BSD Commit Log Search

   Update KDE Gear to 26.04.2

   retire modlogan

   Declared dead for two decades and needed tons of patches for llvm22

   ok ian job kirill

   Add DTS nodes for the Samsung Galaxy Book4 Edge to make gpiokeys(4) attach
   so that suspend/resume works on lid close/open.

   ok deraadt@

   openmw: move to MODCLANG_VERSION = 22

   ok pascal

   switch nfs_getreq() to nfsd_adv()

   from miod@ ok jsg@

   This round of commits was prompted by a double-free report
   from Andrew Griffiths at Calif.

   server nfs request mbuf pointers were stored in two structs:
   nmi_mrep in struct nfsm_info
   nd_mrep in struct nfsrv_descript
   but only set to NULL after m_freem() in nmi_mrep

   This problem is avoided by removing the use of struct nfsm_info
   in the server paths and passing struct nfsrv_descript to
   new versions of the nfsm functions.

   remove use of struct nfsm_info in nfs_serv.c (the non-trivial part)

   with and ok miod@

   remove use of struct nfsm_info in nfs_serv.c

   with and ok miod@

   convert nfs_serv.c from nfsm_mtouio() to nfsd_mtouio()

   with and ok miod@

   convert nfs_serv.c from nfsm_strsiz() to nfsd_strsiz()

   with and ok miod@

   convert nfs_socket.c from nfsm_dissect() to nfsd_dissect()

   with and ok miod@

   convert nfs_serv.c from nfsm_dissect() to nfsd_dissect()

   with and ok miod@

   remove nfsm_info argument from nfsm_srvmtofh1()

   with and ok miod@

   remove nfsm_info argument from nfsm_reply()

   callers all set info.nmi_mreq = NULL

   with and ok miod@

   make nfsm_srvnamesiz() take an nfsrv_descript argument

   with and ok miod@

   make nfsm_srvmtofh2() take an nfsrv_descript argument

   with and ok miod@

   make nfsm_srvsattr() take an nfsrv_descript argument

   with and ok miod@

   add nfsrv_descript versions of nfsm functions

   ok miod@

   remove nmi_mb from struct nfsm_info

   ok miod@

   make nfsm_srvmtofh1() take an mbuf argument

   ok miod@

   make nfsm_srvwcc() take an mbuf argument

   ok miod@

   make nfsm_fhtom() take an mbuf argument

   ok miod@

   make nfsm_srvpostop_fh() take an mbuf argument

   ok miod@

   make nfsm_srvpostop_attr() take an mbuf argument

   ok miod@

   make nfsm_reply() take an mbuf argument

   ok miod@

   make nfsm_strtom() take an mbuf argument

   ok miod@

   net/senpai: update to 0.5.0

   with tweak from and ok jtt@ (MAINTAINER) thanks!

   devel/codex: update to 0.138.0

   Upstream patch for buffer overflow in 32-bit perl

   * CVE-2026-8376
       https://lists.security.metacpan.org/cve-announce/msg/40396161/
       Perl versions through 5.43.10 have a heap buffer overflow when
       compiling regular expressions with a repeated fixed string on 32-bit
       builds

   Upstream patches for IO-Compress perl dist

   * CVE-2026-48961
       https://lists.security.metacpan.org/cve-announce/msg/40434383/
       IO::Compress versions from 2.207 before 2.220 for Perl ship a
       zipdetails CLI tool that crashes with undefined subroutine on
       Info-ZIP Unix Extra Field with 8-byte UID or GID

   * CVE-2026-48962
       https://lists.security.metacpan.org/cve-announce/msg/40434385/
       IO::Compress versions before 2.220 for Perl can execute arbitrary
       code in File::GlobMapper via an attacker-controlled output glob

   * CVE-2025-15649
       https://lists.security.metacpan.org/cve-announce/msg/40434380/
       IO::Uncompress::Unzip versions before 2.215 for Perl propagate
       uncaught exception when parsing zip header with malformed DOS date

   * CVE-2026-48959

    [3 lines not shown]

   Upstream patch for HTTP-Tiny perl dist

   * CVE-2026-7010
       https://lists.security.metacpan.org/cve-announce/msg/39952806/
       HTTP::Tiny versions before 0.093 for Perl do not validate CRLF in
       HTTP request lines or control field header values