resterm: Update to 1.7.0
Editor diagnostics
Diagnostic settings
Variable and expression errors
Unicode text
Response split shortcuts
Other improvements
mail/postfix: update to 3.11.7
3.11.7 (2026-09-08)
This release addresses medium-impact problems that need to be fixed
as some enable remote DOS or SMTP smugggling.
SMTP smuggling:
* Bug (introduced: Postfix 3.9, date: 20240106) SMTP smuggling
was still possible with smtpd_proxy_filter (disabled by default)
when the after-filter SMTP server used the default policy
settings "smtpd_forbid_bare_newline_exclusions = $mynetworks"
and "smtpd_forbid_bare_newline = normalize". Reported by OpenAI
Security. Fix by Wietse.
As suggested by OpenAI Security, eliminate stray CR characters
from the smtpd_proxy_filter input stream. The before-proxy-filter
SMTP server already eliminated stray LF.
[106 lines not shown]
www/typo3-14: update to 13.4.35
13.4.35 (2026-09-08)
This version is a security release and contains important security fixes -
read the corresponding security advisories here:
* TYPO3-CORE-SA-2026-022 / CVE-2026-77132: Information Disclosure via
Backend Localization Wizard
* TYPO3-CORE-SA-2026-023 / CVE-2026-85400: Missing Authorization in lowlevel
commands
www/typo3-13: update to 13.4.35
13.4.35 (2026-08-09)
This version is a security release and contains an important security fix -
read the corresponding security advisory here:
* TYPO3-CORE-SA-2026-022 / CVE-2026-77132: Information Disclosure via
Backend Localization Wizard
py-pdf: updated to 6.18.0
6.18.0, 2026-09-07
Security (SEC)
- Limit allowed length of indirect object tokens
Deprecations (DEP)
- Rework configuration value handling
New Features (ENH)
- Draw borders and backgrounds for appearance streams and annotations
py-pygraphviz: updated to 2.0.1
pygraphviz 2.0.1
Bug Fixes
- Fix graph-level attribute masking node/edge default (gh-563)
- BUG: Use "nop2" instead of "neato -n2" for rendering with pre-computed positions
pygraphviz 2.0
Enhancements
- Add aarch64 wheels for linux to cibuildwheel
- ENH: Export version info from wrapped graphviz
Bug Fixes
- More precise allocation for string copy in SWIG glue
Documentation
[6 lines not shown]
chromium: update to 152.0.7977.82
* 152.0.7977.82
This update includes 12 security fixes. Please see the Chrome Security Page for more information.
[$1,000][542403045] High CVE-2026-85046: Type confusion in V8. Reported by Salvatore Gulizia (nickname: Serotav) on 2026-08-04
[N/A][502304489] High CVE-2026-85052: Out of bounds read in CrashReporting. Reported by Google on 2026-04-13
[N/A][533502257] High CVE-2026-85043: Incomplete cleanup in Network. Reported by Google on 2026-07-10
[TBD][540357382] High CVE-2026-85048: Use after free in Compositing. Reported by Ngoc Hieu on 2026-07-29
[TBD][547819997] High CVE-2026-85045: Race condition in V8. Reported by Brendan Dolan-Gavitt, XBOW on 2026-08-17
[N/A][549350408] High CVE-2026-85050: Out of bounds write in WebGL. Reported by Google on 2026-08-20
[TBD][552689418] High CVE-2026-85053: Improper resource exposure in CacheStorage. Reported by Salvatore Gulizia (Serotav) on 2026-08-26
[N/A][553119925] High CVE-2026-85042: Use after free in DevTools. Reported by Google on 2026-08-26
[N/A][553345874] High CVE-2026-85049: Use after free in Skia. Reported by Google on 2026-08-27
[N/A][553449113] High CVE-2026-85051: Type confusion in Compositing. Reported by Google on 2026-08-27
[N/A][513790581] Medium CVE-2026-85047: Improper input validation in Transactions Platform. Reported by Google on 2026-05-16
[N/A][517482830] Medium CVE-2026-85044: Use of released resource in Mobile. Reported by Google on 2026-05-28
Google is aware that an exploit for CVE-2026-85046 exists in the wild.
py-meson_python: updated to 0.21.0
0.21.0
- Add support for the stable ABI for free-threaded interpreters (``abi3t``).
- Add support for the stable ABI extension modules' platform-specific filename
suffixes introduced in Python 3.15.
- Allow specifying ``editable-verbose`` in ``pyproject.toml``.
- Improve the default behavior of editable installs by capturing and reporting
build errors when rebuilding.
- Use ``.start`` files (PEP 829) instead of ``.pth`` files to implement editable
wheels for Python 3.15 and later.
py-eth-rlp: updated to 3.0.0
eth-rlp v3.0.0-beta.1 (2025-12-17)
Breaking Changes
- Drop support for Python 3.8 and 3.9
Features
- Add support for pyrlp v5 and Python 3.14
py-rlp: updated to 5.0.0
pyrlp v5.0.0-beta.1 (2025-12-12)
Breaking Changes
- Drop support for Python 3.8 and 3.9
Features
- Add support for Python 3.14. Note the Rust backend only works for Python 3.10-3.12
