OpenBSD Now! (@[email protected])

Unofficial OpenBSD news, updates and thoughts.

Mastodon: #WhyOpenBSD #RunBSD #PlayOnBSD #CallForTesting

[OpenBSD Now! (@[email protected]) @openbsdnow]

OpenBSD 7.2 released

Announce: https://t.co/zQdXPOu2Rp

Release page: https://t.co/eACok8fjti

Upgrade guide: https://t.co/CJ310mBVRr

[OpenBSD Journal @openbsdjournal]

LibreSSL 3.7.1 Released https://t.co/EV5uuzvDkN #openbsd #libressl #ssl #tls

[OpenBSD Now! (@[email protected]) @openbsdnow]

Is there an "OpenBSD Journal" in Mastodon?

// CC: @openbsdjournal

[OpenBSD Errata @OpenBSD_stable]

OPENBSD_7_2 bluhm@ modified sys/dev/wscons/wsemul_vt100*: Add a few missing bounds checks when processing terminal escape sequences. Without them, the kernel could be made to crash or reboot after receiving some specially crafted terminal escape sequences. from miod@; Reported...

[OpenBSD Errata @OpenBSD_stable]

New OpenBSD 7.2 syspatch for amd64: 021_wscons

[OpenBSD Journal @openbsdjournal]

Privilege drop, privilege separation, and restricted-service operating mode in OpenBSD https://t.co/O4h7tUDDbp #openbsd #privsep #privdrop #security

[OpenBSD Now! (@[email protected]) @openbsdnow]

Nice article about setting up Nextcloud and honk on OpenBSD with httpd(8) and relayd(8).

https://t.co/u01GDN07l8

#nextcloud

[OpenBSD Now! (@[email protected]) @openbsdnow]

Using /bin/eject with USB flash drives

https://t.co/KQhAc3WE39

[OpenBSD Journal @openbsdjournal]

Tunneling vxlan(4) over WireGuard wg(4) https://t.co/C52k09mE0z #openbsd #vxlan #wireguard #wg #vpn #tunneling

[OpenBSD Journal @openbsdjournal]

Using /bin/eject with USB flash drives https://t.co/OEIDa2xuHB #openbsd #usb #eject #mt #removable #umount

[OpenBSD Errata @OpenBSD_stable]

OPENBSD_7_2 bluhm@ modified usr.sbin/smtpd/envelope.c: smtpd(8) could abort due to a connection from a local, scoped ipv6 address. avoid using inet_pton(3) which doesn't support scoped ipv6 address, and use getaddrinfo(3) instead of. from semarie@; OK millert@ florian@ kn@ thi...

[OpenBSD Errata @OpenBSD_stable]

OPENBSD_7_2 bluhm@ modified xserver/Xi/exevents.c: Xi: fix use-after-free in DeepCopyPointerClasses CVE-2023-0494, ZDI-CAN-19596 from matthieu@ this is errata/7.2/019_xserver.patch.sig

[OpenBSD Errata @OpenBSD_stable]

OPENBSD_7_2 bluhm@ modified lib/libcrypto/x509/x509_genn.c: Fix arbitrary memory read in GENERAL_NAME_cmp() The ASN.1 template for GENERAL_NAME and its corresponding C structure disagree on the type of the x400Address member. This results in an ASN.1 string to be considered as...

[OpenBSD Now! (@[email protected]) @openbsdnow]

Akvorado receives flows (currently Netflow/IPFIX and sFlow), enriches them with interface names (using SNMP), geo information (using MaxMind), and exports them to Kafka, then ClickHouse.

Demo: https://t.co/rsIcMwqxBg

Source code: https://t.co/bDK6wgA9iT

[OpenBSD Errata @OpenBSD_stable]

OPENBSD_7_2 bluhm@ modified usr.bin/ssh/compat.c: fix double-free caused by compat_kex_proposal(); bz3522 from djm@; by dtucker@; ok djm@

[OpenBSD Errata @OpenBSD_stable]

New OpenBSD 7.2 syspatch for amd64: 017_sshd

[OpenBSD Now! (@[email protected]) @openbsdnow]

https://t.co/ZQBDnLT2mp

[OpenBSD Journal @openbsdjournal]

Game of Trees milestone https://t.co/2SVqcWFQBN #openbsd #got #git #gameoftrees

[OpenBSD Now! (@[email protected]) @openbsdnow]

#CallForTesting

Please test aggressively.

[OpenBSD Journal @openbsdjournal]

sshd random relinking at boot https://t.co/NERBlzeJzX #openbsd #sshd #ssh #security #random #relink

[OpenBSD Journal @openbsdjournal]

Game of Trees 0.80 released. https://t.co/04R0rZcIuj #openbsd #got #git

[OpenBSD Now! (@[email protected]) @openbsdnow]

"A TCP packet with destination port 0 that matches a pf divert-to
rule could crash the kernel."

[OpenBSD Now! (@[email protected]) @openbsdnow]

Errata patches for TCP have been released for OpenBSD 7.1 and 7.2.
https://t.co/qjPZkb7xZQ
https://t.co/cOp9bjV2bv