The article discusses the development and impact of the BoxyBSD project, initially aimed at providing free VPS hosting with IPv6 support for beginners and small open-source projects. The project evolved significantly, contributing to the Proxmox ecosystem through various tools and innovations. Key contributions include ProxLB, a dynamic resource scheduler for Proxmox, an Ansible module for Proxmox cluster management, a Proxmox cloud image with cloud-init support, and a Terraform-based workflow for deploying FreeBSD VMs. Additionally, the project has fostered a Proxmox self-service portal and an education platform for BSD and IPv6. The article highlights the community support and sponsorships that have helped BoxyBSD grow, emphasizing the importance of open-source principles and collaboration.
A use-after-free in the TCP RACK stack option handler may allow an unprivileged local user to escalate privileges on all supported FreeBSD versions; patches and updated binaries are available.
The unlinkat(2) and funlinkat(2) system calls ignore the ATRESOLVEBENEATH flag, allowing path resolution to escape the intended directory and delete files outside the confined tree. Patches are available for FreeBSD 14.3, 14.4, 15.0, and 15.1.
A buffer overflow in the libalias RTSP handler affects all supported FreeBSD versions and can allow remote code execution in the kernel via ipfw(4) NAT or in natd(8) when libalias_smedia.so is loaded.
FreeBSD has issued a security advisory for OpenZFS with three vulnerabilities: a kernel heap overflow via ZFSIOCUSERSPACEMANY for users with "userused" permission, kernel memory corruption via ZFSIOCRECVNEW for users with "receive" permission, and an ability for any local user to set the "$hasrecvd" metadata flag via ZFSIOCSET_PROP, affecting all supported FreeBSD versions.
GhostBSD reports 1,364.91 CAD in March donations, lists infrastructure and hardware expenses totaling 857.68 CAD, and notes 500.00 CAD added to the server fund for a future Ampere ARM server.
Both relayd and httpd now use a "secure" list of allowed crypto methods for HTTPS, including TLSv1.3 and TLSv1.2 AEAD cipher suites, replacing the previous "HIGH:!aNULL" list which contained non-perfect-forward-security methods and may cause old clients to fail to connect.
This week's roundup covers OpenBSD amd64 kernel virtual address space expanding to 512GB, a patch for missing PKGBASE in FreeBSD jails, FreeBSD Git weekly reports, a new FreeBSD Core Team election, Sylve 0.3.0 adding a PF firewall and WireGuard manager, BSD Now 669 on Poudriere speed, and more.
Author details porting devel/corrosion and devel/cxxbridge-cmd to handle Rust dependencies in CMake-based KDE Plasma ports under OpenBSD's PORTS_PRIVSEP, and fixes a truncation bug in httpd(8) error documents by routing them through bufferevent instead of a single write, plus a privilege-separation bounds-check fix shared by httpd, relayd, iked, and snmpd.
GhostBSD has an out-of-the-box firewall. This video shows what options there for configuration using the terminal.
This episode covers native inotify in FreeBSD, how poudriere.conf changes affect build time, migrating mail servers from exim to OpenSMTPD, and a recap of the April 2026 Frankfurt FreeBSD hackathon.
This video explores how to create a pkg cache with nginx. You can use this to serve FreeBSD packages to your (intranet) machines and to more quickly install software and perform system updates.
The pkgsrc developers announce the 91st quarterly release with 29,000+ packages, 187 new additions (including bob, a parallel builder, a new wayland category, and Rust 1.96), 3072 updates, and 45 removals.
This week covers FreeBSD 15.1-RELEASE and its release notes, upgrading instructions, updated WiFi drivers and C23 support, the AI-assisted vulnerability discovery project, graphics port upgrade to Linux 6.12, NetBSD 11.0 RC5, MidnightBSD 4.0.6, BSDCan 2026 schedule, and more.
A recent commit by jsg@ raises the OpenBSD/amd64 kernel virtual address space from 4G to 512G to allow mapping all VRAM on recent Radeon cards with large PCI BAR sizes, such as a Radeon RX 6800 with 16G of VRAM.
The FreeBSD project announces the 2026 Core Team: Warner Losh, Baptiste Daroussin, Gleb Smirnoff, Kyle Evans, Adrian Chadd, Joseph Mingrone, Hiroki Sato, Adam Weinberger, and Olivier Cochard, and notes that a bylaws amendment passed and will tentatively take effect for the 2028 election.