OpenSSH is a 100% complete SSH protocol version 1.3, 1.5 and 2.0
implementation and includes sftp client and server support.

Once again, we would like to thank the OpenSSH community for their
continued support of the project, especially those who contributed
code or patches, reported bugs, tested snapshots or donated to the
project. More information on donations may be found at:

http://www.openssh.com/donations.html

Changes since OpenSSH 5.9
=========================

This is primarily a bugfix release.

Features:

* ssh-keygen(1): Add optional checkpoints for moduli screening
* ssh-add(1): new -k option to load plain keys (skipping certificates)
* sshd(8): Add wildcard support to PermitOpen, allowing things like
“PermitOpen localhost:*”.  bz #1857
* ssh(1): support for cancelling local and remote port forwards via the
multiplex socket. Use ssh -O cancel -L xx:xx:xx -R yy:yy:yy user@host”
to request the cancellation of the specified forwardings
* support cancellation of local/dynamic forwardings from ~C commandline

Bugfixes:

* ssh(1): ensure that $DISPLAY contains only valid characters before
using it to extract xauth data so that it can’t be used to play local
shell metacharacter games.
* ssh(1): unbreak remote portforwarding with dynamic allocated listen ports
* scp(1): uppress adding ‘–’ to remote commandlines when the first
argument does not start with ‘-’. saves breakage on some
difficult-to-upgrade embedded/router platforms
* ssh(1)/sshd(8): fix typo in IPQoS parsing: there is no “AF14″ class,
but there is an “AF21″ class
* ssh(1)/sshd(8): do not permit SSH2_MSG_SERVICE_REQUEST/ACCEPT during
rekeying
* ssh(1): skip attempting to create ~/.ssh when -F is passed
* sshd(8): unbreak stdio forwarding when ControlPersist is in use; bz#1943
* sshd(1): send tty break to pty master instead of (probably already
closed) slave side; bz#1859
* sftp(1): silence error spam for “ls */foo” in directory with files;
bz#1683
* Fixed a number of memory and file descriptor leaks

Portable OpenSSH:

* Add a new privilege separation sandbox implementation for Linux’s
new seccomp sandbox, automatically enabled on platforms that support
it. (Note: privilege separation sandboxing is still experimental)
* Fix compilation problems on FreeBSD, where libutil contained openpty()
but not login().
* ssh-keygen(1): don’t fail in -A on platforms that don’t support ECC
* Add optional support for LDNS, a BSD licensed DNS resolver library
which supports DNSSEC
* Relax OpenSSL version check to allow running OpenSSH binaries on
systems with OpenSSL libraries with a newer “fix” or “patch” level
than the binaries were originally compiled on (previous check only
allowed movement within “patch” releases). bz#1991
* Fix builds using contributed Redhat spec file. bz#1992

Checksums:
==========

- SHA1 (openssh-6.0.tar.gz) = 5d30aba0423c44e89924bb44c5d2153635506a9f
- SHA1 (openssh-6.0p1.tar.gz) = f691e53ef83417031a2854b8b1b661c9c08e4422

Reporting Bugs:
===============

- Please read http://www.openssh.com/report.html
Security bugs should be reported directly to openssh@openssh.com

OpenSSH is brought to you by Markus Friedl, Niels Provos, Theo de Raadt,
Kevin Steves, Damien Miller, Darren Tucker, Jason McIntyre, Tim Rice and
Ben Lindstrom.

read more…

“Users of FreeBSD in a virtualized environment will be pleased with
the increased ease of deployment afforded by the ability to grow
mounted filesystems,” said Ed Maste, Director, The FreeBSD Foundation.

This project will add GEOM and filesystem changes that are necessary to
increase the size of both UFS and ZFS filesystems while a filesystem
is mounted read-write. This project will provide the additional
benefit of online provisioning of virtual instances.

The Foundation is pleased to be working with Edward again. He
was previously awarded a grant to implement resource containers
and a simple per-jail resource limits mechanism. This work was
included in FreeBSD 9.0 RELEASE.

This project is expected to be completed by October 2012.

EuroBSDcon is the European technical conference for users and developers on BSD-based systems. The EuroBSDcon 2012 conference will be held in Warsaw, Poland from Thursday 18 October 2012 to Sunday 21 October 2012, with tutorials on Thursday and Friday and talks on Saturday and Sunday.

Call for Proposals

The EuroBSDcon conference is inviting developers and users of BSD-based systems to submit innovative and original papers not submitted to other European conferences on BSD-related topics.

Topics of interest to the conference include, but are not limited to applications, architecture, implementation, performance and security of BSD-based operating systems, as well as topics concerning the economic or organizational aspects of BSD use.

Presentations are expected to be 45 minutes.

Call for Tutorial Proposals

The EuroBSDcon conference is inviting qualified practitioners in their field to submit proposals for half or full day tutorials on topics relevant to development, implementation and use of BSD-based systems.

Submission address

Proposals should be submitted by email to <submission@eurobsdcon.org>.

Important dates

The EuroBSDcon conference is accepting abstracts and tutorial proposals until 20 May 2012. Other important dates will be announced soon at the conference website http://2012.eurobsdcon.org.

FreeBSD is widely used as the OS foundation of embedded appliances
both small and large.  Semihalf’s NAND Flash stack opens new
opportunities for FreeBSD in this space, where size, cost, or
performance, mandate the use of direct attached NAND Flash.

Made possible by matching funds from Juniper Networks, this FreeBSD
Foundation grant covers the costs of transferring technology
developed for Juniper Networks by Semihalf to the FreeBSD
project.  This will ensure that the NAND framework meets
community standards and can be easily maintained and enhanced.

Highlighting the return on investment offered by this kind of
technology transfer, FreeBSD Foundation president Justin T. Gibbs,
noted:

“Open sourcing enhancements that do not expose ‘business critical
intellectual property’ reduces the cost of managing a FreeBSD
distribution that has been customized for a product.  The NAND
subsystem is a perfect example of how technology transfer
benefits both the FreeBSD community and its commercial users.
We’d like to thank Semihalf and Juniper for partnering with us
to make the code available under a BSD license”

The NAND Flash subsystem consists of a driver framework for NAND
controllers and memory chips, a NAND device simulator and a fault
tolerant, log-structured file system, tailored to meet the unique
challenges of NAND flash storage.  The package includes all the
tools, utilities and documentation needed to deploy this technology
in custom applications.

“A reliable file system that supports NAND Flash is critical for
Juniper’s ongoing success,” said Marcel Moolenaar, Distinguished
Engineer, Juniper Networks.  “But since storage isn’t Juniper’s core
business, we were eager to find a solution that would put the
implementation and support of the file system in the most
capable hands. We reached out to Semihalf and ultimately the
Foundation to help us achieve our goals. Juniper cannot be more
pleased to have the NAND Flash file system and NAND Flash
framework present in the next major FreeBSD version as a
standard feature and under the care of the community.”

“We are very glad to have the NAND framework made available
for the general FreeBSD audience, reaffirming the system as a
versatile platform for appliances and other embedded and
industrial designs,” said Rafal Jaworowski of Semihalf.

The Foundation is pleased to be working with Semihalf again. They
were previously awarded a grant to bring “Flattened Device Tree”
support to FreeBSD.  This new feature in FreeBSD 9.0 has been
well received by the FreeBSD community.

read more…

The FreeBSD Foundation will be providing a limited number of travel grants to individuals requesting assistance. Please fill out and submit the Travel Grant Request Application at http://www.freebsdfoundation.org/documents/TravelRequestForm.pdf by February 20, 2012 to apply for this grant.

This program is open to FreeBSD developers of all sorts (kernel hackers, documentation authors, bugbusters, system administrators, etc). In some cases we are also able to fund non-developers, such as active community members and FreeBSD advocates.

Your request should be based on a realistic and economical estimate of travel costs (economy airfare, trainfare, …), accommodations (conference hotel and sharing a room), and registration or tutorial fees. If there are other sponsors willing to cover costs, such as your employer or the conference, we prefer that you talk to them first, as our budget is limited. We are happy to split costs with you or another sponsor, such as just covering airfare or board.

If you are a speaker at the conference, we expect the conference to cover your travel costs, and will most likely not approve your request.

If your application is approved, we will authorize you to seek reimbursement up to a limit. We consider several factors, including our overall and per-event budgets, and the benefit to the community by funding your travel. We reimburse costs based on receipts, and by check or bank transfer. And, we do not cover your costs if you end up having to cancel your trip. We require you to submit a report on your trip, which we may show to current or potential sponsors, and may include in our semi-annual newsletter or this blog.

There’s some flexibility in the mechanism, so talk to us if something about the model doesn’t quite work for you or if you have any questions. The travel grant program is one of the most effective ways we can spend money to help support the FreeBSD Project, as it helps developers get together in the same place at the same time, and helps advertise and advocate FreeBSD in the larger community.

Thank You,

The FreeBSD Foundation

read more…

The deadline for submissions has been extended to Tuesday 31 January.

BSDCan 2012 will be held 11-12 May, 2012 in Ottawa at the University of
Ottawa. It will be preceded by two days of tutorials on 9-10 May.

NOTE: This will be Fri/Sat with tutorials on Wed/Thu.

We are now accepting proposals for talks.

The talks should be designed with a very strong technical content bias.
Proposals of a business development or marketing nature are not
appropriate for this venue.

If you are doing something interesting with a BSD operating system,
please submit a proposal. Whether you are developing a very complex
system using BSD as the foundation, or helping others and have a story
to tell about how BSD played a role, we want to hear about your
experience.  People using BSD as a platform for research are also
encouraged to submit a proposal. Possible topics include:

* How we manage a giant installation with respect to handling spam.
* and/or sysadmin.
* and/or networking.

From the BSDCan website, the Archives section will allow you to review
the wide variety of past BSDCan presentations as further examples.

Both users and developers are encouraged to share their experiences.

The schedule is:

8 Jan 2012 Proposal acceptance begins
31 Jan 2012 Proposal acceptance ends
19 Feb 2012 Confirmation of accepted proposals

See also <http://www.bsdcan.org/2012/papers.php>

Instructions for submitting a proposal to BSDCan 2012 are available
from: <http://www.bsdcan.org/2012/submissions.php>

–
Dan Langille – http://langille.org

read more…