OpenBSD/src IUvlC96sbin/dhcpleased frontend.c

   Close correct file descriptor.

   Instead of closing the just received UDP socket we closed the imsg fd
   thus cleanly shutting down dhcpleased(8).

   Problem triggered by sf@ with something like
   while :; do ifconfig vio0 -inet; done
   while :; do ifconfig vio0 inet autoconf; done

   The problem triggers when dhcpleased configured a lease and in just
   the right moment the autoconf flag gets removed. The main process
   opens a udp socket and sends it to the frontend. At the same time the
   frontend learned (from the route socket), that the interface lost its
   autoconf flag. When the frontend then receives the udp socket via fd
   passing it tries to close it. Due to a typo it would instead close the
   imsg file descriptor.

   Found by me after lots of head scratching.
   OK tb
VersionDeltaFile
1.39+2-2sbin/dhcpleased/frontend.c
+2-21 files

OpenBSD/src XU8mkwAusr.bin/ssh sntrup761.c sntrup761.sh

   use 64 bit math to avoid signed underflow. upstream code relies on
   using -fwrapv to provide defined over/underflow behaviour, but we use
   -ftrapv to catch integer errors and abort the program. ok dtucker@
VersionDeltaFile
1.8+6-6usr.bin/ssh/sntrup761.c
1.9+6-1usr.bin/ssh/sntrup761.sh
+12-72 files

OpenBSD/src zyuFnyQsys/kern exec_elf.c

   Invalid pintables in ELF binaries can crash the kernel.
   Fix from yufeng.gao at uq.edu.au
VersionDeltaFile
1.191+4-2sys/kern/exec_elf.c
+4-21 files

OpenBSD/src crYOAe6sys/isofs/cd9660 cd9660_vnops.c, sys/isofs/udf udf_vnops.c

   Ensure that file names passed back by readdir do not include a '/'
   character. The '/' char is the path separator and is not allowed in
   any filename.

   NFS specific report by Apple Security Engineering and Architecture (SEAR).

   Input from guenther@ and millert@
   from claudio@; OK beck@ miod@

   msdos already transfroms for Windows long names a '/' char into '?'.
   Do the same for the 8.3 case as well.

   This is not ideal since now it is possible that two files in the same
   directory have the same name but the msdos code already does a lot of
   this and so the problem already exists.

   from claudio@; OK beck@ miod@

   Do a basic sanity check that dirents returned via fuse are kind of sane.

    [9 lines not shown]
VersionDeltaFile
1.67.2.1+32-1sys/miscfs/fuse/fuse_vnops.c
1.46.6.1+6-2sys/ufs/ext2fs/ext2fs_lookup.c
1.70.2.1+7-1sys/isofs/udf/udf_vnops.c
1.26.2.1+6-1sys/tmpfs/tmpfs_subr.c
1.158.2.1+6-1sys/ufs/ufs/ufs_vnops.c
1.95.2.1+6-1sys/isofs/cd9660/cd9660_vnops.c
+63-73 files not shown
+77-129 files

OpenBSD/src PIEj8gFsys/isofs/cd9660 cd9660_vnops.c, sys/isofs/udf udf_vnops.c

   Ensure that file names passed back by readdir do not include a '/'
   character. The '/' char is the path separator and is not allowed in
   any filename.

   NFS specific report by Apple Security Engineering and Architecture (SEAR).

   Input from guenther@ and millert@
   from claudio@; OK beck@ miod@

   msdos already transfroms for Windows long names a '/' char into '?'.
   Do the same for the 8.3 case as well.

   This is not ideal since now it is possible that two files in the same
   directory have the same name but the msdos code already does a lot of
   this and so the problem already exists.

   from claudio@; OK beck@ miod@

   Do a basic sanity check that dirents returned via fuse are kind of sane.

    [9 lines not shown]
VersionDeltaFile
1.67.4.1+32-1sys/miscfs/fuse/fuse_vnops.c
1.70.4.1+7-1sys/isofs/udf/udf_vnops.c
1.46.10.1+6-2sys/ufs/ext2fs/ext2fs_lookup.c
1.193.4.1+6-1sys/nfs/nfs_vnops.c
1.95.4.1+6-1sys/isofs/cd9660/cd9660_vnops.c
1.26.6.1+6-1sys/tmpfs/tmpfs_subr.c
+63-73 files not shown
+77-129 files

OpenBSD/src x6po4oHsys/nfs nfsm_subs.h nfs_socket.c

   After calling m_freem() on nmi_mrep (or nmi_mreq) set the pointer to NULL.

   Only do this if struct nfsm_info doesn't have local scope.
   In some cases the caller would perfrom another m_freem and double free
   the mbuf and Bad Things(TM) would happen.

   from claudio@; Reported by Claes M Nyberg on bugs@; with & ok miod@

   nfsm_srvnamesiz() may set up an NFSERR_NAMETOL error, which nfsm_reply() would
   consider as not tragic enough to abort the operation, in order to batch error
   replies.

   This would end up invoking nfs_namei() using the length obtained from
   the NFS request, and Bad Things(TM) would happen if this value is larger
   than MAXPATHLEN.

   from miod@; Reported by Claes M Nyberg on bugs@; tweaks & ok claudio@

   this is errata/7.4/021_nfs.patch.sig
VersionDeltaFile
1.47.18.1+25-8sys/nfs/nfsm_subs.h
1.144.2.1+2-1sys/nfs/nfs_socket.c
+27-92 files

OpenBSD/src 9XNx6zKsys/nfs nfsm_subs.h nfs_socket.c

   After calling m_freem() on nmi_mrep (or nmi_mreq) set the pointer to NULL.

   Only do this if struct nfsm_info doesn't have local scope.
   In some cases the caller would perfrom another m_freem and double free
   the mbuf and Bad Things(TM) would happen.

   from claudio@; Reported by Claes M Nyberg on bugs@; with & ok miod@

   nfsm_srvnamesiz() may set up an NFSERR_NAMETOL error, which nfsm_reply() would
   consider as not tragic enough to abort the operation, in order to batch error
   replies.

   This would end up invoking nfs_namei() using the length obtained from
   the NFS request, and Bad Things(TM) would happen if this value is larger
   than MAXPATHLEN.

   from miod@; Reported by Claes M Nyberg on bugs@; tweaks & ok claudio@

   this is errata/7.5/008_nfs.patch.sig
VersionDeltaFile
1.47.22.1+25-8sys/nfs/nfsm_subs.h
1.145.2.1+2-1sys/nfs/nfs_socket.c
+27-92 files

OpenBSD/src oOdqAt0share/man/man8 rc.shutdown.8

   Document when vmd(8) VMs are stopped;  OK mlarkin

   Useful to know in setups where pkg daemons and VMs depend on each other.
VersionDeltaFile
1.17+5-2share/man/man8/rc.shutdown.8
+5-21 files

OpenBSD/src aaU5QSqsbin/iked radius.c ikev2.c

   Add handling of "Class" attribute.  diff from markus

   ok markus
VersionDeltaFile
1.13+15-1sbin/iked/radius.c
1.388+3-1sbin/iked/ikev2.c
1.99+2-1sbin/iked/config.c
1.232+2-1sbin/iked/iked.h
+22-44 files

OpenBSD/src 6MjUdJ7usr.bin/ssh sshd_config.5

   minor grammar/sort fixes for refuseconnection; ok djm
VersionDeltaFile
1.374+4-4usr.bin/ssh/sshd_config.5
+4-41 files

OpenBSD/src gncd5LJlib/libpcap gencode.c, sbin/fsck_ffs pass5.c pass1.c

   remove unused variables
VersionDeltaFile
1.52+2-2sbin/fsck_ffs/pass5.c
1.50+1-2sbin/fsck_ffs/pass1.c
1.43+1-2sbin/quotacheck/quotacheck.c
1.20+1-2usr.bin/rpcinfo/rpcinfo.c
1.70+1-2usr.bin/w/w.c
1.67+1-2lib/libpcap/gencode.c
+7-121 files not shown
+8-147 files

OpenBSD/src HpkPKCmusr.sbin/radiusd eap2mschap_local.h

   __STDC_VERSION__ not __STDC_VERSION; ok miod@
VersionDeltaFile
1.3+3-3usr.sbin/radiusd/eap2mschap_local.h
+3-31 files

OpenBSD/src CjG2uYmusr.sbin/radiusd radiusd_ipcp.c radiusd_eap2mschap.c

   Improve the log messages and white spaces.
VersionDeltaFile
1.17+23-21usr.sbin/radiusd/radiusd_ipcp.c
1.4+9-11usr.sbin/radiusd/radiusd_eap2mschap.c
+32-322 files

OpenBSD/src bfvxbsXusr.sbin/radiusd radiusd_ipcp.c radiusd_ipcp.h

   Keep the number of requests for a DAE server below 64 to avoid
   congestion.
VersionDeltaFile
1.16+38-4usr.sbin/radiusd/radiusd_ipcp.c
1.3+3-1usr.sbin/radiusd/radiusd_ipcp.h
+41-52 files

OpenBSD/src vD5RyObusr.sbin/radiusctl radiusctl.c radiusctl.8, usr.sbin/radiusd radiusd_ipcp.c radiusd_ipcp.h

   Add "delete" command to "radiusctl ipcp".  Also, send  "stop" that was
   missing when disconnecting all when acct-{on,off} received.
VersionDeltaFile
1.15+37-9usr.sbin/radiusd/radiusd_ipcp.c
1.13+7-3usr.sbin/radiusctl/radiusctl.c
1.10+6-2usr.sbin/radiusctl/radiusctl.8
1.5+2-1usr.sbin/radiusctl/parser.h
1.6+2-1usr.sbin/radiusctl/parser.c
1.2+2-1usr.sbin/radiusd/radiusd_ipcp.h
+56-176 files

OpenBSD/src bVfaVbdusr.sbin/radiusd radiusd_module.c

   Handle EAGAIN properly and fix the log when disconnected.
VersionDeltaFile
1.20+7-3usr.sbin/radiusd/radiusd_module.c
+7-31 files

OpenBSD/src LbyibnTusr.bin/ssh servconf.c

   bad whitespace in config dump output
VersionDeltaFile
1.418+2-2usr.bin/ssh/servconf.c
+2-21 files

OpenBSD/src FLJ82Xdusr.bin/ssh sntrup761.c sntrup761.sh

   update the Streamlined NTRU Prime code from the "ref" implementation
   in SUPERCOP 20201130 to the "compact" implementation in SUPERCOP
   20240808. The new version is substantially faster.
   Thanks to Daniel J Bernstein for pointing out the new implementation
   (and of course for writing it).

   tested in snaps/ok deraadt@
VersionDeltaFile
1.7+1,888-1,004usr.bin/ssh/sntrup761.c
1.8+35-22usr.bin/ssh/sntrup761.sh
1.3+5-1usr.bin/ssh/kexsntrup761x25519.c
+1,928-1,0273 files

OpenBSD/src GhASvR7usr.bin/ssh sshd.8

   document Match invalid-user
VersionDeltaFile
1.327+6-2usr.bin/ssh/sshd.8
+6-21 files

OpenBSD/src 3zCqiqOusr.bin/ssh servconf.c sshd_config.5

   add a "Match invalid-user" predicate to sshd_config Match options.

   This allows writing Match conditions that trigger for invalid username.
   E.g.

   PerSourcePenalties refuseconnection:90s
   Match invalid-user
     RefuseConnection yes

   Will effectively penalise bots try to guess passwords for bogus accounts,
   at the cost of implicitly revealing which accounts are invalid.

   feedback markus@
VersionDeltaFile
1.417+15-2usr.bin/ssh/servconf.c
1.373+6-4usr.bin/ssh/sshd_config.5
1.168+2-1usr.bin/ssh/servconf.h
1.162+2-1usr.bin/ssh/auth.c
+25-84 files

OpenBSD/src Q6oIRPPusr.bin/ssh servconf.c sshd_config.5

   Add a "refuseconnection" penalty class to sshd_config
   PerSourcePenalties

   This allows penalising connection sources that have had connections
   dropped by the RefuseConnection option. ok markus@
VersionDeltaFile
1.416+11-3usr.bin/ssh/servconf.c
1.372+12-2usr.bin/ssh/sshd_config.5
1.4+6-5usr.bin/ssh/srclimit.h
1.612+8-1usr.bin/ssh/sshd.c
1.10+4-0usr.bin/ssh/srclimit.c
1.167+2-1usr.bin/ssh/servconf.h
+43-126 files

OpenBSD/src fCoaY9xusr.bin/ssh servconf.c monitor.c

   Add a sshd_config "RefuseConnection" option

   If set, this will terminate the connection at the first authentication
   request (this is the earliest we can evaluate sshd_config Match blocks)

   ok markus@
VersionDeltaFile
1.415+13-2usr.bin/ssh/servconf.c
1.244+11-1usr.bin/ssh/monitor.c
1.371+10-2usr.bin/ssh/sshd_config.5
1.166+3-1usr.bin/ssh/servconf.h
1.3+1-0usr.bin/ssh/srclimit.h
+38-65 files

OpenBSD/src iSe6oY5usr.bin/ssh servconf.c

   switch sshd_config Match processing to the argv tokeniser too;
   ok markus@
VersionDeltaFile
1.414+16-20usr.bin/ssh/servconf.c
+16-201 files

OpenBSD/src b4AEkBkusr.bin/ssh readconf.c

   switch "Match" directive processing over to the argv string
   tokeniser, making it possible to use shell-like quoting in Match
   directives, particularly "Match exec". ok markus@
VersionDeltaFile
1.390+14-21usr.bin/ssh/readconf.c
+14-211 files

OpenBSD/src wxB50I9usr.bin/ssh ssh-keygen.c

   include pathname in some of the ssh-keygen passphrase prompts. Helps
   the user know what's going on when ssh-keygen is invoked via other
   tools. Requested in GHPR503
VersionDeltaFile
1.475+17-9usr.bin/ssh/ssh-keygen.c
+17-91 files

OpenBSD/src 8DSgK4susr.bin/ssh monitor.c

   Do not apply authorized_keys options when signature verification
   fails. Prevents restrictive key options being incorrectly applied
   to subsequent keys in authorized_keys. bz3733, ok markus@
VersionDeltaFile
1.243+2-2usr.bin/ssh/monitor.c
+2-21 files

OpenBSD/src jAQRFeJusr.bin/calendar/calendars calendar.history

   Drop the "Giant panda discovered" entry because it looks like
   half-way between misleadingly eurocentric and urban legend.
   It was so obviously suspect that it had already been marked "(?!)"
   since at least 4.3BSD-Tahoe (June 1988).

   Brought up by <Rob dot Schmersel at bahnhof dot se>,
   additional research by <me at FletcherPorter dot com>,
   see https://marc.info/?l=openbsd-bugs&m=172634202204747 for details.
VersionDeltaFile
1.83+1-2usr.bin/calendar/calendars/calendar.history
+1-21 files

OpenBSD/src KeSz9r0sys/conf files

   vxlan.h not needed
VersionDeltaFile
1.740+2-2sys/conf/files
+2-21 files

OpenBSD/src 8xaxT6ksys/dev/pv files.pv

   pvclock.h not needed
VersionDeltaFile
1.18+2-2sys/dev/pv/files.pv
+2-21 files

OpenBSD/src CdYSCzrsys/conf files

   ccp.h no longer required
VersionDeltaFile
1.739+2-2sys/conf/files
+2-21 files