NetBSD/src FTdIpqksys/ufs/lfs lfs_alloc.c

   Free the memory allocated, not the memory filled.  Fixes a kmem_free panic
   in lfs_free_orphans(), if orphans are present at fs mount time.
VersionDeltaFile
1.157+3-3sys/ufs/lfs/lfs_alloc.c
+3-31 files

NetBSD/pkgsrc z3KFOKzdoc CHANGES-2026

   doc: Updated www/php-ja-wordpress to 7.0.6
VersionDeltaFile
1.6279+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc kpfuQIkwww/php-ja-wordpress Makefile distinfo

   www/php-ja-wordpress: update to 7.0.6

   7.0.5 (2026-09-17)

   Security Updates

   * An issue allowing a crafted URL to install and preview a theme from
     WordPress.org reported by Paulos Yibelo and pwn.ai

   * A stored cross-site scripting (XSS) issue in custom header images on some
     themes reported by Jeremy Felt of the WordPress Security Team

   * An information disclosure issue exposing the title of a private parent
     post reported by HDWSec

   * An HTML API issue allowing modified text to break out of an HTML comment
     reported by Jeremy Felt of the WordPress Security Team

   * A multisite issue allowing a site administrator to network-activate a

    [27 lines not shown]
VersionDeltaFile
1.34+4-4www/php-ja-wordpress/distinfo
1.38+3-4www/php-ja-wordpress/Makefile
+7-82 files

NetBSD/pkgsrc rWbBRwHdoc CHANGES-2026

   doc: Updated www/wordpress to 7.0.6
VersionDeltaFile
1.6278+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc cjcGNjlwww/wordpress Makefile distinfo

   www/wordpress: update to 7.0.6

   7.0.5 (2026-09-17)

   Security Updates

   * An issue allowing a crafted URL to install and preview a theme from
     WordPress.org reported by Paulos Yibelo and pwn.ai

   * A stored cross-site scripting (XSS) issue in custom header images on some
     themes reported by Jeremy Felt of the WordPress Security Team

   * An information disclosure issue exposing the title of a private parent
     post reported by HDWSec

   * An HTML API issue allowing modified text to break out of an HTML comment
     reported by Jeremy Felt of the WordPress Security Team

   * A multisite issue allowing a site administrator to network-activate a

    [27 lines not shown]
VersionDeltaFile
1.104+4-4www/wordpress/distinfo
1.123+2-2www/wordpress/Makefile
+6-62 files

NetBSD/pkgsrc HtLqfesdatabases/mongodb5/patches patch-src_third__party_mozjs-60_extract_js_src_wasm_WasmSignalHandlers.cpp.orig patch-SConstruct.orig

   databases/mongodb5: remove extra files

   Remove patches/patch-*.orig.
VersionDeltaFile
1.2+1-1databases/mongodb5/patches/patch-SConstruct.orig
1.2+0-0databases/mongodb5/patches/patch-src_third__party_mozjs-60_extract_js_src_wasm_WasmSignalHandlers.cpp.orig
+1-12 files

NetBSD/src UNveQSWsys/ufs/lfs lfs_vfsops.c

   Add one more instance of LFS_RELEASESEGENTRY() overlooked in the last commit.
VersionDeltaFile
1.406+3-3sys/ufs/lfs/lfs_vfsops.c
+3-31 files

NetBSD/pkgsrc 6f74cjgdoc CHANGES-2026 TODO

   doc: Updated net/p5-Net-Server to 2.018nb2
VersionDeltaFile
1.27974+3-2doc/TODO
1.6277+2-1doc/CHANGES-2026
+5-32 files

NetBSD/pkgsrc XtICVWdnet/p5-Net-Server Makefile

   p5-Net-Server: depend on p5-IO-Socket-INET6

   optional dependency, but some users expect it.

   Addresses PR 60774 by uwe.

   Bump PKGREVISION.
VersionDeltaFile
1.56+4-2net/p5-Net-Server/Makefile
+4-21 files

NetBSD/pkgsrc lpLCCNFdoc CHANGES-2026

   doc: Updated audio/mp3_check to 1.98nb1
VersionDeltaFile
1.6276+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc MbO5CKadoc CHANGES-2026

   doc: Updated cross/64tass to 1.60.3243nb1
VersionDeltaFile
1.6275+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc LlFpvE1cross/64tass distinfo Makefile, cross/64tass/patches patch-Makefile

   cross/64tass: Use ${LDFLAGS} (don't override them).
VersionDeltaFile
1.1+17-0cross/64tass/patches/patch-Makefile
1.3+2-1cross/64tass/distinfo
1.3+2-1cross/64tass/Makefile
+21-23 files

NetBSD/pkgsrc FQuPWWwdoc CHANGES-2026

   doc: Updated comms/kermit to 9.0.302nb15
VersionDeltaFile
1.6274+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc wPRQtiZcomms/kermit Makefile

   comms/kermit: Use ${LDFLAGS}.
VersionDeltaFile
1.100+3-3comms/kermit/Makefile
+3-31 files

NetBSD/pkgsrc MMaJjfYaudio/mp3_check distinfo Makefile, audio/mp3_check/patches patch-Makefile

   audio/mp3_check: Use (LDFLAGS).
VersionDeltaFile
1.1+19-0audio/mp3_check/patches/patch-Makefile
1.13+2-1audio/mp3_check/distinfo
1.18+2-1audio/mp3_check/Makefile
+23-23 files

NetBSD/pkgsrc LGplf1Vdoc CHANGES-2026

   doc: Updated archivers/undms to 1.3nb1
VersionDeltaFile
1.6273+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc qY6e8Jbarchivers/undms Makefile

   archivers/undms: Use {LDFLAGS}.
VersionDeltaFile
1.27+3-2archivers/undms/Makefile
+3-21 files

NetBSD/pkgsrc 8DL4y6Hdoc CHANGES-2026

   doc: Updated archivers/macutil to 2.0b3nb1
VersionDeltaFile
1.6272+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc 4rfnOSHarchivers/macutil distinfo, archivers/macutil/patches patch-macunpack_makefile patch-hexbin_makefile

   archivers/macutil: Use $(LDFLAGS).
VersionDeltaFile
1.1+19-0archivers/macutil/patches/patch-mixed_makefile
1.1+19-0archivers/macutil/patches/patch-comm_makefile
1.1+15-0archivers/macutil/patches/patch-macunpack_makefile
1.1+15-0archivers/macutil/patches/patch-hexbin_makefile
1.1+15-0archivers/macutil/patches/patch-binhex_makefile
1.12+6-1archivers/macutil/distinfo
+89-11 files not shown
+91-27 files

NetBSD/pkgsrc RpPKwAhdoc CHANGES-2026

   doc: Updated cad/qcad to 3.33.1.0
VersionDeltaFile
1.6271+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc 5ZkOal5cad/qcad Makefile distinfo, cad/qcad/patches patch-src_CMakeLists.txt patch-src_qcadjsapi_CMakeLists.txt

   Update QCAD to version 3.33.1, summary of changes is at

        https://www.qcad.org/en/documentation/changelog
VersionDeltaFile
1.28+24,063-5,322cad/qcad/PLIST
1.50+13-13cad/qcad/distinfo
1.2+8-9cad/qcad/patches/patch-src_qtjsapi_CMakeLists.txt
1.137+7-8cad/qcad/Makefile
1.2+11-3cad/qcad/patches/patch-src_qcadjsapi_CMakeLists.txt
1.3+5-5cad/qcad/patches/patch-src_CMakeLists.txt
+24,107-5,3606 files

NetBSD/src vb09jm9tests/lib/libc/sys t_mkfifo.c

   t_mkfifo: Bump timeouts a little bit to exercise the race better.

   Currently on the releng testbed, the parent's open() call is not
   failing with _any_ EINTR, presumably because (a) the child is opening
   the fifo before any itimer alarms fire and then (b) signal no longer
   causes the parent's open() to fail once the child has opened the other
   end of the fifo.  So let's give the parent a bit more of a head start,
   and run the race a little longer.

   PR kern/59578: open() hangs indefinitely on FIFO with frequent signal
   interruption
VersionDeltaFile
1.7+7-8tests/lib/libc/sys/t_mkfifo.c
+7-81 files

NetBSD/src vRP7yqZsys/dev/ic rtl8169.c

   re(4): fix mangled TX queue on DMA map loading errors

   Do not advance the TX queue producer index when bus_dmamap_load_mbuf()
   fails.

   The producer index must advance only after a packet has been
   successfully committed to a TX queue entry.  Advancing it on a
   map loading error leaves a hole in re_txq[], while re_txq_free()
   still counts only successfully queued packets.

   re_txeof() assumes that all outstanding TX queue entries from
   re_txq_considx are contiguous, so such a hole can make it process
   an unused entry and corrupt the TX queue accounting.

   This bug was introduced by my re_encap() -> re_start() refactoring
   in rev. 1.59 back in 2006.  Sorry it took ~20 years to notice it.

   Should be pulled up to netbsd-11 and netbsd-10.
VersionDeltaFile
1.184+6-3sys/dev/ic/rtl8169.c
+6-31 files

NetBSD/src oiwaBQvsys/kern kern_turnstile.c

   Revert "turnstile(9): Fix priority inheritance if trylock requires restart."

   This was originally done in an attempt to resolve the issue described
   in:

   PR kern/60739: Turnstile priority inheritance short-circuits walking
   of waiter chain when trylock fails

   But it may have broken other things:

   PR kern/60776: reproducable assertion failure with today's current

   > Today's amd64 kernel reproducably crashes for me when running build.sh.
   >
   > [ 4043.4787057] panic: kernel diagnostic assertion "lwp_eprio(l) >= ts->ts_eprio" failed: file "../../../../kern/kern_turnstile.c", line 356
   > [ 4043.6286910] cpu1: Begin traceback...
   > [ 4043.6686907] vpanic() at netbsd:vpanic+0x189
   > [ 4043.7186903] kern_assert() at netbsd:kern_assert+0x4b
   > [ 4043.7786898] turnstile_wakeup() at netbsd:turnstile_wakeup+0x2c5

    [10 lines not shown]
VersionDeltaFile
1.58+6-21sys/kern/kern_turnstile.c
+6-211 files

NetBSD/pkgsrc-wip 7bdb295rio Makefile, rio/patches patch-corcovado_src_sys_unix_kqueue.rs patch-misc_rio.terminfo

Revert some of the removed patches, avoid ncurses file config
DeltaFile
+64-0rio/patches/patch-teletypewriter_src_unix_mod.rs
+23-26rio/Makefile
+23-0rio/patches/patch-misc_rio.desktop
+22-0rio/patches/patch-rio-backend_src_config_defaults.rs
+18-0rio/patches/patch-misc_rio.terminfo
+15-0rio/patches/patch-corcovado_src_sys_unix_kqueue.rs
+165-264 files not shown
+179-4110 files

NetBSD/pkgsrc LQDBT14doc CHANGES-2026

   lint changes for 2026
VersionDeltaFile
1.6270+5-6doc/CHANGES-2026
+5-61 files

NetBSD/src VxxdDkttests/kernel Makefile t_fdrestart.c

   t_fdrestart: Test ptys too.

   More bugs of this class!

   PR kern/57659: closing pipe writefd fails to wake concurrent write on
   same writefd
VersionDeltaFile
1.7+312-2tests/kernel/t_fdrestart.c
1.102+3-1tests/kernel/Makefile
+315-32 files

NetBSD/src pxoug8ktests/kernel Makefile t_fdrestart.c

   t_fdrestart: Test named fifos too.

   Turns out we're missing a wakeup on close for read and write on fifos
   too!

   PR kern/57659: closing pipe writefd fails to wake concurrent write on
   same writefd
VersionDeltaFile
1.6+182-2tests/kernel/t_fdrestart.c
1.101+4-1tests/kernel/Makefile
+186-32 files

NetBSD/src NNUQfuZtests/kernel t_fdrestart.c

   t_fdrestart: Test restarting poll and select on close too.

   They must promptly report POLLNVAL/EBADF when a file descriptor they
   are listening for is closed, just like read and write.

   Note: kevent doesn't get restarted when an fd registered with it is
   closed; the registration is simply silently discarded instead.  Hence
   no corresponding kevent tests here.

   PR kern/57659: closing pipe writefd fails to wake concurrent write on
   same writefd
VersionDeltaFile
1.5+366-15tests/kernel/t_fdrestart.c
+366-151 files

NetBSD/src 8fGQiixtests/lib/libc/sys t_poll.c

   t_poll: Test concurrently closing an fd being polled.

   PR kern/59056: poll POLLHUP bugs
VersionDeltaFile
1.17+631-1tests/lib/libc/sys/t_poll.c
+631-11 files