Ukukhishwa kwe-OpenBSD 7.3

Ukukhishwa kwesistimu yokusebenza yamahhala efana ne-UNIX i-OpenBSD 7.3 kwethulwa. Iphrojekthi ye-OpenBSD yasungulwa ngu-Theo de Raadt ngo-1995 ngemva kokungqubuzana nabathuthukisi be-NetBSD, okubangele ukuthi u-Theo anqatshelwe ukufinyelela endaweni yokugcina ye-NetBSD CVS. Ngemuva kwalokhu, u-Theo de Raadt kanye neqembu labantu abanomqondo ofanayo bakha uhlelo olusha lokusebenza oluvulekile olusekelwe esihlahleni somthombo we-NetBSD, izinhloso eziyinhloko zokuthuthuka okwakuwukuphatheka (izingxenyekazi ze-hardware eziyi-13 zisekelwa), ukumisa, ukusebenza okulungile, ukuphepha okuqinile. kanye namathuluzi ahlanganisiwe we-cryptographic. Isithombe esigcwele sokufakwa kwe-ISO sesistimu eyisisekelo ye-OpenBSD 7.3 ngu-620 MB.

Ngaphezu kwesistimu yokusebenza ngokwayo, iphrojekthi ye-OpenBSD yaziwa ngezingxenye zayo, eziye zanda kakhulu kwezinye izinhlelo futhi ziye zazibonakalisa njengenye yezixazululo eziphephile nezisezingeni eliphezulu. Phakathi kwazo: I-LibreSSL (imfoloko ye-OpenSSL), i-OpenSSH, isihlungi sephakethe le-PF, i-OpenBGPD ne-OpenOSPFD amadaemoni omzila, iseva ye-OpenNTPD NTP, iseva yeposi ye-OpenSMTPD, i-text terminal multiplexer (efana nesikrini se-GNU) tmux, i-daemon ekhonjiwe esebenzisa iphrothokholi ye-IDENT, enye indlela ye-BSDL Iphakheji ye-GNU groff - i-mandoc, iphrothokholi yokuhlela amasistimu abekezelela amaphutha i-CARP (Iphrothokholi Yekheli Elivamile Elibomvu), iseva engasindi ye-http, insiza yokuvumelanisa ifayela ye-OpenRSYNC.

Ukuthuthukiswa okuyinhloko:

  • Izingcingo zesistimu ezisetshenzisiwe (ilinde izinguquko zesimo senqubo), i-pinsyscall (ukudlulisa ulwazi mayelana nendawo yokungena ye-execve ukuze uvikeleke ezenzweni ze-ROP), i-getthrname ne-setthrname (ukuthola nokusetha igama lentambo).
  • Zonke izakhiwo zisebenzisa i-clockintr, isihleli sesikhathi esizimele sezingxenyekazi zekhompyutha.
  • Kwengezwe i-sysctl kern.autoconf_serial, engasetshenziswa ukulandelela izinguquko zesimo sesihlahla sedivayisi ku-kernel ukusuka esikhaleni somsebenzisi.
  • Ukusekelwa okuthuthukisiwe kwezinhlelo ze-multiprocessor (SMP). Izihlungi zomcimbi zamadivayisi we-tun ne-tap ziguqulelwe esigabeni esiphephile se-mp. Imisebenzi ekhethayo, i-pselect, i-poll, i-ppoll, i-getsockopt, i-setsockopt, mmap, munmap, mprotect, sched_yield, minherit and utrace, kanye ne-ioctl SIOCGIFCONF, SIOCGIFGMEMB, SIOCGIFGATTR kanye ne-SIOCGIFGLIST kususiwe ekuvimbeni. Ukuphathwa okuthuthukisiwe kokuvinjwa kusihlungi sephakethe le-pf. Ukusebenza okuthuthukisiwe kwesistimu nesitaki senethiwekhi kumasistimu anezingqikithi eziningi.
  • Ukuqaliswa kohlaka lwe-drm (Direct Rendering Manager) luvunyelaniswa ne-Linux kernel 6.1.15 (ukukhishwa kokugcina - 5.15.69). Umshayeli we-Amdgpu wengeza ukwesekwa kwe-Ryzen 7000 "Raphael", i-Ryzen 7020 "Mendocino", i-Ryzen 7045 "I-Dragon Range", i-Radeon RX 7900 XT/XTX "Navi 31", i-Radeon RX 7600M (XT), 7700S7600 "Navi 33". I-Amdgpu yengeze ukwesekwa kokulawula ukukhanya kwangemuva futhi iqinisekisa ukuthi i-xbacklight iyasebenza uma usebenzisa umshayeli we-modesetting we-X.Org. I-Mesa inokugcinwa kwesikhashana kwe-shader okunikwe amandla ngokuzenzakalela.
  • Ukuthuthukiswa kwenziwe ku-VMM hypervisor.
  • Amathuba okuvikela inkumbulo eyengeziwe yezinqubo esikhaleni somsebenzisi aseqaliwe: ucingo lwesistimu olungaguquleki kanye nomsebenzi womtapo wezincwadi ohlobene wegama elifanayo, elikuvumela ukuthi ulungise amalungelo okufinyelela lapho ubonisa kumemori (imephu yememori). Ngemva kokwenza, amalungelo asethelwe indawo yenkumbulo, isibonelo, ukwenqatshelwa kokubhala nokwenza, awakwazi ukuguqulwa ngokulandela amakholi alandelayo kumisebenzi ye-mmap(), mprotect() kanye ne-munmap(), ezodala iphutha le-EPERM lapho izama. ukushintsha.
  • Esakhiweni se-AMD64, indlela yokuvikela ye-RETGUARD inikwe amandla izingcingo zesistimu, okuhloswe ngayo ukufaka inkimbi ukwenzeka kwezinto ezakhiwe kusetshenziswa izingcezu zokuboleka zekhodi nezindlela zokuhlela ezigxile ekubuyiseleni.
  • Ukuvikela ngokumelene nokuxhashazwa kobungozi kunikwe amandla, ngokusekelwe ekuxhumeni kabusha okungahleliwe kwefayela elisebenzisekayo le-sshd njalo uma isistimu iqala. Ukugeleza kabusha kwenza kube nokwenzeka ukwenza ama-funset offsets ku-sshd abikezeleke kancane, okwenza kube nzima ukudala ukuxhashazwa usebenzisa amasu okuhlela agxile ekubuyiseleni.
  • Kunikwe amandla i-randomization yesakhiwo sesitaki kumasistimu we-64-bit.
  • Ukuvikelwa okungeziwe ngokumelene nokuba sengozini kwe-Specter-BHB ku-processor microarchitectural structures.
  • Kumaphrosesa e-ARM64, ifulegi le-DIT (Isikhathi Esizimele Sedatha) linikwe amandla endaweni yomsebenzisi nesikhala se-kernel ukuvimba ukuhlasela kwesiteshi esiseceleni okushintsha ukuncika kwesikhathi sokwenza imiyalelo kudatha ecutshungulwe kule miyalo.
  • Inikeza amandla okusebenzisa i-lladdr lapho ichaza ukulungiselelwa kwenethiwekhi. Isibonelo, ngaphezu kokubophezela egameni lesixhumi esibonakalayo (igama lomethuleli.fxp0), ungasebenzisa ukubophezela ekhelini le-MAC (igama lomethuleli.00:00:6e:00:34:8f).
  • Ukusekelwa kokulala okuthuthukisiwe kwamasistimu asekelwe ku-ARM64.
  • Ukwesekwa okunwetshwe ngokuphawulekayo kwama-chips e-Apple ARM.
  • Kwengezwe usekelo lwezingxenyekazi zekhompuyutha ezintsha futhi kwafaka namashayeli amasha.
  • Umshayeli we-bwfm wamakhadi angenantambo asuselwa ku-Broadcom kanye nama-Cypress chips uhlinzeka ngosekelo lokubethela lwe-WEP.
  • Isifaki sithuthukise umsebenzi nge-RAID yesofthiwe futhi sasebenzisa ukusekela kokuqala kokubethelwa kwe-Guided Disk.
  • Imiyalo emisha ethi skrola phezulu naphansi uye phezulu yengezwe ku-tmux (β€œterminal multiplexer”) ukuze uskrole ikhesa ekuqaleni nasekupheleni. I-LibreSSL kanye ne-OpenSSH amaphakheji abuyekeziwe. Ukuze uthole ukwaziswa okwengeziwe okuningiliziwe kokuthuthukiswa, bona ukubuyekezwa kwe-LibreSSL 3.7.0, OpenSSH 9.2 kanye ne-OpenSSH 9.3.
  • Inombolo yamachweba okwakhiwa kwe-AMD64 yayiyi-11764 (kusuka ku-11451), ye-aarch64 - 11561 (kusuka ku-11261), ye-i386 - 10572 (kusuka ku-10225). Phakathi kwezinguqulo zohlelo lokusebenza kumachweba:
    • Inkanyezi 16.30.0, 18.17.0 kanye no-20.2.0
    • I-Audacity 3.2.5
    • I-CMake 3.25.2
    • I-Chromium 111.0.5563.110
    • I-Emacs 28.2
    • FFmpeg 4.4.3
    • I-GCC 8.4.0 kanye ne-11.2.0
    • I-GHC 9.2.7
    • I-GNOME 43.3
    • Iya ku-1.20.1
    • I-JDK 8u362, 11.0.18 kanye ne-17.0.6
    • Amagiya e-KDE 22.12.3
    • I-KDE Frameworks 5.103.0
    • I-Krita 5.1.5
    • I-LLVM/Clang 13.0.0
    • LibreOffice 7.5.1.2
    • I-Lua 5.1.5, 5.2.4, 5.3.6 kanye no-5.4.4
    • UMariaDB 10.9.4
    • IMono 6.12.0.182
    • I-Mozilla Firefox 111.0 kanye ne-ESR 102.9.0
    • IMozilla Thunderbird 102.9.0
    • I-Mutt 2.2.9 kanye ne-NeoMutt 20220429
    • I-Node.js 18.15.0
    • I-OCaml 4.12.1
    • I-OpenLDAP 2.6.4
    • PHP 7.4.33, 8.0.28, 8.1.16 kanye 8.2.3
    • I-Postfix 3.5.17 kanye ne-3.7.3
    • I-PostgreSQL 15.2
    • I-Python 2.7.18, 3.9.16, 3.10.10 kanye no-3.11.2
    • Qt 5.15.8 kanye 6.4.2
    • R 4.2.1
    • I-Ruby 3.0.5, 3.1.3 kanye no-3.2.1
    • Ukugqwala 1.68.0
    • I-SQLite 2.8.17 kanye ne-3.41.0
    • I-Shotcut 22.12.21
    • I-Sudo 1.9.13.3
    • I-Meerkat 6.0.10
    • Tcl/Tk 8.5.19 kanye 8.6.13
    • I-TeX Live 2022
    • I-Vim 9.0.1388 kanye ne-Neovim 0.8.3
    • I-Xfce 4.18
  • Izingxenye ezibuyekeziwe zezinkampani zangaphandle ezifakwe ne-OpenBSD 7.3:
    • Isitaki sezithombe ze-Xenocara esisekelwe ku-X.Org 7.7 ene-xserver 1.21.6 + amapeshi, i-freetype 2.12.1, fontconfig 2.14, Mesa 22.3.4, xterm 378, xkeyboard-config 2.20, fonttosfnt 1.2.2.
    • I-LLVM/Clang 13.0.0 (+ iziqephu)
    • I-GCC 4.2.1 (+ iziqephu) kanye no-3.3.6 (+ iziqephu)
    • I-Perl 5.36.1 (+ iziqephu)
    • I-NSD 4.6.1
    • Ukukhulula 1.17
    • Abahlengikazi 5.7
    • I-Binutils 2.17 (+ iziqephu)
    • I-Gdb 6.3 (+ ipheshana)
    • Awk 12.9.2022/XNUMX/XNUMX
    • Expat 2.5.0.

    Source: opennet.ru

Engeza amazwana