BSD Commit Log Search

   update to 2026.08.151.1

   update to 151.0.7922.108

   Check HMAC() return value to avoid a later use of uninitialized data

   CID 25423

   ok tb@

   limits.h: bump _POSIX_THREAD_THREADS_MAX to 64

   This matches POSIX and the other BSDs. The mismatch was flagged by Sortix
   os-test.

   ok guenther@, asou@, deraadt@

   update p5-Module-Pluggable to 6.4

   lang/deno: Update to 2.9.5

   avoid bogus GnuTLS dep; from Brad, ok kurt@

   don't pick up gtest if present during configure, to avoid issues with junking
   found by naddy

   update p5-Crypt-OpenSSL-X509 to 2.1.5

   devel/difftastic: Update to 0.70.0

   */*: Sync up LZMA CpuArch patches with upstream LZMA SDK

   from Brad

   blake3 now looks for CXX_20 during configure. Shift to ports-gcc
   on base-gcc arches to fix build on sparc64

   sync

   acpidmar(4): Store PCI domain in softc for segment mapping

   Ensure we get a valid segement and enforce use of the IOMMU.

   While there:
    - tweak printf to use segment instead of PCI domain
    - use ACPI provided segment instead of hardcoded 0 in ivhd_showpage()

   ok kettenis@

   lang/lfe: Update to 2.2.2

   Update oxipng to 10.2.0.

   iked: avoid parameter overload

   Old ca_validate_cert() API interpreted data pointer as parsed X509
   structure if len == 0 and crashed if a zero size certificate buffer
   was passed instead.  Now we have an explicit certifcate and key
   parameter.

   from hshoexer@ markus@; ok bluhm@ tb@ tobhe@

   this is errata/7.9/009_iked.patch.sig

   iked: avoid parameter overload

   Old ca_validate_cert() API interpreted data pointer as parsed X509
   structure if len == 0 and crashed if a zero size certificate buffer
   was passed instead.  Now we have an explicit certifcate and key
   parameter.

   from hshoexer@ markus@; ok bluhm@ tb@ tobhe@

   this is errata/7.8/045_iked.patch.sig

   Fix LCP MRU option handing.  Pointed out by Arthur Chan.

   from yasuoka@; ok mvs deraadt

   this is errata/7.9/008_npppd.patch.sig

   Fix LCP MRU option handing.  Pointed out by Arthur Chan.

   from yasuoka@; ok mvs deraadt

   this in errata/7.8/044_npppd.patch.sig

   iked: avoid parameter overload

   Old ca_validate_cert() API interpreted data pointer as parsed X509
   structure if len == 0 and crashed if a zero size certificate buffer
   was passed instead.  Now we have an explicit certifcate and key
   parameter.

   from markus@

   ok bluhm@ tb@

   update to libmatroska-1.7.2, from Brad (maintainer)

   update to ircII-20260115, from Brad (maintainer)

   update to libsmb2-6.2.0pl20260809, from Brad (maintainer)
   bug fixes and dcerpc support

   update to libiscsi-1.20.3pl20260809, from Brad (maintainer)
   fixes various memory-safety bugs etc, add cmake build

   update to py3-pykeepass-4.2.0

   update to libnfs-7.0.0pl20260708, from Brad (maintainer)

   update to libebml-1.4.7, from Brad (maintainer)

   update to utfcpp-4.1.1, from Brad

   i also dropped the maintainer line as we haven't heard from him in
   a while and previous updates timed out

   update to roundcubemail-1.6.18
   https://roundcube.net/news/2026/08/09/security-updates-1.6.18-and-1.7.3