Eliminate the (multiple) conditional branches based on fputype in the
m68k context switch path. Instead, the FPU save and restore blocks
begin with a BRA.W insn that branches around the FPU code, essentially
refleching FPU_NONE. Once the FPU is probed, these BRA.W insns are
patched with the displacement for the correct code fragment for the
detected FPU.
pmap_db_write_text_{enter,exit}() -> pmap_write_text_{enter,exit}().
These functions are soon to be useful in more places than just the
kernel debugger.
modular-xorg-server: update to 21.1.26.
This release contains the fixes for these issues reported:
* CVE-2026-109091: X.Org Server EDID DS_RANGES Out-Of-Bounds Write
* CVE-2026-109092: X.Org Server XvShmPutImage Shared-Memory Bounds Overflow
* CVE-2026-109093: X.Org Server XTestFakeInput Valuator Stack Out-Of-Bounds Write
* CVE-2026-109904: X.Org Server XRes QueryClientIds Request Size Overflow
* CVE-2026-109094: X.Org Server XRes QueryResourceBytes Swap Path Size Overflow
* CVE-2026-109095: X.Org Server glamor Xv Image Size Integer Overflow
* CVE-2026-109096: X.Org Server XvPutImage Negative Image Size Length Bypass
* CVE-2026-109903: X.Org Server XvQueryImageAttributes Negative Size Reply
In addition we have a variety of fixes outlined by the shortlog below:
Acts1631 (3):
Xv: prevent overflow in shared-memory bounds check
XTest: validate valuator range before writing
XRes: prevent overflow in client ID request size
[19 lines not shown]
xwayland: update to 24.1.15.
This release contains the fixes for the these issues:
* CVE-2026-109092: X.Org Server XvShmPutImage Shared-Memory Bounds Overflow
* CVE-2026-109093: X.Org Server XTestFakeInput Valuator Stack Out-Of-Bounds Write
* CVE-2026-109904: X.Org Server XRes QueryClientIds Request Size Overflow
* CVE-2026-109094: X.Org Server XRes QueryResourceBytes Swap Path Size Overflow
* CVE-2026-109095: X.Org Server glamor Xv Image Size Integer Overflow
* CVE-2026-109096: X.Org Server XvPutImage Negative Image Size Length Bypass
* CVE-2026-109903: X.Org Server XvQueryImageAttributes Negative Size Reply
In addition we have a variety of fixes outlined by the shortlog below.
Acts1631 (3):
Xv: prevent overflow in shared-memory bounds check
XTest: validate valuator range before writing
XRes: prevent overflow in client ID request size
[11 lines not shown]
dbus: update to 1.16.4.
dbus 1.16.4 (2026-11-12)
========================
Security support scope:
• Add `SECURITY.md` documenting various security considerations
(dbus!597, dbus!603, dbus!606; Simon McVittie, ooonea)
Denial-of-service fixes:
• Prevent a denial-of-service vulnerability on the system bus:
if a privileged user was running a monitor such as `dbus-monitor --system`
or `busctl monitor --system`, then an unprivileged user could cause the
dbus-daemon to crash by arranging for delivery of a broadcast signal
from the dbus-daemon to be prevented, for example by filling up the
outgoing message queue towards a client that subscribed to it.
This vulnerability could be seen as an incomplete fix for CVE-2023-34969.
[85 lines not shown]
Add the DS2413 2 port GPIO device at its published family ID.
There are known clones and/or ripoffs of this chip that have a family
ID that is not 0x3a. This will be dealt with in the device drive that
will appear in the future.
PR/40: Quentin Thebault: The wording in the man page can be misleading. -P is
described as overriding -s although the code processes both. -s is described
as adding a socket, but giving it also removes the default socket path.
Restate that the default socket path will not be used and needs to be given
again explicitly if any of the -s or -P flags is present and specify that they
can be used together, following the code's behaviour.
stirmake: Fix OpenBSD 8.0 issue
OpenBSD 8.0 printed ugly lines in bmake test:
"which: byacc: Command not found."
Suppress this by setting byacc to false during test as well.
Tested now on FreeBSD 15, NetBSD 11, OpenBSD 8.0, OmniOS r151054.
More testing needed on MacOS and MINIX3.
stirmake: Update to stirmake-0.4.5
This version mainly affects the build system, hopefully allowing
stirmake pkgsrc build to work on SunOS. Futhermore, the build is more
deterministic now, since flex and byacc are disabled in all cases now,
even if installed.
p11-kit: updated to 0.26.6
0.26.6 (stable)
* rpc: added PQC support
* rpc: added support for more mechanisms
* rpc: list-objects should no longer print garbage when used via RPC
* rpc: memory management fixes and hardening
* p11-kit: import-object now rejects malformed RSA public keys
* trust: do not truncate DirectoryStrings with embeded NULL byte
* Build fixes
* Update translations
* Documentation
tcpflow: updated to 1.7.0
1.7.0
This release fixes security vulnerabilities, improves packet processing and
portability, and introduces automated releases with a signed Windows executable
and Linux Snap packages.
