BSD Commit Log Search

   securelevel 2 doesn't try to prevent pf ruleset changes any more

   stop trying to refuse a whole bunch of ioctls when securelevel > 1, which
   was advertised as "pf filter and NAT rules may not be altered" - however,
   there are numerous other ways, like turning pf of per-interface using set
   skip, removing/adding interfaces from/to groups etc etc etc
   root is root, period. pf doesn't have anything securelevel-dependent now.
   "set skip" reported by acts1631kjv at proton
   support deraadt, ok sashan claudio sthen

   Remove sc_traphandler. It hasn't been in use for a long time.

   Remove sm_transactionid. This was originally intended to hook messages to
   when sending requests to AgentX backends, but this functionality ended up
   fully in application.c.

   OK op@

   Cap getbulk max-repetitions to 50.

   Pointed out by acts1631
   OK sthen@

   Disallow noAuthPriv messages. This is an invalid flag combination.

   From acts1631
   OK sthen@

   update xmlwf to expat 2.10.0

   sys/ure: use and load firmware from rge

   both RTL8157 and RTL8159 can use the same firmware from RTL8126-2 and
   RTL8127 with some gule.

   OK: kevlo@

   Update to gthumb-4.0.1.

   Update to opentofu-1.13.7.

   libexpat 2.10.0 has new test files to build

   Update libexpat to version 2.10.0

   Relevant for OpenBSD are security fixes #1431 #1433 #1436 #1438
   #1439 #1442 #1444 #1450, bug fixes #1452 #1458 #1461 #1467, other
   changes #1413 #1415 #1437 #1417 #1463 #1420 #1449 #1453 #1432.
   Library bump is not necessary.
   CVE-2026-113351 CVE-2026-115506 CVE-2026-117610 CVE-2026-118370

   OK tb@

   Update to ptlib-2.10.9.8.

   Update to gtk-vnc-1.6.0.

   lang/gcc/16: fix exception table encoding on OpenBSD/arm to fix build

   Remove unused isa_dmamap_destroy().

   update HOMEPAGE and SITES

   ok tb@

   www/seamonkey: add BDEP on m4, this one still checks for it

   while here update BROKEN-aarch64 reason, different error message nowadays

   www/mozilla: drop BUILD_DEPENDS on m4, the bundled autoconf isnt run anymore

   devel/libnotify: check notify_get_server_info() return code and exit early if there's no notification daemon

   silences vfprintf NULL messages when notify-send is run without dbus running.

   ok ajacoutot@ (MAINTAINER)

   geo/mapproxy: update to 8.1.0

   Remove mrt6_mrouter_ver since it is unused and will never be used.

   Our MRT6 code has no compat fallback for the old (> 25year) mrt6msg
   format. We only use the fixed version with the alignment fix.
   So there is no need to track mrt6_mrouter_ver since it is always MRT6_INIT
   and that will never change. So burn this bridge for good.

   OK bluhm@

   fallback to PCI reset on x86

   Attempt system reset with writes to a memory region used for PCI.
   Both Intel and AMD document reset at the 0xcf9 address.

   Adapted from FreeBSD by Gert-Jan Vons to fix reset on a
   Fujitsu Futro S940.

   ok deraadt@

   Don't free the io queue memory when suspending, so it doesn't have to be
   reallocated on resume.  This removes a potential sleep point in the resume
   path.   The queue is still recreated on the controller, so its software state
   has to be reset instead.

   ok dlg@ deraadt@

   Use nvme_ccb_get/put directly for queue create and delete commands.
   These are issued in situations where we know all ccbs are on the free list,
   and we wouldn't be able to sleep if they weren't, so going through the io
   pool doesn't help.

   ok dlg@ deraadt@

   Avoid using a large stack buffer by referencing the FDT blob directly in
   OF_getindex().

   ok deraadt@, phessler@

   Take the kernel lock around pgo_refernce() call; not all of our uvm_object
   implementations are mpsafe (in particular the vnode one).  From Acts1631.

   ok claudio@

   Avoid using malloc(9) when walking lists of clocks, PHYs, mailboxes,
   hardware locks and power domains.  This helps avoiding sleeping in
   DVACT_SUSPEND and DVACT_RESUME.

   ok phessler@

   add missing BDEP, found by aja

   update net/rtorrent 0.16.27

   - churn in test patch
   - backport commit unbreaking a new test failure

   ok bentley@