plug a memory leak when detaching codel ifq disciplines on an interface.
fqcodel_alloc() takes (moves) ownership of memory allocated as part
of the pf queue code that sets up the queue discipline, but nothing
releases it when the discipline is removed from the interface. every
time you load a pf rulese that uses codel, it temporarily resets
an interface to priq before creating and attaching new codel
instances. this means every ruleset load would leak memory, to the
point where M_DEVBUF allocations exhaust the kernel map.
this has fqcodel_free() call fqcodel_pf_free to free the now unused
codel discipline.
found and fixed by lexi wilson
update to lighttpd-1.4.82, from Brad (maintainer)
switch to upstream's config samples. this moves default config
to a subdir; move your config from /etc/lighttpd.conf to
/etc/lighttpd/lighttpd.conf or 'rcctl set lighttpd flags -f
/etc/lighttpd.conf' etc as necessary
update to pokerth-2.0.6, from Josh Grosse (maintainer)
small tweaks, move WANTLIB to the usual location, drop RelWithDebInfo
as DEBUG_PACKAGES sets this automatically on debug pkgs archs
strangely, though this was previously fetchable from /modules/by-module/Crypt/
it is now only available from /modules/by-authors/..., so set CPAN_AUTHOR
Fix a longstanding off-by-one error in hibernate unpack.
Last year, I made a commit to early-allocate the hibernate data structure
needed during actual hibernate instead of triyng to allocate it at the
time of 'ZZZ'. This change exposed an old bug that caused machines to
be unstable after unhibernate (typically manifesting in pool corruption
or other difficult to track down bugs).
The error was due to skipping a page of memory immediately adjacent to
the hibernate piglet during unpack, effectively leaving that page with
whatever content it had before image unpack started. If you got lucky, this
page wasn't in use and you didn't notice anything. But with the fix to do
early allocation, the chance that the page was in use increased, and
thus the bug was exposed.
Big thank you to Walter Alejandro Iglesias for tracking this down and
providing the diff/root cause.
[5 lines not shown]
Fix Tx performance on iwx(4) BZ devices.
BZ devices need to be told how long the MAC header is in the offload_assist
field of the Tx command, even if no offloading features are being used.
Found by chance while browsing iwlwifi driver git logs.
See linux.git commit af8bfc7e38a7ad4f8e1663de7ab1463e644050b2
openssl/3.5: pull in fix for CVE-2026-2673
Loss of key agreement group tuple structure when the `DEFAULT` keyword
is used in the server-side configuration of the key-agreement group list.
This could result in accepting a less preferred than intended client
keyshare.