The FreeBSD Security Team has identified an issue in bind and nfsserver and has issued the following security advisories:
Please read and take the recommended action(s).
These are some miscellaneous FreeBSD related links you may find interesting.
FreeBSD pkgng vs custom ports (Michael W. Lucas)
New BSDA Study DVD Released (nycbug mailinglist)
New ArchBSD ISO Install 2013-07-12 (ArchBSD)
PC-BSD now uses a Content Delivery Network (CDN) (PC-BSD Blog)
Glen Barber has announced the availability of the second BETA build for the FreeBSD-9.2 release cycle.
The second BETA build of the 9.2-RELEASE release cycle is now available
on the FTP servers for the amd64, i386, powerpc64 and sparc64
ISO images and, for architectures that support it, the memory stick images
are available here.
If you notice problems you can report them through the normal GNATS PR
system or here on the -stable mailing list.
Changes between -BETA1 and -BETA2 include:
NodePaint is a new application for creating and editing images with nodes. Nodes are small operations that you can combine to achieve unlimited flexibility and creativity in your work. At any time you can go back and change any parameter in your node chain, which updates everything connected automatically.
NodePaint is in an early state of development, but has already usable for basic
image editing tasks. More features are added on a weekly basis.
The basic features are:
This video gives an overview of some of the possibilities NodePaint offers.
Thanks Heiko for your email to let me know about your project. If you’re working on a FreeBSD related project or offer a FreeBSD related service and want the world to know about it, let me know.
The first BETA build of the 9.2-RELEASE release cycle is now available on the FTP servers for the amd64, i386, and ia64 architectures.
If you notice problems you can report them through the normal GNATS PR
system or here on the -stable mailing list. If you would like to use SVN to do a source based update of an existing system use “stable/9″.
Please be aware that cvsup and CVS are both deprecated, and are not
supported methods of updating the src/ tree.
Important note to freebsd-update(8) users: Due to a last minute problem
found in the 9.2-BETA1 freebsd-update(8) builds, freebsd-update(8) is
NOT supported for 9.2-BETA1 upgrades. Please do not use
freebsd-update(8) to upgrade to 9.2-BETA1.
If all goes well and according to the release schedule FreeBSD 9.2 should be released around 31 August 2013.
GvE: Can you tell a bit about Verisign in general and yourself?
BK: Verisign is a provider of Internet infrastructure services, headquartered in Reston, VA, just over 20 miles from Washington, DC. As the global leader in domain names, Verisign powers the invisible navigation that takes people to where they want to go on the Internet. For more than 15 years, Verisign has operated the infrastructure for a portfolio of top-level domains that today includes .com, .net, .tv, .edu, .gov, .jobs, .name and .cc, as well as two of the world’s 13 Internet root servers (A & J-root DNS servers). Verisign’s product suite also includes Distributed Denial of Service (DDoS) Protection Services, iDefense Security Intelligence Services and Managed DNS. These services help companies identify potential cyber threats and mitigate them before they impact the business’s network availability and overall Internet presence.
As senior vice president and CTO of Verisign, I work with the company’s technology and business leaders to advance the company’s long-term technology vision through applied research, university collaboration, industry leadership and patent strategy. I was previously the founding scientist of RSA Laboratories, where my contributions included the development of the Public-Key Cryptography Standards (PKCS), now widely deployed in internet security.
GvE: Does Verisign Inc use FreeBSD internally?
BK: Verisign began deploying FreeBSD approximately 3 years ago. It is used to support Internet operations on a global scale.
GvE: Does Verisign contribute to FreeBSD?
BK: Yes. In 2012, Verisign became a bronze level donor to the FreeBSD Foundation. Verisign has contributed both code and concepts to the FreeBSD project, in the areas of sysinstall/bsdinstall, the VFS subsystem, device drivers, and kernel code.
GvE: Why did Verisign decide to set up a new conference? Was there a special reason for this?
BK: Verisign had been looking to contribute back to the BSD community in various ways. After attending MeetBSD 2012, Verisign felt that hosting a BSD conference was an appropriate way to show our support and to give back to the community. The Internet enables so many more people all over the world to connect and collaborate, but meeting in person at conferences still adds depth and breadth to those interactions. By bringing together members of the BSD community for a series of roundtable discussions, educational sessions, and best practice conversations, we are hoping to help advance the goals of the FreeBSD Project and community worldwide.
GvE: Can you tell us a bit more about vBSDcon 2013?
BK: Verisign’s Technology Services Group is hosting a BSD-related conference for BSD developers, engineers, and administrators on October 25 – 27, 2013 at the Dulles Hyatt in Dulles, VA. The conference will slightly resemble an unconference concept with a single track and nine or 10 speakers. In other words, we are planning a series of plenary speakers along with lightning talks and birds-of-a-feather discussions in one track over the weekend.
The weekend will start with a welcome dinner on Friday evening sponsored by Verisign. Saturday and Sunday are the main conference days. A mid-conference social event is being planned for Saturday evening following a 20-year anniversary theme for FreeBSD. The BSD Certification Group will administer the BSDA exam on Saturday following the completion of conference activities and before the mid-conference social.
The vBSDcon website, hosted at http://www.vbsdcon.com/, is currently in development and will be functional by the end of July 2013. The website will provide detailed information on the conference schedule, participating speakers, presentation abstracts, the registration process, and sponsorship packages. A link will be provided for registrants to register for the BSDA exam at the BSD Certification Group’s website.
GvE: Which speakers have you lined up for the conference?
BK: We have an excellent group of presenters scheduled to appear at vBSDcon, including David Chisnall (FreeBSD Core Team), Luigi Rizzo (netmap developer), Baptiste Daroussin (PkgNG developer), Devin Teske (bsdconfig developer), Henning Brauer (OpenBSD developer), Reyk Floeter (OpenBSD developer), Scott Long (Netflix), Kris Moore (PC-BSD director/developer), and John Hixson (FreeNAS).
GvE: Thank you so much, Burt (and Verisign), for taking the time out to answer these questions, for organising this conference and for promoting FreeBSD.
If you have any other questions you’d like to have answered, drop me a line or leave a comment and I’ll get in touch with Verisign for the answer(s).
From the table of contents:
The FreeBSD project has begun the process of making it possible for the operating system to run alongside Windows 8 on a computer which has secure boot enabled.
Secure boot is a feature of the Unified Extensible Firmware Interface or UEFI, the replacement for the BIOS on the motherboard.
Microsoft has implemented secure boot for Windows 8, using cryptographic keys for authenticating the kernel that is being loaded. This means that any other operating system looking to load itself on a secure boot-enabled Windows 8 system has to also be able to authenticate itself.
Some GNU/Linux distributions have developed their own methods of booting on such hardware. However, installing such distributions alongside Windows 8 is still not an easy task for the average user.
Continue reading Marshall McKusik’s interview with itwire: FreeBSD begins process to support secure boot