This week has been full of other exciting news, so it may have been easy to miss that the OpenSSH team has released OpenSSH 6.8. The new release is billed as
The response to today's much-anticipated unveiling of newly discovered OpenSSL vulnerabilities has been varied and loud as expected. However, the impact on the OpenBSD-initated LibreSSL project's code -- which has undergone extensive cleanup since LibreSSL forked off OpenSSL's code base in 2014 -- appears to be limited. Out of a total of 13 CVEs in OpenSSL's announcement, only five - CVE-2015-0207, CVE-2015-0286, CVE-2015-0287, CVE-2015-0289 and CVE-2015-0209, still applied to LibreSSL's code.The main takeaway from the announcement appears to be that the cleanup has been effective, however these 'crash-inducing' issues have now been fixed in LibreSSL:
The EuroBSDCon 2015 conference organizers have announced the Call for Papers for the upcoming conference in Stockholm, Sweden.Go to https://2015.eurobsdcon.org/call-for-papers/ for details; the full text of the announcement also follows after the fold.Read more...
Slides from the AsiaBSDCon 2015 presentations are expected to appear on the OpenBSD web site (specifically the Presentations and Papers) page.The first presentation to appear there was Reyk Floeter's OpenBSD's new httpd (slides), also with a paper version.Other developers have been quite punctual too, publishing their presentations soon after their sessions at the conference:Peter Hessler: The results of using BGP for realtime import and export of spam whitelist/blacklist entries
The OpenBSD foundation has published its Project Ideas List for this year's Google-sponsored Summer of Code. If you're a student with an appropriate background, this could be your chance to take a stab at contributing to the OpenBSD code base, with OpenBSD developers as your mentors.The Foundation and the OpenBSD project do not guarantee that SOC projects are accepted into the OpenBSD code base, but it's worth trying, isn't it?Check out the list and see if there's something there you want to spend most of the summer hacking on.
In this week'sepisode,the fellas fromBSDNowinterview Ken Westerback (krw@), one of the directors of theOpenBSD Foundation. They also talk about the nascent BSDCan 2015schedule,Reyk Flöter's superfish-esquerelayd.conf,OpenBSD on the Minnowboard Max,and all the odds and ends in the week's BSD news.[Video|HD Video|MP3 Audio| OGG Audio|Torrent]
On this week'sepisode,theBSDNowfolks interview Henning Brauer (henning@), featuring a cameo by the lovely and talented Ken Westerback (krw@) aboutOpenNTPD,especially in regards to theportable revivaland later drool over the newsecurity features.[Video|HD Video|MP3 Audio|OGG Audio|Torrent]
After what appears to have been a very successful s2k15 hackathon, two significant thank you themed posts have appeared on OpenBSD mailing lists. Thefirst came on misc@ from longtime user and supporter Diana Eichert, with the subject a thankyou to OpenBSD. Diana writes,
Everybody's favourite audio hacker Alexandre Ratchov (ratchov@) is inviting you to a concert in Grenoble (France). Read on to find out how this relates to OpenBSD: