FreeBSD Security Advisory: OpenSSH Keystroke Obfuscation Bypass

submited 30 January 2025

The FreeBSD Project has released a security advisory addressing a vulnerability in OpenSSH that affects keystroke timing obfuscation. The flaw, identified as CVE-2024-39894, allows a passive observer to detect keystrokes based on packet timing. This issue impacts FreeBSD versions 14.1 and earlier. Users are advised to upgrade their systems to the latest stable or release branch to mitigate the risk. The advisory provides detailed instructions for applying binary and source code patches.

The BSD community linklog
Made a script? Written a blog post? Found a useful tutorial? Share it with the BSD community here or just enjoy what everyone else has found!

Submit

11 March 2025
Exploring the Hybrid Debian GNU/kFreeBSD Distribution  

Debian GNU/kFreeBSD is a fascinating blend of two major Unix-like traditions. While it offers unique advantages like ZFS support, FreeBSD’s performance optimizations, and Debian’s extensive package ecosystem, it also comes with challenges related to software compatibility and declining official support.

FreeBSD 13.5-RELEASE Announced  

The FreeBSD Project has released FreeBSD 13.5-RELEASE, the final update in the stable/13 branch. This release focuses on maintenance, including bug fixes, driver updates, and updates to externally-maintained software. It is available for multiple architectures, such as amd64, i386, and aarch64, and can be installed via ISO images, USB sticks, or over the network. Key resources like release notes, hardware compatibility details, and errata are available on the official FreeBSD website. This release will be supported until April 30, 2026.

Matrix Synapse on FreeBSD with Microsoft Azure AD SSO via OIDC  

When deploying Matrix Synapse, an open-source chat solution, authentication is critical. This guide integrates Microsoft Azure Active Directory (Azure AD) using OpenID Connect (OIDC) for secure Single Sign-On (SSO). It covers installation on FreeBSD and Debian, configuration of PostgreSQL, and setup of Nginx as a reverse proxy. The process includes registering an application in Azure AD, configuring OIDC in Matrix Synapse, and ensuring secure communication. This integration enhances security and user convenience by leveraging enterprise-grade identity solutions.

10 March 2025
Valuable News: March 10, 2025 UNIX/BSD/Linux Updates  

The Valuable News series provides a weekly summary of news and articles related to UNIX/BSD/Linux systems. This edition highlights key updates in the UNIX ecosystem, including PostgreSQL internals, hardware reviews, and FreeBSD improvements. It also covers security tips, open-source projects, and hardware insights.

Enjoying DiscoverBSD? There is more...

Subscribe to BSD Weekly, our free, once–weekly e-mail round-up of BSD news and articles. It is currated from your content on DiscoverBSD and BSDSec (a deadsimple BSD Security Advisories and Announcements).

You can also support the work on Patreon.
07 March 2025
Implementing S0ix on FreeBSD: A Guide to Modern Standby  

The article discusses the implementation of S0ix, a modern standby feature for power savings on FreeBSD. It explains the transition from ACPI S3 to S0ix, which allows systems to enter a low-power state while remaining in the S0 global state. Key points include the differences between S3 and S0ix, how to check if a laptop supports S0ix, and the progress made so far in enabling S0ix on FreeBSD. The article also covers debugging techniques, vendor-specific complications (e.g., AMD), and future steps such as achieving full S0i3 support and testing on Intel platforms. Additionally, it mentions related features like hibernation (S4) and hybrid suspend.

BSDCan 2025 Travel Grant Application Now Open  

The FreeBSD Foundation has opened applications for travel grants to attend BSDCan 2025 and the FreeBSD Developer Summit. These grants assist FreeBSD developers and advocates with travel expenses for attending conferences related to FreeBSD development. The application deadline for BSDCan 2025 is April 16, 2025. The Foundation also offers grants for other technical events, with applications due 7 weeks before the event. Interested individuals can apply through the general travel grant application.

BSD Now 601: The Monospace Web  

The PC is Dead: It’s Time to Make Computing Personal Again, The Biggest Unix Security Loophole, The monospace Web, What a FreeBSD kernel message about your bridge means, Installing FreeBSD on a HP 250 G9, Networking for System Administrators, and more.

06 March 2025
Managing UPS on FreeBSD  

The article discusses the process of managing a UPS (Uninterruptible Power Supply) on FreeBSD, focusing on the Eaton 3S 550F 330W model. The author initially experimented with a smaller battery but found it insufficient for longer power outages. After purchasing the Eaton UPS, they used NUT (Network UPS Tools) to manage and configure the device. The article provides step-by-step instructions for installing NUT, configuring the UPS, and disabling the beeping sound during power outages. It also mentions the possibility of configuring NUT to shut down the system when the UPS battery is low.

January 2025 Laptop Project Update: FreeBSD Foundation Progress Report  

The FreeBSD Foundation has released its January 2025 update for the Laptop Support and Usability Project, now available on GitHub. Key highlights include the development of a new power management driver to improve battery efficiency and progress on WiFi 4 (802.11n) and WiFi 5 (802.11ac) support for faster connectivity. Additionally, work is ongoing to integrate a UVC kernel driver for USB webcam support.

05 March 2025
Installing NetBSD on a JavaStation: A Guide for Vintage Tech Enthusiasts  

This article provides a detailed guide on installing NetBSD on a JavaStation, a vintage network computer from the late 1990s. The author shares their personal journey of acquiring and reviving a JavaStation, including overcoming challenges like a dead NVRAM battery and configuring network boot settings. The guide covers setting up a NetBSD filesystem, configuring network services like RARP, TFTP, DHCP, and NFS, and troubleshooting common issues. It also explains how to interact with the JavaStation's OpenBoot environment, which is based on a FORTH interpreter. This resource is valuable for BSD users interested in retro computing, as it offers practical insights into working with older hardware and network protocols.

load more