go: update to 1.27.2 and 1.26.9
These releases include 15 security fixes following the security policy:
- net/http: HTTP/2 server crash due to HPACK encoder race
HTTP/2 servers could end up crashing due to inadvertently modifying
its HPACK encoder concurrently. This happens because the server
modifies the HPACK encoder from two goroutines without
synchronization: one uses the encoder to encode a HEADERS frame as
part of a response sent to a client and the other modifies the
encoder's table size when handling a SETTINGS frame containing
SETTINGS_HEADER_TABLE_SIZE that a client sends. A malicious client can
repeatedly send a request while changing the header table size to
crash the server.
Fix this issue by not applying SETTINGS_HEADER_TABLE_SIZE immediately.
Instead, buffer any SETTINGS_HEADER_TABLE_SIZE received, and only
apply the new value prior to the next time the server writes a frame.
[237 lines not shown]
cad/geda: Remove as deprecated upstream and unused
Upstream is not only not maintaing this, but has said they aren't and
suggests switching to Ringdove. The distfile is from 2013. No one
spoke up in respone to a removal proposal on pkgsrc-users@.
x11/xscreensaver -- update to v4.17
Version History
===============================================================================
6.17 * Added missing localization strings (largely auto-translated).
* X11: Localizations are being installed again.
* macOS, iOS, Android: Now localized.
* macOS: Possible workarounds for longstanding Apple bugs where the
legacyScreenSaver process would start using 100% CPU and savers
would never run again.
* macOS 14.6 or later and iOS 17.6 or later are now required, since
Xcode 6 can no longer build executables that work on older OSes.
6.16 * New hacks, `floppy', `graphstat', `amigajuggler' and `polarnight'.
* iOS: image loading works even if the images in the photo roll need
to be downloaded from iCloud first. Images can display file names.
* New display modes in `hypertorus'.
* X11: Updates for systemd inhibitors on KDE Plasma 6.5.
anubis: improve the RC script
This change makes it clearer that the service is actually trying to
start. While there, it also avoids error messages when the RC script is
executed from a directory outside the reach of the anubis user.
Bumps PKGREVISION.
"commit it!" bsiegert@
Tested on NetBSD/amd64.
e2guardian: update to 5.5.9r
Changes since 5.5.6r:
version 5.5.9r
April 2025 to August 2025
License change and documentation tidy up.
Gitlab - Update expire artifacts
Gitlab - Reduce simultaneous compilation
Fix #845 correct auto-gen start/end cert dates to use UCT.
Fix #844 Authority Key Identifier now generated for server certificate
version 5.5.8r
December 2024 to April 2025
[24 lines not shown]
cargo-llvm-lines: added version 0.4.48
This tool measures the number and size of instantiations of each generic
function in a program, indicating which parts of your code offer the highest
leverage in improving compilation metrics.
Generic functions in Rust can be instantiated multiple times, so they can
disproportionately affect compile time, compiler memory usage, and the size of
compiled executables.
