[Midnightbsd-cvs] [MidnightBSD/src] fc0dfa: Fix sql injection and improve documentation (#337)
Lucas Holt
noreply at github.com
Sat Jun 6 22:12:53 EDT 2026
Branch: refs/heads/stable/4.1
Home: https://github.com/MidnightBSD/src
Commit: fc0dfaf8f92a0e62d09c7bca647a75294689fb70
https://github.com/MidnightBSD/src/commit/fc0dfaf8f92a0e62d09c7bca647a75294689fb70
Author: Lucas Holt <luke at foolishgames.com>
Date: 2026-06-06 (Sat, 06 Jun 2026)
Changed paths:
M lib/libmsearch/msearch_fulltext.c
M lib/libmsearch/msearch_search.c
M usr.bin/msearch/msearch.1
Log Message:
-----------
Fix sql injection and improve documentation (#337)
* msearch: document current CLI behavior
* msearch: fix SQL injection in search paths
AI-Assisted-by: GPT 5.4
* msearch: simplify search statement helpers
AI-Assisted-by: GPT 5.4
Commit: 18a8fe9dacbc5fcf22ddb72faca41470f9b8bb4a
https://github.com/MidnightBSD/src/commit/18a8fe9dacbc5fcf22ddb72faca41470f9b8bb4a
Author: Lucas Holt <luke at foolishgames.com>
Date: 2026-06-06 (Sat, 06 Jun 2026)
Changed paths:
A AGENTS.md
Log Message:
-----------
repo: add agent instructions
AI-Assisted-by: GPT 5.4
Signed-off-by: Lucas Holt <luke at foolishgames.com>
Commit: c4655747e0c59f35fcdc33a0d3c08cbe5508c7f9
https://github.com/MidnightBSD/src/commit/c4655747e0c59f35fcdc33a0d3c08cbe5508c7f9
Author: Lucas Holt <luke at foolishgames.com>
Date: 2026-06-06 (Sat, 06 Jun 2026)
Changed paths:
M README
Log Message:
-----------
readme: refresh repository guidance
AI-Assisted-by: GPT 5.4
Signed-off-by: Lucas Holt <luke at foolishgames.com>
Commit: 46c7049e5553296376ae2bc0e0c98c5035943d70
https://github.com/MidnightBSD/src/commit/46c7049e5553296376ae2bc0e0c98c5035943d70
Author: Lucas Holt <luke at foolishgames.com>
Date: 2026-06-06 (Sat, 06 Jun 2026)
Changed paths:
M libexec/rc/rc.d/firstboot
Log Message:
-----------
firstboot: harden GPU installer flow
AI-Assisted-by: GPT 5.4
Signed-off-by: Lucas Holt <luke at foolishgames.com>
Commit: 98126aec508d2108015b9ebc6a87421f77920c8d
https://github.com/MidnightBSD/src/commit/98126aec508d2108015b9ebc6a87421f77920c8d
Author: Lucas Holt <luke at foolishgames.com>
Date: 2026-06-06 (Sat, 06 Jun 2026)
Changed paths:
M .github/workflows/cross-bootstrap-tools.yml
Log Message:
-----------
ci: add MidnightBSD kernel build job
AI-Assisted-by: GPT 5.4
Signed-off-by: Lucas Holt <luke at foolishgames.com>
Commit: 7edb6a634b47553ab1a73c0b44755321142ca761
https://github.com/MidnightBSD/src/commit/7edb6a634b47553ab1a73c0b44755321142ca761
Author: Lucas Holt <luke at foolishgames.com>
Date: 2026-06-06 (Sat, 06 Jun 2026)
Changed paths:
M .github/workflows/cross-bootstrap-tools.yml
Log Message:
-----------
ci: fix kernel build matrix expansion
AI-Assisted-by: GPT 5.4
Signed-off-by: Lucas Holt <luke at foolishgames.com>
Commit: 9f4a691a42458495b892f78b29f24acf2ea62c0e
https://github.com/MidnightBSD/src/commit/9f4a691a42458495b892f78b29f24acf2ea62c0e
Author: Lucas Holt <luke at foolishgames.com>
Date: 2026-06-06 (Sat, 06 Jun 2026)
Changed paths:
M .github/workflows/codeql.yml
Log Message:
-----------
ci: use manual CodeQL C/C++ build
AI-Assisted-by: GPT 5.4
Signed-off-by: Lucas Holt <luke at foolishgames.com>
Commit: 8c5352e40b6b7bb786237f4c0bd251f05bc93726
https://github.com/MidnightBSD/src/commit/8c5352e40b6b7bb786237f4c0bd251f05bc93726
Author: Lucas Holt <luke at foolishgames.com>
Date: 2026-06-06 (Sat, 06 Jun 2026)
Changed paths:
M .github/workflows/codeql.yml
M .github/workflows/cross-bootstrap-tools.yml
M .github/workflows/style.yml
Log Message:
-----------
ci: update workflows for current action runtimes
AI-Assisted-by: GPT 5.4
Signed-off-by: Lucas Holt <luke at foolishgames.com>
Commit: 93deb56b4522ec876f002289b323c3999362b678
https://github.com/MidnightBSD/src/commit/93deb56b4522ec876f002289b323c3999362b678
Author: Lucas Holt <luke at foolishgames.com>
Date: 2026-06-06 (Sat, 06 Jun 2026)
Changed paths:
M .github/workflows/cross-bootstrap-tools.yml
Log Message:
-----------
ci: remove unsupported MidnightBSD VM build job
The previously added MidnightBSD native build job used cross-platform-actions/action with operating_system=midnightbsd.
That value is not accepted by the currently published action release, and the workflow fails immediately with:
Unrecognized operating system: midnightbsd
The released action documentation and supported-platform table still list only freebsd, openbsd, netbsd, and haiku, so keeping the MidnightBSD job in-tree would leave CI permanently red.
Remove the unsupported job for now and restore the workflow name to match the remaining cross-build coverage. We can add a MidnightBSD native job back once the action publishes a release that actually recognizes MidnightBSD as a supported operating_system value.
AI-Assisted-by: GPT 5.4
Signed-off-by: Lucas Holt <luke at foolishgames.com>
Commit: b370cfbe48b89ef58f72a41f19fbb77fd6abcdc2
https://github.com/MidnightBSD/src/commit/b370cfbe48b89ef58f72a41f19fbb77fd6abcdc2
Author: Lucas Holt <luke at foolishgames.com>
Date: 2026-06-06 (Sat, 06 Jun 2026)
Changed paths:
M .github/workflows/codeql.yml
M .github/workflows/cross-bootstrap-tools.yml
Log Message:
-----------
ci: install libc headers for Linux builds
AI-Assisted-by: GPT 5.4
Signed-off-by: Lucas Holt <luke at foolishgames.com>
Commit: 8b54c8660a0a99b6565ec3a2f511ff3f62ba909f
https://github.com/MidnightBSD/src/commit/8b54c8660a0a99b6565ec3a2f511ff3f62ba909f
Author: Lucas Holt <luke at foolishgames.com>
Date: 2026-06-06 (Sat, 06 Jun 2026)
Changed paths:
M usr.sbin/bsdinstall/scripts/config
M usr.sbin/bsdinstall/scripts/netconfig
Log Message:
-----------
bsdinstall: Add DNS provider selection to network setup
Add a new configuration step during network setup to allow users to
select from popular DNS providers (Google, Cloudflare, Quad9, OpenDNS).
This helps users set up family-friendly or secure DNS easily.
When a provider is selected:
- The provider's DNS addresses are pre-filled in the manual entry form.
- A /etc/dhclient.conf snippet is created to 'supersede' DHCP-assigned
DNS servers.
- resolv_enable="NO" is set in rc.conf to prevent the resolv rc script
from overwriting resolv.conf with DHCP data from kenv.
These settings are persisted to the installed system during the final
configuration step.
Signed-off-by: Lucas Holt <luke at foolishgames.com>
Commit: ce894f4f424edf32a46392e9eca2469145bb510e
https://github.com/MidnightBSD/src/commit/ce894f4f424edf32a46392e9eca2469145bb510e
Author: Lucas Holt <luke at foolishgames.com>
Date: 2026-06-06 (Sat, 06 Jun 2026)
Changed paths:
M usr.sbin/bsdinstall/scripts/netconfig
Log Message:
-----------
bsdinstall: Improve network configuration and fix overwrites
- Use per-interface rc.conf snippets (rc.conf.net.$INTERFACE) to prevent
overwriting network settings when multiple interfaces are configured.
- Ensure DNS provider settings are applied even if IPv4/IPv6 manual
configuration is skipped for an interface.
- Move resolv_enable="NO" to a separate rc.conf snippet to ensure it
persists across multiple netconfig runs.
- Fix a bug where netconfig would exit early if IPv4 and IPv6 were both
unavailable or skipped.
Signed-off-by: Lucas Holt <luke at foolishgames.com>
Commit: 520b7c0bb40902ddd4ce2327d292e5ee5f9408c9
https://github.com/MidnightBSD/src/commit/520b7c0bb40902ddd4ce2327d292e5ee5f9408c9
Author: Lucas Holt <luke at foolishgames.com>
Date: 2026-06-06 (Sat, 06 Jun 2026)
Changed paths:
M .github/workflows/cross-bootstrap-tools.yml
Log Message:
-----------
ci: add clang resource headers for arm64 kernel build
AI-Assisted-by: GPT 5.4
Signed-off-by: Lucas Holt <luke at foolishgames.com>
Commit: cc44287c9c281b11ee142b300dfb95816b80e63e
https://github.com/MidnightBSD/src/commit/cc44287c9c281b11ee142b300dfb95816b80e63e
Author: Lucas Holt <luke at foolishgames.com>
Date: 2026-06-06 (Sat, 06 Jun 2026)
Changed paths:
M bin/midnightbsd-version/midnightbsd-version.1
M bin/midnightbsd-version/midnightbsd-version.sh.in
Log Message:
-----------
midnightbsd-version: add jail support
Add -j to inspect a jail's installed kernel and userland versions.
AI-Assisted-by: OpenAI Codex (GPT-5)
Signed-off-by: Lucas Holt <luke at foolishgames.com>
Commit: b3e1f8ce53b11a68c2e2a43a9bd60acc51ae0942
https://github.com/MidnightBSD/src/commit/b3e1f8ce53b11a68c2e2a43a9bd60acc51ae0942
Author: Lucas Holt <luke at foolishgames.com>
Date: 2026-06-06 (Sat, 06 Jun 2026)
Changed paths:
M usr.bin/batt/Makefile
M usr.bin/batt/batt.c
A usr.bin/batt/tests/Makefile
A usr.bin/batt/tests/batt_test.c
Log Message:
-----------
batt: harden sysctl handling and add tests
Reject stray positional arguments, validate sysctl result sizes, and add Kyua coverage for the updated behavior.
AI-Assisted-by: OpenAI Codex (GPT-5)
Signed-off-by: Lucas Holt <luke at foolishgames.com>
Commit: 68d90f065930bf10bc54878c52cecddf048dea1a
https://github.com/MidnightBSD/src/commit/68d90f065930bf10bc54878c52cecddf048dea1a
Author: Lucas Holt <luke at foolishgames.com>
Date: 2026-06-06 (Sat, 06 Jun 2026)
Changed paths:
M usr.bin/batt/tests/batt_test.c
Log Message:
-----------
batt tests: fix build warnings
Add a forward declaration for the renamed main entry point and avoid casting away const when constructing argv.
AI-Assisted-by: OpenAI Codex (GPT-5)
Signed-off-by: Lucas Holt <luke at foolishgames.com>
Commit: d552512fc5f0bed1e8eb4afc5df16b3c729e001b
https://github.com/MidnightBSD/src/commit/d552512fc5f0bed1e8eb4afc5df16b3c729e001b
Author: Lucas Holt <luke at foolishgames.com>
Date: 2026-06-06 (Sat, 06 Jun 2026)
Changed paths:
M tools/build/Makefile
Log Message:
-----------
tools/build: stage cdefs.h on MidnightBSD hosts
Include sys/sys/cdefs.h in the legacy header set when bootstrapping on MidnightBSD so host tools that pull in sys/font.h also see __nonstring.
AI-Assisted-by: OpenAI Codex (GPT-5)
Signed-off-by: Lucas Holt <luke at foolishgames.com>
Commit: c6c5462fe68a6f8e99500df37727445f1fcbdc97
https://github.com/MidnightBSD/src/commit/c6c5462fe68a6f8e99500df37727445f1fcbdc97
Author: Lucas Holt <luke at foolishgames.com>
Date: 2026-06-06 (Sat, 06 Jun 2026)
Changed paths:
M Jenkinsfile
Log Message:
-----------
jenkins: isolate kyua result files per architecture
Remove stale Kyua and JUnit result files before the test stage and use per-architecture filenames to avoid collisions in reused workspaces.
AI-Assisted-by: OpenAI Codex (GPT-5)
Signed-off-by: Lucas Holt <luke at foolishgames.com>
Commit: 56e27f6afca80e0432e017d6930b87a59f264a07
https://github.com/MidnightBSD/src/commit/56e27f6afca80e0432e017d6930b87a59f264a07
Author: Lucas Holt <luke at foolishgames.com>
Date: 2026-06-06 (Sat, 06 Jun 2026)
Changed paths:
M Jenkinsfile
Log Message:
-----------
jenkins: run tests in a DESTDIR jail
Install world, kernel, and tests into a per-architecture DESTDIR and run Kyua inside a temporary jail rooted there, avoiding mutation of permanent Jenkins nodes.
AI-Assisted-by: OpenAI Codex (GPT-5)
Signed-off-by: Lucas Holt <luke at foolishgames.com>
Commit: ca30b5b5fe66945bf101b16baf97c59afb54ecbe
https://github.com/MidnightBSD/src/commit/ca30b5b5fe66945bf101b16baf97c59afb54ecbe
Author: Lucas Holt <luke at foolishgames.com>
Date: 2026-06-06 (Sat, 06 Jun 2026)
Changed paths:
M sys/vm/vm_fault.c
Log Message:
-----------
The mmap(2) system call allows applications and system libraries to allocate
heap memory using the MAP_ANON flag. The system call allocates virtual memory
in the calling thread's address space and phyiscal memory is allocated on demand
as page faults occur. Memory allocated this way is allocated to be zero-filled.
Due to a regression introduced a previous erratum which attempted to fix a
similar problem, under some conditions, particularly heavy memory pressure with
swapping, the phyiscal pages allocated and mapped by the kernel may not be
zero-filled.
Obtained from: FreeBSD
Commit: 2e5b11886dfc418f288e592952b55f9bd7e62f85
https://github.com/MidnightBSD/src/commit/2e5b11886dfc418f288e592952b55f9bd7e62f85
Author: Lucas Holt <luke at foolishgames.com>
Date: 2026-06-06 (Sat, 06 Jun 2026)
Changed paths:
M sys/kern/tty.c
M tests/sys/kern/Makefile
A tests/sys/kern/tiocnotty.c
Log Message:
-----------
The implementation of TIOCNOTTY failed to clear a back-pointer from the
structure representing the controlling terminal to the calling process'
session. If the invoking process then exits, the terminal structure
may end up containing a pointer to freed memory.
Obtained from: FreeBSD
Commit: a0ae3b7d5cc4f80abd6c1dbb710e8218d9c7f61f
https://github.com/MidnightBSD/src/commit/a0ae3b7d5cc4f80abd6c1dbb710e8218d9c7f61f
Author: Lucas Holt <luke at foolishgames.com>
Date: 2026-06-06 (Sat, 06 Jun 2026)
Changed paths:
M lib/libc/x86/sys/pkru.3
M sys/amd64/amd64/pmap.c
M sys/amd64/amd64/sys_machdep.c
M sys/vm/vm_map.c
M sys/vm/vm_map.h
M tests/sys/posixshm/posixshm_test.c
Log Message:
-----------
Memory protection keys are an amd64 CPU feature, available in modern Intel and
AMD CPUs, which allow applications to apply access restrictions to regions of
virtual memory. On MidnightBSD this functionality is provided by the pkru(3)
interface.
In order to apply a particular protection key to an address range, the kernel
must update the corresponding page table entries. The subroutine which handled
this failed to take into account the presence of 1GB largepage mappings created
using the shm_create_largepage(3) interface. In particular, it would always
treat a page directory page entry as pointing to another page table page.
The bug can be abused by an unprivileged user to cause pmap_pkru_update_range()
to treat userspace memory as a page table page, and thus overwrite memory to
which the application would otherwise not have access.
Obtained from: FreeBSD
Commit: 7e17479769addf6fa244df26875f5266da0b0be9
https://github.com/MidnightBSD/src/commit/7e17479769addf6fa244df26875f5266da0b0be9
Author: Lucas Holt <luke at foolishgames.com>
Date: 2026-06-06 (Sat, 06 Jun 2026)
Changed paths:
M sys/contrib/ck/include/ck_limits.h
M sys/contrib/ck/include/ck_stdint.h
Log Message:
-----------
ck: recognize _KERNEL on Linux cross-builds
Use the Linux kernel header path when either __KERNEL__ or _KERNEL is defined so Ubuntu-based cross-builds do not fall back to missing hosted headers like limits.h and stdint.h.
AI-Assisted-by: OpenAI Codex (GPT-5)
Signed-off-by: Lucas Holt <luke at foolishgames.com>
Commit: 08c5867c902a8288aec3c2650afa499568d9aa19
https://github.com/MidnightBSD/src/commit/08c5867c902a8288aec3c2650afa499568d9aa19
Author: Lucas Holt <luke at foolishgames.com>
Date: 2026-06-06 (Sat, 06 Jun 2026)
Changed paths:
M .github/workflows/cross-bootstrap-tools.yml
Log Message:
-----------
ci: add cross-build headers for Linux arm64 kernel builds
Include the common cross-build compatibility headers alongside Clang's resource headers for the Ubuntu aarch64 buildkernel path so genoffset can resolve sys/cdefs.h.
AI-Assisted-by: OpenAI Codex (GPT-5)
Signed-off-by: Lucas Holt <luke at foolishgames.com>
Commit: fbbe934572d95d101def325a177943e88b128feb
https://github.com/MidnightBSD/src/commit/fbbe934572d95d101def325a177943e88b128feb
Author: Lucas Holt <luke at foolishgames.com>
Date: 2026-06-06 (Sat, 06 Jun 2026)
Changed paths:
M lib/libarchive/Makefile
M lib/libarchive/tests/Makefile
M usr.bin/bsdcat/Makefile
M usr.bin/cpio/Makefile
M usr.bin/cpio/tests/Makefile
M usr.bin/tar/Makefile
M usr.bin/tar/tests/Makefile
M usr.bin/unzip/Makefile
M usr.bin/unzip/tests/Makefile
Log Message:
-----------
update build config for libarchive 3.8.5
Commit: fbc7c5e42c950baa2252bf1863cb3fc86453ce64
https://github.com/MidnightBSD/src/commit/fbc7c5e42c950baa2252bf1863cb3fc86453ce64
Author: Lucas Holt <luke at foolishgames.com>
Date: 2026-06-06 (Sat, 06 Jun 2026)
Changed paths:
M UPDATING
Log Message:
-----------
libarchive update
Commit: eb1963e0d22da57a36e0a199ef18fac6bac38b0d
https://github.com/MidnightBSD/src/commit/eb1963e0d22da57a36e0a199ef18fac6bac38b0d
Author: Lucas Holt <luke at foolishgames.com>
Date: 2026-06-06 (Sat, 06 Jun 2026)
Changed paths:
M etc/mtree/BSD.include.dist
Log Message:
-----------
add missing folder
Commit: 9fd2aebb7fb31e0a641097914fdfd454a0392b17
https://github.com/MidnightBSD/src/commit/9fd2aebb7fb31e0a641097914fdfd454a0392b17
Author: Lucas Holt <luke at foolishgames.com>
Date: 2026-06-06 (Sat, 06 Jun 2026)
Changed paths:
M crypto/openssh/sshd-auth.c
Log Message:
-----------
crypto/openssh: fix sshd-auth build with OpenSSL 3.x
Replace direct OpenSSL_add_all_algorithms() call with ssh_libcrypto_init(),
which uses OPENSSL_init_crypto() on OpenSSL >= 1.1.0 where the old function
was removed.
AI-Assisted-by: Claude Sonnet 4.6
Signed-off-by: Lucas Holt <luke at foolishgames.com>
Commit: 970af69dbb2def675fdcb69aa65258235e62e904
https://github.com/MidnightBSD/src/commit/970af69dbb2def675fdcb69aa65258235e62e904
Author: Lucas Holt <luke at foolishgames.com>
Date: 2026-06-06 (Sat, 06 Jun 2026)
Changed paths:
M sys/compat/lindebugfs/lindebugfs.c
M sys/modules/lindebugfs/Makefile
Log Message:
-----------
sync lindebugfs with freebsd 14.x
Commit: ce19bdd2080de9f3728a80e641b4fc1ab6536337
https://github.com/MidnightBSD/src/commit/ce19bdd2080de9f3728a80e641b4fc1ab6536337
Author: Lucas Holt <luke at foolishgames.com>
Date: 2026-06-06 (Sat, 06 Jun 2026)
Changed paths:
A GEMINI.md
Log Message:
-----------
add a gemini placeholder
Commit: 850fbb70e24345aa767b48b8e8d16ce686a42cc2
https://github.com/MidnightBSD/src/commit/850fbb70e24345aa767b48b8e8d16ce686a42cc2
Author: Lucas Holt <luke at foolishgames.com>
Date: 2026-06-06 (Sat, 06 Jun 2026)
Changed paths:
M lib/libnv/msgio.c
Log Message:
-----------
check descriptor limits
Obtained from: FreeBSD
Commit: ba8ab73ed1805a20eea81b79a0c57437d0dbe557
https://github.com/MidnightBSD/src/commit/ba8ab73ed1805a20eea81b79a0c57437d0dbe557
Author: Lucas Holt <luke at foolishgames.com>
Date: 2026-06-06 (Sat, 06 Jun 2026)
Changed paths:
M sys/kern/kern_exec.c
Log Message:
-----------
Fix a priv escalation
Obtained from: FreeBSD
Commit: 0d0787a10ea989d8246945dbbfa4caee61e3e1ba
https://github.com/MidnightBSD/src/commit/0d0787a10ea989d8246945dbbfa4caee61e3e1ba
Author: Lucas Holt <luke at foolishgames.com>
Date: 2026-06-06 (Sat, 06 Jun 2026)
Changed paths:
M sys/contrib/libnv/nvlist.c
Log Message:
-----------
Fix a heap issue
Obtained from: FreeBSD
Commit: b371b5c660c0f52111835926fe1467ed3c7a811a
https://github.com/MidnightBSD/src/commit/b371b5c660c0f52111835926fe1467ed3c7a811a
Author: Lucas Holt <luke at foolishgames.com>
Date: 2026-06-06 (Sat, 06 Jun 2026)
Changed paths:
M sbin/dhclient/dhclient.c
Log Message:
-----------
fix a security issue with improper escaping of data from the BOOTP field on dhcp
Obtained from: FreeBSD
Commit: f3014805ce26ab632c461b3e58f052da0cb9c82b
https://github.com/MidnightBSD/src/commit/f3014805ce26ab632c461b3e58f052da0cb9c82b
Author: Lucas Holt <luke at foolishgames.com>
Date: 2026-06-06 (Sat, 06 Jun 2026)
Changed paths:
M sys/netpfil/pf/pf.c
M tests/sys/netpfil/pf/sctp.py
Log Message:
-----------
Fix a security issue with pf with SCTP packet validations.
Obtained: FreeBSD
Commit: 609953377176c105be24c64f1910c06656878cc9
https://github.com/MidnightBSD/src/commit/609953377176c105be24c64f1910c06656878cc9
Author: Lucas Holt <luke at foolishgames.com>
Date: 2026-06-06 (Sat, 06 Jun 2026)
Changed paths:
M sbin/dhclient/dhclient.c
Log Message:
-----------
Fix a remotely exploitable dhcp client issue
Obtained from: FreeBSD
Commit: f5fb4e4d1f95f7d46af8f246fa0e4194dc9ff799
https://github.com/MidnightBSD/src/commit/f5fb4e4d1f95f7d46af8f246fa0e4194dc9ff799
Author: Lucas Holt <luke at foolishgames.com>
Date: 2026-06-06 (Sat, 06 Jun 2026)
Changed paths:
A .gemini/agents/observer.md
Log Message:
-----------
add observer
Commit: 16cef1266527ca496681671ddbb80999e9e8ed43
https://github.com/MidnightBSD/src/commit/16cef1266527ca496681671ddbb80999e9e8ed43
Author: Lucas Holt <luke at foolishgames.com>
Date: 2026-06-06 (Sat, 06 Jun 2026)
Changed paths:
M AGENTS.md
Log Message:
-----------
docs: document vendor branches
Describe how MidnightBSD manages vendor branches, including typical locations and naming conventions.
AI-Assisted-by: GPT-5.2 (Codex CLI)
Signed-off-by: Lucas Holt <luke at foolishgames.com>
Commit: 4756b677fde5020fc595d976da4505bf2fc0b518
https://github.com/MidnightBSD/src/commit/4756b677fde5020fc595d976da4505bf2fc0b518
Author: Lucas Holt <luke at foolishgames.com>
Date: 2026-06-06 (Sat, 06 Jun 2026)
Changed paths:
M usr.bin/batt/batt.c
Log Message:
-----------
batt: harden sysctl value handling
Reject out-of-range battery life/units and handle unknown battery time (-1) by falling back to AC line messaging.
AI-Assisted-by: GPT-5.2 (Codex CLI)
Signed-off-by: Lucas Holt <luke at foolishgames.com>
Commit: e3524bf85716ab85d81eaca6c2afde9004d95d82
https://github.com/MidnightBSD/src/commit/e3524bf85716ab85d81eaca6c2afde9004d95d82
Author: Lucas Holt <luke at foolishgames.com>
Date: 2026-06-06 (Sat, 06 Jun 2026)
Changed paths:
M bin/date/date.c
M bin/date/vary.c
Log Message:
-----------
date: harden -I tz formatting and -v parsing
Avoid using an unchecked %z result when formatting ISO-8601 output and replace atoi() with strtol()+range checks for -v adjustments.
AI-Assisted-by: GPT-5.2 (Codex CLI)
Signed-off-by: Lucas Holt <luke at foolishgames.com>
Commit: 9b0c2c93e4ba35fe57e1a8ea73c7f9aed6ea179d
https://github.com/MidnightBSD/src/commit/9b0c2c93e4ba35fe57e1a8ea73c7f9aed6ea179d
Author: Lucas Holt <luke at foolishgames.com>
Date: 2026-06-06 (Sat, 06 Jun 2026)
Changed paths:
M bin/date/tests/Makefile
A bin/date/tests/parse_test.sh
A bin/date/tests/vary_test.sh
Log Message:
-----------
date: add tests for -v and parsing
Extend the date(1) test suite to cover -v adjustments, overflow rejection, numeric input parsing, and strptime extraneous-character warnings.
AI-Assisted-by: GPT-5.2 (Codex CLI)
Signed-off-by: Lucas Holt <luke at foolishgames.com>
Commit: 4e58c46690efdd257611644294b766d46604d5b9
https://github.com/MidnightBSD/src/commit/4e58c46690efdd257611644294b766d46604d5b9
Author: Lucas Holt <luke at foolishgames.com>
Date: 2026-06-06 (Sat, 06 Jun 2026)
Changed paths:
M bin/ps/ps.c
Log Message:
-----------
ps: harden COLUMNS parsing and malloc checks
Parse COLUMNS with strtol() and validate bounds, and add NULL checks for descendant_sort() prefix bitmap allocation.
AI-Assisted-by: GPT-5.2 (Codex CLI)
Signed-off-by: Lucas Holt <luke at foolishgames.com>
Commit: ff34787fdb6b899605e07f3774c6f3bf5c51ef69
https://github.com/MidnightBSD/src/commit/ff34787fdb6b899605e07f3774c6f3bf5c51ef69
Author: Lucas Holt <luke at foolishgames.com>
Date: 2026-06-06 (Sat, 06 Jun 2026)
Changed paths:
M bin/ps/Makefile
A bin/ps/tests/Makefile
A bin/ps/tests/columns_test.sh
Log Message:
-----------
ps: add tests for COLUMNS parsing
Add an ATF test suite that exercises ps(1) handling of invalid, tiny, and huge COLUMNS values.
AI-Assisted-by: GPT-5.2 (Codex CLI)
Signed-off-by: Lucas Holt <luke at foolishgames.com>
Commit: f276e3b96ab25a551f7735cdb6ad5f958bf0dc63
https://github.com/MidnightBSD/src/commit/f276e3b96ab25a551f7735cdb6ad5f958bf0dc63
Author: Lucas Holt <luke at foolishgames.com>
Date: 2026-06-06 (Sat, 06 Jun 2026)
Changed paths:
M usr.bin/id/Makefile
M usr.bin/id/id.c
A usr.bin/id/tests/Makefile
A usr.bin/id/tests/id_test.sh
Log Message:
-----------
id: harden group list handling
Avoid relying on _SC_NGROUPS_MAX for allocations; size group lists dynamically and use gid_t throughout to prevent truncation.
Add basic ATF tests for id/groups/whoami.
AI-Assisted-by: GPT-5.2 (Codex CLI)
Signed-off-by: Lucas Holt <luke at foolishgames.com>
Commit: 3423f6ba49978d060f42e86cd7dba766afc57cc8
https://github.com/MidnightBSD/src/commit/3423f6ba49978d060f42e86cd7dba766afc57cc8
Author: Lucas Holt <luke at foolishgames.com>
Date: 2026-06-06 (Sat, 06 Jun 2026)
Changed paths:
M lib/libmsearch/msearch_fulltext.c
M lib/libmsearch/msearch_search.c
M usr.bin/msearch/Makefile
M usr.bin/msearch/msearch.c
A usr.bin/msearch/tests/Makefile
A usr.bin/msearch/tests/msearch_test.sh
Log Message:
-----------
msearch: harden argument parsing and sqlite row handling
Validate -l limit parsing, treat library failures as errors, and add NULL checks for sqlite3_column_text() results. Fix owner lookup to use the row uid. Add basic ATF tests for argument handling.
AI-Assisted-by: GPT-5.2 (Codex CLI)
Signed-off-by: Lucas Holt <luke at foolishgames.com>
Commit: fdb2e4228aa9a8b22b42d5101f6a8d727f588855
https://github.com/MidnightBSD/src/commit/fdb2e4228aa9a8b22b42d5101f6a8d727f588855
Author: Lucas Holt <luke at foolishgames.com>
Date: 2026-06-06 (Sat, 06 Jun 2026)
Changed paths:
M usr.bin/spell/spellprog/Makefile
M usr.bin/spell/spellprog/spellprog.c
A usr.bin/spell/spellprog/tests/Makefile
A usr.bin/spell/spellprog/tests/spellprog_test.sh
Log Message:
-----------
spellprog: fix OOB reads and EOF slurp hang
Avoid reading before the word buffer when checking suffixes, prevent prefix-space overflow, and handle EOF while discarding overlong words. Add basic ATF regression tests.
AI-Assisted-by: GPT-5.2 (Codex CLI)
Signed-off-by: Lucas Holt <luke at foolishgames.com>
Commit: e532005ce5d6ca63ece4de6deb037ed6c8002eba
https://github.com/MidnightBSD/src/commit/e532005ce5d6ca63ece4de6deb037ed6c8002eba
Author: Lucas Holt <luke at foolishgames.com>
Date: 2026-06-06 (Sat, 06 Jun 2026)
Changed paths:
M usr.bin/progress/Makefile
M usr.bin/progress/progress.c
A usr.bin/progress/tests/Makefile
A usr.bin/progress/tests/progress_test.sh
Log Message:
-----------
progress: fix gzip -l injection and EINTR wait loop
Avoid popen()/shell when running gzip -l by forking gzip with argv, and handle EINTR correctly in the wait loop.
Add an ATF regression test for -z with metacharacters in filenames.
AI-Assisted-by: GPT-5.2 (Codex CLI)
Signed-off-by: Lucas Holt <luke at foolishgames.com>
Commit: 6e306c940b6a513520ee260eeb6c8429f3c92b06
https://github.com/MidnightBSD/src/commit/6e306c940b6a513520ee260eeb6c8429f3c92b06
Author: Lucas Holt <luke at foolishgames.com>
Date: 2026-06-06 (Sat, 06 Jun 2026)
Changed paths:
M usr.bin/wall/wall.c
Log Message:
-----------
wall: harden message buffer sizing
Use size_t for message length and validate fstat() size before allocating/reading to avoid integer truncation and potential overflow.
AI-Assisted-by: GPT-5.2 (Codex CLI)
Signed-off-by: Lucas Holt <luke at foolishgames.com>
Commit: 781d6f8ee10ef9772023b224db8cb19f4a9b245f
https://github.com/MidnightBSD/src/commit/781d6f8ee10ef9772023b224db8cb19f4a9b245f
Author: Lucas Holt <luke at foolishgames.com>
Date: 2026-06-06 (Sat, 06 Jun 2026)
Changed paths:
M usr.bin/w/Makefile
A usr.bin/w/tests/Makefile
A usr.bin/w/tests/w_test.sh
M usr.bin/w/w.c
Log Message:
-----------
w: harden tty path handling and width math
Reject suspicious utmpx ut_line values to avoid path traversal in /dev lookups and prevent argwidth underflow on narrow terminals. Add basic ATF smoke tests for w/uptime.
AI-Assisted-by: GPT-5.2 (Codex CLI)
Signed-off-by: Lucas Holt <luke at foolishgames.com>
Commit: ab9415ffa9e342b956804ff4ada083013f978aa0
https://github.com/MidnightBSD/src/commit/ab9415ffa9e342b956804ff4ada083013f978aa0
Author: Lucas Holt <luke at foolishgames.com>
Date: 2026-06-06 (Sat, 06 Jun 2026)
Changed paths:
M usr.bin/id/id.c
Log Message:
-----------
id: harden numeric parsing and group list allocation
Add overflow checks when allocating group lists, clamp _SC_NGROUPS_MAX, and validate numeric uid arguments before getpwuid().
AI-Assisted-by: GPT-5.2 (Codex CLI)
Signed-off-by: Lucas Holt <luke at foolishgames.com>
Commit: a9f41c9a89605f88a5e09511b5439b14ff5e75d9
https://github.com/MidnightBSD/src/commit/a9f41c9a89605f88a5e09511b5439b14ff5e75d9
Author: Lucas Holt <luke at foolishgames.com>
Date: 2026-06-06 (Sat, 06 Jun 2026)
Changed paths:
M usr.bin/ident/ident.c
Log Message:
-----------
ident: avoid underflow when validating keyword termination
Use the open_memstream size (sz) when checking the character before the closing '$' to avoid strlen()-based underflow on malformed inputs.
AI-Assisted-by: GPT-5.2 (Codex CLI)
Signed-off-by: Lucas Holt <luke at foolishgames.com>
Commit: 242f35ca4830788bc8ad67319822df5ba1ae7b4a
https://github.com/MidnightBSD/src/commit/242f35ca4830788bc8ad67319822df5ba1ae7b4a
Author: Lucas Holt <luke at foolishgames.com>
Date: 2026-06-06 (Sat, 06 Jun 2026)
Changed paths:
M usr.bin/asa/asa.c
Log Message:
-----------
asa: guard against zero-length fgetln()
Skip zero-length lines to avoid len-1 underflow when checking for a trailing newline.
AI-Assisted-by: GPT-5.2 (Codex CLI)
Signed-off-by: Lucas Holt <luke at foolishgames.com>
Commit: ff40fc8fd80927f2cd1dd11ffbd303238222cbcd
https://github.com/MidnightBSD/src/commit/ff40fc8fd80927f2cd1dd11ffbd303238222cbcd
Author: Lucas Holt <luke at foolishgames.com>
Date: 2026-06-06 (Sat, 06 Jun 2026)
Changed paths:
M sbin/dhclient/dhclient.c
Log Message:
-----------
Fix dhcp lease windows path issues.
Commit: 51f3f4206b5190e66fa88c2946d8fca30ce5fc53
https://github.com/MidnightBSD/src/commit/51f3f4206b5190e66fa88c2946d8fca30ce5fc53
Author: Lucas Holt <luke at foolishgames.com>
Date: 2026-06-06 (Sat, 06 Jun 2026)
Changed paths:
M tests/sys/netpfil/pf/sctp.py
Log Message:
-----------
test cleanup
Commit: c1fda4b9ed4549edd535e5a17c8349afdc9eebdf
https://github.com/MidnightBSD/src/commit/c1fda4b9ed4549edd535e5a17c8349afdc9eebdf
Author: Lucas Holt <luke at foolishgames.com>
Date: 2026-06-06 (Sat, 06 Jun 2026)
Changed paths:
M SECURITY.md
Log Message:
-----------
Update supported versions in SECURITY.md
Signed-off-by: Lucas Holt <luke at foolishgames.com>
Commit: a296ad6c37bd9d4afb775e7d9a2087cd2215251e
https://github.com/MidnightBSD/src/commit/a296ad6c37bd9d4afb775e7d9a2087cd2215251e
Author: Lucas Holt <luke at foolishgames.com>
Date: 2026-06-06 (Sat, 06 Jun 2026)
Changed paths:
M lib/libsqlite3/Makefile
Log Message:
-----------
lib/libsqlite3: enable PREUPDATE_HOOK and COLUMN_METADATA
SQLITE_ENABLE_SESSION alone is insufficient; SQLite's documentation
requires SQLITE_ENABLE_PREUPDATE_HOOK to be defined alongside it for
the session/changeset/patchset API (sqlite3session_*, sqlite3changeset_*)
to be fully functional.
SQLITE_ENABLE_COLUMN_METADATA enables sqlite3_column_origin_name(),
sqlite3_column_database_name(), and sqlite3_column_table_name(), which
Node.js 24 and other consumers depend on.
AI-Assisted-by: Claude Sonnet 4.6 <noreply at anthropic.com>
Signed-off-by: Lucas Holt <luke at foolishgames.com>
Commit: e1a7a30dd9d697bd28d001c5ded33392b29b8ffd
https://github.com/MidnightBSD/src/commit/e1a7a30dd9d697bd28d001c5ded33392b29b8ffd
Author: Lucas Holt <luke at foolishgames.com>
Date: 2026-06-06 (Sat, 06 Jun 2026)
Changed paths:
M AGENTS.md
Log Message:
-----------
Update AGENTS.md with detailed agent instructions
Expanded guidelines for coding agents, detailing priorities, boundaries, uncertainty handling, evidence gathering, workflow, subagent usage, testing protocols, change constraints, safety measures, and Git practices.
Based on https://raw.githubusercontent.com/Anbeeld/AGENTS.md/refs/heads/main/AGENTS.md
Signed-off-by: Lucas Holt <luke at foolishgames.com>
Commit: cf8bd1cff971ae3f9a889af0a402011d8cac4481
https://github.com/MidnightBSD/src/commit/cf8bd1cff971ae3f9a889af0a402011d8cac4481
Author: Lucas Holt <luke at foolishgames.com>
Date: 2026-06-06 (Sat, 06 Jun 2026)
Changed paths:
M AGENTS.md
A skills/cppcheck-clang-format-precommit/SKILL.md
A skills/cppcheck-clang-format-precommit/scripts/precommit_c_sanity.sh
A skills/splint-post-c-sanity/SKILL.md
A skills/splint-post-c-sanity/scripts/run_splint_on_staged.sh
Log Message:
-----------
Add C precommit static analysis skills
Commit: b2ebabc812303df3360f14ed4cba96dc703f3ae0
https://github.com/MidnightBSD/src/commit/b2ebabc812303df3360f14ed4cba96dc703f3ae0
Author: Lucas Holt <luke at foolishgames.com>
Date: 2026-06-06 (Sat, 06 Jun 2026)
Changed paths:
M libexec/rtld-elf/rtld.c
Log Message:
-----------
Libexec/rtld freebsd noinit (#356)
* lib/libsqlite3: enable PREUPDATE_HOOK and COLUMN_METADATA
SQLITE_ENABLE_SESSION alone is insufficient; SQLite's documentation
requires SQLITE_ENABLE_PREUPDATE_HOOK to be defined alongside it for
the session/changeset/patchset API (sqlite3session_*, sqlite3changeset_*)
to be fully functional.
SQLITE_ENABLE_COLUMN_METADATA enables sqlite3_column_origin_name(),
sqlite3_column_database_name(), and sqlite3_column_table_name(), which
Node.js 24 and other consumers depend on.
AI-Assisted-by: Claude Sonnet 4.6 <noreply at anthropic.com>
Signed-off-by: Lucas Holt <luke at foolishgames.com>
* rtld: honor FreeBSD no-init notes
Accept FreeBSD note vendor sizing when parsing ELF notes so FreeBSD binaries carrying NT_FREEBSD_NOINIT_TAG set crt_no_init. This lets rtld run the main executable init arrays instead of leaving C++ globals uninitialized.
AI-Assisted-by: Codex <noreply at openai.com>
Signed-off-by: Lucas Holt <luke at foolishgames.com>
---------
Signed-off-by: Lucas Holt <luke at foolishgames.com>
Commit: 7e1fc74e7d74cf7ea16d9890e16ac963e50219d3
https://github.com/MidnightBSD/src/commit/7e1fc74e7d74cf7ea16d9890e16ac963e50219d3
Author: Lucas Holt <luke at foolishgames.com>
Date: 2026-06-06 (Sat, 06 Jun 2026)
Changed paths:
M bin/cat/cat.1
M bin/cat/cat.c
A bin/cat/tests/A_flag_test.sh
M bin/cat/tests/Makefile
Log Message:
-----------
cat: add -A flag (equivalent to GNU cat -A) (#357)
Add -A flag to cat(1) utility, which is equivalent to -et (enables
vflag, eflag, and tflag). This matches the behavior of GNU cat.
Updated man page and added a new ATF test case to verify equivalence.
AI-Assisted-by: Gemini CLI <noreply at google.com>
Commit: a5371e9f0f3de8ac5f31f9eeadb04dc69e35ca76
https://github.com/MidnightBSD/src/commit/a5371e9f0f3de8ac5f31f9eeadb04dc69e35ca76
Author: Lucas Holt <luke at foolishgames.com>
Date: 2026-06-06 (Sat, 06 Jun 2026)
Changed paths:
M usr.sbin/midnightbsd-update/midnightbsd-update.sh
Log Message:
-----------
no need to do this. certctl rehash is run
Commit: 45e2eed3d5305cebfa3752b7ea0aebaa079e5616
https://github.com/MidnightBSD/src/commit/45e2eed3d5305cebfa3752b7ea0aebaa079e5616
Author: Dag-Erling Smørgrav <des at FreeBSD.org>
Date: 2026-06-06 (Sat, 06 Jun 2026)
Changed paths:
M lib/libc/stdlib/system.3
Log Message:
-----------
system(3): Clarify return values
Our manual page currently states that system() will return 127 if it
fails to execute the shell. The actual return value is, to quote POSIX,
“as if the command language interpreter had terminated using exit(127)
or _exit(127)”.
MFC after: 1 week
Sponsored by: Klara, Inc.
Reviewed by: bnovkov, kevans
Differential Revision: https://reviews.freebsd.org/D55483
(cherry picked from commit 7305604b29d3db29c9bb5de6e7a25829fb541d1e)
Commit: cee8c13411bb1e3365de460bc83fb9822f8ae793
https://github.com/MidnightBSD/src/commit/cee8c13411bb1e3365de460bc83fb9822f8ae793
Author: Chris Rees <crees at FreeBSD.org>
Date: 2026-06-06 (Sat, 06 Jun 2026)
Changed paths:
M usr.sbin/lpr/lpd/lpd.8
M usr.sbin/lpr/lpd/lpd.c
Log Message:
-----------
lpd: Add -F flag to prevent daemonizing
This is necessary for use with supervision, e.g. runit.
I chose -F simply because that is what the folks at LPRng use.
Approved by: pfg, gad, ngie
Differential Revision: https://reviews.freebsd.org/D29566
(cherry picked from commit 3c6366067036d4573528309a0a4d3b52e2a76ae7)
Commit: c8866609c50f9fa94b08337aa4dbb080be973541
https://github.com/MidnightBSD/src/commit/c8866609c50f9fa94b08337aa4dbb080be973541
Author: Chris Rees <crees at FreeBSD.org>
Date: 2026-06-06 (Sat, 06 Jun 2026)
Changed paths:
M usr.sbin/lpr/lpd/lpd.8
Log Message:
-----------
lpd.8: Chase Dd-- took old value when merging
(cherry picked from commit 56b0f5f360b6039c6a696aa241aaa02a16ff6a0a)
Commit: 2792d090576f6999b63099b5ff5819a78b9c1ed8
https://github.com/MidnightBSD/src/commit/2792d090576f6999b63099b5ff5819a78b9c1ed8
Author: Chris Rees <crees at FreeBSD.org>
Date: 2026-06-06 (Sat, 06 Jun 2026)
Changed paths:
M usr.sbin/lpr/lpd/lpd.8
Log Message:
-----------
lpd: Update SYNOPSIS with new flag
Reported by: 0mp
(cherry picked from commit cebcca89f1b059438cc329bde4d8ad254a303623)
Commit: 15a26f87fed22ca83de7f2f132997a1aedae8e18
https://github.com/MidnightBSD/src/commit/15a26f87fed22ca83de7f2f132997a1aedae8e18
Author: Elyes Haouas <ehaouas at noos.fr>
Date: 2026-06-06 (Sat, 06 Jun 2026)
Changed paths:
M usr.sbin/lpr/lpd/recvjob.c
Log Message:
-----------
lpr: Remove trailing semicolon
Signed-off-by: Elyes Haouas <ehaouas at noos.fr>
Reviewed by: imp
Pull Request: https://github.com/freebsd/freebsd-src/pull/654
(cherry picked from commit 365348f66a47df247b5289b8a86fb20b36d778c1)
Commit: 4a25c39835ea63f3f630ba6dabb6b2a60fc294e5
https://github.com/MidnightBSD/src/commit/4a25c39835ea63f3f630ba6dabb6b2a60fc294e5
Author: Dag-Erling Smørgrav <des at FreeBSD.org>
Date: 2026-06-06 (Sat, 06 Jun 2026)
Changed paths:
M usr.sbin/lpr/lpd/recvjob.c
Log Message:
-----------
lpd: Improve robustness
* Check for integer overflow when receiving file sizes.
* Check for buffer overflow when receiving file names, and fully
validate the names.
* Check for integer overflow when checking for available disk space.
* Check for I/O errors when sending status codes.
* Enforce one job per connection and one control file per job (see
code comments for additional details).
* Simplify readfile(), avoiding constructs vulnerable to integer
overflow.
* Don't delete files we didn't create.
* Rename read_number() to read_minfree() since that's all it's used
for, and move all the minfree logic into it.
* Fix a few style issues.
PR: 293278
MFC after: 1 week
Reviewed by: markj
Differential Revision: https://reviews.freebsd.org/D55399
(cherry picked from commit 9065be0a5902e058d25a42bd9b3fbe9dc28b189d)
Commit: 137f64ad3ba46034ade0df9913c4e748f60ff5b8
https://github.com/MidnightBSD/src/commit/137f64ad3ba46034ade0df9913c4e748f60ff5b8
Author: Dag-Erling Smørgrav <des at FreeBSD.org>
Date: 2026-06-06 (Sat, 06 Jun 2026)
Changed paths:
M usr.sbin/lpr/lpd/lpd.8
M usr.sbin/lpr/lpd/lpd.c
Log Message:
-----------
lpd: Add timeout option
Set a 120-second receive timeout on all client connections, and add a
command-line option to change that value.
MFC after: 1 week
Reviewed by: markj
Differential Revision: https://reviews.freebsd.org/D55400
(cherry picked from commit 56fbfd1ecdc78fc99b3a2e381c355ce8980de39d)
Commit: 81f0f67ca4ac2cf601293570400e023eb3df23ed
https://github.com/MidnightBSD/src/commit/81f0f67ca4ac2cf601293570400e023eb3df23ed
Author: Dag-Erling Smørgrav <des at FreeBSD.org>
Date: 2026-06-06 (Sat, 06 Jun 2026)
Changed paths:
M lib/libiscsiutil/Makefile
M share/mk/src.libnames.mk
M usr.sbin/ctld/Makefile
M usr.sbin/iscsid/Makefile
Log Message:
-----------
libiscsiutil: Record dependency on libmd
MFC after: 3 days
Fixes: 6378393308bc ("Add an internal libiscsiutil library.")
Sponsored by: Klara, Inc.
Sponsored by: NetApp, Inc.
Reviewed by: kevans
Differential Revision: https://reviews.freebsd.org/D55596
(cherry picked from commit 05ca4837a3e9a413aabcf005abb14fff35088476)
Commit: 79d60c34503daf1b014324add54ca48ecf736de1
https://github.com/MidnightBSD/src/commit/79d60c34503daf1b014324add54ca48ecf736de1
Author: Zhenlei Huang <zlei at FreeBSD.org>
Date: 2026-06-06 (Sat, 06 Jun 2026)
Changed paths:
M sys/net/vnet.c
Log Message:
-----------
vnet: Ensure the space allocated by vnet_data_alloc() is sufficent aligned
Some 32-bit architectures, e.g., armv7, require strict 8-byte
alignment while doing atomic 64-bit access. Hence aligning to the
pointer type (4-byte alignment) does not meet the requirement on
those architectures.
Make the space allocated by vnet_data_alloc() sufficent aligned to
avoid unaligned access.
PR: 265639
Diagnosed by: markj
Reviewed by: jhb, markj
Co-authored-by: jhb
MFC after: 5 days
Differential Revision: https://reviews.freebsd.org/D55560
(cherry picked from commit 32beb3ae71cb320dbe4190a01c036943d99083b3)
(cherry picked from commit 973d607b284ba68e63f0386af44c28bfde15add2)
(cherry picked from commit baee504b868b9417c815c0de6474a0d6e5d6b4ac)
Commit: abf7764a5e511ad755bb70fb92cf8e09685e9416
https://github.com/MidnightBSD/src/commit/abf7764a5e511ad755bb70fb92cf8e09685e9416
Author: Eugene Grosbein <eugen at FreeBSD.org>
Date: 2026-06-06 (Sat, 06 Jun 2026)
Changed paths:
M share/man/man4/Makefile
Log Message:
-----------
me.4: MFC: link if_me kernel module to its manual page.
(cherry picked from commit 46ba263d6eeb1c6029841b4c42f54912ad61de5c)
Commit: 0cb49de003ccbb0c35aa9c5d4355859515004644
https://github.com/MidnightBSD/src/commit/0cb49de003ccbb0c35aa9c5d4355859515004644
Author: Zhenlei Huang <zlei at FreeBSD.org>
Date: 2026-06-06 (Sat, 06 Jun 2026)
Changed paths:
M sys/net/if.c
Log Message:
-----------
ifnet: Fix decreasing the vnet interface count
It should be decreased only when the interface has been successfully
removed from the "active" list.
This prevents vnet_if_return() from potential OOB writes to the
allocated memory "pending".
Reviewed by: kp, pouria
Fixes: a779388f8bb3 if: Protect V_ifnet in vnet_if_return()
MFC after: 3 days
Differential Revision: https://reviews.freebsd.org/D55873
(cherry picked from commit 8065ff63c0e5c3bb4abb02f55b20cb47bb51d1a7)
(cherry picked from commit 1b7687f053afcf251ee7643ee5a4f22a225f4a02)
(cherry picked from commit 47339e4a9209c1d1323f58d792e277792990e060)
Commit: a731a775328337d3392e4a43b5f3a915f6966f50
https://github.com/MidnightBSD/src/commit/a731a775328337d3392e4a43b5f3a915f6966f50
Author: Michael Gmelin <grembo at FreeBSD.org>
Date: 2026-06-06 (Sat, 06 Jun 2026)
Changed paths:
M sys/netpfil/pf/pf_ioctl.c
Log Message:
-----------
pf: Fix hashing of IP address ranges
This corrects the false detection of duplicate rules.
MFC after: 1 week
Reviewed by: kp
(cherry picked from commit 1fa873c93c8b08561c53107c7b90c53dfad30ddc)
Commit: b7e45aaa8f3ce3864faa2966d10e007ed7bf770c
https://github.com/MidnightBSD/src/commit/b7e45aaa8f3ce3864faa2966d10e007ed7bf770c
Author: Kristof Provost <kp at FreeBSD.org>
Date: 2026-06-06 (Sat, 06 Jun 2026)
Changed paths:
M tests/sys/netpfil/pf/pass_block.sh
Log Message:
-----------
pf tests: verify that we handle address range rules correctly
There's been a problem where rules which differed only in address ranges
were considered duplicates and not added. Test for this.
MFC after: 1 week
Sponsored by: Rubicon Communications, LLC ("Netgate")
(cherry picked from commit ab74151e8d097b263237942c0b12277098bc9533)
Commit: 911775966c29af37f3e561e8bb58edd8773bae0d
https://github.com/MidnightBSD/src/commit/911775966c29af37f3e561e8bb58edd8773bae0d
Author: Kristof Provost <kp at FreeBSD.org>
Date: 2026-06-06 (Sat, 06 Jun 2026)
Changed paths:
M sys/netpfil/pf/pf_ioctl.c
Log Message:
-----------
pf: include all elements when hashing rules
MFC after: 1 week
Sponsored by: Rubicon Communications, LLC ("Netgate")
(cherry picked from commit c6bcf6e6fd507d952a48226b51cc161b8ef972a2)
Commit: 59517a25eab25a8d69d1b65318b20919d180c7c1
https://github.com/MidnightBSD/src/commit/59517a25eab25a8d69d1b65318b20919d180c7c1
Author: Marc Espie <espie at openbsd.org>
Date: 2026-06-06 (Sat, 06 Jun 2026)
Changed paths:
M usr.bin/m4/eval.c
M usr.bin/m4/extern.h
M usr.bin/m4/look.c
M usr.bin/m4/main.c
M usr.bin/m4/mdef.h
M usr.bin/m4/misc.c
Log Message:
-----------
m4: Stop abbreviating builtin names
* Stop abbreviating macro names half-randomly to 8 chars, this is no
longer 1990.
* Likewise for function names (in particular use doindex for a function
that is notably different from the classic index function).
* Rename a few things for more fidelity: eval is the builtin name, not
expr and your maketemp/mkstemp conform to mkstemp semantics for better
security.
* Rewrap a few comments that were ludicrously short.
No functional changes except improved accuracy of some error messages.
MFC after: 1 week
Differential Revision: https://reviews.freebsd.org/D55793
(cherry picked from commit f8f6f1cbd576ab5f15cef178cc05251365652f74)
Commit: ef6c62bb9d5529c2aed44c17146c90fc9d3b2154
https://github.com/MidnightBSD/src/commit/ef6c62bb9d5529c2aed44c17146c90fc9d3b2154
Author: Dag-Erling Smørgrav <des at FreeBSD.org>
Date: 2026-06-06 (Sat, 06 Jun 2026)
Changed paths:
M usr.sbin/syslogd/syslogd.c
Log Message:
-----------
syslogd: Allow killing when in foreground
Normally, syslogd reacts only to SIGTERM, and ignores SIGINT and SIGQUIT
unless in debug mode. Extend that to also apply when running in the
foreground.
MFC after: 1 week
Reviewed by: jfree
Differential Revision: https://reviews.freebsd.org/D55886
(cherry picked from commit 828de702ada854b5f09f447ba06e4e08e976ba07)
Commit: 9bce2f9288af7aaa86b0a38bd820574efb7b7a9c
https://github.com/MidnightBSD/src/commit/9bce2f9288af7aaa86b0a38bd820574efb7b7a9c
Author: Jessica Clarke <jrtc27 at FreeBSD.org>
Date: 2026-06-06 (Sat, 06 Jun 2026)
Changed paths:
M tools/build/Makefile
M tools/build/cross-build/include/mac/string.h
Log Message:
-----------
cross-build: Provide mempcpy when building on macOS
We could patch the tzcode config to not use it, but it's simple to
provide an implementation of it and avoid spreading cross-build
bootstrapping special cases.
Fixes: ff2c98b30b57 ("tzcode: Update to 2026a")
MFC after: 1 week
(cherry picked from commit 47402c9422ec6c9ba76d96414f5a08bd35a9e1fd)
Commit: ed6caefb4458cd86ff71e1d7402767851ddf4480
https://github.com/MidnightBSD/src/commit/ed6caefb4458cd86ff71e1d7402767851ddf4480
Author: Arthur Kiyanovski <akiyano at amazon.com>
Date: 2026-06-06 (Sat, 06 Jun 2026)
Changed paths:
M sys/dev/ena/ena.c
M sys/dev/ena/ena_rss.h
Log Message:
-----------
ena: Minor changes
1. Move parenthesis to correct place in switch and fix include order
2. Add comment at the end of an ifdef for clarity
3. Change include order.
Reviewed by: cperciva
Differential Revision: https://reviews.freebsd.org/D55696
Sponsored by: Amazon, Inc.
(cherry picked from commit 2667a8454cff5896c7b467c78cd4ace5ad40f5eb)
Commit: 9a648b1842655a72bf54a99f02dae9b134a88547
https://github.com/MidnightBSD/src/commit/9a648b1842655a72bf54a99f02dae9b134a88547
Author: Arthur Kiyanovski <akiyano at amazon.com>
Date: 2026-06-06 (Sat, 06 Jun 2026)
Changed paths:
M sys/dev/ena/ena_netmap.c
Log Message:
-----------
ena: Verify that an ENA ring is in netmap only in native mode
netmap operates in two modes:
1) Emulated - netmap handling is done by the network stack, the
NIC driver operates transparently to netmap.
2) Native - netmap management is done by the NIC driver.
When checking whether a specific ENA ring is running in netmap
mode, only the following checks were done:
1. IFCAP_NETMAP - Check whether netmap capability is enabled on
the device.
2. NKR_NETMAP_ON - Check whether netmap is actively using this
ring.
The above checks implied that the netmap mode is native and the
ENA driver needs to handle the netmap logic.
The code was missing an explicit check on whether native mode
is actually on (NAF_NATIVE).
This led to a case where though emulated mode was used and
a netmap application was turned on, the ENA driver still managed
netmap logic partially and caused missing buffers and lack of
refill as part of the datapath.
Note: Enabling netmap emulated mode is insufficient and there's
a need to load a netmap program in order to trigger this use-case.
Add an explicit check of whether NAF_NATIVE mode is set.
The issue was reported in [1].
[1]: https://github.com/amzn/amzn-drivers/issues/361
Fixes: 358bcc4c6cde ("Add support for ENA NETMAP partial initialization")
Reviewed by: cperciva
Differential Revision: https://reviews.freebsd.org/D55697
Sponsored by: Amazon, Inc.
(cherry picked from commit 97e84c587d6f86aa883720296449b380adcf6915)
Commit: 87ad33e9743c7292b06f0c23a8edd56162b00c2f
https://github.com/MidnightBSD/src/commit/87ad33e9743c7292b06f0c23a8edd56162b00c2f
Author: Arthur Kiyanovski <akiyano at amazon.com>
Date: 2026-06-06 (Sat, 06 Jun 2026)
Changed paths:
M sys/dev/ena/ena.h
Log Message:
-----------
ena: Update driver version to v2.8.2
Bug Fixes:
* Verify that an ENA ring is in netmap only in native mode
Minor Changes:
* Move parenthesis to correct place in switch
* Add comment
* Reorder define
Reviewed by: cperciva
Differential Revision: https://reviews.freebsd.org/D55698
Sponsored by: Amazon, Inc.
(cherry picked from commit 96c5eaf0ac6b98d0832e1037d672064de43a7e00)
Commit: d1a36dae4bbe8513c69194b2cb6648ac75dde8d5
https://github.com/MidnightBSD/src/commit/d1a36dae4bbe8513c69194b2cb6648ac75dde8d5
Author: Dag-Erling Smørgrav <des at FreeBSD.org>
Date: 2026-06-06 (Sat, 06 Jun 2026)
Changed paths:
M sbin/newfs/newfs.8
M sbin/newfs/newfs.c
Log Message:
-----------
newfs: Don't combine GEOM journaling with SU
GEOM journaling shouldn't be used at the same time as soft updates, so
don't enable soft updates if GEOM journaling has been requested, and
error out if both are explicitly requested.
MFC after: 1 week
PR: 293896
Reviewed by: mckusick
Differential Revision: https://reviews.freebsd.org/D55999
(cherry picked from commit e30fcdaae2e68458da83d5420e6034c5f384e5f2)
Commit: e343f7b8b8edd03be72f860234da069ff17858c4
https://github.com/MidnightBSD/src/commit/e343f7b8b8edd03be72f860234da069ff17858c4
Author: Dag-Erling Smørgrav <des at FreeBSD.org>
Date: 2026-06-06 (Sat, 06 Jun 2026)
Changed paths:
M sbin/tunefs/tunefs.8
M sbin/tunefs/tunefs.c
Log Message:
-----------
tunefs: Don't combine GEOM journaling with SU
GEOM journaling shouldn't be used at the same time as soft updates, so
don't enable one if the other is already in use.
MFC after: 1 week
PR: 293896
Reviewed by: mckusick
Differential Revision: https://reviews.freebsd.org/D56002
(cherry picked from commit b1f72dd2a9a5e69a310b9e76b55f16cff433b8da)
Commit: 9fc8fca2728f7eeae2dc4ee3c0371df70b5bb57a
https://github.com/MidnightBSD/src/commit/9fc8fca2728f7eeae2dc4ee3c0371df70b5bb57a
Author: Dag-Erling Smørgrav <des at FreeBSD.org>
Date: 2026-06-06 (Sat, 06 Jun 2026)
Changed paths:
M sys/fs/cd9660/cd9660_rrip.c
Log Message:
-----------
cd9660: Add length checks to Rock Ridge parser
* cd9660_rrip_slink() did not check that the lengths of individual
entries do not exceed the length of the overall record.
* cd9660_rrip_altname() did not check that the length of the record
was at least 5 before subtracting 5 from it.
Note that in both cases, a better solution would be to check the length
of the data before calling the handler, or immediately upon entry of
the handler, but this would require significant refactoring.
MFC after: 1 week
Reported by: Calif.io in collaboration with Claude and Anthropic Research
Reported by: Adam Crosser, Praetorian
Reviewed by: markj
Differential Revision: https://reviews.freebsd.org/D56215
(cherry picked from commit d0afead876076f605c363f03d92304d1bd75be1c)
Commit: a6f255582f20fb28cd3796c4fc800337b310057f
https://github.com/MidnightBSD/src/commit/a6f255582f20fb28cd3796c4fc800337b310057f
Author: Dag-Erling Smørgrav <des at FreeBSD.org>
Date: 2026-06-06 (Sat, 06 Jun 2026)
Changed paths:
M lib/libc/gen/Makefile.inc
Log Message:
-----------
libc: Add missing MLINK for stravis(3)
MFC after: 1 week
Fixes: 8dfeba04eb36 ("Update to a June 8th snapshot of (un)vis form NetBSD.")
Reviewed by: ziaee
Differential Revision: https://reviews.freebsd.org/D56260
(cherry picked from commit a09d06bc5bff64baab76220a66c3501b89899134)
Commit: dcd2d14e50b7667a0f1eb0c8a7c7455b7c288bc0
https://github.com/MidnightBSD/src/commit/dcd2d14e50b7667a0f1eb0c8a7c7455b7c288bc0
Author: Mark Johnston <markj at FreeBSD.org>
Date: 2026-06-06 (Sat, 06 Jun 2026)
Changed paths:
M sys/kern/kern_event.c
M sys/sys/filedesc.h
Log Message:
-----------
kqueue: Fix a race when adding an fd-based knote to a queue
When registering a new kevent backed by a file descriptor, we first look
up the file description with fget(), then lock the kqueue, then see if a
corresponding knote is already registered. If not, and KN_ADD is
specified, we add the knote to the kqueue.
closefp_impl() interlocks with this process by calling knote_fdclose(),
which locks each kqueue and checks to see if the fd is registered with a
knote. But, if userspace closes an fd while a different thread is
registering it, i.e., after fget() succeeds but before the kqueue is
locked, then we may end up with a mismatch in the knote table, where the
knote kn_fp field points to a different file description than the knote
ident.
Fix the problem by double-checking before registering a knote. Add a
new fget_noref_unlocked() helper for this purpose. It is a clone of
fget_noref(). We could simply use fget_noref(), but I like having an
explicit unlocked variant.
PR: 293382
Reviewed by: kib
MFC after: 2 weeks
Differential Revision: https://reviews.freebsd.org/D55852
(cherry picked from commit 8f3227f527567aef53da845ab78da8e16d9051c1)
Commit: e5b7d03683edd731ba098175d237169686ac03d6
https://github.com/MidnightBSD/src/commit/e5b7d03683edd731ba098175d237169686ac03d6
Author: Michael Osipov <michaelo at FreeBSD.org>
Date: 2026-06-06 (Sat, 06 Jun 2026)
Changed paths:
M stand/efi/loader/main.c
M stand/man/loader.efi.8
M usr.sbin/efibootmgr/efibootmgr.8
Log Message:
-----------
loader.efi.8/efibootmgr.8: Don't use contradicting term 'EFI BIOS'
Both (U)EFI and BIOS are completely different things, be precise and don't use
them together.
Reviewed by: imp
MFC after: 3 days
Differential Revision: https://reviews.freebsd.org/D56329
(cherry picked from commit 4f684e929de1275b1099b17b2a2cff0d3f4af223)
Commit: 3ed431edfee11ac3fc0fe3c117d2a1433f6811ca
https://github.com/MidnightBSD/src/commit/3ed431edfee11ac3fc0fe3c117d2a1433f6811ca
Author: Andre Albsmeier <mail at fbsd2.e4m.org>
Date: 2026-06-06 (Sat, 06 Jun 2026)
Changed paths:
M usr.sbin/daemon/daemon.c
Log Message:
-----------
daemon(8): Add "--output-file -o" to list of options enabling supervision mode
This is the small internal doc fix from https://reviews.freebsd.org/D46313
Reviewed by: michaelo
Approved by: (blanket; comment fix)
MFC after: 3 days
Differential Revision: https://reviews.freebsd.org/D55325
(cherry picked from commit e9a69948a8837601d71e556550a272ca85c03e48)
Commit: b68aac6ea09dc4de82f685b8aaab7eb03a7d0ef8
https://github.com/MidnightBSD/src/commit/b68aac6ea09dc4de82f685b8aaab7eb03a7d0ef8
Author: Michael Osipov <michaelo at FreeBSD.org>
Date: 2026-06-06 (Sat, 06 Jun 2026)
Changed paths:
M share/man/man4/ciss.4
Log Message:
-----------
ciss.4: List all devices supported by ciss(4)
PR: 285744
Reviewed by: ziaee
MFC after: 3 days
Differential Revision: https://reviews.freebsd.org/D56285
(cherry picked from commit 54f5d20492d231b5c2ddc6f1d94dbffa1707d820)
Commit: 9fefaf68d752fc9606e0ae68387ec73fcd4aa319
https://github.com/MidnightBSD/src/commit/9fefaf68d752fc9606e0ae68387ec73fcd4aa319
Author: Yuichiro NAITO <naito.yuichiro at gmail.com>
Date: 2026-06-06 (Sat, 06 Jun 2026)
Changed paths:
M sys/dev/ixgbe/if_ix.c
M sys/dev/ixgbe/if_sriov.c
M sys/dev/ixgbe/ixgbe_sriov.h
Log Message:
-----------
ixgbe: Fix MRQC register value.
Focus on the MRQE field of the MRQC register, which is 4 bits wide,
and we use these 3 types of values.
- IXGBE_MRQC_RSSEN 0x1 (non VF mode)
- IXGBE_MRQC_VMDQRSS32EN 0xA (less than 33 VFs)
- IXGBE_MRQC_VMDQRSS64EN 0xB (less than 65 VFs)
If we always take a bitwise OR with IXGBE_MRQC_RSSEN,
IXGBE_MRQC_VMDQRSS32EN will never be chosen.
Select these 3 types of values for the proper case.
Signed-off-by: Yuichiro NAITO <naito.yuichiro at gmail.com>
Pull Request: https://github.com/freebsd/freebsd-src/pull/2132
(cherry picked from commit 938c076b9b0bc458a3877b52535527d37199fc09)
Commit: 624077747689d32b08d1abb184ddc6274c70c6cf
https://github.com/MidnightBSD/src/commit/624077747689d32b08d1abb184ddc6274c70c6cf
Author: Dag-Erling Smørgrav <des at FreeBSD.org>
Date: 2026-06-06 (Sat, 06 Jun 2026)
Changed paths:
M usr.bin/du/tests/du_test.sh
Log Message:
-----------
du: Set BLOCKSIZE before running tests
Several testcases assume BLOCKSIZE=K, so set it at the top of the
script. This fixes an issue where the tests would sometimes fail
when run under sudo.
MFC after: 1 week
Sponsored by: Klara, Inc.
Reviewed by: kevans
Differential Revision: https://reviews.freebsd.org/D56476
(cherry picked from commit d618ba314d1452c1cb4360e15ae1c80adac48306)
Commit: ccbcc07ecc2478d204f933e959bee803470033c5
https://github.com/MidnightBSD/src/commit/ccbcc07ecc2478d204f933e959bee803470033c5
Author: Michael Osipov <michaelo at FreeBSD.org>
Date: 2026-06-06 (Sat, 06 Jun 2026)
Changed paths:
M sys/geom/label/g_label.c
Log Message:
-----------
glabel(8): Fix debug message for already existing labels
Remove the duplicate (incorrect) name.
PR: 294542
Reviewed by: markj
MFC after: 1 week
Differential Revision: https://reviews.freebsd.org/D56400
(cherry picked from commit 92c69c791c436eb966fab806393b70e53cde6874)
Commit: 73bfdeaf0ae51b4112d7c018f5b39a8f5d44f2e1
https://github.com/MidnightBSD/src/commit/73bfdeaf0ae51b4112d7c018f5b39a8f5d44f2e1
Author: Christos Longros <chris.longros at gmail.com>
Date: 2026-06-06 (Sat, 06 Jun 2026)
Changed paths:
M sbin/ping/ping6.c
Log Message:
-----------
ping6: treat setsockopt failures as fatal
ping6 needs IPV6_RECVPKTINFO and IPV6_RECVHOPLIMIT to process
incoming replies. When these options fail, replies are silently
dropped and ping6 appears to hang. Use err(3) instead of warn(3)
so the user gets a clear error and immediate exit.
Signed-off-by: Christos Longros <chris.longros at gmail.com>
Reviewed by: pouria, jlduran, glebius
MFC after: 1 week
Differential Revision: https://reviews.freebsd.org/D56237
(cherry picked from commit 9a4a9f623bbaf991b3ba580593d47f2ee9f7b03b)
Commit: c3c12490b9b15d6e6aaefb0d312f965e41c09dd2
https://github.com/MidnightBSD/src/commit/c3c12490b9b15d6e6aaefb0d312f965e41c09dd2
Author: Cy Schubert <cy at FreeBSD.org>
Date: 2026-06-06 (Sat, 06 Jun 2026)
Changed paths:
M sbin/ipf/ippool/ippool.5
Log Message:
-----------
ippool(5): Correct example in man page
The example provided puts the semicolon in the wrong place. It must
come after the file:// specification, not in it.
(cherry picked from commit f5d0b30e4af1163bdc18a893b17236517b67790a)
Commit: 498af21580f39814836d3a5a052850c8ddf0983a
https://github.com/MidnightBSD/src/commit/498af21580f39814836d3a5a052850c8ddf0983a
Author: Michael Osipov <michaelo at FreeBSD.org>
Date: 2026-06-06 (Sat, 06 Jun 2026)
Changed paths:
M usr.sbin/mfiutil/Makefile
M usr.sbin/mfiutil/mfi_drive.c
Log Message:
-----------
mfiutil(8): "show drives" truncates information
Improve mfi_pd_inq_string() by
* Reusing buffer sizes from cam/cam.h according to SCSI specification + NULL byte
* Don't truncate vendor-specific information by escaping into a too small buffer
* Use cam_strvis() from libcam instead of old, outdated local copy
* Recaculate size of inq_string based on the reused buffer sizes and
format statements
PR: 294354
Reviewed by: imp
MFC after: 2 weeks
Differential Revision: https://reviews.freebsd.org/D56328
(cherry picked from commit 850eb149e7ab0733fcf9469a607dca223ff467ad)
Commit: 6bb449b874083cdf18bd273e1e6c079b61ab35bc
https://github.com/MidnightBSD/src/commit/6bb449b874083cdf18bd273e1e6c079b61ab35bc
Author: Alice Cariboni <alice.cariboni at gmail.com>
Date: 2026-06-06 (Sat, 06 Jun 2026)
Changed paths:
M share/man/man7/tuning.7
Log Message:
-----------
tuning.7: Fix suds typo in manual pages
MFC after: 3 days
Fixes: fc32c802158f Add two new manual pages
Differential Revision: https://reviews.freebsd.org/D55814
(cherry picked from commit f9160912415eef078c32317e02695bc0cc775d39)
Commit: 8742cb781116eb45d4d2c7cd6a99c67ae859967e
https://github.com/MidnightBSD/src/commit/8742cb781116eb45d4d2c7cd6a99c67ae859967e
Author: Dan Mahoney <github at gushi.org>
Date: 2026-06-06 (Sat, 06 Jun 2026)
Changed paths:
M share/termcap/termcap
Log Message:
-----------
termcap: fix screen entry standout mode (so/se) capabilities
so=\E[3m (italic) is incorrect, should be so=\E[7m (reverse video).
se=\E[23m (italic off) is incorrect, should be se=\E[27m (reverse off).
mr=\E[7m (reverse video) is correctly defined in the same entry.
screen-256color inherits from screen via tc=screen and is fixed
transitively.
PR: 294499
Pull Request: https://github.com/freebsd/freebsd-src/pull/2139
Signed-off-by: Dan Mahoney <freebsd at gushi.org>
(cherry picked from commit 2bff747bb04db6beb19678abc45edd96be0a1347)
Commit: 5f72c7072f458129ec57199bd3ad977ae7c88e2c
https://github.com/MidnightBSD/src/commit/5f72c7072f458129ec57199bd3ad977ae7c88e2c
Author: John W <jwdevel at gmail.com>
Date: 2026-06-06 (Sat, 06 Jun 2026)
Changed paths:
M sys/dev/ahci/ahci_pci.c
Log Message:
-----------
ahci(4): Add another device ID for Marvell 9128 SATA controller: 0x91a3
This was encountered on a Gigabyte GA-P55A-UD4 motherboard identifying itself
as:
ahci0 at pci0:2:0:0: class=0x01018f rev=0x11 hdr=0x00 vendor=0x1b4b device=0x91a3 subvendor=0x1458 subdevice=0xb000
vendor = 'Marvell Technology Group Ltd.'
class = mass storage
subclass = ATA
The physical chip has "88SE9128-NAA2" printed on it.
Similar code has been in Linux for a long time:
https://github.com/torvalds/linux/commit/50be5e3657cd2851a297dc0b3fd459f25829d29b
Co-authored-by: Michael Osipov <michaelo at FreeBSD.org>
PR: 288526
Reviewed by: jhb
MFC after: 1 week
Differential Revision: https://reviews.freebsd.org/D56464
(cherry picked from commit c72edc2b2eb283450df8db05cf9321aee7de0bcb)
Commit: 0f10ab9a892981de1a561efbb78b5ea1267bddbc
https://github.com/MidnightBSD/src/commit/0f10ab9a892981de1a561efbb78b5ea1267bddbc
Author: Dag-Erling Smørgrav <des at FreeBSD.org>
Date: 2026-06-06 (Sat, 06 Jun 2026)
Changed paths:
M secure/caroot/MAca-bundle.pl
M secure/caroot/Makefile
M secure/caroot/blacklisted/Makefile
M secure/caroot/trusted/Makefile
Log Message:
-----------
caroot: Generate both trusted and untrusted
Until now, the untrusted directory has been maintained manually. Modify
the script used to maintain the trusted directory so it can handle both.
While here, clean it up a bit.
MFC after: 1 week
Reviewed by: mandree, markj
Differential Revision: https://reviews.freebsd.org/D51774
(cherry picked from commit b88b0bb784c7fdcfb8174806e822c1f8983c223f)
Commit: 5fbcfbd94eb2ccd0e8768a00a837b3c5e1361fe8
https://github.com/MidnightBSD/src/commit/5fbcfbd94eb2ccd0e8768a00a837b3c5e1361fe8
Author: Dag-Erling Smørgrav <des at FreeBSD.org>
Date: 2026-06-06 (Sat, 06 Jun 2026)
Changed paths:
R secure/caroot/MAca-bundle.pl
M secure/caroot/Makefile
A secure/caroot/ca-extract.pl
Log Message:
-----------
caroot: Rename script and normalize license
MFC after: 1 week
Reviewed by: mandree, markj
Differential Revision: https://reviews.freebsd.org/D51775
(cherry picked from commit 0886019bf853bd30b70aa4b8cdb059830ca6aaad)
Commit: 58859549b5041ff148c9674d61559ad472927cc1
https://github.com/MidnightBSD/src/commit/58859549b5041ff148c9674d61559ad472927cc1
Author: Dag-Erling Smørgrav <des at FreeBSD.org>
Date: 2026-06-06 (Sat, 06 Jun 2026)
Changed paths:
M secure/caroot/Makefile
M secure/caroot/blacklisted/Camerfirma_Chambers_of_Commerce_Root.pem
M secure/caroot/blacklisted/Camerfirma_Global_Chambersign_Root.pem
M secure/caroot/blacklisted/Certum_Root_CA.pem
M secure/caroot/blacklisted/Chambers_of_Commerce_Root_-_2008.pem
M secure/caroot/blacklisted/D-TRUST_Root_CA_3_2013.pem
M secure/caroot/blacklisted/E-Tugra_Global_Root_CA_ECC_v3.pem
M secure/caroot/blacklisted/E-Tugra_Global_Root_CA_RSA_v3.pem
M secure/caroot/blacklisted/EC-ACC.pem
M secure/caroot/blacklisted/EE_Certification_Centre_Root_CA.pem
M secure/caroot/blacklisted/Entrust_Root_Certification_Authority_-_G4.pem
M secure/caroot/blacklisted/GeoTrust_Primary_Certification_Authority.pem
M secure/caroot/blacklisted/GeoTrust_Primary_Certification_Authority_-_G2.pem
M secure/caroot/blacklisted/GeoTrust_Primary_Certification_Authority_-_G3.pem
M secure/caroot/blacklisted/GeoTrust_Universal_CA.pem
M secure/caroot/blacklisted/GeoTrust_Universal_CA_2.pem
M secure/caroot/blacklisted/Global_Chambersign_Root_-_2008.pem
M secure/caroot/blacklisted/Hellenic_Academic_and_Research_Institutions_RootCA_2011.pem
M secure/caroot/blacklisted/LuxTrust_Global_Root_2.pem
M secure/caroot/blacklisted/Network_Solutions_Certificate_Authority.pem
M secure/caroot/blacklisted/OISTE_WISeKey_Global_Root_GA_CA.pem
M secure/caroot/blacklisted/SecureSign_RootCA11.pem
M secure/caroot/blacklisted/Security_Communication_RootCA3.pem
M secure/caroot/blacklisted/Staat_der_Nederlanden_Root_CA_-_G3.pem
M secure/caroot/blacklisted/SwissSign_Platinum_CA_-_G2.pem
M secure/caroot/blacklisted/SwissSign_Silver_CA_-_G2.pem
M secure/caroot/blacklisted/Symantec_Class_1_Public_Primary_Certification_Authority_-_G4.pem
M secure/caroot/blacklisted/Symantec_Class_1_Public_Primary_Certification_Authority_-_G6.pem
M secure/caroot/blacklisted/Symantec_Class_2_Public_Primary_Certification_Authority_-_G4.pem
M secure/caroot/blacklisted/Symantec_Class_2_Public_Primary_Certification_Authority_-_G6.pem
M secure/caroot/blacklisted/Taiwan_GRCA.pem
M secure/caroot/blacklisted/TrustCor_ECA-1.pem
M secure/caroot/blacklisted/TrustCor_RootCert_CA-1.pem
M secure/caroot/blacklisted/TrustCor_RootCert_CA-2.pem
M secure/caroot/blacklisted/VeriSign_Class_3_Public_Primary_Certification_Authority_-_G4.pem
M secure/caroot/blacklisted/VeriSign_Class_3_Public_Primary_Certification_Authority_-_G5.pem
M secure/caroot/blacklisted/VeriSign_Universal_Root_Certification_Authority.pem
M secure/caroot/blacklisted/Verisign_Class_1_Public_Primary_Certification_Authority_-_G3.pem
M secure/caroot/blacklisted/Verisign_Class_2_Public_Primary_Certification_Authority_-_G3.pem
M secure/caroot/blacklisted/Verisign_Class_3_Public_Primary_Certification_Authority_-_G3.pem
M secure/caroot/blacklisted/thawte_Primary_Root_CA.pem
M secure/caroot/blacklisted/thawte_Primary_Root_CA_-_G2.pem
M secure/caroot/blacklisted/thawte_Primary_Root_CA_-_G3.pem
M secure/caroot/ca-extract.pl
M secure/caroot/trusted/ACCVRAIZ1.pem
M secure/caroot/trusted/AC_RAIZ_FNMT-RCM.pem
M secure/caroot/trusted/AC_RAIZ_FNMT-RCM_SERVIDORES_SEGUROS.pem
M secure/caroot/trusted/ANF_Secure_Server_Root_CA.pem
M secure/caroot/trusted/Actalis_Authentication_Root_CA.pem
M secure/caroot/trusted/AffirmTrust_Commercial.pem
M secure/caroot/trusted/AffirmTrust_Networking.pem
M secure/caroot/trusted/AffirmTrust_Premium.pem
M secure/caroot/trusted/AffirmTrust_Premium_ECC.pem
M secure/caroot/trusted/Amazon_Root_CA_1.pem
M secure/caroot/trusted/Amazon_Root_CA_2.pem
M secure/caroot/trusted/Amazon_Root_CA_3.pem
M secure/caroot/trusted/Amazon_Root_CA_4.pem
M secure/caroot/trusted/Atos_TrustedRoot_2011.pem
M secure/caroot/trusted/Atos_TrustedRoot_Root_CA_ECC_TLS_2021.pem
M secure/caroot/trusted/Atos_TrustedRoot_Root_CA_RSA_TLS_2021.pem
M secure/caroot/trusted/Autoridad_de_Certificacion_Firmaprofesional_CIF_A62634068.pem
M secure/caroot/trusted/BJCA_Global_Root_CA1.pem
M secure/caroot/trusted/BJCA_Global_Root_CA2.pem
M secure/caroot/trusted/Baltimore_CyberTrust_Root.pem
M secure/caroot/trusted/Buypass_Class_2_Root_CA.pem
M secure/caroot/trusted/Buypass_Class_3_Root_CA.pem
M secure/caroot/trusted/CA_Disig_Root_R2.pem
M secure/caroot/trusted/CFCA_EV_ROOT.pem
M secure/caroot/trusted/COMODO_Certification_Authority.pem
M secure/caroot/trusted/COMODO_ECC_Certification_Authority.pem
M secure/caroot/trusted/COMODO_RSA_Certification_Authority.pem
M secure/caroot/trusted/Certainly_Root_E1.pem
M secure/caroot/trusted/Certainly_Root_R1.pem
M secure/caroot/trusted/Certigna.pem
M secure/caroot/trusted/Certigna_Root_CA.pem
M secure/caroot/trusted/Certum_EC-384_CA.pem
M secure/caroot/trusted/Certum_Trusted_Network_CA.pem
M secure/caroot/trusted/Certum_Trusted_Network_CA_2.pem
M secure/caroot/trusted/Certum_Trusted_Root_CA.pem
M secure/caroot/trusted/CommScope_Public_Trust_ECC_Root-01.pem
M secure/caroot/trusted/CommScope_Public_Trust_ECC_Root-02.pem
M secure/caroot/trusted/CommScope_Public_Trust_RSA_Root-01.pem
M secure/caroot/trusted/CommScope_Public_Trust_RSA_Root-02.pem
M secure/caroot/trusted/Comodo_AAA_Services_root.pem
M secure/caroot/trusted/D-TRUST_BR_Root_CA_1_2020.pem
M secure/caroot/trusted/D-TRUST_BR_Root_CA_2_2023.pem
M secure/caroot/trusted/D-TRUST_EV_Root_CA_1_2020.pem
M secure/caroot/trusted/D-TRUST_EV_Root_CA_2_2023.pem
M secure/caroot/trusted/D-TRUST_Root_Class_3_CA_2_2009.pem
M secure/caroot/trusted/D-TRUST_Root_Class_3_CA_2_EV_2009.pem
M secure/caroot/trusted/DigiCert_Assured_ID_Root_CA.pem
M secure/caroot/trusted/DigiCert_Assured_ID_Root_G2.pem
M secure/caroot/trusted/DigiCert_Assured_ID_Root_G3.pem
M secure/caroot/trusted/DigiCert_Global_Root_CA.pem
M secure/caroot/trusted/DigiCert_Global_Root_G2.pem
M secure/caroot/trusted/DigiCert_Global_Root_G3.pem
M secure/caroot/trusted/DigiCert_High_Assurance_EV_Root_CA.pem
M secure/caroot/trusted/DigiCert_TLS_ECC_P384_Root_G5.pem
M secure/caroot/trusted/DigiCert_TLS_RSA4096_Root_G5.pem
M secure/caroot/trusted/DigiCert_Trusted_Root_G4.pem
M secure/caroot/trusted/Entrust_Root_Certification_Authority.pem
M secure/caroot/trusted/Entrust_Root_Certification_Authority_-_EC1.pem
M secure/caroot/trusted/Entrust_Root_Certification_Authority_-_G2.pem
M secure/caroot/trusted/Entrust_net_Premium_2048_Secure_Server_CA.pem
M secure/caroot/trusted/FIRMAPROFESIONAL_CA_ROOT-A_WEB.pem
M secure/caroot/trusted/GDCA_TrustAUTH_R5_ROOT.pem
M secure/caroot/trusted/GLOBALTRUST_2020.pem
M secure/caroot/trusted/GTS_Root_R1.pem
M secure/caroot/trusted/GTS_Root_R2.pem
M secure/caroot/trusted/GTS_Root_R3.pem
M secure/caroot/trusted/GTS_Root_R4.pem
M secure/caroot/trusted/GlobalSign_ECC_Root_CA_-_R4.pem
M secure/caroot/trusted/GlobalSign_ECC_Root_CA_-_R5.pem
M secure/caroot/trusted/GlobalSign_Root_CA.pem
M secure/caroot/trusted/GlobalSign_Root_CA_-_R3.pem
M secure/caroot/trusted/GlobalSign_Root_CA_-_R6.pem
M secure/caroot/trusted/GlobalSign_Root_E46.pem
M secure/caroot/trusted/GlobalSign_Root_R46.pem
M secure/caroot/trusted/Go_Daddy_Class_2_CA.pem
M secure/caroot/trusted/Go_Daddy_Root_Certificate_Authority_-_G2.pem
M secure/caroot/trusted/HARICA_TLS_ECC_Root_CA_2021.pem
M secure/caroot/trusted/HARICA_TLS_RSA_Root_CA_2021.pem
M secure/caroot/trusted/Hellenic_Academic_and_Research_Institutions_ECC_RootCA_2015.pem
M secure/caroot/trusted/Hellenic_Academic_and_Research_Institutions_RootCA_2015.pem
M secure/caroot/trusted/HiPKI_Root_CA_-_G1.pem
M secure/caroot/trusted/Hongkong_Post_Root_CA_3.pem
M secure/caroot/trusted/ISRG_Root_X1.pem
M secure/caroot/trusted/ISRG_Root_X2.pem
M secure/caroot/trusted/IdenTrust_Commercial_Root_CA_1.pem
M secure/caroot/trusted/IdenTrust_Public_Sector_Root_CA_1.pem
M secure/caroot/trusted/Izenpe_com.pem
M secure/caroot/trusted/Microsec_e-Szigno_Root_CA_2009.pem
M secure/caroot/trusted/Microsoft_ECC_Root_Certificate_Authority_2017.pem
M secure/caroot/trusted/Microsoft_RSA_Root_Certificate_Authority_2017.pem
M secure/caroot/trusted/NAVER_Global_Root_Certification_Authority.pem
M secure/caroot/trusted/NetLock_Arany__Class_Gold__F__tan__s__tv__ny.pem
M secure/caroot/trusted/OISTE_WISeKey_Global_Root_GB_CA.pem
M secure/caroot/trusted/OISTE_WISeKey_Global_Root_GC_CA.pem
M secure/caroot/trusted/QuoVadis_Root_CA_1_G3.pem
M secure/caroot/trusted/QuoVadis_Root_CA_2.pem
M secure/caroot/trusted/QuoVadis_Root_CA_2_G3.pem
M secure/caroot/trusted/QuoVadis_Root_CA_3.pem
M secure/caroot/trusted/QuoVadis_Root_CA_3_G3.pem
M secure/caroot/trusted/SSL_com_EV_Root_Certification_Authority_ECC.pem
M secure/caroot/trusted/SSL_com_EV_Root_Certification_Authority_RSA_R2.pem
M secure/caroot/trusted/SSL_com_Root_Certification_Authority_ECC.pem
M secure/caroot/trusted/SSL_com_Root_Certification_Authority_RSA.pem
M secure/caroot/trusted/SSL_com_TLS_ECC_Root_CA_2022.pem
M secure/caroot/trusted/SSL_com_TLS_RSA_Root_CA_2022.pem
M secure/caroot/trusted/SZAFIR_ROOT_CA2.pem
M secure/caroot/trusted/Sectigo_Public_Server_Authentication_Root_E46.pem
M secure/caroot/trusted/Sectigo_Public_Server_Authentication_Root_R46.pem
M secure/caroot/trusted/SecureSign_Root_CA12.pem
M secure/caroot/trusted/SecureSign_Root_CA14.pem
M secure/caroot/trusted/SecureSign_Root_CA15.pem
M secure/caroot/trusted/SecureTrust_CA.pem
M secure/caroot/trusted/Secure_Global_CA.pem
M secure/caroot/trusted/Security_Communication_ECC_RootCA1.pem
M secure/caroot/trusted/Security_Communication_RootCA2.pem
M secure/caroot/trusted/Starfield_Class_2_CA.pem
M secure/caroot/trusted/Starfield_Root_Certificate_Authority_-_G2.pem
M secure/caroot/trusted/Starfield_Services_Root_Certificate_Authority_-_G2.pem
M secure/caroot/trusted/SwissSign_Gold_CA_-_G2.pem
M secure/caroot/trusted/T-TeleSec_GlobalRoot_Class_2.pem
M secure/caroot/trusted/T-TeleSec_GlobalRoot_Class_3.pem
M secure/caroot/trusted/TUBITAK_Kamu_SM_SSL_Kok_Sertifikasi_-_Surum_1.pem
M secure/caroot/trusted/TWCA_CYBER_Root_CA.pem
M secure/caroot/trusted/TWCA_Global_Root_CA.pem
M secure/caroot/trusted/TWCA_Root_Certification_Authority.pem
M secure/caroot/trusted/Telekom_Security_TLS_ECC_Root_2020.pem
M secure/caroot/trusted/Telekom_Security_TLS_RSA_Root_2023.pem
M secure/caroot/trusted/TeliaSonera_Root_CA_v1.pem
M secure/caroot/trusted/Telia_Root_CA_v2.pem
M secure/caroot/trusted/TrustAsia_Global_Root_CA_G3.pem
M secure/caroot/trusted/TrustAsia_Global_Root_CA_G4.pem
M secure/caroot/trusted/Trustwave_Global_Certification_Authority.pem
M secure/caroot/trusted/Trustwave_Global_ECC_P256_Certification_Authority.pem
M secure/caroot/trusted/Trustwave_Global_ECC_P384_Certification_Authority.pem
M secure/caroot/trusted/TunTrust_Root_CA.pem
M secure/caroot/trusted/UCA_Extended_Validation_Root.pem
M secure/caroot/trusted/UCA_Global_G2_Root.pem
M secure/caroot/trusted/USERTrust_ECC_Certification_Authority.pem
M secure/caroot/trusted/USERTrust_RSA_Certification_Authority.pem
M secure/caroot/trusted/XRamp_Global_CA_Root.pem
M secure/caroot/trusted/certSIGN_ROOT_CA.pem
M secure/caroot/trusted/certSIGN_Root_CA_G2.pem
M secure/caroot/trusted/e-Szigno_Root_CA_2017.pem
M secure/caroot/trusted/ePKI_Root_Certification_Authority.pem
M secure/caroot/trusted/emSign_ECC_Root_CA_-_C3.pem
M secure/caroot/trusted/emSign_ECC_Root_CA_-_G3.pem
M secure/caroot/trusted/emSign_Root_CA_-_C1.pem
M secure/caroot/trusted/emSign_Root_CA_-_G1.pem
M secure/caroot/trusted/vTrus_ECC_Root_CA.pem
M secure/caroot/trusted/vTrus_Root_CA.pem
Log Message:
-----------
caroot: Clean up
* Get certdata.txt directly from the NSS Mercurial repository, rather
than from the Mozilla Firefox repository which imports it from NSS at
irregular intervals.
* Instead of always fetching the latest certdata.txt, fetch a specific
version. For this commit, we set this to the version that was last
imported in May 2025.
* Add a refrence to the MPL to the generated files.
* Regenerate with latest OpenSSL. This is purely cosmetic; mostly, the
certificate names now contain less unnecessary whitespace and some
elements are quoted.
MFC after: 1 week
Reviewed by: michaelo, kevans
Differential Revision: https://reviews.freebsd.org/D56620
(cherry picked from commit ce33d6396aadb0613f1e74661bdbec571f836a60)
Commit: 03f8e953ebe3f032359007749b873fcdd1e089da
https://github.com/MidnightBSD/src/commit/03f8e953ebe3f032359007749b873fcdd1e089da
Author: Dag-Erling Smørgrav <des at FreeBSD.org>
Date: 2026-06-06 (Sat, 06 Jun 2026)
Changed paths:
M ObsoleteFiles.inc
M secure/caroot/Makefile
A secure/caroot/blacklisted/Atos_TrustedRoot_Root_CA_ECC_G2_2020.pem
A secure/caroot/blacklisted/Atos_TrustedRoot_Root_CA_RSA_G2_2020.pem
A secure/caroot/blacklisted/COMODO_Certification_Authority.pem
R secure/caroot/blacklisted/Camerfirma_Chambers_of_Commerce_Root.pem
R secure/caroot/blacklisted/Camerfirma_Global_Chambersign_Root.pem
A secure/caroot/blacklisted/Certigna.pem
R secure/caroot/blacklisted/Chambers_of_Commerce_Root_-_2008.pem
A secure/caroot/blacklisted/Comodo_AAA_Services_root.pem
A secure/caroot/blacklisted/D-Trust_SBR_Root_CA_1_2022.pem
A secure/caroot/blacklisted/D-Trust_SBR_Root_CA_2_2022.pem
A secure/caroot/blacklisted/DIGITALSIGN_GLOBAL_ROOT_ECDSA_CA.pem
A secure/caroot/blacklisted/DIGITALSIGN_GLOBAL_ROOT_RSA_CA.pem
A secure/caroot/blacklisted/DigiCert_Assured_ID_Root_CA.pem
A secure/caroot/blacklisted/DigiCert_Global_Root_CA.pem
A secure/caroot/blacklisted/DigiCert_High_Assurance_EV_Root_CA.pem
A secure/caroot/blacklisted/DigiCert_SMIME_ECC_P384_Root_G5.pem
A secure/caroot/blacklisted/DigiCert_SMIME_RSA4096_Root_G5.pem
R secure/caroot/blacklisted/E-Tugra_Global_Root_CA_ECC_v3.pem
R secure/caroot/blacklisted/E-Tugra_Global_Root_CA_RSA_v3.pem
R secure/caroot/blacklisted/EC-ACC.pem
R secure/caroot/blacklisted/EE_Certification_Centre_Root_CA.pem
A secure/caroot/blacklisted/Entrust_Root_Certification_Authority.pem
A secure/caroot/blacklisted/Entrust_Root_Certification_Authority_-_EC1.pem
A secure/caroot/blacklisted/Entrust_Root_Certification_Authority_-_G2.pem
A secure/caroot/blacklisted/Entrust_net_Premium_2048_Secure_Server_CA.pem
A secure/caroot/blacklisted/GTS_Root_R2.pem
R secure/caroot/blacklisted/GeoTrust_Primary_Certification_Authority.pem
R secure/caroot/blacklisted/GeoTrust_Primary_Certification_Authority_-_G2.pem
R secure/caroot/blacklisted/GeoTrust_Primary_Certification_Authority_-_G3.pem
R secure/caroot/blacklisted/GeoTrust_Universal_CA.pem
R secure/caroot/blacklisted/GeoTrust_Universal_CA_2.pem
A secure/caroot/blacklisted/GlobalSign_Root_CA.pem
A secure/caroot/blacklisted/GlobalSign_Secure_Mail_Root_E45.pem
A secure/caroot/blacklisted/GlobalSign_Secure_Mail_Root_R45.pem
R secure/caroot/blacklisted/Global_Chambersign_Root_-_2008.pem
A secure/caroot/blacklisted/Go_Daddy_Class_2_CA.pem
A secure/caroot/blacklisted/HARICA_Client_ECC_Root_CA_2021.pem
A secure/caroot/blacklisted/HARICA_Client_RSA_Root_CA_2021.pem
R secure/caroot/blacklisted/Hellenic_Academic_and_Research_Institutions_RootCA_2011.pem
A secure/caroot/blacklisted/LAWtrust_Root_CA2__4096_.pem
R secure/caroot/blacklisted/LuxTrust_Global_Root_2.pem
R secure/caroot/blacklisted/Network_Solutions_Certificate_Authority.pem
A secure/caroot/blacklisted/OISTE_Client_Root_ECC_G1.pem
A secure/caroot/blacklisted/OISTE_Client_Root_RSA_G1.pem
A secure/caroot/blacklisted/QuoVadis_Root_CA_2.pem
A secure/caroot/blacklisted/QuoVadis_Root_CA_3.pem
A secure/caroot/blacklisted/SSL_com_Client_ECC_Root_CA_2022.pem
A secure/caroot/blacklisted/SSL_com_Client_RSA_Root_CA_2022.pem
A secure/caroot/blacklisted/Sectigo_Public_Email_Protection_Root_E46.pem
A secure/caroot/blacklisted/Sectigo_Public_Email_Protection_Root_R46.pem
R secure/caroot/blacklisted/SecureSign_RootCA11.pem
R secure/caroot/blacklisted/Security_Communication_RootCA3.pem
A secure/caroot/blacklisted/Starfield_Class_2_CA.pem
A secure/caroot/blacklisted/SwissSign_Gold_CA_-_G2.pem
R secure/caroot/blacklisted/SwissSign_Platinum_CA_-_G2.pem
A secure/caroot/blacklisted/SwissSign_RSA_SMIME_Root_CA_2022_-_1.pem
R secure/caroot/blacklisted/SwissSign_Silver_CA_-_G2.pem
R secure/caroot/blacklisted/Symantec_Class_1_Public_Primary_Certification_Authority_-_G4.pem
R secure/caroot/blacklisted/Symantec_Class_1_Public_Primary_Certification_Authority_-_G6.pem
R secure/caroot/blacklisted/Symantec_Class_2_Public_Primary_Certification_Authority_-_G4.pem
R secure/caroot/blacklisted/Symantec_Class_2_Public_Primary_Certification_Authority_-_G6.pem
A secure/caroot/blacklisted/TWCA_Global_Root_CA_G2.pem
R secure/caroot/blacklisted/Taiwan_GRCA.pem
A secure/caroot/blacklisted/Telekom_Security_SMIME_ECC_Root_2021.pem
A secure/caroot/blacklisted/Telekom_Security_SMIME_RSA_Root_2023.pem
A secure/caroot/blacklisted/TrustAsia_SMIME_ECC_Root_CA.pem
A secure/caroot/blacklisted/TrustAsia_SMIME_RSA_Root_CA.pem
R secure/caroot/blacklisted/TrustCor_ECA-1.pem
R secure/caroot/blacklisted/TrustCor_RootCert_CA-1.pem
R secure/caroot/blacklisted/TrustCor_RootCert_CA-2.pem
R secure/caroot/blacklisted/VeriSign_Class_3_Public_Primary_Certification_Authority_-_G4.pem
R secure/caroot/blacklisted/VeriSign_Class_3_Public_Primary_Certification_Authority_-_G5.pem
R secure/caroot/blacklisted/VeriSign_Universal_Root_Certification_Authority.pem
R secure/caroot/blacklisted/Verisign_Class_1_Public_Primary_Certification_Authority_-_G3.pem
R secure/caroot/blacklisted/Verisign_Class_2_Public_Primary_Certification_Authority_-_G3.pem
R secure/caroot/blacklisted/Verisign_Class_3_Public_Primary_Certification_Authority_-_G3.pem
R secure/caroot/blacklisted/thawte_Primary_Root_CA.pem
R secure/caroot/blacklisted/thawte_Primary_Root_CA_-_G2.pem
R secure/caroot/blacklisted/thawte_Primary_Root_CA_-_G3.pem
R secure/caroot/trusted/AffirmTrust_Commercial.pem
R secure/caroot/trusted/AffirmTrust_Networking.pem
R secure/caroot/trusted/AffirmTrust_Premium.pem
R secure/caroot/trusted/AffirmTrust_Premium_ECC.pem
R secure/caroot/trusted/Baltimore_CyberTrust_Root.pem
R secure/caroot/trusted/COMODO_Certification_Authority.pem
R secure/caroot/trusted/Certigna.pem
R secure/caroot/trusted/CommScope_Public_Trust_ECC_Root-01.pem
R secure/caroot/trusted/CommScope_Public_Trust_ECC_Root-02.pem
R secure/caroot/trusted/CommScope_Public_Trust_RSA_Root-01.pem
R secure/caroot/trusted/CommScope_Public_Trust_RSA_Root-02.pem
R secure/caroot/trusted/Comodo_AAA_Services_root.pem
R secure/caroot/trusted/DigiCert_Assured_ID_Root_CA.pem
R secure/caroot/trusted/DigiCert_Global_Root_CA.pem
R secure/caroot/trusted/DigiCert_High_Assurance_EV_Root_CA.pem
R secure/caroot/trusted/Entrust_Root_Certification_Authority.pem
R secure/caroot/trusted/Entrust_Root_Certification_Authority_-_EC1.pem
R secure/caroot/trusted/Entrust_Root_Certification_Authority_-_G2.pem
R secure/caroot/trusted/Entrust_net_Premium_2048_Secure_Server_CA.pem
R secure/caroot/trusted/FIRMAPROFESIONAL_CA_ROOT-A_WEB.pem
R secure/caroot/trusted/GLOBALTRUST_2020.pem
R secure/caroot/trusted/GTS_Root_R2.pem
R secure/caroot/trusted/GlobalSign_Root_CA.pem
R secure/caroot/trusted/Go_Daddy_Class_2_CA.pem
A secure/caroot/trusted/OISTE_Server_Root_ECC_G1.pem
A secure/caroot/trusted/OISTE_Server_Root_RSA_G1.pem
R secure/caroot/trusted/QuoVadis_Root_CA_2.pem
R secure/caroot/trusted/QuoVadis_Root_CA_3.pem
R secure/caroot/trusted/SecureTrust_CA.pem
R secure/caroot/trusted/Secure_Global_CA.pem
R secure/caroot/trusted/Starfield_Class_2_CA.pem
R secure/caroot/trusted/SwissSign_Gold_CA_-_G2.pem
A secure/caroot/trusted/SwissSign_RSA_TLS_Root_CA_2022_-_1.pem
R secure/caroot/trusted/TeliaSonera_Root_CA_v1.pem
A secure/caroot/trusted/TrustAsia_TLS_ECC_Root_CA.pem
A secure/caroot/trusted/TrustAsia_TLS_RSA_Root_CA.pem
R secure/caroot/trusted/Trustwave_Global_Certification_Authority.pem
R secure/caroot/trusted/Trustwave_Global_ECC_P256_Certification_Authority.pem
R secure/caroot/trusted/Trustwave_Global_ECC_P384_Certification_Authority.pem
R secure/caroot/trusted/XRamp_Global_CA_Root.pem
R secure/caroot/trusted/certSIGN_ROOT_CA.pem
A secure/caroot/trusted/e-Szigno_TLS_Root_CA_2023.pem
Log Message:
-----------
caroot: Regenerate
Regenerate using certificate data from NSS 3.123.1.
MFC after: 1 week
Reviewed by: kevans
(cherry picked from commit 07b52233e8b74c5ac884b9c9a894f57fad8dbd00)
Commit: bd88a37de7764d6b5cd3fca57b66d49195a8d3cc
https://github.com/MidnightBSD/src/commit/bd88a37de7764d6b5cd3fca57b66d49195a8d3cc
Author: Jessica Clarke <jrtc27 at FreeBSD.org>
Date: 2026-06-06 (Sat, 06 Jun 2026)
Changed paths:
M stand/efi/loader/arch/arm/exec.c
M stand/efi/loader/arch/arm64/exec.c
M stand/efi/loader/arch/riscv/exec.c
Log Message:
-----------
loader.efi: Defer efi_translate(e_entry) until after bi_load
bi_load itself loads various things into the staging area which can
cause it to grow, which may result in the staging area moving, including
the kernel. Therefore the address we get for the kernel entry point
prior to bi_load may not be correct afterwards when we actually call it,
and so we must defer the translation.
On arm and riscv (but not arm64, which predates both of them in
loader.efi and did not gain a copy of arm's added printf when arm
support was added) we also printf this entry point to the console, which
we can no longer do since bi_load calls ExitBootServices, so remove this
printf that, in practice, seems to not be so useful, given nobody ever
felt the need to add it to arm64. If anyone really feels this is an
important printf to have then bi_load will need to be split so we can
call printf after all the loading and potential reallocation of the
staging area, but before ExitBootServices is called.
We may also want to make this code more uniform and shared between the
three architectures here, since there isn't much architecture-specific
about this (and something like the RISC-V boot hart protocol could
easily be made an MD hook).
Reviewed by: imp
Fixes: 0cafabf97fae ("Add support for arm64 to loader.efi and boot1.efi")
Fixes: ea7796a9ae6b ("EFI: don't call printf after ExitBootServices, since it uses Boot Services")
Fixes: 2192efc03bc4 ("RISC-V boot1.efi and loader.efi support")
MFC after: 1 week
Differential Revision: https://reviews.freebsd.org/D56431
(cherry picked from commit ab1d659e78e454995b7c2b4566e035269b215e48)
Commit: f38b6530f4edc4b6e8401ca0487a8c9c44f22bfe
https://github.com/MidnightBSD/src/commit/f38b6530f4edc4b6e8401ca0487a8c9c44f22bfe
Author: Jessica Clarke <jrtc27 at FreeBSD.org>
Date: 2026-06-06 (Sat, 06 Jun 2026)
Changed paths:
M sys/arm64/include/pcpu.h
Log Message:
-----------
arm64: Ditch arm64-specific unsound PCPU optimisation
The current arm64 PCPU implementation uses a global register asm
variable to use x18, which we reserve with -ffixed-x18, from C. Inside a
critical_enter() or sched_pin(), it is vital that any PCPU reads use the
right PCPU pointer, as often the whole point of the critical_enter() or
sched_pin() is to ensure consistent PCPU use (e.g. for SMR it relies on
zpcpu giving the same SMR state). critical_enter() and sched_pin() both
include atomic_interrupt_fence(), i.e. asm volatile("" ::: "memory"),
barriers to ensure that memory accesses don't get moved by the compiler
outside the critical section, which on most architectures will also
order the read of the PCPU pointer itself (whether due to the read being
another asm volatile statement, or due to using a segment-relative
memory access as on x86). However, this approach on arm64 is in no sense
a memory access, and therefore the register access is not ordered with
respect to the the critical_enter() or sched_pin(), or more specifically
the curthread->td_critnest++ / curthread->td_pinned++ within.
In practice upstream today this works out ok because the read of x18 is
inlined into the actual PCPU_GET/ADD/SET memory accesses (i.e. you will
get something like ldr xN, [x18, #imm-or-xM] for PCPU_GET, etc.), and
since *that* instruction is ordered properly due to being a memory
access, the x18 ends up being read in the right place. However, that is
not in any way guaranteed, it just relies on the hope that compiler
optimisations will be perfect at inlining the use. Moreover, PCPU_PTR is
definitely not a memory access in this world, it's just pointer
arithmetic on x18, and so that has nothing ordering it. This can be
observed with the following test function compiled into the kernel:
void
pcpu_test(void)
{
extern void __weak_symbol use_pcpu_ptr(void *);
critical_enter();
use_pcpu_ptr(PCPU_PTR(curthread));
critical_exit();
}
Obviously, this is a bit contrived as you could just read curthread
directly via its atomic definition that bypasses any worries about PCPU
atomicity, but it illustrates the point. With the in-tree LLVM*, this
ends up being compiled for me to:
paciasp
stp x29, x30, [sp, #-0x10]!
mov x29, sp
ldr x8, [x18]
ldr w9, [x8, #0x4fc]
mov x0, x18
add w9, w9, #0x1
str w9, [x8, #0x4fc]
bl use_pcpu_ptr
...
Note that, although the PCPU_PTR was within the critical section in the
C source, the read of x18 into x0, the argument register passed to
use_pcpu_ptr, has been hoisted to before the str, which is storing the
new, incremented, value of td_critnest to curthread, and so there is a
window within which we have to hope the thread is not preempted and
migrated to a different CPU, otherwise it will pass a pointer to the
wrong CPU's pc_curthread PCPU member.
Initially it would seem as though the solution to this would be to add
an additional barrier to critical_enter() / sched_pin() to ensure the
register reads could not be hoisted like this. However, I have not been
able to find a sequence that works reliably across both GCC and Clang,
independent of optimisation level. Using inline asm with x18 marked as a
clobber, using "=r"(pcpup), and using "+r"(pcpup) all run into various
issues; some combinations don't actually seem to be a barrier, and for
Clang at -O0 some combinations will actually generate writes to x18**,
at which point you then have to hope that the kernel is compiled with
optimisations, and that the redundant writes are optimised away such
that x18 is just passed through. But that just gets us back to hoping
optimisation works, which isn't a solution to the problem, it just
trades one point of fragility for another.
In talking to GCC developers, who seemed rather horrified by the
implications of trying to do this (which is effectively "register
volatile", a combination that's explicitly forbidden), we could not find
a solution to this, and so I have concluded that the only reliable to
have a sound PCPU implementation is to ditch this optimisation and
follow other non-x86 architectures in using inline asm in one form or
another; specifically, this adopts riscv's approach of just calling
get_pcpu(), which, curiously, was already implemented in inline asm here
on arm64, rather than reading pcpup.
Anyone who feels strongly enough about PCPU performance is welcome to
try to find a working approach, but such proposals should be heavily
scrutinised to be certain that they won't come back to bite us in
future. In particular, this caused a lot of problems downstream in
CheriBSD's experimental compartmentalised kernel, which is trialling
interposing on PCPU accesses in order to restrict access within
compartments. As a result, even PCPU_GET/SET/ADD can look like PCPU_PTR,
as they pass an opaque PCPU reference to wrapper functions, and so this
case gets hit all over the kernel, giving highly-confusing panics with
locks that aren't owned by the current thread or SMR use allegedly not
within an smr_enter().
The ia64 port encountered the same issue and reached the same conclusion
in e31ece45b7a4 ("Fix the PCPU access macros."), though went to the
trouble of trying to fold the offset into the inline assembly (assuming
it fit, with no fallback if not, since it's using the add pseudo-op that
will be expanded to either adds with a 14-bit immediate or, if somehow
that doesn't fit, addl with a 22-bit immediate). Curiously though it
left pcpup around as a footgun. sparc64 had similar code but was never
fixed. It also defined a curpcb in the same manner which was presumably
similarly broken, but looks to have been entirely unreferenced from C,
only referenced in actual assembly files. Alpha also had the same
design, but it was removed whilst critical_enter() was extern rather
than static inline so uses of the pointer could not have been hoisted,
and whilst sched_pin() didn't have any form of atomic_interrupt_fence()
to even try to make PCPU well-ordered.
* At time of writing, when that was LLVM 19, not verified at time of
commit with LLVM 21.
** For "+r"(pcpup), Clang's initial code generation is to do:
mov xTtmp1, x18
mov x18, xTmp1
/* asm (empty) */
mov xTmp2, x18
mov x18, xTmp2
since its interpretation of what that means is "read the value of
pcpup, and make sure that value is in x18 for the duration of the
assembly due to the asm("x18") on pcpup", and similarly for the output
side.
Reviewed by: andrew, jhb
MFC after: 1 week
Differential Revision: https://reviews.freebsd.org/D56601
(cherry picked from commit 551d47c5677a5eaf0a1ed2ea3b2b1406b192764d)
Commit: b89aa2d40a708e1e9a0be07ac0033ae3d9cd8c18
https://github.com/MidnightBSD/src/commit/b89aa2d40a708e1e9a0be07ac0033ae3d9cd8c18
Author: Michael Osipov <michaelo at FreeBSD.org>
Date: 2026-06-06 (Sat, 06 Jun 2026)
Changed paths:
M sys/dev/mfi/mfi.c
M sys/dev/mrsas/mrsas.c
Log Message:
-----------
mfi(4)/mrsas(4): Print driver versions consistently
Reviewed by: ziaee, des
MFC after: 3 days
Differential Revision: https://reviews.freebsd.org/D54519
(cherry picked from commit 93122ead724b3ba0ccdaedadcd371ec53f9a9844)
Commit: b4879e5f1b9f614e3ee23176320801e339cb3bc5
https://github.com/MidnightBSD/src/commit/b4879e5f1b9f614e3ee23176320801e339cb3bc5
Author: Dag-Erling Smørgrav <des at FreeBSD.org>
Date: 2026-06-06 (Sat, 06 Jun 2026)
Changed paths:
M usr.bin/lockf/tests/lockf_test.sh
Log Message:
-----------
lockf: Test that lockf does not spin on fd
PR: 294832
MFC after: 1 week
Reviewed by: markj
Differential Revision: https://reviews.freebsd.org/D56723
(cherry picked from commit 0733afdb4dad58cfe7ad7f5994e26bf148d78199)
Commit: b5b8a3b34b57d6c93a625775ebb62826716a1933
https://github.com/MidnightBSD/src/commit/b5b8a3b34b57d6c93a625775ebb62826716a1933
Author: Dimitry Andric <dim at FreeBSD.org>
Date: 2026-06-06 (Sat, 06 Jun 2026)
Changed paths:
M sys/powerpc/include/_stdint.h
M sys/riscv/include/_stdint.h
M sys/x86/include/_stdint.h
Log Message:
-----------
Remove extraneous tab characters at EOL in various _stdint.h files
MFC after: 3 days
(cherry picked from commit daeab702f9adbbb718ecf48e17de8dd619cfe7b8)
Commit: 44abb49030e0739880159a75caaa838f8e393a80
https://github.com/MidnightBSD/src/commit/44abb49030e0739880159a75caaa838f8e393a80
Author: Dimitry Andric <dim at FreeBSD.org>
Date: 2026-06-06 (Sat, 06 Jun 2026)
Changed paths:
M sys/arm/include/_stdint.h
M sys/arm64/include/_stdint.h
M sys/powerpc/include/_stdint.h
M sys/riscv/include/_stdint.h
M sys/x86/include/_stdint.h
Log Message:
-----------
Define stdint.h macros unconditionally
Similar to glibc, define all the stdint.h macros such as `SIZE_MAX`,
`UINT64_C`, etc unconditionally. I.e. no longer check whether
`__STDC_CONSTANT_MACROS` or `__STDC_LIMIT_MACROS` are defined. See also
<https://sourceware.org/bugzilla/show_bug.cgi?id=15366>.
This is part of reverting base 00bee6fcd77f, which reverted an upstream
libc++ commit that eliminated libc++'s stdint.h wrapper header.
Submitted by: Nikolas Klauser <nikolasklauser at berlin.de>
MFC after: 1 week
Reviewed by: imp
Differential Revision: https://reviews.freebsd.org/D56746
(cherry picked from commit 966fb94cb3575ccd39da211165d0858fd0eb0ef2)
Commit: c2385c1b3bfa550883b46bf9bbf808b7440097b2
https://github.com/MidnightBSD/src/commit/c2385c1b3bfa550883b46bf9bbf808b7440097b2
Author: Ed Maste <emaste at FreeBSD.org>
Date: 2026-06-06 (Sat, 06 Jun 2026)
Changed paths:
M sys/kern/kern_descrip.c
Log Message:
-----------
sys: Fix heap disclosure in compat7 kern.proc.filedesc sysctl
Reported by: Yuxiang Yang, Yizhou Zhao, Ao Wang, Xuewei Feng, Qi Li, and Ke Xu from Tsinghua University using GLM-5.1 from Z.ai
Reviewed by: markj
Sponsored by: The FreeBSD Foundation
Differential Revision: https://reviews.freebsd.org/D56976
(cherry picked from commit e68433e1990d5f1bcc1bdd270d65f1e4792a8e1b)
(cherry picked from commit 0cef1a9ae5ec90b2c4717de9bc33fc7c3b1fd705)
(cherry picked from commit 5e6b16f4555cba4422dde7c63344359019a23722)
Commit: 618ef4dc10e93ec9dc3b4d75d6b9a3977241ba83
https://github.com/MidnightBSD/src/commit/618ef4dc10e93ec9dc3b4d75d6b9a3977241ba83
Author: Ed Maste <emaste at FreeBSD.org>
Date: 2026-06-06 (Sat, 06 Jun 2026)
Changed paths:
M sys/kern/uipc_shm.c
Log Message:
-----------
shm: Zero struct kinfo_file in sysctl handler
Reported by: Calif.io in collaboration with Claude and Anthropic Research
Reviewed by: jhb
Sponsored by: The FreeBSD Foundation
Differential Revision: https://reviews.freebsd.org/D55806
(cherry picked from commit 25cc459286a02b646751541ccde5a33319471c73)
(cherry picked from commit 6348a5fd0d4792e752cb714f2a536c3287b8d580)
(cherry picked from commit e61804ae6380c8d1db4b8c43bf7821e5d31ca04e)
Commit: 47b522fbbf03be62714214ad44ab82175c57abec
https://github.com/MidnightBSD/src/commit/47b522fbbf03be62714214ad44ab82175c57abec
Author: Ed Maste <emaste at FreeBSD.org>
Date: 2026-06-06 (Sat, 06 Jun 2026)
Changed paths:
M sys/compat/freebsd32/freebsd32_misc.c
Log Message:
-----------
compat32: Zero struct to avoid stack disclosure
Reported by: Adam Crosser, Praetorian
Reviewed by: philip
Sponsored by: The FreeBSD Foundation
Differential Revision: https://reviews.freebsd.org/D55811
(cherry picked from commit 097cb4e9f0432c543c704cec712ce1cd3302335c)
(cherry picked from commit 4551ea3b3f04650cd5300a9eae8994bdb080db91)
(cherry picked from commit 6a808cd7534802d30010fb0a7f46381ff9f6ef3f)
Commit: f2a6c6e584a16777d82f963c1500eafe18407b86
https://github.com/MidnightBSD/src/commit/f2a6c6e584a16777d82f963c1500eafe18407b86
Author: Ed Maste <emaste at FreeBSD.org>
Date: 2026-06-06 (Sat, 06 Jun 2026)
Changed paths:
M sys/compat/linux/linux_misc.c
Log Message:
-----------
compat/linux: Avoid waitid() kernel stack disclosure
Reported by: Adam Crosser, Praetorian
Reviewed by: philip
Sponsored by: The FreeBSD Foundation
Differential Revision: https://reviews.freebsd.org/D55812
(cherry picked from commit 9a9f93bcf1aa0059d759b2f3ea6faeb2760a11bd)
(cherry picked from commit 9f8db9cc67fb86eeb2b645ce7f8aa748e99241a9)
(cherry picked from commit a347e6e20e75ad6224afefcf650ef738c3de094d)
Commit: 3a1232764cf482ad6ece9925255144f2717847c5
https://github.com/MidnightBSD/src/commit/3a1232764cf482ad6ece9925255144f2717847c5
Author: Tai-hwa Liang <avatar at FreeBSD.org>
Date: 2026-06-06 (Sat, 06 Jun 2026)
Changed paths:
M sys/net/if_fwsubr.c
Log Message:
-----------
net: bandaid for plugging a fw_com leak in fwip_detach()
Adding a temporary workaround for plugging a fw_com upon if_fwip unloading.
Steps to reproduce(needs two hosts connected with firewire):
while true; do
ifconfig fwip0 10.0.0.5 up
fwcontrol -r
ping -c 10.0.0.3
kldunload if_fwip
done
There's a chance that the unloading of if_fwip.ko triggers following warning:
Warning: memory type fw_com leaked memory on destroy (1 allocations, 64 bytes leaked).
commit d79b6b8ec267e7eef6e07cf4245159705e24acd5 (origin/main, origin/HEAD)
(cherry picked from commit 25a5bb7318052322190a2880e0e7ef18e06d54bd)
Commit: 504b7b980170d17fc393ac248d3c20f90336cc27
https://github.com/MidnightBSD/src/commit/504b7b980170d17fc393ac248d3c20f90336cc27
Author: Lucas Holt <luke at foolishgames.com>
Date: 2026-06-06 (Sat, 06 Jun 2026)
Changed paths:
M contrib/ee/ee.c
Log Message:
-----------
add unicode support to ee.
Obtained from: FreeBSD current
Commit: b022d4531b57282ac5a72d8b33658526d7d5834d
https://github.com/MidnightBSD/src/commit/b022d4531b57282ac5a72d8b33658526d7d5834d
Author: Lucas Holt <luke at foolishgames.com>
Date: 2026-06-06 (Sat, 06 Jun 2026)
Changed paths:
M UPDATING
Log Message:
-----------
document recent stuff
Commit: 143d8e2e74d52cec2268e6442ec7dd8734c2a1d4
https://github.com/MidnightBSD/src/commit/143d8e2e74d52cec2268e6442ec7dd8734c2a1d4
Author: Lucas Holt <luke at foolishgames.com>
Date: 2026-06-06 (Sat, 06 Jun 2026)
Changed paths:
M lib/libcasper/libcasper/libcasper_impl.h
M lib/libcasper/libcasper/libcasper_service.c
M lib/libcasper/libcasper/service.c
M lib/libcasper/tests/Makefile
A lib/libcasper/tests/cap_main_test.c
Log Message:
-----------
libcasper: select(2) file descriptor set overflow causes stack overflow
Fixes CVE-2026-39461
An attacker able to cause an application using libcasper(3) to allocate large
file descriptors, e.g., by opening many descriptors and executing a program
which is not careful to close them upon startup, may trigger stack
corruption. If the target application runs with setuid root privileges, this
could be used to escalate local privileges.
Obtained from: FreeBSD
Commit: e45bf2902d2e422f218ee0bca3b281369ce72c40
https://github.com/MidnightBSD/src/commit/e45bf2902d2e422f218ee0bca3b281369ce72c40
Author: Lucas Holt <luke at foolishgames.com>
Date: 2026-06-06 (Sat, 06 Jun 2026)
Changed paths:
M UPDATING
Log Message:
-----------
document fix
Commit: 388820d0c82cbce9a64f3a0f965cde50bd359f27
https://github.com/MidnightBSD/src/commit/388820d0c82cbce9a64f3a0f965cde50bd359f27
Author: Lucas Holt <luke at foolishgames.com>
Date: 2026-06-06 (Sat, 06 Jun 2026)
Changed paths:
M lib/libcasper/services/cap_net/cap_net.c
Log Message:
-----------
libcap_net
Incorrect libcap_net limitation list manipulation
CVE-2026-45254
In certain scenarios, an application that had previously restricted a subset
of network operations could ask for a new limit that extended the permissions
of the process.
Obtained from: FreeBSD
Commit: 8fce0095592f6e271e615853e1e10fe33f1605c2
https://github.com/MidnightBSD/src/commit/8fce0095592f6e271e615853e1e10fe33f1605c2
Author: Lucas Holt <luke at foolishgames.com>
Date: 2026-06-06 (Sat, 06 Jun 2026)
Changed paths:
M UPDATING
Log Message:
-----------
document
Commit: 967294fc5169e459f7ff235ade83c29f211dc18c
https://github.com/MidnightBSD/src/commit/967294fc5169e459f7ff235ade83c29f211dc18c
Author: Lucas Holt <luke at foolishgames.com>
Date: 2026-06-06 (Sat, 06 Jun 2026)
Changed paths:
M lib/libunbound/config.h
Log Message:
-----------
unbound 1.24.2
Commit: adeb9fb408fb35698767aa1e53335f0fe7603af6
https://github.com/MidnightBSD/src/commit/adeb9fb408fb35698767aa1e53335f0fe7603af6
Author: Lucas Holt <luke at foolishgames.com>
Date: 2026-06-06 (Sat, 06 Jun 2026)
Changed paths:
M UPDATING
Log Message:
-----------
fix one of the unbound cve on our backlog CVE-2025-11411
Commit: 3678c35ab66294e4a88b8ece43614752ca496ebe
https://github.com/MidnightBSD/src/commit/3678c35ab66294e4a88b8ece43614752ca496ebe
Author: Lucas Holt <luke at foolishgames.com>
Date: 2026-06-06 (Sat, 06 Jun 2026)
Changed paths:
M etc/mtree/BSD.tests.dist
Log Message:
-----------
mtree: add missing tests directories to BSD.tests.dist
installworld fails when a test directory is wired into its parent
SUBDIR but absent from etc/mtree/BSD.tests.dist, because the SCRIPTS
install path in bsd.prog.mk does not depend on installdirs and the
destination directory is therefore never created. Add the entries
that are currently missing: lib/libbsnmp, lib/libcasper/services/{cap_fileargs,cap_net},
lib/libdiff, usr.bin/progress, usr.bin/spell/spellprog and usr.bin/w.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply at anthropic.com>
Commit: 2400345cda0def8fe34a6522022fbc7dbc51962e
https://github.com/MidnightBSD/src/commit/2400345cda0def8fe34a6522022fbc7dbc51962e
Author: Lucas Holt <luke at foolishgames.com>
Date: 2026-06-06 (Sat, 06 Jun 2026)
Changed paths:
M COPYRIGHT
Log Message:
-----------
Revise copyright terms for MidnightBSD (#371)
Updated the copyright terms to clarify age verification requirements and jurisdictional restrictions for MidnightBSD usage.
Signed-off-by: Lucas Holt <luke at foolishgames.com>
Commit: d5288a983fd579a8f5e3b076af699365ee58141e
https://github.com/MidnightBSD/src/commit/d5288a983fd579a8f5e3b076af699365ee58141e
Author: Lucas Holt <luke at foolishgames.com>
Date: 2026-06-06 (Sat, 06 Jun 2026)
Changed paths:
M COPYRIGHT
A EULA
M etc/Makefile
Log Message:
-----------
add EULA as separate file
Commit: f92e3436cdcdaf9e8388032bfd7471642b3f8e25
https://github.com/MidnightBSD/src/commit/f92e3436cdcdaf9e8388032bfd7471642b3f8e25
Author: Lucas Holt <luke at foolishgames.com>
Date: 2026-06-06 (Sat, 06 Jun 2026)
Changed paths:
M usr.sbin/bsdconfig/share/media/wlan.subr
M usr.sbin/bsdinstall/scripts/wlanconfig
Log Message:
-----------
Apply a fix for CVE-2026-45255 from FreeBSD
Commit: 653c8603d3953466e567b76fa0483ec9548c19c3
https://github.com/MidnightBSD/src/commit/653c8603d3953466e567b76fa0483ec9548c19c3
Author: Lucas Holt <luke at foolishgames.com>
Date: 2026-06-06 (Sat, 06 Jun 2026)
Changed paths:
M sys/kern/kern_sig.c
Log Message:
-----------
fix for CVE-2026-45253 from freebsd
FreeBSD-SA-26:21.ptrace
Does not include test changes
Commit: 7cf70b030b4c679db5fc40171eb6ce5b09f60969
https://github.com/MidnightBSD/src/commit/7cf70b030b4c679db5fc40171eb6ce5b09f60969
Author: Lucas Holt <luke at foolishgames.com>
Date: 2026-06-06 (Sat, 06 Jun 2026)
Changed paths:
M sys/fs/fuse/fuse_ipc.h
M sys/fs/fuse/fuse_vnops.c
M tests/sys/fs/fusefs/xattr.cc
Log Message:
-----------
Heap overflow in FUSE_LISTXATTR
CVE-2026-45252
If a malicious daemon sends a non-NUL-terminated list, the fusefs kernel
module may read beyond the end of one heap-allocated buffer and potentially
write beyond the end of a second buffer. A malicious daemon could disclose
up to 253 bytes of kernel heap memory, or it could inject up to 250
attacker-controlled bytes into unallocated kernel heap space.
Obtained from: FreeBSD 14.3
Commit: dd88096c48a4dccd254e7b69b1c7b730e4c7851b
https://github.com/MidnightBSD/src/commit/dd88096c48a4dccd254e7b69b1c7b730e4c7851b
Author: Lucas Holt <luke at foolishgames.com>
Date: 2026-06-06 (Sat, 06 Jun 2026)
Changed paths:
M sys/dev/netmap/netmap_freebsd.c
M sys/kern/sys_procdesc.c
M sys/sys/procdesc.h
Log Message:
-----------
Kernel use-after-free via file descriptor syscalls
A file descriptor can be closed while a thread is blocked in a poll(2) or
select(2) call waiting for that descriptor. Because the blocked thread does
not hold a reference to the underlying object, this closure may result in the
object being freed while the thread remains blocked. In this situation, the
kernel must remove the blocked thread from the per-object wait queue prior to
freeing the object.
In the case of some file descriptor types, the kernel failed to unlink
blocked threads from the object before freeing it. When the blocked thread
is subsequently woken, it accesses memory that has already been freed
resulting in a use-after-free vulnerability.
CVE-2026-45251
Obtained from: FreeBSD 14.x
Does not include tests
Commit: be16993da8575fcc6431ef399e2d47af2e6d1d83
https://github.com/MidnightBSD/src/commit/be16993da8575fcc6431ef399e2d47af2e6d1d83
Author: Lucas Holt <luke at foolishgames.com>
Date: 2026-06-06 (Sat, 06 Jun 2026)
Changed paths:
A .github/workflows/claude-review-ondemand.yml
A .github/workflows/claude-review.yml
Log Message:
-----------
Add Claude Code automatic and on-demand PR review workflows
Adds two GitHub Actions workflows using anthropics/claude-code-action at v1:
- claude-review.yml: auto-reviews every PR against main/master
- claude-review-ondemand.yml: triggered by /code-review comment on a PR
Both post inline review comments and include MidnightBSD-specific
instructions (style(9), malloc/free auditing, AI-prohibited paths).
Requires ANTHROPIC_API_KEY set as a GitHub org secret.
AI-Assisted-by: Claude Sonnet 4.6
Commit: e1304f8bec7d63126fbebc2f04a14517b2976c37
https://github.com/MidnightBSD/src/commit/e1304f8bec7d63126fbebc2f04a14517b2976c37
Author: Lucas Holt <luke at foolishgames.com>
Date: 2026-06-06 (Sat, 06 Jun 2026)
Changed paths:
M .github/workflows/claude-review.yml
Log Message:
-----------
Update API key secret for Claude code action
Signed-off-by: Lucas Holt <luke at foolishgames.com>
Commit: 5028c285ac30afc3c66b4a5e893bc042a1b6e41d
https://github.com/MidnightBSD/src/commit/5028c285ac30afc3c66b4a5e893bc042a1b6e41d
Author: Lucas Holt <luke at foolishgames.com>
Date: 2026-06-06 (Sat, 06 Jun 2026)
Changed paths:
M .github/workflows/claude-review-ondemand.yml
Log Message:
-----------
Update API key secret for Claude code action
Signed-off-by: Lucas Holt <luke at foolishgames.com>
Commit: 3deb9111be96c1f83dce10c65f47b80bdc4dda4d
https://github.com/MidnightBSD/src/commit/3deb9111be96c1f83dce10c65f47b80bdc4dda4d
Author: Lucas Holt <luke at foolishgames.com>
Date: 2026-06-06 (Sat, 06 Jun 2026)
Changed paths:
M .github/workflows/claude-review-ondemand.yml
Log Message:
-----------
Rename API key variable for consistency
Signed-off-by: Lucas Holt <luke at foolishgames.com>
Commit: 260ad6f208e26b7aaeb015cc9b61374c8b586867
https://github.com/MidnightBSD/src/commit/260ad6f208e26b7aaeb015cc9b61374c8b586867
Author: Lucas Holt <luke at foolishgames.com>
Date: 2026-06-06 (Sat, 06 Jun 2026)
Changed paths:
M .github/workflows/claude-review.yml
Log Message:
-----------
Fix key name for Claude code action
Signed-off-by: Lucas Holt <luke at foolishgames.com>
Commit: bf656195b6a1ae670d87a821caab65fb7f717fb1
https://github.com/MidnightBSD/src/commit/bf656195b6a1ae670d87a821caab65fb7f717fb1
Author: Lucas Holt <luke at foolishgames.com>
Date: 2026-06-06 (Sat, 06 Jun 2026)
Changed paths:
M contrib/libarchive/NEWS
M contrib/libarchive/README.md
M contrib/libarchive/SECURITY.md
M contrib/libarchive/build/ci/github_actions/install-macos-dependencies.sh
M contrib/libarchive/cat/bsdcat.c
M contrib/libarchive/cat/cmdline.c
A contrib/libarchive/contrib/oss-fuzz/fuzz_helpers.h
A contrib/libarchive/contrib/oss-fuzz/libarchive_7zip_fuzzer.cc
A contrib/libarchive/contrib/oss-fuzz/libarchive_7zip_fuzzer.dict
A contrib/libarchive/contrib/oss-fuzz/libarchive_7zip_fuzzer.options
A contrib/libarchive/contrib/oss-fuzz/libarchive_ar_fuzzer.cc
A contrib/libarchive/contrib/oss-fuzz/libarchive_ar_fuzzer.dict
A contrib/libarchive/contrib/oss-fuzz/libarchive_cab_fuzzer.cc
A contrib/libarchive/contrib/oss-fuzz/libarchive_cab_fuzzer.dict
A contrib/libarchive/contrib/oss-fuzz/libarchive_cpio_fuzzer.cc
A contrib/libarchive/contrib/oss-fuzz/libarchive_cpio_fuzzer.dict
A contrib/libarchive/contrib/oss-fuzz/libarchive_encryption_fuzzer.cc
A contrib/libarchive/contrib/oss-fuzz/libarchive_encryption_fuzzer.options
A contrib/libarchive/contrib/oss-fuzz/libarchive_entry_fuzzer.cc
A contrib/libarchive/contrib/oss-fuzz/libarchive_filter_fuzzer.cc
A contrib/libarchive/contrib/oss-fuzz/libarchive_filter_fuzzer.dict
A contrib/libarchive/contrib/oss-fuzz/libarchive_filter_fuzzer.options
A contrib/libarchive/contrib/oss-fuzz/libarchive_fuzzer.dict
A contrib/libarchive/contrib/oss-fuzz/libarchive_fuzzer.options
A contrib/libarchive/contrib/oss-fuzz/libarchive_iso9660_fuzzer.cc
A contrib/libarchive/contrib/oss-fuzz/libarchive_iso9660_fuzzer.dict
A contrib/libarchive/contrib/oss-fuzz/libarchive_iso9660_fuzzer.options
A contrib/libarchive/contrib/oss-fuzz/libarchive_lha_fuzzer.cc
A contrib/libarchive/contrib/oss-fuzz/libarchive_lha_fuzzer.dict
A contrib/libarchive/contrib/oss-fuzz/libarchive_linkify_fuzzer.cc
A contrib/libarchive/contrib/oss-fuzz/libarchive_match_fuzzer.cc
A contrib/libarchive/contrib/oss-fuzz/libarchive_mtree_fuzzer.cc
A contrib/libarchive/contrib/oss-fuzz/libarchive_mtree_fuzzer.dict
A contrib/libarchive/contrib/oss-fuzz/libarchive_rar5_fuzzer.cc
A contrib/libarchive/contrib/oss-fuzz/libarchive_rar5_fuzzer.dict
A contrib/libarchive/contrib/oss-fuzz/libarchive_rar_fuzzer.cc
A contrib/libarchive/contrib/oss-fuzz/libarchive_read_disk_fuzzer.cc
A contrib/libarchive/contrib/oss-fuzz/libarchive_roundtrip_fuzzer.cc
A contrib/libarchive/contrib/oss-fuzz/libarchive_roundtrip_fuzzer.options
A contrib/libarchive/contrib/oss-fuzz/libarchive_seek_fuzzer.cc
A contrib/libarchive/contrib/oss-fuzz/libarchive_seek_fuzzer.options
A contrib/libarchive/contrib/oss-fuzz/libarchive_string_fuzzer.cc
A contrib/libarchive/contrib/oss-fuzz/libarchive_tar_fuzzer.cc
A contrib/libarchive/contrib/oss-fuzz/libarchive_tar_fuzzer.dict
A contrib/libarchive/contrib/oss-fuzz/libarchive_warc_fuzzer.cc
A contrib/libarchive/contrib/oss-fuzz/libarchive_warc_fuzzer.dict
A contrib/libarchive/contrib/oss-fuzz/libarchive_write_disk_fuzzer.cc
A contrib/libarchive/contrib/oss-fuzz/libarchive_write_disk_fuzzer.options
A contrib/libarchive/contrib/oss-fuzz/libarchive_write_fuzzer.cc
A contrib/libarchive/contrib/oss-fuzz/libarchive_xar_fuzzer.cc
A contrib/libarchive/contrib/oss-fuzz/libarchive_xar_fuzzer.dict
A contrib/libarchive/contrib/oss-fuzz/libarchive_xar_fuzzer.options
A contrib/libarchive/contrib/oss-fuzz/libarchive_zip_fuzzer.cc
A contrib/libarchive/contrib/oss-fuzz/libarchive_zip_fuzzer.dict
M contrib/libarchive/cpio/cmdline.c
M contrib/libarchive/cpio/cpio.c
M contrib/libarchive/cpio/test/test_owner_parse.c
M contrib/libarchive/libarchive/archive.h
M contrib/libarchive/libarchive/archive_acl.c
M contrib/libarchive/libarchive/archive_check_magic.c
M contrib/libarchive/libarchive/archive_cryptor.c
M contrib/libarchive/libarchive/archive_cryptor_private.h
M contrib/libarchive/libarchive/archive_entry.h
M contrib/libarchive/libarchive/archive_entry_paths.3
M contrib/libarchive/libarchive/archive_entry_stat.3
M contrib/libarchive/libarchive/archive_entry_stat.c
M contrib/libarchive/libarchive/archive_parse_date.c
M contrib/libarchive/libarchive/archive_platform.h
A contrib/libarchive/libarchive/archive_platform_stat.h
M contrib/libarchive/libarchive/archive_private.h
M contrib/libarchive/libarchive/archive_read.c
M contrib/libarchive/libarchive/archive_read_disk_entry_from_file.c
M contrib/libarchive/libarchive/archive_read_disk_posix.c
M contrib/libarchive/libarchive/archive_read_open_fd.c
M contrib/libarchive/libarchive/archive_read_open_file.c
M contrib/libarchive/libarchive/archive_read_open_filename.c
M contrib/libarchive/libarchive/archive_read_set_format.c
M contrib/libarchive/libarchive/archive_read_support_filter_lz4.c
M contrib/libarchive/libarchive/archive_read_support_filter_program.c
M contrib/libarchive/libarchive/archive_read_support_filter_uu.c
M contrib/libarchive/libarchive/archive_read_support_filter_zstd.c
M contrib/libarchive/libarchive/archive_read_support_format_7zip.c
M contrib/libarchive/libarchive/archive_read_support_format_cab.c
M contrib/libarchive/libarchive/archive_read_support_format_cpio.c
M contrib/libarchive/libarchive/archive_read_support_format_lha.c
M contrib/libarchive/libarchive/archive_read_support_format_mtree.c
M contrib/libarchive/libarchive/archive_read_support_format_rar.c
M contrib/libarchive/libarchive/archive_read_support_format_rar5.c
M contrib/libarchive/libarchive/archive_read_support_format_tar.c
M contrib/libarchive/libarchive/archive_read_support_format_warc.c
M contrib/libarchive/libarchive/archive_read_support_format_xar.c
M contrib/libarchive/libarchive/archive_read_support_format_zip.c
M contrib/libarchive/libarchive/archive_string.c
M contrib/libarchive/libarchive/archive_string.h
M contrib/libarchive/libarchive/archive_string_sprintf.c
M contrib/libarchive/libarchive/archive_util.c
M contrib/libarchive/libarchive/archive_version_details.c
M contrib/libarchive/libarchive/archive_write.c
M contrib/libarchive/libarchive/archive_write_add_filter_bzip2.c
M contrib/libarchive/libarchive/archive_write_add_filter_gzip.c
M contrib/libarchive/libarchive/archive_write_add_filter_program.c
M contrib/libarchive/libarchive/archive_write_add_filter_zstd.c
M contrib/libarchive/libarchive/archive_write_disk_posix.c
M contrib/libarchive/libarchive/archive_write_open_fd.c
M contrib/libarchive/libarchive/archive_write_open_file.c
M contrib/libarchive/libarchive/archive_write_open_filename.c
M contrib/libarchive/libarchive/archive_write_open_memory.c
M contrib/libarchive/libarchive/archive_write_set_format_7zip.c
M contrib/libarchive/libarchive/archive_write_set_format_mtree.c
M contrib/libarchive/libarchive/archive_write_set_format_shar.c
M contrib/libarchive/libarchive/archive_write_set_format_ustar.c
M contrib/libarchive/libarchive/archive_write_set_format_xar.c
M contrib/libarchive/libarchive/archive_write_set_format_zip.c
M contrib/libarchive/libarchive/filter_fork_posix.c
A contrib/libarchive/libarchive/module.modulemap
M contrib/libarchive/libarchive/test/test_acl_nfs4.c
M contrib/libarchive/libarchive/test/test_acl_posix1e.c
M contrib/libarchive/libarchive/test/test_archive_parse_date.c
M contrib/libarchive/libarchive/test/test_archive_read_multiple_data_objects.c
M contrib/libarchive/libarchive/test/test_archive_string.c
M contrib/libarchive/libarchive/test/test_archive_string_conversion.c
M contrib/libarchive/libarchive/test/test_compat_lz4.c
A contrib/libarchive/libarchive/test/test_compat_lz4_skippable_frames_B4.tar.lz4.uu
M contrib/libarchive/libarchive/test/test_compat_lzip.c
M contrib/libarchive/libarchive/test/test_entry.c
M contrib/libarchive/libarchive/test/test_read_filter_gzip_recursive.c
M contrib/libarchive/libarchive/test/test_read_format_7zip.c
A contrib/libarchive/libarchive/test/test_read_format_7zip_issue2765.7z.uu
A contrib/libarchive/libarchive/test/test_read_format_7zip_issue2765.c
M contrib/libarchive/libarchive/test/test_read_format_rar5.c
A contrib/libarchive/libarchive/test/test_read_format_rar5_dirdata.rar.uu
A contrib/libarchive/libarchive/test/test_read_format_rar5_invalid_hash_valid_htime_exfld.rar.uu
A contrib/libarchive/libarchive/test/test_read_format_rar5_only_crypt_exfld.rar.uu
A contrib/libarchive/libarchive/test/test_read_format_rar5_unsupported_exfld.rar.uu
A contrib/libarchive/libarchive/test/test_read_format_tar_V_negative_size.c
A contrib/libarchive/libarchive/test/test_read_format_tar_V_negative_size.tar.uu
M contrib/libarchive/libarchive/test/test_read_set_format.c
M contrib/libarchive/libarchive/test/test_write_disk_perms.c
M contrib/libarchive/libarchive/test/test_write_filter_bzip2.c
M contrib/libarchive/libarchive/test/test_write_filter_gzip.c
M contrib/libarchive/libarchive/test/test_write_filter_gzip_timestamp.c
A contrib/libarchive/libarchive_fe/lafe_err.c
A contrib/libarchive/libarchive_fe/lafe_err.h
M contrib/libarchive/libarchive_fe/line_reader.c
M contrib/libarchive/libarchive_fe/passphrase.c
M contrib/libarchive/tar/bsdtar.c
M contrib/libarchive/tar/bsdtar.h
M contrib/libarchive/tar/cmdline.c
M contrib/libarchive/tar/creation_set.c
M contrib/libarchive/tar/read.c
M contrib/libarchive/tar/subst.c
A contrib/libarchive/tar/test/test_crlf_mtree.c
M contrib/libarchive/tar/test/test_option_s.c
M contrib/libarchive/tar/test/test_option_safe_writes.c
M contrib/libarchive/tar/util.c
M contrib/libarchive/tar/write.c
M contrib/libarchive/test_utils/test_common.h
M contrib/libarchive/test_utils/test_main.c
M contrib/libarchive/unzip/bsdunzip.c
M contrib/libarchive/unzip/cmdline.c
M contrib/libarchive/unzip/la_queue.h
M contrib/libarchive/unzip/test/test_C.c
M contrib/libarchive/unzip/test/test_L.c
M contrib/libarchive/unzip/test/test_P_encryption.c
M contrib/libarchive/unzip/test/test_basic.c
M contrib/libarchive/unzip/test/test_d.c
M contrib/libarchive/unzip/test/test_doubledash.c
M contrib/libarchive/unzip/test/test_glob.c
M contrib/libarchive/unzip/test/test_j.c
M contrib/libarchive/unzip/test/test_n.c
M contrib/libarchive/unzip/test/test_o.c
M contrib/libarchive/unzip/test/test_p.c
M contrib/libarchive/unzip/test/test_q.c
M contrib/libarchive/unzip/test/test_singlefile.c
M contrib/libarchive/unzip/test/test_t.c
M contrib/libarchive/unzip/test/test_x.c
Log Message:
-----------
Merge commit 'd4bd62179a944687e3e3241855613c5498dbc2c0'
Commit: 72edb513167d5909b9e79780a0527e4ce349f1c7
https://github.com/MidnightBSD/src/commit/72edb513167d5909b9e79780a0527e4ce349f1c7
Author: Lucas Holt <luke at foolishgames.com>
Date: 2026-06-06 (Sat, 06 Jun 2026)
Changed paths:
M contrib/unbound/config.h.in
M contrib/unbound/configure
M contrib/unbound/configure.ac
M contrib/unbound/doc/README
M contrib/unbound/doc/example.conf.in
M contrib/unbound/doc/libunbound.3.in
M contrib/unbound/doc/unbound-anchor.8.in
M contrib/unbound/doc/unbound-checkconf.8.in
M contrib/unbound/doc/unbound-control.8.in
M contrib/unbound/doc/unbound-host.1.in
M contrib/unbound/doc/unbound.8.in
M contrib/unbound/doc/unbound.conf.5.in
Log Message:
-----------
Merge commit '012e2a870080bb6b715440f99c99a2340769e015'
Commit: 45949158fb9860016f3399a307e12a1a7d639523
https://github.com/MidnightBSD/src/commit/45949158fb9860016f3399a307e12a1a7d639523
Author: Lucas Holt <luke at foolishgames.com>
Date: 2026-06-06 (Sat, 06 Jun 2026)
Changed paths:
A contrib/mport/.claude/commands/cppcheck-clang-format-precommit.md
A contrib/mport/.claude/commands/splint-post-c-sanity.md
A contrib/mport/.github/workflows/ci.yml
M contrib/mport/.gitignore
A contrib/mport/AGENTS.md
A contrib/mport/CLAUDE.md
M contrib/mport/Makefile
M contrib/mport/libexec/mport.check-fake/mport.check-fake.c
M contrib/mport/libexec/mport.check-for-older/mport.check-for-older.c
M contrib/mport/libexec/mport.create/Makefile
A contrib/mport/libexec/mport.create/mport.create.1
M contrib/mport/libexec/mport.create/mport.create.c
M contrib/mport/libexec/mport.delete/mport.delete.c
M contrib/mport/libexec/mport.fetch/Makefile
A contrib/mport/libexec/mport.fetch/mport.fetch.1
M contrib/mport/libexec/mport.fetch/mport.fetch.c
M contrib/mport/libexec/mport.info/mport.info.c
M contrib/mport/libexec/mport.init/mport.init.c
M contrib/mport/libexec/mport.install/Makefile
A contrib/mport/libexec/mport.install/mport.install.1
M contrib/mport/libexec/mport.install/mport.install.c
M contrib/mport/libexec/mport.list/Makefile
A contrib/mport/libexec/mport.list/mport.list.1
M contrib/mport/libexec/mport.list/mport.list.c
M contrib/mport/libexec/mport.merge/Makefile
A contrib/mport/libexec/mport.merge/mport.merge.1
M contrib/mport/libexec/mport.merge/mport.merge.c
M contrib/mport/libexec/mport.query/Makefile
A contrib/mport/libexec/mport.query/mport.query.1
M contrib/mport/libexec/mport.query/mport.query.c
M contrib/mport/libexec/mport.update/mport.update.c
M contrib/mport/libexec/mport.updepends/mport.updepends.c
M contrib/mport/libexec/mport.version_cmp/mport.version_cmp.c
M contrib/mport/libmport/Makefile
M contrib/mport/libmport/age.c
M contrib/mport/libmport/annotation.c
M contrib/mport/libmport/asset.c
M contrib/mport/libmport/audit.c
M contrib/mport/libmport/autoremove.c
M contrib/mport/libmport/bundle_read.c
M contrib/mport/libmport/bundle_read_install_pkg.c
M contrib/mport/libmport/bundle_read_update_pkg.c
M contrib/mport/libmport/bundle_write.c
M contrib/mport/libmport/check_preconditions.c
M contrib/mport/libmport/clean.c
M contrib/mport/libmport/create_primative.c
M contrib/mport/libmport/db.c
M contrib/mport/libmport/default_cbs.c
M contrib/mport/libmport/delete_primative.c
M contrib/mport/libmport/error.c
M contrib/mport/libmport/fetch.c
M contrib/mport/libmport/import_export.c
M contrib/mport/libmport/index.c
M contrib/mport/libmport/index_depends.c
M contrib/mport/libmport/info.c
M contrib/mport/libmport/install.c
M contrib/mport/libmport/install_primative.c
M contrib/mport/libmport/instance.c
M contrib/mport/libmport/list.c
M contrib/mport/libmport/lock.c
M contrib/mport/libmport/lua.c
M contrib/mport/libmport/lua_scripts.c
M contrib/mport/libmport/merge_primative.c
M contrib/mport/libmport/message.c
M contrib/mport/libmport/mkdir.c
M contrib/mport/libmport/mport.3
M contrib/mport/libmport/mport.h
M contrib/mport/libmport/mport_private.h
M contrib/mport/libmport/ping.c
M contrib/mport/libmport/pkgmeta.c
M contrib/mport/libmport/plist.c
M contrib/mport/libmport/service.c
M contrib/mport/libmport/setting.c
M contrib/mport/libmport/stats.c
M contrib/mport/libmport/update.c
M contrib/mport/libmport/update_primative.c
M contrib/mport/libmport/upgrade.c
M contrib/mport/libmport/util.c
M contrib/mport/libmport/verify.c
M contrib/mport/libmport/version_cmp.c
A contrib/mport/mk/sanitize.mk
M contrib/mport/mport/Makefile
M contrib/mport/mport/mport.1
M contrib/mport/mport/mport.c
A contrib/mport/skills/cppcheck-clang-format-precommit/SKILL.md
A contrib/mport/skills/cppcheck-clang-format-precommit/scripts/precommit_c_sanity.sh
A contrib/mport/skills/splint-post-c-sanity/SKILL.md
A contrib/mport/skills/splint-post-c-sanity/scripts/run_splint_on_staged.sh
A contrib/mport/tests/Kyuafile
A contrib/mport/tests/Makefile
A contrib/mport/tests/mport_cli_test
A contrib/mport/tests/mport_create_test
A contrib/mport/tests/mport_fetch_test.c
A contrib/mport/tests/mport_libexec_test
Log Message:
-----------
Merge commit '0c5f8155ce79534719dda056168db5d52591fbff' into stable/4.1
Commit: a65a9e6c2ceda0aaa79317d77d430d4b66a0fa65
https://github.com/MidnightBSD/src/commit/a65a9e6c2ceda0aaa79317d77d430d4b66a0fa65
Author: Lucas Holt <luke at foolishgames.com>
Date: 2026-06-06 (Sat, 06 Jun 2026)
Changed paths:
M libexec/mport.create/Makefile
Log Message:
-----------
libexec/mport.create: add ucl include path and library for 2.7.9
mport.create gained a UCL manifest parser in 2.7.9, requiring
libucl headers and linkage.
Co-Authored-By: Claude Sonnet 4.6 <noreply at anthropic.com>
Compare: https://github.com/MidnightBSD/src/compare/fc0dfaf8f92a%5E...a65a9e6c2ced
To unsubscribe from these emails, change your notification settings at https://github.com/MidnightBSD/src/settings/notifications
More information about the Midnightbsd-cvs
mailing list