wip/librewolf: update to librewolf-158.0-1
Upstream changes:
LibreWolf development has moved from codeberg.org to librewolf.dev.
Release notes:
LibreWolf bsys6 Release v158.0-1
* Upstream release, see the Firefox 158.0 Release Notes
Notable Changes:
* Fixed Start menu shortcut creation, which is needed to open new
windows from the taskbar when the app isn't pinned (Windows)
* Removed the JXL UI setting now that JXL is enabled by default
[246 lines not shown]
Update ocaml-cmdliner to version 1.3.0.
v1.3.0 2024-05-23 La Forclaz (VS)
Add let operators in Cmdliner.Term.Syntax (#173). Thanks to Benoit Montagu for suggesting, Gabriel Scherer for reminding us of language punning obscurities and Sebastien Mondet for strengthening the case to add them.
Pager. Support full path command lookups on Windows. (#185). Thanks to @kit-ty-kate for the report.
In manpage specifications use $(iname) in the default introduction of the ENVIRONMENT section. Follow up to #168.
Add Cmd.eval_value' a variation on Cmd.eval_value.
v1.2.0 2023-04-10 La Forclaz (VS)
In manpage specification the new variable $(iname) substitutes the command invocation (from program name to subcommand) in bold (#168). This variable is now used in the default introduction of the EXIT STATUS section. Thanks to Ali Caglayan for suggesting.
Fix manpage rendering when PAGER=less is set (#167).
Plain text manpage rendering: fix broken handling of `Noblank. Thanks to Michael Richards and Reynir Björnsson for the report (#176).
Fix install to directory with spaces (#172). Thanks to @ZSFactory for reporting and suggesting the fix.
Fix manpage paging on Windows (#166). Thanks to Nicolás Ojeda Bär for the report and the solution.
Pull up following revision(s) (requested by riastradh in ticket #535):
tests/lib/libc/gen/t_arc4random.c: revision 1.6
t_arc4random: Fix test to guarantee global state initialization.
Previously, if pthread_atfork failed, arc4random_global_buf would
fail to initialize the global state as intended. (There are separate
tests for intentional failure of global state initialization.) It is
unlikely for pthread_atfork to fail, but with RLIMIT_AS cranked down
to zero, it may. To ensure that the global state is successfully
initialized for the tests that are trying to exercise it, call
arc4random from another thread first before forcing failure of the
local state initialization.
PR lib/59117: arc4random has some failure modes it shouldn't
Pull up following revision(s) (requested by jnemeth in ticket #1367):
etc/mtree/NetBSD.dist.base: revision 1.265
distrib/sets/lists/base/mi: revision 1.1391
distrib/sets/lists/base/mi: revision 1.1392
etc/namedb/bind.keys: revision 1.3
Make namedb subdirectories for non-chroot case.
Part of fix for PR/52465 and PR/60864
Update bind.keys from src/external/mpl/dist/bind.keys.
managed-keys is ancient history and just generated warnings doing
nothing useful. The proper keyword to use is trust-anchors and
this file is now current. The latest root key is only partially
specified as it wasn't published at the time this file was updated,
but enough information is provided for named to download the full
key using RFC 5011.
[3 lines not shown]
Pull up following revision(s) (requested by jnemeth in ticket #534):
etc/mtree/NetBSD.dist.base: revision 1.265
distrib/sets/lists/base/mi: revision 1.1391
distrib/sets/lists/base/mi: revision 1.1392
etc/namedb/bind.keys: revision 1.3
Make namedb subdirectories for non-chroot case.
Part of fix for PR/52465 and PR/60864
Update bind.keys from src/external/mpl/dist/bind.keys.
managed-keys is ancient history and just generated warnings doing
nothing useful. The proper keyword to use is trust-anchors and
this file is now current. The latest root key is only partially
specified as it wasn't published at the time this file was updated,
but enough information is provided for named to download the full
key using RFC 5011.
[3 lines not shown]
Pull up following revision(s) (requested by tls in ticket #1366):
tools/gmp/Makefile: revision 1.7
Fix compiler core dumps on MacOS on Apple Silicon (PR toolchain/60904),
by disabling the use of the broken arm64 asm that comes with the present
version of GMP (we can re-enable it when we upgrade).
Pull up following revision(s) (requested by tls in ticket #533):
tools/gmp/Makefile: revision 1.7
Fix compiler core dumps on MacOS on Apple Silicon (PR toolchain/60904),
by disabling the use of the broken arm64 asm that comes with the present
version of GMP (we can re-enable it when we upgrade).
Pull up following revision(s) (requested by andvar in ticket #1365):
sys/dev/pci/if_vr.c: revision 1.140
vr(4): set or clear VR_RXCFG_RX_PROMISC bit in vr_setmulti().
Previously the promiscuous bit was only handled in vr_init().
When an interface is added to or removed from bridge(4), its
IFF_PROMISC flag is changed through the interface flags (SIOCSIFFLAGS).
On a running interface it does not reinitialize device, but calls
vr_setmulti() directly, which did not update the promiscuous bit in RX filter.
PR port-i386/60884
Pull up following revision(s) (requested by andvar in ticket #532):
sys/dev/pci/if_vr.c: revision 1.140
vr(4): set or clear VR_RXCFG_RX_PROMISC bit in vr_setmulti().
Previously the promiscuous bit was only handled in vr_init().
When an interface is added to or removed from bridge(4), its
IFF_PROMISC flag is changed through the interface flags (SIOCSIFFLAGS).
On a running interface it does not reinitialize device, but calls
vr_setmulti() directly, which did not update the promiscuous bit in RX filter.
PR port-i386/60884
Updated net/unifi to 10.6.101
Approved by $MAINTAINER
Tested on
- NetBSD-11/amd64 with mongodb 4 & 5
- NetBSD-10/amd64 with mongodb 4
Upstream NEWS, less bug fixes and minor improvements.
* UniFi Network Application 10.6.101
Removed the Network Override option for WAN-adopted U5G devices.
* UniFi Network Application 10.5.66
Improved Auto STP Edge detection.
[127 lines not shown]
qbittorrent: updated to 5.3.0
5.3.0
- FEATURE: Add an option to match all share limits (glassez)
- FEATURE: Put Email examples in placeholder text (Chocobo1)
- FEATURE: Add support for widely used image types in HTTP server (Chocobo1)
- FEATURE: Allow to filter torrent list by infohash (stalkerok)
- FEATURE: Add "Copy path" in Content tab (vafada)
- FEATURE: Don't overwrite config file when it has no write permission (Chocobo1)
- FEATURE: Allow banning IP range (KagurazakaNyaa)
- FEATURE: Enhance filename validation (cocopaw)
- FEATURE: Allow monochrome tray icon to follow color mode (glassez)
- FEATURE: Add "Queued tracker announces" session metric (Chocobo1)
- FEATURE: Improve "Deletion confirmation" dialog (glassez)
- FEATURE: Add scroll bars to Statistics dialog (Chocobo1)
- FEATURE: Decide system tray icon color based on Windows color scheme (glassez)
- FEATURE: Create a group for status bar related settings (Chocobo1)
- FEATURE: Add 'request latency' metric to Statistics dialog (Chocobo1)
[117 lines not shown]
libtorrent-rasterbar: updated to 2.1.2
2.1.2
add missing python binding for filenames class
fix edge case in filename deduplication
fix web seed coalesced requests for v2 torrents
fix pre-allocation after enabling files with pread disk I/O
fix race between stop torrent and hasher threads in pread_storage
prevent pread disk I/O from overwriting files when renaming
fix file priority updates being lost when issued in quick succession
deprecate internal functions of file_storage
optimize loading torrents
fix mis-attribution of tracker source when loading a torrent file
fix race between async_hash() and force_recheck()
nmap ndiff zenmap: updated to 7.992
Nmap 7.992 [2026-10-15]
o Upgraded included libraries:
- Source: libpcap 1.10.7, pcre2 10.49, lua 5.4.9, libdnet 1.18.2
- Binary installers: OpenSSL 3.5.9, Python 3.14.8
o [Windows] Upgraded the included version of Npcap from 1.88 to 1.89, resolving
one crash and upgrading to libpcap 1.10.7. See https://npcap.com/changelog
o [Security][NSE] Karan Bamal of SentinelOne reported the following issues with
NSE scripts and libraries, which have all been fixed:
- afp.lua used a hardcoded DH private exponent, so that credentials passed
via command line could be decrypted from network traffic. The DHCAST128 UAM
is known to be cryptographically broken, and has been replaced in this
release with DHX2.
- Redirect to unverified URL in anyconnect.lua and upnp.lua
- Unbounded memory consumption in rpc.lua, drda.lua, eigrp.lua,
[155 lines not shown]
