Update to 4.02
Upstream changes:
version 4.02: Fri 10 Apr 11:03:23 CEST 2026
Improvements:
- Mail::Box synopsis reorg.
- remove version of introduction indicators '[3*]' because we are
not backwards compatible with 3 anyway.
version 4.01: Sat 13 Dec 12:13:49 CET 2025
Fixes:
- optional modules -> recommends.
Improvements:
- main page texts.
version 4.00: Thu 11 Dec 14:03:32 CET 2025
Changes:
- use Mail::Box 4 exception model: use Log::Report
- remove SpamAssassin support; not used and out-dated.
version 3.012:
Changes:
[12 lines not shown]
Update to 4.05
Upstream changes:
version 4.05: Fri 10 Apr 11:00:52 CEST 2026
Fixes:
- parse X-MLServer [Edoardo Geraci]
- $msg->string must end with a newline [Andy Beverley]
- fold fields with newline [Edoardo Geraci]
Improvements:
- Mail::Message->new(message_id) replaces messageId: parameters should
not use camel-casing. Old attribute now deprecated.
- Mail::Message add clean attributes for fieldType, headType, bodyType,
and isTrusted.
- remove version of introduction indicators '[3*]', because version 4 is
not backwards compatible anyway.
version 4.04: Wed 4 Feb 15:52:45 CET 2026
Fixes:
- date field parsing regression
GitHub issue #28 [Andy Beverley]
[54 lines not shown]
Update sysutils/intel-microcode-netbsd to 20260812
# Release Notes
## microcode-20260812]
### Purpose
- Removed MTL/06-aa-04/c0 due to functional issues observed when loading the MCU in some platforms.
# Release Notes
## microcode-20260811]
### Purpose
- Security updates for INTEL-SA-01379
- Security updates for INTEL-SA-01404
- Security updates for INTEL-SA-01423
- Security updates for INTEL-SA-01428
- Security updates for INTEL-SA-01435
[53 lines not shown]
Update to 2.20260216
Upstream changes:
2.20260216 2026-02-16 14:47:11+11:00 Australia/Melbourne
- Added some helper methods which can be used to add
commonly used children to an object.
* $object->add_entry($key, $value);
* $object->add_sub_entry($key, $value);
* $object->add_comment($value);
each returns the new object being added which can then be
manipulated/added to as required.
nss: update to 3.127.
Changes in NSS 3.127
- Bug 2060720 - Round ECH ClientHelloInner padding up to a multiple of 32.
- Bug 2063071 - make selfserv listen on IPv6 wildcard on dual-stack hosts.
- Bug 2059176 - EC_DerivePublicKey() failure is not propagated in sftk_mkPrivKey().
- Bug 2052210 - Generate additional test message for Thunderbird (HTML with remote image).
- Bug 1869493 - Heap-buffer overflow in AES Keywrap.
- Bug 2054609 - remove cipher suite order exception from bug 946147.
- Bug 2061107 - restore pkcs12.h for source compatibility.
- Bug 2056291 - remove support for pre-v1.0 PKCS#12.
- Bug 2054719 - fix content type tag for CMS AuthEnvelopedData plaintext.
- Bug 2060118 - remove DH_GenParam support.
- Bug 2053831 - clang format.
- Bug 2054714 - avoid leaking stale ECH outer extensions across HRR.
- Bug 2053831 - Drop CKF_VERIFY flag from CKM_HKDF_DATA derivation in ECH GREASE.
- Bug 2053831 - Adjust PK11_Derive and TLS 1.3 derivation templates for CKM_HKDF_DATA and CKO_DATA compliance.
- Bug 2053831 - Use CKF_HKDF_SALT_DATA in tls13_HkdfExtract for CKO_DATA keys per PKCS#11 v3.2.
[7 lines not shown]
newport: ensure a valid ri_stride is provided to rasops_init()
The x resolution is calculated by timings programmed into VC2, rather
than some kind of hard coded width/height from the framebuffer.
Newport always supports up to 1280x1024 regardless of what your monitor
resolution is.
However for some monitor detection timings, the resulting geometry
is not ENTIRELY correct for rasops to work with. So just round it up
to a multiple of four so a newport console will always show up regardless
of said monitor timing.
Submitted by Imre Kaloz <kaloz at dune.hu> .
Fixes PR port-sgimips/60585 .
knot: Update to 3.5.7
Knot DNS 3.5.7 (2026-08-18)
Improvements:
knotd: new debug logging for DDNS prerequisite errors
knotd: support for SO_BINDTODEVICE for remotes/via #977 (closed) (Thanks to Tore Anderson)
keymgr: 'keystore-bench' is slow with many threads and a high-latency HSM connection
keymgr: 'keystore-bench' command accepts a filter by signing algorithm
libs: upgraded embedded libngtcp2 to 1.25.0
doc: various improvements
Bugfixes:
knotd: server crash due to a missing check for malformed TCP packet in XDP mode (Thanks to Arthur Chan)
knotd: server crash when processing XFR or NOTIFY with non-IN records (Thanks to Qifan Zhang)
knotd: server crash when processing an outbound reply with non-IN records (Thanks to Qifan Zhang)
knotd: server crash on zone with NSEC3PARAM but without NSEC3 records (Thanks to Qifan Zhang)
knotd: incorrect ACL address range evaluation (Thanks to Qifan Zhang)
knotd: assertion failure if zone expire is set to maximum (Thanks to Qifan Zhang)
[12 lines not shown]
icinga2: updated to 2.16.5
2.16.5 (2026-08-18)
This release contains a bugfix for a regression in the `IcingaDB` feature that was introduced in v2.16.0 and some
security enhancements that fix a couple of minor vulnerabilities.
One vulnerability allowed an authenticated `ApiUser` with the `events/*` permission to obtain information about
objects through crafted filter expressions, without holding the relevant `objects/query/*` permission. The fix is to
correctly apply permissions to filter expressions on `/v1/events`.
The other vulnerability allowed an authenticated Icinga 2 node to use the ~1 GB message limit to possibly crash another
node through memory exhaustion. Depending on available memory, multiple compromised nodes may be required for
a successful attack since a node can only make one connection. The fix applies a 16 MiB limit to messages from nodes
lower in the hierarchy.
Security Enhancements
* Apply user permissions to filter expressions for `/v1/events` similarly to `/v1/objects`
[9 lines not shown]
resterm: Update to 1.2.0
New
Read OS environment variables through normal Resterm variables
Fixed
Runtime values written by scripts, captures, workflows, or @apply are now always treated as plain data. A runtime value beginning with env: will no longer unexpectedly read an OS environment variable.
Captured response data can no longer choose which OS environment variable a later request reads.
Missing environment references remain undefined and correctly shadow lower precedence values.
Empty references such as env: now produce a clear error in request and environment files.
Environment references now behave consistently in ordinary requests, workflows, generated OpenAPI documents, scripts, and templates.
Secret values created during compare runs are now carried with their individual result and redacted from compare history.
Secret collection and sensitive header masking are now consistent across results, explain output, normal history, compare history, and the UI.
croc: Update to 11.2.1
What's Changed
feat: remember best relay by @schollz in #1262
fix: public relay by @schollz in #1263
feat: implement multiple relays Fixes #1040 by @schollz in #1260
feat: web send+receive text Fixes #1256 by @schollz in #1257
fix: disableclipboard Fixes #1258 by @schollz in #1259
adguardhome: updated to 0.107.79
0.107.79
Security
Go version has been updated to prevent the possibility of exploiting the Go vulnerabilities fixed in 1.26.6.
AdGuard Home is now more resistant to resource exhaustion attacks when using DNS-over-QUIC.
This is GHSA-w6v6-f44j-3rj2. We thank @ATinyShoe for reporting this security issue.
Added
Bootstrap servers configuration now supports comments.
New property "language" in POST /control/install/check_config and POST /control/install/configure HTTP APIs.
The user is able to remove the static lease's hostname via the HTTP API.
[14 lines not shown]
grpc: updated to 1.83.0
1.83.0
Core
[Security] Default to Post-Quantum Cryptography in TLS key exchange.
[authz] don't pass RBAC policy by value when constructing authorization engine.
C#
Migrate CSharp Grpc.Tools to new DotNet Version.
[C#] Tools - Build: Fix protoc SIGSEGV on ARM64 by aligning max-page-size and migrating to manylinux_2_28.
Python
[Backport][v1.83.x][Python] grpc-status: Relax protobuf dependency lower bound to allow 6.x.
[Python] Add abort_with_status to the aio ServicerContext ABC.
[Python] Update lower bound for protobuf from 6.33.5 to 7.35.1.
[4 lines not shown]
