freebsd

2026-05-20 FreeBSD errata notice and seven security advisories

https://www.reddit.com/r/freebsd/comments/1tjaceg/20260520_freebsd_errata_notice_and_seven_security/

– an overview, including clickable links to CVE records.

#FreeBSD #CVE #errata #security

Some notes on upgrading several #FreeBSD boxes from 14.3 to 15.0…

1) for Cthulhu’s sake run freebsd-update fetch and install on 14.3 before upgrading or you get a free paperweight or doorstop (depending on size), I have a paperweight to fix (cf. “there always is a reason for weird warning signs”)

2) if you run VMs w/ vm-bhyve:
2.1) the vm-bhyve “local” switch no longer works, use manual and set up the bridge yourselves in /etc/rc.conf.d/network,
2.2) vm-bhyve fails to load nmdm.ko so your VMs no longer start, add it to /boot/loader.conf.local with nmdm_load=“YES”

3) tmux… this was already the case with the recent 14.3 pkg upgrade but when upgrading the pkg… close all your sessions ‘cos when you try to reconnect to them after upgrading “computer says no”

4) oksh, yes I am an OpenBSD ksh fan, feel free to hate a , now behaves correctly with ksh.kshrc - no more fancy workarounds needed

5) zpool upgrade -a is sooo worth it performance-wise (and you get to expand pools )

On a separate note I am liking my restic backups now that they are fully implemented, including cross-DC backups for my private stuff, more opaque than rsync, but more efficient, I never quite got what I wanted out of rsync.

Main: "Tionisla - Dell Latitude e6540
Kernel: 15.0-RELEASE-p2 amd64
Operating System: FreeBSD 15.0-RELEASE-p2
Desktop: LXQT 2.3.0
Windowmanager: XFWM4
Qt Version: 6.10.1
Graphics Platform: X11

https://bsd-hardware.info/?probe=7e1c664559

#runbsd #freebsd #unix #foss #lxqt #desktop #screenshot

It has been so long since I ran a #BSD that I don't even remember which BSD it was. (I could probably dig up that info...)

Circa 20 years ago I used to run BSD gateway/router machines.

I think I'd like to do this again, for a variety of reasons.

But which BSD should I run for this kind of network gateway. It won't host any applications, it won't be a NAS, it'll purely be network/gateway... it'll have the telco router on one side, internal network on another, and one or two DMZ/separate type networks (one for hosting external facing things like Mastodon, the other for untrusted IoT stuff.) It'll run dhcp, dns, and probably be a VPN endpoint.

I do not want to run some specialist gateway adapted customised thing with dashboards etc, just want a plain vanilla OS. (And no bullcrap like containers, docker, etc. Just an OS running on a physical box.)

So, what OS should I run on my network gateway: #OpenBSD, #FreeBSD, #NetBSD

OK #FreeBSD folk why does #Qutebrowser have to be removed ??? I need it ! Just tried to do an update on FreeBSD 15.0-RELEASE-p2

Updating FreeBSD-ports repository catalogue...
FreeBSD-ports repository is up to date.
Updating FreeBSD-ports-kmods repository catalogue...
FreeBSD-ports-kmods repository is up to date.
All repositories are up to date.
Checking for upgrades (22 candidates): 100%
Processing candidates (22 candidates): 100%
The following 27 package(s) will be affected (of 0 checked):

Installed packages to be UPGRADED:
	AppStream: 1.1.1 -> 1.1.2 [FreeBSD-ports]
	harfbuzz: 12.3.0 -> 12.3.2 [FreeBSD-ports]
	harfbuzz-icu: 12.3.0 -> 12.3.2 [FreeBSD-ports]
	lcms2: 2.17 -> 2.18 [FreeBSD-ports]
	libfyaml: 0.9_1 -> 0.9.3 [FreeBSD-ports]
	libgcrypt: 1.11.2 -> 1.12.0 [FreeBSD-ports]
	mysql80-client: 8.0.44 -> 8.0.45 [FreeBSD-ports]
	orc: 0.4.41_1 -> 0.4.42 [FreeBSD-ports]
	pciids: 20251227 -> 20260115 [FreeBSD-ports]
	png: 1.6.53 -> 1.6.54 [FreeBSD-ports]
	py311-adblock: 0.6.0_48 -> 0.6.0_49 [FreeBSD-ports]
	py311-certifi: 2025.11.12 -> 2026.1.4 [FreeBSD-ports]
	py311-urllib3: 2.6.2,1 -> 2.6.3,1 [FreeBSD-ports]
	spdlog: 1.16.0_1 -> 1.17.0 [FreeBSD-ports]
	waybar: 0.14.0_2 -> 0.14.0_3 [FreeBSD-ports]

Installed packages to be REINSTALLED:
	ImageMagick7-7.1.2.11 [FreeBSD-ports] (required shared library changed)
	cups-filters-1.28.17_12 [FreeBSD-ports] (required shared library changed)
	libcdr01-0.1.8_1 [FreeBSD-ports] (required shared library changed)
	libfreehand-0.1.2_27 [FreeBSD-ports] (required shared library changed)
	libraw-0.21.5 [FreeBSD-ports] (required shared library changed)
	libreoffice-25.8.4.2 [FreeBSD-ports] (required shared library changed)
	openjdk17-17.0.17+10.1_1 [FreeBSD-ports] (required shared library changed)

Installed packages to be REMOVED:
	py311-qt6-webengine: 6.10.0
	qt6: 6.10.1
	qt6-webengine: 6.10.1_3
	qt6-webview: 6.10.1
	qutebrowser: 3.6.3

Number of packages to be removed: 5
Number of packages to be upgraded: 15
Number of packages to be reinstalled: 7

The operation will free 291 MiB.
327 MiB to be downloaded.

Proceed with this action? [y/N]: 

Old: "Zaonce" - Dell Inspiron 1525
Kernel: 15.0-RELEASE-p8 amd64
Operating System: GhostBSD 26.1-R15.0p8
Desktop: LXQT 2.4.0
Windowmanager: XFWM4
Qt Version: 6.10.2
Graphics Platform: X11/xorg 7.7_3

https://bsd-hardware.info/?computer=58b29987d5af

#runbsd #freebsd #ghostbsd #unix #foss #lxqt #desktop #screenshot #shareyourdesktop

After decades on #Linux, #FreeBSD finally gave me a reason to switch operating systems

https://www.newsbeep.com/nz/270060/

I have asked for my #FreeBSD commit bit to be taken into safekeeping. It’s been a few years since I actually committed code to the repo (I still maintain libcxxrt and dtc, which are in the base system, so my code has been committed by others in that time).

This is the second time. I reactivated it a couple of years ago and wrote a qemufwcfg driver (split NetBSD-style between a simple kernel device and a FUSE filesystem), but the review comments put me off bothering to get it into the tree (someone else is welcome to do it if they want to pull it out of phabricator). I still occasionally do code review for other folks, feel free to keep tagging me for reviews.

Still a happy FreeBSD user. If I have FreeBSD time again (any decade now…) I hope to work more on container things. The Apple folks who did their container thing have said they’re happy to take patches to support FreeBSD containers. Their one-VM-per-container model makes this much easier than Podman, which assumes a single VM so is hard to transparently support both Linux and FreeBSD guests.

The only thing I’d like to do that I’d want to put in the base system is a more modern service management and eventing system. And I doubt I’ll have time to work on that for a few years.

This #LibreOffice bug, where trying to create or open a password-protected file crashes the application, is what kept me from running #FreeBSD on my laptop (before that hardware died last month). I was able to keep running #OpenBSD (where LibreOffice doesn't crash) until the laptop gave up and wouldn't run at all. https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=289266

Secondary: "Tianve" - HP-250 G3
Kernel: 14.3-RELEASE-p8 amd64
Operating System: GhostBSD 25.02-R14.3p8
Desktop: LXQT 2.3.0
Windowmanager: XFWM4
Qt Version: 6.10.1
Graphics Platform: X11

https://bsd-hardware.info/?probe=77494a1526

#runbsd #freebsd #ghostbsd #unix #foss #lxqt #desktop #screenshot

Was compiling #Python v3.14 (on #FreeBSD v14.3) via "#pyenv" with ...

PYTHON_CFLAGS='-march=native -mtune=native' \
PYTHON_CONFIGURE_OPTS='--enable-optimizations --with-lto' \
PROFILE_TASK='-m test.regrtest --pgo -j0' \
PYENV_ROOT="${pyenv_root_dir:?}"

... that failed as the LLVM_PROFILE_FILE was being created under "/"💩

Surprising🙄

Trying again with LLVM_PROFILE_FILE='/tmp/code-%p.profclangr' ...

Meet #Starling, a lightweight #ActivityPub server for the #Fediverse, built with PHP and SQLite.

Run your own decentralized social platform on shared hosting or a tiny VPS WITHOUT Redis, PostgreSQL, or complex infrastructure.

What it makes so special to me? It looks awesome, comes with a great admin web interface and does not require a VPS instance where it can also be operated on a cheap shared hosting systems. By the given requirements, it also easily runs on a #RaspberryPI and all kind of systems, including #FreeBSD, #OpenBSD, #Illumos and more!

This all makes it perfect to everyone and even beginners to run their own instance. With relay support (e.g., fedi-relay.gyptazy.com) it even can consume and post content over non-directly connected instances in the #fediworld!

Kudos to the author of Starling: @df

More information:
GitHub project: https://github.com/dfaria-eu/Starling
My blog post: https://gyptazy.com/blog/starling-simple-fediverse-server/

#fedi #fediwall #opensource #decentralized #social #socialmedia #alternatives #mastodon

Vim v9.2 is released. There are many magnífico features I look forward to use. VIM is a Swiss Army Knife for editing Source Code & text.

The features are too many to mention, no really I don't know them all; NOBODY DOES!
Just like with the GiMP I know the functions I need and learn more when the requirement arizes. VIM has an extensive help system which Bram Molenaar et all developed over the decades that VIM exists.

History
VIM was initially coded on the Amiga computer systems of which I own an A4000T with a Cyberstorm 060 and Max Ram, with RTG card (Picasso 96), a A1200 vanilla with a stock HDD & an A500 with stock RAM (chip and fast) and 3 FDD 2x 3.5" 1x 5 1/4"

Bram wrote VIM in such a way that it runs on the A500 with just 512kB RAM!

There are people who love EMACS. To them I say

<flame bait>
EMACS can't hold a candle to VIM
</flame bait>

Of course that is just humour. In the Open Source world choice is what makes us all work and play well on whatever hardware we have with whatever tools we love

>> Quote

New Features in Vim 9.2

Comprehensive Completion: Added support for fuzzy matching during insert-mode completion and the ability to complete words directly from registers (CTRL-X CTRL-R). New 'completeopt' flags like nosort and nearest offer finer control over how matches are displayed and ordered.
Modern Platform Support: Full support for the Wayland UI and clipboard has been added. On Linux and Unix-like systems, Vim now adheres to the XDG Base Directory Specification, using $HOME/.config/vim for user configuration.
UI Enhancements: A new vertical tabpanel provides an alternative to the horizontal tabline. The MS-Windows GUI now supports native dark mode for the menu and title bars, along with improved fullscreen support and higher-quality toolbar icons.
Interactive Learning: A new built-in interactive tutor plugin (started via :Tutor) provides a modernized learning experience beyond the traditional vimtutor.

^Z

>> Quote II

Vim9 Script Ecosystem & AI Integration

The maturity of Vim9 script's modern constructs is now being leveraged by advanced AI development tools. Contributor Yegappan Lakshmanan recently demonstrated the efficacy of these new features through two projects generated using GitHub Copilot:

Battleship in Vim9: A complete implementation of the classic game, showcasing classes and type aliases. [GitHub]
Number Puzzle: A logic game demonstrating the efficiency of modern Vim9 for interactive plugins. [GitHub]

^Z

I wonder why they have LLM support?

Note
The download page looks horrible on mobile so you'd be wise to view it on desktop

If this is your first time using VIM and you didn't bother to read the help file with `:h`
Just exit VIM type `:wq` to write & exit or type `:q!` to exit without saving the file

#Vim #VimMasterRace #tips #tricks #handy #features #Vi #EMACS #editor #text #freeBSD #ghostBSD #BSD #Linux #OpenSource #POSIX

https://www.vim.org/vim-9.2-released.php

Maybe I should switch to GhostBSD 🤔
"GhostBSD Switches to XLibre Over Wayland"
https://ostechnix.com/ghostbsd-switches-to-xlibre-over-wayland/

#GhostBSD #XLibre #RunBSD #FreeBSD

curl libcurl

Just in case you have forgotten how to curl a file from a server here's a extensive howto with screenshots

`-L` redirect
https://everything.curl.dev/http/browserlike.html?highlight=-L#redirects

`-o` filename
https://everything.curl.dev/usingcurl/downloads/url-named.html#download-to-a-file-named-by-the-url

`-C -` resume
https://everything.curl.dev/usingcurl/downloads/resume.html#resuming-and-ranges

`curl --verbose -C - -L -o lp_someband_some_name_disc1side2.flac archive.org/download/lp_someband_somename-v/disc1/lp_someband_somename_disc1side2.flac`

#curl #get #programming #technology #fetch #networking #https #http #ftp #OpenSource #POSIX #BSD #freeBSD #ghostBSD #openBSD #Linux #win64 #mac

Make finding bugs in FreeBSD more expensive.

https://www.reddit.com/r/freebsd/comments/1trbgfd/comment/oomg93o/

Don't shoot the messenger.

#FreeBSD #bugs

Main: "Tionisla - Dell Latitude e6540
Kernel: 15.0-RELEASE-p9 amd64
Operating System: FreeBSD 15.0-RELEASE-p9
Desktop: LXQT 2.4.0
Windowmanager: XFWM4
Qt Version: 6.11.1
Graphics Platform: X11/xorg 7.7

https://bsd-hardware.info/?probe=7e1c664559

#runbsd #freebsd #unix #foss #lxqt #desktop #screenshot #shareyourdesktop

The removal of TrueNAS legacy (CORE) leaves space for a tenth button.

What would you like?

The button need not be FreeBSD-specific. Discussions frequently attract users of other systems.

The sidebar of r/freebsd is crowded (very tall), and this cluster of buttons is relatively far down, so I doubt that it will gain much attention. Still, cafe community thoughts are welcome.

Three screenshots:

1. an overview of <https://www.reddit.com/r/freebsd/top/?sort=top&t=day> before removal of the TrueNAS button

2. the entire sidebar as represented at <https://sh.reddit.com/r/freebsd/about/>

3. focus on the other sub shortlist, and the other shortlist, within the sidebar.

Thanks.

#FreeBSD #BSD #Unix #Linux

The most rewarding part of my FOSS philosophy is championing a project you believe in: either committing code, writing docs, churning out blog posts and tutorials, donating money, or any combination your free time and wallet can survive.
And the *second* most rewarding part? When that project turns its back on you, you're perfectly free to keep using it, grudgingly, because you might have no other choice, while committing nothing, documenting nothing, writing nothing, never mentioning it again, and not donating a single cent.

Freedom, as promised.

#foss #freebsd #ai

#CaliforniaLaw is written by people who are either very ignorant or very incompetent.

https://leginfo.legislature.ca.gov/faces/billStatusClient.xhtml?bill_id=202520260AB1043

They have assumed that all operating systems are like Microsoft Windows 11, Android, or iOS; and have written legislation for operating systems where people download glorified WWW client 'apps', from 'stores', which use 'accounts' that they have with vendors or Microsoft/Google/Apple.

But the legislation *as worded* *also* covers everything from #Debian and #Ubuntu through #Arch Linux and #MobaXTerm to #FreeBSD and #NetBSD and #OpenBSD; where users anonymously use package managers or ports systems to install applications, written by developers, on operating systems, from 'publicly available internet website' repositories.

There is no age field in the GECOS data in master.passwd(5) of course, and the reality is that no BSD or Linux-based operating system has this concept of apps/stores/accounts.

#MidnightBSD #FreeSoftware #Unix #California #USLaw #AgeVerification #GDPR

Push Notifications and MastoBlaster

On iOS, push notifications must go through Apple’s servers. This is not something that can be bypassed, as it is part of the operating system’s architecture.

MastoBlaster, like other Fediverse apps, uses a design that maximizes user privacy.

When you log in to your instance, the app and the server exchange the necessary cryptographic keys. The app also communicates to the instance the address of the relay, which is the server responsible for forwarding notifications to Apple.

When a new notification is generated:

1. Your instance encrypts the notification.
2. It sends the encrypted payload to the relay.
3. The relay forwards it to Apple using its own authentication key.
4. Apple delivers it to your device.

The content of the notification is encrypted by your Fediverse server and can only be decrypted by your device.

The relay, which in the case of MastoBlaster is dedicated and hosted on a FreeBSD server, receives only encrypted data. It cannot read the content, does not know which account the notification belongs to, and does not store any information about the notification itself.

Apple knows which relay sent the notification and which device it must be delivered to, but it cannot access the content.

In short, only your instance and your device can read the notification.

#MastoBlaster #Fediverse #Mastodon #GoToSocial #Akkoma #iOS #Apple #PushNotifications #FreeBSD

<https://redd.it/1rgx8ts> … thirty-six hours later, no-one has spotted the two deliberate mistakes.

Note to self: be genuinely careless more often. Much more. Especially at weekends, when no-one's paying attention 🙃

#FreeBSD #weekend #stikethough

FreeBSD 15.1 overview – with KDE Plasma and applications, Ly, and SDDM

https://www.reddit.com/r/freebsd/comments/1rje9xu/freebsd_151_overview_with_kde_plasma_and/

@FreeBSDFoundation

#FreeBSD #Foundation #desktop #KDE #Plasma #Ly #SDDM

The webserver for my websites (https://blog.hofstede.it and others) is now runing on 15.1-RELEASE arm64 with PKGBase 🙂

Upgrade from 15.0 to 15.1was pleasantly boring:

https://docs.freebsd.org/en/books/handbook/cutting-edge/#pkgbase

- Creating a BE for the new version
- Mounting the BE to /mnt/upgrade
- Executing "env ABI=FreeBSD:15:aarch64 pkg-static -c /mnt/upgrade upgrade -r FreeBSD-base"
- bectl activate -t 15.1-RELEASE
- Rebooting the system

Everything working fine, all lights green

#freebsd #unix #selfhosting #arm64

Finishing the upgrade from #FreeBSD 15.0 to 15.1-RELEASE on my #QEMU VM, all is fast and simple as always, no surprise, no fear (thanks to #ZFS). Upgrding the baremetal system on my laptop next!

#RunBSD #BSD $Unix #FOSS #Hooray