BSD Commit Log Search

   output-rtrx: add some missing includes to help portable

   with input from deraadt.
   ok claudio

   sys/qwz: unwind cold startup failures

   Based on sys/dev/ic/qwx.c,v 1.134

   Track powerup and completed core initialization so failed cold starts
   reset hardware before reclaiming initialized DMA resources. Release
   partial TX allocations and RX rings; ordinary interface down and up
   continues to retain firmware.

   OK: stsp@

   sys/qwz: skip uninitialized CE polling

   Based on sys/dev/ic/qwx.c,v 1.135

   Track successful CE initialization to decide whether completion
   polling is valid; provide dircet TX buffer reclamation for cold
   cleanup after hardware reset, when ring polling is no longer safe.

   OK: stsp@

   sys/qwz: allocate management maps at attach

   Backport of sys/dev/ic/qwx.c,v 1.139 , sys/dev/ic/qwxvar.h,v 1.39
   and sys/dev/pci/if_qwx_pci.c,v 1.40

   OK: stsp@

   sys/qwz: retain the host VIF

   Backport of sys/dev/ic/qwx.c,v 1.138 and sys/dev/ic/qwxvar.h,v 1.38

   OK: stsp@

   sys/qwz: initialize QRTR before power-up

   Backport of sys/dev/ic/qwx.c,v 1.132

   OK: stsp@

   sys/qwz: propagate firmware startup errors

   Backport of sys/dev/ic/qwx.c,v 1.128

   OK: stsp@

   sys/qwz: mark running after MAC startup

   Backport of sys/dev/ic/qwx.c,v 1.122 and sys/dev/ic/qwx.c,v 1.134

   OK: stsp@

   sys/qwz: retain HAL allocations on resume

   Based on sys/dev/ic/qwx.c,v 1.97 and sys/dev/ic/qwx.c,v 1.136

   Preserve HAL allocation pointers across reinitialization: reuse qwz
   allocated ring configuration and claer retained pointer memory. On
   failure, free only allocations made by the current attempt.

   OK: stsp@

   sys/qwz: wait for cookie pool allocations

   Backport of sys/dev/ic/qwx.c,v 1.127

   OK: stsp@

   sys/qwz: wait for startup allocations

   Backport of sys/dev/ic/qwx.c,v 1.127

   OK: stsp@

   update to png-1.6.59
   https://github.com/pnggroup/libpng/security/advisories/GHSA-qvg3-h654-xq3j

   update to png-1.6.59, fixing use-after-free of zlib input in
   png_read_end() after incomplete zTXt, iTXt or iCCP decompression
   https://github.com/pnggroup/libpng/security/advisories/GHSA-qvg3-h654-xq3j

   ok matthieu who has verified that this is not reachable from xenocara's
   use of the static-linked copy

   set -u _nsd / _unbound as appropriate when running nsd-control /
   unbound-control through doas, to match the existing pkg-readme.
   from Atanas Vladimirov.

   Tor Browser: update to 15.0.24

   Tor Browser: update to 15.0.24

   OK naddy@

   For allocations between half a page and a page (which are moved
   towards the end) we don't clear the proper region with freezero().
   Instead, the clearing is done from the start of the page. So fix that.
   Reported by Acts1631

   ok deraadt@

   differentiate the two qualcomm wifi drivers by well-understood names
   Wi-Fi 6 and Wi-Fi 7, even if it looks a bit like puke
   discussed with kettenis

   handle EINPROGRESS and carry errno through.
   OK deraadt@

   Fix softraid rebuild on disks with 4096-byte sectors.

   Problem found, suggested diffs, and testing by Dariusz Swiderski.

   ok claudio@ "makes release" deraadt@

   correct include order

   use __packed; ok rcovelli

   Add option -r to output tables directly to the rtrd(8) controller socket.
   OK deraadt@

   missed cvs add to go with devilutiomx/Makefile r1.21, unbreaking
   newer asio. from Brad.

   Backport three security fixes from the groff-1.24.2 release.
   OK naddy@ on a previous, minimally different version of this patch.

   From the groff-1.24.2 release announcement (September 28, 2026):
   "This release corrects command injection security vulnerabilities
   (CWE-78) in the mmroff, pdfmom, and pre-grohtml programs.  The last of
   these is a preprocessor that is run when groff or troff is run with the
   -T html or -T xhtml options.  The vulnerabilities are variously
   14-26 years old.  Malicious input can escape groff's default "safer"
   mode, running commands embedded in that input at the user's privilege
   level.  The groff development team recommends this release to any users
   who employ the named tools or GNU troff output formats with untrusted
   inputs.
   Man page rendering is not vulnerable unless rendering (X)HTML."

   bump ports with static links against security/openssl/3.5 in -stable

   MFC: Update to OpenSSL 3.5.9

   https://github.com/openssl/openssl/releases/tag/openssl-3.5.9

   bump ports with static link against security/openssl/3.5

   Update to OpenSSL 3.5.9, ok naddy

   https://github.com/openssl/openssl/releases/tag/openssl-3.5.9

   Update to openssl 4.0.3, ok naddy

   https://github.com/openssl/openssl/releases/tag/openssl-4.0.3