From: Claudio Jeker <claudio () openbsd ! org> Date: Thu, 04 May 2023 16:24:30 +0000 To: openbsd-announce Subject: OpenBGPD 8.0 released We have released OpenBGPD 8.0, which will be arriving in the OpenBGPD directory of your local OpenBSD mirror soon.
Version 8.4 of rpki-client has been released, with a number of improvements and new features:
rpki-client 8.4 has just been released and will be available in the rpki-client directory of any OpenBSD mirror soon. rpki-client is a FREE, easy-to-use implementation of the Resource Public Key Infrastructure (RPKI) for Relying Parties (RP) to facilitate validation of BGP announcements. The program queries the global RPKI repository system and validates untrusted network inputs. The program outputs validated ROA payloads, BGPsec Router keys, and ASPA payloads in configuration formats suitable for OpenBGPD and BIRD, and supports emitting CSV and JSON for consumption by other routing stacks.Version 0.88 of Game of Trees has been released (and the port updated): * got 0.88; 2023-04-29 see git repository history for per-change authorship information - tog: always use alternate charset for vertical/horizontal line - several tog regression test suite improvements - run the tog tests as part of the default regress set - tog: resize log view if toggling fullscreen from child view - when finding changed paths iterate tree entries in on-disk order for speed - cache fulltext data in delta cache to improve speed with long delta chains - gotwebd: fix logic error in gotweb_render_index
Dave Voutila (dv@) has added another feature to virtualisation on OpenBSD. Thanks to the following commit, it is now possible for the owners of virtual machines to override the boot kernel:
Dave Voutila (dv@) committed a change which brings a multi-process model to vmd(8), enhancing both security and performance:
CVSROOT: /cvs Module name: src Changes by: dv@cvs.openbsd.org 2023/04/27 16:47:27 Modified files: usr.sbin/vmd : Makefile dhcp.c vioqcow2.c vioraw.c virtio.c virtio.h vm.c vmd.c vmd.h vmm.c Added files: usr.sbin/vmd : vioblk.c vionet.c Log message: vmd(8): introduce multi-process model for virtio devices. Isolate virtio network and block device emulation in dedicated processes, forked and exec'd from the vm process. This allows for tightening pledge promises to just "stdio". Communication between the vcpu's and these devices now occurs via imsg channels, which adds the benefit of not always blocking the vcpu thread while emulating the device.Joshua Stein (jcs@) has committed viogpu(4), which provides support for the virtio(4) GPU interface (provided by QEMU and other virtual machines) to create a wscons(4) console.
CVSROOT: /cvs Module name: src Changes by: jcs@cvs.openbsd.org 2023/04/20 13:28:31 Modified files: share/man/man4 : Makefile sys/arch/amd64/conf: GENERIC sys/arch/arm64/conf: GENERIC RAMDISK sys/dev/pv : files.pv virtio.c virtioreg.h sys/dev/wscons : wsconsio.h Added files: share/man/man4 : viogpu.4 sys/dev/pv : viogpu.c viogpu.h Log message: add viogpu, a VirtIO GPU driver works enough to get a console on qemu with more work to come from others feedback from miod ok patrickGreat stuff! This moves us closer to having a fully functional wscons console on virtual machines in those specific environments too. We will be watching further development closely.
Version 0.87 of Game of Trees has been released (and the port updated):
* got 0.87; 2023-04-19 see git repository history for per-change authorship information - add gitwrapper(1) - tog: resume blame and diff search from the first line - fix crash in got log due to NULL-deref in got_object_blob_close - add support for protecting references against 'got send -f' to gotd - fix spurious empty packfile error from gotd when rewinding a branch - tog: implement automated test harness - update the base commit ID of unmodified files if the blob ID matches - fix rebase/histedit -a leaving some files on the temporary branch - make 'got revert' and 'got rm' work on non-existent directories - got: flush stdout before printing the error in main() - when aborting rebase/histedit/merge, unlink files added by merged changes - fix 'got commit' using a bad parent commit ID when worktree is out-of-date - allow no-op merge commits to be created - fix sending merge commits - show how to fetch a pull request in got.1 pull request example sectionA highlight of this release is the addition of gitwrapper(1), a utility facilitating co-existence with git.
In a message to tech@, Otto Moerbeek (otto@) announced the new functionality:
Subject: malloc leak detection available in -current From: Otto Moerbeek <otto () drijf ! net> Date: 2023-04-17 6:43:19 Hi, OpenBSD current now has built-in malloc leak detection. Make sure you run current and have debug symbols (OpenBSD base libraries have debug symbols, compile your own program with -g).
Calgary and elsewhere, 2023-04-10: The OpenBSD project today announced the release and general availability of its latest stable version, OpenBSD 7.3.
Eagerly anticipated by users, engineers, enthusiasts and industry pundits all over the world, this release contains a number of improvements over earlier versions, including but not limited to
You may notice that the list of OpenBSD Innovations has grown a bit too, while the detailed changelog offers more detail.
All reasonably modern architectures had install sets and complete binary packages available on the mirrors at the time of the announcements.
Some slower (historic or just weird) architectures are still building but OpenBSD still supports 14 architectures.
While you are waiting for your downloads, installs or upgrades to complete (or even before starting either), please remember to visit the donations page and/or buy OpenBSD swag to support the project financially.
And finally, this release is the first since OpenBSD 7.0 to feature a release song. The Wizard and the Fish is the new obligatory addition to your hacking playlist.
Subject: LibreSSL 3.7.2 Released From: Brent Cook <busterb () gmail ! com> Date: 2023-04-08 11:59:41 We have released LibreSSL 3.7.2, which will be arriving in the LibreSSL directory of your local OpenBSD mirror soon. This is the first stable release for the 3.7.x branch, also available with OpenBSD 7.3 It includes the following changes from the 3.6.x series * Portable changes - Moved official Github project to https://github.com/libressl/. - Build support for Apple Silicon. - Installed opensslconf.h is now architecture-specific. - Removed internal defines from opensslconf.h. - Support reproducible builds on tagged commits in main branch.
We recently reported that Theo de Raadt (deraadt@) was scheduled to present at CanSecWest. That's now happened, and slides of Theo's presentation, Synthetic Memory Protections, can be found in the usual place. Video is available on the bird site.
Version 7.9 of OpenBGPD has been released:
We have released OpenBGPD 7.9, which will be arriving in the OpenBGPD directory of your local OpenBSD mirror soon. This release includes the following changes to the previous release: * Include OpenBSD 7.2 errata 023: Incorrect length checks allow an out-of-bounds read in bgpd(8).
In a late-stage addition prior to the release of OpenBSD 7.3, Mark Kettenis (kettenis@) has committed [more] aggressive randomisation of the stack location for all 64-bit architectures except alpha:
The announcement reads,
Subject: rpki-client 8.3 released From: Sebastian Benoit <benno () openbsd ! org> Date: 2023-03-19 12:46:27 rpki-client 8.3 has just been released and will be available in the rpki-client directory of any OpenBSD mirror soon. rpki-client is a FREE, easy-to-use implementation of the Resource Public Key Infrastructure (RPKI) for Relying Parties (RP) to facilitate validation of BGP announcements. The program queries the global RPKI repository system and validates untrusted network inputs. The program outputs validated ROA payloads, BGPsec Router keys, and ASPA payloads in configuration formats suitable for OpenBGPD and BIRD, and supports emitting CSV and JSON for consumption by other routing stacks.
With the following commit, Theo de Raadt (deraadt@) moved -current to version 7.3:
CVSROOT: /cvs Module name: src Changes by: deraadt@cvs.openbsd.org 2023/03/17 16:52:22 Modified files: sys/conf : newvers.sh Log message: remove -beta tagFor those unfamiliar with the process: this is not the 7.3 release, but is part of the standard build-up to the release.
It is worth noting that this is the final version to be released before the upcoming OpenBSD 7.3 release.
The announcement reads,
Subject: LibreSSL 3.7.1 Released From: Brent Cook <busterb () gmail ! com> We have released LibreSSL 3.7.1, which will be arriving in the LibreSSL directory of your local OpenBSD mirror soon. This is the final development release for the 3.7.x branch, and we appreciate additional testing and feedback before the stable release coming soon with OpenBSD 7.3
On 2023-03-15, the release of version 9.3 of OpenSSH was announced:
Version 0.86 of Game of Trees has been released (and the port updated):
