554: NetBSD Double Digit

The XZ Backdoor, NetBSD 10.0, iX announces that they will put out a release of TrueNAS 13.3, State of the Terminal, LibreSSL 3.8.4 and 3.9.1 released and more NOTES This episode of BSDNow is brought to you by Tarsnap (https://www.tarsnap.com/bsdnow) and the BSDNow Patreon (https://www.patreon.com/bsdnow) Headlines People have no doubt heard of this by now, but are not aware of the BSD side of things since its mostly been Linux getting all the news. It'd be nice if we could give a summary of the issue and then address how it does/doesn't affect the BSDs. The XZ Backdoor (https://boehs.org/node/everything-i-know-about-the-xz-backdoor) NetBSD's statement (https://blog.netbsd.org/tnf/entry/statement_on_backdoor_in_xz) FreeBSD's statement (https://lists.freebsd.org/archives/freebsd-security/2024-March/000248.html) OpenBSD? NetBSD 10.0 (https://netbsd.org/releases/formal-10/NetBSD-10.0.html) News Roundup iX announces that they will put out a release of TrueNAS 13.3 (https://www.truenas.com/blog/truenas-core-13-3-plans/) A community fork has been announced (https://www.zvault.io) State of the Terminal (https://gpanders.com/blog/state-of-the-terminal/) LibreSSL 3.8.4 and 3.9.1 released (https://undeadly.org/cgi?action=article;sid=20240328181819) Tarsnap This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups. Feedback/Questions Derek via feedback has asked for some discussion around this NetBSD security advisory (https://github.com/BSDNow/bsdnow.tv/blob/master/episodes/554/feedback/Derek%20-%20NetBSD%20Security%20Advisory.md) -- Advisory Link (https://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2024-001.txt.asc) Ben - Nextcloud Installation (https://github.com/BSDNow/bsdnow.tv/blob/master/episodes/554/feedback/Ben%20-%20nexcloud%20installation.md) Send questions, comments, show ideas/topics, or stories you want mentioned on the show to [e-mail] (mailto:[e-mail]) Join us and other BSD Fans in our BSD Now Telegram channel (https://t.me/bsdnow)