openldap: updated to 2.7.2
OpenLDAP 2.7.2 Release (2026/10/21)
Added slapd support for comments with ACLS
Added slapd-config option to throttle when qtime exceeds threshold
Added slapo-nssov option to forward updates
Fixed libldap with deeply nested URL filters
Fixed slapd GnuTLS client-cert verification handling
Fixed slapo-accesslog handling of per-op info state
Fixed slapo-sssvlv control parsing
Contrib
Fixed slappw-sha2 pointer aliasing
Fixed denyop rejection handling
Minor Cleanup
samba4: updated to 4.25.1
Changes since 4.25.0
* BUG 16276: Access control bypass via vfs_ceph_rgw case-insensitive open
(CVE-2026-109411)
* BUG 16274: CTDB: Cannot find device "<iface>@<link>": need to extract real
interface names
* BUG 16200: generate_unique_u64() may not protect against veto_value
* BUG 16261: Rename with ReplaceIfExists to a target differing only in case
creates a duplicate instead of replacing (regression in
bb130f32)
* BUG 16263: Samba 4.25.0 fails to build on macOS
* BUG 16258: Python smbconf transaction_start() lacks a talloc stack frame
with CTDB
* BUG 16265: Linux i686 build fails on dynamic_lookup
* BUG 16276: Access control bypass via vfs_ceph_rgw case-insensitive open
(CVE-2026-109411)
* BUG 16287: vfs_acl_xattr crashes on zero-sized flistxattr queries
[7 lines not shown]
py-wcwidth: updated to 0.9.4
0.9.4 *2026-10-24*
* **Bugfix** Flag emojis were split by grapheme breaks when following control characters, like
newline or tab
* **Improved** performance of most general functions by +64%
py-multidict: updated to 7.2.1
7.2.1
Bug fixes
- Fixed a regression in 7.2.0 where a subclass of
:class:`~multidict.MultiDictProxy` or :class:`~multidict.CIMultiDictProxy`
that converted its argument in its own ``__init__()`` raised
:exc:`TypeError` before that ``__init__()`` ran; such a subclass got an
empty multidict until its ``__init__()`` set the proxied one
7.2.0
7.2.0 drops Python 3.10, fixes a crash in a proxy built without
``__init__()`` and a :exc:`MemoryError` from a huge ``__length_hint__()``,
and is otherwise a performance release for the C extension: lookups,
adds, updates and deletes each needed a few percent fewer instructions.
py-objgraph: updated to 3.7.0
3.7.0 (2026-10-16)
- Fix :func:`get_leaking_objects` with an ``objects`` argument to not ignore
references from other sources. Closes `issue 82
<https://github.com/mgedmin/objgraph/issues/82>`_.
Also fix ``get_leaking_objects([])`` causing an UnboundLocalError.
- Add support for Python 3.14 and 3.15.
- Drop support for Python 3.7, 3.8, and 3.9.
sccache: updated to 0.19.0
sccache 0.19.0 is mostly a correctness and robustness release: multi-arch caching no longer
risks stale universal objects, remote storage errors are no longer hidden as cache misses, the
multi-level cache tolerates unavailable optional levels, and distributed compilation got a long
list of fixes.
Update devel/ocaml-ppxlib to version 0.33.0.
0.33.0 (2024-07-22)
-------------------
- Fix a bug where `Code_path.main_module_name` would not properly remove
extensions from the filename and therefore return an invalid module name.
(#512, @NathanReb)
- Add `-unused-type-warnings` flag to the driver to allow users to disable
only the generation of warning 34 silencing structure items when using
`[@@deriving ...]` on type declarations. (#511, @mbarbin, @NathanReb)
- Make `-unused-code-warnings` flag to the driver also controls the generation
of warning 34 silencing structure items when using `[@@deriving ...]` on type
declarations. (#510, @mbarbin, @NathanReb)
- Driver: Add `-unused-code-warnings=force` command-line flag argument. (#490, @mbarbin)
[171 lines not shown]
Update misc/dose3 to version 7.0.0.
dose3 (7.0.0) UNRELEASED; urgency=low
* Move all applications, dose3.debian, dose3.doseparse, dose3.npm, dose3.opam2, dose3.opencsw, dose3.pef, as well as the Criteria, Criteria_lexer, Criteria_parser, Criteria_types, Format822, Format822_lexer, Format822_parser and Input modules from dose3.common to a new dose3-extra package
-- Kate <kit.ty.kate at disroot.org> Wed 21 Jul 2021 17:50:00 BST
dose3 (6.1) UNRELEASED; urgency=low
* reintroduce pod2man for manpages instead of pandoc
* bump dune version to 2.7
-- Pietro Abate <pietro.abate at nomadic-labs.com> Tue 09 Feb 2021 09:28:43 AM CET
dose3 (6.0.2) UNRELEASED; urgency=low
* make compile with OCaml >= 4.03
* Remove grep-dctrl and add new debGrep tool
* ensure the same result on 32 and 64 bits archs
* publish docs on https://irill.gitlab.io/dose3
[24 lines not shown]
Update devel/ocamlgraph to version 2.2.0.
This update removes lablgtk option because version 2.2.0 split
it into two opam packages: ocamlgraph and ocamlgraph_gtk.
2.2.0 CHANGES:
[Topological]: Fix topological stable sort (#149, Maxime Buyse)
[Path]: new module [Bfs01] to implement 0-1 BFS
[Classic] new functions [kneser] and [petersen] to build Kneser's
graphs and the Petersen graph
[Oper] fixed transitive reduction (#145, reported by sim642)
and tests for transitive reduction!
new example depend2dot to turn make-like dependencies
into a DOT graph, with transitive reduction
[Graphviz]: added PosPinned to type NeatoAttributes.vertex
[Oper]: improved efficiency of intersect
(#136, reported by Ion Chirica)
[Path.Check]: improved efficiency with a better use of the cache
[34 lines not shown]
devel/nss: Update to 3.132
Changelog:
3.132:
Changes:
Bug 2084101 - Remove eMudhra emSign Root CA - G3 from NSS.
Bug 2083709 - Remove eMudhra emSign Root CA - C1 and emSign ECC
Root CA - C3 from NSS.
Bug 2056777 - fix build failures.
Bug 2056777 - secasn1d: propagate end-of-contents flag to
enclosing construct.
Bug 2056777 - additional secasn1d tests for end of contents handling.
Bug 2056777 - Changing the end_of_content for BER encoding.
Bug 2064148 - run the FIPS-mode SSL tests in CI.
Bug 2064148 - run fips.sh in CI.
Bug 2064148 - run gtests in FIPS mode.
Bug 2082675 - do not force-import an empty symmetric key.
Bug 2082671 - allow unwrapping an EC private key without a public point.
Bug 2064426 - DTLS1.3 must not use EndOfEarlyData (per RFC 9147
[53 lines not shown]
Fix building misc/tmux on macOS
Fixes configure failing with:
configure: macOS calloc(3) appears not to correctly
configure: zero allocations in some circumstances;
configure: to avoid this, configuring with
configure: --enable-jemalloc is recommended. To build
configure: without anyway, use --disable-jemalloc
Personally, I'm a bit skeptical of that claim and think this is not
calloc misbehaving, but memory corruption.
Add devel/ocaml-ppx_deriving_yojson version 3.9.1.
Deriving Yojson is a ppx_deriving plugin that generates JSON
serializers and deserializes that use the Yojson library from
an OCaml type definition.
