OpenBSD Journal Random order relinking of critical components is an OpenBSD feature specifically designed to make it harder to exploit bugs in the resulting binary.
sshd(8) was the first of the network-facing daemons to get the random treatment (see this previous …
In -current,
Robert Nagy (robert@)
updated
clang(1),
llvm,
and lld(1)
to version 22.1.6:
https://marc.info/?l=openbsd-cvs&m=178005264089753&w=2
https://marc.info/?l=openbsd-cvs&m=178005271889792&w=2
https://marc.info/?l=openbs…
The LibreSSL project has announced the release of version 4.3.2 of the software.
The release notes are as follows:
Read more…
Version 0.126 of Game of Trees has been released (and the port updated). Complete release notes are as follows:
Read more…
The OpenBSD project has
announced
OpenBSD 7.9,
its 60th release.
The new release
contains a number of significant improvements, including but certainly
not limited to:
MAXCPU value on OpenBSD/amd64 increased to 255 [See earlier report]
P…
Like (we suspect) quite a few of our readers, undeadly.org co-editor Peter Hansteen runs a mail service and settled on exim as the reasonable alternative to the classic sendmail way back when.
However, that software has had its share of security is…
Network-oriented readers will be familiar with the concept of overload tables, commonly used with state tracking options to create adaptive rulesets for such things as punishing
password-guessing botnets.
A downside to tables that would tend to fi…
Network-oriented readers will be familiar with the concept of overload tables, commonly used with state tracking options to create adaptive rulesets for such things as punishing
password-guessing botnets.
A downside to tables that would tend to fi…
Florian Obser (florian@) recently gave a
BSD-NL
talk
entitled
"Let’s find out how to get predictable IPv6 addresses assigned to OpenBSD VMs".
Florian takes us on a guided tour of how inet6 autoconf actually works, with enlightening an…
Version 0.125
of Game of Trees
has been released (and the port
updated).
Note the security fixes:
security fix: reject versioned files inside .git, .got, or .cvg directories
security fix: crafted tree entry names could cause writes o…
Due to hardware failure, the machine hosting undeadly has gone down last week. Thanks to the kind and swift help from OpenBSD.amsterdam, we’re now back online. We will source new hardware for the original machine and hopefully move back again soon.
The
LibreSSL project
has
announced
the release of version 4.3.1
of the software:
We have released LibreSSL 4.3.1, which will be arriving in the LibreSSL
directory of your local OpenBSD mirror soon.
This is a development release for the 4…
Jonathan Gray (jsg@)
updated the version
of
OpenBSD
-current
from "7.9"
to "7.9-current".
Those running the latest-and-greatest
[via a sufficiently new snapshot or built from source]
no longer need to use
"-D snap…
Routing security matters to all of us
(even those of us who seldom give the subject any thought),
and the
rpki-client project
announced
the release of a new version of their
Resource Public Key Infrastructure (RPKI) client,
with a number of imp…
We’re a little late reporting it but…
The familiar safeguard
sysctl hw.smt
is now deprecated,
having been replaced by a more flexible mechanism
which allows discriminating between different varieties of core type.
First, Theo de Raadt…
OpenBSD
7.9 release cycle is entering its final phases…
With the following
commit,
Theo de Raadt (deraadt@) moved -current
to version 7.9
(dropping the "-beta"):
CVSROOT: /cvs
Module name: src
Changes by: deraadt@cvs.open…
Every spring and autumn, the routing world can expect a new OpenBGPD release, and this time is no exception.
The OpenBGPD project have announced the availability of their newest release, version 9.1, with the following announcement:
List: …
Version 0.124
of Game of Trees
has been released (and the port
updated):
make the chroot path directive in gotwebd.conf actually work
fix a segfault in tog while using the & search feature
plug a tree object leak in the gotd …
Bogus security bug reports generated by large language model
(LLM)
tool use are a well known irritant and time sink for open source projects.
As a consequence of one such report, Theo de Raadt (deraadt@)
committed a change to pfsync(4) to renam…
As we approach the 60th OpenBSD release: 7.9, the OpenSSH project has released OpenSSH 10.3.
From the Release notes:
Read more…