{"id":107801,"date":"2023-04-11T00:48:22","date_gmt":"2023-04-10T22:48:22","guid":{"rendered":"https:\/\/prohoster.info\/?p=107801"},"modified":"2023-04-12T10:36:33","modified_gmt":"2023-04-12T08:36:33","slug":"vypusk-openbsd-7-3","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sl\/blog\/news\/vypusk-openbsd-7-3","title":{"rendered":"Izid\u017e OpenBSD 7.3","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Predstavljen je izid prostega UNIX-podobnega operacijskega sistema OpenBSD 7.3. Projekt OpenBSD je leta 1995 ustanovil Theo de Raadt po sporu z razvijalci NetBSD, zaradi katerega je bil Teu onemogo\u010den dostop do CVS repozitorija NetBSD. Po tem je Theo de Raadt skupaj s skupino somi\u0161ljenikov ustvaril nov odprt operacijski sistem na podlagi izvorne kode NetBSD, katere glavne cilje so prenosljivost (podprto je 13 strojnih platform), standardizacija, pravilno delovanje, proaktivna varnost in integrirana kriptografska sredstva. Velikost celotne namestitvene ISO-slike osnovnega sistema OpenBSD 7.3 je 620 MB.       <\/p>\n<p>Osim samog operativnog sistema, projekat OpenBSD je poznat po svojim komponentama koje su se pro\u0161irile u drugim sistemima i koje su se dokazale kao neka od najsigurnijih i najkvalitetnijih re\u0161enja. Me\u0111u njima su: LibreSSL (fork OpenSSL), OpenSSH, paketni filter PF, demoni rutiranja OpenBGPD i OpenOSPFD, NTP-server OpenNTPD, po\u0161tanski <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/sl\/server\/\"   title=\"stre\u017enik\" data-wpil-keyword-link=\"linked\">stre\u017enik<\/a> OpenSMTPD, multiplexer terminal tekstov (analog GNU screen) tmux, demon identd s implementacijo protokola IDENT, BSDL-alternativa paketu GNU groff \u2014 mandoc, protokol za organizacijo sistemov odpornosti CARP (Common Address Redundancy Protocol), lahki http stre\u017enik, orodje za sinhronizacijo datotek OpenRSYNC.          <\/p>\n<p>Glavne izbolj\u0161ave:   <\/p>\n<ul>\n<li class=\"l\"> Uvedeni so bili sistemski klici waitid (\u010dakanje na spremembo stanja procesa), pinsyscall (za prenos informacij o vhodni to\u010dki execve za za\u0161\u010dito pred ROP zlorabami), getthrname in setthrname (pridobivanje in nastavitev imena niti).\n<li class=\"l\"> Za vse arhitekture je uporabljen clockintr, neodvisen od strojne opreme, na\u010drtovalnik prekinitev \u010dasovnika.\n<li class=\"l\"> Dodana je bila sysctl kern.autoconf_serial, ki jo je mogo\u010de uporabiti za spremljanje spremembe stanja drevesa naprav v jedru iz uporabni\u0161kega prostora.\n<li class=\"l\"> Izbolj\u0161ana je podpora ve\u010dprocesorskim sistemom (SMP). Filtri dogodkov za naprave tun in tap so bili prevedeni v razred mp-safe. Odpravljene so bile blokade funkcij select, pselect, poll, ppoll, getsockopt, setsockopt, mmap, munmap, mprotect, sched_yield, minherit in utrace, ter ioctl SIOCGIFCONF, SIOCGIFGMEMB, SIOCGIFGATTR in SIOCGIFGLIST. Izbolj\u0161ano je delo z blokadami v paketnem filtru pf. Pove\u010dana je bila zmogljivost sistema in omre\u017enega sklada na ve\u010djedrnih sistemih.\n<li class=\"l\">  Implementacija frameworka drm (Direct Rendering Manager) uskla\u0111ena je s jezgrom Linux 6.1.15 (u pro\u0161lom izdanju \u2014 5.15.69). U amdgpu drajver dodana je podr\u0161ka za GPU Ryzen 7000 \u201eRaphael\u201d, Ryzen 7020 \u201eMendocino\u201d, Ryzen 7045 \u201eDragon Range\u201d, Radeon RX 7900 XT\/XTX \u201eNavi 31\u201d, Radeon RX 7600M (XT), 7700S i 7600S \u201eNavi 33\u201d. U amdgpu je dodana podr\u0161ka za upravljanje pozadinskim osvjetljenjem, a omogu\u0107ena je i podr\u0161ka za xbacklight prilikom kori\u0161tenja X.Org drajvera modesetting. U Mesu je po defaultu uklju\u010deno ke\u0161iranje \u0161ejdera.\n<li class=\"l\"> Izbolj\u0161ave so bile narejene v hipervizorju VMM.\n<li class=\"l\"> Zmo\u017enosti za dodatno za\u0161\u010dito pomnilnika procesov v uporabni\u0161kem prostoru so bile uvedene: sistemski klic mimmutable in z njim povezana knji\u017eni\u010dna funkcija, ki omogo\u010da zaklepanje pravic dostopa pri refleksiji v pomnilnik (memory mappings). Po zaklepanju se dodeljene pravice za obmo\u010dje pomnilnika, na primer, prepoved pisanja in izvajanja, ne morejo ve\u010d spremeniti z nadaljnjimi klici funkcij mmap(), mprotect() in munmap(), ki ob poskusu spremembe vrnejo napako EPERM.\n<li class=\"l\"> Na arhitekturi AMD64 je za sistemske klice vklju\u010den mehanizem za\u0161\u010dite RETGUARD, ki je usmerjen v ote\u017eitev izvajanja exploitov, zgrajenih z uporabo izposojanja kosov kode in tehnik povratno usmerjenega programiranja.\n<li class=\"l\"> Vklju\u010dena je za\u0161\u010dita pred izkori\u0161\u010danjem ranljivosti, ki temelji na naklju\u010dnem preurejanju izvr\u0161ljive datoteke sshd ob vsakem zagonu sistema. Preurejanje omogo\u010da, da so premiki funkcij v sshd malo predvidljivi, kar ote\u017euje ustvarjanje exploitov, ki uporabljajo metode povratno usmerjenega programiranja.\n<li class=\"l\"> Zagotovljena je bolj agresivna randomizacija postavitve sklada na 64-bitnih sistemih.\n<li class=\"l\"> Dodana je za\u0161\u010dita pred ranljivostjo Spectre-BHB v mikroarhitekturnih strukturah procesorjev.\n<li class=\"l\"> Na procesorjih ARM64 za uporabni\u0161ki prostor in jedro je uporabljen znak DIT (Data Independent Timing) za blokiranje napadov po stranskih kanalih, ki manipulirajo z odvisnostjo \u010dasovne izvedbe ukazov od podatkov, obdelanih v teh ukazih.\n<li class=\"l\"> Omogo\u010deno je uporabo lladdr pri dolo\u010danju omre\u017enih konfiguracij. Na primer, poleg vezave na ime vmesnika (hostname.fxp0) je mogo\u010de uporabiti vezavo na MAC-naslov (hostname.00:00:6e:00:34:8f).\n<li class=\"l\"> Izbolj\u0161ana podpora za prehod v spania na\u010din za sisteme, ki temeljijo na arhitekturi ARM64.\n<li class=\"l\"> Znato raz\u0161irjena podpora za ARM \u010dipe Apple.\n<li class=\"l\"> Dodana je podr\u0161ka za novu opremu i uklju\u010deni su novi drajveri.\n<li class=\"l\"> V gonilniku bwfm za brez\u017ei\u010dne kartice na osnovi \u010dipov Broadcom in Cypress je bila uvedena podpora za \u0161ifriranje za WEP.\n<li class=\"l\"> V in\u0161talatorju je izbolj\u0161ano delo s programskimi RAID in izvedena za\u010detna podpora za \u0161ifriranje diskov (Guided Disk Encryption).\n<li class=\"l\"> U tmux (\u201eterminal multiplexer\u201d) dodane su nove komande scroll-top i scroll-bottom za pomicanje kursora na po\u010detak i kraj. A\u017eurirani su paketi LibreSSL i OpenSSH. Detaljan pregled pobolj\u0161anja mo\u017eete pogledati u pregledima LibreSSL 3.7.0, OpenSSH 9.2 i OpenSSH 9.3.\n<li class=\"l\"> Broj portova za arhitekturu AMD64 iznosio je 11764 (bilo je 11451), za aarch64 \u2014 11561 (bilo je 11261), za i386 \u2014 10572 (bilo je 10225). Me\u0111u verzijama aplikacija u portovima:\n<ul>\n<li>Asterisk 16.30.0, 18.17.0 in 20.2.0      <\/li>\n<li>Audacity 3.2.5      <\/li>\n<li>CMake 3.25.2      <\/li>\n<li>Chromium 111.0.5563.110      <\/li>\n<li>Emacs 28.2      <\/li>\n<li>FFmpeg 4.4.3      <\/li>\n<li>GCC 8.4.0 in 11.2.0      <\/li>\n<li>GHC 9.2.7      <\/li>\n<li>GNOME 43.3      <\/li>\n<li>Go 1.20.1      <\/li>\n<li>JDK 8u362, 11.0.18 in 17.0.6      <\/li>\n<li>KDE Gears 22.12.3      <\/li>\n<li>KDE Frameworks 5.103.0      <\/li>\n<li>Krita 5.1.5      <\/li>\n<li>LLVM\/Clang 13.0.0      <\/li>\n<li>LibreOffice 7.5.1.2      <\/li>\n<li>Lua 5.1.5, 5.2.4, 5.3.6 in 5.4.4      <\/li>\n<li>MariaDB 10.9.4      <\/li>\n<li>Mono 6.12.0.182      <\/li>\n<li>Mozilla Firefox 111.0 in ESR 102.9.0      <\/li>\n<li>Mozilla Thunderbird 102.9.0      <\/li>\n<li>Mutt 2.2.9 in NeoMutt 20220429      <\/li>\n<li>Node.js 18.15.0      <\/li>\n<li>OCaml 4.12.1      <\/li>\n<li>OpenLDAP 2.6.4      <\/li>\n<li>PHP 7.4.33, 8.0.28, 8.1.16 in 8.2.3      <\/li>\n<li>Postfix 3.5.17 in 3.7.3      <\/li>\n<li>PostgreSQL 15.2      <\/li>\n<li>Python 2.7.18, 3.9.16, 3.10.10 in 3.11.2      <\/li>\n<li>Qt 5.15.8 in 6.4.2      <\/li>\n<li>R 4.2.1      <\/li>\n<li>Ruby 3.0.5, 3.1.3 in 3.2.1      <\/li>\n<li>Rust 1.68.0      <\/li>\n<li>SQLite 2.8.17 in 3.41.0      <\/li>\n<li>Shotcut 22.12.21      <\/li>\n<li>Sudo 1.9.13.3      <\/li>\n<li>Suricata 6.0.10      <\/li>\n<li>Tcl\/Tk 8.5.19 in 8.6.13      <\/li>\n<li>TeX Live 2022      <\/li>\n<li>Vim 9.0.1388 in Neovim 0.8.3      <\/li>\n<li>Xfce 4.18  <\/ul>\n<li class=\"l\"> Posodobljeni so komponenti tretjih strank, ki so vklju\u010deni v OpenBSD 7.3:\n<ul>\n<li class=\"l\"> Grafi\u010dni sklad Xenocara na osnovi X.Org 7.7 z xserver 1.21.6 + popravki, freetype 2.12.1, fontconfig 2.14, Mesa 22.3.4, xterm 378, xkeyboard-config 2.20, fonttosfnt 1.2.2.  <\/li>\n<li class=\"l\">    LLVM\/Clang 13.0.0 (+ popravki)  <\/li>\n<li class=\"l\">    GCC 4.2.1 (+ popravki) in 3.3.6 (+ popravki)  <\/li>\n<li class=\"l\">    Perl 5.36.1 (+ popravki)  <\/li>\n<li class=\"l\">    NSD 4.6.1  <\/li>\n<li class=\"l\">    Unbound 1.17  <\/li>\n<li class=\"l\">    Ncurses 5.7  <\/li>\n<li class=\"l\">    Binutils 2.17 (+ popravki)  <\/li>\n<li class=\"l\">  Gdb 6.3 (+ popravki)  <\/li>\n<li class=\"l\">  Awk 12.9.2022  <\/li>\n<li class=\"l\">  Expat 2.5.0.  <\/li>\n<\/ul>\n<p>Izvor: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=58944\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u0432\u044b\u043f\u0443\u0441\u043a \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0439 UNIX-\u043f\u043e\u0434\u043e\u0431\u043d\u043e\u0439 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b OpenBSD 7.3. \u041f\u0440\u043e\u0435\u043a\u0442 OpenBSD \u0431\u044b\u043b \u043e\u0441\u043d\u043e\u0432\u0430\u043d \u0422\u044d\u043e \u0434\u0435 \u0420\u0430\u0430\u0434\u0442\u043e\u043c (Theo de Raadt) \u0432 1995 \u0433\u043e\u0434\u0443 \u043f\u043e\u0441\u043b\u0435 \u043a\u043e\u043d\u0444\u043b\u0438\u043a\u0442\u0430 \u0441 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430\u043c\u0438 NetBSD, \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u0434\u043b\u044f \u0422\u044d\u043e \u0431\u044b\u043b \u0437\u0430\u043a\u0440\u044b\u0442 \u0434\u043e\u0441\u0442\u0443\u043f \u043a CVS \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044e NetBSD. \u041f\u043e\u0441\u043b\u0435 \u044d\u0442\u043e\u0433\u043e \u0422\u044d\u043e \u0434\u0435 \u0420\u0430\u0430\u0434\u0442 \u0441 \u0433\u0440\u0443\u043f\u043f\u043e\u0439 \u0435\u0434\u0438\u043d\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432 \u0441\u043e\u0437\u0434\u0430\u043b \u043d\u0430 \u0431\u0430\u0437\u0435 \u0434\u0435\u0440\u0435\u0432\u0430 \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u0445 \u0442\u0435\u043a\u0441\u0442\u043e\u0432 NetBSD \u043d\u043e\u0432\u0443\u044e \u043e\u0442\u043a\u0440\u044b\u0442\u0443\u044e [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-107801","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.4 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u0432\u044b\u043f\u0443\u0441\u043a \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0439 UNIX-\u043f\u043e\u0434\u043e\u0431\u043d\u043e\u0439 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b OpenBSD 7.3.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sl\/blog\/news\/vypusk-openbsd-7-3\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.4\" \/>\n\t\t<meta property=\"og:locale\" content=\"sl_SI\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0412\u044b\u043f\u0443\u0441\u043a OpenBSD 7.3 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u0432\u044b\u043f\u0443\u0441\u043a \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0439 UNIX-\u043f\u043e\u0434\u043e\u0431\u043d\u043e\u0439 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b OpenBSD 7.3.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sl\/blog\/news\/vypusk-openbsd-7-3\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2023-04-10T22:48:22+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2023-04-12T08:36:33+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Izid OpenBSD 7.3 | ProHoster","description":"Predstavljen je izid svobodne UNIX-podobne operacijske sistema OpenBSD 7.3.","canonical_url":"https:\/\/prohoster.info\/sl\/blog\/news\/vypusk-openbsd-7-3","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sl_SI","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412\u044b\u043f\u0443\u0441\u043a OpenBSD 7.3 | ProHoster","og:description":"\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u0432\u044b\u043f\u0443\u0441\u043a \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0439 UNIX-\u043f\u043e\u0434\u043e\u0431\u043d\u043e\u0439 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b OpenBSD 7.3.","og:url":"https:\/\/prohoster.info\/sl\/blog\/news\/vypusk-openbsd-7-3","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2023-04-10T22:48:22+00:00","article:modified_time":"2023-04-12T08:36:33+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/posts\/107801","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/comments?post=107801"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/posts\/107801\/revisions"}],"predecessor-version":[{"id":173040,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/posts\/107801\/revisions\/173040"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/media?parent=107801"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/categories?post=107801"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/tags?post=107801"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}