This time on the show, we sit down to chat with Justin Sherrill of the DragonflyBSD project about their new 3.6 release. Later on, we'll be showing you a huge tutorial that's been baking for over a month - how to build an OpenBSD router that'll destroy any consumer router on the market! There's lots of news to get caught up on as well, so sit back and enjoy some BSD Now - the place to B.. SD.
Headlines
OpenSSH 6.4 released
Security fixes in OpenSSH don't happen very often6.4 fixes a memory corruption problem, no new featuresIf exploited, this vulnerability might permit code execution with the privileges of the authenticated user and may therefore allow bypassing restricted shell/command configurations.Disabling AES-GCM in the server configuration is a workaroundOnly affects 6.2 and 6.3 if compiled against a newer OpenSSL (so FreeBSD 9's base OpenSSL is unaffected, for example)Full details here***
Getting to know your portmgr-lurkers
Next entry in portmgr interview seriesThis time they chat with Mathieu Arnold, one of the portmgr-lurkers we mentioned previouslyLots of questions ranging from why he uses BSD to what he had for breakfastAnother one was since released, with Antoine Brodin aka antoine@***
FUSE in OpenBSD
As we glossed over last week, FUSE was recently added to OpenBSDNow the guys from the OpenBSD Journal have tracked down more informationThis version is released under an ISC licenseShould be in OpenBSD 5.5, released a little less than 6 months from nowWill finally enable things like SSHFS to work in OpenBSD***
Automated submission of kernel panic reports
New tool from Colin PercivalSaves information about kernel panics and emails it to FreeBSDLets you review before sending so you can edit out any private infoAutomatically encrypted before being sentFreeBSD never kernel panics so this won't get much use***
Interview - Justin Sherrill -
[email protected] / @dragonflybsd
DragonflyBSD 3.6 and the Dragonfly Digest
Tutorial
Building an OpenBSD Router
News Roundup
BSD router project 1.5 released
Nice timing for our router tutorial; TBRP is a FreeBSD distribution for installing on a routerIt's an alternative to pfSense, but not nearly as well known or popularNew version is based on 9.2-RELEASE, includes lots of general updates and bugfixesFits on a 256MB Compact Flash/USB drive***
Curve25519 now default key exchange
We mentioned in an earlier episode about a patch for curve25519Now it's become the default for key exchangeWill probably make its way into OpenSSH 6.5, would've been in 6.4 if we didn't have that security vulnerabilityIt's interesting to see all these big changes in cryptography in OpenBSD lately***
FreeBSD kernel selection in boot menu
Adds a kernel selection menu to the beastie menuList of kernels is taken from 'kernels' in loader.conf as a space or comma separated list of names to display (up to 9)From our good buddy Devin Teske***
PCBSD weekly digest
PCDM has officially replaced GDM as the default login managerNew ISO build scripts (we got a sneak preview last week)Lots of bug fixesSecond set of 10-STABLE ISOs available with new artwork and much more***
Theo de Raadt speaking at MUUG
Theo will be speaking at Manitoba UNIX User Group in WinnipegOn Friday, Nov 15, 2013 at 5:30PM (see show notes for the address)If you're watching the show live you have time to make plans, if you're watching the downloaded version it might be happening right now!No agenda, but expect some OpenBSD discussion***
Feedback/Questions
Dave writes inJames writes inAllen writes inChess writes inFrank writes in***