do-not-reply | 1 Apr 2003 20:00
Picon
Favicon

Sun to ship OpenBSD on its Intel-based workstations

April 1, 2003, 10:50 AM MST

Sun Microsystems (Nasdaq: SUNW), in a surprise announcement, has
stated that it will offer the OpenBSD operating system as the default
operating system for its Intel-based workstations.  The move came
shortly after Sun announced the death of its own Linux distribution,
internally known as "Mad Hatter Linux".

This new direction comes on the heels of a strategic partnership
between Intel and Fujitsu, long-time Sun partner and manufacturer
of Sparc chips, to build competing Linux-based servers and mainframe
computers.

"Our polling shows a strong demand for Sun-branded Intel workstations
running OpenBSD" said head of Open Source Solutions Brad S. Downey.
"Customers who wish to run Solaris generally do so on our
enterprise-strength UltraSparc-based machines.  Anyone can sell a
PC running Linux, here at Sun we strive to differentiate ourselves
and produce a product with superior hardware and software.  With
its dedication to industrial strength security OpenBSD allows us
to do just that."  Both OpenBSD and Solaris have their roots in a
version of Unix developed at the University of California, Berkeley.
Downey stated "Sun engineers are more comfortable inside the OpenBSD
kernel than they are inside Linux.  Furthermore, Sun has shipped
OpenSSH, an OpenBSD spin off project, for the past several releases
so we already have good contacts within the OpenBSD leadership."

When asked about the recent tiff between OpenBSD lead Theo de Raadt
and Sun regarding hardware documentation for the UltraSparc III
CPU, Downey said "We have a good rapport with the OpenBSD team.
(Continue reading)

Markus Friedl | 1 Apr 2003 22:21
Picon
Favicon

OpenSSH 3.6.1 released

OpenSSH 3.6.1 has just been released. It will be available from the
mirrors listed at http://www.openssh.com/ shortly.

OpenSSH is a 100% complete SSH protocol version 1.3, 1.5 and 2.0
implementation and includes sftp client and server support.

We would like to thank the OpenSSH community for their continued
support to the project, especially those who contributed source and
bought T-shirts or posters.

We have a new design of T-shirt available, more info on
	http://www.openbsd.org/tshirts.html#18

For international orders use http://https.openbsd.org/cgi-bin/order
and for European orders, use http://https.openbsd.org/cgi-bin/order.eu

Changes since OpenSSH 3.6:
========================== 

* The 'kex guesses' bugfix from OpenSSH 3.6 triggers a bug
  in a few other SSH v2 implementations and causes connections to
  stall.  OpenSSH 3.6.1 disables this bugfix when interoperating
  with these implementations.

Changes between OpenSSH 3.5 and OpenSSH 3.6:
============================================

* RSA blinding is now used by ssh(1), sshd(8) and ssh-agent(1).
  in order to avoid potential timing attacks against the RSA keys.
  Older versions of OpenSSH have been using RSA blinding in
(Continue reading)

Theo de Raadt | 14 Apr 2003 21:32
Picon
Favicon

3.3 song released

I have released the 3.3 song early.  It can be found at 

    http://www.openbsd.org/lyrics.html

As well, this time we have chosen to include a fraction of the
graphics that are found inside the CD package, where they graphically
tell the same story as found in the lyrics.

And buy a CD if you can, ok?  We may have gotten a DARPA grant, but
there are many limitations from that, and spending from that is rather
inflexible...

Enjoy.

Miod Vallat | 17 Apr 2003 15:25
Picon
Favicon

OpenBSD 3.1 End Of Life

Hello folks,

  Due to the upcoming release of OpenBSD 3.3, the 3.1-STABLE branch will
be out of regular maintainance starting June 1st.  There will be NO
MORE fixes commited to this branch after this day.

  People relying on 3.1-STABLE (or older releases even) are strongly
advised to upgrade to a more recent release (preferrably 3.3 as it
becomes available on May 1st) as soon as possible.

  Thanks for reading,
Miod

Todd C. Miller | 1 May 2003 03:56
Favicon

OpenBSD 3.3 released

------------------------------------------------------------------------
- OpenBSD 3.3 RELEASED -------------------------------------------------

May 1, 2003.

We are pleased to announce the official release of OpenBSD 3.3.
This is our 13th release on CD-ROM (and 14th via FTP).  We remain
proud of OpenBSD's record of seven years with only a single remote
hole in the default install.  As in our previous releases, 3.3
provides significant improvements, including new features, in nearly
all areas of the system:

- Ever-improving security            (http://www.OpenBSD.org/security.html)

  o Integration of the ProPolice stack protection technology, by
    Hiroaki Etoh, into the system compiler.  This protection is
    enabled by default.  With this change, function prologues are
    modified to rearrange the stack: a random canary is placed
    before the return address, and buffer variables are moved closer
    to the canary so that regular variables are below, and harder
    to smash.  The function epilogue then checks if the canary is
    still intact.  If it is not, the process is terminated.  This
    change makes it very hard for an attacker to modify the return
    address used when returning from a function.

  o W^X (pronounced: "W xor X") on architectures capable of pure
    execute-bit support in the MMU (sparc, sparc64, alpha, hppa).
    This is a fine-grained memory permissions layout, ensuring
    that memory which can be written to by application programs can
    not be executable at the same time and vice versa. This raises
(Continue reading)


Gmane