FreeBSD 14.4 Delivers Post-Quantum SSH, OpenZFS 2.2.9, and Intel E610 Support
FreeBSD 14.4-RELEASE has arrived with OpenSSH 10.0p2 defaulting to hybrid post-quantum key exchange, OpenZFS 2.2.9, and new driver support for Intel Ethernet E610 NICs. The release also adds 9P filesystem support for Bhyve virtualization guests and patches vulnerabilities in OpenSSL and libarchive.
FreeBSD 14.4-RELEASE has arrived as the latest point release in the 14.x series, delivering security-focused updates alongside new hardware support and virtualization features. The release is available for amd64, i386, aarch64, armv7, powerpc, powerpc64, and riscv64 architectures, with support continuing through December 31, 2026.
Post-Quantum SSH
The most significant security change is the update to OpenSSH 10.0p2, which defaults to the hybrid post-quantum key exchange algorithm mlkem768x25519-sha256. This algorithm combines the classical X25519 elliptic curve with the ML-KEM (Kyber) lattice-based scheme, providing protection against both current attacks and future quantum computer-based key recovery. The hybrid approach means that even if the post-quantum algorithm is later found to be flawed, the classical component still provides security equivalent to current SSH implementations.
Storage and Virtualization
OpenZFS 2.2.9 brings incremental performance improvements and bug fixes to FreeBSD's primary filesystem. New hardware support includes drivers for the Fujitsu RAID SAS D3116 controller, NVMe storage on Google Compute C4 instances, and Intel Ethernet E610 network adapters. ACPI support for Intel IWLWIFI enables better power management on laptops with Intel wireless adapters.
For virtualization users, FreeBSD 14.4 adds 9P filesystem support for Bhyve VirtIO-9P devices, enabling efficient host-to-guest file sharing without the overhead of network-based protocols like NFS or SSHFS. This is particularly useful for development environments where source code lives on the host but builds run inside a Bhyve virtual machine.
Security Advisories
The release addresses security vulnerabilities in OpenSSL, libarchive, and xz, along with a jail escape risk that could allow a privileged process inside a jail to access resources belonging to other jails or the host system. The nuageinit cloud-init compatibility layer has been improved for better integration with cloud providers, and the Gallant console font now includes over 4,300 glyphs covering Greek, Cyrillic, IPA, and Powerline symbols.
FreeBSD 14.4 installation images are available from the FreeBSD download mirrors in ISO, memstick, and virtual machine formats.
Related Articles
NGINX 1.29.6 Adds Native Sticky Sessions and Fixes QUIC Reset Packet Overflow
NGINX 1.29.6 mainline release introduces a sticky-session directive for upstream blocks, enabling cookie-based session affinity without external load balancers and solving session-loss issues during worker restarts. The release also fixes oversized QUIC reset packets and improves SCGI backend proxying.
OFC 2026: Coherent and Broadcom Demonstrate 3.2 Terabit-Per-Second Optical Transceivers
At the Optical Fiber Communication Conference in Los Angeles, Coherent and Broadcom have demonstrated 3.2 Tbps optical transceiver modules — doubling the bandwidth of current-generation 1.6T interconnects. The technology is designed for the next wave of AI data center buildouts, where single training runs require moving exabytes of data between thousands of GPUs.
Ayar Labs and Wiwynn Unveil 1,024-GPU Photonic Rack System at OFC 2026
Silicon photonics startup Ayar Labs and server manufacturer Wiwynn have unveiled a rack-scale reference platform at the Optical Fiber Communication Conference that connects over 1,024 GPUs using optical interconnects instead of copper. The 100% liquid-cooled system promises dramatically lower power consumption while enabling the massive GPU clusters needed for next-generation AI training.