BSD Commit Log Search

   asn1_multi: slightly improve order of variable declarations and freeing

   asn1_multi: explicitly test against NULL twice

   asn1_multi: assign and test twice

   tweak nearby whitespace

   asn_multi: rename bad label to err

   asn1_multi: rework creation of the returned stack

   Currently, the ASN1_TYPE ret is created up front and further populated
   via a possibly failing call to ASN1_STRING_type_new(). On failure, the
   incomplete ret is returned, indicating success to the caller, which may
   or may not fail later.

   Instead, create the inner ASN1_STRING first, then the ASN1_TYPE. Use
   setter API with proper ownership transfer rather than fiddling with
   deeply nested ASN1 structures. This way we only succeed if everything
   actually succeeded.

   ok kenjiro

   asn1_multi: fix a comment

   Shorter, more precise and closer to grammatically correct.

   ok kenjiro

   asn1_multi: plug leak if sk_ASN1_TYPE_push() fails

   If the push of typ onto sk fails, the exit path does not free it.
   Fix that and avoid function nesting when calling ASN1_generate_v3().

   Prompted by a similar fix in OpenSSL

   ok kenjiro

   a_type: add XXX to consider adding an internal ASN1_TYPE_set0()

   ok kenjiro

   Update to audacity-3.7.9.

   Update to google-cloud-sdk-583.0.0.

   update to 152.0.7977.75

   Daan Vreeken agreed to rescind the advertising clause.

   https://mail-index.netbsd.org/source-changes/2025/11/26/msg159202.html

   Frank van der Linden agreed to rescind the advertising clause.

   https://mail-index.netbsd.org/source-changes/2026/01/02/msg159829.html

   replace testing of vendor PQ signature algorithm
   "ssh-mldsa44-ed25519 at openssh.com" with the IANA-registered
   "ssh-mldsa44-ed25519"

   IANA has allocated a non-vendor codepoint for ssh-mldsa44-ed25519,
   so use it instead of the vendored "@openssh.com" name.

   Note: this replaces the vendored name, which was only marked as
   experimental and not enabled by default.cw

   If you have ssh-mldsa44-ed25519 at openssh.com keys manually configured
   in sshd, then you will need to remove them from sshd_config and
   restart.

   Update to Sequel 5.108.0

   devel/codex: update to 0.152.1

   update to telemt 3.5.5

   lang/gcc/16: add dlang support and update plist at powerpc

   lang/gcc/11: add dlang support at powerpc

   update to 2.20260827

   misc/bible-kjv: maintenance update to 4.44

   Create screen before zoom may need to use it.

   Do not allow cursor on/off to escape synchronized updates.

   drm: apple: Switch back to drm_atomic_helper_commit_tail_rpm()

   From Janne Grunau
   bd8ce96f6e76b98940352b18fe735a7943471ed7 in AsahiLinux/linux

   This implictly gets rid of drm_atomic_helper_wait_for_flip_done()
   and makes graphical output on Apple Silicon machines noticably
   snappier.

   ok kettenis@ jsg@

   lang/erlang: Update to 27.3.4.17, 28.5.0.6 and 29.0.6

   Fixes CVE-2026-75538 among several other bugs

   devel/sccache: update to 0.17.0

   devel/esbuild: Update to 0.28.2

   from Igor Zornik (Maintainer), thanks

   mark net/barrier BROKEN, old software wants old devel/gtest

   Their CMake goo includes bundles missing from the autogenerated tarball,
   there is no knob to disable tests, we don't run them (NO_TEST=yes),
   but instead nuke the CMake goo and hope for system gtest to work,
   which now fails due to newer devel/gtest requiring C++17.

   barrier is C++14, its last release is five years old and we're behind,
   upstream's last commit was four years ago...

   graphics/blender: add missing dependency on libspnav

   While here explicitely disable optional dependencies not yet ported.

   ok rsadowski@