FreeBSD 15.2 Beta 2 updates OpenSSL, fixes bsdinstall and VirtIO random

FreeBSD 15.2 Beta 2 arrives one week after Beta 1 with targeted fixes for installation, cryptography, and virtualization subsystems. The release corrects a Beta 1 regression where bsdinstall failed to install from remote pkgbase repositories due to insufficient /tmp space. OpenSSH has been updated to version 10.6p2, and the operating system now generates ML-DSA-44/Ed25519 SSH host keys by default, adopting post-quantum cryptographic signatures for host authentication.

Virtualization support improves with virtio_random(4) now functioning on modern VirtIO PCI devices including QEMU's q35 machine type. Kernel-level fixes address TCP RACK behavior, inotify, and Linux getdents(2) emulation compatibility. The release schedule targets Beta 3 next week, a release candidate the following week, and FreeBSD 15.2-RELEASE on December 8 if no blockers emerge.

Kernel, crypto, and installer changes in FreeBSD 15.2 Beta 2

• bsdinstall: Remote pkgbase repository installation now works after Beta 1 failed due to the installer's constrained /tmp partition size.
• OpenSSH 10.6p2: The SSH suite has been updated to the 10.6p2 release, incorporating upstream security and protocol improvements.
• Post-quantum SSH host keys: ML-DSA-44/Ed25519 hybrid host keys are now generated by default, combining NIST's Module-Lattice-based Digital Signature Algorithm with Ed25519 for quantum-resistant host authentication.
• virtio_random(4): The VirtIO entropy driver now properly attaches to modern VirtIO PCI devices, restoring functional hardware random number generation on QEMU q35 machine types.
• Kernel networking and compatibility: Fixes land in TCP RACK (Recent ACK), inotify, and the Linux getdents(2) system call emulation layer used by Linux binary compatibility.

Why it matters

The default adoption of ML-DSA-44/Ed25519 host keys positions FreeBSD among the first operating systems to deploy post-quantum cryptography for SSH at scale, a move that will pressure Linux distributions and network infrastructure to follow suit. For administrators running FreeBSD in QEMU/KVM environments, the virtio_random fix restores a critical entropy source that had been silently broken on modern machine types. The compressed Beta-to-RELEASE timeline also signals confidence in the 15.2 branch stability.