{"id":110888,"date":"2023-10-17T03:10:16","date_gmt":"2023-10-17T01:10:16","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/vypusk-openbsd-7-4"},"modified":"2023-10-17T03:10:16","modified_gmt":"2023-10-17T01:10:16","slug":"vypusk-openbsd-7-4","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/news\/vypusk-openbsd-7-4","title":{"rendered":"Vyd\u00e1n\u00ed OpenBSD 7.4","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Bylo p\u0159edstavena verze svobodn\u00e9ho opera\u010dn\u00edho syst\u00e9mu podobn\u00e9ho UNIXu OpenBSD 7.4. Projekt OpenBSD byl zalo\u017een Theo de Raadtem v roce 1995 po konfliktu s v\u00fdvoj\u00e1\u0159i NetBSD, v jeho\u017e d\u016fsledku bylo Theo uzav\u0159eno p\u0159\u00edstup k CVS repozit\u00e1\u0159i NetBSD. Po tomto incidentu Theo de Raadt s skupinou spoluzakladatel\u016f vytvo\u0159il na z\u00e1klad\u011b zdrojov\u00e9ho stromu NetBSD nov\u00fd otev\u0159en\u00fd opera\u010dn\u00ed syst\u00e9m, jeho\u017e hlavn\u00edmi c\u00edli rozvoje se staly p\u0159enositelnost (podporov\u00e1no 13 hardwarov\u00fdch platforem), standardizace, spr\u00e1vn\u00e1 funk\u010dnost, proaktivn\u00ed bezpe\u010dnost a integrovan\u00e9 kryptografick\u00e9 n\u00e1stroje. Velikost cel\u00e9ho instala\u010dn\u00edho ISO obrazu z\u00e1kladn\u00edho syst\u00e9mu OpenBSD 7.4 je 630 MB.       <\/p>\n<p>Krom\u011b samotn\u00e9ho opera\u010dn\u00edho syst\u00e9mu je projekt OpenBSD zn\u00e1m sv\u00fdmi komponenty, kter\u00e9 se roz\u0161\u00ed\u0159ily do jin\u00fdch syst\u00e9m\u016f a prok\u00e1zaly se jako jedna z nejbezpe\u010dn\u011bj\u0161\u00edch a kvalitn\u00edch \u0159e\u0161en\u00ed. Mezi nimi nalezneme: LibreSSL (fork OpenSSL), OpenSSH, paketov\u00fd filtr PF, d\u00e9mony routov\u00e1n\u00ed OpenBGPD a OpenOSPFD, NTP server OpenNTPD, po\u0161tovn\u00ed server OpenSMTPD, multiplexor textov\u00e9ho termin\u00e1lu (analog GNU screen) tmux, d\u00e9mon identd s implementac\u00ed protokolu IDENT, BSDL alternativa k bal\u00edku GNU groff \u2014 mandoc, protokol pro organizaci vysoce dostupn\u00fdch syst\u00e9m\u016f CARP (Common Address Redundancy Protocol), lehk\u00fd HTTP server a n\u00e1stroj pro synchronizaci soubor\u016f OpenRSYNC.          <\/p>\n<p>Hlavn\u00ed vylep\u0161en\u00ed:   <\/p>\n<ul>\n<li class=\"l\"> Pro architektury amd64 a i386 byly p\u0159id\u00e1ny komponenty pro aktualizaci mikroprogram\u016f procesor\u016f AMD. Nov\u00e9 verze mikroprogram\u016f se instaluj\u00ed automaticky p\u0159i spu\u0161t\u011bn\u00ed. Pro distribuci bin\u00e1rn\u00edch soubor\u016f s mikroprogramy byl p\u0159ipraven port \u201eports\/sysutils\/firmware\/amd\u201c. Instalace nov\u00e9ho mikroprogramu se prov\u00e1d\u00ed pomoc\u00ed standardn\u00ed utility fw_update. Podobn\u00e1 podpora pro aktualizaci mikroprogram\u016f pro procesory Intel byla realizov\u00e1na v roce 2018 a nab\u00edzena v vyd\u00e1n\u00ed OpenBSD 6.3.\n<li class=\"l\"> Pro j\u00e1dro a prostor u\u017eivatele byly zahrnuty ochrann\u00e9 mechanismy IBT (Indirect Branch Tracking, amd64) a BTI (Branch Target Identification, arm64), ur\u010den\u00e9 k blokov\u00e1n\u00ed poru\u0161ov\u00e1n\u00ed norm\u00e1ln\u00edho po\u0159ad\u00ed prov\u00e1d\u011bn\u00ed (control flow) v d\u016fsledku pou\u017eit\u00ed exploit\u016f, kter\u00e9 m\u011bn\u00ed ulo\u017een\u00e9 ukazatele na funkce v pam\u011bti (implementovan\u00e1 ochrana neumo\u017e\u0148uje \u0161kodliv\u00e9mu k\u00f3du p\u0159ej\u00edt na st\u0159ed funkce).\n<li class=\"l\"> Na syst\u00e9mech s architekturou arm64 je pro ochranu prostoru u\u017eivatele zahrnuta autentizace ukazatel\u016f (Pointer Authentication). Tato technologie umo\u017e\u0148uje vyu\u017eit\u00ed specializovan\u00fdch instrukc\u00ed ARM64 k ov\u011b\u0159ov\u00e1n\u00ed adres n\u00e1vratu pomoc\u00ed digit\u00e1ln\u00edch podpis\u016f, kter\u00e9 jsou ulo\u017eeny v nevyu\u017e\u00edvan\u00fdch horn\u00edch bitech samotn\u00e9ho ukazatele.\n<li class=\"l\"> Nastaven\u00ed syst\u00e9mov\u00e9ho kompil\u00e1toru clang, stejn\u011b jako clang a gcc z port\u016f, byla zm\u011bn\u011bna pro pou\u017eit\u00ed v\u00fd\u0161e zm\u00edn\u011bn\u00fdch ochrann\u00fdch mechanism\u016f, co\u017e v\u00fdrazn\u011b pos\u00edlilo ochranu v\u0161ech z\u00e1kladn\u00edch aplikac\u00ed a v\u011bt\u0161iny aplikac\u00ed z port\u016f proti exploit\u016fm vyu\u017e\u00edvaj\u00edc\u00edm metody orientovan\u00e9 na n\u00e1vrat (ROP \u2014 Return-Oriented Programming). P\u0159i pou\u017eit\u00ed techniky ROP \u00fato\u010dn\u00edk se nesna\u017e\u00ed um\u00edstit sv\u016fj k\u00f3d do pam\u011bti, ale manipuluje ji\u017e existuj\u00edc\u00edmi fragmenty strojov\u00fdch instrukc\u00ed v na\u010dten\u00fdch knihovn\u00e1ch, kon\u010d\u00edc\u00ed instrukc\u00ed n\u00e1vratu \u0159\u00edzen\u00ed (typicky to jsou konce knihovn\u00edch funkc\u00ed). Fungov\u00e1n\u00ed exploitu se omezuje na vytv\u00e1\u0159en\u00ed \u0159et\u011bzc\u016f vol\u00e1n\u00ed podobn\u00fdch blok\u016f (\u201egadgets\u201c) pro z\u00edsk\u00e1n\u00ed po\u017eadovan\u00e9 funkcionality.\n<li class=\"l\"> Byl p\u0159id\u00e1n nov\u00fd syst\u00e9mov\u00fd vol\u00e1n\u00ed kqueue1, kter\u00e9 se li\u0161\u00ed od kqueue p\u0159enosem p\u0159\u00edznak\u016f. V sou\u010dasnosti je v kqueue1 podporov\u00e1n pouze p\u0159\u00edznak O_CLOEXEC (close-on-exec) pro automatick\u00e9 uzav\u0159en\u00ed souborov\u00fdch descriptor\u016f v podprocesu po vol\u00e1n\u00ed exec().\n<li class=\"l\"> Pro architektury amd64 a i386 byla implementov\u00e1na podpora pseudop\u0159\u00edstroje dt pro organizaci dynamick\u00e9ho trasov\u00e1n\u00ed syst\u00e9mu a aplikac\u00ed. Pro vlo\u017een\u00ed u\u017eivatelsk\u00fdch z\u00e1znam\u016f do logu ktrace byl p\u0159id\u00e1n syst\u00e9mov\u00fd vol\u00e1n\u00ed utrace.\n<li class=\"l\"> Z FreeBSD byly p\u0159eneseny opravy, kter\u00e9 odstra\u0148uj\u00ed nedefinovan\u00e9 chov\u00e1n\u00ed p\u0159i pou\u017e\u00edv\u00e1n\u00ed souborov\u00fdch syst\u00e9m\u016f MS-DOS.\n<li class=\"l\"> Byla zak\u00e1z\u00e1na volba montov\u00e1n\u00ed softdep, pou\u017e\u00edvan\u00e1 pro odlo\u017een\u00e9 seskupen\u00e9 z\u00e1pisy metadat.\n<li class=\"l\"> Program\u016fm chr\u00e1n\u011bn\u00fdm pomoc\u00ed syst\u00e9mov\u00e9ho vol\u00e1n\u00ed unveil bylo povoleno ukl\u00e1d\u00e1n\u00ed core dump\u016f do aktu\u00e1ln\u00edho pracovn\u00edho adres\u00e1\u0159e.\n<li class=\"l\"> Pro architekturu ARM64 byla aktivov\u00e1na mo\u017enost p\u0159echodu do hlubok\u00fdch stav\u016f neaktivity (idle), dostupn\u00fdch v \u010dipech Apple M1\/M2, pro \u00fasporu energie a realizaci sp\u00e1nkov\u00e9ho re\u017eimu.\n<li class=\"l\"> Byla p\u0159id\u00e1na obran\u00e1 ochrana proti zranitelnosti Zenbleed v procesorech AMD.\n<li class=\"l\"> Vylep\u0161en\u00e1 podpora pro v\u00edceprocesorov\u00e9 syst\u00e9my (SMP). Byly odstran\u011bny z\u00e1mky funkce arprequest(), k\u00f3d zpracov\u00e1n\u00ed p\u0159\u00edchoz\u00edch ARP paket\u016f a implementace ur\u010dov\u00e1n\u00ed sousedn\u00edch uzl\u016f v IPv6 z\u00e1sobn\u00edku.\n<li class=\"l\"> Rozhran\u00ed pro synchronizaci tabulek filtr\u016f paket\u016f pfsync bylo p\u0159epracov\u00e1no pro zlep\u0161en\u00ed pr\u00e1ce se z\u00e1mky a kompatibility s budouc\u00edm paraleln\u00edm zpracov\u00e1n\u00edm s\u00ed\u0165ov\u00e9ho z\u00e1sobn\u00edku.\n<li class=\"l\"> Implementace r\u00e1mce drm (Direct Rendering Manager) byla synchronizov\u00e1na s j\u00e1drem Linux 6.1.55 (v p\u0159edchoz\u00edm vyd\u00e1n\u00ed \u2014 6.1.15). Byla vylep\u0161ena pr\u00e1ce na syst\u00e9mech s procesory Intel zalo\u017een\u00fdmi na mikroarchitektur\u00e1ch Alder Lake a Raptor Lake.\n<li class=\"l\"> Byla provedena zlep\u0161en\u00ed v hypervizoru VMM. V vmd byla implementov\u00e1na podpora v\u00edceprocesorov\u00e9ho modelu pro blokov\u00e1 a s\u00ed\u0165ov\u00e1 virtio za\u0159\u00edzen\u00ed. Do blokov\u00e9ho virtio za\u0159\u00edzen\u00ed byla p\u0159id\u00e1na podpora vektorov\u00e9ho vstupu\/v\u00fdstupu v re\u017eimu zero-copy. P\u0159\u00edstup hostitelsk\u00fdch syst\u00e9m\u016f do re\u017eim\u016f p-state procesor\u016f AMD je omezen. Vlastn\u00edk\u016fm <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/cs\/vps\/\"   title=\"virtu\u00e1ln\u00edch stroj\u016f\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"2146\">virtu\u00e1ln\u00edch stroj\u016f<\/a> je dovoleno p\u0159es vmctl p\u0159epsat zav\u00e1d\u011bn\u00e9 j\u00e1dro.\n<li class=\"l\"> Byl p\u0159id\u00e1n nov\u00fd z\u00e1hlav\u00ed\u03b4\u03ae\u03c0\u03bf\u03c4\u03b5 \u0444\u0430\u0439\u043b uchar.h s typy char32_t a char16_t a funkcemi c32rtomb(), mbrtoc32(), c16rtomb() a mbrtoc16(), definovan\u00fdmi ve standardu C11.\n<li class=\"l\"> Do funkce malloc byla p\u0159id\u00e1na volba \u201eD\u201c pro detekci \u00fanik\u016f pam\u011bti pomoc\u00ed ktrace (\u201eMALLOC_OPTIONS=D ktrace -tu program\u201c) a kdump (\u201ekdump -u malloc ...\u201c).\n<li class=\"l\"> Do utility make byla p\u0159id\u00e1na podpora prom\u011bnn\u00e9 ${.VARIABLES} pro zobrazen\u00ed jmen v\u0161ech nastaven\u00fdch glob\u00e1ln\u00edch prom\u011bnn\u00fdch.\n<li class=\"l\"> Do utility kdump byla p\u0159id\u00e1na volba \u201e-u\u201c pro v\u00fdb\u011br bod\u016f trasov\u00e1n\u00ed utrace podle zadan\u00e9 zna\u010dky.\n<li class=\"l\"> Do utility openrsync byly p\u0159id\u00e1ny volby \u201e--size-only\u201c a \u201e--ignore-times\u201c.\n<li class=\"l\"> Do cron a crontab byla p\u0159id\u00e1na podpora n\u00e1hodn\u00fdch posun\u016f p\u0159i zad\u00e1n\u00ed rozsah\u016f hodnot s dan\u00fdm krokem, co\u017e umo\u017e\u0148uje vyhnout se sou\u010dasn\u00e9mu zisku zdroje z r\u016fzn\u00fdch stroj\u016f, kter\u00e9 maj\u00ed stejn\u00e1 pravidla v cron. Nap\u0159\u00edklad zad\u00e1n\u00ed \u201e0~59\/30\u201c nebo \u201e~\/30\u201c v poli s minutami povede k spu\u0161t\u011bn\u00ed p\u0159\u00edkazu dvakr\u00e1t za hodinu v sekven\u010dn\u011b n\u00e1hodn\u011b vybran\u00fdch intervalech.\n<li class=\"l\"> Do utility wsconsctl byla p\u0159id\u00e1na mo\u017enost mapov\u00e1n\u00ed tla\u010d\u00edtek pro stisknut\u00ed dv\u011bma nebo t\u0159emi prsty na touchpadu.\n<li class=\"l\"> Byla p\u0159id\u00e1na podpora nov\u00e9ho hardwaru a zahrnuty nov\u00e9 ovlada\u010de.\n<li class=\"l\"> Byla vylep\u0161ena instalace na syst\u00e9mech s procesory armv7 a arm64.\n<li class=\"l\"> Byla p\u0159id\u00e1na podpora pro na\u010d\u00edt\u00e1n\u00ed soubor\u016f z syst\u00e9mov\u00e9 \u010d\u00e1sti EFI (EFI System Partition).\n<li class=\"l\"> V instal\u00e1toru byla vylep\u0161ena podpora softwarov\u00e9ho RAID (softraid). Byla p\u0159id\u00e1na mo\u017enost um\u00edst\u011bn\u00ed ko\u0159enov\u00e9ho odd\u00edlu do softraidu na syst\u00e9mech riscv64 a arm64. Softraid byl p\u0159id\u00e1n do ramdisku pro architekturu powerpc64. Pro arm64 byla implementov\u00e1na podpora \u0161ifrov\u00e1n\u00ed disk\u016f (Guided Disk Encryption).\n<li class=\"l\"> Do funkce malloc byla p\u0159id\u00e1na kontrola v\u0161ech blok\u016f v seznamu odlo\u017een\u00e9ho uvoln\u011bn\u00ed pam\u011bti pro zji\u0161t\u011bn\u00ed p\u0159\u00edpad\u016f z\u00e1pisu do uvoln\u011bn\u00e9 oblasti pam\u011bti.\n<li class=\"l\"> Pro proveden\u00ed p\u0159\u00edkazu shutdown je nyn\u00ed t\u0159eba p\u0159idat u\u017eivatele do skupiny &#171;_shutdown&#187;, co\u017e umo\u017e\u0148uje odd\u011blit pravomoci spojen\u00e9 se zastaven\u00edm pr\u00e1ce a p\u0159\u00edm\u00fdm \u010dten\u00edm z diskov\u00fdch za\u0159\u00edzen\u00ed.\n<li class=\"l\"> Pomoc\u00ed syst\u00e9mov\u00e9ho vol\u00e1n\u00ed unveil byla utilita patch omezen\u00e1 p\u0159\u00edstupem pouze na aktu\u00e1ln\u00ed adres\u00e1\u0159, adres\u00e1\u0159 se do\u010dasn\u00fdmi soubory a soubory uveden\u00e9 v p\u0159\u00edkazov\u00e9m \u0159\u00e1dku.\n<li class=\"l\"> Byl p\u0159id\u00e1n sysctl net.inet6.icmp6.nd6_queued pro zobrazen\u00ed po\u010dtu paket\u016f \u010dekaj\u00edc\u00edch na odpov\u011b\u010f ND6 (podobn\u011b jako ARP).\n<li class=\"l\"> P\u0159i nastaven\u00ed adresy IPv6 na s\u00ed\u0165ov\u00e9m rozhran\u00ed je zaji\u0161t\u011bno odes\u00edl\u00e1n\u00ed ozn\u00e1men\u00ed sousedn\u00edm sm\u011brova\u010d\u016fm na multicastovou adresu.\n<li class=\"l\"> Byla p\u0159id\u00e1na z\u00e1kladn\u00ed podpora TSO (TCP Segmentation Offload) a LRO (TCP Large Receive Offload) pro zpracov\u00e1n\u00ed segment\u016f a slu\u010dov\u00e1n\u00ed paket\u016f na stran\u011b s\u00ed\u0165ov\u00e9 karty.\n<li class=\"l\"> Zrychleno na\u010d\u00edt\u00e1n\u00ed z j\u00e1dra pravidel paketov\u00e9ho filtru pf pomoc\u00ed utility pfctl. Byla zahrnuta zpracov\u00e1n\u00ed akc\u00ed &#171;keep state&#187; a &#171;nat-to&#187; pro vr\u00e1cen\u00e9 zpr\u00e1vy o chyb\u00e1ch prost\u0159ednictv\u00edm ICMP.\n<li class=\"l\"> Bylo vypnuto v\u00fdpo\u010dty kontroln\u00edch sou\u010dt\u016f IP, TCP a UDP pro loopbackov\u00e9 rozhran\u00ed.\n<li class=\"l\"> Byla p\u0159id\u00e1na z\u00e1kladn\u00ed podpora <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/cs\/vpn\/\"   title=\"VPN\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"243\">VPN<\/a> IPsec, z\u00e1visl\u00fdch na sm\u011brov\u00e1n\u00ed (route-based).\n<li class=\"l\"> Do bgpd byla p\u0159id\u00e1na podpora Flowspec (RFC5575, dosud je podporov\u00e1no pouze oznamov\u00e1n\u00ed pravidel flowspec). Implementace ASPA (Autonomous System Provider Authorization) byla p\u0159ivedena do souladu se specifikacemi draft-ietf-sidrops-aspa-verification-16 a draft-ietf-sidrops-aspa-profile-16 a byla p\u0159evedena na pou\u017e\u00edv\u00e1n\u00ed vyhled\u00e1vac\u00edch tabulek, kter\u00e9 nejsou z\u00e1visl\u00e9 na AFI (Address Family Indicator).\n<li class=\"l\"> V\u00fdkon rpki-client byl zv\u00fd\u0161en o 30-50%. Byla p\u0159id\u00e1na podpora komprese gzip a deflate.\n<li class=\"l\"> Byly aktualizov\u00e1ny bal\u00ed\u010dky LibreSSL a OpenSSH. Podrobn\u00e9 informace o vylep\u0161en\u00edch najdete v p\u0159ehledech LibreSSL 3.8.0, OpenSSH 9.4 a OpenSSH 9.5.\n<li class=\"l\"> Po\u010det port\u016f pro architekturu AMD64 \u010dinil 11845 (bylo 11764), pro aarch64 \u2014 11508 (bylo 11561), pro i386 \u2014 10603 (bylo 10572). Mezi verzemi aplikac\u00ed v porte:\n<ul>\n<li>Asterisk 16.30.1, 18.19.0b, 20.4.0      <\/li>\n<li>Audacity 3.3.3      <\/li>\n<li>CMake 3.27.5      <\/li>\n<li>Chromium 117.0.5938.149      <\/li>\n<li>Emacs 29.1      <\/li>\n<li>FFmpeg 4.4.4      <\/li>\n<li>GCC 8.4.0 a 11.2.0      <\/li>\n<li>GHC 9.2.7      <\/li>\n<li>GNOME 44      <\/li>\n<li>Go 1.21.1      <\/li>\n<li>JDK 8u382, 11.0.20 a 17.0.8      <\/li>\n<li>KDE Applications 23.08.0      <\/li>\n<li>KDE Frameworks 5.110.0      <\/li>\n<li>Krita 5.1.5      <\/li>\n<li>LLVM\/Clang 13.0.0 a 16.0.6      <\/li>\n<li>LibreOffice 7.6.2.1      <\/li>\n<li>Lua 5.1.5, 5.2.4, 5.3.6 a 5.4.6      <\/li>\n<li>MariaDB 10.9.6      <\/li>\n<li>Mono 6.12.0.199      <\/li>\n<li>Mozilla Firefox 118.0.1 a ESR 115.3.1      <\/li>\n<li>Mozilla Thunderbird 115.3.1      <\/li>\n<li>Mutt 2.2.12 a NeoMutt 20230517      <\/li>\n<li>Node.js 18.18.0      <\/li>\n<li>OpenLDAP 2.6.6      <\/li>\n<li>PHP 7.4.33, 8.0.30, 8.1.24 a 8.2.11      <\/li>\n<li>Postfix 3.7.3      <\/li>\n<li>PostgreSQL 15.4      <\/li>\n<li>Python 2.7.18, 3.9.18, 3.10.13 a 3.11.5      <\/li>\n<li>Qt 5.15.10 a 6.5.2      <\/li>\n<li>R 4.2.3      <\/li>\n<li>Ruby 3.0.6, 3.1.4 a 3.2.2      <\/li>\n<li>Rust 1.72.1      <\/li>\n<li>SQLite 3.42.0      <\/li>\n<li>Shotcut 23.07.29      <\/li>\n<li>Sudo 1.9.14.2      <\/li>\n<li>Suricata 6.0.12      <\/li>\n<li>Tcl\/Tk 8.5.19 a 8.6.13      <\/li>\n<li>TeX Live 2022      <\/li>\n<li>Vim 9.0.1897 a Neovim 0.9.1      <\/li>\n<li>Xfce 4.18    <\/li>\n<\/ul>\n<li class=\"l\"> Aktualizov\u00e1ny komponenty od t\u0159et\u00edch stran obsa\u017een\u00e9 v OpenBSD 7.3:\n<ul>\n<li class=\"l\"> Grafick\u00fd stack Xenocara zalo\u017een\u00fd na X.Org 7.7 s xserver 21.1.8 + opravy, freetype 2.13.0, fontconfig 2.14.2, Mesa 22.3.7, xterm 378, xkeyboard-config 2.20, fonttosfnt 1.2.2.  <\/li>\n<li class=\"l\">    LLVM\/Clang 13.0.0 (+ opravy)  <\/li>\n<li class=\"l\">    GCC 4.2.1 (+ patche) a 3.3.6 (+ patche)  <\/li>\n<li class=\"l\">    Perl 5.36.1 (+ opravy)  <\/li>\n<li class=\"l\">    NSD 4.7.0  <\/li>\n<li class=\"l\">    Unbound 1.18  <\/li>\n<li class=\"l\">    Ncurses 5.7  <\/li>\n<li class=\"l\">    Binutils 2.17 (+ patche)  <\/li>\n<li class=\"l\">  Gdb 6.3 (+ patche)  <\/li>\n<li class=\"l\">  Awk 12.9.2023  <\/li>\n<li class=\"l\">  Expat 2.5.0.  <\/li>\n<\/ul>\n<\/ul>\n<p>Zdroj: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=59942\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u0432\u044b\u043f\u0443\u0441\u043a \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0439 UNIX-\u043f\u043e\u0434\u043e\u0431\u043d\u043e\u0439 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b OpenBSD 7.4. \u041f\u0440\u043e\u0435\u043a\u0442 OpenBSD \u0431\u044b\u043b \u043e\u0441\u043d\u043e\u0432\u0430\u043d \u0422\u044d\u043e \u0434\u0435 \u0420\u0430\u0430\u0434\u0442\u043e\u043c (Theo de Raadt) \u0432 1995 \u0433\u043e\u0434\u0443 \u043f\u043e\u0441\u043b\u0435 \u043a\u043e\u043d\u0444\u043b\u0438\u043a\u0442\u0430 \u0441 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430\u043c\u0438 NetBSD, \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u0434\u043b\u044f \u0422\u044d\u043e \u0431\u044b\u043b \u0437\u0430\u043a\u0440\u044b\u0442 \u0434\u043e\u0441\u0442\u0443\u043f \u043a CVS \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044e NetBSD. \u041f\u043e\u0441\u043b\u0435 \u044d\u0442\u043e\u0433\u043e \u0422\u044d\u043e \u0434\u0435 \u0420\u0430\u0430\u0434\u0442 \u0441 \u0433\u0440\u0443\u043f\u043f\u043e\u0439 \u0435\u0434\u0438\u043d\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432 \u0441\u043e\u0437\u0434\u0430\u043b \u043d\u0430 \u0431\u0430\u0437\u0435 \u0434\u0435\u0440\u0435\u0432\u0430 \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u0445 \u0442\u0435\u043a\u0441\u0442\u043e\u0432 NetBSD \u043d\u043e\u0432\u0443\u044e \u043e\u0442\u043a\u0440\u044b\u0442\u0443\u044e [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-110888","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u0432\u044b\u043f\u0443\u0441\u043a \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0439 UNIX-\u043f\u043e\u0434\u043e\u0431\u043d\u043e\u0439 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b OpenBSD 7.4.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/cs\/blog\/news\/vypusk-openbsd-7-4\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"cs_CZ\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0412\u044b\u043f\u0443\u0441\u043a OpenBSD 7.4 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u0432\u044b\u043f\u0443\u0441\u043a \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0439 UNIX-\u043f\u043e\u0434\u043e\u0431\u043d\u043e\u0439 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b OpenBSD 7.4.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/cs\/blog\/news\/vypusk-openbsd-7-4\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2023-10-17T01:10:16+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2023-10-17T01:10:16+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Vyd\u00e1n\u00ed OpenBSD 7.4 | ProHoster","description":"Bylo vyd\u00e1no vyd\u00e1n\u00ed svobodn\u00e9ho UNIX-podobn\u00e9ho opera\u010dn\u00edho syst\u00e9mu OpenBSD 7.4.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/news\/vypusk-openbsd-7-4","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412\u044b\u043f\u0443\u0441\u043a OpenBSD 7.4 | ProHoster","og:description":"\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u0432\u044b\u043f\u0443\u0441\u043a \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0439 UNIX-\u043f\u043e\u0434\u043e\u0431\u043d\u043e\u0439 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b OpenBSD 7.4.","og:url":"https:\/\/prohoster.info\/cs\/blog\/news\/vypusk-openbsd-7-4","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2023-10-17T01:10:16+00:00","article:modified_time":"2023-10-17T01:10:16+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"110888","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-02-04 14:42:29","updated":"2026-02-09 17:11:35","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/110888","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=110888"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/110888\/revisions"}],"predecessor-version":[{"id":159390,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/110888\/revisions\/159390"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=110888"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=110888"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=110888"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}