blosc: updated to 1.21.7
Changes from 1.21.6 to 1.21.7
Internal LZ4 codec updated to 1.10.0. Thanks to Dimitri Papadopoulos.
Security and buffer-validation hardening:
Fix out-of-bounds write in blosc_getitem for negative nitems
Reject split blocks not covering blocksize in blosc_d
Reject destsize too small for block pointers in blosc_compress_context
Thanks to Suraiya Sulthana.
Clamp destsize to avoid int32 overflow and move getenv("BLOSC_WARN")
out of the multi-threaded decompression path
Validate that typesize is greater than zero
Fix compilation with GCC 15 (C23) in internal Zlib
[6 lines not shown]
labwc: update to 0.20.3
* Added
- Add overrideInhibition option to <mousebind> @elviosak` [#3738]
- Add libinput options <clickfingerButtonMap> and <rotationAngle>@RyoheiHashimoto [#3719] [#3720]
- Add opt-in native libinput custom acceleration through <accelProfile>,
with separate <motionCurve>, <scrollCurve> and <fallbackCurve>
profiles. This allows precise low-speed scrolling while keeping faster
scrolling responsive. @kgagne [#3715]
- Add config option <snapping><overlay><placement> to optionally place the
snap-overlay above the dragged window @Blackseafisher1 [#3683]
* Fixed
- Fix coordinate overflow due to unsigned offsets with touch devices @johanmalm
[#3764] [#3765]
- Close menu on Super_L press @johanmalm [#3762]
- Fix issue where the lock-screen does not get input focus if a popup with grab
is active when the screen is locked. @elviosak [#3758]
[20 lines not shown]
fast_float: updated to 8.3.3
8.3.3
extend fuzzer to wide char types, integer parsing and all formats
Leave std::float32_t/std::float64_t unmodified on invalid input
Avoid right-shifting a negative value in detail::power()
Reject integer_times_pow10 arguments wider than 64 bits
Silence -Wc++20-extensions at the remaining [[unlikely]] sites
py-setuptools-gettext: updated to 0.1.20
0.1.20
Drop support for Python 3.9; add Python 3.15.
Modernize type annotations (builtin generics, PEP 604 unions).
Dependency updates for development tooling.
hashcat: updated to 8.0.0
8.0.0
Here's a quick summary:
11 major features and four new attack-modes
146 new hash-modes and 306 bug fixes
4,091 files changed, with 439,469 lines added and 229,313 deleted
Contributions from 63 people, 43 of them first-time contributors
mtools: update to 4.0.50.
Security fix release; this adds a new TODO:
- ${WRKSRC} is in all binaries - investigate and fix
v4_0_50
- Fix CVE-2026-118384
v4_0_49
- Correctly detect overlong file names, especially when
multibyte (UTF-8) strings are concerned
- Fix off-by-one error in 2 calls to native_to_wchar
- When changing disk label, ignore any plain file which would
match label
- Added missing newlines in error messages about disk geometry
- Do not print error message if getting geometry is simply not
supported by device type (such as for loop devices)
- If full geometry of a device is not available (such as for
loop devices), at least make use of the size
[39 lines not shown]
p5-HTTP-Parser-XS: update to 0.18.
0.18
- preserve the full URL-decoded PATH_INFO when it contains NUL bytes (Robert Rothenberg)
- fix documentation typos (Sergey Romanov)
