{"id":107801,"date":"2023-04-11T00:48:22","date_gmt":"2023-04-10T22:48:22","guid":{"rendered":"https:\/\/prohoster.info\/?p=107801"},"modified":"2023-04-12T10:36:33","modified_gmt":"2023-04-12T08:36:33","slug":"vypusk-openbsd-7-3","status":"publish","type":"post","link":"https:\/\/prohoster.info\/pt\/blog\/news\/vypusk-openbsd-7-3","title":{"rendered":"Lan\u00e7amento do OpenBSD 7.3","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Foi lan\u00e7ado o OpenBSD 7.3, um sistema operacional semelhante ao UNIX e de c\u00f3digo aberto. O projeto OpenBSD foi fundado por Theo de Raadt em 1995, ap\u00f3s um conflito com os desenvolvedores do NetBSD, resultando no fechamento do acesso de Theo ao reposit\u00f3rio CVS do NetBSD. Depois disso, Theo de Raadt e um grupo de colaboradores criaram um novo sistema operacional com base nas \u00e1rvores de c\u00f3digo do NetBSD, cujos principais objetivos de desenvolvimento incluem portabilidade (suporte a 13 plataformas de hardware), padroniza\u00e7\u00e3o, funcionamento correto, seguran\u00e7a proativa e ferramentas criptogr\u00e1ficas integradas. O tamanho da imagem ISO de instala\u00e7\u00e3o completa do sistema b\u00e1sico OpenBSD 7.3 \u00e9 de 620 MB.       <\/p>\n<p>Al\u00e9m do pr\u00f3prio sistema operacional, o projeto OpenBSD \u00e9 conhecido por seus componentes, que se tornaram populares em outros sistemas e se destacaram como algumas das solu\u00e7\u00f5es mais seguras e de qualidade. Entre eles: LibreSSL (fork do OpenSSL), OpenSSH, o filtro de pacotes PF, os dem\u00f4nios de roteamento OpenBGPD e OpenOSPFD, o servidor NTP OpenNTPD, o correio <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/pt\/server\/\"   title=\"servidor\" data-wpil-keyword-link=\"linked\">servidor<\/a> OpenSMTPD, multiplexador de terminal de texto (an\u00e1logo ao GNU screen) tmux, daemon identd com implementa\u00e7\u00e3o do protocolo IDENT, alternativa BSDL para o pacote GNU groff \u2014 mandoc, protocolo para a organiza\u00e7\u00e3o de sistemas tolerantes a falhas CARP (Common Address Redundancy Protocol), servidor http leve, utilit\u00e1rio de sincroniza\u00e7\u00e3o de arquivos OpenRSYNC.          <\/p>\n<p>Principais melhorias:   <\/p>\n<ul>\n<li class=\"l\"> Chamadas de sistema como waitid (aguardar altera\u00e7\u00e3o de estado de processo), pinsyscall (para transmitir informa\u00e7\u00f5es sobre o ponto de entrada execve para prote\u00e7\u00e3o contra exploits ROP), getthrname e setthrname (obter e definir o nome da thread) foram implementadas.\n<li class=\"l\"> Um planejador de interrup\u00e7\u00f5es de temporizador, clockintr, que n\u00e3o depende de hardware, foi utilizado em todas as arquiteturas.\n<li class=\"l\"> Adicionado o sysctl kern.autoconf_serial, que pode ser usado para rastrear altera\u00e7\u00f5es no estado da \u00e1rvore de dispositivos no n\u00facleo a partir do espa\u00e7o do usu\u00e1rio.\n<li class=\"l\"> Apoio a sistemas multiprocessadores (SMP) foi aprimorado. Filtragens de eventos para dispositivos tun e tap foram convertidas para serem mp-safe. As fun\u00e7\u00f5es select, pselect, poll, ppoll, getsockopt, setsockopt, mmap, munmap, mprotect, sched_yield, minherit e utrace, bem como ioctls SIOCGIFCONF, SIOCGIFGMEMB, SIOCGIFGATTR e SIOCGIFGLIST foram desprovidas de bloqueios. O funcionamento com bloqueios no filtro de pacotes pf foi aprimorado. O desempenho do sistema e da pilha de rede em sistemas multicore foi aumentado.\n<li class=\"l\">  A implementa\u00e7\u00e3o do framework drm (Direct Rendering Manager) foi sincronizada com o n\u00facleo do Linux 6.1.15 (na vers\u00e3o anterior \u2014 5.15.69). O driver amdgpu agora suporta as GPUs Ryzen 7000 \"Raphael\", Ryzen 7020 \"Mendocino\", Ryzen 7045 \"Dragon Range\", Radeon RX 7900 XT\/XTX \"Navi 31\", e Radeon RX 7600M (XT), 7700S e 7600S \"Navi 33\". O amdgpu passou a oferecer suporte para gerenciamento de retroilumina\u00e7\u00e3o e garantir a funcionalidade do xbacklight ao usar o driver modesetting do X.Org. O cache de shaders est\u00e1 ativado por padr\u00e3o no Mesa.\n<li class=\"l\"> Foram feitas melhorias no hipervisor VMM.\n<li class=\"l\"> Implementadas funcionalidades para prote\u00e7\u00e3o adicional da mem\u00f3ria de processos no espa\u00e7o do usu\u00e1rio: a chamada de sistema mimmutable e a fun\u00e7\u00e3o de biblioteca hom\u00f4nima, que permite fixar os direitos de acesso ao refletir na mem\u00f3ria (mapeamentos de mem\u00f3ria). Ap\u00f3s a fixa\u00e7\u00e3o, os direitos de acesso definidos para a \u00e1rea de mem\u00f3ria, como proibi\u00e7\u00e3o de grava\u00e7\u00e3o e execu\u00e7\u00e3o, n\u00e3o podem ser alterados por chamadas subsequentes das fun\u00e7\u00f5es mmap(), mprotect() e munmap(), que gerar\u00e3o um erro EPERM ao tentarem modificar.\n<li class=\"l\"> Na arquitetura AMD64, foi inserido um mecanismo de prote\u00e7\u00e3o RETGUARD para chamadas de sistema, visando dificultar a execu\u00e7\u00e3o de exploits baseados em roubo de peda\u00e7os de c\u00f3digo e t\u00e9cnicas de programa\u00e7\u00e3o orientada a retorno.\n<li class=\"l\"> Ativada a prote\u00e7\u00e3o contra explora\u00e7\u00e3o de vulnerabilidades, que se baseia na recompila\u00e7\u00e3o aleat\u00f3ria do execut\u00e1vel sshd a cada inicializa\u00e7\u00e3o do sistema. A recompila\u00e7\u00e3o torna imprevis\u00edveis os deslocamentos das fun\u00e7\u00f5es no sshd, dificultando a cria\u00e7\u00e3o de exploits que utilizam m\u00e9todos de programa\u00e7\u00e3o orientada a retorno.\n<li class=\"l\"> Foi garantida uma randomiza\u00e7\u00e3o mais agressiva da localiza\u00e7\u00e3o da pilha em sistemas de 64 bits.\n<li class=\"l\"> Adicionada prote\u00e7\u00e3o contra a vulnerabilidade Spectre-BHB em estruturas microarquitet\u00f4nicas de processadores.\n<li class=\"l\"> Em processadores ARM64, para o espa\u00e7o do usu\u00e1rio e do kernel, foi ativada a flag DIT (Data Independent Timing) para bloquear ataques de canais laterais que manipulam a depend\u00eancia do tempo de execu\u00e7\u00e3o das instru\u00e7\u00f5es em rela\u00e7\u00e3o aos dados processados.\n<li class=\"l\"> Proporcionada a possibilidade de uso de lladdr na defini\u00e7\u00e3o de configura\u00e7\u00f5es de rede. Por exemplo, al\u00e9m da vincula\u00e7\u00e3o ao nome da interface (hostname.fxp0), pode-se usar a vincula\u00e7\u00e3o ao endere\u00e7o MAC (hostname.00:00:6e:00:34:8f).\n<li class=\"l\"> Melhorado o suporte para a transi\u00e7\u00e3o para o modo de espera em sistemas baseados na arquitetura ARM64.\n<li class=\"l\"> Significativamente ampliado o suporte para chips ARM da Apple.\n<li class=\"l\"> Foi adicionada suporte a novo hardware e novos drivers foram inclu\u00eddos.\n<li class=\"l\"> No driver bwfm para cart\u00f5es sem fio baseados em chips Broadcom e Cypress, foi implementado suporte a criptografia para WEP.\n<li class=\"l\"> No instalador, aprimorado o trabalho com RAIDs de software e implementado suporte inicial para criptografia de discos (Guided Disk Encryption).\n<li class=\"l\"> No tmux (\"terminal multiplexer\") foram adicionados novos comandos scroll-top e scroll-bottom para rolar o cursor at\u00e9 o in\u00edcio e o fim. Os pacotes LibreSSL e OpenSSH foram atualizados. Uma vis\u00e3o detalhada das melhorias pode ser encontrada nas an\u00e1lises do LibreSSL 3.7.0, OpenSSH 9.2 e OpenSSH 9.3.\n<li class=\"l\"> O n\u00famero de ports para a arquitetura AMD64 atingiu 11764 (era 11451), para aarch64 \u2014 11561 (era 11261), para i386 \u2014 10572 (era 10225). Entre as vers\u00f5es de aplicativos nos ports:\n<ul>\n<li>Asterisk 16.30.0, 18.17.0 e 20.2.0      <\/li>\n<li>Audacity 3.2.5      <\/li>\n<li>CMake 3.25.2      <\/li>\n<li>Chromium 111.0.5563.110      <\/li>\n<li>Emacs 28.2      <\/li>\n<li>FFmpeg 4.4.3      <\/li>\n<li>GCC 8.4.0 e 11.2.0      <\/li>\n<li>GHC 9.2.7      <\/li>\n<li>GNOME 43.3      <\/li>\n<li>Go 1.20.1      <\/li>\n<li>JDK 8u362, 11.0.18 e 17.0.6      <\/li>\n<li>KDE Gears 22.12.3      <\/li>\n<li>KDE Frameworks 5.103.0      <\/li>\n<li>Krita 5.1.5      <\/li>\n<li>LLVM\/Clang 13.0.0      <\/li>\n<li>LibreOffice 7.5.1.2      <\/li>\n<li>Lua 5.1.5, 5.2.4, 5.3.6 e 5.4.4      <\/li>\n<li>MariaDB 10.9.4      <\/li>\n<li>Mono 6.12.0.182      <\/li>\n<li>Mozilla Firefox 111.0 e ESR 102.9.0      <\/li>\n<li>Mozilla Thunderbird 102.9.0      <\/li>\n<li>Mutt 2.2.9 e NeoMutt 20220429      <\/li>\n<li>Node.js 18.15.0      <\/li>\n<li>OCaml 4.12.1      <\/li>\n<li>OpenLDAP 2.6.4      <\/li>\n<li>PHP 7.4.33, 8.0.28, 8.1.16 e 8.2.3      <\/li>\n<li>Postfix 3.5.17 e 3.7.3      <\/li>\n<li>PostgreSQL 15.2      <\/li>\n<li>Python 2.7.18, 3.9.16, 3.10.10 e 3.11.2      <\/li>\n<li>Qt 5.15.8 e 6.4.2      <\/li>\n<li>R 4.2.1      <\/li>\n<li>Ruby 3.0.5, 3.1.3 e 3.2.1      <\/li>\n<li>Rust 1.68.0      <\/li>\n<li>SQLite 2.8.17 e 3.41.0      <\/li>\n<li>Shotcut 22.12.21      <\/li>\n<li>Sudo 1.9.13.3      <\/li>\n<li>Suricata 6.0.10      <\/li>\n<li>Tcl\/Tk 8.5.19 e 8.6.13      <\/li>\n<li>TeX Live 2022      <\/li>\n<li>Vim 9.0.1388 e Neovim 0.8.3      <\/li>\n<li>Xfce 4.18  <\/ul>\n<li class=\"l\"> Componentes de desenvolvedores de terceiros atualizados presentes no OpenBSD 7.3:\n<ul>\n<li class=\"l\"> A pilha gr\u00e1fica Xenocara baseada em X.Org 7.7 com xserver 1.21.6 + patches, freetype 2.12.1, fontconfig 2.14, Mesa 22.3.4, xterm 378, xkeyboard-config 2.20, fonttosfnt 1.2.2.  <\/li>\n<li class=\"l\">    LLVM\/Clang 13.0.0 (+ patches)  <\/li>\n<li class=\"l\">    GCC 4.2.1 (+ patches) e 3.3.6 (+ patches)  <\/li>\n<li class=\"l\">    Perl 5.36.1 (+ patches)  <\/li>\n<li class=\"l\">    NSD 4.6.1  <\/li>\n<li class=\"l\">    Unbound 1.17  <\/li>\n<li class=\"l\">    Ncurses 5.7  <\/li>\n<li class=\"l\">    Binutils 2.17 (+ patches)  <\/li>\n<li class=\"l\">  Gdb 6.3 (+ patch)  <\/li>\n<li class=\"l\">  Awk 12.9.2022  <\/li>\n<li class=\"l\">  Expat 2.5.0.  <\/li>\n<\/ul>\n<p>Fonte: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=58944\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u0432\u044b\u043f\u0443\u0441\u043a \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0439 UNIX-\u043f\u043e\u0434\u043e\u0431\u043d\u043e\u0439 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b OpenBSD 7.3. \u041f\u0440\u043e\u0435\u043a\u0442 OpenBSD \u0431\u044b\u043b \u043e\u0441\u043d\u043e\u0432\u0430\u043d \u0422\u044d\u043e \u0434\u0435 \u0420\u0430\u0430\u0434\u0442\u043e\u043c (Theo de Raadt) \u0432 1995 \u0433\u043e\u0434\u0443 \u043f\u043e\u0441\u043b\u0435 \u043a\u043e\u043d\u0444\u043b\u0438\u043a\u0442\u0430 \u0441 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430\u043c\u0438 NetBSD, \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u0434\u043b\u044f \u0422\u044d\u043e \u0431\u044b\u043b \u0437\u0430\u043a\u0440\u044b\u0442 \u0434\u043e\u0441\u0442\u0443\u043f \u043a CVS \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044e NetBSD. \u041f\u043e\u0441\u043b\u0435 \u044d\u0442\u043e\u0433\u043e \u0422\u044d\u043e \u0434\u0435 \u0420\u0430\u0430\u0434\u0442 \u0441 \u0433\u0440\u0443\u043f\u043f\u043e\u0439 \u0435\u0434\u0438\u043d\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432 \u0441\u043e\u0437\u0434\u0430\u043b \u043d\u0430 \u0431\u0430\u0437\u0435 \u0434\u0435\u0440\u0435\u0432\u0430 \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u0445 \u0442\u0435\u043a\u0441\u0442\u043e\u0432 NetBSD \u043d\u043e\u0432\u0443\u044e \u043e\u0442\u043a\u0440\u044b\u0442\u0443\u044e [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-107801","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u0432\u044b\u043f\u0443\u0441\u043a \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0439 UNIX-\u043f\u043e\u0434\u043e\u0431\u043d\u043e\u0439 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b OpenBSD 7.3.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/pt\/blog\/news\/vypusk-openbsd-7-3\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"pt_PT\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0412\u044b\u043f\u0443\u0441\u043a OpenBSD 7.3 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u0432\u044b\u043f\u0443\u0441\u043a \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0439 UNIX-\u043f\u043e\u0434\u043e\u0431\u043d\u043e\u0439 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b OpenBSD 7.3.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/pt\/blog\/news\/vypusk-openbsd-7-3\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2023-04-10T22:48:22+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2023-04-12T08:36:33+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Lan\u00e7amento do OpenBSD 7.3 | ProHoster","description":"Lan\u00e7amento do sistema operacional livre baseado em UNIX OpenBSD 7.3.","canonical_url":"https:\/\/prohoster.info\/pt\/blog\/news\/vypusk-openbsd-7-3","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"pt_PT","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412\u044b\u043f\u0443\u0441\u043a OpenBSD 7.3 | ProHoster","og:description":"\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u0432\u044b\u043f\u0443\u0441\u043a \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0439 UNIX-\u043f\u043e\u0434\u043e\u0431\u043d\u043e\u0439 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b OpenBSD 7.3.","og:url":"https:\/\/prohoster.info\/pt\/blog\/news\/vypusk-openbsd-7-3","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2023-04-10T22:48:22+00:00","article:modified_time":"2023-04-12T08:36:33+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts\/107801","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/comments?post=107801"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts\/107801\/revisions"}],"predecessor-version":[{"id":173040,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts\/107801\/revisions\/173040"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/media?parent=107801"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/categories?post=107801"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/tags?post=107801"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}