BSD Commit Log Search

   relayd: improve token ordering and readability

   OK kirill@

   Fix for KASAN: invalid memory access in setdisklabel

   ok krw@

   Reported-by: syzbot+4b34bf468172c62700f3 at syzkaller.appspotmail.com

   Restore the OCSP no-check extension method

   The conversion of X509V3_EXT_get_nid() from a table to a switch
   omitted the OCSP no-check extension method.

   Add the missing accessor declaration and switch case.

   ok tb@

   Improve imsg code, switch to imsgbuf_get and use more imsg_get_data

   Switch the IMSG_HOST_DNS call to use imsg_add_strbuf and imsg_get_strbuf.
   Also use NI_MAXHOST for the name length.
   Also rework IMSG_PW_ENTRY and IMSG_GRP_ENTRY to use imsg_get_len()
   and imsg_get_data() to fetch the record. Ensure that the data length
   is large enough but not too large to fit into &ir.

   ok jmatthew@

   update p5-Imager to 1.034
   CVE-2026-19082

   The previous fix to bus_dmamap_load() wasn't quite right.  We do need
   virtual address continuity when we're bouncing.  So a !bounce check
   was correct, but only in the case when DMA is cache coherent.  Note that
   this becomes identical to the amd64 equivalent of this code when one
   considers that on amd64 DMA is always cache coherent.

   ok deraadt@, jca@

   SECURITY update to openvpn-2.7.6

   The only relevant security issue is considered rather low and implies
   the use of --x509-username-field with the mbedtls flavor.

   More details: https://github.com/OpenVPN/openvpn/blob/v2.7.6/Changes.rst

   SECURITY update to openvpn-2.7.6

   The only relevant security issue is considered rather low and implies
   the use of --x509-username-field with the mbedtls flavor.

   More details: https://github.com/OpenVPN/openvpn/blob/v2.7.6/Changes.rst

   update p5-Sereal-Decoder p5-Sereal-Encoder p5-Sereal to 5.010

   one more prototype

   ok deraadt@ tb@

   pkgconf: simplify unveil handling

   Instead of giving fine-grained read access by iterating, use a simple
   unveil("/", "r"). pkgconf runs with pledge "stdio rpath wpath cpath unveil"
   with closed unveil, and only /dev/null and an optional log file have "rwc".

   discussed with deraadt a long time ago, agreement by claudio
   ok sthen

   Update pkgconf to 3.0.5

   https://github.com/pkgconf/pkgconf/blob/main/NEWS

   ok sthen

   Update for artty to 1.6.4

   OK volker@

   Update for Nono to 1.8.1

   OK benoit@

   Update for SQLMap to 1.10

   ok benoit@

   update to flent-2.3.0

   now supports either pyside6 or py-qt5 (defaulting to py-qt5 if both are
   present) so adjust deps

   revert switch to elf_aux_info(); it breaks the install media

   add build depends on devel/py-importlib-metadata and devel/py-looseversion

   sprinkle build dep on x11/mate/common where it is needed

   Update to py3-cairo-1.29.1.

   Update to p5-Sys-Virt-12.6.0.

   Security update to OpenEXR-3.4.14.

   relayd: allow setting log level from relayd.conf

   Add "log level (brief|verbose)" which sets or clears RELAYD_OPT_VERBOSE
   just like relayctl log verbose|brief does at runtime.

   This makes sense now because the recent DPRINTF removal turned all
   DPRINTF calls into real log_debug calls. Some debug logs moved to
   warning. Some remained DPRINF().

   Before that change the toggle had almost nothing to gate. All debug
   output was compiled out unless relayd was built with DEBUG > 1. So
   "log verbose" in relayctl was practically a no-op for users.
   It was impossible for the user to work out why the setup/config wasn't
   working.

   Now the toggle actually does what its name suggests. Pinning the
   level in the config file lets it survive restarts and SIGHUP reloads.

   OK kirill@

   remove nth_page(), no longer in linux

   remove DMA_FENCE_TRACE(), no longer in linux

   smokeping intermittent build fix: add BDEPs on the optional modules used
   by probes; build runs smokeping's --makepod option to create manuals for
   these, which tries to import modules used by these. if hit at the wrong
   time during a bulk build this can fail.

   tb@ ran into this while p5-Net-DNS was partway through installation:

   pod2man --release=2.9.0 --center=SmokePing Smokeping_probes_AnotherCurl.pod --section 3 > Smokeping_probes_AnotherCurl.3
   PERL5LIB=/usr/local/libdata/perl5/site_perl /usr/bin/perl -I../thirdparty/lib/perl5 -I../lib -mSmokeping -e 'Smokeping::main()' -- --makepod Smokeping::probes::AnotherDNS > Smokeping_probes_AnotherDNS.pod
   require Smokeping::probes::AnotherDNS failed: Attempt to reload Net/DNS.pm aborted.
   Compilation failed in require at ../lib/Smokeping/probes/AnotherDNS.pm line 26.
   BEGIN failed--compilation aborted at ../lib/Smokeping/probes/AnotherDNS.pm line 26.

   fix old typo/thinko in readme while there (IO::Pty is in the p5-IO-Tty
   package).

   remove synchronize_shrinkers(), no longer in linux

   oops, touched wrong instance of "Upgrade your PostgreSQL package with pkg_add"

   small wording tweak in pg_upgrade docs; ok jeremy (part of larger diff)

   remove vgacon_text_force(), no longer in linux