py-cloud-init: update to 26.2
This update required switching to Meson for the build.
The initial configuration is now correctly loaded from
/usr/pkg/etc/cloud/cloud.cfg although the patch for this needs more
work.
It is still not clear that cloud-init does anything useful in NetBSD.
Re-work AST processing, eliminating the global "astpending" variable.
The need for an AST is now tracked on a per-LWP basis (patterned after
the Alpha port).
The elimination of the "astpending" global necessitated an overhaul
of the code flow for checking for them. The old rei code block leveraged
that "astpending" could be checked without having to use a register.
Now, a register must be used, so the check for pending ASTs needs to
be done before registers are restored after a trap. So, a couple of
new asm macros are introduced to aid in this split-duty regime:
- CHECK_ASTPENDING() uses the specified scratch register to check for
pending ASTs and sets the Z flag accordingly (Z set == no pending AST).
- RTE_AST replaces the old pattern of unconditionally branching to the
rei code block and instead conditionally branches to the now-renamed-to-
rte_ast code block and perfors an RTE if the branch is not taken. This
makes the code ever so slightly larger, but actually eliminates a branch
in the case where an AST was not pending.
[21 lines not shown]
Allocate display rows on demand (Hua Zhong)
libedit (unlike readline) allocates a buffer for the entire terminal width *
height from the beginning, which is often wasteful as most of the time very
few rows are needed. This change introduces delayed allocation for row buffers.
Initially, the row-pointer array is allocated with NULL pointers. When we need
row N, we allocate all row buffers up to that row.
Display buffer allocation failures are reported through existing API errors.
A subsequent API call such as el_gets() retries the allocation if needed.
Add rescan functions for obio(4) bus.
Allows obio attachments to be modules.
Patch and testing by Ray Tran.
Addreses PR/60694.
Next thing to do is to make modules of non-critical obio devices...
g->charjump was adjusted to &g->charjump[-(CHAR_MIN)] in computejumps() so
that it can be indexed by signed chars (all archs except arm); undo the
adjustment before freeing it, same as regfree() does.
Start laying the foundation for MP support:
- curlwp does into struct cpu_info
- cpu_info gets cache line aware layout based on field access patterns
(with some reserved slots for future work).
- cpu_number() and curlwp are now implemented in terms of curcpu().
- curcpu() remains streamlined for UP systems, and an ABI-stable
version is provided if _MODULE so that modules will work with UP or MP.
tailscale: update to 1.104.7
Go is updated to Go 1.27.4, to explicitly resolve an issue in TLS
ClientHello where some middleboxes break connections to the Tailscale
control plane.
net/coturn: Update to 4.19.0
Upstream NEWS content, less bugfixes and minor improvements:
Release 4.19.0
Changelist:
- Update integrity key generation to use default SHA type (Pavel Punsky <eakraly at users.noreply.github.com>)
chromium: update to 157.0.8103.78
* 157.0.8103.78
This update includes 83 security fixes. Please see the Chrome Security Page for more information.
[N/A][568699166] Critical CVE-2026-126885: Use after free in ServiceWorker. Reported by Xinyang Ge on 2026-10-02
[N/A][575524700] Critical CVE-2026-126895: Use after free in CSS. Reported by Xinyang Ge on 2026-10-19
[N/A][576736463] Critical CVE-2026-126879: Use after free in Layout. Reported by Xinyang Ge on 2026-10-22
[N/A][580857377] Critical CVE-2026-126846: Use after free in Skia. Reported by Google on 2026-11-02
[TBD][580921803] Critical CVE-2026-126911: Use after free in Accessibility. Reported by Andrew Boni on 2026-11-02
[$4,000][567827593] High CVE-2026-126864: Use after free in V8. Reported by Jihyeon Jeong (Compsec Lab, Seoul National University / Research Intern) on 2026-09-30
[N/A][560620348] High CVE-2026-126889: Off-by-one error in V8. Reported by Google on 2026-09-12
[N/A][563340397] High CVE-2026-126859: Link following in FileSystem. Reported by Google on 2026-09-18
[N/A][567611696] High CVE-2026-126886: Use after free in Frames. Reported by Xinyang Ge (Anthropic), assisted by Claude on 2026-09-29
[N/A][567611698] High CVE-2026-126887: Use after free in Animation. Reported by Xinyang Ge (Anthropic), assisted by Claude on 2026-09-29
[N/A][568906910] High CVE-2026-126870: Uninitialized resource in ANGLE. Reported by Google on 2026-10-02
[N/A][569286603] High CVE-2026-126912: Buffer overflow in Skia. Reported by Xinyang Ge on 2026-10-05
[N/A][569674220] High CVE-2026-126919: Use after free in BrowserTag. Reported by Xinyang Ge on 2026-10-05
[TBD][572312779] High CVE-2026-126878: Information leak in Core. Reported by Anthropic and Ada Logics on 2026-10-10
[69 lines not shown]
