NetBSD/pkgsrc h9jldlBdoc CHANGES-2026

   doc: Updated net/knot-resolver to 6.4.1
VersionDeltaFile
1.4679+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc SqpNVJynet/knot-resolver distinfo Makefile

   knot-resolver: Update to 6.4.1

   Knot Resolver 6.4.1 (2026-07-22)
   Security:
   DNS-over-QUIC (DoQ) had severe issues, allowing even RCE Many people reported (some of) these issues to us.
   DNSSEC correctness issues, acting mainly through the aggressive cache:
   * dealing with Labels field in RRSIGs being smaller than the signer’s
   * dealing with NSEC’s next-name pointing outside of the zone
   Special thanks to Qifan Zhang from Palo Alto Networks.

   Improvements:
   docker: upgrade to Debian 13 (!1856)
   update IANA’s certificate for root trust anchor bootstrapping (!1845)

   Bugfixes:
   /local-data/addresses*: make multiple addresses work (#808, #954)
   views: fix protocol-based matching for DoQ
VersionDeltaFile
1.2+4-4net/knot-resolver/distinfo
1.2+2-2net/knot-resolver/Makefile
+6-62 files

NetBSD/pkgsrc ZPHZ6WLdoc CHANGES-2026

   Note updates of
    * lang/gcc15 to 15.3.0nb1
    * lang/gcc15-libs to 15.3.0nb2
VersionDeltaFile
1.4678+3-1doc/CHANGES-2026
+3-11 files

NetBSD/pkgsrc 0u5lNjmlang/gcc15/patches patch-gcc_config_rs6000_netbsd64.h patch-gcc_config.gcc

   lang/gcc15: Add changes to make this build on NetBSD/macppc 11.0_RC6.

   This pulls over changes to config/rs6000/ and gcc/config.gcc from
   our in-tree gcc instance of gcc14, while preserving existing Homebrew-
   related changes to gcc/config.gcc.

   The most important fix is that on NetBSD/powerpc, -msecure-plt is enabled
   by default, so that resulting executables can be run with PAX_MPROTECT
   active.  Otherwise, we end up with executables with sections which have
   both "write" and "execute" turned on, which PAX_MPROTECT rejects.

   Fixes PR#60439.

   Bump PKGREVISION for both gcc15 and gcc15-libs, to adhere to rules in comments,
   even though this *should* be a single-arch build fix, since I had to merge
   the patch to gcc/config.gcc.
VersionDeltaFile
1.1+541-0lang/gcc15/patches/patch-gcc_config_rs6000_netbsd64.h
1.3+267-15lang/gcc15/patches/patch-gcc_config.gcc
1.1+111-0lang/gcc15/patches/patch-gcc_config_rs6000_netbsd.h
1.1+78-0lang/gcc15/patches/patch-gcc_config_rs6000_sysv4.h
1.1+38-0lang/gcc15/patches/patch-gcc_config_rs6000_t-netbsd64
1.1+28-0lang/gcc15/patches/patch-gcc_config_rs6000_t-netbsd
+1,063-156 files not shown
+1,148-2012 files

NetBSD/pkgsrc 2OdZCpzdoc CHANGES-2026

   doc: Updated multimedia/dav1d to 1.5.4
VersionDeltaFile
1.4677+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc XOqPU22multimedia/dav1d distinfo Makefile

   multimedia/dav1d: Update to 1.5.4

   Changelog:
   dav1d 1.5.4 'Sonic'

   1.5.4 is a minor release of dav1d, focused on optimizations and maintenance:

       Support for OS/2, including API exports and assembly
       Switch to external checkasm
       Add Armv9.3-A GCS (Guarded Control Stack) support
       AArch64: optimize ipred_v, ipred_h and ipred_smooth_* 8bpc functions, and reduce .text size
       ARM32: optimize prep_neon
       RISC-V: ipred_(dc, h, v, pal) optimizations for 8 and 16bpc, generate_grain_y for 8bpc, and optimizations (prep/put_8tap, 6-tap and copy paths)
       Portability improvements for non-POSIX systems (signal() fallback)
       Schedule tile tasks for all passes at once, improving threading
       Precompute the quantization matrix tables at build time
       Move loop-invariant computations out of hot loops
VersionDeltaFile
1.19+4-4multimedia/dav1d/distinfo
1.19+2-2multimedia/dav1d/Makefile
+6-62 files

NetBSD/pkgsrc KFDDcordoc CHANGES-2026

   doc: Updated print/LaTeXML to 0.8.8
VersionDeltaFile
1.4676+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc vfNil45print/LaTeXML distinfo Makefile

   print/LaTeXML: Update to 0.8.8

   Changelog:
   0.8.8 2024-02-29
         - This release addresses a large variety of usability, fidelity, robustness,
           portability and output-quality issues.
         - Improved CSS, html, accessibility affecting
           * framing, position & rotation, color
           * figure/subfigure grouping
         -  MathML (closer to MathML Core)
            * avoid gratuitous math mode (simple sub/superscripts); mathvariant
            * option to avoid InvisibleTimes, when not certain (--noinvisibletimes)
         - Improved emulation of TeX internals affecting
           registers, \chardef, accents, intarray, tracing
         - More TeX-like "scanning" of tokens affecting
           * expansion, input,
           * alignments (\halign,tabular)
         - improved block mode processing
           * affecting \parbox, {minipage}, \centering, \raggedright/left

    [186 lines not shown]
VersionDeltaFile
1.4+4-4print/LaTeXML/distinfo
1.16+4-3print/LaTeXML/Makefile
+8-72 files

NetBSD/pkgsrc x74fPGrinputmethod/ibus Makefile

   ibus: add kludge to fix bulk build on NetBSD/amd64 10.0

   See PR pkg/60476 for details.
   XXX: still fails on builds on hosts with xserver set using official gtk3
        binary package
VersionDeltaFile
1.124+5-2inputmethod/ibus/Makefile
+5-21 files

NetBSD/pkgsrc yosInwnsecurity Makefile

   security: Enable pdfrip
VersionDeltaFile
1.1019+2-1security/Makefile
+2-11 files

NetBSD/pkgsrc 8aLR7pIdoc CHANGES-2026

   doc: Added security/pdfrip version 3.0.0
VersionDeltaFile
1.4675+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc a7AQNEHsecurity/pdfrip distinfo cargo-depends.mk

   security/pdfrip: import pdfrip-3.0.0

   pdfrip is a fast multithreaded PDF password cracking utility written
   in Rust with support for wordlist-based dictionary attacks, date,
   number range, and alphanumeric brute-forcing, and a custom query
   builder for password formats.
VersionDeltaFile
1.1+488-0security/pdfrip/distinfo
1.1+163-0security/pdfrip/cargo-depends.mk
1.1+19-0security/pdfrip/Makefile
1.1+4-0security/pdfrip/DESCR
1.1+2-0security/pdfrip/PLIST
+676-05 files

NetBSD/pkgsrc zZosBH2doc CHANGES-2026

   doc: Updated mail/thunderbird-l10n to 152.0.1
VersionDeltaFile
1.4674+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc NwxpvgMmail/thunderbird-l10n distinfo Makefile

   mail/thunderbird-l10n: Update to 152.0.1

   * Sync with mail/thunderbird-152.0.1.
VersionDeltaFile
1.143+187-187mail/thunderbird-l10n/distinfo
1.149+2-2mail/thunderbird-l10n/Makefile
+189-1892 files

NetBSD/pkgsrc 6vV1wVcdoc CHANGES-2026

   doc: Updated mail/thunderbird to 152.0.1
VersionDeltaFile
1.4673+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc fczfFPfmail/thunderbird distinfo Makefile, mail/thunderbird/patches patch-python_sites_mach.txt patch-comm_build_moz.configure_gecko__source.configure

   mail/thunderbird: Update to 152.0.1

   Changelog:
   152.0.1:
   What's Fixed

   fixed
   Reply All button was missing for some EWS messages with multiple recipients

   fixed
   Security fixes

   Security fixes:
   Mozilla Foundation Security Advisory 2026-63
   #CVE-2026-57962: Denial-of-service via malicious LDAP address-book server
   #CVE-2026-57963: Chat UI manipulation by injection


   152.0:

    [182 lines not shown]
VersionDeltaFile
1.297+5-6mail/thunderbird/distinfo
1.2+4-4mail/thunderbird/patches/patch-python_sites_mach.txt
1.364+2-3mail/thunderbird/Makefile
1.2+1-1mail/thunderbird/patches/patch-comm_build_moz.configure_gecko__source.configure
+12-144 files

NetBSD/pkgsrc CvTrWCPaudio Makefile

   audio: Enable tenacity
VersionDeltaFile
1.730+2-1audio/Makefile
+2-11 files

NetBSD/pkgsrc GgTu37Sdoc CHANGES-2026

   doc: Added audio/tenacity version 1.3.5
VersionDeltaFile
1.4672+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc fD9LRDeaudio/tenacity PLIST Makefile, audio/tenacity/patches patch-src_effects_Compressor2.cpp

   audio/tenacity: import tenacity-1.3.5

   Tenacity is an easy-to-use multi-track audio editor and recorder
   for Windows, macOS, Linux and other operating systems. It is built
   on top of the widely popular Audacity and is being developed by a
   wide, diverse group of volunteers.
VersionDeltaFile
1.1+168-0audio/tenacity/PLIST
1.1+53-0audio/tenacity/Makefile
1.1+13-0audio/tenacity/patches/patch-src_effects_Compressor2.cpp
1.1+9-0audio/tenacity/distinfo
1.1+4-0audio/tenacity/DESCR
+247-05 files

NetBSD/pkgsrc TM6BSF5doc CHANGES-2026

   doc: Updated net/powerdns-recursor to 5.4.4
VersionDeltaFile
1.4671+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc XObHt0znet/powerdns-recursor distinfo Makefile

   powerdns-recursor: Update to 5.4.4

   5.4.4
   Released: 22nd of July 2026
   Bug Fixes
   Fix PowerDNS Security Advisory 2026-10 for PowerDNS Recursor: Multiple Issues
VersionDeltaFile
1.52+4-4net/powerdns-recursor/distinfo
1.65+2-2net/powerdns-recursor/Makefile
1.5+0-0net/powerdns-recursor/cargo-depends.mk
+6-63 files

NetBSD/pkgsrc AyzRabmdoc CHANGES-pkgsrc-2026Q2

   doc: update for 7190, 7191
VersionDeltaFile
1.1.2.7+8-1doc/CHANGES-pkgsrc-2026Q2
+8-11 files

NetBSD/pkgsrc q7fR4LLnet/libslirp distinfo Makefile

   Pullup ticket #7191 - requested by khorben
   net/libslirp: Security fix

   Revisions pulled up:
   - net/libslirp/Makefile                                         1.9
   - net/libslirp/distinfo                                         1.8

   ---
      Module Name:    pkgsrc
      Committed By:   khorben
      Date:           Thu Jun 25 04:14:43 UTC 2026

      Modified Files:
              pkgsrc/net/libslirp: Makefile distinfo

      Log Message:
      net/libslirp: update to version 4.9.3

      This is a security update for CVE-2026-9539: libslirp TCP URG OOB Read

    [81 lines not shown]
VersionDeltaFile
1.7.30.1+4-5net/libslirp/distinfo
1.8.6.1+3-4net/libslirp/Makefile
+7-92 files

NetBSD/pkgsrc vRSFMuMwww/firefox140 distinfo Makefile, www/firefox140-l10n distinfo Makefile

   Pullup ticket #7190 - requested by gutteridge
   www/firefox140-l10n: Security fix
   www/firefox140: Security fix

   Revisions pulled up:
   - www/firefox140-l10n/Makefile                                  1.14
   - www/firefox140-l10n/distinfo                                  1.14
   - www/firefox140/Makefile                                       1.21
   - www/firefox140/distinfo                                       1.19

   ---
      Module Name:    pkgsrc
      Committed By:   gutteridge
      Date:           Tue Jul 21 16:30:32 UTC 2026

      Modified Files:
              pkgsrc/www/firefox140: Makefile distinfo

      Log Message:

    [427 lines not shown]
VersionDeltaFile
1.13.2.1+307-307www/firefox140-l10n/distinfo
1.18.2.1+4-4www/firefox140/distinfo
1.13.2.1+2-2www/firefox140-l10n/Makefile
1.19.2.1+2-2www/firefox140/Makefile
+315-3154 files

NetBSD/pkgsrc g5EyXnHdoc CHANGES-2026

   doc: Updated net/knot to 3.5.6
VersionDeltaFile
1.4670+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc pAR8gCxnet/knot distinfo Makefile

   knot: Update to 3.5.6

   Release notes
   Knot DNS 3.5.6 (2026-07-20)

   Improvements:
   knotd: new log message when accepting a control client fails
   knotd: new log message when UDP or TCP worker initialization fails
   knotd: improved log message when loading an expired zone
   knotd: more verbose log messages for DDNS forwarding
   knotd: disabled 0-RTT when forwarding DDNS updates over QUIC
   utils: configuration detection considers an empty database directory as unused
   libknot: added support for EDE code 33 (Negative Trust Anchor) (Thanks to Babak Farrokhi)
   libs: upgraded embedded libngtcp2 to 1.24.0
   doc: various improvements

   Bugfixes:
   knotd: server crashes when evaluating an ACL rule with 'cert-hostname' set
   knotd: failed to start with 'listen-tls' and 'tcp-reuseport' enabled

    [7 lines not shown]
VersionDeltaFile
1.54+4-4net/knot/distinfo
1.100+2-2net/knot/Makefile
+6-62 files

NetBSD/pkgsrc SiQMdLhmk/fetch codeberg.mk bsd.fetch-vars.mk

   mk/fetch: Add codeberg.org project support
VersionDeltaFile
1.1+96-0mk/fetch/codeberg.mk
1.30+7-1mk/fetch/bsd.fetch-vars.mk
1.204+4-1mk/fetch/sites.mk
1.12+2-1mk/fetch/bsd.fetch.mk
+109-34 files

NetBSD/pkgsrc yfE1NHjdoc CHANGES-2026

   doc: Updated net/dnscontrol to 4.43.3
VersionDeltaFile
1.4669+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc Gt9SiMRnet/dnscontrol distinfo go-modules.mk

   dnscontrol: Update to 4.43.3

   v4.43.3
   No changes since the last release.

   v4.43.2
   No changes since the last release.

   Release v4.43.0 highlights:
   •    4 New Providers! The most new providers we've had in one release in a long time! Thanks and welcome to our newest maintainers! We look forward to great things!
   -    DYNU (#4364) thanks to @DustyRah!
   -    OpenWRT (#4166) thanks to @huskyistaken!
   -    GIGAHOST (#4394) thanks to @jochristian!
   -    SCALEWAY (#4462) thanks to @alessiopcc!
   •    AUTODNS now supports child domains. Thanks, @arnoschoon!
   •    ROUTE53 can now edit SOA records. Thanks, @istenrot!
   •    AXFRDDNS now supports communication over Unix domain sockets. Thanks, @tomfitzhenry!
   •    GANDI_V5 now supports HTTPS/SVCB, NAPTR, LOC, OPENPGPKEY record types. Thanks @francois2metz!
   •    "init" support added for AKAMAIEDGEDNS, AUTODNS, CLOUDNS, SeSEC, DNSSCCALE, DNSMADEEASY, FORTIGATE, JOKER, LINODE, MIKROTIK, and PORKBUN. If you haven't tried "dnscontrol init" yet, it's one of the coolest new features.
   •    The HETZNER provider has been removed, having been replaced by HETZNERV2, thanks to @das7pad!
VersionDeltaFile
1.4+289-280net/dnscontrol/distinfo
1.4+95-92net/dnscontrol/go-modules.mk
1.36+2-3net/dnscontrol/Makefile
+386-3753 files

NetBSD/pkgsrc ARvi7Kwdoc CHANGES-2026

   doc: Updated www/resterm to 0.47.3
VersionDeltaFile
1.4668+2-1doc/CHANGES-2026
+2-11 files