NetBSD/pkgsrc 5E0IgSDdoc CHANGES-2026

   doc: Updated x11/libXfont2 to 2.0.9
VersionDeltaFile
1.4983+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc 290SYqGx11/libXfont2 Makefile distinfo

   libXfont2: update to 2.0.9.

   This release contains the fixes for the issues reported in today's security advisory:
   https://lists.x.org/archives/xorg-announce/2026-August/003734.html

   - CVE-2026-59679: Font Server Client encoding Out-Of-Bounds Read/Write
   - CVE-2026-44950: Font Server Client Cumulative Glyph Data Heap Buffer Overflow

   Additionally, it changes a build-time default. Previously fontserver support
   was compiled in by default unless --disable-fc was provided at configure time.
   The new default is *disabled by default* unless --enable-fc is provided at
   configure time. Doing so protects us from future fontserver-connection related
   issues. Fontservers have been deprecated for many years and the vast majority
   of users will not notice this changed default (Debian has built with
   --disable-fc for years).
VersionDeltaFile
1.12+4-4x11/libXfont2/distinfo
1.21+2-2x11/libXfont2/Makefile
+6-62 files

NetBSD/src gkUBUASusr.bin/cut cut.1, usr.bin/paste paste.1

   cut.1 & paste.1: add HISTORY and AUTHORS

   Sourced from OpenBSD and FreeBSD, which both reference the same post[1]
   for part of it. They differ in certain details.

   FreeBSD puts the additional credit to Marciano Pitargue in the wrong
   utility, going by the source code credits (and what OpenBSD has). There
   is discussion in the FreeBSD review[2] about which originating release
   is relevant for cut(1) (32V vs. System III), as both BSDs referenced
   32V for paste(1). This was perhaps confused in the FreeBSD review,
   which talks directly about cut(1), but was applied also to paste(1). An
   earlier FreeBSD commit specifically lists 32V for paste(1)[3]. (I don't
   have 32V to examine.)

   These histories could be subject to further cut and paste...

   1. https://www.tuhs.org/pipermail/tuhs/2020-January/019955.html
   2. https://reviews.freebsd.org/D36048
   3. https://github.com/freebsd/freebsd-src/commit/30f8b6c18279162a2f4efdc9e85a49683a8aafbf
VersionDeltaFile
1.21+19-2usr.bin/cut/cut.1
1.10+17-2usr.bin/paste/paste.1
+36-42 files

NetBSD/pkgsrc Rho217bdoc CHANGES-2026

   Removed net/py-ipaddress, net/py-IP
VersionDeltaFile
1.4982+3-1doc/CHANGES-2026
+3-11 files

NetBSD/pkgsrc LQwLI5Lnet Makefile, net/py-IP DESCR distinfo

   py-IP: removed; use Python ipaddress module
VersionDeltaFile
1.1638+1-2net/Makefile
1.12+1-1net/py-IP/distinfo
1.8+1-1net/py-IP/PLIST
1.27+1-1net/py-IP/Makefile
1.2+0-0net/py-IP/DESCR
+4-55 files

NetBSD/pkgsrc QpBRtbSnet Makefile, net/py-ipaddress DESCR distinfo

   py-ipaddress: removed; included in Python 3.3
VersionDeltaFile
1.1637+1-2net/Makefile
1.13+1-1net/py-ipaddress/distinfo
1.2+1-1net/py-ipaddress/PLIST
1.14+1-1net/py-ipaddress/Makefile
1.2+0-0net/py-ipaddress/DESCR
+4-55 files

NetBSD/pkgsrc NigHynMdoc CHANGES-2026

   Removed math/py-cdecimal, net/py-GeoIP
VersionDeltaFile
1.4981+3-1doc/CHANGES-2026
+3-11 files

NetBSD/pkgsrc HJCv5yjnet Makefile, net/py-GeoIP DESCR distinfo

   py-GeoIP: removed; archived upstream; use py-geoip2 instead
VersionDeltaFile
1.1636+1-2net/Makefile
1.10+1-1net/py-GeoIP/distinfo
1.5+1-1net/py-GeoIP/PLIST
1.21+1-1net/py-GeoIP/Makefile
1.2+0-0net/py-GeoIP/DESCR
+4-55 files

NetBSD/pkgsrc VD7TYMFmath Makefile, math/py-cdecimal DESCR distinfo

   py-cdecimal: removed; obsoleted by the builtin decimal in Python 3.3
VersionDeltaFile
1.645+1-2math/Makefile
1.5+1-1math/py-cdecimal/distinfo
1.4+1-1math/py-cdecimal/PLIST
1.13+1-1math/py-cdecimal/Makefile
1.2+0-0math/py-cdecimal/DESCR
+4-55 files

NetBSD/pkgsrc 68QTyaTdoc CHANGES-2026

   Updated devel/py-faker, textproc/py-fastjsonschema
VersionDeltaFile
1.4980+3-1doc/CHANGES-2026
+3-11 files

NetBSD/pkgsrc zY5OXiPtextproc/py-fastjsonschema Makefile PLIST

   py-fastjsonschema: updated to 2.22.1

   2.22.1 (2026-07-27)

   * Fixed min Python version

   2.22.0 (2026-07-25)

   * Fixed IPv4 validation (rejecting leading zeros)
   * Fixed empty items and patternProperties
   * Fixed protection from deeply nested schemas potentially causing denial of service
   * Fixed comparing values for enum and const validations
   * Fixed resolving plain-name ref fragments
   * Fixed not throwing when unknown format is used
   * Fixed compilation of not, if/then/else, items, additionalItems, propertyNames and schema dependencies when a subschema generates no validation code
   * Added option to get all the errors (set `fast_fail` to `False`)
   * Added basic type hints
   * Added support of duration and uuid formats from draft-2019
VersionDeltaFile
1.13+4-4textproc/py-fastjsonschema/distinfo
1.5+4-1textproc/py-fastjsonschema/PLIST
1.16+2-2textproc/py-fastjsonschema/Makefile
+10-73 files

NetBSD/pkgsrc gygq9vxdevel/py-faker Makefile distinfo

   py-faker: updated to 40.36.0

   40.36.0

   * Fix: correct `uk_UA` `bban_format` to 6 digits + 19 letters so `iban()` generates valid Ukrainian IBANs. Thanks @CedricConday.

   40.35.0

   * Fix: add correct `bban_format` so `ru_RU` `iban()` generates valid Russian IBANs. Thanks @CedricConday.

   40.34.0

   * Fix: correct BBAN length so `da_DK` `iban()` generates valid Danish IBANs. Thanks @CedricConday.

   40.33.2

   * Validate `positive=True` against a non-positive `max_value` in `pydecimal`. Thanks @Sreekant13.

   40.33.1

    [6 lines not shown]
VersionDeltaFile
1.114+4-4devel/py-faker/distinfo
1.120+2-2devel/py-faker/Makefile
+6-62 files

NetBSD/pkgsrc KkY8sy2mail/py-mailmanclient Makefile PLIST

   py-mailmanclient: converted to wheel.mk
VersionDeltaFile
1.2+6-6mail/py-mailmanclient/PLIST
1.3+4-4mail/py-mailmanclient/Makefile
+10-102 files

NetBSD/pkgsrc IZkA6UMmail/py-postfix-mta-sts-resolver version.mk PLIST

   py-postfix-mta-sts-resolver: converted to wheel.mk + cleanup
VersionDeltaFile
1.14+12-21mail/py-postfix-mta-sts-resolver/Makefile
1.3+8-8mail/py-postfix-mta-sts-resolver/PLIST
1.2+1-1mail/py-postfix-mta-sts-resolver/version.mk
+21-303 files

NetBSD/pkgsrc RYXoa9odoc CHANGES-2026

   Updated mail/py-flufl.bounce, devel/py-flufl.lock
VersionDeltaFile
1.4979+3-1doc/CHANGES-2026
+3-11 files

NetBSD/pkgsrc ZJLTWWHdevel/py-flufl.lock Makefile distinfo

   py-flufl.lock: updated to 9.1.0

   9.1.0 (2026-04-24)

   * Small refactoring to provide a hook for custom synchronization of clocks in subclasses. (:GL:`40`)
   * Switch to `pyrefly <https://pyrefly.org/>`_ for type checking.
VersionDeltaFile
1.9+4-4devel/py-flufl.lock/distinfo
1.16+2-3devel/py-flufl.lock/Makefile
+6-72 files

NetBSD/pkgsrc cobfTM4mail/py-flufl.bounce distinfo Makefile

   py-flufl.bounce: updated to 5.0.1

   5.0.1 (2026-05-21)

   * Fix a false recognition of Microsoft bounces from the Groupwise detector. :GL:`16`
     Found and fixed by Mark Sapiro.

   5.0 (2026-05-20)

   * Major project management modernization.
   * Add Mark as a named co-owner.
   * Drop Python 3.9, add Python 3.13, 3.14, and 3.15.
   * Added recognition for a non-compliant Earthlink DSN.
   * Fixed a long-standing bug in the Caiwireless detector that returned a set of individual address
     characters instead of the bouncing address itself, and added a test exercising the previously
     buggy return path.
   * Replaced deprecated/removed pkg_resources.
   * Replaced the ``zope.interface`` dependency with ``typing.Protocol``; the ``IBounceDetector``
     marker interface has been renamed to ``BounceDetector``.  **This is a backwards incompatible

    [5 lines not shown]
VersionDeltaFile
1.3+5-148mail/py-flufl.bounce/PLIST
1.9+8-9mail/py-flufl.bounce/Makefile
1.5+4-4mail/py-flufl.bounce/distinfo
+17-1613 files

NetBSD/pkgsrc SpdnK0Kmail/py-authres Makefile PLIST

   py-authres: converted to wheel.mk
VersionDeltaFile
1.4+6-6mail/py-authres/PLIST
1.8+5-3mail/py-authres/Makefile
+11-92 files

NetBSD/src V9mDNJZsys/arch/hb68k/conf std.hb68010 std.hb68k

   All 68030/68040/68060 systems must have the __HAVE_NEW_PMAP_68K option,
   but that option is not applicable for 68010.
VersionDeltaFile
1.2+4-1sys/arch/hb68k/conf/std.hb68k
1.2+3-1sys/arch/hb68k/conf/std.hb68010
+7-22 files

NetBSD/src Pj26mN9sys/arch/hb68k/hb68k fdt_bootstrap.c

   Fix typo (and paste-o).
VersionDeltaFile
1.2+4-4sys/arch/hb68k/hb68k/fdt_bootstrap.c
+4-41 files

NetBSD/src Ck5O9j8sys/arch/hb68k/conf files.hb68k, sys/arch/hb68k/hb68k fdt_bootstrap.c

   Preliminary implementation of fdt_bootstrap1(), enough for getting
   memory, cpu type, and mmu type.
VersionDeltaFile
1.1+247-0sys/arch/hb68k/hb68k/fdt_bootstrap.c
1.2+2-2sys/arch/hb68k/conf/files.hb68k
+249-22 files

NetBSD/src 4mtY0HZsys/arch/amiga/conf INSTALL GENERIC.in, sys/arch/m68k/conf files.m68k

   All M68040 configs require FPSP, and all M68060 configs require M060SP,
   so just make M68040 and M68060 dependent on their respective software
   packages rather than having to duplicate the options across every kernel
   config.
VersionDeltaFile
1.109+2-8sys/arch/mvme68k/conf/GENERIC
1.33+1-7sys/arch/mvme68k/conf/RAMDISK
1.14+2-5sys/arch/virt68k/conf/GENERIC
1.143+2-4sys/arch/amiga/conf/INSTALL
1.153+2-4sys/arch/amiga/conf/GENERIC.in
1.77+3-3sys/arch/m68k/conf/files.m68k
+12-3125 files not shown
+45-10831 files

NetBSD/src qmjT2PQsys/arch/mvme68k/conf VME147 VME172

   Re-factor the MVME-1xx kernel configs to reduce duplication.  Further
   shrink the VME* configs to be much closer to "bare minimum for this
   machine" to help out small memory config units (4MB base RAM on some).
VersionDeltaFile
1.108+31-49sys/arch/mvme68k/conf/GENERIC
1.38+7-64sys/arch/mvme68k/conf/VME177
1.36+7-63sys/arch/mvme68k/conf/VME162
1.36+7-62sys/arch/mvme68k/conf/VME172
1.40+7-62sys/arch/mvme68k/conf/VME167
1.64+6-60sys/arch/mvme68k/conf/VME147
+65-3602 files not shown
+108-4058 files

NetBSD/src aZ3pooRbin/sh sh.1 miscbltin.c

   /bin/sh - builtin read command fixes (miscbltin.c)

   This corrects a change made in the previous version, where
   in addition to the intended change, making a read error be
   treated differently than EOF, a change with unplanned
   consequences was also made, to treat the EINTR read error
   as a "try again" signal, rather than as a read error.
   That meant that caught traps no longer interrupted the read,
   and while that is how (some) other shells do it (like bash)
   it was a change to how our shell does things.

   So, now there is (in normal shells) a new -c (continue) option
   to cause this behaviour, when given, a trapped signal will be
   processed during the wait for input by the read built-in utility,
   but not end the read.   When absent, the trap will still be processed
   while the read is in progress, but will be treated as a read error
   (and produce the special (>1) exit code 130.

   While doing this, revert all these changes for SMALL shells, they

    [4 lines not shown]
VersionDeltaFile
1.59+67-26bin/sh/miscbltin.c
1.280+31-10bin/sh/sh.1
+98-362 files

NetBSD/src 92eZ01Lbin/sh trap.h trap.c

   /bin/sh - trap.c - new func and avoid lost memory

   Add run_traps() - which is just dotrap() except that it
   preserves the state of the stack around the trap executions,
   so is safe to call with the stack in any state.   It will also
   preserve the state of the growing string at the top of the
   stack if informed (by giving a non-zero value as its arg)
   that such a string currently exists.   This new function does
   not exist in SMALL shells.

   While here, fix an unlikely memory leak - if a shell error
   (not command error) occurs while processing a trap in dotrap()
   the copy of the trap string being parsed can be lost.  This is
   irrelevant in non-interactive shells, as the errors which would
   cause this loss, also cause a non-interactive shell to exit,
   the lost memory is only lost for a very short time.   Interactive
   shells rarely set traps (except possibly an EXIT trap - for which
   the memory loss is also immaterial for almost the same reason) at
   all, and if one were set, and generated a shell error (typically

    [3 lines not shown]
VersionDeltaFile
1.64+40-5bin/sh/trap.c
1.27+5-1bin/sh/trap.h
+45-62 files

NetBSD/src GHFZAOLbin/sh memalloc.h

   /bin/sh - memalloc.h - added STSTRLEN()

   Add a new stack string macro STSTRLEN() which returns the
   current length of the string being accumulated at the top
   of the (shell) stack.   As with all the other Stack String
   macros, it may only be used between a STARTSTACKSTR() call
   and the next call which allocates stack space (often
   grabstackstr(), but stalloc() stunalloc() grabstackblock()
   all count for this).   Use at any other time will give
   meaningless unspecified results.
VersionDeltaFile
1.23+2-1bin/sh/memalloc.h
+2-11 files

NetBSD/src qr7j1N7distrib/sets/lists/man mi

   Add omitted catman entry for pv(4).
VersionDeltaFile
1.1842+2-1distrib/sets/lists/man/mi
+2-11 files

NetBSD/pkgsrc 0nvlSsudevel/py-cffi Makefile

   py-cffi: update test status
VersionDeltaFile
1.65+4-3devel/py-cffi/Makefile
+4-31 files

NetBSD/pkgsrc Ne73LhYdoc CHANGES-2026

   doc: Updated archivers/7-zip to 26.02nb1
VersionDeltaFile
1.4978+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc M5ZgZEMarchivers/7-zip Makefile

   7-zip: honor LDFLAGS

   Remove hack.

   Bump PKGREVISION.
VersionDeltaFile
1.15+4-7archivers/7-zip/Makefile
+4-71 files