{"id":110888,"date":"2023-10-17T03:10:16","date_gmt":"2023-10-17T01:10:16","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/vypusk-openbsd-7-4"},"modified":"2023-10-17T03:10:16","modified_gmt":"2023-10-17T01:10:16","slug":"vypusk-openbsd-7-4","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sl\/blog\/news\/vypusk-openbsd-7-4","title":{"rendered":"Izdaja OpenBSD 7.4","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Predstavljen je izlazak slobodnog UNIX-sli\u010dnog operativnog sistema OpenBSD 7.4. Projekat OpenBSD je osnovao Teo de Raadt 1995. godine nakon sukoba s programerima NetBSD, usled kojeg je Teou onemogu\u0107en pristup CVS repozitorijumu NetBSD. Nakon toga, Teo de Raadt je sa grupom istomi\u0161ljenika kreirao novu otvorenu operativnu sistemu na bazi stabla izvornog koda NetBSD, \u010diji su glavni ciljevi razvoja prenosivost (podr\u017eano je 13 hardverskih platformi), standardizacija, ispravnost, proaktivna bezbednost i integrisana kriptografska sredstva. Veli\u010dina punog instalacionog ISO-obraza osnovnog sistema OpenBSD 7.4 iznosi 630 MB.       <\/p>\n<p>Poleg neposrednega delovanja operacijskega sistema je projekt OpenBSD znan po svoji komponenti, ki so postale raz\u0161irjene v drugih sistemih in so se izkazale za ene najbolj varnih in kakovostnih re\u0161itev. Med njimi so: LibreSSL (fork OpenSSL), OpenSSH, paketni filtrir PF, uslu\u017ebenci usmerjanja OpenBGPD in OpenOSPFD, NTP stre\u017enik OpenNTPD, po\u0161tni stre\u017enik OpenSMTPD, multiplexer besedilnega terminala (podoben GNU screen) tmux, demon identd z implementacijo protokola IDENT, BSDL alternativa paketu GNU groff \u2013 mandoc, protokol za organizacijo sistemov z visoko razpolo\u017eljivostjo CARP (Common Address Redundancy Protocol), lahki HTTP stre\u017enik ter orodje za sinhronizacijo datotek OpenRSYNC.          <\/p>\n<p>Glavne izbolj\u0161ave:   <\/p>\n<ul>\n<li class=\"l\"> \u0414\u043b\u044f \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440 amd64 \u0438 i386 \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u044b \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u044b \u0434\u043b\u044f \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043c\u0438\u043a\u0440\u043e\u043a\u043e\u0434\u0430 \u043a \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430\u043c AMD.  \u041d\u043e\u0432\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043c\u0438\u043a\u0440\u043e\u043a\u043e\u0434\u0430  \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043f\u0440\u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0435.  \u0414\u043b\u044f \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0431\u0438\u043d\u0430\u0440\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u0441 \u043c\u0438\u043a\u0440\u043e\u043a\u043e\u0434\u043e\u043c \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d \u043f\u043e\u0440\u0442 &#171;ports\/sysutils\/firmware\/amd&#187;. \u0423\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u043d\u043e\u0432\u043e\u0433\u043e \u043c\u0438\u043a\u0440\u043e\u043a\u043e\u0434\u0430 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438  \u0448\u0442\u0430\u0442\u043d\u043e\u0439 \u0443\u0442\u0438\u043b\u0438\u0442\u044b fw_update. \u0410\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u0430\u044f \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043c\u0438\u043a\u0440\u043e\u043a\u043e\u0434\u0430 \u0434\u043b\u044f \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 Intel \u0431\u044b\u043b\u0430 \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u0430 \u0432 2018 \u0433\u043e\u0434\u0443 \u0438 \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u0430 \u0432 \u0432\u044b\u043f\u0443\u0441\u043a\u0435 OpenBSD 6.3.\n<li class=\"l\"> Za jezgro i prostor korisnika uklju\u010deni su mehanizmi za\u0161tite IBT (Indirect Branch Tracking, amd64) i BTI (Branch Target Identification, arm64), namenjeni blokiranju kr\u0161enja normalnog redosleda izvr\u0161enja (control flow) usled kori\u0161\u0107enja eksploitacija koje menjaju sa\u010duvane pokaziva\u010de na funkcije u memoriji (implementirana za\u0161tita ne dozvoljava zlonamernom kodu da izvr\u0161i prelazak na sredinu funkcije).\n<li class=\"l\"> Na sistemima sa arhitekturom arm64 za za\u0161titu prostora korisnika uklju\u010dena je autentifikacija pokaziva\u010da (Pointer Authentication). Tehnologija omogu\u0107ava kori\u0161\u0107enje specijalizovanih ARM64 instrukcija za proveru adresa povratka uz pomo\u0107 digitalnih potpisa, koji se \u010duvaju u neiskori\u0161\u0107enim gornjim bitovima samog pokaziva\u010da.\n<li class=\"l\"> \u041d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u043e\u0433\u043e \u043a\u043e\u043c\u043f\u0438\u043b\u044f\u0442\u043e\u0440\u0430 clang, \u0430 \u0442\u0430\u043a\u0436\u0435 clang \u0438 gcc \u0438\u0437 \u043f\u043e\u0440\u0442\u043e\u0432, \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u044b \u0434\u043b\u044f  \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0432\u044b\u0448\u0435\u043e\u0442\u043c\u0435\u0447\u0435\u043d\u043d\u044b\u0445 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u043e\u0432 \u0437\u0430\u0449\u0438\u0442\u044b, \u0447\u0442\u043e \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0443\u0441\u0438\u043b\u0438\u043b\u043e \u0437\u0430\u0449\u0438\u0442\u0443 \u0432\u0441\u0435\u0445 \u0431\u0430\u0437\u043e\u0432\u044b\u0445 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u0438 \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u0430 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u0438\u0437 \u043f\u043e\u0440\u0442\u043e\u0432 \u043e\u0442 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u043e\u0432, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 \u043c\u0435\u0442\u043e\u0434\u044b \u0432\u043e\u0437\u0432\u0440\u0430\u0442\u043d\u043e-\u043e\u0440\u0438\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f (ROP &#8212; Return-Oriented Programming). \u041f\u0440\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u0442\u0435\u0445\u043d\u0438\u043a\u0438 ROP \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043d\u0435 \u043f\u044b\u0442\u0430\u0435\u0442\u0441\u044f \u0440\u0430\u0437\u043c\u0435\u0441\u0442\u0438\u0442\u044c \u0441\u0432\u043e\u0439 \u043a\u043e\u0434 \u0432 \u043f\u0430\u043c\u044f\u0442\u0438, \u0430 \u043e\u043f\u0435\u0440\u0438\u0440\u0443\u0435\u0442 \u0443\u0436\u0435 \u0438\u043c\u0435\u044e\u0449\u0438\u043c\u0438\u0441\u044f \u0432 \u0437\u0430\u0433\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0430\u0445 \u043a\u0443\u0441\u043a\u0430\u043c\u0438 \u043c\u0430\u0448\u0438\u043d\u043d\u044b\u0445 \u0438\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u0439, \u0437\u0430\u0432\u0435\u0440\u0448\u0430\u044e\u0449\u0438\u0445\u0441\u044f \u0438\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u0435\u0439 \u0432\u043e\u0437\u0432\u0440\u0430\u0442\u0430 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f (\u043a\u0430\u043a \u043f\u0440\u0430\u0432\u0438\u043b\u043e, \u044d\u0442\u043e \u043e\u043a\u043e\u043d\u0447\u0430\u043d\u0438\u044f \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u0447\u043d\u044b\u0445 \u0444\u0443\u043d\u043a\u0446\u0438\u0439). \u0420\u0430\u0431\u043e\u0442\u0430 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u0430 \u0441\u0432\u043e\u0434\u0438\u0442\u0441\u044f \u043a \u043f\u043e\u0441\u0442\u0440\u043e\u0435\u043d\u0438\u044e \u0446\u0435\u043f\u043e\u0447\u043a\u0438 \u0432\u044b\u0437\u043e\u0432\u043e\u0432 \u043f\u043e\u0434\u043e\u0431\u043d\u044b\u0445 \u0431\u043b\u043e\u043a\u043e\u0432 (&#171;\u0433\u0430\u0434\u0436\u0435\u0442\u043e\u0432&#187;) \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043d\u0443\u0436\u043d\u043e\u0439 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438.\n<li class=\"l\"> Dodana je nova sistemska klica kqueue1, ki se razlikuje od kqueue po prenosu zastavic. Trenutno kqueue1 podpira le zastavo O_CLOEXEC (close-on-exec) za samodejno zapiranje datote\u010dnih descriptorjev v otro\u0161kem procesu po klicu exec().\n<li class=\"l\"> Za arhitekture amd64 in i386 je implementirana podpora za psevdoproces dt za organizacijo dinami\u010dnega sledenja sistema in aplikacij. Za vstavljanje uporabni\u0161kih zapisov v dnevnik ktrace je dodana sistemska klica utrace.\n<li class=\"l\"> Iz FreeBSD so prenesene popravke, ki odpravljajo nedolo\u010denost pri uporabi filesystemov MS-DOS.\n<li class=\"l\"> Onemogo\u010dena je bila mo\u017enost name\u0161\u010danja softdep, ki se uporablja za odlo\u017eeno grupirano zapisovanje metapodatkov.\n<li class=\"l\"> Programom, za\u0161\u010ditenim s sistemsko klicem unveil, je dovoljeno shranjevanje core-dampov v trenutni delovni imenik.\n<li class=\"l\"> Za arhitekturo ARM64 je bila uporabljena mo\u017enost prehoda v globoka stanja neaktivnosti (idle), dostopna v \u010dipih Apple M1\/M2, za var\u010devanje z energijo in izvajanje na\u010dina spanja.\n<li class=\"l\"> Dodana je bila obvozna za\u0161\u010dita proti ranljivosti Zenbleed v procesorjih AMD.\n<li class=\"l\"> Izbolj\u0161ana je podpora za ve\u010dprocesorske sisteme (SMP). Odstranjene so bile blokade funkcije arprequest(), koda za obravnavo prispevnih ARP-paketov in implementacija dolo\u010danja sosednjih vozli\u0161\u010d v skladu IPv6.\n<li class=\"l\"> Vmesnik za sinhronizacijo tabel paketnega filtra pfsync je bil predelano za izbolj\u0161ano delovanje z blokadami in zdru\u017eljivost s prihodnjim delom na razdeljevanju omre\u017enega sklada.\n<li class=\"l\"> \u0420\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0430 drm (Direct Rendering Manager) \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u0441 \u044f\u0434\u0440\u043e\u043c Linux 6.1.55 (\u0432 \u043f\u0440\u043e\u0448\u043b\u043e\u043c \u0432\u044b\u043f\u0443\u0441\u043a\u0435 &#8212; 6.1.15). \u0423\u043b\u0443\u0447\u0448\u0435\u043d\u0430 \u0440\u0430\u0431\u043e\u0442\u0430 \u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0441 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430\u043c\u0438 Intel \u043d\u0430 \u0431\u0430\u0437\u0435 \u043c\u0438\u043a\u0440\u043e\u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440 Alder Lake \u0438 Raptor Lake.\n<li class=\"l\"> Unapre\u0111enja su napravljena u hipervizoru VMM. U vmd je implementirana podr\u0161ka za vi\u0161ekratni model za virtio ure\u0111aje za blokove i mre\u017ee. U virtio ure\u0111aj za blokove dodana je podr\u0161ka za vektorski ulaz\/izlaz u zero-copy re\u017eimu. Pristup gostuju\u0107ih sustava na\u010dinima p-state AMD procesora je ograni\u010den. Vlasnicima <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/sl\/vps\/\"   title=\"virtualnih naprav\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"2146\">virtualnih naprav<\/a> omogu\u0107eno je putem vmctl da preimenuju u\u010ditani kernel.\n<li class=\"l\"> Dodani su novi zaglavni fajlovi uchar.h s tipovima char32_t i char16_t, te funkcijama c32rtomb(), mbrtoc32(), c16rtomb() i mbrtoc16(), definiranima u standardu C11.\n<li class=\"l\"> \u0412 \u0444\u0443\u043d\u043a\u0446\u0438\u044e malloc \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0430 \u043e\u043f\u0446\u0438\u044f &#171;D&#187; \u0434\u043b\u044f \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u044f \u0443\u0442\u0435\u0447\u0435\u043a \u043f\u0430\u043c\u044f\u0442\u0438 \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 ktrace (&#171;MALLOC_OPTIONS=D ktrace -tu program&#187;) \u0438 kdump (&#171;kdump -u malloc &#8230;&#187;).\n<li class=\"l\"> Alatu make dodana je podr\u0161ka za varijablu ${.VARIABLES} za ispis svih imena postavljenih globalnih varijabli.\n<li class=\"l\"> \u0412 \u0443\u0442\u0438\u043b\u0438\u0442\u0443  kdump \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0430 \u043e\u043f\u0446\u0438\u044f &#171;-u&#187; \u0434\u043b\u044f \u0432\u044b\u0431\u043e\u0440\u0430 \u0442\u043e\u0447\u0435\u043a \u0442\u0440\u0430\u0441\u0441\u0438\u0440\u043e\u0432\u043a\u0438 utrace \u043f\u043e \u0437\u0430\u0434\u0430\u043d\u043d\u043e\u0439 \u043c\u0435\u0442\u043a\u0435.\n<li class=\"l\"> \u0412 \u0443\u0442\u0438\u043b\u0438\u0442\u0443 openrsync \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u044b \u043e\u043f\u0446\u0438\u0438 &#171;&#8212;size-only&#187; \u0438 &#171;&#8212;ignore-times&#187;.\n<li class=\"l\"> \u0412 cron \u0438 crontab \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0430 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u0441\u043b\u0443\u0447\u0430\u0439\u043d\u044b\u0445 \u0441\u043c\u0435\u0449\u0435\u043d\u0438\u0439  \u043f\u0440\u0438 \u0443\u043a\u0430\u0437\u0430\u043d\u0438\u0438 \u0434\u0438\u0430\u043f\u0430\u0437\u043e\u043d\u043e\u0432 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0439 \u0441 \u0437\u0430\u0434\u0430\u043d\u043d\u044b\u043c \u0448\u0430\u0433\u043e\u043c, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0438\u0437\u0431\u0435\u0436\u0430\u0442\u044c \u043e\u0434\u043d\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e\u0433\u043e \u0437\u0430\u043f\u0440\u043e\u0441\u0430 \u0440\u0435\u0441\u0443\u0440\u0441\u0430 \u0441 \u0440\u0430\u0437\u043d\u044b\u0445 \u043c\u0430\u0448\u0438\u043d, \u0438\u043c\u0435\u044e\u0449\u0438\u0445 \u043e\u0434\u0438\u043d\u0430\u043a\u043e\u0432\u044b\u0435 \u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0432 cron.  \u041d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0443\u043a\u0430\u0437\u0430\u043d\u0438\u0435 &#171;0~59\/30&#187; \u0438\u043b\u0438 &#171;~\/30&#187; \u0432 \u043f\u043e\u043b\u0435 \u0441 \u043c\u0438\u043d\u0443\u0442\u0430\u043c\u0438 \u043f\u0440\u0438\u0432\u0435\u0434\u0451\u0442 \u043a \u0437\u0430\u043f\u0443\u0441\u043a\u0443 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0434\u0432\u0430 \u0440\u0430\u0437\u0430 \u0432 \u0447\u0430\u0441 \u0447\u0435\u0440\u0435\u0437 \u043f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0441\u043b\u0443\u0447\u0430\u0439\u043d\u043e \u0432\u044b\u0431\u0440\u0430\u043d\u043d\u044b\u0435 \u0438\u043d\u0442\u0435\u0440\u0432\u0430\u043b\u044b.\n<li class=\"l\"> Alatu wsconsctl dodana je mogu\u0107nost mapiranja dugmadi za dodirivanje sa dva ili tri prsta na touchpadu.\n<li class=\"l\"> Dodana je podr\u0161ka za novu opremu i uklju\u010deni su novi drajveri.\n<li class=\"l\"> Pobolj\u0161ana je instalacija na sistemima s armv7 i arm64 procesorima.\n<li class=\"l\"> Dodana je podr\u0161ka za u\u010ditavanje fajlova iz EFI sistemske particije (EFI System Partition).\n<li class=\"l\"> U instalatoru je pobolj\u0161ana podr\u0161ka za softverski RAID (softraid). Dodana je mogu\u0107nost postavljanja korenske particije u softraid na sistemima riscv64 i arm64. Softraid je dodat u ramdisk za arhitekturu powerpc64. Za arm64 implementirana je podr\u0161ka za \u0161ifriranje diskova (Guided Disk Encryption).\n<li class=\"l\"> U malloc funkciji dodana je provera svih blokova u listi odlo\u017eenog osloba\u0111anja memorije kako bi se utvrdile situacije pisanja u oslobo\u0111eno podru\u010dje memorije.\n<li class=\"l\"> \u0414\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434\u044b shutdown \u0442\u0435\u043f\u0435\u0440\u044c \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0432 \u0433\u0440\u0443\u043f\u043f\u0443 &#171;_shutdown&#187;, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0440\u0430\u0437\u0434\u0435\u043b\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u043e\u043c\u043e\u0447\u0438\u044f, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u0437\u0430\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u0435\u043c \u0440\u0430\u0431\u043e\u0442\u044b \u0438 \u043f\u0440\u044f\u043c\u043e\u0433\u043e \u0447\u0442\u0435\u043d\u0438\u044f \u0441 \u0434\u0438\u0441\u043a\u043e\u0432\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432.\n<li class=\"l\"> S sistemskim klicem unveil je orodje patch omejeno na dostop le do trenutnega imenika, imenika s za\u010dasnimi datotekami in datotek, navedenih v ukazni vrstici.\n<li class=\"l\"> Dodana je sysctl net.inet6.icmp6.nd6_queued za prikaz \u0161tevila paketov, ki \u010dakajo na odgovor ND6 (po analogiji z ARP).\n<li class=\"l\"> Pri nastavitvi naslova IPv6 na omre\u017enem vmesniku je zagotovljeno po\u0161iljanje obvestila sosednjim usmerjevalnikom na multicast naslov.\n<li class=\"l\"> Dodana je za\u010detna podpora TSO (TCP Segmentation Offload) in LRO (TCP Large Receive Offload) za obdelavo segmentov in zdru\u017eevanje paketov na strani omre\u017ene kartice.\n<li class=\"l\"> \u0423\u0441\u043a\u043e\u0440\u0435\u043d\u0430 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0430 \u0438\u0437 \u044f\u0434\u0440\u0430 \u043f\u0440\u0430\u0432\u0438\u043b \u043f\u0430\u043a\u0435\u0442\u043d\u043e\u0433\u043e \u0444\u0438\u043b\u044c\u0442\u0440\u0430 pf \u0443\u0442\u0438\u043b\u0438\u0442\u043e\u0439 pfctl. \u0412\u043a\u043b\u044e\u0447\u0435\u043d\u0430 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0430 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439 &#171;keep state&#187; \u0438 &#171;nat-to&#187; \u0434\u043b\u044f \u0432\u043e\u0437\u0432\u0440\u0430\u0449\u0430\u0435\u043c\u044b\u0445 \u0447\u0435\u0440\u0435\u0437 ICMP \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439 \u043e\u0431 \u043e\u0448\u0438\u0431\u043a\u0430\u0445.\n<li class=\"l\"> Izklopljeno je izra\u010dunavanje kontrolnih vsot IP, TCP in UDP za loopback vmesnike.\n<li class=\"l\"> Dodata je osnovna podr\u0161ka <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/sl\/vpn\/\"   title=\"VPN\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"243\">VPN<\/a> IPsec, odvisen od usmerjanja (route-based).\n<li class=\"l\"> V bgpd je dodana podpora Flowspec (RFC5575, trenutno se podpira le objavljanje pravil flowspec). Implementacija ASPA (Avtonomni sistem ponudnika avtorizacije) je usklajena s specifikacijami draft-ietf-sidrops-aspa-verification-16 in draft-ietf-sidrops-aspa-profile-16 ter je prenesena na uporabo iskalnih tabel, neodvisnih od AFI (Kazalnik dru\u017eine naslovov).\n<li class=\"l\"> Zmogljivost rpki-clienta je bila izbolj\u0161ana za 30-50%. Dodana je podpora za stiskanje gzip in deflate.\n<li class=\"l\"> Posodobljeni so paketi LibreSSL in OpenSSH. Podroben pregled izbolj\u0161av lahko najdete v pregledih LibreSSL 3.8.0, OpenSSH 9.4 in OpenSSH 9.5.\n<li class=\"l\"> \u0427\u0438\u0441\u043b\u043e \u043f\u043e\u0440\u0442\u043e\u0432 \u0434\u043b\u044f \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b AMD64 \u0441\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u043e  11845 (\u0431\u044b\u043b\u043e 11764), \u0434\u043b\u044f aarch64 &#8212; 11508 (\u0431\u044b\u043b\u043e 11561), \u0434\u043b\u044f i386 &#8212; 10603 (\u0431\u044b\u043b\u043e 10572). \u0421\u0440\u0435\u0434\u0438 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u0432 \u043f\u043e\u0440\u0442\u0430\u0445:\n<ul>\n<li>Asterisk 16.30.1, 18.19.0, 20.4.0      <\/li>\n<li>Audacity 3.3.3      <\/li>\n<li>CMake 3.27.5      <\/li>\n<li>Chromium 117.0.5938.149      <\/li>\n<li>Emacs 29.1      <\/li>\n<li>FFmpeg 4.4.4      <\/li>\n<li>GCC 8.4.0 in 11.2.0      <\/li>\n<li>GHC 9.2.7      <\/li>\n<li>GNOME 44      <\/li>\n<li>Go 1.21.1      <\/li>\n<li>JDK 8u382, 11.0.20 in 17.0.8      <\/li>\n<li>KDE Applications 23.08.0      <\/li>\n<li>KDE Frameworks 5.110.0      <\/li>\n<li>Krita 5.1.5      <\/li>\n<li>LLVM\/Clang 13.0.0 in 16.0.6      <\/li>\n<li>LibreOffice 7.6.2.1      <\/li>\n<li>Lua 5.1.5, 5.2.4, 5.3.6 in 5.4.6      <\/li>\n<li>MariaDB 10.9.6      <\/li>\n<li>Mono 6.12.0.199      <\/li>\n<li>Mozilla Firefox 118.0.1 in ESR 115.3.1      <\/li>\n<li>Mozilla Thunderbird 115.3.1      <\/li>\n<li>Mutt 2.2.12 in NeoMutt 20230517      <\/li>\n<li>Node.js 18.18.0      <\/li>\n<li>OpenLDAP 2.6.6      <\/li>\n<li>PHP 7.4.33, 8.0.30, 8.1.24 in 8.2.11      <\/li>\n<li>Postfix 3.7.3      <\/li>\n<li>PostgreSQL 15.4      <\/li>\n<li>Python 2.7.18, 3.9.18, 3.10.13 in 3.11.5      <\/li>\n<li>Qt 5.15.10 in 6.5.2      <\/li>\n<li>R 4.2.3      <\/li>\n<li>Ruby 3.0.6, 3.1.4 in 3.2.2      <\/li>\n<li>Rust 1.72.1      <\/li>\n<li>SQLite 3.42.0      <\/li>\n<li>Shotcut 23.07.29      <\/li>\n<li>Sudo 1.9.14.2      <\/li>\n<li>Suricata 6.0.12      <\/li>\n<li>Tcl\/Tk 8.5.19 in 8.6.13      <\/li>\n<li>TeX Live 2022      <\/li>\n<li>Vim 9.0.1897 in Neovim 0.9.1      <\/li>\n<li>Xfce 4.18    <\/li>\n<\/ul>\n<li class=\"l\"> Posodobljeni so komponenti tretjih strank, ki so vklju\u010deni v OpenBSD 7.3:\n<ul>\n<li class=\"l\"> Grafi\u010dni stik Xenocara na osnovi X.Org 7.7 s xserver 21.1.8 + popravki, freetype 2.13.0, fontconfig 2.14.2, Mesa 22.3.7, xterm 378, xkeyboard-config 2.20, fonttosfnt 1.2.2.  <\/li>\n<li class=\"l\">    LLVM\/Clang 13.0.0 (+ popravki)  <\/li>\n<li class=\"l\">    GCC 4.2.1 (+ popravki) in 3.3.6 (+ popravki)  <\/li>\n<li class=\"l\">    Perl 5.36.1 (+ popravki)  <\/li>\n<li class=\"l\">    NSD 4.7.0  <\/li>\n<li class=\"l\">    Unbound 1.18  <\/li>\n<li class=\"l\">    Ncurses 5.7  <\/li>\n<li class=\"l\">    Binutils 2.17 (+ popravki)  <\/li>\n<li class=\"l\">  Gdb 6.3 (+ popravki)  <\/li>\n<li class=\"l\">  Awk 12.9.2023  <\/li>\n<li class=\"l\">  Expat 2.5.0.  <\/li>\n<\/ul>\n<\/ul>\n<p>Izvor: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=59942\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u0432\u044b\u043f\u0443\u0441\u043a \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0439 UNIX-\u043f\u043e\u0434\u043e\u0431\u043d\u043e\u0439 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b OpenBSD 7.4. \u041f\u0440\u043e\u0435\u043a\u0442 OpenBSD \u0431\u044b\u043b \u043e\u0441\u043d\u043e\u0432\u0430\u043d \u0422\u044d\u043e \u0434\u0435 \u0420\u0430\u0430\u0434\u0442\u043e\u043c (Theo de Raadt) \u0432 1995 \u0433\u043e\u0434\u0443 \u043f\u043e\u0441\u043b\u0435 \u043a\u043e\u043d\u0444\u043b\u0438\u043a\u0442\u0430 \u0441 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430\u043c\u0438 NetBSD, \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u0434\u043b\u044f \u0422\u044d\u043e \u0431\u044b\u043b \u0437\u0430\u043a\u0440\u044b\u0442 \u0434\u043e\u0441\u0442\u0443\u043f \u043a CVS \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044e NetBSD. \u041f\u043e\u0441\u043b\u0435 \u044d\u0442\u043e\u0433\u043e \u0422\u044d\u043e \u0434\u0435 \u0420\u0430\u0430\u0434\u0442 \u0441 \u0433\u0440\u0443\u043f\u043f\u043e\u0439 \u0435\u0434\u0438\u043d\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432 \u0441\u043e\u0437\u0434\u0430\u043b \u043d\u0430 \u0431\u0430\u0437\u0435 \u0434\u0435\u0440\u0435\u0432\u0430 \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u0445 \u0442\u0435\u043a\u0441\u0442\u043e\u0432 NetBSD \u043d\u043e\u0432\u0443\u044e \u043e\u0442\u043a\u0440\u044b\u0442\u0443\u044e [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-110888","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.4 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u0432\u044b\u043f\u0443\u0441\u043a \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0439 UNIX-\u043f\u043e\u0434\u043e\u0431\u043d\u043e\u0439 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b OpenBSD 7.4.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sl\/blog\/news\/vypusk-openbsd-7-4\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.4\" \/>\n\t\t<meta property=\"og:locale\" content=\"sl_SI\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0412\u044b\u043f\u0443\u0441\u043a OpenBSD 7.4 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u0432\u044b\u043f\u0443\u0441\u043a \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0439 UNIX-\u043f\u043e\u0434\u043e\u0431\u043d\u043e\u0439 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b OpenBSD 7.4.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sl\/blog\/news\/vypusk-openbsd-7-4\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2023-10-17T01:10:16+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2023-10-17T01:10:16+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Izdaja OpenBSD 7.4 | ProHoster","description":"Predstavitev izdaje proste UNIX-podobne operacijske sistema OpenBSD 7.4.","canonical_url":"https:\/\/prohoster.info\/sl\/blog\/news\/vypusk-openbsd-7-4","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sl_SI","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412\u044b\u043f\u0443\u0441\u043a OpenBSD 7.4 | ProHoster","og:description":"\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u0432\u044b\u043f\u0443\u0441\u043a \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0439 UNIX-\u043f\u043e\u0434\u043e\u0431\u043d\u043e\u0439 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b OpenBSD 7.4.","og:url":"https:\/\/prohoster.info\/sl\/blog\/news\/vypusk-openbsd-7-4","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2023-10-17T01:10:16+00:00","article:modified_time":"2023-10-17T01:10:16+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"110888","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-02-04 14:42:29","updated":"2026-02-09 17:11:35","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/posts\/110888","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/comments?post=110888"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/posts\/110888\/revisions"}],"predecessor-version":[{"id":159390,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/posts\/110888\/revisions\/159390"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/media?parent=110888"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/categories?post=110888"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/tags?post=110888"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}