security/krb5-122: Update to 1.22.3
This is a bug fix release, with a focus on security issues discovered
with the aid of large language models. See
https://web.mit.edu/kerberos/advisories/MITKRB5-SA-2026-001.txt for
information on the risks of continuing to use unpatched releases.
* Fix a logic error when checking PAC server checksums
[CVE-2026-111423].
* Check for unkeyed checksums when validating CAMMAC verifiers
[CVE-2026-71199].
* Fix a loophole in the KDC's client authdata filtering which could
allow clients to include fake PAC and CAMMAC authdata values when
requesting service tickets. These fake values would be rejected by
application servers, were it not for the two bugs noted above.
* Check for the lockdown_keys attribute when processing password
[45 lines not shown]
news/sabnzbd: Update 5.1.2 => 5.1.3, cleanup dependencies
Changelog:
https://github.com/sabnzbd/sabnzbd/releases/tag/5.1.3
Make some adjustments to the the test behavior so that no more tests
fail. Skips Selenium Tests, Wiki Tests and tests that do not have
necessary files in tarball. Patches permission test that behaves
differently from linux.
Results: 13345 passed, 41 skipped, 28 deselected, 2 xfailed, 1 xpassed,
8 warnings
PR: 298693
Approved by: Nicholas Kirby <nick at kirby.cx> (maintainer, timeout 7+ weeks)
Security: GHSA-q326-jpxx-jmjc
Security: GHSA-mjwj-v5mr-cmcg
Security: GHSA-rgqj-28c2-gxwp
Security: GHSA-75g3-96fr-7p2r
Security: GHSA-xrfq-jhgh-wqch
[5 lines not shown]
news/sabnzbd: Update 5.1.2 => 5.1.3, cleanup dependencies
Changelog:
https://github.com/sabnzbd/sabnzbd/releases/tag/5.1.3
Make some adjustments to the the test behavior so that no more tests
fail. Skips Selenium Tests, Wiki Tests and tests that do not have
necessary files in tarball. Patches permission test that behaves
differently from linux.
Results: 13345 passed, 41 skipped, 28 deselected, 2 xfailed, 1 xpassed,
8 warnings
PR: 298693
Approved by: Nicholas Kirby <nick at kirby.cx> (maintainer, timeout 7+ weeks)
Security: GHSA-q326-jpxx-jmjc
Security: GHSA-mjwj-v5mr-cmcg
Security: GHSA-rgqj-28c2-gxwp
Security: GHSA-75g3-96fr-7p2r
Security: GHSA-xrfq-jhgh-wqch
[3 lines not shown]
x11/nvidia-kmod{-deve]}: Fix loading GSP firmwares for non-legacy variants
Add missing 2 firmware files to x11/nvidia-kmod/pkg-plist
and fixup x11/nvidia-kmod/Makefile not to pick them for
legacy variants that don't have them.
Bumped non-legacy variants only, as pkg for legacy variants
shouldn't be affected with this.
Co-authored by: O. Hartmann
Differential Revision: https://reviews.freebsd.org/D61364
net/libpfctl: add 15.2, remove 15.0
15.0 is end-of-life, remove it from this port.
Add 15.2, which is in the process of being released.
Deliberately do not bump PORTVERSION, because we don't change existing
libpfctl versions, we only add a new supported FreeBSD version.
PR: 300134
Sponsored by: Rubicon Communications, LLC ("Netgate")
