dbus: update to 1.16.4.
dbus 1.16.4 (2026-11-12)
========================
Security support scope:
• Add `SECURITY.md` documenting various security considerations
(dbus!597, dbus!603, dbus!606; Simon McVittie, ooonea)
Denial-of-service fixes:
• Prevent a denial-of-service vulnerability on the system bus:
if a privileged user was running a monitor such as `dbus-monitor --system`
or `busctl monitor --system`, then an unprivileged user could cause the
dbus-daemon to crash by arranging for delivery of a broadcast signal
from the dbus-daemon to be prevented, for example by filling up the
outgoing message queue towards a client that subscribed to it.
This vulnerability could be seen as an incomplete fix for CVE-2023-34969.
[85 lines not shown]
Add the DS2413 2 port GPIO device at its published family ID.
There are known clones and/or ripoffs of this chip that have a family
ID that is not 0x3a. This will be dealt with in the device drive that
will appear in the future.
PR/40: Quentin Thebault: The wording in the man page can be misleading. -P is
described as overriding -s although the code processes both. -s is described
as adding a socket, but giving it also removes the default socket path.
Restate that the default socket path will not be used and needs to be given
again explicitly if any of the -s or -P flags is present and specify that they
can be used together, following the code's behaviour.
stirmake: Fix OpenBSD 8.0 issue
OpenBSD 8.0 printed ugly lines in bmake test:
"which: byacc: Command not found."
Suppress this by setting byacc to false during test as well.
Tested now on FreeBSD 15, NetBSD 11, OpenBSD 8.0, OmniOS r151054.
More testing needed on MacOS and MINIX3.
stirmake: Update to stirmake-0.4.5
This version mainly affects the build system, hopefully allowing
stirmake pkgsrc build to work on SunOS. Futhermore, the build is more
deterministic now, since flex and byacc are disabled in all cases now,
even if installed.
p11-kit: updated to 0.26.6
0.26.6 (stable)
* rpc: added PQC support
* rpc: added support for more mechanisms
* rpc: list-objects should no longer print garbage when used via RPC
* rpc: memory management fixes and hardening
* p11-kit: import-object now rejects malformed RSA public keys
* trust: do not truncate DirectoryStrings with embeded NULL byte
* Build fixes
* Update translations
* Documentation
tcpflow: updated to 1.7.0
1.7.0
This release fixes security vulnerabilities, improves packet processing and
portability, and introduces automated releases with a signed Windows executable
and Linux Snap packages.
Perform a bit of CPR on the cesfic port:
- Normalize with other 68040 systems vis a vis KERNBASE and
VM_MIN_KERNEL_ADDRESS. Adjust early bootstrap to accommodate.
- Determine at run-time the address the kernel was loaded at, rather
than hard-coding it to (RAM+1M) before relocating the kernel down
to (RAM+link_addr).
- Long-jump to the relocated kernel immediately after relocating it and
before clearing the BSS. Previously, it's possible that the old copy
where we were still running fro could be could get clobbered when the
BSS is cleared.
- Use the common MMU-enable code fragment and the common TT register
management functions.
The kernel has grown since the README was written, so recommand loading
it (via OS-9) at RAM+2M. Also update the contact information for the
port :-(
Rake is a Make-like program implemented in Ruby. Tasks and
dependencies are specified in standard Ruby syntax.
Rake has the following features:
- Rakefiles (rake’s version of Makefiles) are completely defined in
standard Ruby syntax.
- Users can specify tasks with prerequisites.
- Rake supports rule patterns to synthesize implicit tasks.
- Flexible FileLists that act like arrays but know about
manipulating file names and paths.
- A library of prepackaged tasks to make building rakefiles easier.
- Supports parallel execution of tasks.
cabextract: update to 1.12.
New in 1.12
* cabextract -f now finds "hidden" files. There are two ways to look in
cabinets for files, which normally have the same results, but don't have
to. 7-Zip and Microsoft extract.exe find "hidden" files but not "normal"
files, while cabextract and Microsoft expand.exe find "normal" files but
not "hidden" files. cabextract -f now finds both "hidden" and "normal"
files, if they differ.
* cabextract now prints more warning and error messages for normal cab files
listed on the command line. For example, it now prints "WARNING; atypical
files offset in header" if cabextract -f might find "hidden" files
A few straggling Debugger -> cpu_Debugger transformations (because sun3
<sys/systm.h> was unconditionally always #define'ing Debugger() on sun3,
but now no longer does).
