gmane.os.openbsd.announce

Revised: OpenSSH security advisory: cbc.adv

Damien Miller — 2008-11-23T21:58:55

Hi, There was an error in the original advisory. The estimate of 32768 attempts to carry out a successful attack is incorrect. The correct estimate is 11356 attempts. A revised version is now available at: http://www.openssh.com/txt/cbc.adv The advisory and its recommendations are otherwise unchanged. -d

OpenSSH security advisory: cbc.adv

Damien Miller — 2008-11-21T10:19:03

OpenSSH Security Advisory: cbc.adv Regarding the "Plaintext Recovery Attack Against SSH" reported as CPNI-957037[1]: The OpenSSH team has been made aware of an attack against the SSH protocol version 2 by researchers at the University of London. Unfortunately, due to the report lacking any detailed technical description of the attack and CPNI's unwillingness to share necessary information, we are unable to properly assess its impact. Based on the description contained in the CPNI report and a slightly more detailed description forwarded by CERT this issue appears to be substantially similar to a known weakness in the SSH binary packet protocol first described in 2002 by Bellare, Kohno and Namprempre[2]. The new component seems to be an attack that can recover 14 bits of plaintext with a success probability of 2^-14, though we suspect this underestimates the work required by a practical attack. For most SSH usage scenarios, this attack has a very low likelihood of being carried out successfully - each att

DCBSDCon 2009 Call for Papers

Jason Dixon — 2008-11-01T05:43:54

The DCBSDCon conference has opened up a Call for Papers for the 2009 event. Speakers are welcome to submit any topic of interest, although security themes are preferred. This conference leads up to the very popular ShmooCon hacker convention in Washington, D.C. where OpenBSD developers and users are always in attendance. Main Website: http://www.dcbsdcon.org/ Call For Papers: http://www.dcbsdcon.org/cfp.html P.S. ShmooCon registration opens Saturday, November 1 at 12pm EDT. If you're planning to attend both events, make sure you register for their event. Previous attendees know how hard it can be to get tickets. ShmooCon: http://www.shmoocon.org/registration.html Hope to see you there!

OpenBSD 4.4 released, Nov 1. Enjoy!

Theo de Raadt — 2008-10-31T16:34:14

------------------------------------------------------------------------ - OpenBSD 4.4 RELEASED ------------------------------------------------- Nov 1, 2008. We are pleased to announce the official release of OpenBSD 4.4. This is our 24th release on CD-ROM (and 25th via FTP). We remain proud of OpenBSD's record of more than ten years with only two remote holes in the default install. As in our previous releases, 4.4 provides significant improvements, including new features, in nearly all areas of the system: - New/extended platforms: o OpenBSD/sparc64. Fujitsu's SPARC64-V, SPARC64-VI and SPARC64-VII processors are supported now, which means that many of the PRIMEPOWER machines and the SPARC Enterprise M4000/M5000/M8000/M9000 work now. Sun's UltraSPARC VI processors are supported now. Many of Sun's mid-range and high-end servers with these processors or UltraSPARC III and UltraSPARC III+ processors work now. Sun's UltraSPARC T1 and UltraSPARC T2 processors

Announce: OpenSSH 5.1 released

Damien Miller — 2008-07-22T00:11:49

OpenSSH 5.1 has just been released. It will be available from the mirrors listed at http://www.openssh.com/ shortly. OpenSSH is a 100% complete SSH protocol version 1.3, 1.5 and 2.0 implementation and includes sftp client and server support. We have also recently completed another Internet SSH usage scan, the results of which may be found at http://www.openssh.com/usage.html Once again, we would like to thank the OpenSSH community for their continued support of the project, especially those who contributed code or patches, reported bugs, tested snapshots or donated to the project. More information on donations may be found at: http://www.openssh.com/donations.html Changes since OpenSSH 5.0 ========================= Security: * sshd(8): Avoid X11 man-in-the-middle attack on HP/UX (and possibly other platforms) when X11UseLocalhost=no When attempting to bind(2) to a port that has previously been bound with SO_REUSEADDR set, most operating systems check that either the effective user-id mat

The OpenBSD Foundation Announces Support for C2K8

Kenneth R Westerback — 2008-05-30T02:39:04

FOR IMMEDIATE RELEASE From: The OpenBSD Foundation Contact: directors< at >openbsdfoundation.org Date: May 28, 2008 THE OPENBSD FOUNDATION ANNOUNCES SUPPORT FOR C2K8 CONFERENCE The OpenBSD Foundation is pleased to announce that it has completed arrangements with the University of Alberta in Edmonton to host the 2008 Annual OpenBSD Developer's Conference (C2K8 Hackathon) from June 7 to June 15, 2008. The facility support from the University of Alberta Computer Science Department will provide C2K8 the best facilities yet for the annual OpenBSD Developer Conference. C2K8 will be the 10th annual event of its kind. Previous hackathons have produced tools such as the PF firewall, OpenBGP, relayd and spamd, as well as innumerable critical improvements to OpenBSD, OpenSSH, and related projects. This year, the OpenBSD Foundation will disburse approximately $15,000 to support C2K8, enabling more than 50 OpenBSD developers from around the world to attend this important event. The Foundation thanks all who have generous

Thu gui tu The Transport Journal Online

The Transport Journal Online — 2008-05-21T08:51:52

Gui quy ban doc! The Transport Journal Online la kenh thong tin chuyen nganh Giao thong van tai Viet Nam. The Transport Journal Online gioi thieu toan canh ve cac linh vuc Giao thong van tai: hang hai, hang khong, duong sat, duong bo, duong thuy, dong tau, du an & quan ly du an va dang kiem... cua Nganh Giao thong van tai Viet Nam va quoc te. The Transport Journal Online lien tuc cap nhat nhung tin tuc va hoat dong tren cac linh vuc Giao thong van tai - Dong thoi cung cap cho cac doanh nghiep nhung dich vu: quang ba thuong hieu, giao dich truc tuyen, nghien cuu thi truong... Ban co the truy cap tai dia chi http://www.transportjournal.com.vn Muon xem day du thong tin ban can dang ky de nhan duoc Ten truy cap va Mat khau. Dang ky tai day Ban bien tap THE TRANSPORT JOURNAL ONLINE Tel : +84. 8. 8239645 Fax : +84. 8. 6126265 E-mail : info< at >transportjournal.com.vn Website : http://www.transportjournal.com.vn

OpenBSD 4.3 released May 1, 2008

Theo de Raadt — 2008-04-30T22:00:55

------------------------------------------------------------------------ - OpenBSD 4.3 RELEASED ------------------------------------------------- May 1, 2008. We are pleased to announce the official release of OpenBSD 4.3. This is our 23nd release on CD-ROM (and 24rd via FTP). We remain proud of OpenBSD's record of more than ten years with only two remote holes in the default install. As in our previous releases, 4.3 provides significant improvements, including new features, in nearly all areas of the system: - New/extended platforms: o OpenBSD/sparc64. SMP support. This should work on all supported systems, with the exception of the Sun Enterprise 10000. o OpenBSD/hppa. K-class servers like the K200 and K410 are supported now. o OpenBSD/mvme88k SMP support on MVME188 and MVME188A systems. 88110 processor, and thus MVME197LE/SP/DP boards, are supported now. o OpenBSD/sgi. Contains many new drivers, however the kernel requires an important errata

UltraSPARC T1 support

Mark Kettenis — 2008-04-03T20:59:37

Yesterday I committed the last bit of code to support machines with Sun's UltraSPARC T1 CPUs. Below is a dmesg for the SPARC Enterprise T1000, and although other machines have not been tested yet, machines like the SPARC Enterprise T2000 and Sun Blade T6300 are expected to work too. As you can see, we support SMP right from the start. All this is included in a standard OpenBSD/sparc64 kernel. Snapshots with UltraSPARC T1 support are now available at ftp.openbsd.org and its mirrors. It would be great if people could try these snapshots on a few more UltraSPARC T1 machines. LDOM support is not yet complete; I'm still working on drivers for virtual network interfaces and virtual disks. But domains with access to real hardware should work fine. UltraSPARC T2 machines are not yet supported, but hopefully that'll change soon. Cheers, Mark console is /virtual-devices< at >100/console< at >1 Copyright (c) 1982, 1986, 1989, 1991, 1993 The Regents of the University of California. All rights reserved. Copyright (c)

Announce: OpenSSH 5.0 released

Damien Miller — 2008-04-03T10:48:30

OpenSSH 5.0 has just been released. It will be available from the mirrors listed at http://www.openssh.com/ shortly. We apologise for any inconvenience resulting from this release being made so shortly after 4.9. Unfortunately we only learned of the below security issue from the public CVE report. The Debian OpenSSH maintainers responsible for handling the initial report of this bug failed to report it via either the private OpenSSH security contact list (openssh< at >openssh.com) or the portable OpenSSH Bugzilla (http://bugzilla.mindrot.org/). We ask anyone wishing to report security bugs in OpenSSH to please use the openssh< at >openssh.com contact and to practice responsible disclosure. OpenSSH is a 100% complete SSH protocol version 1.3, 1.5 and 2.0 implementation and includes sftp client and server support. Once again, we would like to thank the OpenSSH community for their continued support of the project, especially those who contributed code or patches, reported bugs, tested snapshots and purchased T-shirts

Mailing list downtime: April 5th

Todd C. Miller — 2008-04-01T14:30:15

The OpenBSD mailing lists will be down on Saturday April 5th from 4am MDT to 6pm MDT for machine room maintainance. This will also affect anoncvs3.usa.openbsd.org and ftp.usa.openbsd.org which are located in the same machine room. - todd

Announce: OpenSSH 4.9 released

Damien Miller — 2008-03-31T01:35:53

OpenSSH 4.9 has just been released. It will be available from the mirrors listed at http://www.openssh.com/ shortly. OpenSSH is a 100% complete SSH protocol version 1.3, 1.5 and 2.0 implementation and includes sftp client and server support. Once again, we would like to thank the OpenSSH community for their continued support of the project, especially those who contributed code or patches, reported bugs, tested snapshots and purchased T-shirts or posters. T-shirt, poster and CD sales directly support the project. Pictures and more information can be found at: http://www.openbsd.org/tshirts.html and http://www.openbsd.org/orders.html For international orders use http://https.openbsd.org/cgi-bin/order and for European orders, use http://https.openbsd.org/cgi-bin/order.eu Note that OpenSSH 4.8 was an OpenBSD-only release shipped with the OpenBSD 4.3 CD. Changes since OpenSSH 4.7: ============================ Security: * Disable execution of ~/.ssh/rc for sessions where a command has been fo

Call for Papers: Eurobsdcon2008 in Strasbourg, France

Mathieu Arnold — 2008-03-30T20:52:04

EuroBSDcon 2008: Family Meeting The European BSD Conference, October 18-19th 2008, Strasbourg, France FreeBSD, NetBSD, OpenBSD, MacOS X, DragonFlyBSD, PC-BSD, DesktopBSD: Are you doing interesting things with one of these BSD based operating system? Anything hot you are working on? Come to Strasbourg and talk about it! EuroBSDCon is a conference for users and developers on BSD based systems. We are looking for papers about all aspects of BSD based operating systems especially if you can tell our audience something new about: * Products embedding BSD systems * Desktop computing with BSD systems * BSD based products, how, why, what * How you are reworking ports pkgsrc * What are the BSD developers working on now * Virtualizing BSD based systems * Installing BSD system on your coffee machine * File systems, networking, security, and general kernel hacking * Tools for monitoring, measuring, debugging, and optimizing BSD systems * The science and art o

mailing list server downtime

Todd C. Miller — 2008-01-25T23:35:30

The OpenBSD mailing list server will be down from 5am to 6pm MST on Saturday, Jan 26th. Facilities needs to shut down the computer room cooling system for some plumbing work, and they are scheduled to finish by 6pm. If they finish earlier the list server will be back sooner. This also affects anoncvs3.usa.openbsd.org which resides in the same machine room. - todd

ComixWall 4.2 released

Soner Tari — 2008-01-06T12:52:44

I am pleased to announce that ComixWall ISG 4.2 has been released. ComixWall is an Internet Security Gateway (ISG): FOSS UTM firewall running on OpenBSD, with a user-friendly web interface for administration and monitoring. ComixWall is unique, first of its kind in many ways. Highlights of this release are: - OpenBSD 4.2-stable, i.e. includes all of the stable patches as of December - Support for both amd64 and i386 architectures, thus there are 2 installation CD images - Upgrade support, from ComixWall 4.1b amd64 to 4.2 amd64 - New install/upgrade scripts, based on OpenBSD installation scripts - xbase install set stripped down to save space on the CD image and the file system - SnortIPS: Intrusion Prevention System (IPS) based on snort alerts, totally relies on pfctl - Snort 2.8.0.1: Intrusion Detection System (IDS), with alerts log rotate and 64-bit time stamp patches - ClamAV 0.92: Anti-virus scanner - DansGuardian 2.9.9.2 with clamd: Content scanning web filter - IMSpector, CVS build as of 20071130: Mes

The Book of PF by Peter N.M. Hansteen.

Austin Hook — 2007-12-24T16:28:01

The Book of PF by Peter N.M. Hansteen. Book blurb: The Book of PF is a practical, how-to guide to building the network you need with the powerful BSD Packet Filter, PF. From simple NAT to load balancing, queues, and more, there's something for every BSD admin. http://www.nostarch.com/pf.htm This book has now been printed and is in transit or already arrived at your favorite computer book store. We would also like to announce it's availablity on the OpenBSD website, where part of the proceeds goes to help support the project: http://www.openbsd.org/orders.html

AsiaBSDCon 2008 in Tokyo - extension of submission deadline

Hiroki Sato — 2007-11-28T19:55:39

Hello, AsiaBSDCon 2008 will be held in March 27-30, 2008, in Tokyo. We are now requesting proposals for papers, presentations, and tutorials. The submission deadline has been extended to December 11, 2007. Due to some server problems submission interface in the official web site is not ready yet, so please submit your proposal directly to secretary< at >asiabsdcon.org via email (submission via web site will be available this weekend). Also, if you are interested in attending the conference, please subscribe the announce mailing list. See http://lists.asiabsdcon.org/mailman/listinfo/announce for details. You can find the last time conference program, proceedings, and so on at http://2007.asiabsdcon.org/. Important dates: 11 December 2007 (extended) Extended abstracts for papers and presentations acceptance ends. 24 December 2007 Authors and presenters notified by the program committee. 31 January 2008 Final papers and presentations due. 27-30 March 2008 Day of the confere

OpenBSD 4.2 released Nov 1, 2007

Theo de Raadt — 2007-11-01T02:16:50

------------------------------------------------------------------------ - OpenBSD 4.2 RELEASED ------------------------------------------------- Nov 1, 2007. We are pleased to announce the official release of OpenBSD 4.2. This is our 22nd release on CD-ROM (and 23rd via FTP). We remain proud of OpenBSD's record of more than ten years with only two remote holes in the default install. We dedicate this release to the memory of long-time developer Jun-ichiro "itojun" Itoh Hagino, who focused his life on IPv6 deployment for everyone. Without his BSD and IETF participation, IPv6 would not be where it is today. Only now people are becoming aware of his numerous contributions because he took credit for much less than he accomplished. The developers in our project will all miss him. As in our previous releases, 4.2 provides significant improvements, including new features, in nearly all areas of the system: - New/extended platforms: o OpenBSD/sparc64. The PCIe UltraSPARC IIIi machines like the V

4.2 song

Theo de Raadt — 2007-10-06T17:55:11

Just back from my (hiking) trip, I am happy to announce the 4.2 song has been added to the lyrics page at http://www.openbsd.org/lyrics.html Yes, it is designed to sound like a mid-era Rush song, ie. something from Grace Under Pressure or such. And there's a few easter eggs hidden in the song as well. It also explains the inside sleeve image...

Announce: OpenSSH 4.7 released

Damien Miller — 2007-09-05T00:14:09

OpenSSH 4.7 has just been released. It will be available from the mirrors listed at http://www.openssh.com/ shortly. OpenSSH is a 100% complete SSH protocol version 1.3, 1.5 and 2.0 implementation and includes sftp client and server support. Once again, we would like to thank the OpenSSH community for their continued support of the project, especially those who contributed code or patches, reported bugs, tested snapshots and purchased T-shirts or posters. T-shirt, poster and CD sales directly support the project. Pictures and more information can be found at: http://www.openbsd.org/tshirts.html and http://www.openbsd.org/orders.html For international orders use http://https.openbsd.org/cgi-bin/order and for European orders, use http://https.openbsd.org/cgi-bin/order.eu Changes since OpenSSH 4.6: ============================ Security bugs resolved in this release: * Prevent ssh(1) from using a trusted X11 cookie if creation of an untrusted cookie fails; found and fixed by Jan Pechan

EuroBSDCon 2007 - less than four weeks!

Simon L. Nielsen — 2007-08-21T20:47:34

DO NOT MISS THE EUROPEAN BSD EVENT OF THE YEAR ============================================== EuroBSDCon 2007 September 14th - 15th 2007 ------------------------------- The sixth EuroBSDCon - the annual European BSD conference for users and developers begins Friday September 14th. It's being held at Symbion Science Park in Copenhagen, Denmark. Come, meet and talk to BSD people from all over the world. Program ------- 20+ interesting speakers in a program which includes: Kirk McKusick: Kirk is the epitome of BSD - an all-time Berkley guy will talk about the history of the UFS file system. Sam Leffler: Sam is another of the original BSD people. For a while he has been working a lot with wireless networks and and his name can be found in a lot of the open source wireless code. At the conference he will be talking about long distance wireless. Marc Balmer: Marc became an active OpenBSD developer in 2004 and has since be responsible for several promi