Patching Unix and BSD systems: releases and commands
Each BSD has its own tools and its own support window. The table below gives the supported releases as of November 2026, the command that installs security fixes for the base system, and where each project publishes its advisories.
Quick reference
| System | Supported releases | Patch command (as root) | Advisories |
|---|---|---|---|
| FreeBSD | 15.1 (to March 31, 2027), 14.5 (to June 30, 2027), 14.4 (to December 31, 2026) | freebsd-update fetch install, or pkg upgrade -r FreeBSD-base on pkgbase systems; then pkg upgrade | freebsd.org/security/advisories/ |
| OpenBSD | 8.0 and 7.9 (the two latest releases only) | syspatch, fw_update, pkg_add -u | openbsd.org/errata.html |
| NetBSD | 11.0 and 10.2 (no end dates published) | sysupgrade auto with a release or branch build URL; pkgin upgrade | netbsd.org/support/security/ |
The dates come from each project's own pages and change with every new release. Check the system page before you plan an upgrade.
What the BSDs have in common
- Base system and packages are patched separately. The base system update tool does not touch third-party software. Always run the package update too:
pkg upgradeon FreeBSD,pkg_add -uon OpenBSD,pkgin upgradeon NetBSD. - No live kernel patching. A kernel fix takes effect only after a reboot. Library and daemon fixes need the affected services restarted.
- Short support windows. OpenBSD supports only the two newest releases, and a FreeBSD minor release ends three months after the next one on its branch. Upgrading is part of routine patching.
- Vulnerability checks for packages. FreeBSD has
pkg audit -Fand NetBSD haspkg_admin audit. Run them daily.
Order of work in an emergency
- Confirm the release with
uname -rand check that it is still supported. - Read the advisory or erratum for affected versions, the fixed patch level, and any workaround.
- Apply the fix with the command in the table, on one host first if you can.
- Reboot or restart services as the advisory says, and confirm the new patch level.
The general method, for Linux too, is in Emergency patching. For systems past end of life, see Is my OS supported?.
Other Unix systems
Commercial Unix and macOS have their own pages: IBM AIX, Oracle Solaris, HP-UX and macOS. Linux distributions are covered under Linux.
All Unix pages
- FreeBSDPatch FreeBSD fast: supported branches and EOL dates as of November 2026, freebsd-update, pkg upgrade -r FreeBSD-base, pkg audit -F, jails and FreeBSD-SA advisories.
- OpenBSDPatch OpenBSD fast: only 8.0 and 7.9 are supported as of November 2026. Use syspatch, fw_update, pkg_add -u, sysupgrade and the errata pages.
- NetBSDPatch NetBSD fast: 11.0 and 10.2 are supported as of November 2026. Update the base system with sysupgrade, packages with pkgin, and audit with pkg_admin.
- IBM AIXPatch IBM AIX 7.2 and 7.3 fast: Technology Level fix-support dates as of November 2026, oslevel -s, FLRTVC, emgr interim fixes, SUMA, install_all_updates and Live Update.
- Oracle SolarisPatch Oracle Solaris 11.4 fast: support to November 2031 (Premier) and November 2037 (Extended), SRUs and CPU SRUs, pkg update -nv, boot environments and beadm rollback.
- HP-UXHPE Standard Support for HP-UX 11i v3 ended December 31, 2025. What Mature Support still gives you, installing the last patches, isolating HP-UX servers and migrating.
- macOSPatch Macs that run builds or services: which macOS versions get fixes as of November 2026, softwareupdate -l and -i -a, Background Security Improvements and Homebrew.