gimp: update to 3.2.8.
Overview of Changes from GIMP 3.2.6 to GIMP 3.2.8
=================================================
Core:
- hicolor/ folder is not mandatory anymore for icon themes.
- Implementation to simulate cross-process transient windows on macOS
now uses the NotificationCenter API instead of the Accessibility one
which was too pervasive (repeatedly asking permission).
- Add DPI information when copying image to clipboard when compiled
with gdk-pixbuf 2.36 with backend supporting "x-dpi" and "y-dpi"
settings (which unfortunately right now means disabling glycin until
it gets support).
- Dashboard now use WorkingSetSize for memory usage on Windows, which
is more accurate.
- Dot to Dot support should now work better even on integer scaling.
- Allow canceling font loading in the middle when quitting GIMP early.
[73 lines not shown]
proc-cli: Add version 2.2.0
proc finds, inspects and stops processes and ports. Target a process by
port (:3000), PID, name or path, see what holds a port and why it is
there, and free it. Commands that change anything ask first, preview
with --dry-run, and print JSON with stable exit codes for scripts.
NetBSD is supported upstream since 2.2.0, whose CI runs the whole test
suite on NetBSD 11. Ports come from sockstat(1) and open files from
fstat(1), both in the base system, so it has no run dependencies.
py-django: updated to 6.1.3
Django 6.1.3 fixes five security issues with severity “low”, one security issue
with severity “moderate”, and several bugs in 6.1.2. It also adds compatibility
with Python 3.15.
p5-CGI: update to 5.02.
5.02 2026-11-03
[ RELEASE NOTES ]
- this is a security release fixing a large number of vulnerabilities,
several of them exploitable by any client against any script. all
users should upgrade
- to fix them some default behaviour has changed, see BREAKING CHANGES
below - most changes only affect malicious or malformed requests, but
please read them before upgrading. where a change could reasonably
affect a legitimate application an opt out or migration path is given
- the minimum *supported* perl version is now 5.10, however the dist
will still install for 5.8 (no guarantees about tests passing however)
[ SECURITY ]
- denial of service:
- CVE-2026-120631: CGI::Cookie->parse (and so CGI->cookie) used a
client supplied cookie expires value as a regex, so a Cookie header
[123 lines not shown]
py-dns: updated to 2.9.2
2.9.2
A maliciously crafted zone file could use a WKS record to consume excessive
memory and CPU, possibly causing the process to exit due to memory exhaustion.
adguardhome: updated to 0.107.80
0.107.80
Security
Go version has been updated to mitigate the possibility of exploiting the Go vulnerabilities fixed in 1.27.3.
Support for Multipath TCP has been disabled to mitigate the possibility of exploiting the vulnerability described in CVE-2026-98432.
