BSD Commit Log Search

   Add suspend/resume support.

   ok mlarkin@, deraadt@

   security/b3sum: update to 1.8.7

   Diff from Nazarenko Mykyta (taking maintainer)

   update p5-MIME-tools to 5.518

   mark as only for rust archs, needs newer librsvg

   emulators/qemu: update to 11.1.1 and backports bit to run OpenBSD/macppc

   OK: Brad Smith (maintainer)

   llvm: backport [RegisterCoalescer] Avoid retrying high-cost joins for live intervals

   OK: tb@

   devel/llvm/22: backport [RegisterCoalescer] Avoid retrying high-cost joins for live intervals

   OK: tb@

   Update to PowerDNS Recursor 5.4.6

   update to asterisk-22.11.0

   update to asterisk-20.21.0

   update to jgmenu-4.6.0

   update to icewm-4.1.0

   update to py3-async-lru-2.3.0

   update to py3-jiter-0.16.0

   update to scamper-20260902

   update to py3-attrs-26.1.0

   update to py3-bitarray-3.11.0

   update to py3-build-1.6.0

   update to py3-lxml-6.1.3

   devel/git-cinnabar: update to 0.7.5

   lang/gcc/16: zap trailing whitespace to unbreak make print-plist

   found by aja

   Update to gnome-autoar-0.5.2.

   update to wesnoth-1.18.8

   security/nss: fix build on non-x86 little-endian

   cf #2068010, regressed by #2027768

   reported by phessler@, help from tb@

   update to blake3-1.8.7, from Mykyta Nazarenko (maintainer)

   Update to jujutsu 0.45.0

   https://github.com/jj-vcs/jj/releases/tag/v0.45.0

   Update to borgbackup-2.0.0beta24

   Changes:
   https://borgbackup.readthedocs.io/en/2.0.0b24/changes.html#version-2-0-0b24-2026-09-02

   Update to py-shtab-1.12.1

   Changes: https://github.com/tqdm/shtab/releases/tag/v1.12.1

   net/curl: update to 8.22.0

   Changes:
   * hardening: add API guards
   * TLS: drop support for TLS-SRP

   Includes fixes for
   CVE-2026-18924: HTTP/2 server push UAF
   CVE-2026-19931: Negotiate ambient user conn reuse
   CVE-2026-80230: OpenSSL pinning bypass
   CVE-2026-80255: secure cookie attribute bypass with tab

   Prevent pf dropping TCP state with crafted reset packet.

   Revision 1.1212 of pf.c weakened the TCP reset check in stateful
   connection tracking to let legitimate resets pass in the backwards
   window.  Such a reset is accepted only if its acknowledgment number
   matches perfectly.  But as a workaround for broken stacks, pf
   replaces an acknowledgment number of 0 in a reset with the tracked
   sequence of the peer.  Then the perfect match always succeeds, and
   an attacker can spoof resets more easily than intended.  Use the
   acknowledgment number from the wire, before the workaround has
   modified it.

   discovered by Minghao Zhang; OK sashan@