mail/rspamd: update to 4.1.4
pkgsrc change: remove a pkglint warning of cfgfiles.mk.
4.1.4 (2026-07-29)
Incompatible changes
* Build: rspamd now links a single shared jemalloc instance per process and
refuses a static-only jemalloc — duplicated allocators caused segfaults
at startup
Features
* WebUI: read-only users can now access the Selectors tab and the Errors
history
Bug fixes
[21 lines not shown]
net/samba4: update to 4.24.5
pkgsrc change:
* remove pkglint warnings of patches/patch-lib_util_util__crypt.c
==============================
Release Notes for Samba 4.24.5
July 28, 2026
==============================
This is a security release in order to address the following defects:
o CVE-2026-6949: TSIG packet with name compression can crash DNS
Incorrect size calculations when a TSIG record contains
compressed names can lead to a large out-of-bounds write
[72 lines not shown]
www/ruby-rails80: update to 8.0.5.1
Ruby on Rails 8.0.5.1 (2026-07-29)
Active Storage
* A possible arbitrary file read and remote code execution in Active Storage
variant processing (CVE-2026-66066)
www/ruby-rails72: update to 7.2.3.2
Ruby on Rails 7.2.3.2 (2026-07-29)
Active Storage
* A possible arbitrary file read and remote code execution in Active Storage
variant processing (CVE-2026-66066)
Don't forget to advance within the segment in _bus_dmamap_load_raw.
This went unnoticed, because the function is rarely used. While it is
wired in PowerPC DMA routines, no PowerPC specific drivers actually
use it. It only appears in a few MI drivers.
With small _dm_segcnt, load just failed with EFBIG, with large value
all segments pointed to the same page, which resulted in corrupting
the transfer.
security/zoneminder: Update to 1.38.3
Upstream NEWS, less bugfixes and minor improvements:
ZoneMinder 1.38.x Release Notes
TL;DR - Key Highlights
- Role-Based Access Control - Enterprise-grade permission system with user roles
- Modern Streaming - WebRTC, Go2RTC, RTSP2Web support with hardware acceleration
- Monitor Function Redesign - Granular control with separate Capturing, Analysing, and Recording settings
- Enhanced Protocols - ONVIF Events, MQTT, Amcrest API integration
-Event Tagging - Flexible labeling and organization system
- Server Monitoring - Real-time CPU, memory, and performance metrics
- Geolocation - Geographic tracking for events and servers
- Hardware Encoding - GPU acceleration for video encoding
Overview
ZoneMinder 1.38.x represents a major evolution from version 1.36.x,
[232 lines not shown]
qt6-qtbase: Put Qt6Drm* cmake files behind PLIST.wayland.
I am not 100% sure this is the correct variable, but it matches
libdrm-egl-server.so and the files are found under the wayland/ source
directory, so it's probably correct. Fixes non-wayland installs.
xmlto: Add libpaper dependency.
Goes looking for paperconf and embeds a path to it if found, so supply it
ourselves to ensure consistency. Bump PKGREVISION.
sbcl: update to 2.6.7
* new contrib module: SB-MANUAL contains the SBCL manual in
docstrings of section definitions, which tie together the
docstrings of normal Lisp definitions. The manual can thus be
explored interactively in the usual way (e.g. with Slime's M-.),
and it is browsable with the MGL-PAX library (out of tree). Also,
https://fixnum.com/ (similarly unrelated to the SBCL project)
provides alternative renderings of the SBCL manual as heavily
linked PDF and HTML documents as well as Markdown and plain text.
* new feature: DOCUMENTATION supports DOC-TYPE DECLARATION.
* platform support:
** the SB-SIMD contrib now supports ARM64
** AVX512 instructions are now supported on X86-64
** additional support for SIMD instructions on ARM64 and X86-64
** fix miscompilation of SAP-REF-N on ARM64
** implement INTEGER-LENGTH on primitive types without a loop on
MIPS and LoongArch.
* bug fix: READing with *READ-SUPPRESS* T no longer emits warnings
[26 lines not shown]
groff: Enable new compatibility wrappers option.
Adam's update also broke groff on illumos by dropping a patch required to avoid
the non-GNU system macros. Upstream now provides a new compatibility wrappers
argument that has a "manual" option which will install the wrappers with "-os"
suffixes, rather than doing the previous renaming dance.
This helps to simplify the install a lot. The groff-native an.tmac, m.tmac,
etc files can now be specified directly in the PLIST, and any -os.tmac wrapper
files installed to site-tmac will be picked up by the existing PLIST-local.
While here add TEST_TARGET, I guess they haven't been ran for recent updates.
Update to 1.46
Upstream changes:
1.46 2026-07-08T08:50:14
- Update Software::License from CPAN.
- Re-generate the LICENSE file.
1.45 2026-07-07T10:28:00
- Replace LICENCE file with output of the software-license program which ships
with the module App::Software::License. The specific command I ran is (all on 1 line):
software-license --type license --holder "Luis E. Muñoz" --license Perl_5
--year 1998 > LICENSE
1.44 2026-06-29
- Replace the file LICENSE-GPL-3 with the file LICENSE
containing what is recommended at
https://www.gnu.org/licenses/old-licenses/gpl-2.0.en.html
- Patch the source code reference to refer to this LICENSE file.
1.43 2026-05-23T08:14:00
- Accept pull request from Paul Howarth to replace use of the cryptographically
weak rand() function with the much stronger Crypt::URandom::urandom().
[5 lines not shown]
