u/grahamperrin

Notice

FreeBSD-EN-26:13.freebsd-update

Advisories

FreeBSD-SA-26:18.setcred

• Stack buffer overflow via setcred(2)
• CVE Record: CVE-2026-45250
• NVD - CVE-2026-45250
• <https://security.freebsd.org/advisories/FreeBSD-SA-26:18.setcred.asc>

FreeBSD-SA-26:19.file

• Kernel use-after-free via file descriptor syscalls
• CVE Record: CVE-2026-45251
• <https://security.freebsd.org/advisories/FreeBSD-SA-26:19.file.asc>

FreeBSD-SA-26:20.fusefs

• Heap overflow in FUSE_LISTXATTR
• CVE Record: CVE-2026-45252
• <https://security.freebsd.org/advisories/FreeBSD-SA-26:20.fusefs.asc>

FreeBSD-SA-26:21.ptrace

• Missing validation in ptrace(PT_SC_REMOTE)
• CVE Record: CVE-2026-45253
• <https://security.freebsd.org/advisories/FreeBSD-SA-26:21.ptrace.asc>

FreeBSD-SA-26:22.libcasper

• select(2) file descriptor set overflow causes stack overflow
• CVE Record: CVE-2026-39461
• <https://security.freebsd.org/advisories/FreeBSD-SA-26:22.libcasper.asc>

FreeBSD-SA-26:23.bsdinstall

• Remote code execution via installer Wi-Fi access point scans
• CVE Record: CVE-2026-45255
• <https://security.freebsd.org/advisories/FreeBSD-SA-26:23.bsdinstall.asc>

FreeBSD-SA-26:24.cap_net

• Incorrect libcap_net limitation list manipulation
• CVE Record: CVE-2026-45254
• <https://security.freebsd.org/advisories/FreeBSD-SA-26:24.cap_net.asc>

FreeBSD patch level table

<https://bokut.in/freebsd-patch-level-table/>

• non-official
• parsed from advisories and notices …

https://social.linux.pizza/@thesaigoneer/116599867018818913

>I got triggered to revive my description on how to get a KDE Wayland session on FreeBSD up and running. You can find it here:
https://codeberg.org/thesaigoneer/pages/src/branch/main/FreeBSD%20and%20Plasma%206%20install%20-%20a%20log

>From line 105 onwards it handles the Big K and how to run a Wayland session. This is what you'll end up with: …

A few hours from now:

• https://osselcna2026.sched.com/event/2JQsf/what-running-freebsd-on-a-modern-laptop-taught-me-deb-goodkin-the-freebsd-foundation

>"FreeBSD is only for servers.” “FreeBSD is for hardcore engineers.” We have all heard the myths. In this talk, Deb shares what happened when she decided to run FreeBSD on a modern laptop. Learn more about her journey to getting this rock-solid operating system on her laptop, and how it is far more accessible than its reputation suggests.

Via https://mastodon.social/@FreeBSDFoundation/116597241748913763

16:00 UTC: https://www.timeanddate.com/worldclock/converter.html?iso=20260519T160000&p1=tz_ct&p2=1440

https://www.freebsd.org/

New design for the FreeBSD website. · freebsd/freebsd-doc@c9c518d

Postscript: GitHub on an iPad obscures the name of the primary author: Mark McBride. His name is easier to see in Codeberg (below the commit log message), and so on.

Please, can anyone suggest an extension to clean up white space in texts such as the one below?

	       Set  this  value	 to the	base name of the desired font file lo-
	       cated in	/boot/fonts.  Fonts can	 be  converted	for  use  with
	       vtfontcvt(8).

There's a mixture of double-spacing, and tab stops. The example above is copied from the online FreeBSD manual page for vt(4).

I did spend a few minute seeking extensions, I can't (easily) find anything that will both:

• convert tabs to spaces and
• deduplicate space characters.

Thanks. Related:

• FreeBSD bug 274208 – man.freebsd.org with GNU groff 1.23.0: issues with text alignment (e.g. justification) and adjustment

From the linked email:

>… if the block size in both layers are the same, then prefetch and other things tend to interact badly with each other. The "fix" is to let the operating system in the VM use a larger block size, typically twice the size of the native block size of the underlying layer/device.

Related:

• zpoolprops(7)
• zpool-create(8)
• Guided partitioning using root-on-ZFS in the FreeBSD Handbook

FreeBSD Foundation Laptop Update:

• https://freebsdfoundation.github.io/proj-laptop/monthly-updates/2026-04 or
• https://github.com/FreeBSDFoundation/proj-laptop/blob/main/monthly-updates/2026-04.md

Cross-post:

• https://billboard.bsd.cafe/post/457

Inexplicably deleted from https://www.reddit.com/r/freebsd/comments/1pwtsqc/a_security_analysis_of_freebsd_jails_talk_with/ so, for search and discovery purposes:

• I'm sharing a Wayback Machine capture of the post and commentary.

The talk itself is at https://media.ccc.de/v/39c3-escaping-containment-a-security-analysis-of-freebsd-jails – with discussion thanks to u/Wide-Prior-5360 …

>… FreeBSD ships with an unusually complete troubleshooting toolkit out of the box. This article is a practical tour: …

Via https://burningboard.net/@Larvitz/116560508737991097 and https://billboard.bsd.cafe/post/435

Enabled, apparently:

root@clean:~ # pkg -v
2.7.5
root@clean:~ # pkg repos -e FreeBSD-base
FreeBSD-base: { 
    url             : "pkg+https://pkg.FreeBSD.org/FreeBSD:15:amd64/base_release_0",
    enabled         : yes,
    priority        : 0,
    mirror_type     : "SRV",
    signature_type  : "FINGERPRINTS",
    fingerprints    : "/usr/share/keys/pkgbase-15"
  }
root@clean:~ # 

Why is it enabled?

It's not enabled in /etc/pkg/FreeBSD.conf:

root@clean:~ # grep -v \# /etc/pkg/FreeBSD.conf 

FreeBSD-ports: {
  url: "pkg+https://pkg.FreeBSD.org/${ABI}/quarterly",
  mirror_type: "srv",
  signature_type: "fingerprints",
  fingerprints: "/usr/share/keys/pkg",
  enabled: yes
}
FreeBSD-ports-kmods: {
  url: "pkg+https://pkg.FreeBSD.org/${ABI}/kmods_quarterly_${VERSION_MINOR}",
  mirror_type: "srv",
  signature_type: "fingerprints",
  fingerprints: "/usr/share/keys/pkg",
  enabled: yes
}
FreeBSD-base: {
  url: "pkg+https://pkg.FreeBSD.org/${ABI}/base_release_${VERSION_MINOR}",
  mirror_type: "srv",
  signature_type: "fingerprints",
  fingerprints: "/usr/share/keys/pkgbase-${VERSION_MAJOR}",
  enabled: no
}
root@clean:~ # 

– and the override is commented out:

root@clean:~ # cat /usr/local/etc/pkg/repos/FreeBSD.conf 
FreeBSD-base {
#     enabled = yes;
#     url = "pkg+https://pkg.freebsd.org/${ABI}/base_latest";
}
FreeBSD-ports {
    url = "pkg+https://pkg.freebsd.org/${ABI}/latest";
}
FreeBSD-ports-kmods {
    url = "pkg+https://pkg.freebsd.org/${ABI}/kmods_latest";
}
root@clean:~ #