BSD Commit Log Search

system: audit "staticroute" config access for #10027

(cherry picked from commit faa7dab4190eb501142b0f63dc0a6e93bd650628)

firewall: fix NPTv6 validation; closes #10242

(cherry picked from commit 6e10711078ffd3235222cd5566a28d858fa31bf6)

mvc: remove Util imports where not needed

(cherry picked from commit d092f74bb1a5205ea0ff25398123f5b54b1698fc)

firewall: remove duplicated CSV hook

(cherry picked from commit 8c40e2d5d6a2aa14bdba93e72e2de2103fe05fbf)

ipsec: remove unused styling

(cherry picked from commit d9eba2f0eb78aa9693767296ba7e115d560025de)

firewall: safe config access in list_legacy_rules.php

ui: add static dialog header support and fix bool/string compare

(cherry picked from commit f8af03c8ecf8c15f1e99d1d5bd4da69291f6ba1d)

ui: add save/cancel button support to form rendering

This is a fringe use case, but it's better to do this here
than to handroll upcoming changes in the ipsec connections page.

(cherry picked from commit 097f2e8fd070f3867bb02c88aa42bafd6af2c61e)

mvc: volt form template, add type_formatter keyword which was implemented in https://github.com/opnsense/core/commit/528474372b373c720962e5efaad3c7cf6773917a

(cherry picked from commit d46112e8921c74e49caa5ac8d46dd1cd2ff442ce)

[ELF,test] Cover target-specific option errors (#196247)

firmware: move repository listing to connectivity audit

[AArch64] Avoid raw_svector_ostream for SubtargetMap keys (#196003)

AArch64TargetMachine::getSubtargetImpl builds a StringMap key on every
subtarget lookup. This showed up through repeated TTI queries while
profiling sqlite on aarch64-O0-g.

Building the key directly with SmallString appends and utostr instead of
raw_svector_ostream improves compile-time.

We used to do this until 07e7168048b1.

CTMark geomean:
- stage1-aarch64-O3: -0.16%
- stage1-aarch64-O0-g: -0.18%

https://llvm-compile-time-tracker.com/compare.php?from=c9d713aa48a714d20b8502d06b9feb24829e6f22&to=e7ff83884193ee70cf3a69778b891fb729e0bcba&stat=instructions%3Au

Assisted-by: codex

unbound: restyle stats page and minor tweaks in others

unbound: hide unused tree row in form output for overrides

(cherry picked from commit 5ecef2aa253b2b9a73de97592b2fe34ac97f07e5)

unbound: minor style/refactor for safe config access

sysutils/bfs: update to 4.1.2

Changes:        https://github.com/tavianator/bfs/releases/tag/4.1.2

kea: add subnet vltime

PR: https://github.com/opnsense/core/issues/7592

Co-authored-by: @bgilesmca

system: archaic style on cron file ;)

ui: bootgrid: remove "event" use from showSaveAlert()

Preps for upcoming apply bar changes.

[flang][OpenMP] Replace OMPGroupprivateDeviceTypeInfo struct with a using alias

Trust: parse key_type and digest

PR: https://github.com/opnsense/core/issues/9033

(cherry picked from commit 05813e1be12c90bdc82fbfca930106e760ed300d)
(cherry picked from commit 26b1850ef9fa9ef3c485e3a7f6e9bc9bc719ab5e)

System: Trust: Certificates - link CA references after all changes, closes https://github.com/opnsense/core/issues/9357

(cherry picked from commit 94835a9761eded11dabd657e00fb09a7da1b48ac)

mvc: clear unused inputs in syslog controller

(cherry picked from commit 477451d9b7db70c68967e3d9c382c11c1bb1ddd5)

Services: Kea DHCPv6: Fix typo subnet4 to subnet6 in view option data handler (#10268)

(cherry picked from commit d80efd3d6f8d8aacc70303c3d76b8e4400d90202)

handbook: bump for 14.4-R

radvd: allow to start without primary IPv6 for #10048

Reshuffle the code a little to make it (a bit) more obvious this is
safe to assume and working confirmed by automatic mode already.

Since we have full control via MVC enable/disable this is fine now.

(cherry picked from commit 72ccc1e14e73960b74b402bff397dc40bb440a9c)
(cherry picked from commit 7116a1f591d7fceb4b272ed40d35255a819224f4)
(cherry picked from commit 79ba2da56428c74c1f3ca4e600be06e09d604ed7)
(cherry picked from commit a663c3a6511f79cfca661d987ddc7c6899214881)

[CIR] Add Support for linking modules on cc1

   doc: Updated net/tor to 0.4.8.24

   tor: update to 0.4.8.24.

   Changes in version 0.4.8.24 - 2026-05-06
     This is a security release fixing several major bugfixes that were reported
     in the past weeks. Huge thanks to everyone that reported these issues! We
     strongly recommend upgrading as soon as possible.

     o Major bugfixes (cell handling):
       - Fix out-of-bounds read (OOB) when END, TRUNCATE and TRUNCATED cell
         have no reason in their payload. TROVE-2026-011. Found by Brian
         Carpenter (geeknik). Fixes bug 41254; bugfix on 0.1.1.1-alpha.

     o Major bugfixes (conflux):
       - Do not attempt or accept BEGIN_DIR via conflux legs. TROVE-2026-
         008. Credit to Anas Cherni from Calif.io in collaboration with
         Claude and Anthropic Research. Fixes bug 41243; bugfix
         on 0.4.8.1-alpha.

     o Major bugfixes (conflux, relay):

    [25 lines not shown]

mvc: Remove UIModelGrid imports in IDS, Monit, Syslog SettingsController, unused

(cherry picked from commit aaf9a1c797cff779812da335f2f532002aeda994)