"Free your BIOS today!" urges the web page for GNU Boot, calling it "a 100% free software project aimed at replacing the nonfree boot software (like BIOS or UEFI) of computers with free boot software. GNU Boot is only a distribution: it reuses existing software projects like Coreboot, GRUB, SeaBIOS, etc. So it's not very different from 100% free GNU/Linux distributions like Trisquel or Guix. Last month the Free Software Foundation announced they'd fiscally sponsor the project: "The BIOS is a delicate but essential part of software freedom for computing today," said Zoë Kooyman, executive director of the FSF. "GNU Boot aims to make sure that we can continue using our computers in freedom. With the way it builds on the work of others to replace UEFI, we know it can remain firm in the free software philosophy and stay vital to digital autonomy and user freedom." Free boot firmware, such as GNU Boot, is responsible for loading the computer's operating system. The work done by GNU Boot contributors has similarities to work done by GNU/Linux distributions: they package software like Coreboot or GNU GRUB, contribute to the upstream repositories of these projects, and assist them with documentation, among other tasks... When asked about their project joining the FSF's fiscal sponsorship program, co-maintainer Adrien Bourmault stated: "Making this decision with the FSF allows us to focus more on what we do best: writing and debugging code that keeps our machines fully free." Projects whose scope and purpose align with the FSF's mission and further mission-related activities can become fiscally sponsored by joining the FSF's Working Together for Free Software Fund.

Read more of this story at Slashdot.

FreeBSD 16 has removed the last GPL-licensed code from its base system, retiring the old GNU 'dialog' implementation after the installer moved to 'bsddialog' and the final dependency was disabled. Phoronix reports: This ticket to retire dialog was opened back in February while is now merged to the FreeBSD source tree for what will become FreeBSD 16.0. With dialog removed, the latest FreeBSD code now retires the GNU sub-tree of the FreeBSD base system now that no more GNU code remains. FreeBSD 16.0 is working its way toward release that is expected to happen in December 2027.

Read more of this story at Slashdot.

The Free Software Foundation's GNU Savannah hosts thousands of free software projects — both GNU and non-GNU projects, including Drupal. But in early May, security researchers from Hacktron.AI reported vulnerabilities and demonstrated an exploit, according to a new statement Friday from the FSF: We have been working with these researchers since their initial report, and have also addressed additional security issues they submitted. All reported issues have been patched thanks to the hard work of GNU and FSF volunteers, as well as FSF staff. After thorough review, we have found no reason to believe that sensitive project data or credentials were accessed, nor that there has been any compromise of Savannah's software supply chain. Nevertheless, we take the security of the GNU system, the tools which make it possible, and the projects we host very seriously. This body of software has become essential to millions (if not billions) of users around the world. We are therefore taking additional precautionary steps. Though the initial security issue was reported to us in early May, the vulnerabilities were discovered in software that was published approximately two years prior. We will be communicating directly with Savannah-hosted projects about steps they can take to review and strengthen the security of their projects. We have also communicated with the other Savane instances we're aware of to assist their review of their own environments, and take any steps needed to help protect their users... This statement is intended as an initial notice. We expect to publish a report on the incident within 30 days. Hacktron.AI bills itself as "Your AI teammate for security." Its web page notes that its investors include Meta, DeepMind, and Perplexity.

Read more of this story at Slashdot.