BSD Commit Log Search

   Add truncation detection to vmd's instruction decoder.

   vmd(8) ultimately needs a way to deal with instructions that cross
   page boundaries. This is a baby step to get there by fixing up the
   decoder logic to detect when we're out of fetched instruction bytes
   but not done decoding an instruction. Next steps will be to add in
   cross-page fetching and injecting #PF if the next page is paged out
   and we weren't able to decode with just the bytes from the first page.

   These state machine changes uncovered some issues with 16-bit
   addressing and decoding that got fixed along the way.

   ok mlarkin@

   SECURITY update to openvpn-2.7.8

   Issues that affect us:
   1. Check for NULL-Bytes in certificate subjects - refuse all such
   certificates now as "invalid" (CVE-2026-84790).
   2. options: fix unsigned underflow when clearing domain_search_list
   (CVE-2026-88964)

   Full ChangeLog:
   https://github.com/OpenVPN/openvpn/blob/v2.7.8/Changes.rst

   SECURITY update to openvpn-2.7.8

   Issues that affect us:
   1. Check for NULL-Bytes in certificate subjects - refuse all such
   certificates now as "invalid" (CVE-2026-84790).
   2. options: fix unsigned underflow when clearing domain_search_list
   (CVE-2026-88964)

   Full ChangeLog:
   https://github.com/OpenVPN/openvpn/blob/v2.7.8/Changes.rst

   update to sngrep-1.9.0

   MFC: iamb: set USE_NOEXECONLY to unbreak. Tested by Enzo Nicosia, ok sthen

   iamb: set USE_NOEXECONLY to unbreak. Tested by Enzo Nicosia, ok sthen

   build tigervnc against newer xserver

   build tigervnc against newer xserver

   set PORTROACH

   link bochs,debug,no_x11 and bochs,no_x11

   fix bochs deps for debug flavour

   build ngrep,tcpkill

   update to ngrep-1.49.0, add tcpkill flavour

   update to py3-xmltodict-1.0.4, ok jung (dropping maintainer)

   update to python-3.13.16, ok kmos

   update to python-3.14.8, ok kmos

   bump setuptools_scm version in MODPY_PYBUILD BDEP because some
   plists with the newer version have changed

   In pf(4) check extension header length.

   pf_walk_header6() advances the packet offset for each IPv6 extension
   header.  It was not checked that this does not exceed the packet
   length if no next header was processed.  When used with af-to rules,
   this could trigger a panic: m_copydata: null mbuf.

   from Acts1631; OK henning@ sashan@

   Update to jjui 0.10.10

   https://github.com/idursun/jjui/releases/tag/v0.10.10

   document MODPY_PYTEST_IGNORE

   Update to aarch64-esr-decoder 0.2.5

   add support for MODPY_PYTEST_IGNORE for simpler skipping of tests

   Update to mergiraf 0.20.0

   https://codeberg.org/mergiraf/mergiraf/releases/tag/v0.20.0

   update plists following setuptools_scm update

   Update to check-jsonschema 0.38.2

   https://github.com/python-jsonschema/check-jsonschema/releases/tag/0.38.1
   https://github.com/python-jsonschema/check-jsonschema/releases/tag/0.38.2

   Explicitly disable hidden dep on doxygen

   reported by tb@

   Update to borgbackup-2.0.0beta25

   Changes:
   https://github.com/borgbackup/borg/blob/2.0.0b25/docs/changes.rst#version-200b25-2026-09-27

   Update to py-borghash-0.2.1

   Changes: https://github.com/borgbackup/borghash/blob/0.2.1/CHANGES.rst

   Update to py-borgstore-0.7.0

   Changes:
   https://github.com/borgbackup/borgstore/blob/0.7.0/docs/changes.rst

   update to py3-setuptools_scm-10.3.4