD February 2024 Status Report<p>HardenedBSD 15-CURRENT is mostly fixed and more in ports.</p>
DiscoverBSDtag:discoverbsd.com,2005:Post/39112024-03-09T11:31:16Z2024-03-09T11:31:20ZWhat Makes the FreeBSD Governance Model Successful<p>The FreeBSD Project focuses on decentralized decision making and consensus building. There is an elected Core Team of nine FreeBSD committers who are responsible for facilitating the operations of the Project. They support the process of making technical decisions, hand out and remove commit bits, and liaise conversations with FreeBSD committers and contributors.</p>
DiscoverBSDtag:discoverbsd.com,2005:Post/39102024-03-06T12:10:08Z2024-03-06T12:10:32ZBSD Now 548: NTP - In Memoriam<p>FreeBSD Status Report Q4 2023, In Memorium of the NTP inventor, Migrate a FreeBSD bhyve virtual machine to OmniOS, AI-free blog, Hard disk LEDs and Noisy Machines, SSH based comment system, NetBSD 10 RC.4 is available, and more.</p>
DiscoverBSDtag:discoverbsd.com,2005:Post/39092024-03-06T12:03:21Z2024-03-06T12:03:27ZNew Issue of the FreeBSD Journal<p>The January/February 2024 issue marks the 10th Anniversary of the FreeBSD Journal! Join us in commemorating this momentous event by checking out this exceptional issue dedicated to Networking. You’ll find a diverse array of articles covering topics such as RACK, SR-IOV, BATMAN, TCP in FreeBSD 14, and more. Finally, challenge yourself with the 10 Years of the FreeBSD Journal crossword puzzle crafted by Tom Jones. </p>
DiscoverBSDtag:discoverbsd.com,2005:Post/39082024-03-05T07:54:10Z2024-03-05T07:54:22ZFreeBSD 13.3-RELEASE Now Available<p>This is the fourth release of the stable/13 branch. Some of the highlights:</p>
<pre><code> * LLVM and the clang compiler have been updated to version 17.0.6.
* OpenSSH has been updated to version 9.6p1.
* Sendmail has been updated to version 8.18.1.
* ZFS has been updated to OpenZFS 2.1.14.
* There have been many stability fixes to native and LinuxKPI-based WiFi drivers.
* The NFS server can now run in an appropriately configured vnet jail.
* And much more…
</code></pre>
DiscoverBSDtag:discoverbsd.com,2005:Post/39072024-02-29T18:11:04Z2024-02-29T18:11:19ZNetBSD 10.0 RC5 available<p>RC5 has a few important security related updates of third party components (named, nsd, unbound, wpa_supplicant).</p>
DiscoverBSDtag:discoverbsd.com,2005:Post/39062024-02-26T07:55:26Z2024-02-26T07:55:31ZValuable News – 2024/02/26<p>The Valuable News weekly series is dedicated to provide summary about news, articles and other interesting stuff mostly but not always related to the UNIX/BSD/Linux systems.</p>
DiscoverBSDtag:discoverbsd.com,2005:Post/39052024-02-25T15:25:11Z2024-02-25T15:25:20ZSome OpenBSD features that aren't widely known<p>In this blog post, you will learn about some OpenBSD features that can be useful, but not widespread. They often have a niche usage, but it's important to know they exist to prevent you from reinventing the wheel.</p>
DiscoverBSDtag:discoverbsd.com,2005:Post/39042024-02-25T15:07:50Z2024-02-25T15:08:01ZNew code for SIGILL faults help identify misbranches<p>If you run recent OpenBSD on certain amd64 or aarch64 platforms, indirect branching to an "unexpected" location will crash your program, in order to prevent ROP attacks and similar ways to have your program execute code where it shouldn't. The OpenBSD compiler will insert an extra instruction in all the places where a branch is supposed to land, and if it lands anywhere else, a CPU fault is raised and your program gets an "Illegal Instruction". Previously, crashes of this kind have looked more or less like any other kind of fault where code is executing random data or from random locations, but since the kernel knows when this has happened, we can make it explicit that the fault is due to missing branch target instructions, which will help a lot when debugging.</p>
DiscoverBSDtag:discoverbsd.com,2005:Post/39032024-02-23T07:58:31Z2024-02-23T07:58:56ZBSD Now 547: IT Impostor Syndrome<p>Overcoming imposter syndrome in IT, A Practical Guide to GNU sed With Examples, Early computer art by Barbara Nessim, Don't prefill config files, Trapping Spambots Based on Target Domain Only, You cannot cURL under pressure, and more.</p>
DiscoverBSDtag:discoverbsd.com,2005:Post/39022024-02-20T12:42:03Z2024-02-20T12:52:31ZValuable News – 2024/02/19<p>The Valuable News weekly series is dedicated to provide summary about news, articles and other interesting stuff mostly but not always related to the UNIX or BSD systems.</p>
DiscoverBSDtag:discoverbsd.com,2005:Post/39012024-02-20T12:40:53Z2024-02-20T12:52:25ZUsing the Logitech Wireless Rechargeable Touchpad T650 on OpenBSD <p>Spoiler: works pretty well. </p>
DiscoverBSDtag:discoverbsd.com,2005:Post/39002024-02-19T15:46:00Z2024-02-20T12:41:26ZFreeBSD 14.0 Installation on Xneelo Dedicated Server<p>Xneelo is a South African hosting provider offering dedicated servers. FreeBSD is not available as an operating system to install, however, it can installed from the rescue console using the depenguin.me installer. This article describes how to do that.</p>
DiscoverBSDtag:discoverbsd.com,2005:Post/38992024-02-19T15:44:30Z2024-02-20T12:41:11ZRun Your Own Mastodon Server on FreeBSD in a Potluck Container<p>This article describes how Mastodon can easily be set up as a container (i.e. jail) with the help of Ansible, Pot and Potluck.</p>
DiscoverBSDtag:discoverbsd.com,2005:Post/38982024-02-19T09:50:45Z2024-02-19T09:51:00ZOpenBSD -current moves to 7.5-beta<p>Theo de Raadt changed the version string for the OpenBSD development branch (i.e. -current) to 7.5-beta. With the upcoming release expected to appear in May, testing is particularly welcome. 7.5-beta snapshots are already appearing on the mirrors.</p>
DiscoverBSDtag:discoverbsd.com,2005:Post/38972024-02-19T09:43:12Z2024-02-19T09:43:16ZNew wi-fi driver, qwx(4), enabled in OpenBSD -current <p>The driver currently supports only 11a/b/g modes.</p>
DiscoverBSDtag:discoverbsd.com,2005:Post/38962024-02-17T15:12:34Z2024-02-17T15:12:37ZOctober-December 2023 Status Report<p>This is the last 2023 quarter. As you have probably noticed, this status report comes later than usual and with fewer reports than the preceding quarter. Indeed, please keep in mind that the last quarter of every year is for many members of our community the quarter of the celebrations for Christmas and for the New Year, which implies that those members will spend more time with their families and will have less time for their favorite voluntary software projects. Thus there is less to report and reports tend to arrive later. But finally, here they are.</p>
DiscoverBSDtag:discoverbsd.com,2005:Post/38952024-02-17T07:22:47Z2024-02-17T07:22:50ZBSD Now 546 - Debunking FreeBSD Myths<p>Debunking Common Myths About FreeBSD, Please, don’t force me to log in, Exploring FreeBSD service(8) basics, Failed Product Designs: A Laptop with Seven Screens, What’s a Permissive License – and Why Should I Care?, Beginning of the year Laugh.</p>
DiscoverBSDtag:discoverbsd.com,2005:Post/38942024-02-16T17:33:26Z2024-02-16T17:33:37ZOpenBSD Errata: February 13, 2024 (unbound unwind)<p>Errata patches for unbound and unwind have been released for OpenBSD 7.4 and 7.3. Binary updates for the amd64, arm64 and i386 platform are available via the syspatch utility.</p>
DiscoverBSDtag:discoverbsd.com,2005:Post/38932024-02-15T13:55:08Z2024-02-15T13:55:19ZFreeBSD Errata Notice FreeBSD-EN-24:04.ip<p>The race condition can trigger a NULL pointer dereference in the kernel, resulting in a kernel panic.</p>
DiscoverBSDtag:discoverbsd.com,2005:Post/38922024-02-15T13:52:19Z2024-02-15T13:52:30ZFreeBSD Errata Notice FreeBSD-EN-24:03.kqueue<p>Using kqueue(2) with a process using rfork(2) can panic the system.</p>
DiscoverBSDtag:discoverbsd.com,2005:Post/38912024-02-15T12:59:20Z2024-02-15T12:59:31ZFreeBSD Security Advisory FreeBSD-SA-24:02.tty<p>Attacker can get information about TTYs allocated on the host or in other jails. Effectively, the information printed by "pstat -t" may be leaked.</p>
DiscoverBSDtag:discoverbsd.com,2005:Post/38902024-02-15T11:49:13Z2024-02-15T11:49:24ZFreeBSD Errata Notice FreeBSD-EN-24:02.libutil<p>An unprivileged user may bypass the administrator's resource limits and/or CPU mask settings stemming from his login class provided he can run a (setuid) login-like program that: - - Calls setusercontext() with the LOGIN<em>SETRESOURCES and/or LOGIN</em>SETCPUMASK flags but without LOGIN<em>SETUSER (which excludes the use of LOGIN</em>SETALL), and with a non-NULL 'pwd' argument. - - Does so before changing the effective user ID to the target user. No programs in FreeBSD's base system, including login(1) and su(1), meet these requirements, but third-party programs may. In particular, sudo(8) does when using the default sudoers(5) plugin configured with the 'use_loginclass' flag enabled. doas(8) does not.</p>
DiscoverBSDtag:discoverbsd.com,2005:Post/38892024-02-15T08:14:03Z2024-02-15T08:14:12ZFreeBSD Errata Notice FreeBSD-EN-24:01.tzdata<p>An incorrect time will be displayed on a system configured to use one of the affected time zones if the /usr/share/zoneinfo and /etc/localtime files are not updated, and all applications on the system that rely on the system time, such as cron(8) and syslog(8), will be affected. With the default configuration, FreeBSD systems cannot file updates to the installed leap-seconds.list file. Since no leap second was introduced at the end of 2023, the leap-seconds.list file included with all supported FreeBSD releases is still accurate. Moreover, ntpd(8) is able to receive updated leap second information from its peers. However, a diagnostic warning about an expired leap-seconds.list is printed at startup.</p>
DiscoverBSDtag:discoverbsd.com,2005:Post/38882024-02-15T08:12:21Z2024-02-15T08:13:18ZFreeBSD Security Advisory FreeBSD-SA-24:01.bhyveload<p>In the bhyveload(8) model, the host supplies a userboot.so to boot with, but the loader scripts generally come from the guest image. A maliciously crafted script could be used to exfiltrate sensitive data from the host accessible to the user running bhyhveload(8), which is often the system root.</p>
DiscoverBSDtag:discoverbsd.com,2005:Post/38872024-02-14T19:08:36Z2024-02-14T19:08:47ZGhostBSD 24.01.1<p>This new release is based on FreeBSD 14.0-STABLE. Update Station got a significant change to upgrade to a major FreeBSD version, allowing upgrading GhostBSD from 13.2-STABLE to 14.0-STABLE. Also, a major change to the installer is the user created is an admin, and the root user gets the same password as the admin. If the admin password is changed after the installation, the root password will not change.</p>
DiscoverBSDtag:discoverbsd.com,2005:Post/38862024-02-14T11:48:45Z2024-02-14T19:07:00ZInstalling Alpine Linux on a FreeBSD Jail<p>In this article, the author describes how to install a complete Alpine Linux system inside a FreeBSD jail, using the Linuxulator.</p>
DiscoverBSD