BSD Commit Log Search

misc/py-bitsandbytes: update 0.47.0 → 0.50.0

Reported by:    portscout

misc/netron: update 9.1.7 → 9.1.9

Reported by:    portscout

www/wabt: Install libwabt-fuzz.so when FUZZ_TOOLS is ON

PR:     297036

devel/fatal: update 2026.07.13.00 → 2026.07.20.00

www/proxygen: update 2026.07.13.00 → 2026.07.20.00

net/fb303: update 2026.07.13.00 → 2026.07.20.00

security/trufflehog: update 3.95.9 → 3.96.0

Reported by:    portscout

net/mvfst: update 2026.07.13.00 → 2026.07.20.00

devel/fbthrift: update 2026.07.13.00 → 2026.07.20.00

security/fizz: update 2026.07.13.00 → 2026.07.20.00

misc/grok-build: update 0.2.111 → 0.2.112

misc/claude-code: update 2.1.219 → 2.1.220

misc/github-copilot-cli: update 1.0.71 → 1.0.75

net/wangle: update 2026.07.13.00 → 2026.07.20.00

devel/folly: update 2026.07.13.00 → 2026.07.20.00

misc/antigravity-cli: update 1.1.6 → 1.1.7

[clang][NFC]Remove unused variable (#211983)

The patch resolves the following warning.
```bash
clang/lib/StaticAnalyzer/Checkers/RetainCountChecker/RetainCountDiagnostics.cpp:504:16: warning: variable ‘i’ set but not used [-Wunused-but-set-variable=]
  504 |       unsigned i = 0;
      |                ^
```

A count variable was set and incremented inside of a for loop but never
actually used inside of the loop or anywhere else in its scope.

[AArch64] Add a OPERAND_IMM_UINT1 operand type (#211986)

remove private

Created using spr 1.3.8-wip

devel/R-cran-caTools: Update to 1.18.4

Reported by:    portscout

rpcinfo(8): Fix stack buffer overflow in rpcbdump()

The function previously used unbounded sprintf() and strcat() to format
the info into a fixed 256-byte stack buffer.  A malicious or compromised
rpcbind endpoint that returns enough distinct version numbers for a
single program (roughly 24 maximum-width decimal values plus separators)
can overflow this buffer.

CVE: CVE-2026-16461
Openwall: CVE-2026-16277 & CVE-2026-16461: buffer overflows in rpcinfo
        (https://www.openwall.com/lists/oss-security/2026/07/23/8)

rpcinfo(8): Fix stack buffer overflow in rpcbaddrlist()

rpcinfo's rpcbaddrlist() formats two server-controlled, unbounded XDR
strings into a fixed 128-byte stack buffer with sprintf(). A malicious
or on-path rpcbind server overflows it when a user runs:
$ rpcinfo -l <host> <prognum> <versnum>

Obtained-from: https://git.linux-nfs.org/?p=steved/rpcbind.git;a=commitdiff;h=bb9bb7286a4c345442946dc2ce3c9e7f67e96d4d
CVE: CVE-2026-16277
Openwall: CVE-2026-16277 & CVE-2026-16461: buffer overflows in rpcinfo
        (https://www.openwall.com/lists/oss-security/2026/07/23/8)

devel/R-cran-diffobj: Update to 3.8

Changelog: https://cran.r-project.org/web/packages/diffobj/index.html

security/bitwarden-cli: Update to 2026.7.0

Changelog: https://github.com/bitwarden/clients/releases/tag/cli-v2026.7.0

Reported by:    GitHub (watch releases)

misc/py-crewai-tools: update 1.15.4 → 1.15.6

misc/py-crewai-cli: update 1.15.4 → 1.15.6

misc/py-crewai-core: update 1.15.4 → 1.15.6

misc/py-crewai: update 1.15.4 → 1.15.6

databases/{,py-}duckdb: update 1.5.4 → 1.5.5

devel/gitoxide: update 0.55.0 → 0.56.0