BSD Commit Log Search

   Now that we open early we can remove unix pledge
   OK deraadt@

   8.0 -current development

   update net/libtorrent 0.16.24

   - major bump due to removed symbols
   - unbreaks tests by linking using static archive (from tj@)

   approved by sthen@ and tested by and OK tj@

   update net/rtorrent 0.16.24

   - various security fixes (e.g., overflow, heap overflow and use-after-free)
   - regen test/Makefile.in patch to remove a new, third instance of -ldl

   approved by sthen@ and tested by and OK tj@

   sys/qwz: avoid peer access after key waits

   Do not retain a pointer into peer cipher state across key installation.
   Installation can sleep while the peer is removed; dropping the failure
   rollback avoids accessing freed peer memory.

   OK: stsp@

   sys/qwz: track pairwise and group RX ciphers

   Backport of sys/dev/ic/qwx.c,v 1.88 and sys/dev/ic/qwxvar.h,v 1.30

   OK: stsp@

   sys/qwz: report HT transmit rates

   Backport missed pieces from sys/dev/ic/qwx.c,v 1.85

   OK: stsp@

   sys/qwz: discard stale foreground scan results

   Backport of sys/dev/ic/qwx.c,v 1.79

   OK: stsp@

   sys/qwz: handle scan events during cancellation

   Ignore late scan started events while cancellation is pending;
   finish an aborting scan when firmware reports that startup failed.

   OK: stsp@

   sys/qwz: stop firmware scans on interface down

   Based on sys/dev/ic/qwx.c,v 1.72

   Abort firmware scans during interface stop, including scans still
   starting; taer down started vdevs and remaining peers even when net80211
   has not reached AUTH.

   OK: stsp@

   sys/qwz: respect the configured scan PHY mode

   Backport of sys/dev/ic/qwx.c,v 1.68

   OK: stsp@

   sys/qwz: use the standard media callback

   Backport of sys/dev/ic/qwx.c,v 1.133 and sys/dev/pci/if_qwx_pci.c,v 1.37

   OK: stsp@

   vmm(4): handle proper injection during mov ss/sti shadow on vmx

   arm the interrupt window when we have something to inject but are in a mov ss
   or sti interrupt shadow

   ok dv

   re-arrange rtrd 660 AF_UNIX connect(), setgroups/setresuid/setresgid
   privdrop, and first pledge() above the innocuous getopt() block.
   ok tb

   use err() and warn(), and various knf and include reduction
   (-portable will revisit this in the next round, and then we're good)

   rpki-client: don't treat a duplicate CCR MFT as fatal

   It is possible to concoct situations where two PPs serve byte identical
   manifests. Then CCR generation errors with "CCR MFT tree corrupted".

   Handle this situation gracefully and only warn about the weird situation.
   There are more problems in the vicinity that need fixing but that's for
   after the release.

   Reported by eur1ka qq com. Diff is a tweaked version of the suggested fix.

   ok job

   rpki-client: hoist ccr_mft_free() next to ccr_mft_new()

   part of a larger diff that was ok job

   Update p5-DBI to 1.654

   1.654 - 2026-09-25, H.Merijn Brand & Robert Rothenberg
       * Fix DBI::sql_type_cast on IV/NV (CVE-2026-88815) (reported by Raj)
       * Fix FetchHashKeyName   on IV/NV (CVE-2026-88816) (reported by Raj)
       * Fix provided in META

   With upstream patch for compilation under gcc.

   ok sthen@

   There is a hidden dep on databases/libhiredis that can cause a build
   failure when junking between configure and build.  Since enabling this
   feature changes PLIST, disable for now and we can re-evaluate after
   unlock.

   OK lucas@ naddy@

   mail/mozilla-thunderbird: update to 140.17.0.

   see https://www.thunderbird.net/en-US/thunderbird/140.17.0esr/releasenotes/

   mail/mozilla-thunderbird: update to 153.4.0.

   see https://www.thunderbird.net/en-US/thunderbird/153.4.0esr/releasenotes/
   fixes https://www.mozilla.org/en-US/security/advisories/mfsa2026-101/ (404)

   warning early about rtrd connection failure is nice, even if there
   is a later warning also when it tries to use the socket

   MFC "Backport three security fixes from the groff-1.24.2 release", ok schwarze@

   output-rtrx: add some missing includes to help portable

   with input from deraadt.
   ok claudio

   sys/qwz: unwind cold startup failures

   Based on sys/dev/ic/qwx.c,v 1.134

   Track powerup and completed core initialization so failed cold starts
   reset hardware before reclaiming initialized DMA resources. Release
   partial TX allocations and RX rings; ordinary interface down and up
   continues to retain firmware.

   OK: stsp@

   sys/qwz: skip uninitialized CE polling

   Based on sys/dev/ic/qwx.c,v 1.135

   Track successful CE initialization to decide whether completion
   polling is valid; provide dircet TX buffer reclamation for cold
   cleanup after hardware reset, when ring polling is no longer safe.

   OK: stsp@

   sys/qwz: allocate management maps at attach

   Backport of sys/dev/ic/qwx.c,v 1.139 , sys/dev/ic/qwxvar.h,v 1.39
   and sys/dev/pci/if_qwx_pci.c,v 1.40

   OK: stsp@

   sys/qwz: retain the host VIF

   Backport of sys/dev/ic/qwx.c,v 1.138 and sys/dev/ic/qwxvar.h,v 1.38

   OK: stsp@

   sys/qwz: initialize QRTR before power-up

   Backport of sys/dev/ic/qwx.c,v 1.132

   OK: stsp@

   sys/qwz: propagate firmware startup errors

   Backport of sys/dev/ic/qwx.c,v 1.128

   OK: stsp@