wtype: update to 0.5
What's Changed
- Avoid control-key collisions when typing literal text by @tijszwinkels in #77
- Add additional modifier keys by @tmccombs in #57
p5-Mozilla-CA: update to 20261020.
20261020
- Update from Mozilla repository to 2026-10-20
- Denylisted certificates:
- emSign ECC Root CA - G3
sha256: 86a1ecba089c4a8d3bbe2734c612ba341d813e043cf9e8a862cd5c57a36bbe6b
Additionally apply patch to pullup the following, requested by
riastradh in ticket #1383:
distrib/sets/lists/base/mi 1.1394
mark two removed certs as obsolete
Pull up following revision(s) (requested by riastradh in ticket #537):
distrib/sets/lists/base/mi: revision 1.1394
mozilla-certdata: Mark two nixed certs as obsolete.
Missed a spot, must not have had a clean destdir somehow.
PR security/60908: mozilla-certdata: update for compromised CA
firefox153: update to 153.5.1
Mozilla Foundation Security Advisory 2026-112
Security Vulnerabilities fixed in Firefox ESR 153.5.1
Announced
October 20, 2026
Impact
high
Products
Firefox ESR
Fixed in
Firefox ESR 153.5.1
Note: We have changed how we publish advisories. We no longer roll all internally identified memory safety vulnerabilities into a single CVE and are now issuing an advisory for every individual bug.
#CVE-2026-113470: Cryptographic issue in the Security Block-lists, Allow-lists, and other State component
[11 lines not shown]
Fix several RAIDframe bugs relating to spare disks (most minor, one or two not)
1) Incomplete component swap - this can leave the replacement's auto_configured,
partitionSize, etc. set to the old component's values or in some cases
to zero (component missing at boot etc).
2) A write error on the spare during reconstruction should fail the spare.
Otherwise, multi-spare arrays will never proceed from a bad spare to a
good one.
3) rf_remove_hot_spare and rf_delete_component fail to close the vnode
in the autoconfigured case. rf_remove_hot_spare also appears to have
an off-by-one error.
4) When we bring a spare into operation and update its label, we fail to
call rf_component_label_set_partitionsize(). It could get stuck at 0
or whatever was in there before, since at present spares don't get labels
written in most cases until they are used.
[2 lines not shown]
database/p5-DBI: update to 1.656
1.656 (2026-10-17)
* Re-add conflicts to cpanfile. (WIP)
* Remove lock file on end of scope
* Prevent dbi_profile crash (CVE-2026-108518) (Henrik Teichmann)
* Memory corruption via selectrow_array + SQLite UDF (issue#98)
* Fix errstr when dbm_updatable_key attribute for DBD::DBM is set to 2
(croak) on Perl versions < v5.13.2.
* Fix emit warnings when dbm_updatable_key attribute for DBD::DBM is set to
1 (carp)
* Fix lock file not removed when DBD::DBM check for bad serializer class
fails. (CVE-2026-111879)
* *** WARNING: Next release will require perl-5.14 ***
- Main reason: Exception handling
