BSD Commit Log Search

   update to rawtherapee-5.13

   update p5-Crypt-SaltedHash to 0.12
   CVE-2026-47372 CVE-2026-47373

   update to got 0.128

   - switch from imsg_get(), removed in OpenBSD-current, to imsgbuf_get()
   - fix tp_urlescape() escaping in template tool for gotwebd
   - fix off-by-one in pack index verification: check up to fanout_table[0xff]
   - fix ignore pattern matching when a file path is given to 'got status'
   - plug several memory leaks reachable via 'got histedit' and other commands
   - fix bogus "bad object" errors from 'got merge -a' when merging a tag
   - fix segfault in error handling path of gotsys-apply-conf
   - fix bogus "no such file or directory" errors seen during histedit

   update p5-Mail-AuthenticationResults to 2.20260216

   Unbreak libcxx22 build and tweak Makefile

   Maintainer timeout, ccache feedback by sthen@

   lang/rust: update to 1.98.1

   use getexecpath() (from kirill@)

   update p5-User-Identity to 3.00
   no functional change
   version 4.00 is incompatible with our p5-Mail-Box 2.118

   do not pick up ccache (USE_CCACHE keeps working); OK rsadowski

   update p5-LWP-MediaTypes to 6.05
   no functional change

   Update kicad to 10.0.6

   Update to gnupg-2.5.22

   Changes: https://dev.gnupg.org/T8320.html

   SECURITY update to openvpn-2.7.7

   https://github.com/OpenVPN/openvpn/blob/v2.7.7/Changes.rst
   Likely relevant for us:
   reliability layer: Avoid unbounded reliable TLS timeout (CVE-2026-84732)
   reliability layer: Ignore acks for packets that cannot be outstanding (CVE-2026-84732)

   SECURITY update to openvpn-2.7.7

   https://github.com/OpenVPN/openvpn/blob/v2.7.7/Changes.rst
   Likely relevant for us:
   reliability layer: Avoid unbounded reliable TLS timeout (CVE-2026-84732)
   reliability layer: Ignore acks for packets that cannot be outstanding (CVE-2026-84732)

   update p5-Locale-Codes to 3.91

   update p5-Cpanel-JSON-XS to 4.44

   www/mozilla-firefox: MFC update to 155.0.1.

   see https://www.firefox.com/en-US/firefox/155.0.1/releasenotes/

   www/mozilla-firefox: update to 155.0.1.

   see https://www.firefox.com/en-US/firefox/155.0.1/releasenotes/

   update p5-HTML-FormHandler to 0.410001
   CVE-2026-19872 CVE-2022-4993

   do not pick up ccache (USE_CCACHE keeps working); OK landry

   devel/llvm/22: backport RISC-V and MIPS fixes

   The bit for riscv64 apparently fixes devel/highway and is this:
   https://github.com/llvm/llvm-project/commit/fd6d7a608909dc4ecea57e0155042d16f7b4e61a

   The bit for mips64 apparently fixes MariaDB and GnuAstro:
   https://github.com/llvm/llvm-project/commit/a97f512d71574c0b9adc9bc6216909387499e0e8

   From Brad Smith

   OK: robert@, kettenis@

   update p5-Type-Tiny to 2.010001

   Update clang-tools-extra to 22.1.8

   jujutsu: add patch to fix test failure (test only, no package change)

   update p5-URI to 5.37

   Update to emacs-31.1

   https://www.gnu.org/software/emacs/news/NEWS.31.1

   The most prominent change is probably the warnings spewed about
   lexical-binding. To safely get rid of them you may add a cookie to your
   .el files that explicitely disables lexical binding (dynamic binding has
   been the default for years). You may also enable lexical binding which
   allegedly has advantages (more efficient, less error prone) after
   auditing your elisp code.

   Tested by kirill@ namn@ izzy Meyer gkoehler@ matthieu@
   ok kirill@ matthieu@

   update to 152.0.7977.82

   update to 1.8.1

   Update to jujutsu 0.45.1

   https://github.com/jj-vcs/jj/releases/tag/v0.45.1

   update to 3.10

   Add a "x11/oxygen-icons" comment