NetBSD 11.0, MidnightBSD 4.0.7 releases and more
Releases
NetBSD 11.0 released: The NetBSD project announces the 11.0 release with install images for CD-ROM, DVD, and ARM devices, notes on open security issues for hdaudio, ipfilter, and pf, and plans for a 11.1 release within two months.
MidnightBSD 4.0.7 RELEASE: MidnightBSD 4.0.7 is now available with security fixes for libarchive, tzdata, OpenSSL, LLVM, OpenZFS, and multiple kernel subsystems including TCP, ZFS, and execve.
BSDSec
FreeBSD Security Advisory FreeBSD-SA-26:55.elf: A race condition in ELF core dump segment counting allows an unprivileged local user sharing an address space via rfork(2) to trigger an out-of-bounds kernel heap write, potentially leading to privilege escalation; patches and workarounds are provided for FreeBSD 14.4, 15.0, and 15.1.
FreeBSD Security Advisory FreeBSD-SA-26:54.sysvsem: A heap out-of-bounds access in semctl(2) GETALL/SETALL commands can let an unprivileged local user read or write kernel heap memory, potentially leading to privilege escalation; patches are available for all supported FreeBSD releases.
FreeBSD Security Advisory FreeBSD-SA-26:53.ktrace: A code change inadvertently denied PRIV_KTRACE to jailed root users, allowing unprivileged users in a jail to modify or disable ktrace flags set by root, affecting FreeBSD 15.0 and 15.1.
FreeBSD Security Advisory FreeBSD-SA-26:52.if_wg: The wg(4) WireGuard driver on all supported FreeBSD versions fails to validate Poly1305 MACs during packet decryption, allowing remote attackers to inject forged or modified packets into a tunnel if they can reach the endpoint and guess the replay window bounds.
FreeBSD Security Advisory FreeBSD-SA-26:51.ktimer: FreeBSD 15.0 and 15.1 have a kernel stack disclosure flaw in timer_settime(2) when using CLOCK_TAI, allowing an unprivileged local user to read uninitialized kernel memory, with patches available for stable/15, releng/15.1, and releng/15.0.
FreeBSD Security Advisory FreeBSD-SA-26:50.kqueue: FreeBSD 15.1 has a use-after-free in the kqueue copy-on-fork code that can let an unprivileged local user escalate privileges, with patches available for stable/15 and releng/15.1.
FreeBSD Errata Notice FreeBSD-EN-26:19.zfs: FreeBSD has issued an errata notice for race conditions in zvol device management in OpenZFS that can cause kernel panics on FreeBSD 15.1 and 15.0, with patches available for stable/15, releng/15.1, and releng/15.0.
FreeBSD Errata Notice FreeBSD-EN-26:18.tzdata: FreeBSD has updated the IANA Time Zone Database in /usr/share/zoneinfo for all supported releases to reflect recent changes to time zone rules, and affected systems should run tzsetup(8) or apply the errata to correct local time.
As always, it’s worth following BSDSec. RSS feed available.
News
Call for testing: OpenBSD vmm(4)/vmd(8) fd-ification: Dave Voutila proposes a major change to vmm(4)/vmd(8) that replaces VM IDs with file descriptors, improving process isolation and lifecycle management, and requests testing especially for SEV-related usage.
Valuable News – 2026/08/03: This week covers FreeBSD’s Q2 2026 status report, NetBSD 11.0 release with RISC-V support, OpenBSD’s relayd/httpd evolution, HardenedBSD’s June/July status, FreeBSD removing its last GPL userspace code, and more.
HardenedBSD June / July 2026 Status Report: The report details recovery from a FreeBSD ports tree licensing issue that forced a git history reset, updates to src including new sysctl hardening and safer memory APIs, and ports work such as migrating several ports to Radicle, updating vm-bhyve-hbsd to 1.7.4, and setting LLVM 21 as the default.
Dead Software Walking: The ongoing evolution of relayd(8) and httpd(8): Rafael Sadowski details recent work modernizing OpenBSD’s relayd and httpd, including imsg system updates, TLS cipher and security hardening, bug fixes for crashes and memory leaks, and new features like MKCALENDAR support and custom HTTP headers.
BSD Now 674: Software development never changes: This episode covers ZFS scrub design pitfalls, WebZFS beta updates, why a pool may refuse to export, a look at the FreeBSD Foundation Board’s role, and running LibreNMS on FreeBSD.
LLVM toolchain coming to OpenBSD/sparc64: Kirill A. Korinsky has posted a patch set to tech@ that adds LLVM toolchain support for OpenBSD/sparc64, now ready for testing on -current.
An Update on the FreeBSD Journal: New Editor, New Format: The FreeBSD Journal welcomes Matt Slaybaugh as its new editor and is switching to a browser-based-only format, with quarterly, free issues still guided by the editorial and advisory boards.
Valuable News – 2026/07/27: This week’s roundup covers FreeBSD pkg 2.8.0, NetBSD 11.0-RC7, Game of Trees 0.127, OpenBSD httpd gaining custom HTTP headers, Wine 11.14 bringing WoW64 to FreeBSD, Stalwart Mail Server adding FreeBSD support, and more.
Tutorials
Running HomeAssistant Core in FreeBSD Jails with BastilleBSD: A step-by-step guide to deploying HomeAssistant Core, Mosquitto MQTT, and Zigbee2MQTT in separate VNET FreeBSD jails managed by BastilleBSD, including USB passthrough for Zigbee devices and a bootstrap script for HA Core.
Did we miss anything?
This newsletter is made from your content on DiscoverBSD and BSDSec. Submit the stuff we missed so it can appear next time.
Do you have an OSS BSD-related project that you would like to showcase in BSD Weekly? Reply to sender and we can showcase you as a sponsor of an issue (for free).
Do you know anyone who would like this newsletter? Consider forwarding and tell them to subscribe.
Thanks for reading and see you next week! Stay safe!