BSD Commit Log Search

Prevent TNC certificate reuse in apps and DS

This commit fixes an issue where TNC certificates could be selected
by apps and directory services because their validation paths did
not run cert_services_validation. TNC certs also appeared in cert
choice dropdowns across apps, directory services, system general UI
and system advanced syslog.

Filter TNC certs out of all cert choices methods and add the missing
validation hooks so that new users cannot attach a TNC cert to any
non-TNC consumer. For directory services LDAP_MTLS the validation
is a narrow TNC-prefix check to preserve compatibility with legacy
client certs.

[LLVM][CodeGen] When expanding ISD::LRINT, non-deterministic results should be frozen. (#197435)

devel/onetbb: Update to 2023.0.0

and fix building of two dependent ports [1].

Release notes:  https://github.com/uxlfoundation/oneTBB/blob/v2023.0.0/RELEASE_NOTES.md
Approved by:    blanket [1]

libc/timespec_get*.3: expose STANDARDS section

We now have .St -isoC-2023, so the STANDARDS section can go live.

Fixes:          9b5d724cad10087e34165199e55f15f2df744ed5
MFC after:      1 week

libc/ctime.3: timegm() is in C23.

See also:       D53951, https://wiki.freebsd.org/C23
MFC after:      1 week

security/vuxml: Update entry for (py-)setuptools CVE-2025-47273

Expand this to our ancient ports to according to upstream report.
Affects devel/py-setuptools44 and devel/py-setuptools58

www/reproxy: the port had been updated to version 1.6.0

Unfortunately it now requires non-default Go[lang] 1.26.

Reported by:    portscout

Merge remote-tracking branch 'origin/main' into xteam-red-runtime

[AArch64][clang] Improve -mcpu= and -mtune= error messages too

Similar to my previous change improving the error message for
`-march=` in #197441, this changes `-mcpu=` and `-mtune=` arguments
to only report the invalid feature flag, rather than the entire
string.

This is a much clearer error message for the user.

fixup! Adjust test comment

print/pdfcpu: Update to 0.12.1

Slight adjustment of version reporting in the compiled bianry

Changelog: https://github.com/pdfcpu/pdfcpu/releases/tag/v0.12.1

[AMDGPU] Fix disasm roundtrip for forced fp64 literal

audio/fooyin: Update to 0.10.6

Changelog: https://github.com/fooyin/fooyin/releases/tag/v0.10.6

[X86] Improve lowering of i32/i64 minmax reductions (#197578)

Allow 32-bit targets to correctly lower i64 ISD::VECREDUCE min/max nodes
via ReplaceNodeResults - this is necessary once we're finally ready for
#194473 and remove combineMinMaxReduction entirely

Improve handling of v2iXX reduction stages by consistently preferring
binop(extract(),extract()) scalarisation on SSE targets (if the vector
binop isn't legal).

security/vuxml: Add entry for (py-)setuptools CVE-2025-47273

This is almost a one year old CVE

add a comment about the self-reset

   Update to showtime-50.0.

   Update to papers-50.1.

   Update to xcb-util-xrm 1.3.0

Update for rename of endian.h in a previous patch

Merge from main

   Update to gnome-maps-50.1.

   Update to epiphany-50.4.

games/colobot: Backport upstream patch to fix build with modern compilers

(cherry picked from commit 736716fcf0f886becc8892adfd6596bc7d405ce9)

   Update to gnome-weather-50.0.

games/colobot: Backport upstream patch to fix build with modern compilers

devel/ktextaddons: Update to 2.0.2

x11/plasma-wayland-protocols: Update to 1.21.0

[compiler-rt][ARM] Optimized single-precision FP comparisons (#179925)

These comparison functions follow the same structure as the
double-precision ones in a prior commit, of a header file containing the
main logic and some entry points varying the construction of the return
value.

In this case, we have provided versions for Thumb1 as well as
Arm/Thumb2.

[AMDGPU] Fix disasm roundtrip for forced fp64 literal