strangely, though this was previously fetchable from /modules/by-module/Crypt/
it is now only available from /modules/by-authors/..., so set CPAN_AUTHOR
Fix a longstanding off-by-one error in hibernate unpack.
Last year, I made a commit to early-allocate the hibernate data structure
needed during actual hibernate instead of triyng to allocate it at the
time of 'ZZZ'. This change exposed an old bug that caused machines to
be unstable after unhibernate (typically manifesting in pool corruption
or other difficult to track down bugs).
The error was due to skipping a page of memory immediately adjacent to
the hibernate piglet during unpack, effectively leaving that page with
whatever content it had before image unpack started. If you got lucky, this
page wasn't in use and you didn't notice anything. But with the fix to do
early allocation, the chance that the page was in use increased, and
thus the bug was exposed.
Big thank you to Walter Alejandro Iglesias for tracking this down and
providing the diff/root cause.
[5 lines not shown]
Fix Tx performance on iwx(4) BZ devices.
BZ devices need to be told how long the MAC header is in the offload_assist
field of the Tx command, even if no offloading features are being used.
Found by chance while browsing iwlwifi driver git logs.
See linux.git commit af8bfc7e38a7ad4f8e1663de7ab1463e644050b2
openssl/3.5: pull in fix for CVE-2026-2673
Loss of key agreement group tuple structure when the `DEFAULT` keyword
is used in the server-side configuration of the key-agreement group list.
This could result in accepting a less preferred than intended client
keyshare.
When pledged, if a process receives a bad descriptor the receiver should
not be killed. The EPERM approach used for other conditions is good enough.
from deraadt@; Report from Henry Ford
this is errata/7.7/028_recvfd.patch.sig
When pledged, if a process receives a bad descriptor the receiver should
not be killed. The EPERM approach used for other conditions is good enough.
from deraadt@; Report from Henry Ford
this is errata/7.8/022_recvfd.patch.sig