DiscoverBSD

Showing posts with label SoloBSD. Show all posts

Last week in BSD

Releases: HardenedBSD, SoloBSD, OPNsense,
Other news: BSDsec, DragonFly BSD, pfSense, BSDnow

BSDSec

Releases

16.7-RC2 is here and brings major additions to amd64 architectures: Intel’s Hyperscan library to speed up Suricata rule matching and UEFI boot support! It also brings language packs to their correct 16.7 state, with Japanese already having been completed by the amazing Chie Taguchi. The mirrors have been expanded to allow trackers of -stable or -devel packages to upgrade to the release candidate. Users of LibreSSL wanting to upgrade can now switch to OpenSSL instead of seeing upgrade errors until LibreSSL becomes available again and their systems move back to LibreSSL automatically.
Otherwise, only minor issues have been reported and fixed. This likely means there will not be another release candidate.
New images are available from all known mirrors with all checksums listed after this announcement:
https://opnsense.org/download/

New stable release: HardenedBSD-stable 10-STABLE v46.5

HardenedBSD-10-STABLE-v46.5 - https://github.com/HardenedBSD/hardenedBSD-stable/releases/tag/HardenedB...
security updates for: expat, libarchive, file, coverity related fixes
bigger updates for: hyper-v, zfs

SoloBSD 10.3-STABLE-v46.5

There is a new build of SoloBSD 10.3-STABLE based on the latest HardenedBSD stable branch version 46.5
Changelog v46.5
Now with heal-harddrive.sh script included from Martin Sugioarto. Check Instructions of use.
You can grab it from Here. (48.4 Mb)
root password: solobsd

News

Any Mono/DragonFly users out there?

This is a specialized use case, but Mono 4.x has some issues on DragonFly. Some minor testing has been done, but if you are already using it, please contribute.

pfSense moves to Apache License

With the pending departure of Chris Buechler, we wanted to find a way to express to the community our continued commitment to keep pfSense® software open source.
As such, pfSense is moving to the Apache License 2.0 in order to align the goals of the project with other (unannounced) offerings from Netgate. The Apache License 2.0 is a permissive license similar to the MIT License. The main conditions of this license require preservation of copyright and license notices.
Where the 2-Clause and 3-Clause BSD licenses provides no direct language around the areas of copyright, patents and trademarks, the Apache License does. The Apache License is very clear that individual contributors grant copyright license to anyone who receives the code, that their contribution is free from patent encumbrances (and if it is not, that they license that patent to anyone who receives the code,) and that use of Trademarks extends only as far as is necessary to use the product. As a reminder, only genuine pfSense software can bear the registered trademark of pfSense. It also includes a patent termination clause, should a lawsuit arise.
The Apache License 2.0 is the third most popular license on github. Android, Apache, Chef, Docker, OpenStack, Salt Stack, and Swift use the Apache License 2.0.
Now pfSense does as well.

Sprinkle A Little BSD Into Your Life | BSD Now 150

Today on the show, we are going to be talking to Jim Brown (of BSD Cert Fame) about his home-brew sprinkler system… Wait for it… That runs FreeBSD!
That plus news & of course your feedback, keep it tuned to BSD Now, the place to B...SD!

View attached file (526 MB, video/mp4)

UEFI booting and manual installation

karu.pruun shares a story of manually installing DragonFly on a UEFI-booting machine. In this case, it’s a Macbook, though there’s other non-fruit UEFI machines out there?

Code stuff

In Other BSDs for 2016/07/16

usermount being removed from OpenBSD

mandoc-1.13.4 released

Stable pkgsrc-2016Q2 branch released

Interesting articles

[07/13/2016] vmrun.sh - The default way to use bhyve on FreeBSD.

JH 3:04 AM Add Comment

Last week in BSD

Releases: HardenedBSD, SoloBSD, OPNsense
Other news:BSDSec, BSDnow, OpenBSD, DragonFly BSD, Solaris, pkgsrc

BSDSec

LibreSSL 2.4.0/2.3.5/2.2.8 Released

[FreeBSD-Announce] FreeBSD Security Advisory FreeBSD-SA-16:23.libarchive

[FreeBSD-Announce] FreeBSD Security Advisory FreeBSD-SA-16:22.libarchive

[FreeBSD-Announce] FreeBSD Security Advisory FreeBSD-SA-16:20.linux

[FreeBSD-Announce] FreeBSD Security Advisory FreeBSD-SA-16:21.43bsd

[FreeBSD-Announce] FreeBSD Security Advisory FreeBSD-SA-16:24.ntp

libcrypto patch available for DSA security issue

Releases

New stable release: HardenedBSD-stable 10-STABLE v46.2

HardenedBSD-10-STABLE-v46.2 - https://github.com/HardenedBSD/hardenedBSD-stable/releases/tag/HardenedB...
This is a security update, but by default none of the currently released FreeBSD SAs affect HardenedBSD, since we fixed the libarchive issue in v46.1 and the COMPAT layers are disabled by default.
https://security.freebsd.org/advisories/FreeBSD-SA-16:22.libarchive.asc
https://security.freebsd.org/advisories/FreeBSD-SA-16:21.43bsd.asc
https://security.freebsd.org/advisories/FreeBSD-SA-16:20.linux.asc

New stable version: HardenedBSD-stable 10-STABLE v46.3

HardenedBSD-10-STABLE-v46.3
https://github.com/HardenedBSD/hardenedBSD-stable/releases/tag/HardenedB...
http://installer.hardenedbsd.org/pub/HardenedBSD/releases/amd64/amd64/IS...
https://www.freebsd.org/security/advisories/FreeBSD-SA-16:24.ntp.asc
This release is an NTPd secuirty update.

SoloBSD 10.3-STABLE-v46.2

There is a new build of SoloBSD 10.3-STABLE based on the latest HardenedBSD stable branch version 46.2

- Changelog v46.2

You can grab it from Here. (61.7 Mb)

root password: solobsd

OPNsense 16.1.16 released

It has been a long journey for HardenedBSD and OPNsense, and finally the paths start to merge as the splendid and battle-proven ASLR implementation gets incorporated into the default installation! It is just the beginning as we will start to leverage the extra security by enabling position independent execution in 16.7 and merge more security-related features. We thank again the HardenedBSD team for their continued efforts on making this world a safer place.
In other news, there is a thoroughly revamped dashboard for you to enjoy and a handful of security fixes in FreeBSD and the ports ecosystem. LibreSSL has been updated to the latest production release and the BETA version is progressing nicely as we change our working mode from “rework all the things” to “polish all the things”. A release candidate is coming up soon.

News

[FreeBSD-Announce] 2016 FreeBSD Community Survey

Hi everyone, The FreeBSD Foundation needs your input. Please help us by filling out the 2016 FreeBSD Community Survey. The survey should only take about 10 minutes, and will help us determine the direction of our efforts in supporting the Project and community. Please submit all responses by July, 7, 2016. https://www.surveymonkey.com/r/freebsd2016 We appreciate your feedback! Thanks Anne Anne Dickison Marketing Director FreeBSD Foundation

bsdtalk265 - Sunset on BSD

A brief description of playing around with SunOS 4.1.4, which was the last version of SunOS to be based on BSD.
File Info: 17Min, 8Mb
Ogg Link: https://archive.org/download/bsdtalk265/bsdtalk265.ogg

View attached file (bsdtalk265.mp3, audio/mpeg)

The PF life | BSD Now 144

It’s only one-week away from BSDCan, both Allan & I are excited to meet some of you in person! However, the show keeps on chugging & this week we have an interview with Kristof Provost, to tell us about PF improvements in FreeBSD. That plus the latest news, here on your place to B….SD!

View attached file (412 MB, video/mp4)

hbsd-update now installing Integriforce ruleset

We are excited to announce the ability to easily utilize Integriforce with base. From now on, hbsd-update(8) will install a full Integriforce ruleset as /etc/secadm.d/base.integriforce.rules for base. If you include this file in your normal secadm.rules(5) ruleset, you will get full integrity enforcement on all executable files in base. If you include the applications from ports/packages in your secadm.rules(5) file, you can turn on whitelisting mode, in which case, all executable files that aren't protected by Integriforce will be denied execution. If you only utilize applications from base, you can turn on whitelisting mode and get the same results.
Using the Integriforce ruleset is entirely optional, but highly recommended.
An example secadm.rules file might look something like this:

secadm {
    pax {
        path: "/usr/local/lib/firefox/firefox",
        pageexec: false,
        mprotect: false
    }

    .include "/etc/secadm.d/base.integriforce.rules"
}

Code stuff

10G isn’t enough

Fixes for virtio(4)

Autofs in DragonFly

NVMe comes to DragonFly

Interesting articles

pkgsrc 50th release interviews - Joerg Sonnenberger

pkgsrc 50th release interviews - Sevan Janiyan

pkgsrc 50th release interviews - Thomas Klausner

pkgsrc 50th release interviews - Benny Siegert

Migrating to #FreeBSD from #Solaris 11

JH 12:24 AM Add Comment

Last week in BSD

Releases: pfSense, NetBSD, OPNsense, GhostBSD, SoloBSD,
Other news: Talks, OpenBSD, BSDnow, DragonFly BSD

BSDSec

pfSense-SA-16_05.webgui

OpenNTPD 6.0p1 available

Releases

pfSense 2.3.1 Update 1 Available

2.3.1 Update 1 (2.3.1_1) is now available. This includes one security fix to the web GUI, and 7 other bug fixes. The 2.3.1-RELEASE change list has been updated with an Update 1 section specifying the changes.
This update will reboot the system after installing.

NetBSD 7.0.1 released

The NetBSD Project is pleased to announce NetBSD 7.0.1, the first security/bugfix update of the NetBSD 7.0 release branch. It represents a selected subset of fixes deemed important for security or stability reasons. If you are running an earlier release of NetBSD, we strongly suggest updating to 7.0.1.
For more details, please see the release notes.
Complete source and binaries for NetBSD are available for download at many sites around the world. A list of download sites providing FTP, AnonCVS, SUP, and other services may be found at http://www.NetBSD.org/mirrors/

OPNsense 16.1.15 released

Here are the full patch notes for 16.1.15:

system: make authentication fallback configurable
system: settings cleanup and prettify
system: added explicit ETC timezone selection
high availability: add page for remote service control
high availability: properly enforce authentication
firmware: reboot and poweroff API actions
firmware: only kill GUI process, not captive portal
firmware: show errors in update window
firmware: keep polling for progress even when GUI restarts
backend: skip failing templates on bootup
trust: fix CA certificate count in overview
trust: allow key size up to 8192 bits
firewall: fix invalid NPT rule generation
firewall: speed up filter log pages
firewall: do not allow to change virtual IP mode after creation
firewall: moved settings page and rearranged settings accordingly
interfaces: unhook all but the last custom PHP module functions
interfaces: moved settings page and rearranged settings accordingly
dhcp: do not override RA settings after save
dns: resolver outgoing interface section moved to advanced as it will break setups with dynamic interfaces selected there
load balancer: sticky mode from firewall / system split off as separate setting
snmp: do not allow unicode in system location
intrusion detection: remove deprecated rbn-malvertisers.rules set
intrusion detection: add promiscuous mode / physical interface selection
overall: fix menu width on small size screens
overall: numerous translation fixes (contributed by Frederic Lietart)
overall: numerous translation fixes (contributed by Fabian Franz)
plugins: assorted bugfixes for HAProxy (contributed by Frank Wall)
mvc: fix translations by adding an escaping wrapper

GhostBSD 10.3 ALPHA2 is ready for testing

This second ALPHA development release is for testing and debugging new feature in GhostBSD 10.3, MATE and XFCE is available on SourceForge for the i386, amd64, and amd64-uefi architectures.

SoloBSD 10.3-STABLE-v46.1

There is a new build of SoloBSD 10.3-STABLE based on the latest HardenedBSD stable branch version 46.1

- Changelog v46.1

You can grab it from Here. (61.6 Mb)

root password: solobsd

News

FreeBSD Now Has Initial Graphics Support For Bhyve

Bhyve, the hypervisor developed by FreeBSD that supports running BSD/Linux/Windows guests, has initial graphics support...

The Devil in the Details - Switching to BSD from Linux

Most Free/Open Source Software users run Linux as their operating system of choice, choosing one (or more) of the 300 or so distros currently active on DistroWatch. Not as many have crossed the street, rhetorically speaking, and taken a look at the other Open Source operating system, BSD and its many variants.
As a long time and current Linux user new to PC-BSD — essentially the BSD equivalent to Linux Mint — my intention is to:
· Outline the (many) similarities and (few) differences between Linux and BSD,
· Walk the audience through the process of moving from Linux to BSD, unless the audience is in a hurry, then I’ll run them through it,
· Describe the ease-of-use and pitfalls of day-to-day use of PC-BSD for the average user, and
· How to pitch in and make code and other contributions (e.g., documentation, translation) to BSD variants, even while doing the same for Linux distributions,
· And more!

Privilege Separation and Pledge (video)

This year's dotSecurity conference featured a presentation from OpenBSD founder Theo de Raadt, titled "Privilege Separation and Pledge." The video is now available here, in addition to the slides.

One small step for DRM, one giant leap for BSD | BSD Now 143

This week on BSDNow, we have an interview with Matthew Macy, who has some exciting news to share with us regarding the state of graphics on FreeBSD. That plus all the latest news on BSDNow, the place to B...SD!

View attached file (770 MB, video/mp4)

OpenBSD ARMv7 now has a bootloader

Progress on the armv7 platform continues, and Jonathan Gray writes in to the arm@ mailing list with some promising news:

There is now a bootloader for armv7 thanks to kettenis@ Recent armv7 snapshots will configure disks to use efiboot and install device tree dtb files on a fat partition at the start of the disk. u-boot kernel images are no longer part of the release but can still be built for the time being. We are going to start assuming the kernel has been loaded with a dtb file to describe the hardware sometime soon. Those doing new installs can ignore the details but here they are.

Code stuff

ral(4) may suddenly work

Interesting articles

What to do when you run out of (ancient) 50 pin SCSI disks?

JH 1:10 AM Add Comment

Last week in BSD

Releases: HardenedBSD, SoloBSD, SmallWall, pfSense, OPNsense,
Other news: BSDSec, BSDnow, BSD Magazine, DragonFlyBSD, p2k16, freeNAS, OpenBSD

BSDSec

[FreeBSD-Announce] FreeBSD Security Advisory FreeBSD-SA-16:19.sendmsg

[FreeBSD-Announce] FreeBSD Security Advisory FreeBSD-SA-16:18.atkbd

Releases

HardenedBSD-stable 10-STABLE v46.1

HardenedBSD-10-STABLE-v46.1
----------------------------------------
https://github.com/HardenedBSD/hardenedBSD-stable/releases/tag/HardenedB...
https://github.com/HardenedBSD/hardenedBSD-stable/commits/HardenedBSD-10...
This release fixes CVE-1541 and CVE-2015-2304 in libarchive, a lot of Coverity warnings / programing errors and an overflow in amd64's sysarch system call (00696f0, eac2aab, bd784f7).

SoloBSD 10.3-STABLE-v46

There is a new build of SoloBSD 10.3-STABLE based on the latest HardenedBSD stable branch version 46

- Changelog v46

You can grab it from Here. (61.7 Mb)

root password: solobsd

SmallWall 1.8.4b10 beta release

Just released a new beta with updated mini-httpd, and many t1n1wall changes ported in.

New stable version: HardenedBSD-stable 11-CURRENT v46.2

HardenedBSD-11-CURRENT-v46.2 - https://github.com/HardenedBSD/hardenedBSD-stable/releases/tag/HardenedB...
UPDATE TO THIS RELEASE IS STRONGLY ADVISED!
This release fixes two locally exploitable security issue, namely the followings:
https://security.freebsd.org/advisories/FreeBSD-SA-16:19.sendmsg.asc
https://security.freebsd.org/advisories/FreeBSD-SA-16:18.atkbd.asc

pfSense 2.3.1-RELEASE Now Available!

We are happy to announce the release of pfSense® software version 2.3.1!
This is a maintenance release in the 2.3.x series, bringing a number of bug fixes, two security fixes in the GUI, as well as security fixes for OpenSSL, OpenVPN and FreeBSD atkbd and sendmsg. The full list of changes is on the 2.3.1 New Features and Changes page.
This release includes a total of 103 bug fixes. 79 regressions in 2.3 have been fixed, mostly minor issues in the new GUI. Several of these are significant issues, and have resolved nearly all the post-upgrade problems encountered in 2.3-RELEASE. 24 issues affecting 2.2.x and prior versions have also been fixed.
If you haven’t yet caught up on the changes in 2.3.x, check out the Features and Highlights video. Past blog posts have covered some of the changes, such as the performance improvements from tryforward, and the webGUI update.

OPNsense 16.1.14 released

How about an update with your new NetFlow remote export. Or your local reporting frontend? Well, you can always use both if you like. Read all about it here: https://docs.opnsense.org/manual/netflow.html
Furthermore, we have added the brand new AQM CoDel version 0.2.1 to the mix, yesterday’s FreeBSD security advisories, released the HAProxy plugin, bundled a full Japanese translation.
There is also a refreshed website for our general viewing pleasure.
https://opnsense.org/

News

Diving for BSD Perls | BSD Now 142

This week on the show, we have all the latest news and stories! Plus an interview with BSD developer Alfred Perlstein, that you won’t want to miss. Sit tight, the show starts now on your place to B...SD!

View attached file (624 MB, video/mp4)

BSD Magazine for May 2016 out

The May issue of BSD Magazine is available now. There’s articles on ZFS, OpenBSD’s arc4random, an interview of Fernando Rodríguez of KeepCoding, and more. It’s a free PDF download if you didn’t know.

eX, clisp, and DragonFly

DragonFly versions of TeX have been available for some time now. However, Nelson Beebe, who is part of the TeX project, is having trouble building some related binaries – asymptote and clisp. He could use help from anyone interested, to match up with this summer’s release of TeX 2016.

Mounting as non-root

Read this email thread for how to mount devices (e.g. USB drives) in DragonFly when you aren’t root.

Code stuff

p2k16 Hackathon Report: pirofti@ on octeon and TPM

DragonFly and xorg/xwayland

Interesting articles

[How-To] Installing FreeBSD via a Serial Port

JH 4:14 AM Add Comment

Last week in BSD

Releases: HardenedBSD, SoloBSD
Other news: BSDnow, OpenBSD, p2k16, LibreSSL, DragonFlyBSD, FreeBSD

BSDSec

seems to be none SA warnings

Releases

New stable version: HardenedBSD-stable HardenedBSD-10-STABLE-v44.6

HardenedBSD-10-STABLE-v44.6 - https://github.com/HardenedBSD/hardenedBSD-stable/releases/tag/HardenedB...

SoloBSD 10.3-STABLE-v44.6

Aventuras BSDeras by Guillermo García Rojas C.

There is a new build of SoloBSD 10.3-STABLE based on the latest HardenedBSD stable branch version 44.6

- Changelog v44.6
- Switched to Python3.5 interpreter.
- Now with PIE on base!

You can grab it from Here. (60.6 Mb)

root password: solobsd

News

BSD Likes Ike! | BSD Now 141

This week on the show, we have all the latest news & stories! Plus we’ll be hearing more about OpnSense from the man himself, Ike! Sit tight, the show starts now on your place to B…SD!

View attached file (652 MB, video/mp4)

Code stuff

SROP mitigation committed

p2k16 Hackathon Report: krw@ on pdisk, softraid and more

Cleanup work is also good

In Other BSDs for 2016/05/14

libressl - more vague promises

Interesting articles

Benchmarks and tips nginx on DragonFly

Acceleration for Skylake users\

Review: FreeBSD 10.3's new features

Wallpaper of the week

JH 12:29 PM Add Comment

Last week in BSD

Releases:SoloBSD, HardenedBSD,
Other news:BSDSec, FreeBSD, OpenBSD, pkgsrc, SoloBSD, HardenedBSD, BSDnow, DragonFly BSD, LibreSSL, MirOS

BSDSec

[FreeBSD-Announce] FreeBSD Security Advisory FreeBSD-SA-16:17.openssl

[FreeBSD-Announce] FreeBSD Errata Notice FreeBSD-EN-16:06.libc

[FreeBSD-Announce] FreeBSD Errata Notice FreeBSD-EN-16:08.zfs

[FreeBSD-Announce] FreeBSD Errata Notice FreeBSD-EN-16:07.ipi

The 50th Quarterly Release of pkgsrc, pkgsrc-2016Q1

Releases

SoloBSD 10.3-STABLE-v44.5

There is a new build of SoloBSD 10.3-STABLE based on the latest HardenedBSD stable branch version 44.5

- Changelog v44.5
- Python3.5 interpreter has been added.

You can grab it from Here. (58.7 Mb)

root password: solobsd

New stable version: HardenedBSD-stable 11-CURRENT v46.1

HardenedBSD-11-CURRENT-v46.1 - https://github.com/HardenedBSD/hardenedBSD-stable/releases/tag/HardenedB...

News

Tracing it back to BSD | BSD Now 140

This week on BSDNow, Allan is back in down from Europe! We’ll get to hear some of his wrap-up and get caught up on the latest BSD news. That plus our interview about Backtrace.io! Keep it tuned to BSDNow, the place to B….SD!

View attached file (587 MB, video/mp4)

modules.local now possible

If you happen to be testing kernel modules, DragonFly can now load them from a modules.local directory. This keeps modules that aren’t part of the base system, separate. This is probably of most use to developers. Set local_modules=”YES” in rc.conf to enable.

LibreSSL in HardenedBSD Base

A few months ago, we added Bernard Spil to the HardenedBSD team with a goal to bring in and maintain LibreSSL in base. Given the effort involved in maintaining such a complex piece of software, we at HardenedBSD have made the decision to keep it as a feature branch in the playground repo for now. Those who wish to check out Bernard's awesome, hard work can check out the repo here. We will soon start auto-syncing that feature branch on our normal six-hour cycle and we will produce periodic binary updates. As of today, the first binary update has been published. You can use this hbsd-update.conf file to tell hbsd-update to switch to the LibreSSL branch. If you wish to compile your own version of HardenedBSD with LibreSSL base, you will need to add WITH_LIBRESSL=yes to src.conf.
We would like to thank Bernard for volunteering. He has been a tremendous help. Here is a teaser screenshot.

New SSH hostkey for fish, taking over AnonCVS/AnonRSYNC service

As announced in the earlier wlog entry about server reorg I’ve now switched over most services from the soon-to-be-defunct eurynome to fish, with gecko2’s www.ig42.org providing the redirection HTTP vhost for hostname-less mirbsd.org requests (i.e. people who don’t know how this works) and, soon, fallback HTTP services should they be needed. (He’s trusted with the SSL key and certificate.)
This also involves switching SSH hostkeys for AnonCVS, unfortunately; I’ve taken the chance to generate a fresh key for fish. Look in /MirOS/ for the files (gzsig(1) signed) hostkeys.gz or (PGP signed) hostkeys.asc for a less-dependent source for the new keys.

Code stuff

p2k16 Hackathon Report: landry@ on mozilla ports

p2k16 Hackathon Report: naddy@ on graphics libs progress (yes, packages!)

p2k16 Hackathon Report: ajacoutot@ on Gnome, rc and rcctl improvements

Another i915 update for DragonFly

In Other BSDs for 2016/05/07

autofs for DragonFly, a preview

Interesting articles

Meet Joe Maloney – Lead System Architect for PC-BSD

New Release Schedule and Lumina Desktop 0.9.0 Released

JH 11:18 AM Add Comment

Last week in BSD

Releases: FreeBSD, BSDSec, OpenBSD, BSDnow, CheriBSD, BSDTalk, NFS, p2k16
Other news: SoloBSD, GhostBSD, OPNsense, pfSense, HardenedBSD

BSDSec

[FreeBSD-Announce] FreeBSD Security Advisory FreeBSD-SA-16:16.ntp

OpenBSD 5.9 errata 004

[FreeBSD-Announce] FreeBSD Quarterly Status Report - First Quarter 2016

libcrypto errata

Releases

New stable release: HardenedBSD-stable 10-STABLE v44.3

New stable release: HardenedBSD-stable 10-STABLE v44.4

New stable version: HardenedBSD-stable HardenedBSD-11-CURRENT v46

HardenedBSD-11-CURRENT-v46 - https://github.com/HardenedBSD/hardenedBSD-stable/releases/tag/HardenedB...

pfSense 2.3 Update 1 Available

Since the new pkg system enables us to update pieces of the system individually, rather than the monolithic updates of the past, we have released a patch that fixes the NTP CVEs covered by FreeBSD SA 16:16.ntp. Updating ntpd from 4.2.8p6 to 4.2.8p7 is the only change.
This update appears as 2.3_1, for update 1. This should not be confused with 2.3.1, which is a full maintenance release coming soon. 2.3_1 is only available for those already running 2.3 release.
Note for this update, your version number will remain the same afterwards, still showing as 2.3-RELEASE.
This update does not trigger a reboot. The NTP service needs to be manually restarted under Status>Services afterwards.

OPNsense 16.1.12 released

The progress for our upcoming version 16.7 now accumulates to 3 full months. To that end we are making the transition from ALPHA to BETA on the 16.7 development series. And since we have been asked to incorporate development change logs as well, look no further (well, look below).

Anyway, 16.1.12 brings a handful of anticipated additions like FreeBSD’s package manager version 1.7.2 and the ability to use CoDel / FQ-Codel in the traffic shaper. We have also started to move services to the plugin framework instead of having them in the base installation. And, maybe as a last point, initial work for fixing the trusty apinger utility for gateway monitoring has surfaced.
Het bericht OPNsense 16.1.12 released verscheen eerst op OPNsense.

GhostBSD 10.3 ALPHA1 is now ready for Testing

Yes we skip 10.2 for 10.3 since was FreeBSD 10.3 was coming we thought we should wait for 10.3. This is the first ALPHA development release for testing and debugging for GhostBSD 10.3, only as MATE been released yet which is available on SourceForge and for the amd64 and i386 architectures.

SoloBSD 10.3-STABLE-v44.3

SoloBSD 10.3-STABLE-v44.4

There is a new build of SoloBSD 10.3-STABLE based on the latest HardenedBSD stable branch version 44.4

- Changelog v44.4

You can grab it from Here. (45.8 Mb)

root password: solobsd

News

Cheri-picking BSD | BSD Now 139

This week, Allan is out of town, but since when has that ever stopped us from bringing you a new episode of BSDNow? We have news, feedback & an excellent interview with Brooks Davis telling us about CheriBSD that you won’t want to miss.

View attached file (449 MB, video/mp4)

bsdtalk264 - Down the Gopher Hole

Playing around with the gopher protocol. Description of gopher from the 1995 book "Student's Guide to the Internet" by David Clark. Also, at the end of the episode is audio from an interview with Mark McCahilll and Farhad Anklesaria that can be found at https://www.youtube.com/watch?v=oR76UI7aTvs
Check out http://gopher.floodgap.com/gopher/
File Info: 27 Min, 13 MB.
Ogg Link:https://archive.org/download/bsdtalk264/bsdtalk264.ogg

Code stuff

NFS tuning tips

ACPICA update for qemu users

p2k16 Hackathon Report: espie@ on proot

p2k16 Hackathon Report: tb@ on documentation, ports, wireless

proot: dpb meets chroot

In Other BSDs for 2016/04/30

Interesting articles

OpenBSD Foundation Announces Gold Sponsor

JH 6:31 AM Add Comment

Last week in BSD

Releases:SoloBSD, HardenedBSD, DragonFly BSD
Other news: BSDSec, BSDnow, p2k16, OpenBSD, NetBSD

BSDSec

NetBSD Security Advisory 2016-005: bozohttpd CGI handlers potential remote code execution

NetBSD Security Advisory 2016-004: Multiple vulnerabilities in the compatibility layers

Releases

SoloBSD 10.3-STABLE-v44.2

There is a new build of SoloBSD 10.3-STABLE based on the latest HardenedBSD stable branch version 44.2

- Changelog v44.2

You can grab it from Here. (45.8 Mb)

root password: solobsd

New stable release: HardenedBSD-stable 10-STABLE v44.2

HardenedBSD-10-STABLE-v44.2 - https://github.com/HardenedBSD/hardenedBSD-stable/releases/tag/HardenedB...

DragonFly 4.4.3 released

The DragonFly 4.4.3 point release is out. There’s a commit page listing the changes between 4.4.2 and 4.4.3. Nobody will be surprised that there’s an OpenSSL update in there.
If you want a complete image, it’s available for download at your nearest mirror. If you want to upgrade an existing install:

cd /usr; make src-update 
    (or  src-create-shallow if you don't already have source)
make buildworld && make buildkernel
make installkernel && make installworld
make upgrade
reboot

News

The p2k16 hackathon has begun

OpenBSD developers from around the world have just gathered in Nantes, France for the p2k16 hackathon. This event is technically a ports hackathon, but many non-porters have showed up too, which means you can expect a variety of different improvements. As an early example, ajacoutot@ has just set sysmerge to run automatically during the upgrade process.
Head over to the hackathons page to see the artwork, and stay tuned to Undeadly for some post-hackathon reports.

Rushing into BSD | BSD Now 138

This week on the show, we will be talking to Benedict Reushling about his role with the FreeBSD foundation and the journey that took him there. That plus a few weeks worth of news to get caught up on, coming up next on BSDNow!

View attached file (622 MB, video/mp4)

Code stuff

In Other BSDs for 2016/04/23

anti-ROP mechanism in libc

JH 4:46 AM Add Comment

Last week in BSD

Releases: FuguIta, SoloBSD, HardenedBSD,
Other news:BSDnow, Hammer, FreeBSD, Wallpaper,DragonFly BSD,

BSDSec

seems to be none warnings

Releases

FuguIta LiveCD/5.9

FuguIta-5.9-201604012simple

Based on OpenBSD 5.9
Just only OpenBSD installed.
FuguIta-5.9-20104041shrinked
Removed stuffs which are not necessary for LiveCD.

HardenedBSD-stable 11-CURRENT v44

HardenedBSD-11-CURRENT-v44 - https://github.com/HardenedBSD/hardenedBSD-stable/releases/tag/HardenedB...

HardenedBSD-stable 10-STABLE v44.1

HardenedBSD-10-STABLE-v44.1 - https://github.com/HardenedBSD/hardenedBSD-stable/releases/tag/HardenedB...

SoloBSD 10.3-STABLE-v44.1

There is a new build of SoloBSD 10.3-STABLE based on the latest HardenedBSD stable branch version 44.1

- Changelog v44.1

You can grab it from Here. (45.8 Mb)

root password: solobsd

News

Call For Papers for EuroBSDCon 2016 in Belgrade, Serbia is out!

On behalf of the EuroBSDCon 2016 Program Committee, here is the Call for Papersfor the EuroBSDCon 2016 conference which will take place in Bergrade, Serbiabetween 22-25 September 2016.

https://2016.eurobsdcon.org/call-for-papers/ closing date for the CfP is May, 8th.

This is GNN | BSD Now 136

This week on the show, we will be interviewing GNN of the FreeBSD project to talk about the new TeachBSD initiative. That plus the latest BSD headlines, all coming your way right now!

View attached file (618 MB, video/mp4)

Code stuff

Hammer and FreeBSD

Tomohiro Kusumi would like to port Hammer (1) to FreeBSD, as noted in this bug discussion. It’s not even begun to happen, but if you can contribute, please do.

Wallpaper of the week

from http://www.hdwallpapers.in/freebsd-wallpapers.html

BSDNews 04/04/2016

JH 5:21 AM Add Comment

Last week in BSD

Releases:OpenBSD, SoloBSD, pfSense,
Other news:pfSense, BSDnow, DragonFlyBSD, FreeBSD

BSDSec

OpenBSD 5.9 released - March 29

OpenNTPD 5.9p1 released

Releases

OpenBSD 5.9 released (early!)

The release of OpenBSD 5.9, previously scheduled for the usual May 1st, has just been officially announced!

We are pleased to announce the official release of OpenBSD 5.9.
This is our 39th release on CD-ROM (and 40th via FTP/HTTP).  We remain
proud of OpenBSD's record of more than twenty years with only two remote
holes in the default install.

The release page mentions most of the major improvements, and the detailed changelog has a much longer list. Here are some of the bigger things incorporated into 5.9 that we're excited about. Read more...

SoloBSD 10.3-PRERELEASE-v44

There is a new build of SoloBSD 10.3-PRERELEASE based on the latest HardenedBSD stable branch version 44

- Changelog v44

You can grab it from Here. (45.8 Mb)

root password: solobsd

pfSense 2.3 Release Candidate

We are proud to announce pfSense® software version 2.3 Release Candidate is now available!
The most significant changes in this release are a rewrite of the webGUI utilizing Bootstrap, and the underlying system being converted entirely to FreeBSD pkg (including the base system and kernel). The pkg conversion enables us to update pieces of the system individually going forward, rather than the monolithic updates of the past.
For the highlights, check out the Features and Highlights video. Past blog posts have covered some of the changes, such as the performance improvements from tryforward, and the webGUI update.
The full list of changes is on the 2.3 New Features and Changes page.
In the process of getting here, we’ve closed out 742 total tickets, with most of those being items related to the Bootstrap conversion. Of those, 136 bugs have been resolved that affect 2.2.x and prior versions.
New Installs
Upgrades
You can upgrade straight to 2.3 from any previous release. Check the Upgrade Guide for details.

News

Speciality MWL | BSD Now 135

This week on the show, we interview author Michael W Lucas to discuss his new book in the FreeBSD Mastery series: “Specialty Filesystems”. That plus the latest news, feedback & more!

View attached file (650 MB, video/mp4)

Features and Highlights of pfSense 2.3

Unless you’ve been completely out of the loop, you know that the official release of pfSense 2.3 is on the horizon. In anticipation of that event, Netgate, host of the pfSense® open-source software community and technical leader of the pfSense project, has put together a video that highlights many of the new and exciting changes in this release. Incalculable hours of engineering and testing time has been invested in this release. It’s certainly our biggest yet. As soon as it’s released, you can get it on official pfSense hardware at netgate.com. Enjoy!

Code stuff

In Other BSDs for 2016/04/02

Baytrail fix for DragonFly and others

Interesting articles

How-To: Build Classic on FreeBSD 10.x (Bitcoin)

PC-BSD & Lumina Desktop Wallpapers

How-To: Enable ALTQ on igb driver on FreeBSD

talks about blacklistd

Wallpaper

from https://plus.google.com/u/0/b/112370801182816491936/+UlisesMAlvarez/posts/WgEbZrktsy9

BSD News 21/03/2016

JH 2:53 AM Add Comment

Last week in BSD

Releases:SoloBSD, FreeBSD, HardenedBSD
Other news: BSDSec, PC-BSD, FreeBSD, HardenedBSD, FreeBSD Foundation, OpenBSD, DragonFly BSD, BSDnow,

BSDSec

[FreeBSD-Announce] FreeBSD Errata Notice FreeBSD-EN-16:05.hv_netvsc

[FreeBSD-Announce] FreeBSD Errata Notice FreeBSD-EN-16:04.hyperv

[FreeBSD-Announce] FreeBSD Security Advisory FreeBSD-SA-16:14.openssh

[FreeBSD-Announce] FreeBSD Security Advisory FreeBSD-SA-16:15.sysarch

Releases

FreeBSD 10.3-RC3 Available

The third Release Candidate build for the FreeBSD 10.3 release cycle is now available. ISO images for the amd64, armv6, i386, ia64, powerpc, powerpc64 and sparc64 architectures are available on most of our FreeBSD mirror sites.

New stable release: HardenedBSD-stable 10-STABLE v42.2

HardenedBSD-10-STABLE-v42.2 - https://github.com/HardenedBSD/hardenedBSD-stable/releases/tag/HardenedB...

RELEASE: SoloBSD 10.3-PRERELEASE-v42.2

There is a new build of SoloBSD 10.3-PRERELEASE based on the latest HardenedBSD stable branch version 42.2

- Changelog v42.2

You can grab it from Here. (45.7 Mb)

root password: solobsd

News

FreeBSD Not a Linux Distro

In this session George Neville-Neil presents the history of FreeBSD.

Call For Artists: New Icon Theme

Source: Call For Artists: New Icon Theme
Since the founding of the Lumina desktop project, one of the most common questions I get asked is: “I am not a programmer, but how can I help out?” Well today I would like to open up a new method of contributing for those of you that are graphically-inclined: the creation of a brand new icon theme for the Lumina desktop!
This new icon theme will adhere to the FreeDesktop specifications[1] for registering an icon theme, and the good news is that I have already handled all the administrative setup/framework for you so that all you need to do to contribute is basically just send in icon files!
Here are the highlights for the new theme:

Included within the main Lumina source repository
All icons will be licensed under the Creative Commons Attribution 4.0 International Public License. This is comparable to the 3-clause BSD license, but specifically for static images/files (whereas the BSD license is for source code).
This will be a high-contrast, high-resolution, fully-scalable (SVG) theme.
The general concept is a white foreground, with a black outline/shadow around the icon, and colorized emblems/overlays for distinguishing between similar icons (“folder” vs “folder-network” for instance). We are going for a more professional/simple look to the icons since tiny image details generally do not scale as well across the range we are looking at.

The details on how to contribute an icon to the theme are listed on the repository page as well, but here is the summary:

Icons which are still needed are listed in the TODO.txt files within each directory.
Submit the icon file via git pull request
Add an entry for your icon/submission to the AUTHORS file (to ensure each contributor gets proper credit for their work)
Remove the icon from the appropriate TODO.txt file/list

If you are not familiar with git or how to send git pull requests, feel free to email me the icon file(s) you want to contribute and I can add them to the source tree for you (and update the AUTHORS/TODO files as necessary). Just be sure to include your full name/email so we can give you the proper credit for your work (if you care about that).

As an added bonus since we don’t have any actual icons yet (just the general guidelines), the first contributor to send in some icons will get to help decide the overall look-n-feel of the icon theme!

[1] FreeDesktop Specifications

Theme Registration: https://specifications.freedesktop.org/icon-theme-spec/icon-theme-spec-latest.html
Icon Names: https://specifications.freedesktop.org/icon-naming-spec/latest/ar01s04.html

NetBSD: Happy 23rd Birthday, src!

And so it began...

revision 1.1
date: 1993-03-21 10:45:37 +0100; author: cgd; state: Exp;
branches: 1.1.1;

Initial revision

and we continue this legacy.

Introducing a New Website and Logo for the Foundation

The FreeBSD Foundation is pleased to announce the debut of our new logo and website, signaling the ongoing evolution of the Foundation identity, and ability to better serve the FreeBSD Project. Our new logo was designed to not only reflect the established and professional nature of our organization, but also to represent the link between the Project and the Foundation, and our commitment to community, collaboration, and the advancement of FreeBSD.

We did not make this decision lightly. We are proud of the Beastie in the Business Suit and the history he encompasses. That is why you’ll still see him make an appearance on occasion. However, as the Foundation’s reach and objectives continue to expand, we must ensure our identity reflects who we are today, and where we are going in the future. From spotlighting companies who support and use FreeBSD, to making it easier to learn how to get involved, spread the word about, and work within the Project, the new site has been designed to better showcase, not only how we support the Project, but also the impact FreeBSD has on the world. The launch today marks the end of Phase I of our Website Development Project. Please stay tuned as we continue to add enhancements to the site.

We are also in the process of updating all our collateral, marketing literature, stationery, etc with the new logo. If you have used the FreeBSD Foundation logo in any of your marketing materials, please assist us in updating them. New Logo Guidelines will be available soon. In the meantime, if you are in the process of producing some new literature, and you would like to use the new Foundation logo, please contact our marketing department to get the new artwork.

Please note: we've moved the blog to the new site. See it here.

IPv6 errata for 5.7/5.8, pledge errata for 5.9

Errata patches were recently issued for an IPv6 bug that affects users of both OpenBSD 5.7 and 5.8, as well as a patch for pledge in the upcoming 5.9 release. Quoting the patch:

Insufficient checks in IPv6 socket binding and UDP IPv6 option processing allow a local user to send UDP packets with a source (IPv6 address + port) already reserved by another user.

Users that don't use IPv6 are not affected by this issue. Users who are using IPv6 should apply the patch, rebuild their kernel and reboot.
Though not officially released, unrelated an errata patch was issued for 5.9 on the same day:

Incorrect path processing in pledge_namei() could result in unexpected program termination of pledged programs.

Just as a heads up, you'll want to apply this one after installing 5.9 when it hits. Seasoned users know it's always good to check the errata page after doing an install.
Head over to the 5.7 errata or 5.8 errata pages to make sure you're all up to date.

AsiaBSDCon OpenBSD papers

This year's AsiaBSDCon has come to an end, with a number of OpenBSD-related talks being presented. Two developers were also invited to the smaller "bhyvecon" event to discuss vmm(4) and future plans.

Antoine Jacoutot (ajacoutot@) - OpenBSD rc.d(8) (slides | paper)

Henning Brauer (henning@) - Running an ISP on OpenBSD (slides)

Mike Belopuhov (mikeb@) - Implementation of Xen PVHVM drivers in OpenBSD (slides | paper)

Mike Belopuhov (mikeb@) - OpenBSD project status update (slides)

Mike Larkin (mlarkin@) - OpenBSD vmm Update (slides)

Reyk Floeter (reyk@) - OpenBSD vmd Update (slides) Videos will likely be uploaded later on. And finally, you can usually find most of the OpenBSD-related presentations at openbsd.org/papers. Future conferences can also be seen at openbsd.org/events.html.

Multiple card slots accessible in DragonFly

If you somehow have a device with multiple SD/MMC card slots, you can now access all of them under DragonFly. (Apparently done to make a tablet run DragonFly better, going by IRC conversation)

The Tokyo Debrief | BSD Now 133

This week on BSDNow, Allan and I are back from AsiaBSDCon & we have an interview with Brad Davis about the new “Packaging Base” call-for-testing. We’ll be sharing our thoughts and stories on how the week went, along with updating you on the latest news.

View attached file (494 MB, video/mp4)

World rebuild needed for DragonFly 4.5

DragonFly BSD Digest by Justin Sherrill

If you are running bleeding-edge DragonFly, Sepherosa Ziehau has made some networking changes that both reduce CPU usage in high-traffic situations and change some underlying network structures. This means a full buildworld is needed on your next update.
If you’re using DragonFly 4.4.x or older, you are unaffected.

Code stuff

garbage[18]: Pixel C, Raspberry Pi 3

In Other BSDs for 2016/03/19

Interesting articles

Packaging the base system with pkg(8)

How-To: ELK Stack on FreeBSD

How-To: Handling Ports and Binary Packages [FreeBSD]

Install Nginx, MariaDB, and PHP (FEMP) Stack in FreeBSD 10.2

JH 5:04 AM Add Comment

Last week in BSD

Releases:SoloBSD, OPNsense, HardenedBSD
Other news:FreeBSD, LibreSSL, OpenBSD, pkgsrc, NetBSD, BSDnow, MirOS, Wallpaper

BSDSec

none warnings

Releases

RELEASE: SoloBSD 10.3-BETA3-v41

RELEASE: SoloBSD 10.3-BETA3-v41.1

There is a new build of SoloBSD 10.3-BETA3 based on the latest HardenedBSD stable branch version 41.1

Changelog v41.1

You can grab it from Here. (42.2 Mb)

root password: solobsd

New stable version: HardenedBSD-stable HardenedBSD-10-STABLE-v41.1

New stable release: HardenedBSD-stable 11-CURRENT v42

HardenedBSD-11-CURRENT-v42 - https://github.com/HardenedBSD/hardenedBSD-stable/releases/tag/HardenedB...

OPNsense 16.1.5 released

full patch notes:

ports: squid 3.5.15[1], unbound 1.5.7 hotfix[2], pkg 1.6.4 hotfix[3], openssl 1.0.2g[4]
services: infrastructure rework for plugin additions
openvpn: added copy/move to client-specific overrides
openvpn: allow binding client-specific overrides to specific server(s)
openvpn: service on/off toggle via overview pages
openvpn: fix problem with service status display
openvpn: when services are disabled, make sure a reconfigure will always stop the associated process
vpn: transform PPTP, L2TP and PPPoE servers to plugin addition to be removed from base install for 16.7
vpn: add proper service probing for PPTP, L2TP and PPPoE servers
interfaces: added RFC 4638 support (MTU > 1492 in PPPoE)
ntp: disable when no servers are set
language: updates for Chinese, French and German

—
[1] http://ftp.meisei-u.ac.jp/mirror/squid/squid-3.5.15-RELEASENOTES.html
[2] https://www.nlnetlabs.nl/bugs-script/show_bug.cgi?id=729
[3] https://github.com/freebsd/pkg/issues/1394
[4] https://www.openssl.org/news/secadv/20160301.txt

News

FreeBSD Project to participate in Google Summer of Code 2016

The FreeBSD Project is pleased to announce its participation in Google's 2016 Summer of Code program, which funds summer students to participate in open source projects. This will be the FreeBSD Project's twelfth year in the program, having mentored over 180 successful students through summer-long coding projects between 2005 and 2015.

Past successful projects have included improvements to Linux ABI emulation, NFSv4 ACLs, TCP regression testing, FUSE file system support, and countless other projects. Many students go on to become FreeBSD developers, as well as participating in FreeBSD developer events around the world through continuing support from the FreeBSD Foundation.

Prospective participants are invited to apply; more information is available, including proposal and deadline information, on the FreeBSD Summer Projects page.

LibreSSL not affected by DROWN attack

As noted by Bernard Spil, the OpenSSL bugs disclosed on 2016-03-01 have very little impact on LibreSSL, especially on OpenBSD. However, we will briefly mention the two high-profile issues:

LibreSSL (on any platform) is not affected by DROWN. Support for SSLv2 was flensed out quite a while ago.

Cachebleed is local-only, and requires a lot effort to get. This is thought to be very difficult to exploit on OpenBSD due to many of the normal mitigations on an OpenBSD system. Other systems without such mitigations may not be so lucky. Edit: Update from Bob Beck (beck@):

So of 8 #openssl things forthcoming, all but two low severity ones were already fixed in #libressl - You won't need to patch #libressl today
— Bob Beck (@bob_beck) March 1, 2016

OpenBSD 5.9 network improvements

There are no doubt many eyes on OpenBSD's continuing network SMP renovation. Hrvoje Popovski writes in to tell us about some performance testing he's been doing:

My name is Hrvoje Popovski, I'm a husband, a father of 3 little kids and network engineer at University of Zagreb University Computing Centre – SRCE. Somewhere around the beginning of 2015, I got one server to play with that luckily had four em(4) (Intel I350) and two ix(4) (Intel 82599) onboard NICs. Around that time, developers started to throw out some interesting MP diffs, and I couldn't resist trying them. So I started to beg my boss and people around me to buy or lend me some PCs or servers to generate traffic with the MP diffs. I don't know how, but two Dell servers came to my lab...

Stable pkgsrc-2015Q4 branch released

The pkgsrc developers are proud to announce the pkgsrc-2015Q3 branch. There are 16846 possible packages in pkgsrc-2015Q4, up from 16764 last quarter. Notable new packages this quarter include kodi (home media center software previously known as xbmc), php-baikal (a CardDAV/CalDAV server), freecol (a Colonization clone), unicorn (a CPU emulator framework), and clang-static-analyzer.

BSD Behind The Chalkboard | BSD Now 131

This week on the show, we have an interview with Jamie McParland of the Newburg public school district in Oregon. We are going to get an inside look at how they use BSD in various aspects operations across their network, as well as bringing you the latest news and questions. Keep it tuned to BSDNow, the place to B...SD!

View attached file (652 MB, video/mp4)