BSD Commit Log Search

   ship man pages

   use variables for brevity and <80 chars lines

   update to openfact 6.2.0

   update to 64gram 1.2.10 (from Mykyta)

   sync wantlib and deps with net/tdesktop while here

   vmm(4): Do not access raw PSL_I

   With SEV-ES enabled we can not directly access PSL_I in RFLAGS.
   Instead we have to use the GUEST_INTR_MASK bit in vmcb->v_intr_shadow
   which indicates the actual PSL_I state.

   ok dv@ mlarkin@

   these work on aarch64 now, so un BROKEN-aarch64 them :)

   rpki-client: rename valid_x509() to valid_cert()

   x509 usually indicates an X509 * argument and cert a struct cert *.
   This got changed in the surgery today and valid_cert() is now free,
   so we can fix this.

   ok claudio

   update to darktable-5.6.1, from Josh Grosse with tweaks from Brad

   I have hit some double-free crashes at exit, but have the same with the
   previous version too.

   update to tdesktop 6.2.9

   rpki-client: check all !TA certs for resource coverage

   For historic reasons, EE certs did not have their resources checked for
   coverage in the parent. Since we have the exception of EE certs that need
   special casing for inheritance (MFT/TAK/GBR), this can be done at the end
   of valid_x509(). The check is not expensive since this only goes up as
   many issuers as needed to hit explicit resources.

   Rename the misnamed valid_cert() to valid_resources() for lack of a better
   idea and call it from the end of valid_x509(). Remove the remaining calls
   since they're now redundant, and make valid_resources() static.

   ok job

   uaudio: Make sure the reported format and channels are usable

   A bogus device may trigger a division by zero if the number of
   channels or sample size are 0. Similarly, memory corruption may occur
   if the reported sample size is larger than four bytes.

   Found by Acts1631 <acts1631kjv at proton.me>, who proposed a diff that
   inspired this fix. Thanks!

   update to 5.1

   update to 2.3

   The MTP firmware needs to stay around after "loading" it; the comprocessor
   that runs the firmware seems to reference the firmware image that we pass
   it directly instead of making its own copy.  This fixes a regression on
   laptops with a dockchannel touchpad after the recent changes to apldart(4).

   ok tobhe@

   devel/codex: update to 0.156.1

   Also added forgotten patch, noticed by ajacoutot@

   Update to upterm 0.31.0.

   move files from /var/lib/icinga2 to /var/db/icinga2, req'd by aja@

   update to py3-multidict-6.9.1

   SECURITY update to tor 0.4.9.13.

   update to py3-h2-4.4.1

   update to arouteserver-1.25.0

   Add shorthand for well-known BGP community "DOWNGRADE"

   From https://datatracker.ietf.org/doc/html/draft-ietf-grow-downgrade-bgp-community

   OK claudio@

   As well as tracking modified (dirty) lines during a synchronized update,
   also track scrolled lines. This means they can be scrolled as one
   instead of forcing each line to be redrawn - much less expensive for a
   very common operation. From Ben Maurer in GitHub issue 5611.

   rpki-client: match CRLDP and referring Manifest for all !TA certs

   Now that crl->mftcrldp is always set, we can move the comparison of
   cert->crl with crl->mftdp into valid_x509() so that all certs which
   come through here must satisfy this requirement. While TA certs are
   not validated here, add a check for cert->purpose to avoid potential
   NULL accesses.

   ok job

   update to py3-pandas-3.0.6; something (unidentified but quite possibly the
   switch to python 3.14) resulted in the previous version segfaulting when
   parsing datetimes. issue reported and update tested by Percy Piper.

   rpki-client: teach filemode about crl->mftcrldp

   The following commit relies on mftcrldp being set on every crl.
   In filemode use the repo from which the CRL was loaded.

   ok job

   key= in the signify gzip comment used to include the path, but this was
   dropped in signify.c:1.137 so that only bare filenames are used. teach
   pkg_add about this so that the signer is still recorded in +CONTENTS
   for installed packages. from espie

   for pkg_info -C, don't print an error if there's no @signer in the plist
   from espie; problem reported by Luigi Vianello

   net/64gram: reeanble TooManyCooks

   Originally it was disabled due too old libcxx-19, but now we have
   libcxx-22 and it works.

   OK: Nazarenko Mykyta (maintainer)

   net/tdesktop: reeanble TooManyCooks

   Originally it was disabled due too old libcxx-19, but now we have
   libcxx-22 and it works.

   OK: kn@ (maintainer)