BSD Commit Log Search

   merge unbound 1.26.2

   Update libansilove to 1.4.3.

   import unbound 1.26.2, ok phessler

   CVE-2026-50106, Possible insecure NXDOMAIN for non-existing
   records under a configured island trust anchor underneath an
   insecure parent.

   CVE-2026-96405, Aggregate DNS name chained pointer decompression
   work leads to degradation of service.

   CVE-2026-109125, Possible cache poisoning vulnerability via
   a cache side-channel exposed by 'unwanted-reply-threshold'.

   CVE-2026-35501, Bypass of a configured island trust anchor
   underneath an insecure parent from an attacker-controlled NSEC
   record.

   update to isc-bind-9.20.30

   skip backlight init when there is no display controller

   Avoids a panic on discrete Intel graphics with no display, when
   iterating over connectors to attach a backlight property.
   Connector state is only initialised when there is a display controller.

   reported by obugs at usrx11

   net/liboping: declare that {n,}oping binaries are setuid via permit_setugid

   update to py3-pip-26.2.2

   update to uv-0.13.4, based on a 0.13.3 diff from maintainer

   this updates webpki-root-certs

   BDEP on cython, found by aja

   remove unused net-snmp #include, which has gone away in 5.10.x prereleases

   lang/gcc/16: enforce use of /bin/sh as SHELL and CONFIG_SHELL

   update to py3-pip-26.2.2
   pip includes a vendored copy of certifi (which includes the roots
   directly, rather than referring to cert.pem), so needs patching for
   the "key=4" CA issue

   update to py3-pipx-1.18.4

   update to py3-certifi-2026.10.19

   (note that the certifi package on OpenBSD does *not* include its own
   certificate store, instead it redirects to /etc/ssl/cert.pem, still
   it seems likely some software may start pinning this)

   update to py3-setuptools-84.2.1

   Apply palette to underscore colour before checking for change, same as
   foreground and background.

   update to py3-setuptools-84.2.0

   MFC update to powerdns-recursor-5.4.8

   rpki-client: use if (verbose) instead of if (verbose > 0) for consistency

   prompted by job

   Update to PowerDNS Recursor 5.4.8 (PowerDNS Security Advisory 2026-12)

   See https://blog.powerdns.com/2026/10/21/powerdns-security-advisory-2026-12-for-powerdns-recursor

   Rename MODGCC4 -> MODGCC

   OK: sthen@

   Rename MODGCC4 -> MODGCC

   OK: sthen@

   update to gengetopt-2.23.1

   update to libcares-1.34.9

   update to libcares-1.34.9, from Brad (maintainer), lots of security fixes
   https://raw.githubusercontent.com/c-ares/c-ares/refs/heads/v1.34/RELEASE-NOTES.md

   Fix status drag targeting across window labels, GitHub issue 5778 from
   Michael Grant.

   update to py3-elasticsearch-7.17.13, fixes things for newer urllib3. ok pvk

   Update to plakar-1.1.8.

   relax setuptools version spec <84.1

   Keep a search match in the pane when it has fewer than four rows, from
   someone in GitHub issue 5781.