FreeBSD security advisories, Sylve GUI for FreeBSD, and more
Releases
No releases.
BSDSec
FreeBSD Security Advisory FreeBSD-SA-26:63.posixshm: A TOCTOU race in the POSIX shared memory large page configuration can let an unprivileged local user escalate privileges; patches are available for all supported FreeBSD branches and require a reboot.
FreeBSD Security Advisory FreeBSD-SA-26:62.tty: A kernel use-after-free in the tty subsystem via TIOCSCTTY ioctl allows an unprivileged local user to escalate privileges; all supported FreeBSD versions are affected and patches are available for 14.4, 15.0, and 15.1 branches.
As always, it’s worth following BSDSec. RSS feed available.
News
Sylve: Lightweight GUI for managing Bhyve, Jails, ZFS, networking, and more on FreeBSD: Sylve is an open-source web interface for FreeBSD that unifies management of Bhyve VMs, Jails, ZFS storage, networking, PF firewall, WireGuard, backups, clustering, and telemetry with a Go backend and SvelteKit frontend.
NYCBug Sept 2nd “Conference Coms Check”: NYCBug will test IRC, Discord, and streaming setups at Brass Monkey on September 2 to validate the tech for future BSD conferences.
Valuable News – 2026/08/31: This week’s roundup covers running bhyve inside a FreeBSD jail, FreeBSD 14.5-RC1 with security fixes, NetBSD GSoC 2026 RAIDframe improvements, FreeBSD tools for ZFS delegation and ACLs, a VirtIO GPU driver for FreeBSD guests, BSDnas as a TrueNAS CORE fork, and more.
BSD Now 678: Ceiling Cat has another meaning: This episode covers reproducing the missing etcmerge from FreeBSD 15.0 to 15.1 upgrades, HardenedBSD’s June/July 2026 status report, MidnightBSD 4.0.7 release, and a BSD Make extravaganza.
Tutorials
Lenovo XClarity Administrator in FreeBSD Bhyve VM: A step-by-step guide to running Lenovo XClarity Administrator and XClarity One VMs under FreeBSD bhyve, including QCOW2-to-RAW conversion, GRUB configuration, and the need for two network interfaces to get the appliance working.
Run OpenBSD on DigitalOcean for $4/month: A step-by-step guide to deploying OpenBSD 7.9 on a $4/month DigitalOcean droplet using the miniroot image, configuring httpd and acme-client for Let’s Encrypt, and securing SSH access.
Did we miss anything?
This newsletter is made from your content on DiscoverBSD and BSDSec. Submit the stuff we missed so it can appear next time.
Do you have an OSS BSD-related project that you would like to showcase in BSD Weekly? Reply to sender and we can showcase you as a sponsor of an issue (for free).
Do you know anyone who would like this newsletter? Consider forwarding and tell them to subscribe.
Thanks for reading and see you next week! Stay safe!