BSD Commit Log Search

   update to isc-bind-9.20.20

   update to isc-bind-9.20.20

   Drop portroach limitation, missed during the update to the 2.5 branch

   Update for Nextcloud to 32.0.6:

   https://nextcloud.com/changelog/#32-0-6

   OK landry@

   Update for Nextcloud to 31.0.14:

   https://nextcloud.com/changelog-unsupported/#latest31

   ok landry@

   Update for gnupg to 2.5.18

   a crafted CMS (S/MIME) EnvelopedData message
   carrying an oversized wrapped session key can
   cause a stack-based buffer overflow in gpg-agent
   during PKDECRYPT--kem=CMS handling

   https://dev.gnupg.org/T8044
   https://dev.gnupg.org/T8049

   OK jca@ (maintainer)

   update to dnsq-0.19.12, from Renaud Allard (maintainer)
   + small tweak to simplify things

   Add opentype-sanitizer.

   Initial revision

   Unbreak build by updating plist

   Spotted by naddy

   Add missing dependency on ksvg

   spotted by naddy

   Update to terraform-1.14.6.

   Update to adwaita-fonts-50.0.

   Update to amazon-ssm-agent-3.3.3883.0.

   Update to libphonenumber-9.0.25.

   Update to PostgreSQL 18.3

   Fixes:

   CVE-2026-2003: PostgreSQL oidvector discloses a few bytes of memory

   CVE-2026-2004: PostgreSQL intarray missing validation of type of input
   to selectivity estimator executes arbitrary code

   CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow executes
   arbitrary code

   CVE-2026-2006: PostgreSQL missing validation of multibyte character
   length executes arbitrary code

   CVE-2026-2007: PostgreSQL pg_trgm heap buffer overflow writes pattern
   onto server memory

   OK landry@

   update to py3-icalendar-searcher-1.0.5

   update to py3-virtualenv-21.0.0

   update to anubis-1.25.0

   update to libmaxminddb0.13.2 (no real change for us)

   Add hints regarding colors etc used by default in recent GDB releases

   so that we can just answer "check the readme" when asked about it. :)

   databases/postgresql: update -stable from 17.7 to 17.9

   fixes CVE-2026-2003, CVE-2026-2004, CVE-2026-2005 & CVE-2026-2006
   see https://www.postgresql.org/docs/release/17.8/
   and https://www.postgresql.org/docs/release/17.9/
   discussed with jeremy@ (MAINTAINER)

   Update mame to 0.286.

   geo/gpxsee: update to 15.11

   bugfix update to 5.516

   Add missing version bump to 6.6.1

   update to wireshark-4.4.14

   update to wireshark-4.4.14

   KDE Plasma 6.6.1, Bugfix Release for February

   https://kde.org/announcements/changelogs/plasma/6/6.6.0-6.6.1/

   Security update to vaultwarden-1.35.4

   This release contains security fixes:
   - GHSA-w9f8-m526-h7fh. This vulnerability would allow an attacker to
     access a cipher from a different user (fully encrypted) if they
     already know its internal UUID.
   - GHSA-h4hq-rgvh-wh27. This vulnerability allows an attacker with
     manager-level access within an organization to modify collections they
     can access, even if they do not have management permissions for them.
   - GHSA-r32r-j5jq-3w4m. This vulnerability allows an attacker with
     manager-level access within an organization to modify collections they
     are not assigned. These are private for now, pending CVE assignment.

   Changes: https://github.com/dani-garcia/vaultwarden/releases/tag/1.35.4

   OK kirill@