OpenSSH 10.4 adds experimental composite post-quantum signatures (ML-DSA 44 + Ed25519), fixes several security issues in sftp, scp, and sshd, and includes numerous bugfixes and portability improvements.
This week covers FreeBSD boot process fundamentals, running pkgbasify on FreeBSD 15.1, upgrading FreeBSD 15.0 to 15.1, a degraded ZFS pool analysis, FreeBSD on Framework systems, monitoring a FreeBSD Mastodon instance, GhostBSD's March 2026 finance report, and more.
After upgrading Homebox to 0.26.2 in a FreeBSD jail, the service fails to start due to a missing auth.apikeypepper; the fix is to generate a 48-byte base64 key with openssl, store it in /etc/rc.conf.d/homebox as HBOXAUTHAPIKEYPEPPER, and restart the service.
This episode covers FreeBSD 15.1-RELEASE, OPNsense 26.1.9, a comparison of FreeBSD Jails vs LXC, and a guide to respectfully archiving a website, plus a look at corrupting a ZFS file on purpose.
The FreeBSD Foundation is accepting travel grant applications for EuroBSDCon 2026, open to FreeBSD developers and advocates who need assistance with travel expenses, with a deadline of July 7, 2026.
A remote TLS peer can cause a kernel panic via uninitialized memory access in KTLS receive on all supported FreeBSD versions; patches and workarounds are available.
The Linuxulator in FreeBSD 14.3, 14.4, and 15.0 does not zero a stack-allocated Linux siginfo_t before copying kernel data into it, allowing unprivileged users to read 104 bytes of uninitialized kernel stack memory.
FreeBSD has issued a security advisory for multiple vulnerabilities in iconv(3) affecting HZ, UTF-7, VIQR, ZW, and ISO-2022 encoding modules, which can lead to buffer overflows when processing untrusted input, with patches available for all supported releases.
FreeBSD's compat32 kevent() handler can expose uninitialized kernel stack data to unprivileged users due to an unzeroed stack struct, affecting FreeBSD 14.3, 14.4, and 15.0; patches and rebuilds are available for stable and release branches.
The audit(4) facility incorrectly records successful outcomes for ptrace(PTSCREMOTE) system calls that actually failed, potentially misleading audit-based IDS; all supported FreeBSD versions are affected and patches are available.