BSD Commit Log Search

   acpidmar(4): Recognize reserved 4-byte IVHD device entry

   Otherwise parsing of folling entries is aborted.

   While there, fix a debug printf.

   ok kettenis@

   sysutils/grafana: update to 12.4.2

   + starship

   Import sysutils/starship

   Minimal, cross-shell, customizable prompt, with numerous modules for detection
   of languages, Git status, execution time, and more

   WWW: https://starship.rs/

   From Lydia Sobot, who takes Maintainer

   ok tb@

   update

   ruby/4.0: REVIAION -> REVISION

   shm_open(3): align the type of the mode_t parameter with POSIX

   POSIX says that sys/mman.h should also define mode_t which is currently
   missing.

   With mode_t defined there, the type of the last parameter of the shm_open
   function can be changed from __mode_t to mode_t, matching the standard.

   Both issues flagged by Sortix os-test.

   ok deraadt@, millert@

   update p5-Data-Random to 0.15

   Update to png 1.6.56. ok tb@

   Security fixes for CVE-2026-33416 and CVE-2026-33636

   Update to libpng 1.6.56 ok tb@

   Security fixes for CVE-2026-33416 and CVE-2026-33636

   net/mollysocket: Update to 1.7.1

   From Christoph Liebender (Maintainer)

   Update to png 1.6.56. ok tb@

   Security fixes for CVE-2026-33416 and CVE-2026-33636

   Update to tor 0.4.9.6.

   Bump version to 9.1

   argclass.cc:23:1: note: 'INT32_MAX' is defined in header '<cstdint>'; this
   is probably fixable by adding '#include <cstdint>'

   Add this include to fix build on sparc64

   ok sthen

   reject usernames (or passwords) with line feeds in it
   initial diff from philipp (at bureaucracy.de), tweaked by me.

   table_proc: ensure the request does not contain newlines

   from op@

   this is errata/7.7/032_smtpd.patch.sig

   reject usernames (or passwords) with line feeds in it
   initial diff from philipp (at bureaucracy.de), tweaked by me.

   table_proc: ensure the request does not contain newlines

   from op@

   this is errata/7.8/026_smtpd.patch.sig

   table_proc: ensure the request does not contain newlines

   reject usernames (or passwords) with line feeds in it

   initial diff from philipp (at bureaucracy.de), tweaked by me.

   lang/node: Update to v22.22.2

   Fixes
   CVE-2026-21637
   CVE-2026-21710
   CVE-2026-21713
   CVE-2026-21714
   CVE-2026-21715
   CVE-2026-21716
   CVE-2026-21717

   update to py3-requests-2.33.0

   lang/node: Security update to v22.22.2

   Fixes
   CVE-2026-21637
   CVE-2026-21710
   CVE-2026-21713
   CVE-2026-21714
   CVE-2026-21715
   CVE-2026-21716
   CVE-2026-21717

   ok sthen@

   update to py3-tomli-2.4.1

   Update to frei0r-plugins-2.5.6

   ok rsadowski@

   Tor Browser: update to 15.0.8

   Tor Browser: update to 15.0.8

   update p5-XML-Parser to 2.53
   fixes tests of p5-XML-XPath
   take maintainer

   update lang/rust to 1.94.1

   ChangeLog: https://blog.rust-lang.org/2026/03/05/Rust-1.94.0/ and https://blog.rust-lang.org/2026/03/26/1.94.1-release/

   net/ejabberd: update to 26.03

   Changes: https://www.process-one.net/blog/ejabberd-26-03/

   Fix a fatal firmware error during association on non-MIMO iwx(4) devices.

   If MIMO is disabled we must not try to configure Tx rates in firmware
   which require MIMO. Otherwise we trigger sysassert 0x20101A0D.

   Problem reported and fix tested by Kirill Kaplin.
   Meaning of sysassert hex code provided by Johannes Berg, thanks!