BSD News 27/11/2017

Last week in BSD

Releases: OPNsense, pfSense
News: BSDSec, DragonFly BSD, BSDnow, OpenBSD, Lumina Desktop, BSD Router, p2k17, Wallpaper

BSDSec

FreeBSD Security Advisory FreeBSD-SA-17:08.ptrace [REVISED]
FreeBSD Security Advisory FreeBSD-SA-17:10.kldstat [REVISED]
[Security-announce] pfSense-SA-17_09.webgui
[Security-announce] pfSense-SA-17_08.webgui
[Security-announce] [UPDATED] pfSense-SA-17_07.packages

Releases

OPNsense 17.7.8 released

A shiny new update is available, addressing the recent security advisories from FreeBSD, OpenSSL, Sudo and a number of minor bugs.
To all our 18.1-BETA testers we say this: thank you! The results have been thoroughly positive. If you would like to participate as well, please take a closer look:
https://forum.opnsense.org/index.php?topic=6257.0

pfSense 2.4.2-RELEASE now available

pfSense software version 2.4.2 is a maintenance release bringing security patches and stability fixes for issues present in previous pfSense 2.4.x branch releases.

News

Remember: don’t kldload i915 too soon

I just wasted an hour trying to figure out why xorg had strange output but no errors on this laptop, and it’s because I had i915_load=”YES” in /boot/loader.conf instead of i915_load=”YES” in /etc/rc.conf.  I’m almost nearly sure I’ve mentioned that before, but if not: here you go.
(though if you never plan to run X, you can put it in loader.conf and everything will just work.)

BSD in Taiwan | BSD Now 221

Allan reports on his trip to BSD Taiwan, new versions of Lumina and GhostBSD are here, a bunch of OpenBSD p2k17 hackathon reports & more!

Pre-DragonFly 4.4 users, take note

If you happen to be running an old version of DragonFly, you may need to do an intermediate upgrade to move to releases after 5.0.  This is in part because of commits to support C++14.  This only applies to version of DragonFly before 4.4.

Code stuff

The strongest KASLR, ever? (latest developments in the Kernel ASLR district)
Lumina Version 1.4.0 Released
Areca update: arcmsr(4)
In Other BSDs for 2017/11/25

Interesting articles

DragonFly: Locking microtests
How to build a BSDRP router lab - [Virtualbox]
Digging into /usr/share/examples

p2k17 Hackathon

OpenBSD is holding hackathons as an attempt to get new changes into the source tree quickly. Here are some reports from the latest:
Reflections on Hackathons
p2k17 Hackathon report: Antoine Jacoutot on ports+packages progress

Wallpaper of the week

Read More»

BSD News 20/11/2017

Last week in BSD

News: BSDSec, FreeBSD, OpenZFS, BSDnow, OpenBSD, DragonFly BSD, C5, p2k17
Releases: HardenedBSD

Releases

Stable release: HardenedBSD-stable 11-STABLE v1100054

Tthis is a security update and reinstallation of pkgs/ports are required due LibreSSL upgrade!
Highlights:
- Changed AT_PAXFLAG auxvector position (4c04e4a613679510cd16bb13d7974c18e3f54460)
- Properly bzero kldstat structure to prevent kernel information leak. (3ff3ec467d4eb11cdbf706cf386935d5e58c2e91) [FreeBSD-SA-17:10.kldstat, CVE-2017-1088]
- CloudABI 0.17 (cf6ac9b4efa43a9c64c5ab311666080a0e8632b1)
- MFH (r325010): don't bother verifying a password that we know is too long. (b242fe393914310e50673eb62d480ce03706d745) [CVE-2016-6210]
Installer

BSDSec

FreeBSD Security Advisory FreeBSD-SA-17:10.kldstat
FreeBSD Security Advisory FreeBSD-SA-17:09.shm
FreeBSD Security Advisory FreeBSD-SA-17:08.ptrace

News

Opening ZFS in 2017 | BSD Now 220

We have a first PS4 kernel exploit, the long awaited OpenZFS devsummit report by Allan, DragonflyBSD 5.0 is out, we show you vmadm to manage jails, parallel processing with Unix tools & more!

Official OpenBSD 6.2 CD set - the only one to be made!

Our dear friend Bob Beck (beck@) writes:

So, again this release the tradition of making Theo do art has continued!
Up for sale by auction to the highest bidder on Ebay is the only OpenBSD 6.2 CD set to be produced.
The case and CD's feature the 6.2 artwork, custom drawn ans signed by Theo.
All proceeds to support OpenBSD
Go have a look at the auction

As with previous OpenBSD auctions, if you are not the successful bidder, we would like to encourage you to donate the equivalent of you highest bid to the project.

Code stuff

rdist out of DragonFly
DragonFly, IPv6, and direct routes
In Other BSDs for 2017/11/18

Interesting Articles

FreeBSD/EC2 on C5 instances
Never too much RAM for DragonFly

p2k17 Hackathon

OpenBSD is holding hackathons as an attempt to get new changes into the source tree quickly. Here are some reports from the latest: 
Florian Obser on network stack progress, kernel relinking and more
Landry Breuil on Mozilla things and much more

Wallpaper of the week

from http://i1-news.softpedia-static.com/images/news2/security-oriented-openbsd-6-2-os-released-with-better-arm-support-improvements-517978-2.jpg

Read More»

BSD News 13/11/2017

Last week in BSD

News: BSDSec, p2k17, LibreSSL, DragonFly BSD, BSDnow, Minix, OpenBSD
Releases: DragonFly BSD

BSDSec

LibreSSL 2.6.3 Released

Releases

DragonFly 5.0.1 released

This is a bugfix release, adding HAMMER2 support in initrd, among other cleanup commits.

News

We love the ARC | BSD Now 219

Papers we love: ARC by Bryan Cantrill, SSD caching adventures with ZFS, OpenBSD full disk encryption setup & a Perl5 Slack Syslog BSD daemon.

DragonFlyBSD: kernel ppp gone; ppp still there

The ppp kernel module has been removed. It’s still possible to run ppp(8) in userland, with tun(4), so it’s only a change in strategy, not result.

Dragonfly BSD: sys_pipe reoptimized

sys_pipe has been modified to avoid contention on DragonFly, which means better performance as tasks get handed between processors.

Interesting articles

MINIX — The most popular OS in the world, thanks to Intel

In Other BSDs for 2017/11/11

p2k17 Hackathon

OpenBSD is holding hackathons as an attempt to get new changes into the source tree quickly. Here are some reports from the latest: 
Jeremy Evans on ruby progress, postgresql and webdriver work

Paul Irofti (pirofti@) on hotplugd(8), math ports, xhci(4) and other kernel advancements

Herzliche grusse vom Berlin (espie@ on mandoc, misc packages progress)

Matthias Kilian on xpdf, haskell, and more

Christian Weisgerber on random devices, build failures and gettext

Jeremy Evans on ruby progress, postgresql and webdriver work

Anthony J. Bentley on firmware, games and securing pkg_add runs

Sebastian Reitenbach on Puppet progress

Read More»