BSD Commit Log Search

   dbupdate: Be consistent with name in messages.

   ok deraadt

   When unveil was used with a chroot environment it was possible for
   unveil_find_cover to loop forever because it was missing a check for the
   rootvnode. This would only happen if references existed to directories
   outside the chroot, which correct chroot code must not do.

   ok deraadt

   remove historic setuid-root net/icmpinfo

   a tool from 1995 to look at "weird" packets, what could go wrong...
   just use ping(8) or tcpdump(8).

   OK ian

   math/z3: update to 5.3.1

   unicon: missing dep on libssh

   reported by aja

   math/cadical: added -fPIC for sparc64

   cadical large enough to requrie fPIC and by default it uses fpic

   sysutils/docker-compose: update to 5.6.1

   update to py3-Pillow-13.0.0

   httpd: only rekey TLS tickets for the first server on a socket

   With several TLS servers on the same address + port and
   "tls ticket lifetime" option set, httpd died on the first ticket rekey.

   The parent started a rekey timer for every server, but only the first
   one on a socket exists as a struct server in the server processes.
   Start the rekey timer only for that server.

   Reported by James J. Lippard on bugs@ and stsp@, thanks!

   ok stsp@, kirill@

   bump to keep ahead of -stable

   yesterday's "MFC php changes from -current, to make tomorrow's RCE CVEs
   easier to handle" accidentally dropped /usr/local/bin/{php,phar,phpize}
   symlinks; correct

   sysutils/chezmoi: Update to 2.73.3

   wayland/mango: Update to 0.18.2

   textproc/simdutf: Update to 9.3.2

   force umask

   comment on why cachedir is created

   manually detect if this release has no databases available (yet)
   with a nice error message compared to errexit

   Register clock interrupt with ih_number zero and remove way obsolete message
   attempting to explain why 1 had been chosen previously.

   softintr_schedule() being now a simple wrapper over send_softint(), drop it
   and rename send_softint() to softintr_schedule().

   All uses of send_softint are of the form (ih->ih_pil, ih). Drop the first
   argument since it can be easily obtained from the second one. Also drop the
   check for a NULL ih as this will never happen.

   Replace hardcoded 10 for clock interrupt level with matching symbolic constant.
   Remove dead comments.

   All the *tick_trigger() simply wrap sparc64_raise_clockintr(), invoke the
   latter directly.

   All the *tickintr() bodies are nowadays identical, keep only one.

   copyright

   lang/deno: Update to 2.9.8

   This release removes emSign ECC Root CA - G3 from the trusted certificate
   authorities (via webpki-root-certs 1.0.10)

   Added a patch to make the system cert store the default, for good measure

   must be run as root
   pointed out by florian

   lang/deno: Update to 2.9.8

   This release removes emSign ECC Root CA - G3 from the trusted certificate
   authorities (via webpki-root-certs 1.0.10)

   Added a patch to make the system cert store the default, for good measure

   Tor Browser: update to 15.0.26

   Tor Browser: update to 15.0.26

   Sync to unbound 1.26.2; heavy lifting by sthen