BSD Commit Log Search

lint: Add linter that finds unused imports in php classes

mvc: Remove UIModelGrid imports in IDS, Monit, Syslog SettingsController, unused

radvd: skipping disabled needs ignore list population too #10044

mvc: BaseListField replace empty check with isSet so a 0 value is considered a non empty selection (#10047)

radvd: match radvd_enable() more closely for #10044

Users are confused why they can add an entry but their settings are not
being used.  This is specifically wrong according to the inventor of
"dhcpd6track6allowoverride" as it circumvents half of its use cases but
more closely matches user expectation.

May cause regression for some people, but not much we can do here other
than not doing it.

Firewall: Remove tokenizer from categories and use selectpicker instead (#10049)

The issue with the tokenizer is the limit of items that is set to 10 per default, which does not always display all items. And you can increase it, but that also needs CSS changes. Additionally the tokenizer is not maintained anymore, and needs replacement. Cutting it out here decreases the need to clean this up later.

The fix here is that now all categories will be displayed and are searchable via the normal selectpicker search field.

Did not want to remove that newline

Remove tokenizer from categories in filter and nat rules, to natively display all items without workarounds

Firewall: Allow more items inside the category tokenizer dropdown

kea: move pool-in-subnet validation logic mostly to KeaPoolsField; closes #10040

While here use getValues() consistently and move the trim() calls to the
latest point in time to avoid generalized trimming of input (the subnet
notation isn't allowed to be trimmed).

An alternative would have been to allow " ?- ?" as a split-regex since the
trim() itself will allow the leading an trailing whitespaces of the pool line,
too.

Suggested by: @Astranox

kea: move pool-in-subnet validation logic mostly to KeaPoolsField

kea: move pool-in-subnet validation logic mostly to KeaPoolsField

foo

avoid stacking messages optionally

kea: tweak messages

foo

kea: iterateinput does not filter empty strings

fix issue

net/frr: add BGP maximum-paths support for ECMP (#5340)

foo

kea: move pool-in-subnet validation logic mostly to KeaPoolsField

mvc: BaseListField replace empty check with isSet so a 0 value is considered a non empty selection

plugins: use Konstantinos' real name in historic mentions (#5352)

Contributing: typo (#5351)

kea: small xml style update in model

Add UPDATING entries and bump version

Approved by:    so

rpcsec_gss: Fix a stack overflow in svc_rpc_gss_validate()

svc_rpc_gss_validate() copies the input message into a stack buffer
without ensuring that the buffer is large enough.  Sure enough,
oa_length may be up to 400 bytes, much larger than the provided space.
This enables an unauthenticated user to trigger an overflow and obtain
remote code execution.

Add a runtime check which verifies that the copy won't overflow.

Approved by:    so
Security:       FreeBSD-SA-26:08.rpcsec_gss
Security:       CVE-2026-4747
Reported by:    Nicholas Carlini <npc at anthropic.com>
Reviewed by:    rmacklem
Fixes:          a9148abd9da5d

tcp: plug an mbuf leak

When a challenge ACK should be sent via tcp_send_challenge_ack(),
but the rate limiter suppresses the sending, free the mbuf chain.
The caller of tcp_send_challenge_ack() expects this similar to the
callers of tcp_respond().

Approved by:    so
Security:       FreeBSD-SA-26:06.tcp
Security:       CVE-2026-4247
Reviewed by:    lstewart
Tested by:      lstewart
Sponsored by:   Netflix, Inc.

Services: Kea: DDNS: Add subnet specific qualifying suffix and prevent updates if no server is set. (#10038)

Add UPDATING entries and bump version

Approved by:    so