Jan Schaumann | 4 Oct 20:02 2008
Picon

NetBSD developer's summit and hackathon


Leading up to this year's NYCBSDCon, a number of NetBSD developers will
be gathering for an informal ``NetBSD developer's summit'' on Friday,
October 10th, 2008.  The event is hosted by Pilosoft and will take place
in their offices at 55 Broad St, 3rd Fl., New York, NY 10004.  While the
developer's summit is open to the public, there is limited space, so we
ask that you contact Jan Schaumann <jschauma <at> netbsd.org> to get your
name on the list if you plan on attending.

Coinciding with the developer's summit and the conference will be the
12th NetBSD Hackathon, taking place at the summit, at the conference and
of course on IRC as usual.  Please see http://wiki.netbsd.se/Hackathon12
for details.

Silke Scheler | 9 Oct 10:54 2008
Picon

Network Outages on Thursday October 9th

Hi,

ISC announced the following two maintenance slots for updates to 
two of their routers:

Thursday, October 9th 06:00 Pacific
All of 950 Charter (aka ISC HQ) will be offline for approximately 10 minutes.

Thursday, October 9th 20:00 Pacific
Expect severe disruption to ISC's SF Bay Area network for a minimum of 
15 minutes, and possibly as long as 30 minutes. Traffic to guest servers/
services will be rerouted as best they can through their other SFBA locations 
but all ISC services will be disrupted to some level during this maintenance.

Cheers,
     Silke
Alistair Crooks | 14 Oct 13:45 2008

The pkgsrc-2008Q3 Release

The pkgsrc-2008Q3 Branch
========================

The pkgsrc developers are very proud to announce the new pkgsrc-2008Q3
release, which has support for more packages than previous releases. 
As well as updated versions of many packages, the infrastructure of
pkgsrc itself has been improved for better platform and compiler
support.

At the same time, the pkgsrc-2008Q2 release has been deprecated, and
continuing engineering starts on the pkgsrc-2008Q3 release.

With more than ten years of pkgsrc development behind us, we would
like to take this opportunity to thank all of the people who have made
pkgsrc the most portable packaging system in the world - to all of the
users, developers and supporters a very large "Thank you" from all of
us.

Some highlights of the new pkgsrc-2008Q3 release are:

+ many more packages have been moved to install into a staging directory -
the DESTDIR work that Joerg Sonnenberger has done almost singlehandedly
+ many, many packages have been updated to newer versions, to take
advantage of fixes and improved functionality.  The following versions
of packages are included in the pkgsrc-2008Q3 release:

	+ apache-2.2.9
	+ firefox-2.0.0.17 and firefox-3.0.3
	+ gnome-2.22.3
	+ kde-3.5.10
(Continue reading)

Manuel Bouyer | 14 Oct 23:36 2008
Picon

Announcing NetBSD 4.0.1


                          Announcing NetBSD 4.0.1

About the NetBSD 4.0.1 Release

   The NetBSD Project is pleased to announce that update 4.0.1 of the
   NetBSD operating system is now available. NetBSD 4.0.1 is the first
   security/critical update of the NetBSD 4.0 release branch. This
   represents a selected subset of fixes deemed critical in nature for
   stability or security reasons, no new features have been added.

   NetBSD 4.0.1 runs on 54 different system architectures featuring 17
   machine architectures across 17 distinct CPU families, and is being
   ported to more. The NetBSD 4.0.1 release contains complete binary
   releases for 51 different machine types, with the platforms amigappc,
   bebox and ews4800mips released in source form only. Complete source
   and binaries for NetBSD 4.0.1 are available for download at many sites
   around the world. A list of download sites providing FTP, AnonCVS,
   SUP, and other services is provided at the end of this announcement;
   the latest list of available download sites may also be found at
   http://www.NetBSD.org/mirrors/. We encourage users who wish to install
   via a CD-ROM ISO image to download via BitTorrent by using the torrent
   files supplied in the ISO image area. A list of hashes for the NetBSD
   4.0.1 distribution has been signed with the well-connected PGP key for
   the NetBSD Security Officer:
   ftp://ftp.NetBSD.org/pub/NetBSD/security/hashes/NetBSD-4.0.1_hashes.asc

   Please note that all fixes in security/critical updates (i.e., NetBSD
   4.0.1, 4.0.2, etc) are cumulative, so the latest update contains all
   such fixes since the corresponding minor release. These fixes will
(Continue reading)

Adrian Portelli | 27 Oct 23:36 2008
Picon

Updated Security Advisory Available: 2008-009 BIND cache poisoning


Hi,

Just to let everyone know there have been some further updates to
ipfilter in the NetBSD CVS trees in order to address port randomisation
issues with BIND.  All the updates have been documented in NetBSD
Security Advisory 2008-009 which is available at:

ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-009.txt.asc

On behalf of security-officer <at> NetBSD.org,

adrian.
NetBSD Security-Officer | 27 Oct 23:44 2008
Picon

NetBSD Security Advisory 2008-013: IPv6 Neighbor Discovery Protocol


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

		 NetBSD Security Advisory 2008-013
		 =================================

Topic:		IPv6 Neighbor Discovery Protocol

Version:	NetBSD-current:		affected
		NetBSD 4.0.*:		not affected
		NetBSD 4.0:		affected
		NetBSD 3.1.*:		affected
		NetBSD 3.1:		affected
		NetBSD 3.0.*:		affected
		NetBSD 3.0:		affected

Severity:	Denial of service

Fixed:		NetBSD-current:		July 31, 2008
		NetBSD-4-0 branch:	October 03, 2008
			(4.0.1 includes the fix)
		NetBSD-4 branch:	October 03, 2008
			(4.1 will include the fix)
		NetBSD-3-1 branch:	October 03, 2008
			(3.1.2 will include the fix)
		NetBSD-3-0 branch:	October 03, 2008
			(3.0.4 will include the fix)
		NetBSD-3 branch:	October 03, 2008
			(3.2 will include the fix)
(Continue reading)

NetBSD Security-Officer | 27 Oct 23:46 2008
Picon

NetBSD Security Advisory 2008-014: Cross-site request forgery in ftpd(8)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

		 NetBSD Security Advisory 2008-014
		 =================================

Topic:		Cross-site request forgery in ftpd(8)

Version:	NetBSD-current:		affected
		NetBSD 4.0.*:		not affected
		NetBSD 4.0:		affected
		NetBSD 3.1.*:		affected
		NetBSD 3.1:		affected
		NetBSD 3.0.*:		affected
		NetBSD 3.0:		affected

Severity:	Cross-site request forgery

Fixed:		NetBSD-current:		September 13, 2008
		NetBSD-4-0 branch:	September 18, 2008
			(4.0.1 includes the fix)
		NetBSD-4 branch:	September 18, 2008
			(4.1 will include the fix)
		NetBSD-3-1 branch:	September 18, 2008
			(3.1.2 will include the fix)
		NetBSD-3-0 branch:	September 18, 2008
			(3.0.4 will include the fix)
		NetBSD-3 branch:	September 18, 2008
			(3.2 will include the fix)
(Continue reading)

NetBSD Security-Officer | 27 Oct 23:47 2008
Picon

NetBSD Security Advisory 2008-015: ICMPv6 Packet Too Big messages


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

		 NetBSD Security Advisory 2008-015
		 =================================

Topic:		ICMPv6 Packet Too Big messages

Version:	NetBSD-current:		affected
		NetBSD 4.0.*:		not affected
		NetBSD 4.0:		affected
		NetBSD 3.1.*:		affected
		NetBSD 3.1:		affected
		NetBSD 3.0.*:		affected
		NetBSD 3.0:		affected

Severity:	Denial of service

Fixed:		NetBSD-current:		October 03, 2008
		NetBSD-4-0 branch:	October 03, 2008
			(4.0.1 includes the fix)
		NetBSD-4 branch:	October 03, 2008
			(4.1 will include the fix)
		NetBSD-3-1 branch:	October 03, 2008
			(3.1.2 will include the fix)
		NetBSD-3-0 branch:	October 03, 2008
			(3.0.4 will include the fix)
		NetBSD-3 branch:	October 03, 2008
			(3.2 will include the fix)
(Continue reading)

Alistair Crooks | 30 Oct 18:33 2008
Picon

Plans for NetBSD 5.0


Just a quick heads-up that, after an official "Freeze period",
NetBSD-current is almost at the stage where we can branch the
repository for 5.0.  We're aware that there are some bugs that need
fixing: 

        http://releng.netbsd.org/pr-list.html

but we're feature complete, and able to start the process off for
real.

In the dim and distant past, we used to encourage people to run
what was to become the release by switching current's sup server over
to provide sources from the branch.  These days, we distribute NetBSD
in a huge number of other ways; however, we'd still like to encourage
people to try out the sources from the branch, and the binaries that
releng provide, in order that we can make 5.0 the best version of
NetBSD ever. For getting sources by CVS, further information can be
found in:

	http://www.netbsd.org/docs/guide/en/chap-fetch.html#chap-fetch-cvs-netbsd-current
	http://www.netbsd.org/mirrors/#anoncvs

whilst the binaries from the release engineering daily builds can be
downloaded directly:

	ftp://ftp.netbsd.org/pub/NetBSD-daily/netbsd-5/
	http://www.netbsd.org/mirrors/

Much has changed since 4.0; some highlights are:
(Continue reading)


Gmane