On August 31, 2022, FreeBSD 13.0 will reach end-of-life and will no longer be supported by the FreeBSD Security Team. Users of FreeBSD 13.0 are strongly encouraged to upgrade to a newer release as soon as possible. After August 31, the supported branches and releases and their expected end-of-life dates are:
+--------------------------------------------------------------------------+ | Branch | Release | Release Date | Expected EoL | +-------------+--------------+-------------------+-------------------------+ | stable/13 | N/A | N/A | January 31, 2026 | +-------------+--------------+-------------------+-------------------------+ | releng/13.1 | 13.1-RELEASE | May 16, 2022 | 13.2-RELEASE + 3 months | +-------------+--------------+-------------------+-------------------------+ | stable/12 | N/A | N/A | June 30, 2024 | +-------------+--------------+-------------------+-------------------------+ | releng/12.3 | 12.3-RELEASE | December 7, 2021 | 12.4-RELEASE + 3 months | +--------------------------------------------------------------------------+
This report was written by Emmanuel Nyarko as part of Google Summer of Code 2024.
In today’s interconnected digital landscape, security is not a luxury—it’s essential. As the number of open source projects increases, so does the responsibility to ensure these projects are secure, stable, and trustworthy. Prioritizing security isn’t just about protecting users but also the entire ecosystem. FreeBSD’s recent initiatives offer a valuable blueprint for other open source projects to follow, demonstrating how proactive security practices can significantly enhance the reliability and resilience of software in an ever-evolving threat landscape.
Is it possible to install the latest version of Qemu from Github in FreeBSD that's newer than what was available in ports/packages?
This blog explores why enhancing laptop support is critical for FreeBSD’s continued growth, how the Foundation is tackling this challenge, and why the timing of this initiative is essential.
Limiting Process Priority in a FreeBSD Jail, Why You Should Use FreeBSD, The web fun fact that domains can end in dots and canonicalization failures, Replacing postfix with dma + auth, modern unix tool list, Smol KVM, The Computers of Voyager.
In the realm of virtualization, there are already several robust and well-established platforms like Proxmox and OpenStack. These solutions have paved the way for efficient and comprehensive management of virtual environments, primarily on Linux-based systems. However, for those who appreciate the power and elegance of FreeBSD, there has been a notable absence of a comparable tool that leverages this operating system’s unique strengths.
This HowTo guides you through the setup process of snac2 on a minimalistic FreeBSD (FreeBSD 14) system to run and serve your own ActivityPub instance within the Fediverse. snac2 is also compatible with Mastodon instances for further interactions. snac2 is a simple, minimalistic ActivityPub instance written in portable C and can run on all Linux and BSD systems.
As of October 1st, 2024, FreeBSD 14.0 will reach end-of-life and will no longer be supported by the FreeBSD Security Team. Users of FreeBSD 14.0 are strongly encouraged to upgrade to a newer release as soon as possible.
It is possible for an attacker to overwrite portions of memory (in userland or the kernel) as the allocated buffer might be smaller than the data received from a malicious process. This vulnerability could result in privilege escalation or cause a system panic.
A malicious, privileged software running in a guest VM can exploit the vulnerability to crash the hypervisor process or potentially achieve code execution on the host in the bhyve userspace process, which typically runs as root. Note that bhyve runs in a Capsicum sandbox, so malicious code is constrained by the capabilities available to the bhyve process.
Patches for a previous security advisory, FreeBSD-SA-24:05, were incomplete and introduced some overly strict pf state tracking for ICMPv6 packets.
New Host Introduction, From Bridging to Routing With FreeBSD, Sovereign Tech Fund to Invest €686,400 in FreeBSD Infrastructure Modernization, The Dying Computer Museum, In practice, abstractions hide their underlying details, LZ4 Compression Algorithm Gets Multi-Threaded Update, Using Windows or Linux on FreeBSD's vm-bhyve, and more.
For those unfamiliar with the process: this is not the 7.6 release, but is part of the standard build-up to the release.