http://blog.gmane.org/gmane.os.netbsd.announce hourly 1 1901-01-01T00:00+00:00 http://gmane.org/img/gmane-25t.png http://gmane.org http://comments.gmane.org/gmane.os.netbsd.announce/497 <pre>On behalf of NetBSD developers, I'm happy to announce the availability of the second (and final) public beta of NetBSD 6.0, for testing. Binaries of NetBSD 6.0_BETA2 are available for download at: ftp://ftp.netbsd.org/pub/NetBSD/NetBSD-6.0_BETA2/ ISO images and (for amd64 and i386) images suitable for installing from USB sticks or other hard drives, and torrent files for downloading via BitTorrent are available here: ftp://ftp.netbsd.org/pub/NetBSD/NetBSD-6.0_BETA2/images/ We are very pleased with the state of NetBSD 6.0_BETA2. With your help, we have made improvements since NetBSD 6.0_BETA. A sampling: - Fixed PR/39444 - fixes to hdaudio - fixes to LFS - fixed detaching ehci(4) - PR/41673 - PR/44097 - Added the ability to configure RAIDframe components on raw disks. - Fixed iwi(4) firmware decoding on bigendian platforms. - more variants supported by mfi(4) - PR/46217 - Prevent sshd from consuming all available entropy. - Update pcc to pcc-20120325. - Power management for bthub(4). - PR/45829 - PR/46</pre> riz< at >NetBSD.org 2012-05-26T17:13:51 http://comments.gmane.org/gmane.os.netbsd.announce/496 <pre>Hi! I've just finished branching the pkgsrc-2012Q1 release. There's no special announcement... just enjoy the release :) Thomas </pre> Thomas Klausner 2012-04-07T15:06:15 http://comments.gmane.org/gmane.os.netbsd.announce/495 <pre>On behalf of NetBSD developers, I'm happy to announce the availability of a public beta of NetBSD 6.0, for your testing pleasure. (For a more-marked-up version of this announcment, see the NetBSD blog: http://blog.NetBSD.org/tnf/entry/netbsd_6_0_beta_binaries ) This beta is substantially feature-complete; there may be some additional changes to the installer and possibly some additional hardware support if some is found missing and is easily added, but the major changes are done. What we need now is for you, the end users, to test it in your preferred configuration. Please DO keep in mind, however, that this is a beta release; we fully expect there are some lurking bugs, so use with caution. Binaries of NetBSD 6.0_BETA are available for download at: ftp://ftp.NetBSD.org/pub/NetBSD/NetBSD-6.0_BETA/ Bootable (for many arches) ISO images are also available, in ftp://ftp.NetBSD.org/pub/NetBSD/NetBSD-6.0_BETA/iso Here are some highlighted changes since NetBSD 5.0. As always, full details can be </pre> riz< at >NetBSD.org 2012-03-13T19:46:52 http://comments.gmane.org/gmane.os.netbsd.announce/494 <pre>*** NetBSD/xen available for Multi-Processor machines The NetBSD Foundation is pleased to announce completion of Multiprocessing Support for the port of its Open Source Operating System to the Xen hypervisor. The NetBSD Fundation started the Xen MP project 8 month ago; the goal was to add SMP support to NetBSD/Xen domU kernels. This project has officially completed, and after a few bug fixes in the pmap(9) code it is now considered stable on both i386 and amd64. NetBSD 6.0 will ship with option MULTIPROCESSOR enabled by default for Xen domU kernels. The availability of Xen MP support in NetBSD allows to run the NetBSD Open Source Operating Systems on a range of available infrastructure providers' systems. Amazon's Web Services with their Elastic Cloud Computing is a prominent examples here. Xen is a virtualization software that enables several independent operating system instances ("domains") to run concurrently on the same computer hardware. The hardware is managed by the first domain (dom0), and furth</pre> Manuel Bouyer 2012-03-06T18:22:44 http://comments.gmane.org/gmane.os.netbsd.announce/493 <pre>EuroBSDcon 2012 =============== EuroBSDcon is the European technical conference for users and developers on BSD-based systems. The EuroBSDcon 2012 conference will be held in Warsaw, Poland from Thursday 18 October 2012 to Sunday 21 October 2012, with tutorials on Thursday and Friday and talks on Saturday and Sunday. Call for Proposals ------------------ The EuroBSDcon conference is inviting developers and users of BSD-based systems to submit innovative and original papers not submitted to other European conferences on BSD-related topics. Topics of interest to the conference include, but are not limited to applications, architecture, implementation, performance and security of BSD-based operating systems, as well as topics concerning the economic or organizational aspects of BSD use. Presentations are expected to be 45 minutes. Call for Tutorial Proposals --------------------------- The EuroBSDcon conference is inviting qualified practitioners in their field to submit proposals for half or full day tut</pre> Joerg Sonnenberger 2012-03-04T16:07:06 http://comments.gmane.org/gmane.os.netbsd.announce/491 <pre>On behalf of the NetBSD developers, I am pleased to announce that NetBSD 5.1.2 is now available for download. NetBSD 5.1.2 is the second critical/security update of the NetBSD 5.1 release branch. It represents a selected subset of fixes deemed critical for security or stability reasons. All users are encouraged to upgrade. For full details, please see the release notes at: http://www.NetBSD.org/releases/formal-5/NetBSD-5.1.2.html ISO images can be downloaded using BitTorrent, and we encourage users who wish to install via ISO images to take advantage of this, as the images are well seeded. http://www.NetBSD.org/mirrors/torrents/ Complete source and binaries for NetBSD 5.1.2 are available for download at many sites around the world. A list of download sites providing FTP, HTTP, AnonCVS, and other services can be found at: http://www.NetBSD.org/mirrors/ ======================================================================== NetBSD 5.1.2 is dedicated to the memory of Yoshihiro Masuda, wh</pre> Soren Jacobsen 2012-02-11T04:29:37 http://comments.gmane.org/gmane.os.netbsd.announce/490 <pre> The 16th NetBSD hackathon will be run from February 10th to February 12th. Our goal is fixing all the bugs that need fixing to get NetBSD-current ready for the creation of the NetBSD 6.0 release branch. Everybody that has an interest in NetBSD, from developers, documentation writers, translators, to advanced users are invited to attend. To make sure that NetBSD users get the best possible experience of the new release we would like to fix as many bugs as possible. For a list of bugs and more information look at the Wiki Page under &lt;https://wiki.netbsd.org/hackathon/&gt; please. If you are able to help us fixing these bugs by supplying patches or testing fixes please consider to participate. We are also in need of people to supply documentation fixes, preferably in the form of patches. Release notes and/or manual pages! Join us on the IRC channel #netbsd-code on freenode (irc.freenode.net). Just join, have a look around and ask your questions or what work needs to be done. We are looking forward to seeing </pre> Matthias Scheler 2012-02-03T19:06:47 http://comments.gmane.org/gmane.os.netbsd.announce/489 <pre>Dear all, {mail, www, anoncvs, blog, wiki, releng}.NetBSD.org are changing IPv4 address from something in 204.152.190 to something in 149.20.53. Do not be alarmed. :) There may be some glitches due to IP addresses hiding in unexpected corners; we apologize in advance for any issues caused by the renumbering. The old addresses are going to be available at least another week. best regards, spz </pre> S.P.Zeidler 2012-01-31T20:04:41 http://comments.gmane.org/gmane.os.netbsd.announce/488 <pre>-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 NetBSD Security Advisory 2011-008 ================================= Topic:OpenPAM privilege escalation Version:NetBSD-current:affected prior to 20111109 NetBSD 5.1:affected prior to 20111119 NetBSD 5.0:affected prior to 20111119 NetBSD 4.0.*:affected prior to 20111119 NetBSD 4.0:affected prior to 20111119 pkgsrc:security/openpam package prior to 20111213 Severity:Privilege escalation Fixed:NetBSD-current:Nov 9th, 2011 NetBSD-5-1 branch:Nov 19th, 2011 NetBSD-5-0 branch:Nov 19th, 2011 NetBSD-5 branch:Nov 19th, 2011 NetBSD-4-0 branch:Nov 19th, 2011 NetBSD-4 branch:Nov 19th, 2011 pkgsrc security/openpam: openpam-20071221nb1 Please note that NetBSD releases prior to 4.0 are no longer supported. It is recommended that all users upgrade to a supported release. Abstract ======== The pam_start() function of OpenPAM doesn't check the "service" argument. With a relative path it can be tricked into readin</pre> NetBSD Security Officer 2011-12-18T23:31:51 http://comments.gmane.org/gmane.os.netbsd.announce/487 <pre>-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 NetBSD Security Advisory 2011-009 ================================= Topic:BIND resolver DoS Version:NetBSD-current:affected prior to 20111116 NetBSD 5.1:affected prior to 20111118 NetBSD 5.0:affected prior to 20111118 NetBSD 4.0.*:affected prior to 20111120 NetBSD 4.0:affected prior to 20111120 pkgsrc:net/bind96, net/bind97 and net/bind98 packages prior to 20111116 Severity:Denial of Service Fixed:NetBSD-current:Nov 16th, 2011 NetBSD-5-1 branch:Nov 18th, 2011 NetBSD-5-0 branch:Nov 18th, 2011 NetBSD-5 branch:Nov 18th, 2011 NetBSD-4-0 branch:Nov 20th, 2011 NetBSD-4 branch:Nov 20th, 2011 pkgsrc net/bind96:bind-9.6.3.1.ESV.5pl1 mitigates this issue pkgsrc net/bind97:bind-9.7.4pl1 mitigates this issue pkgsrc net/bind98:bind-9.8.1pl1 mitigates this issue Please note that NetBSD releases prior to 4.0 are no longer supported. It is recommended that all users upgrad</pre> NetBSD Security Officer 2011-12-16T00:00:54 http://comments.gmane.org/gmane.os.netbsd.announce/486 <pre>-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 NetBSD Security Advisory 2011-008 ================================= Topic:OpenPAM privilege escalation Version:NetBSD-current:affected prior to 20111109 NetBSD 5.1:affected prior to 20111119 NetBSD 5.0:affected prior to 20111119 NetBSD 4.0.*:affected prior to 20111119 NetBSD 4.0:affected prior to 20111119 pkgsrc:security/openpam package prior to 20111213 Severity:Privilege escalation Fixed:NetBSD-current:Nov 9th, 2011 NetBSD-5-1 branch:Nov 19th, 2011 NetBSD-5-0 branch:Nov 19th, 2011 NetBSD-5 branch:Nov 19th, 2011 NetBSD-4-0 branch:Nov 19th, 2011 NetBSD-4 branch:Nov 19th, 2011 pkgsrc security/openpam: openpam-20071221nb1 Please note that NetBSD releases prior to 4.0 are no longer supported. It is recommended that all users upgrade to a supported release. Abstract ======== The pam_start() function of OpenPAM doesn't check the "service" argument. With a relative path it can be tricked into readin</pre> NetBSD Security Officer 2011-12-16T00:00:14 http://comments.gmane.org/gmane.os.netbsd.announce/485 <pre>ftp.netbsd.org will be offline tomorrow, 15 December 2011, during a 6.5-hour window between 16:30 and 22:00 UTC. We expect total downtime to be less than two hours during this window. The machine is being moved to a new location which hopefully will allow for more traffic growth. </pre> Jeff Rizzo 2011-12-14T16:52:59 http://comments.gmane.org/gmane.os.netbsd.announce/484 <pre>Hello, On September 13th, 2011, the Board of Directors posted a news item [1] requesting project specifications to get rid of the big kernel lock surrounding the networking code. Unfortunately, nobody has taken advantage of the offer and, therefore, the Board has not received any applications to this date. In order to lower the entry barrier, the Board has prepared a set of smaller project proposals that, in aggregate, help in achieving the goal of making the networking stack suitable for SMP systems. Please note that these projects cover a very wide range of topics: there are projects whose only purpose is to add new data structures to the kernel, while others involve refactoring parts of the existing code to make adding locking easier. The list of projects for funding and the tentative plan can be found in the new SMP Networking project page [2]. All of the individual projects that can help in achieving the goal of SMP Networking are suitable for funding. If you are interested in applying for any of </pre> Julio Merino 2011-11-25T22:10:46 http://comments.gmane.org/gmane.os.netbsd.announce/483 <pre>Dear all, please be advised that anoncvs.NetBSD.org and ftp.NetBSD.org will have a planned outage roughly 18:00-19:00 UTC coming Thursday, Oct 6th. best regards, spz </pre> S.P.Zeidler 2011-10-03T23:56:45 http://comments.gmane.org/gmane.os.netbsd.announce/482 <pre>Hi! The new stable pkgsrc branch pkgsrc-2011Q3 has just been released. The public announcement is available at http://mail-index.netbsd.org/current-users/2011/10/03/msg017924.html Cheers, Thomas </pre> Thomas Klausner 2011-10-03T09:47:49 http://comments.gmane.org/gmane.os.netbsd.announce/481 <pre>-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 NetBSD Security Advisory 2011-007 ================================= Topic:LZW decoding loop on manipulated compressed files Version:NetBSD-current:source prior to Aug 17th, 2011 NetBSD 5.0.*:affected NetBSD 5.0:affected NetBSD 5.1:affected NetBSD 4.0.*:affected NetBSD 4.0:affected Severity:Denial of Service, possible Information Leak Fixed:NetBSD-current:Aug 16th, 2011 NetBSD-5-0 branch:Aug 19th, 2011 (5.0.3 will include the fix) NetBSD-5-1 branch:Aug 19th, 2011 (5.1.1 will include the fix) NetBSD-5 branch:Aug 19th, 2011 NetBSD-4-0 branch:Aug 19th, 2011 NetBSD-4 branch:Aug 19th, 2011 Please note that NetBSD releases prior to 4.0 are no longer supported. It is recommended that all users upgrade to a supported release. Abstract ======== A highly compressable input file could overflow the uncompression stack in libXfont. Also, specially crafted compressed files could cause gzip(1) and compress(1) to </pre> NetBSD Security Officer 2011-09-21T19:15:22 http://comments.gmane.org/gmane.os.netbsd.announce/480 <pre>-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 NetBSD Security Advisory 2011-006 ================================= Topic:BIND DoS via packet with rrtype zero Version:NetBSD-current:affected prior to 20110706 NetBSD 5.1:affected prior to 20110708 NetBSD 5.0:affected prior to 20110708 NetBSD 4.0.*:affected prior to 20110716 NetBSD 4.0:affected prior to 20110716 pkgsrc:net/bind96, net/bind97 and net/bind98 packages prior to 20110706 Severity:Denial of Service Fixed:NetBSD-current:Jul 6th, 2011 NetBSD-5-1 branch:Jul 8th, 2011 NetBSD-5-0 branch:Jul 8th, 2011 NetBSD-5 branch:Jul 8th, 2011 NetBSD-4-0 branch:Jul 16th, 2011 NetBSD-4 branch:Jul 16th, 2011 pkgsrc net/bind96:bind-9.6.3.1.ESV4pl3 corrects this issue pkgsrc net/bind97:bind-9.7.3pl3 corrects this issue pkgsrc net/bind98:bind-9.8.0pl4 corrects this issue Please note that NetBSD releases prior to 4.0 are no longer supported. It is recommended that all</pre> NetBSD Security Officer 2011-07-26T04:04:02 http://comments.gmane.org/gmane.os.netbsd.announce/479 <pre>Dear all, The directors of the NetBSD Foundation and the Core group wish to welcome Alan Barrett as new member of the Core group. He is replacing Antti Kantee; our sincerest thanks to Antti for all his efforts during his core tenure, specially for pushing through the tiered port support model and for making bug bounties a reality. On behalf of board, S.P.Zeidler </pre> S.P.Zeidler 2011-07-13T18:22:46 http://comments.gmane.org/gmane.os.netbsd.announce/478 <pre>-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 NetBSD Security Advisory 2011-005 ================================= Topic:ISC dhclient does not strip shell meta-characters in environment variables passed to scripts. Version:NetBSD-current:affected NetBSD 5.1:affected NetBSD 5.0:affected NetBSD 4.0.*:affected NetBSD 4.0:affected pkgsrc:isc-dhclient4 package prior to 4.2.1-P1 Severity:Arbitrary Script Execution Fixed:NetBSD-current:April 6th, 2011 NetBSD-5-0 branch:April 7th, 2011 NetBSD-5 branch:April 7th, 2011 NetBSD-4-0 branch:April 7th, 2011 NetBSD-4 branch:April 7th, 2011 pkgsrc 2011Q1:April 11th, 2011 Abstract ======== dhclient doesn't strip or escape certain shell meta-characters in dhcpd responses, allowing a rogue server or party with with escalated privileges on the server to cause remote code execution on the client. This vulnerability has been assigned CVE-2011-0997 and CERT Vulnerability Note VU#107886. Technical Details ======</pre> NetBSD Security Officer 2011-04-26T19:37:43 http://comments.gmane.org/gmane.os.netbsd.announce/477 <pre>Dear all, mail.NetBSD.org will undergo a several hours outage starting Sunday 17th at 7:00 UTC. It will receive a hardware change. best regards, spz </pre> S.P.Zeidler 2011-04-15T05:37:37 http://comments.gmane.org/gmane.os.netbsd.announce/476 <pre>-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 NetBSD Security Advisory 2011-004 ================================= Topic:Kernel stack overflow via nested IPCOMP packet Version:NetBSD-current:source prior to April 1st, 2011 NetBSD 5.0.*:affected NetBSD 5.0:affected NetBSD 5.1:affected NetBSD 4.0.*:affected NetBSD 4.0:affected Severity:remote DOS, possible memory corruption Fixed:NetBSD-current:April 1st, 2011 NetBSD-5-0 branch:April 3rd, 2011 (5.0.3 will include the fix) NetBSD-5-1 branch:April 3rd, 2011 (5.1.1 will include the fix) NetBSD-5 branch:April 3rd, 2011 NetBSD-4-0 branch:April 3rd, 2011 NetBSD-4 branch:April 3rd, 2011 Please note that NetBSD releases prior to 4.0 are no longer supported. It is recommended that all users upgrade to a supported release. Abstract ======== A malicious packet containing nested RFC 3173 - IP Payload Compression Protocol (IPComp) headers can cause a panic due to kernel stack exhaustion in a kernel with opti</pre> NetBSD Security Officer 2011-04-07T13:58:31 Search the mailing list at Gmane query http://search.gmane.org/?group=$group=gmane.os.netbsd.announce