databases/Makefile: Remove hook of deleted port
It appears that the port databases/mariadb106-client has been removed,
but an entry for it still exists in databases/Makefile.
PR: 296426
Reported by: M. Voorhis <mvoorhis at mcvau.net>
Approved by: osa, vvd (Mentors, implicit)
Fixes: 0df4ffbdef34 ("databases/mariadb106-client: remove epired port")
dns/powerdns: Update 5.1.2 => 5.1.3
While here:
- Update options' descriptions.
- Drop the backported patch, it's made into release.
Changelog:
https://doc.powerdns.com/authoritative/changelog/5.1.html#change-5.1.3
PR: 296400
Reported by: Jordan Ostreff <jordan at ostreff.info>
Approved by: Ralf van der Enden <tremere at cainites.net> (maintainer)
Approved by: osa, vvd (Mentors, implicit)
MFH: 2026Q2
(cherry picked from commit 27d147dd421dd767d40e0d069b413b55650fd095)
dns/powerdns: Update 5.1.2 => 5.1.3
While here:
- Update options' descriptions.
- Drop the backported patch, it's made into release.
Changelog:
https://doc.powerdns.com/authoritative/changelog/5.1.html#change-5.1.3
PR: 296400
Reported by: Jordan Ostreff <jordan at ostreff.info>
Approved by: Ralf van der Enden <tremere at cainites.net> (maintainer)
Approved by: osa, vvd (Mentors, implicit)
MFH: 2026Q2
devel/libevent: Update to 2.1.13
Changes in version 2.1.13-stable (01 July 2026)
This release contains several security fixes, affecting users of the
following modules: evbuffer, bufferevent, evtag, evrpc, evdns, evhttp.
If you have a program that uses one of those modules,
or if you distribute libevent, you should upgrade.
Additionally, this release backports some small modernizations to
the libevent codebase, to aid in compiling with the compilers
released over the last few years.
Security Fixes (evtag, evrpc):
Fix an out-of-bounds read in decode_tag_internal.
(Found by @Brubbish. GHSA-fj29-64w6-73h6)
Fix an integer overflow in evtag_unmarshal_header.
(Found by @Brubbish. GHSA-45c6-qx49-89m8)
[39 lines not shown]
devel/libevent: Update to 2.1.13
Changes in version 2.1.13-stable (01 July 2026)
This release contains several security fixes, affecting users of the
following modules: evbuffer, bufferevent, evtag, evrpc, evdns, evhttp.
If you have a program that uses one of those modules,
or if you distribute libevent, you should upgrade.
Additionally, this release backports some small modernizations to
the libevent codebase, to aid in compiling with the compilers
released over the last few years.
Security Fixes (evtag, evrpc):
Fix an out-of-bounds read in decode_tag_internal.
(Found by @Brubbish. GHSA-fj29-64w6-73h6)
Fix an integer overflow in evtag_unmarshal_header.
(Found by @Brubbish. GHSA-45c6-qx49-89m8)
[39 lines not shown]
CHERI: make mem{cpy,move}(9) CHERI compatible
- Use intptr_t in place of long as the word type in the core copying
loop where aligned words a copied. This preserved the provenance of
any copied pointers.
- When working with the address of src or dst use ptraddr_t rather than
uintptr_t. This avoid ambigious provenance in expressions involving
multiple addresses.
As a minor tweak, rename the function to memmove since that is the
interface it implements (overlapping src and dst are permitted) and make
memcpy the alias rather than the other way around.
Reviewed by: kib, markj
Effort: CHERI upstreaming
Sponsored by: Innovate UK
Differential Revision: https://reviews.freebsd.org/D57965
CHERI: add sooptcopyinptr to preserve pointer provenance
Most socket options don't involve pointers so make the default
sooptcopyin discard provenance and add a sooptcopyinptr that preserves.
Reviewed by: markj, emaste
Effort: CHERI upstreaming
Sponsored by: DARPA, AFRL, Innovate UK
Differential Revision: https://reviews.freebsd.org/D57665
CHERI: declare mem{cpy,move}_data
Declare kernel-only, provenance-discarding memcpy_data, and memmove_data
APIs intended to copy raw data which does not contain pointers (e.g.,
buffers on their way to or from network or storage devices). On CHERI
architectures, they will explicitly remove tags from capabilities,
removing any provenance. This reduces the risk of accidental spread of
pointers on CHERI systems.
Document that bcopy preserves pointer provenance.
Reviewed by: ziaee, kib, adrian, markj
Effort: CHERI upstreaming
Sponsored by: DARPA, AFRL, Innovate UK
Differential Revision: https://reviews.freebsd.org/D57662
multimedia/qmmp-plugin-pack-qt5: update to 1.7.3 release (+)
Changes since 1.7.2:
* fixed playback stopping when connection was lost in the ytb plugin (1.7.3 only);
* fixed documentation;
* updated Chinese Simplified translation;
* updated Finnish translation;
* updated Polish translation;
* updated Japanese translation;
* updated Chinese Traditional translation;
* updated Italian translation;
* updated Korean translation.