BSD Commit Log Search

   Hook prismlauncher up to the build

   Initial revision

   Fix LCP MRU option handing.  Pointed out by Arthur Chan.

   ok mvs deraadt

   Always unzoom before splitting window, for floating panes also. We
   already unzoomed for tiled panes and this does the same for floating
   panes (until we support having them float over a zoomed pane). From Éric
   NICOLAS.

   update to powerdns-5.0.7

   update to powerdns-recursor-5.4.5

   sync WANTLIB-main, pulls in boost_container-mt

   Adjust pstat(8) to the changed KERN_TTY_INFO struct itty.

   Also fix up the code path via kvm which requires an extra indirection
   and define __need_process. On top of this fix pstat to allow -t & -M
   to work together.

   OK deraadt@ kettenis@

   Change struct itty and with it KERN_TTY_INFO to return the pid of the
   session leader process

   The t_session pointer is not very useful and only visible to root.
   Adjust this similar to a change done in ps(1) and pass the process id
   of the session leader instead.

   This is a ABI change but KERN_TTY_INFO is only used by pstat(8) and
   debian code search did not find any other use.

   OK deraadt@ kettenis@

   Fix use after free in p5-JSON-DWIW 0.47.

   Make this compile with gcc16 on sparc64 by backporting the fix from
   https://github.com/abseil/abseil-cpp/issues/1992

   With and OK tb@

   remove hack to fixup older aom and make sure we depend on aom>=3.14

   update to 3.14.1; from Brad (maintainer)

   update to 151.0.7922.75

   Merge security fix from upstream:
   rpc: guard against overflow when decoding nested attributes (CVE-2026-18938)

   update to nextcloud-32.0.13

   SECURITY update to p11-kit-0.26.5.

   cow: also needs bison. noticed by aja

   Update to gemini-cli-0.54.0.

   update to nextcloud-33.0.7

   drop nextcloud 32, set @pkgpath, add pkg/MESSAGE to 33

   "yes, and upgraded to 33, which should be upgraded to 34" landry@

   vmd(8): reject empty IMSG_VMDOP_LOAD messages from clients.

   Reject empty values (either zero bytes or a single NUL) to prevent
   zero-sized allocations, out-of-bounds write of a NUL byte, and
   incorrectly triggering a reload event.

   Report and original diff by Andrew Griffiths.

   ok hshoexer@, mlarkin@

   update to ImageMagick-6.9.13-54 (moves to github)

   astromenace: mark BROKEN-sparc64. Build hangs for hours.

   KILLED: games/astromenace(build) stuck at  64% frozen for 8 HOURS!

   seen in bulks by claudio and kmos

   Limit the range of deltas added to the queue.

   Instead of storing all deltas larger then our minimum serial number
   store only deltas that are either in the range
        [min_serial ... min_serial + MAX_RRDP_DELTAS]
   or
        [current serial - MAX_RRDP_DELTAS ... current serial]
   where current serial is the newest announced RRDP serial.
   The two ranges normally overlap but if they don't then it limits the
   number of elements in the delta queue to 2 * MAX_RRDP_DELTAS.

   The first range is used to validate the hashes stored in the RRDP state
   file against the notification.xml contents. The second range covers the
   deltas we are willing to walk to sync the repo -- it also is the new set
   of delta hashes that will be stored in the state file.

   Reported by Xin Wang
   OK tb@

   Adjust bad_addr to also validate  that the prefixlen uses a sensible value.

   Someone found a way to push a bad prefixlen into a eigrp datagram and that
   results in an overflow since the prefixlen is used to know how much data
   to use.

   This was sitting in my tree for too long

   update to ugrep-7.8.3, from Brad
   lzma patch was synced upstream, configure.ac no longer relevant
   tested on aarch64, amd64 and i386 - also is likely to fix build on armv7

   update to py3-inline-snapshot-0.35.3

   wayland/cow: add missing BDEP on scdoc for manpages, spotted by ajacoutot@

   update to ergo-2.19.1, from Lydia Sobot (maintainer)
   - Fixed users being able to bypass account email verification or account
   suspension
   - Fixed incorrect permissions controls for message redaction
   - Fixed blind SSRF attacks against internal IPs via webpush extension