headers
Jason Dixon | 1 Nov 06:41
Favicon

DCBSDCon 2009 Call for Papers

The DCBSDCon conference has opened up a Call for Papers for the 2009
event.  Speakers are welcome to submit any topic of interest, although
security themes are preferred. This conference leads up to the very
popular ShmooCon hacker convention in Washington, D.C. where OpenBSD
developers and users are always in attendance.

Main Website: http://www.dcbsdcon.org/
Call For Papers: http://www.dcbsdcon.org/cfp.html

P.S.  ShmooCon registration opens Saturday, November 1 at 12pm EDT. If
you're planning to attend both events, make sure you register for their
event.  Previous attendees know how hard it can be to get tickets.

ShmooCon: http://www.shmoocon.org/registration.html

Hope to see you there!

--

-- 
Jason Dixon
DixonGroup Consulting
http://www.dixongroup.net/
Permalink | Reply | 0 comments |
headers
Theo de Raadt | 31 Oct 17:32
Favicon

OpenBSD 4.4 released, Nov 1. Enjoy!


------------------------------------------------------------------------
- OpenBSD 4.4 RELEASED -------------------------------------------------

Nov 1, 2008.

We are pleased to announce the official release of OpenBSD 4.4.
This is our 24th release on CD-ROM (and 25th via FTP).  We remain
proud of OpenBSD's record of more than ten years with only two remote
holes in the default install.

As in our previous releases, 4.4 provides significant improvements,
including new features, in nearly all areas of the system:

- New/extended platforms:
    o OpenBSD/sparc64.
      Fujitsu's SPARC64-V, SPARC64-VI and SPARC64-VII processors are supported
      now, which means that many of the PRIMEPOWER machines and the SPARC
      Enterprise M4000/M5000/M8000/M9000 work now.
      Sun's UltraSPARC VI processors are supported now.  Many of Sun's
      mid-range and high-end servers with these processors or UltraSPARC III
      and UltraSPARC III+ processors work now.
      Sun's UltraSPARC T1 and UltraSPARC T2 processors are supported now,
      which means the sun4v architecture is now supported and machines like
      the SPARC Enterprise T1000 and SPARC Enterprise T5220 work now.
    o OpenBSD/socppc.
      For machines based on the Freescale MPC8349E 
      System-on-Chip (SoC) platform that use Das U-Boot as a boot loader. 
    o OpenBSD/landisk: added shared libraries support.
(Continue reading)

Permalink | Reply | 0 comments |
headers
Damien Miller | 22 Jul 02:08
Favicon

Announce: OpenSSH 5.1 released

OpenSSH 5.1 has just been released. It will be available from the
mirrors listed at http://www.openssh.com/ shortly.

OpenSSH is a 100% complete SSH protocol version 1.3, 1.5 and 2.0
implementation and includes sftp client and server support.

We have also recently completed another Internet SSH usage scan, the 
results of which may be found at http://www.openssh.com/usage.html

Once again, we would like to thank the OpenSSH community for their
continued support of the project, especially those who contributed
code or patches, reported bugs, tested snapshots or donated to the
project. More information on donations may be found at:
http://www.openssh.com/donations.html

Changes since OpenSSH 5.0
=========================

Security:

 * sshd(8): Avoid X11 man-in-the-middle attack on HP/UX (and possibly
   other platforms) when X11UseLocalhost=no

   When attempting to bind(2) to a port that has previously been bound
   with SO_REUSEADDR set, most operating systems check that either the
   effective user-id matches the previous bind (common on BSD-derived
   systems) or that the bind addresses do not overlap (Linux and
   Solaris).

   Some operating systems, such as HP/UX, do not perform these checks
(Continue reading)

Permalink | Reply | 0 comments |
headers
Kenneth R Westerback | 30 May 04:35

The OpenBSD Foundation Announces Support for C2K8

FOR IMMEDIATE RELEASE

From: The OpenBSD Foundation
Contact: directors <at> openbsdfoundation.org
Date: May 28, 2008

THE OPENBSD FOUNDATION ANNOUNCES SUPPORT FOR C2K8 CONFERENCE

The OpenBSD Foundation is pleased to announce that it has completed
arrangements with the University of Alberta in Edmonton to host the
2008 Annual OpenBSD Developer's Conference (C2K8 Hackathon)
from June 7 to June 15, 2008.

The facility support from the University of Alberta Computer Science
Department will provide C2K8 the best facilities yet for the annual
OpenBSD Developer Conference. C2K8 will be the 10th annual event of
its kind. Previous hackathons have produced tools such as the PF
firewall, OpenBGP, relayd and spamd, as well as innumerable
critical improvements to OpenBSD, OpenSSH, and related projects.

This year, the OpenBSD Foundation will disburse approximately
$15,000
to support C2K8, enabling more than 50 OpenBSD developers from
around
the world to attend this important event. The Foundation thanks
all who have generously donated the resources to make C2K8
possible.

The OpenBSD Foundation relies on donations of money and equipment
from
(Continue reading)

Permalink | Reply | 0 comments |
headers
Theo de Raadt | 1 May 00:00
Favicon

OpenBSD 4.3 released May 1, 2008


------------------------------------------------------------------------
- OpenBSD 4.3 RELEASED -------------------------------------------------

May 1, 2008.

We are pleased to announce the official release of OpenBSD 4.3.
This is our 23nd release on CD-ROM (and 24rd via FTP).  We remain
proud of OpenBSD's record of more than ten years with only two remote
holes in the default install.

As in our previous releases, 4.3 provides significant improvements,
including new features, in nearly all areas of the system:

- New/extended platforms:
    o OpenBSD/sparc64.
      SMP support. This should work on all supported systems, with
      the exception of the Sun Enterprise 10000.
    o OpenBSD/hppa.
      K-class servers like the K200 and K410 are supported now.
    o OpenBSD/mvme88k
      SMP support on MVME188 and MVME188A systems.
      88110 processor, and thus MVME197LE/SP/DP boards, are supported now.
    o OpenBSD/sgi.
      Contains many new drivers, however the kernel requires an important
      errata fix.

- Improved hardware support, including:
    o The bge(4) driver now supports BCM5906/BCM5906M 10/100 and BCM5755
      10/100/Gigabit Ethernet devices.
(Continue reading)

Permalink | Reply | 1 comment |
headers
Mark Kettenis | 3 Apr 22:58
Favicon

UltraSPARC T1 support

Yesterday I committed the last bit of code to support machines with
Sun's UltraSPARC T1 CPUs.  Below is a dmesg for the SPARC Enterprise
T1000, and although other machines have not been tested yet, machines
like the SPARC Enterprise T2000 and Sun Blade T6300 are expected to
work too.  As you can see, we support SMP right from the start.

All this is included in a standard OpenBSD/sparc64 kernel.  Snapshots
with UltraSPARC T1 support are now available at ftp.openbsd.org and
its mirrors.  It would be great if people could try these snapshots on
a few more UltraSPARC T1 machines.

LDOM support is not yet complete; I'm still working on drivers for
virtual network interfaces and virtual disks.  But domains with access
to real hardware should work fine.

UltraSPARC T2 machines are not yet supported, but hopefully that'll
change soon.

Cheers,

Mark

console is /virtual-devices <at> 100/console <at> 1
Copyright (c) 1982, 1986, 1989, 1991, 1993
	The Regents of the University of California.  All rights reserved.
Copyright (c) 1995-2008 OpenBSD. All rights reserved.  http://www.OpenBSD.org

OpenBSD 4.3-current (GENERIC.MP) #3: Thu Apr  3 21:13:13 CEST 2008
    kettenis <at> gershwin.sibelius.xs4all.nl:/usr/src/sys/arch/sparc64/compile/GENERIC.MP
real mem = 17045651456 (16256MB)
(Continue reading)

Permalink | Reply | 0 comments |
headers
Damien Miller | 3 Apr 12:44
Favicon

Announce: OpenSSH 5.0 released

OpenSSH 5.0 has just been released. It will be available from the
mirrors listed at http://www.openssh.com/ shortly.

We apologise for any inconvenience resulting from this release
being made so shortly after 4.9. Unfortunately we only learned of
the below security issue from the public CVE report. The Debian
OpenSSH maintainers responsible for handling the initial report of
this bug failed to report it via either the private OpenSSH security
contact list (openssh <at> openssh.com) or the portable OpenSSH Bugzilla
(http://bugzilla.mindrot.org/).

We ask anyone wishing to report security bugs in OpenSSH to please use
the openssh <at> openssh.com contact and to practice responsible disclosure.

OpenSSH is a 100% complete SSH protocol version 1.3, 1.5 and 2.0
implementation and includes sftp client and server support.

Once again, we would like to thank the OpenSSH community for their
continued support of the project, especially those who contributed
code or patches, reported bugs, tested snapshots and purchased
T-shirts or posters.

T-shirt, poster and CD sales directly support the project. Pictures
and more information can be found at:
        http://www.openbsd.org/tshirts.html and
	http://www.openbsd.org/orders.html

For international orders use http://https.openbsd.org/cgi-bin/order
and for European orders, use http://https.openbsd.org/cgi-bin/order.eu
(Continue reading)

Permalink | Reply | 0 comments |
headers
Todd C. Miller | 1 Apr 16:26

Mailing list downtime: April 5th

The OpenBSD mailing lists will be down on Saturday April 5th from
4am MDT to 6pm MDT for machine room maintainance.  This will also
affect anoncvs3.usa.openbsd.org and ftp.usa.openbsd.org which are
located in the same machine room.

 - todd
Permalink | Reply | 0 comments |
headers
Damien Miller | 31 Mar 03:31
Favicon

Announce: OpenSSH 4.9 released

OpenSSH 4.9 has just been released. It will be available from the
mirrors listed at http://www.openssh.com/ shortly.

OpenSSH is a 100% complete SSH protocol version 1.3, 1.5 and 2.0
implementation and includes sftp client and server support.

Once again, we would like to thank the OpenSSH community for their
continued support of the project, especially those who contributed
code or patches, reported bugs, tested snapshots and purchased
T-shirts or posters.

T-shirt, poster and CD sales directly support the project. Pictures
and more information can be found at:
        http://www.openbsd.org/tshirts.html and
	http://www.openbsd.org/orders.html

For international orders use http://https.openbsd.org/cgi-bin/order
and for European orders, use http://https.openbsd.org/cgi-bin/order.eu

Note that OpenSSH 4.8 was an OpenBSD-only release shipped with the
OpenBSD 4.3 CD.

Changes since OpenSSH 4.7:
============================

Security:

 * Disable execution of ~/.ssh/rc for sessions where a command has been
   forced by the sshd_config ForceCommand directive. Users who had
   write access to this file could use it to execute abritrary commands.
(Continue reading)

Permalink | Reply | 0 comments |
headers
Mathieu Arnold | 30 Mar 22:50
Favicon

Call for Papers: Eurobsdcon2008 in Strasbourg, France


		       EuroBSDcon 2008: Family Meeting

    The European BSD Conference, October 18-19th 2008, Strasbourg, France

FreeBSD, NetBSD, OpenBSD, MacOS X, DragonFlyBSD, PC-BSD, DesktopBSD: Are you
doing interesting things with one of these BSD based operating system?

Anything hot you are working on?  Come to Strasbourg and talk about it!

EuroBSDCon is a conference for users and developers on BSD based systems.  We
are looking for papers about all aspects of BSD based operating systems
especially if you can tell our audience something new about:

    * Products embedding BSD systems
    * Desktop computing with BSD systems
    * BSD based products, how, why, what
    * How you are reworking ports pkgsrc
    * What are the BSD developers working on now
    * Virtualizing BSD based systems
    * Installing BSD system on your coffee machine
    * File systems, networking, security, and general kernel hacking
    * Tools for monitoring, measuring, debugging, and optimizing BSD systems
    * The science and art of open source programming

Extended abstract (two A4 pages) in English, with an outline of your proposed
talk, a few keywords and a bit about yourself should be sent to us by email at
pc <at> eurobsdcon.org before June 1st 2008.

If you are interested in presenting a tutorial, please let us know.
(Continue reading)

Permalink | Reply | 0 comments |
headers
Todd C. Miller | 26 Jan 00:34

mailing list server downtime

The OpenBSD mailing list server will be down from 5am to 6pm MST
on Saturday, Jan 26th.  Facilities needs to shut down the computer
room cooling system for some plumbing work, and they are scheduled
to finish by 6pm.  If they finish earlier the list server will be
back sooner.

This also affects anoncvs3.usa.openbsd.org which resides in the
same machine room.

 - todd
Permalink | Reply | 1 comment |

Gmane