I-OpenBSD 7.7: Izimbobo ezibuyekeziwe, ukwesekwa okubuyekeziwe, ukuthuthukiswa kwezokuphepha, nokuningi

i-openbsd 7.7

Ithimba lokuthuthukisa i-OpenBSD limemezele ezinsukwini ezimbalwa ezedlule i ukukhishwa kwenguqulo entsha ye-OpenBSD 7.7, ukumaka intuthuko ebalulekile kukho kokubili ukusebenza nokuhambisana.

Le nguqulo entsha ye-OpenBSD 7.7 sIhlukaniswa ngokuthuthukiswa okubalulekile ekusebenzisaneni ngehardware yesimanje, ukuthuthukiswa okuphawulekayo kwezinsiza zayo zangaphakathi, izendlalelo ezintsha zokuvikela izindawo ezibucayi, ukuphathwa okuthuthukisiwe kwezinsiza zesistimu, kanye nokuqiniswa okubalulekile kwezindlela zayo zokuphepha.

Izici Ezintsha Ezinkulu ku-OpenBSD 7.7

Enye yezinto ezinhle kakhulu ze-OpenBSD 7.7 yi- Isibuyekezo sohlaka lwe-DRM, manje ivunyelaniswe ne-Linux Kernel 6.12.21, okuwukweqa okukhulu kusukela kunguqulo yangaphambilini esekelwe ku-6.6.52.

Lokhu kuvumela ukwesekwa okwengeziwe kwakamuva kwama-chips ezithombe zesimanje. Ikakhulukazi, isilawuli inteldrm manje ihlanganisa ukwesekwa kwe ama-GPU esizukulwane I-Intel's Arrow Lake, ngenkathi i-amdgpu inweba ukwesekwa kwe hlanganisa nezintsha I-Ryzen AI 300 GPU kanye ne-Radeon RX 9070. 

I-OpenBSD 7.7 iphinde ithuthukise kakhulu ukwesekwa kwayo kwezakhiwo ze-ARM64, njengoba kunjalo yethula usekelo lwezandiso zevekhtha ezikalayo (SVE), ngenkathi ukumadivayisi I-Apple enama-chips e-M1 ikwazile ukusungula izifunda zamandla ukuthi nokwandisa ukusetshenziswa.

Ezingeni le-virtualization, iplatifomu I-x86_64 manje ihlanganisa ukwesekwa kwe-AMD SEV, ubuchwepheshe obuvikela imishini ebonakalayo ngisho nasekufinyeleleni yi-hypervisor noma umlawuli wesistimu yokusingatha. Ngaphezu kwalokho, ububanzi benkumbulo efinyeleleka ku-DMA bunwetshiwe, bedlula umgoqo we-4 GB.

Ukuthuthukiswa kokuphathwa kwememori nokucubungula okuningi ngezinye izici ezintsha ku-OpenBSD 7.7. Ngokusetshenziswa kwe-ptrace ukuze kunikwe amandla ukulungisa iphutha okuthuthukisiwe ezinhlelweni ezinezintambo eziningi, amakholi wesistimu amaningana akhululiwe ekukhiyweni komhlaba wonke, ukuthuthukisa ukufana nokusebenza kumasistimu anezingqikithi eziningi. Ukwengeza, ukuphathwa kwezimo ezingaphandle kwenkumbulo kuye kwaqiniswa, kuvimbela ukwehluleka okungalindelekile ngaphansi kwezimo ezicindezelayo zomthwalo.

Ukwesekwa kwenethiwekhi nokuthuthukiswa kokuvikeleka

Isistimu engaphansi yenethiwekhi iyethula usekelo lwamasokhethi e-AF_FRAME, ukuvumela i- ukuxhumana okuqondile okwengeziwe ezingeni le-Ethernet, futhi ilungiselela ukuthunyelwa kwamaphakethe e-TCP/UDP sibonga a i-algorithm entsha ye-hashi kanye nokwethulwa kolayini abazimele ngokugeleza. Insiza ye-pfctl manje isingakwazi ukuphatha ukuxhumana kwenethiwekhi ngomkhawulokudonsa owedlula u-4 Gbit, kuyilapho i-daemon edluliselwe manje isekela ukuqinisekiswa kwe-TLS ngezitifiketi zeklayenti.

Ohlangothini lokuthuthukiswa kwezokuphepha, inqubo sshd-auth manje isebenzisa indlela yokuqamba kabusha kanambambili engahleliwe kuwo wonke ama-boot, okwenza kube nzima ukudala ukuxhaphaza. I-Mountd, ngakolunye uhlangothi, ihlukaniswe ngezingcingo zesistimu ezithile, ikhawulela indawo yayo yokuhlasela. Iphinde igqamise ukuqiniswa kokusetshenziswa fw_update, manje evumela ukulandwa kwe-firmware ngaphandle kwamalungelo ezimpande.

Umyalo I-sysctl manje isekela ukulayishwa kwenqwaba kokucushwa kusuka kufayela, kusiza ukuzenzela ezindaweni zokubhala. pkg_add ithuthukisiwe ukuze iqalise ngokuzenzakalelayo i-ldconfig ngemva kokufaka amaphakheji ashintsha amalabhulali abelwe isistimu. Ukwengeza, i-sysupgrade ivumela ukuthuthukiswa okungaxhunyiwe ku-inthanethi ngokusebenzisa amaphakheji agcinwe endaweni.

Ukuhambisana okunwetshiwe nokuthuthukiswa kwehadiwe

I-OpenBSD 7.7 yethula ukuthuthukiswa kokuhambisana ngamadivayisi amaningi, okuhlanganisa I-MediaTek ne-Qualcomm Snapdragon SoCs isizukulwane sokugcina, amalaptop afana neSamsung Galaxy Book4 Edge, ThinkPad T14 Gen 5, kanye namamodeli ambalwa e-Chromebook. Abashayeli benethiwekhi abasha, njengeqhwa lamakhadi e-Intel E810 kanye ne-ixv yama-adaptha abonakalayo, aqinisa ukuxhumana. Ngakolunye uhlangothi, isu lokuhambisa imisebenzi yenethiwekhi ngqo ekhadini, ukukhulula umthwalo we-CPU, liye laqiniswa.

Ngaphezu kwalokho, inani lamachweba liye landa kakhulu kuwo wonke ama-architectures, futhi Izinhlelo zokusebenza eziningi zithole izinguqulo zakamuva, njengeFirefox 137, LibreOffice 25.2.1.2, GNOME 47, ukubala ezimbalwa nje. Ukwengeza, isistimu ihlanganisa izingxenye ezibuyekeziwe ezifana ne-LibreSSL 4.1.0 enokwesekwa kwezakhiwo ezintsha ze-cryptographic nama-algorithms, i-OpenSSH 10 enokuqinisekisa nokuthuthukiswa kobumfihlo, kanye nesitaki sesithombe se-Xenocara esisekelwe ku-X.Org 7.7 nge-xserver 21.1.16 kanye ne-Mesa 23.3.6.

Ekugcineni, uma ukhona unentshisekelo yokwazi okwengeziwe ngayo, ungabheka imininingwane kufayela le- isixhumanisi esilandelayo.