tests/ipsec/t_ipsec_policy.c -- appease clang
Cast to (void) not (void *) to explicitly ignore a function return
value, even though that value is a pointer.
Might fix the clang builds (should go part way at least).
unbound: update to 1.26.1
This release consolidates security fixes for issues reported over
a period of time. There are fixes for CVE-2026-77860, CVE-2026-77955,
CVE-2026-78227, CVE-2026-80225, CVE-2026-81634, CVE-2026-81642,
CVE-2026-82717, CVE-2026-82720 and CVE-2026-85501.
Bug Fixes
- Fix CVE-2026-81642, Heap buffer overflow and possible Remote Code
Execution when digesting DNSKEY. Thanks to Yuqi Qiu and Xiang Li
from Nankai University, AOSP Lab for the report.
- Fix CVE-2026-81634, Possible heap buffer overflow during DNSSEC
canonicalization. Thanks to Vlatko Kosturjak with Marlink Cyber,
for the report.
- Fix CVE-2026-82717, CNAME synthesis could lead to heap corruption.
Thanks to Ben Morris from Anthropic for the report.
- Fix CVE-2026-77955, Possible ZONEMD verification bypass window.
Thanks to Yuqi Qiu and Xiang Li from Nankai University, AOSP Lab,
[20 lines not shown]
sameboy: update to 1.0.3.
Fixes build on -current.
Version 1.0.3
New/Improved Features
Added support for more controllers in the iOS frontend, including singular Joy-Cons
Pressing buttons while in a locked rewind state now exits rewind mode in the iOS frontend
The iOS frontend now handles save conflicts with a dialog, making syncing saves across different machines and emulators easier
An examine/x command can now use the /s modifier to change its output style to RGBDS-compatible assembly
An examine/x command can now use $ in its modifier to use hexadecimal count values
It is now possible to adjust the maximum rumble strength
It is now possible to modify and save a running ROM file from the Memory Viewer in the Cocoa frontend
Controller buttons can now be assigned to one of 4 hotkey commands in the iOS frontend
Periodic saves were added to the iOS frontend
A new screenshot hotkey was added to the SDL frontend
Controller UI hiding in the iOS frontend can now optionally disable the centering of the game screen
[468 lines not shown]
vfs_bio: retry fresh buffer allocation if recycling fails
getnewbuf() uses buf_lotsfree() to choose whether to
allocate a fresh buffer before trying BQ_AGE and BQ_LRU.
If fresh allocation is skipped and no buffer can actually be
recycled, it sleeps on needbuffer_cv even when the buffer cache
is still below its high water mark.
In that situation, a thread which could release a buffer may
itself need another buffer, resulting in a deadlock.
To avoid this, if recycling finds no usable buffer and bufmem is
still below bufmem_hiwater, make one more PR_NOWAIT fresh allocation
attempt before sleeping. See PR kern/60584 for details.
Worth to pullup to netbsd-11.
atari: Fix 68030 SRP setup across kernel relocation
protorp[1] is currently updated after the kernel has been copied to
TT-RAM in RELOC_KERNEL case. The following PMOVE reads the ST-RAM
copy while the MMU is disabled, so this happens to work when enabling
the MMU. After the MMU is enabled, however, protorp refers to the
relocated copy, where protorp[1] still contains its old value.
Fortunately, this is not currently fatal because later uses of
protorp overwrite protorp[1] with the root table address before
loading the root pointer. However, any writes to global variables
after relocation leave the reloacated kernel state inconsistent.
Set protorp[1] before copying the kernel so that the relocated copy
also contains the root table address. This matches the ordering used
by amiga.
The PMOVE inline asm also specifies only the address of protorp as an
input, even though it reads both words of the SRP prototype from memory.
[2 lines not shown]
gdu: Add gdu version 5.37.0.
Gdu is a disk usage analyzer similar to ncdu but parallelized.
This package installs the binary as 'gdu-go' to avoid potentially
conflicting with 'gdu' from systuils/coreutils.
pcppi(4): Don't detach at shutdown.
No reason was ever given for detaching this at shutdown; if there's
some important resource to release, it can be done in a pmf hook, but
otherwise it interferes with other functionality.
PR kern/60735: BEEP_ONHALT fails on i386
seamonkey: apply a patch to make build progress
Still doesn't build:
ld: cannot find -lsmime: No such file or directory
ld: cannot find -lnss: No such file or directory
ld: cannot find -lnssutil: No such file or directory
frr: avoid conflict between elf.h and libelf.h
still builds on -current, I hope it fixes the -11 build.
Fix (whitespace) pkglint while here.
Bump PKGREVISION.
