NetBSD/src x7nFluEsys/dev/pci files.virtio vioscsi.c

   Add VIOSCSI_MAX_TARGET and VIOSCSI_MAX_LUN options to reduce excessive probe time on QEMU
VersionDeltaFile
1.37+25-4sys/dev/pci/vioscsi.c
1.5+2-1sys/dev/pci/files.virtio
+27-52 files

NetBSD/src UCdiNa5bin/pwd pwd.1

   pwd(1): minor tweaks, explicitly call -L "logical"
VersionDeltaFile
1.29+21-10bin/pwd/pwd.1
+21-101 files

NetBSD/src xIeBXO5sys/ddb db_extern.h db_command.c, usr.sbin/crash crash.c

   ddb(4), crash(8): Make `show all locks' work without LOCKDEBUG.

   Any lwp currently waiting for a _contended_ lock will now record a
   pointer to that lock in struct lwp::l_ld_wanted, even without
   LOCKDEBUG.  We can't tell who holds shared locks or spin locks, but we
   can at least tell what lock a thread is waiting for when it's spinning
   for a spin lock, and generally present the graph of current lock
   dependencies reasonably well this way.

   PR kern/60030: ddb/crash: show all locks without LOCKDEBUG
VersionDeltaFile
1.194+98-4sys/ddb/db_command.c
1.18+8-3usr.sbin/crash/crash.c
1.18+6-1sys/ddb/db_extern.h
+112-83 files

NetBSD/src B4McYjpsys/external/bsd/drm2/linux linux_rwsem.c linux_ww_mutex.c, sys/kern kern_lock.c kern_rwlock.c

   kernel: Track what lock each lwp is waiting for without LOCKDEBUG.

   This is reasonably cheap -- one extra pointer on the stack, couple
   extra stores when _waiting_ (spinning or sleeping) for a _contended_
   lock -- and doesn't change the kernel ABI.  Will enable us to get
   diagnostics from crash dumps when, e.g., there's a softint deadlock
   tripping a heartbeat panic.

   PR kern/60030: ddb/crash: show all locks without LOCKDEBUG
VersionDeltaFile
1.17+36-32sys/external/bsd/drm2/linux/linux_ww_mutex.c
1.113+22-20sys/kern/kern_mutex.c
1.23+30-11sys/sys/lockdebug.h
1.77+17-15sys/kern/kern_rwlock.c
1.5+18-14sys/external/bsd/drm2/linux/linux_rwsem.c
1.198+6-8sys/kern/kern_lock.c
+129-1006 files

NetBSD/pkgsrc E87wbyctextproc/libxml2 Makefile.common distinfo

   Pullup ticket #7237 - requested by wiz
   textproc/libxml2: Security fix

   Revisions pulled up:
   - textproc/libxml2/Makefile.common                              1.32
   - textproc/libxml2/distinfo                                     1.158

   ---
      Module Name:      pkgsrc
      Committed By:     wiz
      Date:             Sat Aug 15 02:24:28 UTC 2026

      Modified Files:
        pkgsrc/textproc/libxml2: Makefile.common distinfo

      Log Message:
      libxml2: update to 2.15.3.

      From Showta Ishizaki in PR 60591.

    [60 lines not shown]
VersionDeltaFile
1.157.4.1+4-4textproc/libxml2/distinfo
1.31.4.1+2-2textproc/libxml2/Makefile.common
+6-62 files

NetBSD/pkgsrc N3g3iPqwww/typo3-13 Makefile distinfo

   Pullup ticket #7235 - requested by taca
   www/typo3-13: Security fix

   Revisions pulled up:
   - www/typo3-13/Makefile                                         1.15-1.17
   - www/typo3-13/PLIST                                            1.10-1.11
   - www/typo3-13/distinfo                                         1.14-1.15

   ---
      Module Name:      pkgsrc
      Committed By:     wen
      Date:             Fri Jul 31 01:18:52 UTC 2026

      Modified Files:
        pkgsrc/www/typo3-13: Makefile PLIST distinfo

      Log Message:
      Update to 13.4.33


    [103 lines not shown]
VersionDeltaFile
1.9.2.1+39-2www/typo3-13/PLIST
1.13.2.1+4-4www/typo3-13/distinfo
1.14.2.1+2-2www/typo3-13/Makefile
+45-83 files

NetBSD/pkgsrc OSVOqdhwww/wordpress Makefile distinfo

   Pullup ticket #7233 - requested by taca
   www/wordpress: Security fix

   Revisions pulled up:
   - www/wordpress/Makefile                                        1.120-1.122
   - www/wordpress/PLIST                                           1.58
   - www/wordpress/distinfo                                        1.101-1.103

   ---
      Module Name:      pkgsrc
      Committed By:     wen
      Date:             Thu Jul 30 23:12:09 UTC 2026

      Modified Files:
        pkgsrc/www/wordpress: Makefile PLIST distinfo

      Log Message:
      Update to 7.0.2


    [85 lines not shown]
VersionDeltaFile
1.57.4.1+650-54www/wordpress/PLIST
1.99.2.2+3-3www/wordpress/distinfo
1.118.2.2+1-1www/wordpress/Makefile
+654-583 files

NetBSD/pkgsrc QxIUPcEwww/ruby-rails-html-sanitizer PLIST Makefile

   Pullup ticket #7232 - requested by taca
   www/ruby-rails-html-sanitizer: Security fix

   Revisions pulled up:
   - www/ruby-rails-html-sanitizer/Makefile                        1.12
   - www/ruby-rails-html-sanitizer/PLIST                           1.5
   - www/ruby-rails-html-sanitizer/distinfo                        1.14

   ---
      Module Name:      pkgsrc
      Committed By:     taca
      Date:             Wed Aug 12 05:22:49 UTC 2026

      Modified Files:
        pkgsrc/www/ruby-rails-html-sanitizer: Makefile PLIST distinfo

      Log Message:
      www/ruby-rails-html-sanitizer: update to 1.7.1


    [13 lines not shown]
VersionDeltaFile
1.13.2.1+4-4www/ruby-rails-html-sanitizer/distinfo
1.4.2.1+1-5www/ruby-rails-html-sanitizer/PLIST
1.11.2.1+3-3www/ruby-rails-html-sanitizer/Makefile
+8-123 files

NetBSD/pkgsrc 6SrGIq0textproc/expat builtin.mk Makefile

   Pullup ticket #7231 - requested by taca
   textproc/expat: Security fix

   Revisions pulled up:
   - textproc/expat/Makefile                                       1.67
   - textproc/expat/builtin.mk                                     1.28
   - textproc/expat/distinfo                                       1.61

   ---
      Module Name:      pkgsrc
      Committed By:     wiz
      Date:             Tue Aug 11 16:18:02 UTC 2026

      Modified Files:
        pkgsrc/textproc/expat: Makefile builtin.mk distinfo

      Log Message:
      expat: update to 2.8.3.


    [51 lines not shown]
VersionDeltaFile
1.59.2.2+4-4textproc/expat/distinfo
1.65.2.2+2-2textproc/expat/Makefile
1.27.4.1+2-1textproc/expat/builtin.mk
+8-73 files

NetBSD/pkgsrc v755H9Hwww/drupal11 distinfo Makefile

   Pullup ticket #7230 - requested by taca
   www/drupal11: Security fix

   Revisions pulled up:
   - www/drupal11/Makefile                                         1.9-1.11
   - www/drupal11/PLIST                                            1.5
   - www/drupal11/distinfo                                         1.5

   ---
      Module Name:      pkgsrc
      Committed By:     wen
      Date:             Fri Jul 31 10:46:31 UTC 2026

      Modified Files:
        pkgsrc/www/drupal11: Makefile PLIST distinfo

      Log Message:
      Update to 11.4.4


    [34 lines not shown]
VersionDeltaFile
1.4.6.1+2,716-509www/drupal11/PLIST
1.8.6.1+10-7www/drupal11/Makefile
1.4.6.1+4-4www/drupal11/distinfo
+2,730-5203 files

NetBSD/src i8eJGSBbin/pwd pwd.1

   "if PWD references the current directory, then PWD is assumed to be the
   name of the current directory" is tautologically confusing.

   Just state that for '-L' $PWD is _printed_ (under the right circumstances).
VersionDeltaFile
1.28+3-3bin/pwd/pwd.1
+3-31 files

NetBSD/pkgsrc DwFgROamail/postfix Makefile.common distinfo

   Pullup ticket #7228 - requested by taca
   mail/postfix: Security fix

   Revisions pulled up:
   - mail/postfix/Makefile.common                                  1.68
   - mail/postfix/distinfo                                         1.227

   ---
      Module Name:      pkgsrc
      Committed By:     taca
      Date:             Tue Aug 11 15:15:50 UTC 2026

      Modified Files:
        pkgsrc/mail/postfix: Makefile.common distinfo

      Log Message:
      mail/postfix: update to 3.11.6

      This release addresses medium-impact problems that need to be fixed

    [124 lines not shown]
VersionDeltaFile
1.224.2.2+3-3mail/postfix/distinfo
1.65.2.2+1-1mail/postfix/Makefile.common
+4-42 files

NetBSD/pkgsrc-wip 03bd922fresh distinfo, fresh/patches patch-crates_fresh-editor_src_app_file__explorer.rs

Patch for a panic in the file manager due to the lack of system-wide
trash in NetBSD
DeltaFile
+71-0fresh/patches/patch-crates_fresh-editor_src_app_file__explorer.rs
+1-0fresh/distinfo
+72-02 files

NetBSD/pkgsrc JOtMho4security/clamav cargo-depends.mk Makefile.common, security/clamav-doc PLIST

   Pullup ticket #7227 - requested by taca
   security/clamav: Security fix

   Revisions pulled up:
   - security/clamav-doc/PLIST                                     1.15
   - security/clamav/Makefile.common                               1.32
   - security/clamav/cargo-depends.mk                              1.4
   - security/clamav/distinfo                                      1.50

   ---
      Module Name:      pkgsrc
      Committed By:     taca
      Date:             Sat Aug  8 13:24:33 UTC 2026

      Modified Files:
        pkgsrc/security/clamav: Makefile.common cargo-depends.mk distinfo
        pkgsrc/security/clamav-doc: PLIST

      Log Message:

    [81 lines not shown]
VersionDeltaFile
1.48.4.2+7-7security/clamav/distinfo
1.30.4.2+2-2security/clamav/Makefile.common
1.13.4.2+2-2security/clamav-doc/PLIST
1.2.4.2+1-1security/clamav/cargo-depends.mk
+12-124 files

NetBSD/pkgsrc b2Ocgsbsecurity/p11-kit PLIST Makefile

   Pullup ticket #7226 - requested by taca
   security/p11-kit: Security fix

   Revisions pulled up:
   - security/p11-kit/Makefile                                     1.46
   - security/p11-kit/PLIST                                        1.17
   - security/p11-kit/distinfo                                     1.37

   ---
      Module Name:      pkgsrc
      Committed By:     adam
      Date:             Thu Aug  6 19:14:42 UTC 2026

      Modified Files:
        pkgsrc/security/p11-kit: Makefile PLIST distinfo

      Log Message:
      p11-kit: updated to 0.26.5


    [2 lines not shown]
VersionDeltaFile
1.35.4.2+3-3security/p11-kit/distinfo
1.15.4.2+1-1security/p11-kit/PLIST
1.44.4.2+1-1security/p11-kit/Makefile
+5-53 files

NetBSD/src zo9uEBcsys/arch/arm/broadcom bcm2835_vcaudio.c, sys/external/bsd/vchiq/dist/interface/vchi vchi.h

   vchiq: Back port of the change

       commit 49bec49fd7f273ec114e2e533c1bb8f21a654aaf
       Author: Michael Zoran <mzoran at crowfest.net>
       Date:   Sun Oct 30 05:55:07 2016 -0700

           staging: vc04_services: remove vchiq_copy_from_user

           The vchiq_copy_from_user function is not portable
           and is consider "bad practice."  Replace this function
           with a callback based mechanism that is passed downward
           on the stack.  When it is actually time to copy the data,
           the callback is called to copy the data into the message.

           This callback is provided internally for userland calls
           through ioctls on the device.

           NOTE: Internal clients will need to be modified to work
           with the new internal API.

    [26 lines not shown]
VersionDeltaFile
1.18+166-109sys/external/bsd/vchiq/dist/interface/vchiq_arm/vchiq_core.c
1.23+104-1sys/external/bsd/vchiq/dist/interface/vchiq_arm/vchiq_arm.c
1.9+30-72sys/external/bsd/vchiq/dist/interface/vchiq_arm/vchiq_shim.c
1.23+23-15sys/arch/arm/broadcom/bcm2835_vcaudio.c
1.3+6-19sys/external/bsd/vchiq/dist/interface/vchi/vchi.h
1.26+0-14sys/external/bsd/vchiq/dist/interface/vchiq_arm/vchiq_2835_arm.c
+329-2302 files not shown
+335-2368 files

NetBSD/src x5SQv8Rsys/external/bsd/vchiq/dist/interface/vchiq_arm vchiq_shim.c

   vchiq: Apply change from upstream

       commit 6e474d8e3981a63b6e1cf11b838014ed52499804
       Author: Stefan Wahren <wahrenst at gmx.net>
       Date:   Wed Oct 26 18:34:19 2016 +0000

           staging: vchiq_shim: avoid code duplication

           Rearrange the polling loops in order to avoid code duplication. Btw we fix
           the style of the comments.

           Signed-off-by: Stefan Wahren <stefan.wahren at i2se.com>
           Reviewed-by: Eric Anholt <eric at anholt.net>
           Signed-off-by: Greg Kroah-Hartman <gregkh at linuxfoundation.org>
VersionDeltaFile
1.8+31-25sys/external/bsd/vchiq/dist/interface/vchiq_arm/vchiq_shim.c
+31-251 files

NetBSD/pkgsrc j6NYQbidoc CHANGES-2026

   doc: Updated www/ruby-aws-partitions to 1.1281.0
VersionDeltaFile
1.5332+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc CJiQ80Bwww/ruby-aws-partitions Makefile distinfo

   www/ruby-aws-partitions: update to 1.1281.0

   1.1281.0 (2026-08-14)

   * Feature - Updated the partitions source data that determines the AWS
     service regions and endpoints.
VersionDeltaFile
1.122+4-4www/ruby-aws-partitions/distinfo
1.120+2-2www/ruby-aws-partitions/Makefile
+6-62 files

NetBSD/pkgsrc hc4JOEFdoc CHANGES-2026

   doc: Updated security/ruby-rex-bin_tools to 0.1.17
VersionDeltaFile
1.5331+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc eTMfZzdsecurity/ruby-rex-bin_tools Makefile distinfo

   security/ruby-rex-bin_tools: update to 0.1.17

   0.1.17 (2026-08-14)

   * Merge pull request #16 from msutovsky-r7/fix/section_offset;
     Fixes section boundary check for offsets
VersionDeltaFile
1.12+4-4security/ruby-rex-bin_tools/distinfo
1.10+2-2security/ruby-rex-bin_tools/Makefile
+6-62 files

NetBSD/pkgsrc Ka2o1yBdoc CHANGES-2026

   doc: Updated net/ruby-net-ping to 2.1.1
VersionDeltaFile
1.5330+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc xD2s5uOnet/ruby-net-ping Makefile PLIST

   net/ruby-net-ping: update to 2.1.1

   pkgsrc change: remove a pkglint warning, wrong CATEGORIES.


   2.1.0 (2026-08-08)

   * Publish platform-specific gem metadata so Linux installs cap2 and current
     Windows RubyInstaller installs win32-security for ICMP support #44.

   * Fix the FreeBSD ping6 timeout option #43.

   * Add Ruby 4.0 to the test matrix and add win32ole as an explicit Windows
     dependency, since it is no longer a default gem as of Ruby 4.0 #41.

   * Move Net::Ping::VERSION into its own file so the gemspec version can no
     longer drift out of sync with it #37.

   * Fix Net::Ping::External#ping6 setting a spurious "undefined method '=~'

    [8 lines not shown]
VersionDeltaFile
1.18+4-4net/ruby-net-ping/distinfo
1.18+3-3net/ruby-net-ping/Makefile
1.5+5-1net/ruby-net-ping/PLIST
+12-83 files

NetBSD/pkgsrc uAcIrVOdoc CHANGES-2026

   doc: Updated devel/ruby-simplecov to 1.1.1
VersionDeltaFile
1.5329+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc AElKegcdevel/ruby-simplecov PLIST Makefile

   devel/ruby-simplecov: update to 1.1.1

   pkgsrc change: remove pkglint warnings from DESCR.

   1.1.1 (2026-08-12)

   What's Changed

   * Bump step-security/harden-runner from 2.20.0 to 2.20.1 by
     @dependabot[bot] in #1258
   * rspec-conductor Support by @sferik in #1259

   Contributors

   * @sferik
   * @dependabot
VersionDeltaFile
1.29+4-4devel/ruby-simplecov/distinfo
1.20+1-3devel/ruby-simplecov/PLIST
1.32+2-2devel/ruby-simplecov/Makefile
1.3+2-2devel/ruby-simplecov/DESCR
+9-114 files

NetBSD/pkgsrc HPjOOocdoc CHANGES-2026

   doc: Updated devel/ruby-io-event to 1.19.5
VersionDeltaFile
1.5328+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc 0dn5TfOdevel/ruby-io-event Makefile distinfo

   devel/ruby-io-event: update to 1.19.5

   1.19.5 (2026-08-14)

   * Preserve the original exception or non-local control flow when
     IO::Event::WorkerPool cancellation interrupts a blocked fiber, while still
     cancelling and draining the in-flight blocking operation before returning
     control to Ruby.
VersionDeltaFile
1.42+4-4devel/ruby-io-event/distinfo
1.44+2-2devel/ruby-io-event/Makefile
+6-62 files

NetBSD/pkgsrc AavZQk7doc CHANGES-2026

   doc: Updated net/p5-Net-OAuth to 0.32
VersionDeltaFile
1.5327+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc aFCYhB0net/p5-Net-OAuth distinfo Makefile

   p5-Net-OAuth: update to 0.32.

   0.32   Sun 16 Aug 00:51:04 BST 2026
          [Security]
          - The Net::OAuth smart_require function no longer memoizes
            failures, which allowed attackers to exhaust memory with
            requests for invalid signature methods. CVE-2026-72888

          - Net::OAuth::Client no longer allows silent downgrades from
            OAuth 1.0a to 1.0 when the remote provider drops the
            oauth_verifier.  The behavior can be re-enabled with the
            allow_v1a_downgrade option. CVE-2026-72887

          [Bug Fixes]
          - RSA-SHA1 now pins PKCS#1 v1.5 padding and the SHA-1 hash rather
            than inheriting Crypt::OpenSSL::RSA's defaults, which have drifted
            (SHA-256 in 0.29_01, RSA-PSS in 0.35). Against 0.35 and later this
            produced RSA-PSS signatures that no RFC 5849 3.4.3 compliant server
            will accept. Reported as Debian #1142954.

    [98 lines not shown]
VersionDeltaFile
1.28+7-10net/p5-Net-OAuth/Makefile
1.9+4-4net/p5-Net-OAuth/distinfo
+11-142 files

NetBSD/pkgsrc-wip 8269aa1. TODO, py-whichllm Makefile distinfo

py-whichllm: update to 0.5.16
DeltaFile
+18-0py-whichllm/PLIST
+3-3py-whichllm/distinfo
+1-1py-whichllm/Makefile
+0-1TODO
+22-54 files