User Details
User Details
- User Since
- Nov 2 2014, 4:37 PM (609 w, 1 d)
Wed, Jul 1
Wed, Jul 1
jhb might have some views here too.
Tue, Jun 30
Tue, Jun 30
gordon committed R9:061912927271: Add EN-26:16, EN-26:17, and SA-26:37 through SA-26:49. (authored by gordon).
Add EN-26:16, EN-26:17, and SA-26:37 through SA-26:49.
Mon, Jun 29
Mon, Jun 29
gordon committed rG453cfe97276d: efitable: Fixup getopt args to reflect guid use. (authored by gordon).
efitable: Fixup getopt args to reflect guid use.
Sat, Jun 20
Sat, Jun 20
gordon committed rG3a4e049c3814: efitable: Fixup getopt args to reflect guid use. (authored by gordon).
efitable: Fixup getopt args to reflect guid use.
gordon added a comment to D57711: apm: Document -R flag..
I'm not 100% on the actual use of the -R flag. It doesn't seem to be documented, but this is my supposition. Please confirm.
gordon requested review of D57711: apm: Document -R flag..
gordon requested review of D57695: efitable: Fixup getopt args to reflect guid use.
gordon committed rG22d66952555c: ifmcstat: Fixup getopt args to match reality. (authored by gordon).
ifmcstat: Fixup getopt args to match reality.
Fri, Jun 19
Fri, Jun 19
gordon committed R9:cbd70fd3ce45: Update patch instructions to use patch -E -p0. (authored by gordon).
Update patch instructions to use patch -E -p0.
Update FreeBSD-EN-26:15.openssl.
Wed, Jun 17
Wed, Jun 17
gordon committed R9:0c8278440e90: Update SA-26:26.ktls with appropriate workaround. (authored by gordon).
Update SA-26:26.ktls with appropriate workaround.
Tue, Jun 9
Tue, Jun 9
gordon committed R9:c0a266356be1: website: Clean up template text that snuck in. (authored by gordon).
website: Clean up template text that snuck in.
gordon committed R9:2a530dd472df: Add EN-26:14, EN-26:15, and SA-26:25 through SA-26:36. (authored by gordon).
Add EN-26:14, EN-26:15, and SA-26:25 through SA-26:36.
May 29 2026
May 29 2026
website: Fix incorrect URL in EN-23:12.
May 20 2026
May 20 2026
Add EN-26:13 and SA-26:18 through SA-26:24.
May 19 2026
May 19 2026
May 3 2026
May 3 2026
website: Fix deeplink for how to read SAs.
May 1 2026
May 1 2026
gordon committed R9:b49189e12e15: Update EN/SA templates to remove 13 references. (authored by gordon).
Update EN/SA templates to remove 13 references.
website: 13.5 is now EOL.
gordon committed R9:014c319a0e8b: Fix a couple of typos and tighten up the language. (authored by gordon).
Fix a couple of typos and tighten up the language.
Add EN-26:11 and EN-26:12.
Apr 29 2026
Apr 29 2026
gordon committed R9:f8af2345e0b4: Update credit line for SA-26:13 per submitter request. (authored by gordon).
Update credit line for SA-26:13 per submitter request.
gordon committed R9:51a06c234837: Add EN-26:08 through EN-26:10 and SA-26:12 through SA-26:17. (authored by gordon).
Add EN-26:08 through EN-26:10 and SA-26:12 through SA-26:17.
Apr 28 2026
Apr 28 2026
Apr 21 2026
Apr 21 2026
Correct the 26:11 advisory to be amd64.
gordon committed R9:7eaa453c1d9d: Add EN-26:05 through EN-26:07, SA-26:10, and SA-26:11. (authored by gordon).
Add EN-26:05 through EN-26:07, SA-26:10, and SA-26:11.
Mar 26 2026
Mar 26 2026
Add SA-26:06 through SA-26:09.
gordon committed rG99ec7f9b9e48: rpcsec_gss: Fix a stack overflow in svc_rpc_gss_validate() (authored by markj).
rpcsec_gss: Fix a stack overflow in svc_rpc_gss_validate()
gordon committed rGe5ed09ffd592: rpcsec_gss: Fix a stack overflow in svc_rpc_gss_validate() (authored by markj).
rpcsec_gss: Fix a stack overflow in svc_rpc_gss_validate()
tcp: plug an mbuf leak
tcp: plug an mbuf leak
gordon committed rG1b00fdc1f3cd: rpcsec_gss: Fix a stack overflow in svc_rpc_gss_validate() (authored by markj).
rpcsec_gss: Fix a stack overflow in svc_rpc_gss_validate()
gordon committed rG143293c14f8d: rpcsec_gss: Fix a stack overflow in svc_rpc_gss_validate() (authored by markj).
rpcsec_gss: Fix a stack overflow in svc_rpc_gss_validate()
tcp: plug an mbuf leak
Feb 24 2026
Feb 24 2026
Add SA-26:04 and SA-26:05.
Feb 10 2026
Feb 10 2026
Add EN-26:04 and SA-26:03.
Jan 27 2026
Jan 27 2026
gordon committed R9:6b1bdbc6f2b4: Add EN-26:01 through EN-26:03, SA-26:01, and SA-26:02. (authored by gordon).
Add EN-26:01 through EN-26:03, SA-26:01, and SA-26:02.
Jan 19 2026
Jan 19 2026
gordon committed R9:5d208ecb81d6: Extend security-officer keys for another couple years. (authored by gordon).
Extend security-officer keys for another couple years.
Dec 17 2025
Dec 17 2025
gordon committed R9:3285cfd2ac60: Add EN-25:19, EN-25:20, SA-25:11, and SA-25:12. (authored by gordon).
Add EN-25:19, EN-25:20, SA-25:11, and SA-25:12.
Nov 28 2025
Nov 28 2025
Add missing comma in Credits line.
Nov 26 2025
Nov 26 2025
Add SA-25:10 and related patches.
Add UPDATING entries and bump version.
gordon committed rG9b0808259a8a: Add a fix to scrub unsolicited NS RRSets to prevent cache poisoning. (authored by gordon).
Add a fix to scrub unsolicited NS RRSets to prevent cache poisoning.
Add UPDATING entries and bump version.
gordon committed rG18c4eb2cc642: Add a fix to scrub unsolicited NS RRSets to prevent cache poisoning. (authored by gordon).
Add a fix to scrub unsolicited NS RRSets to prevent cache poisoning.
Add UPDATING entry and bump version number.
gordon committed rGdabd406d99a9: Mitigate YXDOMAIN and nodata non-referral answer poisoning. (authored by gordon).
Mitigate YXDOMAIN and nodata non-referral answer poisoning.
gordon committed rG2aed524b2329: Mitigate YXDOMAIN and nodata non-referral answer poisoning. (authored by gordon).
Mitigate YXDOMAIN and nodata non-referral answer poisoning.
gordon committed rGcd40a23fb249: Mitigate YXDOMAIN and nodata non-referral answer poisoning. (authored by gordon).
Mitigate YXDOMAIN and nodata non-referral answer poisoning.
gordon committed rGb01f35a4e19d: Mitigate YXDOMAIN and nodata non-referral answer poisoning. (authored by gordon).
Mitigate YXDOMAIN and nodata non-referral answer poisoning.
gordon committed rG2a3a6a177114: Mitigate YXDOMAIN and nodata non-referral answer poisoning. (authored by gordon).
Mitigate YXDOMAIN and nodata non-referral answer poisoning.
Nov 22 2025
Nov 22 2025
gordon committed rG696b0e2209ee: Add backup pkgbase signing key held by security-officer. (authored by gordon).
Add backup pkgbase signing key held by security-officer.
gordon committed rG12ec49d8fac2: Add backup pkgbase signing key held by security-officer. (authored by gordon).
Add backup pkgbase signing key held by security-officer.
gordon updated the diff for D53879: Add backup pkgbase signing key held by security-officer.
gordon retitled D53879: Add backup pkgbase signing key held by security-officer from Add security-officer pkgbase keys to build to Add backup pkgbase signing key held by security-officer.
gordon requested review of D53879: Add backup pkgbase signing key held by security-officer.
Oct 22 2025
Oct 22 2025
libc: Add "Z" as TZ designator for strptime.
libc: Add "Z" as TZ designator for strptime.
libc: Add "Z" as TZ designator for strptime.
Add SA-25:09.
Oct 15 2025
Oct 15 2025
libc: Add "Z" as TZ designator for strptime.
gordon committed R9:a3c08199268b: website: Move 14.2 to unsupported on security page. (authored by gordon).
website: Move 14.2 to unsupported on security page.
Oct 14 2025
Oct 14 2025
gordon requested review of D53083: Update strptime to accept ISO8601 timezone of "Z".
Sep 30 2025
Sep 30 2025
Add EN-25:18 and SA-25:08.
freebsd-update: Library ordering
freebsd-update: Library ordering
Add UPDATING entries and bump version.
Fix issue from OpenSSL.
Add UPDATING entries and bump version.
freebsd-update: Library ordering
Fix multiple security issues in OpenSSL.
Add UPDATING entries and bump version.
Fix multiple security issues in OpenSSL.
Fix issue from OpenSSL.
Fix multiple security issues in OpenSSL.
Fix multiple security issues in OpenSSL.
Fix multiple security issues in OpenSSL.
Sep 18 2025
Sep 18 2025
Seems fine to me. I haven't tested at all, just reviewed the change on Phab. Everything here makes as much sense as I can make out of it (take that for what you will :-)
Sep 17 2025
Sep 17 2025
gordon added a comment to D52554: OpenSSL: update Makefiles to reflect 3.5.1 release.
Looking at what should be in the legacy provider, I fell down this rabbit hole by looking at a completely stock build of 3.5.4-dev on my Mac (I should probably check on a FreeBSD system and see if it is any different, but that would require a small amount of effort and I'm about to go to a dinner) and see this list as the primary objects that end up in the legacy provider:
Sep 16 2025
Sep 16 2025
gordon added a comment to D52554: OpenSSL: update Makefiles to reflect 3.5.1 release.
How did you come up with these changes? What was the methodology that got this changeset?
Correct release patch information.
Add EN-25:15 through EN-25:17.
gordon committed rG751971e55454: arm64: prevent panic when using syscall mux + large arg call (mmap) (authored by jmg).
arm64: prevent panic when using syscall mux + large arg call (mmap)
gordon committed rG722746b39e6e: arm64: prevent panic when using syscall mux + large arg call (mmap) (authored by jmg).
arm64: prevent panic when using syscall mux + large arg call (mmap)
Add UPDATING entries and bump version.
gordon committed rGd1e981cbf3bd: vfs_syscalls.c: Fix handling of offset args for copy_file_range (authored by rmacklem).
vfs_syscalls.c: Fix handling of offset args for copy_file_range
gordon committed rG99012995b4c6: arm64: prevent panic when using syscall mux + large arg call (mmap) (authored by jmg).
arm64: prevent panic when using syscall mux + large arg call (mmap)
Add UPDATING entries and bump version.
Add UPDATING entries and bump version.
gordon committed rGc07b1838f9c9: bnxt: Fix BASE-T, 40G AOC, 1G-CX, autoneg and unknown media lists (authored by Kevin Bowling <kbowling@FreeBSD.org>).
bnxt: Fix BASE-T, 40G AOC, 1G-CX, autoneg and unknown media lists
Aug 8 2025
Aug 8 2025
Add EN-25:12 through EN-25:14 and SA-25:07.
libarchive: merge from vendor branch
gordon committed rGa3bd81ddfe29: net80211: fix TKIP trailer trimming w/ no rx parameters given (authored by adrian).
net80211: fix TKIP trailer trimming w/ no rx parameters given
gordon committed rGce4fe4c4bfcd: Add a new sysctl in order to diffrentiate UEFI architectures (authored by vexeduxr).
Add a new sysctl in order to diffrentiate UEFI architectures