Issue 44
Published November 11, 2020

FreeBSD on Azure, OpenBSD erratas plus latest news and tutorials.

Releases

The FreeBSD Azure Release Engineering Team is pleased to announce the availability of FreeBSD 12.2-RELEASE on Microsoft Azure Marketplace: https://azuremarketplace.microsoft.com/marketplace/apps/thefreebsdfoundation.freebsd-12_2.

BSDSec

OpenBSD Errata: November 5th, 2020 (wg): Errata patches for the kernel have been released for OpenBSD 6.8. wg(4) could panic the kernel by releasing the wrong lock. Binary updates for the amd64, i386, and arm64 platforms are available via the syspatch utility. As these affect the kernel, a reboot will be needed after patching.

OpenBSD Errata: November 10th, 2020 (unwind): Errata patches for unwind have been released for OpenBSD 6.7 and 6.8. unwind fails to process large DNS replies. Binary updates for the amd64, i386, and arm64 platforms are available via the syspatch utility.

OpenBSD Errata: November 10th, 2020 (rpki): Errata patches for rpki-client have been released for OpenBSD 6.7 and 6.8. rpki-client incorrectly checks the manifest validity interval. Binary updates for the amd64, i386, and arm64 platforms are available via the syspatch utility.

As always, it's worth following BSDSec. RSS feed and Twitter account available.

News

Firefox is not paxctl safe for NetBSD: This has been tested on amd64. Hopefully other architectures don't have additional ways to be not-mprotect-safe, but there is always the possibility. No obvious performance difference in an older (non-wasm) javascript benchmark.

OpenBGPD 6.8p1 released: This is the second stable release for the 6.8 version. It includes the following change: Include OpenBSD 6.8 errata 001: In bgpd, the roa-set parser could leak memory. OpenBGPD-portable is known to compile and run on FreeBSD, and the Linux distributions Debian, Ubuntu and Alpine Linux.

This issue of BSD Weekly was brought to you by pfqueue.

Tutorials

VirtualBox disk I/O on FreeBSD: In the best example of “have your tried turning if off and on again”, related to the ext4 VirtualBox woes, post author was informed of the existence of a checkbox called Use Host I/O Cache; toggling the value of that checkbox solved all their problems.

Join the peer to peer social network Scuttlebutt using OpenBSD and Oasis: In this article, author will tell you about the Scuttlebutt social network, what makes it special and how to join it using OpenBSD.

Signal-cli with scli on FreeBSD: Looks like Signal people are not interested in supporting the *BSDs and their app, but there are other ways.

How to build an amazing router and firewall with OpenBSD: This is the third part of the OpenBSD router and firewall tutorial. In this part we get to setup PF, the OpenBSD packet filter firewall.

More

As always, there are more sources of BSD goodness. Latest BSD Now talks about bhyve - The FreeBSD Hypervisor, udf information leak, being a vim user instead of classic vi, FreeBSD on ESXi ARM Fling: Fixing Virtual Hardware, new FreeBSD Remote Process Plugin in LLDB, OpenBSD Laptop, and more.

The Valuable News weekly series is dedicated to providing summary about news, articles and other interesting stuff mostly but not always related to the UNIX or BSD systems. The latest is from 2020-11-09.

In Other BSDs for 2020/11/07 is out, too.

Did we miss anything?

This newsletter is made from your content on DiscoverBSD and BSDSec. Submit the stuff we missed so it can appear next time.

Do you know anyone who would like this newsletter? Consider forwarding and tell them to subscribe.

Thanks for reading and see you next week! Stay home and stay safe!