DiscoverBSD - The BSD community linklog

LibreSSL 4.3.4 and 4.2.3 released

2026-10-23T06:55:20Z

LibreSSL 4.3.4 and 4.2.3 remove the eMudhra emSign ECC Root CA - G3 certificate from cert.pem due to weak subordinate CA keys while adding uncompromised intermediates for interoperability.

LibreSSL 4.4.0 released

2026-10-23T06:55:06Z

LibreSSL 4.4.0 is the first stable release of the 4.4.x branch, shipping with OpenBSD 8.0. Key changes include removing a root CA with weak keys, fixing an OCSP responder authorization bypass in libtls, improving DTLS and TLS 1.3 handling, and updating portable builds for FreeBSD, NetBSD, macOS, and Windows.

OpenBSD Errata: October 23, 2026 (dbupdate)

2026-10-23T06:54:48Z

OpenBSD has released errata patches containing a new dbupdate tool and updated cert.pem file for OpenBSD 7.9 and 8.0, with binary updates available via syspatch on amd64, arm64, and i386.

BSD Now 686: Yell in your Shell

2026-10-23T06:54:32Z

Episode 686 covers shell exclamation mark usage, OpenBSD adding the rtrd(8) networking daemon and multi-processor VM support in vmm/vmd, OpenBGPD 9.3, running BSD on Lenovo ThinkCentre hardware, and more.

emulators/wine (re)entering OpenBSD ports

2026-10-22T08:17:14Z

Thomas Frohwein submitted a proposal for a new emulators/wine port to run Windows binaries on OpenBSD, alongside a supplementary emulators/wine-extras port for winetricks and wine-steam.

dbupdate(8) Added to OpenBSD -current

2026-10-22T08:16:29Z

OpenBSD -current has added dbupdate(8), a new utility for updating signed zoneinfo and cert.pem databases from cdn.openbsd.org. Designed to run via root cron, it provides a way to update timezone and CA certificate files without relying on sequential syspatch updates.

Your AI Configured Your ZFS. Are You Sure That's Right?

2026-10-22T08:15:58Z

Klara Systems examines common pitfalls in AI-generated ZFS configurations, such as wrong ashift values, disabled synchronous writes, and feature upgrades that break host compatibility. It highlights commands for verifying drive sector sizes and pool properties before applying generated scripts.

eMudhra TLS/SSL CA compromise

2026-10-21T11:39:56Z

NetBSD shipped eMudhra CA certificates by default and now revokes trust in them due to compromise, with instructions to run certctl untrust for affected certs on NetBSD 10+ and guidance for pkgsrc mozilla-rootcerts users.

FreeBSD Security Advisory FreeBSD-SA-26:73.caroot

2026-10-21T11:39:31Z

FreeBSD has updated its caroot root certificate bundle to mark the emSign ECC Root CA - G3 certificate as untrusted following the public disclosure of compromised eMudhra intermediate keys.

BSD Weekly - Issue 301

2026-10-21T11:09:42Z

This issue features the release of OpenBSD 8.0, FreeBSD security advisories covering bhyve and tcp_rack vulnerabilities, and a proposed Wine port for OpenBSD. Additional highlights include NetBSD's policy banning AI-generated code, single-partition encrypted NetBSD root setup, and a practical look at OpenZFS RAIDZ expansion.

Valuable News – 2026/10/19

2026-10-20T06:23:36Z

This week's roundup covers running macOS on AMD hardware via FreeBSD bhyve, NetBSD running on 32-bit RISC-V, practical RAIDZ expansion, OpenBSD's new uncm(4) driver, Syncthing on NetBSD, and more.

OpenBSD 8.0

2026-10-20T06:23:21Z

OpenBSD 8.0 introduces multi-processor support for up to 64 guest VCPUs in vmd, DRM graphics updated to Linux 6.18.53 with Intel Arc support, and boot-time random relinking for httpd and smtpd. The release also expands amd64 kernel virtual address space to 512G, adds hibernate support on arm64, switches sparc64 to the LLVM toolchain, and includes updates across the installer, pf firewall, and hardware drivers.

OpenBSD Errata: October 20, 2026 (ppp isakmpd nsd aesgmac video)

2026-10-20T06:22:42Z

Errata patches for ppp interface, isakmpd, NSD, X11 server, IPsec crypto, and video driver have been released for OpenBSD 7.8, 7.9, and 8.0, with binary updates available via syspatch on amd64, arm64, and i386.

New OpenBSD Port Proposed for Wine

2026-10-19T10:13:16Z

Thomas Frohwein has submitted a port proposal for Wine on OpenBSD, enabling 64-bit Windows applications to run via software emulation of the %gs prefix. The initial draft supports 64-bit software only, as 32-bit support via WoW64 is not yet working.

Single-Partition Encrypted NetBSD 11 Root

2026-10-19T07:32:33Z

This guide details how to install NetBSD 11 with full root encryption using CGD and ramdisk-cgdroot within a single MBR partition. It covers disklabel partitioning, CGD setup, extracting base sets, chroot configuration, and optional firmware injection into the boot ramdisk.

Introducing uncm(4)

2026-10-19T07:31:12Z

Jan Schreiber's new uncm(4) driver adds USB CDC NCM support for Android tethering on OpenBSD, requires no firmware blob, and has been included in the amd64 installer kernel for the upcoming 8.0 release.

Exploring the HumanWare BrailleNote Apex with FreeBSD

2026-10-19T07:27:02Z

A collection of personal notes on connecting and using a HumanWare BrailleNote Apex with a laptop running FreeBSD 16.0-CURRENT (main).

BSD Now 685: Busy at the bar

2026-10-16T06:20:39Z

This week covers the impact of BSD code, an overview of Aoostar WRT Pro on BSD, Suricata with netmap, clarifying man pages, Podman on FreeBSD, OpenBSD -current becoming 8.0-current, and Sylve Ansible modules.

FreeBSD Security Advisory FreeBSD-SA-26:71.sound

2026-10-15T06:11:43Z

A TOCTOU race between sound(4) buffer resizing and mmap can let an unprivileged local user trigger a kernel use-after-free and potentially escalate privileges on all supported FreeBSD versions; patches and updated binaries are available.

FreeBSD Security Advisory FreeBSD-SA-26:72.bhyve

2026-10-15T06:11:28Z

FreeBSD has issued a security advisory for multiple vulnerabilities in bhyve's device models (xHCI, HDA audio, framebuffer) that could allow a malicious guest to crash the bhyve process or execute arbitrary code in the host userspace context, with patches available for FreeBSD 14.4, 14.5, 15.0, and 15.1.

FreeBSD Security Advisory FreeBSD-SA-26:70.tcp

2026-10-15T06:11:16Z

FreeBSD 15.1 has a remotely triggerable buffer overflow in the tcprack kernel module where a 16-bit allocation counter wraps to zero, allowing an out-of-bounds write of ~512 KB in the kernel heap and possibly causing a panic; systems not using tcprack.ko are unaffected and updates are available via pkg, freebsd-update, or source patch.

FreeBSD Errata Notice FreeBSD-EN-26:27.tcp

2026-10-15T06:10:48Z

A TCP timer overflow bug in FreeBSD 15.1 and 14.4 can cause timers to fire late or not at all, leaving connections stuck and consuming resources, with patches and workarounds provided.

FreeBSD Errata Notice FreeBSD-EN-26:26.hastd

2026-10-15T06:10:35Z

FreeBSD has issued an errata for hastd(8) addressing three issues: empty control messages causing hastctl to abort, uninitialized padding in nvpair exposing config data in metadata, and a hang during primary-to-secondary transition that leaves HAST in degraded mode.

FreeBSD Errata Notice FreeBSD-EN-26:25.tzdata

2026-10-15T06:10:17Z

FreeBSD has issued an errata notice to update the IANA Time Zone Database in /usr/share/zoneinfo for all supported releases, as recent changes to future and past timestamps affect many regions and require running tzsetup(8) to update /etc/localtime.

RAIDZ Expansion in Practice: What It Solves and What It Doesn't

2026-10-15T06:09:54Z

Explains how OpenZFS 2.3's RAIDZ expansion lets you add one disk at a time to an existing vdev without downtime, what it gains in capacity, and why it does not change RAIDZ level, improve IOPS, or retroactively upgrade parity for existing data.

M715q power usage and the BSDes

2026-10-14T13:22:57Z

A hands-on comparison of idle and load power draw on a ThinkCentre M715q running Debian 13, FreeBSD 15.1, NetBSD 11.0, and OpenBSD 7.9, with notes on GPU support, temperature, and workstation suitability.

NetBSD may have found a new role: The AI-free FOSS OS

2026-10-14T13:21:46Z

NetBSD reports record donations after its explicit ban on AI-generated code, contrasting with Linux and other FOSS projects embracing AI, and highlights its minimal, portable design and welcoming community.

BSD Weekly - Issue 300

2026-10-14T12:18:41Z

This issue covers MidnightBSD 4.0.8, OpenBSD errata for isakmpd, the X11 server, libexpat, and wscons, EuroBSDCon trip reports on FreeBSD kernel live-patching and DevSummit, Valuable News highlights, BSD Now 684, AsiaBSDCon 2027 CFP, a FreeBSD iflib bug fix, ZFS misconfigurations, and OpenBSD on HP Envy 17.

EuroBSDCon Trip Report – Federico Angelilli

2026-10-13T19:24:16Z

A GSoC contributor describes presenting his FreeBSD kernel live-patching work at the DevSummit, attending talks on scheduler improvements and bhyve hotplugging, and meeting FreeBSD developers at EuroBSDCon 2026 in Brussels.

EuroBSDCon 2026 Trip Report – Yan-Cheng Chen

2026-10-13T19:23:47Z

A FreeBSD Taiwan intern shares how a Foundation travel grant enabled attending EuroBSDCon, highlights from talks on enterprise FreeBSD, runtime reoptimization, and man pages, and how the event helped shape plans to contribute to FreeBSD.

MidnightBSD 4.0.8

2026-10-13T08:12:30Z

MidnightBSD 4.0.8 was released on September 28 with updates including mport 2.8.2, expat 2.8.5, OpenSSL fixes for CVE-2026-63072 and CVE-2026-54874, and patches for multiple kernel and userland CVEs.

Valuable News – 2026/10/12

2026-10-13T08:11:51Z

This week's roundup covers a DTrace option for Python ports on FreeBSD, a comparison of jails vs containers, OpenSSH 10.6 and LibreSSL 4.2.2/4.3.3 releases, FreeBSD's EU Cyber Resilience Act update, NetBSD desktop and login guides, ZFS misconfigurations, and more.

GhostBSD: Mocka Dock | The Start of the Mocka Desktop

2026-10-09T13:55:42Z

GhostBSD has always pushed the boundaries of what BSD and in particular FreeBSD can do, and they are still at it - the creation of the Mocka Desktop; a gradual replacement of the Mate Desktop - in this case, starting with the Mate Dock.

BSD Now 684: Nerds 2.0

2026-10-09T08:40:27Z

Episode 684 covers running a Telnet BBS on a Casio calculator, adding an ACPI layer to OpenBSD's vmd, building NetBSD 11 from scratch, FreeBSD backup libraries, and more.

AsiaBSDCon 2027 - Call for papers/tutorials

2026-10-08T10:24:56Z

The call for papers and tutorials for AsiaBSDCon 2027 in Tokyo, Japan is now open, with proposal submissions accepted through November 20, 2026.

Tribute to Margaret Hamilton

2026-10-08T10:24:20Z

FreeBSD would like to pay our respects to Margaret Hamilton, whose work allowed coding to become both the scientific discipline it is today, and the art form that drew each of us to it.

Ding-Dong Ditch: The Doorbell Prank in FreeBSD's iflib

2026-10-08T10:23:29Z

A subtle iflib bug caused redundant doorbell rings that capped a Netgate 4200 at 0.96 Mpps; a one-line fix removed the empty rings and a follow-up change batches rings per packet, taking throughput to 3.58 Mpps.

OpenBSD Errata: October 7, 2026 (isakmpd xserver expat wsdisplay)

2026-10-08T10:23:02Z

OpenBSD has released errata patches for isakmpd, the X11 server, libexpat, and kernel wscons on OpenBSD 7.8 and 7.9, with binary updates available via syspatch for amd64, arm64, and i386.

Biggest ZFS Misconfigurations and How to Fix Them: Part 2

2026-10-07T14:40:18Z

Covers common pitfalls with SLOG, RAIDZ expansion, Fast Dedup, Direct IO, special vdevs, and snapshots on OpenZFS 2.3+, explaining why they hurt, how to detect them, and what the fixes cost.

New laptops and OpenBSD: HP Envy 17-DA0013dx

2026-10-07T14:40:01Z

How to get OpenBSD to boot on an HP Envy 17-DA0013dx after initial hangs, concluding it is a viable modern laptop choice for OpenBSD with a 16:9 touchscreen.

Production Deployments

2026-10-06T14:00:13Z

The FreeBSD Journal's latest issue includes articles on consolidating a home lab with Sylve, cloud operations using FreeBSD Compute, USB in user space, and auditable credential-exposure checks on FreeBSD.

LibreSSL 4.4.0rc1 released

2026-10-06T06:13:37Z

LibreSSL 4.4.0rc1 is a development release for the 4.4.x branch with portable fixes for AIX, macOS, MSVC, and Windows, internal improvements to DTLS, TLS 1.3, and SHA-3, compatibility updates for libtls and OpenSSL, and multiple bug and security fixes including X.509 name constraints URI parsing and DTLS handshake message size limits.

LibreSSL 4.2.2 and 4.3.3 released

2026-10-06T06:13:22Z

LibreSSL versions 4.2.2 and 4.3.3 address an OCSP responder authorization bypass in libtls, DTLS fragment and buffer handling issues, and X.509 certificate verification bugs alongside build fixes for macOS and MSVC ARM64.

Valuable News - 2026/10/05

2026-10-06T06:13:06Z

This week's BSD roundup covers GhostBSD's new Mocka desktop project, FreeBSD bring-up on Apple M6 hardware, OpenBSD developers rejecting a uutils coreutils port over licensing concerns, updates to OpenBSD relayd and httpd, NetBSD's GSoC work on Racoon2, and more.

October 2026 Update: Getting Ready for the EU Cyber Resilience Act

2026-10-05T15:22:41Z

The FreeBSD Foundation outlines its CRA Readiness project progress, including manufacturer outreach, steward obligations, SBOM tooling for FreeBSD 14-16, Security Team support, and community resources like guides and a dedicated CRA email address.

Improving and Stabilizing the racoon2 IKE Daemon in NetBSD

2026-10-05T07:49:59Z

A Google Summer of Code 2026 report details recent work on NetBSD's racoon2 IPsec daemon to make it a reliable VPN server for modern clients. The updates bring RFC-compliant IKE fragmentation, NAT traversal with address substitution, fixed IPv6 support enabled by default, unified wildcard address macros, and an automated unit testing framework.

What's New in httpd and relayd

2026-10-03T09:15:12Z

Author details recent updates to OpenBSD's httpd and relayd, including custom HTTP response header manipulation and request filtering via new header block and drop rules in httpd. The post also covers patterns(7) expression support in relayd for advanced matching in filter rules.

OpenBGPD 9.3 released

2026-10-02T09:56:02Z

OpenBGPD 9.3 adds a shorthand for the "DOWNGRADE" BGP community, drops the old aspa-set table format, improves graceful restart timer handling, and fixes edge cases in ASPA updates, with portable builds confirmed on FreeBSD and several Linux distributions.

BSD Now 683: GeFS (GeFUS)

2026-10-02T09:55:49Z

Episode 683 of BSD Now covers early previews of the GeFS file system on OpenBSD, the release of NetBSD 9.5, the OpenSMTPD 7.9.0p0 release, replacing pam-ssh-agent-auth in FreeBSD ports, and more.

OpenBSD -current is now "8.0-current"

2026-10-02T09:55:34Z

Theo de Raadt updated OpenBSD -current from "8.0" to "8.0-current", so users on the latest snapshots or source builds no longer need "-D snap" with pkgadd and pkginfo.