libclc: added version 21.1.8
libclc is an open source implementation of the library requirements of
the OpenCL C programming language, as specified by the OpenCL 1.1
Specification. The following sections of the specification impose
library requirements:
6.1: Supported Data Types
6.2.3: Explicit Conversions
6.2.4.2: Reinterpreting Types Using as_type() and as_typen()
6.9: Preprocessor Directives and Macros
6.11: Built-in Functions
9.3: Double Precision Floating-Point
9.4: 64-bit Atomics
9.5: Writing to 3D image memory objects
9.6: Half Precision Floating-Point
libclc is intended to be used with the Clang compiler's OpenCL frontend.
[4 lines not shown]
py-django: updated to 6.1.1
6.1.1
Bugfixes
Fixed a crash in Django 5.2 when combining distinct(*fields) with order_by() and values() and using two lookup paths resolving to the same column
Fixed a regression in Django 6.1 where the deprecation of double-dot variable lookups incorrectly applied to string and translated template literals containing two consecutive dots, such as {{ "a..b" }}
Fixed a regression in Django 6.1 where ModelAdmin.list_display entries that traverse multiple relations using __ could crash or display incorrect values
Fixed a bug in Django 6.1 where the fields.E323 system check did not detect mixed on_delete variants for auto-created intermediate models for ManyToManyFields
Fixed a regression in Django 6.1 where custom querysets used with Prefetch for forward foreign key or reverse one-to-one relationships were not routed using the parent queryset’s database
Fixed a regression in Django 6.1 where HTML-safe strings, such as those created with mark_safe(), used as form media assets were treated as asset paths rather than being rendered verbatim
Fixed a regression in Django 6.1 that caused AlterField operations that changed only the Python-level on_delete option of ForeignKey or OneToOneField fields to perform unnecessary schema changes
[10 lines not shown]
py-sqlparse: updated to 0.6.0
0.6.0 (Aug 13, 2026)
Notable Changes
* Drop support for Python 3.8 and 3.9. Python 3.10+ is now required.
* IMPORTANT: Fixes a potential denial of service attack (DOS) in the lexer,
which consumed CPU quadratically on statements containing many unclosed
dollar-quoted literals or multiline comments (CVE-2026-59893). See the
security advisory for details:
https://github.com/andialbrecht/sqlparse/security/advisories/GHSA-prg7-hcfm-mfcr
The vulnerability was discovered by EQSTLab, min8282 and 7thpark.
Thanks for reporting!
* IMPORTANT: Fixes a potential denial of service attack (DOS) when grouping
deeply nested or very wide statements. Building a token group re-read the
whole group on every step, so a small statement could keep a worker busy
for a long time (CVE-2026-54284, pr848 by alhudz and tonghuaroot).
* IMPORTANT: Fixes a potential denial of service attack (DOS) in
[40 lines not shown]
curl: update to 8.22.0.
This release includes the following changes:
o gssapi: add support for Apple GSS Framework [72]
o hardening: add API guards [64]
o RFC 9421 HTTP Message Signatures support [108]
o spnego: block NTLM fallback in SPNEGO negotiation [151]
o TLS: drop support for TLS-SRP [71]
o vquic: add option to use Apple fast UDP [137]
This release includes the following bugfixes:
o altsvc: continue after unknown parameters [198]
o asyn-thrdd: retry link-local ipv6 if missing scope id [118]
o autotools: minor fixes and improvements [33]
o build: always use local `inet_pton()`/`inet_ntop()` implementations [56]
o build: assume POSIX `select()` is available [166]
o build: clear `Require.private` for static-only builds in `libcurl.pc` [188]
[296 lines not shown]
net/unfs3: update to 0.11.0
From Bartosz Kuzma in PR pkg/60498
Changes since 0.9.22:
unsf3 0.11.0:
- fixes to make sure unfs3 works on macOS and Windows again
- 32-bit mode can now be enabled at any time, for compatibility with very old NFS clients
- starting unfsd now gives a reliable error code if it fails to start
- fix incorrect file mode when doing exclusive create
- fix to correctly update the time on symlinks, not what they point to
- Flex' libfl is no longer needed
unsf3 0.10.0
- switched to libtirpc as a base requirement
- contrib scripts now require Python 3 instead of Python 2
- fix stale handle when moving files or directories
[8 lines not shown]
www/freenginx-devel: update from 1.31.3 to 1.31.4
Sponsored by: tipi.work
<ChangeLog>
*) Bugfix: the "index" directive used old values of non-cacheable
variables.
*) Bugfix: variables with side effects might cause incorrect results
during variable substitution and "no buffer space in script copy"
alerts.
*) Bugfix: a segmentation fault might occur in a worker process when
using regular expression captures with the
"proxy_cache_background_update" directive or the
ngx_http_slice_module.
*) Bugfix: in the ngx_http_perl_module; the bug had appeared in 1.31.3.
[13 lines not shown]
www/freenginx-devel: update njs 1.0.0 -> 1.0.1
Bump PKGREVISION.
Sponsored by: tipi.work
<ChangeLog>
nginx modules:
*) Security: fixed an access control bypass in js_access when an
asynchronous request body continuation threw an exception or
produced an unhandled rejection. Previously, nginx could continue
processing the request as though the js_access check had succeeded.
Thanks to Ta Duc Thien.
*) Security: fixed a worker process crash when reading
Response.statusText after an upstream server returned a status
line with an empty reason phrase.
[46 lines not shown]
www/freenginx: update njs 1.0.0 -> 1.0.1
Bump PKGREVISION.
Sponsored by: tipi.work
<ChangeLog>
nginx modules:
*) Security: fixed an access control bypass in js_access when an
asynchronous request body continuation threw an exception or
produced an unhandled rejection. Previously, nginx could continue
processing the request as though the js_access check had succeeded.
Thanks to Ta Duc Thien.
*) Security: fixed a worker process crash when reading
Response.statusText after an upstream server returned a status
line with an empty reason phrase.
[46 lines not shown]
snac: update to 2.95. Changes:
## 2.95
Fixed a bug in the notification page that made snac hang forever while
trying to read abnormally big files.
Improved support for text-only web browsers: it's now possible to
configure a set of web browser user-agent strings that will receive
simpler HTML in the private timeline web UI. Basically, it consists in
avoiding `details` / `summary` HTML tags as much as possible.
Added some fixes to media proxy code.
Fixed EmojiReact code to allow any emoticon defined in `emojis.json`,
not only those with colon-wrapped identifiers.
Fixed a bug in notification filtering (paging was sometimes incorrect).
[181 lines not shown]
