NetBSD/pkgsrc 0QjZGQDdoc CHANGES-2026

   doc: Updated security/mbedtls4 to 4.0.0nb1
VersionDeltaFile
1.569+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc zrAog8jsecurity/mbedtls4 Makefile

   mbedtls4: fix pkg-config files

   Remove some unnecessary lines.

   Bump PKGREVISION.
VersionDeltaFile
1.2+7-4security/mbedtls4/Makefile
+7-41 files

NetBSD/pkgsrc WV0LEdpsecurity/mbedtls4 buildlink3.mk

   mbedtls4: fix bl3.mk define
VersionDeltaFile
1.2+4-4security/mbedtls4/buildlink3.mk
+4-41 files

NetBSD/pkgsrc w95Gg65security/mbedtls4 distinfo, security/mbedtls4/patches patch-tf-psa-crypto_drivers_builtin_src_platform__util.c

   mbedtls4: fix build on NetBSD
VersionDeltaFile
1.1+15-0security/mbedtls4/patches/patch-tf-psa-crypto_drivers_builtin_src_platform__util.c
1.2+2-1security/mbedtls4/distinfo
+17-12 files

NetBSD/pkgsrc-wip 7d14790go126 PLIST distinfo

go126: update to 1.26rc2.

This release includes 6 security fixes following the security policy:

- archive/zip: denial of service when parsing arbitrary ZIP archives

  archive/zip used a super-linear file name indexing algorithm that is invoked
  the first time a file in an archive is opened. This can lead to a denial of
  service when consuming a maliciously constructed ZIP archive.

  Thanks to Thanks to Jakub Ciolek for reporting this issue.

  This is CVE-2025-61728 and Go issue https://go.dev/issue/77102.

- net/http: memory exhaustion in Request.ParseForm

  When parsing a URL-encoded form net/http may allocate an unexpected amount of
  memory when provided a large number of key-value pairs. This can result in a
  denial of service due to memory exhaustion.

    [91 lines not shown]
DeltaFile
+18-10go126/PLIST
+3-3go126/distinfo
+1-1go126/Makefile
+22-143 files

NetBSD/pkgsrc 4SCX6kidoc CHANGES-2026

   Updated devel/talloc, databases/tdb
VersionDeltaFile
1.568+3-1doc/CHANGES-2026
+3-11 files

NetBSD/pkgsrc WxwA0eadatabases/tdb distinfo Makefile

   tdb: updated to 1.4.15

   1.4.15
   Unknown changes
VersionDeltaFile
1.38+4-4databases/tdb/distinfo
1.60+2-2databases/tdb/Makefile
+6-62 files

NetBSD/pkgsrc O3YVQ5Kdevel/talloc distinfo Makefile, devel/talloc/patches patch-third__party_waf_waflib_Tools_python.py

   talloc: updated to 2.4.4

   2.4.4
   Unknown changes
VersionDeltaFile
1.1+15-0devel/talloc/patches/patch-third__party_waf_waflib_Tools_python.py
1.39+5-4devel/talloc/distinfo
1.52+2-2devel/talloc/Makefile
+22-63 files

NetBSD/src wca8LBMdoc CHANGES-9.5

   Ticket #1996
VersionDeltaFile
1.1.2.92+60-1doc/CHANGES-9.5
+60-11 files

NetBSD/src Ybdz7SLdoc CHANGES-10.2

   Tickets #1219 - #1224
VersionDeltaFile
1.1.2.85+85-1doc/CHANGES-10.2
+85-11 files

NetBSD/src 5M5VVIvusr.sbin/makefs cd9660.c

   Pull up following revision(s) (requested by nia in ticket #1224):

        usr.sbin/makefs/cd9660.c: revision 1.61

   makefs: cd9660: Honour the -m option to set the maximum disc size.

   PR port-i386/59889 i386 cd-rom iso for -current is overflowing 700MB limit
VersionDeltaFile
1.58.2.1+5-2usr.sbin/makefs/cd9660.c
+5-21 files

NetBSD/src MHIHcBgdoc CHANGES-11.0

   Tickets #146 - #161
VersionDeltaFile
1.1.2.68+122-1doc/CHANGES-11.0
+122-11 files

NetBSD/src uDkQzYGusr.sbin/makefs cd9660.c

   Pull up following revision(s) (requested by nia in ticket #161):

        usr.sbin/makefs/cd9660.c: revision 1.61

   makefs: cd9660: Honour the -m option to set the maximum disc size.

   PR port-i386/59889 i386 cd-rom iso for -current is overflowing 700MB limit
VersionDeltaFile
1.60.4.1+5-2usr.sbin/makefs/cd9660.c
+5-21 files

NetBSD/src cYjXieTsys/dev/ic nslm7x.c

   Pull up following revision(s) (requested by isaki in ticket #160):

        sys/dev/ic/nslm7x.c: revision 1.80

   Support AuxFan3 and AuxFan4 sensors for NCT6794D.
   PR kern/59802
VersionDeltaFile
1.79.10.1+18-2sys/dev/ic/nslm7x.c
+18-21 files

NetBSD/src riagGLOlibexec/ld.elf_so xmalloc.c tls.c

   Pull up following revision(s) (requested by skrll in ticket #159):

        libexec/ld.elf_so/rtldenv.h: revision 1.13
        libexec/ld.elf_so/xmalloc.c: revision 1.20
        libexec/ld.elf_so/rtld.c: revision 1.222
        libexec/ld.elf_so/xmalloc.c: revision 1.21
        libexec/ld.elf_so/xmalloc.c: revision 1.22
        libexec/ld.elf_so/xmalloc.c: revision 1.23
        libexec/ld.elf_so/xmalloc.c: revision 1.24
        libexec/ld.elf_so/xmalloc.c: revision 1.25
        libexec/ld.elf_so/xmalloc.c: revision 1.13
        libexec/ld.elf_so/xmalloc.c: revision 1.14
        libexec/ld.elf_so/xmalloc.c: revision 1.15
        libexec/ld.elf_so/xmalloc.c: revision 1.16
        libexec/ld.elf_so/xmalloc.c: revision 1.17
        libexec/ld.elf_so/xmalloc.c: revision 1.18
        libexec/ld.elf_so/tls.c: revision 1.24
        libexec/ld.elf_so/tls.c: revision 1.25
        libexec/ld.elf_so/tls.c: revision 1.26

    [54 lines not shown]
VersionDeltaFile
1.12.44.1+117-145libexec/ld.elf_so/xmalloc.c
1.23.2.1+35-9libexec/ld.elf_so/tls.c
1.221.2.1+3-3libexec/ld.elf_so/rtld.c
1.12.42.1+2-1libexec/ld.elf_so/rtldenv.h
1.151.2.1+2-1libexec/ld.elf_so/Makefile
+159-1595 files

NetBSD/src uJonHgpdistrib/common/bootimage diskproto2sunlabel.awk diskproto2sunlabel.awk

   Pull up following revision(s) (requested by tsutsui in ticket #158):

        distrib/common/bootimage/Makefile.bootimage: revision 1.47
        distrib/common/bootimage/diskproto2sunlabel.awk: revision 1.1

   bootimage: Derive sunlabel(8) input from the disklabel protofile

   For USE_SUNLABEL labeling, stop hard-coding the sunlabel(8) geometry
   in cylinders in Makefile.bootimage.  Instead, generate the sunlabel(8)
   command stream by parsing the generated disklabel protofile with
   a small awk helper.

   This keeps the Sun disk label consistent with the disklabel(8) protofile
   and avoids maintaining two independent sets of geometry/partition logic.

   Tested with a sun3 live-image on TME.
VersionDeltaFile
1.1.2.2+136-0distrib/common/bootimage/diskproto2sunlabel.awk
1.1.2.1+0-136distrib/common/bootimage/diskproto2sunlabel.awk
1.46.2.1+4-7distrib/common/bootimage/Makefile.bootimage
+140-1433 files

NetBSD/src Fh9ocx2usr.sbin/sunlabel sunlabel.8

   Pull up following revision(s) (requested by tsutsui in ticket #157):

        usr.sbin/sunlabel/sunlabel.8: revision 1.10

   sunlabel: document partition map line printed by the 'P' command

   The interactive 'P' command prints the partition table and
   also emits a simple textual map of the partition layout
   (e.g., a line of 'a' when the whole disk is covered by partition a).

   Mention this additional output in the man page to avoid confusion.
VersionDeltaFile
1.9.20.1+12-2usr.sbin/sunlabel/sunlabel.8
+12-21 files

NetBSD/pkgsrc hClLf5mdoc CHANGES-2026

   Updated net/py-xandikos, devel/py-packaging
VersionDeltaFile
1.567+3-1doc/CHANGES-2026
+3-11 files

NetBSD/pkgsrc sBg5hlTdevel/py-packaging distinfo PLIST

   py-packaging: updated to 26.0

   26.0 - 2026-01-20

   Features:

   * PEP 751: support pylock
   * PEP 794: import name metadata
   * Support for writing metadata to a file
   * Support ``__replace__`` on Version
   * Support positional pattern matching for ``Version`` and ``SpecifierSet``

   Behavior adaptations:

   * PEP 440 handling of prereleases for ``Specifier.contains``, ``SpecifierSet.contains``, and ``SpecifierSet.filter``
   * Handle PEP 440 edge case in ``SpecifierSet.filter``
   * Adjust arbitrary equality intersection preservation in ``SpecifierSet``
   * Return ``False`` instead of raising for ``.contains`` with invalid version
   * Support arbitrary equality on arbitrary strings for ``Specifier`` and ``SpecifierSet``'s ``filter`` and ``contains`` method.

    [69 lines not shown]
VersionDeltaFile
1.21+4-4devel/py-packaging/distinfo
1.10+4-1devel/py-packaging/PLIST
1.26+2-2devel/py-packaging/Makefile
+10-73 files

NetBSD/src 5rFLB3Kusr.bin/elf2ecoff elf2ecoff.c

   Pull up following revision(s) (requested by tsutsui in ticket #156):

        usr.bin/elf2ecoff/elf2ecoff.c: revision 1.40
        usr.bin/elf2ecoff/elf2ecoff.c: revision 1.41
        usr.bin/elf2ecoff/elf2ecoff.c: revision 1.39

   elf2ecoff: fix various incorrect byteswap ops
   - make sure to use host byte order in debug printfs
   - fix incorrect byte swap ops for struct ecoff32_symhdr using
     bswap32_region() (only first two magic and vstamp members are int16_t)
   - make sure to use proper host's endian to calclate symbol table size
   - don't do byteswap unconditionally for struct ecoff_extsym
     (especially on building as a native tool)

   Patch from Steve Rumble on port-mips@:
    https://mail-index.netbsd.org/port-mips/2025/12/06/msg001544.html

   elf2ecoff: remove an incorrect but unused assigment to ecoff32_exechdr
   Probably harmless but confusing on endiannes sanity check.

    [7 lines not shown]
VersionDeltaFile
1.36.2.2+29-22usr.bin/elf2ecoff/elf2ecoff.c
+29-221 files

NetBSD/src o3QTigrsys/dev/arcbios arcbios_calls.S

   Pull up following revision(s) (requested by tsutsui in ticket #155):

        sys/dev/arcbios/arcbios_calls.S: revision 1.5

   arcbios: add hazard nops for pre-R4000 MIPS1 machines

   All MIPS ARC (Advanced RISC Computing) machines have R4000/R4400

    https://www.netbsd.org/docs/Hardware/Machines/ARC/

   as supported by NetBSD/arc and they don't require nops,
   but the sgimips port fakes ARCS for older R2k/R3k machines,
   so it uses this code on older CPUs, too.

   Patch from Steve Rumble on port-mips@:
    https://mail-index.netbsd.org/port-mips/2025/12/06/msg001542.html
VersionDeltaFile
1.4.28.1+3-1sys/dev/arcbios/arcbios_calls.S
+3-11 files

NetBSD/src khQqNG2usr.sbin/makefs ffs.c makefs.8, usr.sbin/makefs/ffs mkfs.c ffs_alloc.c

   Pull up following revision(s) (requested by tsutsui in ticket #154):

        usr.sbin/makefs/ffs/ffs_alloc.c: revision 1.34
        usr.sbin/makefs/ffs/mkfs.c: revision 1.43
        usr.sbin/makefs/ffs.c: revision 1.78
        usr.sbin/makefs/makefs.8: revision 1.74

   makefs: add ffs version=0 for "newfs -O 0" compatible FFSv1 images

   Allow "makefs -t ffs -o version=0" to create FFSv1 images in the
   old on-disk format compatible with "newfs -O 0" (FFSv1 level 1),
   intended for systems with ancient boot ROM requirements like LUNA.

   This changes the FFSv1/FFSv2 selection to treat version 0 as FFSv1
   and generates old-format directory entries (no d_type) when
   version=0 is selected. The FFS mkfs parameters are adjusted so
   that version 0 does not get overridden by the default FFSv1 settings.

   Tested by generating FFS images with version=0, 1, and 2, and

    [3 lines not shown]
VersionDeltaFile
1.77.2.1+59-26usr.sbin/makefs/ffs.c
1.42.4.1+43-12usr.sbin/makefs/ffs/mkfs.c
1.33.2.1+26-2usr.sbin/makefs/ffs/ffs_alloc.c
1.73.2.1+9-4usr.sbin/makefs/makefs.8
+137-444 files

NetBSD/pkgsrc Z8xC2fGnet/py-xandikos distinfo Makefile

   py-xandikos: updated to 0.3.3

   0.3.3

   Valarm search
   Add python3-qrcode to container image
   Fix builds

   0.3.2

   Allow escaped newlines in calendar text fields
   Fix TypeError with mixed date/datetime types in EXDATE/RDATE
VersionDeltaFile
1.20+4-4net/py-xandikos/distinfo
1.23+2-2net/py-xandikos/Makefile
+6-62 files

NetBSD/src 6z3UzHmsys/dev/sdmmc sdmmcreg.h

   Pull up following revision(s) (requested by jmcneill in ticket #1223):

        sys/dev/sdmmc/sdmmcreg.h: revision 1.36

   sdmmc: Fix swapped SSR cache and card maintenance bit defs
VersionDeltaFile
1.34.34.2+3-3sys/dev/sdmmc/sdmmcreg.h
+3-31 files

NetBSD/src PFh3qSusys/dev/sdmmc sdmmcreg.h

   Pull up following revision(s) (requested by jmcneill in ticket #153):

        sys/dev/sdmmc/sdmmcreg.h: revision 1.36

   sdmmc: Fix swapped SSR cache and card maintenance bit defs
VersionDeltaFile
1.35.2.1+3-3sys/dev/sdmmc/sdmmcreg.h
+3-31 files

NetBSD/src Dne4gsfdistrib/sets/lists/comp mi

   Fix for MKMANZ=yes
VersionDeltaFile
1.2518+4-4distrib/sets/lists/comp/mi
+4-41 files

NetBSD/src 0JFu8VMusr.bin/ftp ftp.c util.c

   Pull up following revision(s) (requested by lukem in ticket #1222):

        usr.bin/ftp/ftp.c: revision 1.179
        usr.bin/ftp/version.h: revision 1.101
        usr.bin/ftp/util.c: revision 1.169
        usr.bin/ftp/extern.h: revision 1.85

   ftp: fix ascii transfers with progress bar

   Handle stdio interruption by signals and improve error handling
   in getc() and putc() on the control and data channels.

   Provide ftp_getc() and ftp_putc() wrappers that:
   - Retry the operation on EINTR or EAGAIN instead of failing.
   - Store other error codes in a return variable separate to errno,
     and use that variable in ferror() handling, for more correct
     error messages.

   Fixes the progress bar display in ascii mode transfers.

    [5 lines not shown]
VersionDeltaFile
1.174.2.4+51-33usr.bin/ftp/ftp.c
1.164.2.5+59-3usr.bin/ftp/util.c
1.82.10.3+4-2usr.bin/ftp/extern.h
1.95.2.5+2-2usr.bin/ftp/version.h
+116-404 files

NetBSD/src rdOPCXkusr.bin/ftp ftp.c util.c

   Pull up following revision(s) (requested by lukem in ticket #152):

        usr.bin/ftp/ftp.c: revision 1.179
        usr.bin/ftp/version.h: revision 1.101
        usr.bin/ftp/util.c: revision 1.169
        usr.bin/ftp/extern.h: revision 1.85

   ftp: fix ascii transfers with progress bar

   Handle stdio interruption by signals and improve error handling
   in getc() and putc() on the control and data channels.

   Provide ftp_getc() and ftp_putc() wrappers that:
   - Retry the operation on EINTR or EAGAIN instead of failing.
   - Store other error codes in a return variable separate to errno,
     and use that variable in ferror() handling, for more correct
     error messages.

   Fixes the progress bar display in ascii mode transfers.

    [5 lines not shown]
VersionDeltaFile
1.178.2.1+51-33usr.bin/ftp/ftp.c
1.168.2.1+59-3usr.bin/ftp/util.c
1.84.2.1+4-2usr.bin/ftp/extern.h
1.99.2.2+2-2usr.bin/ftp/version.h
+116-404 files

NetBSD/src lyhiQmyusr.bin/ftp ftp.1 cmdtab.c

   Pull up following revision(s) (requested by lukem in ticket #1221):

        usr.bin/ftp/version.h: revision 1.100
        usr.bin/ftp/cmdtab.c: revision 1.54
        usr.bin/ftp/ftp.1: revision 1.161

   ftp: connect is a synonym for open

   As we have disconnect as a synonym for close,
   add connect as a synonym for open.

   Suggested by Colby Russell in email.
VersionDeltaFile
1.147.2.8+6-3usr.bin/ftp/ftp.1
1.52.40.2+4-3usr.bin/ftp/cmdtab.c
1.95.2.4+3-3usr.bin/ftp/version.h
+13-93 files

NetBSD/src pBKemTkusr.bin/ftp ftp.1 cmdtab.c

   Pull up following revision(s) (requested by lukem in ticket #151):

        usr.bin/ftp/version.h: revision 1.100
        usr.bin/ftp/cmdtab.c: revision 1.54
        usr.bin/ftp/ftp.1: revision 1.161

   ftp: connect is a synonym for open

   As we have disconnect as a synonym for close,
   add connect as a synonym for open.

   Suggested by Colby Russell in email.
VersionDeltaFile
1.160.2.1+6-3usr.bin/ftp/ftp.1
1.53.4.1+4-3usr.bin/ftp/cmdtab.c
1.99.2.1+3-3usr.bin/ftp/version.h
+13-93 files