BSD Commit Log Search

   Add missing spl_free() in the proc_parser_file() spaghetti

   OK tb@

   ccr: use uint32_t and %u for AS numbers

   ok claudio

   Tak files should use RTYPE_TAK not RTYPE_SPL.

   OK tb@

   ASnum are unsigned 32bit values. Use %u to print them not %d.

   Also use json_do_uint() just to be consistent. The json encoder operates
   with 64bit values so it does not matter there as much as it does for printf.

   With and OK tb@

   Update KDE Gear to 26.04.3

   https://kde.org/announcements/gear/26.04.3/

   www/mozilla-firefox: MFC update to 152.0.5.

   see https://www.firefox.com/en-US/firefox/152.0.5/releasenotes/

   www/mozilla-firefox: update to 152.0.5.

   see https://www.firefox.com/en-US/firefox/152.0.5/releasenotes/

   update to fltk-1.3.11
   (1.4.x is listed as stable upstream now, but needs more work in dependent ports)

   Fix . and ; bindings, reported by tb.

   Implement the machdep.led_blink sysctl on arm64 and riscv64 and add support
   for it to gpioleds(4).  Enable gpioleds(4) on riscv64.

   fix fltk version checks

   - fix syntax in example login_ldap.conf file, it had :\ on a line
   presumably when converted from getcap in the ports version

   - switch to a more unix-y sample filter, and add a commented-out example
   for ActiveDirectory

   based on a diff from Chaz Kettleson which was ok with tweaks by claudio@,
   and incorporating feedback from Andrew Daugherity

   Add C-b g , and C-b g . for move and resize menus, also add to pane menu
   (and fix to make them work).

   Update to exoscale-cli-1.95.5.

   Add a layout_geometry container struct, from Dane Jensen.

   Set initial scrollbar state, from Michael Grant.

   Restore { and } to swap-pane and for floating panes and use a separate
   key table accessed by g (short for "gove and/or gesize") for floating
   panes. So "C-b g Up" moves the pane to top-centre, "C-b g M-Up" moves
   and resizes it. This means we not only do not lose the surprisingly
   popular { and } bindings, but we can have more than four keys for moving
   and resizing panes.

   update qtpass to 1.7.0

   Changes since 1.4.0:
   https://github.com/IJHack/QtPass/releases/tag/v1.7.0
   https://github.com/IJHack/QtPass/releases/tag/v1.6.0
   https://github.com/IJHack/QtPass/releases/tag/v1.5.1
   https://github.com/IJHack/QtPass/releases/tag/v1.5.0

   don't assume an ipv4 header is always 20 bytes.

   as reported by SecBuddyF, Tencent KeenLab:

   > OpenBSD's pipex PPTP GRE packet handling uses a fixed GRE/IP header
   > length check before later reading the GRE header at an offset derived
   > from the actual IPv4 header length.
   >
   > When IPv4 options are present, the dynamic IPv4 header length can
   > be larger than 20 bytes. A short GRE packet can therefore pass the
   > fixed 28-byte PIPEX_IPGRE_HDRLEN check while still being too short
   > for the later m_copydata(m0, hlen, sizeof(gre), &gre) read.
   >
   > This can trigger:
   >
   >   panic: m_copydata: null mbuf
   >
   > The issue is remotely triggerable when GRE and pipex are enabled
   > and inbound IPv4 GRE packets with IP options are allowed to reach

    [8 lines not shown]

   prefer fstat to stat when it's trivial to do so

   unused variables

   fix GSSAPI option names, that I somehow screwed up while refactoring
   servconf.c bz3974 patch from Colin Watson

   Update Socket to 2.041

   CVE-2026-12087:
    Socket versions before 2.041 for Perl have an out-of-bounds heap read

   From security.metacpan.org

   www/hugo: update to 0.164.0

   update p5-Imager to 1.032
   CVE-2026-13708 CVE-2026-13705 CVE-2026-8454

   sysutils/exfetch: update to 1.7

   from izzy Meyer (maintainer)

   Could of minor tidy ups.

   update p5-Crypt-DSA to 1.24

   shells/fish: Forgot to cvs-add the patches

   update p5-IO-Socket-SSL to 2.099