Do a version check before defining HAVE_GETRANDOM.
Should help the tools build problems on netbsd-9 and earlier,
as reported by Staffan Thomén on current-users@.
Import unbound 1.24.2 (previous was 1.23.1)
Unbound 1.24.2 Latest
This security release has additional fixes for CVE-2025-11411.
Promiscuous NS RRSets that complement DNS replies in the authority
section can be used to trick resolvers to update their delegation
information for the zone.
The CVE is described here
https://nlnetlabs.nl/downloads/unbound/CVE-2025-11411.txt
Unbound 1.24.1 included a fix that scrubs unsolicited NS RRSets (and
their respective address records) from replies mitigating the possible
poison effect.
Unbound 1.24.2 includes an additional fix that scrubs unsolicited NS
RRSets (and their respective address records) from YXDOMAIN and
non-referral nodata replies as well, mitigating the possible poison
[240 lines not shown]
Fix: avoid double free of hdrbuf pointer in tmux if imsg_add fails
imsg_add already frees the hdrbuf pointer before returning -1.
reviewed by christos@, to be sent upstream
vax/liveimage: exclude man page sets etc. to fix live-image build
Tested on open-simh:
---
NetBSD 11.99.4 (GENERIC) #0: Fri Jan 16 03:16:14 JST 2026
Welcome to NetBSD!
This is a development snapshot of NetBSD for testing -- user beware!
Bug reports: https://www.NetBSD.org/support/send-pr.html
Donations to the NetBSD Foundation: https://www.NetBSD.org/donations/
We recommend that you create a non-root account and use su(1) for root access.
No entry for terminal type "unknown";
using dumb terminal settings.
# df
Filesystem 1K-blocks Used Avail %Cap Mounted on
/dev/ra0a 965166 904188 12720 99% /
ptyfs 1 1 0 100% /dev/pts
[13 lines not shown]
Fix ld.elf_so on non-espresso SMP and ibm4xx
The espresso test in ld.elf_so for espresso had two flaws:
1) It relied on emulation of the privileged mfpvr instruction for
userspace, which doesn't exist on ibm4xx platforms.
2) An && should have been an ||, which incorrectly caused the
workaround to be applied to all SMP systems.
Fixes PR# port-powerpc/59917
Import 4.14.0 (previous was 4.8.0)
NSD 4.14.0 Latest
This release consists of a refactor of the RDATA storage, reducing the memory
footprint of NSD, and various bug fixes.
4.14.0
FEATURES:
Fix #137: Adds tcp-listen-queue: number config option to set
the TCP backlog. And the default for the listen TCP backlog is
set to -1 on BSDs and Linux.
Merge #444: Refactor RDATA storage to reduce memory footprint
BUG FIXES:
Fix empty debug statement body in catalog consumer zone process.
Merge #459: Check for libfstrm version >= 0.4.
For #459: Add configure check for fstrm_tcp_writer_options_init
in addition to the check for fstrm_iothr_init.
[981 lines not shown]
Do the same workaround for i2c as was done for spi...
XXX XXX Big, fat, ugly workaround for an unfortunate senario triggered
XXX XXX by the CI20 kernel where there isn't a SoC I2C controller driver
XXX XXX that carries the fdt_i2c config attribute
ftp: limit I/O transfers to 128 KiB
Change the default/maximum I/O transfer size to 128 KiB,
instead of relying upon the socket buffer size.
Reworked change proposed by Michael van Elst.
Use more constants instead of magic values.
Bump version to 20260115.
Part of PR bin/59865.
bootimage: fix a build error of zaurus live-image on parallel build
Add an explicit dependency of ${FATFILES} on ${TARGETFS} since
necessary files are assumed to be extracted during ${TARGETFS} image
build (not sure how it worked before).
Should be pulled up to netbsd-11.
fdt: add basic usb nodes support.
The Odriod-C1 has an internal USB node with a reset GPIO. The USB node
support here detects the usb node (in this case a device) and {,de-}asserts
the GPIO pin.
The Linux device tree specification for this is less than ideal.
To quote Jason
The "fdt" interface attribute should really go on the dwctwo_fdt
attachment, but that doesn't work in the config(5) system; interface
attributes can only go onto devices.
npf.conf(5): fix incorrect .Bl type
A list can't be -bullet and -hang at the same time. It's obviously
supposed to be -hang (as .It comes with text), but make it -tag
instead, as -hang is harder to read, IMO.
