-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://www.enigmail.net/
iQIcBAEBCgAGBQJQl8qrAAoJEGVp2FWnRL6T4BQQAJet7SBcB53INA6brMsuyjHg
ym+xMNDkvx9HRXL2CdgjeklHOaxLnblXXnrabbkJFPhHqXYxb0u8PQHmS72DgUHb
OFXCN+9hyQL6Sg21V8e7CRAY2ZFNZSxQMqVlXq8wSiodfHq28/O3GlahwJAT3aT+
rFisesmi7unONcvarKD86q3pls1LgmyMV+MGRrInNIW5ryv+RWvYp58tFgc4jS/g
96x7f/F60OJkowHRiSaC5y0EJMBwzfbLC2+0TlpJtRVY97lSWIVsmBKUGFMLasny
NiZwRsqICH0qbQeoCSKLeO1PES0Xd2myE+/KhNyhCujUB7DURNKCn12DzHfqxpdE
AJAeK4j7jhHD+R5ygKtI/Py/uCC7MKnEWVDu5kSP88NXR2k9l0pitysq4F7WoqeX
epNKuKMKd8Jb4/y/SEOU9lFOfvo9yNNOLkb55v46cNC7wK576OexQpZ+uIdb53St
E5pMha8tKgLZq60UP2Li1GWR/zpROOKrs63Ea/rSW4tfTDVOY8evxfzZFrmuV8lk
E5y6ufXdhkUGlspf1tzGKafQL1kULvP8U+GUMxxH4mh5nZvkU7BMG9R57qZ4NFiG
v0o1uHxjnc7iPP2XrR7NiLiUlWMLyoF3AhQ1eB2bQXFGWxU2O2d/v6P3m2Wyv7qZ
I6aCnXrkF3gdRKxPAMwQ
=a1y5
-----END PGP SIGNATURE-----
==========================================================================
Ubuntu Security Notice USN-1622-1
November 05, 2012
munin vulnerabilities
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 12.10
- Ubuntu 12.04 LTS
- Ubuntu 11.10
- Ubuntu 10.04 LTS
Summary:
Several security issues were fixed in Munin.
Software Description:
- munin: Network-wide graphing framework
Details:
It was discovered that the Munin qmailscan plugin incorrectly handled
temporary files. A local attacker could use this issue to possibly
overwrite arbitrary files. This issue only affected Ubuntu 10.04 LTS,
Ubuntu 11.10, and Ubuntu 12.04 LTS. (CVE-2012-2103)
It was discovered that Munin incorrectly handled plugin state file
permissions. An attacker obtaining privileges of the munin user could use
this issue to escalate privileges to root. (CVE-2012-3512)
It was discovered that Munin incorrectly handled specifying an alternate
configuration file. A remote attacker could possibly use this issue to
execute arbitrary code with the privileges of the web server. This issue
only affected Ubuntu 12.10. (CVE-2012-3513)
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 12.10:
munin 2.0.2-1ubuntu2.2
Ubuntu 12.04 LTS:
munin 1.4.6-3ubuntu3.3
Ubuntu 11.10:
munin 1.4.5-3ubuntu4.11.10.2
Ubuntu 10.04 LTS:
munin 1.4.4-1ubuntu1.2
In general, a standard system update will make all the necessary changes.
References:
http://www.ubuntu.com/usn/usn-1622-1
CVE-2012-2103, CVE-2012-3512, CVE-2012-3513
Package Information:
https://launchpad.net/ubuntu/+source/munin/2.0.2-1ubuntu2.2
https://launchpad.net/ubuntu/+source/munin/1.4.6-3ubuntu3.3
https://launchpad.net/ubuntu/+source/munin/1.4.5-3ubuntu4.11.10.2
https://launchpad.net/ubuntu/+source/munin/1.4.4-1ubuntu1.2
Monday, November 5, 2012
[USN-1621-1] MySQL vulnerabilities
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://www.enigmail.net/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=92Uy
-----END PGP SIGNATURE-----
==========================================================================
Ubuntu Security Notice USN-1621-1
November 05, 2012
mysql-5.1, mysql-5.5, mysql-dfsg-5.1 vulnerabilities
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 12.10
- Ubuntu 12.04 LTS
- Ubuntu 11.10
- Ubuntu 10.04 LTS
Summary:
Several security issues were fixed in MySQL.
Software Description:
- mysql-5.5: MySQL database
- mysql-5.1: MySQL database
- mysql-dfsg-5.1: MySQL database
Details:
Multiple security issues were discovered in MySQL and this update includes
new upstream MySQL versions to fix these issues.
MySQL has been updated to 5.1.66 in Ubuntu 10.04 LTS and Ubuntu 11.10.
Ubuntu 12.04 LTS and Ubuntu 12.10 have been updated to MySQL 5.5.28.
In addition to security fixes, the updated packages contain bug fixes, new
features, and possibly incompatible changes.
Please see the following for more information:
http://dev.mysql.com/doc/refman/5.1/en/news-5-1-x.html
http://dev.mysql.com/doc/refman/5.5/en/news-5-5-x.html
http://www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.html
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 12.10:
mysql-server-5.5 5.5.28-0ubuntu0.12.10.1
Ubuntu 12.04 LTS:
mysql-server-5.5 5.5.28-0ubuntu0.12.04.2
Ubuntu 11.10:
mysql-server-5.1 5.1.66-0ubuntu0.11.10.2
Ubuntu 10.04 LTS:
mysql-server-5.1 5.1.66-0ubuntu0.10.04.1
In general, a standard system update will make all the necessary changes.
References:
http://www.ubuntu.com/usn/usn-1621-1
CVE-2012-3144, CVE-2012-3147, CVE-2012-3149, CVE-2012-3150,
CVE-2012-3156, CVE-2012-3158, CVE-2012-3160, CVE-2012-3163,
CVE-2012-3166, CVE-2012-3167, CVE-2012-3173, CVE-2012-3177,
CVE-2012-3180, CVE-2012-3197, https://launchpad.net/bugs/1068158
Package Information:
https://launchpad.net/ubuntu/+source/mysql-5.5/5.5.28-0ubuntu0.12.10.1
https://launchpad.net/ubuntu/+source/mysql-5.5/5.5.28-0ubuntu0.12.04.2
https://launchpad.net/ubuntu/+source/mysql-5.1/5.1.66-0ubuntu0.11.10.2
https://launchpad.net/ubuntu/+source/mysql-dfsg-5.1/5.1.66-0ubuntu0.10.04.1
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://www.enigmail.net/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=92Uy
-----END PGP SIGNATURE-----
==========================================================================
Ubuntu Security Notice USN-1621-1
November 05, 2012
mysql-5.1, mysql-5.5, mysql-dfsg-5.1 vulnerabilities
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 12.10
- Ubuntu 12.04 LTS
- Ubuntu 11.10
- Ubuntu 10.04 LTS
Summary:
Several security issues were fixed in MySQL.
Software Description:
- mysql-5.5: MySQL database
- mysql-5.1: MySQL database
- mysql-dfsg-5.1: MySQL database
Details:
Multiple security issues were discovered in MySQL and this update includes
new upstream MySQL versions to fix these issues.
MySQL has been updated to 5.1.66 in Ubuntu 10.04 LTS and Ubuntu 11.10.
Ubuntu 12.04 LTS and Ubuntu 12.10 have been updated to MySQL 5.5.28.
In addition to security fixes, the updated packages contain bug fixes, new
features, and possibly incompatible changes.
Please see the following for more information:
http://dev.mysql.com/doc/refman/5.1/en/news-5-1-x.html
http://dev.mysql.com/doc/refman/5.5/en/news-5-5-x.html
http://www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.html
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 12.10:
mysql-server-5.5 5.5.28-0ubuntu0.12.10.1
Ubuntu 12.04 LTS:
mysql-server-5.5 5.5.28-0ubuntu0.12.04.2
Ubuntu 11.10:
mysql-server-5.1 5.1.66-0ubuntu0.11.10.2
Ubuntu 10.04 LTS:
mysql-server-5.1 5.1.66-0ubuntu0.10.04.1
In general, a standard system update will make all the necessary changes.
References:
http://www.ubuntu.com/usn/usn-1621-1
CVE-2012-3144, CVE-2012-3147, CVE-2012-3149, CVE-2012-3150,
CVE-2012-3156, CVE-2012-3158, CVE-2012-3160, CVE-2012-3163,
CVE-2012-3166, CVE-2012-3167, CVE-2012-3173, CVE-2012-3177,
CVE-2012-3180, CVE-2012-3197, https://launchpad.net/bugs/1068158
Package Information:
https://launchpad.net/ubuntu/+source/mysql-5.5/5.5.28-0ubuntu0.12.10.1
https://launchpad.net/ubuntu/+source/mysql-5.5/5.5.28-0ubuntu0.12.04.2
https://launchpad.net/ubuntu/+source/mysql-5.1/5.1.66-0ubuntu0.11.10.2
https://launchpad.net/ubuntu/+source/mysql-dfsg-5.1/5.1.66-0ubuntu0.10.04.1
Sunday, November 4, 2012
[announce] NYC*BUG: After Sandy
Greetings.
We hope this email finds you in decent shape after superstorm Sandy.
The NYC*BUG talk@ list and efnet #nycbug were filled with discussions
around the affects, as our data center managed to stay up without
missing a beat at NYI.
We have a few upcoming events and happenings to announce, but first
regarding this week's meeting:
* Due to the storm, John Baldwin's meeting is following the path of the
Marathon, and will be held next year. In January 2013, that is.
Since it's short notice, and so many people are scrambling at this
point, we are going to hold the meeting, but we'll keep it an informal
discussion. talk@ and IRC were filled with storm-related discussion,
and we can pick those topics up in person, and whatever else seems
relevant at the moment.
One topic to discuss would be EuroBSDCon which was held October 21-22 in
Warsaw, if any meeting attendees were there.
* The delivery of the BeagleBone boards was understandably delayed.
FedEx has them sitting in their facility in East Elmhurst, but we should
have them for the meeting on Wednesday. Pre-buyers will be notified of
the delievery. Remember to bring $2 for shipping per board ordered.
This year's holiday meeting has been posted, and it's sure to tickle
anyone not particularly in the holiday mood this year, and looking for a
productive outlet:
* unHoliday Meeting: Be a Grinch about Your Tech Gripe
For the past several years, our holiday party has been filled with the
notion of giving back to the community: your tips, your hacks, your
thoughts.
So many people have proved selfless and assisted others that we feel
it's time for a change. Let's be honest, we need a time to vent, and
there's no reason the holiday season should be immune.
What are your gripes in technology? What do you hate dealing with at
your job? Is it some high- (or low-) level scripting language? Some
clunky and un-Unix-like application? Dealing with an underdocumented and
buggy non-BSD operating system?
Well, here's your chance to let others know how you feel. Prepare a ten
to twenty minute presentation, with maybe a few slides, and make your
case. Be coherent and to-the-point, and maybe others will jump aboard
with your argument.
Ping admin@ with your idea, and we look forward to having a meeting
which let's us vent out unholiday season gripes.
_______________________________________________
announce mailing list
announce@lists.nycbug.org
http://lists.nycbug.org/mailman/listinfo/announce
We hope this email finds you in decent shape after superstorm Sandy.
The NYC*BUG talk@ list and efnet #nycbug were filled with discussions
around the affects, as our data center managed to stay up without
missing a beat at NYI.
We have a few upcoming events and happenings to announce, but first
regarding this week's meeting:
* Due to the storm, John Baldwin's meeting is following the path of the
Marathon, and will be held next year. In January 2013, that is.
Since it's short notice, and so many people are scrambling at this
point, we are going to hold the meeting, but we'll keep it an informal
discussion. talk@ and IRC were filled with storm-related discussion,
and we can pick those topics up in person, and whatever else seems
relevant at the moment.
One topic to discuss would be EuroBSDCon which was held October 21-22 in
Warsaw, if any meeting attendees were there.
* The delivery of the BeagleBone boards was understandably delayed.
FedEx has them sitting in their facility in East Elmhurst, but we should
have them for the meeting on Wednesday. Pre-buyers will be notified of
the delievery. Remember to bring $2 for shipping per board ordered.
This year's holiday meeting has been posted, and it's sure to tickle
anyone not particularly in the holiday mood this year, and looking for a
productive outlet:
* unHoliday Meeting: Be a Grinch about Your Tech Gripe
For the past several years, our holiday party has been filled with the
notion of giving back to the community: your tips, your hacks, your
thoughts.
So many people have proved selfless and assisted others that we feel
it's time for a change. Let's be honest, we need a time to vent, and
there's no reason the holiday season should be immune.
What are your gripes in technology? What do you hate dealing with at
your job? Is it some high- (or low-) level scripting language? Some
clunky and un-Unix-like application? Dealing with an underdocumented and
buggy non-BSD operating system?
Well, here's your chance to let others know how you feel. Prepare a ten
to twenty minute presentation, with maybe a few slides, and make your
case. Be coherent and to-the-point, and maybe others will jump aboard
with your argument.
Ping admin@ with your idea, and we look forward to having a meeting
which let's us vent out unholiday season gripes.
_______________________________________________
announce mailing list
announce@lists.nycbug.org
http://lists.nycbug.org/mailman/listinfo/announce
[arch-announce] End of initscripts support
Tom Gundersen wrote:
As `systemd` is now the default init system, Arch Linux is receiving minimal
testing on `initscripts` systems. Due to a lack of resources and interest, we
are unlikely to work on fixing `initscripts`-specific bugs, and may close them
as WONTFIX.
We therefore strongly encourage all users to migrate to `systemd` as soon as
possible. See the [`systemd` migration gudie][1].
To ease the transition, `initscripts` support will remain in the official
repositories for the time being, unless otherwise stated. As of January 2013, we
will start removing `initscripts` support (e.g., `rc` scripts) from individual
packages without further notice.
[1]: https://wiki.archlinux.org/index.php/Systemd
URL: https://www.archlinux.org/news/end-of-initscripts-support/
_______________________________________________
arch-announce mailing list
arch-announce@archlinux.org
https://mailman.archlinux.org/mailman/listinfo/arch-announce
As `systemd` is now the default init system, Arch Linux is receiving minimal
testing on `initscripts` systems. Due to a lack of resources and interest, we
are unlikely to work on fixing `initscripts`-specific bugs, and may close them
as WONTFIX.
We therefore strongly encourage all users to migrate to `systemd` as soon as
possible. See the [`systemd` migration gudie][1].
To ease the transition, `initscripts` support will remain in the official
repositories for the time being, unless otherwise stated. As of January 2013, we
will start removing `initscripts` support (e.g., `rc` scripts) from individual
packages without further notice.
[1]: https://wiki.archlinux.org/index.php/Systemd
URL: https://www.archlinux.org/news/end-of-initscripts-support/
_______________________________________________
arch-announce mailing list
arch-announce@archlinux.org
https://mailman.archlinux.org/mailman/listinfo/arch-announce
Friday, November 2, 2012
[arch-announce] November release of install media available
Pierre Schmitz wrote:
The latest snapshot of our install and rescue media can be found on our
[Download][1] page. The 2012.11.01 ISO image mainly contains minor bug fixes,
cleanups and new packages compared to the previous one:
* First media with Linux 3.6
* _copytoram=n_ can be used to not copy the image to RAM on network boot. This
is probably unreliable but an option for systems with very low memory.
* _cowfile_size_ boot parameter mainly for persistent COW on VFAT. See the
[README][2] file for details.
[1]: https://www.archlinux.org/download/
[2]:
https://projects.archlinux.org/archiso.git/plain/docs/README.bootparams?id=v4
URL: https://www.archlinux.org/news/november-release-of-install-media-available/
_______________________________________________
arch-announce mailing list
arch-announce@archlinux.org
https://mailman.archlinux.org/mailman/listinfo/arch-announce
The latest snapshot of our install and rescue media can be found on our
[Download][1] page. The 2012.11.01 ISO image mainly contains minor bug fixes,
cleanups and new packages compared to the previous one:
* First media with Linux 3.6
* _copytoram=n_ can be used to not copy the image to RAM on network boot. This
is probably unreliable but an option for systems with very low memory.
* _cowfile_size_ boot parameter mainly for persistent COW on VFAT. See the
[README][2] file for details.
[1]: https://www.archlinux.org/download/
[2]:
https://projects.archlinux.org/archiso.git/plain/docs/README.bootparams?id=v4
URL: https://www.archlinux.org/news/november-release-of-install-media-available/
_______________________________________________
arch-announce mailing list
arch-announce@archlinux.org
https://mailman.archlinux.org/mailman/listinfo/arch-announce
Thursday, November 1, 2012
Fedora 18 Beta to slip by one week
Today at Go/No-Go meeting it was decided to slip Fedora 18
Beta release by one week due to unresolved blocker bugs
[1] and incomplete upgrade tool. See the meeting minutes [2]
for more details.
Beta release by one week due to unresolved blocker bugs
[1] and incomplete upgrade tool. See the meeting minutes [2]
for more details.
As a result, Fedora 18 Beta will be pushed out by one week
but Final release is still planned on Dec 11 as FESCo
agreed to cut off one week from schedule to avoid Christmas
holidays collision [3]. Check current schedule [4].
The next Go/No-Go meeting is on Thursday, Nov 08. Time will
be announced on Monday.
Please, work on your blocker bugs or help testing the F18
Beta to make sure we will be able to release soon and in
the best quality!
Thanks
Jaroslav
[1] http://qa.fedoraproject.org/blockerbugs/milestone/18/beta/buglist
[2] http://bit.ly/SB1j66
[3] https://fedorahosted.org/fesco/ticket/960
[4] https://fedoraproject.org/wiki/Releases/18/Schedule
_______________________________________________
devel-announce mailing list
devel-announce@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/devel-announce
Fedora 18 ARM Alpha Release
The Fedora ARM team is pleased to announce that the Fedora 18 Alpha release
for ARM is now available for download from:
for ARM is now available for download from:
http://dl.fedoraproject.org/pub/fedora-secondary/releases/test/18-Alpha/Images/armhfp/
The Alpha release includes prebuilt images for the Trimslice, Pandaboard and
Highbank hardware platforms as well a Versatile Express image for use with
QEMU. Please visit the announcement page for additional information and links to
specific images:
http://fedoraproject.org/wiki/Architectures/ARM/Fedora_18_Alpha
We invite you to download the Fedora 18 Alpha release and provide your valuable input
to the Fedora ARM team. Please join us on the IRC in #fedora-arm on Freenode or
send feedback and comments to the ARM mailing list.
On behalf of the Fedora ARM team,
Paul
--
announce mailing list
announce@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/announce
OpenBSD 5.2 Released
------------------------------------------------------------------------
- OpenBSD 5.2 RELEASED -------------------------------------------------
November 1, 2012.
We are pleased to announce the official release of OpenBSD 5.2.
This is our 32nd release on CD-ROM (and 33rd via FTP). We remain
proud of OpenBSD's record of more than ten years with only two remote
holes in the default install.
As in our previous releases, 5.2 provides significant improvements,
including new features, in nearly all areas of the system:
- pthreads(3) support:
o The most significant change in this release is the replacement of the
user-level uthreads by kernel-level rthreads, allowing multithreaded
programs to utilize multiple CPUs/cores.
o Use PTHREAD_MUTEX_STRICT_NP as default mutex type.
o Added pthread spinlock and barrier routines.
o Added pthread_mutex_timedlock(3) and sem_timedwait(3).
o Added pthread_condattr_setclock(3).
o Added support for live multi-threaded debugging in gdb(1).
o Improved handling for rusage totals and interval timers in threaded
processes.
o Changed the RLIMIT_NPROC rlimit to count processes instead of threads.
o Added a new system limit kern.maxthread for the max number of threads.
o Closed race conditions in thread creation, and in fork(2) and open(2) in a
threaded process.
o Improved handling of threaded processes in ps(1), top(1), and fstat(1).
o Changed the lock around dlopen() to be recursive, so that dl*() operations
from atexit() handlers don't deadlock.
o Many fixes to pthread attribute and mutex error checking and cancellation
handling.
- Improved hardware support, including:
o Added hibernation support on i386. Currently only working on pciide(4) and
wd(4) disks.
o Improved support for ALPS based touchpads in wsmouse(4) and the
synaptics(4) X.Org input driver.
o Performance improvements with ix(4) Intel 10Gb Ethernet NICs.
o Support for i350 based devices in em(4).
o Flow control support for bnx(4).
o Hardware watchdog and HPET support for tcpcib(4) (Intel Atom E600) as
found in some embedded x86 systems.
o urndis(4) supports additional Android devices.
o Support for Winbond W83627UHG has been added to wbsio(4).
o Support for the SMBus controller of the AMD CS5536 in glxpcib(4) and the
NVIDIA MCP89 in nviic(4).
o Support for AX88772B based devices has been added to axe(4).
o Support for MCS7832 based devices has been added to mos(4).
o Support for the Roland UM-ONE has been added to umidi(4).
o Support for the AMD Hudson-2 chipset has been added to azalia(4) and
piixpm(4).
o Support for NetMos NM9820 cardbus serial cards has been added to com(4).
o Support for Huawei Mobile E303 has been added to umsm(4).
o The sgi port now supports the R4000 Indigo (IP20), Indy (IP22), R4000
Indigo2 (IP24) and POWER Indigo2 R10000 (IP28) families.
- Generic network stack improvements:
o Increased TCP initial window to 14600 bytes as proposed in
draft-ietf-tcpm-initcwnd.
o Cleanup handling of sockaddrs in degenerate use cases.
o Improved handling of error and limit cases in file descriptor passing.
o Improved socketbuffer handling for AF_UNIX sockets.
o Fix yet another file descriptor leak in message passing.
o Improved error handling in socket splicing.
o IPv6 privacy addresses now appear alongside SLAAC addresses.
o Support for Extended Sequence Numbers has been added to the IPsec stack
and iked(8).
o Bridging two IPv4 networks over an IPv6 link with gif(4) is now possible.
- Routing daemons and other userland network improvements:
o sndiod(1), bgpd(8), dvmrpd(8), ftp-proxy(8), iked(8), iscsid(8), ldapd(8),
ldpd(8), nsd(8), ospf6d(8), ospfd(8), relayd(8), ripd(8), snmpd(8),
spamd(8), sshd(8), tcpbench(1) and tmux(1) now rate limit their accepting
of new connections when experiencing file descriptor exhaustion.
o Allow route(8) destination/prefixlen syntax for IPv6 routes.
o ASCII packet dumping support in tcpdump(8).
o Better etherip and BGP protocol support in tcpdump(8).
o isakmpd(8) and tcpdump(8) now recognize additional Internet Key Exchange
DH groups.
o Various improvements in iked(8) including support for retransmits.
o ipsecctl(8) now allows SA lifetimes to be specified in its ipsec.conf(5)
file.
o tftpd(8) rewritten as a persistent, non-blocking daemon.
o tftp(1) client now supports IPv6.
o snmpd(8) now supports PF-MIB, UCD-DISKIO-MIB, and additional OIDs in
HOST-RESOURCES-MIB.
o bgpd(8) is now more robust when encountering network instability.
o Adjust the bgpd(8) route decision code to cover checks needed due to route
reflection.
o Various fixes to improve error reporting in bgpd(8) including support of
RFC 6608.
o For debugging purposes bgpctl(8) can load MRT dumps into bgpd(8).
o Fixed distribution of MPLS VPN routes in bgpd(8).
o Introduced a new option "selected" to the bgpctl(8) "show rib" command to
show only selected routes.
o Correctly support the LSA_TYPE_AREA_OPAQ and LSA_TYPE_AS_OPAQ types in
ospfd(8).
o Make relayd(8) able to handle transactions larger than 2GB in size.
o Various bug fixes and better HTTP standard compliance in relayd(8).
o rtadvd(8) can now advertise DNS servers and search paths in router
advertisements.
o rtadvd(8) can now send router advertisements with no prefix information
using the noifprefix option.
o ftp(1) client now allows the source IP address of the connection to be
specified.
o ypldap(8) now handles larger directories and is more tolerant when
processing groups.
o Added support for AF_INET6 to inet_net_pton(3) and inet_net_ntop(3).
- pf(4) improvements:
o pf(4) now ignores/preserves the lower 2 bits of the tos-header (used for
Explicit Congestion Notification).
o Allow more than 16 pflog(4) interfaces.
o pf(4) now supports weighted least-states load balancing.
o The prio and tos options are now part of the "set { }" block. See
pf.conf(5).
o Allow setting the tos on IPv6 packets.
o Better demotion handling in pfsync(4) to prevent failovers without having
a full state table.
o Fixed printing of wildcard anchors in pfctl(8).
- Assorted improvements:
o Added nginx(8), an HTTP server, reverse proxy server and mail proxy server.
o Added SQLite 3.7.13, a self-contained SQL database engine.
o libpcap has been updated with several core functions from tcpdump.org's
libpcap-1.2.0 API, without the clutter.
o Disabled SSLv2 in OpenSSL.
o Moved libtool(1) into the base system. Much work remains to be done.
o Removed lint(1).
o Removed the raid(4) RAIDframe driver and its corresponding raidctl(8)
utility. RAIDframe has been superseded by softraid(4).
o Added posix_spawn(3).
o Added mbsnrtowcs(3) and wcsnrtombs(3).
o Added getdelim(3) and getline(3).
o More configuration variables for sysconf(3) and pathconf(2).
o dirfd(3) is now a function instead of a macro.
o posix_memalign(3) supports arbitrarily large alignments.
o Improved realloc(3) performance.
o ld.so(1) recognizes the DF_1_NOOPEN flag and refuses to dlopen(3) shared
objects linked with "-z nodlopen".
o Improved compliance and/or cleanliness of header files, particularly
<dirent.h>, <time.h>, <sys/time.h>, <limits.h>, <arpa/inet.h>,
<netinet/in.h>, and <sys/param.h>.
o Improved kernel uvm memory allocator.
o Added support for using AMT to provide console-over-Ethernet (c.f. the
amtterm package).
o Improved support for amd64 systems with many memory extents.
o compat_linux(8) improvements: TLS-vs-clone and futex fixes, added support
for statfs64(), tgkill(), gettid(), SOCK_CLOEXEC, and SOCK_NONBLOCK.
o kdump(1) improvements, including the ability to show thread IDs and
dumping of timespec, timeval, sigaction, rlimit, sigset, clockid, and fdset
arguments and results.
o Various improvements in smtpd(8): reliability fixes, new MTA client, new
scheduler and improved queue logic, simplified smtpd.conf(5) syntax,
better RFC compliance and several cosmetic changes.
o The mg(1) emacs-like editor now supports cscope functionality. Also,
backup files can now be saved to a user's home directory in addition to the
current working directory.
o Fixed operation of kvm_getfile2() (and therefore fstat(1) and pstat(8)) on
kernel crash dumps.
o Improved emacs-style key bindings and handling of large arrays in ksh(1).
o halt(8) disables "suspend-on-lid-close" so that you don't accidentally
suspend instead of shutting down.
o Improvements to parallel make(1): added the .CHEAP and .EXPENSIVE special
targets and fixed glitches in already-rebuilt logic.
o The libusb package is able to access non-ugen(4) devices for some
operations, allowing e.g. programming YubiKeys with a standard kernel.
o Various improvements in tmux(1): a new unified tree view to select
sessions or windows, new move-pane and renumber-windows commands, a history
of pane layouts, simple output rate limiting, and custom formats (-F) have
been extended and are now accepted by more commands.
o fsck_msdos(8) now works on devices with non-512 byte sectors.
o quotacheck(8) now works with DUID based fstab(5) files.
o Numerous minor improvement to fdisk(8), including more sanity checking and
better default partition sizing on large disks.
o dhclient(8) now discards trailing NULs in option data, and in general
parses option data with more paranoia.
o Various improvements to dhclient(8) startup and timeout handling.
o disklabel(8) does a better job of calculating physical memory during
partition auto-allocation of devices with non-512 byte sectors.
o SCSI errors are now correctly propogated to userland, e.g. mount(2) now
reports specific errors such as trying to mount RW filesystems from RO
media.
o Improved FAT media handling: autorecognize such media even if the 0x55aa
signature is missing and prevent the writing of an OpenBSD disklabel over
the FAT data structures.
o The MS-DOS FAT filesystem implementation gained a significant write
speedup for large files (up to twice as fast).
- OpenSSH 6.1:
o New features:
- sshd(8): This release turns on pre-auth sandboxing sshd by default for
new installs, by setting UsePrivilegeSeparation=sandbox in sshd_config.
- sshd-keygen(1): Add options to specify starting line number and number
of lines to process when screening moduli candidates, allowing
processing of different parts of a candidate moduli file in parallel.
- sshd(8): The Match directive now supports matching on the local
(listen) address and port upon which the incoming connection was
received via LocalAddress and LocalPort clauses.
- sshd(8): Extend sshd_config Match directive to allow setting AcceptEnv
and {Allow,Deny}{Users,Groups}.
- Add support for RFC6594 SSHFP DNS records for ECDSA key types. (bz#1978)
- sshd-keygen(1): Allow conversion of RSA1 keys to public PEM and PKCS8.
- sshd(8): Allow the sshd_config PermitOpen directive to accept "none" as
an argument to refuse all port-forwarding requests.
- sshd(8): Support "none" as an argument for AuthorizedPrincipalsFile.
- sshd-keyscan(1): Look for ECDSA keys by default. (bz#1971)
- sshd(8): Add "VersionAddendum" to sshd_config to allow server operators
to append some arbitrary text to the server SSH protocol banner.
o The following significant bugs have been fixed in this release:
- sshd(8) and ssh(1): Don't spin in accept() in situations of file
descriptor exhaustion. Instead back off for a while.
- sshd(8) and ssh(1): Remove hmac-sha2-256-96 and hmac-sha2-512-96 MACs
as they were removed from the specification. (bz#2023)
- sshd(8): Handle long comments in config files better. (bz#2025)
- ssh(1): Delay setting tty_flag so RequestTTY options are correctly
picked up. (bz#1995)
- sshd(8): Fix handling of /etc/nologin incorrectly being applied to root
on platforms that use login_cap.
- Over 7,600 ports, major performance and stability improvements in
the package build process:
o dpb got simpler and faster. Handles distfiles, works without any options.
o Simpler and less error-prone mechanisms for handling MD differences.
o dpb is now used for mirroring distfiles, to the great joy of
ftp://ftp.openbsd.org/pub/OpenBSD/distfiles/
o full databases of all ports available as packages:
- pkglocatedb - a locate(1) database of all files in all packages
- sqlports - a sqlite3(1) database of all meta-info for all packages
- ports-readmes - a tree of html files for browsing thru available packages
- Many pre-built packages for each architecture:
o i386: 7483 o sparc64: 6820
o alpha: 5993 o sh: 2412
o amd64: 7439 o powerpc: 7050
o sparc: 4466 o arm: 5802
o hppa: 6316 o vax: 2279
o mips64: 5845 o mips64el: 5908
- Some highlights:
o Gnome 3.4.2 o KDE 3.5.10
o Xfce 4.10 o MySQL 5.1.63
o PostgreSQL 9.1.4 o Postfix 2.9.3
o OpenLDAP 2.3.43 and 2.4.31 o GHC 7.0.4
o Mozilla Firefox 3.5.19, 3.6.28 and 13.0.1
o Mozilla Thunderbird 13.0.1 o LibreOffice 3.5.5.3
o Emacs 21.4, 22.3 and 23.4 o Vim 7.3.154
o PHP 5.2.17 and 5.3.14 o Python 2.5.4, 2.7.3 and 3.2.3
o Ruby 1.8.7.370 and 1.9.3.194 o Tcl/Tk 8.5.11
o Jdk 1.7 o Mono 2.10.9
o Chromium 20.0.1132.57 o Groff 1.21
o Go 1.0.2 o GCC 4.6.3 and 4.7.1
o LLVM/Clang 3.1 o Lua 5.1.5 and 5.2.1
- As usual, steady improvements in manual pages and other documentation.
- The system includes the following major components from outside suppliers:
o Xenocara (based on X.Org 7.7 with xserver 1.12.2 + patches,
freetype 2.4.10, fontconfig 2.8.0, Mesa 7.10.3, xterm 279,
xkeyboard-config 2.6 and more)
o Gcc 4.2.1 (+ patches) and 2.95.3 (+ patches)
o Perl 5.12.2 (+ patches)
o Our improved and secured version of Apache 1.3, with SSL/TLS
and DSO support
o Nginx 1.2.2 (+ patches)
o OpenSSL 1.0.0f (+ patches)
o SQLite 3.7.13 (+ patches)
o Sendmail 8.14.5, with libmilter
o Bind 9.4.2-P2 (+ patches)
o Lynx 2.8.7rel.2 with HTTPS and IPv6 support (+ patches)
o Sudo 1.7.2p8
o Ncurses 5.7
o Heimdal 0.7.2 (+ patches)
o Arla 0.35.7
o Binutils 2.15 (+ patches)
o Gdb 6.3 (+ patches)
o Less 444 (+ patches)
o Awk Aug 10, 2011 version
If you'd like to see a list of what has changed between OpenBSD 5.1
and 5.2, look at
http://www.OpenBSD.org/plus52.html
Even though the list is a summary of the most important changes
made to OpenBSD, it still is a very very long list.
------------------------------------------------------------------------
- SECURITY AND ERRATA --------------------------------------------------
We provide patches for known security threats and other important
issues discovered after each CD release. As usual, between the
creation of the OpenBSD 5.2 FTP/CD-ROM binaries and the actual 5.2
release date, our team found and fixed some new reliability problems
(note: most are minor and in subsystems that are not enabled by
default). Our continued research into security means we will find
new security problems -- and we always provide patches as soon as
possible. Therefore, we advise regular visits to
http://www.OpenBSD.org/security.html
and
http://www.OpenBSD.org/errata.html
Security patch announcements are sent to the security-announce@OpenBSD.org
mailing list. For information on OpenBSD mailing lists, please see:
http://www.OpenBSD.org/mail.html
------------------------------------------------------------------------
- CD-ROM SALES ---------------------------------------------------------
OpenBSD 5.2 is also available on CD-ROM. The 3-CD set costs $50 CDN and
is available via mail order and from a number of contacts around the
world. The set includes a colourful booklet which carefully explains the
installation of OpenBSD. A new set of cute little stickers is also
included (sorry, but our FTP mirror sites do not support STP, the Sticker
Transfer Protocol). As an added bonus, the second CD contains an audio
track, a song entitled "Aquarela do Linux". MP3 and OGG versions of
the audio track can be found on the first CD.
Lyrics (and an explanation) for the songs may be found at:
http://www.OpenBSD.org/lyrics.html#52
Profits from CD sales are the primary income source for the OpenBSD
project -- in essence selling these CD-ROM units ensures that OpenBSD
will continue to make another release six months from now.
The OpenBSD 5.2 CD-ROMs are bootable on the following platforms:
o i386
o amd64
o sparc64
(Other platforms must boot from floppy, network, or other method).
For more information on ordering CD-ROMs, see:
http://www.OpenBSD.org/orders.html
The above web page lists a number of places where OpenBSD CD-ROMs
can be purchased from. For our default mail order, go directly to:
https://https.OpenBSD.org/cgi-bin/order
All of our developers strongly urge you to buy a CD-ROM and support
our future efforts. Additionally, donations to the project are
highly appreciated, as described in more detail at:
http://www.OpenBSD.org/goals.html#funding
------------------------------------------------------------------------
- OPENBSD FOUNDATION ---------------------------------------------------
For those unable to make their contributions as straightforward gifts,
the OpenBSD Foundation (http://www.openbsdfoundation.org) is a Canadian
not-for-profit corporation that can accept larger contributions and
issue receipts. In some situations, their receipt may qualify as a
business expense write-off, so this is certainly a consideration for
some organizations or businesses. There may also be exposure benefits
since the Foundation may be interested in participating in press releases.
In turn, the Foundation then uses these contributions to assist OpenBSD's
infrastructure needs. Contact the foundation directors at
directors@openbsdfoundation.org for more information.
------------------------------------------------------------------------
- T-SHIRT SALES --------------------------------------------------------
The OpenBSD distribution companies also sell tshirts and polo shirts,
with new and old designs, available from our web ordering system.
-----------------------------------------------------------------------
- FTP INSTALLS ---------------------------------------------------------
If you choose not to buy an OpenBSD CD-ROM, OpenBSD can be easily
installed via FTP or HTTP downloads. Typically you need a single
small piece of boot media (e.g., a boot floppy) and then the rest
of the files can be installed from a number of locations, including
directly off the Internet. Follow this simple set of instructions
to ensure that you find all of the documentation you will need
while performing an install via FTP or HTTP. With the CD-ROMs,
the necessary documentation is easier to find.
1) Read either of the following two files for a list of ftp/http
mirrors which provide OpenBSD, then choose one near you:
http://www.OpenBSD.org/ftp.html
ftp://ftp.OpenBSD.org/pub/OpenBSD/5.2/ftplist
As of Nov 1, 2012, the following ftp mirror sites have the 5.2 release:
ftp://ftp.eu.openbsd.org/pub/OpenBSD/5.2/ Stockholm, Sweden
ftp://ftp.bytemine.net/pub/OpenBSD/5.2/ Oldenburg, Germany
ftp://ftp.ch.openbsd.org/pub/OpenBSD/5.2/ Zurich, Switzerland
ftp://ftp.fr.openbsd.org/pub/OpenBSD/5.2/ Paris, France
ftp://ftp5.eu.openbsd.org/pub/OpenBSD/5.2/ Vienna, Austria
ftp://mirror.aarnet.edu.au/pub/OpenBSD/5.2/ Brisbane, Australia
ftp://ftp.usa.openbsd.org/pub/OpenBSD/5.2/ CO, USA
ftp://ftp5.usa.openbsd.org/pub/OpenBSD/5.2/ CA, USA
The release is also available at the master site:
ftp://ftp.openbsd.org/pub/OpenBSD/5.2/ Alberta, Canada
However it is strongly suggested you use a mirror.
Other mirror sites may take a day or two to update.
2) Connect to that ftp mirror site and go into the directory
pub/OpenBSD/5.2/ which contains these files and directories.
This is a list of what you will see:
ANNOUNCEMENT armish/ mvme88k/ src.tar.gz
Changelogs/ ftplist packages/ sys.tar.gz
HARDWARE hp300/ ports.tar.gz tools/
PACKAGES hppa/ root.mail vax/
PORTS i386/ sgi/ xenocara.tar.gz
README landisk/ socppc/ zaurus/
alpha/ macppc/ sparc/
amd64/ mvme68k/ sparc64/
It is quite likely that you will want at LEAST the following
files which apply to all the architectures OpenBSD supports.
README - generic README
HARDWARE - list of hardware we support
PORTS - description of our "ports" tree
PACKAGES - description of pre-compiled packages
root.mail - a copy of root's mail at initial login.
(This is really worthwhile reading).
3) Read the README file. It is short, and a quick read will make
sure you understand what else you need to fetch.
4) Next, go into the directory that applies to your architecture,
for example, i386. This is a list of what you will see:
INSTALL.i386 cd52.iso floppyB52.fs pxeboot*
INSTALL.linux cdboot* floppyC52.fs xbase52.tgz
MD5 cdbr* game52.tgz xetc52.tgz
base52.tgz cdemu52.iso index.txt xfont52.tgz
bsd* comp52.tgz install52.iso xserv52.tgz
bsd.mp* etc52.tgz man52.tgz xshare52.tgz
bsd.rd* floppy52.fs misc52.tgz
If you are new to OpenBSD, fetch _at least_ the file INSTALL.i386
and the appropriate floppy*.fs or install52.iso files. Consult the
INSTALL.i386 file if you don't know which of the floppy images
you need (or simply fetch all of them).
If you use the install52.iso file (roughly 250MB in size), then you
do not need the various *.tgz files since they are contained on that
one-step ISO-format install CD.
5) If you are an expert, follow the instructions in the file called
README; otherwise, use the more complete instructions in the
file called INSTALL.i386. INSTALL.i386 may tell you that you
need to fetch other files.
6) Just in case, take a peek at:
http://www.OpenBSD.org/errata.html
This is the page where we talk about the mistakes we made while
creating the 5.2 release, or the significant bugs we fixed
post-release which we think our users should have fixes for.
Patches and workarounds are clearly described there.
Note: If you end up needing to write a raw floppy using Windows,
you can use "fdimage.exe" located in the pub/OpenBSD/5.2/tools
directory to do so.
------------------------------------------------------------------------
- X.ORG FOR MOST ARCHITECTURES -----------------------------------------
X.Org has been integrated more closely into the system. This release
contains X.Org 7.7. Most of our architectures ship with X.Org, including
amd64, sparc, sparc64 and macppc. During installation, you can install
X.Org quite easily. Be sure to try out xdm(1) and see how we have
customized it for OpenBSD.
------------------------------------------------------------------------
- PORTS TREE -----------------------------------------------------------
The OpenBSD ports tree contains automated instructions for building
third party software. The software has been verified to build and
run on the various OpenBSD architectures. The 5.2 ports collection,
including many of the distribution files, is included on the 3-CD
set. Please see the PORTS file for more information.
Note: some of the most popular ports, e.g., the Apache web server
and several X applications, come standard with OpenBSD. Also, many
popular ports have been pre-compiled for those who do not desire
to build their own binaries (see BINARY PACKAGES, below).
------------------------------------------------------------------------
- BINARY PACKAGES WE PROVIDE -------------------------------------------
A large number of binary packages are provided. Please see the PACKAGES
file (ftp://ftp.OpenBSD.org/pub/OpenBSD/5.2/PACKAGES) for more details.
------------------------------------------------------------------------
- SYSTEM SOURCE CODE ---------------------------------------------------
The CD-ROMs contain source code for all the subsystems explained
above, and the README (ftp://ftp.OpenBSD.org/pub/OpenBSD/5.2/README)
file explains how to deal with these source files. For those who
are doing an FTP install, the source code for all four subsystems
can be found in the pub/OpenBSD/5.2/ directory:
xenocara.tar.gz ports.tar.gz src.tar.gz sys.tar.gz
------------------------------------------------------------------------
- THANKS ---------------------------------------------------------------
Ports tree and package building by Jasper Lievisse Adriaanse,
Pierre-Emmanuel Andre, Landry Breuil, Michael Erdely, Stuart Henderson,
Peter Hessler, Paul Irofti, Antoine Jacoutot, Sebastian Reitenbach,
and Christian Weisgerber. System builds by Theo de Raadt and Miod
Vallat. X11 builds by Todd Fries and Miod Vallat. ISO-9660 filesystem
layout by Theo de Raadt.
We would like to thank all of the people who sent in bug reports, bug
fixes, donation cheques, and hardware that we use. We would also like
to thank those who pre-ordered the 5.2 CD-ROM or bought our previous
CD-ROMs. Those who did not support us financially have still helped
us with our goal of improving the quality of the software.
Our developers are:
Aaron Bieber, Alexander Bluhm, Alexander Hall, Alexander Schrijver,
Alexander Yurchenko, Alexandr Shadchin, Alexandre Ratchov,
Anil Madhavapeddy, Anthony J. Bentley, Antoine Jacoutot,
Austin Hook, Benoit Lecocq, Bob Beck, Brandon Mercer, Bret Lambert,
Brett Mahar, Bryan Steele, Camiel Dobbelaar, Can Erkin Acar,
Charles Longeau, Christian Weisgerber, Christiano F. Haesbaert,
Claudio Jeker, Damien Bergamini, Damien Miller, Darren Tucker,
David Coppa, David Gwynne, David Krause, Edd Barrett, Eric Faurot,
Federico G. Schwindt, Felix Kronlage, Gilles Chehade,
Giovanni Bechis, Gleydson Soares, Gonzalo L. Rodriguez,
Henning Brauer, Ian Darwin, Igor Sobrado, Ingo Schwarze,
Jakob Schlyter, Janne Johansson, Jason George, Jason McIntyre,
Jasper Lievisse Adriaanse, Jeremy Evans, Jim Razmus II, Joel Knight,
Joel Sing, Joerg Zinke, Jolan Luff, Jonathan Armani, Jonathan Gray,
Jonathan Matthew, Jordan Hargrave, Joshua Elsasser, Joshua Stein,
Kenji Aoyama, Kenneth R Westerback, Kirill Bychkov, Kurt Miller,
Landry Breuil, Laurent Fanis, Lawrence Teo, Luke Tymowski,
Marc Espie, Marco Pfatschbacher, Marcus Glocker, Mark Kettenis,
Mark Lumsden, Markus Friedl, Martin Pieuchot, Martynas Venckus,
Mats O Jansson, Matthew Dempsky, Matthias Kilian, Matthieu Herrb,
Michael Erdely, Mike Belopuhov, Mike Larkin, Miod Vallat,
Nayden Markatchev, Nicholas Marriott, Nick Holland, Nigel Taylor,
Okan Demirmen, Otto Moerbeek, Pascal Stumpf, Paul de Weerd,
Paul Irofti, Peter Hessler, Peter Valchev, Philip Guenther,
Pierre-Emmanuel Andre, Pierre-Yves Ritschard, Remi Pointel,
Robert Nagy, Ryan Freeman, Ryan Thomas McBride, Sasano,
Sebastian Benoit, Sebastian Reitenbach, Simon Perreault,
Stefan Sperling, Stephan A. Rickauer, Steven Mestdagh,
Stuart Cassoff, Stuart Henderson, Takuya Asada, Ted Unangst,
Theo de Raadt, Tobias Stoeckmann, Tobias Weingartner,
Todd C. Miller, Todd Fries, Will Maier, William Yodlowsky,
Yasuoka Masahiko, Yojiro Uo
- OpenBSD 5.2 RELEASED -------------------------------------------------
November 1, 2012.
We are pleased to announce the official release of OpenBSD 5.2.
This is our 32nd release on CD-ROM (and 33rd via FTP). We remain
proud of OpenBSD's record of more than ten years with only two remote
holes in the default install.
As in our previous releases, 5.2 provides significant improvements,
including new features, in nearly all areas of the system:
- pthreads(3) support:
o The most significant change in this release is the replacement of the
user-level uthreads by kernel-level rthreads, allowing multithreaded
programs to utilize multiple CPUs/cores.
o Use PTHREAD_MUTEX_STRICT_NP as default mutex type.
o Added pthread spinlock and barrier routines.
o Added pthread_mutex_timedlock(3) and sem_timedwait(3).
o Added pthread_condattr_setclock(3).
o Added support for live multi-threaded debugging in gdb(1).
o Improved handling for rusage totals and interval timers in threaded
processes.
o Changed the RLIMIT_NPROC rlimit to count processes instead of threads.
o Added a new system limit kern.maxthread for the max number of threads.
o Closed race conditions in thread creation, and in fork(2) and open(2) in a
threaded process.
o Improved handling of threaded processes in ps(1), top(1), and fstat(1).
o Changed the lock around dlopen() to be recursive, so that dl*() operations
from atexit() handlers don't deadlock.
o Many fixes to pthread attribute and mutex error checking and cancellation
handling.
- Improved hardware support, including:
o Added hibernation support on i386. Currently only working on pciide(4) and
wd(4) disks.
o Improved support for ALPS based touchpads in wsmouse(4) and the
synaptics(4) X.Org input driver.
o Performance improvements with ix(4) Intel 10Gb Ethernet NICs.
o Support for i350 based devices in em(4).
o Flow control support for bnx(4).
o Hardware watchdog and HPET support for tcpcib(4) (Intel Atom E600) as
found in some embedded x86 systems.
o urndis(4) supports additional Android devices.
o Support for Winbond W83627UHG has been added to wbsio(4).
o Support for the SMBus controller of the AMD CS5536 in glxpcib(4) and the
NVIDIA MCP89 in nviic(4).
o Support for AX88772B based devices has been added to axe(4).
o Support for MCS7832 based devices has been added to mos(4).
o Support for the Roland UM-ONE has been added to umidi(4).
o Support for the AMD Hudson-2 chipset has been added to azalia(4) and
piixpm(4).
o Support for NetMos NM9820 cardbus serial cards has been added to com(4).
o Support for Huawei Mobile E303 has been added to umsm(4).
o The sgi port now supports the R4000 Indigo (IP20), Indy (IP22), R4000
Indigo2 (IP24) and POWER Indigo2 R10000 (IP28) families.
- Generic network stack improvements:
o Increased TCP initial window to 14600 bytes as proposed in
draft-ietf-tcpm-initcwnd.
o Cleanup handling of sockaddrs in degenerate use cases.
o Improved handling of error and limit cases in file descriptor passing.
o Improved socketbuffer handling for AF_UNIX sockets.
o Fix yet another file descriptor leak in message passing.
o Improved error handling in socket splicing.
o IPv6 privacy addresses now appear alongside SLAAC addresses.
o Support for Extended Sequence Numbers has been added to the IPsec stack
and iked(8).
o Bridging two IPv4 networks over an IPv6 link with gif(4) is now possible.
- Routing daemons and other userland network improvements:
o sndiod(1), bgpd(8), dvmrpd(8), ftp-proxy(8), iked(8), iscsid(8), ldapd(8),
ldpd(8), nsd(8), ospf6d(8), ospfd(8), relayd(8), ripd(8), snmpd(8),
spamd(8), sshd(8), tcpbench(1) and tmux(1) now rate limit their accepting
of new connections when experiencing file descriptor exhaustion.
o Allow route(8) destination/prefixlen syntax for IPv6 routes.
o ASCII packet dumping support in tcpdump(8).
o Better etherip and BGP protocol support in tcpdump(8).
o isakmpd(8) and tcpdump(8) now recognize additional Internet Key Exchange
DH groups.
o Various improvements in iked(8) including support for retransmits.
o ipsecctl(8) now allows SA lifetimes to be specified in its ipsec.conf(5)
file.
o tftpd(8) rewritten as a persistent, non-blocking daemon.
o tftp(1) client now supports IPv6.
o snmpd(8) now supports PF-MIB, UCD-DISKIO-MIB, and additional OIDs in
HOST-RESOURCES-MIB.
o bgpd(8) is now more robust when encountering network instability.
o Adjust the bgpd(8) route decision code to cover checks needed due to route
reflection.
o Various fixes to improve error reporting in bgpd(8) including support of
RFC 6608.
o For debugging purposes bgpctl(8) can load MRT dumps into bgpd(8).
o Fixed distribution of MPLS VPN routes in bgpd(8).
o Introduced a new option "selected" to the bgpctl(8) "show rib" command to
show only selected routes.
o Correctly support the LSA_TYPE_AREA_OPAQ and LSA_TYPE_AS_OPAQ types in
ospfd(8).
o Make relayd(8) able to handle transactions larger than 2GB in size.
o Various bug fixes and better HTTP standard compliance in relayd(8).
o rtadvd(8) can now advertise DNS servers and search paths in router
advertisements.
o rtadvd(8) can now send router advertisements with no prefix information
using the noifprefix option.
o ftp(1) client now allows the source IP address of the connection to be
specified.
o ypldap(8) now handles larger directories and is more tolerant when
processing groups.
o Added support for AF_INET6 to inet_net_pton(3) and inet_net_ntop(3).
- pf(4) improvements:
o pf(4) now ignores/preserves the lower 2 bits of the tos-header (used for
Explicit Congestion Notification).
o Allow more than 16 pflog(4) interfaces.
o pf(4) now supports weighted least-states load balancing.
o The prio and tos options are now part of the "set { }" block. See
pf.conf(5).
o Allow setting the tos on IPv6 packets.
o Better demotion handling in pfsync(4) to prevent failovers without having
a full state table.
o Fixed printing of wildcard anchors in pfctl(8).
- Assorted improvements:
o Added nginx(8), an HTTP server, reverse proxy server and mail proxy server.
o Added SQLite 3.7.13, a self-contained SQL database engine.
o libpcap has been updated with several core functions from tcpdump.org's
libpcap-1.2.0 API, without the clutter.
o Disabled SSLv2 in OpenSSL.
o Moved libtool(1) into the base system. Much work remains to be done.
o Removed lint(1).
o Removed the raid(4) RAIDframe driver and its corresponding raidctl(8)
utility. RAIDframe has been superseded by softraid(4).
o Added posix_spawn(3).
o Added mbsnrtowcs(3) and wcsnrtombs(3).
o Added getdelim(3) and getline(3).
o More configuration variables for sysconf(3) and pathconf(2).
o dirfd(3) is now a function instead of a macro.
o posix_memalign(3) supports arbitrarily large alignments.
o Improved realloc(3) performance.
o ld.so(1) recognizes the DF_1_NOOPEN flag and refuses to dlopen(3) shared
objects linked with "-z nodlopen".
o Improved compliance and/or cleanliness of header files, particularly
<dirent.h>, <time.h>, <sys/time.h>, <limits.h>, <arpa/inet.h>,
<netinet/in.h>, and <sys/param.h>.
o Improved kernel uvm memory allocator.
o Added support for using AMT to provide console-over-Ethernet (c.f. the
amtterm package).
o Improved support for amd64 systems with many memory extents.
o compat_linux(8) improvements: TLS-vs-clone and futex fixes, added support
for statfs64(), tgkill(), gettid(), SOCK_CLOEXEC, and SOCK_NONBLOCK.
o kdump(1) improvements, including the ability to show thread IDs and
dumping of timespec, timeval, sigaction, rlimit, sigset, clockid, and fdset
arguments and results.
o Various improvements in smtpd(8): reliability fixes, new MTA client, new
scheduler and improved queue logic, simplified smtpd.conf(5) syntax,
better RFC compliance and several cosmetic changes.
o The mg(1) emacs-like editor now supports cscope functionality. Also,
backup files can now be saved to a user's home directory in addition to the
current working directory.
o Fixed operation of kvm_getfile2() (and therefore fstat(1) and pstat(8)) on
kernel crash dumps.
o Improved emacs-style key bindings and handling of large arrays in ksh(1).
o halt(8) disables "suspend-on-lid-close" so that you don't accidentally
suspend instead of shutting down.
o Improvements to parallel make(1): added the .CHEAP and .EXPENSIVE special
targets and fixed glitches in already-rebuilt logic.
o The libusb package is able to access non-ugen(4) devices for some
operations, allowing e.g. programming YubiKeys with a standard kernel.
o Various improvements in tmux(1): a new unified tree view to select
sessions or windows, new move-pane and renumber-windows commands, a history
of pane layouts, simple output rate limiting, and custom formats (-F) have
been extended and are now accepted by more commands.
o fsck_msdos(8) now works on devices with non-512 byte sectors.
o quotacheck(8) now works with DUID based fstab(5) files.
o Numerous minor improvement to fdisk(8), including more sanity checking and
better default partition sizing on large disks.
o dhclient(8) now discards trailing NULs in option data, and in general
parses option data with more paranoia.
o Various improvements to dhclient(8) startup and timeout handling.
o disklabel(8) does a better job of calculating physical memory during
partition auto-allocation of devices with non-512 byte sectors.
o SCSI errors are now correctly propogated to userland, e.g. mount(2) now
reports specific errors such as trying to mount RW filesystems from RO
media.
o Improved FAT media handling: autorecognize such media even if the 0x55aa
signature is missing and prevent the writing of an OpenBSD disklabel over
the FAT data structures.
o The MS-DOS FAT filesystem implementation gained a significant write
speedup for large files (up to twice as fast).
- OpenSSH 6.1:
o New features:
- sshd(8): This release turns on pre-auth sandboxing sshd by default for
new installs, by setting UsePrivilegeSeparation=sandbox in sshd_config.
- sshd-keygen(1): Add options to specify starting line number and number
of lines to process when screening moduli candidates, allowing
processing of different parts of a candidate moduli file in parallel.
- sshd(8): The Match directive now supports matching on the local
(listen) address and port upon which the incoming connection was
received via LocalAddress and LocalPort clauses.
- sshd(8): Extend sshd_config Match directive to allow setting AcceptEnv
and {Allow,Deny}{Users,Groups}.
- Add support for RFC6594 SSHFP DNS records for ECDSA key types. (bz#1978)
- sshd-keygen(1): Allow conversion of RSA1 keys to public PEM and PKCS8.
- sshd(8): Allow the sshd_config PermitOpen directive to accept "none" as
an argument to refuse all port-forwarding requests.
- sshd(8): Support "none" as an argument for AuthorizedPrincipalsFile.
- sshd-keyscan(1): Look for ECDSA keys by default. (bz#1971)
- sshd(8): Add "VersionAddendum" to sshd_config to allow server operators
to append some arbitrary text to the server SSH protocol banner.
o The following significant bugs have been fixed in this release:
- sshd(8) and ssh(1): Don't spin in accept() in situations of file
descriptor exhaustion. Instead back off for a while.
- sshd(8) and ssh(1): Remove hmac-sha2-256-96 and hmac-sha2-512-96 MACs
as they were removed from the specification. (bz#2023)
- sshd(8): Handle long comments in config files better. (bz#2025)
- ssh(1): Delay setting tty_flag so RequestTTY options are correctly
picked up. (bz#1995)
- sshd(8): Fix handling of /etc/nologin incorrectly being applied to root
on platforms that use login_cap.
- Over 7,600 ports, major performance and stability improvements in
the package build process:
o dpb got simpler and faster. Handles distfiles, works without any options.
o Simpler and less error-prone mechanisms for handling MD differences.
o dpb is now used for mirroring distfiles, to the great joy of
ftp://ftp.openbsd.org/pub/OpenBSD/distfiles/
o full databases of all ports available as packages:
- pkglocatedb - a locate(1) database of all files in all packages
- sqlports - a sqlite3(1) database of all meta-info for all packages
- ports-readmes - a tree of html files for browsing thru available packages
- Many pre-built packages for each architecture:
o i386: 7483 o sparc64: 6820
o alpha: 5993 o sh: 2412
o amd64: 7439 o powerpc: 7050
o sparc: 4466 o arm: 5802
o hppa: 6316 o vax: 2279
o mips64: 5845 o mips64el: 5908
- Some highlights:
o Gnome 3.4.2 o KDE 3.5.10
o Xfce 4.10 o MySQL 5.1.63
o PostgreSQL 9.1.4 o Postfix 2.9.3
o OpenLDAP 2.3.43 and 2.4.31 o GHC 7.0.4
o Mozilla Firefox 3.5.19, 3.6.28 and 13.0.1
o Mozilla Thunderbird 13.0.1 o LibreOffice 3.5.5.3
o Emacs 21.4, 22.3 and 23.4 o Vim 7.3.154
o PHP 5.2.17 and 5.3.14 o Python 2.5.4, 2.7.3 and 3.2.3
o Ruby 1.8.7.370 and 1.9.3.194 o Tcl/Tk 8.5.11
o Jdk 1.7 o Mono 2.10.9
o Chromium 20.0.1132.57 o Groff 1.21
o Go 1.0.2 o GCC 4.6.3 and 4.7.1
o LLVM/Clang 3.1 o Lua 5.1.5 and 5.2.1
- As usual, steady improvements in manual pages and other documentation.
- The system includes the following major components from outside suppliers:
o Xenocara (based on X.Org 7.7 with xserver 1.12.2 + patches,
freetype 2.4.10, fontconfig 2.8.0, Mesa 7.10.3, xterm 279,
xkeyboard-config 2.6 and more)
o Gcc 4.2.1 (+ patches) and 2.95.3 (+ patches)
o Perl 5.12.2 (+ patches)
o Our improved and secured version of Apache 1.3, with SSL/TLS
and DSO support
o Nginx 1.2.2 (+ patches)
o OpenSSL 1.0.0f (+ patches)
o SQLite 3.7.13 (+ patches)
o Sendmail 8.14.5, with libmilter
o Bind 9.4.2-P2 (+ patches)
o Lynx 2.8.7rel.2 with HTTPS and IPv6 support (+ patches)
o Sudo 1.7.2p8
o Ncurses 5.7
o Heimdal 0.7.2 (+ patches)
o Arla 0.35.7
o Binutils 2.15 (+ patches)
o Gdb 6.3 (+ patches)
o Less 444 (+ patches)
o Awk Aug 10, 2011 version
If you'd like to see a list of what has changed between OpenBSD 5.1
and 5.2, look at
http://www.OpenBSD.org/plus52.html
Even though the list is a summary of the most important changes
made to OpenBSD, it still is a very very long list.
------------------------------------------------------------------------
- SECURITY AND ERRATA --------------------------------------------------
We provide patches for known security threats and other important
issues discovered after each CD release. As usual, between the
creation of the OpenBSD 5.2 FTP/CD-ROM binaries and the actual 5.2
release date, our team found and fixed some new reliability problems
(note: most are minor and in subsystems that are not enabled by
default). Our continued research into security means we will find
new security problems -- and we always provide patches as soon as
possible. Therefore, we advise regular visits to
http://www.OpenBSD.org/security.html
and
http://www.OpenBSD.org/errata.html
Security patch announcements are sent to the security-announce@OpenBSD.org
mailing list. For information on OpenBSD mailing lists, please see:
http://www.OpenBSD.org/mail.html
------------------------------------------------------------------------
- CD-ROM SALES ---------------------------------------------------------
OpenBSD 5.2 is also available on CD-ROM. The 3-CD set costs $50 CDN and
is available via mail order and from a number of contacts around the
world. The set includes a colourful booklet which carefully explains the
installation of OpenBSD. A new set of cute little stickers is also
included (sorry, but our FTP mirror sites do not support STP, the Sticker
Transfer Protocol). As an added bonus, the second CD contains an audio
track, a song entitled "Aquarela do Linux". MP3 and OGG versions of
the audio track can be found on the first CD.
Lyrics (and an explanation) for the songs may be found at:
http://www.OpenBSD.org/lyrics.html#52
Profits from CD sales are the primary income source for the OpenBSD
project -- in essence selling these CD-ROM units ensures that OpenBSD
will continue to make another release six months from now.
The OpenBSD 5.2 CD-ROMs are bootable on the following platforms:
o i386
o amd64
o sparc64
(Other platforms must boot from floppy, network, or other method).
For more information on ordering CD-ROMs, see:
http://www.OpenBSD.org/orders.html
The above web page lists a number of places where OpenBSD CD-ROMs
can be purchased from. For our default mail order, go directly to:
https://https.OpenBSD.org/cgi-bin/order
All of our developers strongly urge you to buy a CD-ROM and support
our future efforts. Additionally, donations to the project are
highly appreciated, as described in more detail at:
http://www.OpenBSD.org/goals.html#funding
------------------------------------------------------------------------
- OPENBSD FOUNDATION ---------------------------------------------------
For those unable to make their contributions as straightforward gifts,
the OpenBSD Foundation (http://www.openbsdfoundation.org) is a Canadian
not-for-profit corporation that can accept larger contributions and
issue receipts. In some situations, their receipt may qualify as a
business expense write-off, so this is certainly a consideration for
some organizations or businesses. There may also be exposure benefits
since the Foundation may be interested in participating in press releases.
In turn, the Foundation then uses these contributions to assist OpenBSD's
infrastructure needs. Contact the foundation directors at
directors@openbsdfoundation.org for more information.
------------------------------------------------------------------------
- T-SHIRT SALES --------------------------------------------------------
The OpenBSD distribution companies also sell tshirts and polo shirts,
with new and old designs, available from our web ordering system.
-----------------------------------------------------------------------
- FTP INSTALLS ---------------------------------------------------------
If you choose not to buy an OpenBSD CD-ROM, OpenBSD can be easily
installed via FTP or HTTP downloads. Typically you need a single
small piece of boot media (e.g., a boot floppy) and then the rest
of the files can be installed from a number of locations, including
directly off the Internet. Follow this simple set of instructions
to ensure that you find all of the documentation you will need
while performing an install via FTP or HTTP. With the CD-ROMs,
the necessary documentation is easier to find.
1) Read either of the following two files for a list of ftp/http
mirrors which provide OpenBSD, then choose one near you:
http://www.OpenBSD.org/ftp.html
ftp://ftp.OpenBSD.org/pub/OpenBSD/5.2/ftplist
As of Nov 1, 2012, the following ftp mirror sites have the 5.2 release:
ftp://ftp.eu.openbsd.org/pub/OpenBSD/5.2/ Stockholm, Sweden
ftp://ftp.bytemine.net/pub/OpenBSD/5.2/ Oldenburg, Germany
ftp://ftp.ch.openbsd.org/pub/OpenBSD/5.2/ Zurich, Switzerland
ftp://ftp.fr.openbsd.org/pub/OpenBSD/5.2/ Paris, France
ftp://ftp5.eu.openbsd.org/pub/OpenBSD/5.2/ Vienna, Austria
ftp://mirror.aarnet.edu.au/pub/OpenBSD/5.2/ Brisbane, Australia
ftp://ftp.usa.openbsd.org/pub/OpenBSD/5.2/ CO, USA
ftp://ftp5.usa.openbsd.org/pub/OpenBSD/5.2/ CA, USA
The release is also available at the master site:
ftp://ftp.openbsd.org/pub/OpenBSD/5.2/ Alberta, Canada
However it is strongly suggested you use a mirror.
Other mirror sites may take a day or two to update.
2) Connect to that ftp mirror site and go into the directory
pub/OpenBSD/5.2/ which contains these files and directories.
This is a list of what you will see:
ANNOUNCEMENT armish/ mvme88k/ src.tar.gz
Changelogs/ ftplist packages/ sys.tar.gz
HARDWARE hp300/ ports.tar.gz tools/
PACKAGES hppa/ root.mail vax/
PORTS i386/ sgi/ xenocara.tar.gz
README landisk/ socppc/ zaurus/
alpha/ macppc/ sparc/
amd64/ mvme68k/ sparc64/
It is quite likely that you will want at LEAST the following
files which apply to all the architectures OpenBSD supports.
README - generic README
HARDWARE - list of hardware we support
PORTS - description of our "ports" tree
PACKAGES - description of pre-compiled packages
root.mail - a copy of root's mail at initial login.
(This is really worthwhile reading).
3) Read the README file. It is short, and a quick read will make
sure you understand what else you need to fetch.
4) Next, go into the directory that applies to your architecture,
for example, i386. This is a list of what you will see:
INSTALL.i386 cd52.iso floppyB52.fs pxeboot*
INSTALL.linux cdboot* floppyC52.fs xbase52.tgz
MD5 cdbr* game52.tgz xetc52.tgz
base52.tgz cdemu52.iso index.txt xfont52.tgz
bsd* comp52.tgz install52.iso xserv52.tgz
bsd.mp* etc52.tgz man52.tgz xshare52.tgz
bsd.rd* floppy52.fs misc52.tgz
If you are new to OpenBSD, fetch _at least_ the file INSTALL.i386
and the appropriate floppy*.fs or install52.iso files. Consult the
INSTALL.i386 file if you don't know which of the floppy images
you need (or simply fetch all of them).
If you use the install52.iso file (roughly 250MB in size), then you
do not need the various *.tgz files since they are contained on that
one-step ISO-format install CD.
5) If you are an expert, follow the instructions in the file called
README; otherwise, use the more complete instructions in the
file called INSTALL.i386. INSTALL.i386 may tell you that you
need to fetch other files.
6) Just in case, take a peek at:
http://www.OpenBSD.org/errata.html
This is the page where we talk about the mistakes we made while
creating the 5.2 release, or the significant bugs we fixed
post-release which we think our users should have fixes for.
Patches and workarounds are clearly described there.
Note: If you end up needing to write a raw floppy using Windows,
you can use "fdimage.exe" located in the pub/OpenBSD/5.2/tools
directory to do so.
------------------------------------------------------------------------
- X.ORG FOR MOST ARCHITECTURES -----------------------------------------
X.Org has been integrated more closely into the system. This release
contains X.Org 7.7. Most of our architectures ship with X.Org, including
amd64, sparc, sparc64 and macppc. During installation, you can install
X.Org quite easily. Be sure to try out xdm(1) and see how we have
customized it for OpenBSD.
------------------------------------------------------------------------
- PORTS TREE -----------------------------------------------------------
The OpenBSD ports tree contains automated instructions for building
third party software. The software has been verified to build and
run on the various OpenBSD architectures. The 5.2 ports collection,
including many of the distribution files, is included on the 3-CD
set. Please see the PORTS file for more information.
Note: some of the most popular ports, e.g., the Apache web server
and several X applications, come standard with OpenBSD. Also, many
popular ports have been pre-compiled for those who do not desire
to build their own binaries (see BINARY PACKAGES, below).
------------------------------------------------------------------------
- BINARY PACKAGES WE PROVIDE -------------------------------------------
A large number of binary packages are provided. Please see the PACKAGES
file (ftp://ftp.OpenBSD.org/pub/OpenBSD/5.2/PACKAGES) for more details.
------------------------------------------------------------------------
- SYSTEM SOURCE CODE ---------------------------------------------------
The CD-ROMs contain source code for all the subsystems explained
above, and the README (ftp://ftp.OpenBSD.org/pub/OpenBSD/5.2/README)
file explains how to deal with these source files. For those who
are doing an FTP install, the source code for all four subsystems
can be found in the pub/OpenBSD/5.2/ directory:
xenocara.tar.gz ports.tar.gz src.tar.gz sys.tar.gz
------------------------------------------------------------------------
- THANKS ---------------------------------------------------------------
Ports tree and package building by Jasper Lievisse Adriaanse,
Pierre-Emmanuel Andre, Landry Breuil, Michael Erdely, Stuart Henderson,
Peter Hessler, Paul Irofti, Antoine Jacoutot, Sebastian Reitenbach,
and Christian Weisgerber. System builds by Theo de Raadt and Miod
Vallat. X11 builds by Todd Fries and Miod Vallat. ISO-9660 filesystem
layout by Theo de Raadt.
We would like to thank all of the people who sent in bug reports, bug
fixes, donation cheques, and hardware that we use. We would also like
to thank those who pre-ordered the 5.2 CD-ROM or bought our previous
CD-ROMs. Those who did not support us financially have still helped
us with our goal of improving the quality of the software.
Our developers are:
Aaron Bieber, Alexander Bluhm, Alexander Hall, Alexander Schrijver,
Alexander Yurchenko, Alexandr Shadchin, Alexandre Ratchov,
Anil Madhavapeddy, Anthony J. Bentley, Antoine Jacoutot,
Austin Hook, Benoit Lecocq, Bob Beck, Brandon Mercer, Bret Lambert,
Brett Mahar, Bryan Steele, Camiel Dobbelaar, Can Erkin Acar,
Charles Longeau, Christian Weisgerber, Christiano F. Haesbaert,
Claudio Jeker, Damien Bergamini, Damien Miller, Darren Tucker,
David Coppa, David Gwynne, David Krause, Edd Barrett, Eric Faurot,
Federico G. Schwindt, Felix Kronlage, Gilles Chehade,
Giovanni Bechis, Gleydson Soares, Gonzalo L. Rodriguez,
Henning Brauer, Ian Darwin, Igor Sobrado, Ingo Schwarze,
Jakob Schlyter, Janne Johansson, Jason George, Jason McIntyre,
Jasper Lievisse Adriaanse, Jeremy Evans, Jim Razmus II, Joel Knight,
Joel Sing, Joerg Zinke, Jolan Luff, Jonathan Armani, Jonathan Gray,
Jonathan Matthew, Jordan Hargrave, Joshua Elsasser, Joshua Stein,
Kenji Aoyama, Kenneth R Westerback, Kirill Bychkov, Kurt Miller,
Landry Breuil, Laurent Fanis, Lawrence Teo, Luke Tymowski,
Marc Espie, Marco Pfatschbacher, Marcus Glocker, Mark Kettenis,
Mark Lumsden, Markus Friedl, Martin Pieuchot, Martynas Venckus,
Mats O Jansson, Matthew Dempsky, Matthias Kilian, Matthieu Herrb,
Michael Erdely, Mike Belopuhov, Mike Larkin, Miod Vallat,
Nayden Markatchev, Nicholas Marriott, Nick Holland, Nigel Taylor,
Okan Demirmen, Otto Moerbeek, Pascal Stumpf, Paul de Weerd,
Paul Irofti, Peter Hessler, Peter Valchev, Philip Guenther,
Pierre-Emmanuel Andre, Pierre-Yves Ritschard, Remi Pointel,
Robert Nagy, Ryan Freeman, Ryan Thomas McBride, Sasano,
Sebastian Benoit, Sebastian Reitenbach, Simon Perreault,
Stefan Sperling, Stephan A. Rickauer, Steven Mestdagh,
Stuart Cassoff, Stuart Henderson, Takuya Asada, Ted Unangst,
Theo de Raadt, Tobias Stoeckmann, Tobias Weingartner,
Todd C. Miller, Todd Fries, Will Maier, William Yodlowsky,
Yasuoka Masahiko, Yojiro Uo
[CentOS-announce] CEBA-2012:1422 CentOS 6 glibc Update
CentOS Errata and Bugfix Advisory 2012:1422
Upstream details at : https://rhn.redhat.com/errata/RHBA-2012-1422.html
The following updated files have been uploaded and are currently
syncing to the mirrors: ( sha256sum Filename )
i386:
457313a59d63eb2906589ab9e14e67996c44c0e5fcf77020e6d2c3b5625da26d glibc-2.12-1.80.el6_3.6.i686.rpm
d69a18a8a0b325a16817b08d3bc50ed2623a51c4ecd482ab1055a58692dca888 glibc-common-2.12-1.80.el6_3.6.i686.rpm
1356817ed8af3bcaaf21122c00aaa2618cbb4093bb8c3fa14e2a1bee7e9a1afe glibc-devel-2.12-1.80.el6_3.6.i686.rpm
34c7a6d6dcc3e41f9877316cc3b395a66540f97bd68e742272706cb5e9def994 glibc-headers-2.12-1.80.el6_3.6.i686.rpm
7e11593a2a7a15853f4a3d57ed65c8821fc03543b6d5762dbfe1af45cdc00a35 glibc-static-2.12-1.80.el6_3.6.i686.rpm
d7dd6f230e8fa3a60d35824f01c9ae384801cd682f06375ee34c33290cfad375 glibc-utils-2.12-1.80.el6_3.6.i686.rpm
dc13da609d397533da365f1cc12fba37504a081309cf60d1f9cd2347876e26fc nscd-2.12-1.80.el6_3.6.i686.rpm
x86_64:
457313a59d63eb2906589ab9e14e67996c44c0e5fcf77020e6d2c3b5625da26d glibc-2.12-1.80.el6_3.6.i686.rpm
68d5bd49bb92baeceb3ed8fe19300465bdc24cea00229f3269b00d4007c20748 glibc-2.12-1.80.el6_3.6.x86_64.rpm
106d25052ae0b2d264ed014a6dde2254da379702654047d164179edbcc1a20ff glibc-common-2.12-1.80.el6_3.6.x86_64.rpm
1356817ed8af3bcaaf21122c00aaa2618cbb4093bb8c3fa14e2a1bee7e9a1afe glibc-devel-2.12-1.80.el6_3.6.i686.rpm
85616b4c31190208b288798019b3920c1fa2782d60aeb46c5ae37904f5cd912d glibc-devel-2.12-1.80.el6_3.6.x86_64.rpm
63aea1c0f19fba720d20db6ee983adccff8eab0738fab3c2429d29dbfbf27e92 glibc-headers-2.12-1.80.el6_3.6.x86_64.rpm
7e11593a2a7a15853f4a3d57ed65c8821fc03543b6d5762dbfe1af45cdc00a35 glibc-static-2.12-1.80.el6_3.6.i686.rpm
44f9dc44ccfdddd391c821f3fec25685cb926c47db710a0f8ba9e9e0e3a6602b glibc-static-2.12-1.80.el6_3.6.x86_64.rpm
7b61bab183ba95c8c100f82b73744b97805e4d9d4280703b5a14e647c9c088c0 glibc-utils-2.12-1.80.el6_3.6.x86_64.rpm
882f7c5e39743082e8856acbb7d112db0c74e07697922502f2f43fbac03331eb nscd-2.12-1.80.el6_3.6.x86_64.rpm
Source:
a842f956739aa225dabc1a26a86397f6e23dca47a42ad44bc44584ff6b464409 glibc-2.12-1.80.el6_3.6.src.rpm
--
Johnny Hughes
CentOS Project { http://www.centos.org/ }
irc: hughesjr, #centos@irc.freenode.net
_______________________________________________
CentOS-announce mailing list
CentOS-announce@centos.org
http://lists.centos.org/mailman/listinfo/centos-announce
Upstream details at : https://rhn.redhat.com/errata/RHBA-2012-1422.html
The following updated files have been uploaded and are currently
syncing to the mirrors: ( sha256sum Filename )
i386:
457313a59d63eb2906589ab9e14e67996c44c0e5fcf77020e6d2c3b5625da26d glibc-2.12-1.80.el6_3.6.i686.rpm
d69a18a8a0b325a16817b08d3bc50ed2623a51c4ecd482ab1055a58692dca888 glibc-common-2.12-1.80.el6_3.6.i686.rpm
1356817ed8af3bcaaf21122c00aaa2618cbb4093bb8c3fa14e2a1bee7e9a1afe glibc-devel-2.12-1.80.el6_3.6.i686.rpm
34c7a6d6dcc3e41f9877316cc3b395a66540f97bd68e742272706cb5e9def994 glibc-headers-2.12-1.80.el6_3.6.i686.rpm
7e11593a2a7a15853f4a3d57ed65c8821fc03543b6d5762dbfe1af45cdc00a35 glibc-static-2.12-1.80.el6_3.6.i686.rpm
d7dd6f230e8fa3a60d35824f01c9ae384801cd682f06375ee34c33290cfad375 glibc-utils-2.12-1.80.el6_3.6.i686.rpm
dc13da609d397533da365f1cc12fba37504a081309cf60d1f9cd2347876e26fc nscd-2.12-1.80.el6_3.6.i686.rpm
x86_64:
457313a59d63eb2906589ab9e14e67996c44c0e5fcf77020e6d2c3b5625da26d glibc-2.12-1.80.el6_3.6.i686.rpm
68d5bd49bb92baeceb3ed8fe19300465bdc24cea00229f3269b00d4007c20748 glibc-2.12-1.80.el6_3.6.x86_64.rpm
106d25052ae0b2d264ed014a6dde2254da379702654047d164179edbcc1a20ff glibc-common-2.12-1.80.el6_3.6.x86_64.rpm
1356817ed8af3bcaaf21122c00aaa2618cbb4093bb8c3fa14e2a1bee7e9a1afe glibc-devel-2.12-1.80.el6_3.6.i686.rpm
85616b4c31190208b288798019b3920c1fa2782d60aeb46c5ae37904f5cd912d glibc-devel-2.12-1.80.el6_3.6.x86_64.rpm
63aea1c0f19fba720d20db6ee983adccff8eab0738fab3c2429d29dbfbf27e92 glibc-headers-2.12-1.80.el6_3.6.x86_64.rpm
7e11593a2a7a15853f4a3d57ed65c8821fc03543b6d5762dbfe1af45cdc00a35 glibc-static-2.12-1.80.el6_3.6.i686.rpm
44f9dc44ccfdddd391c821f3fec25685cb926c47db710a0f8ba9e9e0e3a6602b glibc-static-2.12-1.80.el6_3.6.x86_64.rpm
7b61bab183ba95c8c100f82b73744b97805e4d9d4280703b5a14e647c9c088c0 glibc-utils-2.12-1.80.el6_3.6.x86_64.rpm
882f7c5e39743082e8856acbb7d112db0c74e07697922502f2f43fbac03331eb nscd-2.12-1.80.el6_3.6.x86_64.rpm
Source:
a842f956739aa225dabc1a26a86397f6e23dca47a42ad44bc44584ff6b464409 glibc-2.12-1.80.el6_3.6.src.rpm
--
Johnny Hughes
CentOS Project { http://www.centos.org/ }
irc: hughesjr, #centos@irc.freenode.net
_______________________________________________
CentOS-announce mailing list
CentOS-announce@centos.org
http://lists.centos.org/mailman/listinfo/centos-announce
[CentOS-announce] CEBA-2012:1419 CentOS 6 resource-agents Update
CentOS Errata and Bugfix Advisory 2012:1419
Upstream details at : https://rhn.redhat.com/errata/RHBA-2012-1419.html
The following updated files have been uploaded and are currently
syncing to the mirrors: ( sha256sum Filename )
i386:
ce3b345406447e518e872d164628349d9787efff33c49188e4db26c48ecaa4c8 resource-agents-3.9.2-12.el6_3.1.i686.rpm
x86_64:
a722145da540668af3770993d462f51720c3c878349f5b7a9324e63ed174ba23 resource-agents-3.9.2-12.el6_3.1.x86_64.rpm
Source:
8be6f4edc4ba0718f6b54393fc173ee59630d7b4bbe01ce64dd4835f5bf8c072 resource-agents-3.9.2-12.el6_3.1.src.rpm
--
Johnny Hughes
CentOS Project { http://www.centos.org/ }
irc: hughesjr, #centos@irc.freenode.net
_______________________________________________
CentOS-announce mailing list
CentOS-announce@centos.org
http://lists.centos.org/mailman/listinfo/centos-announce
Upstream details at : https://rhn.redhat.com/errata/RHBA-2012-1419.html
The following updated files have been uploaded and are currently
syncing to the mirrors: ( sha256sum Filename )
i386:
ce3b345406447e518e872d164628349d9787efff33c49188e4db26c48ecaa4c8 resource-agents-3.9.2-12.el6_3.1.i686.rpm
x86_64:
a722145da540668af3770993d462f51720c3c878349f5b7a9324e63ed174ba23 resource-agents-3.9.2-12.el6_3.1.x86_64.rpm
Source:
8be6f4edc4ba0718f6b54393fc173ee59630d7b4bbe01ce64dd4835f5bf8c072 resource-agents-3.9.2-12.el6_3.1.src.rpm
--
Johnny Hughes
CentOS Project { http://www.centos.org/ }
irc: hughesjr, #centos@irc.freenode.net
_______________________________________________
CentOS-announce mailing list
CentOS-announce@centos.org
http://lists.centos.org/mailman/listinfo/centos-announce
[CentOS-announce] CEBA-2012:1423 CentOS 6 rdma Update
CentOS Errata and Bugfix Advisory 2012:1423
Upstream details at : https://rhn.redhat.com/errata/RHBA-2012-1423.html
The following updated files have been uploaded and are currently
syncing to the mirrors: ( sha256sum Filename )
i386:
5d1aba1ef7c1955b55817bee8c0f729ab7f678271acaad23bde36b131862e885 rdma-3.3-4.el6_3.noarch.rpm
x86_64:
9202e6046a3cd10c209e9e5136fe0f6eed6488797e76e3a565c8c327b00954f0 rdma-3.3-4.el6_3.noarch.rpm
Source:
4b2f2be4923c56d5a9931fc5174ca89f2d67305c26af1523d35a0393bf74174d rdma-3.3-4.el6_3.src.rpm
--
Johnny Hughes
CentOS Project { http://www.centos.org/ }
irc: hughesjr, #centos@irc.freenode.net
_______________________________________________
CentOS-announce mailing list
CentOS-announce@centos.org
http://lists.centos.org/mailman/listinfo/centos-announce
Upstream details at : https://rhn.redhat.com/errata/RHBA-2012-1423.html
The following updated files have been uploaded and are currently
syncing to the mirrors: ( sha256sum Filename )
i386:
5d1aba1ef7c1955b55817bee8c0f729ab7f678271acaad23bde36b131862e885 rdma-3.3-4.el6_3.noarch.rpm
x86_64:
9202e6046a3cd10c209e9e5136fe0f6eed6488797e76e3a565c8c327b00954f0 rdma-3.3-4.el6_3.noarch.rpm
Source:
4b2f2be4923c56d5a9931fc5174ca89f2d67305c26af1523d35a0393bf74174d rdma-3.3-4.el6_3.src.rpm
--
Johnny Hughes
CentOS Project { http://www.centos.org/ }
irc: hughesjr, #centos@irc.freenode.net
_______________________________________________
CentOS-announce mailing list
CentOS-announce@centos.org
http://lists.centos.org/mailman/listinfo/centos-announce
[arch-announce] Bug Squashing Day: Saturday 17th November
Allan McRae wrote:
The number of bugs in the Arch Linux bug tracker is creeping up so it is time
for some extermination.
This is a great way for the community to get involved and help the Arch Linux
team. The process is simple. First look at a bug for your favorite piece of
software in the bug tracker and check if it still occurs. If it does, check the
upstream project for a fix and test it to confirm it works. If there is no fix
available, make sure the bug has been filed in the upstream tracker.
Join us on the #archlinux-bugs IRC channel. We are spread across timezones, so
people should be around all day.
URL: https://www.archlinux.org/news/bug-squashing-day-saturday-17th-november/
_______________________________________________
arch-announce mailing list
arch-announce@archlinux.org
https://mailman.archlinux.org/mailman/listinfo/arch-announce
The number of bugs in the Arch Linux bug tracker is creeping up so it is time
for some extermination.
This is a great way for the community to get involved and help the Arch Linux
team. The process is simple. First look at a bug for your favorite piece of
software in the bug tracker and check if it still occurs. If it does, check the
upstream project for a fix and test it to confirm it works. If there is no fix
available, make sure the bug has been filed in the upstream tracker.
Join us on the #archlinux-bugs IRC channel. We are spread across timezones, so
people should be around all day.
URL: https://www.archlinux.org/news/bug-squashing-day-saturday-17th-november/
_______________________________________________
arch-announce mailing list
arch-announce@archlinux.org
https://mailman.archlinux.org/mailman/listinfo/arch-announce
Subscribe to:
Posts (Atom)