summaryrefslogtreecommitdiff
AgeCommit message (Expand)Author
2025-02-20Add UPDATING entries and bump version.release/14.1.0-p8releng/14.1Gordon Tetlow
2025-02-20ssh: Bump VersionAddendum for CVE fixesEd Maste
2025-02-20ssh: Fix cases where error codes were not correctly setEd Maste
2025-02-20ssh: Don't reply to PING in preauth phase or during KEXEd Maste
2025-01-29Add UPDATING entries and bump versionrelease/14.1.0-p7Mark Johnston
2025-01-29etcupdate: Restrict access to the conflicts directoryMark Johnston
2025-01-29OpenSSH: correct logic error in ObscureKeystrokeTimingEd Maste
2025-01-29contrib/tzdata: import tzdata 2025aPhilip Paeps
2025-01-29contrib/tzdata: import tzdata 2024bPhilip Paeps
2025-01-29tarfs: Fix the size of struct tarfs_fid and add a static assertRick Macklem
2025-01-29ext2fs: Fix the size of struct ufid and add a static assertRick Macklem
2025-01-29cd9660: Make sure that struct ifid fits in generic filehandle structureMark Johnston
2025-01-29audit: Fix short-circuiting in syscallenter()Mark Johnston
2025-01-29svc.c: Check for a non-NULL xp_socketRick Macklem
2024-10-29Add UPDATING entries and bump revisionEd Maste
2024-10-29pam_xdg: Fix user xdg runtime directory's descriptor leakOlivier Certner
2024-10-29fetch: correct env var name for --crl option to workFranco Fichtner
2024-10-29ctl: limit memory allocation in pci_virtio_scsiPierre Pronchery
2024-10-29bhyve/nvme: Fix Infinite loop in queue processingChuck Tuffli
2024-10-29bhyve: improve bounds checks in hda_codecPierre Pronchery
2024-10-29bhyve: validate corb->wp to avoid infinite loopEd Maste
2024-10-29bhyve: avoid TOCTOU on iov_len in virtio_vq_recordon()Pierre Pronchery
2024-10-29bhyve/nvme: Fix out-of-bounds read in NVMe log pageChuck Tuffli
2024-09-19Add UPDATING entries and bump revision.Gordon Tetlow
2024-09-19libnv: correct the calculation of the structure's sizeMariusz Zaborski
2024-09-19bhyve: improve input validation in pci_xhciPierre Pronchery
2024-09-19pf: rework pf_icmp_state_lookup() failure modeKristof Provost
2024-09-19pf: be less strict about icmp state checking for sloppy state trackingKristof Provost
2024-09-19pf: try to lookup the icmp state based on a correct packet descriptorKristof Provost
2024-09-19pf: improve the ICMPv6 direction checkKristof Provost
2024-09-19pf: invert direction for inner icmp state lookupsKristof Provost
2024-09-19pf: fix icmp-in-icmp state lookupKristof Provost
2024-09-04calendar: don't setlogin(2) in the -a user handlersKyle Evans
2024-09-04Add UPDATING entries and bump revisionEd Maste
2024-09-04umtx: shm: 'ushm_refcnt > 0' => 'ushm_refcnt != 0'Olivier Certner
2024-09-04umtx: shm: Prevent reference counting overflowOlivier Certner
2024-09-04umtx: shm: Fix use-after-free due to multiple drops of the registry referenceOlivier Certner
2024-09-04umtx: shm: Collapse USHMF_REG_LINKED and USHMF_OBJ_LINKED flagsOlivier Certner
2024-09-04openssl: Avoid type errors in EAI-related name check logic.Viktor Dukhovni
2024-09-04bhyve: fix off by one error in pci_xhciPierre Pronchery
2024-09-04ctl: avoid heap info leak in ctl_request_senseEd Maste
2024-09-04ctl: fix Out-Of-Bounds access in ctl_report_supported_opcodesPierre Pronchery
2024-09-04ctl: fix memory disclosure in read/write buffer commandsPierre Pronchery
2024-09-04ctl: fix Use-After-Free in ctl_write_bufferAlan Somers
2024-09-04bhyve: fix Out-Of-Bounds read/write heap in tpm_ppi_mem_handlerPierre Pronchery
2024-09-04libnv: verify that string is null terminatedMariusz Zaborski
2024-09-04libnv: allocate buffer in a safe wayMariusz Zaborski
2024-08-07Add UPDATING entries and bump the branch versionMark Johnston
2024-08-07ktrace: Fix an inverted privilege checkMark Johnston
2024-08-07ifconfig: Fix default netmask calculationMichael Gmelin