BSD Commit Log Search

   Update to webkitgtk{41,60}-2.52.3.

   update to 26.2.2.2

   Update to glib2-2.86.5.

   Update to at-spi2-core-2.58.5.

   Unbreak build, I had a non committed version of typescript installed.

   Update to gemini-cli-0.38.1.

   Merge upstream fix for CVE-2026-4897 - getline() string overflow.

   Merge upstream fix for CVE-2026-4897 - getline() string overflow.

   SECURITY update to libxml-2.15.3.

   Update to google-cloud-sdk-565.0.0.

   Update to epiphany-49.8.1.

   Update to py3-libcloud-3.9.1.

   locase() in usr.bin/rpcgen/rpc_util.c copies an identifier into
   a static buffer without bounds checking

   OK deraadt@

   cgetnext() in lib/libc/gen/getcap.c copies a record name into a
   stack buffer without bounds checking

   OK deraadt@

   Some mapchar emulops require a question mark character, so don't permit
   loading if that is missing (bounded by firstchar and numchars).
   An AI triage report made a hastly conclusion there were bigger problems
   here but Miod figures it is just this ? problem.
   diff from miod
   report from Bruce Dang of Calif.io

   update to 147.0.7727.101

   security/nss: update to 3.123.

   will be required for firefox 151 per #2026577

   Update KiCad to 9.0.8

   https://www.kicad.org/blog/2026/03/KiCad-9.0.8-Release/

   Update to ngtcp2 1.22.1

   Only code change in the lib cranks buf[1024] to buf[2048] to avoid a
   stack overwrite when qlog is enabled.
   https://github.com/ngtcp2/ngtcp2/releases/tag/v1.22.1

   Update arm-compute-library to 53.0.0

   In ipcs(1) use shm_cpid to determine whether a shared memory segment is in use.
   As since kern_sysctl.c r1.490 shm_internal is always NULL.

   ok deraadt

   devel/codex: update to 0.121.0; recovery code mode; claim maintainership

   patches which cut off code mode from codex grows, and I think soon it
   will make that tool useless.

   Here an opposite approach: build v8 which is requried for code mode.

   For now it is limited only for amd64 and arm64.

   Patch to link libcblas explicitly for LAPACK/Generic backend

   Fixes build of opencv on sparc64

   From Brad Smith

   vmctl(8): switch to new disk format enum.

   Replace int's with the new enum type used by vmd.

   Discussed with mlarkin@

   vio: recover from missed RX interrupts

   It seems at least on Oracle Cloud (arm64, KVM) and on vmd, sometimes rx
   interrupts get lost. As a workaround, check the virtqueues in vio_rxtick(),
   which allows to recover from this situation.

   Diff from renaud@
   tested by mbuhl@
   ok stsp@

   zizmor uses C11. Move to ports-gcc on base-gcc arches to fix build
   on sparc64

   The struct kfino_vmentry copied to userland is 80, and (depending
   on architecture?) has 7 bytes of padding at the end, which is
   uninitialized.  Use M_ZERO.
   from tgs

   smtpd: bump version to 7.9

   don't lowercase K_AUTH lookups

   this diff has circulated for a while, being written and re-written by
   different people.  In this case, I'm taking Pietro Cerutti's version.

   Avoid undefined behaviour in the community code by checking nentries to
   be not 0 before memcmp, bsearch or siphash calls.

   Calling these functions with a NULL pointer is UB even with a zero len.
   While I did fix some code already during a review of all such possible
   NULL, 0 calls I missed the bsearch one and introduced the community_equal
   memcmp after that.

   Reported by Synmac Oliver
   OK tb@ deraadt@