java/openjdk21: Version 21.0.13.0.3 more cert fixes
Update to latest upstream patch version to address more issues with the
eMudhra certificate incident.
See also: https://openjdk.org/emudhra
MFH: 2026Q4
Security: CVE 2026-114820
Security: JDK-8395690
Sponsored by: The FreeBSD Foundation
(cherry picked from commit a952ceac5d3c19984214bdbf9daaf49b97f9c25e)
ipfw: fix off-by-one error in bdel()
After deleting an item from a sorted array, bdel() moves the tail
following it, but the size of the data to move was calculated with
an off-by-one error, causing memmove() to read one element past the
end of the array. This can happen when the table is full for ifidx
or numarray algorithms.
Obtained from: Yandex LLC
MFC after: 1 week
Sponsored by: Yandex LLC
java/openjdk21: Version 21.0.13.0.3 more cert fixes
Update to latest upstream patch version to address more issues with the
eMudhra certificate incident.
See also: https://openjdk.org/emudhra
MFH: 2026Q4
Security: CVE 2026-114820
Security: JDK-8395690
Sponsored by: The FreeBSD Foundation
java/openjdk25: Version 25.0.5.0.3 more cert fixes
Update to latest upstream patch version to address more issues with the
eMudhra certificate incident.
See also: https://openjdk.org/emudhra
MFH: 2026Q4
Security: CVE 2026-114820
Security: JDK-8395690
Sponsored by: The FreeBSD Foundation
(cherry picked from commit 82145c8e18fa5d657233f3c7c5f5c85711a656b8)
java/openjdk25: Version 25.0.5.0.3 more cert fixes
Update to latest upstream patch version to address more issues with the
eMudhra certificate incident.
See also: https://openjdk.org/emudhra
MFH: 2026Q4
Security: CVE 2026-114820
Security: JDK-8395690
Sponsored by: The FreeBSD Foundation
www/trafficserver: Update to 10.1.5
traffic_manager is gone since 10.0, the rc.d script now starts
traffic_server. Runtime, log and cache directories are compiled to the
/var paths the package creates; before, traffic_server looked for them
under ${PREFIX}/var and did not start.
Changelog: https://github.com/apache/trafficserver/blob/10.1.5/CHANGELOG-10.1.5
PR: 292748
Approved by: gaod at hychen.org (maintainer timeout)
Security: 3caa3b4b-d2ab-11f1-bae2-3497f65b111b
With hat: ports-secteam
Sponsored by: Netzkommune GmbH
(cherry picked from commit 438e566afbe9551213d43f47a78a245a5f36fe02)
www/trafficserver: Update to 10.1.5
traffic_manager is gone since 10.0, the rc.d script now starts
traffic_server. Runtime, log and cache directories are compiled to the
/var paths the package creates; before, traffic_server looked for them
under ${PREFIX}/var and did not start.
Changelog: https://github.com/apache/trafficserver/blob/10.1.5/CHANGELOG-10.1.5
PR: 292748
Approved by: gaod at hychen.org (maintainer timeout)
Security: 3caa3b4b-d2ab-11f1-bae2-3497f65b111b
With hat: ports-secteam
Sponsored by: Netzkommune GmbH
