markj committed rG777f67d8a9c3: bhyve: Use a blocking socket in the helper process.

markj committed rGeeff383ba634: vmm: Avoid clobbering errors from vmm_modinit().

markj committed rGa64246401e62: divert: Avoid using atomic_(load|store)_(acq|rel)_16.

markj committed rG95030a914349: bhyve/slirp: Drop privileges before entering capability mode.

markj committed rG2586f9f459ad: virtio/p9fs: Define the channel list mutex as static.

markj committed rG94989248641a: p9fs: Remove the "cancel" transport method.

markj committed rGca89b0fa1a93: install: Explicitly include sys/param.h for MAXPATHLEN.

markj committed rG88deb1cff92c: makefs/zfs: Explicitly include sys/param.h for nitems().

markj committed rG7c7725dd75e1: tests/jaildesc: Use a more efficient mechanism to block.

markj committed rG94a47b35a475: tests/jaildesc: Add some more test scenarios.

markj committed rG34e155336f0d: pfctl: pfctl_get_astats() doesn't set errno.

markj committed rG3f386ea741ca: vmm/arm64: Compile vmm_nvhe.c without SSP.

markj committed rG874316b0daa6: iconv.3: Fix formatting of the error section.

markj committed rG3cf9ba059b80: libalias: Serialize updates to the global instance list.

markj committed rG1cea6bf1f7bd: ucode: ucode_error can be defined with static.

markj committed rG24575bd4f192: tests/ipsec: Run in parallel.

markj committed rG3b69c7201fd0: udp: Wrap a long line in udp_send().

markj committed rGfe03a78c5d59: tests/jaildesc: Add some more test scenarios.

markj committed rG75b23c102e8d: tests/jaildesc: Use a more efficient mechanism to block.

markj committed rG083bb80a125a: openssl: Fix multiple vulnerabilities (authored by gordon).

markj committed rG157d99d7ec9b: ldns: Fix query response validation (authored by gordon).

markj committed rG8ed11b21e544: vt: Avoid integer overflow in CONS_HISTORY ioctl (authored by emaste).

markj committed rG81435fc0882c: arm64: Workaround the following errata (authored by andrew).

markj committed rG871d33e8a66a: sigqueue: In capability mode, only allow signalling self (authored by emaste).

markj committed rG513db24414f0: sound: Check for offset overflow in dsp_mmap_single() (authored by christos).

markj committed rG48c1c5e3c348: ktls: Don't attempt to modify non-anonymous mbufs on the receive path (authored by jhb).

markj committed rG796579bcfbc4: imgact_elf: Clear no-ASLR and -WXORX flags earlier for setugid images.

markj committed rG328e16f66204: Add UPDATING entries and bump version.

markj committed rGa4d36c975be0: linux: Correct the issetugid check in copyout_auxargs.

markj committed rG3d80e4aec3c1: in6_mcast: Fix a race in in6p_set_source_filter().

markj committed rGabc077216bac: sound: Fix software buffer lifetime issues.

markj committed rGfbb19baa29ce: ldns: Fix query response validation (authored by gordon).

markj committed rG068168fefd4b: thr_kill2: Respect p_cansignal().

markj committed rG0d6ccbb7524f: openssl: Fix multiple vulnerabilities (authored by gordon).

markj committed rGf4cf977dfe92: vt: Avoid integer overflow in CONS_HISTORY ioctl (authored by emaste).

markj committed rG6160bd311a1b: unbound: Apply upstream patches (authored by des).

markj committed rGc42ee04c521e: sound: Check for offset overflow in dsp_mmap_single() (authored by christos).

markj committed rGa53619675cdc: arm64: Workaround the following errata (authored by andrew).

markj committed rG540a315cdb46: ktls: Don't attempt to modify non-anonymous mbufs on the receive path (authored by jhb).

markj committed rG0f6e90c4cc4f: openssl: Update to 3.5.6 and associated fixes. (authored by ngie).

markj committed rG77ee83d12625: sigqueue: In capability mode, only allow signalling self (authored by emaste).

markj committed rGfef97a6889f9: Add UPDATING entries and bump version.

markj committed rG998de2d14e25: syslogd: fix memory leak in casper_ttymsg() (authored by guest-patmaddox).

markj committed rG6e51dfc401e7: imgact_elf: Clear no-ASLR and -WXORX flags earlier for setugid images.

markj committed rGbda153dc04b4: sound: Fix software buffer lifetime issues.

markj committed rGed4692b8226e: in6_mcast: Fix a race in in6p_set_source_filter().

markj committed rG0b18ec59972b: linux: Correct the issetugid check in copyout_auxargs.

markj committed rG6f6c7b996719: thr_kill2: Respect p_cansignal().

markj committed rG1929d9e173e5: openssl: Fix multiple vulnerabilities (authored by gordon).

markj committed rG857abc12945a: unbound: Apply upstream patches (authored by des).

markj committed rG799e830134d5: vt: Avoid integer overflow in CONS_HISTORY ioctl (authored by emaste).

markj committed rGeab757f954ed: sigqueue: In capability mode, only allow signalling self (authored by emaste).

markj committed rG889e306ded21: arm64: Workaround the following errata (authored by andrew).

markj committed rG410ab2bff36f: ldns: Fix query response validation (authored by gordon).

markj committed rGb9128fe1951c: sound: Check for offset overflow in dsp_mmap_single() (authored by christos).

markj committed rG1bfe60bae8b8: crypto/openssl: Update to 3.0.20 (authored by ngie).

markj committed rGd43259dd66b3: ktls: Don't attempt to modify non-anonymous mbufs on the receive path (authored by jhb).

markj committed rG3d95ec875867: Add UPDATING entries and bump version.

markj committed rG547fc2a98a24: imgact_elf: Clear no-ASLR and -WXORX flags earlier for setugid images.

markj committed rG3fe092282025: linux: Correct the issetugid check in copyout_auxargs.

markj committed rG0e8cc8d8a49f: sound: Fix software buffer lifetime issues.

markj committed rGa7062a6de005: in6_mcast: Fix a race in in6p_set_source_filter().

markj committed rG31f6086db8fe: thr_kill2: Respect p_cansignal().

markj committed rGdd3096b4efe6: openssl: Fix multiple vulnerabilities (authored by gordon).

markj committed rGf61d7fc2ba85: ldns: Fix query response validation (authored by gordon).

markj committed rG9cba21c2de16: vt: Avoid integer overflow in CONS_HISTORY ioctl (authored by emaste).

markj committed rGa68c183e0ad2: unbound: Apply upstream patches (authored by des).

markj committed rGaf3398862ac0: ktls: Don't attempt to modify non-anonymous mbufs on the receive path (authored by jhb).

markj committed rG61d0cea4c00f: arm64: Workaround the following errata (authored by andrew).

markj committed rG644ce0e7dffa: sound: Check for offset overflow in dsp_mmap_single() (authored by christos).

markj committed rGf56e8cb94df6: sigqueue: In capability mode, only allow signalling self (authored by emaste).

markj committed rGd95a8c20f3bc: crypto/openssl: Update to 3.0.20 (authored by ngie).

markj committed rG0b1dfc94785e: Add UPDATING entries and bump version.

markj committed rG744f62ccbf82: imgact_elf: Clear no-ASLR and -WXORX flags earlier for setugid images.

markj committed rGde5fd56985c3: sound: Fix software buffer lifetime issues.

markj committed rG0dcf9bba4b9f: linux: Correct the issetugid check in copyout_auxargs.

markj committed rGe6859453de61: in6_mcast: Fix a race in in6p_set_source_filter().

markj committed rGfa5581c379fe: thr_kill2: Respect p_cansignal().

markj committed rG5719a342555b: ldns: Fix query response validation (authored by gordon).

markj committed rGec6bfa889b83: openssl: Fix multiple vulnerabilities (authored by gordon).

markj committed rG333bdd7e9427: ktls: Don't attempt to modify non-anonymous mbufs on the receive path (authored by jhb).

markj committed rGe99aa8682dba: arm64: Workaround the following errata (authored by andrew).

markj committed rG144f59e06f9b: sound: Check for offset overflow in dsp_mmap_single() (authored by christos).

markj committed rG865c8ff56693: openssl: Fix multiple vulnerabilities (authored by gordon).

markj committed rG20bfab98f8ae: ldns: Fix query response validation (authored by gordon).

markj committed rGe417948e6139: imgact_elf: Clear no-ASLR and -WXORX flags earlier for setugid images.

markj committed rG9d9d6c6e6081: arm64: Workaround the following errata (authored by andrew).

markj committed rGa6a8b2759f52: sound: Check for offset overflow in dsp_mmap_single() (authored by christos).

markj committed rGa51345704403: ktls: Don't attempt to modify non-anonymous mbufs on the receive path (authored by jhb).

markj committed rGff411cc40cd4: linux: Correct the issetugid check in copyout_auxargs.

markj committed rGf8f9050d61dd: sound: Fix software buffer lifetime issues.

markj committed rG522182827ea1: in6_mcast: Fix a race in in6p_set_source_filter().

markj committed rG72ad7baa99c7: thr_kill2: Respect p_cansignal().

markj committed rG7628e1ddfd52: sound: Fix software buffer lifetime issues.

markj committed rG3ac9726c4269: linux: Correct the issetugid check in copyout_auxargs.

markj committed rGe1cdc49846c1: imgact_elf: Clear no-ASLR and -WXORX flags earlier for setugid images.

markj committed rGce2b95932ec2: in6_mcast: Fix a race in in6p_set_source_filter().

markj committed rGafa0c67a1ba3: thr_kill2: Respect p_cansignal().

markj committed rGe508c3431d8e: openssl: Fix multiple vulnerabilities (authored by gordon).

markj committed rG980ba4177b69: ldns: Fix query response validation (authored by gordon).