/root

FreeBSD Status Report — Second Quarter 2026

July 28th, 2026
FreeBSD Q2 2026 Status Report — highlights

Published 27 July 2026, 41 entries. Full report · New RSS feed
- 15.1-RELEASE shipped 16 June; much of the quarter’s work landed against it.
- Foundation-sponsored commits: 638 src, 120 ports, 31 doc (up from 555/83/16 in Q1).
- DRM/graphics: port of Linux 6.12 LTS DRM drivers finished in time for 15.1; the 6.12.x patch series will be tracked going forward.
- ROCm: new effort to bring AMD’s compute stack to FreeBSD — currently unsupported at both toolchain and driver level.
- CPPC: restarted after the Halifax Hackathon — min/max/desired knobs for hwpstate_intel(4), powerd(8) policies, a global EPP knob, and _CPC-conditional enablement for hwpstate_amd(4).
- MPLS (GSoC 2026): phases 1–3 done — EtherType 0x8847 encapsulation with netisr(9) dispatch, OpenBSD’s ldpd(8) ported, and a forwarding engine with per-VNET LIB, verified end-to-end between VNET jails over epair(4).
- Laptop support: Framework hackathon in Taipei — Panther Lake I2C/SMBus PCI IDs committed, work started on the RTL8159-based 10GbE adapter, sysutils/framework-system to 0.6.4.
- Installer: subsystems, component framework and screens rewritten since EuroBSDCon 2025; TUI frontend near feature-complete.
- Also: CRA readiness and SBOM work, full CPUID control for bhyve, suspend/resume, hibernate, native S.M.A.R.T. retrieval, wireless updates, cluster refresh, Bugzilla improvements.
ConvertX – self-hosted file conversion

July 28th, 2026

A self-hosted online file converter that supports over a thousand different formats.

Without the privacy concerns of uploading a file to a third-party website.

https://github.com/c4illin/ConvertX
CVEs after Mython Release

July 26th, 2026

“Severe cybersecurity vulnerability disclosures (CVEs) spiked in 2026. In June, notable organizations published around 1,500 high- and critical-severity CVEs — more than 3.5× the monthly record prior to Mythos’ release.”

https://epoch.ai/data-insights/cve-severity-spike
TrueNAS 25.10.5 – Security Updates in the AI era

July 25th, 2026
TrueNAS 25.10.5 brings an updated Linux kernel version 6.12.95, which patches multiple security-related CVEs, including SharedFrag (CVE-2026-43503) and PeditCOW (CVE-2026-46331) local privilege escalation vulnerabilities, as well as six more upstream security fixes.

Beyond the kernel, this release also delivers a number of TrueNAS specific fixes:
- A console memory leak was identified that could consume excess RAM
- Corrects several smartctl parsing errors that produced inaccurate drive SMART health reports
- Resolves an error that caused TrueCloud Backup jobs to hang indefinitely when an error occurred in the underlying restic software
- Tightens SSH key handling for replication and cloud credentials
- Obtains full RFC 5322 compliance for emails to ensure reliable delivery
- Improves the robustness of Enterprise HA for block storage
- And fixes a bug that blocked share ACL editing in certain edge cases
For full details on all of the updates, check out the TrueNAS 25.10 changelog on the TrueNAS Docs site.

https://www.truenas.com/blog/truenas-25-10-5-resolving-security-vulnerabilities
FreeBSD ports unfrozen and ports history rewritten

July 25th, 2026
Timeline of events:
- 2026-07-20 — A ~150 MB binary is committed to the ports tree in misc/github-copilot-cli (a routine version bump). It exceeds GitHub’s 100 MB object limit and carries an unresolved redistribution question.
- Shortly after — The file is removed in a later commit, but the blob remains in history, so mirroring stays broken.
- 2026-07-21 (~23:00 UTC) — core@ becomes aware that mirroring to GitHub is severed and requests suspension of pushes. The ports tree is frozen.
- 2026-07-21 → following hours — gitadm@, clusteradm@, portmgr@, and core@ deliberate. They settle on a history rewrite, constrained to be reproducible by third parties without unreasonable downstream burden.
- 2026-07-22 — Initial core@ notice (Kyle Evans) explaining the freeze.
- 2026-07-24 — The rewrite is completed and published; main tip moves forward and commits flow again. A reproduction script (with SHA256) is released for independent verification. Formal signed announcement
  issued by René Ladan (portmgr@) and Kyle Evans (core@).
- 2026-07-24 → coming hours — Tree thaws for regular operations.
- By 2026-07-26 — Cluster package builds resume.
- Following week — Infrastructure repairs; server-side hooks rolled out (hard file-size ceiling, approval-gated soft limits, binary-license confirmation).
https://lists.freebsd.org/archives/freebsd-announce/2026-July/000295.html
Claude Opus 5

July 25th, 2026
1. Long-running work: It can work for hours on a task, recovering from errors and routing around blockers instead of stopping. It also checks its own work as it goes and catches issues that earlier models missed. It reaches 43.3% on Frontier-Bench v0.1 and 68.8% on DeepSWE v1.1 (up from 18.7% / 59.0% on Opus 4.8).
2. It more regularly asks clarifying questions before guessing, pushes back on flawed instructions, and considers the implications of its work before jumping ahead to implementation. The result is cleaner, higher-quality code.
“Opus 5 does not advance the frontier in risky, dual-use capabilities. In rigorous evaluations conducted alongside private-sector and government partners, we found it remains behind Mythos 5 in both biology research and offensive cybersecurity.

As with its predecessor, Opus 4.8, we’ve intentionally avoided training Opus 5 on cyber tasks. Opus 5’s cyber classifiers are proportionally less restrictive than those on Fable 5. They allow Opus 5 to find vulnerabilities in source code, but block “binary-based” vulnerability scanning, penetration testing, and exploit generation.”

https://www.anthropic.com/news/claude-opus-5
Fable 5 becomes standard on Max plans

July 24th, 2026

“Starting July 20, Claude Fable 5 is included in all Max and Team Premium plans at 50% of usage limits, and Claude Code’s 50% higher weekly rate limits run through August 19. /code-review gained effort levels plus an ultra tier, artifacts went multiplayer with MCP connectors, and the MCP 2026-07-28 spec RC drops session pinning entirely.”
FreeBSD – Ports Repository Freeze

July 23rd, 2026

“A 150MB binary file was recently committed to the ports tree and, as a result, core@ made the decision to implement a temporary freeze of the ports tree in order to implement some clean up efforts. The commit in question severed our ports tree mirroring to github.com due to their filesize hard limit of 100MB, and introduced a blob of questionable licensing into the repository history.”

https://lists.freebsd.org/archives/freebsd-announce/2026-July/000294.html

https://www.freebsd.org/news/2026-ports-freeze
Dell Laptop with throttled CPU frequency – BD_PROCHOT feature

July 20th, 2026
Checking the clock speed:
grep MHz /proc/cpuinfo
Every core sat at 400–800 MHz on a CPU rated for 4.8 GHz.

Troubleshooting

Intel CPUs report why they are throttling in MSR 0x64F (PERF_LIMIT_REASONS). Reading it showed PROCHOT as the active limiter — yet the CPU was at 55 °C, nowhere near hot, with the fan at maximum speed.

BD PROCHOT (Bi-Directional PROCHOT) is an Intel feature that lets external chips (VRMs, chipset, thermal sensors) signal the CPU to throttle hard, even when the CPU itself is cool. On some laptops a dying battery or a misreporting sensor can pin the cores at 800 MHz indefinitely. This installer clears bit 0 of Machine state register (MSR) 0x1FC so the CPU ignores those external signals, and it keeps clearing it after every sleep state.

Fixing the issue:

MSR 0x1FC bit 0 controls whether the CPU listens to the external signal. Clearing it makes the CPU ignore BD_PROCHOT:
# pacman -S msr-tools # rdmsr 0x1fc # 0x24005b — bit 0 set # wrmsr -a 0x1fc 0x24005a
Clocks went from a 1.5 GHz straight back to a 4.3 GHz boost. It is significant to note that this setting reverts on reboot.
> grep MHz /proc/cpuinfo cpu MHz : 1524.652 cpu MHz : 1473.830 cpu MHz : 1851.206 cpu MHz : 1700.613 cpu MHz : 572.149 cpu MHz : 1326.832 cpu MHz : 1877.484 cpu MHz : 652.318 ~ > 20:19:05
The proper fix is to reset the embedded controller itself: full shutdown, unplug the charger and then hold the power button for 30–60 seconds.
Legacy importer and exporter removal from Anki

July 19th, 2026

That’s some old code in python that was reimplemented in Rust.
FreeBSD removes entire GNU directory

July 18th, 2026

“The dialog implementation was the last piece of GNU GPL licensed software in FreeBSD’s base system. The FreeBSD installer previously transitioned to using bsddialog in place of dialog and then dpv was the last user of dialog but itself since turned off and now retired.”

https://github.com/freebsd/freebsd-src/commit/134a4c78d070f8c4ea43a060a7ae28d22ac39558

https://www.phoronix.com/news/FreeBSD-16-Goes-GPL-Free
FreeBSD 15.2 Release Schedule announcement

July 16th, 2026
Linkwarden 2.15

July 15th, 2026
What’s new on mobile:
1. 🖍️ Highlight and annotate
2. 📥 True offline mode
3. 🪪 Link details sheet
4. 📖 Customizable reader view
What’s new on the web:
1. 🧠 Much lower memory usage: Linkwarden 2.15 roughly halves idle memory usage, from around 700 MB down to about 350 MB.
2. 🐳 A much smaller Docker image: The Docker image has also been cut in half, dropping from roughly 3.0 GB to 1.5 GB.
3. 🔑 Generic OIDC provider
4. 🔒 Increased security
https://linkwarden.app/blog/releases/2.15
Anki 26.08 Beta 1

July 14th, 2026
What’s Changed
New Features
1. Update to fsrs-rs 6.6.1, bringing performance improvements. By @asukaminato0721 in #4956
2. Strip FSRS parameters from deck configs on export without scheduling by @chrislongros in #4721
3. An experimental rework of the editor by @abdnh in #4029 can be enabled from Preferences>Experiments. The main goal is to make it possible to integrate the editor into mobile clients. May affect addon compatibility.
4. A new Experiments section has been added to the Preferences screen. This is intended to bring experimental features such as the new editor early to users for testing and feedback. By @Luc-Mcgrady in #5057
https://github.com/ankitects/anki/releases/tag/26.08b1

https://forums.ankiweb.net/t/anki-26-08-beta-1/70398/6
Debian 13.6 released with security fixes

July 14th, 2026

Noteworthy updates
1. “fwupd” and Secure Boot CA expiry

2. “geoip-database” reverted

https://www.debian.org/News/2026/20260711

https://www.phoronix.com/news/Debian-13.6-Released