BSD Commit Log Search

   unicon: missing dep on libssh

   reported by aja

   math/cadical: added -fPIC for sparc64

   cadical large enough to requrie fPIC and by default it uses fpic

   sysutils/docker-compose: update to 5.6.1

   update to py3-Pillow-13.0.0

   httpd: only rekey TLS tickets for the first server on a socket

   With several TLS servers on the same address + port and
   "tls ticket lifetime" option set, httpd died on the first ticket rekey.

   The parent started a rekey timer for every server, but only the first
   one on a socket exists as a struct server in the server processes.
   Start the rekey timer only for that server.

   Reported by James J. Lippard on bugs@ and stsp@, thanks!

   ok stsp@, kirill@

   bump to keep ahead of -stable

   yesterday's "MFC php changes from -current, to make tomorrow's RCE CVEs
   easier to handle" accidentally dropped /usr/local/bin/{php,phar,phpize}
   symlinks; correct

   sysutils/chezmoi: Update to 2.73.3

   wayland/mango: Update to 0.18.2

   textproc/simdutf: Update to 9.3.2

   force umask

   comment on why cachedir is created

   manually detect if this release has no databases available (yet)
   with a nice error message compared to errexit

   Register clock interrupt with ih_number zero and remove way obsolete message
   attempting to explain why 1 had been chosen previously.

   softintr_schedule() being now a simple wrapper over send_softint(), drop it
   and rename send_softint() to softintr_schedule().

   All uses of send_softint are of the form (ih->ih_pil, ih). Drop the first
   argument since it can be easily obtained from the second one. Also drop the
   check for a NULL ih as this will never happen.

   Replace hardcoded 10 for clock interrupt level with matching symbolic constant.
   Remove dead comments.

   All the *tick_trigger() simply wrap sparc64_raise_clockintr(), invoke the
   latter directly.

   All the *tickintr() bodies are nowadays identical, keep only one.

   copyright

   lang/deno: Update to 2.9.8

   This release removes emSign ECC Root CA - G3 from the trusted certificate
   authorities (via webpki-root-certs 1.0.10)

   Added a patch to make the system cert store the default, for good measure

   must be run as root
   pointed out by florian

   lang/deno: Update to 2.9.8

   This release removes emSign ECC Root CA - G3 from the trusted certificate
   authorities (via webpki-root-certs 1.0.10)

   Added a patch to make the system cert store the default, for good measure

   Tor Browser: update to 15.0.26

   Tor Browser: update to 15.0.26

   Sync to unbound 1.26.2; heavy lifting by sthen

   Update p5-DBI to 1.656

   2026-10-17, H.Merijn Brand & Robert Rothenberg
   * Re-add conflicts to cpanfile. (WIP)
   * Remove lock file on end of scope
   * Prevent dbi_profile crash (CVE-2026-108518) (Henrik Teichmann)
   * Memory corruption via selectrow_array + SQLite UDF (issue#98)
   * Fix errstr when dbm_updatable_key attribute for DBD::DBM is set
     to 2 (croak) on Perl versions < v5.13.2.
   * Fix emit warnings when dbm_updatable_key attribute for DBD::DBM
     is set to 1 (carp)
   * Fix lock file not removed when DBD::DBM check for bad serializer
     class fails. (CVE-2026-111879)

   lang/node: Update to 24.22.1

   Fixes
   CVE-2026-105481
   CVE-2026-105482
   CVE-2026-105483
   CVE-2026-106069
   CVE-2026-106073
   CVE-2026-106074
   CVE-2026-111497

   ksh #!, and use consistent $(..) rather than mostly that and a few ``

   lang/node: Update to 24.22.1

   Fixes
   CVE-2026-105481
   CVE-2026-105482
   CVE-2026-105483
   CVE-2026-106069
   CVE-2026-106073
   CVE-2026-106074
   CVE-2026-111497