BSD Commit Log Search

   Fix a typo (use right var), from Dane Jensen.

   update

   Update to xwayland 24.1.13

   Merge fixes from upstream for following issues:
   * BitmapScaleBitmaps Integer Overflow Heap Buffer Overflow (CVE-2026-56001)
   * PCF Font Parsing Heap Buffer Overflow (CVE-2026-56002)
   * computeProps Property Buffer Heap Buffer Overflow (CVE-2026-56003)

   Merge fixes from upstream for Xserver issues:
   * glamor Font Atlas Heap Buffer Overflow (CVE-2026-55999)
   * GLX contextTags Use-After-Free in CommonMakeCurrent() (CVE-2026-56000)

   Remove Qt5 comment, no longer valid

   Add union

   Import kde-plasma-union-6.7.2, ok volker

   Comment:
   Qt style supporting both QtQuick and QtWidgets

   Description:
   Union is a style engine designed to provide a unified style description
   to a set of separate output styles.

   Maintainer: Rafael Sadowski <rsadowski at openbsd.org>

   rpki-client: avoid bad free in nca_hist_load()

   If the first getline() call fails with a file error, nca_hist remains
   uninitialized and will be passed to nca_hist_free() in the error path.
   Initialize nca_hist to NULL to avoid this.

   ok claudio

   Add a comment for x11/oxygen-icons

   Update oxygen-icons to 6.27.0

   sysutils/grafana: update to 13.1.0

   error: wrong number of arguments specified for 'deprecated' attribute

   Move to ports-gcc on base-gcc arches to fix the build on sparc64

   update godot/pack3 to godot 4.7; godotsteam gdextension needs to be disabled as it doesn't build; a known upstream issue

   archivers/libarchive: update to 3.8.8

   Many more fixes for NULL pointer derefs, out-of-bounds accesses,
   and miscellaneous other bugs.

   In cert_ca_sia() use the right notify string in error message.
   At that point cert->notify has not yet been set.

   OK tb@

   ice(4): set link state to full duplex as all other nics

   tested by bluhm@

   try it stsp@
   ok bluhm@

   Update mkvtoolnix to 100.0

   Update weechat to 4.9.3

   Avoid potential out-of-bounds access while parsing AML byte stream
   opcodes.  Found by gnezdo@ using KASAN.

   ok gnezdo@

   Use M_WAITOK and BUS_DMA_WAITOK instead of M_NOWAIT and BUS_DMA_NOWAIT in
   places where we're allowed to sleep.  Hopefully this fixes the

   qwx0: failed to init DP: 12

   issue that some of us occasionally experience.

   ok stsp@

   sysutils/fzf: Update to 0.74.0

   From Maintainer Laurent Cheylus, thanks

   Allocate the psegs that are reserved for the pagedeamon only if no other
   psegs are available.  Let the pagedeamon only start a new swap cluster
   if there are still at least two reserved slots available.  This goes a
   long way towards guaranteeing that we have the resources to actually
   write out the swap cluster once it is filled.  This is important since
   the code that drops a cluster may need to acquire an rwlock, which means
   the pagedaemon could sleep.  This is undesirable and may even lead to
   deadlocks.

   Note that there still is a possibility that we may fail to allocate a buf
   from the bufpool, which would lead us to the same undesirable path.  So
   far I've not been able to hit that case.

   ok claudio@

   sync libevent major bump

   Add evtag functions to libeventextra.

   In base libevent event_tagging.c has been removed.  Bring it back
   into libeventextra which contains the features missing in base.
   This avoids undefined references when building benchmarks/httperf.

   OK sthen@

   Delete tests for code that has been removed in base libevent.

   Do not ship evtag functions in base libevent.

   Upstream libevent 2.1.13-stable contains several security fixes.
   Our reduced libevent 1.4.15-stable does not contain the affected
   code.  The functions in event_tagging.c are only used by evrpc which
   we have removed from libevent.  As the attack vectors for the
   upstream fixes go through evrpc to evtag, better remove this dead
   code and do not export it in our libevent.  Major library bump
   needed.

   OK dlg@ claudio@ sthen@

   update p5-OPCUA-Open62541 to 2.10

   update SITES/HOMEPAGE

   wayland/wlr-randr: update to 0.5.0

   see https://gitlab.freedesktop.org/emersion/wlr-randr/-/releases/v0.5.0

   from Laurent Cheylus, thanks !