aboutsummaryrefslogtreecommitdiff
Commit message (Expand)AuthorAgeFilesLines
* Add UPDATING entries and bump version.release/14.1.0-p8releng/14.1Gordon Tetlow2025-02-212-1/+6
* ssh: Bump VersionAddendum for CVE fixesEd Maste2025-02-213-3/+3
* ssh: Fix cases where error codes were not correctly setEd Maste2025-02-215-3/+16
* ssh: Don't reply to PING in preauth phase or during KEXEd Maste2025-02-211-1/+9
* Add UPDATING entries and bump versionrelease/14.1.0-p7Mark Johnston2025-01-292-1/+21
* etcupdate: Restrict access to the conflicts directoryMark Johnston2025-01-291-0/+3
* OpenSSH: correct logic error in ObscureKeystrokeTimingEd Maste2025-01-291-2/+3
* contrib/tzdata: import tzdata 2025aPhilip Paeps2025-01-2919-143/+369
* contrib/tzdata: import tzdata 2024bPhilip Paeps2025-01-2922-1241/+1768
* tarfs: Fix the size of struct tarfs_fid and add a static assertRick Macklem2025-01-292-1/+3
* ext2fs: Fix the size of struct ufid and add a static assertRick Macklem2025-01-292-1/+3
* cd9660: Make sure that struct ifid fits in generic filehandle structureMark Johnston2025-01-292-1/+4
* audit: Fix short-circuiting in syscallenter()Mark Johnston2025-01-292-4/+9
* svc.c: Check for a non-NULL xp_socketRick Macklem2025-01-291-0/+1
* Add UPDATING entries and bump revisionEd Maste2024-10-292-1/+15
* pam_xdg: Fix user xdg runtime directory's descriptor leakOlivier Certner2024-10-291-0/+1
* fetch: correct env var name for --crl option to workFranco Fichtner2024-10-291-1/+1
* ctl: limit memory allocation in pci_virtio_scsiPierre Pronchery2024-10-291-0/+12
* bhyve/nvme: Fix Infinite loop in queue processingChuck Tuffli2024-10-291-8/+73
* bhyve: improve bounds checks in hda_codecPierre Pronchery2024-10-291-3/+6
* bhyve: validate corb->wp to avoid infinite loopEd Maste2024-10-291-0/+5
* bhyve: avoid TOCTOU on iov_len in virtio_vq_recordon()Pierre Pronchery2024-10-292-5/+15
* bhyve/nvme: Fix out-of-bounds read in NVMe log pageChuck Tuffli2024-10-291-5/+5
* Add UPDATING entries and bump revision.Gordon Tetlow2024-09-192-1/+12
* libnv: correct the calculation of the structure's sizeMariusz Zaborski2024-09-191-1/+1
* bhyve: improve input validation in pci_xhciPierre Pronchery2024-09-191-5/+73
* pf: rework pf_icmp_state_lookup() failure modeKristof Provost2024-09-192-9/+15
* pf: be less strict about icmp state checking for sloppy state trackingKristof Provost2024-09-191-0/+3
* pf: try to lookup the icmp state based on a correct packet descriptorKristof Provost2024-09-191-2/+2
* pf: improve the ICMPv6 direction checkKristof Provost2024-09-193-37/+85
* pf: invert direction for inner icmp state lookupsKristof Provost2024-09-191-10/+11
* pf: fix icmp-in-icmp state lookupKristof Provost2024-09-191-14/+17
* calendar: don't setlogin(2) in the -a user handlersKyle Evans2024-09-041-1/+1
* Add UPDATING entries and bump revisionEd Maste2024-09-042-1/+23
* umtx: shm: 'ushm_refcnt > 0' => 'ushm_refcnt != 0'Olivier Certner2024-09-041-2/+2
* umtx: shm: Prevent reference counting overflowOlivier Certner2024-09-041-22/+54
* umtx: shm: Fix use-after-free due to multiple drops of the registry referenceOlivier Certner2024-09-041-18/+33
* umtx: shm: Collapse USHMF_REG_LINKED and USHMF_OBJ_LINKED flagsOlivier Certner2024-09-041-9/+5
* openssl: Avoid type errors in EAI-related name check logic.Viktor Dukhovni2024-09-045-26/+142
* bhyve: fix off by one error in pci_xhciPierre Pronchery2024-09-041-2/+2
* ctl: avoid heap info leak in ctl_request_senseEd Maste2024-09-041-8/+2
* ctl: fix Out-Of-Bounds access in ctl_report_supported_opcodesPierre Pronchery2024-09-041-9/+8
* ctl: fix memory disclosure in read/write buffer commandsPierre Pronchery2024-09-041-2/+2
* ctl: fix Use-After-Free in ctl_write_bufferAlan Somers2024-09-042-8/+19
* bhyve: fix Out-Of-Bounds read/write heap in tpm_ppi_mem_handlerPierre Pronchery2024-09-041-2/+2
* libnv: verify that string is null terminatedMariusz Zaborski2024-09-041-0/+4
* libnv: allocate buffer in a safe wayMariusz Zaborski2024-09-042-11/+15
* Add UPDATING entries and bump the branch versionMark Johnston2024-08-072-1/+18
* ktrace: Fix an inverted privilege checkMark Johnston2024-08-071-1/+1
* ifconfig: Fix default netmask calculationMichael Gmelin2024-08-071-4/+4