BSD Commit Log Search

   I've noticed slight hiccups on the keyboard input during the battery status
   update caused by the delay busy loop.  Using tsleep instead resolves that.

   devel/*/gdb: unbreak build with llvm22 and revert prior workaround

   LLVM 22 has changed -Wenum-constexpr-conversion into a hard error.
   Revert the workaround introduced for LLVM 16 and replace idiom that
   results in undefined behavior.

   ok tb@

   MFC: Update to Crypt::OpenSSL::RSA 0.41, tested by henning

   Attacks on the Marvin attack were too aggressive and 0.35 disabled the
   widely used PKCS#1 v1.5 padding outright, when only decryption is
   problematic due to the padding oracle. Signing is fine and required for
   many things, among other things TLS and DNSSEC.

     Version 0.35 disabled PKCS#1 v1.5 padding entirely to mitigate the
     Marvin attack. However, the Marvin attack only affects PKCS#1 v1.5
     decryption (padding oracle), not signatures. Version 0.38 re-enables
     use_pkcs1_padding() for use with sign() and verify(), while keeping it
     disabled for encrypt() and decrypt(). PKCS1_OAEP should be used for
     encryption and either PKCS1_PSS or PKCS1 can be used for signing.

     https://metacpan.org/pod/Crypt::OpenSSL::RSA#SECURITY

   net/abaddon: update to 0.2.4

   From izzy Meyer (maintainer)

   cyrus-imapd: add back bdep on p5-Type-Tiny

   This covers a few namespaces, among which at least Types::Standard is
   still used.

   xarchive: fix build with llvm22: getline() takes a size_t *, not an int *

   cvstrac: fix build with llvm22: two size_t -> socklen_t conversions

   bin/ksh: preserve tildes in completion

   Keep leading tilde expressions in the command line after file
   completion. Expanding ~user to pw_dir during editing bakes the result of
   an early passwd lookup into the command line; if the account changes
   before the command is executed, the command uses a stale pathname
   instead of the current ~user expansion.

   Completion still performs the lookup needed to enumerate pathname
   matches, but rewrites matches back to the spelling the user typed and
   does not leave a completion only lookup in the homedir cache.

   Also complete bare ~user prefixes from the passwd database, so ~us[TAB]
   can become ~user before pathname completion continues.

   Preserving tilde is the default behaviour.

   OK: deraadt@

   mboxgrep: fix build with llvm22

   gzFile is a pointer type, so it should be used, not gzFile *. It is also
   not equivalent to FILE *, so undo some incorrect fixes from prior compiler
   updates.

   bump x11/stumpwm after lang/sbcl update

   xli: fix build with llvm22: bfill() is a memset wrapper using (char *)

   update lang/sbcl to 2.6.4

   Release notes: https://sbcl.org/news.html#2.6.4

   xinvaders: fix build with llvm22

   gamewidget and labelwidget are Widgets of class vadersWidgetClass, not
   VadersWidgets

   Bugfix update to gdb-17.2

   Tests & ok tb@

   Update krita-gmic-plugin to 3.7.4.1

   Feedback, tweaks and OK sdk@

   Tighten up read-only checks on attach-session, detach-client and
   switch-client so that a user should be able to only detach their own
   client. Reported by John Walker.

   Temporarily mark broken until I fix it after the recent nettle changes.

   Stick with older nettle for the time being (security/libnettle).

   Move from security/libnettle(v3) to security/nettle(v4).

   Fix with nettle >=4.

   Fix conflict with security/nettle.

   +nettle

   Initial revision

   Update krita to 6.0.1

   Add mssing patches to unbreak the build

   Spotted by naddy, thanks

   Update CMake to 4.3.3

   Update catch2 to 3.15.0

   Regen WANTLIB.

   Regen WANTLIB.

   Update to Crypt::OpenSSL::RSA 0.41, tested by henning

   Attacks on the Marvin attack were too aggressive and 0.35 disabled the
   widely used PKCS#1 v1.5 padding outright, when only decryption is
   problematic due to the padding oracle. Signing is fine and required for
   many things, among other things TLS and DNSSEC.

     Version 0.35 disabled PKCS#1 v1.5 padding entirely to mitigate the
     Marvin attack. However, the Marvin attack only affects PKCS#1 v1.5
     decryption (padding oracle), not signatures. Version 0.38 re-enables
     use_pkcs1_padding() for use with sign() and verify(), while keeping it
     disabled for encrypt() and decrypt(). PKCS1_OAEP should be used for
     encryption and either PKCS1_PSS or PKCS1 can be used for signing.

   https://metacpan.org/pod/Crypt::OpenSSL::RSA