OpenBGPD 9.3 adds shorthand for the DOWNGRADE BGP community, removes the legacy aspa-set table format, uses getexecpath for privilege separation, and improves graceful restart timer handling for multi-AFI/SAFI sessions.
OpenBSD has released errata patches for OpenBSD 7.8 and 7.9 covering NSD, unbound, LibreSSL, iked, the kernel, and several base utilities, available as binary updates via syspatch on amd64, arm64, and i386.
A vulnerability in the IPv6 UDP send path allows processes in classic non-VNET jails to send datagrams to services listening on the host's loopback address, bypassing network isolation. All supported FreeBSD versions are affected, and updates are available via pkg, freebsd-update, and source patches.
FreeBSD has issued a security advisory for an out-of-bounds read in OpenSSL DTLS retransmission (CVE-2026-84782) affecting all supported FreeBSD versions, which may disclose heap memory or cause a DoS, with patches available for 14.x and 15.x branches.
FreeBSD has issued a security advisory for an off-by-one bug in receive-side kernel TLS (KTLS) handling of TLS 1.3 payloads. A remote attacker sending an invalid frame can trigger an underflow and NULL pointer dereference, causing a kernel panic and denial of service.
FreeBSD has issued a security advisory addressing three vulnerabilities in jail directory file descriptor handling that allow processes to bypass restriction flags and escape the jail filesystem root.
FreeBSD has issued a security advisory for two memory safety vulnerabilities in kqueue's copy-on-fork implementation that could allow an unprivileged local user to escalate privileges on FreeBSD 15.1.
A heap out-of-bounds access in semop(2) allows an unprivileged local user to potentially escalate privileges due to a 15-bit sequence number wrap-around in System V semaphores, affecting all supported FreeBSD versions; patches and update instructions are provided.
FreeBSD has issued an errata notice updating the IANA Time Zone Database files in /usr/share/zoneinfo across all supported release branches.
FreeBSD has issued an errata notice for syslogd(8) to fix a process descriptor leak occurring on SIGHUP configuration reloads when logging to pipe destinations, which could leave un-reaped zombie processes or cause daemon crashes.
FreeBSD has published an errata notice for FreeBSD 14.5 fixing a regression in xhci(4) that prevents some umass(4) USB mass storage devices from attaching.
A hands-on comparison of Lenovo ThinkCentre M710q and M720q mini PCs running OpenBSD 7.9, NetBSD 11.0, and FreeBSD 15.1, with idle and load power measurements, CPU frequency scaling notes, and observations on headless operation and media playback.
A step-by-step guide to rebuilding the Ubuntu Server ISO with modified GRUB and kernel options so it boots and installs cleanly on OpenBSD's serial-only vmm console.
This week's roundup covers the release of NetBSD 10.2, OpenBSD-current moving to 8.0, and OpenBSD adding multi-processor support to vmm/vmd alongside a new rtrd daemon. FreeBSD topics include launching KDE Desktop AMIs on AWS EC2, a guide to common ZFS misconfigurations, the new kldinfo utility for inspecting kernel module dependencies, and native Brave browser support.
HardenedBSD's latest status report highlights release engineering prep for quarterly builds, base OS updates including experimental -fbounds-safety support and hardened SSH defaults, and infrastructure migrations from VMs to jails. It also details restored GitHub repository mirroring and the project's stance on recent Radicle network security disclosures.
FreeBSD 15.0 reaches end-of-life on September 30, 2026, after which it will no longer receive security updates from the FreeBSD Security Team.
Theo de Raadt has moved OpenBSD -current to version 8.0, dropping the beta tag as part of the standard pre-release process, and reminds users to use "-D snap" with pkg_add and to test and report issues.
OpenBSD has imported rtrd(8) and rtrctl(8), an RPKI-To-Router protocol implementation created by Ralph Covelli. The daemon acts as a distribution layer to deliver data from rpki-client(8) to BGP routers such as bgpd(8).
Mike Larkin added multi-processor guest support to OpenBSD's vmm(4)/vmd(8), implementing the SIPI/init LAPIC state machine, MP IPI support, and new vmctl/vm.conf options, tested on various guests.
