BSD Commit Log Search

   www/librewolf: update to 154.0.1-2, from yaydn

   Update to gemini-cli-0.57.0.

   Update to libgcrypt-1.12.3.

   Update to ibus-typing-booster-2.31.0.

   Update to harfbuzz-14.4.0.

   rsa_eay: Replace handrolled BN_bn2binpad with the real thing

   Just a tiny little bit of lipstick on this entelodont. This is simpler
   and does not change behavior as BN_bn2binpad() returns -1 on failure and
   num on success.

   jsing points out that BN_bn2binpad() is constant time.

   ok jsing kenjiro

   PS: henning, you owe me a significant amount of quality beverages for
   making me look at this particular tire fire (and corresponding XS files).

   libcrypto: harden cms_kek_cipher() a bit

   When AES key unwrap with padding is in use, the EVP interface breaks its
   contract and writes more than the outlen it initially reports to the output
   buffer. This is an old, sneaky trap that the muppet set eons ago and many
   victims walked right into it, including the muppet himself.

   If inlen is larger than outlen, allocate inlen bytes to unwrap with padding
   to avoid a buffer overwrite. This is a variant of OpenSSL's fix. Since we
   do not support AES keywrap with padding no actual bufer overwrite occurs
   here at the moment, but if we ever chose to do so (unlikely) this trap
   would be avoided. There's plenty more traps that the next round of scas
   will surely find in this absolute trashfire of CMS support code.

   ok kenjiro

   audio/ncspot: update to 1.4.0

   the macintosh subdir was removed from cvs in 1999

   ok jcs@

   update to web-eid 2.10.0

   lang/rust: update to 1.98.0

   Announce: https://blog.rust-lang.org/2026/08/20/Rust-1.98.0/
   Release notes: https://doc.rust-lang.org/stable/releases.html#version-1980-2026-08-20

   sparc64 switched to clang (from tb@)

   Do not try to configure 0.0.0.0 (INADDR_ANY) on an interface.

   If we indicate a preference for IPv6-only (DHCP option 108), the
   server does not offer an IP address (indicated by INADDR_ANY), so we
   must first check if the server supported option 108 before checking if
   we received an IPv4 offer.

   Logic error pointed out and diff provided by acts1631 at proton.me,
   thanks!

   mail/mozilla-thunderbird: update to 153.1.1.

   see https://www.thunderbird.net/en-US/thunderbird/153.1.1esr/releasenotes/

   Don't drop X509_V_ERR_HOSTNAME_MISMATCH when verify callback returns 1

   While not the advised way of using the verify callback (either by OpenSSL
   or by us) in production, sometimes folks like to return 1 from everything
   in the callback and then check the error return and make decicions about
   things.

   This fix ensures that such callbacks will see the hostname mismatch and
   be able to act upon them.

   Reported by Alexander Aleksandrovic Klimov
   ok tb@

   graphics/vtk: update to 9.7.0

   Required to update fmt 12.2.0.

   Reported by and ok tb@

   RTR sessions support tcp md5sig. Add the config bits to the manpage.

   Noticed by job@
   OK tb@

   www/mozilla-firefox: unbreak by updating patches

   jca@ noted that the nss requirement in 154.0.1 was bumped to 3.126.1,
   adjust nss.h patch accordingly.

   Update to uv 0.12.6, from maintainer

   https://github.com/astral-sh/uv/releases/tag/0.12.4
   https://github.com/astral-sh/uv/releases/tag/0.12.5
   https://github.com/astral-sh/uv/releases/tag/0.12.6

   Avoid potential null-pointer dereference in calculation of CPU "capacity".

   ok jsg@

   Update perltidy to 20260826.

   Fix crash when trying to access the /admin/ page

   Apparently checking passwords goes through checks for hash algorithms
   supported by crypt(3). But since none of the algorithms checked are
   supported by the OpenBSD libc, the code ends up dereferencing a NULL
   pointer. I'm not sure yet why the code checks for algorithms supported
   by crypt(3), as the code wasn't present in icecast-2.4.4.

   To fix this, avoid dereferencing said NULL pointer. While here, add
   DEBUG_PACKAGES.

   Problem reported by Olivier Cherrier.

   sync config lines and use .Cd not .Nm

   Unbreak for upcoming go1.27.

   Do not hardcode /usr/src/ in one of the files containing desired output.
   This is expected to fix a test failure that anton@ reported with BSDSRCDIR set.

   Update to google-cloud-sdk-582.0.0.

   Update to exoscale-cli-1.99.0.

   Missing LDEP.

   update to vim-9.2.1010

   update to vim-9.2.1010

   update to libnfs-7.0.0pl20260825, from Brad (maintainer)