Casper services allow limiting operations that a process can perform. Each service maintains a specific list of permitted operations. Certain operations can be further restricted, such as specifying which domain names can be resolved. During the verification of limits, the service must ensure that the new set of constraints is a subset of the previous one. In the case of the cap_net service, the currently limited set of domain names was fetched incorrectly. In certain scenarios, if only a list of resolvable domain names was specified without setting any other limitations, the application could submit a new list of domains including include entries not previously in the list.
FreeBSD 14 has been released, Reading your RSS feed on FreeBSD, Manipulate PDF files easily with pdftk, clang(1)/llvm updated to version 16 in OpenBSD, NetBSD Security Advisory: multiple vulnerabilities in ftpd(8), and more.
Errata patches for Perl have been released for OpenBSD 7.4 and 7.3. Binary updates for the amd64, arm64 and i386 platform are available via the syspatch utility.
In our continuing series of ZFS best practices, they examine several of the most common use cases around file serving, and provide configuration tips and best practices to get the most out of your storage.
Migrating from an Old Linux Server to a New FreeBSD Machine, The Internet Was Designed With a Narrow Waist, The Worst New Guys In History, FreeBSD Jails vs. Docker: A Comparison, Oracle Developer Studio 12.6 on Illumos.
Could you use a Pi as a DNS et DHCP server? It turns out to be really simple, with the proper hardware. Here are the notes.
In this article, Özgür Konstantin Kazanççı talks about how to upgrade FreeBSD 13.2 systems to 14.0 in deep and detailed way.
📦 The Bastille team spent the American holiday weekend putting the final touches on Bastille 0.10.20231125!
Major features and fixes include:
* bootstrap #FreeBSD BETA and RC releases
* bootstrap EOL #FreeBSD releases (>=9.0)
* improved jail startup dependency using rcorder(8)
* combine create options, eg: -CV, -TB, etc
* fixes to bastille setup
* more!
Errata patches for patch, ospfd, tmux, and httpd have been released for OpenBSD 7.4. Errata patch for httpd has also been released for OpenBSD 7.3. Binary updates for the amd64, arm64 and i386 platform are available via the syspatch utility.
This is a maintenance software release including new features and bug fixes.
The FreeBSD Release Engineering Team is pleased to announce the availability of FreeBSD 14.0-RELEASE. This is the first release from the stable/14 branch. Some of the highlights:
OpenSSH has been updated to version 9.5p1.
OpenSSL has been updated to version 3.0.12, a major upgrade from OpenSSL 1.1.1t in FreeBSD 13.2-RELEASE.
The bhyve hypervisor now supports TPM and GPU passthrough.
FreeBSD supports up to 1024 cores on the amd64 and arm64 platforms.
ZFS has been upgraded to OpenZFS release 2.2, providing significant performance improvements.
It is now possible to perform background filesystem checks on UFS file systems running with journaled soft updates.
Experimental ZFS images are now available for AWS and Azure.
The default congestion control mechanism for TCP is now CUBIC.
And much more…