BSD Commit Log Search

   sync to unbound 1.25.2; heavy lifting by sthen

   Update to 25.0.4+7-1 GA:
   * Upstream release notes:
   https://www.oracle.com/java/technologies/javase/25-0-4-relnotes.html
   * Contains upstream security fixes:
   https://openjdk.org/groups/vulnerability/advisories/2026-07-21
   * Remove patches committed upstream at bsd-port

   Update to 21.0.12+8-1 GA:
   * Upstream release notes:
   https://www.oracle.com/java/technologies/javase/21-0-12-relnotes.html
   * Contains upstream security fixes:
   https://openjdk.org/groups/vulnerability/advisories/2026-07-21
   * Remove patches committed upstream at bsd-port

   Update to 17.0.20+8-1 GA:
   * Upstream release notes:
   https://www.oracle.com/java/technologies/javase/17-0-20-relnotes.html
   * Contains upstream security fixes:
   https://openjdk.org/groups/vulnerability/advisories/2026-07-21
   * Remove patches committed upstream at bsd-port

   Update to 11.0.32+9-1 GA:
   * Upstream release notes:
   https://www.oracle.com/java/technologies/javase/11-0-32-relnotes.html
   * Contains upstream security fixes:
   https://openjdk.org/groups/vulnerability/advisories/2026-07-21
   * Remove patches committed upstream at bsd-port

   update p5-HTTP-Message to 7.04

   don't hardcode -O2 -g in build, enable debug packages, regen PLIST to sort
   add comment next to COMPILER setting

   update p5-JSON-Any to 1.42
   take maintainer

   switch to base-clang ports-gcc in an attempt to unbreak sparc64
   proxyprotocol.h: In function 'pp_header_len':
   proxyprotocol.h:17: error: parameter name omitted

   When destroying pane, also close pipe and destroy its event. GitHub
   issue 5424.

   merge unbound 1.25.2

   import unbound 1.25.2, fixes various issues in
   https://nlnetlabs.nl/projects/unbound/download/#unbound-1-25-2
   (the quic/ngtcp2/dnscrypt-related issues are not a problem here though,
   as we don't build support for those)

   thanks phessler@ for tests

   Fix typo in function args.  Reported by Matthias Pitzl

   Convert imsg_get to imsgbuf_get.

   OK matthieu@ tb@

   relayd/relayctl: convert imsg_get() to imsgbuf_get()

   The special return value is unused, so it's just using the other function.

   ok rsadowski

   iked/ikectl: convert imsg_get() to imsgbuf_get()

   The special return value is unused, so it's just using the other function.

   ok rsadowski

   sys/macppc: bound OF_getprop() bounce copy

   The Open Firmware getprop service returns the full property size while
   copying at most buflen bytes. macppc redirects the firmware write through
   OF_buf, but copied the returned size into the caller's buffer, allowing an
   oversized property to overwrite adjacent memory.

   Here, I limit the second copy to buflen while preserving getprop's return
   value.

   This fixes stack corruption when QEMU OpenBIOS returns the 60 byte e1000 reg
   property to pci_intr_map(), which requests one 20 byte PCI record. With this
   change, em0 attaches and the ramdisk reaches the installer.

   OK: kettenis@, jca@

   Convert imsg_get to imsgbuf_get.

   OK florian@

   Convert imsg_get to imsgbuf_get.

   OK florian@

   Convert imsg_get to imsgbuf_get.

   OK florian@

   Convert imsg_get to imsgbuf_get.

   OK florian@

   Convert imsg_get to imsgbuf_get.

   OK florian@

   Convert imsg_get to imsgbuf_get.

   OK florian@

   Convert imsg_get to imsgbuf_get.

   OK florian@

   Convert imsg_get to imsgbuf_get.

   OK florian@

   update p5-WWW-Mechanize to 2.22

   p5-WWW-Mechanize 2.22 API has changed.  Apply patches for
   p5-WWW-Mechanize-Shell 0.62 to avoid security problem and warning.
   p5-WWW-Mechanize-Shell tests pass with both versions of p5-WWW-Mechanize.

   ssh: implement mlkem768brainpoolp256r1-sha256; ok djm@

   ssh: implement mlkem768nistp256-sha256; ok djm@

   update to 150.0.7871.186