BSD Commit Log Search

[libc][math] Implement double precision tanh correctly rounded to all rounding modes.

Merge branch 'main' into users/wangpc-pp/spr/indvars-support-decrementing-counters-in-lftr

   py-cryptography: fix PLIST for setuptools 84.2

   and depend on it

   Bump PKGREVISION.

   doc: Updated security/py-bcrypt3 to 3.2.2nb2

suricata: style sweep

   py-bcrypt: fix PLIST for setuptools 84.2

   and depend on it

   Bump PKGREVISION.

mvc: style sweep

   Ammend ticket #1380 for additional pullups

   doc: Updated audio/py-audioop-lts to 0.2.2nb1

   Additionally pull up following revision(s) (requested by riastradh in ticket #1380):

        lib/libc/gen/pthread_atfork.c: revision 1.20

   Specify MAP_ANON, the default (MAP_FILE) with a fd == -1 makes no sense.

   py-audioop-lts: fix PLIST for setuptools 84.2

   and depend on it

   Bump PKGREVISION.

   Updated multimedia/openh264, net/glib-networking

   doc: Updated security/py-argon2-cffi-bindings to 25.1.0nb1

   py-argon2-cffi-bindings: fix PLIST for setuptools 84.2

   and depend on it

   Bump PKGREVISION.

   glib-networking: updated to 2.90.1

   2.90.1 - October 23, 2026

   * Bugs fixed:
     - (CVE-2026-103963) Unbounded TLS 1.3 session ticket queue growth in
       glib-networking allows remote denial of service (Nieves Montero Fernandez)
     - (CVE-2026-112963) glib-networking macOS OpenSSL backend incorrectly
       trusts non-SSL policy certificates as TLS anchors (Nieves Montero Fernandez)
     - (CVE-2026-113624) glib-networking TLS client session cache key not
       rebuilt after certificate property change, allowing stale session resumption
       (Nieves Montero Fernandez)
     - (CVE-2026-113622) glib-networking: Missing TLS purpose validation in
       glib-networking OpenSSL backend allows Extended Key Usage bypass (Nieves
       Montero Fernandez)
     - (CVE-2026-113623) glib-networking: Unbounded memory growth in glib-
       networking GnuTLS backend application data buffer during TLS handshake
       allows remote denial of service (Nieves Montero Fernandez)
     - openssl: consult errno on syscall failure (Michael Catanzaro)

    [7 lines not shown]

   openh264: updated to 2.7.0

   v2.7.0

   - Optimize AArch64 NEON 16x8 and 16x16 SAD
   - Fix signed integer overflow in CVpFrameWork::CheckValid()
   - Re-land 4002 and 4010 with a fix for the stall they caused
   - Build iOS libraries in CI
   - Build Android libraries for all supported ABIs in CI
   - Align Android shared libraries to 16 KB pages
   - Fix regression when encoding very large frames
   - Teach GMP encoder to notify on encoding failures
   - Revert PR4002 and PR4010
   - Fix bi-predicted 16x8/8x16 macroblocks in B slices
   - Make decoder input data outlive OpenH264VideoDecoder::Decode_w()
   - Clear stale hand-off signals when the new-sequence chain is cut
   - Bound AVCC SPS/PPS walk against codec-specific data size
   - Guard threaded DPB reallocation
   - Guard ResetCurrentAccessUnit against AU list counter overflow

    [44 lines not shown]

   doc: Updated www/py-tornado to 6.5.10nb1

   py-tornado: fix PLIST for setuptools 84.2

   and depend on it.

   Bump PKGREVISION.

Merge branch 'freebsd/main' into hardenedbsd/main

   doc: Updated security/py-cryptodome to 3.24.1nb1

   py-cryptodome: fix PLIST for setuptools 84.2

   and depend on it.

   Bump PKGREVISION.

wg: fix the LINT-NOIP build

We don't have anything to tunnel without INET or INET6, so just smack
it with the same config(5) hammer that ovpn uses and exclude it from
such builds.

Reported by:    mjg
Reviewed by:    emaste, markj

(cherry picked from commit 8430de47aa7c004e1330b8f6a3018c360425606e)

Forget Python 3.10

[hwasan][test] Check config.android when disabling aliasing tests (#235598)

When cross-compiling for Android from Linux, `config.target_os` is
`"Linux"`, so #235414 did not disable `HWAddressSanitizer-x86_64` on
Android.

https://lab.llvm.org/buildbot/#/builders/sanitizer-x86_64-linux-android

Assisted-by: Gemini

[RISCV] Port PreAllocZilsdOpt to NewPM

Standard NewPM pass porting. Also rename the pass name to match the
class name.

Reviewers: wangpc-pp, lenary, mshockwave, topperc

Pull Request: https://github.com/llvm/llvm-project/pull/235513

Add UPDATING entries and bump version

Approved by:    so

ObsoleteFiles.inc: Add moved certificates

These two moved from trusted to untrusted.

Approved by:    so
Security:       FreeBSD-SA-26:73.caroot
Fixes:          21ac4761428c ("ObsoleteFiles.inc: Add dropped certificates")
(cherry picked from commit dd6a1fef0ed2bf760a294106ab93fbcdcfdcae3d)

   Forget Python 3.10

ObsoleteFiles.inc: Add dropped certificates

Approved by:    so
Security:       FreeBSD-SA-26:73.caroot
Reported by:    michaelo@
Fixes:          82af7f44ebef ("caroot: Regenerate")

(cherry picked from commit 21ac4761428c60c48bb5c3a0367a04dae164c414)

caroot: Regenerate

Regenerate using certificate data from NSS 3.131.1.

Upstream dropped emSign_ECC_Root_CA_-_G3.pem entirely; we deliberately
move it to untrusted instead to block its reintroduction through e.g.
an outdated copy of security/ca_root_nss.

Approved by:    so
Security:       FreeBSD-SA-26:73.caroot
Reviewed by:    markj
Differential Revision:  https://reviews.freebsd.org/D60906

(cherry picked from commit 82af7f44ebefbe46cd635f63db300a066de48ee1)