on (#6JQBT)
Stefan Sperling (stsp@)tootedregarding the addition ofqwx(4)to -current:
OpenBSD Journal
| Link | http://undeadly.org/ |
| Feed | http://undeadly.org/cgi?action=rss |
| Updated | 2025-08-08 21:01 |
on (#6JM45)
Sebastian Benoit (benno@)announcedthe release ofversion 8.9ofrpki-client.Updating is recommended for "improved reliability".
on (#6JM46)
Version 0.96of Game of Treeshas been released (and the portupdated).
on (#6JC45)
Support forsoft updates(softdep),disabled since before the 7.4 release [seeearlier report],has beenremoved from -currentby Bob Beck (beck@):
on (#6J70N)
In apostto tech@, Theo de Raadt (deraadt@) summarizes the multi-year effort to make certain attack vectors unavailable on OpenBSD:
on (#6J45B)
Mark Kettenis (kettenis@)committedsupport forKernel Mode-Setting (KMS)on Apple silicon(arm64)machines:
on (#6HYGM)
Theo de Raadt (deraadt@)has committed (to -current) the remaining parts required to getpinsyscalls(2)working in anger.The commits were:
on (#6HW66)
Rafael Sadowski (rsadowski@) has added a new post to his Shut up and hack series, titledEffortless OpenBSD Audio and Desktop Screen Recording Guide,where he takes the reader through the steps needed to configureyour OpenBSD system for audio and video recording.The post even includes ayoutube videowhere he demonstrates recording while he is putting final touches on the blog post.You can take in the blog post here:Effortless OpenBSD Audio and Desktop Screen Recording Guide.
on (#6HRYA)
The OpenSSH projecthasannouncedthe timeline for the removal ofDSA support from OpenSSH:
on (#6HJ7T)
While you were likely busy celebrating the new year,OpenBSDdeveloper Solene Rapenne (solene@)found the time to write an article detailing variousOpenBSD workstation hardening tips.It's a useful collection of things you could do to secure your environment and customize your setup to best fill your needs.Enjoy!
on (#6HGW8)
Following therecent CFT,Marcus Glocker (mglocker@) hascommitted[to -current]TSO forem(4):
on (#6HGCF)
In a message to the tech@ mailing list, Theo de Raadt (deraadt@) gave a summary of progress so far, along with a patch for testing what will likely be the next steps in the process.The message leads in,
on (#6HFZQ)
Sebastian Benoit (benno@)announcedthe release ofversion 8.8ofrpki-client.It's basically a bug-fix release; see therelease announcementfor details.
on (#6HFYH)
Stefan Sperling (stsp@)hascommittedto -currenta WIPdriver for Qualcomm ath11kwi-fi adapters(such as that found in theLenovo ThinkPad X13s):
on (#6HDTB)
In a recent message to tech@,Marcus Glocker (mglocker@), asks users running -current fortesting of a potenially performance enhancing diff:
on (#6HDRB)
KDE Plasma is now fully functional on OpenBSD and available via the package system. To install, a simple
on (#6HAQK)
Sebastian Benoit (benno@)announcedthe release ofversion 8.7ofrpki-client:
on (#6H8FJ)
As announced by Damien Miller OpenSSH 9.6/9.6p1 has been released.The complete release notes may be found here: https://www.openssh.com/releasenotes.html#9.6.Among notable changes, this release includes a fix for the Terrapin Attack.Read more...
on (#6H3Q1)
The work described in Theo de Raadt'spost(see our previous article)continues:
on (#6H0WD)
Theo de Raadt (deraadt@)postedto tech@ regarding restrictions on theaddresses from which system calls can be made.In addition to providing background,the post contains information (and a patch)for an imminent change - the introduction of a newsyscall,pinsyscalls(2)[link not working at the time of writing because change not yet committed],which specifies the addresses from which individualsystem calls are permitted.pinsyscalls(2) will be called only fromthe shared library linker,ld.so(1).
on (#6H0WE)
Version 0.95of Game of Treeshas been released (and the portupdated):
on (#6GX48)
Otto Moerbeek (otto@), the author of OpenBSD'smalloc(3)implementation, hascomittedanother great feature - backtraces for leak detection:
on (#6GS10)
Version 0.94of Game of Treeshas been released (and the portupdated):
on (#6GGR0)
Tobias Heider (tobhe@) hasannouncedthe release ofversion 7.3ofOpenIKED:
on (#6GDTN)
Omar Polo (op@) hasannouncedthe release of version 7.4.0p1 ofOpenSMTPD.It is a bugfix release.
on (#6GB7K)
In a long series ofcommits,Robert Nagy (robert@)updatedclang(1)/llvmin -current to version 16:
on (#6G34Z)
A new stable release of LibreSSL is out, and should be arriving on amirrornear you shortly.Brent Cook (bcook@)'sannouncement reads:
on (#6FX9K)
Theo de Raadt (deraadt@)posted totech@a message entitleddisruptive amd64 snapshot coming.It reads:
on (#6FWF7)
Hot on the heels of the release of OpenBSD 7.4, Omar Polo (op@) has announced the release of OpenSMTPD 7.4.0p0. The announcement reads,
on (#6FTCY)
Asannouncedon themisc@mailing list,Otto Moerbeek (otto@),the author of OpenBSD'smalloc(3)implementation[a.k.a. "otto malloc"],has written atutorial on the newmalloc(3) leak detection available in OpenBSD 7.4Read it at:OpenBSD's built-in memory leak detectionSince the publication of that write-up,Otto hascommittedfurther enchancements:
on (#6GBV3)
Asannouncedon themisc@mailing list,Otto Moerbeek (otto@),the author of OpenBSD'smalloc(3)implementation[a.k.a. "otto malloc"],has written atutorial on the newmalloc(3) leak detection available in OpenBSD 7.4Read it at:OpenBSD's built-in memory leak detectionSince the publication of that write-up,Otto hascommittedfurther enhancements:
on (#6FKTR)
The OpenBSD project has announced the release ofOpenBSD 7.4,the 55 release of the OpenBSD operating system.The new release contains a number of innovations and improvements across a number of areas, including
on (#6FKTS)
The release of version 8.3 ofOpenBGPDhas beenannounced.This version contains a few fixes.
on (#6FCKS)
Rafael Sadowski (rsadowski@)bloggedabout his participation inp2k23.Perhaps most notable is his work in portingKDEPlasma.Read all about it athttps://rsadowski.de/posts/2023-10-09-p2k23-dublin-openbsd-hackathon/.There is some further discussion of the work in a thread titled NEW: KDE Plasma (x11/kde-plasma) on the ports@ mailing list.
on (#6FANC)
Version 8.6ofrpki-client, the FREE, easy-to-use implementation of the ResourcePublic Key Infrastructure (RPKI)for Relying Parties (RP),has beenreleased.This version includes new compliance checks,random shuffling of processing of Manifest entries,and [non-random!] code shuffling.See the announcement for more details.This is another hint that a new OpenBSDreleaseis about to happen, and soon.
on (#6FAND)
Jay Eptinxa has published a detailed write-up,entitledE-mail Filters In C,of his work creating aspamd(8)-likegreylistingsmtpd(8)filter.Thanks to Crystal Kolipe for letting us know!
on (#6F9XF)
OpenSSH 9.5has beenreleased.This releases features the keystroke timing obfuscationon which we reportedearlier.
on (#6F810)
With a message from Claudio Jeker (claudio@), the OpenBSD project today announced the release of the OpenBSDBGP(Border Gateway Protocol) daemon OpenBGPD, version 8.2.The announcement reads,
on (#6F3NS)
ManyOpenBSDsysadminsfind thesysclean(8)portuseful for removing obsolete files following upgrades.Sebastien Marie (semarie@),theauthorof sysclean(8),has written apiecegiving an under-the-hoodlook at the operation of this handy utility.It's well worth reading for those interested in understandinghow it works!
on (#6F3H6)
With the followingcommit,Theo de Raadt (deraadt@) moved -current to version 7.4:
on (#6F1MN)
Theo de Raadt (deraadt@) posted totech@a detailedmessageexplaining the past and (potential) future ofanti-ROPmeasures in OpenBSD.It's well worth reading its entirety.Highlights include:
on (#6EYJ6)
Frederic Cambus (fcambus@) wrote a blogpost about running OpenBSD on the arm64-based cloudservers provided by Hetzner. For now, only -current will work,because the new viogpu(4)driver[on which wereported earlier]is needed.Head on over to Frederic's blog for the full story!
on (#6EW9T)
EuroBSDCon 2023has now ended,and slides for many of the OpenBSD developer presentationsare now available in theusual place.Video of the presentations can be expected somewhat later.Slides from the tutorial"Network Management with the OpenBSD Packet Filter Toolset"arealso available.
on (#6EW9V)
Version 0.93 of Game of Trees has been released (and the port updated).Read more...
on (#6EW9W)
With the followingcommit(s),Theo de Raadt (deraadt@) moved -currentto version 7.4-beta:
on (#6ES9W)
We are pleased to have anotherp2k23report, this time from Volker Schlecht (volker@)who writes:
on (#6ER70)
Can you really do 3D printing from OpenBSD? Cue suspenseful musicwhilst I formulate my answer, which is: Yes.If you aren't familiar with the 3D printing process, it's dividedinto several steps, vaguely analogous to writing, compiling and runninga program in a compiled language.Read more...
on (#6EP39)
Next up in the series of p2k23 hackathon reports is this from Landry Breuil (landry@), who writes,
on (#6EMKQ)
Next up in our reports from thep2k23 hackathonis one from Jeremy Evans (jeremy@).Jeremy writes:
on (#6EKNC)
The p2k23 OpenBSD packages hackathon just concluded, and Marc Espie (espie@) wrote in with this report: