{"id":82190,"date":"2020-05-20T07:41:57","date_gmt":"2020-05-20T05:41:57","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/vypusk-openbsd-6-7"},"modified":"2020-05-20T07:41:57","modified_gmt":"2020-05-20T05:41:57","slug":"vypusk-openbsd-6-7","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sl\/blog\/news\/vypusk-openbsd-6-7","title":{"rendered":"Izdaja OpenBSD 6.7","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><noindex><a rel=\"nofollow\" href=\"https:\/\/marc.info\/?l=openbsd-announce&#038;m=158989783626149&#038;w=2\">\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d<\/a><\/noindex> izdavanje slobodnog, vi\u0161ep platformskog UNIX-sli\u010dnog operativnog sistema <noindex><a rel=\"nofollow\" href=\"http:\/\/www.openbsd.org\/66.html\">OpenBSD 6.7<\/a><\/noindex>. Projekat OpenBSD osnovao je Teo de Raadt 1995. godine nakon <noindex><a rel=\"nofollow\" href=\"http:\/\/zeus.theos.com\/deraadt\/coremail.html\">konflikta<\/a><\/noindex> sa programerima NetBSD, nakon \u010dega je Teu bio onemogu\u0107en pristup CVS repozitorijumu NetBSD. Nakon toga, Teo de Raadt je sa grupom istomi\u0161ljenika osnovao novu otvorenu operativnu sistemu na osnovu izvorne grane NetBSD, s ciljem da unapredi prenosivost (<noindex><a rel=\"nofollow\" href=\"http:\/\/www.openbsd.org\/plat.html\">podprt<\/a><\/noindex> 12 hardverskih platformi), standardizacija, ispravno funkcionisanje, aktivna bezbednost i integrisana kriptografska sredstva. Veli\u010dina punog instalacionog <noindex><a rel=\"nofollow\" href=\"http:\/\/ftp.eu.openbsd.org\/pub\/OpenBSD\/6.7\/\">ISO-obraza<\/a><\/noindex> osnovnog sistema OpenBSD 6.7 iznosi 470 MB. <\/p>\n<p>Osim same operativne sistema, projekat OpenBSD je poznat po svojim komponentama koje su se ra\u0161irile u drugim sistemima i pokazale se kao jedno od najbezbednijih i najkvalitetnijih re\u0161enja. Me\u0111u njima su: <noindex><a rel=\"nofollow\" href=\"http:\/\/www.libressl.org\/\">LibreSSL<\/a><\/noindex> (<noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=39617\">fork<\/a><\/noindex> OpenSSL), <noindex><a rel=\"nofollow\" href=\"http:\/\/www.openssh.com\/\">OpenSSH<\/a><\/noindex>, paketni filter <noindex><a rel=\"nofollow\" href=\"http:\/\/www.openbsd.org\/faq\/pf\/index.html\">PF<\/a><\/noindex>, ruteri <noindex><a rel=\"nofollow\" href=\"http:\/\/www.openbgpd.org\/\">OpenBGPD i OpenOSPFD<\/a><\/noindex>, NTP server <noindex><a rel=\"nofollow\" href=\"http:\/\/www.openntpd.org\/\">OpenNTPD<\/a><\/noindex>, po\u0161tanski server <noindex><a rel=\"nofollow\" href=\"http:\/\/www.opensmtpd.org\/\">OpenSMTPD<\/a><\/noindex>, multiplexer tekstualnog terminala (analog GNU screen-a) <noindex><a rel=\"nofollow\" href=\"http:\/\/tmux.sourceforge.net\/\">tmux<\/a><\/noindex>, demon <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=36442\">identd<\/a><\/noindex> s implementacijo protokola IDENT, BSDL-alternativa paketu GNU groff \u2014 <noindex><a rel=\"nofollow\" href=\"http:\/\/mdocml.bsd.lv\/\">mandoc<\/a><\/noindex>, protokol za organizaciju sistema otpora CARP (Common Address Redundancy Protocol), lagani <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=40232\">http server<\/a><\/noindex>, alat za sinhronizaciju datoteka <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=50129\">OpenRSYNC<\/a><\/noindex>.<\/p>\n<p>Glavne <noindex><a rel=\"nofollow\" href=\"http:\/\/www.openbsd.org\/67.html\">izbolj\u0161ave<\/a><\/noindex>: <\/p>\n<ul>\n<li class=\"l\"> Fajl sistem FFS2, koji koristi 64-bitne vrednosti vremena i broja blokova, podrazumevano se koristi u novim instalacijama skoro za sve podr\u017eane arhitekture umesto FFS (osim landisk, luna88k i sgi).\n<li class=\"l\"> Dodata je nova metoda provere validnosti pristupa sistemskim pozivima, koja dodatno ote\u017eava iskori\u0161\u0107avanje ranjivosti. Metoda dopu\u0161ta izvr\u0161avanje sistemskih poziva samo ako se pozivaju iz prethodno registrovanih memorijskih oblasti. Za ozna\u010davanje memorijskih oblasti i aktivaciju za\u0161tite predlo\u017een je novi sistemski poziv msyscall().\n<li class=\"l\"> Pove\u0107an je broj particija koje se mogu kreirati na jednom disku sa 7 na 15.\n<li class=\"l\"> \u041a\u043e\u0434 \u0440\u0430\u0437\u0431\u043e\u0440\u0430 \u043e\u043f\u0446\u0438\u0439 \u0432 cron \u0431\u044b\u043b \u043f\u0435\u0440\u0435\u043f\u0438\u0441\u0430\u043d \u0434\u043b\u044f \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0435\u0439, \u043f\u043e\u0434\u043e\u0431\u043d\u044b\u0445 getopt, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a &#171;-ns&#187; \u0438 \u043f\u043e\u0432\u0442\u043e\u0440\u043d\u043e\u0435 \u0443\u043a\u0430\u0437\u0430\u043d\u0438\u0435 \u043e\u0434\u043d\u0438\u0445 \u0438 \u0442\u0435\u0445 \u0436\u0435 \u0444\u043b\u0430\u0433\u043e\u0432. \u041f\u043e\u043b\u0435 &#171;options&#187; \u0432 crontab \u043f\u0435\u0440\u0435\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u043e \u0432 &#171;flags&#187;. \u0412 crontab \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d \u0444\u043b\u0430\u0433 &#171;-s&#187;, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u0442\u043e\u043b\u044c\u043a\u043e \u043e\u0434\u0438\u043d \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440 \u0437\u0430\u0434\u0430\u043d\u0438\u044f \u043e\u0434\u043d\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e. \u0414\u043e\u0431\u0430\u0432\u043b\u0435\u043d \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440 &#171;~&#187; \u0434\u043b\u044f \u0443\u043a\u0430\u0437\u0430\u043d\u0438\u044f \u0441\u043b\u0443\u0447\u0430\u0439\u043d\u043e\u0433\u043e \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u043c\u0435\u043d\u0438.\n<li class=\"l\"> U prozora menad\u017eeru cwm implementirana je mogu\u0107nost odre\u0111ivanja veli\u010dine prozora u procentualnom odnosu na veli\u010dinu primarnog prozora pri mozaikovom rasporedu.\n<li class=\"l\"> Za powerpc arhitekturu izvr\u0161en je prelazak na kori\u0161\u0107enje Clang-a kao podrazumevano i aktivirana nezavisna od arhitekture realizacija mplock-a.\n<li class=\"l\"> \u0412 apmd \u0443\u043b\u0443\u0447\u0448\u0435\u043d\u0430 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u0430 \u0432 \u0436\u0434\u0443\u0449\u0438\u0439 \u0438 \u0441\u043f\u044f\u0449\u0438\u0439 \u0440\u0435\u0436\u0438\u043c\u044b (-z\/-Z) \u2014 \u0434\u0435\u043c\u043e\u043d \u0442\u0435\u043f\u0435\u0440\u044c \u0440\u0435\u0430\u0433\u0438\u0440\u0443\u0435\u0442 \u043d\u0430 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f \u043e\u0431 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0438 \u0437\u0430\u0440\u044f\u0434\u0430 \u0430\u043a\u043a\u0443\u043c\u0443\u043b\u044f\u0442\u043e\u0440\u0430, \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u0435 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u043e\u043c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u043f\u0438\u0442\u0430\u043d\u0438\u044f. \u041f\u0435\u0440\u0435\u0445\u043e\u0434 \u0432 \u0441\u043e\u043d \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442 \u0441 \u0437\u0430\u0434\u0435\u0440\u0436\u043a\u043e\u0439 \u0432 60 \u0441\u0435\u043a\u0443\u043d\u0434, \u0447\u0442\u043e \u0434\u0430\u0451\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0432\u0440\u0435\u043c\u044f \u0432\u0437\u044f\u0442\u044c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0432 \u0441\u0432\u043e\u0438 \u0440\u0443\u043a\u0438.\n<li class=\"l\"> \u0412\u043e \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u044b\u0439 HTTP-\u0441\u0435\u0440\u0432\u0435\u0440 \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0430 \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u0430\u044f \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 $REQUEST_SCHEME \u0434\u043b\u044f \u0441\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0438\u0441\u0445\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 (http \u0438\u043b\u0438 https) \u043f\u0440\u0438 \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043e\u043f\u0446\u0438\u044f &#171;strip&#187;, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e chroot \u0432 \/var\/www \u0434\u043b\u044f \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 FastCGI.\n<li class=\"l\"> U alatu top pojavila se podr\u0161ka za pomeranje pomo\u0107u tastera 9 i 0.\n<li class=\"l\"> Predstavljen je mehanizam za osloba\u0111anje stranica iz memorije u obrnutom redosledu, \u0161to zna\u010dajno pove\u0107ava efikasnost aktivnog osloba\u0111anja velikog broja stranica.\n<li class=\"l\"> Na DNS serveru unbound podrazumevano je uklju\u010dena provera DNSSEC.\n<li class=\"l\"> Sistemski pozivi su oslobo\u0111eni od globalne blokade.<br \/>\n    __thrsleep(2), __thrwakeup(2), close(2), closefrom(2), dup(2), dup2(2), dup3(2), flock(2), fcntl(2), kqueue(2), pipe(2), pipe2(2) i nanosleep(2), kao i osnovni deo ioctl(2).<\/p>\n<li class=\"l\"> Pro\u0161irena podr\u0161ka za hardver. Dodan je novi drajver iwx za be\u017ei\u010dne \u010dipove Intel AX200, dok je u drajveru iwm dodata podr\u0161ka za ure\u0111aje Intel 9260 i 9560. Dodata je drajver rge za Realtek 8125 PCI Express 2.5Gb. Predlo\u017eeno je mnogo novih drajvera za pobolj\u0161anje rada na arm64 i armv7 plo\u010dama, uklju\u010duju\u0107i podr\u0161ku za Raspberry Pi 4 i unapre\u0111enu podr\u0161ku za Raspberry Pi 2 i 3.\n<li class=\"l\"> Pro\u0161irena je zvu\u010dna podsystema sndio. Dodani su API sioctl_open i alat sndioctl za upravljanje zvukom preko sndiod. Uklonjen je \/dev\/mixer, umesto kojeg su svi portovi preba\u010deni na sndio umesto interfejsa mixer jezgra. U sndiod-u je obezbe\u0111ena upotreba hardverskih mehanizama za upravljanje ja\u010dinom zvuka. Kako bi se poja\u010dala sigurnost, zabranjen je pristup obi\u010dnim korisnicima ka \/dev\/audio* i \/dev\/rmidi*.\n<li class=\"l\"> \u0412 \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u043e\u043c \u0441\u0442\u0435\u043a\u0435 \u043f\u0440\u0435\u043a\u0440\u0430\u0449\u0435\u043d\u043e \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435 \u043a \u043b\u044e\u0431\u043e\u0439 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0439 Wi-Fi \u0441\u0435\u0442\u0438, \u043d\u0435 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u044e\u0449\u0435\u0439 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u0435, \u0437\u0430 \u0438\u0441\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435\u043c \u044f\u0432\u043d\u043e\u0433\u043e \u0432\u044b\u0437\u043e\u0432\u0430 \u043a\u043e\u043c\u0430\u043d\u0434\u044b &#171;ifconfig join&#187;. \u041e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d \u0437\u0430\u043f\u0443\u0441\u043a \u0444\u043e\u043d\u043e\u0432\u043e\u0433\u043e \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0439 \u043f\u0440\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0438 \u043a\u043e\u043c\u0430\u043d\u0434\u044b &#171;ifconfig scan&#187; \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c root. \u0423\u0432\u0435\u043b\u0438\u0447\u0435\u043d \u043a\u044d\u0448 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u043e\u0432 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f. \u0414\u043e\u0431\u0430\u0432\u043b\u0435\u043d \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0435\u043c\u044b\u0439 \u0447\u0435\u0440\u0435\u0437 ifconfig \u0444\u043b\u0430\u0433 &#171;nwflag nomimo&#187;, \u043f\u043e\u043c\u043e\u0433\u0430\u044e\u0449\u0438\u0439 \u0438\u0437\u0431\u0430\u0432\u0438\u0442\u044c\u0441\u044f \u043e\u0442 \u043f\u043e\u0442\u0435\u0440\u0438 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 11n \u043f\u0440\u0438 \u043d\u0430\u043b\u0438\u0447\u0438\u0438 \u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435 \u043d\u0435\u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u044b\u0445 \u0440\u0430\u0437\u044a\u0451\u043c\u043e\u0432 \u0434\u043b\u044f \u0430\u043d\u0442\u0435\u043d\u043d. \u0414\u043b\u044f \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430 bwfm \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0430 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u0440\u0435\u0436\u0438\u043c\u0430 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f. \u0423\u043b\u0443\u0447\u0448\u0435\u043d\u043e \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0435 \u043f\u0435\u0440\u0435\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435 \u043c\u0435\u0436\u0434\u0443 \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u043c\u0438 \u0441\u0435\u0442\u044f\u043c\u0438 \u0447\u0435\u0440\u0435\u0437 \u043f\u043e\u043d\u0438\u0436\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u043e\u0440\u0438\u0442\u0435\u0442\u0430 \u0434\u043b\u044f \u0441\u0435\u0442\u0435\u0439, \u043a \u043a\u043e\u0442\u043e\u0440\u044b\u043c \u043d\u0435 \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0438\u0442\u044c\u0441\u044f.\n<li class=\"l\"> U mre\u017enom steku pojavio se novi drajver pppac, koji sadr\u017ei implementaciju interfejsa PPP Access Concentrator. Pode\u0161avanja npppd.conf preba\u010dena su na kori\u0161\u0107enje pppac umesto tun. Kada je preusmeravanje paketa isklju\u010deno, dodata je provera uskla\u0111enosti adrese odredi\u0161ta u paketu sa adresom mre\u017enog interfejsa. Uklonjena je podr\u0161ka za mobileip.\n<li class=\"l\"> Uporabnikom brez pravic root je prepovedano uporabo ioctl za spreminjanje naslova omre\u017enega vmesnika in spreminjanje parametrov pppoe vmesnikov.\n<li class=\"l\"> V sysupgrade je omogo\u010deno izvajanje nadgradnje vdelanih sistemov (fw_update) pred ponovnim zagonom med nadgradnjo.\n<li class=\"l\"> Izbolj\u0161an je sistemski klic unveil, ki zagotavlja izolacijo dostopa do datote\u010dnega sistema. \u0160tevilo aplikacij iz osnovnega sistema, za katere je bila implementirana za\u0161\u010dita s pomo\u010djo unveil, je zdaj 82. Med drugim so vmstat, iostat in systat pre\u0161li na unveil.\n<li class=\"l\"> V crypto(3) je bila dodana podpora za RSA-PSS.\n<li class=\"l\"> \u0412 DNS \u0440\u0435\u0437\u043e\u043b\u0432\u0435\u0440 unwind \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0430 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 DoT (DNS over TLS). \u0414\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0430 \u043a\u043e\u043c\u0430\u043d\u0434\u0430 &#171;unwindctl status memory&#187;.\n<li class=\"l\"> \u0417\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043c\u043e\u0434\u0435\u0440\u043d\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f ipsec. \u0414\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0430 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u043f\u0435\u0440\u0435\u043c\u0435\u0449\u0435\u043d\u0438\u044f \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u043c\u0435\u0436\u0434\u0443 rdomain \u043f\u0440\u0438 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u0438 \u0438 \u0440\u0430\u0441\u0448\u0438\u0444\u0440\u043e\u0432\u043a\u0435 \u0434\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u0430\u0442\u0430\u043a \u043f\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u043c \u043a\u0430\u043d\u0430\u043b\u0430\u043c. \u0412 iked \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0430 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f rdomain, \u0430 \u0432 iked.conf \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0430 \u043e\u043f\u0446\u0438\u044f &#8216;rdomain&#8217;<br \/>\nZa iked i isakmpd je po defaultu postavljena razina IPSEC_LEVEL_REQUIRE, koja zabranjuje obradu ne\u0161ifriranih paketa koji odgovaraju toku. Algoritmi curve25519, ecp256, ecp384, ecp521, modp3072 i modp4096 dodani su u postavke grupe Diffie-Hellman za IKE SA. U iked je metoda autentifikacije po defaultu promijenjena na autentifikaciju putem digitalnog potpisa (RFC 7427). Dodane su postavke ESN u iked.conf. Dodana je opcija &#171;-p&#187; za odabir nestandardnog UDP porta. <\/p>\n<li class=\"l\"> Mo\u017enost multiplexerja terminalov tmux je bila raz\u0161irjena, dodanih je bilo veliko novih mo\u017enosti.\n<li class=\"l\"> A\u017eurirana je verzija mail servera OpenSMTPD. U ugra\u0111enim filtrima implementirana je klju\u010dna rije\u010d &#171;bypass&#187; za prolazak obrade pod odre\u0111enim uvjetima. Dozvoljeno je kori\u0161tenje imena korisnika trenutne sesije smtpd u filtrima. U smtpd.conf je u parametrima omogu\u0107ena upotreba mail-from i rctp-to.\n<li class=\"l\"> Posodobljen je paket OpenSSH 8.2, ki je pridobila podporo za FIDO\/U2F \u017eetone dvofaktorske overitve. Podrobne informacije o izbolj\u0161avah si lahko ogledate. <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=52369\">ovde<\/a><\/noindex>.\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=52916\">Posodobljeno<\/a><\/noindex> Paket LibreSSL, v katerem je bila kon\u010dana implementacija TLS 1.3 na osnovi novega kon\u010dnega avtomata in podskupine za delo z zapisi. Privzeto je aktivirana le odjemalska stran TLS 1.3, stre\u017eni\u0161ko stran pa na\u010drtujejo aktivirati privzeto v eni izmed prihodnjih razli\u010dic. Seznam drugih sprememb je mogo\u010de videti v napovedih razli\u010dic. <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=52700\">3.1.0<\/a><\/noindex> in <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=52916\">3.1.1<\/a><\/noindex>.\n<li class=\"l\"> Broj portova za arhitekturu AMD64 iznosio je 11268, za aarch64 \u2014 10848, a za i386 \u2014 10715. A\u017eurirane su komponente od strane tre\u0107ih strana koje su uklju\u010dene u OpenBSD 6.7:\n<ul>\n<li class=\"l\"> Grafi\u010dni sklad Xenocara, ki temelji na X.Org 7.7 z xserver 1.20.8 + popravki, freetype 2.10.1, fontconfig 2.12.4, Mesa 19.2.8, xterm 351, xkeyboard-config 2.20;\n<\/li>\n<li class=\"l\">   LLVM\/Clang 8.0.1 (with patches)\n<\/li>\n<li class=\"l\">    GCC 4.2.1 (with patches) and 3.3.6 (with patches)\n<\/li>\n<li class=\"l\">   Perl 5.30.2 (s popravki)\n<\/li>\n<li class=\"l\">    NSD 4.2.4\n<\/li>\n<li class=\"l\">   Unbound 1.10.0\n<\/li>\n<li class=\"l\">  Ncurses 5.7\n<\/li>\n<li class=\"l\">  Binutils 2.17 (with patches)\n<\/li>\n<li class=\"l\">    Gdb 6.3 (with patches)\n<\/li>\n<li class=\"l\">    Awk z 20. decembra 2012.\n<\/li>\n<li class=\"l\">    Expat 2.2.8\n<\/li>\n<\/ul>\n<p><noindex><a rel=\"nofollow\" name=\"link\"><\/a><\/noindex><\/p>\n<p>Izvor: <a \ncontent=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=52986\">opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u0432\u044b\u043f\u0443\u0441\u043a \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0439 \u043a\u0440\u043e\u0441\u0441-\u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435\u043d\u043d\u043e\u0439 UNIX-\u043f\u043e\u0434\u043e\u0431\u043d\u043e\u0439 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b OpenBSD 6.7. \u041f\u0440\u043e\u0435\u043a\u0442 OpenBSD \u0431\u044b\u043b \u043e\u0441\u043d\u043e\u0432\u0430\u043d \u0422\u044d\u043e \u0434\u0435 \u0420\u0430\u0430\u0434\u0442\u043e\u043c (Theo de Raadt) \u0432 1995 \u0433\u043e\u0434\u0443 \u043f\u043e\u0441\u043b\u0435 \u043a\u043e\u043d\u0444\u043b\u0438\u043a\u0442\u0430 \u0441 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430\u043c\u0438 NetBSD, \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u0434\u043b\u044f \u0422\u044d\u043e \u0431\u044b\u043b \u0437\u0430\u043a\u0440\u044b\u0442 \u0434\u043e\u0441\u0442\u0443\u043f \u043a CVS \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044e NetBSD. \u041f\u043e\u0441\u043b\u0435 \u044d\u0442\u043e\u0433\u043e \u0422\u044d\u043e \u0434\u0435 \u0420\u0430\u0430\u0434\u0442 \u0441 \u0433\u0440\u0443\u043f\u043f\u043e\u0439 \u0435\u0434\u0438\u043d\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432 \u0441\u043e\u0437\u0434\u0430\u043b \u043d\u0430 \u0431\u0430\u0437\u0435 \u0434\u0435\u0440\u0435\u0432\u0430 \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u0445 \u0442\u0435\u043a\u0441\u0442\u043e\u0432 NetBSD \u043d\u043e\u0432\u0443\u044e [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-82190","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.5 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u0432\u044b\u043f\u0443\u0441\u043a \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0439 \u043a\u0440\u043e\u0441\u0441-\u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435\u043d\u043d\u043e\u0439 UNIX-\u043f\u043e\u0434\u043e\u0431\u043d\u043e\u0439 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sl\/blog\/news\/vypusk-openbsd-6-7\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.5\" \/>\n\t\t<meta property=\"og:locale\" content=\"sl_SI\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0412\u044b\u043f\u0443\u0441\u043a OpenBSD 6.7 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u0432\u044b\u043f\u0443\u0441\u043a \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0439 \u043a\u0440\u043e\u0441\u0441-\u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435\u043d\u043d\u043e\u0439 UNIX-\u043f\u043e\u0434\u043e\u0431\u043d\u043e\u0439 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sl\/blog\/news\/vypusk-openbsd-6-7\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-05-20T05:41:57+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-05-20T05:41:57+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Izdaja OpenBSD 6.7 | ProHoster","description":"Predstavitev razli\u010dice proste, ve\u010dplatformne UNIX-podobne operacijske sistema","canonical_url":"https:\/\/prohoster.info\/sl\/blog\/news\/vypusk-openbsd-6-7","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sl_SI","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412\u044b\u043f\u0443\u0441\u043a OpenBSD 6.7 | ProHoster","og:description":"\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u0432\u044b\u043f\u0443\u0441\u043a \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0439 \u043a\u0440\u043e\u0441\u0441-\u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435\u043d\u043d\u043e\u0439 UNIX-\u043f\u043e\u0434\u043e\u0431\u043d\u043e\u0439 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b","og:url":"https:\/\/prohoster.info\/sl\/blog\/news\/vypusk-openbsd-6-7","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-05-20T05:41:57+00:00","article:modified_time":"2020-05-20T05:41:57+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"82190","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 15:42:28","updated":"2022-10-01 20:45:58","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/posts\/82190","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/comments?post=82190"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/posts\/82190\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/media?parent=82190"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/categories?post=82190"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/tags?post=82190"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}