BSD Commit Log Search

lua-lpeg: add missing .so symlink on macOS

for lua to successfully load lua-lpeg, the shared library needs to have a .so
extension instead of the .dylib that will be generated on macOS. This patch
fixes this, making it possible to use lua-lpeg without manually needing to
symlink this afterwards.

editors/vis-editor: update vis-editor to 0.9

   Pullup ticket #7317 - requested by bsiegert
   archivers/libarchive: Build fix

   Revisions pulled up:
   - archivers/libarchive/files/Makefile.am                        1.29

   ---
      Module Name:      pkgsrc
      Committed By:     dholland
      Date:             Wed Oct 21 23:38:31 UTC 2026

      Modified Files:
        pkgsrc/archivers/libarchive/files: Makefile.am

      Log Message:
      archivers/libarchive: fix build on -10 / with older bmake

      Avoid using $^ in the makefile. With bmake that doesn't support it,
      which includes the one on -10 which is still supported, it expands to

    [8 lines not shown]

   s/sucess/success/

   fix various typos in comments and documentation.

wip: Add opentmux

opentmux: Import opentmux-0.1 as wip/opentmux

This is a fork of tmux-3.6a before any AI was introduced into the
project.

tmux is a terminal multiplexer: it enables a number of terminals to be
created, accessed, and controlled from a single screen. tmux may be
detached from a screen and continue running in the background, then
later reattached.

This release runs on OpenBSD, FreeBSD, NetBSD, Linux, macOS and
Solaris.

Completely based on misc/tmux.

   graphics/Makefile: + photoc

   s/excute/execute/
   s/exection/execution/
   s/exectuables/executables/

   s/microseqence/microsequence/ in documentation and comments.
   s/synchroneous/synchronous/ in comments.

   refactor: make sure tx_info is initilized before dereferencing. reviewed by christos

   fix wrong range from computing the MIN of tx and rx queues.


   needs pullup

   new unbound

   bump libunbound

   merge conflicts, bump

   Import unbound-1-26-2 (previous was 1-26-1)

   Unbound 1.26.2

   This release has a number of security fixes.

   The release is signed with the OpenPGP software signing key that is
   in use since Jan 1st 2026:

   User ID: NLnet Labs releases signing key G2 <releases at nlnetlabs.nl>
   Key ID: A144 323D EAAC DF45
   Fingerprint: 2310 1869 0C4D 903E F419  146A A144 323D EAAC DF45
   The key is available from https://nlnetlabs.nl/signing-keys .

   This release consolidates security fixes for issues reported over
   a period of time. There are fixes for CVE-2026-35501, CVE-2026-50106,
   CVE-2026-96405, CVE-2026-97206 and CVE-2026-109125.

   Bug Fixes:

    [25 lines not shown]

   use thr right size of cahr buffer


   buflen passes the right lengh of the char buffer nd not sizeof(buf)

   certctl(8): Gracefully handle deletion of untrusted certs.

   PR bin/60916: certctl(8) doesn't gracefully handle deleting untrusted
   certs

   certctl(8): Test response to updates that delete untrusted certs.

   PR bin/60916: certctl(8) doesn't gracefully handle deleting untrusted
   certs

   i2c(4): Avoid leaking kernel heap memory to userland.

   PR kern/60913: iic(4): I2C_IOCTL_EXEC can copy out an uninitialised
   buffer

   use PR_ZERO on on pool allcoated memory and get rid of memset.

   currently, xfer is zeroed using the wrong size.
   remove it and simplify code.


   reviewed by christos@

   doc: Updated www/resterm to 1.16.1

   resterm: Update to 1.16.1

   Compromised eMudhra certificates
   The private keys of eight intermediate certificates from the
   certificate authority eMudhra were so weak that anyone could
   recover them from the public certificates. With those keys,
   anyone can issue a valid HTTPS certificate for any website.
   eMudhra has revoked the certificates, and browsers and
   operating systems are blocking them.
   (CVE-2026-111943, Mozilla's write-up)

   resterm 1.16.1 rejects any certificate chain through these
   intermediates on every platform. resterm 1.16.0 can
   still accept them on systems whose certificate store
   doesn't block them yet.

   use the right sizeof struct blake2s instead of sizeof pointer

   Updated archivers/py-brotli, devel/py-coverage

   py-coverage: updated to 7.17.0

   7.17.0 — 2026-10-22

   - Dropped support for Python 3.10.

   - Binary wheels are now provided for iOS and Android. This allows the use of
     the optimized C tracer on mobile platforms.

   - Fix: three or more levels of nested ``with`` statements could make a ``with``
     line look like a branch with an exit that can never happen. Using the
     sys.monitoring core, these phantom branches were reported as partial. Other
     cores hid the problem but still counted the phantom branches in the total.
     Closes `issue 1987`_.

   - Fix: a comment or string that merely mentioned ``if True:`` or
     ``while True:`` could mark its line as a branch that is known to be partial,
     so a branch that never ran was reported as taken.  These built-in patterns
     now only match at the start of the statement. Closes `issue 2314`_.

    [64 lines not shown]

   py-brotli: updated to 1.2.1

   1.2.1
   SECURITY
   CVE-2026-111497: out-of-bounds write permits remote code execution

   fix openjdk versions in patterns, it's e.g. 1.11.0.22 for a openjdk11.

   Note that openjdk-bin doesn't carry the leading "1." about, but all
   the native-built openjdks do

   www/php-pmwiki: Depends on PHP correctly

   Updated net/yt-dlp, textproc/py-bracex, textproc/py-wcmatch