aboutsummaryrefslogtreecommitdiff
Commit message (Expand)AuthorAgeFilesLines
* Add UPDATING entries and bump versionrelease/15.0.0-p10releng/15.0Mark Johnston34 hours2-1/+45
* ldns: Fix query response validationGordon Tetlow39 hours3-3/+110
* openssl: Fix multiple vulnerabilitiesGordon Tetlow39 hours33-93/+472
* vt: Avoid integer overflow in CONS_HISTORY ioctlEd Maste39 hours2-7/+8
* unbound: Apply upstream patchesDag-Erling Smørgrav39 hours15-44/+209
* imgact_elf: Clear no-ASLR and -WXORX flags earlier for setugid imagesMark Johnston39 hours3-27/+187
* arm64: Workaround the following errataAndrew Turner39 hours1-9/+51
* linux: Correct the issetugid check in copyout_auxargsMark Johnston39 hours1-3/+1
* in6_mcast: Fix a race in in6p_set_source_filter()Mark Johnston39 hours2-44/+36
* sigqueue: In capability mode, only allow signalling selfEd Maste39 hours2-3/+19
* sound: Fix software buffer lifetime issuesMark Johnston39 hours4-16/+175
* sound: Check for offset overflow in dsp_mmap_single()Christos Margiolis39 hours3-0/+55
* ktls: Don't attempt to modify non-anonymous mbufs on the receive pathJohn Baldwin39 hours3-3/+108
* thr_kill2: Respect p_cansignal()Mark Johnston39 hours1-1/+1
* openssl: Update to 3.5.6 and associated fixes.Enji Cooper3 days3305-180153/+223394
* syslogd: fix memory leak in casper_ttymsg()Pat Maddox11 days1-8/+6
* Add UPDATING entries and bump versionrelease/15.0.0-p9Mark Johnston2026-05-192-1/+27
* cap_net: do not allow new limits to drop keys from the old onesMariusz Zaborski2026-05-191-0/+31
* bsdconfig: Make sure that SSID names are properly escapedMark Johnston2026-05-191-0/+3
* bsdinstall: Avoid invoking eval on the wlan SSID listMark Johnston2026-05-191-16/+31
* libcasper: switch from select(2) to poll(2)Mariusz Zaborski2026-05-195-141/+262
* ptrace: Fix validation of PT_SC_REMOTE argumentsMark Johnston2026-05-192-26/+76
* fusefs: Handle buggy servers' LISTXATTR responseAlan Somers2026-05-193-6/+86
* netmap: Drain selinfo sleepers in nm_os_selinfo_uninit()Mark Johnston2026-05-191-0/+1
* jaildesc: Make sure to drain selinfo sleepers in jaildesc_close()Mark Johnston2026-05-194-8/+206
* procdesc: Make sure to drain selinfo sleepers in procdesc_free()Mark Johnston2026-05-194-8/+133
* setcred: Fix buffer overflowDag-Erling Smørgrav2026-05-191-2/+2
* freebsd-update: Skip /etc/ssl/cert.pemDag-Erling Smørgrav2026-05-191-1/+1
* Add UPDATING entries and bump versionrelease/15.0.0-p8Mark Johnston2026-04-302-1/+6
* dhclient: Improve server and filename validationDag-Erling Smørgrav2026-04-301-21/+54
* Add UPDATING entries and bump versionrelease/15.0.0-p7Mark Johnston2026-04-282-1/+30
* libnv: fix heap overflow in nvlist_recv()Mariusz Zaborski2026-04-282-4/+62
* libnv: switch fd_wait() from select(2) to poll(2)Mariusz Zaborski2026-04-282-6/+62
* pf: improve SCTP validationKristof Provost2026-04-282-5/+101
* dhclient: Fix reallocation of dhclient script environmentsMark Johnston2026-04-281-2/+2
* dhclient: Check for unexpected characters in some DHCP server optionsMark Johnston2026-04-281-0/+12
* execve: Fix an operator precedence bugMark Johnston2026-04-281-1/+1
* amd64: fix INVLPGB range invalidationKyle Evans2026-04-281-19/+6
* contrib/tzdata: import tzdata 2025c, 2026a and 2026bPhilip Paeps2026-04-2824-460/+970
* pf: fix duplicate rule detection for automatic tablesKristof Provost2026-04-282-3/+43
* Add UPDATING entries and bump versionrelease/15.0.0-p6Mark Johnston2026-04-202-1/+18
* pkru: Fix handling of 1GB largepage mappingsMark Johnston2026-04-206-12/+274
* tty: Avoid leaving dangling pointers in tty_drop_ctty()Mark Johnston2026-04-203-0/+87
* packages: Fix build with libucl 0.9.3Lexi Winter2026-04-152-2/+2
* timerfd: Fix interval callout schedulingJake Freeland2026-04-151-11/+13
* vm_fault: Reset m_needs_zeroing properlyMark Johnston2026-04-151-4/+3
* Add UPDATING entries and bump versionrelease/15.0.0-p5Philip Paeps2026-03-252-1/+15
* pf: include all elements when hashing rulesKristof Provost2026-03-251-9/+93
* pfctl: always warn if a duplicate rule was detectedKristof Provost2026-03-251-2/+2
* pf tests: verify that we handle address range rules correctlyKristof Provost2026-03-251-0/+38