summaryrefslogtreecommitdiff
Commit message (Expand)AuthorAgeFilesLines
* Add UPDATING entries and bump versionrelease/14.3.0-p15Mark Johnston2026-06-082-1/+42
* ldns: Fix query response validationGordon Tetlow2026-06-073-3/+110
* openssl: Fix multiple vulnerabilitiesGordon Tetlow2026-06-0720-37/+239
* vt: Avoid integer overflow in CONS_HISTORY ioctlEd Maste2026-06-072-7/+8
* unbound: Apply upstream patchesDag-Erling Smørgrav2026-06-0715-44/+209
* imgact_elf: Clear no-ASLR and -WXORX flags earlier for setugid imagesMark Johnston2026-06-073-27/+187
* arm64: Workaround the following errataAndrew Turner2026-06-072-1/+102
* linux: Correct the issetugid check in copyout_auxargsMark Johnston2026-06-071-3/+1
* in6_mcast: Fix a race in in6p_set_source_filter()Mark Johnston2026-06-072-44/+36
* sigqueue: In capability mode, only allow signalling selfEd Maste2026-06-072-3/+19
* sound: Fix software buffer lifetime issuesMark Johnston2026-06-074-16/+165
* sound: Check for offset overflow in dsp_mmap_single()Christos Margiolis2026-06-073-0/+54
* ktls: Don't attempt to modify non-anonymous mbufs on the receive pathJohn Baldwin2026-06-073-3/+108
* thr_kill2: Respect p_cansignal()Mark Johnston2026-06-071-1/+1
* crypto/openssl: Update to 3.0.20Enji Cooper2026-06-072730-222748/+196968
* Add UPDATING entries and bump versionrelease/14.3.0-p14Mark Johnston2026-05-202-1/+27
* cap_net: do not allow new limits to drop keys from the old onesMariusz Zaborski2026-05-201-0/+31
* bsdconfig: Make sure that SSID names are properly escapedMark Johnston2026-05-201-0/+3
* bsdinstall: Avoid invoking eval on the wlan SSID listRenato Botelho2026-05-201-16/+31
* libcasper: switch from select(2) to poll(2)Mariusz Zaborski2026-05-205-142/+263
* ptrace: Fix validation of PT_SC_REMOTE argumentsMark Johnston2026-05-202-28/+77
* fusefs: Handle buggy servers' LISTXATTR responseAlan Somers2026-05-203-6/+85
* netmap: Drain selinfo sleepers in nm_os_selinfo_uninit()Mark Johnston2026-05-191-0/+1
* procdesc: Make sure to drain selinfo sleepers in procdesc_free()Mark Johnston2026-05-194-8/+133
* setcred: Fix buffer overflowDag-Erling Smørgrav2026-05-191-2/+2
* freebsd-update: Skip /etc/ssl/cert.pemDag-Erling Smørgrav2026-05-191-1/+1
* Add UPDATING entries and bump versionrelease/14.3.0-p13Mark Johnston2026-04-302-1/+6
* dhclient: Improve server and filename validationDag-Erling Smørgrav2026-04-301-21/+54
* Add UPDATING entries and bump versionrelease/14.3.0-p12Mark Johnston2026-04-282-1/+27
* libnv: fix heap overflow in nvlist_recv()Mariusz Zaborski2026-04-282-4/+62
* libnv: switch fd_wait() from select(2) to poll(2)Mariusz Zaborski2026-04-282-6/+62
* libnv: add tests to verify potential overflow issuesMariusz Zaborski2026-04-284-7/+210
* libnv: add test to verify null termination of string in arrayMariusz Zaborski2026-04-281-2/+56
* dhclient: Fix reallocation of dhclient script environmentsMark Johnston2026-04-281-2/+2
* dhclient: Check for unexpected characters in some DHCP server optionsMark Johnston2026-04-281-0/+12
* execve: Fix an operator precedence bugMark Johnston2026-04-281-1/+1
* pf: improve SCTP validationKristof Provost2026-04-282-5/+103
* amd64: fix INVLPGB range invalidationKyle Evans2026-04-281-19/+6
* contrib/tzdata: import tzdata 2025c, 2026a and 2026bPhilip Paeps2026-04-2824-459/+969
* Add UPDATING entries and bump versionrelease/14.3.0-p11Mark Johnston2026-04-212-1/+15
* pkru: Fix handling of 1GB largepage mappingsMark Johnston2026-04-216-12/+274
* tty: Avoid leaving dangling pointers in tty_drop_ctty()Mark Johnston2026-04-213-0/+87
* timerfd: Fix interval callout schedulingJake Freeland2026-04-211-11/+13
* vm_fault: Reset m_needs_zeroing properlyMark Johnston2026-04-211-4/+3
* Add UPDATING entries and bump versionrelease/14.3.0-p10Philip Paeps2026-03-252-1/+12
* pf: include all elements when hashing rulesKristof Provost2026-03-251-8/+83
* pfctl: always warn if a duplicate rule was detectedKristof Provost2026-03-251-2/+2
* pf tests: verify that we handle address range rules correctlyKristof Provost2026-03-251-0/+38
* pf: Fix hashing of IP address rangesMichael Gmelin2026-03-251-0/+1
* rpcsec_gss: Fix a stack overflow in svc_rpc_gss_validate()Mark Johnston2026-03-252-2/+17