ld.elf_so: g/c empty conditional
It was not empty for about two hours before the commit that introduced
it had been reverted. Its content was revered, but the conditional
itself was forgoten.
While here, add "compat32" in the comment for the MLIBDIR block to
make this place more easily findable.
risc-v: revert the change for generic_bs_r_4
According to the RISC-V ABI Calling Convention an integer scalars
narrower than XLEN bits are widened according to the sign of their
type up to 32 bits, then sign-extended to XLEN bits.
bind920: update to version 9.20.29.
Pkgsrc changes:
* Update version number & checksums.
Upstream changes:
Notes for BIND 9.20.29
----------------------
Security Fixes
~~~~~~~~~~~~~~
- Prevent excessive CPU use validating crafted DNSSEC responses.
:cve:`2026-19668`
A malicious authoritative server could serve a securely delegated zone
whose DS and DNSKEY records carried many distinct key tags but no valid
match, forcing a validating resolver into excessive key-tag matching
[352 lines not shown]
lang/ruby40: update to 4.0.7
This release contains fix for CVE-2026-80212 and CVE-2026-80213 in resolv
gem.
4.0.7 (2026-09-15)
* Bug #22188: addr2line doesn't find symbols when compiled with GCC LTO
* Bug #22210: Check if issue #19969 is still reproducible / re-opened in 4.0.x
* Bug #22217: Segmentation fault when resuming execution with Coverage.start
and ruby/debug
* Fix formatting in ObjectSpace._id2ref error path by eregon · Pull Request
#18206
* Bug #22200: ObjectSpace._id2ref can return a different object than the
id's owner on Ruby 4.0 (stale id2ref_tbl entry for objects with generic
[59 lines not shown]
wg(4): Assert task is nonzero before queueing work.
Prompted by (though I can't see any way it could be the source of):
PR kern/60728: workqueue panic in wg
textproc/treemd: update to 0.9.1
(leaf pkg)
[0.9.1] - 2026-09-14
Fixed
Images inside a list item are drawn. - item  rendered the text and nothing else, and the image was not selectable. The list renderer drops images from its inline run on the grounds that they are drawn separately, which was true while the parser hoisted a list item's image out to a top-level block; since 2.0.0 it correctly keeps the image in the item, so nothing picked it up. The item now reserves the same placeholder rows a paragraph does, registers the image in the element index, and the existing image pass draws into them (#87)
A nested paragraph or list is no longer measured as if it reserved image rows. Only a top-level block reserves them, so counting a nested one that way overstated its height by thirteen rows and pushed everything below it out of position
Internal
The renderer is checked against the line count that production actually uses. The check previously compared against count_block_lines, which the live path does not call for a top-level list, paragraph or image, so those three were being validated against a function that never measures them. index_elements now records the rows it walked and the test compares that
[0.9.0] - 2026-09-14
turbovault-parser 2.1.0, which closes every parser defect reported from here since 0.7.0.
Fixed
[16 lines not shown]
sysutils/mirador: update to 1.13.1
(leaf pkg)
1.13.1 - 2026-09-15
Fixed
The clock's border offers h. 1.13.0 put the 12-hour key only in the ? overlay, so a clock with room to spare never showed it. It is now on the border and the status bar, after Shift+↑↓ move and before d remove, as h 12/24h. At the default width the border is unchanged; h appears as soon as the clock is wide enough for it.
1.13.0 - 2026-09-15
Added
A 12-hour clock (#265). h switches the clock panel between 24- and 12-hour, and the choice is remembered; [clocks].twelve_hour = true sets it in the config. The default stays 24-hour. AM or PM sits small at the top right of the numerals, over the seconds, and the zone table follows: its time_format is converted to 12-hour with your padding kept. With 12-hour off, time_format is used as written, as before.
Fixed
A 12-hour zone row keeps its day marker. A time_format with AM or PM in it, such as %I:%M:%S %p, was cut to … where the +1d belongs; the table now makes room for it.
A task's note preview says when it has been cut. A note longer than the two-row preview lost its later rows with nothing to show it, so the seeded overdue task's note ended a sentence early and looked complete. The last visible row now ends in ….
The watch log's empty state reads as a sentence. "which f on the agenda panel sets" was missing a word; it now says that pressing f on the agenda panel sets [agenda].file.
[13 lines not shown]
arm64: don't consult mvfr1_el1 for AArch64 fp capabilities
The MVFR1_EL1 register describes features for the AArch32 AdvSIMD and FP
implementation and the contents of this register are UNKNOWN when FEAT_AA32
is not implemented.
So let's ignore this register and just set FPCR defaults for IEEE 754
compatibility.
Before this change, 7 tests in lib/libm failed on a VMware Fusion VM
(Apple M4 Pro) where MVFR1_EL1 reads as zero. With this change, all
tests pass.
nginx: Update to 1.30.5
Changes with nginx 1.30.5 15 Sep 2026
*) Security: a heap memory buffer overflow might occur in a worker
process under certain configurations when using HTTP/3 with OpenSSL
3.5.0 and earlier (CVE-2026-90439).
Thanks to Banny Liao.
*) Change: now the QUIC transport parameters extension received in an
SSL connection is always ignored.
