ld.elf_so: Mark new variables __debugused, not __diagused.
They are used in ld.elf_so builds with DEBUG, not with DIAGNOSTIC!
PR bin/60469: bin/60469: assertion "ALIGNED_P(q, obj->tlsalign)"
failed: file "/usr/src/libexec/ld.elf_so/tls.c", line 333
ld.elf_so: Fix static TLS alignment on variant II platforms.
Only affects obscure architectures like x86, though.
Sprinkle assertions to make sure this breaks in other ways on other
architectures too, like variant I, or variant II with _lwp_gettcb().
Fair's fair, right?
XXX We should consider verifying that every Elf_Phdr::p_align is
reasonable (i.e., is a power of two, or is zero but only if p_memsz
is also zero), and that p_filesz <= p_memsz, in headers.c for the
main object and in map_object.c for other objects.
PR bin/60469: bin/60469: assertion "ALIGNED_P(q, obj->tlsalign)"
failed: file "/usr/src/libexec/ld.elf_so/tls.c", line 333
labwc: update to 0.20.1
* 0.20.1
This is a small bug fix release.
Fixed
- Handle titles with no visible characters, for example the left-to-right mark
(‎) @Consolatis [#3630]
- Protect against SIGABRT when TTY switching in unusual circumstances by
ensuring that xdg-shell windows have sensible width and height before trying
to set size on configure. This protects against an edge case experienced when
switching between labwc on one TTY and Xfce on XOrg on another TTY.
@johanmalm @Tamaranch [#3617]
* 0.20.0
This is the first release using wlroots-0.20 and therefore has an increased risk
of teething issues. Many thanks to @Consolatis for leading the effort to port
across [#2956].
[88 lines not shown]
swaylock: update to 1.8.6
swaylock v1.8.6
Constantin (1):
Fix stray character in password buffer after suspend/resume cycle
Sergey Zagursky (1):
main: fix reversed dup2 arguments in daemonize
sway: update to 1.12
Sway 1.12 contains 138 changes from 50 contributors.
This release depends on wlroots 0.20.0. See the wlroots release notes.
New features
- Add support for capturing individual windows.
- Add support for HDR10 when running with the Vulkan renderer.
- Add support for new protocols: color-management-v1, color-representation-v1, xdg-toplevel-tag-v1,
ext-workspace-v1, wl_fixes.
- Add a new --device-primaries to output color_profile to use color primaries advertised in EDID.
- Add support for keypad slide switches.
Changes
- The default configuration file now ships key bindings for playerctl.
- Sway no longer refuses to start on unsupported GPUs (e.g. NVIDIA proprietary drivers).
Instead, it displays an informational message. The message can be disabled via
[8 lines not shown]
wlroots: update to 0.20.2
* wlroots 0.20.2
Félix Poisot (1):
scene: don't send new dmabuf feedback after node disable
Simon Ser (13):
xwayland/selection: stop using VLAs for MIME type atom lists
xwayland: use const pointers for xcb_get_property_value()
xwayland/xwm: fix out-of-bounds strndup() in read_surface_class()
xwayland/xwm: pluralize array variable in read_surface_net_wm_state()
xwayland: stop using xcb_get_property_reply_t.value_len
xwayland/xwm: align WL_SURFACE_ID error message with WL_SURFACE_SERIAL
xwayland/xwm: expand comment about WL_SURFACE_ID event ordering
xwayland/xwm: check whether surface is already associated for WL_SURFACE_ID
xwayland/xwm: check object type in xwm_handle_surface_id_message()
xwayland/xwm: check WM_TRANSIENT_FOR length
[480 lines not shown]
mk: stop passing relro linker flags to compiler
The relro flags are added to LDFLAGS, and that should be sufficient.
Packages not honoring LDFLAGS need to be fixed anyway, and clang
complains about the flags on the compiler command line.
On second thought, don't use __mc68010__ throughout as a proxy for
"is a Sun-2"; it's too easy to glance-misread #ifdef vs #ifndef.
Instead, define IS_SUN2 and IS_SUN3 macros that statically evaluate
to the right thing and use them throughout.
www/chromium: update to 150.0.7871.128
* 150.0.7871.128
This update includes 7 security fixes. Please see the Chrome Security Page for more information.
[N/A][516987782] Critical CVE-2026-15899: Use after free in CameraCapture. Reported by Google on 2026-05-27
[N/A][523750584] Critical CVE-2026-15900: Use after free in GPU. Reported by Google on 2026-06-14
[N/A][533446300] Critical CVE-2026-15901: Use after free in Network. Reported by Google on 2026-07-10
[N/A][522436154] High CVE-2026-15902: Use after free in Cast. Reported by Google on 2026-06-10
[TBD][531503216] High CVE-2026-15903: Out of bounds read and write in V8. Reported by OpenAI Codex Security (amyb) on 2026-07-06
[N/A][532925350] High CVE-2026-15904: Use after free in Ozone. Reported by Google on 2026-07-09
[N/A][532970574] High CVE-2026-15905: Use after free in Aura. Reported by Google on 2026-07-09
* 150.0.7871.124
This update includes 15 security fixes. Please see the Chrome Security Page for more information.
[N/A][517100492] Critical CVE-2026-15764: Use after free in Ozone. Reported by Google on 2026-05-27
[N/A][518007484] Critical CVE-2026-15765: Use after free in Ozone. Reported by Google on 2026-05-29
[N/A][514010477] High CVE-2026-15766: Uninitialized Use in Skia. Reported by Google on 2026-05-17
[43 lines not shown]
