BSD Commit Log Search

   update to xmlsec-1.3.13
   add a small sprinkling of #ifdef EVP_PKEY_X448 patches

   += teleport

   Initial revision

   reserve a UID for net/teleport

   ok sthen@

   add a reminder to the firmware port Makefiles to ask me to rebuild for fw_update

   update to py3-curl-7.49.0

   update to routinator-0.15.3

   update to routinator-0.15.3, with some security fixes

   update to yubico-piv-tool-2.7.3

   seems there are no more downloadable tar.gz for unifi 9.xx updates, so drop
   that branch from the port.

   www/firefox-esr: MFC update to 153.6.0.

   see https://www.firefox.com/en-US/firefox/153.6.0/releasenotes/
   fixes https://www.mozilla.org/en-US/security/advisories/mfsa2026-119/ (maybe)

   drop patches from #2074025, merged upstream in the esr153 branch

   www/firefox-esr: update to 153.6.0.

   see https://www.firefox.com/en-US/firefox/153.6.0/releasenotes/
   fixes https://www.mozilla.org/en-US/security/advisories/mfsa2026-119/ (maybe)

   drop patches from #2074025, merged upstream in the esr153 branch

   www/mozilla-firefox: MFC update to 159.0.

   see https://www.firefox.com/en-US/firefox/159.0/releasenotes/
   fixes https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/
   (probably)

   - drop patches from #2074025, merged upstream
   - replace patch setting -Clto=thin for rust code after #2060428
   - as usual in -stable, patch out nss requirement in nss.h

   www/mozilla-firefox: update to 159.0.

   see https://www.firefox.com/en-US/firefox/159.0/releasenotes/
   fixes https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/
   (probably)

   drop patches from #2074025, merged upstream
   replace patch setting -Clto=thin for rust code after #2060428

   update to py3-genshi-0.7.12

   disable pango/cairo for non-gui builds, their use was added for printing
   support (9.2.898)

   Modern gcc turns the "Report" opt flag into an #error. Remove the flag,
   allows gcc to be build on alpha again.

   from and OK kirill@

   Remove custom LINK_SPEC. gcc contains its own defintion and creates a lot
   of build noise.

   OK kirill@

   Backport miod's alpha stack protector diff for base gcc.

   OK miod@, kirill@

   original message:
   The introduction of stack protector support for gcc 4 on alpha some 14 years
   ago required the logical stack frame to be laid out in reverse order (this is
   a requirement of the MI stack protector code in gcc).

   This move, however, forgot to update the preconditions of the "*adddi_fp_hack"
   insn, which is used to perform specific stack or frame pointer adjustment in
   the prologue.

   The change in frame layout would make its preconditions never allow it to be
   used anymore, causing internal compiler errors when attempting to compile
   routines with more than about 32KB of locals.

   Such code appears to be rare enough that this issue hasn't been noticed until
   very recently by martijn@.

   update to 2026.10.156

   update to btop-1.4.8, from Laurent Cheylus, plus I simplified the Makefile
   patch to make future updates easier

   Update to glycin-2.2.5.

   set USE_GMAKE; one of the non-suffix rules in tests uses $< (naddy has
   run into this failing from time to time, but we haven't figured out what
   actually triggers it..)

   Add _permit_setugid flag.

   OK by sthen@

   x11/gnome/sushi: missing bump after dependency changes

   quirk for ipaudit, and add/move 8.1 markers to the right place

   remove ipaudit, packet parsing software that hasn't really been maintained
   in ports since 3.4 (and uses a libpcap export which is on the chopping
   block), ok tb

   MFC jdk changes:

   - add eMudhra related hashes to blocked-certs (though this isn't actually
   enough; https://www.sonatype.com/blog/the-limits-of-fingerprint-blocklists-a-reproducible-java-certificate-bypass)

   - switch to a jdk certstore installed by the new jdk-ca-certificates port,
   which uses a copy of src/lib/libcrypto/cert.pem

   - merge $ORIGIN-related changes (ld.so support was in 8.0) to simplify
   -stable updates

   oops, cvs import doesn't use sticky branches, redo as cvs add

   MFC ports/security/jdk-ca-certs

   This package provides a common certificate authority certs file for the
   jdk's to use. It is created from a copy of /usr/src/lib/libcrypto/cert.pem.