libevent: update to 2.1.13.
Fix pkglint while here.
Changes in version 2.1.13-stable (01 July 2026)
This release contains several security fixes, affecting users of the
following modules: evbuffer, bufferevent, evtag, evrpc, evdns, evhttp.
If you have a program that uses one of those modules,
or if you distribute libevent, you should upgrade.
Additionally, this release backports some small modernizations to
the libevent codebase, to aid in compiling with the compilers
released over the last few years.
Security Fixes (evtag, evrpc):
- Fix an out-of-bounds read in decode_tag_internal.
(Found by @Brubbish. GHSA-fj29-64w6-73h6)
- Fix an integer overflow in evtag_unmarshal_header.
[33 lines not shown]
powerdns: Update to version 5.1.3
5.1.3
Released: 30th of June 2026
This is release 5.1.3 of the Authoritative Server.
It contains one new double feature and a few bug fixes.
New Features
Implement SOA-EDIT spreading + RRSIG expiry extension setting.
Bug Fixes
REST API: escaping issue with generic record syntax
pdnsutil: non-interactive zone edit
set version in meson.build in autoconf make dist path
declare enable-lua-record-updates unconditionally
meson: fix missing symbols for backend dylibs
py-asyncssh: updated to 2.24.0
2.24.0 (27 Jun 2026)
* Added support for creating and validating SSHSIG signatures, as well
as OpenSSH "allowed signers" files.
* Added support for ML-KEM key exchange from the PyCA cryptography
package when it is available. This avoids the need to have the
liboqs library installed to use ML-KEM. However, liboqs is still
required to support SNTRUP kex exchange.
* Fixed an issue with handling of SSH maximum packet size when opening
a new SSH channel, aborting with a protocol error if a peer attempts
to set this size to 0. Thanks go to GitHub user afldl for reporting
this issue and providing analysis and reproduction code.
* Fixed an issue with include directives in OpenSSH config files.
Thanks go to GitHub users sethholmes and tazle for reporting this
issue and providing analysis and a proposed fix.
mk/tools/defaults.mk: Document that TOOL bash must be >= 4.0
macOS ships bash 3 (despite bash4 being released in 2009), and pkgsrc
had a few accomodations for packages that needed bash where bash 3 did
not work. pkgsrc no longer uses macOS system bash as a tool, as such
workarounds being in packages is not reasonable.
Requiring system bash >= 5 to allow use as TOOL would seem reasonable,
as bash 5.0 was released in 2019. However, SmartOS uses bash 4, and
years of bulk builds have turned up no problems from bash 4 as a tool.
Therefore, there is no reason to exclude 4, as the point of setting
minimums is to limit human effort and secondarily reduce needless
machine resource use.
While this commit only adds a comment, it provides a basis to
- remove any workarounds for bash 3 as a tool
- disable TOOLS_PLATFORM.bash settings on platforms where bash is < 4
- add a workaround to a package if it needs TOOL bash but is not ok
with bash 4
[2 lines not shown]
