BSD Commit Log Search

   CVE-2025-13836 https://github.com/python/cpython/issues/119451

   CVE-2025-8194 https://github.com/python/cpython/issues/130577

   CVE-2025-6069 https://github.com/python/cpython/issues/135462

   CVE-2025-10158: Added patch for rsync

   www/hiawatha -- According to upstream, the three vulnerabilities have
   been fixed in v11.8

   rsync: Patch for CVE-2025-10158

   mc46: Fix implicit decl of malloc.

   xpipe: Fix implicit declaration of bzero(3).

   texi2roff: ANSIfy to build with newer gcc

   (which no longer allows K&R-style behaviour)

   swish-e: Fix implicit declaration of kill(2).

   tile: Fix implicit declaration of index(3).

   doc: Updated net/dhcpcd to 10.3.1

   ibniz: Fix implicit int.

   vorbisgain: Fix implicit function declarations.

   musepack: Fix implicit function decls.

   Update to dhcpcd-10.3.1 with the following changes:

   * BSD: don't send uninitialised memory using ps_root_indirectioctl
   * Fix fallback_time option by @ColinMcInnes
   * IPv4: Ignore DHCP state when building routes
   * options: Ensure ldop is not NULL dereferenced
   * route: Routes may not have an interface assinged
   * options: Ensure that an overly long bitflag string does not crash
   * options: Don't assume vsio options have an argument
   * common: Cast via uintptr_t rather than unsigned long in UNCONST
   * privsep: Ensure we recv for real after a successful recv MSG_PEEK
   * DHCP: Add parentheses to macro definitions
   * ipv6nd: empty IPV6RA_EXPIRE eloop queue when dropping

   ghostscript-agpl: Avoid warnings-as-errors.

   unzoo: Fix implicit function declarations.

   fvwm: Fix implicit declarations of alloca.

   bkedit: Fix implicit function declarations.

   sunclock: Fix implicit declaration of alloca

   py-ruff: comment out patched crates

   Updated sysutils/gam to 7.36.01

   gam: update to 7.36.01

   Changes since 7.34.02:

   7.36.01

   Fixed bug in gam info|print|show policies where the policyQuery/query field was not displayed.

   Added option noidmapping to gam info|print|show policies to suppress adding the policyQuery/groupEmail and policyQuery/orgUnitPath name fields that are mapped from the policyQuery/group and policyQuery/orgInit id fields.

   7.36.00

   Added options filtermultiattrtype and filtermultiattrcustom to gam info user and gam print users that support filtering display based on type or customType.

   7.35.03

   Updated gam <UserTypeEntity> print filelist|filecounts to handle options showsize and showsizeunits as independent options.

       showsize - Display a column Size with a byte count

    [135 lines not shown]

   doc: Updated lang/vala to 0.56.18nb3

   vala: merge upstream bugfix for graphviz 13

   Bump PKGREVISION.

   doc: Begin freeze for 2026Q1

   doc: Updated devel/fq to 0.17.0

   fq: update to 0.17.0.

   Changes

       fromjson now works more like jq and as one would expect for decode value. fromjson used to be implement as normal format decode which returns decode values which in turn when decoding from will decode the backing binary range. This result was expressions like "123" | fromjson | fromjson would return 123 instead of failing the second fromjson. #1268 Thanks @soberich for reporting
       iprint now support strings in addition to numbers #1246

       $ fq -cn '"fq" | iprint'
       {"bin":"0b1100110","dec":"102","hex":"0x66","oct":"0o146","str":"f"}
       {"bin":"0b1110001","dec":"113","hex":"0x71","oct":"0o161","str":"q"}

       In REPL mode input_filename used to always return the last filename. Now it returns null which is wrong but less confusing. The REPL mode needs quite a bit of refactor to fix this properly. #1251
       Update gojq fork. Changes from upstream:
           Fix gsub and sub when the replacement emits multiple values
           Improve performance of regexp functions by caching compiled regexps
           Implement splits/2 using match/2 for better jq compatibility
           Fix fmax, fmin, modf functions against NaN and infinity
           Fix join/1 to use add/0 implementation and handle null separator
           Fix significand function against subnormal numbers

    [8 lines not shown]

   colordiff: switch to new distfile

   Fixes PR 60080.