BSD Commit Log Search

   update naxsi module, ok robert

   update cert.pem based on newer mozilla ca root store, ok tb@

   raise defaulfs for kern.seminfo.semmni and semmns to accommodate most
   common use of PostgreSQL.  ok deraadt

   Bump _MODGO_SYSTEM_VERSION for lang/go update.

   Update lang/go to 1.26.7

   llvm/sparc64: match BFD -N alignment

   BFD aligns nonpaged PT_LOAD segments to their maximum contained section
   alignment. Do the same for SPARCV9 instead of retaining the 1 MiB
   maximum page alignment.

   This removes roughly 1 MiB of leading padding from ofwboot without
   changing its load address or memory layout.

   OK: deraadt@, kettenis@

   llvm/sparc64: match BFD -N alignment

   BFD aligns nonpaged PT_LOAD segments to their maximum contained section
   alignment. Do the same for SPARCV9 instead of retaining the 1 MiB
   maximum page alignment.

   This removes roughly 1 MiB of leading padding from ofwboot without
   changing its load address or memory layout.

   OK: deraadt@, kettenis@

   update to 151.0.7922.169

   Overhaul printing of whitespace before tbl(7) in man(7).
   This is the last major piece i intend to put in for making mandoc(1)
   compatible with groff-1.23.

   In spite of the change in man_term.c 1.194 (August 2022)
   which removed unconditional vertical space before .TS,
   GNU eqn(1) still prints vertical space in some cases
   where the layout contains vertical lines.

   stop including "roff.h" which this file does not need

   rtorrent: add default fallback cache line size

   This type of hard failure is just dumb as it forced many patches for
   both Linux and non-Linux systems out there.  Fix the build on riscv64
   and most probably on mips64, sparc64 etc

   seamonkey: unbreak build with libcxx22, discussed with landry

   hunspell_fopen_hooks.h contains a preprocessor hack to replace the standard
   fopen() with one supporting readahead. This used to work because libcxx's
   fstream header used a naked fopen() call. libcxx22 changed to std::fopen(),
   so the build breaks because there is no std::hunspell_fopen_readahead():

   /usr/include/c++/v1/fstream:716:20: error: no member named 'hunspell_fopen_readahead' in namespace 'std'; did you mean simply 'hunspell_fopen_readahead'?
     716 |   return __do_open(std::fopen(__s, __mdstr), __mode);

   geo/josm: update to svn r19613, from MAINTAINER Holger Mikolon

   original diff from Christoph Liebender moving to jdk25, but this has
   memory issues at runtime as noted by MAINTAINER so stay with jdk17.

   x11/xfce4/xfce4-dict: add link to upstream MR

   update to isc-bind-9.20.27

   update to isc-bind-9.20.27

   update to luajit-2.1.1787058514

   update to librenms-26.8.1

   update to librenms-26.8.1

   Add a way for floating panes to stay above zoom (-A) flag. Use by
   default for modal panes to match popups.

   emulators/qemu: backport octeon machine

   OK: Brad Smith (maintainer)

   librewolf: apply libcxx22 patch from www/mozilla-firefox, from yaydn

   Update to yt-dlp 2026.08.19, from Mikolaj Kucharski

   SIOCGIFDATA (on most architectures) leaked 4 bytes of kernel stack.

   from deraadt@; from Acts1631

   this is errata/7.9/010_ifioctl.patch.sig

   Backout previous, commit message was wrong.

   SIOCGIFDATA (on most architectures) leaked 4 bytes of kernel stack.

   from deraadt@; from Acts1631

   this is errata/7.8/046_ifioctl.patch.sig

   Backout previous, commit message was wrong.

   Backport all changes from libexpat 2.8.3.

   Sources from 2.8.3, header from 2.7.5, no ABI change.
   CVE-2026-45186 CVE-2026-50219 CVE-2026-56131 CVE-2026-56132
   CVE-2026-56403 CVE-2026-56404 CVE-2026-56405 CVE-2026-56406
   CVE-2026-56407 CVE-2026-56408 CVE-2026-56409 CVE-2026-56410
   CVE-2026-56411 CVE-2026-56412 CVE-2026-72522

   this is errata/7.9/014_expat.patch.sig

   Backport all changes from libexpat 2.8.3.

   Sources from 2.8.3, header from 2.7.3, no ABI change.
   CVE-2026-45186 CVE-2026-50219 CVE-2026-56131 CVE-2026-56132
   CVE-2026-56403 CVE-2026-56404 CVE-2026-56405 CVE-2026-56406
   CVE-2026-56407 CVE-2026-56408 CVE-2026-56409 CVE-2026-56410
   CVE-2026-56411 CVE-2026-56412 CVE-2026-72522

   this is errata/7.8/050_expat.patch.sig

   TIOCGSID can dereference a freed t_session, because we are storing s_leader
   in the wrong place.  This is a cold hard crash crashes.  Some folk are
   looking at fixing this properly but it will take some time, so in the meantime
   we should just fail the ioctl.

   from deraadt@; from Acts1632, OK kettenis@

   this is errata/7.9/013_ttyioctl.patch.sig