We recently reported that Theo de Raadt (derradt@) was scheduled to present at CanSecWest. That's now happened, and slides of Theo's presentation, Synthetic Memory Protections, can be found in the usual place. Video is available on the bird site.

Version 7.9 of OpenBGPD has been released:

We have released OpenBGPD 7.9, which will be arriving in the
OpenBGPD directory of your local OpenBSD mirror soon.

This release includes the following changes to the previous release:

    * Include OpenBSD 7.2 errata 023:
      Incorrect length checks allow an out-of-bounds read in bgpd(8).

In a late-stage addition prior to the release of OpenBSD 7.3, Mark Kettenis (kettenis@) has committed [more] aggressive randomisation of the stack location for all 64-bit architectures except alpha:

One small but significant step for routing security on the Internet happened Sunday 19th of March 2023 with the release of version 8.3 of rpki-client.

The announcement reads,

Subject:    rpki-client 8.3 released
From:       Sebastian Benoit <benno () openbsd ! org>
Date:       2023-03-19 12:46:27

rpki-client 8.3 has just been released and will be available in the
rpki-client directory of any OpenBSD mirror soon.

rpki-client is a FREE, easy-to-use implementation of the Resource
Public Key Infrastructure (RPKI) for Relying Parties (RP) to
facilitate validation of BGP announcements. The program queries the
global RPKI repository system and validates untrusted network inputs.
The program outputs validated ROA payloads, BGPsec Router keys, and
ASPA payloads in configuration formats suitable for OpenBGPD and BIRD,
and supports emitting CSV and JSON for consumption by other routing
stacks.

With the following commit, Theo de Raadt (deraadt@) moved -current to version 7.3:

CVSROOT:	/cvs
Module name:	src
Changes by:	deraadt@cvs.openbsd.org	2023/03/17 16:52:22

Modified files:
	sys/conf       : newvers.sh 

Log message:
remove -beta tag

For those unfamiliar with the process: this is not the 7.3 release, but is part of the standard build-up to the release.

OpenBGPD 7.8 has been released and the announcement may be read here.

With a message to openbsd-announce and other lists, Brent Cook (bcook@) announced the release of LibreSSL 3.7.1, with numerous improvements.

It is worth noting that this is the final version to be released before the upcoming OpenBSD 7.3 release.

The announcement reads,

Subject:    LibreSSL 3.7.1 Released
From:       Brent Cook <busterb () gmail ! com>

We have released LibreSSL 3.7.1, which will be arriving in the
LibreSSL directory of your local OpenBSD mirror soon. This is the final
development release for the 3.7.x branch, and we appreciate additional testing
and feedback before the stable release coming soon with OpenBSD 7.3

On 2023-03-15, the release of version 9.3 of OpenSSH was announced:

Dragos Ruiu recently announced that Theo de Raadt will be presenting at this year's CanSecWest, March 22-24 2023 in Vancouver, BC.