BSD Commit Log Search

   update to timescaledb-2.26.2, from Mark Patruck, looks good to maintainer
   (this is the version that was tested with the zabbix update that went in
   a few days ago)

   update to ansible-runner-2.4.3, from Mikolaj Kucharski (maintainer)
   plus add missing RDEP and TDEPs

   Update to OpenSSL 4.0.0

   The 00: printing still is the most important thing. Rest mostly the same
   as in the beta.

   https://github.com/openssl/openssl/releases/tag/openssl-4.0.0

   update to monitoring-plugins-3.0.0rc3, from Alvar Penning, + tweak to pkgnames

   update

   Bump _MODGO_SYSTEM_VERSION for lang/go update.

   Update lang/go to 1.26.2.

   ok naddy@

   vmd(8): zero potential heap pointers before IPC.

   vmd sends two large structs over an ipc socket after fork+exec:
   vmd_vm and virtio_dev.

   Both have heap pointers from being put in TAILQs in the parent
   process and both carry some used for setting up imsg event channels.
   Zero all these things before send to be safe and not leak deatils
   on the parent's address space.

   Issue raised by Systopia Team.

   ok hshoexer@

   Merge fixes from upstream for multiple Xserver issues:
   * CVE-2026-33999: XKB Integer Underflow in XkbSetCompatMap()
   * CVE-2026-34000: XKB Out-of-bounds Read in CheckSetGeom()
   * CVE-2026-34001: XSYNC Use-after-free in miSyncTriggerFence()
   * CVE-2026-34002: XKB Out-of-bounds read in CheckModifierMap()
   * CVE-2026-34003: XKB Buffer overflow in CheckKeyTypes()
   from matthieu@

   this is errata/7.7/034_xserver.patch.sig

   Merge fixes from upstream for multiple Xserver issues:
   * CVE-2026-33999: XKB Integer Underflow in XkbSetCompatMap()
   * CVE-2026-34000: XKB Out-of-bounds Read in CheckSetGeom()
   * CVE-2026-34001: XSYNC Use-after-free in miSyncTriggerFence()
   * CVE-2026-34002: XKB Out-of-bounds read in CheckModifierMap()
   * CVE-2026-34003: XKB Buffer overflow in CheckKeyTypes()
   from matthieu@

   this is errata/7.8/028_xserver.patch.sig

   Merge fixes from upstream for multiple Xserver issues:
    * CVE-2026-33999: XKB Integer Underflow in XkbSetCompatMap()
    * CVE-2026-34000: XKB Out-of-bounds Read in CheckSetGeom()
    * CVE-2026-34001: XSYNC Use-after-free in miSyncTriggerFence()
    * CVE-2026-34002: XKB Out-of-bounds read in CheckModifierMap()
    * CVE-2026-34003: XKB Buffer overflow in CheckKeyTypes()

   Tweak cmake files to avoid build errors on archs without SIMD support

   This is nicer than hardcoding in the port a list of archs with/without
   SIMD.  Add an url to this 3.1.x-specific fix, master has more changes
   in this area.

   Prompted by a diff from matthieu@, ok tb@

   Update to webkitgtk{41,60}-2.52.2.

   Do not leak old time format if it is replaced in same format.

   Update to Python 3.13.13, ok kmos sthen

   https://www.python.org/downloads/release/python-31313/

   Apply the fixes for CVE-2026-6100 (also ok kmos sthen) and on top of this
   pull in an additional missing bit in the fix for CVE-2026-4519.

   update to libmicrohttpd-1.0.4

   pudate to py3-virtualenv-21.2.3

   update to py3-zipp-3.23.1

   add missing RDEP on python,-tests

   Update to geoclue2-2.8.1.

   Update to terragrunt-1.0.1.

   If job_run fails, do not crash but instead free the popup.

   Update to gnome-control-center-49.7.

   Another check for partially initialized control client, from Matt
   Koscica in GitHub issue 5004.

   Update to libshumate-1.6.1.

   Update to eog-49.3.

   Add detach to default session menu, suggested by Przemyslaw Sztoch.

   Fix key binding conflict in session menu, from Dane Jensen.

   Include window bits for pane notifications, GitHub issue 5007 from Saul
   Nogueras.

   Limit precision to 100 to stop silly formats from running out of memory,
   reported by z1281552865 at gmail dot com.