p5-Email-Sender: update to 2.602.
Security fix release.
2.602 2026-09-21 11:09:22-04:00 America/New_York
- SECURITY: the Sendmail transport built a shell command line on Win32,
so an envelope address containing shell metacharacters -- which can
come from the To, Cc, or From header of a message sent with
Email::Sender::Simple -- could execute arbitrary commands. On Win32,
envelope addresses are now checked against a conservative pattern, and
anything else is now rejected with a permanent failure.
This is CVE-2026-84344.
unbound: update to 1.26.1
This release consolidates security fixes for issues reported over
a period of time. There are fixes for CVE-2026-77860, CVE-2026-77955,
CVE-2026-78227, CVE-2026-80225, CVE-2026-81634, CVE-2026-81642,
CVE-2026-82717, CVE-2026-82720 and CVE-2026-85501.
Bug Fixes
- Fix CVE-2026-81642, Heap buffer overflow and possible Remote Code
Execution when digesting DNSKEY. Thanks to Yuqi Qiu and Xiang Li
from Nankai University, AOSP Lab for the report.
- Fix CVE-2026-81634, Possible heap buffer overflow during DNSSEC
canonicalization. Thanks to Vlatko Kosturjak with Marlink Cyber,
for the report.
- Fix CVE-2026-82717, CNAME synthesis could lead to heap corruption.
Thanks to Ben Morris from Anthropic for the report.
- Fix CVE-2026-77955, Possible ZONEMD verification bypass window.
Thanks to Yuqi Qiu and Xiang Li from Nankai University, AOSP Lab,
[20 lines not shown]
sameboy: update to 1.0.3.
Fixes build on -current.
Version 1.0.3
New/Improved Features
Added support for more controllers in the iOS frontend, including singular Joy-Cons
Pressing buttons while in a locked rewind state now exits rewind mode in the iOS frontend
The iOS frontend now handles save conflicts with a dialog, making syncing saves across different machines and emulators easier
An examine/x command can now use the /s modifier to change its output style to RGBDS-compatible assembly
An examine/x command can now use $ in its modifier to use hexadecimal count values
It is now possible to adjust the maximum rumble strength
It is now possible to modify and save a running ROM file from the Memory Viewer in the Cocoa frontend
Controller buttons can now be assigned to one of 4 hotkey commands in the iOS frontend
Periodic saves were added to the iOS frontend
A new screenshot hotkey was added to the SDL frontend
Controller UI hiding in the iOS frontend can now optionally disable the centering of the game screen
[468 lines not shown]
seamonkey: apply a patch to make build progress
Still doesn't build:
ld: cannot find -lsmime: No such file or directory
ld: cannot find -lnss: No such file or directory
ld: cannot find -lnssutil: No such file or directory
frr: avoid conflict between elf.h and libelf.h
still builds on -current, I hope it fixes the -11 build.
Fix (whitespace) pkglint while here.
Bump PKGREVISION.
firefox52: fix a type problem
Still doesn't build:
ld: warning: ../../../firefox-52.9.0esr/toolkit/library/StaticXULComponents.ld contains output sections; did you forget -T?
ld: cannot find -lcrmf: No such file or directory
ld: cannot find -lsmime: No such file or directory
ld: cannot find -lnss: No such file or directory
ld: cannot find -lnssutil: No such file or directory
databases/mongodb4: Fix type error objected to by gcc12 (NetBSD 11)
Resolves building under NetBSD 11.
Patch from Paul Ripke, who is running it with unifi.
Unifi starts for me with on NetBSD 11 (with no previous db).
