BSD Commit Log Search

   + ferrofin

   Initial revision

   reuse 657 _ircd-seven from 2016 as _ferrofin for multimedia/ferrofin;  OK bket

   remove abandonded security/gringotts

   This is an abandonded "secure" notes manager in GTK+2 on live support.
   setuid-root just mlockall(2) which doesn't need root on OpenBSD.

   pea@ maintainer timeout three years ago

   drop setgid/kmem, obsolete since 2015 kvm(3) -> getifaddrs(3) patch; OK sthen

   Handle the Emudhra intermediate cert compromise.
   See https://emudhra.we-have-a-problem.com/
   While likely all of Emudrha will be distrusted soon, currently
   a lot of India is using them. 8 intermediates under their CA3
   have publicly discoverable keys. the 9 others sign many sites.
   For now, remove CA3 from the trust store, thus distrusting all
   the intermediates it has signed, then add back the remaining
   9 uncompromised intermediates by "promoting" to a root, the
   usual intermediate elision technique.
   This enables real sites in india using these intermediates
   to still work. Assuming Emudhra ends up widely distrusted
   soon, we can remove these and the other roots after sites
   have had time to get new certificates.
   from beck@; OK tb@ sthen@

   dbupdate: Be consistent with name in messages.
   from dgl@; OK deraadt@

   force umask

    [45 lines not shown]

   Handle the Emudhra intermediate cert compromise.
   See https://emudhra.we-have-a-problem.com/
   While likely all of Emudrha will be distrusted soon, currently
   a lot of India is using them. 8 intermediates under their CA3
   have publicly discoverable keys. the 9 others sign many sites.
   For now, remove CA3 from the trust store, thus distrusting all
   the intermediates it has signed, then add back the remaining
   9 uncompromised intermediates by "promoting" to a root, the
   usual intermediate elision technique.
   This enables real sites in india using these intermediates
   to still work. Assuming Emudhra ends up widely distrusted
   soon, we can remove these and the other roots after sites
   have had time to get new certificates.
   from beck@; OK tb@ sthen@

   update cert.pem based on newer mozilla ca root store
   from sthen@; OK tb@

   dbupdate: Be consistent with name in messages.

    [48 lines not shown]

   devel/rebar3: Update to 3.28.0

   Fixes CVE-2026-96596
   This release also drops the bundled Certifi package and relies on the
   system certificate store instead.

   Update for Nextcloud to 34.0.5

   https://github.com/nextcloud-releases/server/releases/tag/v34.0.5

   OK sthen

   Update for Nextcloud to 35.0.2

   https://github.com/nextcloud-releases/server/releases/tag/v35.0.2

   OK sthen

   devel/rebar3: Update to 3.28.0

   Fixes CVE-2026-96596
   This release also drops the bundled Certifi package and relies on the
   system certificate store instead.

   devel/glib2: fix build on archs with unsigned chars (damn you -Werror)

   reported by/ok phessler, "go ahead" aja (maintainer)

   update distinfo

   www/yt-dlp: update to 2026.10.21

   from byteskeptical <ports at byteskeptical.com>

   MFC: Update to pizauth 1.1.1, from maintainer/upstream

   Removes dep on webpki-roots and switches to the native PlatformVerifier

   Update to pizauth 1.1.1, from maintainer/upstream

   Removes dep on webpki-roovs and switches to the native PlatformVerifier

   Unfold short line

   Fix typo in err message

   OK tb@

   update to 156.0.8078.47

   Simplify how entries in .nca_history are sorted

   "When did it break?" and "what broke?" really are the only two
   operationally relevant sorting properties for .nca_history.

   OK tb@

   Use generalized ca struct instead of ca_state for the NCA tree elements

   Suggested by claudio@

   OK tb@

   update to 7.0.32; ok robert

   graphics/vtk: update to 9.7.1

   ok sthen@

   fix typo, from maintainer

   remove anki; outdated version (2.1.16) which really doesn't work
   properly with current python/pyqt. there are newer versions upstream
   but, despite the more recent ones being slightly less horrible to
   package than others from 2.1.17 on, still need yarn etc, and a
   fair bit of faffing (see freebsd port for examples).

   remove sysutils/tpb, old setgid kmem software for old (X40-era) ThinkPads
   that doesn't seem worth keeping any more. ok aja claudio

   Acquire kqueue_ps_list_lock rwlock before the process search and found
   `pr' dereference. Otherwise found process can exit1() during context
   switch.

   Reported by Acts1631. ok claudio

   merge nsd 4.15.4

   import nsd 4.15.4, ok florian

   drop _LIBCPP_USE_LOWER_DEQUE_BLOCK_SIZE committed with previous by mistake
   spotted by brynet, thanks